Function at 0x5044ff0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub esp, 0x90
mov eax, dword [0x53f3c3c]
xor eax, esp
mov dword [esp + 0x8c], eax
mov eax, dword [esp + 0x94]
push ebx
push ebp
movzx ebp, byte [esp + 0xac]
push esi
push edi
movzx edi, byte [esp + 0xb0]
mov ecx, edi
imul ecx, ecx, 0x356
mov edx, ebp
imul edx, edx, 0x6a
push ebp
lea esi, [ecx + edx]
push edi
mov dword [esp + 0x1c], eax
mov eax, dword [esp + 0xb4]
lea ecx, [esp + 0x24]
push str.rxtxCmd.band_param__d_.freq_param__d_.rxtx_freq_param.specify_tx_pwr_cmd.pwr_step_num
push ecx
mov dword [esp + 0x28], esi
lea ebx, [esi + eax + 0x60]
call dword [sym.imp.MSVCR90.dll_sprintf]
movzx edx, byte [ebx + 8]
mov eax, dword [str.ERf_NSFT_List_RxTx_Cmd]
push edx
mov edx, dword [esp + 0xbc]
push eax
mov eax, dword [esp + 0x2c]
lea ecx, [esp + 0x34]
push ecx
add esi, 0x68
push esi
push edx
push eax
call fcn.0503f000
add esp, 0x28
xor al, al
mov byte [esp + 0x13], al
jmp 0x5044c94
mov al, byte [esp + 0x13]
cmp al, byte [ebx + 8]
jae 0x5044d86
movzx esi, al
push esi
push ebp
push edi
lea ecx, [esp + 0x28]
push str.rxtxCmd.band_param__d_.freq_param__d_.rxtx_freq_param.specify_tx_pwr_cmd.pwr_step_tx_power__d_
push ecx
call dword [sym.imp.MSVCR90.dll_sprintf]
movzx edx, word [ebx + esi*2 + 0xa]
mov eax, dword [str.ERf_NSFT_List_RxTx_Cmd]
push edx
push eax
lea edx, [ebp + 1]
imul edx, edx, 0x35
mov eax, edi
imul eax, eax, 0x1ab
add edx, esi
add eax, edx
mov edx, dword [esp + 0x30]
lea ecx, [esp + 0x38]
push ecx
mov ecx, dword [esp + 0xc8]
add eax, eax
push eax
push ecx
push edx
call fcn.0503f040
push esi
push ebp
push edi
lea eax, [esp + 0x54]
push str.rxtxCmd.band_param__d_.freq_param__d_.rxtx_freq_param.specify_tx_pwr_cmd.pwr_step_VRB_strt__d_
push eax
call dword [sym.imp.MSVCR90.dll_sprintf]
movzx ecx, byte [esi + ebx + 0x1a]
mov edx, dword [str.ERf_NSFT_List_RxTx_Cmd]
add esp, 0x40
push ecx
mov ecx, dword [esp + 0x1c]
push edx
lea eax, [esp + 0x24]
push eax
mov eax, dword [esp + 0xb4]
lea edx, [esi + ecx + 0x7a]
mov ecx, dword [esp + 0x20]
push edx
push eax
push ecx
call fcn.0503f000
push esi
push ebp
push edi
lea edx, [esp + 0x40]
push str.rxtxCmd.band_param__d_.freq_param__d_.rxtx_freq_param.specify_tx_pwr_cmd.pwr_step_VRB_len__d_
push edx
call dword [sym.imp.MSVCR90.dll_sprintf]
movzx eax, byte [esi + ebx + 0x22]
mov ecx, dword [str.ERf_NSFT_List_RxTx_Cmd]
push eax
mov eax, dword [esp + 0x48]
push ecx
lea edx, [esp + 0x50]
push edx
mov edx, dword [esp + 0xe0]
lea ecx, [esi + eax + 0x82]
mov eax, dword [esp + 0x4c]
push ecx
push edx
push eax
call fcn.0503f000
mov al, byte [esp + 0x57]
inc al
add esp, 0x44
mov byte [esp + 0x13], al
cmp al, 8
jb 0x5044c90
mov ecx, dword [esp + 0x9c]
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.0520b902
add esp, 0x90
ret
sub esp, 0x84
mov eax, dword [0x53f3c3c]
xor eax, esp
mov dword [esp + 0x80], eax
push ebx
movzx ebx, byte [esp + 0x9c]
push ebp
mov ebp, dword [esp + 0x90]
push esi
push edi
movzx edi, byte [esp + 0xa4]
mov eax, edi
mov ecx, ebx
imul eax, eax, 0x356
imul ecx, ecx, 0x6a
push ebx
push edi
lea edx, [esp + 0x18]
push str.rxtxCmd.band_param__d_.freq_param__d_.rxtx_freq_param.specify_pwr_step_cmd.start_power
push edx
lea esi, [eax + ecx]
call dword [sym.imp.MSVCR90.dll_sprintf]
mov eax, dword [esp + 0xb0]
movzx ecx, word [esi + eax + 0x68]
mov edx, dword [str.ERf_NSFT_List_RxTx_Cmd]
push ecx
push edx
mov edx, dword [esp + 0xb4]
lea eax, [esp + 0x28]
push eax
lea ecx, [esi + 0x68]
push ecx
push edx
push ebp
call fcn.0503f040
push ebx
push edi
lea eax, [esp + 0x40]
push str.rxtxCmd.band_param__d_.freq_param__d_.rxtx_freq_param.specify_pwr_step_cmd.pwr_step_value
push eax
call dword [sym.imp.MSVCR90.dll_sprintf]
mov ecx, dword [esp + 0xd8]
movzx edx, word [esi + ecx + 0x6a]
mov eax, dword [str.ERf_NSFT_List_RxTx_Cmd]
push edx
push eax
mov eax, dword [esp + 0xdc]
lea ecx, [esp + 0x50]
push ecx
lea edx, [esi + 0x6a]
push edx
push eax
push ebp
call fcn.0503f040
add esp, 0x50
push ebx
push edi
lea ecx, [esp + 0x18]
push str.rxtxCmd.band_param__d_.freq_param__d_.rxtx_freq_param.specify_pwr_step_cmd.pwr_step_num
push ecx
call dword [sym.imp.MSVCR90.dll_sprintf]
mov edx, dword [esp + 0xb0]
movzx eax, byte [esi + edx + 0x6c]
mov ecx, dword [str.ERf_NSFT_List_RxTx_Cmd]
push eax
push ecx
mov ecx, dword [esp + 0xb4]
lea edx, [esp + 0x28]
push edx
lea eax, [esi + 0x6c]
push eax
push ecx
push ebp
call fcn.0503f000
push ebx
push edi
lea edx, [esp + 0x40]
push str.rxtxCmd.band_param__d_.freq_param__d_.rxtx_freq_param.specify_pwr_step_cmd.pwr_step_VRB_strt_p1
push edx
call dword [sym.imp.MSVCR90.dll_sprintf]
mov eax, dword [esp + 0xd8]
movzx ecx, byte [esi + eax + 0x6d]
mov edx, dword [str.ERf_NSFT_List_RxTx_Cmd]
push ecx
push edx
mov edx, dword [esp + 0xdc]
lea eax, [esp + 0x50]
push eax
lea ecx, [esi + 0x6d]
push ecx
push edx
push ebp
call fcn.0503f000
add esp, 0x50
push ebx
push edi
lea eax, [esp + 0x18]
push str.rxtxCmd.band_param__d_.freq_param__d_.rxtx_freq_param.specify_pwr_step_cmd.pwr_step_VRB_len_p1
push eax
call dword [sym.imp.MSVCR90.dll_sprintf]
mov ecx, dword [esp + 0xb0]
movzx edx, byte [esi + ecx + 0x6e]
mov eax, dword [str.ERf_NSFT_List_RxTx_Cmd]
push edx
push eax
mov eax, dword [esp + 0xb4]
lea ecx, [esp + 0x28]
push ecx
lea edx, [esi + 0x6e]
push edx
push eax
push ebp
call fcn.0503f000
push ebx
push edi
lea ecx, [esp + 0x40]
push str.rxtxCmd.band_param__d_.freq_param__d_.rxtx_freq_param.specify_pwr_step_cmd.pwr_step_VRB_strt_p2
push ecx
call dword [sym.imp.MSVCR90.dll_sprintf]
mov edx, dword [esp + 0xd8]
movzx eax, byte [esi + edx + 0x6f]
mov ecx, dword [str.ERf_NSFT_List_RxTx_Cmd]
push eax
push ecx
mov ecx, dword [esp + 0xdc]
lea edx, [esp + 0x50]
push edx
lea eax, [esi + 0x6f]
push eax
push ecx
push ebp
call fcn.0503f000
add esp, 0x50
push ebx
push edi
lea edx, [esp + 0x18]
push str.rxtxCmd.band_param__d_.freq_param__d_.rxtx_freq_param.specify_pwr_step_cmd.pwr_step_VRB_len_p2
push edx
call dword [sym.imp.MSVCR90.dll_sprintf]
mov eax, dword [esp + 0xb0]
movzx ecx, byte [esi + eax + 0x70]
mov edx, dword [str.ERf_NSFT_List_RxTx_Cmd]
push ecx
push edx
mov edx, dword [esp + 0xb4]
lea eax, [esp + 0x28]
push eax
lea ecx, [esi + 0x70]
push ecx
push edx
push ebp
call fcn.0503f000
push ebx
push edi
lea eax, [esp + 0x40]
push str.rxtxCmd.band_param__d_.freq_param__d_.rxtx_freq_param.specify_pwr_step_cmd.step_for_change_tx_VRB
push eax
call dword [sym.imp.MSVCR90.dll_sprintf]
mov ecx, dword [esp + 0xd8]
movzx edx, byte [esi + ecx + 0x71]
mov eax, dword [str.ERf_NSFT_List_RxTx_Cmd]
push edx
push eax
lea ecx, [esp + 0x50]
push ecx
add esi, 0x71
mov edx, dword [esp + 0xe0]
push esi
push edx
push ebp
call fcn.0503f000
mov ecx, dword [esp + 0xe0]
add esp, 0x50
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.0520b902
add esp, 0x84
ret
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0xc]
push esi
push edi
movzx esi, al
imul esi, esi, 0x356
movzx edi, cl
imul edi, edi, 0x6a
add esi, edx
cmp byte [edi + esi + 0x66], 0
pop edi
pop esi
mov dword [esp + 0x14], ecx
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], edx
jne 0x5045029
jmp 0x5044bf0
jmp 0x5044da0