Function at 0x49e554
Capabilities:
Encrypt data using rc4 ksa

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffff98
push ebx
push esi
push edi
mov dword [ebp - 0xc], ecx
mov dword [ebp - 8], edx
mov dword [ebp - 4], eax
mov eax, dword [ebp + 0x10]
push eax
lea eax, [ebp - 0x68]
push eax
mov ecx, dword [ebp + 0x14]
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp - 8]
call fcn.0049b23c
mov eax, dword [ebp - 4]
cmp byte [eax + 0xf0], 0
jne 0x49ec35
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x50]
mov edx, dword [ebp - 4]
sub eax, dword [edx + 0x48]
je 0x49ec45
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x54]
mov edx, dword [ebp - 4]
sub eax, dword [edx + 0x4c]
je 0x49ec45
mov eax, dword [ebp + 0x14]
sub eax, dword [ebp - 8]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp + 0x10]
sub eax, dword [ebp - 0xc]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x2c]
cdq
xor eax, edx
sub eax, edx
mov ecx, eax
mov eax, dword [ebp - 0x30]
cdq
xor eax, edx
sub eax, edx
cmp ecx, eax
jne 0x49e5fb
mov eax, dword [ebp + 0x14]
push eax
mov eax, dword [ebp + 0x10]
push eax
mov eax, dword [ebp + 0xc]
push eax
mov al, byte [ebp + 8]
push eax
mov ecx, dword [ebp - 0xc]
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 4]
call fcn.0049dc68
jmp 0x49ec45
cmp dword [ebp - 0x2c], 0
jne 0x49e65e
cmp dword [ebp - 0x30], 0
jle 0x49e620
mov eax, dword [ebp + 0x10]
dec eax
push eax
mov eax, dword [ebp + 0xc]
push eax
mov ecx, dword [ebp - 0xc]
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 4]
call fcn.0049d56c
jmp 0x49e63d
cmp dword [ebp - 0x30], 0
jge 0x49e63d
mov eax, dword [ebp - 0xc]
push eax
mov eax, dword [ebp + 0xc]
push eax
mov ecx, dword [ebp + 0x10]
inc ecx
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 4]
call fcn.0049d56c
cmp byte [ebp + 8], 0
je 0x49ec45
mov eax, dword [ebp + 0xc]
push eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ebp + 0x14]
mov eax, dword [ebp - 4]
call fcn.0049c874
jmp 0x49ec45
cmp dword [ebp - 0x30], 0
jne 0x49e6c1
cmp dword [ebp - 0x2c], 0
jle 0x49e683
mov eax, dword [ebp + 0x14]
dec eax
push eax
mov eax, dword [ebp + 0xc]
push eax
mov ecx, dword [ebp - 0xc]
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 4]
call fcn.0049d340
jmp 0x49e6a0
cmp dword [ebp - 0x2c], 0
jge 0x49e6a0
mov eax, dword [ebp - 8]
push eax
mov eax, dword [ebp + 0xc]
push eax
mov edx, dword [ebp + 0x14]
inc edx
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 4]
call fcn.0049d340
cmp byte [ebp + 8], 0
je 0x49ec45
mov eax, dword [ebp + 0xc]
push eax
mov ecx, dword [ebp + 0x10]
mov edx, dword [ebp + 0x14]
mov eax, dword [ebp - 4]
call fcn.0049c874
jmp 0x49ec45
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x48]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x50]
dec eax
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x4c]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x54]
dec eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x2c], 0
jle 0x49e70e
mov eax, dword [ebp - 8]
cmp eax, dword [ebp - 0x14]
jg 0x49ec45
mov eax, dword [ebp + 0x14]
cmp eax, dword [ebp - 0x10]
jl 0x49ec45
mov dword [ebp - 0x24], 1
jmp 0x49e747
mov eax, dword [ebp + 0x14]
cmp eax, dword [ebp - 0x14]
jg 0x49ec45
mov eax, dword [ebp - 8]
cmp eax, dword [ebp - 0x10]
jl 0x49ec45
mov dword [ebp - 0x24], 0xffffffff
neg dword [ebp - 8]
neg dword [ebp + 0x14]
neg dword [ebp - 0x2c]
neg dword [ebp - 0x10]
neg dword [ebp - 0x14]
lea edx, [ebp - 0x14]
lea eax, [ebp - 0x10]
call fcn.004905d4
cmp dword [ebp - 0x30], 0
jle 0x49e76e
mov eax, dword [ebp - 0xc]
cmp eax, dword [ebp - 0x1c]
jg 0x49ec45
mov eax, dword [ebp + 0x10]
cmp eax, dword [ebp - 0x18]
jl 0x49ec45
mov dword [ebp - 0x28], 1
jmp 0x49e7a7
mov eax, dword [ebp + 0x10]
cmp eax, dword [ebp - 0x1c]
jg 0x49ec45
mov eax, dword [ebp - 0xc]
cmp eax, dword [ebp - 0x18]
jl 0x49ec45
mov dword [ebp - 0x28], 0xffffffff
neg dword [ebp - 0xc]
neg dword [ebp + 0x10]
neg dword [ebp - 0x30]
neg dword [ebp - 0x18]
neg dword [ebp - 0x1c]
lea edx, [ebp - 0x1c]
lea eax, [ebp - 0x18]
call fcn.004905d4
mov eax, dword [ebp - 0x2c]
cmp eax, dword [ebp - 0x30]
jge 0x49e805
lea edx, [ebp - 0xc]
lea eax, [ebp - 8]
call fcn.004905d4
lea edx, [ebp + 0x10]
lea eax, [ebp + 0x14]
call fcn.004905d4
lea edx, [ebp - 0x30]
lea eax, [ebp - 0x2c]
call fcn.004905d4
lea edx, [ebp - 0x18]
lea eax, [ebp - 0x10]
call fcn.004905d4
lea edx, [ebp - 0x1c]
lea eax, [ebp - 0x14]
call fcn.004905d4
lea edx, [ebp - 0x28]
lea eax, [ebp - 0x24]
call fcn.004905d4
lea eax, [ebp - 0x38]
mov dword [ebp - 0x44], eax
lea eax, [ebp - 0x34]
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x20], eax
jmp 0x49e81d
lea eax, [ebp - 0x34]
mov dword [ebp - 0x44], eax
lea eax, [ebp - 0x38]
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x34]
imul dword [ebp - 0x28]
mov dword [ebp - 0x20], eax
xor eax, eax
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x30]
shl eax, 0x10
cdq
idiv dword [ebp - 0x2c]
mov word [ebp - 0x4c], ax
mov word [ebp - 0x4a], 0
mov eax, dword [ebp - 8]
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x38], eax
mov byte [ebp - 0x3d], 1
mov byte [ebp - 0x3e], 0
mov eax, dword [ebp - 4]
movzx eax, byte [eax + 0x7a]
mov edx, dword [0x4d35d4]
mov eax, dword [edx + eax*4]
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0xc]
cmp eax, dword [ebp - 0x18]
jge 0x49e9ed
mov eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0xc]
mov edi, eax
shl edi, 0x10
mov eax, edi
sub eax, 0x10000
mov dword [ebp - 0x3c], eax
movzx ebx, word [ebp - 0x4c]
mov eax, edi
cdq
idiv ebx
test edx, edx
jle 0x49e895
mov eax, edi
cdq
idiv ebx
inc eax
mov edi, eax
jmp 0x49e89c
mov eax, edi
cdq
idiv ebx
mov edi, eax
mov edx, dword [ebp + 0x14]
inc edx
mov eax, dword [ebp - 0x34]
add eax, edi
call fcn.0045e808
mov dword [ebp - 0x34], eax
mov eax, edi
imul word [ebp - 0x4c]
mov word [ebp - 0x4a], ax
mov eax, dword [ebp - 0x3c]
cdq
idiv ebx
test edx, edx
jle 0x49e8cd
mov eax, dword [ebp - 0x3c]
cdq
idiv ebx
inc eax
mov dword [ebp - 0x3c], eax
jmp 0x49e8d6
mov eax, dword [ebp - 0x3c]
cdq
idiv ebx
mov dword [ebp - 0x3c], eax
sub edi, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x34]
cmp eax, dword [ebp - 0x14]
jle 0x49e8f3
mov eax, dword [ebp - 0x14]
add eax, edi
cmp eax, dword [ebp - 0x34]
jl 0x49ec45
mov byte [ebp - 0x3e], 1
mov eax, dword [ebp - 0x34]
cmp eax, dword [ebp - 0x10]
setge al
or al, byte [ebp - 0x3e]
je 0x49e9ed
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x3c], eax
mov bx, word [ebp - 0x4a]
sub bx, word [ebp - 0x4c]
mov eax, dword [ebp - 0x34]
sub eax, edi
mov ecx, dword [ebp - 0x14]
mov edx, dword [ebp - 0x10]
call fcn.0049062c
mov esi, eax
cmp byte [ebp - 0x3e], 0
je 0x49e948
mov ax, word [ebp - 0x34]
sub ax, word [ebp - 0x14]
dec eax
imul word [ebp - 0x4c]
sub bx, ax
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x28], 0xffffffff
jne 0x49e951
neg dword [ebp - 0x38]
cmp dword [ebp - 0x24], 0xffffffff
jne 0x49e95c
neg dword [ebp - 0x34]
neg esi
xor eax, eax
push ebp
push 0x49e9c0
push dword fs:[eax]
mov dword fs:[eax], esp
cmp esi, dword [ebp - 0x34]
je 0x49e9ad
mov eax, dword [ebp - 0x24]
neg eax
add dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x48]
mov eax, dword [eax]
mov edx, dword [ebp - 4]
imul dword [edx + 0x34]
mov edx, dword [ebp - 0x44]
add eax, dword [edx]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x40]
lea edx, [edx + eax*4]
movzx eax, bx
shr eax, 8
xor ecx, ecx
mov cl, byte [eax + 0x4f6454]
mov eax, dword [ebp + 0xc]
call dword [ebp - 0x58]
sub bx, word [ebp - 0x4c]
cmp esi, dword [ebp - 0x34]
jne 0x49e96f
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x49e9c7
call fcn.00490f50
ret
cmp byte [ebp - 0x3d], 0
je 0x49ea3b
mov eax, dword [ebp - 8]
cmp eax, dword [ebp - 0x10]
jge 0x49ea3b
mov edi, dword [ebp - 0x10]
sub edi, dword [ebp - 8]
movzx eax, word [ebp - 0x4c]
imul edi, eax
mov eax, edi
test eax, eax
jns 0x49ea13
add eax, 0xffff
sar eax, 0x10
add dword [ebp - 0x38], eax
mov word [ebp - 0x4a], di
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x38]
cmp eax, dword [ebp - 0x1c]
jg 0x49ec45
mov eax, dword [ebp - 0x38]
cmp eax, dword [ebp - 0x1c]
jne 0x49ea3b
mov byte [ebp - 0x3e], 1
mov esi, dword [ebp + 0x14]
xor eax, eax
mov byte [ebp - 0x3d], 0
mov edx, dword [ebp + 0x10]
cmp edx, dword [ebp - 0x1c]
jle 0x49eab6
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0xc]
mov edi, eax
shl edi, 0x10
movzx ecx, word [ebp - 0x4c]
mov eax, edi
cdq
idiv ecx
mov esi, eax
add esi, dword [ebp - 8]
mov eax, edi
cdq
idiv ecx
test edx, edx
jg 0x49ea6f
dec esi
cmp esi, dword [ebp - 0x14]
jge 0x49eab4
add edi, 0x10000
mov dword [ebp - 0x3c], edi
mov eax, dword [ebp - 0x3c]
cdq
idiv ecx
test edx, edx
jle 0x49ea96
mov eax, dword [ebp - 0x3c]
cdq
idiv ecx
add eax, dword [ebp - 8]
inc eax
mov dword [ebp - 0x3c], eax
jmp 0x49eaa2
mov eax, dword [ebp - 0x3c]
cdq
idiv ecx
add eax, dword [ebp - 8]
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x3c]
cmp eax, dword [ebp - 0x14]
jle 0x49eab0
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x3c], eax
mov byte [ebp - 0x3d], 1
mov al, 1
cmp esi, dword [ebp - 0x14]
jle 0x49eac0
mov esi, dword [ebp - 0x14]
mov al, 1
inc esi
cmp dword [ebp - 0x28], 0xffffffff
jne 0x49eaca
neg dword [ebp - 0x38]
cmp dword [ebp - 0x24], 0xffffffff
jne 0x49ead8
neg dword [ebp - 0x34]
neg esi
neg dword [ebp - 0x3c]
cmp byte [ebp - 0x3e], 0
jne 0x49ebb6
xor edx, edx
push ebp
push 0x49ebaf
push dword fs:[edx]
mov dword fs:[edx], esp
or al, byte [ebp + 8]
jne 0x49eb09
cmp byte [ebp - 0x3d], 0
jne 0x49eb09
cmp esi, dword [ebp - 0x34]
jle 0x49eb03
dec esi
jmp 0x49eb09
cmp esi, dword [ebp - 0x34]
jge 0x49eb09
inc esi
cmp esi, dword [ebp - 0x34]
je 0x49eb9c
movzx ebx, word [ebp - 0x4a]
shr ebx, 8
mov eax, dword [ebp - 0x48]
mov eax, dword [eax]
mov edx, dword [ebp - 4]
imul dword [edx + 0x34]
mov edx, dword [ebp - 0x44]
add eax, dword [edx]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x40]
lea eax, [edx + eax*4]
mov dword [ebp - 0x54], eax
mov eax, ebx
xor al, 0xff
and eax, 0xff
xor ecx, ecx
mov cl, byte [eax + 0x4f6454]
mov edx, dword [ebp - 0x54]
mov eax, dword [ebp + 0xc]
call dword [ebp - 0x58]
mov eax, dword [ebp - 0x20]
shl eax, 2
add dword [ebp - 0x54], eax
xor eax, eax
mov al, bl
xor ecx, ecx
mov cl, byte [eax + 0x4f6454]
mov edx, dword [ebp - 0x54]
mov eax, dword [ebp + 0xc]
call dword [ebp - 0x58]
mov ax, word [ebp - 0x4a]
mov word [ebp - 0x4e], ax
mov ax, word [ebp - 0x4c]
add word [ebp - 0x4a], ax
mov ax, word [ebp - 0x4a]
cmp ax, word [ebp - 0x4e]
ja 0x49eb8d
mov eax, dword [ebp - 0x28]
add dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x24]
add dword [ebp - 0x34], eax
cmp esi, dword [ebp - 0x34]
jne 0x49eb12
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x49ebb6
call fcn.00490f50
ret
cmp byte [ebp - 0x3d], 0
je 0x49ec35
xor eax, eax
push ebp
push 0x49ec2e
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 0x34]
cmp eax, dword [ebp - 0x3c]
je 0x49ec1b
mov eax, dword [ebp - 0x48]
mov eax, dword [eax]
mov edx, dword [ebp - 4]
imul dword [edx + 0x34]
mov edx, dword [ebp - 0x44]
add eax, dword [edx]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x40]
lea edx, [edx + eax*4]
movzx eax, word [ebp - 0x4a]
shr eax, 8
xor eax, 0xff
xor ecx, ecx
mov cl, byte [eax + 0x4f6454]
mov eax, dword [ebp + 0xc]
call dword [ebp - 0x58]
mov ax, word [ebp - 0x4c]
add word [ebp - 0x4a], ax
mov eax, dword [ebp - 0x24]
add dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x34]
cmp eax, dword [ebp - 0x3c]
jne 0x49ebd2
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x49ec35
call fcn.00490f50
ret
lea edx, [ebp - 0x68]
mov ecx, 0x40000002
mov eax, dword [ebp - 4]
mov ebx, dword [eax]
call dword [ebx + 0x44]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x10