Function at 0x1091dc0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x244
mov eax, dword [esp + 0x264]
mov dword [esp + 0x3f], 0xe48040
mov dword [esp + 0x3c], 0x4010ec83
mov dword [esp + 0x38], 0x48e78948
mov dword [esp + 0x34], 0xce8948fc
mov dword [esp + 0x27], 0xc3fc8948
mov dword [esp + 0x24], 0x48d2ff41
mov dword [esp + 0x20], 0
mov dword [esp + 0x1c], 0xfffffff1
mov dword [esp + 0x18], 0xba49c031
lea ebp, [esp + 0x44]
lea edx, [esp + 0x34]
mov edi, ebp
mov ecx, 3
xchg esi, edx
rep movsd dword es:[edi], dword [esi]
xchg esi, edx
lea edi, [esp + 0x50]
lea edx, [esp + 0x40]
mov ecx, 1
xchg esi, edx
rep movsw word es:[edi], word [esi]
xchg esi, edx
movzx ecx, byte [esp + 0x42]
mov byte [esp + 0x52], cl
mov edx, eax
cmp eax, 4
jb 0x1091e57
mov edx, 4
lea ebx, [esp + 0x53]
test eax, eax
je 0x1092026
xor ebp, ebp
jmp 0x1091e9e
inc ebp
cmp edx, ebp
je 0x1091f31
cmp ebp, 3
ja 0x1091e95
jmp dword [ebp*4 + 0xdacd90]
cmp eax, 3
lea ebp, [esp + 0x44]
jbe 0x1092026
test al, 1
je 0x1091f67
mov edx, 0xdad587
mov esi, 0xdad587
mov edi, ebx
xor ecx, ecx
xchg esi, esi
rep movsd dword es:[edi], dword [esi]
xchg esi, esi
mov edi, ebx
mov ecx, 1
xchg esi, edx
rep movsw word es:[edi], word [esi]
xchg esi, edx
add ebx, 2
mov word [esp + 4], 0x50
mov dword [esp], 0x20468b48
mov byte [esp + 0x10], 0
mov dword [esp + 0xc], 0x50000000
mov dword [esp + 8], 0x80868b48
lea edx, [eax*8]
cmp edx, 0x7ffffffe
ja 0x1092013
dec eax
cmp eax, 4
jb 0x1092022
add edx, 0xfffffff8
lea ebp, [esp + 8]
jmp 0x1091fde
mov dword [esp + 0xb], edx
mov esi, ebp
mov edi, ebx
mov ecx, 2
xchg esi, esi
rep movsd dword es:[edi], dword [esi]
xchg esi, esi
add ebx, 8
lea esi, [esp + 0x10]
xor ecx, ecx
mov edi, ebx
xchg esi, esi
rep movsw word es:[edi], word [esi]
xchg esi, esi
dec eax
add edx, 0xfffffff8
cmp eax, 3
jbe 0x1092022
cmp edx, 0x7e
ja 0x1091fb0
mov byte [esp + 3], dl
mov esi, esp
mov edi, ebx
mov ecx, 1
xchg esi, esi
rep movsd dword es:[edi], dword [esi]
xchg esi, esi
lea edi, [ebx + 4]
lea esi, [esp + 4]
xor ecx, ecx
xchg esi, esi
rep movsw word es:[edi], word [esi]
xchg esi, esi
movzx ecx, byte [esp + 4]
mov byte [ebx + 4], cl
add ebx, 5
jmp 0x1091fd5
mov eax, 0xffffffff
mov edx, 0xffffffff
jmp 0x109228f
lea ebp, [esp + 0x44]
mov edx, dword [esp + 0x25c]
mov eax, 0xdad56b
mov edi, ebx
mov ecx, 1
xchg esi, eax
rep movsd dword es:[edi], dword [esi]
xchg esi, eax
lea eax, [ebx + 4]
mov esi, 0xdad56f
mov edi, eax
xor ecx, ecx
xchg esi, esi
rep movsw word es:[edi], word [esi]
xchg esi, esi
mov dword [esp + 0x20], edx
mov ecx, dword [esp + 0x258]
mov dword [esp + 0x1c], ecx
lea edx, [esp + 0x18]
mov edi, eax
mov ecx, 4
xchg esi, edx
rep movsd dword es:[edi], dword [esi]
xchg esi, edx
lea edi, [ebx + 0x14]
lea eax, [esp + 0x28]
mov ecx, 1
xchg esi, eax
rep movsw word es:[edi], word [esi]
xchg esi, eax
movzx eax, byte [esp + 0x2a]
mov byte [ebx + 0x16], al
mov eax, ebx
sub eax, ebp
mov dword [esp + 0x14], 0
add eax, 0x70
mov dword [esp + 0x30], eax
mov dword [esp + 8], 0x888b8a8d
mov dword [esp + 0xc], 0
mov dword [esp], 0
mov eax, dword [esp]
cmp eax, 7
ja 0x10920e6
nop
nop
nop
nop
nop
mov eax, dword [esp]
movzx eax, byte [esp + eax + 8]
push dword [esp]
push eax
call fcn.010922a0
add esp, 8
mov ecx, dword [esp]
mov byte [esp + ecx + 8], al
inc dword [esp]
mov eax, dword [esp]
cmp eax, 8
jb 0x10920c0
mov eax, dword [esp + 8]
mov ecx, dword [0xdb571c]
test ecx, ecx
je 0x109213e
xor edx, edx
mov edi, dword [0xdb5720]
nop
nop
nop
nop
cmp dword [edi + edx*8], 0xf3285e74
je 0x1092110
inc edx
cmp ecx, edx
jne 0x1092100
jmp 0x109213e
mov ecx, dword [edi + edx*8 + 4]
cmp ecx, eax
je 0x109213e
lea eax, [esp + 0x30]
lea edx, [esp + 0x14]
push 0x40
push 0x3000
push eax
push 0
push edx
push 0xffffffffffffffff
push 6
push dword [0xdb5724]
push ecx
call fcn.0108f9b0
add esp, 0x24
test eax, eax
js 0x109225a
neg ebp
mov edx, dword [esp + 0x260]
add ebx, ebp
add ebx, 0x17
mov eax, dword [esp + 0x14]
mov esi, 0xdacd35
mov edi, eax
mov ecx, 0x16
xchg esi, esi
rep movsd dword es:[edi], dword [esi]
xchg esi, esi
lea edi, [eax + 0x58]
mov esi, 0xdacd8d
xor ecx, ecx
xchg esi, esi
rep movsw word es:[edi], word [esi]
xchg esi, esi
mov byte [eax + 0x58], 0x24
mov eax, dword [esp + 0x14]
lea edi, [eax + 0x59]
mov ecx, ebx
shr ecx, 2
lea esi, [esp + 0x44]
xchg esi, esi
rep movsd dword es:[edi], dword [esi]
xchg esi, esi
mov ecx, ebx
and ecx, 0xfffffffc
add eax, ecx
add eax, 0x59
lea esi, [esp + ecx]
add esi, 0x44
mov ecx, ebx
shr ecx, 1
and ecx, 1
mov ebp, esi
mov edi, eax
xchg esi, ebp
rep movsw word es:[edi], word [esi]
xchg esi, ebp
test bl, 1
je 0x10921c6
and ebx, 2
movzx ecx, byte [esi + ebx]
mov byte [eax + ebx], cl
mov eax, dword [esp + 0x14]
lea ecx, [eax + 0x59]
push edx
push ecx
call eax
mov esi, eax
mov edi, edx
mov dword [esp + 0x2c], 0
mov dword [esp + 8], 0x888b8a8d
mov dword [esp + 0xc], 0
mov dword [esp], 0
mov eax, dword [esp]
cmp eax, 7
ja 0x1092226
nop
nop
nop
nop
mov eax, dword [esp]
movzx eax, byte [esp + eax + 8]
push dword [esp]
push eax
call fcn.010922a0
add esp, 8
mov ecx, dword [esp]
mov byte [esp + ecx + 8], al
inc dword [esp]
mov eax, dword [esp]
cmp eax, 8
jb 0x1092200
mov eax, dword [0xdb571c]
test eax, eax
je 0x109228b
mov ecx, dword [esp + 8]
xor edx, edx
mov ebx, dword [0xdb5720]
nop
nop
nop
nop
nop
cmp dword [ebx + edx*8], 0x731cdbf3
je 0x1092261
mov ebp, edx
and ebp, 1
xor edx, 1
lea edx, [edx + ebp*2]
cmp edx, eax
jb 0x1092240
jmp 0x109228b
mov edx, eax
sar edx, 0x1f
jmp 0x109228f
mov eax, dword [ebx + edx*8 + 4]
cmp eax, ecx
je 0x109228b
lea ecx, [esp + 0x2c]
lea edx, [esp + 0x14]
push 0x8000
push ecx
push edx
push 0xffffffffffffffff
push 4
push dword [0xdb5724]
push eax
call fcn.0108f9b0
add esp, 0x1c
mov eax, esi
mov edx, edi
add esp, 0x244
pop esi
pop edi
pop ebx
pop ebp
ret 0x10