Function at 0x41b980
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
sub esp, 0x40
mov eax, dword [0x4c60c4]
xor eax, ebp
mov dword [ebp - 4], eax
push esi
mov esi, dword [ebx + 0xc]
push edi
mov edi, ecx
mov dword [ebp - 0x30], edi
cmp esi, 3
jl 0x41bd30
test byte [edi + 0x24], 4
mov eax, dword [edi + 0x28]
movss xmm0, dword [eax]
movss dword [ebp - 0x28], xmm0
movss xmm0, dword [eax + 4]
movss dword [ebp - 0x18], xmm0
je 0x41bc8d
mov eax, dword [ebx + 0x10]
and eax, 0xffffff
mov dword [ebp - 0x34], eax
lea eax, [esi + esi]
push eax
mov dword [ebp - 0x3c], eax
lea eax, [esi*8 - 6]
add eax, esi
push eax
call fcn.0041aa00
mov eax, dword [edi + 0x30]
mov edx, 2
mov dword [ebp - 0x14], eax
mov dword [ebp - 0xc], edx
lea ecx, [eax + 1]
mov dword [ebp - 0x38], ecx
nop dword [eax + eax]
movzx ecx, ax
mov eax, dword [edi + 0x38]
lea edx, [ecx + edx*2]
mov word [eax], cx
lea ecx, [edx - 2]
mov eax, dword [edi + 0x38]
mov word [eax + 2], cx
mov eax, dword [edi + 0x38]
mov word [eax + 4], dx
mov edx, dword [ebp - 0xc]
add dword [edi + 0x38], 6
inc edx
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0xc], edx
cmp edx, esi
jl 0x41ba10
lea eax, [esi*8]
call fcn.0049bbb0
movss xmm5, dword [0x4bdfa8]
lea eax, [esi - 1]
mov edx, dword [ebx + 8]
xor ecx, ecx
mov dword [ebp - 0x10], eax
xorps xmm4, xmm4
shl eax, 3
mov dword [ebp - 0x24], ecx
mov dword [ebp - 8], eax
nop word [eax + eax]
movss xmm2, dword [edx + ecx*8]
lea esi, [edx + 4]
movss xmm1, dword [edx + ecx*8 + 4]
lea edi, [ecx*8]
subss xmm2, dword [eax + edx]
subss xmm1, dword [eax + edx + 4]
mov dword [ebp - 0x1c], esi
movaps xmm0, xmm2
movss dword [ebp - 0x2c], xmm2
movaps xmm3, xmm1
mulss xmm0, xmm2
mulss xmm3, xmm1
movss dword [ebp - 0x20], xmm1
addss xmm3, xmm0
comiss xmm3, xmm4
jbe 0x41bafb
cvtps2pd xmm0, xmm3
xorps xmm1, xmm1
ucomisd xmm1, xmm0
ja 0x41bac6
sqrtsd xmm0, xmm0
jmp 0x41bacb
call fcn.0049d6f0
movss xmm5, dword [0x4bdfa8]
xorps xmm4, xmm4
cvtsd2ss xmm0, xmm0
mov eax, dword [ebp - 8]
mov ecx, dword [ebp - 0x24]
mov edx, dword [ebx + 8]
movaps xmm1, xmm5
movss xmm2, dword [ebp - 0x2c]
divss xmm1, xmm0
movaps xmm0, xmm1
mulss xmm1, dword [ebp - 0x20]
mulss xmm2, xmm0
xorps xmm2, xmmword [0x4be510]
mov esi, esp
inc ecx
mov dword [ebp - 0x24], ecx
movss dword [eax + esi], xmm1
movss dword [eax + esi + 4], xmm2
mov eax, edi
mov dword [ebp - 8], eax
cmp ecx, dword [ebx + 0xc]
jl 0x41ba70
movss xmm6, dword [0x4bdf74]
mov eax, esi
mov edi, dword [ebp - 0x30]
sub esi, edx
mov ecx, dword [ebp - 0x1c]
xor edx, edx
mov dword [ebp - 0x20], esi
mov dword [ebp - 8], edx
nop dword [eax + eax]
movss xmm2, dword [eax + edx*8]
movaps xmm4, xmm5
movss xmm3, dword [esi + ecx]
mov edx, dword [ebp - 0x10]
mov esi, edx
addss xmm2, dword [eax + edx*8]
addss xmm3, dword [eax + esi*8 + 4]
mov eax, dword [edi + 0x34]
mov edx, dword [ebx + 0x10]
mulss xmm2, xmm6
mulss xmm3, xmm6
movaps xmm0, xmm2
mulss xmm0, xmm2
movaps xmm1, xmm3
mulss xmm1, xmm3
addss xmm1, xmm0
movaps xmm0, xmm6
maxss xmm0, xmm1
divss xmm4, xmm0
