Function at 0x402670
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x14
mov ebp, dword [ecx]
xor eax, eax
cmp byte [ebp], 0x22
jne 0x40290d
mov esi, ebp
jmp 0x40269f
lea esi, [ebx + 2]
mov dword [ecx], esi
cmp byte [ebx + 2], 0
je 0x40290d
mov ebx, esi
inc esi
mov dword [ecx], esi
movzx edi, byte [ebx + 1]
cmp edi, 0x5c
je 0x402690
test edi, edi
je 0x40290d
cmp edi, 0x22
jne 0x40269f
mov dword [esp + 4], edx
add ebx, 2
mov dword [ecx], ebx
mov edi, ebp
sub ebx, ebp
lea eax, [ebx - 1]
push eax
call dword [0x444004]
add esp, 4
mov dword [esp], eax
test eax, eax
je case.0x402727.35
mov esi, dword [esp]
add ebx, 0xfffffffe
je 0x4028c3
movzx eax, byte [edi + 1]
mov esi, dword [esp]
test al, al
je 0x4028c3
mov ebp, edi
inc ebp
mov esi, dword [esp]
mov dword [esp + 8], ebp
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
cmp al, 0x5c
jne 0x402740
movzx eax, byte [ebp + 1]
add eax, 0xffffffde
cmp eax, 0x53
ja case.0x402727.35
lea edi, [ebp + 1]
jmp dword [eax*4 + 0x4416bc]
mov byte [esi], 0x22
jmp 0x40274c
cmp al, 0x20
jb case.0x402727.35
mov byte [esi], al
mov edi, ebp
inc esi
movzx eax, byte [edi + 1]
test al, al
mov edx, dword [esp + 8]
je 0x4028c3
inc edi
mov ecx, edi
sub ecx, edx
mov ebp, edi
cmp ecx, ebx
jb 0x402710
jmp 0x4028c3
mov byte [esi], 0xa
jmp 0x40274c
mov byte [esi], 0x2f
jmp 0x40274c
mov byte [esi], 8
jmp 0x40274c
lea ecx, [ebp + 2]
lea edx, [esp + 0x10]
call fcn.00402920
test eax, eax
jne case.0x402727.35
mov edx, dword [esp + 0x10]
cmp edx, 0x7f
ja 0x4027b1
mov byte [esi], dl
jmp 0x402806
mov byte [esi], 0x5c
jmp 0x40274c
mov byte [esi], 0xd
jmp 0x40274c
mov byte [esi], 0xc
jmp 0x40274c
mov byte [esi], 9
jmp 0x40274c
cmp edx, 0x7ff
ja 0x4027ce
mov eax, edx
shr eax, 6
or al, 0xc0
mov byte [esi], al
and dl, 0x3f
or dl, 0x80
mov byte [esi + 1], dl
inc esi
jmp 0x402806
lea eax, [edx - 0xe000]
cmp eax, 0xfffff7ff
ja 0x402815
mov eax, edx
shr eax, 0xc
and al, 0xf
or al, 0xe0
mov byte [esi], al
mov eax, edx
shr eax, 6
mov ecx, eax
xor ecx, 0x40
or eax, 0x3f
and eax, ecx
or al, 0x80
mov byte [esi + 1], al
and dl, 0x3f
or dl, 0x80
mov byte [esi + 2], dl
add esi, 2
mov eax, 1
add edi, eax
add edi, 3
jmp 0x40274c
cmp edx, 0xdbff
ja case.0x402727.35
cmp byte [ebp + 6], 0x5c
jne case.0x402727.35
cmp byte [ebp + 7], 0x75
jne case.0x402727.35
add ebp, 8
mov ecx, ebp
mov ebp, edx
lea edx, [esp + 0xc]
call fcn.00402920
test eax, eax
jne case.0x402727.35
mov ecx, dword [esp + 0xc]
cmp ecx, 0xdc00
jb case.0x402727.35
cmp ecx, 0xdfff
ja case.0x402727.35
mov edx, ebp
shl edx, 0xa
mov eax, edx
mov edx, ecx
and edx, 0x3ff
lea ebp, [eax + edx]
add ebp, 0xfca00000
add eax, edx
add eax, 0xfca10000
mov edx, eax
shr edx, 0x12
or dl, 0xf0
mov byte [esi], dl
shr eax, 0xc
and al, 0x3f
or al, 0x80
mov byte [esi + 1], al
mov eax, ebp
shr eax, 6
and al, 0x3f
or al, 0x80
mov byte [esi + 2], al
and cl, 0x3f
or cl, 0x80
mov byte [esi + 3], cl
add esi, 3
mov eax, 7
add edi, eax
add edi, 3
jmp 0x40274c
mov byte [esi], 0
sub esi, dword [esp]
lea edi, [esi + 1]
push edi
call dword [0x444004]
add esp, 4
test eax, eax
je case.0x402727.35
push edi
mov ebx, dword [esp + 4]
push ebx
push eax
mov edi, eax
call fcn.00409580
add esp, 0xc
mov eax, dword [esp + 4]
mov dword [eax], esi
push ebx
call dword [section..data]
add esp, 4
mov eax, edi
jmp 0x40290d
push dword [esp]
call dword [section..data]
add esp, 4
xor eax, eax
add esp, 0x14
pop esi
pop edi
pop ebx
pop ebp
ret