Function at 0x1036c8c0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1c
push esi
mov esi, ecx
push 9
mov dword [ebp - 0x1c], esi
call fcn.1036bf30
test eax, eax
je 0x1036cb31
push edi
mov dword [ebp - 0x10], 1
push ebx
mov al, byte [esi + 0x10c]
mov ecx, dword [esi + 0x14]
mov edx, dword [esi + 0xc]
mov edi, dword [esi + 0x10]
shr edx, cl
movzx ebx, al
mov byte [ebp - 1], al
mov eax, edx
and eax, 0xc0
mov dword [ebp - 8], ebx
movzx eax, byte [eax + ebx + 0x10b3ceb0]
sub edx, eax
mov ebx, edx
shl ebx, cl
movzx ecx, byte [esi + 0x10d]
mov dword [ebp - 0xc], ecx
mov ecx, dword [esi + 0x14]
cmp edi, ebx
jb 0x1036c968
mov edx, eax
sub edi, ebx
shl eax, cl
mov ecx, dword [ebp - 0xc]
mov dword [ebp - 0x18], eax
xor ecx, 1
mov dword [esi + 0xc], eax
mov eax, dword [ebp - 8]
mov dword [esi + 0x10], edi
mov dword [ebp - 0xc], ecx
test eax, eax
je 0x1036c954
mov al, byte [eax + 0x10b3ce30]
mov ecx, dword [ebp - 0x18]
mov byte [esi + 0x10c], al
jmp 0x1036c991
mov al, byte [ebp - 1]
mov byte [esi + 0x10d], cl
mov ecx, dword [ebp - 0x18]
mov byte [esi + 0x10c], al
jmp 0x1036c991
mov eax, dword [ebp - 0xc]
mov ecx, ebx
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 8]
mov dword [esi + 0xc], ebx
mov dword [ebp - 8], edi
mov al, byte [eax + 0x10b3ce70]
mov byte [esi + 0x10c], al
cmp edx, 0xff
jg 0x1036ca6e
bsr eax, edx
mov edx, dword [esi + 0x14]
mov ebx, ecx
add edx, 0xfffffff8
add eax, edx
mov edx, edi
mov dword [esi + 0x14], eax
jns 0x1036ca71
mov edx, dword [esi + 4]
add eax, 0x10
mov ecx, dword [esi]
mov dword [esi + 0x14], eax
mov eax, dword [esi + 8]
shl eax, 8
mov dword [ebp - 0x14], eax
lea eax, [edx + 2]
shl ebx, 0x10
mov dword [esi + 0xc], ebx
cmp eax, ecx
ja 0x1036ca32
movzx ecx, byte [edx]
movzx edx, byte [edx + 1]
mov dword [ebp - 8], ecx
add ecx, dword [ebp - 0x14]
shl ecx, 8
mov dword [esi + 4], eax
mov esi, dword [ebp - 0x1c]
cmp ecx, 0x300
jne 0x1036ca08
mov ecx, edx
mov dword [ebp - 8], ecx
cmp eax, dword [esi]
jae 0x1036c9ff
movzx edx, byte [eax]
inc eax
shl ecx, 8
mov dword [esi + 4], eax
add ecx, edx
jmp 0x1036ca56
xor edx, edx
shl ecx, 8
add ecx, edx
jmp 0x1036ca56
and ecx, 0xffffff
add ecx, edx
cmp ecx, 3
jne 0x1036ca56
cmp eax, dword [esi]
jae 0x1036ca28
movzx edx, byte [eax]
inc eax
mov dword [esi + 4], eax
lea ecx, [edx + 0x300]
jmp 0x1036ca56
xor edx, edx
lea ecx, [edx + 0x300]
jmp 0x1036ca56
cmp edx, ecx
jae 0x1036ca3b
movzx eax, byte [edx]
jmp 0x1036ca3d
xor eax, eax
mov dword [ebp - 0x18], eax
xor edx, edx
add eax, dword [ebp - 0x14]
mov dword [esi + 4], ecx
xor ecx, ecx
cmp eax, 3
mov eax, ecx
cmovne eax, dword [ebp - 0x18]
mov dword [ebp - 8], eax
shl edi, 8
add edi, dword [ebp - 8]
shl edi, 8
movzx eax, cx
mov dword [esi + 8], eax
lea eax, [edi + edx]
mov dword [ebp - 8], eax
mov dword [esi + 0x10], eax
mov edx, dword [ebp - 8]
cmp dword [ebp - 0xc], 0
je 0x1036caf4
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp eax, 5
jne 0x1036c8e4
push 6
mov ecx, esi
call fcn.1036c140
mov ebx, eax
test ebx, ebx
jle 0x1036cadc
mov eax, dword [esi + 0x14]
sub eax, ebx
mov dword [esi + 0x14], eax
jns 0x1036cab7
push dword [esi + 0x10]
add eax, 0x10
mov ecx, esi
mov dword [esi + 0x14], eax
call fcn.1036f350
shl dword [esi + 0xc], 0x10
mov dword [esi + 0x10], eax
mov edi, dword [esi + 0x10]
mov ecx, ebx
shr dword [esi + 0xc], cl
mov eax, edi
mov ecx, dword [esi + 0xc]
xor edx, edx
div ecx
imul ecx, eax
mov dword [ebp - 0x1c], eax
sub edi, ecx
mov dword [ebp - 8], edi
mov edx, edi
mov dword [esi + 0x10], edi
mov edi, eax
jmp 0x1036cae1
mov edx, dword [esi + 0x10]
xor edi, edi
mov ecx, ebx
mov eax, 1
mov ebx, dword [esi + 0xc]
add edi, 4
shl eax, cl
add edi, eax
jmp 0x1036caf7
mov edi, dword [ebp - 0x10]
add dword [esi + 0x14], 0xffffffff
jns 0x1036cb15
push edx
mov ecx, esi
call fcn.1036f350
mov ebx, dword [esi + 0xc]
mov dword [esi + 0x10], eax
mov dword [esi + 0x14], 0xf
shl ebx, 0x10
mov eax, dword [esi + 0x10]
shr ebx, 1
mov dword [esi + 0xc], ebx
cmp eax, ebx
jb 0x1036cb28
sub eax, ebx
neg edi
mov dword [esi + 0x10], eax
pop ebx
mov eax, edi
pop edi
pop esi
mov esp, ebp
pop ebp
ret
xor eax, eax
pop esi
mov esp, ebp
pop ebp
ret