Function at 0x10035104
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push ebx
mov ebx, esp
push ecx
push ecx
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
sub esp, 0x40
mov eax, dword [0x10082940]
xor eax, ebp
mov dword [ebp - 4], eax
push esi
push edi
mov edi, dword [ebx + 0xc]
mov esi, ecx
mov dword [ebp - 0x38], esi
cmp edi, 3
jl 0x1003546e
test byte [esi + 0x24], 4
mov eax, dword [esi + 0x2c]
mov ecx, dword [eax]
mov eax, dword [eax + 4]
mov dword [ebp - 0x28], ecx
mov ecx, esi
mov dword [ebp - 0x14], eax
je 0x100353e0
mov eax, dword [ebx + 0x10]
and eax, 0xffffff
mov dword [ebp - 0x3c], eax
lea eax, [edi + edi]
push eax
mov dword [ebp - 0x40], eax
imul eax, edi, 9
sub eax, 6
push eax
call fcn.10039c2a
mov eax, dword [esi + 0x28]
push 2
movzx edx, ax
mov dword [ebp - 0x20], eax
lea ecx, [eax + 1]
mov dword [ebp - 8], edx
mov dword [ebp - 0x24], ecx
pop ecx
mov dword [ebp - 0x10], ecx
mov eax, dword [esi + 0x38]
mov word [eax], dx
lea edx, [edx + ecx*2]
mov eax, dword [esi + 0x38]
lea ecx, [edx - 2]
mov word [eax + 2], cx
mov eax, dword [esi + 0x38]
mov ecx, dword [ebp - 0x10]
mov word [eax + 4], dx
add dword [esi + 0x38], 6
inc ecx
mov edx, dword [ebp - 8]
mov dword [ebp - 0x10], ecx
cmp ecx, edi
jl 0x10035189
mov eax, edi
shl eax, 3
call fcn.10067160
xor eax, eax
lea ecx, [edi - 1]
mov dword [ebp - 0x18], ecx
mov edx, eax
shl ecx, 3
mov esi, esp
mov dword [ebp - 0x1c], eax
mov eax, dword [ebx + 8]
mov dword [ebp - 8], edx
mov dword [ebp - 0xc], ecx
movss xmm2, dword [eax + edx*8]
mov edi, edx
movss xmm1, dword [eax + edx*8 + 4]
subss xmm2, dword [ecx + eax]
subss xmm1, dword [ecx + eax + 4]
shl edi, 3
mov dword [ebp - 0x34], edi
mov edi, dword [ebx + 0xc]
movaps xmm0, xmm2
movss dword [ebp - 0x2c], xmm2
movaps xmm3, xmm1
mulss xmm0, xmm2
mulss xmm3, xmm1
movss dword [ebp - 0x30], xmm1
addss xmm3, xmm0
comiss xmm3, dword [0x1006d548]
jbe 0x10035252
cvtps2pd xmm0, xmm3
call sub.api_ms_win_crt_math_l1_1_0.dll__libm_sse2_sqrt_precise
movss xmm1, dword [0x1006d570]
cvtsd2ss xmm0, xmm0
mov eax, dword [ebx + 8]
mov ecx, dword [ebp - 0xc]
mov edx, dword [ebp - 8]
movss xmm2, dword [ebp - 0x2c]
divss xmm1, xmm0
movaps xmm0, xmm1
mulss xmm1, dword [ebp - 0x30]
mulss xmm2, xmm0
xorps xmm2, xmmword [0x1006d5f0]
inc edx
movss dword [ecx + esi], xmm1
movss dword [ecx + esi + 4], xmm2
mov ecx, dword [ebp - 0x34]
mov dword [ebp - 0xc], ecx
mov dword [ebp - 8], edx
cmp edx, edi
jl 0x100351da
mov ecx, dword [ebp - 0x20]
movss xmm5, dword [0x1006d568]
movzx ecx, cx
mov dword [ebp - 0x20], ecx
mov ecx, dword [ebp - 0x24]
movzx ecx, cx
mov dword [ebp - 8], ecx
lea ecx, [eax + 4]
mov dword [ebp - 0xc], ecx
mov ecx, esi
mov esi, dword [ebp - 0x38]
mov edx, ecx
sub edx, eax
xor eax, eax
mov dword [ebp - 0x24], edx
movss xmm2, dword [ecx + eax*8]
mov edi, dword [ebp - 0xc]
mov eax, dword [ebp - 0x18]
movss xmm4, dword [0x1006d570]
movss xmm3, dword [edx + edi]
addss xmm2, dword [ecx + eax*8]
addss xmm3, dword [ecx + eax*8 + 4]
mov eax, dword [esi + 0x34]
mov ecx, dword [ebp - 0x28]
mov edx, dword [ebp - 0x14]
mulss xmm2, xmm5
mulss xmm3, xmm5
movaps xmm0, xmm2
mulss xmm0, xmm2
movaps xmm1, xmm3
mulss xmm1, xmm3
addss xmm1, xmm0
movaps xmm0, xmm5
maxss xmm0, xmm1
divss xmm4, xmm0
movss xmm0, dword [edi - 4]
movaps xmm1, xmm4
mulss xmm4, xmm3
mulss xmm1, xmm2
mulss xmm4, xmm5
mulss xmm1, xmm5
subss xmm0, xmm1
movss dword [eax], xmm0
movss xmm0, dword [edi]
mov eax, dword [esi + 0x34]
subss xmm0, xmm4
mov edi, dword [ebx + 0x10]
movss dword [eax + 4], xmm0
mov eax, dword [esi + 0x34]
mov dword [eax + 8], ecx
mov dword [eax + 0xc], edx
mov eax, dword [esi + 0x34]
mov dword [eax + 0x10], edi
mov eax, dword [esi + 0x34]
mov edi, dword [ebp - 0xc]
addss xmm1, dword [edi - 4]
movss dword [eax + 0x14], xmm1
addss xmm4, dword [edi]
mov eax, dword [esi + 0x34]
movss dword [eax + 0x18], xmm4
mov eax, dword [esi + 0x34]
mov dword [eax + 0x1c], ecx
mov ecx, dword [ebp - 0x3c]
mov dword [eax + 0x20], edx
mov eax, dword [esi + 0x34]
mov dword [eax + 0x24], ecx
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x20]
add dword [esi + 0x34], 0x28
lea edx, [ecx + eax*2]
mov eax, dword [esi + 0x38]
mov word [eax], dx
mov eax, dword [ebp - 0x18]
lea ecx, [ecx + eax*2]
mov eax, dword [esi + 0x38]
mov word [eax + 2], cx
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 8]
lea ecx, [ecx + eax*2]
mov eax, dword [esi + 0x38]
mov word [eax + 4], cx
mov eax, dword [esi + 0x38]
mov word [eax + 6], cx
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 8]
lea ecx, [ecx + eax*2]
mov eax, dword [esi + 0x38]
mov word [eax + 8], cx
mov eax, dword [esi + 0x38]
mov word [eax + 0xa], dx
mov eax, dword [ebp - 0x1c]
add dword [esi + 0x38], 0xc
mov dword [ebp - 0x18], eax
inc eax
mov dword [ebp - 0x1c], eax
add edi, 8
mov ecx, esp
mov edx, dword [ebp - 0x24]
mov dword [ebp - 0xc], edi
cmp eax, dword [ebx + 0xc]
jl 0x100352a4
mov eax, dword [ebp - 0x40]
movzx eax, ax
jmp 0x1003546b
lea eax, [edi - 2]
imul eax, eax, 3
push edi
push eax
call fcn.10039c2a
mov dword [ebp - 8], edi
mov edi, dword [ebx + 8]
mov eax, dword [esi + 0x34]
mov ecx, dword [edi]
lea edi, [edi + 8]
mov edx, dword [edi - 4]
mov dword [eax], ecx
mov ecx, dword [ebp - 0x28]
mov dword [eax + 4], edx
mov eax, dword [esi + 0x34]
mov dword [eax + 8], ecx
mov ecx, dword [ebp - 0x14]
mov dword [eax + 0xc], ecx
mov eax, dword [esi + 0x34]
mov ecx, dword [ebx + 0x10]
mov dword [eax + 0x10], ecx
add dword [esi + 0x34], 0x14
sub dword [ebp - 8], 1
jne 0x100353f3
mov edi, dword [ebx + 0xc]
push 2
pop edx
mov dword [ebp - 0x14], edx
mov ecx, dword [esi + 0x38]
mov ax, word [esi + 0x28]
movzx edx, dx
mov word [ecx], ax
mov cx, word [esi + 0x28]
mov eax, dword [esi + 0x38]
dec cx
add cx, dx
mov word [eax + 2], cx
mov eax, dword [esi + 0x38]
mov cx, word [esi + 0x28]
add cx, dx
mov edx, dword [ebp - 0x14]
mov word [eax + 4], cx
add dword [esi + 0x38], 6
inc edx
mov dword [ebp - 0x14], edx
cmp edx, edi
jl 0x1003542e
movzx eax, di
add dword [esi + 0x28], eax
lea esp, [ebp - 0x48]
pop edi
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.10066b33
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret 0xc