Function at 0x10047cf0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x30
push esi
mov esi, ecx
mov ecx, dword [ebp + 0xc]
mov dword [ebp - 0x24], esi
push edi
mov edi, dword [ebp + 8]
cmp ecx, 3
jl 0x100480b3
mov edx, dword [ebp + 0x10]
test edx, 0xff000000
je 0x100480b3
test byte [esi + 0x24], 4
mov eax, dword [esi + 0x2c]
movss xmm0, dword [eax]
movss dword [ebp - 0x18], xmm0
movss xmm0, dword [eax + 4]
movss dword [ebp - 0x1c], xmm0
je 0x1004801c
movss xmm0, dword [esi + 0x8c]
mov edi, ecx
and edx, 0xffffff
movss dword [ebp - 0xc], xmm0
mov ecx, esi
mov dword [ebp - 0x28], edx
lea eax, [edi + edi]
push eax
mov dword [ebp - 0x30], eax
lea eax, [edi*8 - 6]
add eax, edi
push eax
call fcn.1004dc70
mov eax, dword [esi + 0x28]
movzx edx, ax
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x14], edx
lea ecx, [eax + 1]
mov dword [ebp - 0x2c], ecx
mov ecx, 2
mov dword [ebp - 0x10], ecx
mov eax, dword [esi + 0x38]
mov word [eax], dx
lea edx, [edx + ecx*2]
mov eax, dword [esi + 0x38]
lea ecx, [edx - 2]
mov word [eax + 2], cx
mov eax, dword [esi + 0x38]
mov ecx, dword [ebp - 0x10]
inc ecx
mov dword [ebp - 0x10], ecx
mov word [eax + 4], dx
add dword [esi + 0x38], 6
mov edx, dword [ebp - 0x14]
cmp ecx, edi
jl 0x10047d85
mov eax, dword [esi + 0x2c]
mov dword [ebp - 0x14], eax
cmp edi, dword [eax + 0x30]
jle 0x10047de8
mov eax, dword [eax + 0x34]
test eax, eax
je 0x10047dcc
push eax
call fcn.1003a490
add esp, 4
lea eax, [edi*8]
push eax
call fcn.1003a400
mov ecx, dword [ebp - 0x14]
add esp, 4
mov dword [ecx + 0x34], eax
mov dword [ecx + 0x30], edi
mov eax, dword [esi + 0x2c]
mov edx, dword [eax + 0x34]
xorps xmm5, xmm5
movss xmm4, dword [0x101ccf50]
lea eax, [edi - 1]
mov edi, dword [ebp + 8]
lea ecx, [eax*8]
mov dword [ebp - 4], eax
xor esi, esi
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x10], edx
nop
movss xmm2, dword [edi + esi*8]
lea edx, [esi*8]
movss xmm3, dword [edi + esi*8 + 4]
subss xmm2, dword [ecx + edi]
subss xmm3, dword [ecx + edi + 4]
mov dword [ebp + 8], edx
mov edx, dword [ebp - 0x10]
movaps xmm0, xmm2
movaps xmm1, xmm3
mulss xmm0, xmm2
mulss xmm1, xmm3
addss xmm1, xmm0
comiss xmm1, xmm5
jbe 0x10047e59
rsqrtss xmm1, xmm1
movaps xmm0, xmm1
mulss xmm3, xmm1
mulss xmm2, xmm0
xorps xmm2, xmm4
movss dword [ecx + edx], xmm3
inc esi
movss dword [ecx + edx + 4], xmm2
mov ecx, dword [ebp + 8]
cmp esi, eax
jl 0x10047e10
mov ecx, dword [ebp - 0x20]
xor eax, eax
movss xmm0, dword [ebp - 0xc]
movss xmm4, dword [0x101ccef0]
movss xmm5, dword [0x101d2938]
movss xmm6, dword [0x101ccef4]
movss xmm7, dword [0x101ceb58]
mov esi, dword [ebp - 0x24]
movzx ecx, cx
mov dword [ebp - 0x14], ecx
lea ecx, [edi + 4]
mov dword [ebp + 8], ecx
mov ecx, edx
mulss xmm0, xmm4
sub ecx, edi
mov dword [ebp - 0x20], ecx
mov ecx, dword [ebp - 4]
mov dword [ebp - 8], eax
movss dword [ebp - 0xc], xmm0
nop
movss xmm2, dword [edx + eax*8]
mov eax, dword [ebp + 8]
mov edi, dword [ebp - 0x20]
addss xmm2, dword [edx + ecx*8]
movss xmm3, dword [edi + eax]
addss xmm3, dword [edx + ecx*8 + 4]
mulss xmm2, xmm4
mulss xmm3, xmm4
movaps xmm0, xmm2
mulss xmm0, xmm2
movaps xmm1, xmm3
mulss xmm1, xmm3
addss xmm1, xmm0
comiss xmm1, xmm5
jbe 0x10047f13
movaps xmm0, xmm6
divss xmm0, xmm1
movaps xmm1, xmm7
minss xmm1, xmm0
movaps xmm0, xmm1
mulss xmm3, xmm1
mulss xmm2, xmm0
movss xmm0, dword [eax - 4]
mov eax, dword [esi + 0x34]
movss xmm1, dword [ebp - 0xc]
mulss xmm1, xmm2
mov edx, dword [ebp + 0x10]
movss xmm2, dword [ebp - 0xc]
mulss xmm2, xmm3
mov edi, dword [ebp - 0x2c]
movss xmm3, dword [ebp - 0x1c]
subss xmm0, xmm1
movss dword [eax], xmm0
mov eax, dword [ebp + 8]
movss xmm0, dword [eax]
mov eax, dword [esi + 0x34]
subss xmm0, xmm2
movss dword [eax + 4], xmm0
mov eax, dword [esi + 0x34]
movss xmm0, dword [ebp - 0x18]
movss dword [eax + 8], xmm0
movss dword [eax + 0xc], xmm3
mov eax, dword [esi + 0x34]
mov dword [eax + 0x10], edx
mov eax, dword [esi + 0x34]
mov edx, dword [ebp + 8]
add dword [ebp + 8], 8
addss xmm1, dword [edx - 4]
movss dword [eax + 0x14], xmm1
addss xmm2, dword [edx]
mov eax, dword [esi + 0x34]
mov edx, dword [ebp - 0x28]
movss dword [eax + 0x18], xmm2
mov eax, dword [esi + 0x34]
movss dword [eax + 0x1c], xmm0
movss dword [eax + 0x20], xmm3
mov eax, dword [esi + 0x34]
mov dword [eax + 0x24], edx
mov eax, dword [ebp - 8]
mov edx, dword [ebp - 0x14]
add dword [esi + 0x34], 0x28
lea edx, [edx + eax*2]
mov eax, dword [esi + 0x38]
mov word [eax], dx
mov eax, dword [ebp - 0x14]
lea ecx, [eax + ecx*2]
mov eax, dword [esi + 0x38]
mov word [eax + 2], cx
mov eax, dword [ebp - 4]
movzx ecx, di
lea ecx, [ecx + eax*2]
mov eax, dword [esi + 0x38]
mov word [eax + 4], cx
mov eax, dword [esi + 0x38]
mov word [eax + 6], cx
mov eax, dword [ebp - 8]
movzx ecx, di
lea ecx, [ecx + eax*2]
mov eax, dword [esi + 0x38]
mov word [eax + 8], cx
mov eax, dword [esi + 0x38]
mov word [eax + 0xa], dx
mov eax, dword [ebp - 8]
mov ecx, eax
add dword [esi + 0x38], 0xc
inc eax
mov edx, dword [ebp - 0x10]
mov dword [ebp - 4], ecx
mov dword [ebp - 8], eax
cmp eax, dword [ebp + 0xc]
jl 0x10047ec0
mov eax, dword [ebp - 0x30]
movzx eax, ax
add dword [esi + 0x28], eax
pop edi
pop esi
mov esp, ebp
pop ebp
ret 0xc
push ecx
add ecx, 0xfffffffe
lea eax, [ecx + ecx*2]
mov ecx, esi
push eax
call fcn.1004dc70
mov eax, dword [ebp + 0xc]
movss xmm0, dword [ebp - 0x18]
movss xmm1, dword [ebp - 0x1c]
mov dword [ebp + 8], eax
nop dword [eax + eax]
mov eax, dword [esi + 0x34]
lea edi, [edi + 8]
mov ecx, dword [edi - 8]
mov edx, dword [edi - 4]
mov dword [eax], ecx
mov ecx, dword [ebp + 0x10]
mov dword [eax + 4], edx
mov eax, dword [esi + 0x34]
movss dword [eax + 8], xmm0
movss dword [eax + 0xc], xmm1
mov eax, dword [esi + 0x34]
mov dword [eax + 0x10], ecx
add dword [esi + 0x34], 0x14
sub dword [ebp + 8], 1
jne 0x10048040
mov edi, 2
mov ecx, dword [esi + 0x38]
mov ax, word [esi + 0x28]
movzx edx, di
inc edi
mov word [ecx], ax
movzx ecx, word [esi + 0x28]
mov eax, dword [esi + 0x38]
dec cx
add cx, dx
mov word [eax + 2], cx
mov eax, dword [esi + 0x38]
movzx ecx, word [esi + 0x28]
add cx, dx
mov word [eax + 4], cx
add dword [esi + 0x38], 6
mov eax, dword [ebp + 0xc]
cmp edi, eax
jl 0x10048076
movzx eax, ax
add dword [esi + 0x28], eax
pop edi
pop esi
mov esp, ebp
pop ebp
ret 0xc