Function at 0x436690
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x14
mov esi, dword [ebp + 0x14]
mov edi, dword [ebp + 0xc]
call fcn.0041d3e0
sub esp, 8
mov edx, esp
push eax
mov ebx, esp
test esi, esi
sets al
mov ecx, esi
sub ecx, 1
sete cl
or al, cl
sub esi, 0x25
setge cl
or al, cl
mov si, word [ebp + 8]
test al, 1
jne 0x4366cd
jmp 0x4366d2
jmp 0x4368e6
mov dword [ebp - 0x20], ebx
movsx ecx, si
cmp ecx, 0
setge byte [ebp - 0xd]
xor eax, eax
sub eax, ecx
cmp ecx, 0
jge 0x4366eb
mov si, ax
mov ebx, edi
mov eax, dword [ebp + 0x10]
add ebx, eax
add ebx, 0xffffffff
mov byte [edi + eax - 1], 0
movzx eax, si
cmp eax, 0
jne 0x436710
mov edi, ebx
add edi, 0xffffffff
mov byte [ebx - 1], 0x30
jmp 0x4368e4
mov eax, esi
mov esi, dword [ebp + 0x14]
cmp esi, 0xa
sete cl
test cl, 1
jne 0x436725
jmp 0x436837
mov dword [ebp - 0x18], edx
jmp 0x43672a
movzx ecx, ax
cmp ecx, 0x64
jb 0x43676a
mov esi, 0x64
mov eax, ecx
xor edx, edx
div esi
shl edx, 1
mov al, byte [edx + 0x44d761]
mov edi, ebx
add edi, 0xffffffff
mov byte [ebx - 1], al
mov al, byte [edx + 0x44d760]
add edi, 0xffffffff
mov byte [ebx - 2], al
mov esi, 0x64
mov eax, ecx
xor edx, edx
div esi
mov ebx, edi
jmp 0x43672a
cmp ecx, 0xa
jae 0x436786
mov al, byte [ecx + str.0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZ]
mov esi, ebx
add esi, 0xffffffff
mov byte [ebx - 1], al
mov edx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x20]
jmp 0x4367c5
mov eax, ecx
xor eax, 0xffffffff
and eax, 2
mov edx, ecx
and edx, 0xfffffffd
imul edx, eax
mov eax, ecx
and eax, 2
or ecx, 2
imul ecx, eax
add ecx, edx
mov al, byte [ecx + 0x44d761]
mov esi, ebx
add esi, 0xffffffff
mov byte [ebx - 1], al
mov al, byte [ecx + 0x44d760]
add esi, 0xffffffff
mov byte [ebx - 2], al
mov edx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x20]
test byte [ebp - 0xd], 1
je 0x4367d2
mov edi, esi
jmp 0x4368e4
mov al, byte [eax]
mov byte [ebp - 0x1c], al
mov byte [edx], 0xb3
mov eax, 1
mov byte [edx + eax], 0
add eax, 1
cmp eax, 7
jne 0x4367df
mov dword [ebp - 0x14], 0
mov eax, dword [ebp - 0x14]
cmp eax, 7
jae 0x436828
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x14]
movzx ecx, byte [edx + ecx]
sub esp, 8
mov dword [esp + 4], eax
mov dword [esp], ecx
call fcn.0043bc70
mov edx, dword [ebp - 0x18]
add esp, 8
mov ecx, dword [ebp - 0x14]
mov byte [edx + ecx], al
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
jmp 0x4367f2
mov al, byte [edx]
mov edi, esi
add edi, 0xffffffff
mov byte [esi - 1], al
jmp 0x4368e4
cmp esi, 0x10
je 0x43683e
jmp 0x4368b6
mov esi, eax
jmp 0x436842
movzx esi, si
cmp esi, 0x100
jl 0x436879
mov eax, esi
and eax, 0xff
shl eax, 1
mov cl, byte [eax + 0x44d82a]
mov edx, ebx
add edx, 0xffffffff
mov byte [ebx - 1], cl
mov al, byte [eax + str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
add edx, 0xffffffff
mov byte [ebx - 2], al
shr esi, 8
mov ebx, edx
jmp 0x436842
cmp esi, 0x10
setl al
test al, 1
jne 0x436885
jmp 0x436896
mov al, byte [esi + str.0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZ]
mov edi, ebx
add edi, 0xffffffff
mov byte [ebx - 1], al
jmp 0x4368e4
shl esi, 1
mov al, byte [esi + 0x44d82a]
mov edi, ebx
add edi, 0xffffffff
mov byte [ebx - 1], al
mov al, byte [esi + str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
add edi, 0xffffffff
mov byte [ebx - 2], al
jmp 0x4368e4
movzx ecx, ax
cmp ecx, 0
jbe 0x4368e0
mov eax, ecx
xor edx, edx
div esi
mov al, byte [edx + str.0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZ]
mov edi, ebx
add edi, 0xffffffff
mov byte [ebx - 1], al
mov eax, ecx
xor edx, edx
div esi
mov ebx, edi
mov esi, dword [ebp + 0x14]
jmp 0x4368b6
mov edi, ebx
jmp 0x4368e4
jmp 0x4368e6
mov eax, edi
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret