Function at 0x100017d5
Capabilities:
Encrypt data using rc4 prga

Disassembly:
jmp 0x100406e0
sub esp, 0x4c
mov eax, dword [0x100d3e14]
xor eax, esp
mov dword [esp + 0x48], eax
push ebx
mov ebx, dword [esp + 0x54]
xor al, al
push ebp
xor cl, cl
mov byte [esp + 0x28], 0xe8
xor ebp, ebp
mov dword [esp + 0x29], 0
push esi
push edi
mov byte [esp + 0x20], 0xe9
mov dword [esp + 0x21], 0
mov word [esp + 0x28], 0x800f
mov dword [esp + 0x2a], 0
mov byte [esp + 0x12], al
mov byte [esp + 0x13], cl
mov dword [esp + 0x14], ebp
mov dword [ebx + 0xc], ebp
mov dword [ebx + 0x10], ebp
mov edi, dword [ebx + 8]
movzx esi, al
add esi, dword [ebx]
movzx eax, cl
mov dword [esp + 0x38], eax
add edi, eax
lea eax, [esp + 0x3c]
push eax
push esi
call fcn.10005c40
add esp, 8
mov ecx, eax
test dword [esp + 0x54], 0x1000
mov dword [esp + 0x18], ecx
jne 0x100409ba
cmp byte [esp + 0x12], 5
mov dword [esp + 0x1c], esi
jb 0x10040796
mov eax, esi
mov dword [esp + 0x14], 1
sub eax, edi
mov ecx, 5
sub eax, 5
mov dword [esp + 0x21], eax
lea eax, [esp + 0x20]
jmp 0x100408c2
mov dl, byte [esp + 0x42]
cmp dl, 0xe8
jne 0x100407c1
movzx eax, byte [esp + 0x3c]
mov ecx, 5
sub eax, edi
add eax, 0xfffffffb
add eax, dword [esp + 0x4c]
add eax, esi
mov dword [esp + 0x31], eax
lea eax, [esp + 0x30]
jmp 0x100408c2
mov al, dl
and al, 0xfd
cmp al, 0xe9
jne 0x1004081f
movzx ecx, byte [esp + 0x3c]
add ecx, esi
cmp dl, 0xeb
jne 0x100407de
movsx eax, byte [esp + 0x4c]
add ecx, eax
jmp 0x100407e2
add ecx, dword [esp + 0x4c]
mov eax, dword [ebx]
cmp eax, ecx
ja 0x100407ff
add eax, 5
cmp ecx, eax
jae 0x100407ff
cmp ebp, ecx
cmovae ecx, ebp
mov ebp, ecx
mov ecx, dword [esp + 0x18]
jmp 0x100408ca
sub ecx, edi
lea eax, [esp + 0x20]
sub ecx, 5
cmp esi, ebp
mov dword [esp + 0x21], ecx
mov ecx, 5
sbb edx, edx
inc edx
mov dword [esp + 0x14], edx
jmp 0x100408c2
mov dh, byte [esp + 0x43]
mov ah, dl
and ah, 0xf0
cmp ah, 0x70
je 0x10040854
mov al, dl
and al, 0xfc
cmp al, 0xe0
je 0x10040854
mov al, dh
and al, 0xf0
cmp al, 0x80
je 0x10040854
and dl, 0xfe
cmp dl, 0xc2
jne 0x100408ca
cmp esi, ebp
sbb edx, edx
inc edx
mov dword [esp + 0x14], edx
jmp 0x100408ca
mov al, byte [esp + 0x3c]
movzx ecx, al
add ecx, esi
cmp ah, 0x70
je 0x10040870
mov al, dl
and al, 0xfc
cmp al, 0xe0
je 0x10040870
add ecx, dword [esp + 0x4c]
jmp 0x10040877
movsx eax, byte [esp + 0x4c]
add ecx, eax
mov eax, dword [ebx]
cmp eax, ecx
ja 0x10040891
add eax, 5
cmp ecx, eax
jae 0x10040891
cmp ebp, ecx
cmovae ecx, ebp
mov ebp, ecx
mov ecx, dword [esp + 0x18]
jmp 0x100408ca
mov al, dl
and al, 0xfc
cmp al, 0xe0
je 0x100409ba
movzx eax, dl
cmp dl, 0xf
jne 0x100408a8
movzx eax, dh
and al, 0xf
sub ecx, edi
or al, 0x80
sub ecx, 6
mov byte [esp + 0x29], al
lea eax, [esp + 0x28]
mov dword [esp + 0x2a], ecx
mov ecx, 6
mov dword [esp + 0x18], ecx
mov dword [esp + 0x1c], eax
cmp esi, ebp
jae 0x100408db
movzx eax, byte [esp + 0x3c]
cmp ecx, eax
jne 0x100409ba
mov esi, dword [esp + 0x38]
lea eax, [esi + ecx]
cmp eax, 0x20
ja 0x100409ba
mov eax, dword [ebx + 0x10]
cmp eax, 8
jae 0x100409ba
mov dl, byte [esp + 0x12]
mov byte [eax + ebx + 0x14], dl
mov eax, dword [ebx + 0x10]
mov dl, byte [esp + 0x13]
mov byte [eax + ebx + 0x1c], dl
mov edi, dword [ebx + 8]
inc dword [ebx + 0x10]
add edi, esi
mov esi, dword [esp + 0x1c]
mov al, byte [esp + 0x12]
rep movsb byte es:[edi], byte [esi]
add al, byte [esp + 0x3c]
mov cl, dl
add cl, byte [esp + 0x18]
mov edx, dword [esp + 0x14]
mov byte [esp + 0x13], cl
mov byte [esp + 0x12], al
test edx, edx
je 0x10040737
cmp al, 5
jae 0x100409a2
mov edi, dword [ebx]
movzx esi, al
mov eax, 5
sub eax, esi
push eax
lea ebp, [edi + esi]
push ebp
call fcn.10040a90
add esp, 8
test eax, eax
jne 0x100409a2
cmp byte [esp + 0x12], 2
jae 0x10040977
mov eax, 2
sub eax, esi
push eax
push ebp
call fcn.10040a90
add esp, 8
test eax, eax
je 0x100409ba
lea eax, [edi - 5]
push eax
call fcn.100048b8
add esp, 4
test eax, eax
je 0x100409ba
mov eax, dword [ebx]
sub eax, 5
push 5
push eax
call fcn.10040a90
add esp, 8
test eax, eax
je 0x100409ba
mov dword [ebx + 0xc], 1
pop edi
pop esi
pop ebp
mov eax, 1
pop ebx
mov ecx, dword [esp + 0x48]
xor ecx, esp
call fcn.10002cf7
add esp, 0x4c
ret
mov ecx, dword [esp + 0x58]
xor eax, eax
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.10002cf7
add esp, 0x4c
ret