Function at 0x70098600
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push ebp
push edi
push esi
push ebx
mov ebx, eax
sub esp, 0x13c
mov eax, dword [esp + 0x150]
mov dword [esp + 0x18], edx
mov dword [esp + 0x1c], ecx
mov dword [esp + 0x30], eax
cmp ebx, edx
jae 0x70098706
mov ebp, 1
lea esi, [esi]
lea eax, [ebx + 1]
mov dword [esp + 0x14], eax
movzx eax, byte [ebx]
lea ecx, [eax - 3]
mov edx, eax
cmp cl, 0xee
ja fcn.7023e259
movzx ecx, cl
jmp dword [ecx*4 + 0x702bf5dc]
mov esi, dword [esp + 0x14]
xor edi, edi
xor ecx, ecx
movzx ebx, byte [esi]
add esi, 1
mov edx, ebx
and edx, 0x7f
shl edx, cl
add ecx, 7
or edi, edx
test bl, bl
js 0x70098660
mov dword [esp + 0x14], esi
cmp ecx, 0x1f
ja 0x7009868f
and ebx, 0x40
je 0x7009868f
mov edx, 1
shl edx, cl
neg edx
or edi, edx
sub eax, 0x70
cmp eax, 0x11
jg 0x7023e25e
mov ebx, dword [esp + 0x1c]
mov esi, dword [ebx + eax*4]
test byte [ebx + 0x63], 0x40
je 0x700986af
cmp byte [ebx + eax + 0x6c], 0
jne 0x700986be
cmp byte [eax + 0x7034ba10], 4
jne 0x7023e25e
mov esi, dword [esi]
add esi, edi
mov ebx, dword [esp + 0x14]
mov edi, ebp
jmp 0x700986e0
mov esi, dword [ebx + 1]
mov edi, ebp
add ebx, 5
lea esi, [esi]
nop
cmp edi, 0x3f
jg 0x7023e25e
mov dword [esp + edi*4 + 0x30], esi
lea ebp, [edi + 1]
cmp dword [esp + 0x18], ebx
ja 0x70098630
test ebp, ebp
je 0x7023e25e
mov eax, dword [esp + ebp*4 + 0x2c]
add esp, 0x13c
pop ebx
pop esi
pop edi
pop ebp
ret
mov esi, dword [ebx + 1]
mov edi, ebp
add ebx, 9
jmp 0x700986e0
sub eax, 0x50
cmp eax, 0x11
jg 0x7023e25e
mov edi, dword [esp + 0x1c]
mov esi, dword [edi + eax*4]
test byte [edi + 0x63], 0x40
je 0x70098740
cmp byte [edi + eax + 0x6c], 0
jne 0x7009874f
cmp byte [eax + 0x7034ba10], 4
jne 0x7023e25e
mov esi, dword [esi]
mov ebx, dword [esp + 0x14]
mov edi, ebp
jmp 0x700986e0
mov ebx, dword [esp + 0x14]
lea esi, [eax - 0x30]
mov edi, ebp
jmp 0x700986e0
cmp ebp, 1
jle 0x7023e25e
lea edi, [ebp - 2]
sub edx, 0x1a
mov ecx, dword [esp + ebp*4 + 0x2c]
mov esi, dword [esp + edi*4 + 0x30]
cmp dl, 0x14
ja fcn.7023e259
movzx edx, dl
jmp dword [edx*4 + 0x702bf998]
test ebp, ebp
je 0x7023e25e
lea edi, [ebp - 1]
mov esi, dword [esp + edi*4 + 0x30]
cmp al, 0x23
ja 0x70098951
sub edx, 6
cmp dl, 0x1d
ja fcn.7023e259
movzx edx, dl
jmp dword [edx*4 + 0x702bf9ec]
xor eax, eax
xor ecx, ecx
add dword [esp + 0x14], 1
mov ebx, dword [esp + 0x14]
movzx ebx, byte [ebx - 1]
mov edx, ebx
and edx, 0x7f
shl edx, cl
add ecx, 7
or eax, edx
test bl, bl
js 0x700987d1
mov ebx, dword [esp + 0x14]
add esi, eax
jmp 0x700986e0
movzx esi, byte [ebx + 1]
mov edx, dword [esp + 0x1c]
mov edi, ebp
mov eax, esi
call sym._base_of_encoded_value
lea ecx, [ebx + 2]
mov edx, eax
lea eax, [esp + 0x2c]
mov dword [esp], eax
mov eax, esi
call sym._read_encoded_value_with_base
mov esi, dword [esp + 0x2c]
mov ebx, eax
jmp 0x700986e0
cmp ebp, 2
jle 0x7023e25e
lea ecx, [ebp - 1]
lea edx, [ebp - 2]
lea eax, [ebp - 3]
mov ebx, dword [esp + ecx*4 + 0x30]
mov edi, dword [esp + edx*4 + 0x30]
mov esi, dword [esp + eax*4 + 0x30]
mov dword [esp + ecx*4 + 0x30], edi
mov dword [esp + edx*4 + 0x30], esi
mov dword [esp + eax*4 + 0x30], ebx
mov ebx, dword [esp + 0x14]
jmp 0x700986f0
cmp ebp, 1
jle 0x7023e25e
lea edx, [ebp - 1]
lea eax, [ebp - 2]
mov ebx, dword [esp + eax*4 + 0x30]
mov ecx, dword [esp + edx*4 + 0x30]
mov dword [esp + edx*4 + 0x30], ebx
mov ebx, dword [esp + 0x14]
mov dword [esp + eax*4 + 0x30], ecx
jmp 0x700986f0
movzx ecx, byte [ebx + 1]
lea eax, [ebp - 1]
lea edx, [ebx + 2]
cmp ecx, eax
jge 0x7023e25e
sub eax, ecx
mov edi, ebp
mov ebx, edx
mov esi, dword [esp + eax*4 + 0x30]
jmp 0x700986e0
cmp ebp, 1
jle 0x7023e25e
mov esi, dword [esp + ebp*4 + 0x28]
mov ebx, dword [esp + 0x14]
mov edi, ebp
jmp 0x700986e0
movsx esi, byte [ebx + 1]
mov edi, ebp
add ebx, 2
jmp 0x700986e0
movzx esi, byte [ebx + 1]
mov edi, ebp
add ebx, 2
jmp 0x700986e0
movsx eax, word [ebx + 1]
lea ebx, [ebx + eax + 3]
jmp 0x700986f0
test ebp, ebp
je 0x7023e25e
sub ebp, 1
lea eax, [ebx + 3]
mov edx, dword [esp + ebp*4 + 0x30]
test edx, edx
je 0x70098980
movsx ebx, word [ebx + 1]
add ebx, eax
jmp 0x700986f0
test ebp, ebp
je 0x7023e25e
mov ebx, dword [esp + 0x14]
sub ebp, 1
jmp 0x700986f0
test ebp, ebp
je 0x7023e25e
mov esi, dword [esp + ebp*4 + 0x2c]
mov ebx, dword [esp + 0x14]
mov edi, ebp
jmp 0x700986e0
movsx esi, word [ebx + 1]
mov edi, ebp
add ebx, 3
jmp 0x700986e0
movzx esi, word [ebx + 1]
mov edi, ebp
add ebx, 3
jmp 0x700986e0
cmp al, 0x94
jne 0x70098c26
movzx eax, byte [ebx + 1]
lea edx, [ebx + 2]
cmp al, 4
je 0x70098c06
ja 0x70098c1d
cmp al, 1
jne 0x70098c0f
movzx esi, byte [esi]
mov ebx, edx
jmp 0x700986e0
mov ebx, eax
jmp 0x700986f0
mov ebx, dword [esp + 0x14]
not esi
jmp 0x700986e0
mov esi, dword [esi]
mov ebx, dword [esp + 0x14]
jmp 0x700986e0
mov eax, esi
mov ebx, dword [esp + 0x14]
sar eax, 0x1f
xor esi, eax
sub esi, eax
jmp 0x700986e0
mov ebx, dword [esp + 0x14]
neg esi
jmp 0x700986e0
mov ebx, dword [esp + 0x14]
xor edi, edi
xor ecx, ecx
lea esi, [esi]
movzx edx, byte [ebx]
add ebx, 1
mov eax, edx
and eax, 0x7f
shl eax, cl
add ecx, 7
or edi, eax
test dl, dl
js 0x700989c8
xor esi, esi
xor ecx, ecx
lea esi, [esi]
movzx eax, byte [ebx]
add ebx, 1
mov edx, eax
and edx, 0x7f
shl edx, cl
add ecx, 7
or esi, edx
test al, al
js 0x700989e8
cmp ecx, 0x1f
ja 0x70098a12
test al, 0x40
je 0x70098a12
mov eax, 1
shl eax, cl
neg eax
or esi, eax
cmp edi, 0x11
jg 0x7023e25e
mov ecx, dword [esp + 0x1c]
mov eax, dword [ecx + edi*4]
test byte [ecx + 0x63], 0x40
je 0x70098a2f
cmp byte [ecx + edi + 0x6c], 0
jne 0x70098a3e
cmp byte [edi + 0x7034ba10], 4
jne 0x7023e25e
mov eax, dword [eax]
add esi, eax
mov edi, ebp
jmp 0x700986e0
mov ebx, dword [esp + 0x14]
xor esi, esi
xor ecx, ecx
nop
movzx edx, byte [ebx]
add ebx, 1
mov eax, edx
and eax, 0x7f
shl eax, cl
add ecx, 7
or esi, eax
test dl, dl
js 0x70098a50
mov edi, ebp
cmp ecx, 0x1f
ja 0x700986e0
and edx, 0x40
je 0x700986e0
mov eax, 1
shl eax, cl
neg eax
or esi, eax
jmp 0x700986e0
mov ebx, dword [esp + 0x14]
jmp 0x700986f0
mov ebx, dword [esp + 0x14]
xor edi, edi
xor ecx, ecx
lea esi, [esi]
nop
movzx edx, byte [ebx]
add ebx, 1
mov eax, edx
and eax, 0x7f
shl eax, cl
add ecx, 7
or edi, eax
test dl, dl
js 0x70098aa0
cmp edi, 0x11
jg 0x7023e25e
mov eax, dword [esp + 0x1c]
mov esi, dword [eax + edi*4]
test byte [eax + 0x63], 0x40
je 0x70098ad3
cmp byte [eax + edi + 0x6c], 0
jne 0x70098ae2
cmp byte [edi + 0x7034ba10], 4
jne 0x7023e25e
mov esi, dword [esi]
mov edi, ebp
jmp 0x700986e0
mov ebx, dword [esp + 0x14]
xor esi, esi
xor ecx, ecx
lea esi, [esi]
movzx edx, byte [ebx]
add ebx, 1
mov eax, edx
and eax, 0x7f
shl eax, cl
add ecx, 7
or esi, eax
test dl, dl
js 0x70098af8
mov edi, ebp
jmp 0x700986e0
mov ebx, dword [esp + 0x14]
shl esi, cl
jmp 0x700986e0
mov ebx, dword [esp + 0x14]
shr esi, cl
jmp 0x700986e0
mov ebx, dword [esp + 0x14]
sar esi, cl
jmp 0x700986e0
mov ebx, dword [esp + 0x14]
xor esi, ecx
jmp 0x700986e0
xor eax, eax
cmp esi, ecx
mov ebx, dword [esp + 0x14]
sete al
mov esi, eax
jmp 0x700986e0
xor eax, eax
cmp esi, ecx
mov ebx, dword [esp + 0x14]
setge al
mov esi, eax
jmp 0x700986e0
xor eax, eax
cmp esi, ecx
mov ebx, dword [esp + 0x14]
setg al
mov esi, eax
jmp 0x700986e0
xor eax, eax
cmp esi, ecx
mov ebx, dword [esp + 0x14]
setle al
mov esi, eax
jmp 0x700986e0
mov eax, esi
xor edx, edx
mov ebx, dword [esp + 0x14]
div ecx
mov esi, edx
jmp 0x700986e0
imul esi, ecx
mov ebx, dword [esp + 0x14]
jmp 0x700986e0
mov ebx, dword [esp + 0x14]
or esi, ecx
jmp 0x700986e0
xor eax, eax
cmp esi, ecx
mov ebx, dword [esp + 0x14]
setne al
mov esi, eax
jmp 0x700986e0
mov ebx, dword [esp + 0x14]
and esi, ecx
jmp 0x700986e0
mov ebx, dword [esp + 0x14]
add esi, ecx
jmp 0x700986e0
mov eax, esi
mov ebx, dword [esp + 0x14]
cdq
idiv ecx
mov esi, eax
jmp 0x700986e0
mov ebx, dword [esp + 0x14]
sub esi, ecx
jmp 0x700986e0
xor eax, eax
cmp esi, ecx
mov ebx, dword [esp + 0x14]
setl al
mov esi, eax
jmp 0x700986e0
mov esi, dword [esi]
mov ebx, edx
jmp 0x700986e0
cmp al, 2
jne 0x70098c2b
movzx esi, word [esi]
mov ebx, edx
jmp 0x700986e0
cmp al, 8
je 0x70098c06
jmp fcn.7023e259
jmp fcn.7023e259
jmp fcn.7023e259
call sym._abort