Function at 0x41c9c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
sub esp, 0x40
mov eax, dword [0x43f00c]
xor eax, ebp
mov dword [ebp - 4], eax
push esi
push edi
mov edi, dword [ebx + 0xc]
mov esi, ecx
mov dword [ebp - 0x2c], esi
cmp edi, 3
jl 0x41cd80
test byte [esi + 0x24], 2
mov eax, dword [esi + 0x28]
movss xmm0, dword [eax]
movss dword [ebp - 0x24], xmm0
movss xmm0, dword [eax + 4]
movss dword [ebp - 0x14], xmm0
je 0x41cce7
mov eax, dword [ebx + 0x10]
and eax, 0xffffff
mov dword [ebp - 0x30], eax
lea eax, [edi + edi]
push eax
mov dword [ebp - 0x3c], eax
lea eax, [edi*8 - 6]
add eax, edi
push eax
call fcn.0041bc10
mov eax, dword [esi + 0x30]
movzx edx, ax
mov dword [ebp - 0xc], edx
lea ecx, [eax + 1]
movzx eax, dx
mov dword [ebp - 0x38], ecx
mov ecx, 2
mov dword [ebp - 0x10], ecx
mov dword [ebp - 0x18], eax
mov eax, dword [esi + 0x38]
mov word [eax], dx
lea edx, [edx + ecx*2]
mov eax, dword [esi + 0x38]
lea ecx, [edx - 2]
mov word [eax + 2], cx
mov eax, dword [esi + 0x38]
mov ecx, dword [ebp - 0x10]
inc ecx
mov dword [ebp - 0x10], ecx
mov word [eax + 4], dx
add dword [esi + 0x38], 6
mov edx, dword [ebp - 0xc]
cmp ecx, edi
jl 0x41ca54
mov eax, dword [ebp - 0x18]
movzx eax, ax
mov dword [ebp - 0x34], eax
lea eax, [edi*8]
call fcn.004366c0
movss xmm4, dword [0x43c54c]
lea ecx, [edi - 1]
mov esi, dword [ebx + 8]
xor edx, edx
mov dword [ebp - 0x1c], ecx
mov eax, esp
shl ecx, 3
xorps xmm5, xmm5
mov dword [ebp - 0x18], edx
mov dword [ebp - 8], ecx
nop word [eax + eax]
movss xmm1, dword [esi + edx*8]
lea edi, [esi + 4]
movss xmm2, dword [esi + edx*8 + 4]
subss xmm1, dword [ecx + esi]
subss xmm2, dword [ecx + esi + 4]
mov dword [ebp - 0x10], edi
movaps xmm0, xmm1
movss dword [ebp - 0x28], xmm1
movaps xmm3, xmm2
mulss xmm0, xmm1
mulss xmm3, xmm2
movss dword [ebp - 0x20], xmm2
addss xmm3, xmm0
comiss xmm3, xmm5
jbe 0x41cb3e
cvtps2pd xmm0, xmm3
xorps xmm1, xmm1
ucomisd xmm1, xmm0
ja 0x41cb0f
sqrtsd xmm0, xmm0
jmp 0x41cb14
call sub.api_ms_win_crt_math_l1_1_0.dll__libm_sse2_sqrt_precise
movss xmm4, dword [0x43c54c]
xorps xmm5, xmm5
movss xmm1, dword [ebp - 0x28]
movaps xmm3, xmm4
movss xmm2, dword [ebp - 0x20]
mov eax, esp
mov ecx, dword [ebp - 8]
mov edx, dword [ebp - 0x18]
cvtsd2ss xmm0, xmm0
divss xmm3, xmm0
jmp 0x41cb41
movaps xmm3, xmm4
mov edi, dword [ebx + 0xc]
mulss xmm1, xmm3
mulss xmm2, xmm3
xorps xmm1, xmmword [0x43c720]
movss dword [ecx + eax + 4], xmm1
movss dword [ecx + eax], xmm2
lea ecx, [edx*8]
inc edx
mov dword [ebp - 8], ecx
mov dword [ebp - 0x18], edx
cmp edx, edi
jl 0x41cac0
movss xmm5, dword [0x43c528]
lea edx, [edi - 1]
movss xmm6, dword [0x43c4e8]
mov ecx, eax
movss xmm7, dword [0x43c5d8]
sub ecx, esi
mov esi, dword [ebp - 0x2c]
mov dword [ebp - 0x20], ecx
mov ecx, dword [ebp - 0x10]
mov dword [ebp - 8], 0
mov edi, dword [ebp - 8]
movss xmm2, dword [eax + edi*8]
mov edi, dword [ebp - 0x20]
addss xmm2, dword [eax + edx*8]
movss xmm3, dword [edi + ecx]
addss xmm3, dword [eax + edx*8 + 4]
mulss xmm2, xmm5
mulss xmm3, xmm5
movaps xmm1, xmm2
mulss xmm1, xmm2
movaps xmm0, xmm3
mulss xmm0, xmm3
addss xmm1, xmm0
comiss xmm1, xmm6
jbe 0x41cbf6
movaps xmm0, xmm4
divss xmm0, xmm1
movaps xmm1, xmm7
minss xmm1, xmm0
movaps xmm0, xmm1
mulss xmm3, xmm1
mulss xmm2, xmm0
movss xmm1, dword [ecx - 4]
movss xmm0, dword [ecx]
mov eax, dword [esi + 0x34]
mov edx, dword [ebx + 0x10]
mulss xmm2, xmm5
mov edi, dword [ebp - 0x38]
mulss xmm3, xmm5
subss xmm1, xmm2
subss xmm0, xmm3
movss dword [eax], xmm1
movss xmm1, dword [ebp - 0x14]
movss dword [eax + 4], xmm0
mov eax, dword [esi + 0x34]
movss xmm0, dword [ebp - 0x24]
movss dword [eax + 8], xmm0
movss dword [eax + 0xc], xmm1
mov eax, dword [esi + 0x34]
mov dword [eax + 0x10], edx
addss xmm2, dword [ecx - 4]
addss xmm3, dword [ecx]
mov eax, dword [esi + 0x34]
mov ecx, dword [ebp - 0x30]
movss dword [eax + 0x14], xmm2
movss dword [eax + 0x18], xmm3
mov eax, dword [esi + 0x34]
movss dword [eax + 0x1c], xmm0
movss dword [eax + 0x20], xmm1
mov eax, dword [esi + 0x34]
mov dword [eax + 0x24], ecx
mov eax, dword [ebp - 8]
mov ecx, dword [ebp - 0x34]
add dword [esi + 0x34], 0x28
lea edx, [ecx + eax*2]
mov eax, dword [esi + 0x38]
mov word [eax], dx
mov eax, dword [ebp - 0x1c]
lea ecx, [ecx + eax*2]
mov eax, dword [esi + 0x38]
mov word [eax + 2], cx
mov eax, dword [ebp - 0x1c]
movzx ecx, di
lea ecx, [ecx + eax*2]
mov eax, dword [esi + 0x38]
mov word [eax + 4], cx
mov eax, dword [esi + 0x38]
mov word [eax + 6], cx
mov eax, dword [ebp - 8]
movzx ecx, di
lea ecx, [ecx + eax*2]
mov eax, dword [esi + 0x38]
mov word [eax + 8], cx
mov eax, dword [esi + 0x38]
mov ecx, dword [ebp - 0x10]
add ecx, 8
mov dword [ebp - 0x10], ecx
mov word [eax + 0xa], dx
mov eax, dword [ebp - 8]
mov edx, eax
add dword [esi + 0x38], 0xc
inc eax
cmp eax, dword [ebx + 0xc]
mov dword [ebp - 8], eax
mov eax, esp
mov dword [ebp - 0x1c], edx
jl 0x41cba3
mov eax, dword [ebp - 0x3c]
movzx eax, ax
jmp 0x41cd7d
lea eax, [edi - 2]
push edi
lea eax, [eax + eax*2]
push eax
call fcn.0041bc10
movss xmm0, dword [ebp - 0x24]
movss xmm1, dword [ebp - 0x14]
mov dword [ebp - 0xc], edi
mov edi, dword [ebx + 8]
mov eax, dword [esi + 0x34]
lea edi, [edi + 8]
mov ecx, dword [edi - 8]
mov edx, dword [edi - 4]
mov dword [eax], ecx
mov ecx, dword [ebx + 0x10]
mov dword [eax + 4], edx
mov eax, dword [esi + 0x34]
movss dword [eax + 8], xmm0
movss dword [eax + 0xc], xmm1
mov eax, dword [esi + 0x34]
mov dword [eax + 0x10], ecx
add dword [esi + 0x34], 0x14
sub dword [ebp - 0xc], 1
jne 0x41cd04
mov edi, dword [ebx + 0xc]
mov edx, 2
mov dword [ebp - 0x14], edx
mov ecx, dword [esi + 0x38]
mov ax, word [esi + 0x30]
movzx edx, dx
mov word [ecx], ax
movzx ecx, word [esi + 0x30]
mov eax, dword [esi + 0x38]
dec cx
add cx, dx
mov word [eax + 2], cx
movzx ecx, word [esi + 0x30]
mov eax, dword [esi + 0x38]
add cx, dx
mov edx, dword [ebp - 0x14]
inc edx
mov dword [ebp - 0x14], edx
mov word [eax + 4], cx
add dword [esi + 0x38], 6
cmp edx, edi
jl 0x41cd40
movzx eax, di
add dword [esi + 0x30], eax
lea esp, [ebp - 0x48]
pop edi
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00435654
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret 0xc