Function at 0x4092d0
Capabilities:
Encrypt data using rc4 ksa

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffffe4
mov eax, dword [sym.Keygen.EXE__mr_mip]
push ebx
push esi
push edi
cmp dword [eax + 0x230], 0
mov ebx, dword [ebp + 0x10]
je 0x4092f1
xor eax, eax
jmp 0x409547
mov edx, dword [ebp + 0xc]
push edx
call sym.Keygen.EXE__size
pop ecx
test eax, eax
je 0x40930b
cmp dword [ebp + 8], 0
jg 0x409312
cmp dword [ebp + 0x14], 0
je 0x409312
xor eax, eax
jmp 0x409547
mov edx, dword [sym.Keygen.EXE__mr_mip]
inc dword [edx + 0x20]
mov eax, dword [sym.Keygen.EXE__mr_mip]
mov edx, dword [eax + 0x20]
cmp edx, 0x18
jge 0x409344
mov dword [eax + edx*4 + 0x24], 0x8d
mov ecx, dword [sym.Keygen.EXE__mr_mip]
cmp dword [ecx + 0x244], 0
je 0x409344
call sym.Keygen.EXE__mr_track
mov eax, dword [ebp + 0xc]
push eax
call sym.Keygen.EXE__mr_lzero
pop ecx
mov edx, dword [sym.Keygen.EXE__mr_mip]
cmp dword [edx], 0
jne 0x40947e
mov dword [ebp - 4], 4
mov ecx, dword [ebp + 0xc]
mov eax, dword [ecx]
and eax, 0x7fffffff
mov dword [ebp - 8], eax
dec dword [ebp - 8]
mov edx, dword [ebp - 8]
imul edx, dword [ebp - 4]
mov dword [ebp - 0xc], edx
mov ecx, dword [ebp + 0xc]
mov eax, dword [ecx + 4]
mov edx, dword [ebp - 8]
mov eax, dword [eax + edx*4]
xor esi, esi
test eax, eax
je 0x40939b
inc esi
shr eax, 8
inc dword [ebp - 0xc]
test eax, eax
jne 0x409390
mov eax, esi
mov ecx, dword [ebp - 4]
cdq
idiv ecx
cmp dword [ebp + 8], 0
mov esi, edx
jle 0x4093cb
mov eax, dword [ebp - 0xc]
cmp eax, dword [ebp + 8]
jle 0x4093cb
push 0xe
call sym.Keygen.EXE__mr_berror
pop ecx
mov edx, dword [sym.Keygen.EXE__mr_mip]
dec dword [edx + 0x20]
xor eax, eax
jmp 0x409547
cmp dword [ebp + 0x14], 0
je 0x4093ef
mov edx, dword [ebp + 8]
mov eax, ebx
sub edx, dword [ebp - 0xc]
mov dword [ebp - 0x10], edx
xor edx, edx
cmp edx, dword [ebp - 0x10]
jge 0x4093f4
mov byte [eax], 0
inc edx
inc eax
cmp edx, dword [ebp - 0x10]
jl 0x4093e3
jmp 0x4093f4
xor ecx, ecx
mov dword [ebp - 0x10], ecx
test esi, esi
je 0x40942e
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp - 8]
mov edx, dword [eax + 4]
mov eax, dword [edx + ecx*4]
lea edx, [esi - 1]
dec dword [ebp - 8]
mov edi, dword [ebp - 0x10]
lea ecx, [ebx + edx]
add ecx, edi
test edx, edx
mov dword [ebp - 0x18], ecx
jl 0x40942e
mov edi, dword [ebp - 0x18]
mov ecx, eax
and cl, 0xff
dec edx
mov byte [edi], cl
dec dword [ebp - 0x18]
shr eax, 8
test edx, edx
jge 0x409419
mov edx, esi
mov eax, dword [ebp - 0x10]
lea ecx, [ebx + eax]
mov dword [ebp - 0x1c], ecx
cmp edx, dword [ebp - 0xc]
jge 0x409530
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax + 4]
mov eax, dword [ebp - 8]
mov eax, dword [ecx + eax*4]
dec dword [ebp - 8]
mov ecx, dword [ebp - 4]
mov ebx, dword [ebp - 0x1c]
add ebx, edx
dec ecx
test ecx, ecx
lea esi, [ebx + ecx]
jl 0x409471
mov ebx, eax
dec ecx
and bl, 0xff
mov byte [esi], bl
dec esi
shr eax, 8
test ecx, ecx
jge 0x409461
add edx, dword [ebp - 4]
cmp edx, dword [ebp - 0xc]
jl 0x409442
jmp 0x409530
mov eax, dword [sym.Keygen.EXE__mr_mip]
mov edx, dword [eax + 0x1d8]
push edx
mov ecx, dword [ebp + 0xc]
push ecx
call sym.Keygen.EXE__copy
add esp, 8
xor eax, eax
mov dword [ebp - 0xc], eax
mov esi, dword [sym.Keygen.EXE__mr_mip]
cmp dword [esi + 0x230], 0
jne 0x409530
mov eax, dword [esi + 0x1d8]
push eax
call sym.Keygen.EXE__size
pop ecx
test eax, eax
jne 0x4094cd
cmp dword [ebp + 0x14], 0
je 0x409530
mov edx, dword [ebp - 0xc]
cmp edx, dword [ebp + 8]
je 0x409530
cmp dword [ebp + 8], 0
jle 0x4094ef
mov ecx, dword [ebp - 0xc]
cmp ecx, dword [ebp + 8]
jl 0x4094ef
push 0xe
call sym.Keygen.EXE__mr_berror
pop ecx
mov eax, dword [sym.Keygen.EXE__mr_mip]
dec dword [eax + 0x20]
xor eax, eax
jmp 0x409547
mov edx, dword [sym.Keygen.EXE__mr_mip]
mov esi, dword [edx + 0x1d8]
push esi
push pe_nt_image_headers32
push esi
call sym.Keygen.EXE__subdiv
add esp, 0xc
mov byte [ebp - 0x11], al
mov edx, dword [ebp - 0xc]
lea eax, [ebx + edx - 1]
test edx, edx
jle 0x409523
mov cl, byte [eax]
dec edx
mov byte [eax + 1], cl
dec eax
test edx, edx
jg 0x409518
mov al, byte [ebp - 0x11]
mov byte [ebx], al
inc dword [ebp - 0xc]
jmp 0x40949b
mov edx, dword [sym.Keygen.EXE__mr_mip]
dec dword [edx + 0x20]
cmp dword [ebp + 0x14], 0
je 0x409544
mov eax, dword [ebp + 8]
jmp 0x409547
mov eax, dword [ebp - 0xc]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret