Function at 0x41faba
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc84
mov eax, dword [edx + 0x870]
add eax, 0x20
mov ecx, eax
shl ecx, 3
cmp ecx, 0x320
mov dword [ebp - 4], ecx
jb 0x41fae3
xor eax, eax
jmp 0x41fd3e
shl eax, 4
push ebx
push esi
mov esi, eax
push edi
mov ecx, esi
mov ebx, ecx
shr ecx, 2
xor eax, eax
lea edi, [ebp - 0x644]
rep stosd dword es:[edi], eax
mov ecx, ebx
and ecx, 3
rep stosb byte es:[edi], al
mov ecx, esi
shr ecx, 2
xor eax, eax
lea edi, [ebp - 0xc84]
rep stosd dword es:[edi], eax
mov ecx, esi
and ecx, 3
rep stosb byte es:[edi], al
mov eax, dword [ebp + 0x18]
test eax, eax
jbe 0x41fcc6
mov ecx, dword [ebp + 0x14]
mov edi, dword [edx + 0x30]
shl ecx, 2
mov dword [ebp + 0x14], ecx
mov ecx, dword [ebp + 0x10]
shl ecx, 2
mov dword [ebp + 0x18], ecx
mov dword [ebp + 0x10], eax
mov esi, 0x400
mov ecx, dword [ebp + 8]
mov eax, dword [edx + 0x34]
xor ebx, ebx
and ecx, 7
inc ebx
shl ebx, cl
mov ecx, dword [ebp + 8]
shr ecx, 3
mov al, byte [ecx + eax]
test al, bl
mov eax, dword [ebp + 8]
jne 0x41fb68
movzx eax, byte [edi + eax]
jmp 0x41fbf2
mov cl, byte [edi + eax]
cmp cl, 7
mov eax, dword [edx + 0x2c]
jae 0x41fbb3
mov ebx, dword [ebp + 0x18]
mov eax, dword [ebx + eax]
cmp eax, esi
jae 0x41fb87
movzx eax, byte [eax + edx + 0x45c]
jmp 0x41fba7
cmp eax, 0x80000
jae 0x41fb9e
shr eax, 9
movzx eax, byte [eax + edx + 0x45c]
add eax, 0x12
jmp 0x41fba7
shr eax, 0x11
movzx eax, al
add eax, 0x22
movzx ecx, cl
lea eax, [ecx + eax*8 + 0x100]
jmp 0x41fbee
mov ecx, dword [ebp + 0x18]
mov eax, dword [ecx + eax]
cmp eax, esi
jae 0x41fbc7
movzx eax, byte [eax + edx + 0x45c]
jmp 0x41fbe7
cmp eax, 0x80000
jae 0x41fbde
shr eax, 9
movzx eax, byte [eax + edx + 0x45c]
add eax, 0x12
jmp 0x41fbe7
shr eax, 0x11
movzx eax, al
add eax, 0x22
lea eax, [eax*8 + 0x107]
add dword [ebp + 0x18], 4
mov ecx, dword [ebp + 0xc]
inc dword [ebp + 8]
xor ebx, ebx
and ecx, 7
lea eax, [ebp + eax*2 - 0x644]
inc word [eax]
mov eax, dword [edx + 0x34]
inc ebx
shl ebx, cl
mov ecx, dword [ebp + 0xc]
shr ecx, 3
mov al, byte [ecx + eax]
test al, bl
mov eax, dword [ebp + 0xc]
jne 0x41fc26
movzx eax, byte [edi + eax]
jmp 0x41fcb0
mov cl, byte [edi + eax]
cmp cl, 7
mov eax, dword [edx + 0x2c]
jae 0x41fc71
mov ebx, dword [ebp + 0x14]
mov eax, dword [ebx + eax]
cmp eax, esi
jae 0x41fc45
movzx eax, byte [eax + edx + 0x45c]
jmp 0x41fc65
cmp eax, 0x80000
jae 0x41fc5c
shr eax, 9
movzx eax, byte [eax + edx + 0x45c]
add eax, 0x12
jmp 0x41fc65
shr eax, 0x11
movzx eax, al
add eax, 0x22
movzx ecx, cl
lea eax, [ecx + eax*8 + 0x100]
jmp 0x41fcac
mov ecx, dword [ebp + 0x14]
mov eax, dword [ecx + eax]
cmp eax, esi
jae 0x41fc85
movzx eax, byte [eax + edx + 0x45c]
jmp 0x41fca5
cmp eax, 0x80000
jae 0x41fc9c
shr eax, 9
movzx eax, byte [eax + edx + 0x45c]
add eax, 0x12
jmp 0x41fca5
shr eax, 0x11
movzx eax, al
add eax, 0x22
lea eax, [eax*8 + 0x107]
add dword [ebp + 0x14], 4
inc dword [ebp + 0xc]
lea eax, [ebp + eax*2 - 0xc84]
inc word [eax]
dec dword [ebp + 0x10]
jne 0x41fb41
xor esi, esi
xor edi, edi
cmp dword [ebp - 4], esi
jbe 0x41fd39
mov ax, word [ebp + esi*2 - 0x644]
cmp ax, 0x100
movzx eax, ax
jae 0x41fce9
movzx eax, byte [eax + 0x4448f0]
jmp 0x41fcf6
shr eax, 8
movzx eax, byte [eax + 0x4448f0]
add eax, 8
mov cx, word [ebp + esi*2 - 0xc84]
cmp cx, 0x100
movzx ecx, cx
jae 0x41fd11
movzx ecx, byte [ecx + 0x4448f0]
jmp 0x41fd1e
shr ecx, 8
movzx ecx, byte [ecx + 0x4448f0]
add ecx, 8
mov eax, dword [eax*4 + 0x4448a8]
sub eax, dword [ecx*4 + 0x4448a8]
cdq
xor eax, edx
sub eax, edx
add edi, eax
inc esi
cmp esi, dword [ebp - 4]
jb 0x41fccf
mov eax, edi
pop edi
pop esi
pop ebx
leave
ret 0x14