Function at 0x10005632
Capabilities:
Encrypt data using rc4 ksa

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x184
push esi
push edi
mov edi, dword [0x10026234]
xor esi, esi
mov ecx, str.background_clip
mov eax, esi
inc eax
lea ecx, [ecx + 2]
mov dword [ebp - 0x20], eax
cmp eax, 0x4b0
jg 0x10005661
cmp word [ecx], si
jne 0x1000564c
jmp 0x10005674
call fcn.10001b8d
cmp dword [ebp - 0x20], 0x1873
jle 0x10005674
call fcn.1000114c
lea eax, [edi - 0x22273e0d]
mov dword [ebp - 8], eax
push 2
pop edx
mov dword [ebp - 0x34], 0x29
mov ecx, esi
mov dword [ebp - 0x30], 0xffffffd5
add edx, dword [ebp + ecx*4 - 0x34]
inc ecx
cmp ecx, 2
jl 0x10005690
mov dword [ebp - 0x40], edx
mov ecx, str.avResWss64.mtx
mov edx, 0xc1b
mov dword [ebp - 0x28], 0x61
add edx, dword [ebp - 0x28]
lea ecx, [ecx + 2]
mov eax, dword [ebp - 8]
cmp edx, 0x18df
ja 0x100056cb
movzx eax, word [ecx]
mov dword [ebp - 0x28], eax
test eax, eax
jne 0x100056ae
jmp 0x100056d4
imul eax, eax, 0xc730971f
mov dword [ebp - 8], eax
lea eax, [edi - 0x1946164a]
mov dword [ebp - 0x28], eax
call fcn.100023ca
push 0x38
pop ecx
mov dword [ebp - 0x38], 7
mov eax, esi
mov dword [ebp - 0x34], 0x5b
mov dword [ebp - 0x30], 0xffffffcf
sub ecx, dword [ebp + eax*4 - 0x38]
inc eax
cmp eax, 3
jl 0x100056fc
mov dword [ebp - 0x44], ecx
mov eax, esi
mov ecx, 0x155
mov dword [ebp - 0x38], 0x1a
mov dword [ebp - 0x34], 0xd
mov dword [ebp - 0x30], 0x10f
sub ecx, dword [ebp + eax*4 - 0x38]
inc eax
cmp eax, 3
jl 0x10005725
add edi, 0xfddf7052
mov dword [ebp - 0x30], ecx
cmp byte [str.DetectFile_ProgramFiles_SandboxieStart.exe], 0
mov dword [ebp - 0x1c], 0x2e
mov dword [ebp - 0x18], 0x3a
mov dword [ebp - 0x14], 0x63
mov dword [ebp - 0x10], 0xfffffef5
je 0x10005795
inc esi
cmp esi, 0x1b32
je 0x1000577c
cmp byte [esi + str.DetectFile_ProgramFiles_SandboxieStart.exe], 0
jne 0x1000575d
cmp esi, 0xc0e
jle 0x10005795
mov edi, dword [ebp - 0x28]
jmp 0x1000578d
call fcn.10002c8e
mov edi, dword [ebp - 0x28]
lea eax, [edi - 0x1fa85cf3]
mov dword [ebp - 8], eax
add edi, 0x9621ef8b
jmp 0x1000579b
xor edi, 0x862a9b69
movups xmm1, xmmword [ebp - 0x1c]
lea eax, [edi - 0x662cc61a]
mov dword [ebp - 0x1c], 0x4665e3be
push 0xa
pop ecx
mov esi, str._tbackground_image:image_map_trashBinIcon__
mov dword [ebp - 0x28], eax
lea edi, [ebp - 0x84]
mov dword [ebp - 0x18], 0xa1cd93c
rep movsd dword es:[edi], dword [esi]
movaps xmm0, xmm1
mov dword [ebp - 0x14], 0x4257377c
psrldq xmm0, 8
paddd xmm1, xmm0
mov dword [ebp - 0x10], 0xfb14416
movups xmm0, xmm1
movsw word es:[edi], word [esi]
psrldq xmm0, 4
paddd xmm1, xmm0
mov byte [ebp - 0xc], 0x2f
movd eax, xmm1
movsb byte es:[edi], byte [esi]
add eax, 0x41
mov dword [ebp - 0x3c], eax
xor eax, eax
mov dword [ebp - 0x24], eax
mov ecx, eax
mov byte [ebp + ecx - 0x184], cl
inc ecx
cmp ecx, 0x100
jb 0x10005804
mov esi, dword [ebp - 8]
mov edi, eax
xor edx, edx
mov dword [ebp - 0x20], 0x2a
mov eax, edi
mov cl, byte [ebp + edi - 0x184]
div dword [ebp - 0x20]
mov byte [ebp - 1], cl
movzx ecx, cl
push 0x4e
movzx eax, byte [ebp + edx - 0x84]
mov edx, 0x886
add eax, dword [ebp - 0x24]
add ecx, eax
movzx eax, cl
mov dword [ebp - 0x24], eax
mov eax, str.New_version
pop ecx
add edx, ecx
lea eax, [eax + 2]
cmp edx, 0x141f
ja 0x10005870
movzx ecx, word [eax]
test ecx, ecx
jne 0x10005854
and esi, 0xc50a442
jmp 0x10005886
call fcn.1000114c
add esi, 0xe7f8fdbe
call fcn.1000120f
and esi, 0x2c62273e
mov ecx, dword [ebp - 0x24]
xor esi, 0xefe93d6d
mov dword [0x10026300], esi
add esi, 0x8ce57454
mov al, byte [ebp + ecx - 0x184]
mov byte [ebp + edi - 0x184], al
inc edi
mov al, byte [ebp - 1]
mov byte [ebp + ecx - 0x184], al
cmp edi, 0x100
jb 0x10005819
xor ecx, ecx
mov dword [ebp - 8], ecx
mov edx, ecx
mov edi, ecx
lea eax, [edx + 1]
movzx edx, al
mov dword [ebp - 0x24], edx
mov al, byte [ebp + edx - 0x184]
mov byte [ebp - 1], al
movzx eax, al
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 8]
add eax, dword [ebp - 0x20]
cmp byte [str.DetectFile_ProgramFiles_SandboxieStart.exe], 0
movzx eax, al
mov dword [ebp - 8], eax
mov eax, ecx
je 0x1000591f
inc eax
cmp eax, 0x1f97
jg 0x1000590c
cmp byte [eax + str.DetectFile_ProgramFiles_SandboxieStart.exe], 0
jne 0x100058f9
jmp 0x1000591f
call fcn.10001619
mov edx, dword [ebp - 0x24]
imul ecx, esi, 0x30f5584e
mov dword [ebp - 0x28], ecx
xor ecx, ecx
mov eax, dword [ebp - 8]
mov esi, dword [ebp - 0x28]
add esi, 0x5ab67cdf
xor esi, 0xca81cc2c
mov al, byte [ebp + eax - 0x184]
mov byte [ebp + edx - 0x184], al
mov eax, dword [ebp - 8]
mov dl, byte [ebp - 1]
mov byte [ebp + eax - 0x184], dl
mov edx, dword [ebp - 0x24]
movzx eax, byte [ebp + edx - 0x184]
add eax, dword [ebp - 0x20]
movzx eax, al
mov al, byte [ebp + eax - 0x184]
xor al, byte [ebp + edi - 0x1c]
mov byte [ebp + edi - 0x58], al
inc edi
cmp edi, 0x11
jb 0x100058c9
mov eax, dword [ebp - 0x28]
mov edi, ecx
add eax, 0x85191e6
mov byte [ebp - 0x47], cl
mov dword [0x10026300], eax
add eax, 0x7d28bf1b
mov dword [0x10026234], eax
mov eax, ecx
mov dword [ebp - 0x18], 0x25
mov dword [ebp - 0x14], 0xa
mov dword [ebp - 0x10], 0xffffffd1
sub edi, dword [ebp + eax*4 - 0x18]
inc eax
cmp eax, 3
jl 0x100059a9
push 0x5b
mov dword [ebp - 0x1c], 0x10
mov eax, ecx
mov dword [ebp - 0x18], 0x56
mov dword [ebp - 0x14], 0x47
mov dword [ebp - 0x10], 0xfffffef8
pop edx
add edx, dword [ebp + eax*4 - 0x1c]
imul esi, esi, 0xd760922
inc eax
cmp eax, 4
jl 0x100059d4
push 0x54
mov dword [0x10026024], esi
mov dword [ebp - 0x20], edx
pop esi
mov dword [ebp - 0x2c], 0x26
mov dword [ebp - 0x28], 0xffffff86
add esi, dword [ebp + ecx*4 - 0x2c]
inc ecx
cmp ecx, 2
jl 0x100059fe
mov eax, dword [ebp - 0x40]
lea edx, [ebp - 0x58]
mov ecx, dword [ebp - 0x3c]
mov dword [ebp - 8], eax
call fcn.1001adf3
call eax
push edi
push 4
lea ecx, [ebp - 8]
mov dword [ebp - 0x3c], eax
push ecx
push dword [ebp - 0x44]
push eax
call fcn.1001b431
add esp, 0x14
test eax, eax
jne 0x10005ad3
cmp dword [ebp - 8], eax
je 0x10005ad3
mov dword [ebp - 0x1c], 0x15
mov ecx, eax
mov dword [ebp - 0x18], 0x5e
mov edx, str.avResWss64.mtx
mov dword [ebp - 0x14], 0x50
mov dword [ebp - 0x10], 0xfffffedf
inc ecx
lea edx, [edx + 2]
cmp ecx, 0x5d4
jl 0x10005a8f
cmp word [edx], ax
jne 0x10005a65
cmp ecx, 0xa4f
jle 0x10005a94
call fcn.1000172c
mov eax, dword [0x10026234]
and eax, 0x6cc5d8a2
jmp 0x10005a9e
call fcn.1000257c
mov eax, dword [0x10026024]
or eax, 0xd771ced
movups xmm1, xmmword [ebp - 0x1c]
mov dword [0x10026024], eax
imul eax, eax, 0xf42d9cb3
movaps xmm0, xmm1
psrldq xmm0, 8
paddd xmm1, xmm0
movups xmm0, xmm1
psrldq xmm0, 4
mov dword [0x10026234], eax
paddd xmm1, xmm0
movd eax, xmm1
add eax, 0x5f
jmp 0x10005b36
push dword [ebp - 0x20]
lea eax, [ebp - 8]
push 4
push eax
push dword [ebp - 0x30]
push dword [ebp - 0x3c]
call fcn.1001b431
add esp, 0x14
test eax, eax
jne 0x10005b34
cmp dword [ebp - 8], eax
jne 0x10005b34
mov eax, dword [0x10026024]
add eax, 0x5d6c3580
mov dword [ebp - 0x18], 0x3c
mov dword [0x10026024], eax
add eax, 0x360408ea
push 0xb
mov dword [0x10026234], eax
xor eax, eax
pop ecx
mov dword [ebp - 0x14], 0x13
mov dword [ebp - 0x10], 0xffffffbb
sub ecx, dword [ebp + eax*4 - 0x18]
inc eax
cmp eax, 3
jl 0x10005b26
mov eax, ecx
jmp 0x10005b36
mov eax, esi
pop edi
pop esi
leave
ret