Function at 0x10031930
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
sub esp, 0x38
push esi
mov esi, dword [ebx + 0xc]
push edi
mov edi, ecx
mov dword [ebp - 0x24], edi
cmp esi, 3
jl 0x10031d30
mov ecx, dword [ebx + 0x10]
test ecx, 0xff000000
je 0x10031d30
test byte [edi + 0x24], 4
mov eax, dword [edi + 0x2c]
movss xmm0, dword [eax]
movss dword [ebp - 0x1c], xmm0
movss xmm0, dword [eax + 4]
movss dword [ebp - 0x20], xmm0
je 0x10031c8b
movss xmm0, dword [edi + 0x8c]
lea eax, [esi + esi]
push eax
mov dword [ebp - 0x34], eax
and ecx, 0xffffff
lea eax, [esi*8 - 6]
mov dword [ebp - 0x2c], ecx
add eax, esi
movss dword [ebp - 0xc], xmm0
push eax
mov ecx, edi
call fcn.10030a20
mov eax, dword [edi + 0x28]
mov edx, 2
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x10], edx
lea ecx, [eax + 1]
mov dword [ebp - 0x30], ecx
nop dword [eax]
movzx ecx, ax
mov eax, dword [edi + 0x38]
lea edx, [ecx + edx*2]
mov word [eax], cx
lea ecx, [edx - 2]
mov eax, dword [edi + 0x38]
mov word [eax + 2], cx
mov eax, dword [edi + 0x38]
mov word [eax + 4], dx
mov edx, dword [ebp - 0x10]
add dword [edi + 0x38], 6
inc edx
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x10], edx
cmp edx, esi
jl 0x100319d0
mov eax, dword [edi + 0x2c]
mov dword [ebp - 0x18], eax
cmp esi, dword [eax + 0x30]
jle 0x10031a56
mov ecx, dword [eax + 0x34]
test ecx, ecx
je 0x10031a2a
mov eax, dword [0x10265568]
test eax, eax
je 0x10031a20
dec dword [eax + 0xb8]
push ecx
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
add esp, 4
mov eax, dword [0x10265568]
test eax, eax
je 0x10031a39
inc dword [eax + 0xb8]
lea eax, [esi*8]
push eax
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov ecx, dword [ebp - 0x18]
add esp, 4
mov dword [ecx + 0x34], eax
mov dword [ecx + 0x30], esi
mov eax, dword [edi + 0x2c]
mov eax, dword [eax + 0x34]
lea ecx, [esi - 1]
movss xmm4, dword [0x1025d7f0]
xorps xmm5, xmm5
mov edi, dword [ebx + 8]
mov dword [ebp - 4], ecx
shl ecx, 3
xor edx, edx
mov dword [ebp - 0x18], eax
nop word [eax + eax]
movss xmm3, dword [edi + edx*8 + 4]
lea esi, [edx*8]
movss xmm2, dword [edi + edx*8]
subss xmm2, dword [ecx + edi]
subss xmm3, dword [ecx + edi + 4]
mov dword [ebp - 8], esi
lea esi, [edi + 4]
mov dword [ebp - 0x10], esi
mov esi, dword [ebx + 0xc]
movaps xmm0, xmm2
movaps xmm1, xmm3
mulss xmm0, xmm2
mulss xmm1, xmm3
addss xmm1, xmm0
comiss xmm1, xmm5
jbe 0x10031acf
rsqrtss xmm1, xmm1
movaps xmm0, xmm1
mulss xmm3, xmm1
mulss xmm2, xmm0
xorps xmm2, xmm4
movss dword [ecx + eax], xmm3
inc edx
movss dword [ecx + eax + 4], xmm2
mov ecx, dword [ebp - 8]
cmp edx, esi
jl 0x10031a80
movss xmm0, dword [ebp - 0xc]
mov ecx, eax
movss xmm4, dword [0x1025cd18]
sub ecx, edi
movss xmm5, dword [0x1025ccd0]
xor esi, esi
movss xmm6, dword [0x1025cd5c]
movss xmm7, dword [0x1025ce28]
mov edi, dword [ebp - 0x24]
mov edx, dword [ebp - 4]
mulss xmm0, xmm4
mov dword [ebp - 0x28], ecx
mov ecx, dword [ebp - 0x10]
mov dword [ebp - 8], esi
movss dword [ebp - 0xc], xmm0
nop dword [eax + eax]
movss xmm2, dword [eax + esi*8]
mov esi, dword [ebp - 0x28]
addss xmm2, dword [eax + edx*8]
movss xmm3, dword [esi + ecx]
addss xmm3, dword [eax + edx*8 + 4]
mov esi, dword [ebp - 8]
mulss xmm2, xmm4
mulss xmm3, xmm4
movaps xmm0, xmm2
mulss xmm0, xmm2
movaps xmm1, xmm3
