Function at 0x414f50
Capabilities:
Encrypt data using rc4 ksa

Disassembly:
push ebx
push ebp
mov ebp, dword [esp + 0xc]
push esi
push edi
mov edi, ecx
mov esi, ebp
mov ebx, 0x10000
mov eax, dword [edi + 0x42d4]
test al, 0x10
jne 0x415019
test al, 1
je 0x414f9b
mov eax, dword [esp + 0x20]
push eax
push str._010u
push ebp
call dword [sym.imp.USER32.dll_wsprintfA]
mov esi, eax
mov al, byte [edi + 0x42d4]
add esp, 0xc
add esi, ebp
test al, 4
je 0x415019
jmp 0x415015
test al, 8
je 0x414fe3
test ebx, eax
mov eax, dword [esp + 0x20]
je 0x414fc5
mov ecx, eax
and ecx, 0xffff
shr eax, 0x10
push ecx
push eax
push str._04x:_04x
push ebp
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
jmp 0x415007
mov edx, eax
and edx, 0xffff
shr eax, 0x10
push edx
push eax
push str._04X:_04X
push ebp
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
jmp 0x415007
test ebx, eax
je 0x414ff3
mov eax, dword [esp + 0x20]
push eax
push str._08x
jmp 0x414ffd
mov ecx, dword [esp + 0x20]
push ecx
push str._08X
push ebp
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
mov esi, eax
mov al, byte [edi + 0x42d4]
add esi, ebp
test al, 4
je 0x415019
mov byte [esi], 0x3a
inc esi
mov ecx, dword [edi + 0x438c]
xor eax, eax
test ecx, ecx
jle 0x415034
mov byte [esi], 0x20
mov ecx, dword [edi + 0x438c]
inc esi
inc eax
cmp eax, ecx
jl 0x415025
mov eax, dword [edi + 0x42d4]
mov ebp, dword [esp + 0x1c]
and eax, 0xe0
cmp eax, 0x80
ja case.0x415056.4
xor edx, edx
mov dl, byte [eax + 0x41525c]
jmp dword [edx*4 + 0x415248]
test ebp, ebp
jle case.0x415056.4
mov ecx, 1
mov eax, dword [esp + 0x18]
mov dl, byte [eax + ecx - 1]
mov eax, dword [edi + 0x42d4]
mov byte [esp + 0x20], dl
test ebx, eax
mov eax, dword [esp + 0x20]
je 0x41509d
and eax, 0xff
shl eax, 1
inc esi
mov dl, byte [eax + str.000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f202122232425262728292a2b2c2d2e2f303132333435363738393a3b3c3d3e3f404142434445464748494a4b4c4d4e4f505152535455565758595a5b5c5d5e5f606162636465666768696a6b6c6d6e6f707172737475767778797a7b7c7d7e7f808182838485868788898a8b8c8d8e8f909192939495969798999a9b9c9d9e9fa0a1a2a3a4a5a6a7a8a9aaabacadaeafb0b1b2b3b4b5b6b7b8b9babbbcbdbebfc0c1c2c3c4c5c6c7c8c9cacbcccdcecfd0d1d2d3d4d5d6d7d8d9dadbdcdddedfe0e1e2e3e4e5e6e7e8e9eaebecedeeeff0f1f2f3f4f5f6f7f8f9fafbfcfdfeff]
mov byte [esi - 1], dl
mov al, byte [eax + 0x480011]
jmp 0x4150b4
and eax, 0xff
shl eax, 1
inc esi
mov dl, byte [eax + str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
mov byte [esi - 1], dl
mov al, byte [eax + 0x47fe0d]
mov byte [esi], al
mov eax, ecx
cdq
idiv dword [edi + 0x43a4]
inc esi
test edx, edx
jne 0x4150c8
mov byte [esi], 0x20
inc esi
inc ecx
lea edx, [ecx - 1]
cmp edx, ebp
jl 0x41506a
jmp case.0x415056.4
xor ebx, ebx
test ebp, ebp
jle case.0x415056.4
mov eax, dword [esp + 0x18]
mov cl, byte [ebx + eax]
mov byte [esp + 0x20], cl
mov edx, dword [esp + 0x20]
and edx, 0xff
push edx
push str._03d
push esi
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
add esi, eax
inc ebx
cmp ebx, ebp
jl 0x4150df
jmp case.0x415056.4
xor ebx, ebx
test ebp, ebp
jle case.0x415056.4
mov eax, dword [esp + 0x18]
push 3
mov cl, byte [ebx + eax]
mov byte [esp + 0x24], cl
mov edx, dword [esp + 0x24]
and edx, 0xff
push edx
push esi
call fcn.004143e0
add esi, eax
add esp, 0xc
mov byte [esi], 0x20
inc esi
inc ebx
cmp ebx, ebp
jl 0x415113
jmp case.0x415056.4
xor ebx, ebx
test ebp, ebp
jle case.0x415056.4
mov eax, dword [esp + 0x18]
mov cl, byte [ebx + eax]
mov byte [esp + 0x20], cl
mov edx, dword [esp + 0x20]
and edx, 0xff
push edx
push 1
push esi
call fcn.004143a0
add esi, eax
add esp, 0xc
mov byte [esi], 0x20
inc esi
inc ebx
cmp ebx, ebp
jl 0x415147
mov eax, dword [edi + 0x4388]
dec esi
cmp ebp, eax
mov ecx, ebp
jge 0x4151a6
mov edx, dword [edi + 0x43a0]
xor eax, eax
test edx, edx
jle 0x41519b
mov byte [esi], 0x20
mov edx, dword [edi + 0x43a0]
inc esi
inc eax
cmp eax, edx
jl 0x41518c
mov eax, dword [edi + 0x4388]
inc ecx
cmp ecx, eax
jl 0x415180
mov ecx, dword [edi + 0x4390]
xor eax, eax
test ecx, ecx
jle 0x4151c1
mov byte [esi], 0x20
mov ecx, dword [edi + 0x4390]
inc esi
inc eax
cmp eax, ecx
jl 0x4151b2
xor ebx, ebx
test ebp, ebp
jle 0x415221
mov eax, dword [esp + 0x18]
mov cl, byte [ebx + eax]
mov eax, dword [edi + 0x42d4]
test ah, 0x10
mov byte [esp + 0x20], cl
jne 0x4151ec
cmp cl, 0x80
jb 0x4151ec
mov cl, byte [edi + 0x43a8]
mov byte [esp + 0x20], cl
test ah, 8
jne 0x415200
cmp cl, 0x20
jae 0x415200
mov cl, byte [edi + 0x43a8]
mov byte [esp + 0x20], cl
mov edx, dword [esp + 0x20]
and edx, 0xff
push edx
push 0x47f830
push esi
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
add esi, eax
inc ebx
cmp ebx, ebp
jl 0x4151c7
cmp ebp, dword [edi + 0x4388]
jge 0x415238
mov byte [esi], 0x20
mov eax, dword [edi + 0x4388]
inc esi
inc ebp
cmp ebp, eax
jl 0x415229
mov eax, dword [esp + 0x14]
mov byte [esi], 0
pop edi
pop esi
pop ebp
pop ebx
ret 0x10