Function at 0x40f8e1
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc84
mov eax, dword [edx + 0x870]
add eax, 0x20
mov ecx, eax
shl ecx, 3
cmp ecx, 0x320
mov dword [ebp - 4], ecx
jb 0x40f90a
xor eax, eax
jmp 0x40fb65
shl eax, 4
push ebx
push esi
mov esi, eax
push edi
mov ecx, esi
mov ebx, ecx
shr ecx, 2
xor eax, eax
lea edi, [ebp - 0x644]
rep stosd dword es:[edi], eax
mov ecx, ebx
and ecx, 3
rep stosb byte es:[edi], al
mov ecx, esi
shr ecx, 2
xor eax, eax
lea edi, [ebp - 0xc84]
rep stosd dword es:[edi], eax
mov ecx, esi
and ecx, 3
rep stosb byte es:[edi], al
mov eax, dword [ebp + 0x18]
test eax, eax
jbe 0x40faed
mov ecx, dword [ebp + 0x14]
mov edi, dword [edx + 0x30]
shl ecx, 2
mov dword [ebp + 0x14], ecx
mov ecx, dword [ebp + 0x10]
shl ecx, 2
mov dword [ebp + 0x18], ecx
mov dword [ebp + 0x10], eax
mov esi, 0x400
mov ecx, dword [ebp + 8]
mov eax, dword [edx + 0x34]
xor ebx, ebx
and ecx, 7
inc ebx
shl ebx, cl
mov ecx, dword [ebp + 8]
shr ecx, 3
mov al, byte [ecx + eax]
test al, bl
mov eax, dword [ebp + 8]
jne 0x40f98f
movzx eax, byte [edi + eax]
jmp 0x40fa19
mov cl, byte [edi + eax]
cmp cl, 7
mov eax, dword [edx + 0x2c]
jae 0x40f9da
mov ebx, dword [ebp + 0x18]
mov eax, dword [ebx + eax]
cmp eax, esi
jae 0x40f9ae
movzx eax, byte [eax + edx + 0x45c]
jmp 0x40f9ce
cmp eax, 0x80000
jae 0x40f9c5
shr eax, 9
movzx eax, byte [eax + edx + 0x45c]
add eax, 0x12
jmp 0x40f9ce
shr eax, 0x11
movzx eax, al
add eax, 0x22
movzx ecx, cl
lea eax, [ecx + eax*8 + 0x100]
jmp 0x40fa15
mov ecx, dword [ebp + 0x18]
mov eax, dword [ecx + eax]
cmp eax, esi
jae 0x40f9ee
movzx eax, byte [eax + edx + 0x45c]
jmp 0x40fa0e
cmp eax, 0x80000
jae 0x40fa05
shr eax, 9
movzx eax, byte [eax + edx + 0x45c]
add eax, 0x12
jmp 0x40fa0e
shr eax, 0x11
movzx eax, al
add eax, 0x22
lea eax, [eax*8 + 0x107]
add dword [ebp + 0x18], 4
mov ecx, dword [ebp + 0xc]
inc dword [ebp + 8]
xor ebx, ebx
and ecx, 7
lea eax, [ebp + eax*2 - 0x644]
inc word [eax]
mov eax, dword [edx + 0x34]
inc ebx
shl ebx, cl
mov ecx, dword [ebp + 0xc]
shr ecx, 3
mov al, byte [ecx + eax]
test al, bl
mov eax, dword [ebp + 0xc]
jne 0x40fa4d
movzx eax, byte [edi + eax]
jmp 0x40fad7
mov cl, byte [edi + eax]
cmp cl, 7
mov eax, dword [edx + 0x2c]
jae 0x40fa98
mov ebx, dword [ebp + 0x14]
mov eax, dword [ebx + eax]
cmp eax, esi
jae 0x40fa6c
movzx eax, byte [eax + edx + 0x45c]
jmp 0x40fa8c
cmp eax, 0x80000
jae 0x40fa83
shr eax, 9
movzx eax, byte [eax + edx + 0x45c]
add eax, 0x12
jmp 0x40fa8c
shr eax, 0x11
movzx eax, al
add eax, 0x22
movzx ecx, cl
lea eax, [ecx + eax*8 + 0x100]
jmp 0x40fad3
mov ecx, dword [ebp + 0x14]
mov eax, dword [ecx + eax]
cmp eax, esi
jae 0x40faac
movzx eax, byte [eax + edx + 0x45c]
jmp 0x40facc
cmp eax, 0x80000
jae 0x40fac3
shr eax, 9
movzx eax, byte [eax + edx + 0x45c]
add eax, 0x12
jmp 0x40facc
shr eax, 0x11
movzx eax, al
add eax, 0x22
lea eax, [eax*8 + 0x107]
add dword [ebp + 0x14], 4
inc dword [ebp + 0xc]
lea eax, [ebp + eax*2 - 0xc84]
inc word [eax]
dec dword [ebp + 0x10]
jne 0x40f968
xor esi, esi
xor edi, edi
cmp dword [ebp - 4], esi
jbe 0x40fb60
mov ax, word [ebp + esi*2 - 0x644]
cmp ax, 0x100
movzx eax, ax
jae 0x40fb10
movzx eax, byte [eax + 0x424340]
jmp 0x40fb1d
shr eax, 8
movzx eax, byte [eax + 0x424340]
add eax, 8
mov cx, word [ebp + esi*2 - 0xc84]
cmp cx, 0x100
movzx ecx, cx
jae 0x40fb38
movzx ecx, byte [ecx + 0x424340]
jmp 0x40fb45
shr ecx, 8
movzx ecx, byte [ecx + 0x424340]
add ecx, 8
mov eax, dword [eax*4 + 0x4242f8]
sub eax, dword [ecx*4 + 0x4242f8]
cdq
xor eax, edx
sub eax, edx
add edi, eax
inc esi
cmp esi, dword [ebp - 4]
jb 0x40faf6
mov eax, edi
pop edi
pop esi
pop ebx
leave
ret 0x14