Function at 0x1005b8a0
Capabilities:
Encrypt data using rc4 ksa

Disassembly:
push 0xffffffffffffffff
push 0x1010e5c8
mov eax, dword fs:[0]
push eax
sub esp, 0x18
push esi
push edi
mov eax, dword [section..data]
xor eax, esp
push eax
lea eax, [esp + 0x24]
mov dword fs:[0], eax
mov edi, ecx
mov esi, dword [edi]
movzx eax, byte [esi]
mov al, byte [eax + 0x10138d68]
test al, al
je 0x1005b8ef
jmp 0x1005b8e0
movzx eax, byte [esi + 1]
inc esi
mov al, byte [eax + 0x10138d68]
test al, al
jne 0x1005b8e0
mov dword [edi], esi
mov ecx, esi
movzx eax, byte [esi]
mov dword [esp + 0xc], ecx
mov al, byte [eax + 0x10139168]
test al, al
je 0x1005ba84
jmp 0x1005b910
mov dl, byte [esi]
cmp dl, 0x26
jne case.0x1005b932.36
movsx eax, byte [esi + 1]
add eax, 0xffffffdd
cmp eax, 0x4e
ja case.0x1005b932.36
movzx eax, byte [eax + 0x1005baf0]
jmp dword [eax*4 + 0x1005bad8]
mov al, byte [esi + 2]
cmp al, 0x6d
jne 0x1005b958
cmp byte [esi + 3], 0x70
jne 0x1005b958
cmp byte [esi + 4], 0x3b
jne 0x1005b958
mov byte [ecx], 0x26
inc ecx
add esi, 5
jmp 0x1005ba70
cmp al, 0x70
jne case.0x1005b932.36
cmp byte [esi + 3], 0x6f
jne case.0x1005b932.36
cmp byte [esi + 4], 0x73
jne case.0x1005b932.36
cmp byte [esi + 5], 0x3b
jne case.0x1005b932.36
mov byte [ecx], 0x27
inc ecx
add esi, 6
jmp 0x1005ba70
cmp byte [esi + 2], 0x75
jne case.0x1005b932.36
cmp byte [esi + 3], 0x6f
jne case.0x1005b932.36
cmp byte [esi + 4], 0x74
jne case.0x1005b932.36
cmp byte [esi + 5], 0x3b
jne case.0x1005b932.36
mov byte [ecx], 0x22
inc ecx
add esi, 6
jmp 0x1005ba70
cmp byte [esi + 2], 0x74
jne case.0x1005b932.36
cmp byte [esi + 3], 0x3b
jne case.0x1005b932.36
mov byte [ecx], 0x3e
inc ecx
add esi, 4
jmp 0x1005ba70
cmp byte [esi + 2], 0x74
jne case.0x1005b932.36
cmp byte [esi + 3], 0x3b
jne case.0x1005b932.36
mov byte [ecx], 0x3c
inc ecx
add esi, 4
jmp 0x1005ba70
xor edx, edx
cmp byte [esi + 2], 0x78
jne 0x1005ba28
movzx eax, byte [esi + 3]
add esi, 3
mov al, byte [eax + 0x10139670]
cmp al, 0xff
je 0x1005ba57
inc esi
movzx eax, al
shl edx, 4
add edx, eax
movzx eax, byte [esi]
mov al, byte [eax + 0x10139670]
cmp al, 0xff
jne 0x1005ba10
jmp 0x1005ba57
movzx eax, byte [esi + 2]
add esi, 2
mov al, byte [eax + 0x10139670]
cmp al, 0xff
je 0x1005ba57
lea esp, [esp]
movzx eax, al
lea ecx, [edx + edx*4]
inc esi
lea edx, [eax + ecx*2]
movzx eax, byte [esi]
mov al, byte [eax + 0x10139670]
cmp al, 0xff
jne 0x1005ba40
lea ecx, [esp + 0xc]
call fcn.1005b7d0
cmp byte [esi], 0x3b
jne 0x1005ba9a
mov ecx, dword [esp + 0xc]
inc esi
jmp 0x1005ba74
mov byte [ecx], dl
inc ecx
inc esi
mov dword [esp + 0xc], ecx
movzx eax, byte [esi]
cmp byte [eax + 0x10139168], 0
jne 0x1005b910
mov dword [edi], esi
mov eax, ecx
mov ecx, dword [esp + 0x24]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
add esp, 0x24
ret
lea ecx, [esp + 0x10]
call fcn.1005f966
mov dword [esp + 0x2c], 0
mov dword [esp + 0x10], vtable.rapidxml::parse_error.0
mov dword [esp + 0x1c], str.expected__
mov dword [esp + 0x20], esi
mov dword [esp + 0x2c], 0xffffffff
lea eax, [esp + 0x10]
push 0x1015ad8c
push eax
call fcn.1005fa74
mov edi, edi
idiv dword [ecx - 0x46c6effb]
add eax, 96058896
adc dh, bl
mov ecx, 0xb98a1005
add eax, 0x5ba6c10
adc byte [eax], al
add eax, 0x5050505
add eax, 84215045
add eax, 84215045
add eax, 84215045
add eax, 84215045
add eax, 84215045
add eax, 84215045
add eax, 84215045
add eax, 84215045
add eax, 84215045
add eax, 84215045
add eax, 84215045
add eax, 84215041
add eax, 84214277
add eax, 84214533
invalid
invalid
add al, 204