Function at 0x10005fd0
Capabilities:
Encrypt data using rc4 prga
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x34
push ebx
push esi
mov esi, dword [0x1000e050]
mov ebx, ecx
mov eax, dword [0x1000e054]
mov word [ebp - 0x1c], si
mov eax, dword [0x1000e094]
mov esi, dword [0x1000e094]
mov eax, 0xa0
mov dword [ebp - 0x30], 0x271ab5e8
mov dword [ebp - 0x2c], 0
mov word [ebp - 0x18], ax
mov eax, dword [0x1000e094]
movzx eax, byte [0x1000e016]
mov word [ebp - 0xc], ax
movzx eax, byte [0x1000e001]
mov dword [ebp - 0x24], edx
cdq
mov dword [ebp - 0x10], eax
mov dword [ebp - 0xc], edx
movzx eax, byte [0x1000e002]
mov word [ebp - 8], ax
mov eax, dword [0x1000e064]
mov byte [ebp - 2], 4
mov word [ebp - 0x14], ax
movzx eax, ax
mov dword [ebp - 0x2c], eax
movzx eax, word [0x1000e024]
mov byte [ebp - 1], al
mov eax, 0x5900
mov word [ebp - 0x1c], ax
mov dword [ebp - 0xc], 0x2ed8
mov ecx, dword [0x1000e038]
mov eax, dword [0x1000e03c]
mov byte [ebp - 1], cl
mov al, byte [0x1000e016]
mov eax, 0x4a24
mov word [ebp - 0xc], ax
mov dword [ebp - 0xc], 0xfdc444a
mov eax, dword [0x1000e088]
mov ecx, dword [0x1000e08c]
mov eax, dword [0x1000e088]
mov ecx, dword [0x1000e08c]
movzx eax, byte [0x1000e005]
mov ecx, dword [0x1000e00c]
mov byte [ebp - 1], 0x7e
mov dword [ebp - 0xc], 0xac
mov dword [ebp - 0xc], eax
mov eax, dword [0x1000e008]
push edi
mov dword [ebp - 0x10], eax
push ecx
mov dword [ebp - 0xc], ecx
call fcn.10001140
mov word [ebp - 0xc], ax
add esp, 4
mov ax, word [ebp - 0xc]
movsx eax, byte [0x1000e017]
mov edx, dword [ebx + 0x3c]
mov word [0x1004008e], ax
mov eax, dword [0x1000e038]
mov ecx, dword [0x1000e03c]
add eax, 0x3f1b5686
mov edi, dword [edx + ebx + 0x78]
mov dword [0x1000e040], eax
adc ecx, 0
mov eax, dword [0x1000e094]
add edi, ebx
imul eax, dword [0x1000e008]
mov dword [0x1000e044], ecx
mov dword [0x1000e098], 0x57b896a8
mov dword [0x1000e094], eax
mov ecx, dword [0x1000e028]
mov eax, dword [0x1000e02c]
sub cl, 0x67
mov byte [ebp - 1], cl
cmp esi, 0x52484f96
je 0x10006161
cmp dword [0x1000e04c], 0
jb 0x10006164
ja 0x10006154
cmp dword [0x1000e048], 0xbe473edd
jbe 0x10006164
mov eax, dword [0x10047e58]
mov word [0x1000e024], ax
jmp 0x10006164
mov al, byte [ebp - 2]
xor esi, esi
cmp dword [edi + 0x18], esi
jbe 0x100061fe
nop
movzx eax, word [ebp - 0x14]
cmp eax, dword [0x1000e05c]
sbb ecx, ecx
neg ecx
cmp word [ebp - 0x14], 0x18
sbb eax, eax
neg eax
cmp ecx, eax
ja 0x100061c9
movsx ecx, word [ebp - 8]
movzx eax, byte [0x1000e006]
mov edx, dword [0x1000e064]
movzx ecx, cl
xor edx, 0x651534b1
imul ecx, eax
dec edx
movzx eax, dl
add cl, byte [0x1000e005]
movzx ecx, cl
imul ecx, eax
mov al, byte [0x1000e008]
sub al, 0x42
mov byte [0x1000e005], al
mov byte [ebp - 1], cl
jmp 0x100061d8
mov al, byte [0x1000e016]
mov eax, dword [0x1000e010]
mov al, byte [0x1000e016]
mov eax, dword [edi + 0x20]
lea eax, [eax + esi*4]
add eax, ebx
je 0x100061f4
mov eax, dword [eax]
add eax, ebx
push eax
push dword [ebp - 0x24]
call dword [sym.imp.KERNEL32.dll_lstrcmpA]
test eax, eax
je 0x10006207
inc esi
cmp esi, dword [edi + 0x18]
jb 0x10006170
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
call fcn.100012d0
cdq
mov dword [0x1000e080], eax
movsx eax, word [0x1000e07c]
mov dword [0x1000e084], edx
cdq
cmp dword [0x1000e00c], edx
jg 0x1000623b
jl 0x10006232
cmp dword [0x1000e008], eax
jae 0x1000623b
mov ecx, 1
xor eax, eax
jmp 0x10006249
xorps xmm0, xmm0
movlpd qword [ebp - 0x28], xmm0
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x28]
cmp dword [0x1000e048], ecx
jne 0x1000625d
cmp dword [0x1000e04c], eax
jne 0x1000625d
xor ecx, ecx
jmp 0x10006262
mov ecx, 1
movsx eax, byte [section..data]
sub eax, ecx
je 0x10006289
cmp word [ebp - 0x1c], 0
je 0x10006289
movsx eax, word [ebp - 0x18]
cdq
mov dword [ebp - 0x10], eax
mov dword [ebp - 0xc], edx
mov ax, word [0x1000e024]
mov ax, word [ebp - 8]
mov eax, dword [edi + 0x24]
lea esi, [eax + esi*2]
call fcn.100012d0
test al, al
jns 0x100062b4
mov edx, dword [0x1000e080]
mov ecx, 0x1ae
dec ecx
lea eax, [edx - 0x6186]
mov word [ebp - 0xc], ax
test ecx, ecx
jg 0x100062a3
jmp 0x100062d6
mov eax, dword [0x1000e018]
or eax, dword [0x1000e01c]
je 0x100062d6
movsx eax, word [ebp - 8]
sub eax, 0x90
cdq
mov dword [0x1000e040], eax
mov dword [0x1000e044], edx
movzx ecx, word [esi + ebx]
mov eax, dword [edi + 0x1c]
lea esi, [eax + ecx*4]
call fcn.100012d0
movzx eax, ax
test ax, ax
je 0x10006352
mov al, byte [ebp - 1]
xor ecx, ecx
mov edx, dword [ebp - 0x2c]
test al, al
sete cl
xor eax, eax
test dx, dx
sete al
cmp ecx, eax
jbe 0x1000631e
mov eax, dword [0x1000e05c]
add al, 0x45
mov byte [0x1000e017], al
mov eax, dword [esi + ebx]
add eax, ebx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
cmp byte [ebp - 1], 0
je 0x10006338
mov eax, dword [0x1000e018]
or eax, dword [0x1000e01c]
je 0x10006338
mov ecx, 1
jmp 0x1000633a
xor ecx, ecx
movsx eax, word [ebp - 0x18]
cmp eax, ecx
jg 0x10006352
mov al, byte [ebp - 1]
mov ax, word [ebp - 8]
movzx eax, dx
add dword [0x1000e058], eax
mov eax, dword [esi + ebx]
pop edi
pop esi
add eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret