Function at 0x656883ac
Capabilities:
Encrypt data using rc4 ksa

Disassembly:
push ebp
mov ecx, 0x11
xor eax, eax
mov ebp, esp
push edi
push esi
lea edi, [ebp - 0x160]
mov esi, 0x656acd36
push ebx
sub esp, 0x17c
rep movsb byte es:[edi], byte [esi]
lea edi, [ebp - 0x13e]
mov esi, 0x656acd47
mov ecx, 0x26
rep movsb byte es:[edi], byte [esi]
mov byte [ebp + eax - 0x118], al
inc eax
cmp eax, 0x100
jne 0x656883de
xor edi, edi
xor ecx, ecx
mov esi, 0x25
mov eax, ecx
xor edx, edx
mov bl, byte [ebp + ecx - 0x118]
div esi
movzx eax, byte [ebp + edx - 0x13e]
movzx edx, bl
add eax, edx
add eax, edi
movzx edi, al
mov al, byte [ebp + edi - 0x118]
mov byte [ebp + ecx - 0x118], al
inc ecx
mov byte [ebp + edi - 0x118], bl
cmp ecx, 0x100
jne 0x656883f6
mov edx, 0x656a9124
mov al, byte [edx]
test al, al
je 0x65688454
sub eax, 0x30
cmp al, 9
jbe 0x65688451
sub dword [0x656a8fb4], 0x390c40ba
jmp 0x65688454
inc edx
jmp 0x65688438
mov eax, dword [0x656a8fb4]
xor edi, edi
xor esi, esi
xor ebx, ebx
or eax, 0xeac0a47b
sub eax, 0x6417f41a
mov dword [0x656a8fb4], eax
inc ebx
movzx ebx, bl
mov dl, byte [ebp + ebx - 0x118]
lea eax, [edx + esi]
movzx esi, al
mov al, byte [ebp + esi - 0x118]
mov byte [ebp + ebx - 0x118], al
mov byte [ebp + esi - 0x118], dl
add dl, byte [ebp + ebx - 0x118]
movzx edx, dl
mov al, byte [ebp + edx - 0x118]
mov byte [ebp - 0x169], al
xor eax, eax
cmp byte [eax + str.CLiP_keyholder_license_is_invalid_or_missing.], 0
je 0x656884ca
inc eax
cmp eax, 0x13ad
jne 0x656884ad
or dword [0x656a8fb4], 0xccfae148
jmp 0x656884d1
cmp eax, 0x3b2
jle 0x656884dd
mov dword [esp], str.The_remote_storage_service_encountered_a_media_error.
call fcn.65690064
mov eax, dword [0x656a8fb4]
mov cl, byte [ebp - 0x169]
xor cl, byte [ebp + edi - 0x160]
xor eax, 0xca64b17c
mov byte [ebp + edi - 0x14f], cl
inc edi
lea edx, [eax + 0x4203c4b7]
mov dword [0x656a8fb4], edx
lea edx, [ebp - 0x14f]
cmp edi, 0x11
jne 0x6568846e
mov dword [esp + 0xc], 0x11
sub eax, 0x31fc9ab
mov dword [esp + 8], edx
mov dword [esp + 4], 0x134c
mov dword [esp], str.tP_QNmxLLXUAp5GkS4WPVCsSd85TAgujxmTF9Q5cMX3ppJNxx_27hi6jtKitOxZzOOkBCv8niM7TNQBkWF5HQzDu7Wd3OZlSTicicQD2dzUGA6x5Pto58NwoDblf6MDp2NnOA0xvMxbKQ9Mkulb2ZjDpIlSReB3D8OcmI2lcBC_zCVnbbZDtBERV1qmwjTGWOZvITKcymaUeyVUi2GeZnQwiORkAkx1kFLD5nsnUYLGrz2loahj74aucPBgk3lsrzERIlkO8ABl7y7NWmYjUJ7xHs08_LMMU0axKoNNuGQ347Sonq226FTGqJdldvejD105tGc4qNfPCrEVnkWIr_EqvcPs5idJNigvag5vPDU7sWZ7lyfw8cvsqlMzJHtpr_nJPrwOhrpnHbIX6VXTYMgAvYKSuPHEu0z1Wge954DgZx4PynxEzMmWcIAvXwCunOUWSB_43zMrv7oS86lBCg5jVgQrA55aYL2Bc3kPtaqXs9eiw13vCWOZZm_PXpdFzb2tS8S6VYq6vzAPzfk7XGmtHZUwlLvGz4663Gt3Xq_aH8P_tI5AEizByJguUcxtXAkqWbH69NCs0M6kSReuesT7I48VTjtH0j3hJ9Yc3rhnqpye7gnBjfN2d0TqAKrPS0paLLwL8W_WnZ3ROlP8bhgbGQUBer5CHmYuXul2eohWnCpCcl5O3BEoO3kH0PLTXABoKntz8GOV9nitl6DIzplQ6juqvAeKTx0T8RKh412Da4eseAmrMu07iONhIqYPAlJT4tgBy2AAI2OwIvmpXVab0JW7y0XHhHloW4SfYgX25HlYbBHeC06YH9lAsvQ5HAaJIO005BJXNgBYofHBnDeMj22gsZLcf5pSGE56WonbNXCSd5AceDPvomTu4OkFqcU_FK2Sucd81sbv_hQWfIHduM8LYgBYtyxr61r23KXnv9N8mO6AC6XBJNHtrEjOTvr11o3efsPlWQ2LDwHgARKcPCnxVPFd40QGjdhDWvBlg6Za5GGs0npViMeXYhzZClGF_iBlGWVCICpfZTmVXbsmOeAtPWyGUEonZ9P4w5IZeSDNDNHX8RmD2Psss3iJkAygzZo4jCiHXFM5SmRonZMV9pipJgmm381C7ZbZduUrI5w4EHIAaO9qVz1CJAOE2jXDcAXT9NBTawh_9p4Ohll12L3V5yGeTFyMCp_C5k0XM1hArikTqSgNPOuluoYUHn65SJoXqFRr6QwAaiWx10K51YEpJ4wF76k5t04pBslsNBwOakPZn9Z7KCHVbYmlNoZul8HX1JpftVBclQLKi7cDIUZwP8R8XCA3BG1pTGE9XJbYHmt_1zpMykJjr0cPuE3ETRXqQq_VEQr27DIpr_gqh2HTot3rjHMQklnlSl16j4RLw9Fk5xWKPAsCM6HZ7FkiGFz31cengvUha82hzHmCaOZondnKXA9JR7ToSpGslirIj3Sm_jjHY0MFAD42qD8nffXCOqwRBChrJDIqutlaMAOc_Oj1yynFHsEWjEFiWRweMy9DWcRbKgJMngEBicbKUDvEa4jr9TEd2viOEMsYDvsksOiwh5Cyn143UDRE5WwJHHXidS9DO24dDUfyZZbwO5mT6C24XufmrQEqemrLsFEAETc6s908M6ACRI4UyDx6N2_haz0yLUtJeRt8NhWn0Ef4hCu76Z84hGUcAugCBt6pKYjy2i77ktI3h_qyGTPnYbpETAKYVUQFuZIzgSZcxm4nznW_i56y3xVTjRq2YawLg5QANCtomh3gpHxmB1LGc9OLztoUIwKGHx6p0gzyKmpRHTDlBKe_YJKl1cTE9PQGFjGUSh6gnxpiBUcXPkbsuiP6CAa_yy0BJJrjzaSP3bbVWB8_w4s85Mw9RqpOCEhYJNA7Y7N7XSyQ3X92v8MekJYKUTlC0WnAaZv2xGGssJvXF139G3VbUWHDq0ChpYkaD00XE_EMHHKbY5Sl8ya2ja8FsUfs5WKUYzxTbGEXoYD_jmAEg9ZyaY1KAMO6_BKokJfeiVvwpU3UOCPnldoU4uUbBva1v4SWKknUvz1Ox2suH3MYfkgnIhJ5ywCOWRtEws3KJIDn7oy_KFTSNj0cxOlmBbfhdzjF9rsDyvfP7fHXHdfT8LehplgKC85gB2tHAMeoSBjLvNSosNH6WWp0npl_OT8cLJpqmyY1MRPga1_wGay_8Dj1W9OdDi6ijOaENZ4GLfZrHpOSzdJvvFErynrys4RrEAgVoFVvzcu5wTiRnPaV_ROuo0E2_nw7K7tHIxmP8A9s5bl2ZZGILo1mSFAHtRElyRD1C16g0fPmeW2rau_qmAaC24KPLac2xZcRfPJn4u8xxcWZbZ5KcPcpoyol2fJuGzxJBCUmLcyNWbE3EhxVbPeiGqC3xoVFMPfpwjmng1qhP8jLpkWtXCf6sX0fO5R87Y4Qjj643CwKkVQlU1N7Ibx1wfihnrQW1npu7zGK423vwypMB9b1TMy2FjXoTRzwcAwRbfJZU1tEmGln6m5e_GmqTu5kPb58OPHlynjJBgpncBC5VMgxfm0HTGnEFHfgUJB4rCSgG6AOji5G6C6OsqR9HLzFwyAZnx0Vb_9NRfX9t37dlMEgqD1j_gWqnDtN5HGUAzS4EX3J4NG8lc8qFKBfX4iEHHdHshpYzSXDVJrNuJV2Ls4RdnjTDuBpkgMcviYeAw6z_m6AVlOPCIkVA4RF7Y8vWc5J3GWvkOyyUOKzziDG_BovppoUIGemK3_jv7e2nE9a_eynuFRBLyW_AjLgjMnuQKnsGNtpbNOCLMnSgyfb6O6TejOwz6QTezwU5ZEXNIUbr9r5VopncWAV2__WcaiG9t2RhVl1qci3QI_5A23bZi9JJZ_oobqIsQ0T9Y1ULwJE4Uq4l9KgwHA738f0DNRbMKa8HZWEig7aCUebCwFR4f4gDHv23Um5q5HtohtuwuzWN2Bwi6LZoTw9KJXM5dnaIY1b_txqKLJcwvy4lrCuHhHa8dfI33vWQhKgahXamjwF9sHFMZVaLfnh8TA2ZJ50sCaV5NRVEn6KFTxLrIRgzt737C8IUyaaMLBvE4wkrzcnCQ2XARtrR66P4cyq2k9ER5UW_wFaqSMNauMBfhChUDuS5XPoddIBKDh0LKGHWpIdBq3O5e_i_n_da0wf0aqWfZgA1cTARz7mhlzd0ZoXGRdUARfxqWmQo8ArNFCAl0s1xEX5iiLOIFXIyFvZ6f8GSTHt9bpjjl1_clTqfpO3w_OSDemRV5WA7RaCPMI_3oJ1w4ChpFs8LTcXmzQTefZVbdYDc2jZFBmU7V8X8V4w9lpEXNP1uK_epb1dxk8aFRrhO4BWV2_vgB5gwtfWHY1l07HfHvDAxKfgQusJaYrn61PjXeGXLZ8qOsf_tnkBYcpUKVeRuxLK76iPQE4scUvs04sPnIg_yjGEFW3pnawCjAQ9RS94EexCo7HRq2Cc7fkzFG5F6hrMNjsFEIWPz93oD1iRTliAuN27BND4zeVrjB28qv1HMzJMgsAI0bFVYa8hizcOT7RdF7RfkrZjCFIuVF6aNwd9Un80YC4rTMWttHIsn8BMwnG_gzhkBfn8XS3YdDjwsmdwzN6ywPOg8S_tFyUxBI9WWat1S5KzRgJgbCFkr6WnJddmw_me_mQJdQuIjeuhWWeVijLc1bjbyYm4Ob8QyysvBKtwHbWE2N_KxJcSeoKSejvTZtf8HXJbJinyZB1DAqCDukqd13cgHhg2jSGUv4S8IjCTQRacltwAIYfy_JivSmU4nTbinsvNsKvi3VZ0LJK6VNHG2k0rnhdL5NnQEbI_GykW48SWvS059rEU0Ht1qW4drUq4jqVUtouVbgfPjyMmzaNex8bTt3STs4jbh4LVQuFF7tlprgyAvKVeyYm1mvxc7ugMH35w4bxB7KhffAEN7uwiKII7QrUduACi8fk3owYIqWFiE7Ji38Y2AJUItV0aPRsE2_A4kshjLD4SuBbUe_bJ0_I_4o0NEiOmWwndEVoP50Z_n07j1OfvPRiX3qo0VmEd
mov byte [ebp - 0x13e], 0
mov dword [0x656a8fb4], eax
call fcn.6568bff8
add esp, 0x17c
pop ebx
pop esi
pop edi
pop ebp
ret