Function at 0x49ed44
Capabilities:
Encrypt data using rc4 ksa

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffff98
push ebx
push esi
push edi
mov dword [ebp - 0xc], ecx
mov dword [ebp - 8], edx
mov dword [ebp - 4], eax
mov eax, dword [ebp + 0x10]
push eax
lea eax, [ebp - 0x68]
push eax
mov ecx, dword [ebp + 0x14]
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp - 8]
call fcn.0049b8d4
mov eax, dword [ebp - 4]
cmp byte [eax + 0xf0], 0
jne 0x49f425
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x50]
mov edx, dword [ebp - 4]
sub eax, dword [edx + 0x48]
je 0x49f435
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x54]
mov edx, dword [ebp - 4]
sub eax, dword [edx + 0x4c]
je 0x49f435
mov eax, dword [ebp + 0x14]
sub eax, dword [ebp - 8]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp + 0x10]
sub eax, dword [ebp - 0xc]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x2c]
cdq
xor eax, edx
sub eax, edx
mov ecx, eax
mov eax, dword [ebp - 0x30]
cdq
xor eax, edx
sub eax, edx
cmp ecx, eax
jne 0x49edeb
mov eax, dword [ebp + 0x14]
push eax
mov eax, dword [ebp + 0x10]
push eax
mov eax, dword [ebp + 0xc]
push eax
mov al, byte [ebp + 8]
push eax
mov ecx, dword [ebp - 0xc]
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 4]
call fcn.0049e458
jmp 0x49f435
cmp dword [ebp - 0x2c], 0
jne 0x49ee4e
cmp dword [ebp - 0x30], 0
jle 0x49ee10
mov eax, dword [ebp + 0x10]
dec eax
push eax
mov eax, dword [ebp + 0xc]
push eax
mov ecx, dword [ebp - 0xc]
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 4]
call fcn.0049dd5c
jmp 0x49ee2d
cmp dword [ebp - 0x30], 0
jge 0x49ee2d
mov eax, dword [ebp - 0xc]
push eax
mov eax, dword [ebp + 0xc]
push eax
mov ecx, dword [ebp + 0x10]
inc ecx
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 4]
call fcn.0049dd5c
cmp byte [ebp + 8], 0
je 0x49f435
mov eax, dword [ebp + 0xc]
push eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ebp + 0x14]
mov eax, dword [ebp - 4]
call fcn.0049d064
jmp 0x49f435
cmp dword [ebp - 0x30], 0
jne 0x49eeb1
cmp dword [ebp - 0x2c], 0
jle 0x49ee73
mov eax, dword [ebp + 0x14]
dec eax
push eax
mov eax, dword [ebp + 0xc]
push eax
mov ecx, dword [ebp - 0xc]
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 4]
call fcn.0049db30
jmp 0x49ee90
cmp dword [ebp - 0x2c], 0
jge 0x49ee90
mov eax, dword [ebp - 8]
push eax
mov eax, dword [ebp + 0xc]
push eax
mov edx, dword [ebp + 0x14]
inc edx
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 4]
call fcn.0049db30
cmp byte [ebp + 8], 0
je 0x49f435
mov eax, dword [ebp + 0xc]
push eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ebp + 0x14]
mov eax, dword [ebp - 4]
call fcn.0049d064
jmp 0x49f435
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x48]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x50]
dec eax
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x4c]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x54]
dec eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x2c], 0
jle 0x49eefe
mov eax, dword [ebp - 8]
cmp eax, dword [ebp - 0x14]
jg 0x49f435
mov eax, dword [ebp + 0x14]
cmp eax, dword [ebp - 0x10]
jl 0x49f435
mov dword [ebp - 0x24], 1
jmp 0x49ef37
mov eax, dword [ebp + 0x14]
cmp eax, dword [ebp - 0x14]
jg 0x49f435
mov eax, dword [ebp - 8]
cmp eax, dword [ebp - 0x10]
jl 0x49f435
mov dword [ebp - 0x24], 0xffffffff
neg dword [ebp - 8]
neg dword [ebp + 0x14]
neg dword [ebp - 0x2c]
neg dword [ebp - 0x10]
neg dword [ebp - 0x14]
lea edx, [ebp - 0x14]
lea eax, [ebp - 0x10]
call fcn.004905d4
cmp dword [ebp - 0x30], 0
jle 0x49ef5e
mov eax, dword [ebp - 0xc]
cmp eax, dword [ebp - 0x1c]
jg 0x49f435
mov eax, dword [ebp + 0x10]
cmp eax, dword [ebp - 0x18]
jl 0x49f435
mov dword [ebp - 0x28], 1
jmp 0x49ef97
mov eax, dword [ebp + 0x10]
cmp eax, dword [ebp - 0x1c]
jg 0x49f435
mov eax, dword [ebp - 0xc]
cmp eax, dword [ebp - 0x18]
jl 0x49f435
mov dword [ebp - 0x28], 0xffffffff
neg dword [ebp - 0xc]
neg dword [ebp + 0x10]
neg dword [ebp - 0x30]
neg dword [ebp - 0x18]
neg dword [ebp - 0x1c]
lea edx, [ebp - 0x1c]
lea eax, [ebp - 0x18]
call fcn.004905d4
mov eax, dword [ebp - 0x2c]
cmp eax, dword [ebp - 0x30]
jge 0x49eff5
lea edx, [ebp - 0xc]
lea eax, [ebp - 8]
call fcn.004905d4
lea edx, [ebp + 0x10]
lea eax, [ebp + 0x14]
call fcn.004905d4
lea edx, [ebp - 0x30]
lea eax, [ebp - 0x2c]
call fcn.004905d4
lea edx, [ebp - 0x18]
lea eax, [ebp - 0x10]
call fcn.004905d4
lea edx, [ebp - 0x1c]
lea eax, [ebp - 0x14]
call fcn.004905d4
lea edx, [ebp - 0x28]
lea eax, [ebp - 0x24]
call fcn.004905d4
lea eax, [ebp - 0x38]
mov dword [ebp - 0x44], eax
lea eax, [ebp - 0x34]
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x20], eax
jmp 0x49f00d
lea eax, [ebp - 0x34]
mov dword [ebp - 0x44], eax
lea eax, [ebp - 0x38]
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x34]
imul dword [ebp - 0x28]
mov dword [ebp - 0x20], eax
xor eax, eax
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x30]
shl eax, 0x10
cdq
idiv dword [ebp - 0x2c]
mov word [ebp - 0x4c], ax
mov word [ebp - 0x4a], 0
mov eax, dword [ebp - 8]
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x38], eax
mov byte [ebp - 0x3d], 1
mov byte [ebp - 0x3e], 0
mov eax, dword [ebp - 4]
movzx eax, byte [eax + 0x7a]
mov edx, dword [0x4d45d4]
mov eax, dword [edx + eax*4]
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0xc]
cmp eax, dword [ebp - 0x18]
jge 0x49f1dd
mov eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0xc]
mov edi, eax
shl edi, 0x10
mov eax, edi
sub eax, 0x10000
mov dword [ebp - 0x3c], eax
movzx ebx, word [ebp - 0x4c]
mov eax, edi
cdq
idiv ebx
test edx, edx
jle 0x49f085
mov eax, edi
cdq
idiv ebx
inc eax
mov edi, eax
jmp 0x49f08c
mov eax, edi
cdq
idiv ebx
mov edi, eax
mov edx, dword [ebp + 0x14]
inc edx
mov eax, dword [ebp - 0x34]
add eax, edi
call fcn.0045e808
mov dword [ebp - 0x34], eax
mov eax, edi
imul word [ebp - 0x4c]
mov word [ebp - 0x4a], ax
mov eax, dword [ebp - 0x3c]
cdq
idiv ebx
test edx, edx
jle 0x49f0bd
mov eax, dword [ebp - 0x3c]
cdq
idiv ebx
inc eax
mov dword [ebp - 0x3c], eax
jmp 0x49f0c6
mov eax, dword [ebp - 0x3c]
cdq
idiv ebx
mov dword [ebp - 0x3c], eax
sub edi, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x34]
cmp eax, dword [ebp - 0x14]
jle 0x49f0e3
mov eax, dword [ebp - 0x14]
add eax, edi
cmp eax, dword [ebp - 0x34]
jl 0x49f435
mov byte [ebp - 0x3e], 1
mov eax, dword [ebp - 0x34]
cmp eax, dword [ebp - 0x10]
setge al
or al, byte [ebp - 0x3e]
je 0x49f1dd
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x3c], eax
mov bx, word [ebp - 0x4a]
sub bx, word [ebp - 0x4c]
mov eax, dword [ebp - 0x34]
sub eax, edi
mov ecx, dword [ebp - 0x14]
mov edx, dword [ebp - 0x10]
call fcn.0049062c
mov esi, eax
cmp byte [ebp - 0x3e], 0
je 0x49f138
mov ax, word [ebp - 0x34]
sub ax, word [ebp - 0x14]
dec eax
imul word [ebp - 0x4c]
sub bx, ax
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x28], 0xffffffff
jne 0x49f141
neg dword [ebp - 0x38]
cmp dword [ebp - 0x24], 0xffffffff
jne 0x49f14c
neg dword [ebp - 0x34]
neg esi
xor eax, eax
push ebp
push 0x49f1b0
push dword fs:[eax]
mov dword fs:[eax], esp
cmp esi, dword [ebp - 0x34]
je 0x49f19d
mov eax, dword [ebp - 0x24]
neg eax
add dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x48]
mov eax, dword [eax]
mov edx, dword [ebp - 4]
imul dword [edx + 0x34]
mov edx, dword [ebp - 0x44]
add eax, dword [edx]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x40]
lea edx, [edx + eax*4]
movzx eax, bx
shr eax, 8
xor ecx, ecx
mov cl, byte [eax + 0x4f7454]
mov eax, dword [ebp + 0xc]
call dword [ebp - 0x58]
sub bx, word [ebp - 0x4c]
cmp esi, dword [ebp - 0x34]
jne 0x49f15f
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x49f1b7
call fcn.00490f50
ret
cmp byte [ebp - 0x3d], 0
je 0x49f22b
mov eax, dword [ebp - 8]
cmp eax, dword [ebp - 0x10]
jge 0x49f22b
mov edi, dword [ebp - 0x10]
sub edi, dword [ebp - 8]
movzx eax, word [ebp - 0x4c]
imul edi, eax
mov eax, edi
test eax, eax
jns 0x49f203
add eax, 0xffff
sar eax, 0x10
add dword [ebp - 0x38], eax
mov word [ebp - 0x4a], di
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x38]
cmp eax, dword [ebp - 0x1c]
jg 0x49f435
mov eax, dword [ebp - 0x38]
cmp eax, dword [ebp - 0x1c]
jne 0x49f22b
mov byte [ebp - 0x3e], 1
mov esi, dword [ebp + 0x14]
xor eax, eax
mov byte [ebp - 0x3d], 0
mov edx, dword [ebp + 0x10]
cmp edx, dword [ebp - 0x1c]
jle 0x49f2a6
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0xc]
mov edi, eax
shl edi, 0x10
movzx ecx, word [ebp - 0x4c]
mov eax, edi
cdq
idiv ecx
mov esi, eax
add esi, dword [ebp - 8]
mov eax, edi
cdq
idiv ecx
test edx, edx
jg 0x49f25f
dec esi
cmp esi, dword [ebp - 0x14]
jge 0x49f2a4
add edi, 0x10000
mov dword [ebp - 0x3c], edi
mov eax, dword [ebp - 0x3c]
cdq
idiv ecx
test edx, edx
jle 0x49f286
mov eax, dword [ebp - 0x3c]
cdq
idiv ecx
add eax, dword [ebp - 8]
inc eax
mov dword [ebp - 0x3c], eax
jmp 0x49f292
mov eax, dword [ebp - 0x3c]
cdq
idiv ecx
add eax, dword [ebp - 8]
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x3c]
cmp eax, dword [ebp - 0x14]
jle 0x49f2a0
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x3c], eax
mov byte [ebp - 0x3d], 1
mov al, 1
cmp esi, dword [ebp - 0x14]
jle 0x49f2b0
mov esi, dword [ebp - 0x14]
mov al, 1
inc esi
cmp dword [ebp - 0x28], 0xffffffff
jne 0x49f2ba
neg dword [ebp - 0x38]
cmp dword [ebp - 0x24], 0xffffffff
jne 0x49f2c8
neg dword [ebp - 0x34]
neg esi
neg dword [ebp - 0x3c]
cmp byte [ebp - 0x3e], 0
jne 0x49f3a6
xor edx, edx
push ebp
push 0x49f39f
push dword fs:[edx]
mov dword fs:[edx], esp
or al, byte [ebp + 8]
jne 0x49f2f9
cmp byte [ebp - 0x3d], 0
jne 0x49f2f9
cmp esi, dword [ebp - 0x34]
jle 0x49f2f3
dec esi
jmp 0x49f2f9
cmp esi, dword [ebp - 0x34]
jge 0x49f2f9
inc esi
cmp esi, dword [ebp - 0x34]
je 0x49f38c
movzx ebx, word [ebp - 0x4a]
shr ebx, 8
mov eax, dword [ebp - 0x48]
mov eax, dword [eax]
mov edx, dword [ebp - 4]
imul dword [edx + 0x34]
mov edx, dword [ebp - 0x44]
add eax, dword [edx]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x40]
lea eax, [edx + eax*4]
mov dword [ebp - 0x54], eax
mov eax, ebx
xor al, 0xff
and eax, 0xff
xor ecx, ecx
mov cl, byte [eax + 0x4f7454]
mov edx, dword [ebp - 0x54]
mov eax, dword [ebp + 0xc]
call dword [ebp - 0x58]
mov eax, dword [ebp - 0x20]
shl eax, 2
add dword [ebp - 0x54], eax
xor eax, eax
mov al, bl
xor ecx, ecx
mov cl, byte [eax + 0x4f7454]
mov edx, dword [ebp - 0x54]
mov eax, dword [ebp + 0xc]
call dword [ebp - 0x58]
mov ax, word [ebp - 0x4a]
mov word [ebp - 0x4e], ax
mov ax, word [ebp - 0x4c]
add word [ebp - 0x4a], ax
mov ax, word [ebp - 0x4a]
cmp ax, word [ebp - 0x4e]
ja 0x49f37d
mov eax, dword [ebp - 0x28]
add dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x24]
add dword [ebp - 0x34], eax
cmp esi, dword [ebp - 0x34]
jne 0x49f302
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x49f3a6
call fcn.00490f50
ret
cmp byte [ebp - 0x3d], 0
je 0x49f425
xor eax, eax
push ebp
push 0x49f41e
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 0x34]
cmp eax, dword [ebp - 0x3c]
je 0x49f40b
mov eax, dword [ebp - 0x48]
mov eax, dword [eax]
mov edx, dword [ebp - 4]
imul dword [edx + 0x34]
mov edx, dword [ebp - 0x44]
add eax, dword [edx]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x40]
lea edx, [edx + eax*4]
movzx eax, word [ebp - 0x4a]
shr eax, 8
xor eax, 0xff
xor ecx, ecx
mov cl, byte [eax + 0x4f7454]
mov eax, dword [ebp + 0xc]
call dword [ebp - 0x58]
mov ax, word [ebp - 0x4c]
add word [ebp - 0x4a], ax
mov eax, dword [ebp - 0x24]
add dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x34]
cmp eax, dword [ebp - 0x3c]
jne 0x49f3c2
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x49f425
call fcn.00490f50
ret
lea edx, [ebp - 0x68]
mov ecx, 0x40000002
mov eax, dword [ebp - 4]
mov ebx, dword [eax]
call dword [ebx + 0x44]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x10