Function at 0x10026780
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x44
mov eax, dword [0x1005600c]
xor eax, ebp
mov dword [ebp - 4], eax
movss xmm0, dword [ebp + 0x10]
comiss xmm0, dword [ebp + 0x18]
push ebx
push esi
mov ebx, edx
mov esi, ecx
push edi
mov dword [ebp - 0x28], ebx
jae 0x10026b45
movss xmm0, dword [ebp + 0x14]
comiss xmm0, dword [ebp + 0x1c]
jae 0x10026b45
cmp ebx, 3
jl 0x10026b45
mov eax, dword [ebp + 0xc]
add eax, eax
call fcn.1004a950
mov eax, dword [ebp + 0xc]
mov edi, esp
add eax, edi
mov dword [ebp - 0x44], edi
mov dword [ebp - 0x40], eax
or ch, 0xff
xor ah, ah
xor edx, edx
nop
movss xmm0, dword [esi + edx*8 + 4]
movss xmm2, dword [ebp + 0x14]
comiss xmm2, xmm0
movss xmm1, dword [esi + edx*8]
setbe cl
dec cl
and cl, 4
comiss xmm0, dword [ebp + 0x1c]
movss xmm0, dword [ebp + 0x10]
setbe al
dec al
and al, 8
or cl, al
comiss xmm0, xmm1
seta al
or cl, al
comiss xmm1, dword [ebp + 0x18]
setbe al
dec al
and al, 2
or cl, al
mov byte [edi + edx], cl
and ch, cl
inc edx
or ah, cl
cmp edx, ebx
jl 0x100267e0
mov byte [ebp - 5], ah
test ch, ch
jne 0x10026b45
test ah, ah
jne 0x10026870
cmp dword [ebp + 0xc], ebx
jl 0x10026b2e
lea eax, [ebx*8]
push eax
push esi
push dword [ebp + 8]
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov eax, ebx
lea esp, [ebp - 0x50]
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.10049846
mov esp, ebp
pop ebp
ret
mov edi, dword [ebp + 0xc]
mov eax, edi
shl eax, 4
call fcn.1004a950
mov ecx, esp
mov dword [ebp - 0x30], ecx
lea eax, [ecx + edi*8]
mov dword [ebp - 0x2c], eax
lea eax, [ebx*8]
push eax
push esi
push ecx
call sub.VCRUNTIME140.dll_memcpy
movzx esi, byte [ebp - 5]
add esp, 0xc
xor eax, eax
mov dword [ebp - 0x3c], esi
xor ecx, ecx
mov dword [ebp - 0x14], ecx
nop dword [eax + eax]
mov edx, 1
mov dword [ebp - 0x38], eax
shl edx, cl
mov dword [ebp - 0x18], edx
test edx, esi
je 0x10026a95
lea ecx, [eax*4]
mov dword [ebp - 0x24], 0
mov esi, dword [ebp + ecx - 0x30]
lea eax, [ebp - 0x2c]
sub eax, ecx
mov eax, dword [eax]
mov edx, eax
mov dword [ebp - 0x34], eax
lea eax, [edx + edi*8]
mov dword [ebp - 0xc], eax
mov eax, dword [ebp + ecx - 0x44]
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x40]
sub eax, ecx
mov ecx, dword [ebp - 0x10]
mov edi, dword [eax]
lea eax, [ebx - 1]
lea eax, [esi + eax*8]
mov dword [ebp - 0x20], eax
mov al, byte [ecx + ebx - 1]
mov byte [ebp - 5], al
test ebx, ebx
jle 0x10026a79
mov bh, al
mov bl, byte [ecx]
inc ecx
movzx eax, bl
and eax, dword [ebp - 0x18]
mov dword [ebp - 0x10], ecx
mov dword [ebp - 0x1c], eax
movzx ecx, bl
movzx eax, bh
xor ecx, eax
test dword [ebp - 0x18], ecx
jne 0x10026958
cmp dword [ebp - 0x1c], 0
jne 0x10026a60
cmp edx, dword [ebp - 0xc]
jae 0x10026b2e
mov eax, dword [esi]
mov ecx, dword [esi + 4]
mov dword [edx], eax
mov dword [edx + 4], ecx
add edx, 8
mov byte [edi], bl
inc edi
jmp 0x10026a60
mov eax, dword [ebp - 0x20]
xorps xmm1, xmm1
movss xmm0, dword [esi]
xorps xmm2, xmm2
movss xmm3, dword [esi + 4]
movss xmm4, dword [eax]
movss xmm5, dword [eax + 4]
mov eax, dword [ebp - 0x14]
cmp eax, 3
ja case.default.0x1002697b
jmp dword [eax*4 + 0x10026b5c]
movss xmm1, dword [ebp + 0x10]
subss xmm0, xmm4
movaps xmm2, xmm1
subss xmm3, xmm5
subss xmm2, xmm4
divss xmm2, xmm0
mulss xmm2, xmm3
addss xmm2, xmm5
jmp case.default.0x1002697b
movss xmm1, dword [ebp + 0x18]
subss xmm0, xmm4
movaps xmm2, xmm1
subss xmm3, xmm5
subss xmm2, xmm4
divss xmm2, xmm0
mulss xmm2, xmm3
addss xmm2, xmm5
jmp case.default.0x1002697b
movss xmm2, dword [ebp + 0x14]
jmp 0x100269d2
movss xmm2, dword [ebp + 0x1c]
movaps xmm1, xmm2
subss xmm3, xmm5
subss xmm1, xmm5
subss xmm0, xmm4
divss xmm1, xmm3
mulss xmm1, xmm0
addss xmm1, xmm4
cmp edx, dword [ebp - 0xc]
jae 0x10026b2e
movss dword [edx], xmm1
movss dword [edx + 4], xmm2
add edx, 8
movss xmm0, dword [ebp + 0x14]
comiss xmm0, xmm2
movss xmm0, dword [ebp + 0x10]
setbe cl
dec cl
and cl, 4
comiss xmm2, dword [ebp + 0x1c]
setbe al
dec al
and al, 8
or cl, al
comiss xmm0, xmm1
seta al
or cl, al
comiss xmm1, dword [ebp + 0x18]
setbe al
dec al
and al, 2
or cl, al
mov byte [edi], cl
inc edi
cmp dword [ebp - 0x1c], 0
jne 0x10026a5b
cmp edx, dword [ebp - 0xc]
jae 0x10026b2e
mov eax, dword [esi]
mov ecx, dword [esi + 4]
mov dword [edx], eax
mov dword [edx + 4], ecx
add edx, 8
mov byte [edi], bl
inc edi
mov byte [ebp - 5], bl
mov bh, bl
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x20], esi
add esi, 8
mov dword [ebp - 0x24], eax
cmp eax, dword [ebp - 0x28]
jl 0x10026914
mov ecx, dword [ebp - 0x14]
mov ebx, edx
sub ebx, dword [ebp - 0x34]
mov eax, 1
mov edi, dword [ebp + 0xc]
mov esi, dword [ebp - 0x3c]
sar ebx, 3
sub eax, dword [ebp - 0x38]
mov dword [ebp - 0x28], ebx
inc ecx
mov dword [ebp - 0x14], ecx
cmp ecx, 4
jl 0x100268b0
cmp ebx, 3
jl 0x10026b45
mov eax, dword [ebp + eax*4 - 0x30]
xor ecx, ecx
mov edx, dword [ebp + 8]
movss xmm6, dword [0x1005233c]
movss xmm4, dword [eax + ebx*8 - 8]
movss xmm5, dword [eax + ebx*8 - 4]
nop dword [eax + eax]
movss xmm2, dword [eax]
movss xmm3, dword [eax + 4]
movaps xmm1, xmm2
movaps xmm0, xmm3
subss xmm1, xmm4
subss xmm0, xmm5
mulss xmm1, xmm1
mulss xmm0, xmm0
addss xmm0, xmm1
comiss xmm6, xmm0
jae 0x10026b0a
movss dword [edx + ecx*8], xmm2
movaps xmm4, xmm2
movss dword [edx + ecx*8 + 4], xmm3
movaps xmm5, xmm3
inc ecx
add eax, 8
sub ebx, 1
jne 0x10026ad0
xor eax, eax
cmp ecx, 2
cmovg eax, ecx
lea esp, [ebp - 0x50]
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.10049846
mov esp, ebp
pop ebp
ret
or eax, 0xffffffff
lea esp, [ebp - 0x50]
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.10049846
mov esp, ebp
pop ebp
ret
xor eax, eax
lea esp, [ebp - 0x50]
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.10049846
mov esp, ebp
pop ebp
ret