Function at 0x436080
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0x28
mov edi, ecx
mov dword [esp + 8], 0
mov dword [esp + 0x10], 0x68696e6f
mov dword [esp + 0x14], 0
mov byte [esp + 0x18], 0
mov dword [esp], 0
mov eax, dword [esp]
cmp eax, 8
ja 0x43610a
nop
nop
nop
nop
nop
nop
mov eax, dword [esp]
mov ecx, dword [esp]
movzx ecx, byte [esp + ecx + 0x10]
lea edx, [eax + 0x12]
and edx, ecx
mov esi, 0x70fbf8ed
sub esi, eax
or esi, ecx
not esi
add esi, ecx
sub esi, edx
mov dword [esp + 0xc], esi
mov eax, dword [esp + 0xc]
mov ecx, eax
or ecx, 0x81
and eax, 0x81
add eax, ecx
inc al
mov ecx, dword [esp]
mov byte [esp + ecx + 0x10], al
inc dword [esp]
mov eax, dword [esp]
cmp eax, 9
jb 0x4360c0
mov ebx, dword [esp + 0x10]
mov eax, dword [0x449c68]
test eax, eax
je 0x436156
xor ecx, ecx
mov edx, dword [0x449c6c]
nop
cmp dword [edx + ecx*8], 0xe4aa2089
je 0x436130
inc ecx
cmp eax, ecx
jne 0x436120
jmp 0x436156
mov eax, dword [edx + ecx*8 + 4]
cmp eax, ebx
je 0x436156
lea ecx, [esp + 8]
push ecx
push 0
push 0
push 5
push 4
push dword [0x449c70]
push eax
call fcn.00437ca0
add esp, 0x1c
mov ebx, eax
cmp ebx, 0xc0000004
jne 0x4362c3
mov dword [esp + 0x20], edi
push dword [esp + 8]
call fcn.00435e30
add esp, 4
mov dword [esp + 4], eax
mov eax, dword [esp + 8]
mov dword [esp + 0x10], 0x68696e6f
mov dword [esp + 0x14], 0
mov byte [esp + 0x18], 0
mov dword [esp], 0
mov ecx, dword [esp]
cmp ecx, 8
ja 0x4361eb
nop
nop
mov ecx, dword [esp]
mov edx, dword [esp]
movzx edx, byte [esp + edx + 0x10]
lea esi, [ecx + 0x12]
and esi, edx
mov edi, 0x70fbf8ed
sub edi, ecx
or edi, edx
not edi
add edi, edx
sub edi, esi
mov dword [esp + 0xc], edi
mov ecx, dword [esp + 0xc]
mov edx, ecx
or edx, 0x81
and ecx, 0x81
add ecx, edx
inc cl
mov edx, dword [esp]
mov byte [esp + edx + 0x10], cl
inc dword [esp]
mov ecx, dword [esp]
cmp ecx, 9
jb 0x4361a0
mov ebx, dword [esp + 0x10]
mov ecx, dword [0x449c68]
test ecx, ecx
je 0x436244
xor edx, edx
mov esi, dword [0x449c6c]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
cmp dword [esi + edx*8], 0xe4aa2089
je 0x436220
inc edx
cmp ecx, edx
jne 0x436210
jmp 0x436244
mov ecx, dword [esi + edx*8 + 4]
cmp ecx, ebx
je 0x436244
push 0
push eax
push dword [esp + 0xc]
push 5
push 4
push dword [0x449c70]
push ecx
call fcn.00437ca0
add esp, 0x1c
mov ebx, eax
test ebx, ebx
js 0x4362b7
mov eax, dword [ebp + 8]
mov ecx, dword [esp + 4]
mov edx, dword [ecx]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov ebx, dword [ecx + edx + 0x3c]
add ecx, edx
xor esi, esi
nop
nop
nop
nop
nop
nop
nop
nop
movzx edx, word [ebx + esi]
movzx edi, word [eax + esi]
test edx, edx
je 0x436284
add esi, 2
cmp dx, di
je 0x436270
movzx esi, di
mov edi, esi
not edi
and edi, edx
add edi, edi
xor esi, edx
cmp edi, esi
je 0x4362a2
mov edx, dword [ecx]
test edx, edx
jne 0x436260
mov ebx, 0xc0000225
jmp 0x4362b7
mov eax, dword [ecx + 0x44]
mov edx, dword [esp + 0x20]
mov dword [edx + 4], eax
mov eax, dword [ecx + 0xdc]
mov dword [edx + 8], eax
xor ebx, ebx
push dword [esp + 4]
call fcn.00435fa0
add esp, 4
mov eax, ebx
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret 4