Function at 0x10048c70
Capabilities:
Encode data using xor
Get disk information

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
sub esp, 0x3c
mov eax, dword [ebp + 8]
mov dword [ebp - 0x10], eax
mov eax, dword [0x100bf198]
xor eax, ebp
mov dword [ebp - 0xc], eax
mov eax, dword [0x100be814]
sub eax, dword [0x100be818]
or eax, 0x33506755
xor eax, 0x97e908d3
imul eax, eax, 0xa2ead9e9
xor eax, 0xcab44f15
xor eax, 0x1993d791
add eax, 0xcb46aa59
sub eax, 0x7664f31f
or eax, 0xcd3092cc
xor eax, 0xc14c9774
imul eax, eax, 0xde10598c
mov ecx, 0x702c7d51
xor edx, edx
div ecx
sub eax, 0xd2c4623d
sub eax, 0x1432683
add eax, 0x909d9db8
add eax, 0x294f68a6
mov ecx, 0x77c06d83
xor edx, edx
div ecx
xor eax, 0x267501e9
xor eax, 0xdd61d33d
mov ecx, 0xadb75520
xor edx, edx
div ecx
mov ecx, 0x34d64580
xor edx, edx
div ecx
imul eax, eax, 0xff94b991
and eax, 0xdf83ab78
and eax, 0x12090dec
mov ecx, 0xcb07bbba
xor edx, edx
div ecx
and eax, 0xabf92686
mov ecx, 0x9b3dd89a
xor edx, edx
div ecx
or eax, 0xf14b3dba
add eax, 0x87404558
xor eax, 0x12e1ec13
or eax, 0x50d5baa2
sub eax, 0x211dfb3d
mov ecx, 0x98518fe6
xor edx, edx
div ecx
and eax, 0xb9417219
sub eax, 0x7308aa31
mov ecx, 0xd0c62d20
xor edx, edx
div ecx
imul eax, eax, 0xf0125933
imul eax, eax, 0x5fa4c74b
imul eax, eax, 0xf71eeeb7
and eax, 0x1d6bd453
mov ecx, 0x3d88607f
xor edx, edx
div ecx
sub eax, 0x8e91d3d4
or eax, 0xcfc039c1
or eax, 0xe94ae506
sub eax, 0x1ac57860
sub eax, 0x95e1a676
add eax, 0xdced095a
and eax, 0x79858eb7
mov ecx, 0xa25df6d5
xor edx, edx
div ecx
sub eax, 0x58c66499
xor eax, 0xba60580a
xor eax, 0xa23f42cb
sub eax, 0x6f18bf46
sub eax, 0xfc983fc3
add eax, 0x7a85b60f
or eax, 0x93f7753c
or eax, 0x3d34d540
or eax, 0x5902d426
sub eax, 0x439d609b
and eax, 0x82b2326c
xor eax, 0xe9db0691
or eax, 0x2752acf9
and eax, 0x5e658859
add eax, 0x46b210d6
mov ecx, 0x8af88a87
xor edx, edx
div ecx
sub eax, 0xae2e4f72
or eax, 0x2ec15550
imul eax, eax, 0x500fb419
imul eax, eax, 0x909d2fe6
imul eax, eax, 0x775d8913
or eax, 0x9977d435
sub eax, 0xe27e2bb
add eax, 0xbe44533d
cmp eax, 0x2a0c91f2
jbe 0x1004a0ac
mov edx, dword [ebp - 0x10]
mov eax, 0x998f625
mov dword [ebp - 0x14], eax
push eax
mov ecx, esp
mov dword [ebp - 0x30], ecx
sub esp, 0x1c
mov eax, esp
push eax
mov esi, esp
mov dword [ebp - 0x2c], esi
push eax
mov edi, esp
mov dword [ebp - 0x1c], edi
push eax
mov edi, esp
mov dword [ebp - 0x18], edi
push eax
mov edi, esp
mov dword [ebp - 0x28], edi
push eax
mov edi, esp
mov dword [ebp - 0x24], edi
sub esp, 0x104
mov edi, esp
mov dword [ebp - 0x20], edi
mov dword [ecx], edx
xor ecx, ecx
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x1a
call fcn.1006a950
add esp, 0xc
call dword [sym.imp.KERNEL32.dll_GetLogicalDrives]
mov edx, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x18]
mov edi, eax
mov eax, dword [ebp - 0x14]
mov dword [esi], edi
mov byte [edx], 0
mov dword [ecx], 0
cmp eax, 0xcf238f13
ja 0x10048e3b
jmp 0x10048ec8
mov eax, dword [ebp - 0x18]
cmp dword [eax], 0x1a
jge 0x10049d11
mov eax, dword [0x100be824]
or eax, dword [0x100be828]
add eax, 0xa40bbf84
xor eax, 0x4393ae14
or eax, 0x735b2e55
mov ecx, 0x3804758a
xor edx, edx
div ecx
add eax, 0x2c0c64fd
add eax, 0xa1839e04
and eax, 0x27288e58
sub eax, 0x117749d6
sub eax, 0x8d59f81b
xor eax, 0xa7fb3e11
imul eax, eax, 0x286784ef
add eax, 0xd63d4b0e
or eax, 0x1a28a58a
and eax, 0x7f41b4ee
or eax, 0x821e8a0d
or eax, 0x2eb6bd96
and eax, 0xe4faf3a4
xor eax, 0x247dbfd0
and eax, 0xede830c
or eax, 0xe7914225
xor eax, 0x5afdfeb2
imul eax, eax, 0x5b58fd71
imul eax, eax, 0x1fcc99da
add eax, 0xe5084c91
or eax, 0x98f27a6a
add eax, 0x53c885a7
sub eax, 0x681197dd
sub eax, 0xe8e08a60
mov ecx, 0xb222a2a9
xor edx, edx
div ecx
imul eax, eax, 0xca259b42
sub eax, 0xa9b1d7b9
sub eax, 0x1b367f7b
or eax, 0x95cbc926
or eax, 0xb561ca7
sub eax, 0x87071c33
sub eax, 0xbc8ef153
and eax, 0x3d2aa5a7
and eax, 0x28fc6eb8
or eax, 0xa878cf1c
or eax, 0x725b8e10
and eax, 0x288b65fc
xor eax, 0x42c629ac
and eax, 0xcdc373fd
xor eax, 0xbda6493b
mov ecx, 0x3b70fe03
xor edx, edx
div ecx
and eax, 0x13e2144a
sub eax, 0x910ab026
and eax, 0xe6fd256c
or eax, 0xdcaf3f0f
sub eax, 0x738b2451
imul eax, eax, 0xd61b95e
or eax, 0xbbaaae7f
imul eax, eax, 0x46568293
imul eax, eax, 0xee770457
add eax, 0xf2d3fdd9
sub eax, 0x86aaa359
sub eax, 0x2d6239cf
xor eax, 0x4de6dd0c
xor eax, 0xac15c256
mov ecx, 0x3bf989a1
xor edx, edx
div ecx
imul eax, eax, 0x4464c712
and eax, 0xf8767780
or eax, 0xbee8446c
and eax, 0xd0077cdb
sub eax, 0x4ea61577
imul eax, eax, 0x30a24f8f
add eax, 0x5d68252a
add eax, 0x743b6ba7
imul eax, eax, 0x7cded7d6
and eax, 0x5e255829
sub eax, 0x9343a993
imul eax, eax, 0x6fb48cd1
cmp eax, 0x6ad493f1
je 0x1004a10c
mov ecx, dword [ebp - 0x2c]
mov eax, dword [0x100be82c]
sub eax, dword [0x100be830]
sub eax, 0xd571a93d
mov esi, 0x7b3c6be5
xor edx, edx
div esi
or eax, 0xafe0b37a
add eax, 0x765bc3a1
or eax, 0x988c2cd4
and eax, 0xdafb1d58
or eax, 0x2d83ef38
xor eax, 0xa03e8926
or eax, 0x51a57898
add eax, 0x3a81d1d2
mov esi, 0x24564062
xor edx, edx
div esi
and eax, 0x37f572d5
imul eax, eax, 0x928045c6
imul eax, eax, 0x8af14190
sub eax, 0x81336921
or eax, 0x35ecb3d4
imul eax, eax, 0x685f4054
and eax, 0xddbafa27
imul eax, eax, 0xa2a533d3
add eax, 0x4dc627e4
imul eax, eax, 0x6df19d02
imul eax, eax, 0xde0e630
imul eax, eax, 0xc8731480
mov esi, 0x14221988
xor edx, edx
div esi
sub eax, 0x77c831f3
add eax, 0x2a8eb97c
xor eax, 0x752164c3
xor eax, 0xe4a6ea5d
add eax, 0x3be330aa
sub eax, 0x3adeb7c5
or eax, 0xd3c20b29
mov esi, 0xb9d5f77f
xor edx, edx
div esi
imul eax, eax, 0x2b999d46
and eax, 0x3abfa910
or eax, 0xed574dae
sub eax, 0x16071156
and eax, 0xc18a8dd3
add eax, 0xc4d66cdb
and eax, 0xfd1d67ec
mov esi, 0x50afeffd
xor edx, edx
div esi
or eax, 0x5144651f
mov esi, 0x903fda26
xor edx, edx
div esi
and eax, 0x808e423e
add eax, 0xbcd50323
imul eax, eax, 0xbefaa109
add eax, 0xe0e0db4f
sub eax, 0x83d8289a
and eax, 0x3b7cb2b4
imul eax, eax, 0xcfd81a11
or eax, 0xd26f0f35
imul eax, eax, 0x1abbe35f
xor eax, 0x36311cb5
mov esi, 0xeab3224b
xor edx, edx
div esi
mov esi, 0x24175b0b
xor edx, edx
div esi
sub eax, 0x9163e6c3
mov esi, 0xb0d51447
xor edx, edx
div esi
add eax, 0xa3177785
sub eax, 0x5128341c
or eax, 0x3ef4f92f
and eax, 0x526e9672
add eax, 0x1399f926
sub eax, 0xf088116
imul eax, eax, 0x52d6d452
add eax, 0xd7748eea
add eax, 0xdea2be4d
sub eax, 0xbc7a89f3
and eax, 0x75fc44b3
sub eax, 0xe38ec8d7
xor eax, 0x65f43d16
or eax, 0x68ff8311
xor eax, 0xc0c334a3
sub eax, 0xb86c9030
mov ecx, dword [ecx]
and ecx, 1
cmp ecx, 1
sete cl
mov byte [ebp - 0x31], cl
cmp eax, 0x58eb4fb6
jae 0x1004906d
mov al, byte [ebp - 0x31]
test al, 1
jne 0x1004923c
jmp 0x1004998a
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov edx, dword [ebp - 0x18]
mov edx, dword [edx]
add edx, 0x41
mov byte [ecx], dl
mov cl, byte [ecx]
mov byte [eax], cl
mov byte [eax + 1], 0x3a
mov byte [eax + 2], 0x5c
mov byte [eax + 3], 0
sub esp, 8
mov dword [esp], 0xc
mov dword [esp + 4], 0x12
call fcn.10022080
mov edx, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x20]
mov eax, esp
mov dword [eax + 4], edx
mov dword [eax], ecx
call fcn.10087c90
mov ecx, dword [ebp - 0x20]
add esp, 8
lea eax, [0x100b2491]
sub esp, 8
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.10087ca0
mov ecx, dword [ebp - 0x30]
add esp, 8
mov eax, dword [ebp - 0x20]
mov ecx, dword [ecx]
sub esp, 8
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.10048770
add esp, 8
cmp eax, 0
je 0x10049634
mov eax, dword [0x100be834]
and eax, dword [0x100be838]
or eax, 0x9cf905c2
or eax, 0x73c72488
and eax, 0x3747292d
sub eax, 0x2ea43fd5
sub eax, 0x7e45d723
add eax, 0x15f0b6b1
imul eax, eax, 0x2d8ccb48
mov ecx, 0xf4dc72e4
xor edx, edx
div ecx
mov ecx, 0xa6c39c4f
xor edx, edx
div ecx
sub eax, 0xf30b2253
and eax, 0x9e102bc9
add eax, 0x859031ea
and eax, 0x9cf4138d
sub eax, 0xde64f3c8
or eax, 0x87e6db07
and eax, 0xd5ac2fd9
xor eax, 0xf527ab00
imul eax, eax, 0x59d92bdc
imul eax, eax, 0xd0fbbbb1
xor eax, 0xf2b1688e
mov ecx, 0x9d067f51
xor edx, edx
div ecx
mov ecx, 0xb059e6c1
xor edx, edx
div ecx
imul eax, eax, 0x913f1e29
xor eax, 0x414c4044
sub eax, 0x6eafe581
xor eax, 0x1b466f05
xor eax, 0xc8bdf425
or eax, 0xa3debc66
sub eax, 0xf8e9b451
imul eax, eax, 0x762ce5a2
add eax, 0x978e5dee
mov ecx, 0xbbdf4b16
xor edx, edx
div ecx
sub eax, 0xb1f1c63e
imul eax, eax, 0xc791a001
imul eax, eax, 0x3cfa1733
add eax, 0x4ef2787e
and eax, 0x98b7e46c
mov ecx, 0xb3ec5794
xor edx, edx
div ecx
xor eax, 0x34579c40
imul eax, eax, 0x18d0b6
xor eax, 0x85efc8ce
or eax, 0x273f0234
or eax, 0x65f8473
imul eax, eax, 0x9f695a75
imul eax, eax, 0x6e9040eb
imul eax, eax, 0xf71410b1
mov ecx, 0x4a99dd14
xor edx, edx
div ecx
and eax, 0x7790624
sub eax, 0xfdb5cda1
and eax, 0x7f476260
mov ecx, 0xf4d0543e
xor edx, edx
div ecx
and eax, 0xd97802cb
imul eax, eax, 0xe099e4cc
xor eax, 0xa7b91239
and eax, 0xd163c9fc
add eax, 0x57925ef
sub eax, 0x3e3dc31a
or eax, 0xde978b3
and eax, 0x88ec0fa8
sub eax, 0xc5fafe53
imul eax, eax, 0x632191f2
mov ecx, 0xcc271bf0
xor edx, edx
div ecx
sub eax, 0xda0f04d8
mov ecx, 0xd9fad6e7
xor edx, edx
div ecx
imul eax, eax, 0xd334d534
or eax, 0x3eff963f
imul eax, eax, 0xe65d5128
or eax, 0x3084a63b
add eax, 0xf93a05c1
mov ecx, 0xd54f52d7
xor edx, edx
div ecx
mov ecx, 0x2782a251
xor edx, edx
div ecx
imul eax, eax, 0x1f6c8fbc
cmp eax, 0x7e3ecd5e
ja 0x1004a111
mov ecx, dword [ebp - 0x1c]
mov eax, dword [0x100be83c]
or eax, dword [0x100be840]
mov esi, 0xb1b2eb5e
xor edx, edx
div esi
xor eax, 0x757136ba
xor eax, 0xd88a1df
xor eax, 0xe12214ff
and eax, 0xf8c459a9
add eax, 0x3628b3b0
imul eax, eax, 0xbc778517
mov esi, 0xf423e3ec
xor edx, edx
div esi
imul eax, eax, 0xecbdd214
add eax, 0xa036bb6d
mov esi, 0xbfc4441a
xor edx, edx
div esi
or eax, 0x9ce8cbf4
mov esi, 0xddd4f522
xor edx, edx
div esi
sub eax, 0x40a53500
and eax, 0xd94d87c5
or eax, 0x12db5235
sub eax, 0x81f145ae
and eax, 0xfa531e43
sub eax, 0x343d8cac
imul eax, eax, 0xf7fcfe38
imul eax, eax, 0xc047f54c
and eax, 0x2474b0b6
xor eax, 0xea65f437
mov esi, 0xdab2ed5
xor edx, edx
div esi
sub eax, 0x90979130
sub eax, 0x679be69c
and eax, 0xe15e1f74
and eax, 0xfbe8089f
xor eax, 0xcc75effb
sub eax, 0x604f7cda
add eax, 0x6159e6d6
add eax, 0x79ad54f1
imul eax, eax, 0x9b007569
and eax, 0xda0cb3f0
or eax, 0x945362e0
mov esi, 0x61799ef2
xor edx, edx
div esi
imul eax, eax, 0xb75bec92
or eax, 0x77c5e4d4
add eax, 0x39fe8150
xor eax, 0x7beee56d
or eax, 0x8b571e07
and eax, 0x58e40d96
add eax, 0xf6132ef0
or eax, 0xeb09b15b
mov esi, 0x48475547
xor edx, edx
div esi
and eax, 0x1a5fc95e
sub eax, 0xa9a0606d
imul eax, eax, 0x9108a6dd
or eax, 0x6eed70c3
sub eax, 0xc3dd9af5
xor eax, 0x8976fd5c
or eax, 0xb40c0147
add eax, 0x85a23f3e
sub eax, 0x330e365c
add eax, 0x7789e26b
and eax, 0xdf2574a7
xor eax, 0x7fd270d
or eax, 0xd5ac0c0a
add eax, 0xa1ec2b0e
add eax, 0x1e931a21
xor eax, 0x4aedccaf
sub eax, 0x6fdead15
xor eax, 0x2014c8a3
sub eax, 0x9c086991
sub eax, 0xab290be8
and eax, 0xe18fa139
or eax, 0xe8d460b8
xor eax, 0x3cba20a7
xor eax, 0x2bcfde0c
mov esi, 0x2e386082
xor edx, edx
div esi
and eax, 0xebd2871e
or eax, 0xed5881de
mov byte [ecx], 1
cmp eax, 0x95867be9
jb 0x1004a111
jmp 0x10049d11
mov eax, dword [0x100be844]
xor edx, edx
div dword [0x100be848]
xor eax, 0xa5cb9dd3
mov ecx, 0xa9dfa10b
xor edx, edx
div ecx
or eax, 0x455a0c64
and eax, 0x668b6a17
add eax, 0x2b93fe23
mov ecx, 0xb8fb0e32
xor edx, edx
div ecx
add eax, 0xdea29315
sub eax, 0x26af4842
xor eax, 0x28cf8c7b
or eax, 0x57a2360c
and eax, 0xd35c2076
add eax, 0xaa1bbb71
or eax, 0x7153073f
sub eax, 0xd1e1eb17
add eax, 0xc0cf5dd6
sub eax, 0xe3734dd7
sub eax, 0x285b552c
xor eax, 0xed8b9ef8
or eax, 0xce15cbca
imul eax, eax, 0xb70bc90c
xor eax, 0xdd110e07
imul eax, eax, 0x9f39175e
and eax, 0xb1566bbf
xor eax, 0x8b65fc70
sub eax, 0x62243da4
sub eax, 0x26cdb7ce
sub eax, 0xbb1a8df4
or eax, 0x256d1591
xor eax, 0x44a55da5
imul eax, eax, 0x566fb13f
add eax, 0xc02519ae
sub eax, 0xd2257b2a
sub eax, 0xdf151933
add eax, 0x19d0b29
and eax, 0x2f883105
add eax, 0x31af5641
xor eax, 0xf2318e6
add eax, 0xcb736f10
add eax, 0x996b4954
and eax, 0x8cd42227
sub eax, 0xdad836be
sub eax, 0x9efacf26
xor eax, 0x9c53c566
xor eax, 0x8c60b5a8
and eax, 0x53ce06a9
sub eax, 0xade4d210
mov ecx, 0x7a846a89
xor edx, edx
div ecx
sub eax, 0x843545f
mov ecx, 0x26c15e07
xor edx, edx
div ecx
xor eax, 0xa3c7e1f2
imul eax, eax, 0x70ad3363
sub eax, 0x217b8b85
or eax, 0x3030ab3
mov ecx, 0x72255bde
xor edx, edx
div ecx
add eax, 0xf272932e
sub eax, 0x3c01ff57
sub eax, 0xcbb1662c
imul eax, eax, 0x64f7ce5e
add eax, 0xc8b9918e
or eax, 0x9ee19f8c
sub eax, 0x930233f2
imul eax, eax, 0x92ddf2f4
mov ecx, 0xb6988c3e
xor edx, edx
div ecx
or eax, 0x5c98af0c
and eax, 0x8a24b5b6
and eax, 0x6aaf257e
mov ecx, 0x68941810
xor edx, edx
div ecx
or eax, 0xffc7c795
sub eax, 0x62b652e3
add eax, 0xf84e74a
and eax, 0x1391a783
add eax, 0x58887d89
cmp eax, 0x7af5f930
ja 0x1004a11c
mov eax, dword [0x100be84c]
xor edx, edx
div dword [0x100be850]
and eax, 0xb0743dde
add eax, 0x9a94304c
or eax, 0xa22a5ec1
add eax, 0x1ee9d718
imul eax, eax, 0xbc755595
or eax, 0x48f9429a
imul eax, eax, 0xde4d9175
sub eax, 0x9d8a63b1
imul eax, eax, 0xfb6b5136
xor eax, 0x55008839
and eax, 0x52ba2800
imul eax, eax, 0x443bba23
xor eax, 0xccd2b6ea
and eax, 0x7b5bc501
imul eax, eax, 0x742fea65
xor eax, 0xfc39cff6
and eax, 0x96c3dd3f
and eax, 0x3a17db0d
sub eax, 0xcf750413
xor eax, 0x8a5d5942
mov ecx, 0x4574af8
xor edx, edx
div ecx
add eax, 0x88820ece
and eax, 0x1eff307a
sub eax, 0x85263527
xor eax, 0x7777ec32
sub eax, 0x6e4056d5
xor eax, 0x81de1605
and eax, 0xf0e1ef8a
mov ecx, 0x79700a4e
xor edx, edx
div ecx
xor eax, 0xf8ee3564
mov ecx, 0xf784397c
xor edx, edx
div ecx
add eax, 0x45bf7017
xor eax, 0x65cc8961
sub eax, 0x69272ce3
sub eax, 0xfe9411ef
mov ecx, 0x68238965
xor edx, edx
div ecx
add eax, 0x4938d943
imul eax, eax, 0x19f94039
mov ecx, 0x6c02f8e9
xor edx, edx
div ecx
and eax, 0xc3b9d473
or eax, 0xf4b12fb3
xor eax, 0xede060db
and eax, 0xf1107c6f
imul eax, eax, 0xd1fe7030
xor eax, 0xd37c1de5
add eax, 0xcd03c559
and eax, 0xfc1c938b
xor eax, 0xb7c06929
add eax, 0xeb44a269
xor eax, 0x182fb073
mov ecx, 0x45ed4ba8
xor edx, edx
div ecx
add eax, 0xbefa5d20
sub eax, 0x3a70e7ea
and eax, 0x6834da58
imul eax, eax, 0x5511bf7b
and eax, 0xca9139a4
xor eax, 0x9f4848f7
imul eax, eax, 0x5fb91ffd
or eax, 0x3f247c71
xor eax, 0xfca5f2c7
imul eax, eax, 0x6b36b0c9
and eax, 0x672070fd
imul eax, eax, 0xf3231267
imul eax, eax, 0xd9d787f2
xor eax, 0x421f4e48
xor eax, 0x1dc842ad
imul eax, eax, 0x968dff10
mov ecx, 0xebb17364
xor edx, edx
div ecx
sub eax, 0x1b9bfd3a
mov ecx, 0xfacce782
xor edx, edx
div ecx
imul eax, eax, 0x9d897717
imul eax, eax, 0x2ee2b491
cmp eax, 0x9247f684
je 0x1004a11c
jmp 0x1004998a
mov eax, dword [0x100be854]
sub eax, dword [0x100be858]
imul eax, eax, 0xa2131036
xor eax, 0xa687f34
add eax, 0xd34ff6d1
sub eax, 0x168464a5
sub eax, 0xda193f43
mov ecx, 0xe1c6d0c
xor edx, edx
div ecx
sub eax, 0x40f7874b
or eax, 0xb4b9f757
imul eax, eax, 0xf3996387
and eax, 0xfb501c66
sub eax, 0x806da577
mov ecx, 0x387b023a
xor edx, edx
div ecx
mov ecx, 0xb75eec08
xor edx, edx
div ecx
mov ecx, 0xa12fd821
xor edx, edx
div ecx
or eax, 0x11c4ae3c
sub eax, 0x2b289465
sub eax, 0xcf8f0a97
and eax, 0xb8711e0f
and eax, 0x1ed34d40
add eax, 0x6dab6f5
mov ecx, 0xa4e3c7b
xor edx, edx
div ecx
sub eax, 0x3578b40f
or eax, 0xd9c9e1e2
add eax, 0x6b4eb625
xor eax, 0x141c244b
xor eax, 0x71d4aa4e
xor eax, 0x5b2ba02d
and eax, 0xdcf9cca2
and eax, 0x245d5ede
sub eax, 0x2ff90bdf
xor eax, 0x85bd7530
mov ecx, 0x8594dd29
xor edx, edx
div ecx
add eax, 0xf5832342
and eax, 0xf29cecd9
sub eax, 0x1c48b3b0
imul eax, eax, 0x7b4bce4
mov ecx, 0xad0533d3
xor edx, edx
div ecx
add eax, 0x5ca21ee0
imul eax, eax, 0xefe59095
mov ecx, 0x971ad567
xor edx, edx
div ecx
or eax, 0x8b8ce472
xor eax, 0x4c6dcf06
or eax, 0x7740444
imul eax, eax, 0x899086a5
and eax, 0x6f1d1c16
xor eax, 0x6025bb4f
xor eax, 0xa09c1fe7
mov ecx, 0x84064384
xor edx, edx
div ecx
add eax, 0x21237390
imul eax, eax, 0xdf1ad4dc
and eax, 0xd1666844
and eax, 0x8c87d755
add eax, 0x93942e6a
mov ecx, 0x9398b11
xor edx, edx
div ecx
xor eax, 0xd4d7d4ec
xor eax, 0x2ea5f74a
mov ecx, 0x519167cf
xor edx, edx
div ecx
or eax, 0xb7123d7d
xor eax, 0xd6c1aea6
sub eax, 0xde0e6e82
or eax, 0x49f3d306
add eax, 0x16926671
imul eax, eax, 0xd2452698
imul eax, eax, 0x6b054186
and eax, 0x78be0f91
mov ecx, 0x8a3b4458
xor edx, edx
div ecx
add eax, 0xd450d985
or eax, 0x76d616ab
xor eax, 0x9fb34254
imul eax, eax, 0x8860de99
mov ecx, 0x4e36114c
xor edx, edx
div ecx
add eax, 0x136b7897
cmp eax, 0x89a489d2
ja 0x1004a121
mov ecx, dword [ebp - 0x2c]
mov eax, dword [0x100be85c]
and eax, dword [0x100be860]
sub eax, 0x4505b0a6
sub eax, 0xae8a7db1
mov esi, 0xef356d32
xor edx, edx
div esi
mov esi, 0x813e6987
xor edx, edx
div esi
or eax, 0xfe0afbfc
imul eax, eax, 0xd7aa3eab
add eax, 0x9a139101
and eax, 0x48af8f1f
mov esi, 0xb2929150
xor edx, edx
div esi
sub eax, 0x24b3e71a
or eax, 0xe4ccaed5
xor eax, 0xc511ceaa
add eax, 0x11120d6f
sub eax, 0x8deb11c6
or eax, 0xa308eb58
xor eax, 0x4955490
xor eax, 0xe435f669
and eax, 0x1ce370b5
add eax, 0xbc0d9f3
and eax, 0x89fa0fd6
or eax, 0xc513e99b
mov esi, 0xe7e52e99
xor edx, edx
div esi
or eax, 0x49b4fd0
imul eax, eax, 0x4f4dd877
or eax, 0xcbeabc10
xor eax, 0xb16d6fbb
imul eax, eax, 0x9aa9cdf
xor eax, 0x642c663c
mov esi, 0xc47b7f06
xor edx, edx
div esi
imul eax, eax, 0xb9984111
xor eax, 0x7d3a9d47
imul eax, eax, 0xe375f8b0
sub eax, 0xb89e2c99
or eax, 0xbb329c77
and eax, 0x684cadfd
mov esi, 0x3b8ec6e9
xor edx, edx
div esi
mov esi, 0x383628b8
xor edx, edx
div esi
or eax, 0x3846e21e
mov esi, 0xb8872950
xor edx, edx
div esi
imul eax, eax, 0x1a7489be
xor eax, 0xcea1d1d8
and eax, 0x12fcd226
add eax, 0xce09b950
xor eax, 0x9c554fdc
add eax, 0xb4b5a3f8
sub eax, 0x8cd90848
or eax, 0x12603b99
imul eax, eax, 0xe8794e63
or eax, 0x4ee78c81
or eax, 0x5cbf6ff7
sub eax, 0xb7b464f4
mov esi, 0x2295d563
xor edx, edx
div esi
sub eax, 0xf1fe4b9d
add eax, 0xb3da32da
or eax, 0x780a6f3
mov esi, 0x76d129a6
xor edx, edx
div esi
add eax, 0x191b1416
sub eax, 0xddc750d1
sub eax, 0x5d8906b2
imul eax, eax, 0x94daf032
or eax, 0x1e9f7aa1
or eax, 0x9264ec8d
and eax, 0x3dfc0464
add eax, 0xf53b0e19
sub eax, 0xb19fcef2
add eax, 0x95c9b14
sub eax, 0x10d235f3
add eax, 0x95bd57c7
add eax, 0x1a382cc9
xor eax, 0xaff21fb1
xor eax, 0xfc3bb015
or eax, 0xc77640de
mov edx, dword [ecx]
shr edx, 1
mov dword [ecx], edx
cmp eax, 0xa86e5c5c
jb 0x1004a121
jmp 0x10049d02
mov eax, dword [ebp - 0x18]
mov ecx, dword [eax]
add ecx, 1
mov dword [eax], ecx
jmp 0x10048ec8
mov eax, dword [0x100be864]
and eax, dword [0x100be868]
mov ecx, 0xfb036b8
xor edx, edx
div ecx
add eax, 0x6d44645c
xor eax, 0xb37f9920
add eax, 0x77219ef6
sub eax, 0x4a58e4c2
xor eax, 0xd9b6ef4d
and eax, 0x1d8c04ef
imul eax, eax, 0x5b884327
mov ecx, 0x4af84778
xor edx, edx
div ecx
or eax, 0xff5dce65
mov ecx, 0xc4107f29
xor edx, edx
div ecx
imul eax, eax, 0xf2f5ab93
or eax, 0xda0f67c2
or eax, 0xd8213655
or eax, 0x35afb9ef
xor eax, 0x7b7a82d8
and eax, 0xbd6f0af6
imul eax, eax, 0x5bb9c396
or eax, 0x4be2ac5
xor eax, 0x5820ecd9
imul eax, eax, 0xeaec6a2
and eax, 0xbc7988d4
xor eax, 0x94b39118
mov ecx, 0xb2667e92
xor edx, edx
div ecx
imul eax, eax, 0x7e5d30f8
and eax, 0xace4dbc5
sub eax, 0xda06301f
or eax, 0x7e794d5c
or eax, 0xe0a96e6
sub eax, 0x3a5d032f
mov ecx, 0x8a2e0d0b
xor edx, edx
div ecx
mov ecx, 0x86451f3a
xor edx, edx
div ecx
mov ecx, 0x4c50a6fb
xor edx, edx
div ecx
imul eax, eax, 0x2c8abb17
xor eax, 0x41ea126e
imul eax, eax, 0xf79c51a0
xor eax, 0xec50d4b2
and eax, 0xcd80d6dd
add eax, 0x37f03bf2
mov ecx, 0x442ddfa8
xor edx, edx
div ecx
mov ecx, 0x2d65e159
xor edx, edx
div ecx
xor eax, 0xb5d2cef6
mov ecx, 0xd19ef6e5
xor edx, edx
div ecx
and eax, 0xbcfb4a54
mov ecx, 0xec7a9878
xor edx, edx
div ecx
xor eax, 0x777747bb
imul eax, eax, 0x7ee5db15
imul eax, eax, 0xc050b5c
add eax, 0xd0eb4f4d
mov ecx, 0x5ee9801e
xor edx, edx
div ecx
or eax, 0xd83dfbe1
add eax, 0x6dd255f6
sub eax, 0x448fabf9
xor eax, 0xfc456306
add eax, 0xefbb1729
or eax, 0x16a8a612
xor eax, 0x5c20c4b1
mov ecx, 0x2a1645c6
xor edx, edx
div ecx
sub eax, 0x3639cd4e
add eax, 0x66bd631f
xor eax, 0xdc676373
and eax, 0xe82a00fb
or eax, 0x5dc3b3cd
add eax, 0xe61f5612
and eax, 0x26991b40
add eax, 0x30d4659b
xor eax, 0x40256f24
add eax, 0xbedf260c
or eax, 0x51555ed0
or eax, 0x3a163fe8
imul eax, eax, 0x7233cf4c
and eax, 0x40578fe7
cmp eax, 0xee8a0c2a
jae 0x1004a130
mov ecx, dword [ebp - 0x1c]
mov eax, dword [0x100be86c]
xor eax, dword [0x100be870]
and eax, 0xeace1110
add eax, 0x4a5cacd5
and eax, 0x7fd89d05
imul eax, eax, 0x62311f2
imul eax, eax, 0xa64abf8f
and eax, 0xbf5bbdc8
mov esi, 0x4d72a360
xor edx, edx
div esi
imul eax, eax, 0x1f74eca8
xor eax, 0xda156c6e
mov esi, 0x30469943
xor edx, edx
div esi
imul eax, eax, 0xd1c780af
mov esi, 0x74a71df6
xor edx, edx
div esi
imul eax, eax, 0x1fc1f215
mov esi, 0xcbef82b9
xor edx, edx
div esi
mov esi, 0x5c19da69
xor edx, edx
div esi
xor eax, 0xb6eb4b93
and eax, 0x1ec34539
sub eax, 0x85a072b9
sub eax, 0x4f0cc39d
or eax, 0x576cec66
or eax, 0xdb2b4c21
and eax, 0x9d9ef72e
imul eax, eax, 0x7dae302f
add eax, 0xadb673fd
and eax, 0xeb51ca0f
sub eax, 0xdbb2cdd2
imul eax, eax, 0xd1b5a424
sub eax, 0xa9ff45ec
imul eax, eax, 0xb5a96959
imul eax, eax, 0x4068295d
mov esi, 0xc1a0cf3c
xor edx, edx
div esi
sub eax, 0x3343ba6b
imul eax, eax, 0xf0299a9b
mov esi, 0xe254f4f7
xor edx, edx
div esi
and eax, 0xbc3d7b88
sub eax, 0xd3a6c9b7
imul eax, eax, 0xa4230b8d
add eax, 0x27de94c8
or eax, 0x17204b38
mov esi, 0x1674e47
xor edx, edx
div esi
imul eax, eax, 0xb2c9048e
xor eax, 0x9415502d
mov esi, 0xa2a1371f
xor edx, edx
div esi
and eax, 0x2c2c0670
mov esi, 0xb2dc075
xor edx, edx
div esi
and eax, 0x91466a49
and eax, 0xf9b8dbdb
or eax, 0xf80ead6
or eax, 0x93fd6724
add eax, 0x71373245
xor eax, 0xceafe43a
sub eax, 0x4242883
add eax, 0xddd3fd95
or eax, 0x8b865a8f
imul eax, eax, 0xe8223ec6
or eax, 0x848f8ea9
add eax, 0xa104c1aa
sub eax, 0x1098a967
and eax, 0x558079ef
or eax, 0xd232438e
sub eax, 0x1e4d4b0
xor eax, 0x6386f77b
mov esi, 0x6c1468e6
xor edx, edx
div esi
xor eax, 0xbc774222
xor eax, 0xd5b7ca74
or eax, 0x925442b8
imul eax, eax, 0xe1f0e73c
xor eax, 0xc3692a3d
and eax, 0xd679a706
sub eax, 0xb1ec98aa
and eax, 0x639e08c
and eax, 0xa95773ac
mov cl, byte [ecx]
mov byte [ebp - 0x32], cl
cmp eax, 0x3b98fbf3
je 0x10049ecd
mov al, byte [ebp - 0x32]
and al, 1
movzx eax, al
mov dword [ebp - 0x38], eax
mov ecx, dword [ebp - 0xc]
xor ecx, ebp
call fcn.10066f8f
mov eax, dword [ebp - 0x38]
lea esp, [ebp - 8]
pop esi
pop edi
pop ebp
ret
mov edx, dword [ebp - 0x10]
push eax
mov ecx, esp
sub esp, 0x1c
mov eax, esp
push eax
mov esi, esp
mov dword [ebp - 0x44], esi
push eax
mov esi, esp
mov dword [ebp - 0x40], esi
push eax
mov esi, esp
mov dword [ebp - 0x3c], esi
mov dword [ecx], edx
xor ecx, ecx
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x1a
call fcn.1006a950
add esp, 0xc
call dword [sym.imp.KERNEL32.dll_GetLogicalDrives]
mov edx, dword [ebp - 0x44]
mov ecx, dword [ebp - 0x40]
mov esi, eax
mov eax, dword [ebp - 0x3c]
mov dword [edx], esi
mov byte [ecx], 0
mov dword [eax], 0
jmp 0x10048e3b
jmp 0x1004906d
mov eax, dword [ebp - 0x1c]
mov byte [eax], 1
jmp 0x10049484
jmp 0x100497d6
mov eax, dword [ebp - 0x2c]
mov ecx, dword [eax]
shr ecx, 1
mov dword [eax], ecx
jmp 0x10049b45
jmp 0x10049ecd