Function at 0x470300
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
sub esp, 0x40
mov eax, dword [0x67bbb0]
xor eax, ebp
mov dword [ebp - 4], eax
push esi
mov esi, ecx
mov ecx, dword [ebx + 0xc]
mov dword [ebp - 0x24], esi
push edi
mov edi, dword [ebx + 8]
cmp ecx, 3
jl 0x4706f4
test byte [esi + 0x24], 4
mov eax, dword [esi + 0x2c]
movss xmm0, dword [eax]
movss dword [ebp - 0x2c], xmm0
movss xmm0, dword [eax + 4]
movss dword [ebp - 0x10], xmm0
je 0x470653
mov eax, dword [ebx + 0x10]
movss xmm0, dword [esi + 0x8c]
and eax, 0xffffff
mov dword [ebp - 0x38], eax
lea eax, [ecx + ecx]
push eax
mov dword [ebp - 0x3c], eax
lea eax, [ecx*8 - 6]
add eax, ecx
movss dword [ebp - 0x18], xmm0
push eax
mov ecx, esi
call fcn.0046f3f0
mov eax, dword [ebx + 0xc]
mov ecx, 2
mov edx, dword [esi + 0x28]
mov dword [ebp - 0x28], edx
mov dword [ebp - 0xc], ecx
cmp eax, ecx
jle 0x4703d2
mov edi, eax
mov eax, dword [esi + 0x38]
mov word [eax], dx
lea edx, [edx + ecx*2]
mov eax, dword [esi + 0x38]
lea ecx, [edx - 2]
mov word [eax + 2], cx
mov eax, dword [esi + 0x38]
mov ecx, dword [ebp - 0xc]
inc ecx
mov dword [ebp - 0xc], ecx
mov word [eax + 4], dx
add dword [esi + 0x38], 6
mov edx, dword [ebp - 0x28]
cmp ecx, edi
jl 0x4703a0
mov edi, dword [ebx + 8]
mov eax, dword [ebx + 0xc]
shl eax, 3
call fcn.005f02f0
mov eax, dword [ebx + 0xc]
mov edx, esp
movss xmm5, dword [0x66de28]
mov dword [ebp - 0xc], edx
lea ecx, [eax - 1]
mov dword [ebp - 0x14], ecx
test eax, eax
jle 0x4704aa
shl ecx, 3
xorps xmm4, xmm4
mov dword [ebp - 8], ecx
xor esi, esi
movss xmm2, dword [edi + esi*8 + 4]
lea edx, [esi*8]
movss xmm0, dword [edi + esi*8]
subss xmm0, dword [ecx + edi]
subss xmm2, dword [ecx + edi + 4]
mov dword [ebp - 0x20], edx
lea edx, [edi + 4]
mov dword [ebp - 0x1c], edx
mov edx, dword [ebp - 0xc]
movaps xmm1, xmm0
movss dword [ebp - 0x30], xmm0
movaps xmm3, xmm2
mulss xmm1, xmm0
mulss xmm3, xmm2
movss dword [ebp - 0x34], xmm2
addss xmm3, xmm1
comiss xmm3, xmm4
jbe 0x470484
movaps xmm0, xmm3
call fcn.00467850
movss xmm5, dword [0x66de28]
xorps xmm4, xmm4
movaps xmm1, xmm5
movss xmm2, dword [ebp - 0x34]
divss xmm1, xmm0
mov eax, dword [ebx + 0xc]
mov ecx, dword [ebp - 8]
mov edx, dword [ebp - 0xc]
movaps xmm0, xmm1
mulss xmm1, xmm2
mulss xmm0, dword [ebp - 0x30]
movaps xmm2, xmm1
xorps xmm0, xmmword [0x66e3d0]
inc esi
movss dword [edx + ecx], xmm2
movss dword [edx + ecx + 4], xmm0
mov ecx, dword [ebp - 0x20]
mov dword [ebp - 8], ecx
cmp esi, eax
jl 0x470403
lea ecx, [edi + 4]
jmp 0x4704b0
lea ecx, [edi + 4]
mov dword [ebp - 0x1c], ecx
mov esi, dword [ebp - 0x24]
mov dword [ebp - 8], 0
test eax, eax
jle 0x470648
movss xmm0, dword [ebp - 0x18]
mov eax, edx
movss xmm4, dword [0x66dde4]
sub eax, edi
movss xmm7, dword [0x66dd94]
movss xmm6, dword [ebp - 0x10]
mulss xmm0, xmm4
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x14]
movss dword [ebp - 0x18], xmm0
nop
mov edi, dword [ebp - 8]
movss xmm2, dword [edx + edi*8]
mov edi, dword [ebp - 0x20]
addss xmm2, dword [edx + eax*8]
movss xmm3, dword [edi + ecx]
addss xmm3, dword [edx + eax*8 + 4]
mov edi, dword [ebp - 0x28]
mulss xmm2, xmm4
mulss xmm3, xmm4
movaps xmm0, xmm2
mulss xmm0, xmm2
movaps xmm1, xmm3
mulss xmm1, xmm3
addss xmm1, xmm0
comiss xmm1, xmm7
jbe 0x47054e
movaps xmm0, xmm5
divss xmm0, xmm1
movss xmm1, dword [0x66deb4]
minss xmm1, xmm0
movaps xmm0, xmm1
mulss xmm1, xmm3
mulss xmm2, xmm0
movaps xmm3, xmm1
movss xmm0, dword [ecx - 4]
mov eax, dword [esi + 0x34]
movss xmm1, dword [ebp - 0x18]
mulss xmm1, xmm2
mov edx, dword [ebx + 0x10]
movss xmm2, dword [ebp - 0x18]
mulss xmm2, xmm3
movss xmm3, dword [ebp - 0x2c]
subss xmm0, xmm1
movss dword [eax], xmm0
movss xmm0, dword [ecx]
mov eax, dword [esi + 0x34]
subss xmm0, xmm2
movss dword [eax + 4], xmm0
mov eax, dword [esi + 0x34]
movss dword [eax + 8], xmm3
movss dword [eax + 0xc], xmm6
mov eax, dword [esi + 0x34]
mov dword [eax + 0x10], edx
movss xmm0, dword [ecx - 4]
mov eax, dword [esi + 0x34]
addss xmm0, xmm1
movss dword [eax + 0x14], xmm0
movss xmm0, dword [ecx]
mov eax, dword [esi + 0x34]
addss xmm0, xmm2
mov ecx, dword [ebp - 0x38]
movss dword [eax + 0x18], xmm0
mov eax, dword [esi + 0x34]
movss dword [eax + 0x1c], xmm3
movss dword [eax + 0x20], xmm6
mov eax, dword [esi + 0x34]
mov dword [eax + 0x24], ecx
mov eax, dword [ebp - 8]
add dword [esi + 0x34], 0x28
lea edx, [edi + eax*2]
mov eax, dword [esi + 0x38]
mov word [eax], dx
mov eax, dword [ebp - 0x14]
lea ecx, [edi + eax*2]
mov eax, dword [esi + 0x38]
mov word [eax + 2], cx
mov eax, dword [ebp - 0x14]
lea ecx, [eax*2 + 1]
mov eax, dword [esi + 0x38]
add ecx, edi
mov word [eax + 4], cx
mov eax, dword [esi + 0x38]
mov word [eax + 6], cx
mov eax, dword [ebp - 8]
lea ecx, [eax*2 + 1]
mov eax, dword [esi + 0x38]
add ecx, edi
mov word [eax + 8], cx
mov eax, dword [esi + 0x38]
mov ecx, dword [ebp - 0x1c]
add ecx, 8
mov dword [ebp - 0x1c], ecx
mov word [eax + 0xa], dx
mov edx, dword [ebp - 8]
mov eax, edx
add dword [esi + 0x38], 0xc
inc edx
cmp edx, dword [ebx + 0xc]
mov dword [ebp - 8], edx
mov edx, dword [ebp - 0xc]
mov dword [ebp - 0x14], eax
jl 0x4704f0
mov eax, dword [ebp - 0x3c]
movzx eax, ax
jmp 0x4706f1
push ecx
add ecx, 0xfffffffe
lea eax, [ecx + ecx*2]
mov ecx, esi
push eax
call fcn.0046f3f0
mov eax, dword [ebx + 0xc]
test eax, eax
jle 0x4706a5
movss xmm0, dword [ebp - 0x2c]
mov edx, eax
movss xmm1, dword [ebp - 0x10]
mov ecx, dword [esi + 0x34]
lea edi, [edi + 8]
mov eax, dword [edi - 8]
mov dword [ecx], eax
mov eax, dword [edi - 4]
mov dword [ecx + 4], eax
mov eax, dword [esi + 0x34]
mov ecx, dword [ebx + 0x10]
movss dword [eax + 8], xmm0
movss dword [eax + 0xc], xmm1
mov eax, dword [esi + 0x34]
mov dword [eax + 0x10], ecx
add dword [esi + 0x34], 0x14
sub edx, 1
jne 0x470675
mov edi, dword [ebx + 0xc]
mov edx, 2
mov dword [ebp - 0x10], edx
cmp edi, edx
jle 0x4706ee
mov ecx, dword [esi + 0x38]
mov ax, word [esi + 0x28]
movzx edx, dx
mov word [ecx], ax
movzx ecx, word [esi + 0x28]
mov eax, dword [esi + 0x38]
dec cx
add cx, dx
mov word [eax + 2], cx
movzx ecx, word [esi + 0x28]
mov eax, dword [esi + 0x38]
add cx, dx
mov edx, dword [ebp - 0x10]
inc edx
mov dword [ebp - 0x10], edx
mov word [eax + 4], cx
add dword [esi + 0x38], 6
cmp edx, edi
jl 0x4706b4
movzx eax, di
add dword [esi + 0x28], eax
lea esp, [ebp - 0x48]
pop edi
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.005eee94
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret 0xc