Function at 0x140061750
Capabilities:
Get disk information

Disassembly:
mov byte [rsp + 8], cl
sub rsp, 0x178
mov byte [rsp + 0x20], 0xb3
mov dword [rsp + 0x28], 0x2a
mov dword [rsp + 0x38], 0x2ca
mov dword [rsp + 0x44], 0x2bf
mov dword [rsp + 0x58], 0xab
mov dword [rsp + 0x30], 0x19f
mov dword [rsp + 0x48], 0x1b1
mov dword [rsp + 0x2c], 0xd3
mov dword [rsp + 0x34], 0x111
mov dword [rsp + 0x3c], 0x63
mov dword [rsp + 0x24], 0x1ff
mov dword [rsp + 0x50], 0x175
mov byte [rsp + 0x21], 0x72
mov dword [rsp + 0x40], 0x233
mov byte [rsp + 0x22], 0x90
movzx eax, byte [0x140074c8a]
mov ecx, dword [rsp + 0x40]
mov edx, dword [rsp + 0x48]
sar edx, cl
mov ecx, edx
mov edx, dword [rsp + 0x28]
xor edx, ecx
mov ecx, edx
sub eax, ecx
mov ecx, dword [0x140074c34]
add ecx, eax
mov eax, ecx
mov dword [0x140074c34], eax
movzx eax, byte [0x140074c89]
test eax, eax
je 0x140061821
cmp dword [rsp + 0x34], 0
jne 0x140061817
cmp dword [rsp + 0x30], 0
jne 0x140061817
cmp dword [rsp + 0x24], 0
je 0x140061821
mov dword [rsp + 0x70], 1
jmp 0x140061829
mov dword [rsp + 0x70], 0
mov eax, dword [rsp + 0x70]
mov dword [0x140074c2c], eax
movzx eax, byte [0x140074c8b]
mov ecx, dword [rsp + 0x24]
sar eax, cl
mov ecx, dword [rsp + 0x28]
shl eax, cl
mov ecx, dword [rsp + 0x40]
shl eax, cl
movzx ecx, byte [0x140074c88]
cmp eax, ecx
jne 0x140061861
mov dword [rsp + 0x74], 1
jmp 0x140061869
mov dword [rsp + 0x74], 0
mov eax, dword [rsp + 0x74]
mov ecx, dword [0x140074c68]
or ecx, eax
mov eax, ecx
mov dword [0x140074c68], eax
movsx eax, byte [0x140074c5d]
and eax, dword [rsp + 0x2c]
and eax, dword [rsp + 0x30]
test eax, eax
jne 0x1400618a3
mov eax, dword [0x140074c70]
cmp dword [rsp + 0x30], eax
je 0x1400618a3
mov byte [rsp + 0x4c], 0
jmp 0x1400618a8
mov byte [rsp + 0x4c], 1
movzx eax, byte [rsp + 0x4c]
mov byte [0x140074c6d], al
movzx eax, byte [0x140074c89]
mov dword [rsp + 0x130], eax
mov eax, dword [rsp + 0x2c]
cdq
mov ecx, 3
idiv ecx
mov ecx, dword [rsp + 0x130]
add ecx, eax
mov eax, ecx
mov byte [rsp + 0x21], al
movzx eax, byte [rsp + 0x20]
imul ecx, dword [0x140074a6c], 6
add eax, ecx
xor eax, eax
mov dword [rsp + 0x134], eax
mov eax, dword [rsp + 0x134]
mov dword [rsp + 0x5c], eax
cmp dword [rsp + 0x5c], 0
je 0x140061927
cmp dword [rsp + 0x5c], 1
je 0x140061949
cmp dword [rsp + 0x5c], 2
je 0x1400619cb
cmp dword [rsp + 0x5c], 3
je 0x140061a3f
jmp 0x140061a7d
movzx eax, byte [rsp + 0x20]
mov ecx, dword [0x140074c3c]
imul ecx, eax
mov eax, ecx
xor edx, edx
mov ecx, 5
div ecx
mov byte [rsp + 0x21], al
jmp 0x140061af7
movzx eax, byte [rsp + 0x20]
xor eax, dword [rsp + 0x38]
mov ecx, dword [0x140074c70]
or ecx, eax
mov eax, ecx
test eax, eax
je 0x140061977
movsx eax, byte [0x140074c5d]
cmp dword [rsp + 0x40], eax
jne 0x140061977
mov dword [rsp + 0x78], 1
jmp 0x14006197f
mov dword [rsp + 0x78], 0
movsx eax, byte [0x140074a63]
sub eax, dword [rsp + 0x78]
mov byte [0x140074a63], al
movsx eax, byte [0x140074c90]
test eax, eax
jne 0x1400619b6
mov eax, dword [rsp + 0x40]
mov ecx, dword [rsp + 0x48]
add ecx, eax
mov eax, ecx
add eax, dword [rsp + 0x34]
test eax, eax
jne 0x1400619b6
mov byte [rsp + 0x4d], 0
jmp 0x1400619bb
mov byte [rsp + 0x4d], 1
movzx eax, byte [rsp + 0x4d]
mov byte [0x140074c6f], al
jmp 0x140061af7
movzx eax, byte [rsp + 0x20]
cmp dword [rsp + 0x58], eax
jne 0x1400619e0
mov dword [rsp + 0x7c], 1
jmp 0x1400619e8
mov dword [rsp + 0x7c], 0
movzx eax, byte [0x140074c6d]
or eax, dword [rsp + 0x7c]
mov ecx, dword [0x140074c4c]
and ecx, eax
mov eax, ecx
mov dword [0x140074c4c], eax
cmp dword [0x140074c30], 0
jne 0x140061a22
movzx eax, byte [rsp + 0x20]
test eax, eax
jne 0x140061a22
mov dword [rsp + 0x80], 0
jmp 0x140061a2d
mov dword [rsp + 0x80], 1
mov eax, dword [rsp + 0x80]
mov dword [0x140074c8c], eax
jmp 0x140061af7
cmp dword [0x140074c74], 0
je 0x140061a5c
cmp dword [rsp + 0x2c], 0
je 0x140061a5c
mov dword [rsp + 0x84], 1
jmp 0x140061a67
mov dword [rsp + 0x84], 0
movzx eax, byte [0x140074c8a]
and eax, dword [rsp + 0x84]
mov byte [0x140074c8a], al
jmp 0x140061af7
movsx eax, byte [0x140074c90]
mov ecx, dword [rsp + 0x3c]
mov edx, dword [rsp + 0x2c]
sar edx, cl
mov ecx, edx
or eax, ecx
movzx ecx, byte [0x140074c89]
sub ecx, eax
mov eax, ecx
mov byte [0x140074c89], al
movzx eax, byte [0x140074b8f]
movzx ecx, byte [rsp + 0x21]
sar eax, cl
mov ecx, dword [rsp + 0x48]
sar eax, cl
mov ecx, dword [0x140074c3c]
sub ecx, eax
mov eax, ecx
mov dword [0x140074c3c], eax
movzx eax, byte [rsp + 0x21]
mov ecx, dword [rsp + 0x24]
sub ecx, eax
mov eax, ecx
movzx ecx, byte [rsp + 0x20]
xor eax, ecx
movzx ecx, al
mov eax, dword [0x140074c50]
shl eax, cl
movsx ecx, byte [0x140074c6e]
sub ecx, eax
mov eax, ecx
mov byte [0x140074c6e], al
mov eax, dword [rsp + 0x2c]
cmp dword [rsp + 0x48], eax
jg 0x140061b10
movsx eax, byte [0x140074a63]
test eax, eax
je 0x140061cb7
cmp dword [0x140074c68], 0
je 0x140061b37
cmp dword [rsp + 0x30], 0
je 0x140061b37
mov eax, dword [rsp + 0x3c]
cmp dword [rsp + 0x48], eax
jne 0x140061b37
mov dword [rsp + 0x88], 1
jmp 0x140061b42
mov dword [rsp + 0x88], 0
movsx eax, byte [0x140074c6e]
xor eax, dword [rsp + 0x88]
mov byte [0x140074c6e], al
mov eax, dword [rsp + 0x24]
cmp dword [0x140074a68], eax
jne 0x140061b6f
mov dword [rsp + 0x8c], 1
jmp 0x140061b7a
mov dword [rsp + 0x8c], 0
mov eax, dword [rsp + 0x28]
mov ecx, dword [rsp + 0x8c]
and ecx, eax
mov eax, ecx
mov ecx, dword [0x140074c2c]
or ecx, eax
mov eax, ecx
mov dword [0x140074c2c], eax
movzx eax, byte [0x140074c5f]
test eax, eax
je 0x140061bc1
mov eax, dword [rsp + 0x44]
mov ecx, dword [rsp + 0x40]
sub ecx, eax
mov eax, ecx
test eax, eax
je 0x140061bc1
mov dword [rsp + 0x90], 1
jmp 0x140061bcc
mov dword [rsp + 0x90], 0
movsx eax, byte [0x140074c6e]
or eax, dword [rsp + 0x90]
mov byte [0x140074c6e], al
movzx eax, byte [rsp + 0x21]
mov ecx, dword [0x140074c30]
or ecx, eax
mov eax, ecx
test eax, eax
jne 0x140061c07
cmp dword [rsp + 0x30], 0
jne 0x140061c07
mov dword [rsp + 0x94], 0
jmp 0x140061c12
mov dword [rsp + 0x94], 1
mov eax, dword [rsp + 0x94]
mov ecx, dword [0x140074c48]
or ecx, eax
mov eax, ecx
mov dword [0x140074c48], eax
movzx eax, byte [rsp + 0x21]
mov ecx, dword [0x140074c48]
sub ecx, eax
mov eax, ecx
mov ecx, dword [rsp + 0x24]
shr eax, cl
mov ecx, dword [rsp + 0x24]
shr eax, cl
mov ecx, dword [0x140074a6c]
shr eax, cl
mov ecx, dword [0x140074c8c]
add ecx, eax
mov eax, ecx
mov dword [0x140074c8c], eax
movsx eax, byte [0x140074c5d]
movzx ecx, byte [rsp + 0x20]
mov edx, dword [rsp + 0x3c]
sub edx, ecx
mov ecx, edx
mov dword [rsp + 0x138], ecx
movzx edx, byte [rsp + 0x21]
movzx ecx, dl
mov edx, dword [rsp + 0x138]
shr edx, cl
mov ecx, edx
mov dword [rsp + 0x13c], ecx
mov edx, dword [0x140074c4c]
movzx ecx, dl
mov edx, dword [rsp + 0x13c]
shl edx, cl
mov ecx, edx
and eax, ecx
mov ecx, dword [0x140074a64]
or ecx, eax
mov eax, ecx
mov dword [0x140074a64], eax
mov eax, dword [rsp + 0x28]
mov ecx, dword [0x140074c50]
lea eax, [rax + rcx*4]
xor edx, edx
mov ecx, 9
div ecx
mov eax, edx
mov dword [rsp + 0x140], eax
mov eax, dword [rsp + 0x140]
mov dword [rsp + 0x60], eax
cmp dword [rsp + 0x60], 0
je 0x140061d0a
cmp dword [rsp + 0x60], 1
je 0x140061d3d
cmp dword [rsp + 0x60], 2
je 0x140061dac
cmp dword [rsp + 0x60], 3
je 0x140061de9
jmp 0x140061e0a
mov eax, dword [0x140074c70]
imul eax, dword [rsp + 0x38]
xor edx, edx
mov ecx, 5
div ecx
mov eax, edx
mov dword [rsp + 0x30], eax
mov eax, dword [rsp + 0x34]
mov ecx, dword [0x140074c28]
sub ecx, eax
mov eax, ecx
mov dword [0x140074c74], eax
jmp 0x140061e1e
movzx eax, byte [rsp + 0x22]
mov ecx, dword [rsp + 0x40]
xor ecx, eax
mov eax, ecx
mov ecx, dword [0x140074a68]
or ecx, eax
mov eax, ecx
movzx ecx, byte [0x140074c88]
and ecx, eax
mov eax, ecx
mov byte [0x140074c88], al
movsx eax, byte [0x140074c5d]
test eax, eax
je 0x140061d88
movzx eax, byte [rsp + 0x20]
cmp dword [rsp + 0x38], eax
jne 0x140061d88
mov dword [rsp + 0x98], 1
jmp 0x140061d93
mov dword [rsp + 0x98], 0
mov eax, dword [rsp + 0x98]
mov ecx, dword [0x140074c70]
and ecx, eax
mov eax, ecx
mov dword [0x140074c70], eax
jmp 0x140061e1e
cmp dword [0x140074a6c], 0
jne 0x140061dcf
movzx eax, byte [rsp + 0x20]
xor eax, dword [rsp + 0x48]
test eax, eax
jne 0x140061dcf
mov dword [rsp + 0x9c], 0
jmp 0x140061dda
mov dword [rsp + 0x9c], 1
mov eax, dword [rsp + 0x9c]
mov dword [0x140074c28], eax
jmp 0x140061e1e
mov eax, dword [rsp + 0x24]
movzx ecx, al
mov eax, dword [0x140074c74]
shr eax, cl
mov ecx, dword [0x140074c30]
and ecx, eax
mov eax, ecx
mov dword [0x140074c30], eax
jmp 0x140061e1e
mov eax, dword [rsp + 0x24]
mov ecx, dword [0x140074c60]
sub ecx, eax
mov eax, ecx
mov dword [0x140074a64], eax
mov dword [rsp + 0x64], 0x77
mov eax, dword [rsp + 0x64]
mov dword [rsp + 0x144], eax
mov eax, dword [rsp + 0x64]
dec eax
mov dword [rsp + 0x64], eax
cmp dword [rsp + 0x144], 0
je 0x140061f27
mov eax, dword [rsp + 0x2c]
cdq
and edx, 3
add eax, edx
sar eax, 2
mov ecx, dword [0x140074c30]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x34], eax
movsx eax, byte [0x140074c5d]
test eax, eax
je 0x140061e9a
mov eax, dword [rsp + 0x30]
mov ecx, dword [rsp + 0x2c]
sub ecx, eax
mov eax, ecx
add eax, dword [0x140074c30]
mov ecx, dword [rsp + 0x40]
xor ecx, eax
mov eax, ecx
test eax, eax
je 0x140061e9a
mov dword [rsp + 0xa0], 1
jmp 0x140061ea5
mov dword [rsp + 0xa0], 0
mov eax, dword [rsp + 0xa0]
mov ecx, dword [0x140074c84]
sub ecx, eax
mov eax, ecx
mov dword [0x140074c84], eax
mov eax, dword [rsp + 0x24]
movzx ecx, al
mov eax, dword [0x140074c54]
shr eax, cl
movsx ecx, byte [0x140074c6c]
or ecx, eax
mov eax, ecx
mov byte [0x140074c6c], al
movzx eax, byte [0x140074c6d]
cmp eax, dword [rsp + 0x3c]
jne 0x140061ef6
mov dword [rsp + 0xa4], 1
jmp 0x140061f01
mov dword [rsp + 0xa4], 0
mov eax, dword [rsp + 0xa4]
mov dword [0x140074c80], eax
mov eax, dword [rsp + 0x24]
mov ecx, dword [0x140074c80]
and ecx, eax
mov eax, ecx
mov byte [0x140074b8f], al
jmp 0x140061e26
mov dword [rsp + 0x68], 0xfffffe0b
mov eax, dword [rsp + 0x68]
mov dword [rsp + 0x148], eax
mov eax, dword [rsp + 0x68]
inc eax
mov dword [rsp + 0x68], eax
cmp dword [rsp + 0x148], 0
je 0x140062112
cmp dword [rsp + 0x50], 0
jne 0x140061f64
cmp dword [rsp + 0x50], 0
je 0x140062030
mov eax, dword [rsp + 0x58]
cdq
and edx, 3
add eax, edx
and eax, 3
sub eax, edx
mov ecx, dword [0x140074c4c]
add ecx, eax
mov eax, ecx
mov byte [rsp + 0x21], al
mov eax, dword [rsp + 0x24]
mov ecx, dword [rsp + 0x44]
sub ecx, eax
mov eax, ecx
mov ecx, dword [0x140074c84]
xor ecx, eax
mov eax, ecx
movzx ecx, byte [0x140074b8f]
xor ecx, eax
mov eax, ecx
mov byte [0x140074b8f], al
mov eax, dword [rsp + 0x28]
movzx ecx, al
mov eax, dword [0x140074c30]
shl eax, cl
movzx ecx, byte [rsp + 0x22]
and eax, ecx
movsx ecx, byte [0x140074c6c]
and ecx, eax
mov eax, ecx
mov byte [0x140074c6c], al
movzx eax, byte [rsp + 0x22]
mov ecx, dword [0x140074c70]
imul ecx, eax
mov eax, ecx
cdq
and edx, 3
add eax, edx
sar eax, 2
mov dword [rsp + 0x28], eax
movzx eax, byte [rsp + 0x22]
movzx ecx, byte [rsp + 0x21]
sub ecx, dword [rsp + 0x58]
xor eax, ecx
cmp dword [0x140074c30], eax
jne 0x140062011
mov dword [rsp + 0xa8], 1
jmp 0x14006201c
mov dword [rsp + 0xa8], 0
movzx eax, byte [0x140074c88]
sub eax, dword [rsp + 0xa8]
mov byte [0x140074c88], al
movzx eax, byte [0x140074b8e]
imul eax, dword [rsp + 0x38]
xor edx, edx
mov ecx, 5
div ecx
mov eax, edx
mov byte [rsp + 0x21], al
cmp dword [0x140074c74], 0
je 0x14006206b
mov eax, dword [rsp + 0x34]
cmp dword [rsp + 0x2c], eax
jne 0x14006206b
mov dword [rsp + 0xac], 1
jmp 0x140062076
mov dword [rsp + 0xac], 0
mov eax, dword [rsp + 0xac]
mov ecx, dword [0x140074c50]
and ecx, eax
mov eax, ecx
mov dword [0x140074c50], eax
movzx eax, byte [0x140074c88]
test eax, eax
je 0x1400620b7
movzx eax, byte [rsp + 0x20]
movzx ecx, al
mov eax, dword [rsp + 0x2c]
shl eax, cl
test eax, eax
je 0x1400620b7
mov dword [rsp + 0xb0], 1
jmp 0x1400620c2
mov dword [rsp + 0xb0], 0
mov eax, dword [rsp + 0xb0]
mov ecx, dword [0x140074c8c]
sub ecx, eax
mov eax, ecx
mov dword [0x140074c8c], eax
movsx eax, byte [0x140074a63]
or eax, dword [rsp + 0x34]
movzx ecx, byte [rsp + 0x22]
mov edx, dword [rsp + 0x34]
sub edx, ecx
mov ecx, edx
or eax, ecx
movzx ecx, byte [0x140074c89]
or eax, ecx
movsx ecx, byte [0x140074c90]
add ecx, eax
mov eax, ecx
mov byte [0x140074c90], al
jmp 0x140061f2f
mov eax, dword [rsp + 0x28]
mov ecx, dword [0x140074c8c]
and ecx, eax
mov eax, ecx
mov dword [0x140074c2c], eax
mov eax, dword [0x140074c50]
imul eax, dword [rsp + 0x30]
xor edx, edx
mov ecx, 3
div ecx
mov eax, edx
mov dword [rsp + 0x34], eax
mov eax, dword [rsp + 0x40]
mov ecx, dword [0x140074c48]
or ecx, eax
mov eax, ecx
movzx ecx, byte [0x140074c88]
and ecx, eax
mov eax, ecx
mov byte [0x140074c88], al
movzx eax, byte [0x140074c89]
movzx ecx, byte [rsp + 0x20]
sub ecx, dword [rsp + 0x44]
xor eax, ecx
movzx ecx, byte [0x140074c5f]
xor ecx, eax
mov eax, ecx
mov byte [0x140074c5f], al
mov eax, dword [rsp + 0x24]
mov ecx, dword [rsp + 0x28]
add ecx, eax
mov eax, ecx
test eax, eax
jne 0x1400621a8
movzx eax, byte [rsp + 0x22]
test eax, eax
jne 0x1400621a8
mov dword [rsp + 0xb4], 0
jmp 0x1400621b3
mov dword [rsp + 0xb4], 1
mov eax, dword [rsp + 0xb4]
cmp dword [0x140074a64], eax
jne 0x1400621cf
mov dword [rsp + 0xb8], 1
jmp 0x1400621da
mov dword [rsp + 0xb8], 0
mov eax, dword [rsp + 0xb8]
mov ecx, dword [0x140074a6c]
xor ecx, eax
mov eax, ecx
mov dword [0x140074a6c], eax
mov eax, dword [rsp + 0x44]
movzx ecx, al
mov eax, dword [0x140074c54]
shl eax, cl
or eax, dword [rsp + 0x28]
movzx ecx, byte [0x140074c5f]
and ecx, eax
mov eax, ecx
mov byte [0x140074c5f], al
movzx eax, byte [0x140074c5f]
mov dword [rsp + 0x14c], eax
mov eax, dword [rsp + 0x34]
cdq
mov ecx, 5
idiv ecx
mov eax, edx
mov ecx, dword [rsp + 0x14c]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x3c], eax
mov eax, dword [rsp + 0x30]
cmp dword [0x140074c30], eax
jne 0x140062259
mov dword [rsp + 0xbc], 1
jmp 0x140062264
mov dword [rsp + 0xbc], 0
movzx eax, byte [rsp + 0x20]
cmp dword [rsp + 0xbc], eax
je 0x140062291
mov eax, dword [0x140074c30]
mov ecx, dword [rsp + 0x28]
or ecx, eax
mov eax, ecx
test eax, eax
jne 0x140062291
mov dword [rsp + 0xc0], 0
jmp 0x14006229c
mov dword [rsp + 0xc0], 1
movsx eax, byte [0x140074c6f]
or eax, dword [rsp + 0xc0]
mov byte [0x140074c6f], al
mov eax, dword [rsp + 0x30]
mov ecx, dword [0x140074c34]
sub ecx, eax
mov eax, ecx
sub eax, dword [rsp + 0x2c]
mov ecx, dword [0x140074a68]
or ecx, eax
mov eax, ecx
mov dword [0x140074a68], eax
call qword [sym.imp.KERNEL32.dll_GetLogicalDrives]
mov eax, dword [rsp + 0x58]
movzx ecx, al
mov eax, dword [rsp + 0x24]
shr eax, cl
mov ecx, dword [rsp + 0x48]
shl eax, cl
cmp dword [0x140074c70], eax
jne 0x140062300
mov dword [rsp + 0xc4], 1
jmp 0x14006230b
mov dword [rsp + 0xc4], 0
movsx eax, byte [0x140074c6e]
xor eax, dword [rsp + 0xc4]
mov byte [0x140074c6e], al
cmp dword [0x140074c8c], 0
jne 0x140062342
movzx eax, byte [rsp + 0x22]
and eax, dword [rsp + 0x28]
test eax, eax
jne 0x140062342
mov dword [rsp + 0xc8], 0
jmp 0x14006234d
mov dword [rsp + 0xc8], 1
mov eax, dword [rsp + 0xc8]
mov ecx, dword [0x140074c68]
sub ecx, eax
mov eax, ecx
mov dword [0x140074c68], eax
cmp dword [0x140074c34], 0
jne 0x140062381
cmp dword [rsp + 0x44], 0
jne 0x140062381
mov dword [rsp + 0xcc], 0
jmp 0x14006238c
mov dword [rsp + 0xcc], 1
movsx eax, byte [0x140074a62]
or eax, dword [rsp + 0xcc]
mov byte [0x140074a62], al
movzx eax, byte [rsp + 0x20]
cmp eax, dword [rsp + 0x34]
jle 0x1400623b8
mov dword [rsp + 0xd0], 1
jmp 0x1400623c3
mov dword [rsp + 0xd0], 0
movsx eax, byte [0x140074c6e]
cmp dword [rsp + 0xd0], eax
jle 0x1400625a7
mov eax, dword [rsp + 0x50]
mov ecx, dword [rsp + 0x24]
sub ecx, eax
mov eax, ecx
mov ecx, dword [0x140074a64]
and ecx, eax
mov eax, ecx
movzx ecx, byte [0x140074c8b]
or ecx, eax
mov eax, ecx
mov byte [0x140074c8b], al
mov eax, dword [rsp + 0x48]
mov ecx, dword [rsp + 0x28]
add ecx, eax
mov eax, ecx
movzx ecx, byte [rsp + 0x22]
or eax, ecx
cmp dword [0x140074c48], eax
jne 0x140062426
mov dword [rsp + 0xd4], 1
jmp 0x140062431
mov dword [rsp + 0xd4], 0
mov eax, dword [rsp + 0xd4]
mov ecx, dword [0x140074c30]
xor ecx, eax
mov eax, ecx
mov dword [0x140074c30], eax
movsx eax, byte [0x140074a62]
and eax, dword [rsp + 0x44]
mov ecx, dword [0x140074c64]
add ecx, eax
mov eax, ecx
mov dword [0x140074c64], eax
cmp dword [0x140074c54], 0
je 0x140062480
cmp dword [rsp + 0x2c], 0
je 0x140062480
mov dword [rsp + 0xd8], 1
jmp 0x14006248b
mov dword [rsp + 0xd8], 0
mov eax, dword [rsp + 0xd8]
mov ecx, dword [0x140074c28]
and ecx, eax
mov eax, ecx
mov dword [0x140074c28], eax
mov eax, dword [rsp + 0x2c]
mov ecx, dword [0x140074c74]
add ecx, eax
mov eax, ecx
sub eax, dword [rsp + 0x34]
test eax, eax
je 0x1400624c1
movzx eax, byte [rsp + 0x20]
test eax, eax
jne 0x1400624d7
cmp dword [0x140074c28], 0
jne 0x1400624d7
mov dword [rsp + 0xdc], 0
jmp 0x1400624e2
mov dword [rsp + 0xdc], 1
mov eax, dword [rsp + 0xdc]
mov ecx, dword [0x140074c70]
xor ecx, eax
mov eax, ecx
mov dword [0x140074c70], eax
movzx eax, byte [rsp + 0x21]
mov ecx, dword [rsp + 0x38]
shl eax, cl
mov ecx, dword [0x140074c74]
and ecx, eax
mov eax, ecx
or eax, dword [rsp + 0x34]
test eax, eax
jne 0x14006252c
cmp dword [0x140074c60], 0
jne 0x14006252c
mov dword [rsp + 0xe0], 0
jmp 0x140062537
mov dword [rsp + 0xe0], 1
mov eax, dword [rsp + 0xe0]
mov ecx, dword [0x140074c74]
and ecx, eax
mov eax, ecx
mov dword [0x140074c74], eax
movzx eax, byte [0x140074c5f]
imul eax, dword [rsp + 0x44]
cdq
mov ecx, 5
idiv ecx
mov dword [rsp + 0x2c], eax
movsx eax, byte [0x140074c6e]
test eax, eax
je 0x140062585
cmp dword [rsp + 0x40], 0
je 0x140062585
mov dword [rsp + 0xe4], 1
jmp 0x140062590
mov dword [rsp + 0xe4], 0
mov eax, dword [rsp + 0xe4]
mov ecx, dword [0x140074c60]
and ecx, eax
mov eax, ecx
mov dword [0x140074c60], eax
xor edx, edx
mov eax, dword [rsp + 0x38]
mov ecx, 5
div ecx
mov ecx, dword [0x140074c70]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x28], eax
movzx eax, byte [0x140074c89]
sub eax, dword [rsp + 0x3c]
and eax, dword [rsp + 0x2c]
and eax, dword [rsp + 0x44]
and eax, dword [0x140074c8c]
mov ecx, dword [0x140074c74]
sub ecx, eax
mov eax, ecx
mov dword [0x140074c74], eax
movzx eax, byte [0x140074c8b]
or eax, dword [rsp + 0x30]
mov dword [0x140074c8c], eax
mov eax, dword [rsp + 0x24]
cmp dword [rsp + 0x3c], eax
jbe 0x140062742
mov eax, dword [rsp + 0x44]
cdq
mov ecx, 3
idiv ecx
mov eax, edx
mov ecx, dword [0x140074c48]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x28], eax
movsx eax, byte [0x140074a63]
test eax, eax
jne 0x14006264e
mov eax, dword [rsp + 0x38]
mov ecx, dword [rsp + 0x28]
xor ecx, eax
mov eax, ecx
test eax, eax
jne 0x14006264e
mov dword [rsp + 0xe8], 0
jmp 0x140062659
mov dword [rsp + 0xe8], 1
mov eax, dword [rsp + 0xe8]
mov ecx, dword [0x140074c2c]
and ecx, eax
mov eax, ecx
mov dword [0x140074c2c], eax
movzx eax, byte [0x140074c8a]
movzx ecx, byte [rsp + 0x21]
xor eax, ecx
test eax, eax
jne 0x1400626a4
movzx eax, byte [0x140074c8b]
mov ecx, dword [rsp + 0x24]
add ecx, eax
mov eax, ecx
mov ecx, dword [rsp + 0x44]
or ecx, eax
mov eax, ecx
test eax, eax
jne 0x1400626a4
mov byte [rsp + 0x4e], 0
jmp 0x1400626a9
mov byte [rsp + 0x4e], 1
movzx eax, byte [rsp + 0x4e]
mov byte [0x140074c5c], al
mov eax, dword [0x140074c50]
imul eax, dword [rsp + 0x24]
xor edx, edx
mov ecx, 5
div ecx
mov dword [rsp + 0x2c], eax
mov eax, dword [rsp + 0x3c]
cmp dword [0x140074a64], eax
jne 0x1400626e5
mov dword [rsp + 0xec], 1
jmp 0x1400626f0
mov dword [rsp + 0xec], 0
movzx eax, byte [0x140074c6d]
sub eax, dword [rsp + 0xec]
mov byte [0x140074c6d], al
movzx eax, byte [0x140074c89]
test eax, eax
jne 0x140062723
cmp dword [rsp + 0x3c], 0
jne 0x140062723
mov dword [rsp + 0xf0], 0
jmp 0x14006272e
mov dword [rsp + 0xf0], 1
movzx eax, byte [0x140074c6d]
and eax, dword [rsp + 0xf0]
mov byte [0x140074c6d], al
movzx eax, byte [rsp + 0x20]
mov ecx, dword [rsp + 0x44]
shl eax, cl
xor eax, dword [rsp + 0x44]
mov ecx, dword [0x140074c38]
xor ecx, eax
mov eax, ecx
mov dword [0x140074c38], eax
movzx eax, byte [0x140074c8a]
mov dword [rsp + 0x150], eax
mov eax, dword [rsp + 0x50]
cdq
and edx, 3
add eax, edx
and eax, 3
sub eax, edx
mov ecx, dword [rsp + 0x150]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x30], eax
movsx eax, byte [0x140074c5e]
cmp eax, dword [rsp + 0x34]
jle 0x1400627a7
mov dword [rsp + 0xfc], 1
jmp 0x1400627b2
mov dword [rsp + 0xfc], 0
mov eax, dword [0x140074c64]
cmp dword [rsp + 0x34], eax
jle 0x1400627cb
mov dword [rsp + 0xf4], 1
jmp 0x1400627d6
mov dword [rsp + 0xf4], 0
mov eax, dword [rsp + 0x3c]
cmp dword [rsp + 0xf4], eax
jbe 0x1400627f0
mov dword [rsp + 0xf8], 1
jmp 0x1400627fb
mov dword [rsp + 0xf8], 0
mov eax, dword [rsp + 0xf8]
cmp dword [rsp + 0xfc], eax
jne 0x140062823
mov eax, dword [0x140074c8c]
imul eax, dword [rsp + 0x50]
xor edx, edx
mov ecx, 3
div ecx
mov dword [rsp + 0x30], eax
mov eax, dword [rsp + 0x2c]
cdq
and edx, 3
add eax, edx
and eax, 3
sub eax, edx
mov ecx, dword [0x140074a64]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x28], eax
mov eax, dword [rsp + 0x50]
cdq
mov ecx, 5
idiv ecx
mov eax, edx
mov ecx, dword [0x140074c70]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x50], eax
call qword [sym.imp.KERNEL32.dll_GetTickCount64]
mov eax, 0xb9
mov word [rsp + 0x54], ax
movsx eax, word [rsp + 0x54]
mov dword [rsp + 0x154], eax
movzx eax, word [rsp + 0x54]
dec ax
mov word [rsp + 0x54], ax
cmp dword [rsp + 0x154], 0
je 0x1400629bc
mov eax, dword [rsp + 0x48]
mov ecx, dword [0x140074c2c]
or ecx, eax
mov eax, ecx
mov byte [0x140074c8b], al
movsx eax, byte [0x140074c6c]
test eax, eax
jne 0x1400628d0
movzx eax, byte [rsp + 0x20]
mov ecx, dword [rsp + 0x28]
xor ecx, eax
mov eax, ecx
test eax, eax
jne 0x1400628d0
mov dword [rsp + 0x100], 0
jmp 0x1400628db
mov dword [rsp + 0x100], 1
mov eax, dword [rsp + 0x100]
mov dword [0x140074c64], eax
movsx eax, byte [0x140074c5e]
add eax, dword [rsp + 0x2c]
or eax, dword [rsp + 0x50]
mov ecx, dword [0x140074c30]
sub ecx, eax
mov eax, ecx
mov dword [0x140074c30], eax
cmp dword [0x140074c74], 0
je 0x140062996
cmp dword [rsp + 0x38], 0
jne 0x140062933
movsx eax, byte [0x140074c6e]
test eax, eax
jne 0x140062933
mov dword [rsp + 0x104], 0
jmp 0x14006293e
mov dword [rsp + 0x104], 1
mov eax, dword [rsp + 0x104]
cmp dword [rsp + 0x2c], eax
jle 0x140062996
movsx eax, byte [0x140074c90]
test eax, eax
je 0x140062974
mov eax, dword [rsp + 0x3c]
movzx ecx, al
mov eax, dword [rsp + 0x30]
shl eax, cl
test eax, eax
je 0x140062974
mov dword [rsp + 0x108], 1
jmp 0x14006297f
mov dword [rsp + 0x108], 0
mov eax, dword [rsp + 0x108]
mov ecx, dword [0x140074c38]
and ecx, eax
mov eax, ecx
mov dword [0x140074c38], eax
movsx eax, byte [0x140074c5e]
add eax, dword [rsp + 0x38]
mov ecx, dword [rsp + 0x24]
shl eax, cl
mov ecx, dword [0x140074c70]
xor ecx, eax
mov eax, ecx
mov dword [0x140074c70], eax
jmp 0x14006286c
mov eax, dword [rsp + 0x30]
cmp dword [rsp + 0x50], eax
jae 0x140062a89
mov eax, dword [rsp + 0x38]
cmp dword [rsp + 0x28], eax
jne 0x1400629e1
mov dword [rsp + 0x10c], 1
jmp 0x1400629ec
mov dword [rsp + 0x10c], 0
movsx eax, byte [0x140074c6e]
movzx ecx, byte [rsp + 0x21]
and ecx, dword [rsp + 0x10c]
sub eax, ecx
movzx ecx, byte [0x140074b8e]
xor ecx, eax
mov eax, ecx
mov byte [0x140074b8e], al
mov eax, dword [0x140074c28]
imul eax, dword [rsp + 0x34]
xor edx, edx
mov ecx, 4
div ecx
mov dword [rsp + 0x38], eax
mov eax, dword [rsp + 0x2c]
mov ecx, dword [rsp + 0x28]
sub ecx, eax
mov eax, ecx
mov ecx, dword [0x140074c60]
or ecx, eax
mov eax, ecx
mov dword [0x140074c2c], eax
mov eax, dword [rsp + 0x30]
mov ecx, dword [0x140074c68]
sub ecx, eax
mov eax, ecx
mov dword [0x140074c54], eax
movzx eax, byte [0x140074c8b]
mov dword [rsp + 0x158], eax
movzx ecx, byte [rsp + 0x20]
mov eax, ecx
cdq
and edx, 3
add eax, edx
and eax, 3
sub eax, edx
mov ecx, dword [rsp + 0x158]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x28], eax
call qword [sym.imp.KERNEL32.dll_GetConsoleAliasExesLengthW]
cmp dword [rsp + 0x58], 0
je 0x140062ab0
movzx eax, byte [rsp + 0x22]
sub eax, dword [rsp + 0x50]
test eax, eax
je 0x140062ab0
mov dword [rsp + 0x110], 1
jmp 0x140062abb
mov dword [rsp + 0x110], 0
movsx eax, byte [0x140074a63]
add eax, dword [rsp + 0x110]
mov ecx, dword [0x140074c8c]
xor ecx, eax
mov eax, ecx
mov dword [0x140074c8c], eax
mov dword [rsp + 0x6c], 0xffffffbe
mov eax, dword [rsp + 0x6c]
mov dword [rsp + 0x15c], eax
mov eax, dword [rsp + 0x6c]
inc eax
mov dword [rsp + 0x6c], eax
cmp dword [rsp + 0x15c], 0
je 0x140062b21
movzx eax, byte [rsp + 0x21]
mov ecx, dword [0x140074c2c]
imul ecx, eax
mov eax, ecx
xor edx, edx
mov ecx, 4
div ecx
mov eax, edx
mov dword [rsp + 0x38], eax
jmp 0x140062ae1
movzx eax, byte [0x140074c5f]
test eax, eax
jne 0x140062b49
mov eax, dword [rsp + 0x48]
mov ecx, dword [rsp + 0x34]
add ecx, eax
mov eax, ecx
test eax, eax
jne 0x140062b49
mov dword [rsp + 0x114], 0
jmp 0x140062b54
mov dword [rsp + 0x114], 1
movzx eax, byte [0x140074c5f]
and eax, dword [rsp + 0x114]
mov byte [0x140074c5f], al
movsx eax, byte [0x140074a62]
sub eax, dword [rsp + 0x24]
movzx ecx, byte [rsp + 0x20]
and eax, ecx
mov dword [0x140074c60], eax
mov eax, dword [0x140074a6c]
imul eax, dword [rsp + 0x38]
xor edx, edx
mov ecx, 3
div ecx
mov eax, edx
mov dword [rsp + 0x24], eax
mov eax, dword [rsp + 0x48]
movzx ecx, al
mov eax, dword [rsp + 0x2c]
sar eax, cl
mov ecx, dword [0x140074c54]
or ecx, eax
mov eax, ecx
mov ecx, dword [0x140074c74]
add ecx, eax
mov eax, ecx
mov dword [0x140074c74], eax
call qword [sym.imp.USER32.dll_GetDesktopWindow]
movzx eax, byte [rsp + 0x21]
cmp eax, dword [rsp + 0x30]
jae 0x140062c20
movzx eax, byte [rsp + 0x21]
cmp dword [rsp + 0x58], eax
jne 0x140062bea
mov dword [rsp + 0x118], 1
jmp 0x140062bf5
mov dword [rsp + 0x118], 0
movzx eax, byte [rsp + 0x21]
mov ecx, dword [rsp + 0x118]
and ecx, eax
mov eax, ecx
mov ecx, dword [0x140074c84]
and ecx, eax
mov eax, ecx
movzx ecx, byte [0x140074c8b]
or ecx, eax
mov eax, ecx
mov byte [0x140074c8b], al
movsx eax, byte [0x140074c6c]
test eax, eax
je 0x140062c3f
cmp dword [rsp + 0x44], 0
je 0x140062c3f
mov dword [rsp + 0x11c], 1
jmp 0x140062c4a
mov dword [rsp + 0x11c], 0
mov eax, dword [rsp + 0x11c]
mov dword [0x140074a68], eax
movsx eax, byte [0x140074c5e]
movzx ecx, byte [rsp + 0x22]
imul eax, ecx
cdq
and edx, 3
add eax, edx
and eax, 3
sub eax, edx
mov dword [rsp + 0x3c], eax
movzx eax, byte [0x140074c8a]
movzx ecx, byte [rsp + 0x21]
mov edx, dword [rsp + 0x38]
add edx, ecx
mov ecx, edx
sar eax, cl
mov ecx, dword [0x140074c38]
or ecx, eax
mov eax, ecx
mov dword [0x140074c38], eax
mov eax, dword [rsp + 0x38]
mov ecx, dword [0x140074c34]
xor ecx, eax
mov eax, ecx
test eax, eax
je 0x140062cc1
cmp dword [rsp + 0x34], 0
je 0x140062cc1
mov dword [rsp + 0x120], 1
jmp 0x140062ccc
mov dword [rsp + 0x120], 0
movzx eax, byte [0x140074c6d]
and eax, dword [rsp + 0x120]
mov byte [0x140074c6d], al
cmp dword [0x140074c50], 0
je 0x140062d39
cmp dword [rsp + 0x28], 0
jne 0x140062d08
movzx eax, byte [0x140074c8b]
test eax, eax
jne 0x140062d08
mov dword [rsp + 0x124], 0
jmp 0x140062d13
mov dword [rsp + 0x124], 1
mov eax, dword [rsp + 0x124]
cmp dword [rsp + 0x48], eax
jne 0x140062d39
movzx eax, byte [0x140074c6d]
imul eax, dword [rsp + 0x38]
xor edx, edx
mov ecx, 5
div ecx
mov dword [rsp + 0x58], eax
mov eax, dword [rsp + 0x3c]
mov ecx, dword [0x140074c50]
sub ecx, eax
mov eax, ecx
mov byte [0x140074c5e], al
movzx eax, byte [0x140074b8f]
add eax, dword [rsp + 0x30]
movzx ecx, byte [rsp + 0x22]
add ecx, dword [rsp + 0x40]
sub ecx, dword [0x140074c48]
cmp eax, ecx
jne 0x140062d78
mov dword [rsp + 0x128], 1
jmp 0x140062d83
mov dword [rsp + 0x128], 0
movsx eax, byte [0x140074c6e]
and eax, dword [rsp + 0x128]
mov byte [0x140074c6e], al
movzx eax, byte [0x140074c88]
mov ecx, dword [rsp + 0x24]
mov edx, dword [rsp + 0x40]
add edx, ecx
mov ecx, edx
and ecx, dword [rsp + 0x24]
sub eax, ecx
movsx ecx, byte [0x140074c6e]
add ecx, eax
mov eax, ecx
mov byte [0x140074c6e], al
mov eax, dword [rsp + 0x30]
movzx ecx, al
mov eax, dword [rsp + 0x24]
shl eax, cl
cmp dword [0x140074c64], eax
jne 0x140062de3
mov dword [rsp + 0x12c], 1
jmp 0x140062dee
mov dword [rsp + 0x12c], 0
movsx eax, byte [0x140074c5e]
mov ecx, dword [rsp + 0x40]
and ecx, eax
mov eax, ecx
mov ecx, dword [rsp + 0x12c]
xor ecx, eax
mov eax, ecx
movzx ecx, byte [0x140074c5f]
and ecx, eax
mov eax, ecx
mov byte [0x140074c5f], al
movzx eax, byte [0x140074c5c]
add eax, dword [rsp + 0x3c]
mov ecx, dword [0x140074c84]
or ecx, eax
mov eax, ecx
mov dword [0x140074c84], eax
mov eax, dword [rsp + 0x40]
mov ecx, dword [0x140074c60]
sub ecx, eax
mov eax, ecx
mov ecx, dword [rsp + 0x24]
shl eax, cl
movzx ecx, byte [rsp + 0x22]
mov dword [rsp + 0x160], ecx
movsx edx, byte [0x140074c6f]
movzx ecx, dl
mov edx, dword [rsp + 0x160]
sar edx, cl
mov ecx, edx
and eax, ecx
mov byte [0x140074c6d], al
movzx eax, byte [0x140074c5c]
mov ecx, dword [rsp + 0x28]
mov edx, dword [rsp + 0x48]
add edx, ecx
mov ecx, edx
sar eax, cl
mov ecx, dword [0x140074c2c]
mov edx, dword [rsp + 0x34]
sar edx, cl
mov ecx, edx
and eax, ecx
movsx ecx, byte [0x140074c6f]
xor ecx, eax
mov eax, ecx
mov byte [0x140074c6f], al
movsx eax, byte [0x140074c5e]
xor eax, dword [rsp + 0x40]
movzx ecx, byte [0x140074b8f]
xor ecx, eax
mov eax, ecx
mov byte [0x140074b8f], al
movsx eax, byte [0x140074a63]
mov r8d, eax
mov edx, dword [0x140074c60]
mov ecx, dword [0x140074c80]
call fcn.140060190
mov eax, dword [rsp + 0x38]
add rsp, 0x178
ret