Function at 0x1004e4d0
Capabilities:
Encode data using xor
Get disk information

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
sub esp, 0x40
mov eax, dword [ebp + 8]
mov dword [ebp - 0x10], eax
mov eax, dword [0x100c5328]
xor eax, ebp
mov dword [ebp - 0xc], eax
mov eax, dword [0x100c4a10]
xor eax, dword [0x100c4a14]
and eax, 0xaec92d
and eax, 0xb805de20
and eax, 0xd7afe42
add eax, 0xcebb8b81
mov ecx, 0xaafc5e85
xor edx, edx
div ecx
imul eax, eax, 0xe5a2b8f5
xor eax, 0xacbea110
or eax, 0x2615131
and eax, 0xbbceb87f
imul eax, eax, 0xe0f822aa
add eax, 0xe7485922
and eax, 0x7f801877
imul eax, eax, 0x73de4b98
sub eax, 0xe7c81247
xor eax, 0xbe842f84
sub eax, 0x242c1d2f
add eax, 0xb133c31a
and eax, 0xce0b2eb
imul eax, eax, 0x421fc70e
sub eax, 0x376306a3
xor eax, 0xc4eb0bdd
mov ecx, 0xe1acfe19
xor edx, edx
div ecx
sub eax, 0x6b47015a
imul eax, eax, 0xd1e308d3
or eax, 0xba20422b
imul eax, eax, 0x7fd706df
add eax, 0xc4fa71e7
add eax, 0x5c6163e4
and eax, 0x96f31a85
mov ecx, 0x5ee06d5e
xor edx, edx
div ecx
sub eax, 0x2c794539
mov ecx, 0xebc6eb35
xor edx, edx
div ecx
sub eax, 0xf069f3df
mov ecx, 0xd5ecc150
xor edx, edx
div ecx
sub eax, 0x72ee2eb9
add eax, 0x7c365a07
imul eax, eax, 0x5592e04b
mov ecx, 0x6e021f72
xor edx, edx
div ecx
and eax, 0xac462977
and eax, 0x1daecd4f
or eax, 0x81160082
add eax, 0x461f3567
xor eax, 0xf1a3158d
mov ecx, 0x3e1e71f
xor edx, edx
div ecx
imul eax, eax, 0x94da9640
or eax, 0xc05cf398
add eax, 0x102f96fb
mov ecx, 0x7ca65b52
xor edx, edx
div ecx
xor eax, 0xdae7b3a8
and eax, 0xf7db6f12
sub eax, 0xd9618148
sub eax, 0xc5906fbf
sub eax, 0x42dc8076
imul eax, eax, 0x619bf928
and eax, 0x944055ce
mov ecx, 0x22ff435f
xor edx, edx
div ecx
and eax, 0x43f126fc
sub eax, 0xb5776050
xor eax, 0x1e1b2044
or eax, 0xb4db3dfa
xor eax, 0xa12bf181
mov ecx, 0x784be2b6
xor edx, edx
div ecx
xor eax, 0x6566f3b0
imul eax, eax, 0x95127fd3
xor eax, 0xc5c12d1f
sub eax, 0x9d81adf6
and eax, 0xa413e56
xor eax, 0xbb76c9a
mov ecx, 0x94b33d27
xor edx, edx
div ecx
or eax, 0xe06f446d
imul eax, eax, 0x484247a8
and eax, 0xb7b7e0bc
cmp eax, 0xb91bd66e
je 0x1004f956
mov edx, dword [ebp - 0x10]
mov eax, 0x3734529b
mov dword [ebp - 0x14], eax
push eax
mov ecx, esp
mov dword [ebp - 0x30], ecx
sub esp, 0x1c
mov eax, esp
push eax
mov esi, esp
mov dword [ebp - 0x2c], esi
push eax
mov edi, esp
mov dword [ebp - 0x1c], edi
push eax
mov edi, esp
mov dword [ebp - 0x18], edi
push eax
mov edi, esp
mov dword [ebp - 0x28], edi
push eax
mov edi, esp
mov dword [ebp - 0x24], edi
sub esp, 0x104
mov edi, esp
mov dword [ebp - 0x20], edi
mov dword [ecx], edx
xor ecx, ecx
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x1a
call fcn.100709f0
add esp, 0xc
call dword [sym.imp.KERNEL32.dll_GetLogicalDrives]
mov edx, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x18]
mov edi, eax
mov eax, dword [ebp - 0x14]
mov dword [esi], edi
mov byte [edx], 0
mov dword [ecx], 0
cmp eax, 0xc317e6b9
je 0x1004e69d
jmp 0x1004e72a
mov eax, dword [0x100c4a20]
xor edx, edx
div dword [0x100c4a24]
sub eax, 0x37ea923d
mov ecx, 0x191d14c4
xor edx, edx
div ecx
xor eax, 0xbc9c523c
and eax, 0x5670890a
and eax, 0xe069abdf
mov ecx, 0x432fd54e
xor edx, edx
div ecx
sub eax, 0xda2e1ed9
or eax, 0xff32c5ca
sub eax, 0x99e1f933
imul eax, eax, 0x3d1fbe08
or eax, 0x2c6a70c2
add eax, 0xeedcef77
imul eax, eax, 0x4987f14b
or eax, 0xfa467484
or eax, 0xd03b026d
mov ecx, 0xb85bf378
xor edx, edx
div ecx
imul eax, eax, 0x21291085
or eax, 0x301b2884
add eax, 0xe8e80aca
and eax, 0x952e4bbf
or eax, 0xdb348ff4
imul eax, eax, 0x963250bf
or eax, 0xb8f762e1
or eax, 0xbf356c26
sub eax, 0x94137698
sub eax, 0x7ff54534
or eax, 0x2dccc7ae
sub eax, 0xb59bf028
and eax, 0x13902aa2
or eax, 0x949d21c6
and eax, 0xb22b988f
mov ecx, 0xd362f2e3
xor edx, edx
div ecx
or eax, 0xf61cf9f5
or eax, 0x2c4ec187
or eax, 0x5dbec72e
mov ecx, 0xd2560a0d
xor edx, edx
div ecx
or eax, 0x85110725
xor eax, 0x312e2182
mov ecx, 0xc098df33
xor edx, edx
div ecx
sub eax, 0x83fc9e6
add eax, 0x692d4c38
add eax, 0x20fd4d43
xor eax, 0x5e686dc3
imul eax, eax, 0xff2cae3
sub eax, 0xf60a41fa
and eax, 0x724c8971
xor eax, 0x59c78adc
xor eax, 0x312ebdac
add eax, 0x4537a3ca
sub eax, 0x663e6445
or eax, 0x17b7945e
xor eax, 0xc50022f8
or eax, 0x5b28ec4d
mov ecx, 0xdcc6e25e
xor edx, edx
div ecx
mov ecx, 0x2a030df2
xor edx, edx
div ecx
or eax, 0x2e025e09
add eax, 0xca0b70bd
sub eax, 0x114a150
mov ecx, 0x6415b5e7
xor edx, edx
div ecx
imul eax, eax, 0x9b99a587
add eax, 0x447f5325
and eax, 0x3a20918e
xor eax, 0xec1d3f8a
sub eax, 0x964cb04e
mov ecx, 0x4c19e4e7
xor edx, edx
div ecx
xor eax, 0x79ff3599
imul eax, eax, 0xa134a014
or eax, 0xf2814877
sub eax, 0x8028b625
imul eax, eax, 0x5beac524
and eax, 0x1e89bd52
imul eax, eax, 0x749da56d
cmp eax, 0x6aba1c19
jbe 0x1004f9b6
mov ecx, dword [ebp - 0x18]
mov eax, dword [0x100c4a28]
or eax, dword [str.UoL_P]
and eax, 0x10d3d24d
sub eax, 0xc54b01e
imul eax, eax, 0x27f5dc36
mov esi, 0xaa12b9ca
xor edx, edx
div esi
or eax, 0x4b4065f4
sub eax, 0x82a8c3b8
sub eax, 0x22fc5f8d
xor eax, 0x8f1e2fd1
xor eax, 0xd8927a12
sub eax, 0x29810ba7
or eax, 0x42f0b2cb
or eax, 0x366e7e90
xor eax, 0x860cb145
imul eax, eax, 0xb6a8c377
and eax, 0xb10e9dd8
and eax, 0x8af65386
or eax, 0xb2ea4f0f
or eax, 0xefc9546b
xor eax, 0xbb1c09e
sub eax, 0x9d4411c6
xor eax, 0x7d11954f
xor eax, 0xc58e1bd7
add eax, 0xa7938aa0
mov esi, 0x7b9af68d
xor edx, edx
div esi
xor eax, 0xaa967220
imul eax, eax, 0xb121086
or eax, 0xc7fd850a
mov esi, 0x7e42c0bf
xor edx, edx
div esi
xor eax, 0x26596538
xor eax, 0x11f1de39
sub eax, 0xf1d6625
or eax, 0x2c3108d6
imul eax, eax, 0x4cf92ac1
sub eax, 0xcf60c027
add eax, 0x78dab7d4
and eax, 0x9551d693
xor eax, 0xa507a346
xor eax, 0xa2550c29
imul eax, eax, 0xc3199d10
or eax, 0x95a3e84e
add eax, 0xfa57366c
add eax, 0xfba3c65d
or eax, 0x4c6937d4
xor eax, 0x45661c31
imul eax, eax, 0xbe71b56e
xor eax, 0x1a6ff3c9
sub eax, 0x29fd9ec6
or eax, 0xd65f4152
imul eax, eax, 0x98a8ea58
or eax, 0x1f0e0d9c
imul eax, eax, 0xa78a3899
or eax, 0xed7ef7ad
and eax, 0x8d439596
mov esi, 0xfbe944a9
xor edx, edx
div esi
imul eax, eax, 0xd1a72876
add eax, 0x264eb71c
mov esi, 0x8c35f780
xor edx, edx
div esi
sub eax, 0x91b687e9
mov esi, 0xeb762bfd
xor edx, edx
div esi
or eax, 0x421d430f
add eax, 0x8b7b92a4
or eax, 0x1d2a494b
and eax, 0xe7aaec25
mov esi, 0x4f8e9cf3
xor edx, edx
div esi
mov esi, 0xfca99c29
xor edx, edx
div esi
mov esi, 0x7a4d7cf
xor edx, edx
div esi
xor eax, 0x688ace92
and eax, 0x3e45ab
imul eax, eax, 0xd72dfd28
add eax, 0x97cba5b6
xor eax, 0x3a81b0b7
and eax, 0x13a7ef98
cmp dword [ecx], 0x1a
setl cl
mov byte [ebp - 0x31], cl
cmp eax, 0x831213bc
ja 0x1004e8db
mov al, byte [ebp - 0x31]
test al, 1
jne 0x1004eaa3
jmp 0x1004f935
mov eax, dword [0x100c4a30]
and eax, dword [0x100c4a34]
xor eax, 0xbf822845
sub eax, 0xd8c54144
and eax, 0x7296bc6b
sub eax, 0x485580f0
and eax, 0xd4c8a6c9
sub eax, 0x84800f1c
mov ecx, 0x51ae8359
xor edx, edx
div ecx
add eax, 0xecbb4fee
mov ecx, 0x4049144c
xor edx, edx
div ecx
imul eax, eax, 0x1cbe0b9e
imul eax, eax, 0x2ea5a012
add eax, 0x9320cfb4
or eax, 0xeb8116d6
mov ecx, 0x98086b68
xor edx, edx
div ecx
add eax, 0xc84df397
sub eax, 0xa362939c
xor eax, 0xc48d633f
sub eax, 0x6f8e79a2
mov ecx, 0x31e90ed
xor edx, edx
div ecx
or eax, 0x7e6cbf7b
imul eax, eax, 0x1113a1da
xor eax, 0xf167cd83
and eax, 0xeaecea10
or eax, 0x713ac79c
xor eax, 0x1bf8a451
xor eax, 0x3ad6ef46
mov ecx, 0x3fd62d5d
xor edx, edx
div ecx
or eax, 0xf6f1ab07
add eax, 0x7426d774
add eax, 0x2c65e245
or eax, 0x26d03b5e
mov ecx, 0x6f816f79
xor edx, edx
div ecx
imul eax, eax, 0xf55bef35
xor eax, 0x6dd5ba0a
mov ecx, 0x3564e4c3
xor edx, edx
div ecx
or eax, 0xdf16868
imul eax, eax, 0xa19e2189
sub eax, 0xa59659cb
xor eax, 0x8408c779
add eax, 0xda6b0d09
and eax, 0xfa49c344
mov ecx, 0xccb1e100
xor edx, edx
div ecx
sub eax, 0x897a3b04
and eax, 0x5a63726c
add eax, 0x80354d1a
add eax, 0xb859d68e
sub eax, 0x3d5dcd2f
sub eax, 0xf06e5a80
and eax, 0x90549955
mov ecx, 0x1ca38ea7
xor edx, edx
div ecx
mov ecx, 0x846b895f
xor edx, edx
div ecx
and eax, 0x80113b7b
mov ecx, 0xd93d27dc
xor edx, edx
div ecx
or eax, 0x83a30785
mov ecx, 0x3d59961e
xor edx, edx
div ecx
add eax, 0xe49034d2
sub eax, 0x2486d6f9
xor eax, 0xf027c7e6
and eax, 0x42a2a427
mov ecx, 0x5aa366e9
xor edx, edx
div ecx
or eax, 0x7db04a0
and eax, 0x46809379
xor eax, 0x94dabfaa
and eax, 0xbd35c0c9
add eax, 0xdc15b003
and eax, 0x8451a28
mov ecx, 0x2b86d74
xor edx, edx
div ecx
sub eax, 0x589559e
and eax, 0x5b1d3506
add eax, 0x47cf6a1f
and eax, 0x3a02e896
sub eax, 0x8cc33d94
cmp eax, 0xa1b6609a
je 0x1004f9bb
mov ecx, dword [ebp - 0x2c]
mov eax, dword [0x100c4a38]
and eax, dword [0x100c4a3c]
sub eax, 0xebdca7be
xor eax, 0xda72937
sub eax, 0x547dd58b
xor eax, 0x35c8ac1b
imul eax, eax, 0xa44b702
xor eax, 0x3601adec
xor eax, 0xb895dfcb
mov esi, 0x200ed204
xor edx, edx
div esi
add eax, 0x27cf4935
imul eax, eax, 0x524d547e
imul eax, eax, 0xe5e3ac5d
xor eax, 0x36e4eca5
xor eax, 0x6f62b4d1
or eax, 0x32531454
add eax, 0x20c3a839
xor eax, 0xd9c593fd
or eax, 0x2fc5c80f
mov esi, 0xfb0f8a12
xor edx, edx
div esi
xor eax, 0xf7c62983
mov esi, 0x34edf945
xor edx, edx
div esi
or eax, 0xff895cdd
or eax, 0x652e6054
mov esi, 0xe763d433
xor edx, edx
div esi
