Function at 0x403e60
Capabilities:
Accept command line arguments
Encode data using xor
Encrypt data using rc4 ksa
Identify system language via api

Disassembly:
push ebp
xor edx, edx
mov ebp, esp
push edi
push esi
push ebx
sub esp, 0x9ec
cmp byte [edx + str.Source_Destination_device_unreachable], 0
je 0x403ea0
inc edx
cmp edx, 0x1b2e
jne 0x403e6e
mov dword [esp + 4], str._Frequencies
mov dword [esp], str.No_PIN_was_presented_to_the_smart_card
call fcn.0040fbac
add dword [0x42964c], 0x3c3917bc
jmp 0x403eb2
mov eax, dword [0x42964c]
or eax, 0x78071a01
cmp edx, 0x1fa
jle 0x403ed1
mov eax, dword [0x42964c]
mov dword [esp], str.Failed_to_open_database
mov dword [esp + 4], eax
call fcn.00412770
mov eax, dword [0x42964c]
sub eax, 0x21ec8754
and eax, 0xa7c53114
lea edi, [ebp - 0x9cd]
mov esi, 0x42d390
mov ecx, 0xa
rep movsb byte es:[edi], byte [esi]
xor eax, 0xdf204717
lea edi, [ebp - 0x94c]
mov esi, 0x42d39a
sub eax, 0x531a169e
mov ecx, 0x16
rep movsb byte es:[edi], byte [esi]
mov dword [0x42964c], eax
call fcn.0040f4d4
mov eax, dword [0x42964c]
add eax, 0x74dff59a
mov dword [0x42964c], eax
mov dword [esp + 0xc], str._Frequencies
mov dword [esp + 8], eax
mov dword [esp + 4], str.The_authentication_level_is_unknown.
mov dword [esp], str.Roshal.WinRAR.WinRAR
call fcn.00414cd0
xor eax, eax
mov byte [ebp + eax - 0x718], al
inc eax
cmp eax, 0x100
jne 0x403f3f
mov edx, str.Source_Destination_device_unreachable
mov ecx, 0x353
movzx eax, byte [edx]
inc edx
test al, al
je 0x403f74
add ecx, eax
cmp ecx, 0xf30
jbe 0x403f58
add dword [0x42964c], 0x3129f679
and dword [0x42964c], 0x2281a7
xor esi, esi
xor ebx, ebx
mov dword [esp + 4], str.heap_failure_lfh_bitmap_mismatch
mov edi, 0x15
mov dword [esp], str.Beginning_of_tape_or_partition_has_been_detected.
call fcn.0040fbac
mov eax, dword [0x42964c]
add eax, 0x6f20beac
xor eax, 0x4c1ce2eb
mov dword [0x42964c], eax
call dword [sym.imp.KERNEL32.dll_GetUserDefaultLangID]
and eax, 0x76df
mov dword [0x42964c], eax
mov dword [esp], str.RtlFileMapInitializeByFilePath_failed__S___x_
call fcn.00414b84
mov eax, ebx
xor edx, edx
mov cl, byte [ebp + ebx - 0x718]
div edi
movzx eax, byte [ebp + edx - 0x94c]
movzx edx, cl
add eax, edx
add eax, esi
movzx esi, al
mov al, byte [ebp + esi - 0x718]
mov byte [ebp + ebx - 0x718], al
inc ebx
mov byte [ebp + esi - 0x718], cl
cmp ebx, 0x100
jne 0x403f82
xor eax, eax
cmp byte [eax + str.RtlNtPathNameToDosPathName_failed___x_], 0
je 0x40402e
inc eax
cmp eax, 0x1d76
jne 0x40400e
call fcn.0040f4d4
add dword [0x42964c], 0x70eaf9dd
mov eax, dword [0x42964c]
xor ecx, ecx
xor esi, esi
xor ebx, ebx
lea edi, [eax + 0xb3c821f]
inc ebx
mov eax, edi
movzx ebx, bl
and eax, 0xc914c217
mov dl, byte [ebp + ebx - 0x718]
imul edi, eax, 0xe38d5062
add esi, edx
mov eax, esi
movzx esi, al
mov al, byte [ebp + esi - 0x718]
mov byte [ebp + ebx - 0x718], al
mov byte [ebp + esi - 0x718], dl
add dl, byte [ebp + ebx - 0x718]
movzx edx, dl
mov dl, byte [ebp + edx - 0x718]
xor dl, byte [ecx + ebp - 0x9cd]
movzx edx, dl
mov word [ebp + ecx*2 - 0x99e], dx
inc ecx
cmp ecx, 0xa
jne 0x40403f
mov word [ebp - 0x98a], 0
mov eax, edi
mov esi, 0x42d3b0
lea edi, [ebp - 0x9c3]
rep movsb byte es:[edi], byte [esi]
lea edi, [ebp - 0x84d]
mov esi, str.The_requested_operation_requires_elevation.
xor ebx, ebx
mov ecx, 0xb
and eax, 0x6cc057e9
rep movsd dword es:[edi], dword [esi]
xor eax, 0x823671da
mov dword [0x42964c], eax
call dword [sym.imp.USER32.dll_GetForegroundWindow]
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov byte [ebp + ebx - 0x618], bl
inc ebx
cmp ebx, 0x100
jne 0x4040d7
xor esi, esi
xor ebx, ebx
mov eax, ebx
mov edi, 0x2b
xor edx, edx
mov cl, byte [ebp + ebx - 0x618]
div edi
mov byte [ebp - 0x9dc], cl
movzx eax, byte [ebp + edx - 0x84d]
movzx edx, cl
add eax, edx
add eax, esi
movzx esi, al
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov cl, byte [ebp - 0x9dc]
and eax, 0xa5e93fc7
add eax, 0x51906445
imul eax, eax, 0xc5cadb43
mov dword [0x42964c], eax
mov al, byte [ebp + esi - 0x618]
mov byte [ebp + ebx - 0x618], al
inc ebx
mov byte [ebp + esi - 0x618], cl
cmp ebx, 0x100
jne 0x4040f7
xor edi, edi
xor esi, esi
xor ebx, ebx
mov eax, dword [0x42964c]
inc ebx
movzx ebx, bl
mov dword [esp], eax
call dword [sym.imp.USER32.dll_GetWindowTextLengthW]
push ecx
mov eax, dword [0x42964c]
lea edx, [eax - 0x254fb35b]
mov dword [0x42964c], edx
mov dl, byte [ebp + ebx - 0x618]
lea ecx, [edx + esi]
movzx esi, cl
mov cl, byte [ebp + esi - 0x618]
mov byte [ebp + ebx - 0x618], cl
mov byte [ebp + esi - 0x618], dl
add dl, byte [ebp + ebx - 0x618]
movzx edx, dl
mov dl, byte [ebp + edx - 0x618]
xor dl, byte [ebp + edi - 0x9c3]
movzx edx, dl
mov word [ebp + edi*2 - 0x98a], dx
inc edi
cmp edi, 0xa
jne 0x404166
lea edi, [ebp - 0x9b9]
mov esi, 0x42d3e6
mov ecx, 0xb
mov word [ebp - 0x976], 0
rep movsb byte es:[edi], byte [esi]
lea edi, [ebp - 0x8c4]
mov esi, 0x42d3f1
mov ecx, 0x22
rep movsb byte es:[edi], byte [esi]
lea ecx, [eax + 0x46a2cafe]
xor eax, eax
and ecx, 0x4c79b766
add ecx, 0x4544c55e
xor ecx, 0xa7759a8d
mov dword [ebp - 0x9dc], ecx
mov dword [0x42964c], ecx
mov byte [ebp + eax - 0x518], al
inc eax
cmp eax, 0x100
jne 0x404228
xor edi, edi
xor esi, esi
mov eax, esi
mov ecx, 0x21
xor edx, edx
mov bl, byte [ebp + esi - 0x518]
div ecx
movzx eax, byte [ebp + edx - 0x8c4]
movzx edx, bl
add eax, edx
add eax, edi
movzx edi, al
mov al, byte [ebp + edi - 0x518]
mov byte [ebp + esi - 0x518], al
inc esi
mov byte [ebp + edi - 0x518], bl
cmp esi, 0x100
jne 0x40423b
mov edx, str.Source_Destination_device_unreachable
mov al, byte [edx]
test al, al
je 0x4042a6
sub eax, 0x30
cmp al, 9
jbe 0x4042a3
mov ecx, dword [ebp - 0x9dc]
sub ecx, 0x6f95d38d
mov dword [0x42964c], ecx
jmp 0x4042a6
inc edx
jmp 0x404282
add dword [0x42964c], 0x5bbdff03
mov dword [esp], str.Windows.Mobile
call fcn.00414b84
xor eax, eax
cmp byte [eax + str.heap_failure_lfh_bitmap_mismatch], 0
je 0x4042ed
inc eax
cmp eax, 0xacd
jne 0x4042be
mov dword [esp + 4], str.Source_Destination_device_unreachable
mov dword [esp], str.SdbpCheckAttribute
call fcn.0040fbac
add dword [0x42964c], 0x54ab3a86
mov eax, dword [0x42964c]
and eax, 0x5f8f943d
add eax, 0x41ff7f79
mov dword [0x42964c], eax
mov dword [esp], 0xd18
call dword [sym.imp.USER32.dll_GetWindowTextLengthA]
xor eax, eax
push edx
cmp byte [eax + str.Source_Destination_device_unreachable], 0
je 0x40435f
inc eax
cmp eax, 0x824
jne 0x404311
mov dword [esp + 0xc], str.Source_Destination_device_unreachable
mov eax, dword [0x42964c]
mov dword [esp + 4], str.The_interface_is_unknown.
mov dword [esp + 8], eax
mov dword [esp], str.Roshal.WinRAR.WinRAR
call fcn.00414cd0
add dword [0x42964c], 0x70b628ac
mov dword [esp], str.The_cluster_node_is_already_down.
call dword [sym.imp.KERNEL32.dll_lstrlenW]
push eax
mov eax, dword [0x42964c]
xor edi, edi
xor esi, esi
xor ebx, ebx
add eax, 0x62944aa2
mov dword [0x42964c], eax
mov dword [esp + 4], eax
mov dword [esp], str.Unit_Attention_data_is_available_for_the_initiator_to_query.
call fcn.00412770
inc ebx
mov ecx, 0x270
movzx ebx, bl
mov dl, byte [ebp + ebx - 0x518]
lea eax, [edx + esi]
movzx esi, al
mov al, byte [ebp + esi - 0x518]
mov byte [ebp + ebx - 0x518], al
mov byte [ebp + esi - 0x518], dl
add dl, byte [ebp + ebx - 0x518]
movzx edx, dl
mov al, byte [ebp + edx - 0x518]
mov edx, str.heap_failure_lfh_bitmap_mismatch
mov byte [ebp - 0x9dc], al
imul eax, dword [0x42964c], 0xcf591e61
mov dword [0x42964c], eax
movsx eax, byte [edx]
inc edx
test al, al
je 0x404412
add ecx, eax
cmp ecx, 0x12b1
jbe 0x4043da
mov dword [esp + 8], str.No_interfaces_have_been_exported.
mov dword [esp + 4], str.heap_failure_lfh_bitmap_mismatch
mov dword [esp], str.ContainerType
call fcn.0040f8a8
add dword [0x42964c], 0x2f78dc72
mov eax, dword [0x42964c]
or eax, 0x8f7fecfc
mov dword [0x42964c], eax
mov dword [esp + 4], eax
mov dword [esp], str.Specified_color_basis_is_invalid.
call fcn.00412770
mov al, byte [ebp - 0x9dc]
xor al, byte [ebp + edi - 0x9b9]
and dword [0x42964c], 0x117f8e7e
movzx eax, al
mov word [ebp + edi*2 - 0x962], ax
inc edi
cmp edi, 0xb
jne 0x404384
mov word [ebp - 0x94c], 0
lea edi, [ebp - 0x9ae]
mov esi, 0x42d413
xor ebx, ebx
mov ecx, 4
rep movsd dword es:[edi], dword [esi]
lea edi, [ebp - 0x7f4]
mov esi, str.A_callback_has_requested_to_bypass_native_code.
mov ecx, 0xc
rep movsd dword es:[edi], dword [esi]
mov edx, str._Frequencies
mov al, byte [edx]
test al, al
je 0x4044ad
sub eax, 0x30
cmp al, 9
jbe 0x4044aa
and dword [0x42964c], 0x9efc965c
jmp 0x4044ad
inc edx
jmp 0x404491
and dword [0x42964c], 0xfc06d573
mov dword [esp + 4], str._Frequencies
mov dword [esp], str.UUUUUUUU
call fcn.00410758
mov byte [ebp + ebx - 0x418], bl
inc ebx
and dword [0x42964c], 0x34856e68
cmp ebx, 0x100
jne 0x40448c
xor edi, edi
xor ecx, ecx
mov esi, 0x2f
mov eax, ecx
xor edx, edx
mov bl, byte [ebp + ecx - 0x418]
div esi
movzx eax, byte [ebp + edx - 0x7f4]
movzx edx, bl
add eax, edx
add eax, edi
movzx edi, al
mov al, byte [ebp + edi - 0x418]
mov byte [ebp + ecx - 0x418], al
inc ecx
mov byte [ebp + edi - 0x418], bl
cmp ecx, 0x100
jne 0x4044ee
xor edi, edi
xor esi, esi
xor ebx, ebx
mov eax, dword [0x42964c]
mov edx, str._Frequencies
mov ecx, 0x17b1
mov dword [ebp - 0x9dc], eax
imul eax, eax, 0x4d2bd035
mov dword [ebp - 0x9e0], eax
movzx eax, byte [edx]
inc edx
test al, al
je 0x404576
add ecx, eax
cmp ecx, 0x1bad
jbe 0x404552
mov eax, dword [ebp - 0x9e0]
add eax, 0x6463b583
xor eax, 0x71fccdaa
jmp 0x404591
imul eax, dword [ebp - 0x9dc], 0x3f90cfb8
mov dword [0x42964c], eax
call dword [sym.imp.USER32.dll_GetShellWindow]
imul eax, eax, 0x803a31c1
sub eax, 0xee3e83f
inc ebx
mov dword [0x42964c], eax
movzx ebx, bl
mov dword [esp + 0xc], str.Source_Destination_device_unreachable
mov dword [esp + 8], eax
mov dword [esp + 4], str.TiffCompressionMethod
mov dword [esp], str.heap_failure_lfh_bitmap_mismatch
call fcn.00414cd0
mov dl, byte [ebp + ebx - 0x418]
lea eax, [edx + esi]
movzx esi, al
mov al, byte [ebp + esi - 0x418]
mov byte [ebp + ebx - 0x418], al
mov byte [ebp + esi - 0x418], dl
add dl, byte [ebp + ebx - 0x418]
movzx edx, dl
mov al, byte [ebp + edx - 0x418]
xor al, byte [ebp + edi - 0x9ae]
movzx eax, al
mov word [ebp + edi*2 - 0x904], ax
inc edi
cmp edi, 0x10
jne 0x404531
mov word [ebp - 0x8e4], 0
mov edx, str.Roshal.WinRAR.WinRAR
mov ecx, 0x94a
movzx eax, byte [edx]
inc edx
test al, al
je 0x404656
add ecx, eax
cmp ecx, 0x221b
jbe 0x404621
mov eax, dword [0x42964c]
mov dword [esp], eax
call fcn.004131b4
mov eax, dword [0x42964c]
and eax, 0x847c05d2
or eax, 0xacaf2095
mov dword [0x42964c], eax
jmp 0x404666
and dword [0x42964c], 0x428e1cf4
call dword [sym.imp.KERNEL32.dll_GetCommandLineA]
mov eax, dword [0x42964c]
lea edi, [ebp - 0x976]
mov esi, 0x42d453
mov ecx, 5
rep movsd dword es:[edi], dword [esi]
lea edi, [ebp - 0x790]
mov esi, 0x42d467
mov ecx, 0xe
rep movsd dword es:[edi], dword [esi]
xor eax, 0x6c3e9bae
imul eax, eax, 0x89b7ac3a
mov dword [ebp - 0x9dc], eax
xor eax, eax
mov byte [ebp + eax - 0x318], al
inc eax
cmp eax, 0x100
jne 0x4046a2
xor edi, edi
xor esi, esi
mov eax, esi
mov ecx, 0x37
xor edx, edx
mov bl, byte [ebp + esi - 0x318]
div ecx
xor dword [ebp - 0x9dc], 0x2e0ebf30
movzx eax, byte [ebp + edx - 0x790]
movzx edx, bl
add eax, edx
add eax, edi
movzx edi, al
mov al, byte [ebp + edi - 0x318]
mov byte [ebp + esi - 0x318], al
inc esi
mov byte [ebp + edi - 0x318], bl
cmp esi, 0x100
jne 0x4046b5
mov eax, dword [ebp - 0x9dc]
xor edi, edi
xor esi, esi
xor ebx, ebx
mov dword [0x42964c], eax
inc ebx
movzx ebx, bl
mov al, byte [ebp + ebx - 0x318]
lea ecx, [eax + esi]
movzx esi, cl
mov cl, byte [ebp + esi - 0x318]
mov byte [ebp + ebx - 0x318], cl
mov ecx, dword [0x42964c]
mov byte [ebp + esi - 0x318], al
add al, byte [ebp + ebx - 0x318]
movzx eax, al
xor ecx, 0xe6ae3c9d
cmp byte [str.Source_Destination_device_unreachable], 0
mov al, byte [ebp + eax - 0x318]
mov byte [ebp - 0x9dc], al
lea eax, [ecx + 0x55082d9b]
mov dword [0x42964c], eax
je 0x40478d
mov dword [esp + 4], str.Roshal.WinRAR.WinRAR
mov dword [esp], str.This_object_is_not_allowed_to_be_opened_in_a_transaction.
call fcn.00410758
or dword [0x42964c], 0xe91af86c
mov eax, dword [0x42964c]
xor eax, 0x2779405e
sub eax, 0x106d053
mov dword [0x42964c], eax
call fcn.0041479c
mov al, byte [ebp - 0x9dc]
xor al, byte [ebp + edi - 0x976]
movzx eax, al
mov word [ebp + edi*2 - 0x8a2], ax
inc edi
cmp edi, 0x14
jne 0x404712
mov word [ebp - 0x87a], 0
lea edi, [ebp - 0x936]
mov esi, 0x42d49f
xor eax, eax
mov ecx, 0x16
rep movsb byte es:[edi], byte [esi]
lea edi, [ebp - 0x7c4]
mov esi, 0x42d4b5
mov ecx, 0xd
rep movsd dword es:[edi], dword [esi]
mov byte [ebp + eax - 0x218], al
inc eax
cmp eax, 0x100
jne 0x4047f7
mov eax, dword [0x42964c]
xor edi, edi
xor esi, esi
sub eax, 0x2e9b6668
or eax, 0x762b864b
mov dword [0x42964c], eax
call fcn.00412174
mov ebx, dword [0x42964c]
or ebx, 0xc1a495a4
mov dword [ebp - 0x9dc], ebx
mov eax, esi
mov ebx, 0x33
xor edx, edx
mov cl, byte [ebp + esi - 0x218]
div ebx
mov ebx, dword [ebp - 0x9dc]
add ebx, 0x26a22f58
movzx eax, byte [ebp + edx - 0x7c4]
movzx edx, cl
add eax, edx
add eax, edi
movzx edi, al
mov al, byte [ebp + edi - 0x218]
mov byte [ebp + esi - 0x218], al
imul eax, ebx, 0xdc34e7a4
inc esi
mov byte [ebp + edi - 0x218], cl
mov dword [ebp - 0x9dc], eax
cmp esi, 0x100
jne 0x404835
xor esi, esi
xor ecx, ecx
xor edx, edx
inc edx
movzx edx, dl
mov al, byte [ebp + edx - 0x218]
add ecx, eax
movzx ecx, cl
mov bl, byte [ebp + ecx - 0x218]
mov byte [ebp + edx - 0x218], bl
mov byte [ebp + ecx - 0x218], al
add al, byte [ebp + edx - 0x218]
movzx eax, al
mov al, byte [ebp + eax - 0x218]
xor al, byte [esi + ebp - 0x936]
movzx eax, al
mov word [ebp + esi*2 - 0x87a], ax
inc esi
cmp esi, 0x16
jne 0x404895
mov ebx, dword [ebp - 0x9dc]
lea edi, [ebp - 0x8e4]
mov esi, 0x42d4e9
mov word [ebp - 0x84e], 0
mov ecx, 8
mov edx, str.RtlNtPathNameToDosPathName_failed___x_
rep movsd dword es:[edi], dword [esi]
sub ebx, 0xcfee91
lea edi, [ebp - 0x821]
mov esi, 0x42d509
imul ebx, ebx, 0x8279378d
mov ecx, 0x2d
rep movsb byte es:[edi], byte [esi]
mov ecx, 0x2a3
mov dword [0x42964c], ebx
movsx eax, byte [edx]
inc edx
test al, al
je 0x40496c
add ecx, eax
cmp ecx, 0x972
jbe 0x404932
xor ebx, 0xec317d33
mov dword [0x42964c], ebx
mov dword [esp + 8], str.Failed_to_open_the_network_interface.
mov dword [esp + 4], str.RtlNtPathNameToDosPathName_failed___x_
mov dword [esp], str.QueryDebugInformation_request
call fcn.0040f8a8
mov eax, dword [0x42964c]
xor edx, edx
or eax, 0x7ca926f2
sub eax, 0x15ea4cce
xor eax, 0xcfe02ba0
mov dword [0x42964c], eax
mov byte [ebp + edx - 0x118], dl
inc edx
cmp edx, 0x100
jne 0x404987
xor edx, edx
cmp byte [edx + str._Frequencies], 0
je 0x4049c3
inc edx
cmp edx, 0x1aaf
jne 0x404999
mov dword [esp], str.Volume_Shadow_Copy_Service
call fcn.00414b84
and dword [0x42964c], 0x1f3dde37
jmp 0x4049d0
add eax, 0x57be90a5
cmp edx, 0x1976
jle 0x4049ef
mov eax, dword [0x42964c]
mov dword [esp], str.runtimebroker.exe
mov dword [esp + 4], eax
call fcn.00412770
mov eax, dword [0x42964c]
add eax, 0x42dbb7fe
and eax, 0xe5d693d4
cmp byte [str._Frequencies], 0
mov dword [0x42964c], eax
je 0x404a1c
mov dword [esp + 4], eax
mov dword [esp], str.Not_able_to_present_due_to_denial_of_desktop_access
call fcn.00412770
xor dword [0x42964c], 0xe2b3e0fa
mov eax, dword [0x42964c]
xor esi, esi
xor ebx, ebx
add eax, 0x1823851b
and eax, 0x27a4ed98
sub eax, 0x3d8a7277
mov dword [0x42964c], eax
mov eax, ebx
mov edi, 0x2c
xor edx, edx
mov cl, byte [ebp + ebx - 0x118]
div edi
mov byte [ebp - 0x9dc], cl
movzx eax, byte [ebp + edx - 0x821]
movzx edx, cl
add eax, edx
add eax, esi
movzx esi, al
imul eax, dword [0x42964c], 0xdae31a98
or eax, 0xd30b5931
mov dword [0x42964c], eax
call fcn.00412174
mov al, byte [ebp + esi - 0x118]
mov cl, byte [ebp - 0x9dc]
mov byte [ebp + ebx - 0x118], al
inc ebx
mov byte [ebp + esi - 0x118], cl
cmp ebx, 0x100
jne 0x404a39
xor edi, edi
xor esi, esi
xor ebx, ebx
mov edx, str.heap_failure_lfh_bitmap_mismatch
mov ecx, 0x9e
movsx eax, byte [edx]
inc edx
test al, al
je 0x404ad1
add ecx, eax
cmp ecx, 0x2f9
jbe 0x404ab0
or dword [0x42964c], 0x4cbbcad
call fcn.00412174
xor dword [0x42964c], 0xa3a84599
inc ebx
mov dword [esp + 8], str.The_authorization_service_is_unknown.
movzx ebx, bl
mov dword [esp + 4], str.heap_failure_lfh_bitmap_mismatch
mov dword [esp], str.Log_archival_is_in_progress.
call fcn.0040f8a8
xor eax, eax
cmp byte [eax + str.heap_failure_lfh_bitmap_mismatch], 0
je 0x404b18
inc eax
cmp eax, 0x236a
jne 0x404afd
or dword [0x42964c], 0x82f619f6
imul eax, dword [0x42964c], 0x528c0d40
mov dword [0x42964c], eax
mov dword [esp], str.Cant_get_the_name_string
call fcn.00414b84
mov eax, dword [0x42964c]
and eax, 0xf32af957
or eax, 0xf4acebdb
mov dword [0x42964c], eax
mov dword [esp], eax
call fcn.004131b4
mov al, byte [ebp + ebx - 0x118]
mov byte [ebp - 0x9dc], al
add eax, esi
movzx esi, al
mov al, byte [ebp + esi - 0x118]
mov byte [ebp + ebx - 0x118], al
xor eax, eax
cmp byte [eax + str.Roshal.WinRAR.WinRAR], 0
je 0x404ba8
inc eax
cmp eax, 0x194e
jne 0x404b71
mov eax, dword [0x42964c]
mov dword [esp], str.Display_Driver_Recovered_From_Failure
mov dword [esp + 4], eax
call fcn.00412770
imul eax, dword [0x42964c], 0x335a185c
mov dword [0x42964c], eax
jmp 0x404baf
cmp eax, 0xbe
jle 0x404bc4
mov eax, dword [0x42964c]
mov dword [esp], str.Specified_client_type_was_not_recognized.
mov dword [esp + 4], eax
call fcn.00412770
mov eax, dword [0x42964c]
xor eax, 0x3212cf5d
or eax, 0x43afe2a7
mov dword [0x42964c], eax
call fcn.00412174
mov al, byte [ebp - 0x9dc]
lea edx, [ebp - 0x758]
mov byte [ebp + esi - 0x118], al
add al, byte [ebp + ebx - 0x118]
movzx eax, al
mov al, byte [ebp + eax - 0x118]
xor al, byte [ebp + edi - 0x8e4]
movzx eax, al
mov word [edx + edi*2], ax
inc edi
cmp edi, 0x20
jne 0x404aa6
mov word [ebp - 0x718], 0
mov ebx, 4
xor eax, eax
cmp byte [eax + str._Frequencies], 0
je 0x404c49
inc eax
cmp eax, 0x72c
jne 0x404c29
imul eax, dword [0x42964c], 0x7e20a9b0
mov dword [0x42964c], eax
imul eax, dword [0x42964c], 0x4cc91dfd
xor eax, 0xdab01c5f
mov dword [0x42964c], eax
mov dword [esp + 4], eax
mov dword [esp], str.Failed_to_get_root_tag
call fcn.00412770
dec ebx
lea edx, [ebp - 0x758]
jne 0x404c27
mov eax, dword [0x42964c]
mov dword [ebp - 0x908], edx
xor ebx, ebx
and eax, 0x2402450
add eax, 0x346bb241
mov dword [0x42964c], eax
lea eax, [ebp - 0x99e]
mov dword [ebp - 0x920], eax
lea eax, [ebp - 0x98a]
mov dword [ebp - 0x91c], eax
lea eax, [ebp - 0x962]
mov dword [ebp - 0x918], eax
lea eax, [ebp - 0x904]
mov dword [ebp - 0x914], eax
lea eax, [ebp - 0x8a2]
mov dword [ebp - 0x910], eax
lea eax, [ebp - 0x87a]
mov dword [ebp - 0x90c], eax
mov eax, dword [ebp + ebx*4 - 0x920]
mov dword [esp], eax
call fcn.004010e8
test eax, eax
je 0x404d47
mov edx, str.Source_Destination_device_unreachable
mov ecx, 0x1342
movzx eax, byte [edx]
inc edx
test al, al
je 0x404d18
add ecx, eax
cmp ecx, 0x2525
jbe 0x404cf7
call fcn.00412d2c
and dword [0x42964c], 0x7f6c2b62
imul eax, dword [0x42964c], 0x28577a1a
or eax, 0x5c07d7cb
mov dword [0x42964c], eax
call fcn.00412d2c
imul eax, dword [0x42964c], 0x465a365a
mov dword [0x42964c], eax
mov eax, 1
jmp 0x404d4d
inc ebx
cmp ebx, 7
jne 0x404cda
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret