Function at 0x414236
Capabilities:
Encrypt data using rc4 prga
Resolve function by parsing pe exports

Disassembly:
mov dword [0x421352], ebx
mov edi, dword [0x41f93d]
sub edi, dword [0x41974a]
add dword [0x41f93d], edi
mov dword [0x418281], edi
mov dword [0x41974a], ecx
cmp dword [ebp + 0xc], esi
jne 0x411ebe
mov ecx, dword [0x418281]
add ecx, dword [0x41fa78]
and dword [0x41e10d], ecx
mov dword [0x418281], ecx
mov edi, dword [0x4210c5]
and edi, dword [0x41ef3e]
add dword [0x41fa78], edi
mov dword [0x41f93d], edi
mov dword [0x4210c5], esi
mov dword [0x41f93d], edx
mov ecx, dword [ebp - 0x30]
mov dword [0x41974a], ebx
mov edx, dword [0x41974a]
sub edx, dword [0x420d26]
add dword [0x4210c5], edx
mov dword [0x41974a], edx
mov dword [0x421721], edi
mov dword [0x41974a], edi
add ecx, dword [ebp - 0x10]
mov dword [0x421352], eax
mov dword [0x41fa78], eax
mov ecx, dword [ecx]
mov edx, dword [0x421352]
and edx, dword [0x420d26]
add dword [0x421352], edx
mov dword [0x418281], edx
mov dword [0x41f93d], edx
mov dword [0x41f93d], ebx
mov ebx, dword [0x421352]
sub ebx, dword [0x41974a]
and dword [0x418281], ebx
mov dword [0x4210c5], ebx
and ecx, 0xffff
mov dword [0x421352], edx
mov eax, dword [0x421721]
and eax, dword [0x41f93d]
and dword [0x41f93d], eax
mov dword [0x41974a], eax
shl ecx, 2
mov dword [0x41ef3e], edx
mov esi, dword [0x418281]
add esi, dword [0x41e10d]
add dword [0x41ef3e], esi
mov dword [0x41fa78], esi
add ecx, dword [ebp - 0x24]
mov dword [0x420d26], ebx
mov dword [0x41f93d], ebx
mov dword [0x41ef3e], esi
mov ebx, dword [0x420d26]
sub ebx, dword [0x418281]
sub dword [0x421352], ebx
mov dword [0x418281], ebx
mov ecx, dword [ecx]
mov dword [0x41f93d], esi
mov edx, dword [0x41ef3e]
sub edx, dword [0x41e10d]
and dword [0x41974a], edx
mov dword [0x421721], edx
add ecx, dword [ebp - 0x2c]
mov dword [0x418281], ebx
mov ebx, dword [0x420d26]
add ebx, dword [0x41e10d]
add dword [0x41ef3e], ebx
mov dword [0x4210c5], ebx
mov dword [ebp - 0x40], ecx
mov edx, dword [0x421721]
and edx, dword [0x420d26]
sub dword [0x41fa78], edx
mov dword [0x41e10d], edx
mov dword [0x41e10d], ebx
mov dword [0x41fa78], ecx
mov edi, dword [0x41fa78]
and edi, dword [0x41f93d]
add dword [0x421721], edi
mov dword [0x41f93d], edi
mov dword [ebp - 0x34], 1
mov ebx, dword [0x4210c5]
and ebx, dword [0x420d26]
and dword [0x421352], ebx
mov dword [0x41ef3e], ebx
mov dword [0x41e10d], ebx
mov edx, dword [0x421352]
add edx, dword [0x421352]
and dword [0x41e10d], edx
mov dword [0x4210c5], edx
mov edx, dword [0x4210c5]
sub edx, dword [0x41f93d]
and dword [0x421721], edx
mov dword [0x41fa78], edx
mov dword [0x41e10d], ebx
mov dword [0x41f93d], ecx
add dword [ebp - 0x38], 4
mov esi, dword [0x418281]
sub esi, dword [0x421721]
and dword [0x418281], esi
mov dword [0x41ef3e], esi
add dword [ebp - 0x10], 2
mov dword [0x41ef3e], ecx
dec dword [ebp - 0x34]
mov dword [0x41ef3e], ebx
cmp dword [ebp - 0x34], 0
jne 0x4145b0
mov dword [0x420d26], ebx
mov edi, dword [0x41fa78]
sub edi, dword [0x41fa78]
add dword [0x41e10d], edi
mov dword [0x41974a], edi
mov esi, dword [0x420d26]
add esi, dword [0x41fa78]
add dword [0x41f93d], esi
mov dword [0x421721], esi
mov dword [0x41ef3e], ecx
mov eax, dword [ebp - 0x40]
mov edi, dword [0x41ef3e]
and edi, dword [0x4210c5]
add dword [0x41974a], edi
mov dword [0x41f93d], edi
mov ecx, dword [0x4210c5]
and ecx, dword [0x421352]
add dword [0x4210c5], ecx
mov dword [0x420d26], ecx
leave
ret 8
push ebp
mov ebp, esp
add esp, 0xffffffb8
mov edi, dword [0x41f93d]
add edi, dword [0x420d26]
add dword [0x41ef3e], edi
mov dword [0x4210c5], edi
mov ecx, dword [ebp + 8]
mov dword [0x41f93d], edx
mov dword [0x41fa78], edx
mov dword [0x41fa78], ebx
mov dword [0x41fa78], edx
mov dword [ebp - 0x2c], ecx
mov dword [0x4210c5], edx
add ecx, dword [ecx + 0x3c]
mov eax, dword [0x421352]
and eax, dword [0x41974a]
and dword [0x41ef3e], eax
mov dword [0x41e10d], eax
mov edi, dword [0x421352]
and edi, dword [0x41e10d]
add dword [0x41f93d], edi
mov dword [0x41f93d], edi
mov dword [0x420d26], edi
mov dword [0x41fa78], edx
mov ecx, dword [ecx + 0x78]
mov dword [0x41e10d], esi
mov dword [0x421352], esi
add ecx, dword [ebp - 0x2c]
mov edi, dword [0x41f93d]
add edi, dword [0x41f93d]
sub dword [0x41ef3e], edi
mov dword [0x418281], edi
mov dword [0x41974a], edx
mov dword [0x418281], edi
mov dword [0x421721], edi
mov eax, dword [ecx + 0x20]
mov esi, dword [0x421721]
sub esi, dword [0x41ef3e]
add dword [0x4210c5], esi
mov dword [0x41e10d], esi
mov dword [0x421721], ebx
add eax, dword [ebp - 0x2c]
mov edi, dword [0x418281]
sub edi, dword [0x421352]
add dword [0x418281], edi
mov dword [0x41ef3e], edi
mov dword [0x418281], esi
mov dword [ebp - 0x38], eax
mov dword [0x41fa78], eax
mov esi, dword [0x41ef3e]
sub esi, dword [0x41e10d]
add dword [0x41974a], esi
mov dword [0x421721], esi
mov dword [0x41f93d], eax
mov eax, dword [ecx + 0x24]
mov dword [0x421352], edx
mov ebx, dword [0x421721]
sub ebx, dword [0x418281]
sub dword [0x421352], ebx
mov dword [0x420d26], ebx
mov edi, dword [0x41974a]
sub edi, dword [0x41e10d]
and dword [0x421352], edi
mov dword [0x421352], edi
add eax, dword [ebp - 0x2c]
mov dword [0x420d26], edi
mov dword [0x41fa78], edi
mov dword [0x41fa78], esi
mov dword [0x41e10d], esi
mov dword [ebp - 0x30], eax
mov edi, dword [0x41fa78]
and edi, dword [0x41e10d]
sub dword [0x41e10d], edi
mov dword [0x4210c5], edi
mov eax, dword [0x421721]
add eax, dword [0x41e10d]
and dword [0x418281], eax
mov dword [0x41fa78], eax
mov esi, dword [0x418281]
sub esi, dword [0x41ef3e]
and dword [0x420d26], esi
mov dword [0x41f93d], esi
mov eax, dword [ecx + 0x1c]
mov dword [0x41974a], edx
mov esi, dword [0x41ef3e]
and esi, dword [0x41ef3e]
add dword [0x4210c5], esi
mov dword [0x41974a], esi
mov edx, dword [0x418281]
sub edx, dword [0x41974a]
add dword [0x4210c5], edx
mov dword [0x4210c5], edx
mov edi, dword [0x421352]
sub edi, dword [0x421721]
sub dword [0x41f93d], edi
mov dword [0x421352], edi
add eax, dword [ebp - 0x2c]
mov ebx, dword [0x41e10d]
sub ebx, dword [0x4210c5]
add dword [0x41fa78], ebx
mov dword [0x420d26], ebx
mov ebx, dword [0x41f93d]
sub ebx, dword [0x421352]
add dword [0x41ef3e], ebx
mov dword [0x41e10d], ebx
mov esi, dword [0x41974a]
add esi, dword [0x420d26]
and dword [0x420d26], esi
mov dword [0x41f93d], esi
mov esi, dword [0x4210c5]
add esi, dword [0x420d26]
add dword [0x420d26], esi
mov dword [0x421352], esi
mov dword [ebp - 0x24], eax
mov edx, dword [0x41ef3e]
add edx, dword [0x41fa78]
add dword [0x420d26], edx
mov dword [0x421721], edx
mov edi, dword [0x41974a]
sub edi, dword [0x41974a]
sub dword [0x4210c5], edi
mov dword [0x421721], edi
mov edx, dword [0x41ef3e]
sub edx, dword [0x418281]
add dword [0x420d26], edx
mov dword [0x41974a], edx
mov ebx, dword [0x421352]
add ebx, dword [0x41f93d]
add dword [0x41e10d], ebx
mov dword [0x41e10d], ebx
mov eax, dword [ecx + 0x18]
mov esi, dword [0x41974a]
sub esi, dword [0x420d26]
and dword [0x41e10d], esi
mov dword [0x420d26], esi
mov dword [ebp - 0x34], eax
mov ebx, dword [0x421352]
sub ebx, dword [0x41ef3e]
and dword [0x41ef3e], ebx
mov dword [0x41974a], ebx
mov dword [0x421721], eax
mov dword [0x418281], edx
mov esi, dword [0x41e10d]
sub esi, dword [0x41e10d]
add dword [0x41974a], esi
mov dword [0x41ef3e], esi
mov dword [ebp - 0x10], 0
mov dword [0x421352], eax
mov edx, dword [0x41e10d]
sub edx, dword [0x421352]
add dword [0x41f93d], edx
mov dword [0x418281], edx
mov dword [ebp - 0x40], 0
mov dword [0x41974a], ebx
mov dword [0x421721], ecx
mov dword [0x4210c5], edi
mov dword [0x418281], edx
mov ebx, dword [0x41fa78]
sub ebx, dword [0x421721]
and dword [0x41fa78], ebx
mov dword [0x41f93d], ebx
mov dword [0x420d26], ecx
mov dword [0x41f93d], edx
mov ecx, dword [ebp - 0x38]
mov dword [0x420d26], edi
mov ecx, dword [ecx]
mov eax, dword [0x4210c5]
and eax, dword [0x41fa78]
sub dword [0x418281], eax
mov dword [0x420d26], eax
mov edi, dword [0x4210c5]
sub edi, dword [0x41f93d]
and dword [0x4210c5], edi
mov dword [0x421352], edi
mov edx, dword [0x421352]
sub edx, dword [0x420d26]
add dword [0x41ef3e], edx
mov dword [0x41fa78], edx
add ecx, dword [ebp - 0x2c]
mov dword [0x421352], edx
mov esi, dword [0x41f93d]
sub esi, dword [0x418281]
add dword [0x41ef3e], esi
mov dword [0x421352], esi
mov dword [ebp - 0x20], ecx
mov dword [0x4210c5], edx
mov dword [0x41974a], edx
mov esi, dword [0x41974a]
and esi, dword [0x41974a]
sub dword [0x41974a], esi
mov dword [0x41ef3e], esi
xor esi, esi
mov ecx, dword [0x4210c5]
sub ecx, dword [0x41f93d]
and dword [0x41f93d], ecx
mov dword [0x418281], ecx
mov dword [0x41fa78], ecx
mov dword [0x41f93d], ecx
mov edi, dword [0x421721]
and edi, dword [0x41f93d]
add dword [0x41e10d], edi
mov dword [0x41ef3e], edi
mov ebx, dword [0x421721]
sub ebx, dword [0x421352]
sub dword [0x421352], ebx
mov dword [0x421352], ebx
mov dword [0x41fa78], ecx
mov edi, dword [0x41fa78]
and edi, dword [0x420d26]
sub dword [0x421721], edi
mov dword [0x421352], edi
mov dword [0x41fa78], edx
mov ecx, dword [ebp - 0x20]
mov ebx, dword [0x41ef3e]
sub ebx, dword [0x41974a]
and dword [0x418281], ebx
mov dword [0x420d26], ebx
mov ecx, dword [ecx]
mov eax, dword [0x420d26]
add eax, dword [0x41974a]
sub dword [0x4210c5], eax
mov dword [0x4210c5], eax
mov dword [0x421721], ebx
mov ebx, dword [0x420d26]
and ebx, dword [0x41974a]
sub dword [0x41f93d], ebx
mov dword [0x41fa78], ebx
inc dword [ebp - 0x20]
mov dword [0x41fa78], ebx
mov edi, dword [0x41fa78]
add edi, dword [0x421721]
add dword [0x4210c5], edi
mov dword [0x41e10d], edi
mov dword [0x41fa78], edi
and ecx, 0xff
mov dword [0x41f93d], eax
mov dword [0x41f93d], eax
mov edi, dword [0x420d26]
add edi, dword [0x41fa78]
add dword [0x41fa78], edi
mov dword [0x420d26], edi
cmp ecx, 0
je 0x411c92
mov dword [0x4210c5], edx
rol esi, 7
mov dword [0x4210c5], ebx
mov dword [0x421352], eax
mov dword [0x418281], ebx
add esi, ecx
mov dword [0x421721], ecx
mov ecx, dword [0x421352]
sub ecx, dword [0x421721]
and dword [0x418281], ecx
mov dword [0x418281], ecx
mov dword [0x41e10d], ecx
mov edi, dword [0x421721]
and edi, dword [0x421721]
and dword [0x41f93d], edi
mov dword [0x421721], edi
xor esi, 1
mov edi, dword [0x41f93d]
sub edi, dword [0x421721]
and dword [0x420d26], edi
mov dword [0x421352], edi
mov dword [0x41e10d], eax
mov dword [0x421721], edx
mov dword [0x41fa78], ebx
jmp 0x4146ae