Function at 0x427030
Capabilities:
Encode data using xor
Get common file path

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x79308d
mov eax, dword fs:[0]
push eax
sub esp, 0x2f8
mov eax, dword [0x82f184]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, dword [ebp + 8]
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x2bc], esi
mov dword [ebp - 0x2b8], esi
cmp eax, 0x1b
ja case.default.0x427078
jmp dword [eax*4 + 0x42799c]
mov edx, 0x26
lea ecx, [ebp - 0x230]
call fcn.00426fa0
mov dword [ebp - 4], 0
xor eax, eax
mov dword [ebp - 0x238], 0
mov dword [ebp - 0x234], 7
mov word [ebp - 0x248], ax
push 2
push eax
lea eax, [ebp - 0x230]
mov byte [ebp - 4], 1
push eax
lea ecx, [ebp - 0x248]
call fcn.00404700
lea eax, [ebp - 0x248]
mov ecx, esi
push eax
call fcn.00404070
lea ecx, [ebp - 0x248]
call fcn.00404490
jmp 0x42710c
movups xmm0, xmmword [0x7cb384]
sub esp, 0x10
lea ecx, [ebp - 0x230]
mov eax, esp
movups xmmword [eax], xmm0
call fcn.00426e90
add esp, 0x10
push eax
mov ecx, esi
call fcn.00404070
lea ecx, [ebp - 0x230]
call fcn.00404490
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0076d59e
mov esp, ebp
pop ebp
ret
lea eax, [ebp - 0x218]
push eax
push 0x100
call dword [sym.imp.KERNEL32.dll_GetTempPathW]
mov dword [ebp - 0x238], 0
mov dword [ebp - 0x234], 7
test eax, eax
jne 0x42716d
push eax
mov word [ebp - 0x248], ax
push 0x7cd378
jmp 0x427197
xor eax, eax
lea ecx, [ebp - 0x218]
mov word [ebp - 0x248], ax
lea edx, [ecx + 2]
nop
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x427180
sub ecx, edx
lea eax, [ebp - 0x218]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x248]
call fcn.004044f0
lea eax, [ebp - 0x248]
push eax
lea ecx, [ebp - 0x230]
call fcn.00404070
lea ecx, [ebp - 0x248]
mov dword [ebp - 4], 2
call fcn.00404490
push esi
lea ecx, [ebp - 0x230]
call fcn.00414d60
jmp 0x42710c
push 0x104
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
push ecx
lea eax, [ebp - 0x218]
mov ecx, esi
push eax
call reloc.Qt5Widgets.dll___0QPushButton__QAE_PAVQWidget___Z
jmp 0x427117
mov edx, 0x28
lea ecx, [ebp - 0x230]
call fcn.00426fa0
jmp 0x427104
mov edx, 0x1a
lea ecx, [ebp - 0x230]
call fcn.00426fa0
jmp 0x427104
mov edx, 0x1c
lea ecx, [ebp - 0x230]
call fcn.00426fa0
jmp 0x427104
mov edx, 0x23
lea ecx, [ebp - 0x230]
call fcn.00426fa0
jmp 0x427104
mov edx, 0x26
lea ecx, [ebp - 0x230]
call fcn.00426fa0
jmp 0x427104
xor edx, edx
lea ecx, [ebp - 0x230]
call fcn.00426fa0
jmp 0x427104
mov edx, 0x19
lea ecx, [ebp - 0x230]
call fcn.00426fa0
jmp ??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ
mov edx, 0xb
lea ecx, [ebp - 0x230]
call fcn.00426fa0
jmp 0x427104
mov edx, 0x16
lea ecx, [ebp - 0x230]
call fcn.00426fa0
jmp 0x427104
mov edx, 2
lea ecx, [ebp - 0x230]
call fcn.00426fa0
jmp 0x427104
mov edx, 0x17
lea ecx, [ebp - 0x230]
call fcn.00426fa0
jmp 0x427104
mov edx, 7
lea ecx, [ebp - 0x230]
call fcn.00426fa0
jmp 0x427104
mov edx, 0x18
lea ecx, [ebp - 0x230]
call fcn.00426fa0
jmp 0x427104
lea eax, [ebp - 0x230]
push 8
push eax
call fcn.00427030
add esp, 8
push eax
lea ecx, [ebp - 0x248]
mov dword [ebp - 4], 3
call fcn.00404120
lea ecx, [ebp - 0x230]
mov byte [ebp - 4], 5
call fcn.00404490
push ecx
lea ecx, [ebp - 0x2e4]
mov dword [ebp - 0x2e4], 5
mov dword [ebp - 0x2e0], 0xc10090
mov dword [ebp - 0x2dc], 0x8d0082
mov dword [ebp - 0x2d8], 0xbd0095
call fcn.00403e20
push eax
lea ecx, [ebp - 0x248]
call fcn.00428540
cmp eax, 0xffffffff
je 0x4273b7
dec eax
lea ecx, [ebp - 0x248]
push eax
push 0
lea eax, [ebp - 0x2ec]
push eax
call fcn.00403fb0
push eax
mov ecx, esi
call fcn.00404070
lea ecx, [ebp - 0x2ec]
call fcn.00404490
lea ecx, [ebp - 0x248]
jmp 0x427112
lea eax, [ebp - 0x248]
mov ecx, esi
push eax
call fcn.00404070
lea ecx, [ebp - 0x248]
jmp 0x427112
lea ecx, [ebp - 0x248]
mov dword [ebp - 0x248], 8
mov dword [ebp - 0x244], 0xc000eb
mov dword [ebp - 0x240], 0xcf00c9
mov dword [ebp - 0x23c], 0xd000d9
mov dword [ebp - 0x238], 0x8d008d
mov dword [ebp - 0x234], 0xc0
call fcn.00403e20
mov dword [ebp - 0x2b8], eax
lea ecx, [ebp - 0x230]
push 0
lea eax, [ebp - 0x2b8]
push eax
call fcn.00428690
lea eax, [ebp - 0x2d4]
mov dword [ebp - 4], 6
push 2
push eax
call fcn.00427030
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x230]
push ecx
push eax
push esi
call fcn.00414e20
add esp, 0x14
lea ecx, [ebp - 0x2d4]
call fcn.00404490
jmp 0x42710c
lea ecx, [ebp - 0x248]
mov dword [ebp - 0x248], 8
mov dword [ebp - 0x244], 0xc000eb
mov dword [ebp - 0x240], 0xec00c9
mov dword [ebp - 0x23c], 0xea00f3
mov dword [ebp - 0x238], 0x8b0088
mov dword [ebp - 0x234], 0xc0
call fcn.00403e20
mov dword [ebp - 0x2b8], eax
lea ecx, [ebp - 0x230]
push 0
lea eax, [ebp - 0x2b8]
push eax
call fcn.00428690
lea eax, [ebp - 0x2d4]
mov dword [ebp - 4], 8
push 2
push eax
call fcn.00427030
mov byte [ebp - 4], 9
jmp 0x42744a
lea ecx, [ebp - 0x254]
mov dword [ebp - 0x254], 0xf
mov dword [ebp - 0x250], 0xea00e4
mov dword [ebp - 0x24c], 0xc800c3
mov dword [ebp - 0x248], 0xd800c8
mov dword [ebp - 0x244], 0x8c00d3
mov dword [ebp - 0x240], 0x9d00f2
mov dword [ebp - 0x23c], 0xa20096
mov dword [ebp - 0x238], 0xae00b7
mov dword [ebp - 0x234], 0xc700b5
call fcn.00403e20
mov edx, 0x24
lea ecx, [ebp - 0x230]
mov edi, eax
call fcn.00426fa0
mov dword [ebp - 4], 0xa
push edi
push eax
lea eax, [ebp - 0x2d4]
push eax
call fcn.00408060
add esp, 0xc
mov ecx, esi
push eax
call fcn.00404070
lea ecx, [ebp - 0x2d4]
call fcn.00404490
jmp 0x42710c
lea ecx, [ebp - 0x244]
mov dword [ebp - 0x244], 6
mov dword [ebp - 0x240], 0xed00e4
mov dword [ebp - 0x23c], 0xc800db
mov dword [ebp - 0x238], 0xce00d7
mov dword [ebp - 0x234], 0xbe
call fcn.00403e20
mov edx, 0x24
lea ecx, [ebp - 0x230]
mov edi, eax
call fcn.00426fa0
mov dword [ebp - 4], 0xb
jmp 0x427568
lea ecx, [ebp - 0x244]
mov dword [ebp - 0x244], 7
mov dword [ebp - 0x240], 0xcb00dc
mov dword [ebp - 0x23c], 0xcd00d3
mov dword [ebp - 0x238], 0xcf00d9
mov dword [ebp - 0x234], 0xbf00cd
call fcn.00403e20
