Function at 0x65687360
Capabilities:
Encrypt data using rc4 ksa

Disassembly:
push ebp
mov ecx, 6
mov edx, str.The_file_system_structure_on_the_disk_is_corrupt_and_unusable.
mov ebp, esp
push edi
push esi
lea edi, [ebp - 0x148]
mov esi, 0x656ad136
push ebx
sub esp, 0x17c
mov eax, dword [0x656a8ecc]
rep movsd dword es:[edi], dword [esi]
lea edi, [ebp - 0x15f]
mov esi, 0x656ad14e
mov ecx, 0x17
rep movsb byte es:[edi], byte [esi]
or eax, 0x588c4b76
mov ecx, 0xcc0
mov dword [0x656a8bfc], eax
movsx eax, byte [edx]
inc edx
test al, al
je 0x656873fa
add ecx, eax
cmp ecx, 0x26c3
jbe 0x656873a9
mov dword [esp], str.VSMEnclaveTelemetry
call fcn.65690064
mov eax, dword [0x656a8ecc]
mov edx, eax
or edx, 0xa9d78776
mov dword [0x656a8bfc], edx
mov dword [esp + 0xc], str.VSMEnclaveTelemetry
mov dword [esp + 8], str.VSMEnclaveTelemetry
mov dword [esp + 4], eax
mov dword [esp], str._cHRM_WhitePointY
call fcn.65694650
mov eax, dword [0x656a8ecc]
or eax, 0xf733c09d
lea edx, [eax + 0x3285e535]
sub eax, 0x5d98e296
imul eax, eax, 0xacf938a0
mov dword [0x656a8ecc], edx
mov dword [0x656a8bfc], eax
xor eax, eax
mov byte [ebp + eax - 0x118], al
inc eax
cmp eax, 0x100
jne 0x65687422
mov dword [esp], edx
call dword [sym.imp.USER32.dll_IsIconic]
or eax, 0x735540d8
push edx
mov dword [0x656a8bfc], eax
xor eax, eax
cmp byte [eax + 0x656a9bc0], 0
je 0x6568746e
inc eax
cmp eax, 0x1c33
jne 0x65687447
call fcn.65692978
mov eax, dword [0x656a8ecc]
or eax, 0x2a165cab
mov dword [0x656a8bfc], eax
jmp 0x65687475
cmp eax, 0x8c4
jle 0x6568747a
call fcn.65692978
mov eax, dword [0x656a8bfc]
xor esi, esi
xor ecx, ecx
mov edi, 0x16
or eax, 0x2585d713
sub eax, 0x1e1fb3cd
mov dword [ebp - 0x16c], eax
mov eax, ecx
xor edx, edx
mov bl, byte [ebp + ecx - 0x118]
div edi
movzx eax, byte [ebp + edx - 0x15f]
movzx edx, bl
add eax, edx
add eax, esi
movzx esi, al
mov al, byte [ebp + esi - 0x118]
mov byte [ebp + ecx - 0x118], al
inc ecx
mov byte [ebp + esi - 0x118], bl
cmp ecx, 0x100
jne 0x65687498
mov byte [ebp - 0x19], al
xor eax, eax
mov edi, dword [ebp - 0x16c]
mov dword [ebp - 0x16c], eax
mov dword [0x656a8ecc], edi
xor edi, edi
mov byte [ebp + esi - 0x118], bl
xor esi, esi
lea eax, [esi + 1]
mov ecx, 0x656a9bc0
mov edx, 0x854
movzx esi, al
mov bl, byte [ebp + esi - 0x118]
lea eax, [ebx + edi]
movzx edi, al
mov eax, dword [0x656a8ecc]
sub eax, 0x7dc85a8
mov dword [0x656a8bfc], eax
movzx eax, byte [ecx]
inc ecx
test al, al
je 0x6568753a
add edx, eax
cmp edx, 0x189f
jbe 0x65687523
call fcn.65693704
mov eax, dword [0x656a8ecc]
xor eax, 0x8d5af469
mov ecx, eax
mov dword [0x656a8bfc], eax
and ecx, 0x46aa1d82
mov dword [0x656a8ecc], ecx
mov dword [esp], eax
call fcn.65693ccc
mov al, byte [ebp + edi - 0x118]
mov byte [ebp + esi - 0x118], al
lea eax, [ebp - 0x130]
mov byte [ebp + edi - 0x118], bl
add bl, byte [ebp + esi - 0x118]
movzx ebx, bl
mov cl, byte [ebp + ebx - 0x118]
mov ebx, dword [ebp - 0x16c]
inc dword [ebp - 0x16c]
xor cl, byte [ebp + ebx - 0x148]
cmp dword [ebp - 0x16c], 0x18
mov byte [ebp + ebx - 0x130], cl
jne 0x656874f7
add dword [0x656a8ecc], 0x565f2b8e
mov byte [ebp - 0x118], 0
mov dword [esp + 0xc], 0x18
mov dword [esp + 8], eax
mov dword [esp + 4], 0x132c
mov dword [esp], 0x65696640
call fcn.6568bff8
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret