Function at 0x1028bb4
Capabilities:
Encrypt data using rc4 prga

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0xc9c
mov eax, dword [0x1049010]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0xc8c], eax
mov eax, dword [ebp + 0xc]
push esi
mov esi, ecx
mov dword [ebp - 0xc88], eax
mov eax, dword [esi + 0x870]
add eax, 0x20
mov ecx, eax
shl ecx, 3
mov dword [ebp - 0xc98], ecx
cmp ecx, 0x320
jb 0x1028c01
xor eax, eax
jmp 0x1028e7f
push ebx
push edi
mov edi, eax
shl edi, 4
push edi
lea eax, [ebp - 0x644]
push 0
push eax
call sub.msvcrt.dll_memset
push edi
lea eax, [ebp - 0xc84]
push 0
push eax
call sub.msvcrt.dll_memset
mov eax, dword [ebp + 0x18]
add esp, 0x18
test eax, eax
jbe 0x1028dfc
mov ecx, dword [ebp + 0x14]
mov ebx, dword [esi + 0x30]
shl ecx, 2
mov dword [ebp - 0xc90], ecx
mov ecx, dword [ebp + 0x10]
shl ecx, 2
mov dword [ebp - 0xc94], ecx
mov dword [ebp - 0xc9c], eax
mov edi, 0x400
mov ecx, dword [ebp - 0xc8c]
mov eax, dword [esi + 0x34]
xor edx, edx
and ecx, 7
inc edx
shl edx, cl
mov ecx, dword [ebp - 0xc8c]
shr ecx, 3
mov al, byte [ecx + eax]
test al, dl
mov eax, dword [ebp - 0xc8c]
jne 0x1028c8a
movzx eax, byte [ebx + eax]
jmp 0x1028d15
mov dl, byte [ebx + eax]
mov eax, dword [esi + 0x2c]
mov ecx, dword [ebp - 0xc94]
add ecx, eax
mov eax, dword [ecx]
cmp dl, 7
jae 0x1028cd9
cmp eax, edi
jae 0x1028cad
movzx eax, byte [eax + esi + 0x45c]
jmp 0x1028ccd
cmp eax, 0x80000
jae 0x1028cc4
shr eax, 9
movzx eax, byte [eax + esi + 0x45c]
add eax, 0x12
jmp 0x1028ccd
shr eax, 0x11
movzx eax, al
add eax, 0x22
movzx ecx, dl
lea eax, [ecx + eax*8 + 0x100]
jmp 0x1028d0e
cmp eax, edi
jae 0x1028ce7
movzx eax, byte [eax + esi + 0x45c]
jmp 0x1028d07
cmp eax, 0x80000
jae 0x1028cfe
shr eax, 9
movzx eax, byte [eax + esi + 0x45c]
add eax, 0x12
jmp 0x1028d07
shr eax, 0x11
movzx eax, al
add eax, 0x22
lea eax, [eax*8 + 0x107]
add dword [ebp - 0xc94], 4
mov ecx, dword [ebp - 0xc88]
inc dword [ebp - 0xc8c]
xor edx, edx
and ecx, 7
lea eax, [ebp + eax*2 - 0x644]
inc word [eax]
mov eax, dword [esi + 0x34]
inc edx
shl edx, cl
mov ecx, dword [ebp - 0xc88]
shr ecx, 3
mov al, byte [ecx + eax]
test al, dl
mov eax, dword [ebp - 0xc88]
jne 0x1028d55
movzx eax, byte [ebx + eax]
jmp 0x1028de0
mov dl, byte [ebx + eax]
mov eax, dword [esi + 0x2c]
mov ecx, dword [ebp - 0xc90]
add ecx, eax
mov eax, dword [ecx]
cmp dl, 7
jae 0x1028da4
cmp eax, edi
jae 0x1028d78
movzx eax, byte [eax + esi + 0x45c]
jmp 0x1028d98
cmp eax, 0x80000
jae 0x1028d8f
shr eax, 9
movzx eax, byte [eax + esi + 0x45c]
add eax, 0x12
jmp 0x1028d98
shr eax, 0x11
movzx eax, al
add eax, 0x22
movzx ecx, dl
lea eax, [ecx + eax*8 + 0x100]
jmp 0x1028dd9
cmp eax, edi
jae 0x1028db2
movzx eax, byte [eax + esi + 0x45c]
jmp 0x1028dd2
cmp eax, 0x80000
jae 0x1028dc9
shr eax, 9
movzx eax, byte [eax + esi + 0x45c]
add eax, 0x12
jmp 0x1028dd2
shr eax, 0x11
movzx eax, al
add eax, 0x22
lea eax, [eax*8 + 0x107]
add dword [ebp - 0xc90], 4
inc dword [ebp - 0xc88]
lea eax, [ebp + eax*2 - 0xc84]
inc word [eax]
dec dword [ebp - 0xc9c]
jne 0x1028c5a
xor esi, esi
xor ebx, ebx
cmp dword [ebp - 0xc98], esi
jbe 0x1028e7b
mov edi, 0x100
movzx eax, word [ebp + esi*2 - 0x644]
mov ecx, edi
cmp ax, cx
movzx eax, ax
jae 0x1028e28
movzx eax, byte [eax + 0x1003ae0]
jmp 0x1028e35
shr eax, 8
movzx eax, byte [eax + 0x1003ae0]
add eax, 8
movzx ecx, word [ebp + esi*2 - 0xc84]
mov edx, edi
cmp cx, dx
movzx ecx, cx
jae 0x1028e50
movzx ecx, byte [ecx + 0x1003ae0]
jmp 0x1028e5d
shr ecx, 8
movzx ecx, byte [ecx + 0x1003ae0]
add ecx, 8
mov eax, dword [eax*4 + 0x1003a98]
sub eax, dword [ecx*4 + 0x1003a98]
cdq
xor eax, edx
sub eax, edx
add ebx, eax
inc esi
cmp esi, dword [ebp - 0xc98]
jb 0x1028e0d
pop edi
mov eax, ebx
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
pop esi
call fcn.010106b6
leave
ret 0x14