Function at 0x49d5f4
Capabilities:
Encrypt data using rc4 ksa

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffff98
push ebx
push esi
push edi
mov dword [ebp - 0xc], ecx
mov dword [ebp - 8], edx
mov dword [ebp - 4], eax
mov eax, dword [ebp + 0x10]
push eax
lea eax, [ebp - 0x68]
push eax
mov ecx, dword [ebp + 0x14]
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp - 8]
call fcn.0049a3e4
mov eax, dword [ebp - 4]
cmp byte [eax + 0xe8], 0
jne 0x49dcde
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x4c]
mov edx, dword [ebp - 4]
sub eax, dword [edx + 0x44]
je 0x49dcee
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x50]
mov edx, dword [ebp - 4]
sub eax, dword [edx + 0x48]
je 0x49dcee
mov eax, dword [ebp + 0x14]
sub eax, dword [ebp - 8]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp + 0x10]
sub eax, dword [ebp - 0xc]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x2c]
cdq
xor eax, edx
sub eax, edx
mov ecx, eax
mov eax, dword [ebp - 0x30]
cdq
xor eax, edx
sub eax, edx
cmp ecx, eax
jne 0x49d69b
mov eax, dword [ebp + 0x14]
push eax
mov eax, dword [ebp + 0x10]
push eax
mov eax, dword [ebp + 0xc]
push eax
mov al, byte [ebp + 8]
push eax
mov ecx, dword [ebp - 0xc]
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 4]
call fcn.0049cd80
jmp 0x49dcee
cmp dword [ebp - 0x2c], 0
jne 0x49d6fe
cmp dword [ebp - 0x30], 0
jle 0x49d6c0
mov eax, dword [ebp + 0x10]
dec eax
push eax
mov eax, dword [ebp + 0xc]
push eax
mov ecx, dword [ebp - 0xc]
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 4]
call fcn.0049c6ec
jmp 0x49d6dd
cmp dword [ebp - 0x30], 0
jge 0x49d6dd
mov eax, dword [ebp - 0xc]
push eax
mov eax, dword [ebp + 0xc]
push eax
mov ecx, dword [ebp + 0x10]
inc ecx
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 4]
call fcn.0049c6ec
cmp byte [ebp + 8], 0
je 0x49dcee
mov eax, dword [ebp + 0xc]
push eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ebp + 0x14]
mov eax, dword [ebp - 4]
call fcn.0049b9d4
jmp 0x49dcee
cmp dword [ebp - 0x30], 0
jne 0x49d761
cmp dword [ebp - 0x2c], 0
jle 0x49d723
mov eax, dword [ebp + 0x14]
dec eax
push eax
mov eax, dword [ebp + 0xc]
push eax
mov ecx, dword [ebp - 0xc]
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 4]
call fcn.0049c4c0
jmp 0x49d740
cmp dword [ebp - 0x2c], 0
jge 0x49d740
mov eax, dword [ebp - 8]
push eax
mov eax, dword [ebp + 0xc]
push eax
mov edx, dword [ebp + 0x14]
inc edx
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 4]
call fcn.0049c4c0
cmp byte [ebp + 8], 0
je 0x49dcee
mov eax, dword [ebp + 0xc]
push eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ebp + 0x14]
mov eax, dword [ebp - 4]
call fcn.0049b9d4
jmp 0x49dcee
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x44]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x4c]
dec eax
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x48]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x50]
dec eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x2c], 0
jle 0x49d7ae
mov eax, dword [ebp - 8]
cmp eax, dword [ebp - 0x14]
jg 0x49dcee
mov eax, dword [ebp + 0x14]
cmp eax, dword [ebp - 0x10]
jl 0x49dcee
mov dword [ebp - 0x24], 1
jmp 0x49d7e7
mov eax, dword [ebp + 0x14]
cmp eax, dword [ebp - 0x14]
jg 0x49dcee
mov eax, dword [ebp - 8]
cmp eax, dword [ebp - 0x10]
jl 0x49dcee
mov dword [ebp - 0x24], 0xffffffff
neg dword [ebp - 8]
neg dword [ebp + 0x14]
neg dword [ebp - 0x2c]
neg dword [ebp - 0x10]
neg dword [ebp - 0x14]
lea edx, [ebp - 0x14]
lea eax, [ebp - 0x10]
call fcn.00490518
cmp dword [ebp - 0x30], 0
jle 0x49d80e
mov eax, dword [ebp - 0xc]
cmp eax, dword [ebp - 0x1c]
jg 0x49dcee
mov eax, dword [ebp + 0x10]
cmp eax, dword [ebp - 0x18]
jl 0x49dcee
mov dword [ebp - 0x28], 1
jmp 0x49d847
mov eax, dword [ebp + 0x10]
cmp eax, dword [ebp - 0x1c]
jg 0x49dcee
mov eax, dword [ebp - 0xc]
cmp eax, dword [ebp - 0x18]
jl 0x49dcee
mov dword [ebp - 0x28], 0xffffffff
neg dword [ebp - 0xc]
neg dword [ebp + 0x10]
neg dword [ebp - 0x30]
neg dword [ebp - 0x18]
neg dword [ebp - 0x1c]
lea edx, [ebp - 0x1c]
lea eax, [ebp - 0x18]
call fcn.00490518
mov eax, dword [ebp - 0x2c]
cmp eax, dword [ebp - 0x30]
jge 0x49d8a5
lea edx, [ebp - 0xc]
lea eax, [ebp - 8]
call fcn.00490518
lea edx, [ebp + 0x10]
lea eax, [ebp + 0x14]
call fcn.00490518
lea edx, [ebp - 0x30]
lea eax, [ebp - 0x2c]
call fcn.00490518
lea edx, [ebp - 0x18]
lea eax, [ebp - 0x10]
call fcn.00490518
lea edx, [ebp - 0x1c]
lea eax, [ebp - 0x14]
call fcn.00490518
lea edx, [ebp - 0x28]
lea eax, [ebp - 0x24]
call fcn.00490518
lea eax, [ebp - 0x38]
mov dword [ebp - 0x44], eax
lea eax, [ebp - 0x34]
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x20], eax
jmp 0x49d8bd
lea eax, [ebp - 0x34]
mov dword [ebp - 0x44], eax
lea eax, [ebp - 0x38]
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x34]
imul dword [ebp - 0x28]
mov dword [ebp - 0x20], eax
xor eax, eax
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x30]
shl eax, 0x10
cdq
idiv dword [ebp - 0x2c]
mov word [ebp - 0x4c], ax
mov word [ebp - 0x4a], 0
mov eax, dword [ebp - 8]
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x38], eax
mov byte [ebp - 0x3d], 1
mov byte [ebp - 0x3e], 0
mov eax, dword [ebp - 4]
movzx eax, byte [eax + 0x76]
mov edx, dword [0x4d25b8]
mov eax, dword [edx + eax*4]
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0xc]
cmp eax, dword [ebp - 0x18]
jge 0x49da90
mov eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0xc]
mov edi, eax
shl edi, 0x10
mov eax, edi
sub eax, 0x10000
mov dword [ebp - 0x3c], eax
movzx ebx, word [ebp - 0x4c]
mov eax, edi
cdq
idiv ebx
test edx, edx
jle 0x49d935
mov eax, edi
cdq
idiv ebx
inc eax
mov edi, eax
jmp 0x49d93c
mov eax, edi
cdq
idiv ebx
mov edi, eax
mov edx, dword [ebp + 0x14]
inc edx
mov eax, dword [ebp - 0x34]
add eax, edi
call fcn.0045e78c
mov dword [ebp - 0x34], eax
mov eax, edi
imul word [ebp - 0x4c]
mov word [ebp - 0x4a], ax
mov eax, dword [ebp - 0x3c]
cdq
idiv ebx
test edx, edx
jle 0x49d96d
mov eax, dword [ebp - 0x3c]
cdq
idiv ebx
inc eax
mov dword [ebp - 0x3c], eax
jmp 0x49d976
mov eax, dword [ebp - 0x3c]
cdq
idiv ebx
mov dword [ebp - 0x3c], eax
sub edi, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x34]
cmp eax, dword [ebp - 0x14]
jle 0x49d993
mov eax, dword [ebp - 0x14]
add eax, edi
cmp eax, dword [ebp - 0x34]
jl 0x49dcee
mov byte [ebp - 0x3e], 1
mov eax, dword [ebp - 0x34]
cmp eax, dword [ebp - 0x10]
setge al
or al, byte [ebp - 0x3e]
je 0x49da90
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x3c], eax
mov bx, word [ebp - 0x4a]
sub bx, word [ebp - 0x4c]
mov eax, dword [ebp - 0x34]
sub eax, edi
mov ecx, dword [ebp - 0x14]
mov edx, dword [ebp - 0x10]
call fcn.00490570
mov esi, eax
cmp byte [ebp - 0x3e], 0
je 0x49d9e8
mov ax, word [ebp - 0x34]
sub ax, word [ebp - 0x14]
dec eax
imul word [ebp - 0x4c]
sub bx, ax
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x28], 0xffffffff
jne 0x49d9f1
neg dword [ebp - 0x38]
cmp dword [ebp - 0x24], 0xffffffff
jne 0x49d9fc
neg dword [ebp - 0x34]
neg esi
xor eax, eax
push ebp
push 0x49da63
push dword fs:[eax]
mov dword fs:[eax], esp
cmp esi, dword [ebp - 0x34]
je 0x49da50
mov eax, dword [ebp - 0x24]
neg eax
add dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x48]
mov eax, dword [eax]
mov edx, dword [ebp - 4]
imul dword [edx + 0x34]
mov edx, dword [ebp - 0x44]
add eax, dword [edx]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0xf0]
lea edx, [edx + eax*4]
movzx eax, bx
shr eax, 8
xor ecx, ecx
mov cl, byte [eax + 0x4f543c]
mov eax, dword [ebp + 0xc]
call dword [ebp - 0x58]
sub bx, word [ebp - 0x4c]
cmp esi, dword [ebp - 0x34]
jne 0x49da0f
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x49da6a
call fcn.00490e68
ret
cmp byte [ebp - 0x3d], 0
je 0x49dade
mov eax, dword [ebp - 8]
cmp eax, dword [ebp - 0x10]
jge 0x49dade
mov edi, dword [ebp - 0x10]
sub edi, dword [ebp - 8]
movzx eax, word [ebp - 0x4c]
imul edi, eax
mov eax, edi
test eax, eax
jns 0x49dab6
add eax, 0xffff
sar eax, 0x10
add dword [ebp - 0x38], eax
mov word [ebp - 0x4a], di
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x38]
cmp eax, dword [ebp - 0x1c]
jg 0x49dcee
mov eax, dword [ebp - 0x38]
cmp eax, dword [ebp - 0x1c]
jne 0x49dade
mov byte [ebp - 0x3e], 1
mov esi, dword [ebp + 0x14]
xor eax, eax
mov byte [ebp - 0x3d], 0
mov edx, dword [ebp + 0x10]
cmp edx, dword [ebp - 0x1c]
jle 0x49db59
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0xc]
mov edi, eax
shl edi, 0x10
movzx ecx, word [ebp - 0x4c]
mov eax, edi
cdq
idiv ecx
mov esi, eax
add esi, dword [ebp - 8]
mov eax, edi
cdq
idiv ecx
test edx, edx
jg 0x49db12
dec esi
cmp esi, dword [ebp - 0x14]
jge 0x49db57
add edi, 0x10000
mov dword [ebp - 0x3c], edi
mov eax, dword [ebp - 0x3c]
cdq
idiv ecx
test edx, edx
jle 0x49db39
mov eax, dword [ebp - 0x3c]
cdq
idiv ecx
add eax, dword [ebp - 8]
inc eax
mov dword [ebp - 0x3c], eax
jmp 0x49db45
mov eax, dword [ebp - 0x3c]
cdq
idiv ecx
add eax, dword [ebp - 8]
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x3c]
cmp eax, dword [ebp - 0x14]
jle 0x49db53
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x3c], eax
mov byte [ebp - 0x3d], 1
mov al, 1
cmp esi, dword [ebp - 0x14]
jle 0x49db63
mov esi, dword [ebp - 0x14]
mov al, 1
inc esi
cmp dword [ebp - 0x28], 0xffffffff
jne 0x49db6d
neg dword [ebp - 0x38]
cmp dword [ebp - 0x24], 0xffffffff
jne 0x49db7b
neg dword [ebp - 0x34]
neg esi
neg dword [ebp - 0x3c]
cmp byte [ebp - 0x3e], 0
jne 0x49dc5c
xor edx, edx
push ebp
push 0x49dc55
push dword fs:[edx]
mov dword fs:[edx], esp
or al, byte [ebp + 8]
jne 0x49dbac
cmp byte [ebp - 0x3d], 0
jne 0x49dbac
cmp esi, dword [ebp - 0x34]
jle 0x49dba6
dec esi
jmp 0x49dbac
cmp esi, dword [ebp - 0x34]
jge 0x49dbac
inc esi
cmp esi, dword [ebp - 0x34]
je 0x49dc42
movzx ebx, word [ebp - 0x4a]
shr ebx, 8
mov eax, dword [ebp - 0x48]
mov eax, dword [eax]
mov edx, dword [ebp - 4]
imul dword [edx + 0x34]
mov edx, dword [ebp - 0x44]
add eax, dword [edx]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0xf0]
lea eax, [edx + eax*4]
mov dword [ebp - 0x54], eax
mov eax, ebx
xor al, 0xff
and eax, 0xff
xor ecx, ecx
mov cl, byte [eax + 0x4f543c]
mov edx, dword [ebp - 0x54]
mov eax, dword [ebp + 0xc]
call dword [ebp - 0x58]
mov eax, dword [ebp - 0x20]
shl eax, 2
add dword [ebp - 0x54], eax
xor eax, eax
mov al, bl
xor ecx, ecx
mov cl, byte [eax + 0x4f543c]
mov edx, dword [ebp - 0x54]
mov eax, dword [ebp + 0xc]
call dword [ebp - 0x58]
mov ax, word [ebp - 0x4a]
mov word [ebp - 0x4e], ax
mov ax, word [ebp - 0x4c]
add word [ebp - 0x4a], ax
mov ax, word [ebp - 0x4a]
cmp ax, word [ebp - 0x4e]
ja 0x49dc33
mov eax, dword [ebp - 0x28]
add dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x24]
add dword [ebp - 0x34], eax
cmp esi, dword [ebp - 0x34]
jne 0x49dbb5
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x49dc5c
call fcn.00490e68
ret
cmp byte [ebp - 0x3d], 0
je 0x49dcde
xor eax, eax
push ebp
push 0x49dcd7
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 0x34]
cmp eax, dword [ebp - 0x3c]
je 0x49dcc4
mov eax, dword [ebp - 0x48]
mov eax, dword [eax]
mov edx, dword [ebp - 4]
imul dword [edx + 0x34]
mov edx, dword [ebp - 0x44]
add eax, dword [edx]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0xf0]
lea edx, [edx + eax*4]
movzx eax, word [ebp - 0x4a]
shr eax, 8
xor eax, 0xff
xor ecx, ecx
mov cl, byte [eax + 0x4f543c]
mov eax, dword [ebp + 0xc]
call dword [ebp - 0x58]
mov ax, word [ebp - 0x4c]
add word [ebp - 0x4a], ax
mov eax, dword [ebp - 0x24]
add dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x34]
cmp eax, dword [ebp - 0x3c]
jne 0x49dc78
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x49dcde
call fcn.00490e68
ret
lea edx, [ebp - 0x68]
mov ecx, 0x40000002
mov eax, dword [ebp - 4]
mov ebx, dword [eax]
call dword [ebx + 0x44]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x10