Function at 0x610c70
Capabilities:
Encrypt data using rc4 prga

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x610fca
sub esp, 0x44
movzx eax, byte [esp + 0x48]
lea edx, [eax - 1]
cmp dl, 7
ja 0x610fb1
mov edx, dword [esp + 0x50]
test edx, edx
je 0x610db3
mov ebx, dword [esp + 0x4c]
movzx ebp, byte [ebx]
cmp al, 8
jae 0x610cc8
movzx ecx, al
cmp ecx, 0x20
sbb esi, esi
mov edi, 1
shl edi, cl
and edi, esi
add edi, 0xffffffff
and ebp, edi
movzx ecx, al
cmp ecx, 0x20
sbb eax, eax
mov esi, 1
shl esi, cl
and esi, eax
mov eax, esi
add esi, 0xffffffff
add ecx, 0xffffffe0
mov dword [esp + 0x34], ecx
cmp ecx, 0x20
sbb edi, edi
neg ecx
mov dword [esp + 0x30], ecx
cmp ecx, 0x20
sbb edx, edx
mov ecx, dword [esp + 0x34]
mov ebx, 1
shl ebx, cl
and edi, ebx
mov ecx, dword [esp + 0x30]
mov ebx, 1
shr ebx, cl
and ebx, edx
or edi, ebx
add eax, 0xffffffff
adc edi, 0xffffffff
test edi, edi
sete al
cmp esi, ebp
seta dl
test edi, edi
seta bl
and eax, edx
or eax, ebx
test al, al
jne 0x610d6d
mov eax, dword [esp + 0x54]
lea edx, [eax - 1]
mov ebx, edx
neg edx
sar edx, 0x1f
and edx, 1
mov esi, dword [esp + 0x4c]
add edx, esi
mov edi, dword [esp + 0x50]
mov ecx, eax
lea eax, [edi - 1]
mov dword [esp + 0x38], eax
xor eax, eax
mov dword [esp + 0x34], eax
xor eax, eax
mov dword [esp + 0x14], eax
xor eax, eax
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x38]
jmp 0x610e1f
mov dword [esp + 0x5c], 0
mov dword [esp + 0x58], ebp
mov eax, dword [esp + 0x54]
dec eax
mov ecx, eax
neg eax
sar eax, 0x1f
and eax, 1
mov edx, dword [esp + 0x4c]
add eax, edx
mov dword [esp + 0x60], eax
mov eax, dword [esp + 0x50]
dec eax
mov dword [esp + 0x64], eax
mov dword [esp + 0x68], ecx
mov dword [esp + 0x6c], 0
mov dword [esp + 0x70], 0
add esp, 0x44
ret
mov eax, dword [0x8c0fb0]
mov ecx, dword [0x8c0fb4]
mov dword [esp + 0x5c], 0
mov dword [esp + 0x58], 0
mov ebx, dword [esp + 0x4c]
mov dword [esp + 0x60], ebx
mov dword [esp + 0x64], edx
mov edx, dword [esp + 0x54]
mov dword [esp + 0x68], edx
mov dword [esp + 0x6c], eax
mov dword [esp + 0x70], ecx
add esp, 0x44
ret
mov edx, dword [esp + 0x18]
mov eax, dword [esp + 0x24]
mov ebx, dword [esp + 0x2c]
mov eax, ebp
mov edx, ecx
mov ebp, dword [esp + 0x24]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x34], ecx
mov dword [esp + 0x14], edi
mov dword [esp + 0x10], esi
mov ecx, dword [esp + 0x54]
mov esi, dword [esp + 0x4c]
mov edi, dword [esp + 0x50]
test eax, eax
je 0x610f7d
mov dword [esp + 0x2c], eax
mov dword [esp + 0x28], ebx
mov dword [esp + 0x40], edx
mov edi, dword [esp + 0x14]
cmp edi, 1
sbb esi, esi
xor esi, 0xffffffff
mov edi, dword [esp + 0x10]
or esi, edi
cmp esi, 0x20
sbb edi, edi
movzx eax, byte [edx]
mov byte [esp + 0xf], al
and eax, 0x7f
mov dword [esp + 0x30], eax
mov ecx, esi
shl eax, cl
and edi, eax
mov eax, edi
add edi, ebp
mov dword [esp + 0x24], edi
add ecx, 0xffffffe0
mov dword [esp + 0x20], ecx
cmp ecx, 0x20
sbb esi, esi
neg ecx
mov dword [esp + 0x1c], ecx
cmp ecx, 0x20
sbb edi, edi
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x30]
shl edx, cl
mov ecx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x30]
shr ebx, cl
and edi, ebx
and edx, esi
or edx, edi
add eax, ebp
mov eax, dword [esp + 0x34]
adc edx, eax
mov eax, dword [esp + 0x28]
dec eax
mov ebx, eax
neg eax
sar eax, 0x1f
and eax, 1
mov ebp, dword [esp + 0x40]
add eax, ebp
mov ebp, dword [esp + 0x2c]
dec ebp
movzx esi, byte [esp + 0xf]
xchg esi, eax
test al, 0x80
xchg esi, eax
je 0x610f51
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x18], edx
mov esi, dword [esp + 0x10]
add esi, 7
mov edi, dword [esp + 0x14]
adc edi, 0
test edi, edi
mov ecx, eax
seta al
sete dl
cmp esi, 0x3f
setae bl
and ebx, edx
or ebx, eax
test bl, bl
je 0x610def
lea eax, [0x6a0c80]
mov dword [esp], eax
lea eax, [0x8c0fb8]
mov dword [esp + 4], eax
call fcn.00408f90
mov eax, dword [esp + 8]
mov dword [esp + 0x5c], 0
mov dword [esp + 0x58], 0
mov ecx, dword [esp + 0x4c]
mov dword [esp + 0x60], ecx
mov ecx, dword [esp + 0x50]
mov dword [esp + 0x64], ecx
mov ecx, dword [esp + 0x54]
mov dword [esp + 0x68], ecx
lea ecx, [0x739dc8]
mov dword [esp + 0x6c], ecx
mov dword [esp + 0x70], eax
add esp, 0x44
ret
mov dword [esp + 0x5c], edx
mov ecx, dword [esp + 0x24]
mov dword [esp + 0x58], ecx
mov dword [esp + 0x60], eax
mov dword [esp + 0x64], ebp
mov dword [esp + 0x68], ebx
mov dword [esp + 0x6c], 0
mov dword [esp + 0x70], 0
add esp, 0x44
ret
mov eax, dword [0x8c0fb0]
mov edx, dword [0x8c0fb4]
mov dword [esp + 0x5c], 0
mov dword [esp + 0x58], 0
mov dword [esp + 0x60], esi
mov dword [esp + 0x64], edi
mov dword [esp + 0x68], ecx
mov dword [esp + 0x6c], eax
mov dword [esp + 0x70], edx
add esp, 0x44
ret
lea eax, [0x68e4c0]
mov dword [esp], eax
lea eax, [0x7392c8]
mov dword [esp + 4], eax
call fcn.00436f70
nop
call fcn.00461c70
jmp fcn.00610c70