Function at 0x65688b70
Capabilities:
Encode data using xor
Encrypt data using rc4 ksa

Disassembly:
push ebp
xor eax, eax
mov ebp, esp
push edi
push esi
push ebx
sub esp, 0x16c
cmp word [eax + str.SdbFileDetails_missing_array_item_for_SdbFileType:__d], 0
je 0x65688b97
add eax, 2
cmp eax, 0xf84
jne 0x65688b7e
call fcn.65692978
mov eax, dword [0x656a8e1c]
mov edi, dword [0x656a8d70]
mov esi, str.TPM_1.2:_The_delegate_administration_is_locked.
lea edx, [edi - 0x781686cc]
add eax, 0x6e1df881
lea edi, [ebp - 0x148]
mov dword [0x656a8de0], edx
mov dword [0x656a8e1c], eax
mov dword [esp], eax
call fcn.65693ccc
imul ebx, dword [0x656a8d70], 0x3f7a6abc
mov dword [ebp - 0x154], 0x29e3d079
mov word [ebp - 0x150], 0x52c0
mov dword [esp + 4], str.The_specified_CPU_Set_IDs_are_invalid.
mov dword [esp], str.This_operation_is_not_supported_with_BTT_enabled.
call fcn.65692fc4
lea eax, [ebx + 0x18d31797]
mov ecx, 0xc
rep movsd dword es:[edi], dword [esi]
mov dword [0x656a8d70], eax
lea eax, [ebx - 0x59448085]
add ebx, 0x4e5a8c9
imul eax, eax, 0x82e8d91c
mov dword [0x656a8e1c], ebx
mov dword [0x656a8de0], eax
call fcn.65692978
mov eax, dword [0x656a8de0]
add eax, 0x1a08b6e3
mov dword [0x656a8de0], eax
mov dword [esp], eax
call dword [sym.imp.USER32.dll_IsZoomed]
sub eax, 0x27aec2c0
push ecx
xor eax, 0x2642863d
mov dword [0x656a8de0], eax
mov eax, dword [0x656a8e1c]
lea edx, [eax - 0x42cd96ba]
mov dword [0x656a8d70], edx
mov dword [esp], eax
mov dword [esp + 4], str.SdbFileDetails_missing_array_item_for_SdbFileType:__d
call fcn.65690fb4
xor eax, eax
mov byte [ebp + eax - 0x118], al
inc eax
cmp eax, 0x100
jne 0x65688c7b
xor esi, esi
xor ebx, ebx
mov eax, ebx
mov edi, 0x2f
xor edx, edx
mov cl, byte [ebp + ebx - 0x118]
div edi
mov byte [ebp - 0x159], cl
movzx eax, byte [ebp + edx - 0x148]
movzx edx, cl
mov dword [esp], 0x23f2
add eax, edx
add eax, esi
movzx esi, al
call dword [sym.imp.USER32.dll_GetParent]
add eax, 0x168c09e9
push edx
mov cl, byte [ebp - 0x159]
mov dword [0x656a8d70], eax
mov eax, dword [0x656a8e1c]
imul edx, eax, 0x5b17e888
xor edx, 0xa9f087ae
mov dword [0x656a8de0], edx
mov dl, byte [ebp + esi - 0x118]
mov byte [ebp + ebx - 0x118], dl
inc ebx
mov byte [ebp + esi - 0x118], cl
cmp ebx, 0x100
jne 0x65688c8e
add eax, 0x61e384dd
xor edi, edi
xor esi, esi
xor ebx, ebx
mov dword [0x656a8d70], eax
call dword [sym.imp.USER32.dll_GetDesktopWindow]
mov edx, str.This_operation_is_not_supported_with_BTT_enabled.
mov ecx, 0xef3
sub eax, 0x47a80433
mov dword [0x656a8e1c], eax
movsx eax, byte [edx]
inc edx
test al, al
je 0x65688d5d
add ecx, eax
cmp ecx, 0x2323
jbe 0x65688d35
mov dword [esp], str.SdbFileDetails_missing_array_item_for_SdbFileType:__d
call fcn.65690064
sub dword [0x656a8de0], 0x60ba0050
mov edx, dword [0x656a8d70]
inc ebx
movzx ebx, bl
mov al, byte [ebp + ebx - 0x118]
and edx, 0xdd1641a3
mov dword [0x656a8d70], edx
lea ecx, [eax + esi]
movzx esi, cl
xor ecx, ecx
cmp word [ecx + str.SdbFileDetails_missing_array_item_for_SdbFileType:__d], 0
je 0x65688da3
add ecx, 2
cmp ecx, 0x1da
jne 0x65688d82
add edx, 0x3664007b
mov dword [0x656a8d70], edx
imul edx, dword [0x656a8de0], 0x2943a6b1
mov dword [0x656a8e1c], edx
mov dl, byte [ebp + esi - 0x118]
mov byte [ebp + ebx - 0x118], dl
mov edx, dword [0x656a8d70]
mov byte [ebp + esi - 0x118], al
add al, byte [ebp + ebx - 0x118]
movzx eax, al
and edx, 0x85a5ec83
mov al, byte [ebp + eax - 0x118]
xor al, byte [ebp + edi - 0x154]
mov dword [0x656a8de0], edx
mov byte [ebp + edi - 0x14e], al
inc edi
cmp edi, 6
jne 0x65688d1b
mov byte [ebp - 0x148], 0
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov eax, dword [0x656a8de0]
lea edx, [ebp - 0x14e]
add eax, 0x42fca403
mov dword [0x656a8d70], eax
mov dword [esp + 0xc], 6
mov dword [esp + 8], edx
mov dword [esp + 4], 0x12d0
mov dword [esp], str.w5ydG_ntXdLBbVhU8FJMKr9EO1_Ss6xhKUrrtMh4GY4UCcNHSENku0X3Fi7s7C5OP_PPhAun2hEVW1bRo7yLOaD8OUmrZKB8TfAzk8QuJtVx057gMyXjuI0iCFqiWu7jdzdmGV8qtYeQ_diBa_j6emrRrEbcTpSsXMEohlUVDX3BkLqdvoXE3v3W8dicvoRMYNEY_kcN_Rdc6xBQWE62b8AAuWar5aCAaj6wLaa9DdBYs5u7wW3LlUvyF6H0EoEY4zKPj2EK3SMM71nsPFxtg3oKODTQdv6xCpwLRF22K9r08jhW_TQlwGAlLqgMW_0_DqdH13IBrvSSGqz8aW6hOxTV8vE0EPOUN5wXBJI1DIkmbIM6xiz4BQHgZ94TXjuqiBobgGvikW4GmIRkAcn58cIg4T4KzyY_vu2SyxnU1VqLFlRqTVobp2Au06fFSh1HG5ryCRHt3elglxo6O7PGtwCgpyZ7PwNdktU8XLJXYiuRkjDTCoCWWKEKsp03jRFFuSpFXnae3Y7kCxWEP3VNHgCWTiziR1Yy129_3MPFgPGaPURfi6WamgivfNfzRjJI9DBF8mGMlDoiNkesig2H9Sc1pVst0RmJo1acK4wM_jbtUWmZ5ni7dVzIFyoeUdG8Wgn27UcwrXaLlcxMJj81XDP8GLATAawpVcpAYYv1FV8lzEhMI3_zDg5ec3QbL3fISbOrqmZiGtSgbzVuQPWTVRaivlNjbwrJq4ep85BX0pBB7HRsFQpozaZ1mscQDGsE5VPSdGcuitlYjgMxAVzHonCKFeooIEdoSBHOPZmZwZ2kTwrG8G38s254YhS62esi01LFTNl3deXSXyyF1JN21en193IezNwLyZ47gBjYQ9nmko0OyOwd4_ZALMRUh7rmXBTJFzpYJ4KDJChx8XEIBG4uL3Cp7DnJqUJBCJiXB1zXFRytN8iEep13DIGyawwZCDzeReNoIQo3jSec8e57CDyTmhWyI524SJfhWi3pCL2hZyloAiGlSGjkVTYn530pndAMaX41abG5jyWJfDOXCcHZgSEgD01MPojLyI0UEiAs34H9co2mzS2VSisE9tuiwZiIX2PlFgicMK7l2ttnRvZjB9LS2WkXTwLbaHQWbYPul_0FPj6ULe1aqhq2nOUQogsChwxcUFlA5ksLFeKShYWmDzAJqczTSmCL6NYYxT1fXLUMfaaxdihTTRc6Vz2Nqi4Gwu0s0vGBihg9sLXpBmfs6aTGMjH8i9Ld9okSkL83YjEbvHYI5YDu4vYec0ycg75vMpnPi0tbUfn9ZkqKROk7uAACdCNwP_ZPpB9ARsHhv9NiPfeDUWw05YD4mE3miwyN0NTLT8l8Q7bmS5sM77q4GI7lXXIWTu5Rv3LfyDJiJ0ym7Hanp239aTDmY0EE_5daoj3AaRfNOhdXnWY7xIN5Y1UeY8S6cdWs6NJ3IrL20tNJvFt4nYjHYx3RsiJRvgBuBRoP9PcR46h0DQhORkXqOTMWpb8Cm_FDBFe__S_6QOSIlUKQGl40h5ampeXobYV0cGCPEpRVmA_K47gbDdpwb4CbiMudgE2SjVgXfCvTYZYN6nnlkGLy6rdVn88BB_kTvHjPWgqn86Fjxf7GAd1y2vxD5z5FQ_zfTaPzvYhUbtZ9tZUqMoH3ap7w7R8u0WdA2ImGgd6YFNnm8N5WtU3yXUW1QS8RcOq_VPTc7T4t75YvWrfIRcVa5uGoB2HUAr6uvmBcY_SseUdn_em_SXz5Oxo0RO793dy2H7ovCVDSBkX9M1tcali7GzsQsECb9HLFXKdQl96Hfwjfr6zP8Hlh3zsPWw8q2XwBAfENyUDp3HLbqNviIwEF6hkCgTKKJHDgFVoid83OWTu5jFSH0ePdFPNAAYRD0omYxlYLNZSH24DvNiObPLWIRpITjZmcOr5QaXxB2tLKGw7s4qtD5nDecq8kwzab_J7zbAWkOV0gstg2GN7OJzTq1x9TRkcDYiTgTlf8q9PJEvjRaMIMAi3pchQIVUIbywvoZpHcCsKdzFKs09K_zsxufYep32JilgIOMHoIUeUODp75ySVrT7VS32PwYyq4g2VQxBMlwOOV0NTRS0Ix1qeowB5HXjT_Y95vtO_DTlt0AkhvNaATdDQDmazaRqkCxg5igOo7TrkjnFBoV6YXXM1arW4EeA5pJLrUY1sd5AtHKFeobZsbOZrv2qhihnZ_jIEu9XyQXyEk3ltYzhfYZeUkx55WuGe3Z1vxfjHOMZnahYYWq1B3NtaIQRa7srkkGRRtbkSym53RMBVxaIXKANA7oBiQ10ZdmZ3LmMInLSXpUe2lEUtamEKS7oQjnur6WN63Xi5wiXP96izBpEgroiz3GKJDAlqzCEiVKKjQHdIIoqRS2LaLpAfwHePdq2Dn3EpFyoaXX7gAYxCeOdm_BnfdVAXGHwiIK39hgowheYmJyeqTTbVLlVH6LKs96PMUJraKnKbwyDi7r39InuUuJ4qncrDQ3Oh8L1QcwXauqSLJ7tIMZzcL_jbE8Z5ttteedWPj7Nd411FiE0QgYSucTT055sipJq24KMufed_6RkZvOYXB9aYMLdZ5SfOrH2CA6ELI9i3hYwV53yKtApAoDwMo6PsXeUwiwhMjgpAMi9zTaqio9_O48Hz_sImXmF9BZj_sOfMSBkChTAhAZKAVjA88dYKrcDWqnp2wQoj3rMNH4bJ4DWdc0MyJG1ik_tvPFoUgqA3Ppl2Cr1VfeXKr6PwNNP7Jp8K4urvzKGwnoaiQ9KUZfyBWMIjw6rm811nnead7HjY3kt9PzVTVHjYC8iC4tghvxdP6aq44AADQ5YowRZ6nXxjEUsj8n5ufhaH7D3EvteVz2_rkyCHw9KtXwk5VG79yjfFVVoq4Tg0asZa11pdtLqQTddEz6XgPXv5b6lS1WiKCspUSGKRqf8LW82ecBXwbuujB1GAHkpkFyrjLffso93xSUTcs_ISTGsMUmEDrjR03_dcuaF40Ts2eRnOLMZEkKYJHptcbygqouv8XDTO909mz7yTzzaaqL93fctNtzbiTgpQYPAWTEusBS7xPGOeLbz2zshqaLuN90iotXFyoH8ip_viJtzqRHDvUm8Cq129rYNdh7xvotvrviJavl38bkAwA1hSbxtM4PidK1Q4aURB6vk95S_TPscaZJATkezx0BoVl7o6l8w5fdeAGIejvmOlR3_kqfUU6e9BRnJAMYMAUdW4Vn3iNBTWEuQeheRv3FO418wZXKOD2yvbe5pgHn_Rt5ts3_FFOp_3CuFCMmLAiqbiYQvsQjFu3xMBa3uzQTYdGnAdQYHi5uO4oof5pIDpM0oojHumEfTNvDVK2bvEcuuRMQa4Hev2qwV42M7vAMVn0xv83zEFV2DGNBHE9HTMr4Au_B9iU3VMVoDvLr0ILAst670GUe3gZmLiRrdUKxvptQxbavxfDpkFUierLgmWFaB38PrKIePUPMI328S1Jhm9dlWhJ4LpIrU12LHAhhSN2Ts71GHRvEhBIYXBK1JGIyg_I6Jl9as7e30KYqfojukS93kyTQV0ezAfvrc5o9SsfW6jdLzJea9LvCJ2hrAt8HmpwECSOmuWBF8Gpl_2gubMk90CSlkutKWW43Fjv7FF9bDJ7jLOykhUzExmbq4LsuoTYmufTdnhF9zmXAleFMJiYtLSrqKfVJJedToPNTUSy_9qExEq46EVGnJRcmUMw0tqsAkGLC0qIuwXxBAr3qHQfM6zvVOvZO8svH3u1kusx6eer6_h73S5oehIWShrGka9tiacOeHdSEPyxEOTAV788cMJYtuAsW2R9lpc1pWGM89HHsdQUaegsn0Xfdh0IHYMUDo_SLNyWn1PoHQy_0BCYPbA81gl4yJ8oxekS07t89G7T4QXSZ8GJ165AtdvJqoYPGE2B2GUws70PALeJ3uGvcHUaIPETpfDmmfMKoYETVEmaSwy8WTi5Go8g1foejkJG0oTxxxvXnC75_tXF_7AFTFF7Qf6vFudv4e3nhCzOeuuDzDGH1vw0BTb4W0aejmZNw
call fcn.6568bff8
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret