Function at 0x433a10
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x1c
mov dword [esp + 0x10], edx
mov dword [esp], ecx
cmp dword [esp + 0x30], 0
js 0x433f8b
mov eax, dword [esp + 0x10]
movzx ebp, word [eax + 2]
xor eax, eax
test ebp, ebp
sete al
mov esi, 0x8a
mov ecx, 7
cmove ecx, esi
mov edx, 4
sub edx, eax
mov edi, 0xffffffff
xor eax, eax
xor esi, esi
jmp 0x433a82
xor ecx, ecx
cmp ebx, ebp
sete cl
mov edx, 4
sub edx, ecx
xor ecx, 7
mov edi, ebx
lea ebx, [eax + 1]
cmp eax, dword [esp + 0x30]
mov eax, ebx
je 0x433f8b
mov ebx, ebp
mov ebp, dword [esp + 0x10]
movzx ebp, word [ebp + eax*4 + 6]
mov dword [esp + 4], esi
inc esi
cmp esi, ecx
jge 0x433a9a
cmp ebx, ebp
je 0x433a73
cmp esi, edx
mov dword [esp + 0x18], ebp
mov dword [esp + 0x14], eax
mov dword [esp + 8], ebx
jge 0x433b70
mov eax, dword [esp]
mov ecx, dword [eax + 0x170c]
jmp 0x433ad3
add ecx, edx
mov dword [eax + 0x170c], ecx
dec esi
mov ebx, dword [esp + 8]
je 0x433f6a
movzx edx, word [eax + ebx*4 + 0xace]
mov ebp, 0x10
sub ebp, edx
movzx edi, word [eax + ebx*4 + 0xacc]
mov ebx, edi
shl ebx, cl
or bx, word [eax + 0x1708]
mov word [eax + 0x1708], bx
cmp ecx, ebp
jle 0x433ac0
mov ecx, dword [eax + 8]
mov dword [esp + 4], ecx
mov ebp, dword [eax + 0x14]
lea eax, [ebp + 1]
mov ecx, dword [esp]
mov dword [ecx + 0x14], eax
mov eax, dword [esp + 4]
mov byte [eax + ebp], bl
mov eax, dword [esp]
movzx eax, byte [eax + 0x1709]
mov byte [esp + 4], al
mov ecx, dword [esp]
mov ecx, dword [ecx + 8]
mov ebx, dword [esp]
mov ebx, dword [ebx + 0x14]
lea ebp, [ebx + 1]
mov eax, dword [esp]
mov dword [eax + 0x14], ebp
movzx eax, byte [esp + 4]
mov byte [ecx + ebx], al
mov eax, dword [esp]
mov ebx, dword [eax + 0x170c]
mov cl, 0x10
sub cl, bl
shr edi, cl
mov word [eax + 0x1708], di
lea ecx, [edx + ebx]
add ecx, 0xfffffff0
jmp 0x433ac2
test ebx, ebx
mov edx, dword [esp]
je 0x433b8e
cmp ebx, edi
jne 0x433c33
mov ecx, dword [edx + 0x170c]
mov dword [esp + 4], esi
jmp 0x433d42
mov ecx, dword [edx + 0x170c]
movzx esi, word [edx + 0x1708]
cmp dword [esp + 4], 9
jg 0x433cad
movzx ebp, word [edx + 0xb12]
movzx edi, word [edx + 0xb10]
mov eax, edi
shl eax, cl
or esi, eax
mov eax, 0x10
sub eax, ebp
cmp ecx, eax
mov eax, dword [esp]
jle 0x433e3c
mov word [eax + 0x1708], si
mov eax, dword [esp]
mov dword [esp + 0xc], ebp
mov ebp, dword [eax + 8]
mov ecx, dword [esp]
mov ecx, dword [ecx + 0x14]
lea ebx, [ecx + 1]
mov eax, esi
mov edx, dword [esp]
mov dword [edx + 0x14], ebx
mov byte [ebp + ecx], al
mov eax, dword [esp]
movzx eax, byte [eax + 0x1709]
mov ecx, dword [esp]
mov ecx, dword [ecx + 8]
mov edx, dword [esp]
mov ebx, dword [edx + 0x14]
lea ebp, [ebx + 1]
mov edx, dword [esp]
mov dword [edx + 0x14], ebp
mov byte [ecx + ebx], al
mov eax, dword [esp]
mov ebx, dword [eax + 0x170c]
mov cl, 0x10
sub cl, bl
shr edi, cl
mov ecx, dword [esp + 0xc]
add ecx, ebx
add ecx, 0xfffffff0
mov ebx, edi
jmp 0x433e40
movzx esi, word [edx + ebx*4 + 0xace]
mov ecx, dword [edx + 0x170c]
mov eax, 0x10
sub eax, esi
movzx edi, word [edx + ebx*4 + 0xacc]
mov ebx, edi
shl ebx, cl
or bx, word [edx + 0x1708]
mov word [edx + 0x1708], bx
cmp ecx, eax
jle 0x433d3a
mov eax, dword [edx + 8]
mov ecx, dword [edx + 0x14]
lea ebp, [ecx + 1]
mov dword [edx + 0x14], ebp
mov byte [eax + ecx], bl
movzx eax, byte [edx + 0x1709]
mov ecx, dword [edx + 8]
mov ebx, dword [edx + 0x14]
lea ebp, [ebx + 1]
mov dword [edx + 0x14], ebp
mov byte [ecx + ebx], al
mov ebx, dword [edx + 0x170c]
mov cl, 0x10
sub cl, bl
shr edi, cl
mov word [edx + 0x1708], di
lea ecx, [esi + ebx]
add ecx, 0xfffffff0
jmp 0x433d3c
movzx ebp, word [edx + 0xb16]
movzx edi, word [edx + 0xb14]
mov eax, edi
shl eax, cl
or esi, eax
mov eax, 0x10
sub eax, ebp
cmp ecx, eax
mov eax, dword [esp]
jle 0x433ec1
mov word [eax + 0x1708], si
mov eax, dword [esp]
mov dword [esp + 0xc], ebp
mov ebp, dword [eax + 8]
mov ecx, dword [esp]
mov ecx, dword [ecx + 0x14]
lea ebx, [ecx + 1]
mov eax, esi
mov edx, dword [esp]
mov dword [edx + 0x14], ebx
mov byte [ebp + ecx], al
mov eax, dword [esp]
movzx eax, byte [eax + 0x1709]
mov ecx, dword [esp]
mov ecx, dword [ecx + 8]
mov edx, dword [esp]
mov ebx, dword [edx + 0x14]
lea ebp, [ebx + 1]
mov edx, dword [esp]
mov dword [edx + 0x14], ebp
mov byte [ecx + ebx], al
mov eax, dword [esp]
mov ebx, dword [eax + 0x170c]
mov cl, 0x10
sub cl, bl
shr edi, cl
mov ecx, dword [esp + 0xc]
add ecx, ebx
add ecx, 0xfffffff0
mov ebx, edi
jmp 0x433ec5
add ecx, esi
mov dword [edx + 0x170c], ecx
movzx esi, word [edx + 0xb0e]
mov eax, 0x10
movzx edi, word [edx + 0xb0c]
mov ebx, edi
shl ebx, cl
sub eax, esi
or bx, word [edx + 0x1708]
cmp ecx, eax
jle 0x433da8
mov word [edx + 0x1708], bx
mov eax, dword [edx + 8]
mov ecx, dword [edx + 0x14]
lea ebp, [ecx + 1]
mov dword [edx + 0x14], ebp
mov byte [eax + ecx], bl
movzx eax, byte [edx + 0x1709]
mov ecx, dword [edx + 8]
mov ebx, dword [edx + 0x14]
lea ebp, [ebx + 1]
mov dword [edx + 0x14], ebp
mov byte [ecx + ebx], al
mov ebx, dword [edx + 0x170c]
mov cl, 0x10
sub cl, bl
shr edi, cl
lea ecx, [esi + ebx]
add ecx, 0xfffffff0
mov ebx, edi
jmp 0x433daa
add ecx, esi
mov eax, edx
mov edx, dword [esp + 4]
mov dword [eax + 0x170c], ecx
add edx, 0xfffd
cmp ecx, 0xf
jl 0x433e29
movzx esi, dx
shl edx, cl
or ebx, edx
mov word [eax + 0x1708], bx
mov eax, dword [esp]
mov eax, dword [eax + 8]
mov ecx, dword [esp]
mov ecx, dword [ecx + 0x14]
lea edx, [ecx + 1]
mov edi, dword [esp]
mov dword [edi + 0x14], edx
mov byte [eax + ecx], bl
mov eax, dword [esp]
movzx eax, byte [eax + 0x1709]
mov ecx, dword [esp]
mov ecx, dword [ecx + 8]
mov edx, dword [esp]
mov edx, dword [edx + 0x14]
lea edi, [edx + 1]
mov ebx, dword [esp]
mov dword [ebx + 0x14], edi
mov byte [ecx + edx], al
mov eax, dword [esp]
mov edx, dword [eax + 0x170c]
mov cl, 0x10
sub cl, dl
shr esi, cl
mov ecx, edx
mov word [eax + 0x1708], si
add ecx, 0xfffffff2
jmp 0x433f60
shl edx, cl
or ebx, edx
mov word [eax + 0x1708], bx
add ecx, 2
jmp 0x433f60
add ecx, ebp
mov ebx, esi
mov dword [eax + 0x170c], ecx
mov edx, dword [esp + 4]
add edx, 0xfffe
cmp ecx, 0xe
jl 0x433f3f
movzx esi, dx
shl edx, cl
or ebx, edx
mov word [eax + 0x1708], bx
mov eax, dword [esp]
mov eax, dword [eax + 8]
mov ecx, dword [esp]
mov ecx, dword [ecx + 0x14]
lea edx, [ecx + 1]
mov edi, dword [esp]
mov dword [edi + 0x14], edx
mov byte [eax + ecx], bl
mov eax, dword [esp]
movzx eax, byte [eax + 0x1709]
mov ecx, dword [esp]
mov ecx, dword [ecx + 8]
mov edx, dword [esp]
mov edx, dword [edx + 0x14]
lea edi, [edx + 1]
mov ebx, dword [esp]
mov dword [ebx + 0x14], edi
mov byte [ecx + edx], al
mov eax, dword [esp]
mov edx, dword [eax + 0x170c]
mov cl, 0x10
sub cl, dl
shr esi, cl
mov ecx, edx
mov word [eax + 0x1708], si
add ecx, 0xfffffff3
jmp 0x433f60
add ecx, ebp
mov ebx, esi
mov dword [eax + 0x170c], ecx
mov edx, dword [esp + 4]
add edx, 0xfff6
cmp ecx, 0xa
jl 0x433f4f
movzx esi, dx
shl edx, cl
or ebx, edx
mov word [eax + 0x1708], bx
mov eax, dword [esp]
mov eax, dword [eax + 8]
mov ecx, dword [esp]
mov ecx, dword [ecx + 0x14]
lea edx, [ecx + 1]
mov edi, dword [esp]
mov dword [edi + 0x14], edx
mov byte [eax + ecx], bl
mov eax, dword [esp]
movzx eax, byte [eax + 0x1709]
mov ecx, dword [esp]
mov ecx, dword [ecx + 8]
mov edx, dword [esp]
mov edx, dword [edx + 0x14]
lea edi, [edx + 1]
mov ebx, dword [esp]
mov dword [ebx + 0x14], edi
mov byte [ecx + edx], al
mov eax, dword [esp]
mov edx, dword [eax + 0x170c]
mov cl, 0x10
sub cl, dl
shr esi, cl
mov ecx, edx
mov word [eax + 0x1708], si
add ecx, 0xfffffff7
jmp 0x433f60
shl edx, cl
or ebx, edx
mov word [eax + 0x1708], bx
add ecx, 3
jmp 0x433f60
shl edx, cl
or ebx, edx
mov word [eax + 0x1708], bx
add ecx, 7
nop dword [eax]
mov ebx, dword [esp + 8]
mov dword [eax + 0x170c], ecx
xor esi, esi
mov ebp, dword [esp + 0x18]
test ebp, ebp
mov eax, dword [esp + 0x14]
jne 0x433a60
mov ecx, 0x8a
mov edx, 3
jmp 0x433a71
add esp, 0x1c
pop esi
pop edi
pop ebx
pop ebp
ret