Function at 0x643c65e8
Capabilities:
Encrypt data using rc4 ksa

Disassembly:
push ebp
mov ecx, 5
mov ebp, esp
push edi
push esi
lea edi, [ebp - 0x1ac]
mov esi, str.Y__L
push ebx
xor ebx, ebx
sub esp, 0x1fc
mov eax, dword [0x643e7e24]
rep movsd dword es:[edi], dword [esi]
mov esi, 0x71c
xor eax, 0x83764308
add eax, 0x3ca16d16
mov dword [0x643e7d48], eax
mov edx, str.AslpFileGet16BitDescription
mov al, byte [edx]
test al, al
je 0x643c6642
sub eax, 0x30
cmp al, 9
jbe 0x643c663f
add dword [0x643e7e24], 0x25f71162
jmp 0x643c6642
inc edx
jmp 0x643c6626
and dword [0x643e7d48], 0x586ec582
call fcn.643d3c00
sub esi, dword [ebp + ebx*4 - 0x1ac]
inc ebx
sub dword [0x643e7d48], 0x29ddabc
mov dword [ebp - 0x1e4], esi
cmp ebx, 5
jne 0x643c6621
lea edi, [ebp - 0x198]
mov esi, 0x643ea707
mov ecx, 0x10
xor eax, eax
rep movsd dword es:[edi], dword [esi]
lea edi, [ebp - 0x1b9]
mov esi, 0x643ea747
mov ecx, 0xd
rep movsb byte es:[edi], byte [esi]
mov edi, dword [0x643e7e24]
mov byte [ebp + eax - 0x118], al
inc eax
cmp eax, 0x100
jne 0x643c669a
xor esi, esi
xor ecx, ecx
mov al, byte [ebp + ecx - 0x118]
mov ebx, 0xc
xor edx, edx
mov byte [ebp - 0x1dc], al
mov eax, ecx
div ebx
mov bl, byte [ebp - 0x1dc]
movzx eax, byte [ebp + edx - 0x1b9]
movzx edx, byte [ebp - 0x1dc]
add eax, edx
add eax, esi
movzx esi, al
mov eax, edi
mov dl, byte [ebp + esi - 0x118]
imul edi, edi, 0xe33e3bb6
mov byte [ebp + ecx - 0x118], dl
inc ecx
mov byte [ebp + esi - 0x118], bl
cmp ecx, 0x100
jne 0x643c66ad
xor edi, 0xe2f45c5b
mov byte [ebp - 0x19], dl
mov ecx, str.AppBaseFileName
mov byte [ebp + esi - 0x118], bl
mov dword [0x643e7e24], edi
mov dl, byte [ecx]
test dl, dl
je 0x643c674f
sub edx, 0x30
cmp dl, 9
jbe 0x643c674c
imul eax, eax, 0x4a8abdea
xor eax, 0xdcb2e689
add eax, 0x4c274cbd
xor eax, 0xe494ad4a
mov dword [0x643e7e24], eax
jmp 0x643c674f
inc ecx
jmp 0x643c6722
mov eax, dword [0x643e7e24]
xor ebx, ebx
xor ecx, ecx
xor edx, edx
or eax, 0xe7e7af15
mov dword [ebp - 0x1e0], eax
inc edx
mov edi, str.AslpFileGet16BitDescription
movzx edx, dl
mov al, byte [ebp + edx - 0x118]
mov byte [ebp - 0x1dc], al
add ecx, eax
movzx ecx, cl
mov al, byte [edi]
lea esi, [eax - 0x30]
mov eax, esi
cmp al, 9
ja 0x643c678e
inc edi
jmp 0x643c6780
mov al, byte [ebp + ecx - 0x118]
lea esi, [ebp - 0x158]
xor dword [ebp - 0x1e0], 0x8aed13e4
mov byte [ebp + edx - 0x118], al
mov al, byte [ebp - 0x1dc]
mov byte [ebp + ecx - 0x118], al
add al, byte [ebp + edx - 0x118]
movzx eax, al
mov al, byte [ebp + eax - 0x118]
xor al, byte [ebx + ebp - 0x198]
mov byte [ebp + ebx - 0x158], al
inc ebx
cmp ebx, 0x40
jne 0x643c6765
mov eax, dword [ebp - 0x1e0]
mov byte [ebp - 0x118], 0
sub eax, 0x29b0fc9c
mov dword [0x643e7d48], eax
mov eax, dword [ebp - 0x1e0]
add eax, 0x4b6ea092
xor eax, 0x5475e8c0
mov dword [0x643e7e24], eax
mov eax, dword [ebp - 0x1e4]
mov dword [esp], eax
call fcn.643cc6c0
mov dword [ebp - 0x1e0], eax
mov dword [esp + 4], esi
xor esi, esi
mov dword [esp], eax
call fcn.643cda38
mov eax, dword [ebp + 8]
xor edx, edx
and dword [0x643e7d48], 0xe33a4d15
mov dword [ebp - 0x1dc], eax
add eax, dword [ebp + 0xc]
mov dword [ebp - 0x1f0], eax
mov ebx, dword [ebp - 0x1f0]
cmp dword [ebp - 0x1dc], ebx
je 0x643c6ac5
mov eax, dword [ebp - 0x1dc]
mov cl, byte [eax]
xor eax, eax
mov edi, dword [ebp - 0x1e0]
cmp byte [edi + eax], cl
je 0x643c6879
inc eax
cmp eax, 0x40
jne 0x643c6866
mov al, 0x40
movzx ebx, dl
lea ecx, [edx + 1]
mov byte [ebp + ebx - 0x1d8], al
cmp dl, 3
jne 0x643c6ab8
xor dword [0x643e7e24], 0x9d123306
xor ebx, ebx
mov edi, 0x300
add dword [0x643e7d48], 0x5bb5316c
call fcn.643d4a3c
imul edx, dword [0x643e7d48], 0x3a4a36a1
lea eax, [edx + 0x7ec61128]
mov dword [0x643e7e24], edx
mov dword [0x643e7d48], eax
mov dword [esp + 0xc], eax
mov dword [esp + 8], edx
mov dword [esp + 4], eax
mov dword [esp], str.Specified_VidPN_topology_is_invalid.
call fcn.643d4598
mov dword [ebp - 0x1d4], 0x31
mov dword [ebp - 0x1d0], 0x46
mov dword [ebp - 0x1cc], 0x249
mov eax, dword [0x643e7d48]
lea edx, [eax + 0x136618f4]
add eax, 0xd5e3b71
mov dword [0x643e7e24], edx
mov dword [0x643e7d48], eax
call fcn.643d3fa8
xor eax, eax
cmp byte [eax + str.AppBaseFileName], 0
je 0x643c6958
inc eax
cmp eax, 0x864
jne 0x643c6922
mov eax, dword [0x643e7e24]
mov dword [esp + 8], str.Specified_VidPN_topology_is_invalid.
mov dword [esp + 4], eax
mov dword [esp], eax
call fcn.643cdbfc
and dword [0x643e7d48], 0x69bde516
jmp 0x643c695f
cmp eax, 0x860
jle 0x643c696e
call fcn.643d3c00
xor dword [0x643e7d48], 0x9a0845ee
imul eax, dword [0x643e7d48], 0x5dba9e4f
mov dword [0x643e7e24], eax
call fcn.643d3c00
sub edi, dword [ebp + ebx*4 - 0x1d4]
inc ebx
cmp ebx, 3
jne 0x643c6900
call dword [sym.imp.USER32.dll_GetDoubleClickTime]
mov ecx, dword [ebp + 8]
lea ebx, [esi + 1]
imul eax, dword [0x643e7d48], 0x98d5f712
mov dword [0x643e7d48], eax
mov al, byte [ebp - 0x1d7]
mov edx, eax
mov byte [ebp - 0x1e4], al
mov al, byte [ebp - 0x1d8]
shr dl, 4
lea eax, [edx + eax*4]
mov byte [ecx + esi], al
movzx eax, byte [ebp - 0x1d6]
mov byte [ebp - 0x1e5], al
mov dword [ebp - 0x1ec], eax
cmp eax, edi
je 0x643c6a7e
or dword [0x643e7e24], 0xf519dbc5
xor edi, edi
mov ecx, 4
mov dword [ebp - 0x1c8], 0x15
mov dword [ebp - 0x1c4], 0xf
mov dword [ebp - 0x1c0], 0xffffffda
mov eax, dword [0x643e7e24]
mov dword [ebp - 0x1f4], ecx
and eax, 0x5acf755d
imul edx, eax, 0x16023abf
or eax, 0xb7d7cefa
mov dword [0x643e7e24], eax
mov dword [0x643e7d48], edx
call fcn.643d4a3c
mov eax, dword [0x643e7e24]
mov ecx, dword [ebp - 0x1f4]
add ecx, dword [ebp + edi*4 - 0x1c8]
inc edi
add eax, 0x48806b43
mov dword [0x643e7d48], eax
cmp edi, 3
jne 0x643c6a15
mov al, byte [ebp - 0x1e4]
mov edx, dword [ebp - 0x1ec]
mov edi, dword [ebp + 8]
shl eax, 4
sar edx, cl
add eax, edx
mov byte [edi + ebx], al
lea ebx, [esi + 2]
mov dl, byte [ebp - 0x1d5]
cmp dl, 0x40
je 0x643c6ab4
mov eax, dword [0x643e7e24]
mov edi, dword [ebp + 8]
sub eax, 0x5f13ee97
mov dword [0x643e7e24], eax
and eax, 0x1d79e1c3
mov dword [0x643e7d48], eax
mov al, byte [ebp - 0x1e5]
shl eax, 6
add eax, edx
mov byte [edi + ebx], al
inc ebx
mov esi, ebx
xor ecx, ecx
inc dword [ebp - 0x1dc]
mov edx, ecx
jmp 0x643c684a
mov eax, dword [ebp + 8]
mov byte [eax + esi], 0
mov eax, dword [ebp - 0x1e0]
mov dword [esp], eax
call fcn.643cc6f0
mov dword [esp], str.AppBaseFileName
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
add eax, 0x671f84d5
push edx
xor edx, edx
mov dword [0x643e7d48], eax
cmp byte [edx + str.AslpFileGet16BitDescription], 0
je 0x643c6b2b
inc edx
cmp edx, 0x25ca
jne 0x643c6af4
mov dword [esp + 4], eax
mov dword [esp], eax
mov dword [esp + 8], str.Specified_VidPN_topology_is_invalid.
call fcn.643cdbfc
mov eax, dword [0x643e7e24]
and eax, 0x8930cecc
mov dword [0x643e7d48], eax
jmp 0x643c6b33
cmp edx, 0x2351
jle 0x643c6b57
mov dword [esp + 0xc], str.Specified_VidPN_topology_is_invalid.
mov dword [esp + 8], str.AslpFileGet16BitDescription
mov dword [esp + 4], str.Specified_VidPN_topology_is_invalid.
mov dword [esp], str.The_device_is_not_responding_and_cannot_be_safely_removed.
call fcn.643d3158
mov eax, dword [0x643e7d48]
lea edx, [eax + 0x4edfa7ea]
add eax, 0x5cdde0d3
mov dword [0x643e7e24], eax
mov dword [0x643e7d48], edx
mov dword [esp + 0xc], str.Specified_VidPN_topology_is_invalid.
mov dword [esp + 8], str.AslpFileGet16BitDescription
mov dword [esp + 4], str.The_device_is_not_responding_and_cannot_be_safely_removed.
mov dword [esp], str.The_device_is_not_responding_and_cannot_be_safely_removed.
call fcn.643d3158
lea esp, [ebp - 0xc]
mov eax, esi
pop ebx
pop esi
pop edi
pop ebp
ret