Function at 0x9f64bb
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push edx
push dword [0x9f4c21]
pop dword [esp + 0x24]
pushfd
mov byte [esp + 4], 0xd1
lea esp, [esp + 0x28]
jmp 0x9f5477
jmp 0x9f6494
mov byte [esp + 0xc], cl
jmp 0x9f3c47
clc
mov eax, dword [ebp]
shld dx, ax, cl
or dx, 0x1aee
mov edx, dword [ebp + 4]
push ebp
not eax
add esp, 4
jb 0x9f41ba
cmc
cmp al, 0xbc
not edx
pushal
test dx, cx
and eax, edx
pushfd
pushal
jmp 0x9f691e
mov word [esp], 0x6b7f
mov dword [ebp], edx
pushfd
push 0xe3df1e13
push edx
push esi
lea esp, [esp + 0x4c]
jmp 0x9f5243
pushal
clc
not edx
cmc
cmp bh, 0x4a
and eax, edx
mov byte [esp], 0xef
mov dword [ebp + 4], eax
pushal
pushfd
pop dword [esp + 0x3c]
push dword [esp + 4]
push dword [esp + 0x40]
pop dword [ebp]
pushfd
mov byte [esp + 4], 0x44
lea esp, [esp + 0x48]
jmp 0x9f5fdc
stc
btc cx, 3
shld bx, sp, cl
rcl al, cl
mov ebx, esi
ror al, cl
rol cl, cl
add esi, dword [ebp]
sbb al, bl
mov al, byte [esi - 1]
shrd cx, ax, 1
rcr ch, cl
stc
add al, bl
call fcn.009f4d0d
pushfd
lea esp, [esp + 0x24]
jb 0x9f5806
ja 0x9f5fdc
aad 0xa3
xor al, 0x1c
movzx eax, cl
rdtsc
mov edx, esp
rol ax, cl
aam 0x64
aaa
daa
lea ecx, [edi + 0x40]
movsx di, bl
sub ecx, edx
clc
aam 6
lea eax, [ebp - 0x80]
shld di, dx, cl
and al, 0xfc
btr di, 2
dec edi
not di
sub eax, ecx
mov di, 0x7930
bswap di
mov esp, eax
not di
movsx edi, cl
lea edi, [edx*8 + 0x7f2dcf4f]
pushfd
pushfd
pop dword [esp]
movzx di, dl
push ebp
pop edi
mov edi, edi
push esi
bswap di
push esi
xchg si, di
mov esi, edx
mov di, 0x9684
lea edi, [ecx + eax - 0x40]
jmp 0x9f3d0e
cmp ebp, eax
pushal
jmp 0x9f4c25
shl al, 1
lea eax, [edi + 0x50]
bt bx, 0xb
jmp 0x9f4d90
movzx bp, cl
lea esi, [ecx + 0x20796e79]
bts cx, 4
push 0
jmp 0x9f5f6e
call fcn.009f6919
xchg dword [esp], ebp
xchg cx, bp
xchg si, bp
pushfd
not si
push edi
lea ecx, [edi - 0xee6a275]
xchg bp, di
rcl bp, cl
ror si, 1
push dword [0x9f4c21]
rcr bp, cl
mov si, dx
btr di, sp
mov bp, ax
push 0
lea ebx, [ecx*8 + 0x75906aed]
mov esi, dword [esp + 0x30]
pushfd
rcr di, 3
lea edi, [ebp + 0xdd205d0]
rol esi, 0x11
bswap di
bt sp, 4
sub esi, 0xc1cdfcc6
not al
xor bp, di
xor esi, 0xab284b74
dec bp
cmc
shld bx, cx, 2
dec bp
lea ebp, [esp + 4]
shrd di, di, 0xb
sar bl, cl
or di, di
push 0xe5ac55b9
sub esp, 0xb8
xadd bh, al
sar di, 5
bt di, si
and di, si
mov edi, esp
mov cx, 0x8886
not al
btc bx, 7
neg ecx
mov ebx, esi
setne cl
bsr cx, dx
pushal
movzx cx, cl
add esi, dword [ebp]
cmc
mov al, byte [esi - 1]
add cl, dl
cmc
add al, bl
call fcn.009f5997
push esi
add al, bl
xor dh, 0x61
or dh, dl
ror dl, 4
add esi, 0xffffffff
push 0x91331f09
shld edx, ebp, 5
neg al
movzx edx, bl
inc dx
dec al
rcl dh, cl
pushfd
pushfd
rol al, 5
mov dl, dh
neg dl
add bl, al
shr dh, cl
btc dx, 0xd
inc edx
mov edx, dword [eax + edi]
cmc
stc
pushfd
sub ebp, 4
pushal
mov byte [esp + 4], ah
jmp 0x9f3f08
call fcn.009f479f
jmp 0x9f3e60
clc
mov esi, dword [esp + 0x30]
movsx bp, al
ror bp, 0xa
xchg ebp, ecx
rol esi, 0x11
btr ebx, 0x10
xor ebp, ebx
clc
sub esi, 0xc1cdfcc6
not al
push ebx
shld bx, dx, cl
xor esi, 0xab284b74
ror di, cl
cmp ch, bl
seta bl
lea ebp, [esp + 4]
shr ebx, 0x19
add di, 0xf431
sub esp, 0xbc
movsx di, dl
shrd di, bp, 0xa
inc cl
xor di, 0x27e8
mov edi, esp
ja 0x9f4b04
shr al, 4
bts ecx, 0x13
rol cl, cl
mov ebx, esi
rcl cl, cl
add esi, dword [ebp]
add al, 0xf8
adc cx, si
shrd cx, cx, cl
movsx cx, bl
mov al, byte [esi - 1]
shld ecx, ebx, cl
dec ch
lea ecx, [edx*8 - 0x7f79451a]
sbb ecx, 0xf381377b
add al, bl
bswap cx
bswap cx
bswap cx
movzx cx, dl
dec al
call fcn.009f3d6d
push dword [esp + 0x28]
pop dword [ebp]
push 0x7b799c1f
pushfd
mov byte [esp], 0xf8
mov word [esp + 4], di
lea esp, [esp + 0x34]
jmp 0x9f5243
cld
push dword [esp]
mov dword [esp + 4], edi
movzx di, cl
pushfd
not edi
mov edi, eax
push dword [esp + 4]
push 0x284d6b7e
cld
push dword [esp + 4]
cld
pushal
pushfd
call fcn.009f5a13
push dword [esp + 0x54]
pop dword [ebp]
mov byte [esp], 0xe1
mov byte [esp], ch
mov byte [esp + 4], cl
lea esp, [esp + 0x58]
jmp 0x9f5fdc
mov dword [ebp + 4], eax
pushfd
push eax
pushfd
pop dword [esp + 0x48]
push dword [esp]
push ebp
call 0x9f64bb
pushal
pushal
mov dword [esp + 0x40], eax
push dword [esp]
mov dword [esp + 0x40], eax
jmp 0x9f56b0