Function at 0x435e80
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x34
mov eax, dword [esp + 0x4c]
mov ebp, dword [esp + 0x48]
mov ecx, 0xfffffffe
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
cmp word [eax + ecx + 2], 0
lea ecx, [ecx + 2]
jne 0x435ea0
sar ecx, 1
mov edx, ecx
and edx, 2
mov edi, ecx
or ecx, 2
imul ecx, edx
xor edx, 2
and edi, 0xfffd
imul edi, edx
lea edx, [edi + ecx]
mov word [esp + 0x28], dx
add ecx, edi
add ecx, 2
mov word [esp + 0x2a], cx
mov dword [esp + 0x2c], eax
mov ecx, dword [0x443d28]
mov ebx, 0xffffffff
test ecx, ecx
je 0x43613d
mov eax, dword [0x443d2c]
add eax, 8
nop
nop
nop
nop
nop
nop
nop
nop
nop
cmp dword [eax - 8], 0x15bd542c
je 0x435f14
add eax, 0xc
dec ecx
jne 0x435f00
jmp 0x43613d
mov byte [esp + 0x24], 0
mov dword [esp + 0x20], 0x900000c2
mov dword [esp + 0x1c], 0xd2ff0000
mov dword [esp + 0x18], 0xba00
mov dword [esp + 0x14], 0xb8
mov eax, dword [eax]
mov dword [esp + 0x15], eax
mov eax, dword [0x443d30]
mov dword [esp + 0x1a], eax
mov word [esp + 0x21], 0x18
mov dword [esp], 0
mov dword [esp + 0x10], 0x10
lea eax, [esp + 0x10]
mov esi, esp
push 0x40
push 0x3000
push eax
push 0
push esi
push 0xffffffffffffffff
call dword [0x443d34]
mov edi, dword [esp]
mov edx, ebp
lea ebp, [esp + 0x14]
mov eax, ebp
mov ecx, 4
xchg esi, eax
rep movsd dword es:[edi], dword [esi]
xchg esi, eax
lea ecx, [esp + 8]
lea eax, [esp + 0x28]
push ecx
push 0
push 0
push 2
push eax
push edx
call dword [esp + 0x18]
mov ebx, eax
mov dword [esp + 0xc], 0
lea eax, [esp + 0xc]
push 0x8000
push eax
push esi
push 0xffffffffffffffff
call dword [0x443d38]
cmp ebx, 0xc0000023
jne 0x43613d
push dword [esp + 8]
call fcn.00430260
add esp, 4
mov edi, eax
mov ecx, dword [0x443d28]
mov ebx, 0xffffffff
test ecx, ecx
je 0x436134
mov esi, dword [esp + 8]
mov edx, dword [0x443d2c]
add edx, 8
nop
nop
nop
nop
nop
nop
nop
nop
nop
cmp dword [edx - 8], 0x15bd542c
je 0x436014
add edx, 0xc
dec ecx
jne 0x436000
jmp 0x436134
mov dword [esp + 0x30], eax
mov byte [esp + 0x24], 0
mov dword [esp + 0x20], 0x900000c2
mov dword [esp + 0x1c], 0xd2ff0000
mov dword [esp + 0x18], 0xba00
mov dword [esp + 0x14], 0xb8
mov eax, dword [edx]
mov dword [esp + 0x15], eax
mov eax, dword [0x443d30]
mov dword [esp + 0x1a], eax
mov word [esp + 0x21], 0x18
mov dword [esp], 0
mov dword [esp + 0x10], 0x10
push 0x40
push 0x3000
lea eax, [esp + 0x18]
push eax
push 0
mov ebx, esi
lea esi, [esp + 0x10]
push esi
push 0xffffffffffffffff
call dword [0x443d34]
mov dword [esp + 4], edi
mov edi, dword [esp]
mov ecx, 4
xchg esi, ebp
rep movsd dword es:[edi], dword [esi]
xchg esi, ebp
mov edi, dword [esp + 4]
lea eax, [esp + 8]
push eax
push ebx
push edi
push 2
lea eax, [esp + 0x38]
push eax
push dword [esp + 0x5c]
call dword [esp + 0x18]
mov ebx, eax
mov dword [esp + 0xc], 0
push 0x8000
lea eax, [esp + 0x10]
push eax
push esi
push 0xffffffffffffffff
call dword [0x443d38]
test ebx, ebx
js 0x436134
mov ecx, dword [esp + 0x50]
test ecx, ecx
je 0x4360d9
mov eax, dword [edi + 4]
mov dword [ecx], eax
mov esi, edi
mov ebp, dword [esp + 0x58]
test ebp, ebp
mov ebp, dword [esp + 0x30]
mov edi, dword [esp + 0x54]
je 0x436118
test edi, edi
je 0x436129
mov eax, dword [esp + 0x58]
mov ecx, dword [eax]
mov eax, dword [esi + 8]
cmp ecx, eax
jb 0x4360fe
mov ecx, eax
add ebp, 0xc
mov eax, ecx
and eax, 3
je 0x43611c
cmp eax, 2
jne 0x436147
shr ecx, 1
xchg esi, ebp
rep movsw word es:[edi], word [esi]
xchg esi, ebp
jmp 0x436125
mov edi, esi
jmp 0x436134
shr ecx, 2
xchg esi, ebp
rep movsd dword es:[edi], dword [esi]
xchg esi, ebp
mov esi, dword [esp + 4]
mov edi, esi
mov eax, dword [esi + 8]
mov ecx, dword [esp + 0x58]
mov dword [ecx], eax
push edi
call fcn.004302c0
add esp, 4
mov eax, ebx
add esp, 0x34
pop esi
pop edi
pop ebx
pop ebp
ret
test ecx, ecx
je 0x436129
mov esi, ecx
and esi, 7
je 0x43616b
xor edx, edx
movzx eax, byte [ebp + edx]
mov byte [edi + edx], al
inc edx
cmp esi, edx
jne 0x436154
add edi, edx
mov eax, ecx
sub eax, edx
add ebp, edx
jmp 0x43616d
mov eax, ecx
cmp ecx, 8
mov esi, dword [esp + 4]
jb 0x436129
xor ecx, ecx
movzx edx, byte [ebp + ecx]
mov byte [edi + ecx], dl
movzx edx, byte [ebp + ecx + 1]
mov byte [edi + ecx + 1], dl
movzx edx, byte [ebp + ecx + 2]
mov byte [edi + ecx + 2], dl
movzx edx, byte [ebp + ecx + 3]
mov byte [edi + ecx + 3], dl
movzx edx, byte [ebp + ecx + 4]
mov byte [edi + ecx + 4], dl
movzx edx, byte [ebp + ecx + 5]
mov byte [edi + ecx + 5], dl
movzx edx, byte [ebp + ecx + 6]
mov byte [edi + ecx + 6], dl
movzx edx, byte [ebp + ecx + 7]
mov byte [edi + ecx + 7], dl
add ecx, 8
cmp eax, ecx
jne 0x436178
jmp 0x436129