and eax, 0x9094d5ca
imul eax, eax, 0x14b684df
or eax, 0x8fb27dfb
add eax, 0x23c2b8f6
or eax, 0x301ac750
imul eax, eax, 0x7883263b
xor eax, 0x1e1a159e
mov esi, 0xe4929d81
xor edx, edx
div esi
xor eax, 0x23952a98
imul eax, eax, 0x2d695f2c
sub eax, 0xf32a84b8
and eax, 0x16d62431
or eax, 0x8ade13d4
mov esi, 0x9ac3d961
xor edx, edx
div esi
add eax, 0x9157bbf0
or eax, 0xb9b7e47a
xor eax, 0x8b4eb63
mov esi, 0xfb6012ae
xor edx, edx
div esi
mov esi, 0x489a984d
xor edx, edx
div esi
sub eax, 0xc19e5f47
and eax, 0xdd1a6cc4
and eax, 0xdd6037c8
and eax, 0x34f030ce
xor eax, 0x53d00e75
and eax, 0x281d8082
xor eax, 0xe42e1082
or eax, 0xaa974aee
xor eax, 0x71f3f838
mov esi, 0xcbc3c730
xor edx, edx
div esi
xor eax, 0x9a297f63
mov esi, 0x8d1e89ba
xor edx, edx
div esi
imul eax, eax, 0x1cad3ddc
sub eax, 0xf0b903
and eax, 0xca892ea6
and eax, 0xb6b15815
mov esi, 0x7b3e4395
xor edx, edx
div esi
sub eax, 0x7ddfe990
add eax, 0xffc6083
xor eax, 0xb8049493
or eax, 0x6094a0a7
sub eax, 0x63ed2436
imul eax, eax, 0xbcad338
and eax, 0xdd8466de
sub eax, 0xa6e4fc3b
or eax, 0x7028e6ef
imul eax, eax, 0xcd8df15e
xor eax, 0x513b30c3
and eax, 0x1fa240c
mov esi, 0x50e907d6
xor edx, edx
div esi
mov ecx, dword [ecx]
and ecx, 1
cmp ecx, 1
sete cl
mov byte [ebp - 0x32], cl
cmp eax, 0x235702b4
jae 0x1004ec5e
mov al, byte [ebp - 0x32]
test al, 1
jne 0x1004ee36
jmp 0x1004f24c
mov eax, dword [0x100c4a40]
or eax, dword [0x100c4a44]
imul eax, eax, 0x7c4af99d
or eax, 0x372de1ae
mov ecx, 0x88389d40
xor edx, edx
div ecx
mov ecx, 0x4ceb28a0
xor edx, edx
div ecx
mov ecx, 0xbbdcfe80
xor edx, edx
div ecx
add eax, 0x9f93513a
xor eax, 0xb348f560
mov ecx, 0x8c23d2ba
xor edx, edx
div ecx
and eax, 0x9ebdbb01
and eax, 0xe63822e5
imul eax, eax, 0x2c2e81fa
or eax, 0xbc878d89
imul eax, eax, 0x59df9780
add eax, 0x70947260
add eax, 0x7db85c04
add eax, 0xd8ed9685
sub eax, 0xc4cc7455
xor eax, 0xcc087f98
sub eax, 0x82a96935
imul eax, eax, 0x29684c44
or eax, 0x49fdeecd
add eax, 0xfa1507a0
add eax, 0x6106c709
add eax, 0x2f05f0ed
or eax, 0x5a63e243
sub eax, 0x9913d872
xor eax, 0xddb3a3b4
imul eax, eax, 0x4afe96bd
add eax, 0x6b8fa2d5
and eax, 0xb3dee092
add eax, 0x1f2dcea9
mov ecx, 0x8d8bcfd0
xor edx, edx
div ecx
add eax, 0x93baed94
sub eax, 0x8d2826ee
add eax, 0x8363d142
xor eax, 0x3a880465
mov ecx, 0x4d020c4c
xor edx, edx
div ecx
imul eax, eax, 0x88a14521
imul eax, eax, 0xaa4ce644
add eax, 0x27457f39
mov ecx, 0x8ea188d4
xor edx, edx
div ecx
add eax, 0xc59aad71
and eax, 0xa9309e65
mov ecx, 0x4f81f5bf
xor edx, edx
div ecx
sub eax, 0x52205ab6
add eax, 0x876b5743
imul eax, eax, 0x61204bc9
xor eax, 0x2f10b4ca
sub eax, 0xd9ce732b
imul eax, eax, 0xb791ffd5
sub eax, 0xa293414f
sub eax, 0xd4688809
xor eax, 0xf3a3ee2
and eax, 0xc8d59eb5
imul eax, eax, 0x37f28637
imul eax, eax, 0x58361741
add eax, 0xfc0cfed5
or eax, 0xb009208
imul eax, eax, 0x6265b1c4
xor eax, 0xe49b7c43
and eax, 0xc4036247
and eax, 0xc99cada8
imul eax, eax, 0xc987024d
sub eax, 0x3f0ed435
sub eax, 0xa3051063
sub eax, 0xf51481a1
imul eax, eax, 0x83f526d6
imul eax, eax, 0x3489bd95
xor eax, 0xbe263e5b
sub eax, 0x5b741857
or eax, 0xbfd605c8
mov ecx, 0x485f0c65
xor edx, edx
div ecx
cmp eax, 0x987df0a2
je 0x1004f9c0
mov ecx, dword [ebp - 0x24]
mov eax, dword [0x100c4a48]
add eax, dword [0x100c4a4c]
sub eax, 0x6a9b8fac
add eax, 0x7fda0164
mov esi, 0x9f9cb59c
xor edx, edx
div esi
imul eax, eax, 0xdf8cc873
imul eax, eax, 0xedac8542
or eax, 0x2954106
xor eax, 0x68237e33
imul eax, eax, 0x721fec9a
imul eax, eax, 0x2c264503
or eax, 0xfc884ffc
add eax, 0x60ff96c2
and eax, 0x91742756
or eax, 0x66e4c5af
sub eax, 0x386f2f9e
mov esi, 0xa39b2a26
xor edx, edx
div esi
add eax, 0x79c4c405
add eax, 0x230e6799
xor eax, 0xfe71c3a6
add eax, 0x4288e220
and eax, 0xa77d4480
imul eax, eax, 0x21ca92f3
add eax, 0x9ffce8fd
imul eax, eax, 0xa5c9a40
add eax, 0x96d381d7
imul eax, eax, 0x1f02a62b
imul eax, eax, 0xa889f181
and eax, 0x577d574e
add eax, 0x208c0f3
and eax, 0x710449f4
sub eax, 0xb70b477f
imul eax, eax, 0xaf32cbd0
xor eax, 0xd7fc880c
imul eax, eax, 0x31871861
add eax, 0x7350e6cf
add eax, 0x4c241004
or eax, 0x46e4aeb1
imul eax, eax, 0xdd1b27fe
or eax, 0xd211519a
xor eax, 0x91a6012b
mov esi, 0xe3418876
xor edx, edx
div esi
or eax, 0x835fdf2d
add eax, 0xc68f79ae
imul eax, eax, 0x68838cc5
and eax, 0xee0bd16e
sub eax, 0xdeeccf4d
xor eax, 0x923c1dc6
imul eax, eax, 0x3db6496f
imul eax, eax, 0x600f348e
mov esi, 0x13f1e61
xor edx, edx
div esi
imul eax, eax, 0xb9bfbd00
add eax, 0x8d5fa17e
sub eax, 0x5c766350
xor eax, 0xadec2e5b
and eax, 0xc954d4f3
or eax, 0xc7942aca
sub eax, 0xda0f8bca
or eax, 0xd2745c7c
sub eax, 0x723ffdb8
add eax, 0x1f74ccc7
and eax, 0x8a0d6b5c
mov esi, 0x2eda86c1
xor edx, edx
div esi
add eax, 0xa41e1b9c
or eax, 0x43edbe77
imul eax, eax, 0xece36552
mov esi, 0x95180c02
xor edx, edx
div esi
imul eax, eax, 0x33a033ea
mov esi, 0x68c772d0
xor edx, edx
div esi
xor eax, 0x66e50d6a
or eax, 0xa71c4ec8
mov esi, 0x2e3b0f2b
xor edx, edx
div esi
mov edx, dword [ebp - 0x18]
mov esi, eax
mov eax, dword [ebp - 0x28]
xor esi, 0xc017a9cd
sub esi, 0x3900f629
mov dword [ebp - 0x38], esi
mov edx, dword [edx]
add edx, 0x41
mov byte [ecx], dl
mov cl, byte [ecx]
mov byte [eax], cl
mov byte [eax + 1], 0x3a
mov byte [eax + 2], 0x5c
mov byte [eax + 3], 0
sub esp, 8
mov dword [esp], 0xc
mov dword [esp + 4], 0x12
call fcn.10024db0
mov edx, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x20]
mov eax, esp
mov dword [eax + 4], edx
mov dword [eax], ecx
call fcn.1008dd30
mov ecx, dword [ebp - 0x20]
add esp, 8
lea eax, [0x100b8491]
sub esp, 8
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.1008dd40
mov ecx, dword [ebp - 0x30]
add esp, 8
mov eax, dword [ebp - 0x20]
mov ecx, dword [ecx]
sub esp, 8
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.1004dfb0
add esp, 8
mov ecx, eax
mov eax, dword [ebp - 0x38]
cmp ecx, 0
setne cl
mov byte [ebp - 0x33], cl
cmp eax, 0x1c1542d4
jb 0x1004f9c0
mov al, byte [ebp - 0x33]
test al, 1
jne 0x1004f23c
jmp 0x1004f247
mov eax, dword [ebp - 0x1c]
mov byte [eax], 1
jmp 0x1004f935
jmp 0x1004f24c
mov eax, dword [0x100c4a50]
xor eax, dword [0x100c4a54]
mov ecx, 0x101e17bd
xor edx, edx
div ecx
imul eax, eax, 0xa55e0998
or eax, 0xaf3fa427
sub eax, 0x6c7d2034
or eax, 0xd906508c
add eax, 0x6b293d9a
mov ecx, 0x24925362
xor edx, edx
div ecx
or eax, 0xb9a88dc7
xor eax, 0x430e4c81
or eax, 0xef6960f7
and eax, 0x450a7d0c
sub eax, 0xf7e12362
or eax, 0x6baebd3e
mov ecx, 0xe2a59a6d
xor edx, edx
div ecx
and eax, 0xab638eeb
and eax, 0x5baea758
add eax, 0x19a734b0
and eax, 0x7000a9f9
and eax, 0x6288d9c
and eax, 0x808f1b6e
add eax, 0x71e0c625
and eax, 0xf45895d1
imul eax, eax, 0x65b9e1ae
imul eax, eax, 0x81c163d8
imul eax, eax, 0x10eb9d6
xor eax, 0x46554d0
xor eax, 0x25844aae
imul eax, eax, 0x7954b7a2
xor eax, 0xbf7d6e85
mov ecx, 0x2c4812dd
xor edx, edx
div ecx
imul eax, eax, 0xf9eeeef8
xor eax, 0xc681391a
add eax, 0x2e8e361b
add eax, 0xb3085359
add eax, 0xc7a9740b
or eax, 0x263829e7
sub eax, 0x159b0201
imul eax, eax, 0x6ab657c6
and eax, 0x49f44c28
add eax, 0x7764797a
add eax, 0xd5c1cf9f
imul eax, eax, 0xe60c3ecd
mov ecx, 0xbe98f358
xor edx, edx
div ecx
and eax, 0x6482c352
or eax, 0x7cd0ae64
sub eax, 0xaefa6041
and eax, 0xbc10733e
or eax, 0x32218d57
sub eax, 0xd75fc2f
mov ecx, 0x251aa9fa
xor edx, edx
div ecx
or eax, 0xedbced80
add eax, 0xdd7a24a2
add eax, 0x95d3c541
add eax, 0xdd09d
sub eax, 0x972d6a74
and eax, 0xef705dc0
and eax, 0x9000ae69
or eax, 0x6a1335e6
imul eax, eax, 0x74fed927
or eax, 0x70b8a36
imul eax, eax, 0x107d21d0
and eax, 0x44753922
or eax, 0x591a32cd
add eax, 0x5e0c4fd6
add eax, 0x31365284
sub eax, 0x2033f45b
sub eax, 0x64f3e838
sub eax, 0xa78cb4f5
xor eax, 0x9a831854
and eax, 0x4a8b9576
imul eax, eax, 0xed0c2a05
xor eax, 0x92fc179c
cmp eax, 0x48cb71c2
jbe 0x1004fa46
mov ecx, dword [ebp - 0x2c]
mov eax, dword [0x100c4a58]
xor eax, dword [0x100c4a5c]
and eax, 0xd5a8a03c
sub eax, 0x7bb003ce
or eax, 0x1ec32f9e
sub eax, 0x83b8b1ed
imul eax, eax, 0x400fce42
add eax, 0x3953cf4c
imul eax, eax, 0x45eb8f21
imul eax, eax, 0xce28d4d7
add eax, 0x3098bc5d
add eax, 0x58abec67
add eax, 0x8f3444f4
xor eax, 0x2be3327
or eax, 0x410d60fb
sub eax, 0xa1426d90
xor eax, 0xdddecd4
xor eax, 0x81ead94b
and eax, 0x810a2a95
imul eax, eax, 0xce7ccf4
add eax, 0x11df6733
xor eax, 0x4bbb844d
and eax, 0xce5fe868
add eax, 0x57cd6860
add eax, 0xe526e7ee
imul eax, eax, 0x9e676291
xor eax, 0xf1b899c3
add eax, 0x341db156
imul eax, eax, 0xfcac4ed3
sub eax, 0x3d138c5b
or eax, 0xacf15f2
imul eax, eax, 0x51df270f
imul eax, eax, 0x354379b9
xor eax, 0xd1e02aa3
and eax, 0x7fba1a4d
sub eax, 0x312d940
imul eax, eax, 0xbc92527a
mov esi, 0x13f22142
xor edx, edx
div esi
imul eax, eax, 0x8e6821e5
add eax, 0xee12f4ee
imul eax, eax, 0xe64922cc
sub eax, 0x455afe01
and eax, 0x9752c699
imul eax, eax, 0xc57407bd
or eax, 0xc5a86590
add eax, 0xb918ef1c
add eax, 0xca5bfb81
xor eax, 0x2ba78035
imul eax, eax, 0x60bef39c
add eax, 0xb4c5364d
sub eax, 0x933d63ef
or eax, 0x62a0fd2b
xor eax, 0x264f5cb5
and eax, 0x490f0b3a
add eax, 0xaf78560e
mov esi, 0xd208f208
xor edx, edx
div esi
mov esi, 0x78fb527e
xor edx, edx
div esi
sub eax, 0x34829304
and eax, 0xd1771d17
sub eax, 0x2092d31b
add eax, 0xf0fb9ea
xor eax, 0x4ca0a59
imul eax, eax, 0x22101c6c
mov esi, 0x6c9702bd
xor edx, edx
div esi
sub eax, 0x33e40bcd
mov esi, 0xea5eda8c
xor edx, edx
div esi
sub eax, 0x81a7020b
or eax, 0x7c501929
or eax, 0xfe324ec5
or eax, 0xbec5ee4e
mov esi, 0x4b55897e
xor edx, edx
div esi
xor eax, 0x9a90dfa4
imul eax, eax, 0x1894c000
add eax, 0x68c080e
mov edx, dword [ecx]
shr edx, 1
mov dword [ecx], edx
cmp eax, 0xf5d76806
jae 0x1004fa46
jmp 0x1004f5a1
mov eax, dword [0x100c4a60]
sub eax, dword [0x100c4a64]
or eax, 0x76941958
and eax, 0x8512c17e
add eax, 0xd41ababa
or eax, 0xdb548982
imul eax, eax, 0x369a3d86
xor eax, 0xe1c18c5f
sub eax, 0x7a4713b2
imul eax, eax, 0x864c5a0b
mov ecx, 0x25200504
xor edx, edx
div ecx
imul eax, eax, 0xf56122ea
mov ecx, 0xf6c7ad02
xor edx, edx
div ecx
mov ecx, 0xd6b46291
xor edx, edx
div ecx
mov ecx, 0x9a355254
xor edx, edx
div ecx
mov ecx, 0xb357b734
xor edx, edx
div ecx
sub eax, 0x6e2a586f
mov ecx, 0x93eee7eb
xor edx, edx
div ecx
or eax, 0xe9c5631
and eax, 0x7d4752bd
and eax, 0x5f5af439
and eax, 0x1b64e2a0
mov ecx, 0x75974573
xor edx, edx
div ecx
and eax, 0x1e209b91
imul eax, eax, 0xd16d50a5
xor eax, 0x8373a2cf
sub eax, 0x132aa1cd
and eax, 0x207baf44
xor eax, 0xa62b5410
xor eax, 0xda913110
and eax, 0xf39db020
and eax, 0x5d6f76f
add eax, 0x478fd2e4
xor eax, 0xc96b6f76
mov ecx, 0x4d8d8133
xor edx, edx
div ecx
sub eax, 0x43b94da4
xor eax, 0xf0726e
mov ecx, 0x29769726
xor edx, edx
div ecx
add eax, 0x53cdb949
add eax, 0x6b771a3c
sub eax, 0x12c41c34
add eax, 0xaae9bdce
or eax, 0x105f6037
and eax, 0x1a3084fc
and eax, 0xebec59a7
sub eax, 0x78950882
mov ecx, 0x61bec7e4
xor edx, edx
div ecx
imul eax, eax, 0x75c0f307
mov ecx, 0x7203bef3
xor edx, edx
div ecx
mov ecx, 0x900f99d4
xor edx, edx
div ecx
or eax, 0x74cc0089
sub eax, 0xe505a555
and eax, 0x2554fcd
mov ecx, 0x9391334d
xor edx, edx
div ecx
and eax, 0x20a89a03
add eax, 0x593d7095
and eax, 0x4e0d872d
and eax, 0xedd71ed8
add eax, 0x31cc98f8
imul eax, eax, 0xc3ca1da7
mov ecx, 0xddb396fd
xor edx, edx
div ecx
xor eax, 0x27ca1a0b
mov ecx, 0x39ecfb7d
xor edx, edx
div ecx
add eax, 0x919aa492
and eax, 0x2c085eb7
sub eax, 0x30be4c92
mov ecx, 0x6c06a437
xor edx, edx
div ecx
sub eax, 0x1bf5d784
or eax, 0xc9609657
sub eax, 0xbd0f27f5
sub eax, 0xf7671d57
or eax, 0x2fb7b3a0
add eax, 0x3770d35e
imul eax, eax, 0x5a51cc85
cmp eax, 0xbe950442
jae 0x1004fa55
mov ecx, dword [ebp - 0x18]
mov eax, dword [0x100c4a68]
and eax, dword [0x100c4a6c]
sub eax, 0xbbebf45b
mov esi, 0x9f265d91
xor edx, edx
div esi
mov esi, 0x47696dd2
xor edx, edx
div esi
imul eax, eax, 0x5b3186e5
or eax, 0xd342f214
and eax, 0xeebae06b
mov esi, 0xff4c2224
xor edx, edx
div esi
mov esi, 0x53292075
xor edx, edx
div esi
sub eax, 0xe1303267
and eax, 0x66a3ebf1
xor eax, 0x8388d540
mov esi, 0xdd4e2241
xor edx, edx
div esi
and eax, 0x9a408fed
imul eax, eax, 0xa4e926e8
sub eax, 0x12dec3e0
add eax, 0xd94109a9
imul eax, eax, 0xf85a334b
add eax, 0xf5759db7
or eax, 0xfc75d1fb
sub eax, 0x81517953
imul eax, eax, 0x97b33d51
sub eax, 0x7e7c780d
imul eax, eax, 0x693618a1
add eax, 0x38e652d9
imul eax, eax, 0xec15ca70
or eax, 0x6195f7a4
mov esi, 0xac6489d3
xor edx, edx
div esi
add eax, 0xf2409cf2
xor eax, 0xce64cd65
or eax, 0x478e8804
and eax, 0x810ca3ba
imul eax, eax, 0xc61905c0
sub eax, 0x3524c844
add eax, 0x5e0a2941
xor eax, 0x7888118e
xor eax, 0xf2bde51
imul eax, eax, 0x8a3595ea
and eax, 0x5f800d8c
imul eax, eax, 0x58692563
xor eax, 0x107124fa
mov esi, 0xe2f6eb89
xor edx, edx
div esi
and eax, 0x8f0b8fb
mov esi, 0xef152fec
xor edx, edx
div esi
imul eax, eax, 0x943c9fd3
and eax, 0x54d72b1d
and eax, 0xdb705079
mov esi, 0xe41dccf0
xor edx, edx
div esi
or eax, 0xd46f5aed
xor eax, 0xc4f4a6fd
xor eax, 0xfe7cd811
mov esi, 0x1df62254
xor edx, edx
div esi
or eax, 0x9ce01865
or eax, 0x66d1388d
and eax, 0x655b5ce
add eax, 0x50d5b62
and eax, 0xe627419e
add eax, 0x1847054
and eax, 0x8b4bce79
imul eax, eax, 0x6d64250a
add eax, 0x99d10e62
mov esi, 0xd1309b2c
xor edx, edx
div esi
sub eax, 0xd57bfa15
mov esi, 0x5dd64938
xor edx, edx
div esi
imul eax, eax, 0x38fbdad3
imul eax, eax, 0xdde1712e
sub eax, 0x682dbddd
add eax, 0xc799cba
sub eax, 0xc8d4a59e
add eax, 0x80b23a2b
mov esi, 0xbbb8868f
xor edx, edx
div esi
imul eax, eax, 0x356217ba
xor eax, 0xbeae1db6
mov edx, dword [ecx]
add edx, 1
mov dword [ecx], edx
cmp eax, 0x507c44f5
jbe 0x1004fa55
jmp 0x1004e72a
mov eax, dword [ebp - 0x1c]
mov al, byte [eax]
and al, 1
movzx eax, al
mov dword [ebp - 0x3c], eax
mov ecx, dword [ebp - 0xc]
xor ecx, ebp
call fcn.1006d02f
mov eax, dword [ebp - 0x3c]
lea esp, [ebp - 8]
pop esi
pop edi
pop ebp
ret
mov edx, dword [ebp - 0x10]
push eax
mov ecx, esp
sub esp, 0x1c
mov eax, esp
push eax
mov esi, esp
mov dword [ebp - 0x48], esi
push eax
mov esi, esp
mov dword [ebp - 0x44], esi
push eax
mov esi, esp
mov dword [ebp - 0x40], esi
mov dword [ecx], edx
xor ecx, ecx
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x1a
call fcn.100709f0
add esp, 0xc
call dword [sym.imp.KERNEL32.dll_GetLogicalDrives]
mov edx, dword [ebp - 0x48]
mov ecx, dword [ebp - 0x44]
mov esi, eax
mov eax, dword [ebp - 0x40]
mov dword [edx], esi
mov byte [ecx], 0
mov dword [eax], 0
jmp 0x1004e69d
jmp 0x1004e8db
jmp 0x1004ec5e
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov edx, dword [ebp - 0x18]
mov edx, dword [edx]
add edx, 0x41
mov byte [ecx], dl
mov cl, byte [ecx]
mov byte [eax], cl
mov byte [eax + 1], 0x3a
mov byte [eax + 2], 0x5c
mov byte [eax + 3], 0
sub esp, 8
mov dword [esp], 0xc
mov dword [esp + 4], 0x12
call fcn.10024db0
mov edx, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x20]
mov eax, esp
mov dword [eax + 4], edx
mov dword [eax], ecx
call fcn.1008dd30
mov ecx, dword [ebp - 0x20]
add esp, 8
lea eax, [0x100b8491]
sub esp, 8
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.1008dd40
mov ecx, dword [ebp - 0x30]
add esp, 8
mov eax, dword [ebp - 0x20]
mov ecx, dword [ecx]
sub esp, 8
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.1004dfb0
add esp, 8
jmp 0x1004efe7
mov eax, dword [ebp - 0x2c]
mov ecx, dword [eax]
shr ecx, 1
mov dword [eax], ecx
jmp 0x1004f3ed
mov eax, dword [ebp - 0x18]
mov ecx, dword [eax]
add ecx, 1
mov dword [eax], ecx
jmp 0x1004f766