Function at 0x10044d80
Capabilities:
Encrypt data using rc4 ksa

Disassembly:
push ebp
mov ebp, esp
push ebx
mov ebx, dword [ebp + 0xc]
mov eax, 0x7cd361
push ebx
call eax
mov ecx, dword [ebp + 8]
mov dword [ecx + 4], eax
mov eax, dword [ebp + 8]
movzx ecx, byte [ebx + 2]
mov byte [eax + 0x1e], cl
mov eax, dword [ebp + 8]
movzx ecx, byte [ebx + 3]
mov byte [eax + 0x20], cl
mov eax, dword [ebp + 8]
movzx ecx, byte [ebx + 4]
mov byte [eax + 0x21], cl
test byte [ebx + 5], 2
mov eax, dword [ebp + 8]
seta cl
mov byte [eax + 0x7a], cl
test byte [ebx + 5], 4
mov eax, dword [ebp + 8]
seta cl
mov byte [eax + 0x7b], cl
mov eax, dword [ebp + 8]
movzx ecx, byte [ebx + 7]
mov byte [eax + 0x59], cl
mov eax, dword [ebp + 8]
movzx ecx, byte [ebx + 8]
mov byte [eax + 0x5a], cl
mov eax, dword [ebp + 8]
movzx ecx, byte [ebx + 9]
mov byte [eax + 0x5b], cl
mov eax, dword [ebp + 8]
movzx ecx, byte [ebx + 0xa]
mov byte [eax + 0x5c], cl
mov eax, dword [ebp + 8]
movzx ecx, byte [ebx + 0xb]
mov byte [eax + 0x5d], cl
mov eax, dword [ebp + 8]
mov byte [eax + 0x58], 0
mov eax, dword [ebp + 8]
mov byte [eax + 0x69], 0xff
xor eax, eax
nop
mov ecx, dword [ebp + 8]
mov byte [eax + ecx + 0x5f], 0xff
mov ecx, dword [ebp + 8]
mov byte [eax + ecx + 0x64], 0
inc eax
cmp eax, 5
jl 0x10044e10
mov eax, dword [ebp + 8]
mov dword [eax + 0x6c], 0
mov eax, dword [ebp + 8]
mov byte [eax + 0x5e], 0
mov eax, 0x9150df
mov ecx, dword [ebp + 8]
call eax
test eax, eax
je 0x1004501e
mov ecx, dword [ebp + 8]
push esi
push 3
mov esi, 0x4f7201
call esi
test al, al
je 0x10044e7b
movzx eax, byte [ebx + 5]
and eax, 8
shl eax, 4
sar eax, 7
test eax, eax
je 0x10044f99
mov eax, dword [ebp + 8]
mov byte [eax + 0x58], 1
jmp 0x10044f99
mov ecx, dword [ebp + 8]
push 2
call esi
test al, al
je 0x10044f09
cmp byte [ebx + 7], 0
jne 0x10044e97
mov eax, dword [ebp + 8]
mov byte [eax + 0x5e], 0
push edi
xor edi, edi
lea esi, [edi + 0x32]
nop dword [eax]
mov ecx, dword [ebp + 8]
mov al, byte [edi + ecx + 0x59]
cmp al, 0xff
je 0x10044eed
cmp al, 0xfe
jne 0x10044eb6
mov byte [edi + ecx + 0x5f], 0xff
jmp 0x10044ede
xor edx, edx
movzx eax, al
div esi
mov eax, 0x51eb851f
mov byte [edi + ecx + 0x5f], dl
mov esi, dword [ebp + 8]
movzx ecx, byte [esi + edi + 0x59]
mul ecx
shr edx, 4
inc dl
mov byte [esi + edi + 0x64], dl
mov esi, 0x32
mov eax, dword [ebp + 8]
inc edi
inc byte [eax + 0x5e]
cmp edi, 5
jl 0x10044ea0
mov ecx, dword [ebp + 8]
mov al, byte [ebx + 6]
mov byte [ecx + 0x69], al
xor ecx, ecx
mov eax, dword [ebp + 8]
pop edi
mov word [eax + 0x54], cx
mov eax, dword [ebp + 8]
mov word [eax + 0x56], cx
jmp 0x10044f99
mov ecx, dword [ebp + 8]
mov eax, 0x519dd9
push 8
call eax
test al, al
je 0x10044f99
movzx ecx, byte [ebx + 6]
mov esi, 0x519e1b
mov eax, dword [ebp + 8]
and ecx, 0xf
push 0x2c
mov dword [eax + 0x6c], ecx
lea ecx, [ebp + 8]
call esi
test al, al
je 0x10044f47
movzx ecx, byte [ebx + 6]
mov eax, dword [ebp + 8]
shr ecx, 4
mov dword [eax + 0x70], ecx
push 0x2b
lea ecx, [ebp + 8]
call esi
test al, al
jne 0x10044f5d
push 0x2c
lea ecx, [ebp + 8]
call esi
test al, al
je 0x10044f99
mov eax, dword [ebp + 8]
cmp byte [eax + 0x59], 0xff
je 0x10044f6c
inc byte [eax + 0x5e]
mov eax, dword [ebp + 8]
cmp byte [eax + 0x5a], 0xff
je 0x10044f78
inc byte [eax + 0x5e]
mov eax, dword [ebp + 8]
cmp byte [eax + 0x5b], 0xff
je 0x10044f84
inc byte [eax + 0x5e]
mov eax, dword [ebp + 8]
cmp byte [eax + 0x5c], 0xff
je 0x10044f90
inc byte [eax + 0x5e]
mov eax, dword [ebp + 8]
cmp byte [eax + 0x5d], 0xff
je 0x10044f9c
inc byte [eax + 0x5e]
mov eax, dword [ebp + 8]
mov byte [eax + 0x79], 0
mov eax, dword [ebp + 8]
mov byte [eax + 0x81], 0xff
mov eax, dword [ebp + 8]
mov byte [eax + 0x82], 0xff
mov eax, dword [ebp + 8]
mov byte [eax + 0x83], 0xff
mov eax, dword [ebp + 8]
mov byte [eax + 0x84], 0xff
mov eax, dword [ebp + 8]
mov byte [eax + 0x85], 0xff
mov eax, dword [ebp + 8]
mov byte [eax + 0x86], 0xff
mov eax, dword [ebp + 8]
movzx ecx, byte [ebx + 1]
mov dword [eax + 8], ecx
movzx eax, byte [ebx + 4]
mov ecx, dword [ebp + 8]
push eax
movzx eax, byte [ebx + 3]
push eax
movzx eax, byte [ebx + 1]
push eax
mov eax, 0x916469
call eax
mov ecx, dword [ebp + 8]
mov eax, 0x915397
call eax
mov ecx, dword [ebp + 8]
mov eax, 0x915e94
call eax
mov ecx, dword [ebp + 8]
mov eax, 0x9150fd
call eax
pop esi
pop ebx
pop ebp
ret 8