Function at 0x401344
Capabilities:
Encode data using xor
Encrypt data using rc4 ksa

Disassembly:
push ebp
mov ecx, 0xb
xor eax, eax
mov ebp, esp
push edi
push esi
lea edi, [ebp - 0xe53]
mov esi, 0x42b0cc
push ebx
sub esp, 0xe8c
rep movsb byte es:[edi], byte [esi]
lea edi, [ebp - 0xdb6]
mov esi, str.AlternateCodePage
mov ecx, 0x12
rep movsb byte es:[edi], byte [esi]
mov byte [ebp + eax - 0xb18], al
inc eax
cmp eax, 0x100
jne 0x401376
mov dword [esp + 0xc], str.ApphelpChpeModSettingsFromQueryResult
mov dword [esp + 8], str.The_network_options_are_invalid.
mov eax, dword [0x4291f4]
mov dword [esp], str.The_network_options_are_invalid.
mov dword [esp + 4], eax
call fcn.0040feac
mov eax, dword [0x4291e4]
sub dword [0x4291f4], 0x12ea471
mov dword [esp], eax
call dword [sym.imp.USER32.dll_GetWindowTextLengthA]
push esi
mov eax, dword [0x4291e4]
xor esi, esi
or eax, 0xccb9468b
mov dword [0x4291e4], eax
add eax, 0x53ff1100
mov dword [0x4291f4], eax
call fcn.00414a18
mov dword [esp], 0x19a
call dword [sym.imp.USER32.dll_IsZoomed]
xor ecx, ecx
push edi
mov edi, 0x11
mov eax, ecx
xor edx, edx
mov bl, byte [ebp + ecx - 0xb18]
div edi
movzx eax, byte [ebp + edx - 0xdb6]
movzx edx, bl
add eax, edx
add eax, esi
movzx esi, al
mov al, byte [ebp + esi - 0xb18]
mov byte [ebp + ecx - 0xb18], al
inc ecx
mov byte [ebp + esi - 0xb18], bl
cmp ecx, 0x100
jne 0x4013f8
mov edi, dword [0x4291e4]
xor esi, esi
xor ebx, ebx
xor ecx, ecx
inc ecx
movzx ecx, cl
mov dl, byte [ebp + ecx - 0xb18]
add ebx, edx
movzx ebx, bl
mov al, byte [ebp + ebx - 0xb18]
mov byte [ebp + ecx - 0xb18], al
mov eax, edi
and edi, 0x43727e76
mov byte [ebp + ebx - 0xb18], dl
add dl, byte [ebp + ecx - 0xb18]
or edi, 0x1100446
movzx edx, dl
mov dl, byte [ebp + edx - 0xb18]
xor dl, byte [esi + ebp - 0xe53]
movzx edx, dl
mov word [ebp + esi*2 - 0xd7c], dx
inc esi
cmp esi, 0xb
jne 0x401441
and eax, 0xd70480
lea edi, [ebp - 0xdc7]
mov esi, 0x42b0e9
mov word [ebp - 0xd66], 0
mov dword [0x4291f4], eax
xor eax, 0x9de42663
mov ecx, 0x11
mov ebx, 0x157
rep movsb byte es:[edi], byte [esi]
mov dword [0x4291e4], eax
lea edi, [ebp - 0xb51]
mov esi, str.The_transport_cannot_dynamically_acquire_any_more_nodes.
mov ecx, 0x39
rep movsb byte es:[edi], byte [esi]
mov ecx, str.ApphelpChpeModSettingsFromQueryResult
movzx edx, byte [ecx]
inc ecx
test dl, dl
je 0x401526
add ebx, edx
cmp ebx, 0x1405
jbe 0x4014e8
lea edx, [eax - 0x2766ceac]
mov dword [0x4291f4], edx
mov dword [esp + 0xc], str.The_network_options_are_invalid.
mov dword [esp + 8], str.The_network_options_are_invalid.
mov dword [esp + 4], eax
mov dword [esp], str.The_network_options_are_invalid.
call fcn.0040feac
xor eax, eax
mov byte [ebp + eax - 0xa18], al
inc eax
cmp eax, 0x100
jne 0x401528
xor esi, esi
xor ebx, ebx
mov al, byte [ebp + ebx - 0xa18]
mov ecx, 0x38
xor edx, edx
mov byte [ebp - 0xe7c], al
mov eax, ebx
div ecx
mov al, byte [ebp - 0xe7c]
add al, byte [ebp + edx - 0xb51]
add eax, esi
movzx esi, al
imul eax, dword [0x4291f4], 0x13878dc8
mov dword [0x4291e4], eax
call dword [sym.imp.USER32.dll_GetMessageTime]
mov edx, str.Unload_media_fails.
mov ecx, 0x82b
mov edi, dword [0x4291f4]
lea eax, [edi + 0x42d5618d]
mov dword [0x4291e4], eax
movzx eax, word [edx]
add edx, 2
test ax, ax
je 0x4015aa
add ecx, eax
cmp ecx, 0xbab
jbe 0x401595
lea eax, [edi - 0x34632e65]
mov dword [0x4291f4], eax
call fcn.0041188c
mov al, byte [ebp + esi - 0xa18]
mov byte [ebp + ebx - 0xa18], al
mov al, byte [ebp - 0xe7c]
inc ebx
mov byte [ebp + esi - 0xa18], al
cmp ebx, 0x100
jne 0x40153b
xor esi, esi
xor ecx, ecx
xor edx, edx
inc edx
movzx edx, dl
mov al, byte [ebp + edx - 0xa18]
add ecx, eax
movzx ecx, cl
mov bl, byte [ebp + ecx - 0xa18]
mov byte [ebp + edx - 0xa18], bl
mov byte [ebp + ecx - 0xa18], al
add al, byte [ebp + edx - 0xa18]
movzx eax, al
mov al, byte [ebp + eax - 0xa18]
xor al, byte [esi + ebp - 0xdc7]
movzx eax, al
mov word [ebp + esi*2 - 0xcbe], ax
inc esi
cmp esi, 0x11
jne 0x4015e8
mov word [ebp - 0xc9c], 0
lea edi, [ebp - 0xe48]
mov esi, 0x42b133
xor eax, eax
mov ecx, 0xb
rep movsb byte es:[edi], byte [esi]
lea edi, [ebp - 0xb85]
mov esi, 0x42b13e
mov ecx, 0xd
rep movsd dword es:[edi], dword [esi]
mov byte [ebp + eax - 0x918], al
inc eax
cmp eax, 0x100
jne 0x401665
xor esi, esi
xor ecx, ecx
mov edi, 0x33
mov eax, ecx
xor edx, edx
mov bl, byte [ebp + ecx - 0x918]
div edi
movzx eax, byte [ebp + edx - 0xb85]
movzx edx, bl
add eax, edx
add eax, esi
movzx esi, al
mov al, byte [ebp + esi - 0x918]
mov byte [ebp + ecx - 0x918], al
inc ecx
mov byte [ebp + esi - 0x918], bl
cmp ecx, 0x100
jne 0x40167d
xor eax, eax
cmp word [eax + str.Unload_media_fails.], 0
je 0x4016f9
add eax, 2
cmp eax, 0x2a0c
jne 0x4016bc
mov eax, dword [0x4291f4]
mov dword [esp + 8], eax
mov dword [esp + 4], eax
mov eax, dword [0x4291e4]
mov dword [esp], eax
call fcn.004132ec
mov eax, dword [0x4291e4]
add eax, 0x2c4316e7
mov dword [0x4291f4], eax
xor ebx, ebx
xor edi, edi
xor esi, esi
lea eax, [esi + 1]
movzx esi, al
mov dl, byte [ebp + esi - 0x918]
lea eax, [edx + edi]
movzx edi, al
mov eax, dword [0x4291f4]
lea ecx, [eax - 0x62abd82e]
imul eax, ecx, 0xa6621d67
mov dword [0x4291f4], ecx
mov dword [0x4291e4], eax
mov al, byte [ebp + edi - 0x918]
mov byte [ebp + esi - 0x918], al
xor eax, eax
mov byte [ebp + edi - 0x918], dl
cmp byte [eax + str.The_network_options_are_invalid.], 0
je 0x401791
inc eax
cmp eax, 0x1717
jne 0x401745
mov byte [ebp - 0xe7c], dl
mov dword [esp + 0xc], str.The_network_options_are_invalid.
mov dword [esp + 8], str.The_network_options_are_invalid.
mov dword [esp + 4], ecx
mov dword [esp], str.The_network_options_are_invalid.
call fcn.0040feac
mov eax, dword [0x4291e4]
mov dl, byte [ebp - 0xe7c]
add eax, 0x17ab7673
mov dword [0x4291f4], eax
add dl, byte [ebp + esi - 0x918]
imul eax, dword [0x4291f4], 0x1d8b8249
movzx edx, dl
mov dl, byte [ebp + edx - 0x918]
xor dl, byte [ebp + ebx - 0xe48]
movzx edx, dl
mov dword [0x4291f4], eax
mov word [ebp + ebx*2 - 0xd66], dx
inc ebx
cmp ebx, 0xb
jne 0x4016ff
xor eax, 0x4ebc6ce4
lea edi, [ebp - 0xe0f]
mov esi, 0x42b172
mov word [ebp - 0xd50], 0
add eax, 0xf878d77
mov ecx, 3
rep movsd dword es:[edi], dword [esi]
mov dword [0x4291e4], eax
xor eax, 0x24c01fec
mov ecx, ebx
mov dword [0x4291f4], eax
lea edi, [ebp - 0xc45]
mov esi, 0x42b17e
rep movsd dword es:[edi], dword [esi]
call fcn.004102f0
xor eax, eax
cmp byte [eax + str.The_network_options_are_invalid.], 0
je 0x401832
inc eax
cmp eax, 0xb2
jne 0x401817
add dword [0x4291e4], 0x3ddfea01
add dword [0x4291e4], 0x11d2423b
sub dword [0x4291f4], 0x566cbcb1
call fcn.00414a18
mov edx, str.Unload_media_fails.
mov ecx, 0x1ed
movzx eax, word [edx]
add edx, 2
test ax, ax
je 0x40187e
add ecx, eax
cmp ecx, 0x19d2
jbe 0x401855
mov dword [esp + 4], str.Unload_media_fails.
mov dword [esp], str.ApphelpChpeModSettingsFromQueryResult
call fcn.0040e8e8
mov eax, dword [0x4291e4]
mov edx, eax
or edx, 0xc5423445
mov dword [0x4291f4], edx
mov dword [esp + 0xc], str.The_network_options_are_invalid.
mov dword [esp + 8], str.ApphelpChpeModSettingsFromQueryResult
mov dword [esp + 4], eax
mov dword [esp], str.The_network_options_are_invalid.
call fcn.0040feac
xor edx, edx
imul ecx, dword [0x4291f4], 0x95177632
mov byte [ebp + edx - 0x818], dl
inc edx
mov eax, ecx
and ecx, 0x67302022
cmp edx, 0x100
jne 0x4018bd
imul eax, eax, 0x80e801aa
mov dword [0x4291f4], ecx
xor esi, esi
xor ebx, ebx
or eax, 0x897a0644
mov dword [0x4291e4], eax
mov edx, str.Unload_media_fails.
mov ecx, 0x56f
movzx eax, word [edx]
add edx, 2
test ax, ax
je 0x401932
add ecx, eax
cmp ecx, 0x2568
jbe 0x4018f9
mov dword [esp + 0xc], str.Unload_media_fails.
mov dword [esp + 8], str.ApphelpChpeModSettingsFromQueryResult
mov dword [esp + 4], str.ApphelpChpeModSettingsFromQueryResult
mov dword [esp], str.The_network_options_are_invalid.
call fcn.004130d8
mov eax, dword [0x4291e4]
mov edi, 0x2b
xor edx, edx
mov cl, byte [ebp + ebx - 0x818]
and eax, 0x3811180
mov dword [0x4291f4], eax
mov eax, ebx
div edi
mov al, byte [ebp + edx - 0xc45]
add eax, ecx
add eax, esi
movzx esi, al
mov eax, dword [0x4291e4]
and eax, 0x37d117b1
or eax, 0xd25f98af
sub eax, 0x5e702064
mov dword [0x4291e4], eax
mov al, byte [ebp + esi - 0x818]
mov byte [ebp + ebx - 0x818], al
inc ebx
mov byte [ebp + esi - 0x818], cl
cmp ebx, 0x100
jne 0x4018ef
xor ebx, ebx
xor edi, edi
xor esi, esi
mov dword [ebp - 0xe7c], ebx
add dword [0x4291f4], 0x5d2ad0b0
lea eax, [esi + 1]
add dword [0x4291e4], 0x31653d5c
movzx esi, al
mov bl, byte [ebp + esi - 0x818]
lea eax, [ebx + edi]
movzx edi, al
mov al, byte [ebp + edi - 0x818]
mov byte [ebp + esi - 0x818], al
xor eax, eax
cmp word [eax + str.Unload_media_fails.], 0
je 0x401a17
add eax, 2
cmp eax, 0x2a24
jne 0x4019df
mov dword [esp + 0xc], str.Unload_media_fails.
mov dword [esp + 8], str.ApphelpChpeModSettingsFromQueryResult
mov dword [esp + 4], str.The_network_options_are_invalid.
mov dword [esp], str.ApphelpChpeModSettingsFromQueryResult
call fcn.004130d8
mov edx, dword [0x4291f4]
mov byte [ebp + edi - 0x818], bl
mov ecx, str.Unload_media_fails.
mov dword [ebp - 0xe80], 0xdbb
xor edx, 0x5e852a50
mov eax, edx
mov dword [0x4291e4], edx
and eax, 0x90015bd
mov dword [0x4291f4], eax
movzx eax, word [ecx]
add ecx, 2
test ax, ax
je 0x401a82
add dword [ebp - 0xe80], eax
cmp dword [ebp - 0xe80], 0x11f7
jbe 0x401a4b
mov eax, edx
and eax, 0x17df9018
mov dword [0x4291f4], eax
mov dword [esp], str.The_WMI_GUID_is_no_longer_available
call dword [sym.imp.KERNEL32.dll_lstrlenW]
push ecx
add bl, byte [ebp + esi - 0x818]
and dword [0x4291e4], 0x9215804
movzx ebx, bl
mov al, byte [ebp + ebx - 0x818]
mov ebx, dword [ebp - 0xe7c]
inc dword [ebp - 0xe7c]
xor al, byte [ebp + ebx - 0xe0f]
cmp dword [ebp - 0xe7c], 0xc
movzx eax, al
mov word [ebp + ebx*2 - 0xd0e], ax
jne 0x4019a8
lea edi, [ebp - 0xe03]
mov esi, 0x42b1aa
mov ecx, 0xd
mov word [ebp - 0xcf6], 0
rep movsb byte es:[edi], byte [esi]
lea edi, [ebp - 0xbea]
mov esi, str.Specified_VidPN_is_active_and_cannot_be_accessed.
mov ecx, 0x32
rep movsb byte es:[edi], byte [esi]
mov eax, dword [0x4291f4]
xor eax, 0x91e50247
mov dword [0x4291e4], eax
xor eax, eax
mov byte [ebp + eax - 0x718], al
inc eax
cmp eax, 0x100
jne 0x401b06
xor edi, edi
xor esi, esi
mov ebx, 0x31
mov eax, esi
xor edx, edx
mov cl, byte [ebp + esi - 0x718]
div ebx
mov byte [ebp - 0xe7c], cl
imul ebx, dword [0x4291e4], 0x83370bca
mov dword [0x4291f4], ebx
movzx eax, byte [ebp + edx - 0xbea]
movzx edx, cl
add eax, edx
add eax, edi
movzx edi, al
mov al, byte [ebp + edi - 0x718]
mov byte [ebp + esi - 0x718], al
mov eax, ebx
inc esi
and eax, 0x3c2ddb64
mov dword [0x4291e4], eax
mov dword [esp + 4], str.Unload_media_fails.
mov dword [esp], str.The_network_options_are_invalid.
call fcn.0040e8e8
mov cl, byte [ebp - 0xe7c]
mov byte [ebp + edi - 0x718], cl
cmp esi, 0x100
jne 0x401b19
xor esi, esi
xor ecx, ecx
xor edx, edx
inc edx
imul ebx, ebx, 0x6c7fa169
movzx edx, dl
movzx edi, byte [ebp + edx - 0x718]
add ecx, edi
movzx ecx, cl
mov al, byte [ebp + ecx - 0x718]
mov byte [ebp + edx - 0x718], al
mov eax, edi
mov byte [ebp + ecx - 0x718], al
add al, byte [ebp + edx - 0x718]
movzx eax, al
mov al, byte [ebp + eax - 0x718]
xor al, byte [esi + ebp - 0xe03]
movzx eax, al
mov word [ebp + esi*2 - 0xcf6], ax
inc esi
cmp esi, 0xd
jne 0x401b9d
mov dword [0x4291f4], ebx
xor ebx, 0xb3813f12
lea edi, [ebp - 0xe3d]
mov esi, 0x42b1e9
mov dword [0x4291e4], ebx
call dword [sym.imp.USER32.dll_GetForegroundWindow]
mov ecx, 0xb
mov word [ebp - 0xcdc], 0
rep movsb byte es:[edi], byte [esi]
sub eax, 0x2a0af400
lea edi, [ebp - 0xdf6]
mov esi, str.setmiterlimit
mov ecx, 0xe
mov dword [0x4291e4], eax
rep movsb byte es:[edi], byte [esi]
mov dword [esp + 0xc], str.ApphelpChpeModSettingsFromQueryResult
mov dword [esp + 8], str.The_network_options_are_invalid.
mov eax, dword [0x4291f4]
mov dword [esp], str.ApphelpChpeModSettingsFromQueryResult
mov dword [esp + 4], eax
call fcn.0040feac
mov eax, dword [0x4291e4]
xor edx, edx
sub eax, 0x655b9064
xor eax, 0x3b07a655
mov dword [0x4291e4], eax
mov byte [ebp + edx - 0x618], dl
inc edx
cmp edx, 0x100
jne 0x401c7e
mov ecx, str.ApphelpChpeModSettingsFromQueryResult
mov ebx, 0x7e3
movzx edx, byte [ecx]
inc ecx
test dl, dl
je 0x401cb4
add ebx, edx
cmp ebx, 0x809
jbe 0x401c98
or eax, 0xd7609ce7
mov dword [0x4291e4], eax
mov eax, dword [0x4291e4]
xor esi, esi
xor ebx, ebx
add eax, 0x287a7b8d
mov dword [0x4291f4], eax
imul eax, eax, 0x25f556bc
mov dword [0x4291e4], eax
call fcn.004152ac
mov eax, dword [0x4291e4]
sub eax, 0x422af580
mov dword [0x4291f4], eax
xor eax, eax
cmp byte [eax + str.The_network_options_are_invalid.], 0
je 0x401cfe
inc eax
cmp eax, 0x129a
jne 0x401ce8
call fcn.004116e0
mov eax, dword [0x4291e4]
lea edx, [eax + 0x593aea3e]
mov dword [0x4291f4], edx
mov dword [esp], eax
call fcn.0040f210
mov edi, dword [0x4291e4]
mov ecx, 0xd
xor edx, edx
imul eax, edi, 0x9d8b0a95
mov dword [0x4291f4], eax
mov al, byte [ebp + ebx - 0x618]
mov byte [ebp - 0xe7c], al
mov eax, ebx
div ecx
mov al, byte [ebp - 0xe7c]
mov ecx, 0x132d
add al, byte [ebp + edx - 0xdf6]
mov edx, str.Unload_media_fails.
add eax, esi
movzx esi, al
movzx eax, word [edx]
add edx, 2
test ax, ax
je 0x401d81
add ecx, eax
cmp ecx, 0x16e9
jbe 0x401d5c
lea eax, [edi - 0x1dfa6f8d]
mov dword [0x4291e4], eax
call fcn.004116e0
mov eax, dword [0x4291e4]
or eax, 0x7eee1ab7
imul eax, eax, 0x3c303f91
mov dword [0x4291e4], eax
call fcn.0041188c
mov al, byte [ebp + esi - 0x618]
mov byte [ebp + ebx - 0x618], al
mov al, byte [ebp - 0xe7c]
inc ebx
mov byte [ebp + esi - 0x618], al
cmp ebx, 0x100
jne 0x401ce6
xor esi, esi
xor ecx, ecx
xor edx, edx
inc edx
movzx edx, dl
mov al, byte [ebp + edx - 0x618]
add ecx, eax
movzx ecx, cl
mov bl, byte [ebp + ecx - 0x618]
mov byte [ebp + edx - 0x618], bl
mov byte [ebp + ecx - 0x618], al
add al, byte [ebp + edx - 0x618]
movzx eax, al
mov al, byte [ebp + eax - 0x618]
xor al, byte [esi + ebp - 0xe3d]
movzx eax, al
mov word [ebp + esi*2 - 0xd50], ax
inc esi
cmp esi, 0xb
jne 0x401dc9
mov edx, dword [0x4291f4]
mov ecx, str.The_network_options_are_invalid.
mov ebx, 0x116
mov word [ebp - 0xd3a], 0
mov eax, edx
and eax, 0x9dac945
xor eax, 0x65dbc58a
mov dword [0x4291e4], eax
movsx eax, byte [ecx]
inc ecx
test al, al
je 0x401e5f
add ebx, eax
cmp ebx, 0x1994
jbe 0x401e41
add edx, 0x411dfb44
mov dword [0x4291e4], edx
mov eax, dword [0x4291e4]
mov ecx, str.ApphelpChpeModSettingsFromQueryResult
mov ebx, 0x17bc
and eax, 0xd66ef453
lea edx, [eax - 0x3d07354]
mov dword [0x4291e4], edx
movzx edx, byte [ecx]
inc ecx
test dl, dl
je 0x401e9b
add ebx, edx
cmp ebx, 0x19ab
jbe 0x401e7f
add eax, 0xc6a7aa5
mov dword [0x4291e4], eax
mov eax, dword [0x4291e4]
lea edi, [ebp - 0xe32]
mov esi, 0x42b202
mov ecx, 0xb
rep movsb byte es:[edi], byte [esi]
lea edi, [ebp - 0xbb8]
mov esi, str.Invalid_operation_on_the_encoding_decoding_handle.
mov ecx, 0x33
rep movsb byte es:[edi], byte [esi]
mov edx, eax
and eax, 0x4b000a91
and edx, 0x6f2dded5
xor eax, 0xccf2b293
mov dword [0x4291f4], edx
mov dword [0x4291e4], eax
xor eax, eax
cmp byte [eax + str.The_network_options_are_invalid.], 0
je 0x401efb
inc eax
cmp eax, 0x1d3e
jne 0x401ee3
call fcn.00410e1c
jmp 0x401f02
cmp eax, 0xf46
jle 0x401f0c
or dword [0x4291f4], 0x1b478465
mov eax, dword [0x4291f4]
or eax, 0xc2897292
mov dword [0x4291e4], eax
xor eax, eax
mov byte [ebp + eax - 0x518], al
inc eax
cmp eax, 0x100
jne 0x401f1d
xor esi, esi
xor ecx, ecx
mov edi, 0x32
mov eax, ecx
xor edx, edx
mov bl, byte [ebp + ecx - 0x518]
div edi
movzx eax, byte [ebp + edx - 0xbb8]
movzx edx, bl
add eax, edx
add eax, esi
movzx esi, al
mov al, byte [ebp + esi - 0x518]
mov byte [ebp + ecx - 0x518], al
inc ecx
mov byte [ebp + esi - 0x518], bl
cmp ecx, 0x100
jne 0x401f35
xor edx, edx
xor edi, edi
xor esi, esi
lea eax, [esi + 1]
mov dword [ebp - 0xe7c], edx
movzx esi, al
mov bl, byte [ebp + esi - 0x518]
lea eax, [ebx + edi]
movzx edi, al
mov al, byte [ebp + edi - 0x518]
mov byte [ebp + esi - 0x518], al
call fcn.004152ac
mov eax, dword [0x4291f4]
xor eax, 0xa394fb71
lea ecx, [eax + 0x405bd7b8]
add eax, 0x5c29fadb
mov dword [0x4291f4], eax
mov dword [0x4291e4], ecx
call fcn.00414a18
mov edx, dword [ebp - 0xe7c]
mov byte [ebp + edi - 0x518], bl
add bl, byte [ebp + esi - 0x518]
movzx ebx, bl
mov al, byte [ebp + ebx - 0x518]
xor al, byte [ebp + edx - 0xe32]
movzx eax, al
mov word [ebp + edx*2 - 0xd3a], ax
inc edx
cmp edx, 0xb
jne 0x401f78
mov word [ebp - 0xd24], 0
lea edi, [ebp - 0xe67]
mov esi, 0x42b240
xor eax, eax
mov ecx, 0xa
rep movsb byte es:[edi], byte [esi]
lea edi, [ebp - 0xc19]
mov esi, 0x42b24a
mov ecx, 0x2f
rep movsb byte es:[edi], byte [esi]
mov byte [ebp + eax - 0x418], al
inc eax
cmp eax, 0x100
jne 0x402032
xor esi, esi
xor ecx, ecx
mov edi, 0x2e
mov eax, ecx
xor edx, edx
mov bl, byte [ebp + ecx - 0x418]
div edi
movzx eax, byte [ebp + edx - 0xc19]
movzx edx, bl
add eax, edx
add eax, esi
movzx esi, al
mov al, byte [ebp + esi - 0x418]
mov byte [ebp + ecx - 0x418], al
inc ecx
mov byte [ebp + esi - 0x418], bl
cmp ecx, 0x100
jne 0x40204a
mov byte [ebp - 0x319], al
xor edx, edx
xor edi, edi
mov byte [ebp + esi - 0x418], bl
xor esi, esi
mov eax, dword [0x4291e4]
mov dword [ebp - 0xe7c], edx
lea ecx, [eax - 0x7f313d2f]
imul eax, eax, 0xaca3a8bd
mov dword [0x4291f4], ecx
mov dword [0x4291e4], eax
mov dword [esp + 8], ecx
mov dword [esp + 4], ecx
mov dword [esp], str.Unload_media_fails.
call fcn.0040f8d4
lea eax, [esi + 1]
movzx esi, al
mov bl, byte [ebp + esi - 0x418]
lea eax, [ebx + edi]
movzx edi, al
mov al, byte [ebp + edi - 0x418]
mov byte [ebp + esi - 0x418], al
mov eax, dword [0x4291f4]
mov byte [ebp + edi - 0x418], bl
xor eax, 0xd18ea5bc
lea ecx, [eax + 0x57ad4a82]
sub eax, 0x4bc89b2
mov dword [0x4291e4], eax
mov dword [0x4291f4], ecx
call fcn.004116e0
mov edx, dword [ebp - 0xe7c]
add bl, byte [ebp + esi - 0x418]
movzx ebx, bl
mov al, byte [ebp + ebx - 0x418]
xor al, byte [ebp + edx - 0xe67]
movzx eax, al
mov word [ebp + edx*2 - 0xda4], ax
inc edx
cmp edx, 0xa
jne 0x40209a
mov eax, dword [0x4291e4]
lea edi, [ebp - 0xe27]
mov esi, 0x42b279
mov word [ebp - 0xd90], 0
mov ecx, 0xb
rep movsb byte es:[edi], byte [esi]
add eax, 0x499d5b1c
lea edi, [ebp - 0xdd7]
mov esi, str.SaferCloseLevel
and eax, 0x6e95137d
mov ecx, 4
rep movsd dword es:[edi], dword [esi]
or eax, 0x21caaf85
mov edi, eax
xor eax, eax
mov byte [ebp + eax - 0x318], al
inc eax
cmp eax, 0x100
jne 0x402195
xor esi, esi
xor ecx, ecx
mov al, byte [ebp + ecx - 0x318]
mov ebx, 0xf
xor edx, edx
mov byte [ebp - 0xe7c], al
mov eax, ecx
div ebx
mov bl, byte [ebp - 0xe7c]
movzx eax, byte [ebp + edx - 0xdd7]
movzx edx, byte [ebp - 0xe7c]
add eax, edx
lea edx, [edi + 0x5e1a7ddf]
add eax, esi
movzx esi, al
mov eax, edi
mov edi, edx
mov dl, byte [ebp + esi - 0x318]
xor edi, 0x222169c
mov byte [ebp + ecx - 0x318], dl
inc ecx
mov byte [ebp + esi - 0x318], bl
cmp ecx, 0x100
jne 0x4021a8
sub eax, 0x74074ec2
mov byte [ebp - 0x219], dl
mov dword [0x4291e4], edi
xor edi, edi
mov byte [ebp + esi - 0x318], bl
xor esi, esi
xor ebx, ebx
mov dword [0x4291f4], eax
mov dword [esp], 0x180d
call dword [sym.imp.USER32.dll_GetWindowTextLengthA]
push edx
inc ebx
movzx ebx, bl
mov al, byte [ebp + ebx - 0x318]
mov byte [ebp - 0xe7c], al
add eax, esi
movzx esi, al
imul eax, dword [0x4291f4], 0xeec15574
or eax, 0xde4f537e
mov dword [0x4291e4], eax
call dword [sym.imp.KERNEL32.dll_GetLargePageMinimum]
call fcn.0040f81c
mov eax, dword [0x4291f4]
mov edx, str.ApphelpChpeModSettingsFromQueryResult
mov ecx, 0x1172
or eax, 0x85ad50fb
mov dword [0x4291f4], eax
add eax, 0x124c9d32
mov dword [ebp - 0xe80], eax
mov dword [0x4291e4], eax
movzx eax, byte [edx]
inc edx
test al, al
je 0x4022bf
add ecx, eax
cmp ecx, 0x1c0b
jbe 0x402299
imul eax, dword [ebp - 0xe80], 0x59455688
mov dword [0x4291f4], eax
call fcn.00412ae4
mov eax, dword [0x4291f4]
sub eax, 0x4b6f5f45
mov dword [0x4291e4], eax
call fcn.00411ec8
mov eax, dword [0x4291f4]
or eax, 0x25022ba1
imul eax, eax, 0x46e67678
mov dword [0x4291f4], eax
mov al, byte [ebp + esi - 0x318]
mov byte [ebp + ebx - 0x318], al
mov al, byte [ebp - 0xe7c]
mov byte [ebp + esi - 0x318], al
add al, byte [ebp + ebx - 0x318]
movzx eax, al
mov al, byte [ebp + eax - 0x318]
xor al, byte [ebp + edi - 0xe27]
movzx eax, al
mov word [ebp + edi*2 - 0xd24], ax
inc edi
cmp edi, 0xb
jne 0x40223b
mov word [ebp - 0xd0e], 0
lea edi, [ebp - 0xcdb]
mov esi, str.Specified_stride_is_invalid.
xor ebx, ebx
imul eax, dword [0x4291e4], 0xd993f2a6
mov ecx, 0x1d
mov dword [ebp - 0xe6f], 0x111edbcf
rep movsb byte es:[edi], byte [esi]
mov dword [ebp - 0xe6b], 0xd6541d59
mov dword [0x4291f4], eax
cmp byte [str.ApphelpChpeModSettingsFromQueryResult], 0
mov eax, dword [0x4291e4]
je 0x40238a
lea edx, [eax + 0x10799786]
mov dword [0x4291f4], edx
or eax, 0xf6d7fbdf
mov dword [0x4291e4], eax
mov dword [esp + 8], eax
mov eax, dword [0x4291f4]
mov dword [esp], str.Unload_media_fails.
mov dword [esp + 4], eax
call fcn.0040f8d4
call dword [sym.imp.USER32.dll_GetForegroundWindow]
mov byte [ebp + ebx - 0x218], bl
inc ebx
mov edi, eax
lea eax, [eax - 0x47c2da30]
mov dword [0x4291e4], eax
cmp ebx, 0x100
jne 0x402370
xor esi, esi
xor ecx, ecx
mov al, byte [ebp + ecx - 0x218]
mov ebx, 0x1c
xor edx, edx
mov byte [ebp - 0xe7c], al
mov eax, ecx
div ebx
movzx eax, byte [ebp + edx - 0xcdb]
movzx edx, byte [ebp - 0xe7c]
add eax, edx
add eax, esi
movzx esi, al
mov al, byte [ebp + esi - 0x218]
mov byte [ebp + ecx - 0x218], al
mov al, byte [ebp - 0xe7c]
inc ecx
mov byte [ebp + esi - 0x218], al
cmp ecx, 0x100
jne 0x4023d4
add edi, 0x2dd20515
xor esi, esi
xor ecx, ecx
xor edx, edx
mov dword [0x4291f4], edi
inc edx
movzx edx, dl
mov al, byte [ebp + edx - 0x218]
add ecx, eax
movzx ecx, cl
mov bl, byte [ebp + ecx - 0x218]
mov byte [ebp + edx - 0x218], bl
mov byte [ebp + ecx - 0x218], al
add al, byte [ebp + edx - 0x218]
movzx eax, al
mov al, byte [ebp + eax - 0x218]
xor al, byte [esi + ebp - 0xe6f]
movzx eax, al
mov word [ebp + esi*2 - 0xde8], ax
inc esi
cmp esi, 8
jne 0x402438
mov word [ebp - 0xdd8], 0
lea edi, [ebp - 0xe5d]
mov esi, 0x42b2b1
xor eax, eax
mov ecx, 0xa
rep movsb byte es:[edi], byte [esi]
lea edi, [ebp - 0xc9c]
mov esi, str.The_package_is_currently_not_available.
mov ecx, 0xa
rep movsd dword es:[edi], dword [esi]
mov byte [ebp + eax - 0x118], al
inc eax
cmp eax, 0x100
jne 0x4024b5
xor esi, esi
xor ebx, ebx
mov eax, dword [0x4291f4]
add eax, 0x54890823
mov dword [0x4291e4], eax
mov dword [esp + 4], eax
mov dword [esp + 0xc], str.The_network_options_are_invalid.
mov dword [esp + 8], str.The_network_options_are_invalid.
mov dword [esp], str.The_network_options_are_invalid.
call fcn.0040feac
mov al, byte [ebp + ebx - 0x118]
xor edx, edx
mov ecx, 0x27
mov edi, dword [0x4291f4]
mov byte [ebp - 0xe7c], al
mov eax, ebx
div ecx
or edi, 0x8ec7f43d
mov dword [0x4291e4], edi
movzx eax, byte [ebp + edx - 0xc9c]
movzx edx, byte [ebp - 0xe7c]
add eax, edx
add eax, esi
movzx esi, al
mov eax, dword [0x4291f4]
mov dl, byte [ebp + esi - 0x118]
sub eax, 0x28eba7b4
or eax, 0x731bb7ff
mov byte [ebp + ebx - 0x118], dl
inc ebx
mov dword [ebp - 0xe80], eax
mov dword [0x4291f4], eax
mov al, byte [ebp - 0xe7c]
mov byte [ebp + esi - 0x118], al
cmp ebx, 0x100
jne 0x4024c8
xor esi, esi
xor ebx, ebx
xor ecx, ecx
inc ecx
movzx ecx, cl
mov dl, byte [ebp + ecx - 0x118]
add ebx, edx
movzx ebx, bl
mov al, byte [ebp + ebx - 0x118]
mov byte [ebp + ecx - 0x118], al
mov byte [ebp + ebx - 0x118], dl
add dl, byte [ebp + ecx - 0x118]
movzx edx, dl
mov dl, byte [ebp + edx - 0x118]
xor dl, byte [ebp + esi - 0xe5d]
movzx edx, dl
mov word [ebp + esi*2 - 0xd90], dx
inc esi
cmp esi, 0xa
jne 0x40257f
lea esi, [edi + 0x18628f0]
mov eax, dword [ebp - 0xe80]
xor edx, edx
xor ebx, ebx
mov word [ebp - 0xd7c], 0
mov dword [ebp - 0xe1c], 0x5e
xor eax, 0x804d52b
mov dword [ebp - 0xe18], 0x41
mov dword [ebp - 0xe14], 0xffffff61
mov dword [ebp - 0xe7c], esi
mov esi, str.ApphelpChpeModSettingsFromQueryResult
mov cl, byte [esi]
test cl, cl
je 0x40262d
sub ecx, 0x30
cmp cl, 9
jbe 0x40262a
mov eax, dword [ebp - 0xe7c]
jmp 0x402632
inc esi
jmp 0x402614
and eax, 0x49d7f7eb
sub ebx, dword [ebp + edx*4 - 0xe1c]
imul eax, eax, 0xedbe4ec8
inc edx
cmp edx, 3
jne 0x40260f
mov dword [0x4291f4], eax
lea eax, [ebp - 0xd7c]
mov dword [ebp - 0xc74], eax
lea eax, [ebp - 0xcbe]
mov dword [ebp - 0xc70], eax
lea eax, [ebp - 0xd66]
mov dword [ebp - 0xc6c], eax
lea eax, [ebp - 0xd0e]
mov dword [ebp - 0xc68], eax
lea eax, [ebp - 0xcf6]
mov dword [ebp - 0xc64], eax
lea eax, [ebp - 0xd50]
mov dword [ebp - 0xc60], eax
lea eax, [ebp - 0xd3a]
mov dword [ebp - 0xc5c], eax
lea eax, [ebp - 0xda4]
mov dword [ebp - 0xc58], eax
lea eax, [ebp - 0xd24]
mov dword [ebp - 0xc54], eax
lea eax, [ebp - 0xde8]
mov dword [ebp - 0xc50], eax
lea eax, [ebp - 0xd90]
mov dword [ebp - 0xc4c], eax
xor eax, eax
cmp byte [eax + str.The_network_options_are_invalid.], 0
je 0x402701
inc eax
cmp eax, 0x1e14
jne 0x4026d0
mov dword [esp], edi
call fcn.0040f210
xor dword [0x4291f4], 0xb03dbf81
mov dword [esp], str.The_cluster_shared_volume_is_not_locally_mounted.
call dword [sym.imp.KERNEL32.dll_lstrlenW]
push eax
xor eax, eax
cmp word [eax + str.Unload_media_fails.], 0
je 0x40272e
add eax, 2
cmp eax, 0x4af4
jne 0x402703
mov eax, dword [0x4291e4]
mov dword [esp], eax
call fcn.0040f210
xor dword [0x4291e4], 0x3b778e4a
mov edx, str.Unload_media_fails.
mov ecx, 0xa69
movzx eax, word [edx]
add edx, 2
test ax, ax
je 0x40274d
add ecx, eax
cmp ecx, 0x230c
jbe 0x402738
mov edx, dword [0x4291e4]
mov eax, edx
add edx, 0x2dd416c9
and eax, 0x8991af2f
mov dword [0x4291e4], edx
or eax, 0x9100a21
sub eax, 0x1bc5c1ce
mov dword [0x4291f4], eax
mov dword [esp + 0xc], str.Unload_media_fails.
mov dword [esp + 8], str.The_network_options_are_invalid.
mov dword [esp + 4], str.The_network_options_are_invalid.
mov dword [esp], str.ApphelpChpeModSettingsFromQueryResult
call fcn.004130d8
and dword [0x4291e4], 0xb505a027
call dword [sym.imp.USER32.dll_GetDesktopWindow]
mov eax, dword [0x4291f4]
imul edx, eax, 0xf158e4f3
sub eax, 0x2819501
mov dword [0x4291f4], eax
mov dword [0x4291e4], edx
cmp ebx, 0xa
jg 0x402853
mov eax, dword [ebp + ebx*4 - 0xc74]
mov dword [esp], eax
call fcn.004010e8
test eax, eax
je 0x40284d
mov eax, dword [0x4291f4]
mov edx, str.Unload_media_fails.
mov ecx, 0x107
and eax, 0xc41f7761
mov dword [0x4291f4], eax
add eax, 0x2ed84b3f
mov dword [0x4291e4], eax
movzx eax, word [edx]
add edx, 2
test ax, ax
je 0x402827
add ecx, eax
cmp ecx, 0xadd
jbe 0x402803
call fcn.00414a18
xor dword [0x4291e4], 0xd77349e5
mov eax, dword [0x4291e4]
or eax, 0xcd3c5980
mov dword [0x4291f4], eax
imul eax, eax, 0xcb0da0e4
mov dword [0x4291e4], eax
call fcn.00411ec8
mov eax, 1
jmp 0x402855
inc ebx
jmp 0x4027c4
xor eax, eax
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret