Function at 0x41c990
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff0
sub esp, 0x140
mov dword [esp + 0x10], 0xab68a54d
mov dword [esp + 0x14], 0xaf0da91b
mov dword [esp + 0x18], 0xb300ad09
mov dword [esp + 0x1c], 0xb700b175
mov dword [esp + 0x20], 0xbb70b506
mov dword [esp + 0x24], 0xbf0cb91d
mov dword [esp + 0x28], 0x8357bd19
mov word [esp + 0x2c], 0x8182
mov dword [esp + 0x2e], 0
mov dword [esp + 0xbc], 0
mov eax, dword [esp + 0xbc]
cmp eax, 0x21
ja 0x41ca47
nop
nop
nop
mov ecx, dword [esp + 0xbc]
mov eax, dword [esp + 0xbc]
movzx edx, byte [esp + eax + 0x10]
lea eax, [ecx + edx]
add eax, 0x46bdc9c5
add ecx, 0x46bdc9c5
and ecx, edx
add ecx, ecx
sub eax, ecx
add al, 0x9d
mov ecx, dword [esp + 0xbc]
mov byte [esp + ecx + 0x10], al
inc dword [esp + 0xbc]
mov eax, dword [esp + 0xbc]
cmp eax, 0x22
jb 0x41ca00
movzx ecx, word [esp + 0x10]
lea esi, [esp + 0x11e]
mov eax, esi
test cx, cx
je 0x41ca81
lea eax, [esp + 0x11e]
lea edx, [esp + 0x12]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov word [eax], cx
add eax, 2
movzx ecx, word [edx]
add edx, 2
test cx, cx
jne 0x41ca70
mov word [eax], 0
lea edi, [esp + 0x7c]
push edi
push 0
push 0
push 0xe
push esi
push 0
call dword [0x23720ac]
mov ebx, dword [esp + 0x7c]
test ebx, ebx
jns 0x41caa9
mov eax, 0xffffffff
jmp 0x41caac
lea eax, [ebx + ebx]
push eax
call fcn.00409640
add esp, 4
push edi
mov edi, eax
push ebx
push eax
push 0xe
push esi
push 0
call dword [0x23720ac]
mov dword [esp + 0x10], 0x7ba8798a
mov dword [esp + 0x14], 0x7f997d99
mov dword [esp + 0x18], 0x73937183
mov dword [esp + 0x1c], 0x7793758b
mov dword [esp + 0x20], 0xb080983
mov dword [esp + 0x24], 0
mov dword [esp + 0x28], 0
mov dword [esp + 0x2c], 0
mov dword [esp + 0x30], 0
mov dword [esp + 0x34], 0
mov dword [esp + 0x37], 0
mov dword [esp + 0xbc], 0
mov eax, dword [esp + 0xbc]
cmp eax, 0x2a
ja 0x41cb87
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov ecx, dword [esp + 0xbc]
mov eax, dword [esp + 0xbc]
movzx edx, byte [esp + eax + 0x10]
lea eax, [ecx + edx]
add eax, 0xf15961af
add ecx, 0xf15961af
and ecx, edx
add ecx, ecx
sub eax, ecx
add al, 0x37
mov ecx, dword [esp + 0xbc]
mov byte [esp + ecx + 0x10], al
inc dword [esp + 0xbc]
mov eax, dword [esp + 0xbc]
cmp eax, 0x2b
jb 0x41cb40
movzx ecx, word [esp + 0x10]
lea eax, [esp + 0x10a]
test cx, cx
je 0x41cbb1
lea edx, [esp + 0x12]
nop
nop
nop
nop
mov word [eax], cx
add eax, 2
movzx ecx, word [edx]
add edx, 2
test cx, cx
jne 0x41cba0
mov word [eax], 0
mov eax, dword [esp + 0x7c]
mov ecx, eax
add ecx, 9
jns 0x41cbc8
mov eax, 0xffffffff
jmp 0x41cbcd
add eax, eax
add eax, 0x12
push eax
call fcn.00409640
add esp, 4
mov esi, eax
movzx ecx, word [edi]
test cx, cx
je 0x41cc01
lea edx, [edi + 2]
mov eax, esi
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov word [eax], cx
add eax, 2
movzx ecx, word [edx]
add edx, 2
test cx, cx
jne 0x41cbf0
mov word [eax], 0
movzx ecx, word [esp + 0x10a]
test cx, cx
je 0x41cc31
lea edx, [esp + 0x10c]
nop
nop
nop
nop
nop
nop
mov word [eax], cx
add eax, 2
movzx ecx, word [edx]
add edx, 2
test cx, cx
jne 0x41cc20
mov word [eax], 0
lea eax, [esp + 0xb4]
push 0x20
push 1
push 3
push 0x120089
push eax
push esi
call fcn.00435580
add esp, 0x18
not eax
shr eax, 0x1f
mov eax, dword [eax*4 + 0x236cadc]
mov ecx, 0xda6b36cf
xor ecx, dword [0x236cae4]
add eax, ecx
inc eax
jmp eax