Function at 0x1006fb00
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
sub esp, 0x58
mov eax, dword [0x10249010]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebx + 8]
push esi
mov esi, dword [0x1039ea5c]
push edi
mov ecx, dword [eax]
mov eax, dword [eax + 4]
test byte [esi + 0x24], 4
mov dword [ebp - 0x20], eax
mov eax, dword [ebx + 0xc]
mov dword [ebp - 0x24], ecx
mov edi, dword [ebx + 0x18]
mov dword [ebp - 0x34], edi
mov ecx, dword [eax]
mov eax, dword [eax + 4]
mov dword [ebp - 0x18], eax
mov eax, dword [ebx + 0x10]
mov dword [ebp - 0x1c], ecx
mov ecx, dword [eax]
mov eax, dword [eax + 4]
mov dword [ebp - 0x10], eax
mov eax, dword [ebx + 0x14]
mov dword [ebp - 0x14], ecx
mov ecx, dword [eax]
mov eax, dword [eax + 4]
mov dword [ebp - 8], eax
mov eax, dword [ebx + 0x1c]
mov dword [ebp - 0x30], eax
mov eax, dword [ebx + 0x20]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebx + 0x24]
mov dword [ebp - 0x28], eax
mov eax, dword [esi + 0x2c]
mov dword [ebp - 0xc], ecx
mov ecx, esi
movss xmm0, dword [eax]
movss dword [ebp - 0x4c], xmm0
movss xmm0, dword [eax + 4]
movss dword [ebp - 0x44], xmm0
je 0x1006fe1d
push 8
push 0x1e
call fcn.1006d2d0
mov eax, dword [esi + 0x28]
mov edi, 2
lea ecx, [eax + 1]
mov dword [ebp - 0x40], ecx
movzx ecx, ax
mov dword [ebp - 0x38], ecx
nop word [eax + eax]
mov eax, dword [esi + 0x38]
lea edx, [ecx + edi*2]
inc edi
mov word [eax], cx
lea ecx, [edx - 2]
mov eax, dword [esi + 0x38]
mov word [eax + 2], cx
mov eax, dword [esi + 0x38]
mov ecx, dword [ebp - 0x38]
mov word [eax + 4], dx
add dword [esi + 0x38], 6
cmp edi, 4
jl 0x1006fbc0
mov eax, ecx
movzx eax, ax
mov dword [ebp - 0x58], eax
mov eax, 0x20
call fcn.101a8300
movss xmm4, dword [0x10233610]
mov edi, esp
movss xmm6, dword [0x10232db8]
mov ecx, 0x18
xor eax, eax
xorps xmm5, xmm5
nop word [eax + eax]
movss xmm2, dword [ebp + eax - 0x24]
movss xmm3, dword [ebp + eax - 0x20]
subss xmm2, dword [ebp + ecx - 0x24]
subss xmm3, dword [ebp + ecx - 0x20]
movaps xmm1, xmm2
movaps xmm0, xmm3
mulss xmm1, xmm2
mulss xmm0, xmm3
addss xmm0, xmm1
comiss xmm0, xmm5
jbe 0x1006fc66
call fcn.1002f5d0
movaps xmm1, xmm6
divss xmm1, xmm0
movaps xmm0, xmm1
mulss xmm3, xmm1
mulss xmm2, xmm0
xorps xmm2, xmm4
movss dword [ecx + edi], xmm3
movss dword [ecx + edi + 4], xmm2
mov ecx, eax
add eax, 8
cmp eax, 0x20
jl 0x1006fc20
mov ecx, dword [ebp - 0x40]
xor edx, edx
movss xmm5, dword [0x10232d64]
mov eax, 3
movss xmm7, dword [0x10232f30]
mov dword [ebp - 0x3c], edx
lea edx, [ebp - 0x24]
sub edx, edi
movzx ecx, cx
mov dword [ebp - 0x50], edx
lea edx, [ebp - 0x20]
sub edx, edi
mov dword [ebp - 0x48], ecx
mov ecx, edi
mov dword [ebp - 0x54], edx
mov edx, dword [ebp - 0x3c]
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x40], ecx
nop dword [eax]
movss xmm0, dword [edi + eax*8]
movss xmm2, dword [ecx + 4]
addss xmm2, dword [edi + eax*8 + 4]
addss xmm0, dword [ecx]
movaps xmm4, xmm2
mulss xmm2, xmm2
movaps xmm3, xmm0
mulss xmm4, xmm5
mulss xmm0, xmm0
mulss xmm3, xmm5
addss xmm2, xmm0
mulss xmm2, dword [0x10232d2c]
comiss xmm2, dword [0x10232c60]
jbe 0x1006fd15
movaps xmm1, xmm6
divss xmm1, xmm2
minss xmm1, xmm7
movaps xmm0, xmm1
mulss xmm4, xmm1
mulss xmm3, xmm0
mov eax, dword [ebp - 0x50]
movss xmm6, dword [ebp - 0x44]
mulss xmm3, xmm5
movss xmm2, dword [eax + ecx]
mov eax, dword [esi + 0x34]
movaps xmm0, xmm2
subss xmm0, xmm3
mulss xmm4, xmm5
addss xmm2, xmm3
movss dword [eax], xmm0
mov eax, dword [ebp - 0x54]
movss xmm1, dword [eax + ecx]
mov eax, dword [esi + 0x34]
movaps xmm0, xmm1
mov ecx, dword [ebp + edx*4 - 0x34]
subss xmm0, xmm4
addss xmm1, xmm4
movss dword [eax + 4], xmm0
mov eax, dword [esi + 0x34]
movss xmm0, dword [ebp - 0x4c]
movss dword [eax + 8], xmm0
movss dword [eax + 0xc], xmm6
mov eax, dword [esi + 0x34]
mov dword [eax + 0x10], ecx
and ecx, 0xffffff
mov eax, dword [esi + 0x34]
movss dword [eax + 0x14], xmm2
mov eax, dword [esi + 0x34]
movss dword [eax + 0x18], xmm1
mov eax, dword [esi + 0x34]
movss dword [eax + 0x1c], xmm0
movaps xmm0, xmm6
movss dword [eax + 0x20], xmm0
mov eax, dword [esi + 0x34]
movss xmm6, dword [0x10232db8]
mov dword [eax + 0x24], ecx
mov eax, dword [esi + 0x38]
mov ecx, dword [ebp - 0x58]
add dword [esi + 0x34], 0x28
lea edx, [ecx + edx*2]
mov word [eax], dx
mov eax, dword [ebp - 0x38]
lea ecx, [ecx + eax*2]
mov eax, dword [esi + 0x38]
mov word [eax + 2], cx
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x48]
lea ecx, [ecx + eax*2]
mov eax, dword [esi + 0x38]
mov word [eax + 4], cx
mov eax, dword [esi + 0x38]
mov word [eax + 6], cx
mov eax, dword [ebp - 0x3c]
mov ecx, dword [ebp - 0x48]
lea ecx, [ecx + eax*2]
mov eax, dword [esi + 0x38]
mov word [eax + 8], cx
mov eax, dword [esi + 0x38]
mov ecx, dword [ebp - 0x40]
add ecx, 8
mov dword [ebp - 0x40], ecx
mov word [eax + 0xa], dx
mov edx, dword [ebp - 0x3c]
mov eax, edx
add dword [esi + 0x38], 0xc
inc edx
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x3c], edx
cmp edx, 4
jl 0x1006fcc0
add dword [esi + 0x28], 8
jmp 0x1006ff39
push 4
push 6
call fcn.1006d2d0
mov eax, dword [esi + 0x34]
movss xmm0, dword [ebp - 0x24]
movss xmm1, dword [ebp - 0x4c]
movss xmm2, dword [ebp - 0x44]
movss dword [eax], xmm0
movss xmm0, dword [ebp - 0x20]
movss dword [eax + 4], xmm0
mov eax, dword [esi + 0x34]
movss xmm0, dword [ebp - 0x1c]
movss dword [eax + 8], xmm1
movss dword [eax + 0xc], xmm2
mov eax, dword [esi + 0x34]
mov dword [eax + 0x10], edi
mov edi, 2
mov ecx, dword [esi + 0x34]
lea eax, [ecx + 0x14]
mov dword [esi + 0x34], eax
movss dword [eax], xmm0
movss xmm0, dword [ebp - 0x18]
movss dword [ecx + 0x18], xmm0
mov eax, dword [esi + 0x34]
mov ecx, dword [ebx + 0x1c]
movss xmm0, dword [ebp - 0x14]
movss dword [eax + 8], xmm1
movss dword [eax + 0xc], xmm2
mov eax, dword [esi + 0x34]
mov dword [eax + 0x10], ecx
mov ecx, dword [esi + 0x34]
lea eax, [ecx + 0x14]
mov dword [esi + 0x34], eax
movss dword [eax], xmm0
movss xmm0, dword [ebp - 0x10]
movss dword [ecx + 0x18], xmm0
mov eax, dword [esi + 0x34]
mov ecx, dword [ebx + 0x20]
movss xmm0, dword [ebp - 0xc]
movss dword [eax + 8], xmm1
movss dword [eax + 0xc], xmm2
mov eax, dword [esi + 0x34]
mov dword [eax + 0x10], ecx
mov ecx, dword [esi + 0x34]
lea eax, [ecx + 0x14]
mov dword [esi + 0x34], eax
movss dword [eax], xmm0
movss xmm0, dword [ebp - 8]
movss dword [ecx + 0x18], xmm0
mov eax, dword [esi + 0x34]
mov ecx, dword [ebx + 0x24]
movss dword [eax + 8], xmm1
movss dword [eax + 0xc], xmm2
mov eax, dword [esi + 0x34]
mov dword [eax + 0x10], ecx
add dword [esi + 0x34], 0x14
nop dword [eax + eax]
mov ecx, dword [esi + 0x38]
mov ax, word [esi + 0x28]
movzx edx, di
inc edi
mov word [ecx], ax
movzx ecx, word [esi + 0x28]
mov eax, dword [esi + 0x38]
dec cx
add cx, dx
mov word [eax + 2], cx
mov eax, dword [esi + 0x38]
movzx ecx, word [esi + 0x28]
add cx, dx
mov word [eax + 4], cx
add dword [esi + 0x38], 6
cmp edi, 4
jl 0x1006ff00
add dword [esi + 0x28], 4
lea esp, [ebp - 0x60]
pop edi
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1015164c
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret 0x20