mulss xmm1, xmm3
addss xmm1, xmm0
comiss xmm1, xmm5
jbe 0x10031b83
movaps xmm0, xmm6
divss xmm0, xmm1
movaps xmm1, xmm7
minss xmm1, xmm0
movaps xmm0, xmm1
mulss xmm3, xmm1
mulss xmm2, xmm0
movss xmm0, dword [ecx - 4]
mov eax, dword [edi + 0x34]
movss xmm1, dword [ebp - 0xc]
mulss xmm1, xmm2
mov edx, dword [ebx + 0x10]
movss xmm2, dword [ebp - 0xc]
mulss xmm2, xmm3
movss xmm3, dword [ebp - 0x20]
subss xmm0, xmm1
movss dword [eax], xmm0
movss xmm0, dword [ecx]
mov eax, dword [edi + 0x34]
subss xmm0, xmm2
movss dword [eax + 4], xmm0
mov eax, dword [edi + 0x34]
movss xmm0, dword [ebp - 0x1c]
movss dword [eax + 8], xmm0
movss dword [eax + 0xc], xmm3
mov eax, dword [edi + 0x34]
mov dword [eax + 0x10], edx
addss xmm1, dword [ecx - 4]
mov eax, dword [edi + 0x34]
mov edx, dword [ebp - 4]
movss dword [eax + 0x14], xmm1
addss xmm2, dword [ecx]
mov eax, dword [edi + 0x34]
mov ecx, dword [ebp - 0x2c]
movss dword [eax + 0x18], xmm2
mov eax, dword [edi + 0x34]
movss dword [eax + 0x1c], xmm0
movss dword [eax + 0x20], xmm3
mov eax, dword [edi + 0x34]
mov dword [eax + 0x24], ecx
mov eax, dword [ebp - 0x14]
add dword [edi + 0x34], 0x28
movzx ecx, ax
mov eax, dword [edi + 0x38]
lea esi, [ecx + esi*2]
mov word [eax], si
lea ecx, [ecx + edx*2]
mov eax, dword [edi + 0x38]
mov word [eax + 2], cx
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 4]
movzx edx, ax
mov eax, dword [edi + 0x38]
lea ecx, [edx + ecx*2]
mov word [eax + 4], cx
mov eax, dword [edi + 0x38]
mov word [eax + 6], cx
mov eax, dword [ebp - 8]
lea ecx, [edx + eax*2]
mov eax, dword [edi + 0x38]
mov word [eax + 8], cx
mov eax, dword [edi + 0x38]
mov ecx, dword [ebp - 0x10]
add ecx, 8
mov dword [ebp - 0x10], ecx
mov word [eax + 0xa], si
mov esi, dword [ebp - 8]
mov edx, esi
add dword [edi + 0x38], 0xc
inc esi
mov eax, dword [ebp - 0x18]
mov dword [ebp - 4], edx
mov dword [ebp - 8], esi
cmp esi, dword [ebx + 0xc]
jl 0x10031b30
mov eax, dword [ebp - 0x34]
movzx eax, ax
add dword [edi + 0x28], eax
pop edi
pop esi
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret 0xc
lea eax, [esi - 2]
mov ecx, edi
push esi
lea eax, [eax + eax*2]
push eax
call fcn.10030a20
movss xmm0, dword [ebp - 0x1c]
movss xmm1, dword [ebp - 0x20]
mov dword [ebp - 0x18], esi
mov esi, dword [ebx + 8]
nop word [eax + eax]
mov eax, dword [edi + 0x34]
lea esi, [esi + 8]
mov ecx, dword [esi - 8]
mov edx, dword [esi - 4]
mov dword [eax], ecx
mov ecx, dword [ebx + 0x10]
mov dword [eax + 4], edx
mov eax, dword [edi + 0x34]
movss dword [eax + 8], xmm0
movss dword [eax + 0xc], xmm1
mov eax, dword [edi + 0x34]
mov dword [eax + 0x10], ecx
add dword [edi + 0x34], 0x14
sub dword [ebp - 0x18], 1
jne 0x10031cb0
mov esi, dword [ebx + 0xc]
mov edx, 2
mov dword [ebp - 0x20], edx
nop dword [eax]
mov ecx, dword [edi + 0x38]
mov ax, word [edi + 0x28]
movzx edx, dx
mov word [ecx], ax
movzx ecx, word [edi + 0x28]
mov eax, dword [edi + 0x38]
dec cx
add cx, dx
mov word [eax + 2], cx
movzx ecx, word [edi + 0x28]
mov eax, dword [edi + 0x38]
add cx, dx
mov edx, dword [ebp - 0x20]
inc edx
mov dword [ebp - 0x20], edx
mov word [eax + 4], cx
add dword [edi + 0x38], 6
cmp edx, esi
jl 0x10031cf0
movzx eax, si
add dword [edi + 0x28], eax
pop edi
pop esi
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret 0xc