Function at 0x10011d20
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x34
mov eax, edx
push ebx
push esi
mov ebx, ecx
mov dword [ebp - 4], eax
mov edx, dword [eax + 4]
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0xc], edx
push edi
test edx, edx
jns 0x10011d61
cmp dword [eax], 0
jg 0x10011d61
mov edx, dword [ebp + 0x14]
mov ecx, dword [ebp + 0x10]
add edx, ecx
push dword [ebp + 8]
call fcn.1000c9c0
add esp, 4
mov dword [ebx], edx
mov eax, ebx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov esi, dword [ebp + 0x10]
xor edi, edi
mov ecx, dword [ebp + 0x14]
add ecx, esi
mov dword [ebp - 8], esi
mov dword [ebp - 0x10], ecx
mov eax, ecx
mov dword [ebp - 0x34], esi
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x28], edi
cmp esi, ecx
je 0x10011da9
lea eax, [ebp - 0x28]
mov edx, ecx
push eax
mov ecx, esi
call fcn.100202c0
mov esi, dword [ebp - 0x34]
add esp, 4
mov edi, dword [ebp - 0x28]
mov edx, dword [ebp - 0xc]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x30]
mov dword [ebp - 8], esi
xor ebx, ebx
mov byte [ebp - 0x24], 0
cmp esi, eax
je 0x10011e73
mov dword [ebp - 0x14], ebx
cmp ebx, edx
jne 0x10011dc8
nop
test edx, edx
jns 0x10011e73
cmp edi, 0x25fd
jae 0x10011df9
mov eax, 1
mov ecx, 0x102f5a80
nop word [eax + eax]
cmp edi, dword [ecx]
jb 0x10011e36
add ecx, 4
xor eax, 3
cmp ecx, 0x102f5da8
jne 0x10011de0
mov eax, 1
jmp 0x10011e36
mov eax, 0x102f5a80
mov edx, 0xca
mov esi, edx
shr esi, 1
cmp edi, dword [eax + esi*4]
lea ecx, [eax + esi*4]
jae 0x10011e13
mov edx, esi
jmp 0x10011e1d
lea eax, [ecx + 4]
or ecx, 0xffffffff
sub ecx, esi
add edx, ecx
nop dword [eax]
test edx, edx
jg 0x10011e03
mov edx, dword [ebp - 0xc]
sub eax, 0x102f5a80
mov esi, dword [ebp - 8]
sar eax, 2
and eax, 1
inc eax
mov ecx, 0x7fffffff
sub ecx, eax
cmp ecx, ebx
jl 0x10011ed6
add ebx, eax
cmp ebx, edx
jle 0x10011e52
test edx, edx
jns 0x10011e70
lea ecx, [ebp - 0x34]
call fcn.10015b60
mov esi, dword [ebp - 0x34]
mov dword [ebp - 8], esi
cmp esi, dword [ebp - 0x30]
je 0x10011e73
mov edi, dword [ebp - 0x28]
mov edx, dword [ebp - 0xc]
jmp 0x10011db7
mov ebx, dword [ebp - 0x14]
mov dword [ebp - 0x10], esi
mov eax, dword [ebp + 0x10]
xor esi, esi
mov ecx, dword [ebp + 8]
xor edi, edi
mov dword [ebp - 8], eax
mov eax, dword [ebp - 4]
mov dword [ebp - 0x14], 1
mov dword [ebp - 0xc], esi
mov al, byte [eax + 9]
test al, al
movzx edx, al
cmove edx, dword [ebp - 0x14]
mov dword [ebp - 0x14], edx
mov edx, dword [ebp - 4]
mov edx, dword [edx]
cmp ebx, edx
jge 0x10011ee6
mov eax, dword [ebp - 0x14]
movzx eax, al
sub eax, 1
je 0x10011f1c
sub eax, 1
je 0x10011ee2
sub eax, 1
jne 0x10011ee6
mov eax, edx
sub eax, ebx
cdq
sub eax, edx
mov edi, eax
mov eax, dword [ebp - 4]
sar edi, 1
mov esi, dword [eax]
sub esi, edi
sub esi, ebx
mov dword [ebp - 0xc], esi
jmp 0x10011ee9
test edx, edx
jns 0x10011e73
mov ebx, 0x7fffffff
jmp 0x10011e76
mov edi, edx
sub edi, ebx
mov eax, dword [ebp - 4]
lea ebx, [eax + 0xf]
movzx eax, byte [eax + 0xe]
mov edx, ebx
test edi, edi
jle 0x10011f2c
lea esi, [ebx + eax]
mov dword [ebp - 0x14], esi
nop dword [eax]
push ecx
mov edx, esi
mov ecx, ebx
call fcn.1000c9c0
dec edi
add esp, 4
mov ecx, edx
test edi, edi
jg 0x10011f00
mov esi, dword [ebp - 0xc]
mov edi, dword [ebp - 0x14]
jmp 0x10011f2f
mov eax, dword [ebp - 4]
mov esi, edx
sub esi, ebx
lea ebx, [eax + 0xf]
movzx eax, byte [eax + 0xe]
mov edx, ebx
lea edi, [eax + edx]
mov eax, dword ds:[ebp - 8]
mov edx, dword [ebp - 0x10]
sub edx, eax
push ecx
add edx, eax
mov ecx, eax
call fcn.1000c9c0
add esp, 4
test esi, esi
jle 0x10011f64
nop dword [eax]
push edx
mov edx, edi
mov ecx, ebx
call fcn.1000c9c0
dec esi
add esp, 4
test esi, esi
jg 0x10011f50
mov eax, dword [ebp - 0x20]
pop edi
pop esi
pop ebx
mov dword [eax], edx
mov esp, ebp
pop ebp
ret