Function at 0x10011d40
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x34
mov eax, edx
push ebx
push esi
mov ebx, ecx
mov dword [ebp - 4], eax
mov edx, dword [eax + 4]
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0xc], edx
push edi
test edx, edx
jns 0x10011d81
cmp dword [eax], 0
jg 0x10011d81
mov edx, dword [ebp + 0x14]
mov ecx, dword [ebp + 0x10]
add edx, ecx
push dword [ebp + 8]
call fcn.1000c9e0
add esp, 4
mov dword [ebx], edx
mov eax, ebx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov esi, dword [ebp + 0x10]
xor edi, edi
mov ecx, dword [ebp + 0x14]
add ecx, esi
mov dword [ebp - 8], esi
mov dword [ebp - 0x10], ecx
mov eax, ecx
mov dword [ebp - 0x34], esi
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x28], edi
cmp esi, ecx
je 0x10011dc9
lea eax, [ebp - 0x28]
mov edx, ecx
push eax
mov ecx, esi
call fcn.10020220
mov esi, dword [ebp - 0x34]
add esp, 4
mov edi, dword [ebp - 0x28]
mov edx, dword [ebp - 0xc]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x30]
mov dword [ebp - 8], esi
xor ebx, ebx
mov byte [ebp - 0x24], 0
cmp esi, eax
je 0x10011e93
mov dword [ebp - 0x14], ebx
cmp ebx, edx
jne 0x10011de8
nop
test edx, edx
jns 0x10011e93
cmp edi, 0x25fd
jae 0x10011e19
mov eax, 1
mov ecx, 0x102f2a30
nop word [eax + eax]
cmp edi, dword [ecx]
jb 0x10011e56
add ecx, 4
xor eax, 3
cmp ecx, 0x102f2d58
jne 0x10011e00
mov eax, 1
jmp 0x10011e56
mov eax, 0x102f2a30
mov edx, 0xca
mov esi, edx
shr esi, 1
cmp edi, dword [eax + esi*4]
lea ecx, [eax + esi*4]
jae 0x10011e33
mov edx, esi
jmp 0x10011e3d
lea eax, [ecx + 4]
or ecx, 0xffffffff
sub ecx, esi
add edx, ecx
nop dword [eax]
test edx, edx
jg 0x10011e23
mov edx, dword [ebp - 0xc]
sub eax, 0x102f2a30
mov esi, dword [ebp - 8]
sar eax, 2
and eax, 1
inc eax
mov ecx, 0x7fffffff
sub ecx, eax
cmp ecx, ebx
jl 0x10011ef6
add ebx, eax
cmp ebx, edx
jle 0x10011e72
test edx, edx
jns 0x10011e90
lea ecx, [ebp - 0x34]
call fcn.10015b80
mov esi, dword [ebp - 0x34]
mov dword [ebp - 8], esi
cmp esi, dword [ebp - 0x30]
je 0x10011e93
mov edi, dword [ebp - 0x28]
mov edx, dword [ebp - 0xc]
jmp 0x10011dd7
mov ebx, dword [ebp - 0x14]
mov dword [ebp - 0x10], esi
mov eax, dword [ebp + 0x10]
xor esi, esi
mov ecx, dword [ebp + 8]
xor edi, edi
mov dword [ebp - 8], eax
mov eax, dword [ebp - 4]
mov dword [ebp - 0x14], 1
mov dword [ebp - 0xc], esi
mov al, byte [eax + 9]
test al, al
movzx edx, al
cmove edx, dword [ebp - 0x14]
mov dword [ebp - 0x14], edx
mov edx, dword [ebp - 4]
mov edx, dword [edx]
cmp ebx, edx
jge 0x10011f06
mov eax, dword [ebp - 0x14]
movzx eax, al
sub eax, 1
je 0x10011f3c
sub eax, 1
je 0x10011f02
sub eax, 1
jne 0x10011f06
mov eax, edx
sub eax, ebx
cdq
sub eax, edx
mov edi, eax
mov eax, dword [ebp - 4]
sar edi, 1
mov esi, dword [eax]
sub esi, edi
sub esi, ebx
mov dword [ebp - 0xc], esi
jmp 0x10011f09
test edx, edx
jns 0x10011e93
mov ebx, 0x7fffffff
jmp 0x10011e96
mov edi, edx
sub edi, ebx
mov eax, dword [ebp - 4]
lea ebx, [eax + 0xf]
movzx eax, byte [eax + 0xe]
mov edx, ebx
test edi, edi
jle 0x10011f4c
lea esi, [ebx + eax]
mov dword [ebp - 0x14], esi
nop dword [eax]
push ecx
mov edx, esi
mov ecx, ebx
call fcn.1000c9e0
dec edi
add esp, 4
mov ecx, edx
test edi, edi
jg 0x10011f20
mov esi, dword [ebp - 0xc]
mov edi, dword [ebp - 0x14]
jmp 0x10011f4f
mov eax, dword [ebp - 4]
mov esi, edx
sub esi, ebx
lea ebx, [eax + 0xf]
movzx eax, byte [eax + 0xe]
mov edx, ebx
lea edi, [eax + edx]
mov eax, dword ds:[ebp - 8]
mov edx, dword [ebp - 0x10]
sub edx, eax
push ecx
add edx, eax
mov ecx, eax
call fcn.1000c9e0
add esp, 4
test esi, esi
jle 0x10011f84
nop dword [eax]
push edx
mov edx, edi
mov ecx, ebx
call fcn.1000c9e0
dec esi
add esp, 4
test esi, esi
jg 0x10011f70
mov eax, dword [ebp - 0x20]
pop edi
pop esi
pop ebx
mov dword [eax], edx
mov esp, ebp
pop ebp
ret