Function at 0x441170
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x24
mov esi, dword [esp + 0x44]
mov ebp, dword [esp + 0x38]
mov dword [esp], 0
mov dword [esp + 0xc], ecx
mov eax, dword [ecx + 8]
mov dword [esp + 0x20], eax
mov dword [esp + 4], 0x70605
mov dword [esp + 8], 0
mov edi, 1
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx ecx, byte [esp + edi + 3]
mov ebx, ecx
and ebx, edi
mov eax, ebx
or al, 0xfd
inc al
mov edx, ebx
and dl, 0xd
mul dl
mov edx, eax
add dl, cl
mov eax, ebx
shr al, 1
and al, 1
or bl, 2
mul bl
add al, al
sub dl, al
movzx eax, dl
add eax, edi
add al, 0xfb
mov byte [esp + edi + 3], al
inc edi
cmp edi, 9
jne 0x4411b0
mov eax, dword [esp + 4]
mov ecx, dword [0x451fbc]
test ecx, ecx
je 0x44123c
xor edx, edx
mov edi, dword [0x451fc0]
cmp dword [edi + edx*8], 0xf3285e74
je 0x441210
inc edx
cmp ecx, edx
jne 0x441200
jmp 0x44123c
mov edx, dword [edi + edx*8 + 4]
cmp edx, eax
je 0x44123c
lea eax, [esp + 0x20]
mov ecx, esp
push 4
push 0x3000
push eax
push 0
push ecx
push 0xffffffffffffffff
push 6
push dword [0x451fc4]
push edx
call fcn.004426e0
add esp, 0x24
test eax, eax
js 0x4412bb
mov ecx, ebp
push 0
push 0
mov eax, dword [esp + 0x14]
push dword [eax + 8]
push dword [esp + 0xc]
push dword [eax + 4]
push dword [eax]
call fcn.00440550
test eax, eax
jns 0x441271
xor ecx, ecx
mov edi, 0
cmp eax, 0x8000000d
jne 0x44137f
mov ebx, dword [esp]
mov eax, dword [esp + 0xc]
mov eax, dword [eax + 8]
add eax, ebx
mov edi, dword [esp + 0x40]
mov edx, edi
and edx, 0xa993cf1
not edi
and edi, 0xf566c30e
sub edi, edx
add eax, edi
add eax, 0xa993cf2
xor ecx, ecx
mov edi, 0
mov dword [esp + 0x18], eax
cmp eax, ebx
jbe 0x44137f
mov ebp, dword [esp + 0x40]
neg ebp
mov eax, ebx
mov dword [esp + 0x14], ebx
jmp 0x441300
xor eax, eax
xor edi, edi
jmp 0x44142a
mov ebx, edx
neg ebx
lea ecx, [edx - 1]
mov dword [esp + 0x10], ecx
and dword [esp + 0x10], 0xfffffffd
and ebx, 2
imul ebx, dword [esp + 0x10]
or ecx, 2
shr edi, 1
and edi, 1
imul edi, ecx
lea edi, [ebx + edi*2]
add eax, edi
sub eax, edx
inc eax
xor ecx, ecx
mov edi, 0
cmp eax, dword [esp + 0x18]
jae 0x44137f
test esi, esi
je 0x441309
cmp byte [esi], 0x3f
je 0x441314
movzx edx, byte [eax]
mov edi, dword [esp + 0x3c]
cmp dl, byte [edi]
jne 0x4412ee
cmp dword [esp + 0x40], 2
jb 0x441357
mov edi, 1
mov edx, 2
jmp 0x44134a
movzx ebx, byte [eax + edx - 1]
mov ecx, dword [esp + 0x3c]
cmp bl, byte [ecx + edx - 1]
jne 0x4412c4
inc edi
lea ebx, [edx + ebp]
inc ebx
inc edx
cmp ebx, 1
je 0x441357
test esi, esi
je 0x441330
cmp byte [esi + edx - 1], 0x3f
jne 0x441330
jmp 0x44133f
test eax, eax
je 0x44137b
mov edx, eax
mov ecx, dword [esp + 0x14]
xor edx, ecx
not ecx
and ecx, eax
add ecx, ecx
sub ecx, edx
mov edi, ecx
sar edi, 0x1f
mov eax, dword [esp + 0xc]
add ecx, dword [eax]
adc edi, dword [eax + 4]
jmp 0x44137f
xor ecx, ecx
xor edi, edi
mov ebp, ecx
mov dword [esp + 0x1c], 0
mov dword [esp + 4], 0x70605
mov dword [esp + 8], 0
mov esi, 1
nop
nop
movzx edx, byte [esp + esi + 3]
mov ebx, edx
and ebx, esi
mov eax, ebx
or al, 0xfd
inc al
mov ecx, ebx
and cl, 0xd
mul cl
mov ecx, eax
add cl, dl
mov eax, ebx
shr al, 1
and al, 1
or bl, 2
mul bl
add al, al
sub cl, al
movzx eax, cl
add eax, esi
add al, 0xfb
mov byte [esp + esi + 3], al
inc esi
cmp esi, 9
jne 0x4413a0
mov eax, dword [0x451fbc]
test eax, eax
je 0x441428
mov ecx, dword [esp + 4]
xor edx, edx
mov esi, dword [0x451fc0]
nop
cmp dword [esi + edx*8], 0x731cdbf3
je 0x441400
inc edx
cmp eax, edx
jne 0x4413f0
jmp 0x441428
mov eax, dword [esi + edx*8 + 4]
cmp eax, ecx
je 0x441428
lea ecx, [esp + 0x1c]
mov edx, esp
push 0x8000
push ecx
push edx
push 0xffffffffffffffff
push 4
push dword [0x451fc4]
push eax
call fcn.004426e0
add esp, 0x1c
mov eax, ebp
mov edx, edi
add esp, 0x24
pop esi
pop edi
pop ebx
pop ebp
ret 0x10