Function at 0xce0fc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x244
mov eax, dword [esp + 0x264]
mov dword [esp + 0x3f], 0xe48040
mov dword [esp + 0x3c], 0x4010ec83
mov dword [esp + 0x38], 0x48e78948
mov dword [esp + 0x34], 0xce8948fc
mov dword [esp + 0x27], 0xc3fc8948
mov dword [esp + 0x24], 0x48d2ff41
mov dword [esp + 0x20], 0
mov dword [esp + 0x1c], 0xfffffff1
mov dword [esp + 0x18], 0xba49c031
lea ebp, [esp + 0x44]
lea edx, [esp + 0x34]
mov edi, ebp
mov ecx, 3
xchg esi, edx
rep movsd dword es:[edi], dword [esi]
xchg esi, edx
lea edi, [esp + 0x50]
lea edx, [esp + 0x40]
mov ecx, 1
xchg esi, edx
rep movsw word es:[edi], word [esi]
xchg esi, edx
movzx ecx, byte [esp + 0x42]
mov byte [esp + 0x52], cl
mov edx, eax
cmp eax, 4
jb 0xce1057
mov edx, 4
lea ebx, [esp + 0x53]
test eax, eax
je 0xce1226
xor ebp, ebp
jmp 0xce109e
inc ebp
cmp edx, ebp
je 0xce1131
cmp ebp, 3
ja 0xce1095
jmp dword [ebp*4 + 0xcacd90]
cmp eax, 3
lea ebp, [esp + 0x44]
jbe 0xce1226
test al, 1
je 0xce1167
mov edx, 0xcad587
mov esi, 0xcad587
mov edi, ebx
xor ecx, ecx
xchg esi, esi
rep movsd dword es:[edi], dword [esi]
xchg esi, esi
mov edi, ebx
mov ecx, 1
xchg esi, edx
rep movsw word es:[edi], word [esi]
xchg esi, edx
add ebx, 2
mov word [esp + 4], 0x50
mov dword [esp], 0x20468b48
mov byte [esp + 0x10], 0
mov dword [esp + 0xc], 0x50000000
mov dword [esp + 8], 0x80868b48
lea edx, [eax*8]
cmp edx, 0x7ffffffe
ja 0xce1213
dec eax
cmp eax, 4
jb 0xce1222
add edx, 0xfffffff8
lea ebp, [esp + 8]
jmp 0xce11de
mov dword [esp + 0xb], edx
mov esi, ebp
mov edi, ebx
mov ecx, 2
xchg esi, esi
rep movsd dword es:[edi], dword [esi]
xchg esi, esi
add ebx, 8
lea esi, [esp + 0x10]
xor ecx, ecx
mov edi, ebx
xchg esi, esi
rep movsw word es:[edi], word [esi]
xchg esi, esi
dec eax
add edx, 0xfffffff8
cmp eax, 3
jbe 0xce1222
cmp edx, 0x7e
ja 0xce11b0
mov byte [esp + 3], dl
mov esi, esp
mov edi, ebx
mov ecx, 1
xchg esi, esi
rep movsd dword es:[edi], dword [esi]
xchg esi, esi
lea edi, [ebx + 4]
lea esi, [esp + 4]
xor ecx, ecx
xchg esi, esi
rep movsw word es:[edi], word [esi]
xchg esi, esi
movzx ecx, byte [esp + 4]
mov byte [ebx + 4], cl
add ebx, 5
jmp 0xce11d5
mov eax, 0xffffffff
mov edx, 0xffffffff
jmp 0xce148f
lea ebp, [esp + 0x44]
mov edx, dword [esp + 0x25c]
mov eax, 0xcad56b
mov edi, ebx
mov ecx, 1
xchg esi, eax
rep movsd dword es:[edi], dword [esi]
xchg esi, eax
lea eax, [ebx + 4]
mov esi, 0xcad56f
mov edi, eax
xor ecx, ecx
xchg esi, esi
rep movsw word es:[edi], word [esi]
xchg esi, esi
mov dword [esp + 0x20], edx
mov ecx, dword [esp + 0x258]
mov dword [esp + 0x1c], ecx
lea edx, [esp + 0x18]
mov edi, eax
mov ecx, 4
xchg esi, edx
rep movsd dword es:[edi], dword [esi]
xchg esi, edx
lea edi, [ebx + 0x14]
lea eax, [esp + 0x28]
mov ecx, 1
xchg esi, eax
rep movsw word es:[edi], word [esi]
xchg esi, eax
movzx eax, byte [esp + 0x2a]
mov byte [ebx + 0x16], al
mov eax, ebx
sub eax, ebp
mov dword [esp + 0x14], 0
add eax, 0x70
mov dword [esp + 0x30], eax
mov dword [esp + 8], 0x888b8a8d
mov dword [esp + 0xc], 0
mov dword [esp], 0
mov eax, dword [esp]
cmp eax, 7
ja 0xce12e6
nop
nop
nop
nop
nop
mov eax, dword [esp]
movzx eax, byte [esp + eax + 8]
push dword [esp]
push eax
call fcn.00ce14a0
add esp, 8
mov ecx, dword [esp]
mov byte [esp + ecx + 8], al
inc dword [esp]
mov eax, dword [esp]
cmp eax, 8
jb 0xce12c0
mov eax, dword [esp + 8]
mov ecx, dword [0xcb571c]
test ecx, ecx
je 0xce133e
xor edx, edx
mov edi, dword [0xcb5720]
nop
nop
nop
nop
cmp dword [edi + edx*8], 0xf3285e74
je 0xce1310
inc edx
cmp ecx, edx
jne 0xce1300
jmp 0xce133e
mov ecx, dword [edi + edx*8 + 4]
cmp ecx, eax
je 0xce133e
lea eax, [esp + 0x30]
lea edx, [esp + 0x14]
push 0x40
push 0x3000
push eax
push 0
push edx
push 0xffffffffffffffff
push 6
push dword [0xcb5724]
push ecx
call fcn.00cdebb0
add esp, 0x24
test eax, eax
js 0xce145a
neg ebp
mov edx, dword [esp + 0x260]
add ebx, ebp
add ebx, 0x17
mov eax, dword [esp + 0x14]
mov esi, 0xcacd35
mov edi, eax
mov ecx, 0x16
xchg esi, esi
rep movsd dword es:[edi], dword [esi]
xchg esi, esi
lea edi, [eax + 0x58]
mov esi, 0xcacd8d
xor ecx, ecx
xchg esi, esi
rep movsw word es:[edi], word [esi]
xchg esi, esi
mov byte [eax + 0x58], 0x24
mov eax, dword [esp + 0x14]
lea edi, [eax + 0x59]
mov ecx, ebx
shr ecx, 2
lea esi, [esp + 0x44]
xchg esi, esi
rep movsd dword es:[edi], dword [esi]
xchg esi, esi
mov ecx, ebx
and ecx, 0xfffffffc
add eax, ecx
add eax, 0x59
lea esi, [esp + ecx]
add esi, 0x44
mov ecx, ebx
shr ecx, 1
and ecx, 1
mov ebp, esi
mov edi, eax
xchg esi, ebp
rep movsw word es:[edi], word [esi]
xchg esi, ebp
test bl, 1
je 0xce13c6
and ebx, 2
movzx ecx, byte [esi + ebx]
mov byte [eax + ebx], cl
mov eax, dword [esp + 0x14]
lea ecx, [eax + 0x59]
push edx
push ecx
call eax
mov esi, eax
mov edi, edx
mov dword [esp + 0x2c], 0
mov dword [esp + 8], 0x888b8a8d
mov dword [esp + 0xc], 0
mov dword [esp], 0
mov eax, dword [esp]
cmp eax, 7
ja 0xce1426
nop
nop
nop
nop
mov eax, dword [esp]
movzx eax, byte [esp + eax + 8]
push dword [esp]
push eax
call fcn.00ce14a0
add esp, 8
mov ecx, dword [esp]
mov byte [esp + ecx + 8], al
inc dword [esp]
mov eax, dword [esp]
cmp eax, 8
jb 0xce1400
mov eax, dword [0xcb571c]
test eax, eax
je 0xce148b
mov ecx, dword [esp + 8]
xor edx, edx
mov ebx, dword [0xcb5720]
nop
nop
nop
nop
nop
cmp dword [ebx + edx*8], 0x731cdbf3
je 0xce1461
mov ebp, edx
and ebp, 1
xor edx, 1
lea edx, [edx + ebp*2]
cmp edx, eax
jb 0xce1440
jmp 0xce148b
mov edx, eax
sar edx, 0x1f
jmp 0xce148f
mov eax, dword [ebx + edx*8 + 4]
cmp eax, ecx
je 0xce148b
lea ecx, [esp + 0x2c]
lea edx, [esp + 0x14]
push 0x8000
push ecx
push edx
push 0xffffffffffffffff
push 4
push dword [0xcb5724]
push eax
call fcn.00cdebb0
add esp, 0x1c
mov eax, esi
mov edx, edi
add esp, 0x244
pop esi
pop edi
pop ebx
pop ebp
ret 0x10