Function at 0x431c80
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4d74f8
mov eax, dword fs:[0]
push eax
sub esp, 0x74
mov eax, dword [0x52ad60]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 4], 1
mov eax, dword [0x52a6d0]
mov ecx, 0x52a6d0
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x50], eax
mov eax, str.CmdLine:
mov byte [ebp - 4], 2
test eax, 0xffff0000
jne 0x431cef
movzx esi, ax
mov ecx, esi
call fcn.00405570
test eax, eax
je 0x431cfc
push esi
push eax
lea ecx, [ebp - 0x50]
call fcn.00404ab0
jmp 0x431cfc
push str.CmdLine:
lea ecx, [ebp - 0x50]
call fcn.00404510
mov byte [ebp - 4], 3
mov eax, dword [0x52a6d0]
mov ecx, 0x52a6d0
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x54], eax
mov eax, str._tarted_for:
mov byte [ebp - 4], 4
test eax, 0xffff0000
jne 0x431d3d
movzx esi, ax
mov ecx, esi
call fcn.00405570
test eax, eax
je 0x431d4a
push esi
push eax
lea ecx, [ebp - 0x54]
call fcn.00404ab0
jmp 0x431d4a
push str._tarted_for:
lea ecx, [ebp - 0x54]
call fcn.00404510
push str.RunExe
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 5
call fcn.00403720
mov byte [ebp - 4], 6
mov eax, dword [0x52a6d0]
mov ecx, 0x52a6d0
call dword [eax + 0xc]
lea ebx, [eax + 0x10]
mov dword [ebp - 0x6c], ebx
lea eax, [ebp - 0x54]
push eax
lea edx, [ebp - 0x6c]
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 7
call fcn.00431540
add esp, 4
lea ecx, [ebp + 8]
push ecx
mov edx, eax
lea ecx, [ebp - 0x68]
mov byte [ebp - 4], 8
call fcn.00431540
add esp, 4
push 0x52f93c
mov edx, eax
lea ecx, [ebp - 0x60]
mov byte [ebp - 4], 9
call fcn.00431540
add esp, 4
lea ecx, [ebp - 0x50]
push ecx
mov edx, eax
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0xa
call fcn.00431540
add esp, 4
lea ecx, [ebp + 0xc]
push ecx
mov edx, eax
lea ecx, [ebp - 0x74]
mov byte [ebp - 4], 0xb
call fcn.00431540
add esp, 4
mov esi, eax
push str.GlobalLog
lea ecx, [ebp - 0x5c]
mov byte [ebp - 4], 0xc
call fcn.00403720
push 0
push esi
lea eax, [ebp - 0x58]
push eax
lea eax, [ebp - 0x5c]
push eax
mov ecx, 0x52f7a4
mov byte [ebp - 4], 0xd
call fcn.004018e0
mov byte [ebp - 4], 0xc
mov edx, dword [ebp - 0x5c]
add edx, 0xfffffff0
or edi, 0xffffffff
lea ecx, [edx + 0xc]
mov eax, edi
lock xadd dword [ecx], eax
dec eax
test eax, eax
jg 0x431e2c
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0xb
mov edx, dword [ebp - 0x74]
add edx, 0xfffffff0
mov ecx, edi
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x431e4c
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0xa
mov edx, dword [ebp - 0x70]
add edx, 0xfffffff0
mov ecx, edi
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x431e6c
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 9
mov edx, dword [ebp - 0x60]
add edx, 0xfffffff0
mov ecx, edi
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x431e8c
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 8
mov edx, dword [ebp - 0x68]
add edx, 0xfffffff0
mov ecx, edi
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x431eac
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 7
mov edx, dword [ebp - 0x64]
add edx, 0xfffffff0
mov ecx, edi
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x431ecc
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea edx, [ebx - 0x10]
mov byte [ebp - 4], 6
lea eax, [edx + 0xc]
mov ecx, edi
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x431ee9
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 5
mov edx, dword [ebp - 0x58]
add edx, 0xfffffff0
mov ecx, edi
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x431f09
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 3
mov edx, dword [ebp - 0x54]
add edx, 0xfffffff0
mov ecx, edi
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x431f29
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 1
mov edx, dword [ebp - 0x50]
add edx, 0xfffffff0
mov ecx, edi
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x431f49
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0x3c
lea eax, [ebp - 0x4c]
push 0
push eax
call fcn.004b84f0
mov eax, dword [ebp + 8]
mov ebx, 1
mov dword [ebp - 0x4c], 0x3c
mov dword [ebp - 0x40], str.open
mov ecx, dword [eax - 8]
mov edx, ebx
sub edx, dword [eax - 4]
add esp, 0xc
or ecx, edx
jge 0x431f88
push 0
lea ecx, [ebp + 8]
call fcn.0040c7b0
mov eax, dword [ebp + 8]
mov esi, dword [0x52f408]
mov dword [ebp - 0x3c], eax
mov eax, esi
imul eax, esi
imul eax, esi
cdq
mov ecx, 0x12
idiv ecx
cmp edx, 0xd
jne 0x43202f
xor edx, edx
lea esp, [esp]
mov ecx, edx
and ecx, ebx
dec ecx
not ecx
and ecx, esi
mov eax, edx
sar eax, 1
xor ecx, eax
mov eax, ecx
and eax, 1
dec eax
not eax
and eax, esi
sar ecx, 1
xor eax, ecx
mov ecx, eax
and ecx, ebx
dec ecx
sar eax, 1
not ecx
and ecx, esi
xor ecx, eax
mov eax, ecx
and eax, 1
dec eax
not eax
and eax, esi
sar ecx, 1
xor eax, ecx
mov ecx, eax
and ecx, ebx
dec ecx
sar eax, 1
not ecx
and ecx, esi
xor ecx, eax
mov eax, ecx
and eax, 1
dec eax
not eax
and eax, esi
sar ecx, 1
xor eax, ecx
mov ecx, eax
and ecx, ebx
dec ecx
sar eax, 1
not ecx
and ecx, esi
xor ecx, eax
mov eax, ecx
and eax, 1
dec eax
not eax
and eax, esi
sar ecx, 1
xor eax, ecx
inc edx
add esi, eax
cmp edx, 0x100
jl 0x431fb0
mov dword [0x52f408], esi
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x30], 5
mov dword [ebp - 0x48], 0x440
sub ebx, dword [eax - 4]
mov ecx, dword [eax - 8]
or ecx, ebx
jge 0x432057
push 0
lea ecx, [ebp + 0xc]
call fcn.0040c7b0
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x38], eax
mov eax, dword [0x52fd8c]
test eax, eax
jne 0x432092
push str.Shell32.dll
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
test eax, eax
je 0x432085
push 0x512e2c
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x52fd8c], eax
jmp 0x43208a
mov eax, dword [0x52fd8c]
test eax, eax
jne 0x432092
xor bl, bl
jmp 0x43209e
lea ecx, [ebp - 0x4c]
push ecx
call eax
cmp eax, 1
sete bl
mov eax, dword [0x52a6d0]
mov ecx, 0x52a6d0
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x58], eax
mov eax, str.Returned:
mov byte [ebp - 4], 0xe
test eax, 0xffff0000
jne 0x4320db
movzx esi, ax
mov ecx, esi
call fcn.00405570
test eax, eax
je 0x4320e8
push esi
push eax
lea ecx, [ebp - 0x58]
call fcn.00404ab0
jmp 0x4320e8
push str.Returned:
lea ecx, [ebp - 0x58]
call fcn.00404510
mov byte [ebp - 4], 0xf
mov eax, dword [0x52a6d0]
mov ecx, 0x52a6d0
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x54], eax
mov esi, str.RunExe
shr esi, 0x10
mov byte [ebp - 4], 0x10
mov eax, str.RunExe
test esi, esi
jne 0x432134
movzx ecx, ax
call fcn.00405570
test eax, eax
je 0x432143
mov edx, str.RunExe
movzx ecx, dx
push ecx
push eax
lea ecx, [ebp - 0x54]
call fcn.00404ab0
jmp 0x432143
push 6
push str.RunExe
lea ecx, [ebp - 0x54]
call fcn.004046f0
mov byte [ebp - 4], 0x11
mov eax, dword [0x52a6d0]
mov ecx, 0x52a6d0
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x5c], eax
lea eax, [ebp - 0x58]
push eax
lea edx, [ebp - 0x5c]
lea ecx, [ebp - 0x60]
mov byte [ebp - 4], 0x12
call fcn.00431540
add esp, 4
movzx ecx, bl
push ecx
mov edx, eax
lea ecx, [ebp - 0x68]
mov byte [ebp - 4], 0x13
call fcn.004314a0
add esp, 4
mov dword [ebp - 0x64], eax
mov byte [ebp - 4], 0x14
mov edx, dword [0x52a6d0]
mov ecx, 0x52a6d0
call dword [edx + 0xc]
add eax, 0x10
mov dword [ebp - 0x50], eax
mov eax, str.GlobalLog
shr eax, 0x10
mov byte [ebp - 4], 0x15
mov dword [ebp - 0x70], eax
mov ecx, str.GlobalLog
test eax, eax
jne 0x4321d8
movzx ecx, cx
call fcn.00405570
test eax, eax
je 0x4321e7
mov edx, str.GlobalLog
movzx ecx, dx
push ecx
push eax
lea ecx, [ebp - 0x50]
call fcn.00404ab0
jmp 0x4321e7
push 9
push str.GlobalLog
lea ecx, [ebp - 0x50]
call fcn.004046f0
push 0
mov byte [ebp - 4], 0x16
push dword [ebp - 0x64]
lea eax, [ebp - 0x54]
push eax
lea eax, [ebp - 0x50]
push eax
mov ecx, 0x52f7a4
call fcn.004018e0
mov byte [ebp - 4], 0x14
mov edx, dword [ebp - 0x50]
add edx, 0xfffffff0
mov ecx, edi
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x432222
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x13
mov edx, dword [ebp - 0x68]
add edx, 0xfffffff0
mov ecx, edi
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x432242
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x12
mov edx, dword [ebp - 0x60]
add edx, 0xfffffff0
mov ecx, edi
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x432262
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x11
mov edx, dword [ebp - 0x5c]
add edx, 0xfffffff0
mov ecx, edi
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x432282
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0xf
mov edx, dword [ebp - 0x54]
add edx, 0xfffffff0
mov ecx, edi
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4322a2
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 1
mov edx, dword [ebp - 0x58]
add edx, 0xfffffff0
mov ecx, edi
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4322c2
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
test bl, bl
jne 0x4325e1
mov eax, dword [0x52a6d0]
mov ecx, 0x52a6d0
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x5c], eax
mov eax, str.__Exe_n_me:
mov byte [ebp - 4], 0x17
test eax, 0xffff0000
jne 0x43230d
movzx ecx, ax
call fcn.00405570
test eax, eax
je 0x43231a
mov edx, str.__Exe_n_me:
movzx ecx, dx
push ecx
push eax
lea ecx, [ebp - 0x5c]
call fcn.00404ab0
jmp 0x43231a
push str.__Exe_n_me:
lea ecx, [ebp - 0x5c]
call fcn.00404510
mov byte [ebp - 4], 0x18
mov eax, dword [0x52a6d0]
mov ecx, 0x52a6d0
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x54], eax
mov eax, str.Returned_Error:
mov byte [ebp - 4], 0x19
test eax, 0xffff0000
jne 0x432361
movzx ecx, ax
call fcn.00405570
test eax, eax
je 0x43236e
mov edx, str.Returned_Error:
movzx ecx, dx
push ecx
push eax
lea ecx, [ebp - 0x54]
call fcn.00404ab0
jmp 0x43236e
push str.Returned_Error:
lea ecx, [ebp - 0x54]
call fcn.00404510
mov byte [ebp - 4], 0x1a
mov eax, dword [0x52a6d0]
mov ecx, 0x52a6d0
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x50], eax
mov byte [ebp - 4], 0x1b
test esi, esi
jne 0x4323ac
mov eax, str.RunExe
movzx esi, ax
mov ecx, esi
call fcn.00405570
test eax, eax
je 0x4323bb
push esi
push eax
lea ecx, [ebp - 0x50]
call fcn.00404ab0
jmp 0x4323bb
push 6
push str.RunExe
lea ecx, [ebp - 0x50]
call fcn.004046f0
lea ecx, [ebp - 0x78]
mov byte [ebp - 4], 0x1c
call fcn.00431ad0
mov esi, eax
mov byte [ebp - 4], 0x1d
mov edx, dword [0x52a6d0]
mov ecx, 0x52a6d0
call dword [edx + 0xc]
add eax, 0x10
mov dword [ebp - 0x6c], eax
lea eax, [ebp - 0x54]
push eax
lea edx, [ebp - 0x6c]
lea ecx, [ebp - 0x7c]
mov byte [ebp - 4], 0x1e
call fcn.00431540
add esp, 4
push esi
mov edx, eax
lea ecx, [ebp - 0x74]
mov byte [ebp - 4], 0x1f
call fcn.00431540
add esp, 4
lea ecx, [ebp - 0x5c]
push ecx
mov edx, eax
lea ecx, [ebp - 0x60]
mov byte [ebp - 4], 0x20
call fcn.00431540
add esp, 4
lea edx, [ebp + 8]
push edx
mov edx, eax
lea ecx, [ebp - 0x68]
mov byte [ebp - 4], 0x21
call fcn.00431540
add esp, 4
mov dword [ebp - 0x64], eax
mov byte [ebp - 4], 0x22
mov edx, dword [0x52a6d0]
mov ecx, 0x52a6d0
call dword [edx + 0xc]
add eax, 0x10
mov dword [ebp - 0x58], eax
mov byte [ebp - 4], 0x23
cmp dword [ebp - 0x70], 0
jne 0x432477
mov eax, str.GlobalLog
movzx esi, ax
mov ecx, esi
call fcn.00405570
test eax, eax
je 0x432486
push esi
push eax
lea ecx, [ebp - 0x58]
call fcn.00404ab0
jmp 0x432486
push 9
push str.GlobalLog
lea ecx, [ebp - 0x58]
call fcn.004046f0
push 0
mov byte [ebp - 4], 0x24
push dword [ebp - 0x64]
lea eax, [ebp - 0x50]
push eax
lea eax, [ebp - 0x58]
push eax
mov ecx, 0x52f7a4
call fcn.004018e0
mov byte [ebp - 4], 0x22
mov edx, dword [ebp - 0x58]
add edx, 0xfffffff0
mov ecx, edi
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4324c1
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x21
mov edx, dword [ebp - 0x68]
add edx, 0xfffffff0
mov ecx, edi
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4324e1
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x20
mov edx, dword [ebp - 0x60]
add edx, 0xfffffff0
mov ecx, edi
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x432501
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x1f
mov edx, dword [ebp - 0x74]
add edx, 0xfffffff0
mov ecx, edi
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x432521
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x1e
mov edx, dword [ebp - 0x7c]
add edx, 0xfffffff0
mov ecx, edi
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x432541
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x1d
mov edx, dword [ebp - 0x6c]
add edx, 0xfffffff0
mov ecx, edi
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x432561
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x1c
mov edx, dword [ebp - 0x78]
add edx, 0xfffffff0
mov ecx, edi
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x432581
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x1a
mov edx, dword [ebp - 0x50]
add edx, 0xfffffff0
mov ecx, edi
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4325a1
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x18
mov edx, dword [ebp - 0x54]
add edx, 0xfffffff0
mov ecx, edi
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4325c1
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 1
mov edx, dword [ebp - 0x5c]
add edx, 0xfffffff0
mov ecx, edi
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4325e1
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0
mov edx, dword [ebp + 8]
add edx, 0xfffffff0
mov ecx, edi
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x432601
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov dword [ebp - 4], 0xffffffff
mov esi, dword [ebp + 0xc]
add esi, 0xfffffff0
lea eax, [esi + 0xc]
lock xadd dword [eax], edi
dec edi
test edi, edi
jg 0x432622
mov ecx, dword [esi]
push esi
mov edx, dword [ecx]
call dword [edx + 4]
mov al, bl
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004b3a11
mov esp, ebp
pop ebp
ret