Function at 0x100bf490
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xa8
mov eax, dword [0x101fac9c]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, ecx
mov ecx, dword [ebp + 0x14]
mov dword [ebp - 0xa4], ecx
mov ecx, dword [ebp + 0x18]
mov dword [ebp - 0x94], eax
mov dword [ebp - 0x98], ecx
cmp dword [ecx], 0
jg 0x100bf748
lea ecx, [eax + 8]
mov dword [ebp - 0x9c], 0
mov dword [ebp - 0x90], ecx
movzx ecx, word [eax + 0xc]
mov dword [ebp - 0x8c], 0
mov edx, ecx
mov dword [ebp - 0x88], edx
test cx, cx
js 0x100bf4fc
movsx ecx, cx
sar ecx, 5
jmp 0x100bf4ff
mov ecx, dword [eax + 0x10]
mov edx, dword [ebp + 8]
cmp edx, ecx
jae 0x100bf522
test byte [ebp - 0x88], 2
je 0x100bf519
movzx ecx, word [eax + edx*2 + 0xe]
add eax, 0xe
jmp 0x100bf527
mov eax, dword [eax + 0x18]
movzx ecx, word [eax + edx*2]
jmp 0x100bf527
mov ecx, 0xffff
movzx eax, cx
push esi
lea esi, [edx + 1]
push edi
mov edi, dword [ebp + 0xc]
cmp cx, 0x2d
jne 0x100bf544
mov dword [ebp - 0x8c], 1
jmp 0x100bf54a
cmp cx, 0x2b
jne 0x100bf562
cmp esi, edi
je 0x100bf726
mov ecx, dword [ebp - 0x90]
push esi
call fcn.10022270
inc esi
movzx eax, ax
mov ecx, 0x221e
cmp ax, cx
jne 0x100bf5d4
cmp byte [ebp + 0x10], 0
je 0x100bf721
cmp esi, edi
jne 0x100bf721
call sym.icuuc67.dll_uprv_getInfinity_67
cmp dword [ebp - 0x8c], 0
fstp qword [ebp - 0xa8]
movsd xmm0, qword [ebp - 0xa8]
je 0x100bf5a1
xorps xmm0, xmmword [0x101afec0]
mov eax, dword [ebp - 0x98]
mov esi, dword [ebp + 8]
sub edi, esi
mov ecx, dword [ebp - 0x94]
push eax
push edi
push esi
sub esp, 8
movsd qword [esp], xmm0
call fcn.10022270
pop edi
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100e580b
mov esp, ebp
pop ebp
ret 0x14
mov edx, 0x30
cmp dx, ax
ja 0x100bf635
nop
cmp ax, 0x39
ja 0x100bf635
mov ecx, dword [ebp - 0x9c]
movzx eax, ax
lea ecx, [ecx + ecx*4]
lea eax, [eax + ecx*2]
lea ecx, [eax - 0x30]
mov dword [ebp - 0x88], eax
mov eax, dword [ebp - 0x8c]
add eax, 0x7fff
mov dword [ebp - 0x9c], ecx
cmp ecx, eax
jg 0x100bf635
cmp esi, edi
je 0x100bf6e3
mov ecx, dword [ebp - 0x90]
push esi
call fcn.10022270
movzx eax, ax
mov edx, 0x30
inc esi
cmp dx, ax
jbe 0x100bf5e0
mov esi, dword [ebp + 8]
sub edi, esi
cmp edi, 0x80
jge 0x100bf728
mov ecx, dword [ebp - 0x90]
lea eax, [ebp - 0x84]
push 0
push 0x80
push eax
push edi
push esi
call fcn.10022270
lea ecx, [ebp - 0x84]
lea edx, [ecx + 1]
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100bf670
sub ecx, edx
cmp ecx, edi
jl 0x100bf728
lea eax, [ebp - 0x88]
push eax
lea eax, [ebp - 0x84]
push eax
call fcn.10022270
lea eax, [ebp - 0x84]
add esp, 8
add eax, edi
fstp qword [ebp - 0xa0]
cmp dword [ebp - 0x88], eax
jne 0x100bf728
mov eax, dword [ebp - 0x98]
movsd xmm0, qword [ebp - 0xa0]
mov ecx, dword [ebp - 0x94]
push eax
push edi
push esi
sub esp, 8
movsd qword [esp], xmm0
call fcn.10022270
pop edi
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100e580b
mov esp, ebp
pop ebp
ret 0x14
sub edx, dword [ebp - 0x88]
cmp dword [ebp - 0x8c], 0
mov eax, dword [ebp - 0x98]
push eax
cmove edx, ecx
mov ecx, dword [ebp - 0x94]
push edx
mov edx, dword [ebp + 8]
sub edi, edx
push edi
push edx
push 0xc
call fcn.10022270
pop edi
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100e580b
mov esp, ebp
pop ebp
ret 0x14
mov esi, dword [ebp + 8]
jmp 0x100bf728
mov esi, edx
mov ecx, dword [ebp - 0x94]
push esi
push dword [ebp - 0xa4]
call fcn.10022270
mov eax, dword [ebp - 0x98]
pop edi
pop esi
mov dword [eax], 0x10107
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100e580b
mov esp, ebp
pop ebp
ret 0x14