Function at 0x10006250
Capabilities:
Encrypt data using rc4 prga
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x34
mov eax, dword [0x10011070]
mov dword [ebp - 0x28], 0x2c06
mov dword [ebp - 0x14], 0xe922579e
mov byte [ebp - 2], 0x72
mov dword [ebp - 0x18], eax
mov byte [ebp - 4], 0xe3
push ebx
mov ebx, ecx
mov dword [ebp - 0x20], edx
movzx ecx, ax
mov eax, dword [0x10011098]
mov dword [ebp - 0x10], ecx
mov ecx, dword [0x1001109c]
mov dword [ebp - 0x30], eax
mov al, byte [0x100110ac]
mov dword [ebp - 0x2c], ecx
mov ecx, dword [0x10011018]
mov byte [ebp - 4], al
mov eax, dword [0x1001101c]
movzx eax, cx
mov dword [ebp - 0x1c], eax
mov eax, 0x9e11
mov word [ebp - 0xc], ax
mov al, byte [0x100110ac]
mov byte [ebp - 3], al
mov edx, dword [0x10011040]
mov eax, dword [0x10011044]
movzx eax, dx
mov dword [ebp - 0x28], eax
mov ax, word [0x100110b4]
mov word [ebp - 8], ax
mov eax, dword [0x10011038]
mov eax, dword [section..data]
mov ecx, dword [0x10011004]
mov al, byte [0x10011050]
mov byte [ebp - 1], al
mov eax, 0x76ae
mov byte [ebp - 2], 0x14
mov word [ebp - 8], ax
mov eax, dword [0x10011098]
mov word [ebp - 8], ax
mov al, byte [0x10011010]
mov al, byte [0x100110c0]
mov ecx, dword [ebx + 0x3c]
mov byte [ebp - 2], al
mov al, byte [0x10011008]
sub al, 0x44
mov dword [ebp - 0x24], edx
add byte [0x10011017], al
push esi
push edi
mov edi, dword [ecx + ebx + 0x78]
movsx eax, dx
add edi, ebx
cdq
mov byte [ebp - 2], 0xb2
cmp dword [0x10011080], eax
jne 0x1000636b
cmp dword [0x10011084], edx
jne 0x1000636b
mov esi, dword [ebp - 0x18]
movsx eax, word [0x1001103c]
neg esi
movzx edx, byte [0x10011015]
sbb esi, esi
xor ecx, ecx
inc esi
cmp eax, esi
cmovge ecx, edx
test ecx, ecx
je 0x1000636b
mov ax, word [0x100110b4]
mov esi, dword [ebp - 0x1c]
xor edx, edx
movsx ecx, word [0x100110c0]
movzx eax, si
cmp eax, ecx
sete dl
xor eax, eax
cmp si, 0x53
sete al
cmp edx, eax
jb 0x100063b4
mov ax, word [ebp - 8]
mov ax, word [ebp - 0xc]
mov al, byte [ebp - 1]
xor eax, eax
cmp word [ebp - 0x10], ax
sete al
xor eax, dword [ebp - 0x14]
not eax
mov dword [0x10011040], eax
mov dword [0x10011044], 0
xor esi, esi
cmp dword [edi + 0x18], esi
jbe 0x100063ff
mov al, byte [ebp - 3]
mov ecx, 0xb0
mov ax, word [0x100110c0]
sub ax, cx
mov cx, word [ebp - 8]
movzx eax, ax
add cx, ax
mov eax, dword [edi + 0x20]
mov word [0x100110c0], cx
lea eax, [eax + esi*4]
add eax, ebx
je 0x100063f9
mov eax, dword [eax]
add eax, ebx
push eax
push dword [ebp - 0x20]
call dword [sym.imp.KERNEL32.dll_lstrcmpA]
test eax, eax
je 0x10006408
inc esi
cmp esi, dword [edi + 0x18]
jb 0x100063bb
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
xor ecx, ecx
mov eax, 0xfb
cmp word [ebp - 0x24], ax
setl cl
xor eax, eax
cmp word [ebp - 0x28], 0x50
setl al
cmp ecx, eax
ja 0x1000644e
cmp word [ebp - 0xc], 0
je 0x10006441
mov eax, dword [0x1001102c]
sub eax, 0xbd85
mov dword [0x10011078], eax
mov eax, dword [0x10011078]
jmp 0x1000645d
cmp byte [ebp - 4], 0
jne 0x1000645d
mov eax, dword [0x10011038]
jmp 0x1000645d
mov ax, word [0x10011060]
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x14]
mov eax, dword [edi + 0x24]
lea esi, [eax + esi*2]
call fcn.100017f0
movzx eax, al
mov ecx, 0x2e
cmp cx, ax
mov word [0x100110c0], ax
sbb ecx, ecx
xor dx, dx
neg ecx
cmp dx, ax
sbb eax, eax
neg eax
cmp eax, ecx
jae 0x10006499
cmp word [ebp - 0x10], dx
je 0x10006499
mov al, byte [0x10082928]
mov byte [ebp - 1], al
movzx ecx, word [esi + ebx]
mov eax, dword [edi + 0x1c]
mov edi, 0x4579
lea esi, [eax + ecx*4]
mov eax, dword [0x10011078]
mov cx, word [0x10011090]
neg eax
sbb eax, eax
xor edx, edx
inc eax
add ax, word [ebp - 0x10]
cmp cx, di
movzx eax, ax
cmove edx, eax
mov eax, dword [esi + ebx]
pop edi
pop esi
add eax, ebx
mov word [0x100110b8], dx
pop ebx
mov esp, ebp
pop ebp
ret