Function at 0x656875ec
Capabilities:
Encode data using xor
Encrypt data using rc4 ksa

Disassembly:
push ebp
mov ecx, 4
mov ebp, esp
push edi
push esi
lea edi, [ebp - 0x156]
mov esi, 0x656acdec
push ebx
sub esp, 0x16c
imul eax, dword [0x656a8e04], 0x590f371e
rep movsd dword es:[edi], dword [esi]
mov dword [esp + 4], str.Failed_to_allocate_memory
lea edi, [ebp - 0x136]
mov esi, str.No_principal_name_registered.
xor eax, 0x313fe50a
mov dword [esp], eax
mov dword [0x656a8cf8], eax
call fcn.65690fb4
mov ecx, 0x1e
mov eax, dword [0x656a8cf8]
rep movsb byte es:[edi], byte [esi]
add eax, 0x7898e6d0
xor eax, 0x44e87bc3
mov dword [0x656a8e04], eax
xor eax, eax
mov byte [ebp + eax - 0x118], al
inc eax
cmp eax, 0x100
jne 0x65687656
xor edi, edi
xor ecx, ecx
mov esi, 0x1d
mov eax, ecx
xor edx, edx
mov bl, byte [ebp + ecx - 0x118]
div esi
movzx eax, byte [ebp + edx - 0x136]
movzx edx, bl
add eax, edx
add eax, edi
movzx edi, al
mov al, byte [ebp + edi - 0x118]
mov byte [ebp + ecx - 0x118], al
inc ecx
mov byte [ebp + edi - 0x118], bl
cmp ecx, 0x100
jne 0x6568766e
xor edx, edx
xor edi, edi
xor esi, esi
lea eax, [esi + 1]
mov dword [ebp - 0x15c], edx
movzx esi, al
mov bl, byte [ebp + esi - 0x118]
lea eax, [ebx + edi]
movzx edi, al
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov al, byte [ebp + edi - 0x118]
mov edx, dword [ebp - 0x15c]
mov byte [ebp + esi - 0x118], al
mov eax, dword [0x656a8cf8]
mov byte [ebp + edi - 0x118], bl
add bl, byte [ebp + esi - 0x118]
movzx ebx, bl
mov cl, byte [ebp + ebx - 0x118]
mov ebx, eax
xor cl, byte [ebp + edx - 0x156]
and eax, 0x446b3249
or eax, 0x400b2200
mov byte [ebp + edx - 0x146], cl
inc edx
or ebx, 0x591bee86
mov dword [0x656a8cf8], eax
lea eax, [ebp - 0x146]
mov dword [0x656a8e04], ebx
cmp edx, 0x10
jne 0x656876b1
mov dword [esp + 0xc], 0x10
mov dword [esp + 8], eax
mov dword [esp + 4], 0x1210
mov dword [esp], str.tZ6s07mpuRQD9xpEBTA3vrnybuMDSA9fRfpRAcxaGfJ5dfSJFxps5fufANFLItYhhtPmKrkAymQPUcuGM24HqYk5RDiDqiookbgQd1WHUFjZmKC8GmT66jIDfHETt_bNL3K36HeayKcf01CjcrP8JnWe921CzmhnTr_YDNMH91758yiJbNnCnw9096DFPTQSCNG6clH_xdBiUOnYESOrBu9yR914T9fEsCLjvHFIzG9d3mBkuyGEc6o6LSSWtoLR6t6MI2RD1qLZ3hjwzDSjDjp7Xu2CmedAXrrHMZCyzRfpvjAs9Pc2eDnifyYrnyZ0yjrOm2G5_QG4CXPrMnIXMfpoNly1bUNlg2huejfz9C3ClFakuCKagzyWaYPDmmN0FANlD4y6B_W8MhWWMEGQ44zyvA7VOdgq7D8svLCKQoUCpWK5sWA5D2ptRPH4lqOlALpf0HQRVGB9C6glEFodlAbuNcYAksXWllMtqhHnXNiP0EY2lNOfOGfakC11eI4GmN59mJ8szTH4ufM5iB8WyVw6dPwJoXQbmkCCwMA6ONjrXSMaxetMuJ6C60Zfm29FmjiWIxj8_epw_cOtaEEZcC0ZKj2BndwBnVl_96gY5kUCkEXIU2Os4WDez_3RuptG8fMxJETArH8LL3ovRl3khUe258XsktLOoORmRjAk8IWaoZx5CCpMb46V7LqogWtUv84Ms6blU3BEspns6gbB6oSfLopeVw_plaJXYxGCbg5TE9u61ipJTnDE4rTThATx2LzuYTRy1pDgo9uAIAXrnxljTggnuJYs7u009weiv76mC_5NM4g64UBJWYo6fr0dPJSl7qhVxEgYEFkZ_9DjqAVq75zFGbOQuRIckwdpSWaFMY4AWBZ_sngwv0sEwXLGGVS5975Lgm5AXuIXmxWYt7uC2qBPufzJbE_c4b7ml1xEdDpbrrYi7dLNi51cbtMFrkAt22tJ3pPHfIfuGKWDtQJ54OOyublnxVlMcA4rBOCz2NtzJbgwSDTeRX1UlTY6OMdBlCF5JS2negp7z2dz1tuq_gH7Y5T_5PkFTU4hlqy3Zt8KfaDt_Q0483Yyyh7Dwh_xqKgUl34WXSy7ngqJbY0uQBeaiaRQomMdLh3AMja2ynvaFxjfRT2qbcqJZ95b3a7ne62hHX1X3ZKxqmW6Dub8PMONxmHrrcnviLCbhKO3yN8k5SFOIYKTA_Z2vVKkFbHUbu0qYcGD10DAWpDlwEjRH0szGQvpH71uD7wSzjKbDxDxVClD1unpYVm7BRWM9FxMJmXTFpiFxN_csSK6LV8zcdM7aydPJnpdFi6Uq08SxsPKZOphUHh6iLyHuYIU5y2vwvnMj3mFmaJw_JNai4MIf9_gkZY6HIcU_wwVdfyLv_o4rCn5ZZeY6ueRZWAf9FMdg06bPQlp8i0LFVyk3m3LAyqCaHrTtFl9uhpQQLxwXqM3U48EG4__aOIoWHJanZC7NbnFzkuBYrPuKSVuPld_togZkcqRAvwCgzP2bRPJjsI9T68dxwRGVEqp6CJmBU586A_AClL0gAjSwXNURA0du2UKjcCIouN7SSTzlJ3b1RvcMeLx15OmctWjKPB9FyOX4RmtDhX1xoUXmniK3YjCRfRYLLrHOM_a1t6mXls4oPYb6AQVulxomsc3gvPD1dVLb68mmUmwhPKpUlH67U3DNkSZTvoDb3SZ_l7z0poWBNRn0tiWsqqGqJMaXMbmT5uTTbbdU6LR0nnxsmVbL7VT8G1ct1vUns7W9CpKwuWWYCzypkhCUWSu7VNUQ59tZOETrIuxY2D6rbNhdL8SWRnXjLG6x6t7HrvhqJNWxO95RYb57vm7qsYJoNjmaN_MRgds_hwzq7x9uKOEzesorrlDEp3gjuMqK5u43A5TaHdMJ2lBVD2Eee38D_L7RqFLJcxZcQjWI9cYuUV9bua4fZ6PD0KQ50GWdkLN6IMvZcH9VpKXAw87VSDdKs2VAXX0HMbBOm5nPNELSEeOM0eGbEI0cpNIVqgVxveCN6kE_HIhqAKPcDxrcoR5RR0CwuUdHMBkarvussjf9yVIO1yPwDTSCliFpNEVKsIswjWicV8MeDqCvNkGQ0luk87yXXo1n3RvqIBW1bmp5Xe9Gal0j1zXYOfWVJm3dca_Nt952qPG3o6ebjk_nLOgcq8hHegytppmco5DoX6ZicByK71N2gBVOwIAabNFXvaP1Dy5HGosP8qewim4cPZpO4NVMDsaV89Sioy2awQJRnoVZavjzuCKcQq4cZdMEjY3CpoNNxIT09aDvrRjZjFdELP5z3ta9rFK7e5Qr1uz9AHbBlgFCJteQknVf1koAEsQEtnEoME91F7KkaHfN6Z2l4UWU1vFnbN8xW0qkkFST1r57e7jsHJH7d_9bDn46SRdcf6JuK5XgGj0N9XMZQUdjxzKvAc7jTuT2JpgcHxeGjauC1QyLfBD0d2ffYPdJGHBkOtfJvN3iZ1C7f63zfxQ0OwX38oZXgwK5KawbVt2Rb0C4vaEKxSlWmKDuJ_8nR6cvMPLPGQWfNwmqyOejGquX6hv_SVJF8_8FjV0sRrTwxzqaC_21AGlh9y3dxFe45xDoiYNiu8oYj0x0dEpddkL5QNr6od6fQmWhYew7grWGwu_jqsbfOvhgB23v7azYRpgLP_lrtqjfyWSv54187njAqmzsMg4XxM8brN2zB7sBm_gytR8YHvZRsadkMbUjFRsKFw9Nch91Hv0yzlttS_Txg3tFxx4bgJmaakgwfpUIbOEJqRCOS0jk1lQTmjtvb1wdhRshecEuictZdeGBRUUbwLoURCmbg87_lg2TsDW9daQnpvXX0YJZr7SbfOs1uWxeiKbuMoAYjokDQlV4boitbFKJpgKfQJ8c22Z1oGj0DQ7HtXT8OeAm7jOF77VknJpIzaZ7HMawMO_jfbd9UJqJ4ooFFboNYNIlTfnbogTetGDfyAlUBHNa6aKCozZJ_MTyqjllgwbDtqbEwStEWtRcYWm3FyolPw65C6tFFIOz5WeKZRzkMneWXgwaKKvIuzm7ch6C5VBzFNlkOY70h33op7rsLSHiMtXOaEEX9rfB1Z3DtUAHLKOqPa1vo92PwfOBS6e_D5tIzGPQEVu8wgbpn2NsING9F53_9LC_13XbrrEqGscc_1ib9iZG3qZ4HHs_bncZvZJRbnza5K4WUkeiTxNYZBuX5bfeiw5fBBiVhjrkaqkoH31j3HMSf5Uj3TnNXnUCSVe8YW9wNIVG96E3sX17RvNOd9hZST3f1CJWxXCa0P_MtbOA7dXS5OrH6cS5Ja54vu8AvtElY0D9bT11PGVFRluIl1RluakIh6HYUM0vXdXSjYlKgmGUVMfyyPgDCGknjihowtE9RxyWpzMdDhO2oeLSGSmwEiQIMkVKpLynoiPr8ST3CfNk0yBnFVZF7SRsHLruicGjtdVPZvh1kmFjT02k3uXGNdWsDF4cZxTYkZEpGSanEIntDJLepjnv6DgHMqh9oulmVi6Zs4jADISJRyR1dP4xJfgko5JsCVz4h70swPGL4L8o0tT58wvoH9jTStD0DO_9KD2rQKVjR6uULy3Z2VwGRLBvlVgpVK2nMKsw9QA6dQtI5pwQriDAa9mD6UD44ac4jIjB6E5jnYWTdBPSOTkYO3ImwLUs9p4LmUJsSnJNtP8Jagib58Ip_RvBUklSSfcABJEnBZOAtX_4FnJ3ZkCJjBtS5LPso0o0vGlKtxBJla0EtpVUyXFGoUIuTHmHgb6i2xpwzsTYx9zOrHfyjCrPz4ykdQtfs3fLmkX6Fero8N4hQah0mCbxLIo_5EdHnYv4X1k1e6v5E0Zm7BGOhIMFtAokd09TGwOQB8726xI9LYxHcEWQM2VM1jeXf7v6YUHNUBLnUzPUhHV61QiQW35DfgSqRvBrZyoHgGuxRLtrUXeOUHiUe4bk2c2odcQZtJCH47wCK5Us9ckxRKBiL5t_UF8fRjdx7dV5KWLw7TTaD59ptnXl9lfxhFcXjUYVZ8mhoAxFRHSDjseVvode
mov byte [ebp - 0x136], 0
call fcn.6568bff8
add esp, 0x16c
pop ebx
pop esi
pop edi
pop ebp
ret