Function at 0x10041ce0
Capabilities:
Encode data using xor
Get file attributes

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x34
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x14], eax
mov eax, dword [0x100c5328]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov eax, dword [0x100c46c0]
and eax, dword [0x100c46c4]
and eax, 0xc6ff2741
add eax, 0x79c8bc35
sub eax, 0xa980f005
imul eax, eax, 0x23f5bf98
or eax, 0xa19373eb
add eax, 0xe5e8e5ee
or eax, 0xae502061
or eax, 0x4b4cfeb2
sub eax, 0x3508e255
and eax, 0x5f676515
imul eax, eax, 0xbe805c26
or eax, 0xbde13b96
add eax, 0xa94a1e6c
add eax, 0xb196d7ce
xor eax, 0x1a00eaf4
imul eax, eax, 0x722092b1
imul eax, eax, 0xf7743afb
sub eax, 0x4f6484c3
sub eax, 0xd1698833
sub eax, 0x3a0d5338
and eax, 0x12844681
xor eax, 0x3f10883d
xor eax, 0x20b25b11
sub eax, 0x767da06
sub eax, 0x2405f9ff
and eax, 0xdb5fb29b
or eax, 0xdb03a7a6
sub eax, 0xccbc2af3
mov ecx, 0x231ab046
xor edx, edx
div ecx
or eax, 0xc502de4
sub eax, 0xa2ebcebf
or eax, 0xa55d8275
add eax, 0x21c9e97a
sub eax, 0xaeda7c25
add eax, 0x8eea5364
and eax, 0x91e10669
imul eax, eax, 0x6bb66985
and eax, 0x4450626
or eax, 0x1d2a9b6b
sub eax, 0xb2fa4130
or eax, 0xdf05b011
add eax, 0xeb515407
mov ecx, 0x8793a490
xor edx, edx
div ecx
imul eax, eax, 0x188344b5
and eax, 0xf314d7eb
sub eax, 0x924bf203
mov ecx, 0xa6b11920
xor edx, edx
div ecx
imul eax, eax, 0x230f8b09
or eax, 0x41463195
xor eax, 0xafcb6b77
xor eax, 0x5ab35ead
imul eax, eax, 0x39a58e22
add eax, 0x2a89dfbe
add eax, 0xa7315089
sub eax, 0xa3e9f740
or eax, 0xf62d31ae
or eax, 0xf156c5f8
and eax, 0x3efc5ec4
xor eax, 0x2f10aed8
mov ecx, 0xd648e6fa
xor edx, edx
div ecx
and eax, 0xffe599c0
add eax, 0x63e5ce92
and eax, 0xb98ee441
add eax, 0x7f09b235
sub eax, 0x66cc54ae
imul eax, eax, 0xa6b6b691
mov ecx, 0xe845c55
xor edx, edx
div ecx
and eax, 0x6387702f
add eax, 0xf2f93cde
sub eax, 0xce3e3173
imul eax, eax, 0xa981f7d3
xor eax, 0xdc26948d
cmp eax, 0x1f1d6bb7
je 0x10042de5
mov esi, dword [ebp - 0x14]
mov edi, dword [ebp - 0x18]
xor eax, eax
push eax
mov ecx, esp
mov dword [ebp - 0x30], ecx
push eax
mov ecx, esp
push eax
mov edx, esp
mov dword [ebp - 0x2c], edx
sub esp, 0x104
mov ebx, esp
mov dword [ebp - 0x28], ebx
sub esp, 0x104
mov ebx, esp
mov dword [ebp - 0x24], ebx
push eax
mov ebx, esp
mov dword [ebp - 0x20], ebx
mov dword [ecx], edi
mov dword [edx], esi
cmp dword [ecx], 0
setne cl
mov byte [ebp - 0x19], cl
cmp eax, 0x4b3c71
je 0x10041e9b
mov al, byte [ebp - 0x19]
test al, 1
jne 0x10041f78
jmp 0x10041ef6
mov eax, dword [ebp - 0x24]
xor ecx, ecx
sub esp, 0xc
mov dword [esp], 0
mov dword [esp + 4], eax
mov dword [esp + 8], 0x104
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
mov eax, dword [ebp - 0x24]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.SHLWAPI.dll_PathRemoveFileSpecA]
mov edx, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x28]
sub esp, 8
mov eax, esp
mov dword [eax + 4], edx
mov dword [eax], ecx
call fcn.1008dd30
mov ecx, dword [ebp - 0x28]
add esp, 8
lea eax, [0x100b848a]
sub esp, 8
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.1008dd40
mov ecx, dword [ebp - 0x28]
add esp, 8
mov eax, dword [ebp - 0x2c]
mov eax, dword [eax]
sub esp, 8
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.1008dd40
add esp, 8
jmp 0x1004230b
mov eax, dword [0x100c46d0]
or eax, dword [0x100c46d4]
mov ecx, 0x5b17d9d9
xor edx, edx
div ecx
imul eax, eax, 0x52d96de1
xor eax, 0xbec8a87a
add eax, 0xc047833d
mov ecx, 0x5afb255a
xor edx, edx
div ecx
mov ecx, 0x136d019f
xor edx, edx
div ecx
mov ecx, 0x2def2b65
xor edx, edx
div ecx
mov ecx, 0x2c6c419a
xor edx, edx
div ecx
imul eax, eax, 0x4e170a1a
or eax, 0x249be32d
xor eax, 0xbabcb3d7
sub eax, 0xa5618101
xor eax, 0xccbdd957
sub eax, 0x1e7a1d
sub eax, 0xb904712f
or eax, 0x10a66055
add eax, 0x7d8be9a0
or eax, 0x9c3d552b
add eax, 0xa655ccd9
and eax, 0xb40cfd1b
mov ecx, 0x7b33bd80
xor edx, edx
div ecx
xor eax, 0x4d5bec36
sub eax, 0x655dc94c
add eax, 0xb37414b4
add eax, 0x8891d13a
mov ecx, 0xd87c292e
xor edx, edx
div ecx
add eax, 0xcc14a79f
sub eax, 0xb0692276
mov ecx, 0xa474fb24
xor edx, edx
div ecx
add eax, 0x371f0d7c
sub eax, 0xff75602b
imul eax, eax, 0x98ce36f3
and eax, 0x71cb5278
mov ecx, 0xeeef0b9e
xor edx, edx
div ecx
or eax, 0x47008f5
sub eax, 0x3f28547c
mov ecx, 0xe979932
xor edx, edx
div ecx
and eax, 0x91777550
mov ecx, 0x669bb379
xor edx, edx
div ecx
add eax, 0xdf5170f8
or eax, 0x813e68a1
mov ecx, 0xa70b5f4c
xor edx, edx
div ecx
mov ecx, 0x2ddc97e4
xor edx, edx
div ecx
imul eax, eax, 0xc2e59295
add eax, 0xce970128
imul eax, eax, 0xe7ee0b34
xor eax, 0x41dd1792
xor eax, 0x3800cb7d
or eax, 0x26b44a28
xor eax, 0xafa88d2f
or eax, 0x125aad97
imul eax, eax, 0x3b1547f7
imul eax, eax, 0xd9d9a50
imul eax, eax, 0x48f08d46
add eax, 0x1aeda996
mov ecx, 0x98e10a95
xor edx, edx
div ecx
or eax, 0xba02366
imul eax, eax, 0xeccd36af
xor eax, 0xfdee1b4f
imul eax, eax, 0xbe9667aa
xor eax, 0x2038b51b
add eax, 0x146e630d
or eax, 0x776e4122
and eax, 0x34bf392c
xor eax, 0xa8b26fa2
and eax, 0x45e840de
mov ecx, 0x842ec80e
xor edx, edx
div ecx
and eax, 0x830d5c18
add eax, 0xd2bfbc1
xor eax, 0x70b1789a
mov ecx, 0xd848af0d
xor edx, edx
div ecx
add eax, 0x3792e484
cmp eax, 0x11f3cf67
jbe 0x10042dfb
mov ecx, dword [ebp - 0x28]
mov eax, dword [0x100c46d8]
and eax, dword [0x100c46dc]
xor eax, 0xb59d958d
sub eax, 0x6452f3f2
sub eax, 0xf218d568
sub eax, 0x50cbff66
add eax, 0xdcc68bbd
add eax, 0xa7ef3747
xor eax, 0x62152ae8
sub eax, 0xdd0c12f2
add eax, 0x4541c817
and eax, 0x61bcbafb
imul eax, eax, 0x2bf5d1a1
sub eax, 0x3d114929
and eax, 0xeb341efe
add eax, 0x59d47a08
sub eax, 0x7c21f618
imul eax, eax, 0x42f1797f
xor eax, 0x3c4d128a
mov esi, 0xbf79e1
xor edx, edx
div esi
sub eax, 0xbffdf58a
xor eax, 0xf333da8b
sub eax, 0xb6314897
and eax, 0x9414136a
xor eax, 0x81a964f0
add eax, 0x8cae3011
xor eax, 0xba49ba8d
add eax, 0xe49a5f20
and eax, 0xd8f0eab5
mov esi, 0x4e8da806
xor edx, edx
div esi
mov esi, 0x6d639ff4
xor edx, edx
div esi
and eax, 0x54cf87fb
and eax, 0xd526a9af
and eax, 0xf485a390
mov esi, 0x808bf15f
xor edx, edx
div esi
or eax, 0xe27d4c1
and eax, 0xfdc01add
sub eax, 0x3bd802d3
xor eax, 0x6b5eafd0
add eax, 0x818e98d7
and eax, 0xfc87ce85
or eax, 0xdd551bc3
or eax, 0x7b56c1a4
and eax, 0xa96db7b6
and eax, 0x64b6faa2
imul eax, eax, 0xd6001f4a
imul eax, eax, 0xad975dfe
add eax, 0xb42bca50
xor eax, 0xd9564d4e
and eax, 0x7fcf7d5
xor eax, 0xad2e1b2d
xor eax, 0xcb45d067
and eax, 0xfd039da5
imul eax, eax, 0x55f17e91
imul eax, eax, 0x3bd4dab
add eax, 0x5eb41e19
sub eax, 0xb1b6728c
imul eax, eax, 0x830c9dc0
or eax, 0x277b7408
xor eax, 0x7d70e1
add eax, 0x24a1fd5f
or eax, 0xd6800ce9
sub eax, 0x1cf71786
mov esi, 0x5417390a
xor edx, edx
div esi
or eax, 0x109f72fc
imul eax, eax, 0xb93736f
imul eax, eax, 0xaa738cbf
add eax, 0xcae20c5d
mov esi, 0xae7b2968
xor edx, edx
div esi
mov edx, eax
mov eax, dword [ebp - 0x2c]
and edx, 0x851e45d4
xor edx, 0x601aef7a
xor edx, 0x4d77128d
or edx, 0x1302dac2
imul edx, edx, 0x803ceb92
mov dword [ebp - 0x34], edx
mov edx, dword [eax]
sub esp, 8
mov eax, esp
mov dword [eax + 4], edx
mov dword [eax], ecx
call fcn.1008dd30
add esp, 8
mov eax, dword [ebp - 0x34]
cmp eax, 0xd05894e8
ja 0x10042dfb
jmp 0x1004230b
mov eax, dword [str.R3D_n]
sub eax, dword [0x100c46e4]
and eax, 0x6b3c2524
and eax, 0x3351bac4
sub eax, 0x2bfd776
mov ecx, 0xb89e4e7a
xor edx, edx
div ecx
mov ecx, 0xf8964310
xor edx, edx
div ecx
xor eax, 0xf3518b6a
imul eax, eax, 0x6e5e6983
sub eax, 0xb735278a
and eax, 0x3e68c2a2
or eax, 0x98cd2680
mov ecx, 0x80dad388
xor edx, edx
div ecx
mov ecx, 0x95105c53
xor edx, edx
div ecx
xor eax, 0xa54bfa3
imul eax, eax, 0xe9598b92
imul eax, eax, 0x64a9bdfc
or eax, 0x11a8bffe
xor eax, 0x2582f85e
add eax, 0x95f613be
imul eax, eax, 0xce20ad83
add eax, 0x170861e6
mov ecx, 0xc8996a73
xor edx, edx
div ecx
or eax, 0x792b6937
or eax, 0xae835f3a
or eax, 0x7eda71d3
mov ecx, 0xce3ee854
xor edx, edx
div ecx
mov ecx, 0x92d719aa
xor edx, edx
div ecx
sub eax, 0x97789eec
add eax, 0xb25408a4
mov ecx, 0x2e38d7ed
xor edx, edx
div ecx
mov ecx, 0xa1d07c11
xor edx, edx
div ecx
and eax, 0x50ad8e91
xor eax, 0x1f3d0eb3
xor eax, 0x60ee9da2
imul eax, eax, 0x5fa5735f
sub eax, 0x749c1ba1
sub eax, 0xae2834d0
sub eax, 0xdd82c0ef
add eax, 0x391a6938
sub eax, 0x188a72fb
mov ecx, 0x82e86932
xor edx, edx
div ecx
and eax, 0x6117a3f3
imul eax, eax, 0xf24be9bb
and eax, 0xa5456c25
or eax, 0xbd46d2f4
xor eax, 0x574012e0
imul eax, eax, 0x35dff020
and eax, 0x77ec8aff
mov ecx, 0x8d961d55
xor edx, edx
div ecx
imul eax, eax, 0x9e9ba701
and eax, 0xd2843508
add eax, 0xffca83a9
imul eax, eax, 0x2f8a56fc
xor eax, 0x5e4ac1cf
imul eax, eax, 0x7cbe6500
imul eax, eax, 0x81de6843
or eax, 0x5659ec9d
sub eax, 0xca44bf04
imul eax, eax, 0x3b849ac4
add eax, 0x5d0e6e33
sub eax, 0xd90c8409
mov ecx, 0xd3f6956d
xor edx, edx
div ecx
xor eax, 0xc376ac51
sub eax, 0xeb0cf100
and eax, 0xfbc6327b
xor eax, 0x2b994568
mov ecx, 0x98d59661
xor edx, edx
div ecx
add eax, 0x319dd9c6
sub eax, 0x3397a7db
xor eax, 0x3f7dc08a
and eax, 0x40e288d8
mov ecx, 0xe143ee1a
xor edx, edx
div ecx
mov ecx, 0x274b0716
xor edx, edx
div ecx
cmp eax, 0xe99bc53c
ja 0x10042e1a
mov eax, dword [0x100c46e8]
or eax, dword [0x100c46ec]
sub eax, 0xcb3affac
mov ecx, 0xf51a34c0
xor edx, edx
div ecx
add eax, 0x57c44148
or eax, 0x8492d886
xor eax, 0x487046e4
xor eax, 0x4c7a4fdb
xor eax, 0xb7f391ed
imul eax, eax, 0x31797081
xor eax, 0xb78f8850
and eax, 0x725ae3d
xor eax, 0x33896889
sub eax, 0x1e151dda
add eax, 0x9dbd8b45
xor eax, 0xe9fd995e
sub eax, 0xb57c32a7
and eax, 0x448b3b3c
imul eax, eax, 0x7d46a7d
or eax, 0x277b2fc
add eax, 0xce9831e0
mov ecx, 0x4f0ef1a2
xor edx, edx
div ecx
add eax, 0x8b43625f
and eax, 0x335de26d
xor eax, 0x5bedf013
mov ecx, 0x588d9ca1
xor edx, edx
div ecx
sub eax, 0xd1189861
mov ecx, 0x36cbce49
xor edx, edx
div ecx
and eax, 0x713ccb45
sub eax, 0x3f43c025
or eax, 0x1dee6197
sub eax, 0xdf82ac13
or eax, 0x37f693fe
xor eax, 0xe08de6d8
sub eax, 0xb1d126c4
add eax, 0x72859351
mov ecx, 0xe3b0156e
xor edx, edx
div ecx
add eax, 0xc0e7beff
or eax, 0xa0d1aeec
sub eax, 0xf4b58745
mov ecx, 0x6c25fbc6
xor edx, edx
div ecx
imul eax, eax, 0xbf10cbba
mov ecx, 0x2f608bb2
xor edx, edx
div ecx
add eax, 0x563ddafe
sub eax, 0xa075eacf
mov ecx, 0xea981ad9
xor edx, edx
div ecx
sub eax, 0xf0902c8d
and eax, 0x4f3c8f66
and eax, 0x1b3a5478
or eax, 0xf91b5644
and eax, 0x52e9d6b7
xor eax, 0xd1d517d4
mov ecx, 0x765433ce
xor edx, edx
div ecx
and eax, 0x8cca60a2
imul eax, eax, 0x4d8d96ad
or eax, 0x1177c28c
add eax, 0x4449c560
sub eax, 0x5669e468
add eax, 0x2064cdb0
or eax, 0x210b51a9
imul eax, eax, 0x54aed393
mov ecx, 0x9ef97e2c
xor edx, edx
div ecx
and eax, 0x7f2f2ca6
mov ecx, 0x5a179937
xor edx, edx
div ecx
mov ecx, eax
mov eax, dword [ebp - 0x28]
and ecx, 0x333378aa
xor ecx, 0x4c8f1f83
sub ecx, 0xd09f4e95
or ecx, 0xa2c67359
add ecx, 0x175726b7
imul ecx, ecx, 0x81010991
or ecx, 0xa98f059a
sub ecx, 0x14166674
xor ecx, 0x3ee137e7
sub ecx, 0x13a89c70
mov dword [ebp - 0x3c], ecx
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_GetFileAttributesA]
mov ecx, eax
mov eax, dword [ebp - 0x20]
mov dword [eax], ecx
sub esp, 8
mov dword [esp], 0x14
mov dword [esp + 4], 0x1a
call fcn.1000ec30
mov ecx, dword [ebp - 0x20]
add esp, 8
mov eax, dword [ebp - 0x3c]
mov ecx, dword [ecx]
mov dword [ebp - 0x38], ecx
cmp eax, 0x660a63e5
jb 0x100424d1
mov eax, dword [ebp - 0x38]
sub eax, 0xffffffff
je 0x100426ec
jmp 0x100426db
mov eax, dword [ebp - 0x38]
sub eax, 0x10
je 0x100426fa
jmp 0x10042708
mov eax, dword [ebp - 0x30]
mov dword [eax], 2
jmp 0x10042a6d
mov eax, dword [ebp - 0x30]
mov dword [eax], 1
jmp 0x10042a6d
mov eax, dword [0x100c46f0]
add eax, dword [0x100c46f4]
xor eax, 0x2d417fa7
mov ecx, 0x8c32c237
xor edx, edx
div ecx
mov ecx, 0xe8f8f1f2
xor edx, edx
div ecx
and eax, 0x968ad62f
mov ecx, 0xc4c4f3f7
xor edx, edx
div ecx
sub eax, 0xfe83d96d
xor eax, 0xe4b5e1d2
xor eax, 0x483b8290
add eax, 0x97d755aa
imul eax, eax, 0xec597545
and eax, 0xca852519
add eax, 0x472c1416
or eax, 0xc688f3
or eax, 0x8da9e13f
sub eax, 0x6627b02c
add eax, 0x697a2bf0
or eax, 0x7573a695
and eax, 0x3a90a648
and eax, 0xd1fd5ac6
imul eax, eax, 0xce8ecb7e
and eax, 0x5feab95a
sub eax, 0x55590c07
sub eax, 0xc253952e
and eax, 0xa94348ed
imul eax, eax, 0xddb2441c
and eax, 0x5edec825
mov ecx, 0xec352808
xor edx, edx
div ecx
or eax, 0x48db0c8d
add eax, 0xc81b27d6
imul eax, eax, 0xc111f5c9
add eax, 0x13e958c8
or eax, 0x32eddfd
mov ecx, 0x3cd3705c
xor edx, edx
div ecx
and eax, 0x37416f7b
or eax, 0x81bf894c
and eax, 0x7d2612a6
add eax, 0xf9e79de6
add eax, 0xf59d8785
sub eax, 0xf6ebea36
xor eax, 0xe0cb0609
xor eax, 0x550de04c
mov ecx, 0xdb08488a
xor edx, edx
div ecx
add eax, 0x1d25364a
or eax, 0x93c8e1af
imul eax, eax, 0x738f8a09
sub eax, 0xe5c85df9
imul eax, eax, 0x7c5a290e
sub eax, 0xf5236341
xor eax, 0x2216fee2
mov ecx, 0x428aff23
xor edx, edx
div ecx
imul eax, eax, 0xa32da91
add eax, 0xc77e7376
mov ecx, 0xd8ee514a
xor edx, edx
div ecx
add eax, 0x13f41def
imul eax, eax, 0x8ee25be5
xor eax, 0x98bc463a
imul eax, eax, 0x61d7f000
or eax, 0x395ec7a8
or eax, 0x4399e9fc
imul eax, eax, 0xcf81c848
or eax, 0xc8717f33
xor eax, 0x8f526d1
imul eax, eax, 0xad8dcd42
imul eax, eax, 0xc4d38dcc
or eax, 0xb57490cc
imul eax, eax, 0x27a4e93c
add eax, 0xe3666a7d
or eax, 0x7a854d43
mov ecx, 0x32910340
xor edx, edx
div ecx
xor eax, 0x47c86445
imul eax, eax, 0x6ee69287
or eax, 0x8855cbe4
cmp eax, 0x640cf71d
je 0x10042e4f
mov ecx, dword [ebp - 0x30]
mov eax, dword [0x100c46f8]
xor eax, dword [0x100c46fc]
xor eax, 0xd4426927
sub eax, 0x8bff61f1
or eax, 0xfd48e4cb
or eax, 0x17611dae
or eax, 0x25632505
imul eax, eax, 0xfe564b39
mov esi, 0x34d5123d
xor edx, edx
div esi
xor eax, 0xf9a98f6b
mov esi, 0xfe4eec85
xor edx, edx
div esi
or eax, 0xce6466e2
or eax, 0xaf325da0
add eax, 0xf8ae561d
add eax, 0x89cffdf9
or eax, 0x257e3bc4
sub eax, 0x3af7d71e
and eax, 0x71da6a96
and eax, 0x834d6646
and eax, 0x5b5ec25b
or eax, 0x9b357ba9
add eax, 0x5ef74797
add eax, 0x89726a6c
add eax, 0x33e9afa7
or eax, 0xdf625a30
xor eax, 0xd48618c8
sub eax, 0xaab75892
xor eax, 0xde72a3e1
and eax, 0x429b32ec
mov esi, 0x811c9e5c
xor edx, edx
div esi
xor eax, 0x752dbd18
imul eax, eax, 0xaf59ae52
xor eax, 0xfe816d90
or eax, 0x6c14a217
and eax, 0xe2bb3b30
sub eax, 0xddce3915
imul eax, eax, 0xda60b14e
imul eax, eax, 0x32a51e4c
or eax, 0x741843d0
sub eax, 0x738a490
and eax, 0x3f75bc4c
imul eax, eax, 0x28f22b31
and eax, 0x28c2b6aa
or eax, 0xa98fcc99
sub eax, 0xfc9157d3
xor eax, 0xd9ca2e27
sub eax, 0xb6ed84e0
mov esi, 0x2d32dc1
xor edx, edx
div esi
imul eax, eax, 0x583616ca
sub eax, 0x62d3e6d3
mov esi, 0xdbd8edd5
xor edx, edx
div esi
mov esi, 0x2de90b36
xor edx, edx
div esi
and eax, 0xa4ca645
add eax, 0xce25f5d6
or eax, 0x282eec87
sub eax, 0xb3eb90a0
xor eax, 0x446ed353
or eax, 0xcbe1e1d4
or eax, 0xb622b834
imul eax, eax, 0xe01c201b
or eax, 0x486f37c0
imul eax, eax, 0x28fdffb5
xor eax, 0xdf2cba9e
or eax, 0x9fea28d2
and eax, 0xdbafc5e2
sub eax, 0x45af6aba
xor eax, 0xc45a3364
and eax, 0x20d08f85
add eax, 0x27fab64d
add eax, 0x791d0b7d
mov esi, 0xf45d87e5
xor edx, edx
div esi
xor eax, 0xe8fcc52c
mov esi, 0x88286856
xor edx, edx
div esi
imul eax, eax, 0x8ee3ee2a
mov dword [ecx], 0
cmp eax, 0x4fda1bb5
jb 0x100428b8
jmp 0x10042a6d
mov eax, dword [0x100c4700]
xor eax, dword [0x100c4704]
and eax, 0x444fd6e8
imul eax, eax, 0x7e16518d
add eax, 0x1a750207
xor eax, 0x5ea81b43
or eax, 0xd538a194
or eax, 0xbb17c11b
xor eax, 0xc474d007
and eax, 0x66ec7d31
sub eax, 0xcda6a243
imul eax, eax, 0x61e559c5
add eax, 0x4539077
add eax, 0x96cadee2
or eax, 0x9631c95e
or eax, 0x5d3d9168
imul eax, eax, 0xb6bc3e5
xor eax, 0x3ee62718
sub eax, 0xe9a5de0c
or eax, 0xc129ad4f
sub eax, 0xa6f075bf
xor eax, 0xfb5bd5da
mov ecx, 0x6e88a979
xor edx, edx
div ecx
mov ecx, 0x77bace68
xor edx, edx
div ecx
xor eax, 0x21e8678d
or eax, 0xda390961
mov ecx, 0xb324e2b8
xor edx, edx
div ecx
and eax, 0xc0b27370
add eax, 0x92301774
imul eax, eax, 0x350f292a
xor eax, 0xe7faae69
or eax, 0xb557a09d
sub eax, 0xabe827fa
imul eax, eax, 0xa68fe41d
sub eax, 0xd63f9ea4
and eax, 0x893f0be0
xor eax, 0x4aea3a8c
xor eax, 0xd87b7ed9
imul eax, eax, 0x319155dc
add eax, 0xd7dd1c25
add eax, 0xedd55374
xor eax, 0x4021ef3c
sub eax, 0x1cf846d9
or eax, 0xa07766fa
sub eax, 0x921ab77e
or eax, 0x35f49072
or eax, 0x4a6a228e
mov ecx, 0xf021c8d4
xor edx, edx
div ecx
mov ecx, 0x5aa4e60f
xor edx, edx
div ecx
sub eax, 0xc8191f1b
and eax, 0x216bbaa5
xor eax, 0x5ce95a53
add eax, 0x5279080f
or eax, 0xacabfdcb
imul eax, eax, 0x3042c5e6
and eax, 0x126791a3
add eax, 0x5aa8a7d2
xor eax, 0x8172c22e
xor eax, 0x6f3ca01f
add eax, 0x3684577c
or eax, 0x58028646
add eax, 0x6cf2c33c
or eax, 0xaec78d52
or eax, 0xdaeaea0f
imul eax, eax, 0x33726721
and eax, 0x9cea141e
xor eax, 0x9c7ddf3c
mov ecx, 0x8ae7dac7
xor edx, edx
div ecx
imul eax, eax, 0x42bfd35a
imul eax, eax, 0x4e399202
and eax, 0xc58b4ba1
add eax, 0x5feadbef
xor eax, 0x2a93713a
mov ecx, 0x37900998
xor edx, edx
div ecx
cmp eax, 0xb58c06a9
ja 0x10042e5d
mov ecx, dword [ebp - 0x30]
mov eax, dword [0x100c4708]
imul eax, dword [0x100c470c]
sub eax, 0x31c3fb10
sub eax, 0x2e075838
or eax, 0x8a293bca
or eax, 0x60b4d4af
or eax, 0x10a2cc0c
mov esi, 0x356be075
xor edx, edx
div esi
imul eax, eax, 0x7d06aaa8
mov esi, 0xeb40c2ad
xor edx, edx
div esi
mov esi, 0x32137333
xor edx, edx
div esi
or eax, 0x4e69f95e
xor eax, 0x186ac289
imul eax, eax, 0x7944c263
imul eax, eax, 0x59f0ee36
xor eax, 0xbd472d7b
add eax, 0xd80b4756
xor eax, 0x31d76513
imul eax, eax, 0x2abd66e8
or eax, 0xca5d847
sub eax, 0xed06f9e2
and eax, 0xa75e3785
and eax, 0xd191ca77
and eax, 0x89ab0834
mov esi, 0xbe7dcaa3
xor edx, edx
div esi
or eax, 0xe7cb2b35
and eax, 0x10756323
and eax, 0xa035c7fb
imul eax, eax, 0x86788875
or eax, 0x5a4ec1ba
and eax, 0xfcefaf03
mov esi, 0x1d396656
xor edx, edx
div esi
or eax, 0x9afe811a
and eax, 0xa8c5943e
xor eax, 0xf4356720
sub eax, 0xd95bfbc9
xor eax, 0xbfba3df4
or eax, 0x681f4be1
and eax, 0x97964652
sub eax, 0x856af975
mov esi, 0xc732c8f8
xor edx, edx
div esi
or eax, 0x7de454e9
mov esi, 0x89695301
xor edx, edx
div esi
or eax, 0x744a16d3
add eax, 0xaf517288
mov esi, 0xae89cf2e
xor edx, edx
div esi
xor eax, 0xfcc74bad
or eax, 0x836f106
imul eax, eax, 0x9a6b10a4
sub eax, 0x3dfa4cf5
xor eax, 0x2650b30b
mov esi, 0x5043dcae
xor edx, edx
div esi
and eax, 0xfee52712
or eax, 0xfb69e8cf
imul eax, eax, 0x359c9454
and eax, 0xaefea4fa
add eax, 0xce0ed166
and eax, 0x96e50a06
xor eax, 0x1e9780a7
mov esi, 0x1fb3f7a8
xor edx, edx
div esi
imul eax, eax, 0x8d71fd6e
sub eax, 0x7df962f8
xor eax, 0xf930b911
and eax, 0xd3c7a05c
imul eax, eax, 0x2608a039
and eax, 0x69cce07
or eax, 0xc248c884
and eax, 0x8b9424d8
imul eax, eax, 0x41dd88f7
imul eax, eax, 0x2837246e
xor eax, 0xb1a3406b
imul eax, eax, 0x252d009f
sub eax, 0xd7dc2d38
mov esi, 0xb13aeab4
xor edx, edx
div esi
mov ecx, dword [ecx]
mov dword [ebp - 0x40], ecx
cmp eax, 0xa61d4db8
ja 0x10042c11
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.1006d02f
mov eax, dword [ebp - 0x40]
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
mov ecx, dword [ebp - 0x14]
mov esi, dword [ebp - 0x18]
push eax
push eax
mov edx, esp
push eax
mov eax, esp
mov dword [edx], esi
mov dword [eax], ecx
jmp 0x10041e9b
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x2c]
mov edx, dword [eax]
sub esp, 8
mov eax, esp
mov dword [eax + 4], edx
mov dword [eax], ecx
call fcn.1008dd30
add esp, 8
jmp 0x10042140
mov eax, dword [ebp - 0x28]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_GetFileAttributesA]
mov ecx, eax
mov eax, dword [ebp - 0x20]
mov dword [eax], ecx
sub esp, 8
mov dword [esp], 0x14
mov dword [esp + 4], 0x1a
call fcn.1000ec30
add esp, 8
jmp 0x100424d1
mov eax, dword [ebp - 0x30]
mov dword [eax], 0
jmp 0x100428b8
jmp 0x10042c11