Function at 0x1028c94
Capabilities:
Encrypt data using rc4 prga

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0xc9c
mov eax, dword [0x1049010]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0xc8c], eax
mov eax, dword [ebp + 0xc]
push esi
mov esi, ecx
mov dword [ebp - 0xc88], eax
mov eax, dword [esi + 0x870]
add eax, 0x20
mov ecx, eax
shl ecx, 3
mov dword [ebp - 0xc98], ecx
cmp ecx, 0x320
jb 0x1028ce1
xor eax, eax
jmp 0x1028f5f
push ebx
push edi
mov edi, eax
shl edi, 4
push edi
lea eax, [ebp - 0x644]
push 0
push eax
call sub.msvcrt.dll_memset
push edi
lea eax, [ebp - 0xc84]
push 0
push eax
call sub.msvcrt.dll_memset
mov eax, dword [ebp + 0x18]
add esp, 0x18
test eax, eax
jbe 0x1028edc
mov ecx, dword [ebp + 0x14]
mov ebx, dword [esi + 0x30]
shl ecx, 2
mov dword [ebp - 0xc90], ecx
mov ecx, dword [ebp + 0x10]
shl ecx, 2
mov dword [ebp - 0xc94], ecx
mov dword [ebp - 0xc9c], eax
mov edi, 0x400
mov ecx, dword [ebp - 0xc8c]
mov eax, dword [esi + 0x34]
xor edx, edx
and ecx, 7
inc edx
shl edx, cl
mov ecx, dword [ebp - 0xc8c]
shr ecx, 3
mov al, byte [ecx + eax]
test al, dl
mov eax, dword [ebp - 0xc8c]
jne 0x1028d6a
movzx eax, byte [ebx + eax]
jmp 0x1028df5
mov dl, byte [ebx + eax]
mov eax, dword [esi + 0x2c]
mov ecx, dword [ebp - 0xc94]
add ecx, eax
mov eax, dword [ecx]
cmp dl, 7
jae 0x1028db9
cmp eax, edi
jae 0x1028d8d
movzx eax, byte [eax + esi + 0x45c]
jmp 0x1028dad
cmp eax, 0x80000
jae 0x1028da4
shr eax, 9
movzx eax, byte [eax + esi + 0x45c]
add eax, 0x12
jmp 0x1028dad
shr eax, 0x11
movzx eax, al
add eax, 0x22
movzx ecx, dl
lea eax, [ecx + eax*8 + 0x100]
jmp 0x1028dee
cmp eax, edi
jae 0x1028dc7
movzx eax, byte [eax + esi + 0x45c]
jmp 0x1028de7
cmp eax, 0x80000
jae 0x1028dde
shr eax, 9
movzx eax, byte [eax + esi + 0x45c]
add eax, 0x12
jmp 0x1028de7
shr eax, 0x11
movzx eax, al
add eax, 0x22
lea eax, [eax*8 + 0x107]
add dword [ebp - 0xc94], 4
mov ecx, dword [ebp - 0xc88]
inc dword [ebp - 0xc8c]
xor edx, edx
and ecx, 7
lea eax, [ebp + eax*2 - 0x644]
inc word [eax]
mov eax, dword [esi + 0x34]
inc edx
shl edx, cl
mov ecx, dword [ebp - 0xc88]
shr ecx, 3
mov al, byte [ecx + eax]
test al, dl
mov eax, dword [ebp - 0xc88]
jne 0x1028e35
movzx eax, byte [ebx + eax]
jmp 0x1028ec0
mov dl, byte [ebx + eax]
mov eax, dword [esi + 0x2c]
mov ecx, dword [ebp - 0xc90]
add ecx, eax
mov eax, dword [ecx]
cmp dl, 7
jae 0x1028e84
cmp eax, edi
jae 0x1028e58
movzx eax, byte [eax + esi + 0x45c]
jmp 0x1028e78
cmp eax, 0x80000
jae 0x1028e6f
shr eax, 9
movzx eax, byte [eax + esi + 0x45c]
add eax, 0x12
jmp 0x1028e78
shr eax, 0x11
movzx eax, al
add eax, 0x22
movzx ecx, dl
lea eax, [ecx + eax*8 + 0x100]
jmp 0x1028eb9
cmp eax, edi
jae 0x1028e92
movzx eax, byte [eax + esi + 0x45c]
jmp 0x1028eb2
cmp eax, 0x80000
jae 0x1028ea9
shr eax, 9
movzx eax, byte [eax + esi + 0x45c]
add eax, 0x12
jmp 0x1028eb2
shr eax, 0x11
movzx eax, al
add eax, 0x22
lea eax, [eax*8 + 0x107]
add dword [ebp - 0xc90], 4
inc dword [ebp - 0xc88]
lea eax, [ebp + eax*2 - 0xc84]
inc word [eax]
dec dword [ebp - 0xc9c]
jne 0x1028d3a
xor esi, esi
xor ebx, ebx
cmp dword [ebp - 0xc98], esi
jbe 0x1028f5b
mov edi, 0x100
movzx eax, word [ebp + esi*2 - 0x644]
mov ecx, edi
cmp ax, cx
movzx eax, ax
jae 0x1028f08
movzx eax, byte [eax + 0x1003ae0]
jmp 0x1028f15
shr eax, 8
movzx eax, byte [eax + 0x1003ae0]
add eax, 8
movzx ecx, word [ebp + esi*2 - 0xc84]
mov edx, edi
cmp cx, dx
movzx ecx, cx
jae 0x1028f30
movzx ecx, byte [ecx + 0x1003ae0]
jmp 0x1028f3d
shr ecx, 8
movzx ecx, byte [ecx + 0x1003ae0]
add ecx, 8
mov eax, dword [eax*4 + 0x1003a98]
sub eax, dword [ecx*4 + 0x1003a98]
cdq
xor eax, edx
sub eax, edx
add ebx, eax
inc esi
cmp esi, dword [ebp - 0xc98]
jb 0x1028eed
pop edi
mov eax, ebx
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
pop esi
call fcn.01010796
leave
ret 0x14