Function at 0x432c20
Capabilities:
Delete file
Encode data using xor

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff0
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
sub esp, 0x178
mov eax, dword [0x4ff074]
xor eax, ebp
mov dword [ebp - 4], eax
push esi
push edi
push 0x400
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov esi, eax
mov byte [ebp - 0x130], 0
push 0x400
mov edx, esi
mov dword [ebp - 0x164], esi
mov ecx, 0xb0b680
call fcn.0042cde0
add esp, 8
cmp eax, 0xfa
je 0x432c9c
push esi
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
add esp, 4
xor al, al
pop edi
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004d66b5
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
mov eax, dword [ebp - 0x164]
lea edi, [ebp - 0x108]
mov ecx, 0x3e
mov esi, 0x7ea8b0
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x3e
push eax
movsw word es:[edi], word [esi]
mov esi, eax
mov edi, 0x7ea8b0
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov esi, dword [0xa89048]
add esp, 4
xor edi, edi
mov ecx, esi
mov edx, esi
shr ecx, 2
mov eax, esi
add ecx, dword [0xa89008]
shr edx, 3
shr eax, 1
add ecx, edx
add eax, ecx
add esi, eax
xor dword [edi + 0x7ea8b0], esi
add edi, 4
cmp edi, 0xf8
jb 0x432cd8
mov cx, word [0x7ea9a8]
test cx, cx
je 0x432d99
mov dword [ebp - 0x164], 0
mov eax, 0x7ea8b0
mov dx, word [ebp - 0x164]
mov esi, 0x7c
nop
xor dx, word [eax]
add eax, 2
sub esi, 1
jne 0x432d30
cmp dx, cx
je 0x432d99
mov ecx, 0x3e
lea esi, [ebp - 0x108]
mov edi, 0x7ea8b0
lea eax, [ebp - 0x108]
rep movsd dword es:[edi], dword [esi]
push 0xb0b680
push 0xa92828
push str._s_s.dat
push 0x80
push eax
movsw word es:[edi], word [esi]
call fcn.0042cda0
add esp, 0x14
lea eax, [ebp - 0x108]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
xor al, al
pop edi
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004d66b5
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
mov dl, byte [0x7ea9a6]
cmp dl, 2
jae 0x432df7
mov dh, 1
mov word [0x7ea8da], 0x303
mov al, 2
mov dword [0x7ea8de], 0x1010000
mov dword [0x7ea8e8], 0x1020003
mov byte [ebp - 0x158], 4
mov word [0x7ea8e2], 0x101
mov byte [0x7ea8ec], dh
mov byte [ebp - 0x151], dh
mov word [0x7ea8e6], 0x303
mov byte [ebp - 0x109], al
mov byte [0x7ea98d], al
jmp 0x432e1e
mov al, byte [0x7ea98d]
mov dh, byte [ebp - 0x130]
mov byte [ebp - 0x109], al
mov al, byte [0x7ea8e5]
mov byte [ebp - 0x151], al
mov al, byte [0x7ea8e4]
mov byte [ebp - 0x158], al
cmp dl, 3
jae 0x432e33
mov dh, 1
mov byte [0x7ea97e], 5
mov byte [0x7ea8f6], 0
cmp dl, 4
jae 0x432e50
mov dh, 1
mov byte [0x7ea995], 3
mov eax, 0x3030303
mov dword [0x7ea996], 0x5030303
cmp dl, 5
jae 0x432e64
mov dh, 1
mov word [0x7ea99b], 0x201
mov cl, dh
jmp 0x432e6a
mov cl, byte [0x7ea99b]
mov byte [ebp - 0x120], cl
cmp dl, 6
jae 0x432e80
mov dh, 1
mov word [0x7ea99e], 0x101
cmp dl, 8
jae 0x432e8e
mov dh, 1
mov byte [0x7ea936], 2
cmp dl, 0xa
jae 0x432e9b
mov dh, 1
mov byte [0x7ea9a5], dh
mov esi, 1
cmp dl, 0xc
jae 0x432eea
mov ch, byte [0x7ea952]
mov dh, 1
cmp ch, dh
jne 0x432eba
mov byte [0x7ea952], 2
jmp 0x432ec8
cmp ch, 2
movzx eax, ch
cmove eax, esi
mov byte [0x7ea952], al
mov ch, byte [0x7ea968]
cmp ch, 1
jne 0x432edc
mov byte [0x7ea968], 2
jmp 0x432eea
cmp ch, 2
movzx eax, ch
cmove eax, esi
mov byte [0x7ea968], al
mov esi, 9
mov dword [ebp - 0x160], esi
cmp dl, 0xd
jae 0x432f2b
mov al, byte [0x7ea923]
mov dh, 1
add al, 3
cmp al, 0xa
movzx ecx, al
cmovae ecx, esi
mov byte [0x7ea923], cl
mov cl, byte [ebp - 0x120]
add cl, 3
cmp cl, 0xa
movzx eax, cl
cmovae eax, esi
mov cl, al
mov byte [0x7ea99b], cl
cmp dl, 0xe
jae 0x432f39
or byte [0x7ea9a2], 6
mov dh, 1
cmp dl, 0x10
jae 0x432f57
add byte [0x7ea95a], 2
mov dh, 1
add byte [0x7ea8f9], 0xfa
mov word [0x7ea8f4], 0xff00
cmp dl, 0x11
jae 0x432fb7
mov dh, 1
mov word [0x7ea8e9], 0x200
mov word [0x7ea8e4], 0x104
mov eax, 0x7ea8eb
mov ecx, 2
nop word [eax + eax]
mov byte [eax - 0xb], 1
mov byte [eax], 1
inc eax
sub ecx, 1
jne 0x432f80
mov al, byte [0x7ea8e5]
mov dl, byte [0x7ea9a6]
mov cl, byte [0x7ea99b]
mov ch, byte [0x7ea98d]
mov byte [ebp - 0x151], al
mov al, byte [0x7ea8e4]
mov byte [ebp - 0x158], al
jmp 0x432fbd
mov ch, byte [ebp - 0x109]
cmp dl, 0x12
jae 0x432fcd
mov dh, 1
mov word [0x7ea8f0], 0x300
cmp dl, 0x13
jae 0x432fe7
mov dh, 1
mov word [0x7ea8ee], 0
xor byte [0x7ea8d9], dh
xor al, al
jmp 0x432fec
mov al, byte [0x7ea8ee]
cmp dl, 0x14
jae 0x433011
mov ah, byte [0x7ea8d7]
mov dh, 1
cmp ah, 2
jb 0x433006
inc ah
mov byte [0x7ea8d7], ah
cmp al, 2
jb 0x433011
inc al
mov byte [0x7ea8ee], al
cmp dl, 0x16
jae 0x433079
mov al, byte [0x7ea92d]
mov byte [ebp - 0x131], al
test al, al
je 0x43302d
inc al
mov byte [ebp - 0x131], al
mov ah, byte [0x7ea92e]
mov byte [ebp - 0x134], ah
test ah, ah
je 0x433045
inc ah
mov byte [ebp - 0x134], ah
mov ah, byte [0x7ea92f]
mov byte [ebp - 0x135], ah
test ah, ah
je 0x43305d
inc ah
mov byte [ebp - 0x135], ah
mov ah, byte [0x7ea930]
mov byte [ebp - 0x150], ah
test ah, ah
je 0x433075
inc ah
mov byte [ebp - 0x150], ah
mov dh, 1
jmp 0x4330a5
mov al, byte [0x7ea930]
mov byte [ebp - 0x150], al
mov al, byte [0x7ea92f]
mov byte [ebp - 0x135], al
mov al, byte [0x7ea92e]
mov byte [ebp - 0x134], al
mov al, byte [0x7ea92d]
mov byte [ebp - 0x131], al
cmp dl, 0x17
jae 0x4330bc
mov byte [ebp - 0x109], 2
mov ch, 2
mov byte [ebp - 0x120], 2
jmp 0x4330d6
mov al, byte [0x7ea990]
mov byte [ebp - 0x120], al
mov al, byte [0x7ea973]
mov byte [ebp - 0x109], al
test dh, dh
je 0x4330e4
mov byte [0x7ea9a6], 0x17
mov byte [0x7d0583], 1
mov al, byte [0x7ea8b0]
mov byte [ebp - 0x130], al
cmp al, 0xff
jne 0x433101
mov byte [ebp - 0x130], 1
mov byte [0x7d0583], 1
movzx eax, byte [0x7ea9a4]
xor edx, edx
mov esi, 5
mov dword [ebp - 0x15c], 0xa
div esi
movzx eax, byte [ebp - 0x131]
mov edi, 6
mov byte [0x7ea9a4], dl
xor edx, edx
div esi
movzx eax, byte [ebp - 0x134]
mov byte [0x7ea92d], dl
xor edx, edx
div esi
movzx eax, byte [ebp - 0x135]
mov byte [0x7ea92e], dl
xor edx, edx
div edi
movzx eax, byte [ebp - 0x150]
mov byte [0x7ea92f], dl
xor edx, edx
div edi
mov al, byte [ebp - 0x109]
and al, 3
mov byte [0x7ea930], dl
mov byte [0x7ea973], al
xor edx, edx
mov al, byte [ebp - 0x120]
and al, 3
mov dword [ebp - 0x170], edi
mov byte [0x7ea990], al
mov edi, 3
movzx eax, byte [0x7ea9a3]
div esi
movzx eax, byte [0x7ea92b]
mov byte [0x7ea9a3], dl
xor edx, edx
div edi
movzx eax, byte [0x7ea92c]
mov byte [0x7ea92b], dl
xor edx, edx
div edi
movzx eax, byte [0x7ea98e]
mov byte [0x7ea92c], dl
xor edx, edx
div dword [ebp - 0x15c]
movzx eax, byte [0x7ea966]
mov byte [0x7ea98e], dl
xor edx, edx
mov dword [ebp - 0x168], 0xf
div dword [ebp - 0x168]
movzx eax, byte [0x7ea8fe]
mov byte [0x7ea966], dl
xor edx, edx
div edi
movzx eax, byte [0x7ea941]
mov byte [0x7ea8fe], dl
xor edx, edx
div dword [ebp - 0x15c]
movzx eax, byte [0x7ea957]
mov byte [0x7ea941], dl
xor edx, edx
div esi
movzx eax, byte [0x7ea97f]
and byte [0x7ea98b], 1
and byte [0x7ea938], 1
and byte [0x7ea939], 1
and byte [0x7ea961], 3
and byte [0x7ea965], 3
and byte [0x7ea969], 3
and byte [0x7ea910], 3
and byte [0x7ea988], 1
and byte [0x7ea94c], 1
and byte [0x7ea956], 3
and byte [0x7ea992], 3
and byte [0x7ea99d], 1
and byte [0x7ea987], 1
mov byte [0x7ea957], dl
xor edx, edx
mov dword [ebp - 0x164], esi
div edi
movzx eax, byte [0x7ea96d]
mov byte [0x7ea97f], dl
xor edx, edx
div edi
movzx eax, byte [0x7ea909]
mov byte [0x7ea96d], dl
xor edx, edx
mov dword [ebp - 0x16c], 0x28
div dword [ebp - 0x16c]
movzx eax, byte [0x7ea97e]
mov byte [0x7ea909], dl
xor edx, edx
div dword [ebp - 0x160]
movzx eax, byte [0x7ea963]
mov byte [0x7ea97e], dl
xor edx, edx
div dword [ebp - 0x15c]
movzx eax, byte [0x7ea91b]
mov byte [0x7ea963], dl
xor edx, edx
div edi
movzx eax, byte [0x7ea95a]
mov byte [0x7ea91b], dl
xor edx, edx
mov dword [ebp - 0x160], 0xb
div dword [ebp - 0x160]
and byte [0x7ea917], 1
and byte [0x7ea97b], 1
and byte [0x7ea97c], 1
and byte [0x7ea919], 1
and byte [0x7ea944], 1
and byte [0x7ea913], 1
and byte [0x7ea914], 1
and byte [0x7ea96f], 3
and byte [0x7ea90c], 7
and byte [0x7ea922], 1
and byte [0x7ea918], 3
and byte [0x7ea8f6], 1
and byte [0x7ea99f], 1
mov byte [0x7ea95a], dl
mov dl, byte [0x7ea980]
cmp dl, 0xfd
jge 0x433398
mov byte [0x7ea980], 0xfd
jmp 0x4333a6
cmp dl, 3
movzx eax, dl
cmovg eax, edi
mov byte [0x7ea980], al
movzx eax, byte [0x7ea8d5]
xor edx, edx
div esi
mov byte [0x7ea8d5], dl
mov dl, byte [0x7ea993]
cmp dl, 0xff
jge 0x4333cb
mov byte [0x7ea993], 0xff
jmp 0x4333de
movzx eax, dl
cmp dl, 1
mov edx, 1
cmovg eax, edx
mov byte [0x7ea993], al
movzx eax, byte [0x7ea970]
xor edx, edx
div edi
movzx eax, byte [0x7ea91d]
mov byte [0x7ea970], dl
xor edx, edx
div dword [ebp - 0x168]
movzx eax, byte [0x7ea972]
mov byte [0x7ea91d], dl
xor edx, edx
div edi
movzx eax, byte [0x7ea97d]
mov byte [0x7ea972], dl
xor edx, edx
div edi
movsx eax, byte [ebp - 0x130]
mov byte [0x7ea97d], dl
cdq
idiv dword [ebp - 0x15c]
and byte [0x7ea933], 1
and byte [0x7ea94a], 3
and byte [0x7ea90f], 3
and byte [0x7ea94b], 1
and byte [0x7ea98a], 3
and byte [0x7ea952], 3
mov byte [0x7ea8b0], dl
mov dl, byte [0x7ea90d]
cmp dl, 0xff
jge 0x433478
mov byte [0x7ea90d], 0xff
jmp 0x43348d
xor esi, esi
movzx eax, dl
cmp dl, 8
cmovge eax, esi
mov esi, 5
mov byte [0x7ea90d], al
movzx eax, byte [0x7ea91f]
xor edx, edx
div edi
movzx eax, byte [0x7ea91c]
and ch, 3
mov byte [0x7ea91f], dl
xor edx, edx
div dword [ebp - 0x168]
movzx eax, byte [0x7ea984]
mov byte [0x7ea91c], dl
xor edx, edx
div edi
movzx eax, byte [0x7ea946]
mov byte [0x7ea984], dl
xor edx, edx
div dword [ebp - 0x15c]
movzx eax, byte [0x7ea923]
mov byte [0x7ea946], dl
xor edx, edx
div dword [ebp - 0x15c]
movzx eax, cl
mov byte [0x7ea923], dl
xor edx, edx
div dword [ebp - 0x15c]
movzx eax, byte [ebp - 0x151]
mov byte [0x7ea99b], dl
xor edx, edx
div edi
movzx eax, byte [0x7ea8e3]
mov byte [0x7ea8e5], dl
xor edx, edx
div edi
movzx eax, byte [0x7ea8de]
mov byte [0x7ea8e3], dl
xor edx, edx
div dword [ebp - 0x15c]
movzx eax, byte [0x7ea8df]
mov byte [0x7ea8de], dl
xor edx, edx
div dword [ebp - 0x170]
movzx eax, byte [0x7ea8e8]
mov byte [0x7ea8df], dl
xor edx, edx
div dword [ebp - 0x160]
movzx eax, byte [ebp - 0x158]
mov byte [0x7ea8e8], dl
xor edx, edx
div esi
movzx eax, byte [0x7ea8e2]
mov byte [0x7ea8e4], dl
xor edx, edx
div edi
movzx eax, byte [0x7ea8e6]
mov byte [0x7ea8e2], dl
xor edx, edx
div esi
movzx eax, byte [0x7ea8e7]
mov esi, 6
mov byte [0x7ea8e6], dl
xor edx, edx
div esi
and byte [0x7ea97a], 1
mov esi, 2
and byte [0x7ea93a], 1
and byte [0x7ea9a5], 1
and byte [0x7ea911], 1
and byte [0x7ea92a], 1
and byte [0x7ea932], 3
and byte [0x7ea945], 1
and byte [0x7ea948], 1
and byte [0x7ea949], 1
mov byte [0x7ea98d], ch
mov ecx, 0x7ea8e0
mov byte [0x7ea8e7], dl
nop dword [eax + eax]
movzx eax, byte [ecx + 9]
lea ecx, [ecx + 1]
xor edx, edx
div edi
mov byte [ecx + 8], dl
xor edx, edx
movzx eax, byte [ecx - 1]
div dword [ebp - 0x164]
mov byte [ecx - 1], dl
xor edx, edx
movzx eax, byte [ecx + 0xa]
div edi
mov byte [ecx + 0xa], dl
sub esi, 1
jne 0x433600
movzx eax, byte [0x7ea91a]
xor edx, edx
mov ecx, 7
mov dword [ebp - 0x15c], 0x12
div ecx
movzx eax, byte [0x7ea995]
mov esi, 4
mov cl, dl
xor edx, edx
div dword [ebp - 0x160]
test cl, cl
movzx eax, cl
mov ecx, 1
cmove eax, ecx
cmp dl, 3
mov byte [0x7ea91a], al
mov ecx, 7
movzx eax, dl
cmovb eax, edi
xor edx, edx
mov byte [0x7ea995], al
movzx eax, byte [0x7ea960]
div ecx
movzx eax, byte [0x7ea994]
mov ecx, 0x7ea996
mov byte [0x7ea960], dl
xor edx, edx
div dword [ebp - 0x160]
mov byte [0x7ea994], dl
nop dword [eax]
movzx eax, byte [ecx - 0x5b]
xor edx, edx
div dword [ebp - 0x15c]
mov byte [ecx - 0x5b], dl
test dl, dl
jne 0x4336c7
mov byte [ecx - 0x5b], 1
movzx eax, byte [ecx]
xor edx, edx
div dword [ebp - 0x160]
mov byte [ecx], dl
cmp dl, 3
jae 0x4336dc
mov byte [ecx], 3
inc ecx
sub esi, 1
jne 0x4336b0
movzx eax, byte [0x7ea8d4]
xor edx, edx
mov ecx, 0xc
and byte [0x7ea8d2], 0xf
div ecx
movzx eax, byte [0x7ea8f2]
mov esi, 2
mov byte [0x7ea8d4], dl
xor edx, edx
div ecx
movzx eax, byte [0x7ea8d3]
mov ecx, 6
mov byte [0x7ea8f2], dl
xor edx, edx
div edi
movzx eax, byte [0x7ea9a1]
mov byte [0x7ea8d3], dl
xor edx, edx
div edi
xor eax, eax
and byte [0x7ea9a0], 0xf
mov byte [0x7ea9a1], dl
xor edx, edx
mov word [0x7ea8d0], ax
movzx eax, byte [0x7ea90b]
div dword [ebp - 0x16c]
movzx eax, byte [0x7ea95b]
mov byte [0x7ea90b], dl
xor edx, edx
div edi
movzx eax, byte [0x7ea96c]
mov byte [0x7ea95b], dl
xor edx, edx
div ecx
movzx eax, byte [0x7ea964]
mov ecx, 5
mov byte [0x7ea96c], dl
xor edx, edx
div ecx
movzx eax, byte [0x7ea96a]
mov ecx, 0x7ea8da
mov byte [0x7ea964], dl
xor edx, edx
div edi
and byte [0x7ea8b1], 1
and byte [0x7ea99e], 1
and byte [0x7ea962], 1
and byte [0x7ea8f3], 1
mov byte [0x7ea96a], dl
mov dword [ebp - 0x15c], 0x14
movzx eax, byte [ecx + 0x1e]
xor edx, edx
div dword [ebp - 0x170]
mov byte [ecx + 0x1e], dl
xor edx, edx
and byte [ecx], 3
movzx eax, byte [ecx + 0x22]
div edi
mov byte [ecx + 0x22], dl
xor edx, edx
movzx eax, byte [ecx + 0x25]
div dword [ebp - 0x16c]
mov byte [ecx + 0x25], dl
xor edx, edx
and byte [ecx + 0x2d], 7
and byte [ecx + 0x20], 1
and byte [ecx + 0x73], 3
and byte [ecx + 0x7e], 1
movzx eax, byte [ecx + 0x2b]
div edi
mov byte [ecx + 0x2b], dl
xor edx, edx
and byte [ecx + 0x29], 7
and byte [ecx + 0xa7], 3
movzx eax, byte [ecx + 0x27]
div dword [ebp - 0x15c]
mov byte [ecx + 0x27], dl
xor edx, edx
and byte [ecx + 0x75], 3
movzx eax, byte [ecx + 0x79]
div dword [ebp - 0x164]
mov byte [ecx + 0x79], dl
inc ecx
sub esi, 1
jne 0x4337d4
movzx eax, byte [0x7ea8d8]
xor edx, edx
mov esi, 5
mov cl, byte [0x7ea90e]
div esi
and byte [0x7ea8f7], 1
and byte [0x7ea8d6], 0xf
and byte [0x7ea985], 1
mov byte [0x7ea8d8], dl
cmp cl, 0xff
jge 0x43388d
mov byte [0x7ea90e], 0xff
jmp 0x43389d
xor edx, edx
movzx eax, cl
cmp cl, 8
cmovge eax, edx
mov byte [0x7ea90e], al
mov cl, byte [0x7ea8f5]
cmp cl, 0xff
jge 0x4338b1
mov byte [0x7ea8f5], 0xff
jmp 0x4338c1
xor edx, edx
movzx eax, cl
cmp cl, 8
cmovge eax, edx
mov byte [0x7ea8f5], al
mov al, byte [0x7ea936]
mov edx, 2
test al, al
movzx ecx, al
movzx eax, byte [0x7ea947]
cmove ecx, edx
xor edx, edx
div edi
movzx eax, byte [0x7ea91e]
mov byte [0x7ea947], dl
xor edx, edx
div dword [ebp - 0x168]
movzx eax, byte [0x7ea8d9]
mov byte [0x7ea91e], dl
xor edx, edx
div esi
movzx eax, byte [0x7ea8ef]
mov byte [0x7ea8d9], dl
xor edx, edx
div esi
and byte [0x7ea912], 1
and byte [0x7ea8d7], 3
and byte [0x7ea8ee], 3
mov byte [0x7ea936], cl
mov cl, byte [0x7ea8dc]
mov byte [0x7ea8ef], dl
cmp cl, 0xff
jge 0x43394a
mov byte [0x7ea8dc], 0xff
jmp 0x43395a
xor edx, edx
movzx eax, cl
cmp cl, 0xc
cmovge eax, edx
mov byte [0x7ea8dc], al
mov cl, byte [0x7ea8dd]
cmp cl, 0xff
jge 0x43396e
mov byte [0x7ea8dd], 0xff
jmp 0x43397e
xor edx, edx
movzx eax, cl
cmp cl, 4
cmovge eax, edx
mov byte [0x7ea8dd], al
movzx eax, byte [0x7ea90a]
xor edx, edx
mov ecx, 0x14
and byte [0x7ea983], 3
div ecx
movzx eax, byte [0x7ea93f]
mov ecx, 7
mov byte [0x7ea90a], dl
xor edx, edx
div esi
movzx eax, byte [0x7ea96e]
mov byte [0x7ea93f], dl
xor edx, edx
div edi
movzx eax, byte [0x7ea955]
mov byte [0x7ea96e], dl
xor edx, edx
div esi
movzx eax, byte [0x7ea915]
mov byte [0x7ea955], dl
xor edx, edx
div edi
movzx eax, byte [0x7ea8f0]
mov byte [0x7ea915], dl
xor edx, edx
div ecx
mov cl, byte [0x7ea98c]
and byte [0x7ea951], 3
and byte [0x7ea991], 1
and byte [0x7ea95c], 1
and byte [0x7ea940], 1
and byte [0x7ea99a], 3
and byte [0x7ea986], 3
and byte [0x7ea8f1], 3
and byte [0x7ea921], 1
and byte [0x7ea989], 1
and byte [0x7ea98f], 1
and byte [0x7ea967], 3
mov byte [0x7ea8f0], dl
cmp cl, 0xff
jge 0x433a56
mov byte [0x7ea98c], 0xff
jmp 0x433a66
xor edx, edx
movzx eax, cl
cmp cl, 6
cmovge eax, edx
mov byte [0x7ea98c], al
movzx eax, byte [0x7ea920]
xor edx, edx
div edi
movzx eax, byte [0x7ea971]
mov byte [0x7ea920], dl
xor edx, edx
div esi
movzx eax, byte [0x7ea974]
mov esi, 7
mov byte [0x7ea971], dl
xor edx, edx
div esi
movzx eax, byte [0x7ea99c]
mov byte [0x7ea974], dl
xor edx, edx
div dword [ebp - 0x160]
movzx eax, byte [0x7ea916]
mov byte [0x7ea99c], dl
xor edx, edx
div edi
mov al, byte [0x7ea8b1]
mov cl, byte [0x7ea931]
and byte [0x7ea975], 1
and cl, 1
and byte [0x7ea924], 3
and byte [0x7ea8f4], 3
and byte [0x7ea95f], 1
and byte [0x7ea96b], 1
and byte [0x7ea95d], 1
and byte [0x7ea95e], 1
and byte [0x7ea968], 3
mov byte [0x7f2516], al
mov al, byte [0x7ea8d2]
mov byte [0x7f2521], al
mov al, byte [0x7ea9a0]
mov byte [0x7f2522], al
mov al, byte [0x7ea8d3]
mov byte [0x7f2523], al
mov al, byte [0x7ea9a1]
mov byte [0x7f2524], al
mov al, byte [0x7ea8d4]
push 0x7ea8b2
mov byte [0x7f2525], al
mov al, byte [0x7ea8f2]
push 0x10
push 0x7f24f0
mov byte [0x7ea931], cl
mov byte [0x7ea916], dl
mov byte [0x7d0582], cl
mov byte [0x7f2526], al
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcscpy_s]
mov ecx, dword [ebp - 4]
add esp, 0xc
xor ecx, ebp
mov al, 1
pop edi
pop esi
call fcn.004d66b5
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret