Function at 0x1015ec40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x3c
mov eax, dword [ebp + 8]
push ebx
add eax, edx
mov dword [esp + 0xc], edx
mov dword [esp + 4], ecx
mov dword [esp + 0x3c], eax
push esi
push edi
cmp edx, eax
jae 0x1015ef8e
lea eax, [ecx + 0xa]
mov dword [esp + 0x3c], eax
nop dword [eax]
mov eax, dword [edx]
lea ebx, [edx + 0x10]
mov edi, dword [edx + 0xc]
add eax, edx
mov esi, dword [edx + 8]
push 0
push 0
push ecx
lea ecx, [esp + 0x34]
mov dword [esp + 0x30], eax
mov dword [esp + 0x1c], ebx
call fcn.100d6800
mov ecx, dword [esp + 0xc]
xorps xmm2, xmm2
push 0
mov eax, dword [ecx]
mov eax, dword [eax + 0x28]
mov dword [ecx + 4], eax
lea ecx, [esp + 0x2c]
call fcn.100a3b70
movd xmm0, esi
neg edi
mov esi, dword [esp + 0xc]
cvtdq2ps xmm0, xmm0
lea ecx, [esi + 0xa]
mulss xmm0, dword [0x10226184]
movss dword [eax], xmm0
movd xmm0, edi
cvtdq2ps xmm0, xmm0
mulss xmm0, dword [0x10226184]
movss dword [eax + 4], xmm0
mov al, 2
mov byte [esi + 9], 0
xchg byte [ecx], al
cmp ebx, dword [esp + 0x24]
jae 0x1015ef1f
nop
movzx eax, word [ebx]
mov ecx, eax
cmp eax, 1
jne 0x1015edc0
xor eax, eax
xor ecx, ecx
mov dword [esp + 0x18], eax
cmp cx, word [ebx + 2]
jae 0x1015ef03
mov edi, dword [esp + 0x10]
mov ecx, esi
movzx eax, ax
mov ebx, dword [ebx + eax*8 + 8]
mov edi, dword [edi + eax*8 + 4]
call fcn.100a4e10
push 0
push 0
push esi
lea ecx, [esp + 0x38]
call fcn.100d6800
mov esi, dword [esp + 0x2c]
mov ecx, esi
push 9
or byte [esi + 0x1b], 1
call fcn.100d66d0
mov ecx, dword [esi + 0x24]
neg ebx
mov eax, dword [esi + 0x20]
not ecx
movd xmm0, edi
cvtdq2ps xmm0, xmm0
mov byte [ecx + eax], 1
mov edx, dword [esi + 0x28]
mov ecx, dword [esi + 0x1c]
inc dword [esi + 0x24]
mulss xmm0, dword [0x10226184]
add dword [esi + 0x2c], 0xfffffff7
lea eax, [edx + 1]
mov dword [esi + 0x28], eax
mov al, 2
mov byte [esi + 0x18], 1
mov byte [esi + 0x1a], 0
mov esi, dword [esp + 0xc]
movss dword [ecx + edx*8], xmm0
movd xmm0, ebx
cvtdq2ps xmm0, xmm0
mulss xmm0, dword [0x10226184]
movss dword [ecx + edx*8 + 4], xmm0
lea ecx, [esi + 0xa]
mov byte [esi + 9], 0
xchg byte [ecx], al
mov eax, dword [esp + 0x18]
mov ebx, dword [esp + 0x10]
inc eax
mov dword [esp + 0x18], eax
cmp ax, word [ebx + 2]
jb 0x1015ed10
movzx ecx, word [ebx]
cmp cx, 2
jne 0x1015ef03
movzx ecx, word [ebx + 2]
mov dword [esp + 0x10], 0
lea eax, [ecx - 1]
test eax, eax
jle 0x1015ef03
mov eax, ecx
xor esi, esi
mov dword [esp + 0x20], eax
mov dword [esp + 0x1c], esi
nop dword [eax]
mov edx, dword [ebx + esi*8 + 4]
mov ecx, dword [ebx + esi*8 + 8]
mov eax, dword [ebx + esi*8 + 0xc]
mov edi, dword [ebx + esi*8 + 0x10]
mov esi, dword [esp + 0x20]
movzx esi, si
sub esi, 2
mov dword [esp + 0x34], edx
mov dword [esp + 0x38], ecx
mov dword [esp + 0x18], eax
cmp dword [esp + 0x1c], esi
jge 0x1015ee28
add eax, edx
add edi, ecx
sar eax, 1
mov dword [esp + 0x18], eax
sar edi, 1
mov esi, dword [esp + 0xc]
mov ecx, esi
call fcn.100a4e10
push 0
push 0
push esi
lea ecx, [esp + 0x3c]
call fcn.100d6800
mov esi, dword [esp + 0x30]
mov ecx, esi
push 0x11
or byte [esi + 0x1b], 2
call fcn.100d66d0
mov ecx, dword [esi + 0x24]
neg edi
mov eax, dword [esi + 0x20]
not ecx
movd xmm0, dword [esp + 0x34]
movss xmm1, dword [0x10226184]
cvtdq2ps xmm0, xmm0
mov byte [ecx + eax], 2
mov edx, dword [esi + 0x28]
mov ecx, dword [esi + 0x1c]
inc dword [esi + 0x24]
add dword [esi + 0x2c], 0xffffffef
mulss xmm0, xmm1
lea eax, [edx + 2]
mov dword [esi + 0x28], eax
mov eax, dword [esp + 0x38]
mov byte [esi + 0x18], 1
neg eax
mov byte [esi + 0x1a], 0
movss dword [ecx + edx*8], xmm0
movd xmm0, eax
mov al, 2
cvtdq2ps xmm0, xmm0
mulss xmm0, xmm1
movss dword [ecx + edx*8 + 4], xmm0
movd xmm0, dword [esp + 0x18]
cvtdq2ps xmm0, xmm0
mulss xmm0, xmm1
movss dword [ecx + edx*8 + 8], xmm0
movd xmm0, edi
cvtdq2ps xmm0, xmm0
mulss xmm0, xmm1
movss dword [ecx + edx*8 + 0xc], xmm0
mov ecx, dword [esp + 0xc]
mov byte [ecx + 9], 0
mov ecx, dword [esp + 0x3c]
xchg byte [ecx], al
mov ecx, dword [esp + 0x10]
movzx eax, word [ebx + 2]
inc ecx
movzx esi, cx
mov dword [esp + 0x10], ecx
mov ecx, eax
dec eax
mov dword [esp + 0x1c], esi
mov dword [esp + 0x20], ecx
cmp esi, eax
jl 0x1015edf0
movzx eax, word [ebx + 2]
mov esi, dword [esp + 0xc]
lea ebx, [ebx + eax*8]
add ebx, 4
mov dword [esp + 0x10], ebx
cmp ebx, dword [esp + 0x24]
jb 0x1015ecf0
mov edx, dword [esp + 0x14]
mov eax, dword [esi]
add edx, dword [edx]
mov ecx, dword [eax + 0x24]
mov dword [esp + 0x14], edx
test ecx, ecx
jle 0x1015ef75
mov eax, dword [eax + 0x20]
sub eax, ecx
cmp byte [eax], 4
ja 0x1015ef75
push 0
push 0
push esi
lea ecx, [esp + 0x4c]
call fcn.100d6800
mov esi, dword [esp + 0x40]
mov ecx, esi
push 1
call fcn.100d66d0
mov ecx, dword [esi + 0x24]
mov eax, dword [esi + 0x20]
not ecx
mov edx, dword [esp + 0x14]
mov byte [ecx + eax], 5
inc dword [esi + 0x24]
dec dword [esi + 0x2c]
mov byte [esi + 0x18], 1
mov esi, dword [esp + 0xc]
mov ecx, dword [esi + 4]
not ecx
sar ecx, 0x1f
xor dword [esi + 4], ecx
mov ecx, dword [esp + 0xc]
cmp edx, dword [esp + 0x44]
jb 0x1015ec70
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret