Function at 0x468dd0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x3c
push ebx
mov ebx, dword [ebp + 0x10]
push esi
mov esi, dword [ebp + 8]
mov edx, dword [esi + 0xa0]
mov eax, dword [esi + 0x918]
imul edx, ebx
add edx, dword [ebp + 0xc]
push edi
mov eax, dword [eax + edx*4]
mov edi, dword [ebp + 0x24]
mov ecx, eax
and cl, 0x80
neg cl
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], eax
mov dword [esp + 0x18], 0
sbb ecx, ecx
and ecx, 0xfffffffe
add ecx, 4
cmp dword [esi + 0xeb44], 0
mov dword [esp + 0x1c], ecx
je 0x46911b
mov ecx, dword [esi + 0x2bcc]
xor ecx, eax
test cl, cl
jns 0x46911b
cmp dword [esi + 0x2bcc], 0
je 0x46911b
test al, 7
mov dword [esp + 0x18], 1
je 0x468e6d
mov eax, 0x40004
mov dword [esp + 0x38], eax
mov dword [esp + 0x3c], eax
mov dword [esp + 0x40], eax
mov dword [esp + 0x44], eax
jmp 0x468f38
mov ecx, dword [esi + 0xeb48]
mov eax, ebx
and eax, 1
mov dword [esp + 0x14], eax
lea eax, [eax + ecx*2]
lea ecx, [eax*8 + 0x1018c210]
mov dword [esp + 0x20], ecx
xor ebx, ebx
cmp dword [esi + 0xeb48], 0
mov eax, ebx
je 0x468e9c
sar eax, 2
jmp 0x468e9f
and eax, 1
mov ecx, dword [esi + eax*4 + 0x2bb8]
mov eax, dword [esi + eax*4 + 0x2bcc]
test al, 7
je 0x468eba
mov word [esp + ebx*2 + 0x38], 4
jmp 0x468f2c
cmp dword [esi + 0x3364], 0
jne 0x468efa
test eax, 0x1000000
je 0x468efa
cmp dword [esi + 0xeb48], 0
je 0x468eda
mov eax, ebx
and eax, 2
jmp 0x468ede
mov eax, dword [esp + 0x14]
mov edx, dword [esi + 0x25c6c]
movzx ecx, word [edx + ecx*2]
mov edx, dword [esp + 0xc]
neg eax
sbb eax, eax
and eax, 6
add eax, 2
and ecx, eax
jmp 0x468f0f
mov eax, dword [esp + 0x20]
movzx eax, byte [ebx + eax]
add eax, dword [esi + 0x2d30]
shl ecx, 5
movzx ecx, byte [eax + ecx]
mov eax, ebx
sar eax, 1
movzx eax, byte [esi + eax*8 + 0x2d0c]
or eax, ecx
neg eax
sbb eax, eax
neg eax
add ax, 1
mov word [esp + ebx*2 + 0x38], ax
add ebx, 1
cmp ebx, 8
jl 0x468e8c
mov ecx, dword [esi + 0x904]
movsx eax, byte [ecx + edx]
mov edx, dword [esi + 0x2bb8]
movsx edx, byte [edx + ecx]
mov ebx, dword [esi + 0x2bbc]
movsx ecx, byte [ebx + ecx]
movzx ebx, byte [eax + esi + 0x3484]
mov dword [esp + 0x20], edx
mov dword [esp + 0x14], ecx
lea ecx, [edx + eax + 1]
movzx edx, byte [edx + esi + 0x3484]
lea edx, [edx + ebx + 1]
sar edx, 1
mov dword [esp + 0x30], edx
movzx edx, byte [eax + esi + 0x34c4]
mov dword [esp + 0x28], ebx
mov ebx, dword [esp + 0x20]
movzx ebx, byte [ebx + esi + 0x34c4]
mov dword [esp + 0x2c], edx
lea edx, [ebx + edx + 1]
sar edx, 1
mov dword [esp + 0x20], edx
mov edx, dword [esp + 0x14]
lea ebx, [edx + eax + 1]
movzx eax, byte [edx + esi + 0x3484]
mov edx, dword [esp + 0x28]
lea eax, [eax + edx + 1]
sar eax, 1
mov dword [esp + 0x34], eax
mov eax, dword [esp + 0x14]
movzx edx, byte [eax + esi + 0x34c4]
mov eax, dword [esp + 0x2c]
lea eax, [edx + eax + 1]
sar eax, 1
sar ecx, 1
sar ebx, 1
cmp dword [esi + 0xeb48], 0
mov dword [esp + 0x24], eax
mov eax, dword [ebp + 0x20]
lea edx, [esp + 0x38]
je 0x469083
push 1
push edx
push eax
mov eax, dword [ebp + 0x14]
push esi
call fcn.00467e20
mov eax, dword [ebp + 0x20]
mov edx, dword [ebp + 0x14]
push 1
lea ecx, [esp + 0x54]
push ecx
push eax
lea eax, [edx + eax*8]
push esi
mov ecx, ebx
call fcn.00467e20
mov ebx, dword [ebp + 0x18]
push 1
lea eax, [esp + 0x5c]
push eax
mov eax, dword [esp + 0x58]
push edi
push esi
mov ecx, ebx
call fcn.00468140
mov eax, dword [esp + 0x64]
push 1
lea ecx, [esp + 0x74]
push ecx
push edi
lea ecx, [ebx + edi*4]
push esi
call fcn.00468140
mov ebx, dword [ebp + 0x1c]
mov eax, dword [esp + 0x60]
add esp, 0x40
push 1
lea edx, [esp + 0x3c]
push edx
push edi
push esi
mov ecx, ebx
call fcn.00468140
push 1
lea eax, [esp + 0x54]
push eax
mov eax, dword [esp + 0x3c]
push edi
lea ecx, [ebx + edi*4]
push esi
call fcn.00468140
mov edx, dword [esp + 0x2c]
mov eax, dword [esp + 0x30]
add esp, 0x20
jmp 0x46911e
push 2
add eax, eax
push edx
push eax
mov eax, dword [ebp + 0x14]
push esi
call fcn.00467e20
mov ecx, dword [ebp + 0x14]
mov edx, dword [ebp + 0x20]
push 2
lea eax, [esp + 0x4e]
push eax
mov eax, dword [ebp + 0x20]
add eax, eax
push eax
lea eax, [ecx + edx]
push esi
mov ecx, ebx
call fcn.00467e20
mov ecx, dword [ebp + 0x18]
push 2
lea eax, [esp + 0x5c]
push eax
mov eax, dword [esp + 0x58]
lea ebx, [edi + edi]
push ebx
push esi
call fcn.00468140
mov edx, dword [ebp + 0x18]
mov eax, dword [esp + 0x64]
push 2
lea ecx, [esp + 0x6e]
push ecx
push ebx
lea ecx, [edx + edi]
push esi
call fcn.00468140
mov ecx, dword [ebp + 0x1c]
add esp, 0x40
push 2
lea eax, [esp + 0x3c]
push eax
mov eax, dword [esp + 0x28]
push ebx
push esi
call fcn.00468140
mov edx, dword [ebp + 0x1c]
mov eax, dword [esp + 0x34]
push 2
lea ecx, [esp + 0x4e]
push ecx
push ebx
lea ecx, [edx + edi]
push esi
call fcn.00468140
mov edx, dword [esp + 0x2c]
mov eax, dword [esp + 0x30]
add esp, 0x20
mov ebx, dword [ebp + 0x1c]
mov ecx, dword [esp + 0x18]
push 0
push ecx
mov ecx, dword [esp + 0x24]
push ecx
mov ecx, dword [ebp + 0x14]
push eax
mov eax, dword [ebp + 0x18]
push edx
mov edx, dword [ebp + 0x20]
push edi
push edx
mov edx, dword [ebp + 0x10]
push ebx
push eax
push ecx
push edx
call fcn.004685d0
mov eax, dword [esp + 0x48]
mov ecx, dword [esp + 0x3c]
mov edx, dword [esp + 0x38]
push 1
push 0
push eax
mov eax, dword [ebp + 0x20]
push ecx
mov ecx, dword [ebp + 0x18]
push edx
mov edx, dword [ebp + 0x14]
push edi
push eax
mov eax, dword [ebp + 0x10]
push ebx
push ecx
push edx
push eax
call fcn.004685d0
add esp, 0x58
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret