Function at 0x65683568
Capabilities:
Accept command line arguments
Encode data using xor
Encrypt data using rc4 ksa

Disassembly:
push ebp
mov ecx, 0xa
mov ebp, esp
push edi
push esi
lea edi, [ebp - 0x9e4]
mov esi, 0x656abbc2
push ebx
xor ebx, ebx
sub esp, 0x9fc
mov eax, dword [0x656a8e74]
rep movsb byte es:[edi], byte [esi]
lea edi, [ebp - 0x93a]
mov esi, str.Import_Redirection_Loaded
mov ecx, 0x1a
rep movsb byte es:[edi], byte [esi]
mov dword [esp + 8], eax
mov dword [esp + 4], eax
mov eax, dword [0x656a8ea0]
mov dword [esp], eax
call fcn.65692138
imul eax, dword [0x656a8fb0], 0x79ccf8bb
mov dword [0x656a8ea0], eax
call fcn.65693958
mov edx, dword [0x656a8ea0]
mov eax, edx
xor eax, 0x7e4a6b8b
mov dword [0x656a8e74], eax
mov dword [esp + 8], edx
mov dword [esp], eax
mov dword [esp + 0xc], str.An_RPC_protocol_error_occurred.
mov dword [esp + 4], str.An_RPC_protocol_error_occurred.
call fcn.656939c0
mov eax, dword [0x656a8e74]
mov byte [ebp + ebx - 0x718], bl
inc ebx
lea edx, [eax + 0x2aac34ce]
mov dword [0x656a8fb0], edx
lea edx, [eax + 0x57bbae08]
add eax, 0xfb390a8
mov dword [0x656a8ea0], edx
mov dword [0x656a8e74], eax
cmp ebx, 0x100
jne 0x656835c3
xor esi, esi
xor ebx, ebx
mov ecx, str.An_RPC_protocol_error_occurred.
mov edx, 0x2c7
movsx eax, byte [ecx]
inc ecx
test al, al
je 0x6568364d
add edx, eax
cmp edx, 0xab6
jbe 0x6568363b
mov edi, dword [0x656a8ea0]
mov ecx, 0x19
xor edx, edx
lea eax, [edi - 0x7a54089]
mov dword [ebp - 0x9f0], eax
mov dword [0x656a8e74], eax
mov al, byte [ebp + ebx - 0x718]
mov byte [ebp - 0x9ec], al
mov eax, ebx
div ecx
mov al, byte [ebp - 0x9ec]
imul ecx, dword [ebp - 0x9f0], 0xc8d1d6af
mov dword [0x656a8ea0], ecx
add al, byte [ebp + edx - 0x93a]
add eax, esi
movzx esi, al
mov al, byte [ebp + esi - 0x718]
mov byte [ebp + ebx - 0x718], al
lea eax, [edi - 0xe3ec602]
inc ebx
mov dword [0x656a8fb0], eax
call dword [sym.imp.KERNEL32.dll_GetCommandLineW]
mov al, byte [ebp - 0x9ec]
mov byte [ebp + esi - 0x718], al
cmp ebx, 0x100
jne 0x65683631
mov eax, dword [0x656a8ea0]
xor ebx, ebx
xor edi, edi
xor esi, esi
xor eax, 0x572d9385
mov dword [0x656a8e74], eax
lea eax, [esi + 1]
mov edx, str.The_network_responded_incorrectly.
movzx esi, al
mov al, byte [edx]
test al, al
je 0x65683718
sub eax, 0x30
cmp al, 9
jbe 0x65683715
mov eax, dword [0x656a8e74]
or eax, 0xf0853f6
mov dword [0x656a8ea0], eax
jmp 0x65683718
inc edx
jmp 0x656836f7
sub dword [0x656a8fb0], 0x5dd81dbd
mov dword [esp], str.STATUS_ALREADY_WIN32
call fcn.65693f48
mov al, byte [ebp + esi - 0x718]
add dword [0x656a8ea0], 0x6a7acdab
lea edx, [eax + edi]
movzx edi, dl
mov dl, byte [ebp + edi - 0x718]
mov byte [ebp + esi - 0x718], dl
mov byte [ebp + edi - 0x718], al
add al, byte [ebp + esi - 0x718]
movzx eax, al
mov al, byte [ebp + eax - 0x718]
xor al, byte [ebp + ebx - 0x9e4]
movzx eax, al
mov word [ebp + ebx*2 - 0x9a2], ax
inc ebx
cmp ebx, 0xa
jne 0x656836ec
mov eax, dword [0x656a8fb0]
mov esi, dword [sym.imp.USER32.dll_GetTopWindow]
lea edi, [ebp - 0x9da]
add eax, 0x656aecd7
mov dword [0x656a8ea0], eax
mov eax, dword [0x656a8e74]
mov dword [esp], eax
call esi
push ecx
mov word [ebp - 0x98e], 0
mov dword [esp], 0x21c
call esi
mov ecx, ebx
push esi
mov esi, 0x656abbe6
mov eax, dword [0x656a8fb0]
rep movsb byte es:[edi], byte [esi]
lea edi, [ebp - 0x9b5]
mov esi, 0x656abbf0
mov ecx, 0x13
rep movsb byte es:[edi], byte [esi]
and eax, 0x38ab3c53
mov dword [ebp - 0x9ec], eax
xor eax, eax
mov byte [ebp + eax - 0x618], al
inc eax
cmp eax, 0x100
jne 0x656837ed
xor esi, esi
xor ecx, ecx
mov edi, 0x12
mov eax, ecx
xor edx, edx
mov bl, byte [ebp + ecx - 0x618]
div edi
movzx eax, byte [ebp + edx - 0x9b5]
movzx edx, bl
add eax, edx
add eax, esi
movzx esi, al
mov al, byte [ebp + esi - 0x618]
mov byte [ebp + ecx - 0x618], al
inc ecx
mov byte [ebp + esi - 0x618], bl
cmp ecx, 0x100
jne 0x65683805
xor ebx, ebx
xor ecx, ecx
xor edx, edx
inc edx
movzx edx, dl
movzx edi, byte [ebp + edx - 0x618]
add ecx, edi
movzx ecx, cl
mov al, byte [ebp + ecx - 0x618]
mov byte [ebp + edx - 0x618], al
mov eax, edi
mov byte [ebp + ecx - 0x618], al
add al, byte [ebp + edx - 0x618]
movzx eax, al
mov al, byte [ebp + eax - 0x618]
xor al, byte [ebx + ebp - 0x9da]
movzx eax, al
mov word [ebp + ebx*2 - 0x98e], ax
inc ebx
cmp ebx, 0xa
jne 0x65683848
mov eax, dword [ebp - 0x9ec]
lea edx, [eax - 0x11fb943b]
imul eax, eax, 0xe76c5194
mov dword [0x656a8e74], edx
mov dword [0x656a8ea0], eax
mov eax, dword [ebp - 0x9ec]
sub eax, 0x1fd6c2a4
mov dword [0x656a8fb0], eax
mov dword [esp + 4], edx
mov dword [esp], str.The_network_responded_incorrectly.
call fcn.656920d0
mov edx, str.The_network_responded_incorrectly.
mov word [ebp - 0x97a], 0
mov al, byte [edx]
test al, al
je 0x65683900
sub eax, 0x30
cmp al, 9
jbe 0x656838fd
xor dword [0x656a8ea0], 0x276556b
jmp 0x65683900
inc edx
jmp 0x656838e4
mov eax, dword [0x656a8fb0]
lea edi, [ebp - 0x9d0]
mov esi, 0x656abc03
and eax, 0x30a4aef3
mov dword [0x656a8fb0], eax
mov dword [esp + 0xc], str.An_RPC_protocol_error_occurred.
mov edx, dword [0x656a8e74]
mov dword [esp], eax
mov dword [esp + 8], edx
mov dword [esp + 4], str.The_network_responded_incorrectly.
call fcn.656939c0
mov ecx, 0xb
imul eax, dword [0x656a8e74], 0x9bcacf3c
cmp byte [str.The_network_responded_incorrectly.], 0
rep movsb byte es:[edi], byte [esi]
mov dword [0x656a8ea0], eax
je 0x6568396f
call fcn.65691610
mov eax, dword [0x656a8fb0]
and eax, 0x96ac7c35
mov dword [0x656a8e74], eax
mov eax, dword [0x656a8e74]
lea edi, [ebp - 0x80a]
mov esi, 0x656abc0e
xor ebx, ebx
mov ecx, 0x39
rep movsb byte es:[edi], byte [esi]
xor eax, 0x93b02460
mov dword [0x656a8fb0], eax
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
xor eax, 0x83b43ea8
mov dword [0x656a8e74], eax
xor eax, eax
cmp byte [eax + str.An_RPC_protocol_error_occurred.], 0
je 0x656839c4
inc eax
cmp eax, 0x2619
jne 0x656839a4
mov eax, dword [0x656a8ea0]
add eax, 0x1ebec0be
mov dword [0x656a8e74], eax
mov eax, dword [0x656a8ea0]
add eax, 0x1febb39c
mov dword [0x656a8fb0], eax
xor eax, 0x90f6e477
mov dword [0x656a8ea0], eax
mov dword [esp + 0xc], str.An_RPC_protocol_error_occurred.
mov edx, dword [0x656a8e74]
mov dword [esp], eax
mov dword [esp + 8], edx
mov dword [esp + 4], str.The_network_responded_incorrectly.
call fcn.656939c0
mov eax, dword [0x656a8e74]
mov byte [ebp + ebx - 0x518], bl
inc ebx
and eax, 0xa8657dd
mov dword [0x656a8ea0], eax
cmp ebx, 0x100
jne 0x656839a2
mov eax, dword [0x656a8fb0]
xor esi, esi
xor ecx, ecx
mov dword [ebp - 0x9ec], eax
mov eax, ecx
mov edi, 0x38
xor edx, edx
mov bl, byte [ebp + ecx - 0x518]
div edi
movzx eax, byte [ebp + edx - 0x80a]
movzx edx, bl
add eax, edx
add eax, esi
movzx esi, al
mov al, byte [ebp + esi - 0x518]
mov byte [ebp + ecx - 0x518], al
inc ecx
mov byte [ebp + esi - 0x518], bl
cmp ecx, 0x100
jne 0x65683a2d
mov edi, dword [ebp - 0x9ec]
mov byte [ebp - 0x419], al
mov byte [ebp + esi - 0x518], bl
lea edx, [edi - 0x6ce82e53]
sub edi, 0x795689d7
cmp byte [str.The_network_responded_incorrectly.], 0
mov dword [0x656a8ea0], edx
mov dword [0x656a8e74], edi
je 0x65683ac0
mov dword [ebp - 0x9ec], edx
call fcn.65693958
mov edx, dword [ebp - 0x9ec]
imul edx, edx, 0xd3d2bcb8
mov dword [0x656a8fb0], edx
call fcn.65691610
mov eax, dword [0x656a8fb0]
lea edx, [eax + 0x39b809cb]
mov dword [0x656a8e74], edx
mov dword [esp + 8], eax
mov dword [esp + 4], eax
mov eax, dword [0x656a8ea0]
mov dword [esp], eax
call fcn.65692138
xor eax, eax
cmp byte [eax + str.An_RPC_protocol_error_occurred.], 0
je 0x65683b08
inc eax
cmp eax, 0x1edc
jne 0x65683aed
or dword [0x656a8fb0], 0x5f1c2585
mov eax, dword [0x656a8fb0]
xor edi, edi
xor esi, esi
xor ebx, ebx
and dword [0x656a8ea0], 0xa8a7bff8
and eax, 0x15058607
mov dword [0x656a8e74], eax
call dword [sym.imp.KERNEL32.dll_GetSystemDefaultLangID]
movzx eax, ax
imul eax, eax, 0x72e6e8f1
mov dword [0x656a8e74], eax
call fcn.65692374
imul edx, dword [0x656a8fb0], 0x1b47763
inc ebx
movzx ebx, bl
mov al, byte [ebp + ebx - 0x518]
and edx, 0xb2abb8dd
lea ecx, [eax + esi]
mov dword [ebp - 0x9f4], edx
movzx esi, cl
mov ecx, edx
mov dl, byte [ebp + esi - 0x518]
or ecx, 0x100a9848
mov dword [ebp - 0x9ec], ecx
mov byte [ebp + ebx - 0x518], dl
mov edx, 0x3a2
mov byte [ebp + esi - 0x518], al
add al, byte [ebp + ebx - 0x518]
movzx eax, al
mov dword [0x656a8e74], ecx
imul ecx, ecx, 0x7f2f45
mov al, byte [ebp + eax - 0x518]
mov byte [ebp - 0x9f5], al
mov dword [ebp - 0x9f0], ecx
mov dword [0x656a8fb0], ecx
mov ecx, str.The_network_responded_incorrectly.
movzx eax, byte [ecx]
inc ecx
test al, al
je 0x65683be6
add edx, eax
cmp edx, 0xc7
jbe 0x65683bc3
imul eax, dword [ebp - 0x9ec], 0x93d6a765
mov dword [0x656a8e74], eax
jmp 0x65683bee
cmp edx, 0xc7
jbe 0x65683c00
mov eax, dword [ebp - 0x9f0]
and eax, 0x8a31404f
mov dword [0x656a8fb0], eax
jmp 0x65683c10
mov eax, dword [ebp - 0x9f4]
or eax, 0xf52f9ffa
mov dword [0x656a8e74], eax
mov eax, dword [0x656a8fb0]
sub eax, 0x2ef3e0ca
mov dword [0x656a8ea0], eax
call fcn.6568f90c
mov al, byte [ebp - 0x9f5]
xor al, byte [ebp + edi - 0x9d0]
movzx eax, al
mov word [ebp + edi*2 - 0x966], ax
inc edi
cmp edi, 0xb
jne 0x65683b40
mov edx, dword [0x656a8fb0]
xor eax, eax
mov word [ebp - 0x950], 0
mov ecx, edx
and ecx, 0x2fbe98bf
mov dword [0x656a8ea0], ecx
cmp byte [eax + str.An_RPC_protocol_error_occurred.], 0
je 0x65683c8c
inc eax
cmp eax, 0x1154
jne 0x65683c65
or edx, 0xf7bef086
mov dword [0x656a8e74], edx
mov dword [esp], ecx
call dword [sym.imp.USER32.dll_IsIconic]
push edx
mov eax, dword [0x656a8ea0]
lea edi, [ebp - 0x9c5]
mov esi, 0x656abc47
lea edx, [eax - 0x399cea0e]
xor eax, 0xab6faaa8
mov dword [0x656a8fb0], edx
mov dword [0x656a8e74], eax
mov dword [esp], str.MachineUILock
call fcn.65693f48
mov ecx, 4
mov eax, dword [0x656a8ea0]
rep movsd dword es:[edi], dword [esi]
lea edi, [ebp - 0x86e]
mov esi, str.The_resumable_flag_to_a_timer_API_was_ignored.
mov ecx, 0x2f
rep movsb byte es:[edi], byte [esi]
or eax, 0x70a8d3c1
mov dword [0x656a8fb0], eax
xor eax, eax
mov byte [ebp + eax - 0x418], al
inc eax
cmp eax, 0x100
jne 0x65683ce8
xor esi, esi
xor ecx, ecx
mov edi, 0x2e
mov eax, ecx
xor edx, edx
mov bl, byte [ebp + ecx - 0x418]
div edi
movzx eax, byte [ebp + edx - 0x86e]
movzx edx, bl
add eax, edx
add eax, esi
movzx esi, al
mov al, byte [ebp + esi - 0x418]
mov byte [ebp + ecx - 0x418], al
inc ecx
mov byte [ebp + esi - 0x418], bl
cmp ecx, 0x100
jne 0x65683d00
xor edx, edx
xor edi, edi
xor esi, esi
lea eax, [esi + 1]
mov ecx, str.The_network_responded_incorrectly.
movzx esi, al
mov bl, byte [ebp + esi - 0x418]
lea eax, [ebx + edi]
movzx edi, al
mov al, byte [ebp + edi - 0x418]
mov byte [ebp + esi - 0x418], al
mov byte [ebp + edi - 0x418], bl
mov al, byte [ecx]
test al, al
je 0x65683d91
sub eax, 0x30
cmp al, 9
jbe 0x65683d8e
imul eax, dword [0x656a8fb0], 0x84158e74
mov dword [0x656a8ea0], eax
jmp 0x65683d91
inc ecx
jmp 0x65683d70
mov dword [ebp - 0x9ec], edx
or dword [0x656a8ea0], 0x4a934c14
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov edx, dword [ebp - 0x9ec]
add bl, byte [ebp + esi - 0x418]
sub eax, 0x18ed8128
movzx ebx, bl
mov dword [0x656a8e74], eax
mov al, byte [ebp + ebx - 0x418]
xor al, byte [ebp + edx - 0x9c5]
movzx eax, al
mov word [ebp + edx*2 - 0x902], ax
inc edx
cmp edx, 0x10
jne 0x65683d43
lea edi, [ebp - 0x97a]
mov esi, 0x656abc86
mov ecx, 5
mov word [ebp - 0x8e2], 0
rep movsd dword es:[edi], dword [esi]
lea edi, [ebp - 0x7d1]
mov esi, str.The_error_specified_is_not_a_valid_Windows_RPC_error_code.
mov ecx, 0x3b
rep movsb byte es:[edi], byte [esi]
mov eax, dword [0x656a8fb0]
or eax, 0xdf45c874
mov dword [0x656a8ea0], eax
xor eax, eax
mov byte [ebp + eax - 0x318], al
inc eax
cmp eax, 0x100
jne 0x65683e22
xor esi, esi
xor ebx, ebx
mov dword [esp + 4], str.SdbpResolveInitSdbPath_failed_to_resolve_the_sdb_path___x_
mov dword [esp], str.setlinecap
call fcn.65691940
mov ecx, dword [0x656a8ea0]
imul eax, ecx, 0xb6b26f5f
lea edx, [eax - 0x20ed7334]
mov dword [0x656a8fb0], eax
mov dword [0x656a8e74], edx
mov dword [esp + 8], ecx
mov dword [esp + 4], edx
mov dword [esp], eax
call fcn.65692138
mov edx, str.The_network_responded_incorrectly.
mov ecx, 0x315
movzx eax, byte [edx]
inc edx
test al, al
je 0x65683ead
add ecx, eax
cmp ecx, 0xb41
jbe 0x65683e80
and dword [0x656a8ea0], 0x37c094b3
call fcn.6568f90c
add dword [0x656a8e74], 0x426a2d6e
jmp 0x65683eb7
and dword [0x656a8ea0], 0x78f3eeea
mov eax, dword [0x656a8ea0]
or eax, 0xdc9b0b0
mov dword [0x656a8fb0], eax
mov eax, dword [0x656a8e74]
mov dword [esp + 0xc], str.An_RPC_protocol_error_occurred.
mov dword [esp + 8], eax
mov dword [esp], eax
mov dword [esp + 4], str.An_RPC_protocol_error_occurred.
call fcn.656939c0
xor edx, edx
mov ecx, 0x3a
mov eax, ebx
div ecx
movzx edi, byte [ebp + ebx - 0x318]
mov eax, edi
add al, byte [ebp + edx - 0x7d1]
add eax, esi
cmp byte [str.The_network_responded_incorrectly.], 0
movzx esi, al
mov al, byte [ebp + esi - 0x318]
mov byte [ebp + ebx - 0x318], al
mov eax, dword [0x656a8fb0]
je 0x65683f32
mov edx, eax
and edx, 0x1fb7ad14
mov dword [0x656a8ea0], edx
or eax, 0xf85c790f
mov dword [0x656a8e74], eax
mov eax, dword [0x656a8ea0]
and eax, 0xb6cd0c9
mov dword [0x656a8fb0], eax
call fcn.65692374
cmp byte [str.The_network_responded_incorrectly.], 0
je 0x65683f74
mov eax, dword [0x656a8fb0]
mov dword [esp + 8], eax
mov edx, dword [0x656a8ea0]
mov dword [esp], eax
mov dword [esp + 4], edx
call fcn.65692138
imul eax, dword [0x656a8e74], 0xe9c6a4f5
mov dword [0x656a8ea0], eax
and eax, 0x22d8ab47
mov dword [0x656a8fb0], eax
call fcn.6568f90c
mov edx, str.The_network_responded_incorrectly.
mov al, byte [edx]
test al, al
je 0x65683fb8
sub eax, 0x30
cmp al, 9
jbe 0x65683fb5
mov eax, dword [0x656a8e74]
xor eax, 0x4ab50bd4
mov dword [0x656a8fb0], eax
jmp 0x65683fb8
inc edx
jmp 0x65683f97
mov eax, dword [0x656a8fb0]
inc ebx
add eax, 0x584a6796
mov dword [0x656a8ea0], eax
mov eax, edi
mov byte [ebp + esi - 0x318], al
cmp ebx, 0x100
jne 0x65683e35
xor edx, edx
xor edi, edi
xor esi, esi
lea eax, [esi + 1]
mov ecx, str.The_network_responded_incorrectly.
movzx esi, al
mov bl, byte [ebp + esi - 0x318]
lea eax, [ebx + edi]
movzx edi, al
mov al, byte [ebp + edi - 0x318]
mov byte [ebp + esi - 0x318], al
mov al, byte [ecx]
test al, al
je 0x65684058
sub eax, 0x30
cmp al, 9
jbe 0x65684055
mov eax, dword [0x656a8e74]
mov dword [ebp - 0x9ec], edx
lea ecx, [eax + 0xbaec76d]
imul ecx, ecx, 0x2ebdf8d3
mov dword [0x656a8fb0], ecx
mov dword [esp + 8], eax
mov dword [esp + 4], eax
mov dword [esp], eax
call fcn.65692138
mov edx, dword [ebp - 0x9ec]
and dword [0x656a8e74], 0xc931c1bb
jmp 0x65684058
inc ecx
jmp 0x65684009
mov byte [ebp + edi - 0x318], bl
add bl, byte [ebp + esi - 0x318]
sub dword [0x656a8ea0], 0x43b58cea
movzx ebx, bl
mov al, byte [ebp + ebx - 0x318]
xor al, byte [ebp + edx - 0x97a]
movzx eax, al
mov word [ebp + edx*2 - 0x8c2], ax
inc edx
cmp edx, 0x14
jne 0x65683fe3
mov eax, dword [0x656a8e74]
lea edi, [ebp - 0x950]
mov esi, 0x656abcd5
add eax, 0x79463101
mov dword [0x656a8ea0], eax
mov dword [esp + 4], eax
mov dword [esp], str.The_network_responded_incorrectly.
call fcn.656920d0
mov eax, dword [0x656a8e74]
mov ecx, 0x16
mov word [ebp - 0x89a], 0
rep movsb byte es:[edi], byte [esi]
lea edi, [ebp - 0x83f]
mov esi, str.This_operation_cannot_be_performed_in_a_transaction.
mov ecx, 0x35
rep movsb byte es:[edi], byte [esi]
sub eax, 0x57073ac5
mov dword [0x656a8fb0], eax
mov dword [esp + 4], str.AppBaseFileName
mov dword [esp], str.SdbpCheckMatchingWildcardRegistry
call fcn.65692e04
xor dword [0x656a8e74], 0x463cef05
call dword [sym.imp.USER32.dll_AnyPopup]
imul eax, eax, 0xf69c0e4
mov dword [0x656a8fb0], eax
call fcn.65691610
mov eax, dword [0x656a8ea0]
sub dword [0x656a8e74], 0x7072fde
add eax, 0xbe5b291
mov dword [0x656a8fb0], eax
mov dword [esp + 4], str.DirectDrawCreateEx
mov dword [esp], str.ViewFileOffset:__I64u
call fcn.65692e04
cmp byte [str.The_network_responded_incorrectly.], 0
je 0x6568416f
mov dword [esp + 4], str.moduleSigningLevel
mov dword [esp], str.No_network_adapters_are_available.
call fcn.65692e04
mov eax, dword [0x656a8fb0]
xor eax, 0xc03cd241
mov dword [0x656a8ea0], eax
imul eax, eax, 0x1773dae5
mov dword [0x656a8e74], eax
xor eax, 0x1fa40f84
mov dword [0x656a8fb0], eax
mov dword [esp + 4], str.The_miniport_adapter_is_in_lower_power_state.
mov dword [esp], str.Secure_Boot_policy_has_unexpectedly_changed.
call fcn.65691940
mov eax, dword [0x656a8ea0]
and eax, 0x4a168ea5
mov dword [0x656a8fb0], eax
xor eax, eax
mov byte [ebp + eax - 0x218], al
inc eax
cmp eax, 0x100
jne 0x656841b8
xor esi, esi
xor ebx, ebx
mov ecx, dword [0x656a8ea0]
mov edx, str.The_network_responded_incorrectly.
mov edi, 0x428
imul eax, ecx, 0x1c50c075
mov dword [0x656a8e74], eax
movzx eax, byte [edx]
inc edx
test al, al
je 0x6568421c
add edi, eax
cmp edi, 0x12b3
jbe 0x656841e6
mov dword [esp + 8], ecx
mov dword [esp + 4], ecx
mov eax, dword [0x656a8fb0]
mov dword [esp], eax
call fcn.65692138
mov eax, dword [0x656a8e74]
xor eax, 0x4b97463c
mov dword [0x656a8fb0], eax
mov eax, dword [0x656a8ea0]
xor eax, 0x22216396
mov dword [0x656a8e74], eax
call dword [sym.imp.KERNEL32.dll_GetSystemDefaultLangID]
mov eax, dword [0x656a8fb0]
xor eax, 0xcbff5241
mov dword [0x656a8ea0], eax
mov dword [esp], 0x656abb60
call fcn.65693f48
mov ecx, 0x34
mov eax, ebx
xor edx, edx
div ecx
movzx edi, byte [ebp + ebx - 0x218]
mov eax, edi
mov ecx, 0x1266
add al, byte [ebp + edx - 0x83f]
mov edx, str.An_RPC_protocol_error_occurred.
add eax, esi
movzx esi, al
movsx eax, byte [edx]
inc edx
test al, al
je 0x65684298
add ecx, eax
cmp ecx, 0x176e
jbe 0x65684277
mov eax, dword [0x656a8e74]
xor eax, 0x66ad2c24
mov dword [0x656a8ea0], eax
mov eax, dword [0x656a8ea0]
sub eax, 0x7886fda7
mov dword [0x656a8e74], eax
mov dword [esp + 8], eax
mov dword [esp], eax
mov dword [esp + 0xc], str.An_RPC_protocol_error_occurred.
mov dword [esp + 4], str.An_RPC_protocol_error_occurred.
call fcn.656939c0
mov al, byte [ebp + esi - 0x218]
mov byte [ebp + ebx - 0x218], al
mov eax, edi
inc ebx
mov byte [ebp + esi - 0x218], al
cmp ebx, 0x100
jne 0x656841cb
mov dword [esp], 0xf46
xor edi, edi
xor esi, esi
xor ebx, ebx
call dword [sym.imp.USER32.dll_IsZoomed]
push eax
inc ebx
mov ecx, dword [0x656a8ea0]
movzx ebx, bl
mov al, byte [ebp + ebx - 0x218]
mov edx, ecx
add ecx, 0x26a0542f
xor edx, 0x5834a8a
mov dword [0x656a8ea0], ecx
mov byte [ebp - 0x9ec], al
add eax, esi
imul edx, edx, 0x39a68100
movzx esi, al
mov al, byte [ebp + esi - 0x218]
mov dword [0x656a8fb0], edx
mov byte [ebp + ebx - 0x218], al
mov al, byte [ebp - 0x9ec]
mov byte [ebp + esi - 0x218], al
xor eax, eax
cmp byte [eax + str.An_RPC_protocol_error_occurred.], 0
je 0x6568438a
inc eax
cmp eax, 0x1844
jne 0x65684354
mov dword [ebp - 0x9f0], edx
call fcn.65693958
mov edx, dword [ebp - 0x9f0]
add edx, 0x23b502a0
mov dword [0x656a8fb0], edx
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
jmp 0x65684391
cmp eax, 0x16c0
jle 0x65684396
call fcn.65691610
mov eax, dword [0x656a8ea0]
mov ecx, dword [0x656a8fb0]
lea edx, [eax + 0x1f640ee2]
mov dword [0x656a8e74], edx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov dword [esp], ecx
call fcn.65692138
mov al, byte [ebp - 0x9ec]
add al, byte [ebp + ebx - 0x218]
movzx eax, al
mov al, byte [ebp + eax - 0x218]
xor al, byte [ebp + edi - 0x950]
movzx eax, al
mov word [ebp + edi*2 - 0x89a], ax
inc edi
cmp edi, 0x16
jne 0x656842fb
mov word [ebp - 0x86e], 0
lea edi, [ebp - 0x8e2]
mov esi, 0x656abd20
xor eax, eax
mov ecx, 8
rep movsd dword es:[edi], dword [esi]
lea edi, [ebp - 0x796]
mov esi, str.Skip_preparation_of_allocations_referenced_by_the_DMA_buffer.
mov ecx, 0x3e
rep movsb byte es:[edi], byte [esi]
mov byte [ebp + eax - 0x118], al
inc eax
cmp eax, 0x100
jne 0x6568441f
xor esi, esi
xor ecx, ecx
mov edi, 0x3d
mov eax, ecx
xor edx, edx
mov bl, byte [ebp + ecx - 0x118]
div edi
movzx eax, byte [ebp + edx - 0x796]
movzx edx, bl
add eax, edx
add eax, esi
movzx esi, al
mov al, byte [ebp + esi - 0x118]
mov byte [ebp + ecx - 0x118], al
inc ecx
mov byte [ebp + esi - 0x118], bl
cmp ecx, 0x100
jne 0x65684437
mov esi, dword [0x656a8fb0]
xor ebx, ebx
xor ecx, ecx
xor edx, edx
inc edx
lea edi, [ebp - 0x758]
mov dword [ebp - 0x9f0], esi
and esi, 0xf1eeb516
movzx edx, dl
mov al, byte [ebp + edx - 0x118]
add ecx, eax
mov byte [ebp - 0x9ec], al
movzx ecx, cl
mov al, byte [ebp + ecx - 0x118]
mov byte [ebp + edx - 0x118], al
mov al, byte [ebp - 0x9ec]
mov byte [ebp + ecx - 0x118], al
add al, byte [ebp + edx - 0x118]
movzx eax, al
mov al, byte [ebp + eax - 0x118]
xor al, byte [ebx + ebp - 0x8e2]
movzx eax, al
mov word [edi + ebx*2], ax
inc ebx
cmp ebx, 0x20
jne 0x65684480
mov eax, dword [ebp - 0x9f0]
mov dword [0x656a8fb0], esi
xor ebx, ebx
mov word [ebp - 0x718], 0
and eax, 0xe1a20404
mov dword [ebp - 0x908], edi
mov dword [0x656a8e74], eax
add eax, 0x262fb8f4
xor eax, 0x33c25520
mov dword [0x656a8ea0], eax
lea eax, [ebp - 0x9a2]
mov dword [ebp - 0x920], eax
lea eax, [ebp - 0x98e]
mov dword [ebp - 0x91c], eax
lea eax, [ebp - 0x966]
mov dword [ebp - 0x918], eax
lea eax, [ebp - 0x902]
mov dword [ebp - 0x914], eax
lea eax, [ebp - 0x8c2]
mov dword [ebp - 0x910], eax
lea eax, [ebp - 0x89a]
mov dword [ebp - 0x90c], eax
mov eax, dword [ebp + ebx*4 - 0x920]
mov dword [esp], eax
call fcn.656810e8
test eax, eax
jne 0x65684581
inc ebx
cmp ebx, 7
jne 0x65684566
jmp 0x65684586
mov eax, 1
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret