Function at 0xcf0277
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0x48
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0xa0a1aeaf
mov dword [esp + 0x1c], 0
mov word [esp + 0x20], 0
mov dword [esp + 4], 0
mov eax, dword [esp + 4]
cmp eax, 9
ja 0xcf00e5
nop dword [eax]
mov eax, dword [esp + 4]
mov ecx, dword [esp + 4]
movzx ecx, byte [esp + ecx + 0x18]
lea edx, [eax - 0x31acd61a]
mov esi, ecx
not esi
or esi, edx
and edx, ecx
add edx, esi
neg edx
add eax, edx
add eax, 0xce5329e5
mov dword [esp + 8], eax
mov eax, dword [esp + 8]
add al, 0xb6
mov ecx, dword [esp + 4]
mov byte [esp + ecx + 0x18], al
inc dword [esp + 4]
mov eax, dword [esp + 4]
cmp eax, 0xa
jb 0xcf00a0
mov eax, dword [esp + 0x18]
mov ecx, dword [0xd1a614]
test ecx, ecx
je 0xcf0143
xor edx, edx
mov esi, dword [0xd1a618]
nop dword [eax + eax]
cmp dword [esi + edx*8], 0xe4aa2089
je 0xcf0110
inc edx
cmp ecx, edx
jne 0xcf0100
jmp 0xcf0143
mov ecx, dword [esi + edx*8 + 4]
cmp ecx, eax
je 0xcf0143
mov eax, dword [0xd1a61c]
sub esp, 0x1c
lea edx, [esp + 0x30]
mov dword [esp + 0x18], edx
movaps xmm0, xmmword [0xd0e940]
movups xmmword [esp + 8], xmm0
mov dword [esp + 4], eax
mov dword [esp], ecx
call fcn.00d07360
add esp, 0x1c
cmp eax, 0xc0000004
jne 0xcf0200
push dword [esp + 0x14]
call fcn.00d05090
add esp, 4
mov dword [esp + 0xc], eax
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x18], 0xa0a1aeaf
mov dword [esp + 0x1c], 0
mov word [esp + 0x20], 0
mov dword [esp + 4], 0
mov eax, dword [esp + 4]
cmp eax, 9
ja 0xcf01d5
nop word [eax + eax]
mov eax, dword [esp + 4]
mov edx, dword [esp + 4]
movzx edx, byte [esp + edx + 0x18]
lea esi, [eax - 0x31acd61a]
mov edi, edx
not edi
or edi, esi
and esi, edx
add esi, edi
neg esi
add eax, esi
add eax, 0xce5329e5
mov dword [esp + 8], eax
mov eax, dword [esp + 8]
add al, 0xb6
mov edx, dword [esp + 4]
mov byte [esp + edx + 0x18], al
inc dword [esp + 4]
mov eax, dword [esp + 4]
cmp eax, 0xa
jb 0xcf0190
mov eax, dword [esp + 0x18]
mov edx, dword [0xd1a614]
test edx, edx
je 0xcf0229
xor esi, esi
mov edi, dword [0xd1a618]
nop dword [eax + eax]
cmp dword [edi + esi*8], 0xe4aa2089
je 0xcf0207
inc esi
cmp edx, esi
jne 0xcf01f0
jmp 0xcf0229
xor ebx, ebx
jmp 0xcf04d7
mov edx, dword [edi + esi*8 + 4]
cmp edx, eax
je 0xcf0229
push 0
push ecx
push dword [esp + 0x14]
push 5
push 4
push dword [0xd1a61c]
push edx
call fcn.00d07360
add esp, 0x1c
xor ebx, ebx
test eax, eax
js 0xcf04cb
mov edx, dword [esp + 0xc]
mov ecx, dword [edx]
xor eax, eax
nop dword [eax + eax]
lea esi, [edx + ecx]
mov ecx, dword [edx + ecx]
add eax, 0x208
add ebx, 0x104
mov edx, esi
test ecx, ecx
jne 0xcf0240
test ebx, ebx
mov ecx, 0xffffffff
cmovns ecx, eax
push ecx
call fcn.00cd8c00
add esp, 4
mov edi, eax
mov eax, dword [esp + 0xc]
mov edx, dword [eax]
mov dword [esp + 0x10], edi
jmp 0xcf028e
mov word [edi], 0xa
add edi, 2
mov edx, dword [eax]
test edx, edx
je 0xcf02b3
mov ecx, dword [eax + edx + 0x3c]
add eax, edx
movzx edx, word [ecx]
test dx, dx
je 0xcf0280
add ecx, 2
nop
mov word [edi], dx
add edi, 2
movzx edx, word [ecx]
add ecx, 2
test dx, dx
jne 0xcf02a0
jmp 0xcf0280
mov ecx, dword [esp + 0x10]
cmp edi, ecx
je 0xcf03ed
mov word [edi], 0
movzx edx, word [ecx]
xor ebx, ebx
test dx, dx
je 0xcf03f4
mov eax, 1
nop word [eax + eax]
cmp ecx, edi
jae 0xcf030c
movzx esi, dx
xor edx, edx
cmp esi, 0x800
setb dl
xor edx, 3
cmp esi, 0x80
cmovb edx, eax
add ebx, edx
movzx edx, word [ecx + 2]
add ecx, 2
test dx, dx
jne 0xcf02e0
lea esi, [ebx + 1]
push esi
call fcn.00cd8c00
add esp, 4
test ebx, ebx
mov dword [esp + 0x34], eax
jle 0xcf0406
lea ecx, [eax + ebx]
mov dword [esp + 0x40], ecx
add esi, eax
mov dword [esp + 0x3c], esi
mov edx, dword [esp + 0x10]
mov esi, eax
mov dword [esp + 0x38], ebx
jmp 0xcf0356
mov byte [esi], cl
mov eax, 1
add edx, 2
add esi, eax
cmp esi, dword [esp + 0x40]
jae 0xcf0408
cmp edx, edi
jae 0xcf0408
movzx ecx, word [edx]
test cx, cx
je 0xcf0408
cmp cx, 0x7f
jbe 0xcf0340
mov eax, esi
not eax
add eax, dword [esp + 0x3c]
cmp eax, 2
jb 0xcf03b0
movzx ebx, cx
cmp ebx, 0x7ff
mov ebx, dword [esp + 0x38]
ja 0xcf03b0
mov eax, ecx
shr eax, 6
add al, 0xc0
mov byte [esi], al
and cl, 0x3f
or cl, 0x80
mov byte [esi + 1], cl
mov eax, 2
jmp 0xcf0347
cmp eax, 3
mov eax, 0
jb 0xcf0347
movzx eax, cx
mov dword [esp + 0x30], eax
mov eax, dword [esp + 0x30]
shr eax, 0xc
or al, 0xe0
mov byte [esi], al
mov eax, dword [esp + 0x30]
shr eax, 6
and al, 0x3f
or al, 0x80
mov byte [esi + 1], al
and cl, 0x3f
or cl, 0x80
mov byte [esi + 2], cl
mov eax, 3
jmp 0xcf0347
xor ebx, ebx
jmp 0xcf04c2
push 1
call fcn.00cd8c00
add esp, 4
mov esi, eax
mov dword [esp + 0x34], eax
jmp 0xcf0408
mov esi, eax
mov ecx, dword [ebp + 8]
mov byte [esi], 0
movsd xmm0, qword [0xd0e950]
movsd qword [esp + 0x18], xmm0
mov dword [esp + 0x20], 0x1b1ea7e3
mov word [esp + 0x24], 0xad20
mov dword [esp + 0x2a], 0
mov dword [esp + 0x26], 0
mov dword [esp + 4], 0
mov eax, dword [esp + 4]
cmp eax, 0x15
ja 0xcf04a3
nop dword [eax]
mov edx, dword [esp + 4]
mov eax, dword [esp + 4]
movzx esi, byte [esp + eax + 0x18]
lea eax, [edx - 0x7ddc7d6c]
lea edi, [edx + esi]
add edi, 0x82238294
add edx, 0x94
and edx, esi
and eax, esi
add eax, edx
mov edx, edi
not edx
and edx, eax
not eax
and eax, edi
sub eax, edx
mov dword [esp + 8], eax
mov eax, dword [esp + 8]
add al, 0xf4
mov edx, dword [esp + 4]
mov byte [esp + edx + 0x18], al
inc dword [esp + 4]
mov eax, dword [esp + 4]
cmp eax, 0x16
jb 0xcf0450
lea eax, [esp + 0x18]
push ebx
mov esi, dword [esp + 0x38]
push esi
push eax
call fcn.00cd9620
mov ebx, eax
push esi
call fcn.00cd8c10
add esp, 4
mov ecx, dword [esp + 0x10]
push ecx
call fcn.00cd8c10
add esp, 4
push dword [esp + 0xc]
call fcn.00d05160
add esp, 4
mov eax, ebx
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret