Function at 0x1006e9c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
sub esp, 0x38
mov eax, dword [0x10249010]
xor eax, ebp
mov dword [ebp - 4], eax
push esi
push edi
mov edi, dword [ebx + 0xc]
mov esi, ecx
mov dword [ebp - 0x24], esi
cmp edi, 3
jl 0x1006eda2
test byte [esi + 0x24], 4
mov eax, dword [esi + 0x2c]
movss xmm0, dword [eax]
movss dword [ebp - 0x18], xmm0
movss xmm0, dword [eax + 4]
movss dword [ebp - 0x1c], xmm0
je 0x1006ecff
lea eax, [edi + edi]
push eax
mov dword [ebp - 0x34], eax
lea eax, [edi*8 - 6]
add eax, edi
push eax
call fcn.1006d2d0
mov eax, dword [esi + 0x28]
movzx edx, ax
mov dword [ebp - 8], edx
lea ecx, [eax + 1]
movzx eax, dx
mov dword [ebp - 0x20], ecx
mov ecx, 2
mov dword [ebp - 0x10], ecx
mov dword [ebp - 0xc], eax
nop dword [eax]
mov eax, dword [esi + 0x38]
mov word [eax], dx
lea edx, [edx + ecx*2]
mov eax, dword [esi + 0x38]
lea ecx, [edx - 2]
mov word [eax + 2], cx
mov eax, dword [esi + 0x38]
mov ecx, dword [ebp - 0x10]
inc ecx
mov dword [ebp - 0x10], ecx
mov word [eax + 4], dx
add dword [esi + 0x38], 6
mov edx, dword [ebp - 8]
cmp ecx, edi
jl 0x1006ea50
mov eax, dword [ebp - 0xc]
movzx eax, ax
mov dword [ebp - 0x2c], eax
lea eax, [edi*8]
call fcn.101a86e0
movss xmm4, dword [0x10233610]
lea eax, [edi - 1]
movss xmm6, dword [0x10232db8]
mov ecx, esp
mov esi, dword [ebx + 8]
xor edx, edx
mov dword [ebp - 0x10], eax
xorps xmm5, xmm5
mov dword [ebp - 0x30], ecx
shl eax, 3
nop word [eax + eax]
movss xmm3, dword [esi + edx*8 + 4]
lea edi, [edx*8]
movss xmm2, dword [esi + edx*8]
subss xmm2, dword [eax + esi]
subss xmm3, dword [eax + esi + 4]
mov dword [ebp - 8], edi
lea edi, [esi + 4]
mov dword [ebp - 0xc], edi
mov edi, dword [ebx + 0xc]
movaps xmm1, xmm2
movaps xmm0, xmm3
mulss xmm1, xmm2
mulss xmm0, xmm3
addss xmm0, xmm1
comiss xmm0, xmm5
jbe 0x1006eb17
call fcn.1002f5d0
movaps xmm1, xmm6
divss xmm1, xmm0
movaps xmm0, xmm1
mulss xmm3, xmm1
mulss xmm2, xmm0
xorps xmm2, xmm4
movss dword [eax + ecx], xmm3
inc edx
movss dword [eax + ecx + 4], xmm2
mov eax, dword [ebp - 8]
cmp edx, edi
jl 0x1006eac0
mov eax, dword [ebp - 0x20]
movss xmm5, dword [0x10232d64]
mov edx, dword [ebp - 0xc]
movzx eax, ax
mov dword [ebp - 8], eax
mov eax, ecx
sub eax, esi
mov dword [ebp - 0x14], 0
mov esi, dword [ebp - 0x24]
mov dword [ebp - 0x20], eax
lea eax, [edi - 1]
mov edi, dword [ebp - 0x14]
movss xmm2, dword [ecx + edi*8]
mov edi, dword [ebp - 0x20]
addss xmm2, dword [ecx + eax*8]
movss xmm0, dword [edi + edx]
addss xmm0, dword [ecx + eax*8 + 4]
mov edi, dword [ebx + 0xc]
movaps xmm3, xmm2
mulss xmm2, xmm2
mulss xmm3, xmm5
movaps xmm4, xmm0
mulss xmm0, xmm0
mulss xmm4, xmm5
addss xmm2, xmm0
mulss xmm2, dword [0x10232d2c]
comiss xmm2, dword [0x10232c60]
jbe 0x1006ebb8
movaps xmm1, xmm6
divss xmm1, xmm2
minss xmm1, dword [0x10232f30]
movaps xmm0, xmm1
mulss xmm4, xmm1
mulss xmm3, xmm0
movss xmm0, dword [edx - 4]
mov eax, dword [esi + 0x34]
mov ecx, dword [ebx + 0x10]
mulss xmm3, xmm5
mulss xmm4, xmm5
subss xmm0, xmm3
movss dword [ebp - 0x24], xmm3
movss dword [ebp - 0x28], xmm4
movss dword [eax], xmm0
movss xmm0, dword [edx]
mov eax, dword [esi + 0x34]
subss xmm0, xmm4
movss dword [eax + 4], xmm0
mov eax, dword [esi + 0x34]
movss xmm0, dword [ebp - 0x18]
movss dword [eax + 8], xmm0
movss xmm0, dword [ebp - 0x1c]
movss dword [eax + 0xc], xmm0
mov eax, dword [ecx]
mov edx, dword [eax]
mov eax, dword [esi + 0x34]
push dword [eax + 4]
push dword [eax]
call edx
mov ecx, dword [esi + 0x34]
movss xmm0, dword [ebp - 0x24]
mov dword [ecx + 0x10], eax
mov ecx, dword [ebp - 0xc]
mov eax, dword [esi + 0x34]
addss xmm0, dword [ecx - 4]
movss dword [eax + 0x14], xmm0
movss xmm0, dword [ebp - 0x28]
addss xmm0, dword [ecx]
mov eax, dword [esi + 0x34]
mov ecx, dword [ebx + 0x10]
movss dword [eax + 0x18], xmm0
mov eax, dword [esi + 0x34]
movss xmm0, dword [ebp - 0x18]
movss dword [eax + 0x1c], xmm0
movss xmm0, dword [ebp - 0x1c]
movss dword [eax + 0x20], xmm0
mov eax, dword [ecx]
mov edx, dword [eax]
mov eax, dword [esi + 0x34]
push dword [eax + 0x18]
push dword [eax + 0x14]
call edx
mov ecx, dword [esi + 0x34]
and eax, 0xffffff
mov dword [ecx + 0x24], eax
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x2c]
add dword [esi + 0x34], 0x28
lea edx, [ecx + eax*2]
mov eax, dword [esi + 0x38]
mov word [eax], dx
mov eax, dword [ebp - 0x10]
lea ecx, [ecx + eax*2]
mov eax, dword [esi + 0x38]
mov word [eax + 2], cx
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 8]
lea ecx, [ecx + eax*2]
mov eax, dword [esi + 0x38]
mov word [eax + 4], cx
mov eax, dword [esi + 0x38]
mov word [eax + 6], cx
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 8]
lea ecx, [ecx + eax*2]
mov eax, dword [esi + 0x38]
mov word [eax + 8], cx
mov eax, dword [esi + 0x38]
mov ecx, dword [ebp - 0x14]
mov word [eax + 0xa], dx
mov eax, ecx
add dword [esi + 0x38], 0xc
inc ecx
mov edx, dword [ebp - 0xc]
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x14], ecx
movss xmm5, dword [0x10232d64]
add edx, 8
movss xmm6, dword [0x10232db8]
cmp ecx, edi
mov ecx, dword [ebp - 0x30]
mov dword [ebp - 0xc], edx
jl 0x1006eb55
mov eax, dword [ebp - 0x34]
movzx eax, ax
jmp 0x1006ed9f
lea eax, [edi - 2]
push edi
lea eax, [eax + eax*2]
push eax
call fcn.1006d2d0
mov dword [ebp - 8], edi
mov edi, dword [ebx + 8]
mov eax, dword [esi + 0x34]
mov ecx, dword [edi]
mov edx, dword [edi + 4]
movss xmm0, dword [ebp - 0x18]
mov dword [eax], ecx
mov ecx, dword [ebx + 0x10]
mov dword [eax + 4], edx
mov eax, dword [esi + 0x34]
movss dword [eax + 8], xmm0
movss xmm0, dword [ebp - 0x1c]
movss dword [eax + 0xc], xmm0
mov eax, dword [ecx]
push dword [edi + 4]
push dword [edi]
mov eax, dword [eax]
call eax
mov ecx, dword [esi + 0x34]
lea edi, [edi + 8]
mov dword [ecx + 0x10], eax
add dword [esi + 0x34], 0x14
sub dword [ebp - 8], 1
jne 0x1006ed12
mov edi, dword [ebx + 0xc]
mov edx, 2
mov dword [ebp - 8], edx
mov ecx, dword [esi + 0x38]
mov ax, word [esi + 0x28]
movzx edx, dx
mov word [ecx], ax
movzx ecx, word [esi + 0x28]
mov eax, dword [esi + 0x38]
dec cx
add cx, dx
mov word [eax + 2], cx
movzx ecx, word [esi + 0x28]
mov eax, dword [esi + 0x38]
add cx, dx
mov edx, dword [ebp - 8]
inc edx
mov dword [ebp - 8], edx
mov word [eax + 4], cx
add dword [esi + 0x38], 6
cmp edx, edi
jl 0x1006ed62
movzx eax, di
add dword [esi + 0x28], eax
lea esp, [ebp - 0x40]
pop edi
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1015164c
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret 0xc