Function at 0x408c6a
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push edi
push esi
push ebp
push ebx
sub esp, 0xd0
mov edx, dword [eax]
mov ecx, dword [edx + 0xbc]
mov dword [esp + 0x30], edx
mov dword [esp + 0x34], eax
xor edx, edx
mov eax, ecx
imul ebx, edx, 0x58e8
test eax, eax
mov ebp, dword [esp + 0x34]
lea esi, [ebx + ebp + 0x9040]
jle 0x42f2f2
mov edi, ebp
lea ebp, [edi + 0x2a5dc]
mov dword [esp + 0x4c], esi
mov dword [esp + 0x38], ebp
mov ebp, esi
mov dword [esp + 0xc0], esi
mov dword [esp + 0x2c], edx
xor ebx, ebx
lea ecx, [edx + edx*2]
lea ecx, [edi + ecx*8 + 0x34]
xor edi, edi
mov dword [esp + 0x50], edi
mov esi, edi
mov dword [esp + 0x3c], ecx
mov dword [esp + 0x54], edi
mov edx, dword [esp + 0xc0]
movzx edx, byte [ebx + edx + 0x44c0]
test edx, edx
je 0x408e85
mov eax, dword [esp + 0xc0]
lea ecx, [eax + esi]
mov dword [esp + 0xc8], ecx
lea ecx, [eax + edi]
lea edx, [ebp + 0x4268]
mov eax, dword [esp + 0x3c]
mov eax, dword [eax + ebx*4 + 0x2a5b0]
mov dword [esp + 0x40], edx
mov dword [esp + 0x44], eax
mov eax, dword [esp + 0x34]
mov eax, dword [eax + ebx*4 + 0x2a698]
test eax, eax
jle 0x408d69
mov dword [esp + 0x4c], ebp
mov dword [esp + 0x48], ebx
mov ebx, dword [esp + 0xc8]
xor edx, edx
mov dword [esp + 0xcc], edx
movzx ebp, byte [edx + ebx + 0x3068]
movzx ebp, word [ebp*2 + 0x44c490]
mov word [ecx + edx*2 + 0x3668], bp
add edx, 1
cmp edx, eax
jl 0x408d42
mov ebp, dword [esp + 0x4c]
mov ebx, dword [esp + 0x48]
movzx edx, byte [0x44a160]
mov dword [esp + 0xc8], edx
mov dword [esp + 0x54], edi
xor edx, edx
mov dword [esp + 0x58], edx
mov edx, dword [esp + 0xc8]
mov dword [esp + 0x50], esi
mov esi, dword [esp + 0x58]
mov dword [esp + 0x4c], ebp
mov dword [esp + 0x48], ebx
movzx edi, byte [edx + 0x44c4d1]
movsx ebp, word [ecx + esi*2 + 0x3668]
add esi, 1
cmp eax, edi
mov ebx, esi
jge 0x408db2
mov edi, eax
cmp esi, edi
jge 0x408e18
mov dword [esp + 0xcc], edi
mov dword [esp + 0xc8], edx
mov dword [esp + 0xc4], eax
movsx edi, word [ecx + esi*2 + 0x3668]
mov eax, ebp
sub eax, edi
cdq
add esi, 1
add ebx, 1
xor eax, edx
sub eax, edx
sar eax, 1
cmp eax, 0xff
jle 0x408df0
mov eax, 0xff
movzx eax, byte [eax + str._____:98765443210__.____________]
cmp ebp, edi
jge 0x408dfd
mov ebp, edi
add ebp, eax
mov eax, dword [esp + 0xcc]
cmp ebx, eax
jl 0x408dcb
mov edx, dword [esp + 0xc8]
mov eax, dword [esp + 0xc4]
movzx ebx, byte [edx + 0x44c4d1]
mov word [esp + edx*2 + 0x5c], bp
add edx, 1
cmp eax, ebx
jg 0x408d98
mov edi, dword [esp + 0x54]
mov esi, dword [esp + 0x50]
mov ebp, dword [esp + 0x4c]
mov ebx, dword [esp + 0x48]
xor ecx, ecx
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x44]
mov dword [esp + 0x10], eax
mov eax, 0xffffffff
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], eax
mov dword [esp + 0x1c], ecx
mov dword [esp + 0x20], ecx
mov dword [esp + 0x24], ecx
mov eax, dword [esp + 0x40]
mov dword [esp + 0x28], eax
mov eax, dword [esp + 0x38]
lea edx, [esp + 0x5c]
call fcn.00408ec6
mov eax, dword [esp + 0x30]
mov eax, dword [eax + 0xbc]
add ebp, 0x64
add esi, 0x100
add edi, 0x200
add ebx, 1
cmp ebx, eax
jl 0x408cd7
mov edx, dword [esp + 0x2c]
add edx, 1
cmp edx, 6
jl 0x408c88
add esp, 0xd0
pop ebx
pop ebp
pop esi
pop edi
ret
add edx, 1
cmp edx, 6
jl 0x408c88
jmp 0x408eaf