Function at 0x40bb0f
Capabilities:
Encrypt data using rc4 prga

Disassembly:
adc al, byte [eax]
add byte [ebp + 0x7ee8f04d], cl
ja 0x4053b8
add byte [esi - 0x37], bl
ret
movzx eax, word [ebx + edi*2]
cmp eax, 0x20
je 0x40b54e
cmp eax, 9
je 0x40b54e
movzx eax, word [ebx + edi*2]
mov dword [ebp - 8], edi
test ax, ax
je 0x40b69b
mov esi, eax
mov word [ebp - 0xe], di
cmp esi, 0x30
jae 0x40b554
cmp esi, 0x2e
je 0x40b559
cmp esi, 0x41
jae 0x40b5b5
cmp esi, 0x61
jae 0x40b6d2
cmp esi, 0x5f
je 0x40b6db
mov eax, esi
cmp eax, 0x24
je case.0x40b528.64
cmp eax, 0x3d
je 0x40b717
sub eax, 0x1a
cmp eax, 0x44
ja case.0x40b528.27
movzx eax, byte [eax + 0x40ba40]
jmp dword [eax*4 + 0x40b9f4]
push 0x4f
lea ecx, [ebp - 0x18]
call fcn.0040bbfc
mov ecx, dword [ebp + 0x10]
lea eax, [ebp - 0x18]
push eax
call fcn.0040ba85
inc edi
mov dword [ebp - 8], edi
jmp 0x40b690
inc edi
jmp 0x40b4b0
cmp esi, 0x39
ja 0x40b4e1
mov edi, dword [ebp + 0x10]
mov eax, 0x40
mov ecx, dword [edi + 8]
mov dword [ebp + 0xc], eax
mov dword [ebp - 0xc], ecx
test ecx, ecx
je 0x40b57c
mov eax, dword [edi + 4]
mov eax, dword [eax + ecx*4 - 4]
movzx eax, word [eax + 8]
mov dword [ebp + 0xc], eax
push eax
lea eax, [ebp - 0x28]
push eax
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 8]
push eax
push ebx
call fcn.0040c413
cmp al, 1
jne 0x40b960
cmp word [ebp + 0xc], 0x4a
je 0x40b8fc
lea eax, [ebp - 0x18]
push eax
mov ecx, edi
call fcn.0040ba85
mov edi, dword [ebp - 8]
jmp 0x40b690
cmp esi, 0x5a
ja 0x40b4ef
jmp 0x40b6db
push dword [ebp + 0x10]
call fcn.0040becc
test eax, eax
js 0x40b9ed
cmp esi, 0x24
jne 0x40b8b4
fadd dword [edx]
add byte [eax], al
mov eax, 0x33
push eax
lea ecx, [ebp - 0x18]
call fcn.0040bbfc
inc edi
lea ecx, [ebp - 0x28]
mov dword [ebp - 8], edi
call fcn.0040bcce
movzx esi, word [ebx + edi*2]
cmp si, 0x5a
jbe 0x40b63f
cmp si, 0x61
jb 0x40b647
cmp si, 0x7a
ja 0x40b647
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ecx]
cmp eax, 1
jg 0x473909
mov eax, dword [ebp - 0x24]
inc eax
push eax
lea ecx, [ebp - 0x28]
call fcn.0040bb85
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x24]
inc eax
mov word [ecx + eax*2 - 2], si
xor edx, edx
mov dword [ebp - 0x24], eax
mov word [ecx + eax*2], dx
inc edi
jmp 0x40b5f6
cmp si, 0x41
jae 0x40b60c
jmp 0x40b600
cmp si, 0x30
jae 0x40b708
cmp si, 0x5f
je 0x40b60c
cmp dword [ebp - 0x24], 0
mov dword [ebp - 8], edi
je 0x40b9e4
lea ecx, [ebp - 0x28]
call fcn.0040bdfa
push dword [ebp - 0x24]
push dword [ebp - 0x28]
call dword [0x48d660]
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x18]
call fcn.0040bc74
mov ecx, dword [ebp + 0x10]
lea eax, [ebp - 0x18]
push eax
call fcn.0040ba85
cmp word [ebx + edi*2], 0
jne 0x40b4b0
push 0x7f
lea ecx, [ebp - 0x18]
call fcn.0040bbfc
mov ecx, dword [ebp + 0x10]
lea eax, [ebp - 0x18]
push eax
mov word [ebp - 0xe], di
call fcn.0040ba85
xor esi, esi
lea ecx, [ebp - 0x28]
call fcn.0040cb37
add byte [ebx], dh
test byte [ebp + 0x78e8d84d], 0x14
add byte [eax], al
lea ecx, [ebp - 0x18]
call fcn.0041d8f5
pop edi
mov eax, esi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
cmp esi, 0x7a
ja 0x40b4f8
lea eax, [ebp - 0x28]
push eax
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 8]
push eax
push ebx
call fcn.0040c6a5
cmp dword [ebp - 0x18], 0xffffffff
je 0x473963
mov ecx, dword [ebp + 0x10]
lea eax, [ebp - 0x18]
push eax
call fcn.0040ba85
mov edi, dword [ebp - 8]
jmp 0x40b690
cmp si, 0x39
ja 0x40b651
aas
invalid
jmp 0x40b60c
inc edi
mov dword [ebp - 8], edi
clc
cmp word [ebx + edi*2], 0x3d
lea ecx, [ebp - 0x18]
je 0x4738f9
push 0x41
call fcn.0040bbfc
jmp 0x40b684
push 0x4e
lea ecx, [ebp - 0x18]
call fcn.0040bbfc
mov ecx, dword [ebp + 0x10]
lea eax, [ebp - 0x18]
push eax
call fcn.0040ba85
adc byte [ebp - 0x17af17bb], cl
cmp al, byte [ebx]
add byte [eax], al
inc edi
mov dword [ebp - 8], edi
jmp 0x40b690
push 0x47
lea ecx, [ebp - 0x18]
call fcn.0040bbfc
mov ecx, dword [ebp + 0x10]
lea eax, [ebp - 0x18]
push eax
call fcn.0040ba85
inc edi
mov dword [ebp - 8], edi
jmp 0x40b690
push 0x48
lea ecx, [ebp - 0x18]
call fcn.0040bbfc
mov ecx, dword [ebp + 0x10]
lea eax, [ebp - 0x18]
push eax
call fcn.0040ba85
inc edi
mov dword [ebp - 8], edi
jmp 0x40b690
push 0x40
lea ecx, [ebp - 0x18]
call fcn.0040bbfc
mov ecx, dword [ebp + 0x10]
lea eax, [ebp - 0x18]
call 0x31e9ff6
add byte [eax], al
inc edi
mov dword [ebp - 8], edi
jmp 0x40b690
lea eax, [ebp - 0x28]
push eax
lea eax, [ebp - 8]
push eax
push ebx
push dword [ebp + 8]
call fcn.0040c62c
lea ecx, [ebp - 0x18]
test eax, eax
js 0x47398c
push 0x36
call fcn.0040bbfc
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x18]
call fcn.0040bc74
mov ecx, dword [ebp + 0x10]
lea eax, [ebp - 0x18]
push eax
call fcn.0040ba85
mov edi, dword [ebp - 8]
jmp 0x40b690
push 0x4d
lea ecx, [ebp - 0x18]
call fcn.0040bbfc
inc edi
mov dword [ebp - 8], edi
cmp word [ebx + edi*2], 0x3d
jne 0x40b684
inc edi
push 0x56
lea ecx, [ebp - 0x18]
mov dword [ebp - 8], edi
call fcn.0040bbfc
jmp 0x40b684
push 0x49
lea ecx, [ebp - 0x18]
call fcn.0040bbfc
inc edi
mov dword [ebp - 8], edi
cmp word [ebx + edi*2], 0x3d
jne 0x40b684
inc edi
push 0x52
lea ecx, [ebp - 0x18]
mov dword [ebp - 8], edi
call fcn.0040bbfc
jmp 0x40b684
push 0x4c
lea ecx, [ebp - 0x18]
call fcn.0040bbfc
inc edi
mov dword [ebp - 8], edi
cmp word [ebx + edi*2], 0x3d
jne 0x40b684
inc edi
push 0x55
lea ecx, [ebp - 0x18]
mov dword [ebp - 8], edi
call fcn.0040bbfc
jmp 0x40b684
push 0x4b
lea ecx, [ebp - 0x18]
call fcn.0040bbfc
inc edi
mov dword [ebp - 8], edi
cmp word [ebx + edi*2], 0x3d
jne 0x40b684
jmp 0x47385b
push 0x4a
lea ecx, [ebp - 0x18]
call fcn.0040bbfc
inc edi
mov dword [ebp - 8], edi
cmp word [ebx + edi*2], 0x3d
jne 0x40b684
jmp 0x473848
mov eax, 0x32
jmp 0x40b5e1
inc edi
mov dword [ebp - 8], edi
cmp word [ebx + edi*2], 0x3d
lea ecx, [ebp - 0x18]
je 0x40b940
push 0x42
call fcn.0040bbfc
jmp 0x40b684
movzx eax, word [ebx + edi*2 + 2]
inc edi
mov dword [ebp - 8], edi
lea ecx, [ebp - 0x18]
sub eax, 0x3d
je 0x40b9cc
dec eax
je 0x40b950
push 0x43
call fcn.0040bbfc
jmp 0x40b684
cmp word [ebp - 0x10], 5
jne 0x40b5a2
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x14]
neg ecx
adc eax, 0
neg eax
mov dword [ebp - 0x18], ecx
mov ecx, dword [ebp - 0xc]
mov dword [ebp - 0x14], eax
mov eax, dword [edi + 4]
mov eax, dword [eax + ecx*4 - 4]
mov ecx, 0x49
mov word [eax + 8], cx
lea eax, [ebp - 0x18]
push eax
mov ecx, edi
call fcn.0040ba85
mov edi, dword [ebp - 8]
jmp 0x40b690
push 0x45
call fcn.0040bbfc
inc edi
mov dword [ebp - 8], edi
jmp 0x40b684
push 0x44
call fcn.0040bbfc
inc edi
mov dword [ebp - 8], edi
jmp 0x40b684
mov edi, dword [ebp - 8]
cmp esi, 0x2e
jne 0x40b4e6
inc edi
lea ecx, [ebp - 0x28]
mov dword [ebp - 8], edi
call fcn.0040bcce
movzx eax, word [ebx + edi*2]
cmp ax, 0x5a
jbe 0x40b99a
cmp ax, 0x61
jb 0x40b9a2
cmp ax, 0x7a
ja 0x40b9a2
push eax
lea ecx, [ebp - 0x28]
call fcn.0040c799
inc edi
jmp 0x40b978
cmp ax, 0x41
jae 0x40b98e
jmp 0x40b982
cmp ax, 0x30
jae 0x40b9dc
cmp ax, 0x5f
je 0x40b98e
cmp ax, 0x7f
ja 0x40b98e
cmp dword [ebp - 0x24], 0
mov dword [ebp - 8], edi
je 0x40b9e4
push 0x35
lea ecx, [ebp - 0x18]
call fcn.0040bbfc
jmp 0x40b678
push 0x46
call fcn.0040bbfc
inc edi
mov dword [ebp - 8], edi
jmp 0x40b684
cmp ax, 0x39
jbe 0x40b98e
jmp 0x40b9a8
lea eax, [edi - 1]
push eax
jmp 0x4739a7
push edi
jmp 0x4739a7
push 0xc
call fcn.0041f4ea
mov esi, eax
pop ecx
test esi, esi
je 0x473841
push ebx
mov ebx, dword [ebp + 8]
mov cx, word [ebx + 8]
mov word [esi + 8], cx
movzx eax, word [esi + 8]
mov cx, word [ebx + 0xa]
mov word [esi + 0xa], cx
cmp ax, 0x3f
jle 0x40baf3
cmp ax, 0x10
je 0x473832
cmp ax, 0x20
je 0x40bb78
mov eax, dword [ebx]
mov dword [esi], eax
pop ebx
mov ecx, dword [edi + 8]
mov eax, dword [edi + 4]
mov dword [eax + ecx*4], esi
inc dword [edi + 8]
pop edi
pop esi
pop ebp
ret 4
cmp ax, 0x30
jl 0x40bac8
push 0x10
call fcn.0041f4ea
add dword [eax], eax
mov edx, eax
pop ecx
test edx, edx
je 0x40bb81
mov eax, dword [ebx]
mov ecx, dword [eax]
mov dword [edx], ecx
mov ecx, dword [eax + 4]
add al, 0x89
dec edx
add al, 0x8b
dec eax
or byte [ecx + 0x408b084a], cl
or al, 0x89
inc edx
or al, 0xff
invalid
mov dword [esi], edx
jmp 0x40bae0
add dword [eax], eax
add esp, 0x10
mov dword [edi + 4], esi
jmp 0x40ba98
fld qword [ebx]
fstp qword [esi]
jmp 0x40bae0
xor edx, edx
jmp 0x40bb21
inc esp
xchg ebx, eax
clc
movzx edi, word [eax + 8]
mov eax, dword [ebx + edx*4 - 0xc]
movzx eax, word [eax + 8]
cmp di, 0x49
je 0x473866
cmp di, 0x4a
cmp edi, 0x4a
je 0x473866
cmp di, 0x4c
je 0x473866
push 0x30
pop ecx
test di, di
je 0x473888
cmp di, cx
jne 0x3540bf7f
jmp 0x473888
cmp edx, 3
jbe 0x3540bf7f
invalid
xor al, 0x6a
xor byte [ecx + 0x66], bl
test eax, eax
push 0x30
pop ecx
test ax, ax
je 0x473880
cmp ax, cx
jne 0x3540bf7f
mov eax, dword [ebx + edx*4 - 0x10]
movzx eax, word [eax + 8]
call fcn.004747a6
test ah, ch
in al, dx
in al, dx
xchg cl, bh
xor al, 0x66
cmp eax, ecx
jne 0x3540bf7f
jmp 0x3540bf7d
mov eax, dword [edi + 0x54]
mov eax, dword [eax + ebx*4]
mov ecx, dword [eax]
call 0x8b4dad75
add dword [edx + 1], ebp
call dword [eax]
inc ebx
cmp ebx, dword [edi + 0x58]
jb 0x47389f
jmp 0x4053ae
xor esi, esi
jmp 0x40bb6b
push ecx
lea ecx, [ebp - 0x18]
call 0x8340bc86
pop edx
dec ebp
adc byte [ebp - 0x17a827bb], cl
call fcn.0040bb0f
inc edi
mov dword [ebp - 8], edi
add dword [edx - 0x76b80007], eax
jge 0x47390a
jmp 0x40b71a
sbb byte [edx + 0x4d], 0x10
lea eax, [ebp - 0x28]
push edi
call fcn.0040bb0f
inc edi
mov dword [ebp - 8], edi
jmp 0x40b71a
sahf
inc ebp
inc byte [ecx]
pop edx
mov ecx, dword [eax]
cmp eax, dword [0x4c2110]
jl 0xc88c3a05
mov edi, 0xe8ec8301
mov dword [ebp - 8], edi
jmp 0x40b71a
cld
cmp cl, 0xff
inc edi
mov dword [ebp - 8], edi
jge 0x473986
jmp 0x40b70e
xor ecx, edi
push dword [ebx]
leave
mov dword [ebp - 0x20], eax
mov edx, 0xff450002
jle 0x47393f
loopne 0x47396a
add al, byte [eax]
inc ebp
invalid
inc esi
add al, 0x39
jle 0x4739c3
jbe 0x4739f2
push 0xc
mov cl, 0xbb
cli
dec dword [ebx - 0x2374a530]
mov edx, eax
pop edx
mov ebx, esp
add dword [ebp + 4], 0xffffff8d
or al, 0x45
add al, byte [eax]
inc ebp
call dword [ecx]
jne 0x4739ae
mov dword [ebp + 0xc], edx
push edx
call fcn.0041ef0a
mov ecx, dword [ebp + 0xc]
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x28], ecx
jmp 0x40b6b4
adc eax, dword [eax]
add bh, bh
adc eax, 0xed49e808
cld
inc dword [ebx + 0x3ce9ffce]
jge 0x4739fd
or esi, 0xffffffff
jmp 0x40b741
call dword [edi + 0x68]
mov byte [ebx], dl
add byte [eax], al
call dword [0xed33e808]
cld
dec dword [ebp + 0x7f6ae84d]
call 0x8340bc86
pop edx
dec ebp
adc byte [ebp - 0x17a827bb], cl
out 0x80, al
stc
inc dword [ebx + 0x10e9ffce]
jge 0x473a29
or esi, 0xffffffff
jmp 0x40b741
jmp [eax - 0x75]