Function at 0x1001ad00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
sub esp, 0x38
mov eax, dword [0x1003200c]
xor eax, ebp
mov dword [ebp - 4], eax
push esi
mov esi, ecx
mov ecx, dword [ebx + 0xc]
mov dword [ebp - 0x24], esi
push edi
mov edi, dword [ebx + 8]
cmp ecx, 3
jl 0x1001b0e0
test byte [esi + 0x24], 2
mov eax, dword [esi + 0x28]
movss xmm0, dword [eax]
movss dword [ebp - 0x2c], xmm0
movss xmm0, dword [eax + 4]
movss dword [ebp - 0x10], xmm0
je 0x1001b037
mov eax, dword [ebx + 0x10]
and eax, 0xffffff
mov dword [ebp - 0x34], eax
lea eax, [ecx + ecx]
push eax
mov dword [ebp - 0x38], eax
lea eax, [ecx*8 - 6]
add eax, ecx
mov ecx, esi
push eax
call fcn.1001a010
mov eax, dword [ebx + 0xc]
mov ecx, 2
mov edx, dword [esi + 0x34]
mov dword [ebp - 0x28], edx
mov dword [ebp - 0xc], ecx
cmp eax, ecx
jle 0x1001adc5
mov edi, eax
mov eax, dword [esi + 0x3c]
mov word [eax], dx
lea edx, [edx + ecx*2]
mov eax, dword [esi + 0x3c]
lea ecx, [edx - 2]
mov word [eax + 2], cx
mov eax, dword [esi + 0x3c]
mov ecx, dword [ebp - 0xc]
inc ecx
mov dword [ebp - 0xc], ecx
mov word [eax + 4], dx
add dword [esi + 0x3c], 6
mov edx, dword [ebp - 0x28]
cmp ecx, edi
jl 0x1001ad93
mov edi, dword [ebx + 8]
mov eax, dword [ebx + 0xc]
shl eax, 3
call fcn.10026b10
mov eax, dword [ebx + 0xc]
mov ecx, esp
mov dword [ebp - 0xc], ecx
lea edx, [eax - 1]
mov dword [ebp - 0x14], edx
xor edx, edx
mov dword [ebp - 0x20], edx
test eax, eax
jle 0x1001aeaa
lea ecx, [eax - 1]
xorps xmm4, xmm4
shl ecx, 3
mov dword [ebp - 8], ecx
nop dword [eax]
nop dword [eax + eax]
movss xmm2, dword [edi + edx*8]
lea esi, [edi + 4]
movss xmm1, dword [edi + edx*8 + 4]
subss xmm2, dword [ecx + edi]
subss xmm1, dword [ecx + edi + 4]
mov dword [ebp - 0x18], esi
lea esi, [edx*8]
movaps xmm0, xmm2
movss dword [ebp - 0x30], xmm2
movaps xmm3, xmm1
mulss xmm0, xmm2
mulss xmm3, xmm1
movss dword [ebp - 0x1c], xmm1
addss xmm3, xmm0
comiss xmm3, xmm4
jbe 0x1001ae79
cvtps2pd xmm0, xmm3
call sub.api_ms_win_crt_math_l1_1_0.dll__libm_sse2_sqrt_precise
movss xmm1, dword [0x100306c8]
xorps xmm4, xmm4
cvtsd2ss xmm0, xmm0
mov eax, dword [ebx + 0xc]
mov ecx, dword [ebp - 8]
mov edx, dword [ebp - 0x20]
movss xmm2, dword [ebp - 0x30]
divss xmm1, xmm0
movaps xmm0, xmm1
mulss xmm1, dword [ebp - 0x1c]
mulss xmm2, xmm0
mov edi, dword [ebp - 0xc]
inc edx
xorps xmm2, xmmword [0x10030a90]
mov dword [ebp - 0x20], edx
movss dword [ecx + edi], xmm1
movss dword [ecx + edi + 4], xmm2
mov ecx, esi
mov edi, dword [ebx + 8]
mov dword [ebp - 8], ecx
cmp edx, eax
jl 0x1001ae00
mov ecx, dword [ebp - 0xc]
lea edx, [edi + 4]
jmp 0x1001aeb0
lea edx, [edi + 4]
mov dword [ebp - 0x18], edx
mov esi, dword [ebp - 0x24]
mov dword [ebp - 8], 0
test eax, eax
jle 0x1001b02c
movss xmm5, dword [0x1003069c]
mov eax, ecx
sub eax, edi
mov dword [ebp - 0x1c], eax
nop dword [eax]
nop word [eax + eax]
movss xmm3, dword [eax + edx]
mov edi, dword [ebp - 8]
movss xmm4, dword [0x100306c8]
mov eax, dword [esi + 0x38]
movss xmm2, dword [ecx + edi*8]
mov edi, dword [ebp - 0x14]
addss xmm2, dword [ecx + edi*8]
addss xmm3, dword [ecx + edi*8 + 4]
mov ecx, dword [ebx + 0x10]
mov edi, dword [ebp - 0x28]
mulss xmm2, xmm5
mulss xmm3, xmm5
movaps xmm0, xmm2
mulss xmm0, xmm2
movaps xmm1, xmm3
mulss xmm1, xmm3
addss xmm1, xmm0
movaps xmm0, xmm5
maxss xmm0, xmm1
divss xmm4, xmm0
movss xmm0, dword [edx - 4]
movaps xmm1, xmm4
mulss xmm4, xmm3
movss xmm3, dword [ebp - 0x10]
mulss xmm1, xmm2
movss xmm2, dword [ebp - 0x2c]
mulss xmm4, xmm5
mulss xmm1, xmm5
subss xmm0, xmm1
movss dword [eax], xmm0
movss xmm0, dword [edx]
mov eax, dword [esi + 0x38]
subss xmm0, xmm4
movss dword [eax + 4], xmm0
mov eax, dword [esi + 0x38]
movss dword [eax + 8], xmm2
movss dword [eax + 0xc], xmm3
mov eax, dword [esi + 0x38]
mov dword [eax + 0x10], ecx
movss xmm0, dword [edx - 4]
mov eax, dword [esi + 0x38]
addss xmm0, xmm1
mov ecx, dword [ebp - 0x34]
movss dword [eax + 0x14], xmm0
movss xmm0, dword [edx]
mov eax, dword [esi + 0x38]
addss xmm0, xmm4
movss dword [eax + 0x18], xmm0
mov eax, dword [esi + 0x38]
movss dword [eax + 0x1c], xmm2
movss dword [eax + 0x20], xmm3
mov eax, dword [esi + 0x38]
mov dword [eax + 0x24], ecx
mov eax, dword [ebp - 8]
add dword [esi + 0x38], 0x28
mov ecx, dword [ebp - 0x14]
lea edx, [edi + eax*2]
mov eax, dword [esi + 0x3c]
lea ecx, [edi + ecx*2]
mov word [eax], dx
mov eax, dword [esi + 0x3c]
mov word [eax + 2], cx
mov eax, dword [ebp - 0x14]
lea ecx, [eax*2 + 1]
mov eax, dword [esi + 0x3c]
add ecx, edi
mov word [eax + 4], cx
mov eax, dword [esi + 0x3c]
mov word [eax + 6], cx
mov eax, dword [ebp - 8]
lea ecx, [eax*2 + 1]
mov eax, dword [esi + 0x3c]
add ecx, edi
mov word [eax + 8], cx
mov eax, dword [esi + 0x3c]
mov word [eax + 0xa], dx
mov eax, dword [ebp - 8]
add dword [esi + 0x3c], 0xc
mov dword [ebp - 0x14], eax
inc eax
mov dword [ebp - 8], eax
mov edx, dword [ebp - 0x18]
mov ecx, dword [ebp - 0xc]
add edx, 8
cmp eax, dword [ebx + 0xc]
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x18], edx
jl 0x1001aee0
mov eax, dword [ebp - 0x38]
movzx eax, ax
jmp 0x1001b0dd
push ecx
add ecx, 0xfffffffe
lea eax, [ecx + ecx*2]
mov ecx, esi
push eax
call fcn.1001a010
mov eax, dword [ebx + 0xc]
test eax, eax
jle 0x1001b090
movss xmm0, dword [ebp - 0x2c]
mov edx, eax
movss xmm1, dword [ebp - 0x10]
nop dword [eax]
mov ecx, dword [esi + 0x38]
lea edi, [edi + 8]
mov eax, dword [edi - 8]
mov dword [ecx], eax
mov eax, dword [edi - 4]
mov dword [ecx + 4], eax
mov eax, dword [esi + 0x38]
mov ecx, dword [ebx + 0x10]
movss dword [eax + 8], xmm0
movss dword [eax + 0xc], xmm1
mov eax, dword [esi + 0x38]
mov dword [eax + 0x10], ecx
add dword [esi + 0x38], 0x14
sub edx, 1
jne 0x1001b060
mov edi, dword [ebx + 0xc]
mov edx, 2
mov dword [ebp - 0x10], edx
cmp edi, edx
jle 0x1001b0da
nop
mov ecx, dword [esi + 0x3c]
mov ax, word [esi + 0x34]
movzx edx, dx
mov word [ecx], ax
movzx ecx, word [esi + 0x34]
mov eax, dword [esi + 0x3c]
dec cx
add cx, dx
mov word [eax + 2], cx
movzx ecx, word [esi + 0x34]
mov eax, dword [esi + 0x3c]
add cx, dx
mov edx, dword [ebp - 0x10]
inc edx
mov dword [ebp - 0x10], edx
mov word [eax + 4], cx
add dword [esi + 0x3c], 6
cmp edx, edi
jl 0x1001b0a0
movzx eax, di
add dword [esi + 0x34], eax
lea esp, [ebp - 0x40]
pop edi
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.10025af6
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret 0xc