Function at 0x1001e810
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
sub esp, 0x38
mov eax, dword [0x100860c0]
xor eax, ebp
mov dword [ebp - 4], eax
push esi
mov esi, ecx
push edi
mov edi, dword [ebx + 8]
mov dword [ebp - 0x30], esi
test byte [esi + 0x24], 2
mov eax, dword [esi + 0x28]
movss xmm0, dword [eax]
movss dword [ebp - 0x24], xmm0
movss xmm0, dword [eax + 4]
movss dword [ebp - 0x28], xmm0
je 0x1001eb1c
mov eax, dword [ebx + 0x10]
and eax, 0xffffff
mov dword [ebp - 0x34], eax
mov eax, dword [ebx + 0xc]
lea ecx, [eax + eax]
lea eax, [eax + eax*8]
mov dword [ebp - 0x38], ecx
push ecx
add eax, 0xfffffffa
mov ecx, esi
push eax
call fcn.1001da80
mov ecx, dword [esi + 0x30]
mov dword [ebp - 0x18], ecx
lea eax, [ecx + 1]
mov dword [ebp - 0x20], eax
mov eax, dword [ebx + 0xc]
cmp eax, 2
jle 0x1001e8cc
movzx ecx, cx
mov edi, 2
mov dword [ebp - 0xc], ecx
nop
mov eax, dword [esi + 0x38]
lea edx, [ecx + edi*2]
inc edi
mov word [eax], cx
lea ecx, [edx - 2]
mov eax, dword [esi + 0x38]
mov word [eax + 2], cx
mov eax, dword [esi + 0x38]
mov ecx, dword [ebp - 0xc]
mov word [eax + 4], dx
add dword [esi + 0x38], 6
mov eax, dword [ebx + 0xc]
cmp edi, eax
jl 0x1001e8a0
mov edi, dword [ebx + 8]
shl eax, 3
call fcn.1003c100
mov eax, dword [ebx + 0xc]
mov ecx, esp
mov dword [ebp - 0xc], ecx
lea edx, [eax - 1]
mov dword [ebp - 0x1c], edx
xor edx, edx
mov dword [ebp - 8], edx
test eax, eax
jle 0x1001eb14
mov eax, dword [ebp - 0x1c]
xorps xmm5, xmm5
movss xmm4, dword [0x10082d18]
shl eax, 3
mov dword [ebp - 0x10], eax
movss xmm0, dword [edi + edx*8]
lea esi, [edx*8]
movss xmm2, dword [edi + edx*8 + 4]
subss xmm0, dword [eax + edi]
subss xmm2, dword [eax + edi + 4]
movaps xmm1, xmm0
movss dword [ebp - 0x2c], xmm0
movaps xmm3, xmm2
mulss xmm1, xmm0
mulss xmm3, xmm2
movss dword [ebp - 0x14], xmm2
addss xmm3, xmm1
comiss xmm3, xmm5
jbe 0x1001e970
movaps xmm0, xmm3
call fcn.10016170
movss xmm4, dword [0x10082d18]
xorps xmm5, xmm5
movss xmm2, dword [ebp - 0x14]
movaps xmm1, xmm4
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0xc]
mov edx, dword [ebp - 8]
divss xmm1, xmm0
movss xmm0, dword [ebp - 0x2c]
jmp 0x1001e973
movaps xmm1, xmm4
mulss xmm0, xmm1
inc edx
mov dword [ebp - 8], edx
mulss xmm2, xmm1
xorps xmm0, xmmword [0x100830d0]
movss dword [eax + ecx + 4], xmm0
movss dword [eax + ecx], xmm2
mov eax, esi
mov dword [ebp - 0x10], eax
cmp edx, dword [ebx + 0xc]
jl 0x1001e903
mov eax, dword [ebp - 0x18]
xor edx, edx
movss xmm5, dword [0x10082ce4]
mov esi, ecx
movss xmm6, dword [0x10082ca8]
sub esi, edi
movss xmm7, dword [0x10082e08]
movzx eax, ax
mov dword [ebp - 0x14], eax
lea eax, [edi + 4]
mov edi, dword [ebp - 0x1c]
mov dword [ebp - 0x18], esi
mov esi, dword [ebp - 0x30]
mov dword [ebp - 8], edx
mov dword [ebp - 0x10], eax
nop dword [eax + eax]
movss xmm2, dword [ecx + edx*8]
mov edx, dword [ebp - 0x18]
addss xmm2, dword [ecx + edi*8]
movss xmm3, dword [edx + eax]
addss xmm3, dword [ecx + edi*8 + 4]
mov edx, dword [ebp - 8]
mulss xmm2, xmm5
mulss xmm3, xmm5
movaps xmm1, xmm2
mulss xmm1, xmm2
movaps xmm0, xmm3
mulss xmm0, xmm3
addss xmm1, xmm0
comiss xmm1, xmm6
jbe 0x1001ea33
movaps xmm0, xmm4
divss xmm0, xmm1
movaps xmm1, xmm7
minss xmm1, xmm0
movaps xmm0, xmm1
mulss xmm3, xmm1
mulss xmm2, xmm0
movss xmm1, dword [eax - 4]
movss xmm0, dword [eax]
mov eax, dword [esi + 0x34]
mov ecx, dword [ebx + 0x10]
mulss xmm2, xmm5
mulss xmm3, xmm5
subss xmm1, xmm2
subss xmm0, xmm3
movss dword [eax], xmm1
movss xmm1, dword [ebp - 0x28]
movss dword [eax + 4], xmm0
mov eax, dword [esi + 0x34]
movss xmm0, dword [ebp - 0x24]
movss dword [eax + 8], xmm0
movss dword [eax + 0xc], xmm1
mov eax, dword [esi + 0x34]
mov dword [eax + 0x10], ecx
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x34]
addss xmm2, dword [eax - 4]
addss xmm3, dword [eax]
mov eax, dword [esi + 0x34]
movss dword [eax + 0x14], xmm2
movss dword [eax + 0x18], xmm3
mov eax, dword [esi + 0x34]
movss dword [eax + 0x1c], xmm0
movss dword [eax + 0x20], xmm1
mov eax, dword [esi + 0x34]
mov dword [eax + 0x24], ecx
mov eax, dword [esi + 0x38]
mov ecx, dword [ebp - 0x14]
add dword [esi + 0x34], 0x28
lea edx, [ecx + edx*2]
mov word [eax], dx
lea ecx, [ecx + edi*2]
mov eax, dword [esi + 0x38]
mov word [eax + 2], cx
mov ecx, dword [ebp - 0x20]
movzx eax, cx
lea ecx, [eax + edi*2]
mov eax, dword [esi + 0x38]
mov edi, dword [ebp - 0x20]
mov word [eax + 4], cx
mov eax, dword [esi + 0x38]
mov word [eax + 6], cx
mov eax, dword [ebp - 8]
movzx ecx, di
lea ecx, [ecx + eax*2]
mov eax, dword [esi + 0x38]
mov word [eax + 8], cx
mov eax, dword [esi + 0x38]
mov ecx, dword [ebp - 0xc]
mov word [eax + 0xa], dx
mov edx, dword [ebp - 8]
mov edi, edx
mov eax, dword [ebp - 0x10]
inc edx
add dword [esi + 0x38], 0xc
add eax, 8
mov dword [ebp - 8], edx
mov dword [ebp - 0x10], eax
cmp edx, dword [ebx + 0xc]
jl 0x1001e9e0
mov eax, dword [ebp - 0x38]
jmp 0x1001ebb7
mov eax, dword [ebx + 0xc]
push eax
lea eax, [eax + eax*2]
add eax, 0xfffffffa
push eax
call fcn.1001da80
mov eax, dword [ebx + 0xc]
test eax, eax
jle 0x1001eb74
movss xmm0, dword [ebp - 0x24]
movss xmm1, dword [ebp - 0x28]
mov dword [ebp - 0xc], eax
mov eax, dword [esi + 0x34]
lea edi, [edi + 8]
mov ecx, dword [edi - 8]
mov edx, dword [edi - 4]
mov dword [eax], ecx
mov ecx, dword [ebx + 0x10]
mov dword [eax + 4], edx
mov eax, dword [esi + 0x34]
movss dword [eax + 8], xmm0
movss dword [eax + 0xc], xmm1
mov eax, dword [esi + 0x34]
mov dword [eax + 0x10], ecx
add dword [esi + 0x34], 0x14
sub dword [ebp - 0xc], 1
jne 0x1001eb40
mov eax, dword [ebx + 0xc]
mov edi, 2
cmp eax, edi
jle 0x1001ebb7
nop dword [eax]
mov ecx, dword [esi + 0x38]
mov ax, word [esi + 0x30]
movzx edx, di
inc edi
mov word [ecx], ax
movzx ecx, word [esi + 0x30]
mov eax, dword [esi + 0x38]
dec cx
add cx, dx
mov word [eax + 2], cx
mov eax, dword [esi + 0x38]
movzx ecx, word [esi + 0x30]
add cx, dx
mov word [eax + 4], cx
add dword [esi + 0x38], 6
mov eax, dword [ebx + 0xc]
cmp edi, eax
jl 0x1001eb80
movzx eax, ax
add dword [esi + 0x30], eax
lea esp, [ebp - 0x40]
pop edi
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1003b130
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret 0xc