Function at 0x41e85d
Capabilities:
Encrypt data using rc4 ksa

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x34
push ebx
mov ebx, ecx
test byte [ebp + 0x18], 2
mov al, byte [ebx + 0x3a67]
push esi
mov byte [ebp - 4], al
mov ax, word [ebx + 0x3a61]
mov word [ebp - 0x10], ax
mov al, byte [ebx + 0x3a68]
mov byte [ebp - 3], al
mov ax, word [ebx + 0x3a63]
push edi
mov di, word [ebx + 0x3a65]
mov word [ebp - 0xc], ax
mov al, byte [ebx + 0x3a69]
mov byte [ebp - 2], al
mov dword [ebp - 0x14], edi
je 0x41e91a
lea eax, [ebp - 5]
push 1
push eax
call fcn.004186a8
movzx esi, byte [ebp - 5]
mov cl, byte [ebp - 2]
mov eax, esi
shr eax, cl
movzx edi, di
and eax, edi
mov cl, byte [ebp - 3]
imul eax, eax, 0xff
cdq
idiv edi
movzx edi, al
mov eax, esi
or edi, 0x200
shr eax, cl
movzx ecx, word [ebp - 0xc]
and eax, ecx
imul eax, eax, 0xff
cdq
idiv ecx
mov cl, byte [ebp - 4]
shl edi, 8
movzx eax, al
or edi, eax
mov eax, esi
shr eax, cl
movzx ecx, word [ebp - 0x10]
and eax, ecx
imul eax, eax, 0xff
cdq
idiv ecx
shl edi, 8
movzx eax, al
or edi, eax
mov dword [0x47a610], edi
jmp 0x41e920
mov edi, dword [0x47a610]
mov eax, dword [ebp + 8]
mov ecx, dword [ebp + 0x10]
mov dword [ebp - 0x34], eax
add eax, ecx
mov ecx, dword [ebp + 0x14]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp + 0xc]
push edi
mov dword [ebp - 0x30], eax
add eax, ecx
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x34]
push eax
mov ecx, ebx
call fcn.00416091
test byte [ebp + 0x18], 4
je 0x41e9c0
lea eax, [ebp - 6]
push 1
push eax
mov ecx, ebx
call fcn.004186a8
movzx edi, byte [ebp - 6]
mov cl, byte [ebp - 2]
mov eax, edi
movzx esi, word [ebp - 0x14]
shr eax, cl
mov cl, byte [ebp - 3]
and eax, esi
imul eax, eax, 0xff
cdq
idiv esi
movzx esi, al
mov eax, edi
or esi, 0x200
shr eax, cl
movzx ecx, word [ebp - 0xc]
and eax, ecx
imul eax, eax, 0xff
cdq
idiv ecx
mov cl, byte [ebp - 4]
shl esi, 8
movzx eax, al
or esi, eax
mov eax, edi
shr eax, cl
movzx ecx, word [ebp - 0x10]
and eax, ecx
imul eax, eax, 0xff
cdq
idiv ecx
shl esi, 8
movzx eax, al
or esi, eax
mov dword [0x47a614], esi
test byte [ebp + 0x18], 8
je 0x41eb62
lea eax, [ebp - 1]
push 1
push eax
mov ecx, ebx
call fcn.004186a8
test byte [ebp + 0x18], 0x10
mov edi, dword [ebx + 0xbc]
movzx eax, byte [ebp - 1]
je 0x41eaf4
lea eax, [eax + eax*2]
mov ecx, ebx
push eax
push edi
call fcn.004186a8
and dword [ebp + 0x18], 0
cmp byte [ebp - 1], 0
jbe 0x41eb62
movzx eax, byte [ebp - 2]
mov dword [ebp - 0x18], eax
movzx eax, word [ebp - 0x14]
mov dword [ebp + 0x14], eax
movzx eax, byte [ebp - 3]
mov dword [ebp - 0x1c], eax
movzx eax, word [ebp - 0xc]
mov dword [ebp - 0x14], eax
movzx eax, byte [ebp - 4]
mov dword [ebp - 0xc], eax
movzx eax, word [ebp - 0x10]
mov dword [ebp - 0x10], eax
movzx eax, byte [edi]
mov ecx, dword [ebp - 0x18]
shr eax, cl
mov ecx, dword [ebp - 0x1c]
and eax, dword [ebp + 0x14]
imul eax, eax, 0xff
cdq
idiv dword [ebp + 0x14]
movzx esi, al
movzx eax, byte [edi]
shr eax, cl
mov ecx, dword [ebp - 0xc]
or esi, 0x200
shl esi, 8
and eax, dword [ebp - 0x14]
imul eax, eax, 0xff
cdq
idiv dword [ebp - 0x14]
movzx eax, al
or esi, eax
movzx eax, byte [edi]
shr eax, cl
shl esi, 8
and eax, dword [ebp - 0x10]
imul eax, eax, 0xff
cdq
idiv dword [ebp - 0x10]
movzx eax, al
or esi, eax
inc edi
mov dword [0x47a614], esi
push esi
movzx eax, byte [edi]
mov ecx, eax
and eax, 0xf
shr ecx, 4
inc edi
mov edx, eax
mov dword [ebp - 0x20], ecx
movzx eax, byte [edi]
mov ecx, eax
and eax, 0xf
shr ecx, 4
inc ecx
inc eax
mov dword [ebp + 0x10], eax
mov eax, dword [ebp + 0xc]
add edx, eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x24], edx
mov edx, dword [ebp - 0x20]
add eax, edx
inc edi
mov dword [ebp - 0x34], eax
add eax, ecx
mov ecx, dword [ebp + 0x10]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x30], eax
add eax, ecx
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x34]
push eax
mov ecx, ebx
call fcn.00416091
movzx eax, byte [ebp - 1]
inc dword [ebp + 0x18]
cmp dword [ebp + 0x18], eax
jl 0x41ea2f
jmp 0x41eb62
shl eax, 1
push eax
push edi
mov ecx, ebx
call fcn.004186a8
and dword [ebp + 0x18], 0
cmp byte [ebp - 1], 0
jbe 0x41eb62
movzx eax, byte [edi]
mov edx, eax
and eax, 0xf
shr edx, 4
inc edi
mov esi, eax
push dword [0x47a614]
movzx eax, byte [edi]
mov ecx, eax
and eax, 0xf
shr ecx, 4
inc ecx
inc eax
mov dword [ebp + 0x10], eax
mov eax, dword [ebp + 0xc]
add eax, esi
mov esi, dword [ebp + 8]
add edx, esi
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x34], edx
add edx, ecx
mov ecx, dword [ebp + 0x10]
inc edi
add eax, ecx
mov ecx, ebx
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x34]
push eax
mov dword [ebp - 0x2c], edx
call fcn.00416091
movzx eax, byte [ebp - 1]
inc dword [ebp + 0x18]
cmp dword [ebp + 0x18], eax
jl 0x41eb09
pop edi
pop esi
pop ebx
leave
ret 0x14