Function at 0x40af70
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x10
mov esi, ecx
test edx, edx
je 0x40af85
push esi
call fcn.0040b270
jmp 0x40af8b
push esi
call fcn.0040b700
add esp, 4
lea ebp, [esi + 0x9272]
cmp ebp, dword [esi + 0x28]
jae 0x40b1fd
mov eax, 1
jmp 0x40afbf
mov eax, dword [esp + 0xc]
shr eax, 1
cmp ebp, dword [esi + 0x28]
jae 0x40b203
cmp eax, 1
jne 0x40afce
movzx eax, byte [ebp]
inc ebp
or eax, 0x100
mov dword [esp + 0xc], eax
test al, 1
jne 0x40b050
movzx edx, byte [ebp]
inc ebp
movzx ebx, word [esi + edx*2 + 0x8852]
mov eax, dword [esi + 0x44]
mov ecx, eax
shl ebx, cl
movzx ecx, byte [esi + edx + 0x8f12]
mov edi, dword [esi + 0x48]
mov edx, edi
xor edx, ebx
not ebx
and ebx, edi
add edx, edi
sub edx, ebx
mov dword [esi + 0x48], edx
add ecx, eax
mov dword [esi + 0x44], ecx
cmp ecx, 8
jae 0x40b02a
jmp 0x40afb0
shr edx, 8
mov dword [esi + 0x48], edx
mov eax, ecx
not eax
and eax, 8
and ecx, 0xfffffff7
sub ecx, eax
mov dword [esi + 0x44], ecx
cmp ecx, 7
jbe 0x40afb0
mov eax, dword [esi + 0x30]
cmp eax, dword [esi + 0x34]
jae 0x40b010
lea ecx, [eax + 1]
mov dword [esi + 0x30], ecx
mov byte [eax], dl
mov ecx, dword [esi + 0x44]
mov edx, dword [esi + 0x48]
jmp 0x40b010
movzx eax, byte [ebp]
mov edi, eax
movzx eax, word [eax + eax + 0x44c02e]
movzx edx, word [esi + eax*2 + 0x8852]
mov ecx, dword [esi + 0x44]
shl edx, cl
movzx eax, byte [esi + eax + 0x8f12]
add eax, ecx
movzx ecx, byte [ebp + 1]
mov dword [esp], ecx
or edx, dword [esi + 0x48]
mov dword [esp + 8], ebp
movzx ebp, byte [ebp + 2]
mov dword [esi + 0x48], edx
mov dword [esi + 0x44], eax
cmp eax, 8
jae 0x40b0f1
movzx ebx, byte [edi + 0x44c288]
and edi, dword [ebx*4 + 0x44c244]
mov ecx, eax
shl edi, cl
or edi, edx
mov edx, edi
mov dword [esi + 0x48], edi
add eax, ebx
mov dword [esi + 0x44], eax
cmp eax, 8
jae 0x40b121
mov dword [esp + 4], edx
mov edx, ebp
shl edx, 8
add edx, dword [esp]
cmp edx, 0x200
jb 0x40b140
lea ecx, [ebp + 0x44bfae]
lea ebp, [ebp + 0x44c588]
jmp 0x40b14c
shr edx, 8
mov dword [esi + 0x48], edx
add eax, 0xfffffff8
mov dword [esi + 0x44], eax
cmp eax, 7
jbe 0x40b092
mov ecx, dword [esi + 0x30]
cmp ecx, dword [esi + 0x34]
jae 0x40b0e0
lea eax, [ecx + 1]
mov dword [esi + 0x30], eax
mov byte [ecx], dl
mov eax, dword [esi + 0x44]
mov edx, dword [esi + 0x48]
jmp 0x40b0e0
shr edx, 8
mov dword [esi + 0x48], edx
add eax, 0xfffffff8
mov dword [esi + 0x44], eax
cmp eax, 7
jbe 0x40b0b5
mov ecx, dword [esi + 0x30]
cmp ecx, dword [esi + 0x34]
jae 0x40b110
lea eax, [ecx + 1]
mov dword [esi + 0x30], eax
mov byte [ecx], dl
mov eax, dword [esi + 0x44]
mov edx, dword [esi + 0x48]
jmp 0x40b110
lea ecx, [edx + 0x44bdae]
lea ebp, [edx + 0x44c388]
movzx edi, byte [ecx]
movzx ebx, word [esi + edi*2 + 0x8a92]
mov ecx, eax
shl ebx, cl
or ebx, dword [esp + 4]
movzx ecx, byte [esi + edi + 0x9032]
add ecx, eax
movzx eax, byte [ebp]
mov dword [esi + 0x48], ebx
mov dword [esi + 0x44], ecx
cmp ecx, 8
jae 0x40b1b1
mov ebp, dword [esp + 8]
add ebp, 3
and edx, dword [eax*4 + 0x44c244]
shl edx, cl
or edx, ebx
mov dword [esi + 0x48], edx
add ecx, eax
mov dword [esi + 0x44], ecx
cmp ecx, 8
jae 0x40b1e5
jmp 0x40afb0
shr ebx, 8
mov dword [esi + 0x48], ebx
add ecx, 0xfffffff8
mov dword [esi + 0x44], ecx
cmp ecx, 7
jbe 0x40b178
mov ebp, dword [esi + 0x30]
cmp ebp, dword [esi + 0x34]
jae 0x40b1a0
lea ecx, [ebp + 1]
mov dword [esi + 0x30], ecx
mov byte [ebp], bl
mov ecx, dword [esi + 0x44]
mov ebx, dword [esi + 0x48]
jmp 0x40b1a0
shr edx, 8
mov dword [esi + 0x48], edx
add ecx, 0xfffffff8
mov dword [esi + 0x44], ecx
cmp ecx, 7
jbe 0x40afb0
mov eax, dword [esi + 0x30]
cmp eax, dword [esi + 0x34]
jae 0x40b1d0
lea ecx, [eax + 1]
mov dword [esi + 0x30], ecx
mov byte [eax], dl
mov ecx, dword [esi + 0x44]
mov edx, dword [esi + 0x48]
jmp 0x40b1d0
mov ecx, dword [esi + 0x44]
mov edx, dword [esi + 0x48]
movzx eax, word [esi + 0x8a52]
movzx edi, byte [esi + 0x9012]
shl eax, cl
or eax, edx
mov dword [esi + 0x48], eax
add edi, ecx
mov dword [esi + 0x44], edi
cmp edi, 8
jae 0x40b251
mov ecx, dword [esi + 0x30]
xor eax, eax
cmp ecx, dword [esi + 0x34]
setb al
add esp, 0x10
pop esi
pop edi
pop ebx
pop ebp
ret
shr eax, 8
mov dword [esi + 0x48], eax
add edi, 0xfffffff8
mov dword [esi + 0x44], edi
cmp edi, 7
jbe 0x40b222
mov ecx, dword [esi + 0x30]
cmp ecx, dword [esi + 0x34]
jae 0x40b240
lea edx, [ecx + 1]
mov dword [esi + 0x30], edx
mov byte [ecx], al
mov edi, dword [esi + 0x44]
mov eax, dword [esi + 0x48]
jmp 0x40b240