Function at 0x1003a6f0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x40
push esi
push edi
mov edi, dword [ebp + 0xc]
mov esi, ecx
mov dword [esp + 0x34], esi
cmp edi, 3
jl 0x1003ab62
test byte [esi + 0x24], 4
mov eax, dword [esi + 0x2c]
movss xmm0, dword [eax]
movss dword [esp + 0x20], xmm0
movss xmm0, dword [eax + 4]
movss dword [esp + 0x24], xmm0
je 0x1003aabf
mov eax, dword [ebp + 0x10]
movss xmm0, dword [esi + 0x8c]
and eax, 0xffffff
mov dword [esp + 0x38], eax
lea eax, [edi + edi]
push eax
mov dword [esp + 0x48], eax
lea eax, [edi*8 - 6]
add eax, edi
movss dword [esp + 0x14], xmm0
push eax
call fcn.100396f0
mov eax, dword [esi + 0x28]
movzx edx, ax
mov dword [esp + 0x1c], edx
lea ecx, [eax + 1]
movzx eax, dx
mov dword [esp + 0x40], ecx
mov ecx, 2
mov dword [esp + 0x18], ecx
mov dword [esp + 0x14], eax
mov eax, dword [esi + 0x38]
mov word [eax], dx
lea edx, [edx + ecx*2]
mov eax, dword [esi + 0x38]
lea ecx, [edx - 2]
mov word [eax + 2], cx
mov eax, dword [esi + 0x38]
mov ecx, dword [esp + 0x18]
inc ecx
mov dword [esp + 0x18], ecx
mov word [eax + 4], dx
add dword [esi + 0x38], 6
mov edx, dword [esp + 0x1c]
cmp ecx, edi
jl 0x1003a781
mov eax, dword [esp + 0x14]
movzx eax, ax
mov dword [esp + 0x3c], eax
mov eax, dword [esi + 0x2c]
mov dword [esp + 0x1c], eax
cmp edi, dword [eax + 0x30]
jle 0x1003a814
mov ecx, dword [eax + 0x34]
test ecx, ecx
je 0x1003a7e7
mov eax, dword [0x10086014]
test eax, eax
je 0x1003a7dd
dec dword [eax + 0xb0]
push ecx
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
add esp, 4
mov eax, dword [0x10086014]
test eax, eax
je 0x1003a7f6
inc dword [eax + 0xb0]
lea eax, [edi*8]
push eax
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov ecx, dword [esp + 0x20]
add esp, 4
mov dword [ecx + 0x34], eax
mov dword [ecx + 0x30], edi
mov eax, dword [esi + 0x2c]
mov eax, dword [eax + 0x34]
lea ecx, [edi - 1]
movss xmm5, dword [0x1008024c]
xor edx, edx
mov esi, dword [ebp + 8]
xorps xmm4, xmm4
mov dword [esp + 0xc], ecx
shl ecx, 3
mov dword [esp + 8], edx
mov dword [esp + 0x18], eax
mov dword [esp + 0x1c], ecx
nop dword [eax]
movss xmm1, dword [esi + edx*8 + 4]
lea edi, [edx*8]
movss xmm2, dword [esi + edx*8]
subss xmm2, dword [ecx + esi]
subss xmm1, dword [ecx + esi + 4]
mov dword [esp + 0x30], edi
lea edi, [esi + 4]
mov dword [esp + 0x14], edi
mov edi, dword [ebp + 0xc]
movaps xmm0, xmm2
movss dword [esp + 0x28], xmm2
movaps xmm3, xmm1
mulss xmm0, xmm2
mulss xmm3, xmm1
movss dword [esp + 0x2c], xmm1
addss xmm3, xmm0
comiss xmm3, xmm4
jbe 0x1003a8da
cvtps2pd xmm0, xmm3
xorps xmm1, xmm1
ucomisd xmm1, xmm0
ja 0x1003a8a0
sqrtsd xmm0, xmm0
jmp 0x1003a8a5
call sub.api_ms_win_crt_math_l1_1_0.dll__libm_sse2_sqrt_precise
movss xmm5, dword [0x1008024c]
xorps xmm4, xmm4
cvtsd2ss xmm0, xmm0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 8]
movaps xmm1, xmm5
movss xmm2, dword [esp + 0x28]
divss xmm1, xmm0
movaps xmm0, xmm1
mulss xmm1, dword [esp + 0x2c]
mulss xmm2, xmm0
xorps xmm2, xmmword [0x10080660]
inc edx
movss dword [ecx + eax], xmm1
movss dword [ecx + eax + 4], xmm2
mov ecx, dword [esp + 0x30]
mov dword [esp + 0x1c], ecx
mov dword [esp + 8], edx
cmp edx, edi
jl 0x1003a840
movss xmm0, dword [esp + 0x10]
lea edx, [edi - 1]
movss xmm4, dword [0x10080218]
mov ecx, eax
movss xmm6, dword [0x100801d8]
sub ecx, esi
movss xmm7, dword [0x100802bc]
mov esi, dword [esp + 0x34]
mulss xmm0, xmm4
mov dword [esp + 0x30], ecx
mov ecx, dword [esp + 0x14]
mov dword [esp + 8], 0
movss dword [esp + 0x10], xmm0
nop dword [eax]
nop dword [eax + eax]
mov edi, dword [esp + 8]
movss xmm2, dword [eax + edi*8]
mov edi, dword [esp + 0x30]
addss xmm2, dword [eax + edx*8]
movss xmm3, dword [edi + ecx]
addss xmm3, dword [eax + edx*8 + 4]
mulss xmm2, xmm4
mulss xmm3, xmm4
movaps xmm0, xmm2
mulss xmm0, xmm2
movaps xmm1, xmm3
mulss xmm1, xmm3
addss xmm1, xmm0
comiss xmm1, xmm6
jbe 0x1003a9a5
movaps xmm0, xmm5
divss xmm0, xmm1
movaps xmm1, xmm7
minss xmm1, xmm0
movaps xmm0, xmm1
mulss xmm3, xmm1
mulss xmm2, xmm0
movss xmm0, dword [ecx - 4]
mov eax, dword [esi + 0x34]
movss xmm1, dword [esp + 0x10]
mulss xmm1, xmm2
mov edx, dword [ebp + 0x10]
movss xmm2, dword [esp + 0x10]
mulss xmm2, xmm3
mov edi, dword [esp + 0x40]
movss xmm3, dword [esp + 0x24]
subss xmm0, xmm1
movss dword [eax], xmm0
movss xmm0, dword [ecx]
mov eax, dword [esi + 0x34]
subss xmm0, xmm2
movss dword [eax + 4], xmm0
mov eax, dword [esi + 0x34]
movss xmm0, dword [esp + 0x20]
movss dword [eax + 8], xmm0
movss dword [eax + 0xc], xmm3
mov eax, dword [esi + 0x34]
mov dword [eax + 0x10], edx
addss xmm1, dword [ecx - 4]
mov eax, dword [esi + 0x34]
movss dword [eax + 0x14], xmm1
addss xmm2, dword [ecx]
mov eax, dword [esi + 0x34]
mov ecx, dword [esp + 0x38]
movss dword [eax + 0x18], xmm2
mov eax, dword [esi + 0x34]
movss dword [eax + 0x1c], xmm0
movss dword [eax + 0x20], xmm3
mov eax, dword [esi + 0x34]
mov dword [eax + 0x24], ecx
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0x3c]
add dword [esi + 0x34], 0x28
lea edx, [ecx + eax*2]
mov eax, dword [esi + 0x38]
mov word [eax], dx
mov eax, dword [esp + 0xc]
lea ecx, [ecx + eax*2]
mov eax, dword [esi + 0x38]
mov word [eax + 2], cx
mov eax, dword [esp + 0xc]
movzx ecx, di
lea ecx, [ecx + eax*2]
mov eax, dword [esi + 0x38]
mov word [eax + 4], cx
mov eax, dword [esi + 0x38]
mov word [eax + 6], cx
mov eax, dword [esp + 8]
movzx ecx, di
lea ecx, [ecx + eax*2]
mov eax, dword [esi + 0x38]
mov word [eax + 8], cx
mov eax, dword [esi + 0x38]
mov ecx, dword [esp + 0x14]
add ecx, 8
mov dword [esp + 0x14], ecx
mov word [eax + 0xa], dx
mov eax, dword [esp + 8]
mov edx, eax
add dword [esi + 0x38], 0xc
inc eax
cmp eax, dword [ebp + 0xc]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x18]
mov dword [esp + 0xc], edx
jl 0x1003a950
mov eax, dword [esp + 0x44]
movzx eax, ax
add dword [esi + 0x28], eax
pop edi
pop esi
mov esp, ebp
pop ebp
ret 0xc
lea eax, [edi - 2]
push edi
lea eax, [eax + eax*2]
push eax
call fcn.100396f0
movss xmm0, dword [esp + 0x20]
movss xmm1, dword [esp + 0x24]
mov dword [esp + 0x1c], edi
mov edi, dword [ebp + 8]
nop
mov eax, dword [esi + 0x34]
lea edi, [edi + 8]
mov ecx, dword [edi - 8]
mov edx, dword [edi - 4]
mov dword [eax], ecx
mov ecx, dword [ebp + 0x10]
mov dword [eax + 4], edx
mov eax, dword [esi + 0x34]
movss dword [eax + 8], xmm0
movss dword [eax + 0xc], xmm1
mov eax, dword [esi + 0x34]
mov dword [eax + 0x10], ecx
add dword [esi + 0x34], 0x14
sub dword [esp + 0x1c], 1
jne 0x1003aae0
mov edi, dword [ebp + 0xc]
mov edx, 2
mov dword [esp + 0x24], edx
nop
mov ecx, dword [esi + 0x38]
mov ax, word [esi + 0x28]
movzx edx, dx
mov word [ecx], ax
movzx ecx, word [esi + 0x28]
mov eax, dword [esi + 0x38]
dec cx
add cx, dx
mov word [eax + 2], cx
movzx ecx, word [esi + 0x28]
mov eax, dword [esi + 0x38]
add cx, dx
mov edx, dword [esp + 0x24]
inc edx
mov dword [esp + 0x24], edx
mov word [eax + 4], cx
add dword [esi + 0x38], 6
cmp edx, edi
jl 0x1003ab20
movzx eax, di
add dword [esi + 0x28], eax
pop edi
pop esi
mov esp, ebp
pop ebp
ret 0xc