Function at 0x100ae34c
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x28
mov esi, ecx
mov ecx, dword [ebp + 8]
mov edx, 0xff
mov edi, ecx
and edi, edx
mov ebx, ecx
shr ebx, 8
and ebx, edx
shr ecx, 0x10
and ecx, edx
mov dword [ebp - 0x14], ecx
mov eax, dword [ebp + 0xc]
mov ecx, eax
and ecx, edx
mov dword [ebp - 0x24], ecx
mov ecx, eax
shr ecx, 8
mov dword [ebp - 0x2c], ecx
and ecx, edx
mov dword [ebp - 0x20], ecx
mov ecx, eax
shr ecx, 0x10
mov dword [ebp - 0x28], ecx
and edx, ecx
mov dword [ebp - 0x18], edx
xor eax, 0xffffff
or eax, dword [ebp + 8]
sete al
movzx ecx, byte [esi + 8]
cmp cx, 8
mov dword [ebp - 0x34], esi
ja 0x100ae4dd
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x10], edi
test al, al
je 0x100ae3c8
mov eax, dword [esi + 0x18]
cmp eax, dword [esi + 0x1c]
je 0x100ae67b
mov ecx, esi
call fcn.100a9804
movzx ecx, byte [esi + 8]
cmp cx, 0x1f
je 0x100ae67b
xor eax, eax
inc eax
mov edx, eax
shl edx, cl
mov ecx, dword [ebp - 0x18]
sub dword [ebp - 0x14], ecx
mov ecx, dword [ebp - 0x20]
sub dword [ebp - 0x1c], ecx
mov ecx, dword [ebp - 0x24]
sub dword [ebp - 0x10], ecx
cmp edx, 2
cmovl edx, eax
mov dword [ebp - 0x28], edx
xor ecx, ecx
mov edx, dword [esi + 0x18]
mov eax, dword [esi + 0x1c]
sub eax, edx
sar eax, 2
cmp eax, ecx
jbe 0x100ae685
mov eax, dword [edx + ecx*4]
mov dword [ebp - 0x30], ecx
mov ecx, eax
mov esi, 0xff
and ecx, esi
mov dword [ebp - 0x2c], edx
lea edx, [ecx + ecx*4]
lea ecx, [ecx + edx*2]
mov edx, eax
shr edx, 8
and edx, esi
imul edx, edx, 0x3b
shr eax, 0x10
and eax, esi
lea esi, [eax + eax]
shl eax, 5
sub eax, esi
add eax, ecx
add eax, edx
movzx eax, ax
shr eax, 2
imul edi, eax, 0x147b
shr edi, 0x11
mov ebx, dword [ebp - 0x14]
imul ebx, edi
mov eax, ebx
mov ecx, 0x80808081
imul ecx
mov ecx, edx
add ecx, ebx
mov eax, ecx
shr eax, 0x1f
shr ecx, 7
add ecx, eax
mov esi, dword [ebp - 0x1c]
imul esi, edi
mov eax, esi
mov edx, 0x80808081
imul edx
mov ebx, edx
add ebx, esi
mov esi, dword [ebp - 0x34]
mov eax, ebx
shr eax, 0x1f
shr ebx, 7
add ebx, eax
imul edi, dword [ebp - 0x10]
mov eax, edi
mov edx, 0x80808081
imul edx
add edx, edi
mov eax, edx
shr eax, 0x1f
shr edx, 7
add edx, eax
add ecx, dword [ebp - 0x18]
add ebx, dword [ebp - 0x20]
shl ebx, 8
or ebx, ecx
mov ecx, dword [ebp - 0x30]
add edx, dword [ebp - 0x24]
shl edx, 0x10
or ebx, edx
or ebx, 0xff000000
mov eax, dword [ebp - 0x2c]
mov dword [eax + ecx*4], ebx
inc ecx
cmp dword [ebp - 0x28], ecx
jne 0x100ae401
jmp 0x100ae67b
mov edx, dword [esi + 0x10]
test al, al
je 0x100ae575
test edx, edx
jle 0x100ae67b
xor eax, eax
cmp dword [esi + 0x28], 2
jae 0x100ae6a3
cmp dword [esi + 0xc], 0
jle 0x100ae56b
mov ecx, dword [esi + 8]
shr ecx, 3
and ecx, 0x1f
mov dword [ebp - 0x14], ecx
mov edx, dword [esi + 0x24]
mov ecx, esi
mov esi, dword [esi + 0x14]
mov dword [ebp - 0x10], eax
imul esi, eax
add edx, esi
add edx, 2
xor esi, esi
movzx edi, byte [edx - 2]
lea ebx, [edi + edi*4]
lea edi, [edi + ebx*2]
movzx ebx, byte [edx]
lea eax, [ebx + ebx]
shl ebx, 5
sub ebx, eax
add ebx, edi
movzx eax, byte [edx - 1]
imul eax, eax, 0x3b
add ebx, eax
movzx eax, bx
shr eax, 2
imul eax, eax, 0x147b
shr eax, 0x11
mov byte [edx - 2], al
mov byte [edx - 1], al
mov byte [edx], al
inc esi
add edx, dword [ebp - 0x14]
cmp esi, dword [ecx + 0xc]
jl 0x100ae523
mov edx, dword [ecx + 0x10]
mov esi, ecx
mov eax, dword [ebp - 0x10]
inc eax
cmp eax, edx
jl 0x100ae4f2
jmp 0x100ae67b
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x10], edi
test edx, edx
jle 0x100ae67b
mov eax, dword [ebp - 0x18]
sub dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x20]
sub dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x24]
sub dword [ebp - 0x10], eax
xor edi, edi
cmp dword [esi + 0x28], 2
jae 0x100ae6a3
cmp dword [esi + 0xc], 0
jle 0x100ae672
mov eax, dword [esi + 8]
shr eax, 3
and eax, 0x1f
mov dword [ebp - 0x30], eax
mov eax, dword [esi + 0x24]
mov ecx, dword [esi + 0x14]
mov dword [ebp - 0x18], edi
imul ecx, edi
lea ebx, [eax + ecx]
add ebx, 2
xor edi, edi
movzx eax, byte [ebx - 2]
lea ecx, [eax + eax*4]
lea eax, [eax + ecx*2]
movzx ecx, byte [ebx - 1]
imul ecx, ecx, 0x3b
movzx edx, byte [ebx]
lea esi, [edx + edx]
shl edx, 5
sub edx, esi
add edx, eax
add edx, ecx
movzx eax, dx
shr eax, 2
imul ecx, eax, 0x147b
shr ecx, 0x11
mov esi, dword [ebp - 0x14]
imul esi, ecx
mov eax, esi
mov edx, 0x80808081
imul edx
add edx, esi
mov eax, edx
shr eax, 0x1f
shr edx, 7
add edx, eax
add dl, byte [ebp - 0x28]
mov byte [ebx - 2], dl
mov esi, dword [ebp - 0x1c]
imul esi, ecx
mov eax, esi
mov edx, 0x80808081
imul edx
add edx, esi
mov esi, dword [ebp - 0x34]
mov eax, edx
shr eax, 0x1f
shr edx, 7
add edx, eax
add dl, byte [ebp - 0x2c]
mov byte [ebx - 1], dl
imul ecx, dword [ebp - 0x10]
mov eax, ecx
mov edx, 0x80808081
imul edx
add edx, ecx
mov eax, edx
shr eax, 0x1f
shr edx, 7
add edx, eax
mov eax, dword [ebp + 0xc]
add dl, al
mov byte [ebx], dl
inc edi
add ebx, dword [ebp - 0x30]
cmp edi, dword [esi + 0xc]
jl 0x100ae5cb
mov edx, dword [esi + 0x10]
mov edi, dword [ebp - 0x18]
inc edi
cmp edi, edx
jl 0x100ae597
add esp, 0x28
pop esi
pop edi
pop ebx
pop ebp
ret 8
push str.vector___index_out_of_bounds
push str.__n___size__
push 0x5b6
push str..._buildtools_third_partylibc_trunkinclude_vector
push str._s:_d:_assertion__s_failed:__s
call fcn.101e76b7
call fcn.10132f84