Function at 0x10029030
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x30
mov eax, dword [ebp + 0x18]
push esi
mov esi, dword [eax + 4]
mov dword [ebp - 4], esi
test esi, esi
jns 0x10029068
cmp dword [eax], 0
jg 0x10029068
push dword [ebp + 0xc]
mov eax, dword [ebp + 0x14]
mov ecx, dword [ebp + 0x10]
add eax, ecx
push eax
push ecx
call fcn.10027630
mov eax, dword [ebp + 8]
add esp, 0xc
mov dword [eax], edx
pop esi
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x10]
lea edx, [ebp - 0x24]
mov ecx, dword [ebp + 0x14]
push ebx
push edi
add ecx, eax
mov dword [ebp - 0x30], eax
push edx
push ecx
push eax
mov dword [ebp - 8], ecx
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x24], 0
call fcn.10034750
mov edx, dword [ebp - 0x30]
add esp, 0xc
xor ebx, ebx
mov dword [ebp - 0x28], eax
mov byte [ebp - 0x20], 0
cmp edx, dword [ebp - 0x2c]
je 0x10029154
nop dword [eax]
mov dword [ebp - 0xc], ebx
cmp ebx, esi
jne 0x100290bf
test esi, esi
jns 0x10029154
mov edi, dword [ebp - 0x24]
cmp edi, 0x25fd
jae 0x100290ed
mov eax, 1
mov ecx, 0x10133b58
cmp edi, dword [ecx]
jb 0x10029127
add ecx, 4
xor eax, 3
cmp ecx, 0x10133e80
jne 0x100290d4
mov eax, 1
jmp 0x10029127
mov eax, 0x10133b58
mov edx, 0xca
mov esi, edx
shr esi, 1
cmp edi, dword [eax + esi*4]
lea ecx, [eax + esi*4]
jae 0x10029107
mov edx, esi
jmp 0x10029111
lea eax, [ecx + 4]
or ecx, 0xffffffff
sub ecx, esi
add edx, ecx
test edx, edx
jg 0x100290f7
mov esi, dword [ebp - 4]
sub eax, 0x10133b58
mov edx, dword [ebp - 0x30]
sar eax, 2
and eax, 1
inc eax
mov ecx, Ordinal_2
sub ecx, eax
cmp ecx, ebx
jl 0x100291c0
add ebx, eax
cmp ebx, esi
jle 0x10029140
test esi, esi
jns 0x100291bb
lea ecx, [ebp - 0x30]
call fcn.100327e0
mov edx, dword [ebp - 0x30]
cmp edx, dword [ebp - 0x2c]
jne 0x100290b0
mov dword [ebp - 8], edx
mov eax, dword [ebp + 0x10]
xor esi, esi
mov ecx, dword [ebp + 0xc]
xor edi, edi
mov dword [ebp - 0x18], eax
mov eax, dword [ebp + 0x18]
mov dword [ebp - 0xc], 1
mov dword [ebp - 4], esi
mov al, byte [eax + 9]
test al, al
movzx edx, al
cmove edx, dword [ebp - 0xc]
mov dword [ebp - 0xc], edx
mov edx, dword [ebp + 0x18]
mov edx, dword [edx]
cmp ebx, edx
jge 0x100291cf
mov eax, dword [ebp - 0xc]
movzx eax, al
sub eax, 1
je 0x10029232
sub eax, 1
je 0x100291cb
sub eax, 1
jne 0x100291cf
mov eax, edx
sub eax, ebx
cdq
sub eax, edx
mov edi, eax
mov eax, dword [ebp + 0x18]
sar edi, 1
mov esi, dword [eax]
sub esi, edi
sub esi, ebx
mov dword [ebp - 4], esi
jmp 0x100291d2
mov ebx, dword [ebp - 0xc]
jmp 0x10029154
test esi, esi
jns 0x10029154
mov ebx, Ordinal_2
jmp 0x10029157
mov edi, edx
sub edi, ebx
mov eax, dword [ebp + 0x18]
lea ebx, [eax + 0xf]
movzx eax, byte [eax + 0xe]
mov dword [ebp + 0x18], eax
test edi, edi
jle 0x100291f8
lea esi, [ebx + eax]
push ecx
push esi
push ebx
call fcn.10027630
dec edi
add esp, 0xc
mov ecx, edx
test edi, edi
jg 0x100291e3
mov esi, dword [ebp - 4]
mov edi, dword [ebp + 0x18]
mov eax, dword [ebp - 0x18]
mov edx, dword [ebp - 8]
sub edx, eax
push ecx
add edx, eax
push edx
push eax
call fcn.10027630
add esp, 0xc
test esi, esi
jle 0x10029226
add edi, ebx
push edx
push edi
push ebx
call fcn.10027630
dec esi
add esp, 0xc
test esi, esi
jg 0x10029216
mov eax, dword [ebp + 8]
pop edi
pop ebx
pop esi
mov dword [eax], edx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0x18]
mov esi, edx
sub esi, ebx
movzx edi, byte [eax + 0xe]
lea ebx, [eax + 0xf]
jmp 0x100291fb