Function at 0x65687bec
Capabilities:
Encrypt data using rc4 ksa

Disassembly:
push ebp
mov ecx, 0x19
mov ebp, esp
push edi
push esi
lea edi, [ebp - 0x131]
mov esi, str.Copy_protection_failure.
push ebx
xor ebx, ebx
sub esp, 0x15c
imul eax, dword [0x656a8f1c], 0xfd95417f
mov dword [ebp - 0x13d], 0xd1944c4
rep movsb byte es:[edi], byte [esi]
mov word [ebp - 0x139], 0x4755
mov dword [0x656a8f1c], eax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub dword [0x656a8f1c], 0x6b4575eb
mov edx, str.AslpFileMappingGetFileKind_failed__S___x_
mov ecx, 0x2f9
movzx eax, word [edx]
add edx, 2
test ax, ax
je 0x65687c82
add ecx, eax
cmp ecx, 0x247f
jbe 0x65687c48
mov dword [esp + 4], str.AslpFileMappingGetFileKind_failed__S___x_
mov dword [esp], str.An_invalid_version_was_specified.
call fcn.65692fc4
imul eax, dword [0x656a8f1c], 0x260d9f11
and eax, 0xee67b370
jmp 0x65687c8c
mov eax, dword [0x656a8f1c]
and eax, 0x97919a73
or eax, 0x250fbeed
mov dword [0x656a8f1c], eax
mov dword [esp], 0x2287
call dword [sym.imp.USER32.dll_IsZoomed]
add eax, 0x5c3568e
push edx
mov byte [ebp + ebx - 0x118], bl
inc ebx
mov dword [0x656a8f1c], eax
cmp ebx, 0x100
jne 0x65687c3e
and eax, 0x241b136c
xor edi, edi
xor ebx, ebx
or eax, 0x120060
imul eax, eax, 0x413349fd
mov dword [0x656a8f1c], eax
call dword [sym.imp.USER32.dll_AnyPopup]
mov dword [esp], str.AslpFileMappingGetFileKind_failed__S___x_
call fcn.65690064
mov eax, dword [0x656a8f1c]
or eax, 0xd5bddc77
add eax, 0x3fb124b6
mov dword [0x656a8f1c], eax
mov dword [esp + 4], str.An_internal_error_occurred.
mov dword [esp], str.An_invalid_version_was_specified.
call fcn.65692fc4
call dword [sym.imp.USER32.dll_GetDesktopWindow]
mov esi, 0x18
xor edx, edx
mov cl, byte [ebp + ebx - 0x118]
mov dword [ebp - 0x14c], eax
mov eax, ebx
div esi
mov esi, dword [ebp - 0x14c]
and esi, 0xab20c6be
movzx eax, byte [ebp + edx - 0x131]
movzx edx, cl
add eax, edx
add eax, edi
movzx edi, al
mov al, byte [ebp + edi - 0x118]
mov byte [ebp + ebx - 0x118], al
mov eax, esi
inc ebx
or eax, 0xab204632
mov byte [ebp + edi - 0x118], cl
mov dword [0x656a8f1c], eax
cmp ebx, 0x100
jne 0x65687d11
or esi, 0xebe47f32
xor edi, edi
xor ebx, ebx
mov dword [0x656a8f1c], esi
xor esi, esi
inc ebx
xor eax, eax
movzx ebx, bl
cmp word [eax + str.An_internal_error_occurred.], 0
je 0x65687dbf
add eax, 2
cmp eax, 0x3386
jne 0x65687d8f
mov eax, dword [0x656a8f1c]
mov dword [esp], eax
call fcn.65693ccc
imul eax, dword [0x656a8f1c], 0x9b1906d2
mov dword [0x656a8f1c], eax
mov dl, byte [ebp + ebx - 0x118]
lea eax, [edx + esi]
movzx esi, al
mov eax, dword [0x656a8f1c]
mov cl, byte [ebp + esi - 0x118]
and eax, 0xc071420
imul eax, eax, 0xd799e7ba
mov byte [ebp + ebx - 0x118], cl
mov byte [ebp + esi - 0x118], dl
add dl, byte [ebp + ebx - 0x118]
movzx edx, dl
mov dl, byte [ebp + edx - 0x118]
xor eax, 0x9d29a2eb
xor dl, byte [ebp + edi - 0x13d]
add eax, 0x6d7cf55b
mov byte [ebp + edi - 0x137], dl
inc edi
mov dword [0x656a8f1c], eax
lea eax, [ebp - 0x137]
cmp edi, 6
jne 0x65687d89
mov byte [ebp - 0x131], 0
mov dword [esp + 0xc], 6
mov dword [esp + 8], eax
mov dword [esp + 4], 0x11c8
mov dword [esp], str.Jh53saTcySyyT17OxsIPmBYQelYTFoTJzbTAkyFhZxcsimH3JAxej4oSR2_eIfmyy3MqIPxiQ1xs5P34Eecyi2yPDF0YJjZK1dlQhIG0dg4AN2ukLa9eG73J4f3pYAOd2Onr9pVPG5z6SUz5Xf2Ws1oIVmepP63l87lXq6MFk05WbDKKTLjjPQn2uVO0dvuwLFZvSw8OlrP7woW4y1J9VbQM8ZkzUXvJBysiC3Q1jdjpp7LqpyNsbB_Ocm4qAiO6ERqJ_EQz7qdHkb1SyINRwebdWQWHjoQygmt5QmxpNGZPoCDklvUUQJqXhvAbT3QgP8YHwPSbAity7ARJDxBMb9sn9WHsASuwMclB1_RWmzX1XWDvfDqmM3KNDpAfy6TxJ4e4wmeQ4S3cWFuM7MNGp7hwkQctNeAoVBuH293LOfibvcCRjYFmeku_5RnjGsIpthM_DTjwsr3o81PGrECWiN_C0tUZ3wBUsoX2RIE4HeCEiRqQ16NJYKRBE93m8WbNr_ijpIjPC_iGzM8iJKVvsVUAca8sWdt3IExXoxvlPro05sRS6CEQfw6J0Wk6vJ_xSTzFHD7ohixTtc0lVaQckkXkX_D7AB3pAgBYJFcD1yMFXoFAdDHMWS1A81RPAkWcW1G5o5VJOqCF6ZnGpXwCmcuGFZaT4JbqJkkBX82IorD9sPw1WEuUEIwvbB6RXmMyv4AruRr9DSOCo7UahMcPgfwNLtnuTRm6DvqcqL32XIKIVS_qBywz0jOotT4gFEglxvdNKVnqPzTVcVEOYkQOkdbwuE5fSAFVvWUvpSRixUpkOBPy186fEFMMrmAB2IhLQdLeure2sSpcVcHCwJTfKINszkQVLwsczcyLDPc0AeljevMEQieKLUMi83thMoqy8XhsLVBnOc8bdHKZYKnuvXbeONTNW_5ZH0CrZwXHlM5UkXiTCq9ICLq7NHn3xyir_3H0VY8qqEgFOE57vJoS836wVrjAUJHyLBHwBoy3jHzVfTpqmODxbfY3iYlW91ZG_AN4tvlj4EJrsrmKI49PDGuL2TlkHhpGkWA5yQrn59tuNgZgP4yMQ1CZ9JJelvyCKxeop09LkpuRq2cLl2S1UnfVhI7wOEx_y8oSpFU3ILH3izskdb7LR0KvLx0_4sWeI9jmb5LoRfq69Ki1QSIzLbUVyWRS4klWS9iqTkNBkEd_XJfFLYtEItVxXLtjRuKz4tqlVUYqPZu_cXJ5hrj53pABughupOl5Qd9MjrH3nZloJim3_4maSVKZoMC9OgllhayS5yOuy3zL7BYi4nalRdxNAQyr_ZQbz2sRHaQpuwLNp1bSDP9ZEpZgKG0zAVFzRuJEVlce9lwWLa_THyvM6R9jktcbQCcw7wKe9gOl1qCJaSEV17LgBFv3P92mhwSgcnJmjv4sK0J65MqrU6CTlHakQoA57eMljMvaLqYat4mvdzNgx9f_9dl2OTVRLxHvpXDP6n0ziUpODqCbZKuqBwq29JoFE5ordHal6boLMMKuTEi6PWYSBEQdlQ6dmwL6aiHmdtnZaZAp4CaE8dsWSO_rMlGbEZrqhk7JozMnqJWJlJyUAc9x_7UK4Iopv50_QKr28agBs0q6Afg3jwgM7zRML3yjD78NfsAnFr_RnH1cpYXPEFDFCf2kUZW_Hinw7QHRYUHt8uxocw0lwej71_UGjZBua7ZywhcVbGF5tkTVrhNgpYW9q0o58BSS2pAapV57u6h1MZX1hxPlvoUSmdVb6US4Ky8shs0lZpTEQso0tfNlcRUMHaOGUbjZQKxTSzrOh0qs6Y_gEXQiOKxjbmStatM6iOXzqQhUr3pWLPVvu0tK3MEYpAxTyD9tGkxXcvDYGIo4UIY6NmFqjePnGbtStawz5iRS4ESol1a18U2QluE4G5IMQHkyr9ewokNVkSybAQ6iaRHzs6FKTruzu1wSBpbQpQc4CO7KwXJCpEJo0hN1F6vzB0rJhPDclqG5uVEiT56PmbOl_GLdNrKHRMrSKa9enQ9Coq8GZ6s3Y69fZanFeYFTm50hyHzgAybbnkUWAaFFJ2K1mJ4GwDS9wY8cvkYVKkAnLkVeLgR34UnDgc0Z6HbL8WOSKss3Bodx80hQ191TeOq8twHMlJ7PszN1Wt84PKpoFnMlFGp20qIFxEm8V18h6c7OLr9vC8MO8FR4AYs92SFv7X3vaKZJPRVTmYLPvgVPAILWv5Y56v2PxENXV_cY51j1HrKFXqJ9sUHjh03QZVfM8wCUWFsfvc3vA1nbN9X81PoWunMdDfKb_F8NMFx2jhTnJzSoe9LTxQCIQ4K9T5LaHVJ4gbu2SjI6MLm9uT9m8_KNMFb1MQwji8aFvuQ3Cj720XTjgQ_DX0tbMY0atoq9mJQQ8SJ2JQf3N8A4z20LH5Vfne9VnLDW6O4TNTwjc69nRI6F8H860R3MPquW_p9anmiVwh_NK_06F5k0QGuFOhCpzguRbGz1Blyi_A9QsfIunwE_vre4a92GbpjfH_lWkvLgCqQvHPTjih0aN36uSxkR9TViznnoM1pEjVcrmRxzPi6EDba7HkNdDMrh5al1nHIn4avR5mNrx4OoHd5C04xxIhi1v3Op362fkhtO0XXGwLqsTUIOllnlcQPOA5W7WoxjFhuOi4M2RZDAFAUAsGDCArT71n4A86HRJwkVaFLLKI0C0YU0jolmB1Ed0IXduu3gyk5qZCJcXWamGVNE75c9m5fn47MiOx_NuZJxTV1c3D3iqchnlK3cFeft7mu4La3BFPc31bh6oUkCeqIVRuSwNDKaX78DWKbaJl96sZ4FpHy8SeeONeXCl6DSGDO_tllOMiDze5liyJHzZVMUrF4yJiAp4hl0kRl9L2WkXgAWTVjAriiXXNixlsSHrw17ZXT3en_Tcx_RmBxLDNoUv0j5Xmy1gyNfSVR5uHj0S4nFQSh6GIYPivN5eiiQakJWrceEeGTbUN2qvikEPXuCHS3FaK_O9DjiJ6Dsct4J6MAhvViOXhvfCstl39QhwUxeteqOldfg_Uk4nanSprlSXl0oT3BfAGK8NVtGJNq5V2WqEZTdgJ6HbzcRmLFZKH49TQRNz13wd3sRAzf9aWyCgesHD_9uxg8IRyus_xA41HgPXoh5vPg2QEmkzdMZdQty_j074nQYpU_1MRbViOBZvnESkv2yeR3QLNSs8IAwounZZTiqIxCUM7s7Pumi_bB9pGdjpDBku3KTXDm9MMrRy0o_Hz_cj1zFjZvFmlkopT7iQUpY7Kat9tqapO02SCZpJ9GN9o6Ct6gpPV_gcISZwnsXitr_z0boViD3a6kp3FDZxLBz6PegH84yQC5w7fT7zWGBb8auugjXpbx38npnPayV0r_I9eItjSJlekVJz5RSVXzYOOajidCCAM_wN4ATFd02RXM4OCdw1tiy8_mMBgYAjm3oAjTh9CquCE273iATT5tOjkTrO_DAKhij7iJ46G4L8GfmPe5iliNOPPG0FAZxfw9IvGwpxIuZsltpVqliFunA0m495aguN_Yd_9x2yxXOhi59BWqhyTslo5kyflYcrDbLYa0YJ6uGcVRR1DC24uboeQaFTBqVIZK1P0f_EWyHHpw4pSDGaZToSVeoDb6_sp9Ui7MT5pBQ4mEOvHGAKWEhF6me5gO7JT9xIj7Ok27WECSGJavPi4l_kYTwXbznJR4UECyY7ydtzKLdbXLiI7qzLLOMdAL4HdXMrO3lcjBPUqyiUvfMJazy9DsRdw2GRxmeW0bIohpmzW72V3MQigoGeZ6xFyHK_xLSCKCJMJqsW5memlG_kuWqknWus3Nfp_D5A3VFMx4TANR1hdLaLuFdGxew9D0wxOOW_ajVmEplStZ_pKAV8sqVn7mt1viZ2dhUbzP4gjpWTU9vUJAhDjpRAHPGv5_0QutWlZ6ALU5Wr0T7fURXTQcEkn5X19UHsJQaFYQNwmCzydDb4ry7s4w7XlCAfKBB1jzI381N0QdfiiZxntXdpK8xKQX1niaPYFRSt_wefAx7UgSRVKCO9NSW6KspiuGBeUe0LE2vZ72
call fcn.6568bff8
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret