Function at 0x40ec00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x4c
push esi
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x2c], 0x17fc
mov eax, dword [0x75a404]
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x4c], 0x242f
mov dword [ebp - 0x30], 0
mov dword [ebp - 0xc], 0x7fc
mov ecx, dword [0x75a408]
mov dword [ebp - 4], ecx
mov dword [ebp - 0x24], 0
mov edx, dword [0x75a400]
mov dword [ebp - 0x14], edx
mov eax, dword [0x75a424]
mov dword [ebp - 0x1c], eax
mov ecx, dword [0x75a40c]
mov dword [ebp - 0x3c], ecx
mov dword [ebp - 0x18], 0x3da9
mov dword [ebp - 0x34], 0x4cb0
mov dword [ebp - 0x20], 0x1728
mov edx, dword [ebp - 0x28]
add edx, 0x10d4
sub edx, dword [ebp - 0x18]
add edx, dword [ebp - 0x3c]
add edx, dword [ebp - 0x34]
movzx eax, byte [ebp - 0x48]
add edx, eax
sub edx, dword [ebp - 0x3c]
mov ecx, dword [ebp - 0x34]
imul ecx, dword [ebp - 0x40]
or edx, ecx
mov eax, dword [ebp - 0x14]
add eax, 0xa82
or edx, eax
movzx ecx, word [ebp - 0x4c]
add ecx, dword [ebp - 0xc]
and ecx, 0x397
or edx, ecx
mov eax, dword [ebp - 4]
add eax, 0x3018
or edx, eax
mov word [ebp - 0x10], dx
cmp dword [ebp - 0x14], 0
jb 0x40ed56
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x20]
sub edx, dword [ebp - 0x10]
add edx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x4c]
sub eax, dword [ebp - 4]
and eax, 0
or edx, eax
imul ecx, dword [ebp - 0xc], 0x261e
add ecx, 0x3eee
or edx, ecx
movzx ecx, byte [ebp - 4]
add ecx, dword [ebp - 4]
mov eax, dword [ebp - 0x10]
shl eax, cl
or edx, eax
imul ecx, dword [ebp - 0xc], 0
mov eax, dword [ebp - 4]
sub eax, ecx
or edx, eax
mov dword [ebp - 0x3c], edx
mov ecx, dword [ebp - 0x2c]
cmp ecx, dword [ebp - 0x10]
je 0x40ed56
movzx edx, word [ebp - 0xc]
sub edx, dword [ebp - 0x28]
sub edx, dword [ebp - 8]
or edx, dword [ebp - 0x24]
movzx eax, byte [ebp - 0x20]
movzx ecx, byte [ebp - 0x2c]
add eax, ecx
movzx ecx, byte [ebp - 0x1c]
imul ecx, dword [ebp - 0x30]
imul ecx, dword [ebp - 0x18]
and eax, ecx
or edx, eax
mov eax, dword [ebp - 0x10]
sub eax, dword [ebp - 0x24]
or edx, eax
mov ecx, dword [ebp - 0x14]
add ecx, dword [ebp - 0x14]
sub ecx, dword [ebp - 0x24]
add ecx, dword [ebp - 0x20]
add ecx, dword [ebp - 0x18]
and ecx, 0
or edx, ecx
mov dword [ebp - 0x4c], edx
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x2c]
movzx eax, byte [ebp - 0x1c]
imul ecx, eax, 0x421b
sub edx, ecx
add edx, dword [ebp - 0x34]
or edx, dword [ebp - 0x38]
or edx, dword [ebp - 4]
mov eax, dword [ebp - 0x14]
sub eax, dword [ebp - 4]
or edx, eax
mov ecx, dword [ebp - 0x3c]
add ecx, 0x35d6
or edx, ecx
or edx, dword [ebp - 0x48]
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 4]
sub eax, dword [ebp - 0x38]
add eax, dword [ebp - 0x1c]
or edx, eax
mov dword [ebp - 0x20], edx
push str.sulit
push 0
push 0
call dword [sym.imp.KERNEL32.dll_OpenMutexW]
mov dword [ebp - 0x18], eax
call fcn.0040f080
mov ecx, dword [ebp - 0x3c]
add ecx, dword [ebp - 4]
add ecx, dword [ebp - 4]
add ecx, dword [ebp - 0x30]
sub ecx, dword [ebp - 0x48]
movzx edx, byte [ebp - 4]
add ecx, edx
mov eax, dword [ebp - 0x38]
shl eax, cl
mov ecx, dword [ebp - 0x3c]
add ecx, 0x2fd9
movzx edx, word [ebp - 0x28]
sub ecx, edx
add ecx, dword [ebp - 0x40]
and eax, ecx
movzx ecx, word [ebp - 0x44]
mov edx, dword [ebp - 0x30]
sub edx, ecx
sub edx, dword [ebp - 0x30]
sub edx, dword [ebp - 0x10]
sub edx, 0x266d
and eax, edx
or eax, dword [ebp - 8]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 4]
cmp eax, dword [ebp - 0x18]
jbe 0x40eeeb
mov ecx, dword [ebp - 0x2c]
cmp ecx, dword [ebp - 0x18]
jb 0x40eeeb
mov edx, dword [ebp - 0x28]
cmp edx, dword [ebp - 0x34]
jne 0x40ee5f
cmp dword [ebp - 8], 0
jne 0x40ee5f
mov eax, dword [ebp - 0x14]
or eax, dword [ebp - 4]
mov ecx, dword [ebp - 8]
add ecx, dword [ebp - 8]
or eax, ecx
movzx edx, word [ebp - 0x1c]
add edx, 0x7e9
movzx ecx, word [ebp - 0x34]
sub edx, ecx
movzx ecx, byte [ebp - 8]
add edx, ecx
sub edx, dword [ebp - 0xc]
or eax, edx
mov edx, dword [ebp - 8]
add edx, dword [ebp - 0x18]
or eax, edx
or eax, dword [ebp - 0x14]
movzx ecx, byte [ebp - 0xc]
or eax, ecx
mov dword [ebp - 0x10], eax
jmp 0x40eea7
mov edx, dword [ebp - 8]
sub edx, dword [ebp - 0x3c]
mov ecx, dword [ebp - 8]
shr edx, cl
mov eax, dword [ebp - 0x38]
add eax, dword [ebp - 0xc]
and edx, eax
movzx ecx, byte [ebp - 0x10]
mov eax, dword [ebp - 0x38]
imul eax, dword [ebp - 0x24]
add eax, dword [ebp - 4]
sub eax, dword [ebp - 0x30]
mov esi, dword [ebp - 0x48]
lea eax, [eax + esi - 0x48b0]
and ecx, eax
or edx, ecx
mov ecx, dword [ebp - 0x18]
imul ecx, dword [ebp - 0x18]
add ecx, dword [ebp - 0x20]
or edx, ecx
movzx eax, byte [ebp - 0x18]
or edx, eax
mov word [ebp - 0x40], dx
movzx ecx, byte [ebp - 0x40]
and ecx, dword [ebp - 0x38]
and ecx, dword [ebp - 0x14]
movzx edx, word [ebp - 0x44]
and edx, dword [ebp - 0x24]
or ecx, edx
mov eax, dword [ebp - 0x10]
add eax, dword [ebp - 4]
mov edx, dword [ebp - 8]
lea eax, [eax + edx + 0x127f]
sub eax, dword [ebp - 0x34]
add eax, dword [ebp - 8]
add eax, dword [ebp - 0x40]
mov edx, dword [ebp - 0x2c]
sub edx, dword [ebp - 0x40]
and eax, edx
or ecx, eax
movzx eax, byte [ebp - 0x28]
mov edx, dword [ebp - 0x28]
sub edx, eax
or ecx, edx
mov dword [ebp - 0x30], ecx
cmp dword [ebp - 0xc], 0x9a3
jne 0x40efae
mov eax, dword [ebp - 0x10]
cmp eax, dword [ebp - 0x28]
jbe 0x40ef09
movzx ecx, byte [ebp - 0x4c]
cmp dword [ebp - 0xc], ecx
je 0x40ef53
movzx edx, byte [ebp - 4]
imul edx, dword [ebp - 8]
add edx, dword [ebp - 0x1c]
movzx eax, word [ebp - 0x20]
imul eax, dword [ebp - 0x24]
sub edx, eax
mov ecx, dword [ebp - 0x38]
imul ecx, dword [ebp - 0x1c]
sub edx, ecx
imul eax, dword [ebp - 0x2c], 0x442e
sub edx, eax
mov ecx, dword [ebp - 0x44]
sub ecx, dword [ebp - 0x1c]
and ecx, dword [ebp - 0x24]
movzx eax, byte [ebp - 0x44]
add eax, dword [ebp - 0x28]
and ecx, eax
or edx, ecx
movzx ecx, byte [ebp - 4]
sub ecx, dword [ebp - 0x10]
or edx, ecx
or edx, dword [ebp - 0x48]
mov byte [ebp - 0x18], dl
mov edx, dword [ebp - 4]
cmp edx, dword [ebp - 0xc]
jne 0x40ef63
mov eax, dword [ebp - 0x10]
cmp eax, dword [ebp - 8]
jbe 0x40efae
mov ecx, dword [ebp - 0x2c]
or ecx, 0x2d05
mov edx, dword [ebp - 0x38]
add edx, dword [ebp - 0x10]
sub edx, dword [ebp - 0xc]
or ecx, edx
or ecx, 0x314f
movzx eax, byte [ebp - 8]
mov edx, 0x3f42
sub edx, eax
movzx eax, word [ebp - 0xc]
add edx, eax
sub edx, dword [ebp - 0x10]
imul eax, dword [ebp - 4], 0
add edx, eax
or ecx, edx
movzx edx, byte [ebp - 8]
add edx, dword [ebp - 0x30]
and edx, 0xd37
and edx, dword [ebp - 0x14]
or ecx, edx
mov dword [ebp - 0x24], ecx
mov eax, dword [ebp - 0x1c]
cmp eax, dword [ebp - 0xc]
jne 0x40f077
cmp dword [ebp - 0x38], 0x128e
jb 0x40f02f
mov dword [ebp - 0x14], 0xff7
jmp 0x40efd5
mov ecx, dword [ebp - 0x14]
add ecx, 1
mov dword [ebp - 0x14], ecx
cmp dword [ebp - 0x14], 0xff8
jae 0x40f02f
movzx edx, word [ebp - 0x24]
add edx, 0x43b7
sub edx, dword [ebp - 8]
add edx, dword [ebp - 4]
mov eax, dword [ebp - 0x20]
add eax, dword [ebp - 0x18]
imul ecx, dword [ebp - 0x44], 0x46f9
add eax, ecx
sub eax, dword [ebp - 0x40]
or edx, eax
movzx eax, word [ebp - 0x44]
mov ecx, 0x1787
sub ecx, eax
movzx eax, byte [ebp - 0x34]
mov esi, dword [ebp - 4]
lea eax, [eax + esi + 0x4483]
and ecx, eax
or edx, ecx
mov ecx, dword [ebp - 8]
add ecx, 0x3e8f
or edx, ecx
mov dword [ebp - 0x3c], edx
jmp 0x40efcc
movzx edx, byte [ebp - 0x2c]
cmp dword [ebp - 8], edx
ja 0x40f077
mov eax, dword [ebp - 4]
add eax, dword [ebp - 0x20]
movzx ecx, word [ebp - 0x30]
add eax, ecx
sub eax, dword [ebp - 0x4c]
and eax, dword [ebp - 8]
mov edx, dword [ebp - 0x28]
sub edx, dword [ebp - 0x2c]
mov ecx, dword [ebp - 8]
imul ecx, dword [ebp - 0x40]
lea edx, [edx + ecx + 0x2947]
and edx, dword [ebp - 4]
mov esi, dword [ebp - 0x44]
add esi, dword [ebp - 0x20]
imul ecx, dword [ebp - 0x30], 0
shl esi, cl
and edx, esi
xor edx, dword [ebp - 0xc]
or eax, edx
mov dword [ebp - 0x34], eax
pop esi
mov esp, ebp
pop ebp
ret