Function at 0x4040d8
Capabilities:
Encode data using xor
Encrypt data using rc4 ksa

Disassembly:
push ebp
mov ecx, 0xb
mov ebp, esp
push edi
push esi
lea edi, [ebp - 0xe6e]
mov esi, 0x42b496
push ebx
sub esp, 0xeac
rep movsb byte es:[edi], byte [esi]
lea edi, [ebp - 0xcef]
mov esi, str.The_setting_is_not_registered.
mov ecx, 0x1f
rep movsb byte es:[edi], byte [esi]
call fcn.00410e1c
imul eax, dword [0x429384], 0x48c43cca
add eax, 0x2562d147
mov dword [0x429384], eax
mov dword [esp + 0xc], str.The_system_has_awoken
mov dword [esp + 8], str.Translation
mov dword [esp + 4], str.Translation
mov dword [esp], str.Translation
call fcn.004130d8
xor eax, eax
mov byte [ebp + eax - 0xb18], al
inc eax
cmp eax, 0x100
jne 0x404147
mov eax, dword [0x429384]
xor esi, esi
mov edi, 0x1e
or eax, 0xeb3ebcd5
imul eax, eax, 0x460982cc
mov dword [0x429384], eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
xor ecx, ecx
xor eax, 0x2a9dc54c
mov dword [ebp - 0xe9c], eax
mov dword [0x429384], eax
mov eax, ecx
xor edx, edx
mov bl, byte [ebp + ecx - 0xb18]
div edi
movzx eax, byte [ebp + edx - 0xcef]
movzx edx, bl
add eax, edx
add eax, esi
movzx esi, al
mov al, byte [ebp + esi - 0xb18]
mov byte [ebp + ecx - 0xb18], al
inc ecx
mov byte [ebp + esi - 0xb18], bl
cmp ecx, 0x100
jne 0x40418a
xor ebx, ebx
xor ecx, ecx
xor edx, edx
inc edx
movzx edx, dl
movzx edi, byte [ebp + edx - 0xb18]
add ecx, edi
movzx ecx, cl
mov al, byte [ebp + ecx - 0xb18]
mov byte [ebp + edx - 0xb18], al
mov eax, edi
mov byte [ebp + ecx - 0xb18], al
add al, byte [ebp + edx - 0xb18]
movzx eax, al
mov al, byte [ebp + eax - 0xb18]
xor al, byte [ebx + ebp - 0xe6e]
movzx eax, al
mov word [ebp + ebx*2 - 0xd8c], ax
inc ebx
cmp ebx, 0xb
jne 0x4041cd
mov word [ebp - 0xd76], 0
lea edi, [ebp - 0xe82]
mov esi, str.__r
xor eax, eax
mov ecx, 0xa
rep movsb byte es:[edi], byte [esi]
lea edi, [ebp - 0xdf9]
mov esi, str.TrustedInstaller
mov ecx, 0x11
rep movsb byte es:[edi], byte [esi]
cmp word [eax + str.The_system_has_awoken], 0
je 0x404270
add eax, 2
cmp eax, 0x21a
jne 0x40424d
imul eax, dword [ebp - 0xe9c], 0xbcb26b67
mov dword [0x429384], eax
mov eax, dword [0x429384]
xor edx, edx
add eax, 0x2db491a
xor eax, 0x63057b02
mov byte [ebp + edx - 0xa18], dl
inc edx
cmp edx, 0x100
jne 0x404281
xor esi, esi
xor edx, edx
mov ebx, edx
imul eax, eax, 0x3bab67b3
movzx edi, byte [ebp + edx - 0xa18]
and ebx, 0xf
movzx ebx, byte [ebp + ebx - 0xdf9]
mov ecx, edi
sub eax, 0x799a8c4b
add ebx, edi
or eax, 0x2802c71a
add ebx, esi
add eax, 0x67d0bdfa
movzx esi, bl
and eax, 0x88f6c273
mov bl, byte [ebp + esi - 0xa18]
add eax, 0x5228a5ae
and eax, 0x2c884901
mov byte [ebp + edx - 0xa18], bl
inc edx
sub eax, 0x1c725ab9
mov byte [ebp + esi - 0xa18], cl
cmp edx, 0x100
jne 0x404295
mov dword [0x429384], eax
xor eax, eax
cmp byte [eax + str.Translation], 0
je 0x404340
inc eax
cmp eax, 0x206
jne 0x404301
mov dword [esp + 0xc], str.The_system_has_awoken
mov dword [esp + 8], str.Translation
mov dword [esp + 4], str.Translation
mov dword [esp], str.Translation
call fcn.004130d8
sub dword [0x429384], 0xb353e5b
add dword [0x429384], 0x707a8f78
xor edi, edi
xor esi, esi
mov dword [esp], str.Translation
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push eax
and dword [0x429384], 0xb6e7bcd1
mov dword [esp + 0xc], str.The_system_has_awoken
mov dword [esp + 8], str.Translation
mov dword [esp + 4], str.Translation
mov dword [esp], str.Translation
call fcn.004130d8
xor edx, edx
mov dword [ebp - 0xe9c], edx
mov dword [esp + 4], str.AslpFileLargeGetChecksum
mov dword [esp], str.Translation
call fcn.0040e8e8
lea eax, [esi + 1]
movzx esi, al
mov bl, byte [ebp + esi - 0xa18]
lea eax, [ebx + edi]
movzx edi, al
imul eax, dword [0x429384], 0xcef372aa
sub eax, 0x4518e89c
and eax, 0x4567f705
mov dword [0x429384], eax
mov al, byte [ebp + edi - 0xa18]
mov byte [ebp + esi - 0xa18], al
mov byte [ebp + edi - 0xa18], bl
mov dword [esp], str.AslStringXmlSanitize_failed___x_
call dword [sym.imp.KERNEL32.dll_lstrlenW]
push eax
mov edx, dword [ebp - 0xe9c]
add bl, byte [ebp + esi - 0xa18]
movzx ebx, bl
mov al, byte [ebp + ebx - 0xa18]
xor al, byte [ebp + edx - 0xe82]
movzx eax, al
mov word [ebp + edx*2 - 0xdb4], ax
inc edx
cmp edx, 0xa
jne 0x40438c
mov eax, dword [0x429384]
lea edi, [ebp - 0xe29]
mov esi, 0x42b4db
mov word [ebp - 0xda0], 0
mov ecx, 4
rep movsd dword es:[edi], dword [esi]
or eax, 0xd0ca602d
lea edi, [ebp - 0xd46]
mov esi, str.Checking_file_system_on__wZ
sub eax, 0x5472b6e2
mov ecx, 7
rep movsd dword es:[edi], dword [esi]
or eax, 0x9b61d0a8
add eax, 0x655a5afe
and eax, 0xf503360e
mov dword [0x429384], eax
call fcn.00411ec8
xor eax, eax
mov byte [ebp + eax - 0x918], al
inc eax
cmp eax, 0x100
jne 0x40447f
mov eax, dword [0x429384]
xor esi, esi
xor ecx, ecx
mov edi, 0x1b
and eax, 0x3e6f8285
sub eax, 0x14b63236
mov dword [0x429384], eax
mov eax, ecx
xor edx, edx
mov bl, byte [ebp + ecx - 0x918]
div edi
movzx eax, byte [ebp + edx - 0xd46]
movzx edx, bl
add eax, edx
add eax, esi
movzx esi, al
mov al, byte [ebp + esi - 0x918]
mov byte [ebp + ecx - 0x918], al
inc ecx
mov byte [ebp + esi - 0x918], bl
cmp ecx, 0x100
jne 0x4044ab
xor esi, esi
xor edi, edi
xor ebx, ebx
inc ebx
movzx ebx, bl
mov dl, byte [ebp + ebx - 0x918]
lea eax, [edx + edi]
movzx edi, al
mov al, byte [ebp + edi - 0x918]
mov byte [ebp + ebx - 0x918], al
mov byte [ebp + edi - 0x918], dl
add dl, byte [ebp + ebx - 0x918]
movzx edx, dl
mov al, byte [ebp + edx - 0x918]
mov byte [ebp - 0xe9c], al
mov eax, dword [0x429384]
add eax, 0x4250732c
xor eax, 0x67d87601
mov dword [0x429384], eax
call fcn.004102f0
mov eax, dword [0x429384]
mov dl, byte [ebp - 0xe9c]
xor dl, byte [ebp + esi - 0xe29]
movzx edx, dl
sub eax, 0x9b709b4
mov word [ebp + esi*2 - 0xcd0], dx
inc esi
mov dword [0x429384], eax
cmp esi, 0x10
jne 0x4044ee
lea edi, [ebp - 0xde8]
mov esi, 0x42b507
mov ecx, 0x11
mov word [ebp - 0xcb0], 0
rep movsb byte es:[edi], byte [esi]
mov ebx, 0x588
lea edi, [ebp - 0xd2a]
mov esi, str.DynamicDaylightTimeDisabled
mov ecx, 7
rep movsd dword es:[edi], dword [esi]
mov ecx, str.The_system_has_awoken
movzx edx, word [ecx]
add ecx, 2
test dx, dx
je 0x4045cb
add ebx, edx
cmp ebx, 0x1bc7
jbe 0x4045ac
or eax, 0xbd4ed4e6
mov dword [0x429384], eax
mov eax, dword [0x429384]
xor eax, 0xed2d1183
or eax, 0xcb0a61a0
mov dword [0x429384], eax
call fcn.00410e1c
sub dword [0x429384], 0x4e9e0270
call fcn.004152ac
mov edx, str.AslpFileLargeGetChecksum
mov ecx, 0x10c3
movzx eax, word [edx]
add edx, 2
test ax, ax
je 0x404623
add ecx, eax
cmp ecx, 0x2480
jbe 0x4045fd
mov eax, dword [0x429384]
xor eax, 0x57cd3268
add eax, 0x23751aa4
jmp 0x40462d
mov eax, dword [0x429384]
sub eax, 0x5d2d45fc
and eax, 0x795d8d16
mov dword [0x429384], eax
call fcn.00412ae4
mov ecx, dword [0x429384]
xor eax, eax
and ecx, 0xc8868769
imul ecx, ecx, 0x78c7cfc4
and ecx, 0x37a893b8
mov byte [ebp + eax - 0x818], al
inc eax
xor ecx, 0x4267c55a
cmp eax, 0x100
jne 0x404656
xor esi, esi
xor ebx, ebx
mov edi, 0x1b
mov al, byte [ebp + ebx - 0x818]
xor edx, edx
sub ecx, 0x2933ec73
xor ecx, 0x8b271167
mov byte [ebp - 0xe9c], al
mov eax, ebx
and ecx, 0xfa575c15
div edi
movzx eax, byte [ebp + edx - 0xd2a]
movzx edx, byte [ebp - 0xe9c]
add eax, edx
mov dl, byte [ebp - 0xe9c]
add eax, esi
movzx esi, al
mov al, byte [ebp + esi - 0x818]
mov byte [ebp + ebx - 0x818], al
inc ebx
mov byte [ebp + esi - 0x818], dl
cmp ebx, 0x100
jne 0x404674
mov byte [ebp - 0x719], al
xor ebx, ebx
mov dword [0x429384], ecx
mov byte [ebp + esi - 0x818], dl
xor esi, esi
call fcn.004102f0
xor dword [0x429384], 0xccaf8da5
call fcn.0041188c
mov eax, dword [0x429384]
xor ecx, ecx
sub eax, 0xdcf0c92
imul eax, eax, 0x28e4908
mov dword [ebp - 0xe9c], eax
xor dword [ebp - 0xe9c], 0xab959000
inc ecx
movzx ecx, cl
mov dl, byte [ebp + ecx - 0x818]
add ebx, edx
movzx ebx, bl
mov al, byte [ebp + ebx - 0x818]
mov byte [ebp + ecx - 0x818], al
mov byte [ebp + ebx - 0x818], dl
add dl, byte [ebp + ecx - 0x818]
movzx edx, dl
mov dl, byte [ebp + edx - 0x818]
xor dl, byte [esi + ebp - 0xde8]
movzx edx, dl
mov word [ebp + esi*2 - 0xc50], dx
inc esi
cmp esi, 0x11
jne 0x404716
mov word [ebp - 0xc2e], 0
mov eax, dword [ebp - 0xe9c]
lea edi, [ebp - 0xe4b]
xor ebx, ebx
mov esi, 0x42b534
mov ecx, 0xf
rep movsb byte es:[edi], byte [esi]
lea edi, [ebp - 0xb93]
mov esi, 0x42b543
mov ecx, 0x3d
rep movsb byte es:[edi], byte [esi]
sub eax, 0x140b29d4
mov dword [0x429384], eax
mov eax, dword [0x429384]
and eax, 0xb46d2bac
add eax, 0x5b53f3cc
and eax, 0x32718ea9
mov dword [0x429384], eax
mov dword [esp + 4], eax
mov dword [esp + 0xc], str.Translation
mov dword [esp + 8], str.Translation
mov dword [esp], str.Translation
call fcn.0040feac
mov eax, dword [0x429384]
mov dword [esp + 8], eax
mov dword [esp + 4], eax
mov dword [esp], eax
call fcn.004132ec
mov eax, dword [0x429384]
mov byte [ebp + ebx - 0x718], bl
inc ebx
and eax, 0x50f28b21
xor eax, 0x59511b9c
mov dword [ebp - 0xe9c], eax
or eax, 0xeabf2cf6
mov dword [0x429384], eax
cmp ebx, 0x100
jne 0x4047ad
xor esi, esi
xor ecx, ecx
mov edi, 0x3c
mov eax, ecx
xor edx, edx
mov bl, byte [ebp + ecx - 0x718]
div edi
movzx eax, byte [ebp + edx - 0xb93]
movzx edx, bl
add eax, edx
add eax, esi
movzx esi, al
mov al, byte [ebp + esi - 0x718]
mov byte [ebp + ecx - 0x718], al
inc ecx
mov byte [ebp + esi - 0x718], bl
cmp ecx, 0x100
jne 0x404833
xor ebx, ebx
xor ecx, ecx
xor edx, edx
inc edx
movzx edx, dl
movzx edi, byte [ebp + edx - 0x718]
add ecx, edi
movzx ecx, cl
mov al, byte [ebp + ecx - 0x718]
mov byte [ebp + edx - 0x718], al
mov eax, edi
mov byte [ebp + ecx - 0x718], al
add al, byte [ebp + edx - 0x718]
movzx eax, al
mov al, byte [ebp + eax - 0x718]
xor al, byte [ebx + ebp - 0xe4b]
movzx eax, al
mov word [ebp + ebx*2 - 0xd0e], ax
inc ebx
cmp ebx, 0xf
jne 0x404876
mov eax, dword [ebp - 0xe9c]
lea edi, [ebp - 0xe58]
mov esi, 0x42b580
mov word [ebp - 0xcf0], 0
mov ecx, 0xd
rep movsb byte es:[edi], byte [esi]
and eax, 0xc8767811
lea edi, [ebp - 0xd76]
mov esi, 0x42b58d
mov ecx, 0x16
or eax, 0xc8362810
rep movsb byte es:[edi], byte [esi]
imul eax, eax, 0xb641c87f
mov dword [0x429384], eax
xor eax, eax
mov byte [ebp + eax - 0x618], al
inc eax
cmp eax, 0x100
jne 0x404911
xor esi, esi
xor ebx, ebx
mov eax, ebx
mov edi, 0x15
xor edx, edx
mov cl, byte [ebp + ebx - 0x618]
div edi
mov byte [ebp - 0xe9c], cl
movzx eax, byte [ebp + edx - 0xd76]
movzx edx, cl
add eax, edx
add eax, esi
movzx esi, al
mov eax, dword [0x429384]
and eax, 0xd222e5c6
or eax, 0x1022a486
sub eax, 0x5920f635
mov dword [0x429384], eax
call fcn.0040f81c
mov al, byte [ebp + esi - 0x618]
mov cl, byte [ebp - 0xe9c]
mov byte [ebp + ebx - 0x618], al
inc ebx
mov byte [ebp + esi - 0x618], cl
cmp ebx, 0x100
jne 0x404924
mov edx, str.The_system_has_awoken
mov ecx, 0x1f67
movzx eax, word [edx]
add edx, 2
test ax, ax
je 0x4049b9
add ecx, eax
cmp ecx, 0x2176
jbe 0x40499a
xor dword [0x429384], 0x148406b1
mov eax, dword [0x429384]
xor edi, edi
xor esi, esi
xor ebx, ebx
and eax, 0x1f65d5d5
xor eax, 0xb6cdb0f8
mov dword [0x429384], eax
call fcn.0041188c
inc ebx
movzx ebx, bl
mov dl, byte [ebp + ebx - 0x618]
lea eax, [edx + esi]
mov byte [ebp - 0xe9c], dl
movzx esi, al
mov eax, dword [0x429384]
sub eax, 0x198df7f8
mov dword [0x429384], eax
mov dword [esp], eax
call dword [sym.imp.USER32.dll_IsZoomed]
mov ecx, 0x33b
push eax
mov al, byte [ebp + esi - 0x618]
mov dl, byte [ebp - 0xe9c]
mov byte [ebp + ebx - 0x618], al
mov eax, dword [0x429384]
mov byte [ebp + esi - 0x618], dl
add eax, 0x2eedef
xor eax, 0x471306a0
mov dword [0x429384], eax
mov al, byte [ebp + ebx - 0x618]
add eax, edx
mov edx, str.Translation
movzx eax, al
mov al, byte [ebp + eax - 0x618]
mov byte [ebp - 0xe9c], al
movsx eax, byte [edx]
inc edx
test al, al
je 0x404a7b
add ecx, eax
cmp ecx, 0x1d23
jbe 0x404a5a
call fcn.00411ec8
sub dword [0x429384], 0x6e141ce6
imul eax, dword [0x429384], 0x741b972d
sub eax, 0x8dd66ec
mov dword [0x429384], eax
call fcn.00411ec8
mov al, byte [ebp - 0xe9c]
xor al, byte [ebp + edi - 0xe58]
movzx eax, al
mov word [ebp + edi*2 - 0xd60], ax
inc edi
cmp edi, 0xd
jne 0x4049d8
mov word [ebp - 0xd46], 0
xor eax, eax
cmp byte [eax + str.Translation], 0
je 0x404af0
inc eax
cmp eax, 0xafb
jne 0x404ac1
mov dword [esp + 4], str.The_system_has_awoken
mov dword [esp], str.Translation
call fcn.0040e8e8
and dword [0x429384], 0xed6d57d3
mov eax, dword [0x429384]
lea edi, [ebp - 0xe78]
mov esi, 0x42b5a3
or eax, 0x3fc7bf29
add eax, 0xe077d84
mov dword [0x429384], eax
call fcn.0040f81c
mov eax, dword [0x429384]
mov ecx, 0xa
xor edx, edx
rep movsb byte es:[edi], byte [esi]
mov byte [ebp - 0xe83], 0
mov dword [ebp - 0xe8b], 0x70797466
sub eax, 0x72705afb
mov dword [ebp - 0xe87], 0x69637661
and eax, 0xc848008
or eax, 0xb8beb16d
mov dword [ebp - 0xe9c], eax
mov byte [ebp + edx - 0x518], dl
inc edx
cmp edx, 0x100
jne 0x404b52
xor esi, esi
xor edx, edx
mov ecx, edx
movzx edi, byte [ebp + edx - 0x518]
and ecx, 7
movzx ecx, byte [ebp + ecx - 0xe8b]
mov ebx, edi
add ecx, edi
add ecx, esi
movzx esi, cl
mov cl, byte [ebp + esi - 0x518]
mov byte [ebp + edx - 0x518], cl
inc edx
mov byte [ebp + esi - 0x518], bl
cmp edx, 0x100
jne 0x404b66
xor esi, esi
xor ebx, ebx
xor ecx, ecx
inc ecx
movzx ecx, cl
mov dl, byte [ebp + ecx - 0x518]
add ebx, edx
movzx ebx, bl
mov al, byte [ebp + ebx - 0x518]
mov byte [ebp + ecx - 0x518], al
mov byte [ebp + ebx - 0x518], dl
add dl, byte [ebp + ecx - 0x518]
movzx edx, dl
mov dl, byte [ebp + edx - 0x518]
xor dl, byte [esi + ebp - 0xe78]
movzx edx, dl
mov word [ebp + esi*2 - 0xda0], dx
inc esi
cmp esi, 0xa
jne 0x404ba8
mov eax, dword [ebp - 0xe9c]
lea edi, [ebp - 0xdd7]
mov esi, 0x42b5ad
mov word [ebp - 0xd8c], 0
mov ecx, 0x11
rep movsb byte es:[edi], byte [esi]
lea edi, [ebp - 0xc70]
mov esi, str.The_file_catalog_hash_is_valid.
mov ecx, 8
rep movsd dword es:[edi], dword [esi]
xor eax, 0x6cf5783b
sub eax, 0x7b77e022
xor eax, 0xfb89a6
sub eax, 0x478993e2
mov dword [0x429384], eax
xor eax, eax
mov byte [ebp + eax - 0x418], al
inc eax
cmp eax, 0x100
jne 0x404c44
xor esi, esi
xor ebx, ebx
mov eax, dword [0x429384]
xor edx, edx
or eax, 0xfcc7d2f
mov dword [0x429384], eax
cmp word [edx + str.The_system_has_awoken], 0
je 0x404c87
add edx, 2
cmp edx, 0x447c
jne 0x404c68
add eax, 0x275b004f
mov dword [0x429384], eax
imul eax, dword [0x429384], 0xbdf06773
mov edi, 0x1f
or eax, 0xb406349c
mov dword [0x429384], eax
mov dword [esp + 4], eax
mov dword [esp + 0xc], str.Translation
mov dword [esp + 8], str.Translation
mov dword [esp], str.Translation
call fcn.0040feac
mov eax, ebx
xor edx, edx
mov cl, byte [ebp + ebx - 0x418]
div edi
mov al, byte [ebp + edx - 0xc70]
add eax, ecx
add eax, esi
movzx esi, al
mov al, byte [ebp + esi - 0x418]
mov byte [ebp + ebx - 0x418], al
inc ebx
mov byte [ebp + esi - 0x418], cl
cmp ebx, 0x100
jne 0x404c57
xor edi, edi
xor esi, esi
xor ebx, ebx
inc ebx
movzx ebx, bl
mov al, byte [ebp + ebx - 0x418]
lea edx, [eax + esi]
mov byte [ebp - 0xe9c], al
movzx esi, dl
mov al, byte [ebp + esi - 0x418]
mov byte [ebp + ebx - 0x418], al
xor eax, eax
cmp word [eax + eax + str.The_system_has_awoken], 0
je 0x404d4e
inc eax
cmp eax, 0x593
jne 0x404d2a
call fcn.004116e0
and dword [0x429384], 0xdf55b899
jmp 0x404d55
cmp eax, 0x113
jle 0x404d69
mov dword [esp + 4], str.AslpFileLargeGetChecksum
mov dword [esp], str.Translation
call fcn.0040e8e8
mov al, byte [ebp - 0xe9c]
imul edx, dword [0x429384], 0x59fef5b4
mov byte [ebp + esi - 0x418], al
add al, byte [ebp + ebx - 0x418]
movzx eax, al
mov dword [0x429384], edx
mov al, byte [ebp + eax - 0x418]
xor al, byte [ebp + edi - 0xdd7]
movzx eax, al
mov word [ebp + edi*2 - 0xc2e], ax
inc edi
cmp edi, 0x11
jne 0x404d03
mov dword [ebp - 0xe9c], edx
lea edi, [ebp - 0xe19]
mov dword [esp + 4], str.AslpFileLargeGetChecksum
mov dword [esp], str.Translation
call fcn.0040e8e8
mov esi, dword [ebp - 0xe9c]
and esi, 0x40080010
or esi, 0x160420
mov dword [0x429384], esi
mov esi, 0x42b5de
call fcn.00414a18
mov ecx, 4
mov word [ebp - 0xc0c], 0
imul eax, dword [0x429384], 0x812d7e0b
rep movsd dword es:[edi], dword [esi]
lea edi, [ebp - 0xb56]
mov dword [0x429384], eax
mov dword [esp], 0x3bd
call dword [sym.imp.USER32.dll_IsIconic]
mov ecx, 0x3e
push esi
mov esi, 0x42b5ee
mov eax, dword [0x429384]
rep movsb byte es:[edi], byte [esi]
mov dword [esp + 8], eax
mov dword [esp + 4], eax
mov dword [esp], str.AslpFileLargeGetChecksum
call fcn.0040f8d4
mov eax, dword [0x429384]
xor edx, edx
xor eax, 0x5c473719
add eax, 0x4acdc685
mov dword [0x429384], eax
cmp word [edx + str.The_system_has_awoken], 0
je 0x404e8c
add edx, 2
cmp edx, 0x512
jne 0x404e63
and eax, 0xfeb6b42e
mov dword [0x429384], eax
mov dword [esp], eax
call dword [sym.imp.USER32.dll_GetTopWindow]
push ebx
mov eax, dword [0x429384]
xor eax, 0xec057ff4
and eax, 0x2048c6b8
mov dword [0x429384], eax
call fcn.00411ec8
xor eax, eax
mov byte [eax + ebp - 0x318], al
inc eax
cmp eax, 0x100
jne 0x404ea7
xor eax, eax
cmp word [eax + str.The_system_has_awoken], 0
je 0x404ed6
add eax, 2
cmp eax, 0x25c6
jne 0x404eb8
sub dword [0x429384], 0xe933677
imul eax, dword [0x429384], 0xf6943819
xor esi, esi
xor ebx, ebx
xor eax, 0x84f561f1
add eax, 0x5f6bb8ac
or eax, 0xffe4eab8
mov dword [0x429384], eax
mov dword [esp + 4], str.The_system_has_awoken
mov dword [esp], str.Translation
call fcn.0040e8e8
mov ecx, 0x3d
mov eax, ebx
xor edx, edx
movzx edi, byte [ebp + ebx - 0x318]
div ecx
mov eax, edi
add al, byte [ebp + edx - 0xb56]
mov edx, dword [0x429384]
add eax, esi
xor edx, 0x11f4d87c
movzx esi, al
xor eax, eax
mov dword [0x429384], edx
cmp word [eax + str.AslpFileLargeGetChecksum], 0
je 0x404f7f
add eax, 2
cmp eax, 0x3bc8
jne 0x404f41
mov dword [esp + 0xc], str.Translation
mov dword [esp + 8], str.Translation
mov dword [esp + 4], edx
mov dword [esp], str.Translation
call fcn.0040feac
sub dword [0x429384], 0x10c2da16
mov eax, dword [0x429384]
xor eax, 0xf4a81ed2
imul eax, eax, 0xf701d877
mov dword [0x429384], eax
call fcn.00410e1c
mov edx, str.The_system_has_awoken
mov ecx, 0x83e
movzx eax, word [edx]
add edx, 2
test ax, ax
je 0x404fd3
add ecx, eax
cmp ecx, 0x1a29
jbe 0x404fa3
sub dword [0x429384], 0x46dfbaa4
call fcn.004102f0
mov eax, dword [0x429384]
xor eax, 0x90326087
jmp 0x404fdd
mov eax, dword [0x429384]
xor eax, 0xfc277d3d
and eax, 0x9f109a6f
mov dword [0x429384], eax
call fcn.004152ac
mov al, byte [ebp + esi - 0x318]
mov byte [ebp + ebx - 0x318], al
mov eax, edi
inc ebx
mov byte [ebp + esi - 0x318], al
cmp ebx, 0x100
jne 0x404f0c
xor edi, edi
xor esi, esi
xor ebx, ebx
inc ebx
movzx ebx, bl
mov dl, byte [ebp + ebx - 0x318]
lea eax, [edx + esi]
mov byte [ebp - 0xe9c], dl
movzx esi, al
mov eax, dword [0x429384]
and eax, 0x37b87ded
or eax, 0xd0870b64
imul eax, eax, 0xfbe2ff43
and eax, 0x71c3fd00
mov dword [0x429384], eax
call fcn.0040f81c
mov cl, byte [ebp + esi - 0x318]
mov dl, byte [ebp - 0xe9c]
imul eax, dword [0x429384], 0xfa43ca20
mov byte [ebp + ebx - 0x318], cl
mov byte [ebp + esi - 0x318], dl
add dl, byte [ebp + ebx - 0x318]
movzx edx, dl
mov dword [0x429384], eax
mov dl, byte [ebp + edx - 0x318]
xor dl, byte [ebp + edi - 0xe19]
movzx edx, dl
mov word [ebp + edi*2 - 0xcb0], dx
inc edi
cmp edi, 0x10
jne 0x405016
sub eax, 0x5d4499b0
lea edi, [ebp - 0xe09]
mov esi, 0x42b62c
xor edx, edx
mov word [ebp - 0xc90], 0
imul eax, eax, 0xdcd0c6cb
mov ecx, 4
rep movsd dword es:[edi], dword [esi]
lea edi, [ebp - 0xe63]
mov esi, str._tIME_Hour
mov ecx, 0xb
rep movsb byte es:[edi], byte [esi]
mov dword [0x429384], eax
cmp byte [edx + str.Translation], 0
je 0x405103
inc edx
cmp edx, 0x2a5
jne 0x4050e7
add eax, 0xa3221cc
mov dword [0x429384], eax
mov eax, dword [0x429384]
sub eax, 0x28ed9730
or eax, 0xcbf56e45
mov dword [0x429384], eax
call fcn.004102f0
mov ebx, dword [0x429384]
mov dword [esp + 4], str.The_system_has_awoken
mov dword [esp], str.Translation
xor ebx, 0x7d80af79
and ebx, 0x6a7b2993
call fcn.0040e8e8
or ebx, 0x3b13f104
xor eax, eax
imul ebx, ebx, 0x787fa99e
mov dword [0x429384], ebx
mov byte [ebp + eax - 0x218], al
inc eax
cmp eax, 0x100
jne 0x405156
xor esi, esi
xor ecx, ecx
mov edi, 0xa
mov eax, ecx
xor edx, edx
mov bl, byte [ebp + ecx - 0x218]
div edi
movzx eax, byte [ebp + edx - 0xe63]
movzx edx, bl
add eax, edx
add eax, esi
movzx esi, al
mov al, byte [ebp + esi - 0x218]
mov byte [ebp + ecx - 0x218], al
inc ecx
mov byte [ebp + esi - 0x218], bl
cmp ecx, 0x100
jne 0x40516e
xor ecx, ecx
xor edx, edx
xor esi, esi
lea eax, [esi + 1]
mov edi, dword [0x429384]
mov dword [ebp - 0xea0], ecx
movzx esi, al
mov bl, byte [ebp + esi - 0x218]
imul edi, edi, 0x3d22def1
add edx, ebx
movzx edx, dl
add edi, 0x5cbc812d
mov dword [ebp - 0xe9c], edx
mov dword [esp + 4], str.The_system_has_awoken
mov dword [esp], str.Translation
call fcn.0040e8e8
mov dword [0x429384], edi
mov dword [esp + 0xc], str.Translation
mov dword [esp + 8], str.Translation
mov dword [esp + 4], edi
mov dword [esp], str.Translation
call fcn.0040feac
mov edx, dword [ebp - 0xe9c]
mov ecx, dword [ebp - 0xea0]
mov al, byte [ebp + edx - 0x218]
mov byte [ebp + esi - 0x218], al
mov byte [ebp + edx - 0x218], bl
add bl, byte [ebp + esi - 0x218]
movzx ebx, bl
mov al, byte [ebp + ebx - 0x218]
xor al, byte [ebp + ecx - 0xe09]
movzx eax, al
mov word [ebp + ecx*2 - 0xc90], ax
inc ecx
cmp ecx, 0x10
jne 0x4051b1
mov word [ebp - 0xc70], 0
xor eax, eax
cmp word [eax + str.AslpFileLargeGetChecksum], 0
je 0x40529f
add eax, 2
cmp eax, 0x1412
jne 0x405274
mov eax, dword [0x429384]
mov dword [esp], eax
call fcn.0040f210
and dword [0x429384], 0xdedde370
mov eax, dword [0x429384]
mov ecx, str.The_system_has_awoken
mov ebx, 0xe82
xor eax, 0x3d2f15fe
sub eax, 0xcab3322
movzx edx, word [ecx]
add ecx, 2
test dx, dx
je 0x4052e4
add ebx, edx
cmp ebx, 0x19fb
jbe 0x4052b8
or eax, 0xefdfd0ef
mov dword [0x429384], eax
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
add eax, 0x7d64446
jmp 0x4052e9
or eax, 0xd0c1800
imul eax, eax, 0x1238021f
lea edi, [ebp - 0xdc6]
mov esi, 0x42b647
xor edx, edx
mov ecx, 0x12
rep movsb byte es:[edi], byte [esi]
lea edi, [ebp - 0xbe7]
mov esi, 0x42b659
mov ecx, 0x27
rep movsb byte es:[edi], byte [esi]
or eax, 0x87757575
mov dword [0x429384], eax
cmp word [edx + str.The_system_has_awoken], 0
je 0x405346
add edx, 2
cmp edx, 0x3172
jne 0x40531f
mov dword [esp], eax
call fcn.0040f210
sub dword [0x429384], 0x5d7eb44a
imul eax, dword [0x429384], 0x653867
or eax, 0xff3a6b4c
mov dword [0x429384], eax
mov dword [esp + 0xc], str.The_system_has_awoken
mov dword [esp + 8], str.Translation
mov dword [esp + 4], str.Translation
mov dword [esp], str.Translation
call fcn.004130d8
mov edx, str.The_system_has_awoken
mov ecx, 0x168
movzx eax, word [edx]
add edx, 2
test ax, ax
je 0x4053a7
add ecx, eax
cmp ecx, 0xf0c
jbe 0x405388
xor dword [0x429384], 0xd743d267
mov eax, dword [0x429384]
mov ebx, 0x17fd
xor eax, 0x9e320885
and eax, 0xf180a288
mov dword [0x429384], eax
mov dword [esp + 8], eax
mov dword [esp + 4], eax
mov dword [esp], str.AslpFileLargeGetChecksum
call fcn.0040f8d4
mov eax, dword [0x429384]
mov ecx, str.Translation
sub eax, 0x77fa703
mov dword [0x429384], eax
movsx edx, byte [ecx]
inc ecx
test dl, dl
je 0x405404
add ebx, edx
cmp ebx, 0x25a9
jbe 0x4053e8
and eax, 0x41523a9c
mov dword [0x429384], eax
imul eax, dword [0x429384], 0xcf949b43
or eax, 0x20ac5077
mov dword [0x429384], eax
mov dword [esp + 4], eax
mov dword [esp + 0xc], str.Translation
mov dword [esp + 8], str.Translation
mov dword [esp], str.Translation
call fcn.0040feac
xor eax, eax
cmp word [eax + str.The_system_has_awoken], 0
je 0x405468
add eax, 2
cmp eax, 0x2fe2
jne 0x40543a
xor dword [0x429384], 0x5ebf2a43
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
sub eax, 0x5339a798
mov dword [0x429384], eax
mov eax, dword [0x429384]
sub eax, 0x48e9753b
imul eax, eax, 0x3b4b9a87
mov dword [0x429384], eax
mov dword [esp + 8], eax
mov dword [esp + 4], eax
mov dword [esp], str.AslpFileLargeGetChecksum
call fcn.0040f8d4
call dword [sym.imp.KERNEL32.dll_GetLastError]
xor eax, eax
or dword [0x429384], 0x7c51802e
mov byte [ebp + eax - 0x118], al
inc eax
cmp eax, 0x100
jne 0x4054a3
call dword [sym.imp.USER32.dll_GetMessageTime]
xor esi, esi
xor ebx, ebx
imul eax, eax, 0x9a2e1b10
xor eax, 0xd15eb60e
imul eax, eax, 0x57f78e3b
mov dword [0x429384], eax
xor eax, eax
cmp word [eax + str.AslpFileLargeGetChecksum], 0
je 0x405516
add eax, 2
cmp eax, 0x177c
jne 0x4054d4
mov dword [esp + 0xc], str.The_system_has_awoken
mov dword [esp + 8], str.Translation
mov dword [esp + 4], str.Translation
mov dword [esp], str.Translation
call fcn.004130d8
sub dword [0x429384], 0x4db0c82f
mov eax, dword [0x429384]
mov edi, 0x26
and eax, 0xf111ae
imul eax, eax, 0x9fe36ad5
mov dword [0x429384], eax
mov dword [esp + 0xc], str.AslpFileLargeGetChecksum
mov dword [esp + 8], str.Translation
mov dword [esp + 4], str.Translation
mov dword [esp], str.Translation
call fcn.004130d8
mov eax, ebx
xor edx, edx
mov cl, byte [ebp + ebx - 0x118]
div edi
sub dword [0x429384], 0x3e59d59b
mov al, byte [ebp + edx - 0xbe7]
add eax, ecx
add eax, esi
movzx esi, al
mov al, byte [ebp + esi - 0x118]
mov byte [ebp + ebx - 0x118], al
inc ebx
mov byte [ebp + esi - 0x118], cl
cmp ebx, 0x100
jne 0x4054d2
xor edx, edx
xor esi, esi
xor ebx, ebx
inc ebx
mov edi, 0x3e7
movzx ebx, bl
mov cl, byte [ebp + ebx - 0x118]
lea eax, [ecx + esi]
movzx esi, al
mov al, byte [ebp + esi - 0x118]
mov byte [ebp + ebx - 0x118], al
mov byte [ebp + esi - 0x118], cl
add cl, byte [ebp + ebx - 0x118]
movzx ecx, cl
mov al, byte [ebp + ecx - 0x118]
mov ecx, str.The_system_has_awoken
mov byte [ebp - 0xe9c], al
movzx eax, word [ecx]
add ecx, 2
test ax, ax
je 0x405619
add edi, eax
cmp edi, 0x1a27
jbe 0x4055e8
mov dword [ebp - 0xea0], edx
add dword [0x429384], 0x66499104
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov edx, dword [ebp - 0xea0]
mov eax, dword [0x429384]
mov dword [ebp - 0xea0], edx
xor eax, 0xe9e8dc2d
and eax, 0x804a7814
mov dword [0x429384], eax
mov dword [esp], eax
call dword [sym.imp.USER32.dll_GetWindowTextLengthA]
xor eax, eax
push ecx
mov edx, dword [ebp - 0xea0]
cmp byte [eax + str.Translation], 0
je 0x405662
inc eax
cmp eax, 0x100e
jne 0x405645
and dword [0x429384], 0xeb768ea0
jmp 0x405675
mov ecx, dword [0x429384]
or ecx, 0xd0e26836
cmp eax, 0x7da
jle 0x405680
mov eax, dword [0x429384]
lea ecx, [eax + 0x6dfabcfa]
mov al, byte [ebp - 0xe9c]
xor al, byte [ebp + edx - 0xdc6]
lea edi, [ebp - 0xc0c]
and ecx, 0xfe81ee0e
movzx eax, al
mov dword [0x429384], ecx
mov word [edi + edx*2], ax
inc edx
cmp edx, 0x12
jne 0x4055a1
xor ecx, 0xf01ce223
xor eax, eax
mov word [ebp - 0xbe8], 0
mov dword [0x429384], ecx
cmp word [eax + str.AslpFileLargeGetChecksum], 0
je 0x4056ed
add eax, 2
cmp eax, 0x3e0a
jne 0x4056c7
mov dword [esp], ecx
call fcn.0040f210
or dword [0x429384], 0x95691bd6
imul eax, dword [0x429384], 0xa18f0041
xor ebx, ebx
or eax, 0xd6a15bbe
mov dword [0x429384], eax
call fcn.00410e1c
or dword [0x429384], 0xe5f2b547
mov dword [esp], str.Translation
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push eax
mov dword [esp], str.Log_file_space_is_insufficient_to_support_this_operation.
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
xor eax, 0xc53d2c1c
push edx
add eax, 0x636be1a5
imul eax, eax, 0x99183469
mov dword [0x429384], eax
mov dword [esp + 0xc], str.The_system_has_awoken
mov dword [esp + 8], str.Translation
mov dword [esp + 4], str.Translation
mov dword [esp], str.Translation
call fcn.004130d8
lea eax, [ebp - 0xd8c]
xor dword [0x429384], 0xe594f2d5
mov dword [ebp - 0xbc0], eax
lea eax, [ebp - 0xdb4]
mov dword [ebp - 0xbbc], eax
lea eax, [ebp - 0xcd0]
mov dword [ebp - 0xbb8], eax
lea eax, [ebp - 0xc50]
mov dword [ebp - 0xbb4], eax
lea eax, [ebp - 0xd0e]
mov dword [ebp - 0xbb0], eax
lea eax, [ebp - 0xd60]
mov dword [ebp - 0xbac], eax
lea eax, [ebp - 0xda0]
mov dword [ebp - 0xba8], eax
lea eax, [ebp - 0xc2e]
mov dword [ebp - 0xba4], eax
lea eax, [ebp - 0xcb0]
mov dword [ebp - 0xba0], eax
lea eax, [ebp - 0xc90]
mov dword [ebp - 0xb9c], eax
mov dword [ebp - 0xb98], edi
mov eax, dword [ebp + ebx*4 - 0xbc0]
mov dword [esp], eax
call fcn.004010e8
test eax, eax
je 0x405846
lea edi, [ebp - 0xe3c]
mov esi, section..data
mov ecx, 4
mov edx, dword [0x429384]
rep movsd dword es:[edi], dword [esi]
mov eax, 0x51
or edx, 0x546c8021
sub edx, 0x7efa2bef
add eax, dword [ebp + ecx*4 - 0xe3c]
inc ecx
and edx, 0xa1188197
cmp ecx, 4
jne 0x405825
mov dword [0x429384], edx
jmp 0x40584c
inc ebx
cmp ebx, 0xb
jne 0x4057ef
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret