Function at 0x5046c50
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub esp, 0x8c
mov eax, dword [0x53f3c3c]
xor eax, esp
mov dword [esp + 0x88], eax
push ebx
mov ebx, dword [esp + 0x94]
push ebp
movzx ebp, byte [esp + 0xa4]
push esi
push edi
movzx edi, byte [esp + 0xb0]
push edi
push ebp
lea eax, [esp + 0x20]
push str.rxtxCmd.band_param__d_.freq_param__d_.rxtx_freq_param.specify_tx_pwr_cmd.pwr_step_num
push eax
call dword [sym.imp.MSVCR90.dll_sprintf]
mov ecx, ebp
imul ecx, ecx, 0x356
mov edx, edi
imul edx, edx, 0x6a
lea eax, [ecx + edx]
mov ecx, dword [esp + 0xb8]
movzx edx, byte [ecx + 8]
mov ecx, dword [str.ERf_NSFT_List_RxTx_V3_Cmd]
push edx
push ecx
mov dword [esp + 0x2c], eax
lea edx, [esp + 0x30]
push edx
add eax, 0x64
push eax
mov eax, dword [esp + 0xc4]
push eax
push ebx
call fcn.0503f000
add esp, 0x28
xor al, al
mov byte [esp + 0x13], al
jmp 0x50468e4
mov al, byte [esp + 0x13]
mov ecx, dword [esp + 0xa8]
cmp al, byte [ecx + 8]
jae 0x50469e5
movzx esi, al
push esi
push edi
push ebp
lea edx, [esp + 0x24]
push str.rxtxCmd.band_param__d_.freq_param__d_.rxtx_freq_param.specify_tx_pwr_cmd.pwr_step_tx_power__d_
push edx
call dword [sym.imp.MSVCR90.dll_sprintf]
mov eax, dword [esp + 0xbc]
movzx ecx, word [eax + esi*2 + 0xa]
mov edx, dword [str.ERf_NSFT_List_RxTx_V3_Cmd]
push ecx
push edx
mov ecx, ebp
imul ecx, ecx, 0x1ab
mov edx, edi
imul edx, edx, 0x35
add ecx, esi
lea eax, [esp + 0x34]
push eax
add edx, ecx
mov ecx, dword [esp + 0xc4]
lea eax, [edx + edx + 0x66]
push eax
push ecx
push ebx
call fcn.0503f040
push esi
push edi
push ebp
lea edx, [esp + 0x50]
push str.rxtxCmd.band_param__d_.freq_param__d_.rxtx_freq_param.specify_tx_pwr_cmd.pwr_step_VRB_strt__d_
push edx
call dword [sym.imp.MSVCR90.dll_sprintf]
mov eax, dword [esp + 0xe8]
movzx ecx, byte [esi + eax + 0x1a]
mov edx, dword [str.ERf_NSFT_List_RxTx_V3_Cmd]
add esp, 0x40
push ecx
mov ecx, dword [esp + 0x18]
push edx
lea eax, [esp + 0x20]
push eax
mov eax, dword [esp + 0xb0]
lea edx, [esi + ecx + 0x76]
push edx
push eax
push ebx
call fcn.0503f000
push esi
push edi
push ebp
lea ecx, [esp + 0x3c]
push str.rxtxCmd.band_param__d_.freq_param__d_.rxtx_freq_param.specify_tx_pwr_cmd.pwr_step_VRB_len__d_
push ecx
call dword [sym.imp.MSVCR90.dll_sprintf]
mov edx, dword [esp + 0xd4]
movzx eax, byte [esi + edx + 0x22]
mov ecx, dword [str.ERf_NSFT_List_RxTx_V3_Cmd]
push eax
mov eax, dword [esp + 0x44]
push ecx
lea edx, [esp + 0x4c]
push edx
mov edx, dword [esp + 0xdc]
lea ecx, [esi + eax + 0x7e]
push ecx
push edx
push ebx
call fcn.0503f000
mov al, byte [esp + 0x57]
inc al
add esp, 0x44
mov byte [esp + 0x13], al
cmp al, 8
jb 0x50468e0
mov ecx, dword [esp + 0x98]
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.0520b902
add esp, 0x8c
ret
sub esp, 0x84
mov eax, dword [0x53f3c3c]
xor eax, esp
mov dword [esp + 0x80], eax
push ebx
mov ebx, dword [esp + 0x8c]
push ebp
push esi
movzx esi, byte [esp + 0xa4]
push edi
movzx edi, byte [esp + 0xa4]
push esi
push edi
lea eax, [esp + 0x18]
push str.rxtxCmd.band_param__d_.freq_param__d_.rxtx_freq_param.specify_pwr_step_cmd.start_power
push eax
call dword [sym.imp.MSVCR90.dll_sprintf]
mov eax, dword [esp + 0xb0]
mov ecx, edi
imul ecx, ecx, 0x356
mov edx, esi
imul edx, edx, 0x6a
lea ebp, [ecx + edx]
movzx ecx, word [eax + 8]
mov edx, dword [str.ERf_NSFT_List_RxTx_V3_Cmd]
push ecx
push edx
mov edx, dword [esp + 0xb4]
lea eax, [esp + 0x28]
push eax
lea ecx, [ebp + 0x64]
push ecx
push edx
push ebx
call fcn.0503f040
push esi
push edi
lea eax, [esp + 0x40]
push str.rxtxCmd.band_param__d_.freq_param__d_.rxtx_freq_param.specify_pwr_step_cmd.pwr_step_value
push eax
call dword [sym.imp.MSVCR90.dll_sprintf]
mov ecx, dword [esp + 0xd8]
movzx edx, word [ecx + 0xa]
mov eax, dword [str.ERf_NSFT_List_RxTx_V3_Cmd]
push edx
push eax
mov eax, dword [esp + 0xdc]
lea ecx, [esp + 0x50]
push ecx
lea edx, [ebp + 0x66]
push edx
push eax
push ebx
call fcn.0503f040
add esp, 0x50
push esi
push edi
lea ecx, [esp + 0x18]
push str.rxtxCmd.band_param__d_.freq_param__d_.rxtx_freq_param.specify_pwr_step_cmd.pwr_step_num
push ecx
call dword [sym.imp.MSVCR90.dll_sprintf]
mov edx, dword [esp + 0xb0]
movzx eax, byte [edx + 0xc]
mov ecx, dword [str.ERf_NSFT_List_RxTx_V3_Cmd]
push eax
push ecx
mov ecx, dword [esp + 0xb4]
lea edx, [esp + 0x28]
push edx
lea eax, [ebp + 0x68]
push eax
push ecx
push ebx
call fcn.0503f000
push esi
push edi
lea edx, [esp + 0x40]
push str.rxtxCmd.band_param__d_.freq_param__d_.rxtx_freq_param.specify_pwr_step_cmd.pwr_step_VRB_strt_p1
push edx
call dword [sym.imp.MSVCR90.dll_sprintf]
mov eax, dword [esp + 0xd8]
movzx ecx, byte [eax + 0xd]
mov edx, dword [str.ERf_NSFT_List_RxTx_V3_Cmd]
push ecx
push edx
mov edx, dword [esp + 0xdc]
lea eax, [esp + 0x50]
push eax
lea ecx, [ebp + 0x69]
push ecx
push edx
push ebx
call fcn.0503f000
add esp, 0x50
push esi
push edi
lea eax, [esp + 0x18]
push str.rxtxCmd.band_param__d_.freq_param__d_.rxtx_freq_param.specify_pwr_step_cmd.pwr_step_VRB_len_p1
push eax
call dword [sym.imp.MSVCR90.dll_sprintf]
mov ecx, dword [esp + 0xb0]
movzx edx, byte [ecx + 0xe]
mov eax, dword [str.ERf_NSFT_List_RxTx_V3_Cmd]
push edx
push eax
mov eax, dword [esp + 0xb4]
lea ecx, [esp + 0x28]
push ecx
lea edx, [ebp + 0x6a]
push edx
push eax
push ebx
call fcn.0503f000
push esi
push edi
lea ecx, [esp + 0x40]
push str.rxtxCmd.band_param__d_.freq_param__d_.rxtx_freq_param.specify_pwr_step_cmd.pwr_step_VRB_strt_p2
push ecx
call dword [sym.imp.MSVCR90.dll_sprintf]
mov edx, dword [esp + 0xd8]
movzx eax, byte [edx + 0xf]
mov ecx, dword [str.ERf_NSFT_List_RxTx_V3_Cmd]
push eax
push ecx
mov ecx, dword [esp + 0xdc]
lea edx, [esp + 0x50]
push edx
lea eax, [ebp + 0x6b]
push eax
push ecx
push ebx
call fcn.0503f000
add esp, 0x50
push esi
push edi
lea edx, [esp + 0x18]
push str.rxtxCmd.band_param__d_.freq_param__d_.rxtx_freq_param.specify_pwr_step_cmd.pwr_step_VRB_len_p2
push edx
call dword [sym.imp.MSVCR90.dll_sprintf]
mov eax, dword [esp + 0xb0]
movzx ecx, byte [eax + 0x10]
mov edx, dword [str.ERf_NSFT_List_RxTx_V3_Cmd]
push ecx
push edx
mov edx, dword [esp + 0xb4]
lea eax, [esp + 0x28]
push eax
lea ecx, [ebp + 0x6c]
push ecx
push edx
push ebx
call fcn.0503f000
push esi
push edi
lea eax, [esp + 0x40]
push str.rxtxCmd.band_param__d_.freq_param__d_.rxtx_freq_param.specify_pwr_step_cmd.step_for_change_tx_VRB
push eax
call dword [sym.imp.MSVCR90.dll_sprintf]
mov ecx, dword [esp + 0xd8]
movzx edx, byte [ecx + 0x11]
mov eax, dword [str.ERf_NSFT_List_RxTx_V3_Cmd]
push edx
push eax
lea ecx, [esp + 0x50]
push ecx
add ebp, 0x6d
mov edx, dword [esp + 0xe0]
push ebp
push edx
push ebx
call fcn.0503f000
mov ecx, dword [esp + 0xe0]
add esp, 0x50
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.0520b902
add esp, 0x84
ret
mov eax, dword [esp + 0xc]
cmp byte [eax + 6], 0
mov dword [esp + 0xc], eax
jne 0x5046c63
jmp 0x5046850
jmp 0x5046a00