Function at 0x408600
Capabilities:
Encrypt data using rc4 ksa

Disassembly:
push ebp
mov ecx, 0x12
mov edx, str.SdbpGetProcessHostGuestArchitectures
mov ebp, esp
push edi
push esi
lea edi, [ebp - 0x154]
mov esi, 0x42c0ee
push ebx
sub esp, 0x16c
rep movsb byte es:[edi], byte [esi]
lea edi, [ebp - 0x130]
mov esi, str.AslpFileGetVersionBlock
mov ecx, 6
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x6c2
movsx eax, byte [edx]
inc edx
test al, al
je 0x40865b
add ecx, eax
cmp ecx, 0x174f
jbe 0x40863a
mov eax, dword [0x429174]
add eax, 0x59d753e4
mov dword [0x428f04], eax
and dword [0x429174], 0x2cb5ff3b
call dword [sym.imp.USER32.dll_GetMessageTime]
imul eax, dword [0x429174], 0xc5f0ea6a
mov dword [0x428f04], eax
call fcn.0040ecec
xor eax, eax
mov byte [ebp + eax - 0x118], al
inc eax
cmp eax, 0x100
jne 0x408681
xor esi, esi
xor ecx, ecx
mov edi, 0x17
mov eax, ecx
xor edx, edx
mov bl, byte [ebp + ecx - 0x118]
div edi
movzx eax, byte [ebp + edx - 0x130]
movzx edx, bl
add eax, edx
add eax, esi
movzx esi, al
mov al, byte [ebp + esi - 0x118]
mov byte [ebp + ecx - 0x118], al
inc ecx
mov byte [ebp + esi - 0x118], bl
cmp ecx, 0x100
jne 0x408699
mov byte [ebp - 0x19], al
mov eax, dword [0x429174]
mov byte [ebp + esi - 0x118], bl
xor esi, esi
xor ebx, ebx
xor eax, 0x765224c
mov dword [0x428f04], eax
or eax, 0xcb32ffae
mov dword [0x429174], eax
call fcn.00414fa4
xor ecx, ecx
inc ebx
mov dword [ebp - 0x15c], ecx
mov edi, dword [0x429174]
movzx ebx, bl
mov al, byte [ebp + ebx - 0x118]
lea edx, [eax + esi]
movzx esi, dl
lea edx, [edi + 0x17087011]
mov cl, byte [ebp + esi - 0x118]
mov byte [ebp + ebx - 0x118], cl
mov byte [ebp + esi - 0x118], al
add al, byte [ebp + ebx - 0x118]
movzx eax, al
movzx edi, byte [ebp + eax - 0x118]
mov eax, edx
xor edx, 0xb5cc667
xor eax, 0xc4f8ddba
mov dword [0x428f04], edx
and eax, 0x2aab80cd
mov dword [0x429174], eax
call fcn.0040ecec
mov edx, dword [0x428f04]
mov ecx, dword [ebp - 0x15c]
mov eax, edx
and eax, 0x6572db6d
mov dword [0x428f04], eax
xor eax, eax
cmp byte [eax + 0x42d320], 0
je 0x4087a7
inc eax
cmp eax, 0xa66
jne 0x40878a
and edx, 0x2142c26c
mov dword [0x428f04], edx
imul eax, dword [0x429174], 0x324a54b3
mov edx, edi
xor dl, byte [ebp + ecx - 0x154]
mov byte [ebp + ecx - 0x142], dl
inc ecx
mov dword [0x429174], eax
mov eax, dword [0x428f04]
xor eax, 0x4f4ae636
cmp ecx, 0x12
jne 0x408704
lea ecx, [eax + 0x5b912c78]
and eax, 0x8f25a99f
mov byte [ebp - 0x130], 0
mov dword [0x429174], ecx
mov dword [0x428f04], eax
call fcn.0040ffd0
lea eax, [ebp - 0x142]
mov dword [esp + 0xc], 0x12
mov dword [esp + 8], eax
mov dword [esp + 4], 0x1190
mov dword [esp], str.d7s09_KLCgfGab25HrjA_1mi5QIQleWlCoPXYNKao2qdrrW00VF9fsR98Jf5O5MIhMyUgbyRIyrmudYm07AIzf0dY1SnDvbqO_b5Qh2KNOGgBv_vYcC5AOQlpE4kUqH6KDpm7kHje8Dw5N6ynbOUg4XKnR0yDN7ZI7woPiVe45KU620_8G1eJpTGuJzLgS1Jpa8k0h0W2H1ucoGTHDTidGKet69aVcAR7TjODsfSK4RcG6xCVG_vMVJSz8a_QHRL8PJDX308oTwHHtzYLnBAvpj9Umo2B2ZgLfwOzwv3sx9aBAPWiHbSn89dxcbB91gU0IuBKuso4LhhsVzCzmZBMhvF2DUesPqqgi0MqcYoLXCbvJaPVrJp6_RtzOsfaVKMcqyf1XBGu3lTWUNWpdvyIR7klYiNMgL6F4SBNcqZ7Vc8woi5YagQjMD5TMJfn0bFbq1LdHd1LRicOTl0nm2eCm8je3Ihb6fsnXxqnIOJVJYlYkLE8SWayNKsbkdIwTLg9UE1hgR1YErOpPLd0CyFGHPL1Z1M2kE5mEzvuuNGrsrHly6nme9E0vMyTG4APbGQBVLPf73RBBRMWseKGkMI_0CcS9zUQ6T3urs_4ip9gSE7_RTxYAhKOe6BuZgeeTbCkze9dhCTmmLD5vsuxB76JLaXsCGhyiPYCCDxU3WP0ddRs48S59RzrCcE9QcOhYN6kpPbKkV73newMaZ9WuGrVy4bOgUgvnFhbBGQjjJ_Qb04OOGbGX2Hfg1GZ_UyUYrRpHWURnMph5ZQNuH96lH6JIKbKMnVAu06ekHaxBv6NCyfKKQfXKbSFin9dGjTHEYuto_JUSPZa3zwN1SK2pJZTx47C6y3wJhm0WW9y80DF2ACbrbQTXqa8ZShQDJ6h0N7PLgPDRsz1gpmF8KKp5J9pUlfeYf_S8qJhQUrn_f_a2ihJJACQykUpuIdAU6WiCcbgBMFbg_O_Rin0ffq3tXSt9217JONCVyv8dQcryr8TSNc9BHo1bhXHRE4haCChjWvvIsOZLvOEDwlS1EyT4JctlnY6TG7xi9uzv9zZ8UNWgzxkKUL4LYvo9VzvcrAC4gULzEZbjLBisUC9qh0EQ_mrtTDgmfLsui4Q5i4w7FhKQUmB3GPNmZXF1CMfvOJBipGCNfCHVqkEN8HRwob8bMBPFRcGUzy1nkt7BEN8kLbDi1MpBoy7zptq9qB3_BY0UHj1JA4ri2caslfKelXi_USB4KSb9MSRrWxjNQxQd93HgSNpByo94sbPOrG8LZ9d7sIp_UGv5dbvD09dmlnvGeTFoCd2Z44CRXx1y1z2DnqtUTtvn7gdBa0H8QyYgoRvweCrTlgEAuYQpwC1OKqMem23Dp06bSA9TzR6iecTeApuNoE5vw3ymzeA28arT97femJhF9toyYXKeyPzPyxHj7mqJZ2x1UUlmeog3ScRjlcCxIFoz5sBAJSF0pCGCQZBLxEra3LJjVwwBI30n_MNe4ATplO4Q_qW8N3NueGVPBmjnc04xm1ALgXnntcSaujILnHLsbld3_k5kWtsW_Fdr_9wX4qdEMZtjU7toBx6mXkSEMLW1dJffXidEUZc4gBhqkAyM26QjrLQ9qVdhVSdRhJgN4CaulAvQ3jyLdUbJOnOQ26PYLIDvtZYPzyzZrPsp6WmuvUzQEAK3kjW6HBZY9o_Jbd7MlohR8ITziaZiB5P1fDuKRw36ecGl9KPbW6SnEj5QEkkpqBKfg22QbmCkeBRUAYKQyRTIdMJ90ovho61QgO3iRHd_K9qm0CPAEj1RAULbAbFcgDe3zDKU2KDFHK7jpW5_o1aFJPUFxNHRe_NFHKo0kdHTxFtrt29B1ztO2zMW3RkesIxZBzNo7ezqiRtSXrgJHYveUGHm2gW08ZsbfXsWAHSNdBliUhEMy5AyIZ1JhJW11uEWO5IhtkVjoyaGPLtkn9_A6xVtWr5mr54YcysEHAPlaCnJkew7rMJFKXS4x6YPWPIfNZr8aftDNxi0ZGIYWOeuMmWvPsuQNw4UJyjnYwwJyv4IkaLT7xl7nUvPr5xvWOGLdbnobGj5DC7lt9x3Gh37od34NpMxbfr4DG2UQQPtCUq_wrYMKPp5PvVxlLJx2cQvngl8h4YvP31DTkubseiSXzZrXjue9_5oPUydntBpzHd1QuJ8pz8iGMNtta6tqiFkUaNIj5iXHO85BqfSMIvBNSzL4KKsae9wFnqzT7td7iBKEFixQ36C7u2I07K4grXsG0asv4RW2im0qDsjRPeEhCysR4t7y2KVP_t_oeV3rSrkNL7EqMfOXaibZQJnFyLMDoIOJGWW7oEEubPZoFbG7DsVANP0nIopU52MSoMKsaxptvPqbSClaHJAdHRQiAbKRdXcU3hlikBDcbzHftujxonydM6BBuKuWinWVnBUiHfgFBxuCaeJOGkAHB3CdtCYvr6LWOv7bRoEM_6C6G_wjn7CZ_7A8wjySLFeWlOz034JIJdUE1DClp8BwUVM1YJ_xWM5qJgGTHj70mTH7_u9kMdz9OIi7yxuCKylaVj3OnoCV2ZPhKLT5RC6t6hVKJ9F7N58xKfsD_Mbv2fRpbOEOUgzBHVufBDTMVTCz33q2U9ReVWWXREDUwt3hDabZlsgwB7q4Sp7XwBPw3BseWIYkSCzWAt2DMKWuGmQK8Fj2QYSVrg93vUc3SuLGnbzGXJXxPILKlm7PuFOqOVxW5pNbuLJ4GDUzdUk1Yu6oNkY7a10e_2YeE7U267RXWawdnOPXBdnDj1XMBf2AK19aJqHtDvbZTdiom9yKJtgyDctZKKyK7tu_ii85aAIdDJQQtrujP4KKlk6jhcoJHQMBeet1riqYaadEYDqPPcd0Yvmyui29GnmVJRiIgCMRIUVeGGzXDoNb6e0tqAsL5yw2tE4zTZtGyQ5uLfTVIk5ekRkkHdw1n7ZmvdMoYkPJcBQgpnPshSeAlKCsLDeb0nmJkr7WiSg8sWg3os6ovdAyS62tHTl4YRg3by89GR4yu9OaHii9TulQjuQGkASOa4HqJgBBIVfP6cDb_KAaN7G6lAncW12NpgV15VGMO1QKtbqUAZ65FuPJItoz0p98b2XNkb_GtDn5lgsFXSrOfb8Lhxqh0XOoXsSfP0YT6SixZI0cvvgn_NfWJo8GIXgWZv9uAQkF_CcATODi4DzZGvVlU22aUfGfnthLoIQZWbz8lTg7CNq7NhGOuKjuA8kOaDDMm4qEoG5V1B2OHyqQBy_eIgMchHCNMq0GxrY93JyqoIv0KtVAgEIFh8vFUp0APRWbySrcRwZlwKjUxmj0Jr7JKxoyxUgE805PtoHK2VUbUxP1sSQB3x6Vks1k0FmxoZY4u89dNicSy1D8JTvO1SKth5TlRK9KG5fGrUnGsP_EaesQo1ZQ4ZuBlOZYr33aGi6CL63lUOCcOzWmVT8waM7DH2j7akLnR639qlH4bW6YX3YBCDmbLJXyb6_Bpu277QXvR8tE_lM1uPjjRyv_B4axWn1E8hJe7YC0VJqVKdf1smnBLvMOM5tR7RZNiE9tj0moyTW5PwbFnHPUK0EJT_A_ZEY13EF89U3Umn_yWNQaUWZb2eemSLAbB2yIKJ6bvLtr_YD4AwdZHRjhbJZPZr1l64LmKDAT4ePu1xDgTjcuRqBO2GPCIgXrKtmwfkluVar1YsRQQQ8IrnYdUlHy11KN9sJiQt57KsYvGg05JSIdTibZzFgf5xcoMYjZh75UVy_BsRL7igdXc5tPL3VWSUiNcxaRlJ9ZavOyirlMN2O1y5LAz8jDt55tamOR5SBruQO03Gg8cer9tnCXh_oQx1uBXoKXqq6cZnOb3JRP2YWIT2CZzwv4kFIiM9SAZr2_LPgej_WZQPEZnnA80AfKL7ssw3vIY2nXDXeIlpYN_uAWrCE6jayJ0Au_WWZNAkNzoXgUwBdi09tl8CyrsHn5W78XH_2_nQG5ibhiwMCl1Rvv9UUzg5A5K6g446ahnlJ1ZWpTegtGwxUp1pMZ4VaMY77jF9UbZdYXvKnhEa
xor dword [0x428f04], 0xb646bbec
and dword [0x429174], 0xcee00d8a
call fcn.0040b3c4
add esp, 0x16c
pop ebx
pop esi
pop edi
pop ebp
ret