Function at 0x422870
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffffe4
push ebx
push esi
push edi
mov dword [ebp - 4], ecx
mov ebx, eax
xor eax, eax
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x14], eax
mov eax, dword [ebx + 0x14]
movzx edx, byte [eax + 0x471]
movzx ecx, dl
cmp ecx, 6
ja case.0x42290a.0
jmp dword [ecx*4 + 0x4228a3]
movzx edx, byte [eax + 0x470]
sub dl, 8
je 0x4228d5
sub dl, 8
je 0x4228e4
jmp case.0x42290a.0
mov dword [ebp - 0x14], ebx
mov dword [ebp - 0x18], 0x422540
jmp case.0x42290a.0
mov dword [ebp - 0x14], ebx
mov dword [ebp - 0x18], 0x422594
jmp case.0x42290a.0
movzx ecx, byte [eax + 0x470]
cmp ecx, 0x10
ja case.0x42290a.0
movzx ecx, byte [ecx + 0x422911]
jmp dword [ecx*4 + 0x422922]
mov dword [ebp - 0x14], ebx
mov dword [ebp - 0x18], 0x422634
jmp case.0x42290a.0
cmp dl, 3
jne 0x42294f
mov dword [ebp - 0x14], ebx
mov dword [ebp - 0x18], 0x422688
jmp case.0x42290a.0
mov dword [ebp - 0x14], ebx
mov dword [ebp - 0x18], 0x422644
jmp case.0x42290a.0
mov dword [ebp - 0x14], ebx
mov dword [ebp - 0x18], 0x4226cc
jmp case.0x42290a.0
movzx edx, byte [eax + 0x470]
sub dl, 8
je 0x42297a
sub dl, 8
je 0x422986
jmp case.0x42290a.0
mov dword [ebp - 0x14], ebx
mov dword [ebp - 0x18], 0x4226f8
jmp case.0x42290a.0
mov dword [ebp - 0x14], ebx
mov dword [ebp - 0x18], 0x42275c
jmp case.0x42290a.0
movzx edx, byte [eax + 0x470]
sub dl, 8
je 0x4229a5
sub dl, 8
je 0x4229b1
jmp case.0x42290a.0
mov dword [ebp - 0x14], ebx
mov dword [ebp - 0x18], 0x42280c
jmp case.0x42290a.0
mov dword [ebp - 0x14], ebx
mov dword [ebp - 0x18], 0x422834
mov edx, dword [eax + 0x458]
test edx, edx
je 0x4229ca
mov dword [ebp - 0xc], edx
jmp 0x4229cf
xor edx, edx
mov dword [ebp - 0xc], edx
mov edx, dword [eax + 0x45c]
mov dword [ebp - 8], edx
mov edx, dword [eax + 0x450]
test edx, edx
je 0x4229e6
mov esi, edx
jmp 0x4229e8
xor esi, esi
mov eax, dword [ebx + 0x1c]
dec eax
test eax, eax
jb 0x422ac3
inc eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebx + 0x20]
inc eax
push eax
lea eax, [ebx + 0x4c]
push eax
mov eax, dword [ebp + 8]
push eax
movzx eax, byte [ebx + 0x48]
mov ecx, dword [ebx + eax*4 + 0x40]
mov edx, dword [ebp - 4]
mov eax, ebx
call fcn.004218bc
sub eax, 0xffffffff
je 0x422a24
dec eax
jne 0x422a73
jmp 0x422ac3
mov eax, dword [ebx + 0x14]
mov edx, dword [eax + 0x47c]
imul edx, dword [ebx + 0x1c]
mov eax, dword [eax + 0x458]
call fcn.00402228
mov eax, dword [ebx + 0x14]
mov eax, dword [eax + 0x45c]
test eax, eax
je 0x422a55
mov edx, dword [ebx + 0x18]
imul edx, dword [ebx + 0x1c]
call fcn.00402228
mov edx, dword [ebx + 0x14]
mov eax, dword [edx + 0x450]
test eax, eax
je 0x422ac3
mov edx, dword [edx + 0x47c]
imul edx, dword [ebx + 0x1c]
call fcn.00402228
jmp 0x422ac3
mov eax, ebx
call fcn.00422acc
mov eax, dword [ebp - 8]
push eax
push esi
movzx eax, byte [ebx + 0x48]
mov eax, dword [ebx + eax*4 + 0x40]
lea edx, [eax + 1]
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x14]
call dword [ebp - 0x18]
movzx eax, byte [ebx + 0x48]
xor al, 1
mov byte [ebx + 0x48], al
mov eax, dword [ebx + 0x14]
mov eax, dword [eax + 0x47c]
add dword [ebp - 0xc], eax
test esi, esi
je 0x422aae
add esi, eax
cmp dword [ebp - 8], 0
je 0x422aba
mov eax, dword [ebx + 0x18]
add dword [ebp - 8], eax
dec dword [ebp - 0x1c]
jne 0x4229f8
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8