Function at 0x441020
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
sub esp, 0x48
mov eax, dword [0x47400c]
xor eax, ebp
mov dword [ebp - 4], eax
push esi
mov esi, dword [ebx + 0xc]
push edi
mov edi, ecx
mov dword [ebp - 0x38], edi
cmp esi, 3
jl 0x4413f2
test byte [edi + 0x24], 4
mov eax, dword [edi + 0x2c]
movss xmm0, dword [eax]
movss dword [ebp - 0x2c], xmm0
movss xmm0, dword [eax + 4]
movss dword [ebp - 0x14], xmm0
je 0x441359
mov eax, dword [ebx + 0x10]
movss xmm0, dword [edi + 0x8c]
and eax, 0xffffff
mov dword [ebp - 0x3c], eax
lea eax, [esi + esi]
push eax
mov dword [ebp - 0x44], eax
lea eax, [esi*8 - 6]
add eax, esi
movss dword [ebp - 0x1c], xmm0
push eax
call fcn.00440110
mov eax, dword [edi + 0x28]
mov edx, 2
mov dword [ebp - 0x28], eax
mov dword [ebp - 0xc], edx
lea ecx, [eax + 1]
mov dword [ebp - 0x40], ecx
nop dword [eax + eax]
movzx ecx, ax
mov eax, dword [edi + 0x38]
lea edx, [ecx + edx*2]
mov word [eax], cx
lea ecx, [edx - 2]
mov eax, dword [edi + 0x38]
mov word [eax + 2], cx
mov eax, dword [edi + 0x38]
mov word [eax + 4], dx
mov edx, dword [ebp - 0xc]
add dword [edi + 0x38], 6
inc edx
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0xc], edx
cmp edx, esi
jl 0x4410c0
lea eax, [esi*8]
call fcn.00467c20
movss xmm5, dword [0x46e478]
lea eax, [esi - 1]
mov edi, dword [ebx + 8]
xor edx, edx
mov dword [ebp - 0x18], eax
mov ecx, esp
shl eax, 3
xorps xmm4, xmm4
mov dword [ebp - 0x24], edx
mov dword [ebp - 8], eax
nop dword [eax]
movss xmm2, dword [edi + edx*8 + 4]
lea esi, [edx*8]
movss xmm0, dword [edi + edx*8]
subss xmm0, dword [eax + edi]
subss xmm2, dword [eax + edi + 4]
mov dword [ebp - 0x20], esi
lea esi, [edi + 4]
mov dword [ebp - 0xc], esi
mov esi, dword [ebx + 0xc]
movaps xmm1, xmm0
movss dword [ebp - 0x30], xmm0
movaps xmm3, xmm2
mulss xmm1, xmm0
mulss xmm3, xmm2
movss dword [ebp - 0x34], xmm2
addss xmm3, xmm1
comiss xmm3, xmm4
jbe 0x44119d
movaps xmm0, xmm3
call fcn.00415230
movss xmm5, dword [0x46e478]
xorps xmm4, xmm4
movaps xmm1, xmm5
movss xmm2, dword [ebp - 0x34]
divss xmm1, xmm0
mov eax, dword [ebp - 8]
mov ecx, esp
mov edx, dword [ebp - 0x24]
movaps xmm0, xmm1
mulss xmm2, xmm1
mulss xmm0, dword [ebp - 0x30]
xorps xmm0, xmmword [0x46fef0]
inc edx
movss dword [ecx + eax], xmm2
movss dword [ecx + eax + 4], xmm0
mov eax, dword [ebp - 0x20]
mov dword [ebp - 8], eax
mov dword [ebp - 0x24], edx
cmp edx, esi
jl 0x441120
movss xmm0, dword [ebp - 0x1c]
mov eax, ecx
movss xmm4, dword [0x46e434]
sub eax, edi
movss xmm7, dword [0x46e3e8]
xor esi, esi
movss xmm6, dword [ebp - 0x14]
mov edi, dword [ebp - 0x38]
mov edx, dword [ebp - 0xc]
mulss xmm0, xmm4
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 8], esi
movss dword [ebp - 0x1c], xmm0
nop dword [eax]
movss xmm2, dword [ecx + esi*8]
mov esi, dword [ebp - 0x20]
addss xmm2, dword [ecx + eax*8]
movss xmm3, dword [esi + edx]
addss xmm3, dword [ecx + eax*8 + 4]
mov esi, dword [ebp - 8]
mulss xmm2, xmm4
mulss xmm3, xmm4
movaps xmm0, xmm2
mulss xmm0, xmm2
movaps xmm1, xmm3
mulss xmm1, xmm3
addss xmm1, xmm0
comiss xmm1, xmm7
jbe 0x441258
movaps xmm0, xmm5
divss xmm0, xmm1
movss xmm1, dword [0x46e554]
minss xmm1, xmm0
movaps xmm0, xmm1
mulss xmm3, xmm1
mulss xmm2, xmm0
movss xmm0, dword [edx - 4]
mov eax, dword [edi + 0x34]
movss xmm1, dword [ebp - 0x1c]
mulss xmm1, xmm2
mov ecx, dword [ebx + 0x10]
movss xmm2, dword [ebp - 0x1c]
mulss xmm2, xmm3
movss xmm3, dword [ebp - 0x2c]
subss xmm0, xmm1
movss dword [eax], xmm0
movss xmm0, dword [edx]
mov eax, dword [edi + 0x34]
subss xmm0, xmm2
movss dword [eax + 4], xmm0
mov eax, dword [edi + 0x34]
movss dword [eax + 8], xmm3
movss dword [eax + 0xc], xmm6
mov eax, dword [edi + 0x34]
mov dword [eax + 0x10], ecx
movss xmm0, dword [edx - 4]
mov eax, dword [edi + 0x34]
addss xmm0, xmm1
mov ecx, dword [ebp - 0x3c]
movss dword [eax + 0x14], xmm0
movss xmm0, dword [edx]
mov eax, dword [edi + 0x34]
addss xmm0, xmm2
movss dword [eax + 0x18], xmm0
mov eax, dword [edi + 0x34]
movss dword [eax + 0x1c], xmm3
movss dword [eax + 0x20], xmm6
mov eax, dword [edi + 0x34]
mov dword [eax + 0x24], ecx
mov eax, dword [ebp - 0x28]
add dword [edi + 0x34], 0x28
movzx ecx, ax
mov eax, dword [edi + 0x38]
lea esi, [ecx + esi*2]
mov word [eax], si
mov eax, dword [ebp - 0x18]
lea ecx, [ecx + eax*2]
mov eax, dword [edi + 0x38]
mov word [eax + 2], cx
mov eax, dword [ebp - 0x40]
movzx edx, ax
mov eax, dword [ebp - 0x18]
lea ecx, [edx + eax*2]
mov eax, dword [edi + 0x38]
mov word [eax + 4], cx
mov eax, dword [edi + 0x38]
mov word [eax + 6], cx
mov eax, dword [ebp - 8]
lea ecx, [edx + eax*2]
mov eax, dword [edi + 0x38]
mov edx, dword [ebp - 0xc]
add edx, 8
mov dword [ebp - 0xc], edx
mov word [eax + 8], cx
mov ecx, esp
mov eax, dword [edi + 0x38]
mov word [eax + 0xa], si
mov esi, dword [ebp - 8]
mov eax, esi
add dword [edi + 0x38], 0xc
inc esi
mov dword [ebp - 0x18], eax
mov dword [ebp - 8], esi
cmp esi, dword [ebx + 0xc]
jl 0x441200
mov eax, dword [ebp - 0x44]
movzx eax, ax
jmp 0x4413ef
lea eax, [esi - 2]
push esi
lea eax, [eax + eax*2]
push eax
call fcn.00440110
movss xmm0, dword [ebp - 0x2c]
movss xmm1, dword [ebp - 0x14]
mov dword [ebp - 0x10], esi
mov esi, dword [ebx + 8]
mov eax, dword [edi + 0x34]
lea esi, [esi + 8]
mov ecx, dword [esi - 8]
mov edx, dword [esi - 4]
mov dword [eax], ecx
mov ecx, dword [ebx + 0x10]
mov dword [eax + 4], edx
mov eax, dword [edi + 0x34]
movss dword [eax + 8], xmm0
movss dword [eax + 0xc], xmm1
mov eax, dword [edi + 0x34]
mov dword [eax + 0x10], ecx
add dword [edi + 0x34], 0x14
sub dword [ebp - 0x10], 1
jne 0x441376
mov esi, dword [ebx + 0xc]
mov edx, 2
mov dword [ebp - 0x14], edx
mov ecx, dword [edi + 0x38]
mov ax, word [edi + 0x28]
movzx edx, dx
mov word [ecx], ax
movzx ecx, word [edi + 0x28]
mov eax, dword [edi + 0x38]
dec cx
add cx, dx
mov word [eax + 2], cx
movzx ecx, word [edi + 0x28]
mov eax, dword [edi + 0x38]
add cx, dx
mov edx, dword [ebp - 0x14]
inc edx
mov dword [ebp - 0x14], edx
mov word [eax + 4], cx
add dword [edi + 0x38], 6
cmp edx, esi
jl 0x4413b2
movzx eax, si
add dword [edi + 0x28], eax
lea esp, [ebp - 0x50]
pop edi
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00466a4b
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret 0xc