Function at 0x40add0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0xc
mov esi, ecx
test edx, edx
je 0x40ade5
push esi
call fcn.0040b0e0
jmp 0x40adeb
push esi
call fcn.0040b570
add esp, 4
lea ebp, [esi + 0x9272]
cmp ebp, dword [esi + 0x28]
jae 0x40b069
mov ebx, 1
jmp 0x40ae22
mov ebp, dword [esp]
mov ebx, dword [esp + 8]
shr ebx, 1
cmp ebp, dword [esi + 0x28]
jae 0x40b06f
cmp ebx, 1
jne 0x40ae32
movzx ebx, byte [ebp]
inc ebp
or ebx, 0x100
test bl, 1
jne 0x40aea0
movzx edi, byte [ebp]
movzx edx, word [esi + edi*2 + 0x8852]
mov eax, dword [esi + 0x44]
mov ecx, eax
shl edx, cl
inc ebp
movzx ecx, byte [esi + edi + 0x8f12]
or edx, dword [esi + 0x48]
mov dword [esi + 0x48], edx
add ecx, eax
mov dword [esi + 0x44], ecx
cmp ecx, 8
jae 0x40ae81
jmp 0x40ae17
shr edx, 8
mov dword [esi + 0x48], edx
add ecx, 0xfffffff8
mov dword [esi + 0x44], ecx
cmp ecx, 7
jbe 0x40ae17
mov eax, dword [esi + 0x30]
cmp eax, dword [esi + 0x34]
jae 0x40ae70
lea ecx, [eax + 1]
mov dword [esi + 0x30], ecx
mov byte [eax], dl
mov ecx, dword [esi + 0x44]
mov edx, dword [esi + 0x48]
jmp 0x40ae70
mov dword [esp + 8], ebx
movzx edx, byte [ebp]
movzx eax, word [edx + edx + 0x44d02e]
movzx ebx, word [esi + eax*2 + 0x8852]
mov ecx, dword [esi + 0x44]
shl ebx, cl
movzx eax, byte [esi + eax + 0x8f12]
add eax, ecx
movzx ecx, byte [ebp + 1]
mov dword [esp + 4], ecx
or ebx, dword [esi + 0x48]
movzx edi, byte [ebp + 2]
mov dword [esi + 0x48], ebx
mov dword [esi + 0x44], eax
cmp eax, 8
jae 0x40af51
mov dword [esp], edi
movzx edi, byte [edx + 0x44d288]
and edx, dword [edi*4 + 0x44d244]
mov ecx, eax
shl edx, cl
or edx, ebx
mov dword [esi + 0x48], edx
add eax, edi
mov dword [esi + 0x44], eax
cmp eax, 8
jb 0x40af70
mov edi, dword [esp]
jmp 0x40af21
shr edx, 8
mov dword [esi + 0x48], edx
add eax, 0xfffffff8
mov dword [esi + 0x44], eax
cmp eax, 7
jbe 0x40af73
mov ecx, dword [esi + 0x30]
cmp ecx, dword [esi + 0x34]
jae 0x40af10
lea eax, [ecx + 1]
mov dword [esi + 0x30], eax
mov byte [ecx], dl
mov eax, dword [esi + 0x44]
mov edx, dword [esi + 0x48]
jmp 0x40af10
shr ebx, 8
mov dword [esi + 0x48], ebx
add eax, 0xfffffff8
mov dword [esi + 0x44], eax
cmp eax, 7
jbe 0x40aee1
mov ecx, dword [esi + 0x30]
cmp ecx, dword [esi + 0x34]
jae 0x40af40
lea eax, [ecx + 1]
mov dword [esi + 0x30], eax
mov byte [ecx], bl
mov eax, dword [esi + 0x44]
mov ebx, dword [esi + 0x48]
jmp 0x40af40
mov edi, dword [esp]
mov dword [esp], ebp
mov ebp, edi
shl ebp, 8
add ebp, dword [esp + 4]
cmp ebp, 0x200
jb 0x40afa0
lea ecx, [edi + 0x44cfae]
lea edi, [edi + 0x44d588]
jmp 0x40afac
lea ecx, [ebp + 0x44cdae]
lea edi, [ebp + 0x44d388]
mov dword [esp + 4], edi
movzx edi, byte [ecx]
movzx ebx, word [esi + edi*2 + 0x8a92]
mov ecx, eax
shl ebx, cl
or ebx, edx
movzx ecx, byte [esi + edi + 0x9032]
add ecx, eax
mov eax, dword [esp + 4]
movzx eax, byte [eax]
mov dword [esi + 0x48], ebx
mov dword [esi + 0x44], ecx
cmp ecx, 8
jae 0x40b051
and ebp, dword [eax*4 + 0x44d244]
shl ebp, cl
add dword [esp], 3
mov edx, ebp
xor edx, ebx
add edx, ebx
not ebp
and ebp, ebx
sub edx, ebp
mov dword [esi + 0x48], edx
add ecx, eax
mov dword [esi + 0x44], ecx
cmp ecx, 8
jb 0x40ae10
mov ebp, dword [esp]
mov ebx, dword [esp + 8]
jmp 0x40b025
shr edx, 8
mov dword [esi + 0x48], edx
add ecx, 0xfffffff8
mov dword [esi + 0x44], ecx
cmp ecx, 7
jbe 0x40ae17
mov eax, dword [esi + 0x30]
cmp eax, dword [esi + 0x34]
jae 0x40b010
lea ecx, [eax + 1]
mov dword [esi + 0x30], ecx
mov byte [eax], dl
mov ecx, dword [esi + 0x44]
mov edx, dword [esi + 0x48]
jmp 0x40b010
shr ebx, 8
mov dword [esi + 0x48], ebx
add ecx, 0xfffffff8
mov dword [esi + 0x44], ecx
cmp ecx, 7
jbe 0x40afdd
mov edx, dword [esi + 0x30]
cmp edx, dword [esi + 0x34]
jae 0x40b040
lea ecx, [edx + 1]
mov dword [esi + 0x30], ecx
mov byte [edx], bl
mov ecx, dword [esi + 0x44]
mov ebx, dword [esi + 0x48]
jmp 0x40b040
mov ecx, dword [esi + 0x44]
mov edx, dword [esi + 0x48]
movzx eax, word [esi + 0x8a52]
movzx edi, byte [esi + 0x9012]
shl eax, cl
or eax, edx
mov dword [esi + 0x48], eax
add edi, ecx
mov dword [esi + 0x44], edi
cmp edi, 8
jae 0x40b0c1
mov ecx, dword [esi + 0x30]
xor eax, eax
cmp ecx, dword [esi + 0x34]
setb al
add esp, 0xc
pop esi
pop edi
pop ebx
pop ebp
ret
shr eax, 8
mov dword [esi + 0x48], eax
add edi, 0xfffffff8
mov dword [esi + 0x44], edi
cmp edi, 7
jbe 0x40b08e
mov ecx, dword [esi + 0x30]
cmp ecx, dword [esi + 0x34]
jae 0x40b0b0
lea edx, [ecx + 1]
mov dword [esi + 0x30], edx
mov byte [ecx], al
mov edi, dword [esi + 0x44]
mov eax, dword [esi + 0x48]
jmp 0x40b0b0