Function at 0x1003d710
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1c
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x2c]
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp + 8]
mov eax, dword [ebp + 8]
mov ecx, dword [edx + 0x3c]
sub ecx, dword [eax + 0x74]
mov edx, dword [ebp + 8]
sub ecx, dword [edx + 0x6c]
mov dword [ebp - 0xc], ecx
jne 0x1003d750
mov eax, dword [ebp + 8]
cmp dword [eax + 0x6c], 0
jne 0x1003d750
mov ecx, dword [ebp + 8]
cmp dword [ecx + 0x74], 0
jne 0x1003d750
mov edx, dword [ebp - 0x10]
mov dword [ebp - 0xc], edx
jmp 0x1003d75f
cmp dword [ebp - 0xc], 0xffffffff
jne 0x1003d75f
mov eax, dword [ebp - 0xc]
sub eax, 1
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x2c]
mov eax, dword [ebp - 0x10]
lea ecx, [eax + edx - 0x106]
mov edx, dword [ebp + 8]
cmp dword [edx + 0x6c], ecx
jb 0x1003d87d
mov eax, dword [ebp - 0x10]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x38]
add edx, dword [ebp - 0x10]
push edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x38]
push ecx
call fcn.10046670
add esp, 0xc
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x70]
sub eax, dword [ebp - 0x10]
mov ecx, dword [ebp + 8]
mov dword [ecx + 0x70], eax
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x6c]
sub eax, dword [ebp - 0x10]
mov ecx, dword [ebp + 8]
mov dword [ecx + 0x6c], eax
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x5c]
sub eax, dword [ebp - 0x10]
mov ecx, dword [ebp + 8]
mov dword [ecx + 0x5c], eax
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x4c]
mov dword [ebp - 8], eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x44]
mov eax, dword [ebp - 8]
lea ecx, [edx + eax*2]
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 4]
sub edx, 2
mov dword [ebp - 4], edx
mov eax, dword [ebp - 4]
movzx ecx, word [eax]
mov dword [ebp - 0x14], ecx
mov edx, dword [ebp - 0x14]
cmp edx, dword [ebp - 0x10]
jb 0x1003d802
mov eax, dword [ebp - 0x14]
sub eax, dword [ebp - 0x10]
mov dword [ebp - 0x18], eax
jmp 0x1003d809
mov dword [ebp - 0x18], 0
mov ecx, dword [ebp - 4]
mov dx, word [ebp - 0x18]
mov word [ecx], dx
mov eax, dword [ebp - 8]
sub eax, 1
mov dword [ebp - 8], eax
jne 0x1003d7dd
mov ecx, dword [ebp - 0x10]
mov dword [ebp - 8], ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x40]
mov ecx, dword [ebp - 8]
lea edx, [eax + ecx*2]
mov dword [ebp - 4], edx
mov eax, dword [ebp - 4]
sub eax, 2
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 4]
movzx edx, word [ecx]
mov dword [ebp - 0x14], edx
mov eax, dword [ebp - 0x14]
cmp eax, dword [ebp - 0x10]
jb 0x1003d858
mov ecx, dword [ebp - 0x14]
sub ecx, dword [ebp - 0x10]
mov dword [ebp - 0x1c], ecx
jmp 0x1003d85f
mov dword [ebp - 0x1c], 0
mov edx, dword [ebp - 4]
mov ax, word [ebp - 0x1c]
mov word [edx], ax
mov ecx, dword [ebp - 8]
sub ecx, 1
mov dword [ebp - 8], ecx
jne 0x1003d833
mov edx, dword [ebp - 0xc]
add edx, dword [ebp - 0x10]
mov dword [ebp - 0xc], edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
cmp dword [ecx + 4], 0
jne 0x1003d88d
jmp 0x1003d92b
mov edx, dword [ebp - 0xc]
push edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x38]
mov edx, dword [ebp + 8]
add ecx, dword [edx + 0x6c]
mov eax, dword [ebp + 8]
add ecx, dword [eax + 0x74]
push ecx
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
push edx
call fcn.1003d140
add esp, 0xc
mov dword [ebp - 8], eax
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x74]
add ecx, dword [ebp - 8]
mov edx, dword [ebp + 8]
mov dword [edx + 0x74], ecx
mov eax, dword [ebp + 8]
cmp dword [eax + 0x74], 3
jb 0x1003d910
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x38]
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x6c]
movzx edx, byte [edx + ecx]
mov eax, dword [ebp + 8]
mov dword [eax + 0x48], edx
mov ecx, dword [ebp + 8]
mov edx, dword [ebp + 8]
mov eax, dword [ecx + 0x48]
mov ecx, dword [edx + 0x58]
shl eax, cl
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x6c]
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x38]
movzx edx, byte [ecx + edx + 1]
xor eax, edx
mov ecx, dword [ebp + 8]
and eax, dword [ecx + 0x54]
mov edx, dword [ebp + 8]
mov dword [edx + 0x48], eax
mov eax, dword [ebp + 8]
cmp dword [eax + 0x74], 0x106
jae 0x1003d92b
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
cmp dword [edx + 4], 0
jne 0x1003d71f
mov esp, ebp
pop ebp
ret