Function at 0x486e10
Capabilities:
Encrypt data using rc4 prga

Disassembly:
sub esp, 0x10
push ebx
push ebp
push esi
mov esi, dword [esp + 0x24]
test esi, esi
push edi
jge 0x486e6f
mov eax, dword [esp + 0x3c]
cmp esi, 0xfffffffe
je 0x486e5b
cmp esi, 0xffffffff
mov dword [eax], 0
jne 0x486e47
pop edi
pop esi
mov dword [eax + 8], 1
pop ebp
mov eax, 1
pop ebx
add esp, 0x10
ret
pop edi
pop esi
mov dword [eax + 0xc], 1
pop ebp
mov eax, 1
pop ebx
add esp, 0x10
ret
pop edi
pop esi
mov dword [eax + 4], 1
pop ebp
mov eax, 1
pop ebx
add esp, 0x10
ret
mov ebx, dword [esp + 0x24]
cmp esi, dword [ebx + 8]
jl 0x486e7d
cmp esi, dword [ebx + 0xc]
jle 0x486e8a
push str.SV_RecursiveHullCheck:_bad_node_number
call fcn.0047c340
add esp, 4
mov ecx, dword [ebx]
mov eax, dword [ecx + esi*8]
lea ecx, [ecx + esi*8]
mov dword [esp + 0x10], ecx
lea edx, [eax + eax*4]
mov eax, dword [ebx + 4]
lea edi, [eax + edx*4]
mov al, byte [eax + edx*4 + 0x10]
cmp al, 3
jae 0x486ec6
mov esi, dword [esp + 0x34]
and eax, 0xff
shl eax, 2
mov ebp, dword [esp + 0x38]
fld dword [eax + esi]
fsub dword [edi + 0xc]
fstp dword [esp + 0x28]
fld dword [eax + ebp]
jmp 0x486efe
mov esi, dword [esp + 0x34]
mov ebp, dword [esp + 0x38]
fld dword [esi + 4]
fmul dword [edi + 4]
fld dword [esi + 8]
fmul dword [edi + 8]
faddp st(1)
fld dword [esi]
fmul dword [edi]
faddp st(1)
fsub dword [edi + 0xc]
fstp dword [esp + 0x28]
fld dword [ebp + 4]
fmul dword [edi + 4]
fld dword [ebp + 8]
fmul dword [edi + 8]
faddp st(1)
fld dword [ebp]
fmul dword [edi]
faddp st(1)
fsub dword [edi + 0xc]
fstp dword [esp + 0x34]
fld dword [esp + 0x28]
fcomp dword [0x497058]
fld dword [esp + 0x34]
fnstsw ax
fcomp dword [0x497058]
test ah, 1
fnstsw ax
jne 0x486f4e
test ah, 1
jne 0x486f97
mov edx, dword [esp + 0x3c]
mov eax, dword [esp + 0x30]
push edx
mov edx, dword [esp + 0x30]
push ebp
push esi
push eax
push edx
movsx eax, word [ecx + 4]
push eax
push ebx
call fcn.00486e10
add esp, 0x1c
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x10
ret
test ah, 1
je 0x486f7a
mov edx, dword [esp + 0x3c]
mov eax, dword [esp + 0x30]
push edx
mov edx, dword [esp + 0x30]
push ebp
push esi
push eax
push edx
movsx eax, word [ecx + 6]
push eax
push ebx
call fcn.00486e10
add esp, 0x1c
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x10
ret
fld dword [esp + 0x28]
fcomp dword [0x497058]
fnstsw ax
test ah, 1
je 0x486f97
fld dword [esp + 0x28]
fadd qword [0x497600]
jmp 0x486fa1
fld dword [esp + 0x28]
fsub qword [0x497600]
fld dword [esp + 0x28]
fsub dword [esp + 0x34]
fdivp st(1)
fstp dword [esp + 0x34]
fld dword [esp + 0x34]
fcomp dword [0x497058]
fnstsw ax
test ah, 1
je 0x486fca
mov dword [esp + 0x34], 0
jmp 0x486fe3
fld dword [esp + 0x34]
fcomp dword [0x497078]
fnstsw ax
test ah, 0x41
jne 0x486fe3
mov dword [esp + 0x34], 0x3f800000
fld dword [esp + 0x30]
fsub dword [esp + 0x2c]
fstp dword [esp + 0x24]
fld dword [esp + 0x24]
fmul dword [esp + 0x34]
fadd dword [esp + 0x2c]
fstp dword [esp + 0x38]
fld dword [ebp]
fsub dword [esi]
fmul dword [esp + 0x34]
fadd dword [esi]
fstp dword [esp + 0x14]
fld dword [ebp + 4]
fsub dword [esi + 4]
fmul dword [esp + 0x34]
fadd dword [esi + 4]
fstp dword [esp + 0x18]
fld dword [ebp + 8]
fsub dword [esi + 8]
fmul dword [esp + 0x34]
fadd dword [esi + 8]
fstp dword [esp + 0x1c]
fld dword [esp + 0x28]
fcomp dword [0x497058]
mov dword [esp + 0x28], 1
fnstsw ax
test ah, 1
jne 0x487051
mov dword [esp + 0x28], 0
mov edx, dword [esp + 0x3c]
lea eax, [esp + 0x14]
push edx
mov edx, dword [esp + 0x3c]
push eax
mov eax, dword [esp + 0x34]
push esi
push edx
mov edx, dword [esp + 0x38]
push eax
movsx eax, word [ecx + edx*2 + 4]
push eax
push ebx
call fcn.00486e10
add esp, 0x1c
test eax, eax
je 0x4871e0
mov ecx, dword [esp + 0x28]
mov edx, dword [esp + 0x10]
xor ecx, 1
lea eax, [edx + ecx*2 + 4]
lea ecx, [esp + 0x14]
push ecx
mov dword [esp + 0x14], eax
movsx edx, word [eax]
push edx
push ebx
call fcn.0048c148
add esp, 0xc
cmp eax, 0xfffffffe
mov eax, dword [esp + 0x3c]
je 0x4870d9
mov edx, dword [esp + 0x30]
push eax
mov eax, dword [esp + 0x3c]
lea ecx, [esp + 0x18]
push ebp
push ecx
mov ecx, dword [esp + 0x1c]
push edx
push eax
movsx edx, word [ecx]
push edx
push ebx
call fcn.00486e10
add esp, 0x1c
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x10
ret
cmp dword [eax], 0
jne 0x4871e0
mov ecx, dword [esp + 0x28]
test ecx, ecx
jne 0x487103
mov ecx, dword [edi]
mov dword [eax + 0x20], ecx
mov edx, dword [edi + 4]
mov dword [eax + 0x24], edx
mov ecx, dword [edi + 8]
mov dword [eax + 0x28], ecx
mov edx, dword [edi + 0xc]
mov dword [eax + 0x2c], edx
jmp 0x48712e
fld dword [0x945b00]
fsub dword [edi]
fstp dword [eax + 0x20]
fld dword [0x945b04]
fsub dword [edi + 4]
fstp dword [eax + 0x24]
fld dword [0x945b08]
fsub dword [edi + 8]
fstp dword [eax + 0x28]
fld dword [edi + 0xc]
fchs
fstp dword [eax + 0x2c]
mov ecx, dword [ebx + 8]
lea eax, [esp + 0x14]
push eax
push ecx
push ebx
call fcn.0048c148
add esp, 0xc
cmp eax, 0xfffffffe
jne 0x4871c0
fld dword [esp + 0x34]
fsub qword [0x4970d0]
fstp dword [esp + 0x34]
fld dword [esp + 0x34]
fcomp dword [0x497058]
fnstsw ax
test ah, 1
jne 0x4871ea
fld dword [esp + 0x24]
fmul dword [esp + 0x34]
mov eax, dword [ebx + 8]
lea edx, [esp + 0x14]
push edx
push eax
fadd dword [esp + 0x34]
push ebx
fstp dword [esp + 0x44]
fld dword [ebp]
fsub dword [esi]
fmul dword [esp + 0x40]
fadd dword [esi]
fstp dword [esp + 0x20]
fld dword [ebp + 4]
fsub dword [esi + 4]
fmul dword [esp + 0x40]
fadd dword [esi + 4]
fstp dword [esp + 0x24]
fld dword [ebp + 8]
fsub dword [esi + 8]
fmul dword [esp + 0x40]
fadd dword [esi + 8]
fstp dword [esp + 0x28]
call fcn.0048c148
add esp, 0xc
cmp eax, 0xfffffffe
je 0x487145
mov eax, dword [esp + 0x3c]
mov ecx, dword [esp + 0x38]
mov edx, dword [esp + 0x14]
mov dword [eax + 0x10], ecx
mov ecx, dword [esp + 0x18]
mov dword [eax + 0x14], edx
mov edx, dword [esp + 0x1c]
mov dword [eax + 0x18], ecx
mov dword [eax + 0x1c], edx
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0x10
ret
mov eax, dword [esp + 0x3c]
mov ecx, dword [esp + 0x38]
mov edx, dword [esp + 0x14]
push str.backup_past_0_n
mov dword [eax + 0x10], ecx
mov ecx, dword [esp + 0x1c]
mov dword [eax + 0x14], edx
mov edx, dword [esp + 0x20]
mov dword [eax + 0x18], ecx
mov dword [eax + 0x1c], edx
call fcn.0040f900
add esp, 4
xor eax, eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x10
ret