Function at 0x1006db10
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
sub esp, 0x38
push esi
mov esi, ecx
mov ecx, dword [ebx + 0xc]
mov dword [ebp - 0x20], esi
push edi
mov edi, dword [ebx + 8]
cmp ecx, 3
jl 0x1006decd
mov edx, dword [ebx + 0x10]
test edx, 0xff000000
je 0x1006decd
test byte [esi + 0x24], 4
mov eax, dword [esi + 0x2c]
movss xmm0, dword [eax]
movss dword [ebp - 0x14], xmm0
movss xmm0, dword [eax + 4]
movss dword [ebp - 0x18], xmm0
je 0x1006de35
movss xmm0, dword [esi + 0x8c]
lea eax, [ecx + ecx]
push eax
mov dword [ebp - 0x34], eax
and edx, 0xffffff
lea eax, [ecx*8 - 6]
movss dword [ebp - 0x10], xmm0
add eax, ecx
mov dword [ebp - 0x24], edx
push eax
mov ecx, esi
call fcn.1006cbe0
mov eax, dword [esi + 0x28]
mov edi, dword [ebx + 0xc]
movzx edx, ax
mov dword [ebp - 0x1c], eax
lea ecx, [eax + 1]
mov dword [ebp - 8], edx
mov dword [ebp - 0x2c], ecx
mov ecx, 2
mov dword [ebp - 0xc], ecx
nop dword [eax]
mov eax, dword [esi + 0x38]
mov word [eax], dx
lea edx, [edx + ecx*2]
mov eax, dword [esi + 0x38]
lea ecx, [edx - 2]
mov word [eax + 2], cx
mov eax, dword [esi + 0x38]
mov ecx, dword [ebp - 0xc]
inc ecx
mov dword [ebp - 0xc], ecx
mov word [eax + 4], dx
add dword [esi + 0x38], 6
mov edx, dword [ebp - 8]
cmp ecx, edi
jl 0x1006dbc0
mov ecx, dword [esi + 0x2c]
push edi
add ecx, 0x2c
call fcn.10073cc0
mov eax, dword [esi + 0x2c]
xorps xmm5, xmm5
mov ecx, dword [ebx + 0xc]
movss xmm4, dword [0x1013eac0]
dec ecx
mov edi, dword [ebx + 8]
mov edx, dword [eax + 0x34]
mov dword [ebp - 4], ecx
shl ecx, 3
xor esi, esi
mov dword [ebp - 0x30], edx
nop dword [eax + eax]
movss xmm2, dword [edi + esi*8]
lea eax, [esi*8]
movss xmm3, dword [edi + esi*8 + 4]
subss xmm2, dword [ecx + edi]
subss xmm3, dword [ecx + edi + 4]
mov dword [ebp - 0xc], eax
mov eax, dword [ebx + 0xc]
movaps xmm0, xmm2
movaps xmm1, xmm3
mulss xmm0, xmm2
mulss xmm1, xmm3
addss xmm1, xmm0
comiss xmm1, xmm5
jbe 0x1006dc69
rsqrtss xmm1, xmm1
movaps xmm0, xmm1
mulss xmm3, xmm1
mulss xmm2, xmm0
xorps xmm2, xmm4
movss dword [ecx + edx], xmm3
inc esi
movss dword [ecx + edx + 4], xmm2
mov ecx, dword [ebp - 0xc]
cmp esi, eax
jl 0x1006dc20
mov eax, dword [ebp - 0x1c]
xor ecx, ecx
movss xmm0, dword [ebp - 0x10]
movss xmm5, dword [0x1013d78c]
movss xmm6, dword [0x1013d7f0]
movss xmm7, dword [0x1013d9b0]
mov esi, dword [ebp - 0x20]
movzx eax, ax
mov dword [ebp - 0x28], eax
lea eax, [edi + 4]
mov dword [ebp - 0xc], eax
mov eax, edx
mulss xmm0, xmm5
sub eax, edi
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 4]
mov dword [ebp - 8], ecx
movss dword [ebp - 0x10], xmm0
nop word [eax + eax]
movss xmm0, dword [edx + ecx*8]
mov ecx, dword [ebp - 0xc]
mov edi, dword [ebp - 0x1c]
addss xmm0, dword [edx + eax*8]
movss xmm2, dword [edi + ecx]
addss xmm2, dword [edx + eax*8 + 4]
movaps xmm3, xmm0
mulss xmm0, xmm0
mulss xmm3, xmm5
movaps xmm4, xmm2
mulss xmm2, xmm2
mulss xmm4, xmm5
addss xmm2, xmm0
mulss xmm2, dword [0x1013d744]
comiss xmm2, dword [0x1013d684]
jbe 0x1006dd2c
movaps xmm1, xmm6
divss xmm1, xmm2
minss xmm1, xmm7
movaps xmm0, xmm1
mulss xmm4, xmm1
mulss xmm3, xmm0
mov eax, dword [esi + 0x34]
mov edx, dword [ebp - 0xc]
movss xmm1, dword [ebp - 0x10]
movss xmm2, dword [ebp - 0x10]
mulss xmm1, xmm3
mov ecx, dword [ebx + 0x10]
movss xmm0, dword [edx - 4]
movss xmm3, dword [ebp - 0x18]
subss xmm0, xmm1
mulss xmm2, xmm4
mov edi, dword [ebp - 0x2c]
add dword [ebp - 0xc], 8
movss dword [eax], xmm0
movss xmm0, dword [edx]
mov eax, dword [esi + 0x34]
subss xmm0, xmm2
movss dword [eax + 4], xmm0
mov eax, dword [esi + 0x34]
movss xmm0, dword [ebp - 0x14]
movss dword [eax + 8], xmm0
movss dword [eax + 0xc], xmm3
mov eax, dword [esi + 0x34]
mov dword [eax + 0x10], ecx
addss xmm1, dword [edx - 4]
mov eax, dword [esi + 0x34]
mov ecx, dword [ebp - 0x24]
movss dword [eax + 0x14], xmm1
addss xmm2, dword [edx]
mov eax, dword [esi + 0x34]
movss dword [eax + 0x18], xmm2
mov eax, dword [esi + 0x34]
movss dword [eax + 0x1c], xmm0
movss dword [eax + 0x20], xmm3
mov eax, dword [esi + 0x34]
mov dword [eax + 0x24], ecx
mov eax, dword [ebp - 8]
mov ecx, dword [ebp - 0x28]
add dword [esi + 0x34], 0x28
lea edx, [ecx + eax*2]
mov eax, dword [esi + 0x38]
mov word [eax], dx
mov eax, dword [ebp - 4]
lea ecx, [ecx + eax*2]
mov eax, dword [esi + 0x38]
mov word [eax + 2], cx
mov eax, dword [ebp - 4]
movzx ecx, di
lea ecx, [ecx + eax*2]
mov eax, dword [esi + 0x38]
mov word [eax + 4], cx
mov eax, dword [esi + 0x38]
mov word [eax + 6], cx
mov eax, dword [ebp - 8]
movzx ecx, di
lea ecx, [ecx + eax*2]
mov eax, dword [esi + 0x38]
mov word [eax + 8], cx
mov eax, dword [esi + 0x38]
mov ecx, dword [ebp - 8]
mov word [eax + 0xa], dx
mov eax, ecx
add dword [esi + 0x38], 0xc
inc ecx
mov edx, dword [ebp - 0x30]
mov dword [ebp - 4], eax
mov dword [ebp - 8], ecx
cmp ecx, dword [ebx + 0xc]
jl 0x1006dcd0
mov eax, dword [ebp - 0x34]
movzx eax, ax
add dword [esi + 0x28], eax
pop edi
pop esi
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret 0xc
push ecx
add ecx, 0xfffffffe
lea eax, [ecx + ecx*2]
mov ecx, esi
push eax
call fcn.1006cbe0
mov eax, dword [ebx + 0xc]
movss xmm0, dword [ebp - 0x14]
movss xmm1, dword [ebp - 0x18]
mov dword [ebp - 0x10], eax
mov eax, dword [esi + 0x34]
lea edi, [edi + 8]
mov ecx, dword [edi - 8]
mov edx, dword [edi - 4]
mov dword [eax], ecx
mov ecx, dword [ebx + 0x10]
mov dword [eax + 4], edx
mov eax, dword [esi + 0x34]
movss dword [eax + 8], xmm0
movss dword [eax + 0xc], xmm1
mov eax, dword [esi + 0x34]
mov dword [eax + 0x10], ecx
add dword [esi + 0x34], 0x14
sub dword [ebp - 0x10], 1
jne 0x1006de54
mov edi, 2
nop word [eax + eax]
mov ecx, dword [esi + 0x38]
mov ax, word [esi + 0x28]
movzx edx, di
inc edi
mov word [ecx], ax
movzx ecx, word [esi + 0x28]
mov eax, dword [esi + 0x38]
dec cx
add cx, dx
mov word [eax + 2], cx
mov eax, dword [esi + 0x38]
movzx ecx, word [esi + 0x28]
add cx, dx
mov word [eax + 4], cx
add dword [esi + 0x38], 6
mov eax, dword [ebx + 0xc]
cmp edi, eax
jl 0x1006de90
movzx eax, ax
add dword [esi + 0x28], eax
pop edi
pop esi
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret 0xc