Function at 0x10254bb
Capabilities:
Encrypt data using rc4 prga

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0xc9c
mov eax, dword [0x102e050]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 8]
mov dword [ebp - reloc.NETAPI32.dll_NetApiBufferFree], eax
mov eax, dword [ebp + 0xc]
push esi
mov esi, ecx
mov dword [ebp - reloc.NETAPI32.dll_NetApiBufferFree], eax
mov eax, dword [esi + reloc.NETAPI32.dll_NetApiBufferFree]
add eax, 0x20
mov ecx, eax
shl ecx, 3
mov dword [ebp - reloc.NETAPI32.dll_NetApiBufferFree], ecx
cmp ecx, 0x320
jb 0x1025508
xor eax, eax
jmp 0x10256ea
push ebx
push edi
mov edi, eax
shl edi, 4
push edi
lea eax, reloc.NETAPI32.dll_NetApiBufferFree
push 0
push eax
call sub.msvcrt.dll_memset
push edi
lea eax, reloc.NETAPI32.dll_NetApiBufferFree
push 0
push eax
call sub.msvcrt.dll_memset
mov ecx, dword [ebp + 0x18]
add esp, 0x18
test ecx, ecx
jbe 0x1025667
mov eax, dword [ebp + 0x14]
mov ebx, dword [esi + 0x34]
mov edi, dword [esi + 0x30]
shl eax, 2
mov dword [ebp - reloc.NETAPI32.dll_NetApiBufferFree], eax
mov eax, dword [ebp + 0x10]
shl eax, 2
mov dword [ebp - reloc.NETAPI32.dll_NetApiBufferFree], eax
mov dword [ebp - reloc.NETAPI32.dll_NetApiBufferFree], ecx
jmp 0x1025567
mov eax, dword [ebp - reloc.NETAPI32.dll_NetApiBufferFree]
mov ecx, dword [ebp - reloc.NETAPI32.dll_NetApiBufferFree]
and ecx, 7
xor edx, edx
inc edx
shl edx, cl
mov ecx, dword [ebp - reloc.NETAPI32.dll_NetApiBufferFree]
shr ecx, 3
mov cl, byte [ecx + ebx]
test cl, dl
jne 0x1025591
mov eax, dword [ebp - reloc.NETAPI32.dll_NetApiBufferFree]
movzx eax, byte [edi + eax]
jmp 0x10255d5
mov ecx, dword [ebp - reloc.NETAPI32.dll_NetApiBufferFree]
cmp byte [edi + ecx], 7
mov ecx, dword [esi + 0x2c]
push dword [ecx + eax]
push esi
jae 0x10255bf
call fcn.01023745
mov ecx, dword [ebp - reloc.NETAPI32.dll_NetApiBufferFree]
movzx ecx, byte [edi + ecx]
movzx eax, al
lea eax, reloc.NETAPI32.dll_NetApiBufferFree
jmp 0x10255ce
call fcn.01023745
movzx eax, al
lea eax, reloc.NETAPI32.dll_NetApiBufferFree
add dword [ebp - reloc.NETAPI32.dll_NetApiBufferFree], 4
inc dword [ebp - reloc.NETAPI32.dll_NetApiBufferFree]
lea eax, reloc.NETAPI32.dll_NetApiBufferFree
inc word [eax]
mov eax, dword [ebp - reloc.NETAPI32.dll_NetApiBufferFree]
xor edx, edx
mov ecx, eax
and ecx, 7
inc edx
shl edx, cl
mov ecx, eax
shr ecx, 3
mov cl, byte [ecx + ebx]
test cl, dl
jne 0x1025607
movzx eax, byte [edi + eax]
jmp 0x102564b
cmp byte [edi + eax], 7
mov ecx, dword [ebp - reloc.NETAPI32.dll_NetApiBufferFree]
mov eax, dword [esi + 0x2c]
push dword [eax + ecx]
push esi
jae 0x1025635
call fcn.01023745
mov ecx, dword [ebp - reloc.NETAPI32.dll_NetApiBufferFree]
movzx ecx, byte [edi + ecx]
movzx eax, al
lea eax, reloc.NETAPI32.dll_NetApiBufferFree
jmp 0x1025644
call fcn.01023745
movzx eax, al
lea eax, reloc.NETAPI32.dll_NetApiBufferFree
add dword [ebp - reloc.NETAPI32.dll_NetApiBufferFree], 4
inc dword [ebp - reloc.NETAPI32.dll_NetApiBufferFree]
lea eax, reloc.NETAPI32.dll_NetApiBufferFree
inc word [eax]
dec dword [ebp - reloc.NETAPI32.dll_NetApiBufferFree]
jne 0x1025561
xor esi, esi
xor ebx, ebx
cmp dword [ebp - reloc.NETAPI32.dll_NetApiBufferFree], esi
jbe 0x10256e6
mov edi, 0x100
movzx eax, word [ebp + esi*2 - 0xc84]
mov ecx, edi
cmp ax, cx
movzx eax, ax
jae 0x1025693
movzx eax, byte [eax + 0x1003778]
jmp 0x10256a0
shr eax, 8
movzx eax, byte [eax + 0x1003778]
add eax, 8
movzx ecx, word [ebp + esi*2 - 0x644]
mov edx, edi
cmp cx, dx
movzx ecx, cx
jae 0x10256bb
movzx ecx, byte [ecx + 0x1003778]
jmp 0x10256c8
shr ecx, 8
movzx ecx, byte [ecx + 0x1003778]
add ecx, 8
mov eax, dword [eax*4 + reloc.NETAPI32.dll_NetApiBufferFree]
sub eax, dword [ecx*4 + reloc.NETAPI32.dll_NetApiBufferFree]
cdq
xor eax, edx
sub eax, edx
add ebx, eax
inc esi
cmp esi, dword [ebp - reloc.NETAPI32.dll_NetApiBufferFree]
jb 0x1025678
pop edi
mov eax, ebx
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
pop esi
call fcn.01007c80
leave
ret 0x14