Function at 0x40aaba
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub esp, 0x18
mov eax, dword [0x724574]
xor edx, edx
mov ecx, dword [0x724520]
push ebx
mov ebx, dword [esp + 0x30]
dec ebx
mov cl, byte [eax + ecx]
or cl, bl
mov dword [esp + 0x30], ebx
inc eax
mov byte [esp + 7], cl
mov dword [0x724574], eax
mov eax, dword [esp + 0x20]
div ebx
mov ecx, dword [0x72452c]
push ebp
mov ebp, dword [0x724528]
push esi
mov esi, dword [0x724500]
mov dword [esp + 0x10], eax
inc esi
mov dword [0x724500], esi
mov eax, ebp
and eax, 0x18ed
mov dword [esp + 0x1c], esi
push edi
mov edi, dword [ecx + 0x4890]
imul ecx, ebx, 0xc
mov dword [esp + 0x1c], eax
mov eax, dword [esp + 0x38]
mov dword [esp + 0x18], ecx
lea edx, [eax + ebx*4]
mov ebx, 0x12af
or edi, dword [edx]
sub ebx, dword [ecx + eax]
inc ebp
mov eax, dword [esp + 0x34]
movzx ecx, word [0x724518]
mov dword [esp + 0x24], edx
mov edx, ebp
add edx, edx
mov dword [0x724528], ebp
cmp dword [eax + edx*8], ecx
jae 0x40ab73
movzx ecx, word [0x724530]
xor edx, edx
movzx eax, word [0x72455c]
div ecx
cmp dword [eax + 0x1ae0], 0xb0
jle 0x40abc1
mov ecx, dword [esp + 0x18]
mov eax, dword [esp + 0x14]
add eax, dword [ecx + edi]
imul ecx, dword [0x724560], 6
mov dword [esp + 0x14], eax
mov ax, word [0x72454c]
mov word [ecx + esi], ax
mov eax, dword [0x72451c]
inc dword [0x724560]
inc eax
mov edx, dword [0x724550]
mov ecx, dword [0x724548]
mov dword [0x72451c], eax
imul edx, eax
mov eax, dword [0x724558]
mov dword [ecx + eax*4], edx
mov ebp, dword [0x724528]
mov al, byte [0x724530]
mov ecx, 0x1d86
or al, 0x80
sub al, 0x80
mov byte [esp + 0x34], al
mov eax, dword [esp + 0x14]
xor eax, ecx
inc ebx
mov word [0x724518], ax
mov dword [esp + 0x18], ebx
movzx eax, word [ebx + ebx + 0x2047]
cdq
idiv ecx
imul ecx, dword [0x724560], 3
mov edx, dword [esp + 0x1c]
mov ebx, eax
mov eax, dword [0x724520]
mov dword [esp + 0x1c], 0x292
movzx edi, byte [ecx + eax]
mov ax, word [0x724530]
movzx ecx, word [0x724564]
movzx esi, ax
inc ax
mov word [0x724530], ax
mov eax, dword [esp + 0x38]
sub ecx, dword [eax + 0x17f4]
mov eax, dword [0x724558]
movzx eax, byte [eax + edx]
xor edx, edx
div dword [esp + 0x1c]
mov eax, esi
dec dword [0x724534]
push edx
push dword [0x724508]
xor edx, edx
push ecx
mov ecx, 0x458
div ecx
push ebp
push edx
push edi
push ebx
push 0x188e
call fcn.0040a401
mov ecx, dword [0x724534]
add esp, 0x20
mov edx, dword [esp + 0x30]
mov dword [edx + ecx*4], eax
mov ecx, dword [0x72453c]
movzx edi, word [ecx*4 + 0x2047]
inc ecx
mov dword [0x72453c], ecx
mov ecx, dword [esp + 0x2c]
cmp edi, ecx
je 0x40ad29
movzx eax, byte [esp + 0x34]
mov esi, dword [esp + 0x3c]
mov ebx, dword [esp + 0x18]
mov ebp, dword [esp + 0x20]
mov dword [esp + 0x1c], eax
movzx eax, byte [esp + 0x13]
mov dword [esp + 0x14], eax
lea eax, [edi + 0x27b4]
mov dword [esp + 0x34], eax
mov ecx, dword [esp + 0x24]
and dword [ecx], eax
mov eax, edi
movzx ecx, byte [0x724512]
cdq
idiv ecx
mov ecx, dword [esp + 0x38]
xor edx, edx
mov byte [0x724512], al
movzx eax, al
mov eax, dword [ecx + eax*4]
sub eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x30]
sub eax, edi
mov dword [ecx + esi*4], eax
movzx ecx, word [ebx*4 + 0x195e]
movzx eax, word [ebp + ebx*8]
div ecx
mov eax, dword [0x72456c]
sub edx, dword [esp + 0x14]
mov ecx, dword [esp + 0x2c]
or edx, 0x1d59
mov dword [eax + edi*8], edx
mov eax, dword [0x724514]
or byte [eax + ebx], cl
inc edi
mov eax, dword [esp + 0x34]
inc eax
mov dword [esp + 0x34], eax
cmp edi, ecx
jne 0x40acbe
pop edi
pop esi
mov eax, 0x153c
pop ebp
sub eax, ecx
pop ebx
add esp, 0x18
ret