Function at 0x1000181b
Capabilities:
Encrypt data using rc4 prga

Disassembly:
jmp 0x1004b2f0
sub esp, 0x4c
mov eax, dword [0x100e2f80]
xor eax, esp
mov dword [esp + 0x48], eax
push ebx
mov ebx, dword [esp + 0x54]
xor al, al
push ebp
xor cl, cl
mov byte [esp + 0x28], 0xe8
xor ebp, ebp
mov dword [esp + 0x29], 0
push esi
push edi
mov byte [esp + 0x20], 0xe9
mov dword [esp + 0x21], 0
mov word [esp + 0x28], 0x800f
mov dword [esp + 0x2a], 0
mov byte [esp + 0x12], al
mov byte [esp + 0x13], cl
mov dword [esp + 0x14], ebp
mov dword [ebx + 0xc], ebp
mov dword [ebx + 0x10], ebp
mov edi, dword [ebx + 8]
movzx esi, al
add esi, dword [ebx]
movzx eax, cl
mov dword [esp + 0x38], eax
add edi, eax
lea eax, [esp + 0x3c]
push eax
push esi
call fcn.10005e16
add esp, 8
mov ecx, eax
test dword [esp + 0x54], 0x1000
mov dword [esp + 0x18], ecx
jne 0x1004b5ca
cmp byte [esp + 0x12], 5
mov dword [esp + 0x1c], esi
jb 0x1004b3a6
mov eax, esi
mov dword [esp + 0x14], 1
sub eax, edi
mov ecx, 5
sub eax, 5
mov dword [esp + 0x21], eax
lea eax, [esp + 0x20]
jmp 0x1004b4d2
mov dl, byte [esp + 0x42]
cmp dl, 0xe8
jne 0x1004b3d1
movzx eax, byte [esp + 0x3c]
mov ecx, 5
sub eax, edi
add eax, 0xfffffffb
add eax, dword [esp + 0x4c]
add eax, esi
mov dword [esp + 0x31], eax
lea eax, [esp + 0x30]
jmp 0x1004b4d2
mov al, dl
and al, 0xfd
cmp al, 0xe9
jne 0x1004b42f
movzx ecx, byte [esp + 0x3c]
add ecx, esi
cmp dl, 0xeb
jne 0x1004b3ee
movsx eax, byte [esp + 0x4c]
add ecx, eax
jmp 0x1004b3f2
add ecx, dword [esp + 0x4c]
mov eax, dword [ebx]
cmp eax, ecx
ja 0x1004b40f
add eax, 5
cmp ecx, eax
jae 0x1004b40f
cmp ebp, ecx
cmovae ecx, ebp
mov ebp, ecx
mov ecx, dword [esp + 0x18]
jmp 0x1004b4da
sub ecx, edi
lea eax, [esp + 0x20]
sub ecx, 5
cmp esi, ebp
mov dword [esp + 0x21], ecx
mov ecx, 5
sbb edx, edx
inc edx
mov dword [esp + 0x14], edx
jmp 0x1004b4d2
mov dh, byte [esp + 0x43]
mov ah, dl
and ah, 0xf0
cmp ah, 0x70
je 0x1004b464
mov al, dl
and al, 0xfc
cmp al, 0xe0
je 0x1004b464
mov al, dh
and al, 0xf0
cmp al, 0x80
je 0x1004b464
and dl, 0xfe
cmp dl, 0xc2
jne 0x1004b4da
cmp esi, ebp
sbb edx, edx
inc edx
mov dword [esp + 0x14], edx
jmp 0x1004b4da
mov al, byte [esp + 0x3c]
movzx ecx, al
add ecx, esi
cmp ah, 0x70
je 0x1004b480
mov al, dl
and al, 0xfc
cmp al, 0xe0
je 0x1004b480
add ecx, dword [esp + 0x4c]
jmp 0x1004b487
movsx eax, byte [esp + 0x4c]
add ecx, eax
mov eax, dword [ebx]
cmp eax, ecx
ja 0x1004b4a1
add eax, 5
cmp ecx, eax
jae 0x1004b4a1
cmp ebp, ecx
cmovae ecx, ebp
mov ebp, ecx
mov ecx, dword [esp + 0x18]
jmp 0x1004b4da
mov al, dl
and al, 0xfc
cmp al, 0xe0
je 0x1004b5ca
movzx eax, dl
cmp dl, 0xf
jne 0x1004b4b8
movzx eax, dh
and al, 0xf
sub ecx, edi
or al, 0x80
sub ecx, 6
mov byte [esp + 0x29], al
lea eax, [esp + 0x28]
mov dword [esp + 0x2a], ecx
mov ecx, 6
mov dword [esp + 0x18], ecx
mov dword [esp + 0x1c], eax
cmp esi, ebp
jae 0x1004b4eb
movzx eax, byte [esp + 0x3c]
cmp ecx, eax
jne 0x1004b5ca
mov esi, dword [esp + 0x38]
lea eax, [esi + ecx]
cmp eax, 0x20
ja 0x1004b5ca
mov eax, dword [ebx + 0x10]
cmp eax, 8
jae 0x1004b5ca
mov dl, byte [esp + 0x12]
mov byte [eax + ebx + 0x14], dl
mov eax, dword [ebx + 0x10]
mov dl, byte [esp + 0x13]
mov byte [ebx + eax + 0x1c], dl
mov edi, dword [ebx + 8]
inc dword [ebx + 0x10]
add edi, esi
mov esi, dword [esp + 0x1c]
mov al, byte [esp + 0x12]
rep movsb byte es:[edi], byte [esi]
add al, byte [esp + 0x3c]
mov cl, dl
add cl, byte [esp + 0x18]
mov edx, dword [esp + 0x14]
mov byte [esp + 0x13], cl
mov byte [esp + 0x12], al
test edx, edx
je 0x1004b347
cmp al, 5
jae 0x1004b5b2
mov edi, dword [ebx]
movzx esi, al
mov eax, 5
sub eax, esi
push eax
lea ebp, [edi + esi]
push ebp
call fcn.1004b6a0
add esp, 8
test eax, eax
jne 0x1004b5b2
cmp byte [esp + 0x12], 2
jae 0x1004b587
mov eax, 2
sub eax, esi
push eax
push ebp
call fcn.1004b6a0
add esp, 8
test eax, eax
je 0x1004b5ca
lea eax, [edi - 5]
push eax
call fcn.100049fd
add esp, 4
test eax, eax
je 0x1004b5ca
mov eax, dword [ebx]
sub eax, 5
push 5
push eax
call fcn.1004b6a0
add esp, 8
test eax, eax
je 0x1004b5ca
mov dword [ebx + 0xc], 1
pop edi
pop esi
pop ebp
mov eax, 1
pop ebx
mov ecx, dword [esp + 0x48]
xor ecx, esp
call fcn.10002da1
add esp, 0x4c
ret
mov ecx, dword [esp + 0x58]
xor eax, eax
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.10002da1
add esp, 0x4c
ret