movss xmm0, dword [ecx - 4]
movaps xmm1, xmm4
mulss xmm4, xmm3
movss xmm3, dword [ebp - 0x18]
mulss xmm1, xmm2
movss xmm2, dword [ebp - 0x28]
mulss xmm4, xmm6
mulss xmm1, xmm6
subss xmm0, xmm1
movss dword [eax], xmm0
movss xmm0, dword [ecx]
mov eax, dword [edi + 0x34]
subss xmm0, xmm4
movss dword [eax + 4], xmm0
mov eax, dword [edi + 0x34]
movss dword [eax + 8], xmm2
movss dword [eax + 0xc], xmm3
mov eax, dword [edi + 0x34]
mov dword [eax + 0x10], edx
movss xmm0, dword [ecx - 4]
mov eax, dword [edi + 0x34]
addss xmm0, xmm1
mov edx, dword [ebp - 8]
movss dword [eax + 0x14], xmm0
movss xmm0, dword [ecx]
mov eax, dword [edi + 0x34]
addss xmm0, xmm4
mov ecx, dword [ebp - 0x34]
movss dword [eax + 0x18], xmm0
mov eax, dword [edi + 0x34]
movss dword [eax + 0x1c], xmm2
movss dword [eax + 0x20], xmm3
mov eax, dword [edi + 0x34]
mov dword [eax + 0x24], ecx
mov eax, dword [ebp - 0x14]
add dword [edi + 0x34], 0x28
movzx ecx, ax
mov eax, dword [edi + 0x38]
lea esi, [ecx + edx*2]
mov word [eax], si
mov eax, dword [ebp - 0x10]
lea ecx, [ecx + eax*2]
mov eax, dword [edi + 0x38]
mov word [eax + 2], cx
mov eax, dword [ebp - 0x38]
movzx edx, ax
mov eax, dword [ebp - 0x10]
lea ecx, [edx + eax*2]
mov eax, dword [edi + 0x38]
mov word [eax + 4], cx
mov eax, dword [edi + 0x38]
mov word [eax + 6], cx
mov eax, dword [ebp - 8]
lea ecx, [edx + eax*2]
mov eax, dword [edi + 0x38]
mov edx, dword [ebp - 8]
mov dword [ebp - 0x10], edx
mov word [eax + 8], cx
mov eax, dword [edi + 0x38]
mov word [eax + 0xa], si
add dword [edi + 0x38], 0xc
inc edx
mov ecx, dword [ebp - 0x1c]
mov eax, esp
mov esi, dword [ebp - 0x20]
add ecx, 8
mov dword [ebp - 8], edx
mov dword [ebp - 0x1c], ecx
cmp edx, dword [ebx + 0xc]
jl 0x41bb40
mov eax, dword [ebp - 0x3c]
movzx eax, ax
jmp 0x41bd2d
lea eax, [esi - 2]
push esi
lea eax, [eax + eax*2]
push eax
call fcn.0041aa00
movss xmm0, dword [ebp - 0x28]
movss xmm1, dword [ebp - 0x18]
mov dword [ebp - 0x14], esi
mov esi, dword [ebx + 8]
nop word [eax + eax]
mov eax, dword [edi + 0x34]
lea esi, [esi + 8]
mov ecx, dword [esi - 8]
mov edx, dword [esi - 4]
mov dword [eax], ecx
mov ecx, dword [ebx + 0x10]
mov dword [eax + 4], edx
mov eax, dword [edi + 0x34]
movss dword [eax + 8], xmm0
movss dword [eax + 0xc], xmm1
mov eax, dword [edi + 0x34]
mov dword [eax + 0x10], ecx
add dword [edi + 0x34], 0x14
sub dword [ebp - 0x14], 1
jne 0x41bcb0
mov esi, dword [ebx + 0xc]
mov edx, 2
mov dword [ebp - 0x18], edx
nop dword [eax]
mov ecx, dword [edi + 0x38]
mov ax, word [edi + 0x30]
movzx edx, dx
mov word [ecx], ax
movzx ecx, word [edi + 0x30]
mov eax, dword [edi + 0x38]
dec cx
add cx, dx
mov word [eax + 2], cx
movzx ecx, word [edi + 0x30]
mov eax, dword [edi + 0x38]
add cx, dx
mov edx, dword [ebp - 0x18]
inc edx
mov dword [ebp - 0x18], edx
mov word [eax + 4], cx
add dword [edi + 0x38], 6
cmp edx, esi
jl 0x41bcf0
movzx eax, si
add dword [edi + 0x30], eax
lea esp, [ebp - 0x48]
pop edi
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00475e9f
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret 0xc