mov dword [ebp - 0x2b8], eax
lea ecx, [ebp - 0x230]
push 0
lea eax, [ebp - 0x2b8]
push eax
call fcn.00428690
lea eax, [ebp - 0x2d4]
mov dword [ebp - 4], 0xc
push 0xa
push eax
call fcn.00427030
mov byte [ebp - 4], 0xd
jmp 0x42744a
lea ecx, [ebp - 0x244]
mov dword [ebp - 0x244], 7
mov dword [ebp - 0x240], 0xcb00dc
mov dword [ebp - 0x23c], 0xcd00d3
mov dword [ebp - 0x238], 0xcf00d9
mov dword [ebp - 0x234], 0xbf00cd
call fcn.00403e20
mov dword [ebp - 0x2b8], eax
lea ecx, [ebp - 0x230]
push 0
lea eax, [ebp - 0x2b8]
push eax
call fcn.00428690
lea eax, [ebp - 0x2d4]
mov dword [ebp - 4], 0xe
push 0xb
push eax
call fcn.00427030
mov byte [ebp - 4], 0xf
jmp 0x42744a
lea eax, [ebp - 0x2b0]
push eax
call fcn.00427a10
mov ecx, eax
call fcn.00403e20
mov dword [ebp - 0x2b8], eax
lea ecx, [ebp - 0x230]
push 0
lea eax, [ebp - 0x2b8]
push eax
call fcn.00428690
lea eax, [ebp - 0x2d4]
mov dword [ebp - 4], 0x10
push 5
push eax
call fcn.00427030
mov byte [ebp - 4], 0x11
jmp 0x42744a
lea eax, [ebp - 0x2b4]
push eax
call fcn.00427b00
mov edi, eax
xor ecx, ecx
mov edx, dword [edi]
lea eax, [edi + 4]
mov dword [ebp - 0x2b8], eax
test edx, edx
je 0x42775f
mov esi, eax
lea eax, [ecx + 0xb8]
xor word [esi + ecx*2], ax
inc ecx
mov edx, dword [edi]
cmp ecx, edx
jb 0x427742
mov esi, dword [ebp - 0x2bc]
mov eax, dword [ebp - 0x2b8]
xor ecx, ecx
mov dword [ebp - 0x2bc], eax
mov word [eax + edx*2], cx
lea eax, [ebp - 0x2bc]
push ecx
push eax
lea ecx, [ebp - 0x230]
call fcn.00428690
lea eax, [ebp - 0x2d4]
mov dword [ebp - 4], 0x12
push 5
push eax
call fcn.00427030
mov byte [ebp - 4], 0x13
jmp 0x42744a
lea ecx, [ebp - 0x25c]
mov dword [ebp - 0x25c], 0x13
mov dword [ebp - 0x258], 0xd500fb
mov dword [ebp - 0x254], 0xc800db
mov dword [ebp - 0x250], 0xd400cf
mov dword [ebp - 0x24c], 0xec00dd
mov dword [ebp - 0x248], 0xa400a8
mov dword [ebp - 0x244], 0xaf00ae
mov dword [ebp - 0x240], 0x950098
mov dword [ebp - 0x23c], 0xa900af
mov dword [ebp - 0x238], 0xac00a6
mov dword [ebp - 0x234], 0xcb00ae
call fcn.00403e20
mov dword [ebp - 0x2bc], eax
lea ecx, [ebp - 0x230]
push 0
lea eax, [ebp - 0x2bc]
push eax
call fcn.00428690
lea eax, [ebp - 0x2d4]
mov dword [ebp - 4], 0x14
push 5
push eax
call fcn.00427030
mov byte [ebp - 4], 0x15
jmp 0x42744a
lea ecx, [ebp - 0x288]
mov dword [ebp - 0x288], 0x29
mov dword [ebp - 0x284], 0xf400e4
mov dword [ebp - 0x280], 0xd800d3
mov dword [ebp - 0x27c], 0xd200ce
mov dword [ebp - 0x278], 0xd000cd
mov dword [ebp - 0x274], 0xb500a6
mov dword [ebp - 0x270], 0x8a009e
mov dword [ebp - 0x26c], 0xb100aa
mov dword [ebp - 0x268], 0xb500a3
mov dword [ebp - 0x264], 0xac00a6
mov dword [ebp - 0x260], 0xeb00be
mov dword [ebp - 0x25c], 0xb50089
mov dword [ebp - 0x258], 0xa300be
mov dword [ebp - 0x254], 0xa300bf
mov dword [ebp - 0x250], 0xa100b7
mov dword [ebp - 0x24c], 0x840088
mov dword [ebp - 0x248], 0xbe00a3
mov dword [ebp - 0x244], 0xb200bb
mov dword [ebp - 0x240], 0x9700fa
mov dword [ebp - 0x23c], 0xa800bd
mov dword [ebp - 0x238], 0xbc00b0
mov dword [ebp - 0x234], 0xe10088
call fcn.00403e20
mov dword [ebp - 0x2bc], eax
lea ecx, [ebp - 0x230]
push 0
lea eax, [ebp - 0x2bc]
push eax
call fcn.00428690
lea eax, [ebp - 0x2d4]
mov dword [ebp - 4], 0x16
push 5
push eax
call fcn.00427030
mov byte [ebp - 4], 0x17
jmp 0x42744a
lea eax, [ebp - 0x304]
push eax
call fcn.00427c00
mov ecx, eax
call fcn.004131e0
push eax
lea ecx, [ebp - 0x2e0]
call fcn.004141a0
push 0x824904
lea eax, [ebp - 0x2e0]
push eax
call sub.VCRUNTIME140.dll__CxxThrowException
out 0x70, eax
inc edx
add byte [ecx + esi*2], dh
inc edx
add bh, dl
jno ?changeEvent@QWidget@@MAEXPAVQEvent@@@Z
add ch, bh
jno 0x4279ed
add byte [edi + 0x70], bh
inc edx
add byte [edx], dl
jb 0x4279f5
add byte [edi], ah
jb 0x4279f9
add byte [edx + esi*2], bh
inc edx
add byte [ecx + 0x72], dl
inc edx
add byte [ebx], cl
jae 0x427a05
add al, dl
jae 0x427a09
add byte [ebx + 0x74], ch
inc edx
add byte [esi + 0x72], ah
inc edx
add byte [eax + 0x72], bh
inc edx
add byte [ebp - 0x5dffbd8e], cl
jb 0x427a1d
add byte [edi - 0x33ffbd8e], dh
jb 0x427a25
add cl, ah
jb 0x427a29
add dh, dh
jb ?changeEvent@QWidget@@MAEXPAVQEvent@@@Z
add dl, ch
je 0x427a31
add byte [ecx - 0x13ffbd8b], dl
jne 0x427a39
add byte [ecx + 0x76], ah
inc edx
jbe 0x427a3d
add dh, dl
jbe 0x427a41
add byte [ecx], ah
ja 0x427a45
add byte [edi + esi*2 + 0x784d0042], bl
ja 0x427a49
add byte [ebp + 0x78], cl
js 0x427a4d
inc edx
add ah, cl
int3
cmp al, 0
add byte [eax], al
mov dword [eax + 4], 0xd000f5
mov dword [eax + 8], 0xc900d9
mov dword [eax + 0xc], 0xce00d3
mov dword [eax + 0x10], 0xd900d1
add al, dl
add bh, al
inc eax
or cl, bl
add cl, cl
leave
add bh, al
inc eax
or al, 0xd3
add dh, cl
add bh, al
inc eax
adc cl, dl
add cl, bl
add bh, al
inc eax
adc al, 0xb4
rol dword [eax], 1
fld dword [eax]
mov dword [eax + 0x14], 0x9d00b4
mov dword [eax + 0x18], 0xad008b
mov dword [eax + 0x1c], 0xa000b0
mov dword [eax + 0x20], 0xa900b4
mov dword [eax + 0x24], 0xbd00ad
mov dword [eax + 0x28], 0x8e00ea
mov dword [eax + 0x2c], 0xbd00b4
mov dword [eax + 0x30], 0xa000a2
mov dword [eax + 0x34], 0xb400a2
mov dword [eax + 0x38], 0x8f00a0
mov dword [eax + 0x3c], 0xa00085
mov dword [eax + 0x40], 0xb400bf
mov dword [eax + 0x44], 0xf900b3
mov dword [eax + 0x48], 0xba0096
mov dword [eax + 0x4c], 0xb300a9
mov dword [eax + 0x50], 0xb700bd
mov dword [eax + 0x54], 0xb400bc
mov dword [eax + 0x58], 0x860091
mov dword [eax + 0x5c], 0xc50096
mov dword [eax + 0x60], 0x8e00b6
mov dword [eax + 0x64], 0x870086
mov dword [eax + 0x68], 0x8f008f
mov dword [eax + 0x6c], 0xb900b0
mov dword [eax + 0x70], 0x9c008f
mov dword [eax + 0x74], 0xb3009b
mov dword [eax + 0x78], 0x810093
mov dword [eax + 0x7c], 0xf4
pop ebx
pop ebp
ret 4
add byte [ebp + 0x1840c700], bl
mov eax, dword [eax]
inc eax
sbb byte [ebx - 0x38ff5300], cl
lodsd eax, dword [esi]
add bh, al
inc eax
sbb al, 0xb0
add byte [eax + 0x2040c700], ah
mov ah, 0
test eax, 0x2440c700
lodsd eax, dword [esi]
add byte [ebp + 0x2840c700], bh
ljmp 0x2c40