Function at 0x449f30
Capabilities:
Encode data using xor
Encrypt data using rc4 ksa

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x11c
mov eax, dword [0x520628]
xor eax, ebp
mov dword [ebp - 4], eax
cmp dword [ebp + 0x10], 0
mov eax, dword [ebp + 0xc]
push ebx
mov ebx, dword [ebp + 8]
push esi
mov dword [ebp - 0x110], edx
mov dword [ebp - 0x10c], eax
mov esi, ecx
je 0x44a281
xor ecx, ecx
xor eax, eax
push edi
test ebx, ebx
jle 0x449f7b
lea esp, [esp]
movzx edi, byte [edx + eax]
inc eax
add ecx, edi
cmp eax, ebx
jl 0x449f70
mov eax, 0x837765f1
imul ecx
add edx, ecx
sar edx, 9
mov eax, edx
shr eax, 0x1f
add eax, edx
mov dl, 0x1b
imul dl
add al, cl
mov cl, bl
sub cl, 0x38
xor al, cl
mov byte [esi + 7], al
xor edi, edi
call fcn.00472151
call fcn.00472151
mov byte [esi + edi], al
inc edi
cmp edi, 7
jl 0x449fa0
mov ecx, 1
cmp ebx, ecx
jle 0x449fd3
mov eax, dword [ebp - 0x110]
inc eax
or edi, 0xffffffff
mov dl, byte [edi + eax]
xor dl, cl
xor byte [eax], dl
inc ecx
inc eax
cmp ecx, ebx
jl 0x449fc6
xor eax, eax
jmp 0x449fe0
mov byte [ebp + eax - 0x104], al
inc eax
cmp eax, 0x100
jl 0x449fe0
lea ecx, [ebp - 0x104]
mov eax, 1
sub eax, ecx
mov dword [ebp - 0x118], eax
mov eax, 2
sub eax, ecx
mov dword [ebp - 0x11c], eax
mov eax, 3
xor edx, edx
xor edi, edi
sub eax, ecx
mov dword [ebp - 0x114], eax
mov cl, byte [ebp + edi - 0x104]
lea eax, [ebp + edi - 0x104]
mov byte [ebp - 0x105], cl
movzx ecx, cl
mov ebx, edi
and ebx, 7
movzx ebx, byte [ebx + esi]
add ebx, edx
add ecx, ebx
mov ebx, dword [ebp - 0x118]
and ecx, 0xff
movzx edx, byte [ebp + ecx - 0x104]
mov byte [eax], dl
movzx edx, byte [ebp - 0x105]
mov byte [ebp + ecx - 0x104], dl
mov dl, byte [eax + 1]
add ebx, eax
and ebx, 7
movzx ebx, byte [ebx + esi]
add ebx, ecx
mov byte [ebp - 0x105], dl
movzx edx, dl
add edx, ebx
mov ebx, dword [ebp - 0x11c]
and edx, 0xff
movzx ecx, byte [ebp + edx - 0x104]
mov byte [eax + 1], cl
movzx ecx, byte [ebp - 0x105]
mov byte [ebp + edx - 0x104], cl
mov cl, byte [eax + 2]
add ebx, eax
and ebx, 7
movzx ebx, byte [ebx + esi]
add ebx, edx
mov byte [ebp - 0x105], cl
movzx ecx, cl
add ecx, ebx
mov ebx, dword [ebp - 0x114]
and ecx, 0xff
movzx edx, byte [ebp + ecx - 0x104]
mov byte [eax + 2], dl
movzx edx, byte [ebp - 0x105]
mov byte [ebp + ecx - 0x104], dl
mov dl, byte [eax + 3]
add ebx, eax
and ebx, 7
movzx ebx, byte [ebx + esi]
mov byte [ebp - 0x105], dl
movzx edx, dl
add ebx, ecx
add edx, ebx
and edx, 0xff
movzx ecx, byte [ebp + edx - 0x104]
mov byte [eax + 3], cl
mov al, byte [ebp - 0x105]
add edi, 4
cmp edi, 0x100
mov byte [ebp + edx - 0x104], al
jl 0x44a020
movzx ecx, byte [esi + 7]
xor byte [esi], cl
movzx edx, byte [esi + 7]
xor byte [esi + 1], dl
movzx eax, byte [esi + 7]
xor byte [esi + 2], al
movzx ecx, byte [esi + 7]
xor byte [esi + 3], cl
movzx edx, byte [esi + 7]
xor byte [esi + 4], dl
movzx eax, byte [esi + 7]
xor byte [esi + 5], al
movzx ecx, byte [esi + 7]
xor byte [esi + 6], cl
mov esi, dword [ebp - 0x110]
xor eax, eax
xor edi, edi
xor edx, edx
cmp dword [ebp + 8], eax
jle 0x44a1cc
jmp 0x44a170
inc edi
and edi, 0xff
mov cl, byte [ebp + edi - 0x104]
movzx ebx, cl
add ebx, edx
and ebx, 0xff
mov edx, ebx
mov dword [ebp - 0x114], edx
mov dl, byte [ebp + edx - 0x104]
mov byte [ebp + edi - 0x104], dl
mov edx, ebx
mov byte [ebp + edx - 0x104], cl
movzx ebx, byte [ebp + edi - 0x104]
movzx ecx, cl
add ebx, ecx
and ebx, 0xff
movzx ecx, byte [ebp + ebx - 0x104]
xor byte [esi + eax], cl
inc eax
cmp eax, dword [ebp + 8]
jl 0x44a170
mov ecx, dword [ebp - 0x10c]
push 7
xor eax, eax
call fcn.00448e20
mov eax, dword [ebp + 8]
cdq
sub eax, edx
sar eax, 1
add esp, 4
xor ecx, ecx
test eax, eax
jle 0x44a203
lea edi, [esi + eax]
nop
mov bl, byte [edi + ecx]
mov dl, byte [esi + ecx]
mov byte [esi + ecx], bl
mov byte [edi + ecx], dl
add ecx, 2
cmp ecx, eax
jl 0x44a1f0
mov edx, dword [ebp - 0x10c]
mov al, byte [edx + 8]
xor byte [esi], al
mov ebx, 1
cmp dword [ebp + 8], ebx
jle 0x44a26b
lea ecx, [esi + 1]
or esi, 0xffffffff
mov edi, edi
movzx edx, byte [ecx + esi]
xor byte [ecx], dl
mov eax, ebx
and eax, reloc.WS2_32.dll_ntohs
jns 0x44a234
dec eax
or eax, 0xfffffff0
inc eax
mov edx, dword [ebp - 0x10c]
mov al, byte [eax + edx + 8]
xor al, byte [ecx]
mov edi, 0x14
mov byte [ecx], al
mov byte [ebp - 0x105], al
mov eax, ebx
cdq
idiv edi
mov eax, dword [ebp + 0x10]
inc ecx
movzx edx, byte [edx + eax]
xor dl, byte [ebp - 0x105]
xor dl, bl
mov byte [ecx - 1], dl
inc ebx
cmp ebx, dword [ebp + 8]
jl 0x44a220
mov eax, dword [ebp - 0x10c]
push 0
mov ecx, 7
call fcn.00448e70
add esp, 4
pop edi
mov ecx, dword [ebp - 4]
pop esi
xor ecx, ebp
pop ebx
call fcn.0046e186
mov esp, ebp
pop ebp
ret