Function at 0x4a1d88
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0x15
push 0
push 0
dec ecx
jne 0x4a1d90
push ecx
push ebx
push esi
push edi
mov dword [ebp - 4], eax
xor eax, eax
push ebp
push 0x4a26a4
push dword fs:[eax]
mov dword fs:[eax], esp
mov byte [ebp - 0xe], 0x52
lea eax, [ebp - 6]
push eax
mov al, byte [ebp - 0xe]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x304]
push eax
call sub.SCReader.dll_MF_Request
test eax, eax
je 0x4a2679
mov eax, dword [ebp - 4]
add eax, 0x324
push eax
push 0
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x304]
push eax
call sub.SCReader.dll_MF_Anticoll
test eax, eax
jne 0x4a1dff
mov eax, dword [ebp - 4]
mov dword [eax + 0x308], 0x407
jmp 0x4a2679
lea eax, [ebp - 0xd]
push eax
mov eax, dword [ebp - 4]
add eax, 0x324
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x304]
push eax
call sub.SCReader.dll_MF_Select
test eax, eax
jne 0x4a1e31
mov eax, dword [ebp - 4]
mov dword [eax + 0x308], 0x408
jmp 0x4a2679
mov byte [ebp - 0xe], 0x60
mov byte [ebp - 0xf], 4
mov eax, dword [ebp - 4]
cmp dword [eax + 0x320], 0xb
jne 0x4a1e5a
lea ecx, [ebp - 0x14]
mov edx, dword [0x4b1968]
mov edx, dword [edx]
mov eax, dword [ebp - 4]
call fcn.004a28b0
jmp 0x4a1e6d
lea ecx, [ebp - 0x14]
mov edx, dword [0x4b1714]
mov edx, dword [edx]
mov eax, dword [ebp - 4]
call fcn.004a28b0
mov bl, 6
lea eax, [ebp - 0xc]
mov byte [eax], 0xff
inc eax
dec bl
jne 0x4a1e72
mov eax, dword [ebp - 0x14]
call fcn.00404310
test al, al
jbe 0x4a1ea2
mov byte [ebp - 0x29], al
mov bl, 1
lea eax, [ebp - 0xc]
xor edx, edx
mov dl, bl
mov ecx, dword [ebp - 0x14]
mov dl, byte [ecx + edx - 1]
mov byte [eax], dl
inc ebx
inc eax
dec byte [ebp - 0x29]
jne 0x4a1e8e
mov bl, 0x10
lea eax, [ebp - 0x69]
mov byte [eax], 0xff
inc eax
dec bl
jne 0x4a1ea7
mov byte [ebp - 0x62], 7
mov byte [ebp - 0x61], 0x80
mov byte [ebp - 0x60], 0x69
mov al, byte [ebp - 0xf]
push eax
lea eax, [ebp - 0xc]
push eax
mov eax, dword [ebp - 4]
add eax, 0x324
push eax
mov al, byte [ebp - 0xe]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x304]
push eax
call sub.SCReader.dll_MF_AuthKey
test eax, eax
jne 0x4a1ef5
mov eax, dword [ebp - 4]
mov dword [eax + 0x308], 0x409
jmp 0x4a2679
mov byte [ebp - 0xe], 4
lea eax, [ebp - 0x39]
push eax
mov al, byte [ebp - 0xe]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x304]
push eax
call sub.SCReader.dll_MF_Read
test eax, eax
jne 0x4a1f26
mov eax, dword [ebp - 4]
mov dword [eax + 0x308], 0x40a
jmp 0x4a2679
mov byte [ebp - 0xe], 5
lea eax, [ebp - 0x49]
push eax
mov al, byte [ebp - 0xe]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x304]
push eax
call sub.SCReader.dll_MF_Read
test eax, eax
jne 0x4a1f57
mov eax, dword [ebp - 4]
mov dword [eax + 0x308], 0x40a
jmp 0x4a2679
mov byte [ebp - 0xe], 6
lea eax, [ebp - 0x59]
push eax
mov al, byte [ebp - 0xe]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x304]
push eax
call sub.SCReader.dll_MF_Read
test eax, eax
jne 0x4a1f88
mov eax, dword [ebp - 4]
mov dword [eax + 0x308], 0x40a
jmp 0x4a2679
mov eax, dword [ebp - 4]
cmp dword [eax + 0x320], 0xb
jne 0x4a1fc5
mov byte [ebp - 0xe], 7
lea eax, [ebp - 0x69]
push eax
mov al, byte [ebp - 0xe]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x304]
push eax
call sub.SCReader.dll_MF_Read
test eax, eax
jne 0x4a1fc5
mov eax, dword [ebp - 4]
mov dword [eax + 0x308], 0x40a
jmp 0x4a2679
lea eax, [ebp - 0x14]
call fcn.00404050
mov bl, 0xd
lea esi, [ebp - 0x39]
lea eax, [ebp - 0x70]
mov dl, byte [esi]
call fcn.00404238
mov edx, dword [ebp - 0x70]
lea eax, [ebp - 0x14]
call fcn.00404318
inc esi
dec bl
jne 0x4a1fd2
mov eax, dword [0x4b1658]
mov eax, dword [eax]
mov dl, 1
call fcn.0049f34c
test al, al
je 0x4a200b
lea edx, [ebp - 0x1c]
mov eax, dword [ebp - 0x14]
call fcn.0049f234
jmp 0x4a2016
lea edx, [ebp - 0x1c]
mov eax, dword [ebp - 0x14]
call fcn.004087c4
lea eax, [ebp - 0x14]
call fcn.00404050
mov byte [ebp - 0xe], 0x4d
mov bl, 0x10
lea esi, [ebp - 0x49]
lea eax, [ebp - 0x74]
mov dl, byte [esi]
xor dl, byte [ebp - 0xe]
call fcn.00404238
mov edx, dword [ebp - 0x74]
lea eax, [ebp - 0x14]
call fcn.00404318
inc esi
dec bl
jne 0x4a2027
lea eax, [ebp - 0x20]
mov edx, dword [ebp - 0x14]
call fcn.004040e8
lea eax, [ebp - 0x14]
call fcn.00404050
mov bl, 0x10
lea esi, [ebp - 0x59]
lea eax, [ebp - 0x78]
mov dl, byte [esi]
call fcn.00404238
mov edx, dword [ebp - 0x78]
lea eax, [ebp - 0x14]
call fcn.00404318
inc esi
dec bl
jne 0x4a205c
lea edx, [ebp - 0x18]
mov eax, dword [ebp - 0x14]
call fcn.0049f220
mov eax, dword [ebp - 4]
cmp dword [eax + 0x320], 0xa
jne 0x4a213f
xor eax, eax
push ebp
push 0x4a20c0
push dword fs:[eax]
mov dword fs:[eax], esp
lea edx, [ebp - 0x7c]
mov eax, dword [ebp - 0x20]
call fcn.004087c4
mov eax, dword [ebp - 0x7c]
call fcn.0040a700
fistp qword [ebp - 0x28]
wait
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4a20e1
mov eax, dword [ebp - 4]
add eax, 0x30c
mov edx, dword [ebp - 0x1c]
call fcn.004040a4
lea edx, [ebp - 0x80]
mov eax, dword [ebp - 0x18]
call fcn.004087c4
mov edx, dword [ebp - 0x80]
mov eax, dword [ebp - 4]
add eax, 0x310
call fcn.004040a4
mov eax, dword [ebp - 4]
mov edx, dword [ebp - 0x28]
mov dword [eax + 0x318], edx
mov edx, dword [ebp - 0x24]
mov dword [eax + 0x31c], edx
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x300]
call fcn.004a0918
mov eax, dword [ebp - 4]
xor edx, edx
mov dword [eax + 0x308], edx
jmp 0x4a2679
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x320]
dec eax
je 0x4a21ad
dec eax
je 0x4a2217
dec eax
je 0x4a222e
sub eax, 8
jne 0x4a2238
xor eax, eax
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x24], eax
lea edx, [ebp - 0x84]
xor eax, eax
call fcn.0049f234
mov edx, dword [ebp - 0x84]
mov eax, dword [ebp - 4]
add eax, 0x30c
call fcn.004040a4
mov eax, dword [ebp - 4]
add eax, 0x310
call fcn.00404050
mov eax, dword [ebp - 4]
xor edx, edx
mov dword [eax + 0x318], edx
mov dword [eax + 0x31c], edx
jmp 0x4a224d
xor eax, eax
push ebp
push 0x4a21e2
push dword fs:[eax]
mov dword fs:[eax], esp
lea edx, [ebp - 0x88]
mov eax, dword [ebp - 0x20]
call fcn.004087c4
mov eax, dword [ebp - 0x88]
call fcn.0040a700
fistp qword [ebp - 0x28]
wait
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4a2203
fild qword [ebp - 0x28]
mov eax, dword [ebp - 4]
fild qword [eax + 0x318]
faddp st(1)
fistp qword [ebp - 0x28]
wait
jmp 0x4a224d
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x318]
mov dword [ebp - 0x28], edx
mov edx, dword [eax + 0x31c]
mov dword [ebp - 0x24], edx
jmp 0x4a224d
xor eax, eax
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x24], eax
jmp 0x4a224d
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x318]
mov dword [ebp - 0x28], edx
mov edx, dword [eax + 0x31c]
mov dword [ebp - 0x24], edx
fild qword [ebp - 0x28]
fcomp dword [0x4a26b4]
fnstsw ax
sahf
jae 0x4a226d
mov eax, dword [ebp - 4]
mov dword [eax + 0x308], 0x3f1
jmp 0x4a2679
mov eax, dword [ebp - 4]
mov ebx, dword [eax + 0x320]
test ebx, ebx
je 0x4a22a4
cmp ebx, 0xb
je 0x4a22a4
mov eax, dword [ebp - 0x1c]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x30c]
call fcn.0040445c
je 0x4a22a4
mov eax, dword [ebp - 4]
mov dword [eax + 0x308], 0x3f0
jmp 0x4a2679
mov eax, dword [ebp - 0x1c]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x30c]
call fcn.0040445c
je 0x4a2333
mov eax, dword [ebp - 0x1c]
mov edx, 0x4a26c0
call fcn.0040445c
je 0x4a2333
lea edx, [ebp - 0x8c]
mov eax, dword [ebp - 0x1c]
call fcn.004087c4
cmp dword [ebp - 0x8c], 0
je 0x4a2333
push 0x4a26d8
push dword [ebp - 0x1c]
push 0x4a26f0
push 0x4a26fc
push 0x4a2708
mov eax, dword [ebp - 4]
push dword [eax + 0x30c]
push 0x4a2720
push 0x4a26fc
push 0x4a272c
lea eax, [ebp - 0x90]
mov edx, 9
call fcn.004043d0
mov eax, dword [ebp - 0x90]
mov dx, pe_nt_image_headers32
call fcn.0049ebd8
test al, al
je 0x4a2679
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x320]
test eax, eax
je 0x4a2345
cmp eax, 0xb
jne 0x4a2391
mov byte [ebp - 0xe], 4
lea ecx, [ebp - 0x14]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x30c]
mov edx, 0x10
call fcn.0049f484
mov eax, dword [ebp - 0x14]
call fcn.00404510
push eax
mov al, byte [ebp - 0xe]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x304]
push eax
call sub.SCReader.dll_MF_Write
test eax, eax
jne 0x4a2391
mov eax, dword [ebp - 4]
mov dword [eax + 0x308], 0x40b
jmp 0x4a2679
mov eax, dword [ebp - 4]
cmp dword [eax + 0x320], 3
je 0x4a24c3
push dword [ebp - 0x24]
push dword [ebp - 0x28]
lea edx, [ebp - 0x94]
mov eax, 0x4a2740
call fcn.0040a5d0
mov eax, dword [ebp - 0x94]
lea ecx, [ebp - 0x14]
mov edx, 0x10
call fcn.0049f484
lea eax, [ebp - 0x20]
call fcn.00404050
mov byte [ebp - 0xe], 0x4d
mov eax, dword [ebp - 0x14]
call fcn.00404310
test al, al
jbe 0x4a2414
mov byte [ebp - 0x29], al
mov bl, 1
lea eax, [ebp - 0x98]
xor edx, edx
mov dl, bl
mov ecx, dword [ebp - 0x14]
mov dl, byte [ecx + edx - 1]
xor dl, byte [ebp - 0xe]
call fcn.00404238
mov edx, dword [ebp - 0x98]
lea eax, [ebp - 0x20]
call fcn.00404318
inc ebx
dec byte [ebp - 0x29]
jne 0x4a23e7
mov byte [ebp - 0xe], 5
mov eax, dword [ebp - 0x20]
call fcn.00404510
push eax
mov al, byte [ebp - 0xe]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x304]
push eax
call sub.SCReader.dll_MF_Write
test eax, eax
jne 0x4a244a
mov eax, dword [ebp - 4]
mov dword [eax + 0x308], 0x40c
jmp 0x4a2679
lea eax, [ebp - 0x49]
push eax
mov al, byte [ebp - 0xe]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x304]
push eax
call sub.SCReader.dll_MF_Read
test eax, eax
jne 0x4a2477
mov eax, dword [ebp - 4]
mov dword [eax + 0x308], 0x420
jmp 0x4a2679
lea eax, [ebp - 0x14]
call fcn.00404050
mov bl, 0x10
lea esi, [ebp - 0x49]
lea eax, [ebp - 0x9c]
mov dl, byte [esi]
call fcn.00404238
mov edx, dword [ebp - 0x9c]
lea eax, [ebp - 0x14]
call fcn.00404318
inc esi
dec bl
jne 0x4a2484
mov eax, dword [ebp - 0x14]
mov edx, dword [ebp - 0x20]
call fcn.0040445c
je 0x4a24c3
mov eax, dword [ebp - 4]
mov dword [eax + 0x308], 0x40f
jmp 0x4a2679
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x320]
cmp eax, 3
je 0x4a24de
test eax, eax
je 0x4a24de
cmp eax, 0xb
jne 0x4a25e1
lea ecx, [ebp - 0xa0]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x310]
mov edx, 8
call fcn.0049f484
mov eax, dword [ebp - 0xa0]
lea edx, [ebp - 0x14]
call fcn.0049f20c
mov byte [ebp - 0xe], 6
mov eax, dword [ebp - 0x14]
call fcn.00404510
push eax
mov al, byte [ebp - 0xe]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x304]
push eax
call sub.SCReader.dll_MF_Write
test eax, eax
jne 0x4a253b
mov eax, dword [ebp - 4]
mov dword [eax + 0x308], 0x40d
jmp 0x4a2679
lea eax, [ebp - 0x49]
push eax
mov al, byte [ebp - 0xe]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x304]
push eax
call sub.SCReader.dll_MF_Read
test eax, eax
jne 0x4a2568
mov eax, dword [ebp - 4]
mov dword [eax + 0x308], 0x420
jmp 0x4a2679
lea eax, [ebp - 0x14]
call fcn.00404050
mov bl, 0x10
lea esi, [ebp - 0x49]
lea eax, [ebp - 0xa4]
mov dl, byte [esi]
call fcn.00404238
mov edx, dword [ebp - 0xa4]
lea eax, [ebp - 0x14]
call fcn.00404318
inc esi
dec bl
jne 0x4a2575
lea ecx, [ebp - 0xac]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x310]
mov edx, 8
call fcn.0049f484
mov eax, dword [ebp - 0xac]
lea edx, [ebp - 0xa8]
call fcn.0049f20c
mov edx, dword [ebp - 0xa8]
mov eax, dword [ebp - 0x14]
call fcn.0040445c
je 0x4a25e1
mov eax, dword [ebp - 4]
mov dword [eax + 0x308], 0x421
jmp 0x4a2679
mov eax, dword [ebp - 4]
cmp dword [eax + 0x320], 0xb
jne 0x4a2660
lea ecx, [ebp - 0x14]
mov edx, dword [0x4b1714]
mov edx, dword [edx]
mov eax, dword [ebp - 4]
call fcn.004a28b0
mov eax, dword [ebp - 0x14]
call fcn.00404310
test al, al
jbe 0x4a2632
mov byte [ebp - 0x29], al
mov bl, 1
lea eax, [ebp - 0x69]
xor edx, edx
mov dl, bl
mov ecx, dword [ebp - 0x14]
mov cl, byte [ecx + edx - 1]
mov byte [eax], cl
mov ecx, dword [ebp - 0x14]
mov dl, byte [ecx + edx - 1]
mov byte [eax + 0xa], dl
inc ebx
inc eax
dec byte [ebp - 0x29]
jne 0x4a2614
mov byte [ebp - 0xe], 7
lea eax, [ebp - 0x69]
push eax
mov al, byte [ebp - 0xe]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x304]
push eax
call sub.SCReader.dll_MF_Write
test eax, eax
jne 0x4a2660
mov eax, dword [ebp - 4]
mov dword [eax + 0x308], 0x40e
jmp 0x4a2679
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x300]
call fcn.004a0918
mov eax, dword [ebp - 4]
xor edx, edx
mov dword [eax + 0x308], edx
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4a26ab
lea eax, [ebp - 0xac]
mov edx, 0x10
call fcn.00404074
lea eax, [ebp - 0x20]
mov edx, 4
call fcn.00404074
ret