Function at 0x402f53
Capabilities:
Encrypt data using rc4 prga
Resolve function by parsing pe exports

Disassembly:
push ebp
push edi
push esi
push ebx
sub esp, 0x5c
mov eax, dword [0x41197c]
mov edx, dword [esp + 0x70]
lea ecx, [eax + 0x1ff]
shr ecx, 9
mov dword [esp + 0x24], ecx
add ecx, 2
cmp dword [esp + 0x74], ecx
mov dword [esp + 0x2c], ecx
jl 0x403228
mov dword [esp + 0x1c], str._r_nSYSLINUX_4.04
mov ecx, str._r_nSYSLINUX_4.04
jmp 0x402f93
add ecx, 4
cmp dword [ecx], 0x3eb202fe
jne 0x402f90
movzx esi, word [ecx + 0x16]
mov dword [esp + 0x1c], ecx
mov edi, dword [edx + 4]
mov ebx, esi
add ebx, str._r_nSYSLINUX_4.04
movzx ecx, word [ebx + 0xe]
mov dword [esp + 0x44], esi
mov esi, dword [edx]
cmp dword [esp + 0x7c], 0
mov dword [ecx + 0x410c3c], esi
movzx ecx, word [ebx + 0x10]
mov dword [ecx + 0x410c3c], edi
je 0x402fdc
movzx ecx, word [ebx + 0x12]
mov word [ecx + 0x410c3c], 0x18cd
shr eax, 2
mov edi, dword [esp + 0x1c]
mov dword [esp + 0x30], eax
mov eax, dword [esp + 0x2c]
mov word [edi + 0xa], 2
sub eax, 2
mov word [edi + 8], ax
mov eax, dword [esp + 0x30]
cmp dword [esp + 0x78], 0
mov dword [edi + 0xc], eax
je 0x40300c
mov word [edi + 0x14], 1
movzx ecx, word [ebx + 0xc]
cmp dword [esp + 0x2c], ecx
mov si, word [ebx + 0xa]
jle 0x403027
mov dword [esp + 4], str.Insufficient_extent_space__build_error__n
jmp 0x403182
imul ecx, ecx, 0xa
movzx esi, si
lea edi, [edx + 8]
add esi, str._r_nSYSLINUX_4.04
mov dword [esp + 0x40], edi
xor eax, eax
mov edi, esi
xor ebp, ebp
rep stosb byte es:[edi], al
xor edi, edi
mov dword [esp + 0x20], 0
mov dword [esp + 0x34], 0
mov eax, dword [esp + 0x24]
mov dword [esp + 0x28], 0x8000
mov dword [esp + 0x4c], ebx
dec eax
mov dword [esp + 0x48], eax
xor eax, eax
jmp 0x4030fb
mov ecx, dword [esp + 0x20]
test eax, eax
mov ecx, dword [edx + ecx*8 + 8]
mov dword [esp + 0x38], ecx
mov ecx, dword [esp + 0x20]
mov ecx, dword [edx + ecx*8 + 0xc]
mov dword [esp + 0x3c], ecx
je 0x4030d6
mov ecx, eax
xor ebx, ebx
add ecx, edi
adc ebx, ebp
cmp dword [esp + 0x3c], ebx
jne 0x4030c0
cmp dword [esp + 0x38], ecx
jne 0x4030c0
mov ecx, eax
shl ecx, 9
add ecx, dword [esp + 0x34]
xor ecx, dword [esp + 0x28]
and ecx, 0xffff0000
jne 0x4030c0
inc eax
mov dword [esp + 0x38], edi
mov dword [esp + 0x3c], ebp
jmp 0x4030e3
mov dword [esi], edi
mov edi, dword [esp + 0x28]
mov dword [esi + 4], ebp
mov word [esi + 8], ax
add esi, 0xa
mov dword [esp + 0x34], edi
jmp 0x4030de
mov eax, dword [esp + 0x28]
mov dword [esp + 0x34], eax
mov eax, 1
mov ecx, dword [esp + 0x38]
mov ebx, dword [esp + 0x3c]
add dword [esp + 0x28], 0x200
inc dword [esp + 0x20]
mov edi, ecx
mov ebp, ebx
mov ecx, dword [esp + 0x48]
cmp dword [esp + 0x20], ecx
jne 0x403070
test eax, eax
mov ebx, dword [esp + 0x4c]
je 0x40311a
mov dword [esi], edi
mov dword [esi + 4], ebp
mov word [esi + 8], ax
mov esi, dword [esp + 0x44]
mov edi, dword [esp + 0x2c]
cmp dword [esp + 0x80], 0
movzx eax, word [esi + str._r_nSYSLINUX_4.04]
mov esi, dword [esp + 0x40]
mov edx, dword [esi + edi*8 - 0x18]
mov ecx, dword [esi + edi*8 - 0x14]
mov edi, dword [esp + 0x24]
mov dword [eax + str._r_nSYSLINUX_4.04], edx
mov dword [eax + 0x409214], ecx
mov edx, dword [esi + edi*8]
mov ecx, dword [esi + edi*8 + 4]
mov dword [eax + 0x409218], edx
mov dword [eax + 0x40921c], ecx
je 0x4031b2
mov edi, dword [esp + 0x80]
xor eax, eax
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
movzx eax, word [ebx + 4]
not ecx
cmp eax, ecx
jge 0x40319e
mov dword [esp + 4], str.Subdirectory_path_too_long..._aborting_install__n
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x40
mov dword [esp], eax
call fcn.00402f30
mov dword [esp], 1
call sub.msvcrt.dll_exit
movzx eax, word [ebx + 2]
mov esi, dword [esp + 0x80]
add eax, str._r_nSYSLINUX_4.04
mov edi, eax
rep movsb byte es:[edi], byte [esi]
cmp dword [esp + 0x84], 0
je 0x4031f2
mov edi, dword [esp + 0x84]
xor eax, eax
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
movzx eax, word [ebx + 8]
not ecx
cmp eax, ecx
jge 0x4031de
mov dword [esp + 4], str.Subvol_name_too_long..._aborting_install__n
jmp 0x403182
movzx eax, word [ebx + 6]
mov esi, dword [esp + 0x84]
add eax, str._r_nSYSLINUX_4.04
mov edi, eax
rep movsb byte es:[edi], byte [esi]
mov edi, dword [esp + 0x1c]
xor eax, eax
mov edx, 0x3eb202fe
mov dword [edi + 0x10], 0
jmp 0x40320e
sub edx, dword [eax*4 + str._r_nSYSLINUX_4.04]
inc eax
cmp eax, dword [esp + 0x30]
jl 0x403206
mov eax, dword [esp + 0x1c]
mov dword [eax + 0x10], edx
mov edx, dword [esp + 0x30]
lea eax, [edx*4]
jmp 0x40322b
or eax, 0xffffffff
add esp, 0x5c
pop ebx
pop esi
pop edi
pop ebp
ret