Function at 0x1001f1e0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub esp, 0x34
mov eax, dword [0x10200e40]
xor eax, esp
mov dword [esp + 0x30], eax
push ebx
mov eax, edx
mov ebx, ecx
push ebp
push esi
push edi
mov ebp, dword [eax + 4]
mov dword [esp + 0x14], eax
mov dword [esp + 0x28], ebx
test ebp, ebp
jns 0x1001f237
cmp dword [eax], 0
jg 0x1001f237
mov edx, dword [esp + 0x54]
mov ecx, dword [esp + 0x50]
add edx, ecx
push dword [esp + 0x48]
call fcn.1001b990
add esp, 4
mov dword [ebx], edx
mov eax, ebx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x30]
xor ecx, esp
call fcn.10109e3a
add esp, 0x34
ret
mov esi, dword [esp + 0x50]
xor edi, edi
mov ecx, dword [esp + 0x54]
add ecx, esi
mov dword [esp + 0x10], esi
mov dword [esp + 0x18], ecx
mov eax, ecx
mov dword [esp + 0x3c], 0
mov dword [esp + 0x2c], esi
mov dword [esp + 0x30], eax
mov dword [esp + 0x34], 0
mov dword [esp + 0x38], edi
cmp esi, ecx
je 0x1001f292
lea eax, [esp + 0x38]
mov edx, ecx
push eax
mov ecx, esi
call fcn.10028770
mov esi, dword [esp + 0x30]
add esp, 4
mov edi, dword [esp + 0x38]
mov dword [esp + 0x34], eax
mov eax, dword [esp + 0x30]
mov dword [esp + 0x10], esi
xor ebx, ebx
mov byte [esp + 0x3c], 0
cmp esi, eax
je 0x1001f355
mov edx, ebx
mov dword [esp + 0x1c], edx
cmp ebx, ebp
jne 0x1001f2b3
test ebp, ebp
jns 0x1001f355
cmp edi, 0x25fd
jae 0x1001f2de
mov eax, 1
mov ecx, 0x101ae0b0
cmp edi, dword [ecx]
jb 0x1001f31a
add ecx, 4
xor eax, 3
cmp ecx, 0x101ae3d8
jne 0x1001f2c5
mov eax, 1
jmp 0x1001f31a
mov eax, 0x101ae0b0
mov edx, 0xca
mov esi, edx
shr esi, 1
cmp edi, dword [eax + esi*4]
lea ecx, [eax + esi*4]
jae 0x1001f2f8
mov edx, esi
jmp 0x1001f302
lea eax, [ecx + 4]
or ecx, 0xffffffff
sub ecx, esi
add edx, ecx
test edx, edx
jg 0x1001f2e8
mov esi, dword [esp + 0x10]
sub eax, 0x101ae0b0
mov edx, dword [esp + 0x1c]
sar eax, 2
and eax, 1
inc eax
mov ecx, 0x7fffffff
sub ecx, eax
cmp ecx, ebx
jl 0x1001f3d6
add ebx, eax
cmp ebx, ebp
jle 0x1001f333
test ebp, ebp
jns 0x1001f353
lea ecx, [esp + 0x2c]
call fcn.100220f0
mov esi, dword [esp + 0x2c]
mov dword [esp + 0x10], esi
cmp esi, dword [esp + 0x30]
je 0x1001f355
mov edi, dword [esp + 0x38]
jmp 0x1001f2a1
mov ebx, edx
mov dword [esp + 0x18], esi
mov ebp, dword [esp + 0x14]
xor edi, edi
mov eax, dword [esp + 0x50]
xor esi, esi
mov ecx, dword [esp + 0x48]
mov dword [esp + 0x10], eax
mov al, byte [ebp + 9]
mov ebp, dword [ebp]
test al, al
movzx edx, al
mov dword [esp + 0x1c], 1
cmove edx, dword [esp + 0x1c]
cmp ebx, ebp
jge 0x1001f3ac
movzx eax, dl
sub eax, 1
je 0x1001f3ee
sub eax, 1
je 0x1001f3e8
sub eax, 1
jne 0x1001f3ac
mov eax, ebp
mov esi, ebp
sub eax, ebx
cdq
sub eax, edx
mov edi, eax
sar edi, 1
sub esi, edi
sub esi, ebx
mov ebp, dword [esp + 0x14]
movzx eax, byte [ebp + 0xe]
lea ebx, [ebp + 0xf]
mov edx, ebx
test edi, edi
jle 0x1001f3ff
lea ebp, [ebx + eax]
push ecx
mov edx, ebp
mov ecx, ebx
call fcn.1001b990
dec edi
add esp, 4
mov ecx, edx
test edi, edi
jg 0x1001f3c0
jmp 0x1001f402
test ebp, ebp
jns 0x1001f355
mov ebx, 0x7fffffff
jmp 0x1001f359
mov edi, ebp
sub edi, ebx
jmp 0x1001f3ac
mov eax, dword [esp + 0x14]
mov esi, ebp
sub esi, ebx
lea ebx, [eax + 0xf]
movzx eax, byte [eax + 0xe]
mov edx, ebx
lea ebp, [eax + edx]
mov eax, dword [esp + 0x10]
mov edx, dword [esp + 0x18]
sub edx, eax
push ecx
add edx, eax
mov ecx, eax
call fcn.1001b990
add esp, 4
test esi, esi
jle 0x1001f432
nop dword [eax]
push edx
mov edx, ebp
mov ecx, ebx
call fcn.1001b990
dec esi
add esp, 4
test esi, esi
jg 0x1001f420
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x40]
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
mov dword [eax], edx
call fcn.10109e3a
add esp, 0x34
ret