Function at 0x47b7c0
Capabilities:
Encrypt data using rc4 ksa

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x50
push ebx
mov ebx, dword [ebp + 0xc]
push esi
mov esi, dword [ebp + 8]
lea eax, [esi + 0x74]
push edi
test eax, eax
je 0x47b7d9
mov eax, dword [eax + 4]
lea ecx, [ebp - 0x4c]
push ecx
push 0x18
push eax
call dword [sym.imp.GDI32.dll_GetObjectW]
mov eax, dword [ebp - 0x40]
mov ecx, dword [ebp + 0x10]
cdq
and edx, 3
add eax, edx
mov edx, dword [ebp - 0x38]
sar eax, 2
dec ecx
mov dword [ebp - 8], eax
mov eax, ecx
mov dword [ebp - 0x18], edx
cdq
sub eax, edx
mov dword [ebp + 0x10], ecx
mov edx, dword [ebp + 0x10]
mov edi, eax
sar edi, 1
xor ecx, ecx
mov dword [ebp - 0x34], edi
mov dword [ebp - 0x10], ecx
test edx, edx
jle 0x47ba24
mov eax, dword [ebp - 0x38]
fld qword [0x557b18]
fld1
mov dword [ebp - 0x14], eax
fld qword [0x557b10]
mov eax, 1
sub eax, edi
mov dword [ebp - 0x24], eax
cmp ecx, edi
jge 0x47b866
mov edx, dword [esi + 0x9c]
mov eax, dword [esi + 0xa8]
sub eax, dword [esi + 0xa4]
mov dword [ebp - 0xc], edx
lea edx, [ecx + 1]
imul eax, edx
cdq
idiv edi
add eax, dword [esi + 0xa4]
jmp 0x47b8b7
mov eax, dword [esi + 0xa0]
mov edx, dword [ebp - 0x24]
mov dword [ebp - 0xc], eax
mov eax, dword [esi + 0xb0]
sub eax, dword [esi + 0xac]
add edx, ecx
imul eax, edx
cdq
idiv edi
add eax, dword [esi + 0xac]
mov dword [ebp - 0x20], eax
fild dword [ebp - 0x20]
mov eax, 3
fmul st(3)
fld st(2)
test al, 1
je 0x47b8a1
fmul st(1)
shr eax, 1
je 0x47b8ab
fld st(1)
fmulp st(2)
jmp 0x47b89b
fstp st(1)
fmul st(1)
call fcn.0045a230
mov ecx, dword [ebp - 0x10]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x20], 0
test ebx, ebx
jle 0x47ba04
mov ecx, dword [ebp - 0xc]
mov eax, ecx
shr eax, 0x10
and eax, 0xff
mov dword [ebp - 0x28], eax
mov eax, ecx
shr eax, 8
and eax, 0xff
and ecx, 0xff
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x30], ecx
mov dword [ebp - 0xc], 0xff
mov eax, dword [ebp - 0xc]
cdq
idiv ebx
mov edi, eax
mov eax, dword [esi + 0x98]
mov esi, dword [esi + 0x94]
mov ebx, eax
shr ebx, 0x10
and ebx, 0xff
mov ecx, esi
shr ecx, 0x10
and ecx, 0xff
sub ebx, ecx
imul ebx, edi
shl ecx, 8
add ebx, ecx
shr ebx, 8
movzx ecx, bl
mov ebx, eax
movzx eax, al
mov edx, esi
shr edx, 8
and edx, 0xff
shr ebx, 8
and ebx, 0xff
sub ebx, edx
and esi, 0xff
imul ebx, edi
sub eax, esi
imul eax, edi
mov edi, dword [ebp - 0x1c]
shl edx, 8
add ebx, edx
shl ecx, 8
shl esi, 8
add eax, esi
shr eax, 8
shr ebx, 8
movzx edx, bl
or ecx, edx
movzx edx, al
shl ecx, 8
or ecx, edx
mov eax, ecx
shr eax, 0x10
and eax, 0xff
mov edx, ecx
mov esi, ecx
mov ecx, dword [ebp - 0x28]
sub ecx, eax
imul ecx, edi
shl eax, 8
add ecx, eax
mov eax, dword [ebp - 0x2c]
shr edx, 8
and edx, 0xff
sub eax, edx
imul eax, edi
shl edx, 8
add eax, edx
shr eax, 8
movzx edx, al
mov eax, dword [ebp - 0x30]
and esi, 0xff
sub eax, esi
imul eax, edi
shr ecx, 8
movzx ecx, cl
shl esi, 8
shl ecx, 8
add eax, esi
or ecx, edx
shr eax, 8
movzx edx, al
mov eax, dword [ebp - 0x20]
shl ecx, 8
or ecx, edx
mov edx, dword [ebp - 0x14]
mov dword [edx + eax*4], ecx
inc eax
mov dword [ebp - 0x20], eax
mov ebx, dword [ebp + 0xc]
add dword [ebp - 0xc], 0xff
mov esi, dword [ebp + 8]
cmp eax, ebx
jl 0x47b8f6
mov edi, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 8]
add eax, eax
add eax, eax
add dword [ebp - 0x14], eax
inc ecx
mov dword [ebp - 0x10], ecx
cmp ecx, dword [ebp + 0x10]
jl 0x47b83c
mov edx, dword [ebp + 0x10]
fstp st(2)
fstp st(0)
fstp st(0)
mov ecx, dword [ebp - 8]
mov esi, dword [ebp - 0x18]
lea eax, [edx - 1]
imul eax, ecx
lea eax, [esi + eax*4]
test ebx, ebx
jle 0x47bb17
sub esi, eax
mov dword [ebp + 8], ebx
mov ecx, dword [esi + eax]
mov edx, ecx
shr edx, 0x10
and edx, 0xff
imul edx, edx, 0x9c
mov dword [ebp + 0xc], ebx
mov ebx, ecx
shr ebx, 8
and ebx, 0xff
imul ebx, ebx, 0x9c
movzx ecx, cl
add edx, 0x639c
imul ecx, ecx, 0x9c
shr edx, 8
movzx edx, dl
shl edx, 8
add ebx, 0x639c
shr ebx, 8
movzx edi, bl
or edx, edi
add ecx, 0x639c
shl edx, 8
shr ecx, 8
movzx ecx, cl
or edx, ecx
mov dword [esi + eax], edx
mov ecx, dword [eax]
mov edx, ecx
shr edx, 0x10
and edx, 0xff
mov ebx, ecx
imul edx, edx, 0x9c
shr ebx, 8
and ebx, 0xff
imul ebx, ebx, 0x9c
movzx ecx, cl
imul ecx, ecx, 0x9c
add edx, 0x639c
shr edx, 8
add ebx, 0x639c
movzx edx, dl
shr ebx, 8
add ecx, 0x639c
shl edx, 8
movzx edi, bl
mov ebx, dword [ebp + 0xc]
shr ecx, 8
or edx, edi
movzx ecx, cl
shl edx, 8
or edx, ecx
mov dword [eax], edx
add eax, 4
dec dword [ebp + 8]
jne 0x47ba40
mov esi, dword [ebp - 0x18]
mov edx, dword [ebp + 0x10]
mov ecx, dword [ebp - 8]
test edx, edx
jle 0x47bc0b
lea eax, [ecx*4]
mov dword [ebp + 0xc], eax
mov eax, esi
mov esi, edx
lea ecx, [ecx]
mov ecx, dword [eax]
mov edx, ecx
shr edx, 0x10
and edx, 0xff
imul edx, edx, 0x9c
mov dword [ebp + 8], ebx
mov ebx, ecx
shr ebx, 8
movzx ecx, cl
add edx, 0x639c
imul ecx, ecx, 0x9c
and ebx, 0xff
shr edx, 8
imul ebx, ebx, 0x9c
movzx edx, dl
shl edx, 8
add ecx, 0x639c
add ebx, 0x639c
shr ecx, 8
shr ebx, 8
movzx edi, bl
mov ebx, dword [ebp + 8]
or edx, edi
shl edx, 8
movzx ecx, cl
or edx, ecx
mov dword [eax], edx
mov ecx, dword [eax + ebx*4 - 4]
mov dword [ebp + 8], eax
mov edx, ecx
shr edx, 0x10
and edx, 0xff
mov eax, ecx
imul edx, edx, 0x9c
shr eax, 8
and eax, 0xff
imul eax, eax, 0x9c
movzx ecx, cl
imul ecx, ecx, 0x9c
add edx, 0x639c
shr edx, 8
add eax, 0x639c
movzx edx, dl
shr eax, 8
movzx edi, al
mov eax, dword [ebp + 8]
add ecx, 0x639c
shl edx, 8
shr ecx, 8
or edx, edi
movzx ecx, cl
shl edx, 8
or edx, ecx
mov dword [eax + ebx*4 - 4], edx
add eax, dword [ebp + 0xc]
dec esi
jne 0x47bb30
mov esi, dword [ebp - 0x18]
mov edx, dword [ebp + 0x10]
mov ecx, dword [ebp - 8]
imul ecx, edx
lea esi, [esi + ecx*4]
test ebx, ebx
jle 0x47bc1d
mov ecx, ebx
xor eax, eax
mov edi, esi
rep stosd dword es:[edi], eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc