Function at 0x100523e0
Capabilities:
Encrypt data using rc4 ksa

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1c
push ebx
mov ebx, dword [ebp + 0xc]
mov eax, edx
push esi
mov esi, dword [ebp + 8]
mov dword [ebp - 4], eax
push edi
mov edi, ecx
mov ecx, dword [ebp + 0x10]
mov dword [ebp - 0x14], edi
cmp esi, eax
jne 0x10052409
mov eax, edi
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
test esi, esi
js 0x1005277f
test ebx, ebx
js 0x1005277f
je 0x1005242c
xor edx, edx
mov eax, 0x7fffffff
div ebx
cmp esi, eax
jg 0x1005277f
mov eax, esi
imul eax, ebx
mov dword [ebp + 8], eax
test eax, eax
js 0x1005277f
test ecx, ecx
js 0x1005277f
je 0x1005245b
xor edx, edx
mov eax, 0x7fffffff
div ecx
cmp dword [ebp + 8], eax
jg 0x1005277f
mov eax, dword [ebp + 8]
imul eax, ecx
push eax
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
add esp, 4
mov dword [ebp - 0x18], eax
test eax, eax
je 0x1005277f
cmp dword [ebp + 0x10], 0
mov dword [ebp - 8], 0
jle 0x10052736
mov ecx, dword [ebp - 4]
mov dword [ebp - 0x10], eax
mov dword [ebp - 0xc], edi
lea ecx, [ecx*8 - 0xa]
add ecx, esi
mov esi, dword [ebp - 4]
imul esi, ebx
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 4], esi
mov esi, edi
cmp ecx, 0x19
ja case.0x100524b4.3
movzx ecx, byte [ecx + 0x100527e0]
jmp dword [ecx*4 + 0x100527ac]
lea edx, [ebx - 1]
test edx, edx
js 0x1005270e
sub edx, 1
mov cl, byte [esi]
mov byte [eax], cl
lea esi, [esi + 1]
mov byte [eax + 1], 0xff
lea eax, [eax + 2]
jns 0x100524c6
jmp 0x1005270e
lea edx, [ebx - 1]
test edx, edx
js 0x1005270e
nop dword [eax]
sub edx, 1
mov cl, byte [esi]
mov byte [eax + 2], cl
lea esi, [esi + 1]
mov byte [eax + 1], cl
lea eax, [eax + 3]
mov byte [eax - 3], cl
jns 0x100524f0
jmp 0x1005270e
lea edx, [ebx - 1]
test edx, edx
js 0x1005270e
sub edx, 1
mov cl, byte [esi]
mov byte [eax + 2], cl
lea esi, [esi + 1]
mov byte [eax + 1], cl
lea eax, [eax + 4]
mov byte [eax - 4], cl
mov byte [eax - 1], 0xff
jns 0x10052516
jmp 0x1005270e
lea edx, [ebx - 1]
test edx, edx
js 0x1005270e
sub edx, 1
mov cl, byte [esi]
mov byte [eax], cl
lea esi, [esi + 2]
lea eax, [eax + 1]
jns 0x10052540
jmp 0x1005270e
lea edx, [ebx - 1]
test edx, edx
js 0x1005270e
nop
sub edx, 1
mov cl, byte [esi]
mov byte [eax + 2], cl
lea esi, [esi + 2]
mov byte [eax + 1], cl
lea eax, [eax + 3]
mov byte [eax - 3], cl
jns 0x10052560
jmp 0x1005270e
lea edx, [ebx - 1]
test edx, edx
js 0x1005270e
sub edx, 1
mov cl, byte [esi]
mov byte [eax + 2], cl
lea esi, [esi + 2]
mov byte [eax + 1], cl
lea eax, [eax + 4]
mov byte [eax - 4], cl
movzx ecx, byte [esi - 1]
mov byte [eax - 1], cl
jns 0x10052586
jmp 0x1005270e
lea edx, [ebx - 1]
test edx, edx
js 0x1005270e
sub edx, 1
movzx ecx, byte [esi]
mov byte [eax], cl
lea esi, [esi + 3]
movzx ecx, byte [esi - 2]
lea eax, [eax + 4]
mov byte [eax - 3], cl
movzx ecx, byte [esi - 1]
mov byte [eax - 2], cl
mov byte [eax - 1], 0xff
jns 0x100525b3
jmp 0x1005270e
lea edi, [ebx - 1]
test edi, edi
js 0x1005270e
nop word [eax + eax]
movzx ecx, byte [esi + 1]
lea esi, [esi + 3]
imul edx, ecx, 0x96
lea eax, [eax + 1]
movzx ecx, byte [esi - 1]
imul ecx, ecx, 0x1d
add edx, ecx
movzx ecx, byte [esi - 3]
imul ecx, ecx, 0x4d
add edx, ecx
shr edx, 8
sub edi, 1
mov byte [eax - 1], dl
jns 0x100525f0
jmp 0x1005270e
lea edi, [ebx - 1]
test edi, edi
js 0x1005270e
nop dword [eax]
movzx ecx, byte [esi + 1]
lea esi, [esi + 3]
imul edx, ecx, 0x96
lea eax, [eax + 2]
movzx ecx, byte [esi - 1]
imul ecx, ecx, 0x1d
add edx, ecx
movzx ecx, byte [esi - 3]
imul ecx, ecx, 0x4d
mov byte [eax - 1], 0xff
add edx, ecx
shr edx, 8
sub edi, 1
mov byte [eax - 2], dl
jns 0x10052630
jmp 0x1005270e
lea edi, [ebx - 1]
test edi, edi
js 0x1005270e
movzx ecx, byte [esi + 1]
lea esi, [esi + 4]
imul edx, ecx, 0x96
lea eax, [eax + 1]
movzx ecx, byte [esi - 2]
imul ecx, ecx, 0x1d
add edx, ecx
movzx ecx, byte [esi - 4]
imul ecx, ecx, 0x4d
add edx, ecx
shr edx, 8
sub edi, 1
mov byte [eax - 1], dl
jns 0x10052671
jmp 0x1005270e
lea edi, [ebx - 1]
test edi, edi
js 0x1005270e
nop word [eax + eax]
movzx ecx, byte [esi + 1]
lea esi, [esi + 4]
imul edx, ecx, 0x96
lea eax, [eax + 2]
movzx ecx, byte [esi - 2]
imul ecx, ecx, 0x1d
add edx, ecx
movzx ecx, byte [esi - 4]
imul ecx, ecx, 0x4d
add edx, ecx
shr edx, 8
sub edi, 1
mov byte [eax - 2], dl
mov cl, byte [esi - 1]
mov byte [eax - 1], cl
jns 0x100526b0
jmp 0x1005270e
lea edx, [ebx - 1]
test edx, edx
js 0x1005270e
nop dword [eax]
sub edx, 1
movzx ecx, byte [esi]
mov byte [eax], cl
lea esi, [esi + 4]
movzx ecx, byte [esi - 3]
lea eax, [eax + 3]
mov byte [eax - 2], cl
movzx ecx, byte [esi - 2]
mov byte [eax - 1], cl
jns 0x100526f0
mov ecx, dword [ebp - 8]
mov esi, dword [ebp - 0xc]
inc ecx
mov eax, dword [ebp - 0x10]
add esi, dword [ebp - 4]
add eax, dword [ebp + 8]
cmp ecx, dword [ebp + 0x10]
mov dword [ebp - 8], ecx
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0xc], esi
mov dword [ebp - 0x10], eax
jl 0x100524a4
mov edi, dword [ebp - 0x14]
push edi
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov eax, dword [ebp - 0x18]
add esp, 4
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push dword [ebp - 0x14]
mov esi, dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
call esi
push dword [ebp - 0x18]
call esi
mov ecx, dword [0x10265504]
add esp, 8
mov eax, dword fs:[0x2c]
pop edi
mov eax, dword [eax + ecx*4]
pop esi
pop ebx
mov dword [eax + 0xc], str.unsupported
xor eax, eax
mov esp, ebp
pop ebp
ret
push edi
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov ecx, dword [0x10265504]
add esp, 4
mov eax, dword fs:[0x2c]
pop edi
mov eax, dword [eax + ecx*4]
pop esi
pop ebx
mov dword [eax + 0xc], str.outofmem
xor eax, eax
mov esp, ebp
pop ebp
ret