Function at 0x41d494
Capabilities:
Encrypt data using rc4 ksa

Disassembly:
sub esp, 0x48
mov eax, dword [0x473b00]
xor eax, esp
mov dword [esp + 0x44], eax
push ebx
push ebp
push esi
mov esi, dword [esp + 0x58]
xor ebx, ebx
push edi
mov edi, ecx
mov dword [esp + 0x14], edi
mov dword [edi], 0
cmp dword [esi + 0x10], ebx
jbe 0x41d472
nop dword [eax]
xorps xmm0, xmm0
xor ebp, ebp
mov edi, 0xf
mov dword [esp + 0x4c], ebp
movups xmmword [esp + 0x3c], xmm0
mov dword [esp + 0x50], edi
movups xmmword [esp + 0x24], xmm0
mov byte [esp + 0x3c], 0
mov dword [esp + 0x34], ebp
mov dword [esp + 0x38], edi
mov byte [esp + 0x24], 0
mov ecx, dword [esi + 0x14]
mov eax, esi
mov dword [esp + 0x18], edi
cmp ecx, 0xf
jbe 0x41d06e
mov eax, dword [esi]
cmp byte [eax + ebx], 0x3a
je 0x41d1be
mov eax, esi
cmp ecx, 0xf
jbe 0x41d081
mov eax, dword [esi]
mov cl, byte [eax + ebx]
mov byte [esp + 0x13], cl
cmp ebp, edi
jae 0x41d0b2
lea eax, [ebp + 1]
cmp edi, 0xf
mov dword [esp + 0x4c], eax
lea eax, [esp + 0x3c]
cmova eax, dword [esp + 0x3c]
inc ebx
mov byte [eax + ebp], cl
mov byte [eax + ebp + 1], 0
mov edi, dword [esp + 0x50]
mov ebp, dword [esp + 0x4c]
jmp 0x41d05e
mov eax, 0x7fffffff
sub eax, ebp
cmp eax, 1
jb 0x41d48e
lea ecx, [ebp + 1]
or ecx, 0xf
cmp ecx, 0x7fffffff
jbe 0x41d0d7
mov ecx, 0x7fffffff
jmp 0x41d0f5
mov edx, edi
mov eax, 0x7fffffff
shr edx, 1
sub eax, edx
cmp edi, eax
jbe 0x41d0ed
mov ecx, 0x7fffffff
jmp 0x41d0f5
lea eax, [edi + edx]
cmp ecx, eax
cmovb ecx, eax
lea eax, [esp + 0x1c]
mov dword [esp + 0x1c], ecx
push eax
lea eax, [esp + 0x40]
push eax
call fcn.00401100
mov ecx, eax
add esp, 8
mov dword [esp + 0x20], ecx
lea eax, [ebp + 1]
mov dword [esp + 0x4c], eax
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x50], eax
lea eax, [ecx + ebp]
mov dword [esp + 0x1c], eax
push ebp
cmp edi, 0xf
jbe 0x41d18c
mov edi, dword [esp + 0x40]
push edi
push ecx
call fcn.00406240
mov eax, dword [esp + 0x28]
add esp, 0xc
mov cl, byte [esp + 0x13]
mov byte [eax], cl
mov ecx, dword [esp + 0x18]
inc ecx
mov byte [eax + 1], 0
cmp ecx, 0x1000
jb 0x41d16c
mov edx, dword [edi - 4]
add ecx, 0x23
sub edi, edx
lea eax, [edi - 4]
cmp eax, 0x1f
ja 0x41d489
mov edi, edx
push ecx
push edi
call fcn.00404ff5
mov eax, dword [esp + 0x28]
add esp, 8
mov edi, dword [esp + 0x50]
inc ebx
mov ebp, dword [esp + 0x4c]
mov dword [esp + 0x3c], eax
jmp 0x41d05e
lea eax, [esp + 0x40]
push eax
push ecx
call fcn.00406240
mov eax, dword [esp + 0x28]
add esp, 0xc
mov cl, byte [esp + 0x13]
inc ebx
mov byte [eax], cl
mov byte [eax + 1], 0
mov eax, dword [esp + 0x20]
mov edi, dword [esp + 0x50]
mov ebp, dword [esp + 0x4c]
mov dword [esp + 0x3c], eax
jmp 0x41d05e
mov ecx, dword [esi + 0x14]
inc ebx
mov eax, esi
cmp ecx, 0xf
jbe 0x41d1cb
mov eax, dword [esi]
cmp byte [eax + ebx], 0x40
je 0x41d30c
mov eax, esi
cmp ecx, 0xf
jbe 0x41d1de
mov eax, dword [esi]
mov edi, dword [esp + 0x38]
mov cl, byte [eax + ebx]
mov ebp, dword [esp + 0x34]
mov byte [esp + 0x13], cl
mov dword [esp + 0x1c], edi
cmp ebp, edi
jae 0x41d212
lea eax, [ebp + 1]
cmp edi, 0xf
mov dword [esp + 0x34], eax
lea eax, [esp + 0x24]
cmova eax, dword [esp + 0x24]
mov byte [eax + ebp], cl
mov byte [eax + ebp + 1], 0
jmp 0x41d1be
mov eax, 0x7fffffff
sub eax, ebp
cmp eax, 1
jb 0x41d48e
lea ecx, [ebp + 1]
or ecx, 0xf
cmp ecx, 0x7fffffff
jbe 0x41d237
mov ecx, 0x7fffffff
jmp 0x41d255
mov edx, edi
mov eax, 0x7fffffff
shr edx, 1
sub eax, edx
cmp edi, eax
jbe 0x41d24d
mov ecx, 0x7fffffff
jmp 0x41d255
lea eax, [edi + edx]
cmp ecx, eax
cmovb ecx, eax
lea eax, [esp + 0x18]
mov dword [esp + 0x18], ecx
push eax
lea eax, [esp + 0x28]
push eax
call fcn.00401100
mov ecx, eax
add esp, 8
mov dword [esp + 0x20], ecx
lea eax, [ebp + 1]
mov dword [esp + 0x34], eax
mov eax, dword [esp + 0x18]
mov dword [esp + 0x38], eax
lea eax, [ecx + ebp]
mov dword [esp + 0x18], eax
push ebp
cmp edi, 0xf
jbe 0x41d2e3
mov edi, dword [esp + 0x28]
push edi
push ecx
call fcn.00406240
mov eax, dword [esp + 0x24]
add esp, 0xc
mov cl, byte [esp + 0x13]
mov byte [eax], cl
mov ecx, dword [esp + 0x1c]
inc ecx
mov byte [eax + 1], 0
cmp ecx, 0x1000
jb 0x41d2cc
mov edx, dword [edi - 4]
add ecx, 0x23
sub edi, edx
lea eax, [edi - 4]
cmp eax, 0x1f
ja 0x41d489
mov edi, edx
push ecx
push edi
call fcn.00404ff5
mov eax, dword [esp + 0x28]
add esp, 8
mov dword [esp + 0x24], eax
jmp 0x41d1be
lea eax, [esp + 0x28]
push eax
push ecx
call fcn.00406240
mov eax, dword [esp + 0x24]
add esp, 0xc
mov cl, byte [esp + 0x13]
mov byte [eax], cl
mov byte [eax + 1], 0
mov eax, dword [esp + 0x20]
mov dword [esp + 0x24], eax
jmp 0x41d1be
cmp dword [esp + 0x50], 0xf
lea eax, [esp + 0x3c]
cmova eax, dword [esp + 0x3c]
push eax
call fcn.0040a49e
cmp dword [esp + 0x3c], 0xf
mov edi, eax
lea eax, [esp + 0x28]
cmova eax, dword [esp + 0x28]
push eax
call fcn.0040a49e
add esp, 8
cmp edi, 0xe
ja case.default.0x41d342
jmp dword [edi*4 + 0x41d494]
mov edi, dword [esp + 0x14]
mov eax, dword [edi + 8]
add dword [edi + 4], eax
jmp 0x41d3ef
mov edi, dword [esp + 0x14]
mov eax, dword [edi + 8]
sub dword [edi + 4], eax
jmp 0x41d3ef
mov edi, dword [esp + 0x14]
mov eax, dword [edi + 8]
imul eax, dword [edi + 4]
mov dword [edi + 4], eax
jmp 0x41d3ef
mov edi, dword [esp + 0x14]
xor edx, edx
mov eax, dword [edi + 4]
div dword [edi + 8]
mov dword [edi + 4], eax
jmp 0x41d3ef
mov edi, dword [esp + 0x14]
inc dword [edi + 4]
jmp 0x41d3ef
mov edi, dword [esp + 0x14]
dec dword [edi + 4]
jmp 0x41d3ef
mov edi, dword [esp + 0x14]
mov dword [edi + 4], eax
jmp 0x41d3ef
mov edi, dword [esp + 0x14]
mov dword [edi + 8], eax
jmp 0x41d3ef
mov edi, dword [esp + 0x14]
xor dword [edi + 4], eax
jmp 0x41d3ef
mov edi, dword [esp + 0x14]
xor dword [edi + 8], eax
jmp 0x41d3ef
mov edi, dword [esp + 0x14]
add dword [edi], 3
jmp 0x41d3ef
mov edi, dword [esp + 0x14]
and dword [edi + 4], eax
jmp 0x41d3ef
mov edi, dword [esp + 0x14]
and dword [edi + 8], eax
jmp 0x41d3ef
mov edi, dword [esp + 0x14]
or dword [edi + 4], eax
jmp 0x41d3ef
mov edi, dword [esp + 0x14]
or dword [edi + 8], eax
jmp 0x41d3ef
mov edi, dword [esp + 0x14]
mov ecx, dword [esp + 0x38]
cmp ecx, 0xf
jbe 0x41d421
mov edx, dword [esp + 0x24]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x41d417
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41d489
push ecx
push edx
call fcn.00404ff5
add esp, 8
mov ecx, dword [esp + 0x50]
mov dword [esp + 0x34], 0
mov dword [esp + 0x38], 0xf
mov byte [esp + 0x24], 0
cmp ecx, 0xf
jbe 0x41d468
mov edx, dword [esp + 0x3c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x41d45e
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41d489
push ecx
push edx
call fcn.00404ff5
add esp, 8
inc ebx
cmp ebx, dword [esi + 0x10]
jb 0x41d030
mov ecx, dword [esp + 0x54]
push esp
mov eax, edi
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.00405003
add esp, 0x48
ret 4
call fcn.00409a3f
call fcn.00402080
nop
dec ecx
rol dword [ecx], cl
pop eax
rol dword [ecx], cl
rol dword [bx + di], cl
ja 4314229
rol dword [ecx], cl
mov bl, dl
inc ecx
add byte [ecx - 0x65ffbe2d], dl
rol dword [ecx], cl
mov dword [0xbe0041d3], eax
rol dword [ecx], cl
lodsb al, byte [esi]
inc ecx
add byte [eax - 0x6effbe2d], cl
rol dword [ecx], cl
lcall 0x41d3, 0xa30041d3
add byte [esi - 1409269293], bh
rol dword [ecx], cl
mov ch, 0xd3
inc ecx
add bh, al
rol dword [ecx], cl
rcl bl, 1
inc ecx
add cl, bl
rol dword [ecx], cl
loop 0x41d4a1
inc ecx
add byte [ecx + 0x254ec], al
sub esp, 0x254
mov eax, dword [0x473b00]
xor eax, esp
mov dword [esp + 0x250], eax
mov eax, dword [esp + 0x258]
push ebx
push ebp
push esi
push edi
push 0x2c
mov dword [esp + 0x24], eax
mov dword [esp + 0x18], 0
call fcn.00404fc5
mov esi, dword [esp + 0x278]
mov ebp, eax
mov edi, dword [esp + 0x274]
add esp, 4
xor ecx, ecx
mov dword [ebp], ebp
mov dword [ebp + 4], ebp
mov dword [ebp + 8], ebp
mov word [ebp + 0xc], 0x101
mov dword [esp + 0x10], ebp
nop word [eax + eax]
mov eax, ecx
mov byte [esp + ecx + 0x60], cl
cdq
idiv esi
mov al, byte [edx + edi]
mov byte [esp + ecx + 0x160], al
inc ecx
cmp ecx, 0x100
jl 0x41d530
xor esi, esi
xor edi, edi
mov dl, byte [esp + esi + 0x60]
movzx eax, byte [esp + esi + 0x160]
add edi, eax
movzx ecx, dl
add edi, ecx
and edi, 0x800000ff
jns 0x41d573
dec edi
or edi, 0xffffff00
inc edi
mov al, byte [esp + edi + 0x60]
mov byte [esp + esi + 0x60], al
inc esi
mov byte [esp + edi + 0x60], dl
cmp esi, 0x100
jl 0x41d550
xor edx, edx
xor ebx, ebx
mov dword [esp + 0x18], edx
cmp dword [esp + 0x26c], edx
jle 0x41d76b
nop dword [eax]
inc ebx
and ebx, 0x800000ff
jns 0x41d5b1
dec ebx
or ebx, 0xffffff00
inc ebx
mov cl, byte [esp + ebx + 0x60]
movzx esi, cl
add edx, esi
mov dword [esp + 0x24], ebx
and edx, 0x800000ff
jns 0x41d5ce
dec edx
or edx, 0xffffff00
inc edx
mov al, byte [esp + edx + 0x60]
xorps xmm0, xmm0
mov byte [esp + ebx + 0x60], al
push 4
mov byte [esp + edx + 0x64], cl
lea ecx, [esp + 0x30]
push str.AAA_n
mov dword [esp + 0x30], edx
movups xmmword [esp + 0x34], xmm0
mov dword [esp + 0x44], 0
mov dword [esp + 0x48], 0
call fcn.00401250
cmp dword [esp + 0x40], 7
lea eax, [esp + 0x2c]
push dword [esp + 0x3c]
cmova eax, dword [esp + 0x30]
push eax
push 0x474b60
call fcn.00401540
movzx eax, byte [esp + ebx + 0x6c]
add esp, 0xc
mov ebp, dword [esp + 0x10]
add eax, esi
movzx eax, al
xor edi, edi
mov dword [esp + 0x1c], eax
nop word [eax + eax]
mov ebx, dword [ebp + 4]
xorps xmm0, xmm0
movups xmmword [esp + 0x48], xmm0
xor esi, esi
mov dword [esp + 0x58], 4
mov dword [esp + 0x5c], 0xf
mov ecx, ebp
cmp byte [ebx + 0xd], 0
mov dword [esp + 0x48], 0x6f72655a
mov byte [esp + 0x4c], 0
jne 0x41d691
mov eax, ebx
mov ebx, eax
cmp dword [eax + 0x10], edi
jge 0x41d682
mov eax, dword [eax + 8]
xor esi, esi
jmp 0x41d68b
mov ecx, eax
mov esi, 1
mov eax, dword [eax]
cmp byte [eax + 0xd], 0
je 0x41d674
cmp byte [ecx + 0xd], 0
jne 0x41d69c
cmp edi, dword [ecx + 0x10]
jge 0x41d6f7
cmp dword [esp + 0x14], 0x5d1745d
je 0x41d7a6
push 0x2c
call fcn.00404fc5
movups xmm0, xmmword [esp + 0x4c]
add esp, 4
lea ecx, [esp + 0x10]
mov dword [eax + 0x10], edi
mov dword [eax + 0x24], 0
mov dword [eax + 0x28], 0
movups xmmword [eax + 0x14], xmm0
push eax
movq xmm0, qword [esp + 0x5c]
movq qword [eax + 0x24], xmm0
mov dword [eax], ebp
mov dword [eax + 4], ebp
push esi
mov dword [eax + 8], ebp
push ebx
mov word [eax + 0xc], 0
call fcn.00401dd0
mov ebp, dword [esp + 0x10]
inc edi
cmp edi, 0xa
jl 0x41d640
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x20]
mov ebx, dword [esp + 0x18]
mov al, byte [esp + eax + 0x60]
xor byte [ecx + ebx], al
mov ecx, dword [esp + 0x40]
cmp ecx, 7
jbe 0x41d750
mov edx, dword [esp + 0x2c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x41d742
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41d7a1
push ecx
push edx
call fcn.00404ff5
mov ebp, dword [esp + 0x18]
add esp, 8
inc ebx
mov dword [esp + 0x18], ebx
cmp ebx, dword [esp + 0x26c]
jge 0x41d76b
mov ebx, dword [esp + 0x24]
mov edx, dword [esp + 0x28]
jmp 0x41d5a0
push dword [ebp + 4]
lea eax, [esp + 0x14]
push eax
mov ecx, eax
call fcn.004014b0
push 0x2c
push dword [esp + 0x14]
call fcn.00404ff5
mov ecx, dword [esp + 0x268]
add esp, 8
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.00405003
add esp, 0x254
ret
call fcn.00409a3f
call fcn.00402070
int3