Function at 0x1400249c4
Capabilities:
Get disk information
Log keystrokes via polling

Disassembly:
mov rax, rsp
mov qword [rax + 0x20], r9
mov qword [rax + 0x10], rdx
mov qword [rax + 8], rcx
push rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x178
xor edi, edi
movaps xmmword [rax - 0x58], xmm7
mov eax, r8d
and eax, 0x40000
mov ebx, edi
mov r14d, edi
mov ebp, r8d
mov r12d, r8d
mov dword [rsp + 0xb0], eax
and ebp, 0x10000
and r12d, 0x20000
movzx eax, r8b
cmp eax, edi
mov esi, edi
mov dword [rsp + 0x90], edi
sete bl
cmp eax, 1
sete r14b
cmp eax, 2
sete sil
mov dword [rsp + 0x80], r14d
cmp ebx, edi
jne 0x140024a49
mov byte [rsp + 0x31], dil
cmp r14d, edi
je 0x140024a4e
mov byte [rsp + 0x31], 1
lea r13, [rdx - 2]
lea rcx, [0x1400f2238]
lea rdx, [rsp + 0x1c8]
mov r8d, 1
mov qword [rsp + 0xf8], r13
mov qword [rsp + 0xa8], r13
call fcn.14005992c
mov ecx, 0x24
mov dword [rsp + 0x84], 0x100002
movzx eax, al
mov dword [rsp + 0x48], 0x100003
lea edx, [rcx + 0x58]
mov dword [rsp + 0xd8], eax
mov eax, 0x100001
lea r8d, [rcx - 1]
mov dword [rsp + 0x58], eax
cmp ebx, edi
jne 0x140024ace
cmp r14d, edi
je 0x140024ac3
mov eax, edx
mov dword [rsp + 0x58], edx
mov dword [rsp + 0x48], ecx
jmp 0x140024ad8
cmp esi, edi
je 0x140024ae0
mov dword [rsp + 0x90], edx
mov dword [rsp + 0x48], edx
mov dword [rsp + 0x58], ecx
mov eax, ecx
mov dword [rsp + 0x84], r8d
mov r15, qword [rsp + 0x1c8]
mov r9d, 0x2a
mov byte [rsp + 0x30], dil
mov qword [rsp + 0x70], r15
cmp r9w, word [r15]
jne 0x140024b13
mov dword [rsp + 0x90], eax
mov byte [rsp + 0x30], al
mov dword [rsp + 0xb0], r9d
jmp 0x140024b34
cmp cx, word [r15]
je 0x140024b25
cmp r8w, word [r15]
je 0x140024b25
cmp dx, word [r15]
jne 0x140024b45
movzx ecx, word [r15]
mov dword [rsp + 0x90], ecx
mov byte [rsp + 0x30], cl
add r15, 2
mov qword [rsp + 0x1c8], r15
mov qword [rsp + 0x70], r15
mov eax, 0x5b
mov r14d, 9
cmp ax, word [r15]
sete al
mov byte [rsp + 0x32], al
cmp al, dil
je 0x140024c06
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_lstrlenW]
lea r13d, [r14 + 0x17]
dec eax
cdqe
lea rcx, [r15 + rax*2]
cmp r14w, word [rcx]
ja 0x140024b85
cmp word [rcx], 0xd
jbe 0x140024b8b
cmp r13w, word [rcx]
jne 0x140024b94
mov word [rcx], di
sub rcx, 2
jmp 0x140024b79
mov r13, qword [rsp + 0xa8]
mov eax, 0x5d
cmp ax, word [rcx]
jne 0x140024ba9
mov word [rcx], di
add r15, 2
mov qword [rsp + 0x70], r15
movzx eax, word [r15]
cmp ax, di
je 0x140024c06
mov ecx, 0x20
lea edx, [rcx + 0x3b]
lea r8d, [rcx + 8]
cmp r14w, ax
ja 0x140024bd3
cmp ax, 0xd
jbe 0x140024bec
cmp cx, ax
je 0x140024bec
cmp dx, ax
je 0x140024be3
cmp r8w, ax
jne 0x140024bf9
mov word [r13], ax
add r13, 2
add r15, 2
mov ax, word [r15]
cmp ax, di
jne 0x140024bc7
mov qword [rsp + 0xa8], r13
mov qword [rsp + 0x70], r15
xorpd xmm7, xmm7
movsxd rax, esi
mov qword [rsp + 0xe0], rax
movsxd rax, ebx
mov qword [rsp + 0xe8], rax
movsxd rax, ebp
mov qword [rsp + 0x100], rax
movsxd rax, r12d
mov r12b, byte [rsp + 0x32]
mov qword [rsp + 0xf0], rax
mov r13d, 0x3d
lea rdx, [rsp + 0x1c8]
lea rcx, [0x1400f2238]
lea r8d, [r13 - 0x3c]
mov qword [rsp + 0x1c8], r15
lea ebp, [r13 - 0x16]
call fcn.14005992c
mov rbx, qword [rsp + 0x1c8]
movzx eax, al
mov qword [rsp + 0x88], rdi
mov qword [rsp + 0x50], rdi
mov qword [rsp + 0x38], rdi
mov qword [rsp + 0x78], rdi
mov qword [rsp + 0x98], rdi
mov dword [rsp + 0xdc], eax
movzx eax, word [rbx]
mov qword [rsp + 0x40], rbx
mov rsi, rdi
mov qword [rsp + 0x68], rdi
mov r14b, dil
mov byte [rsp + 0x1d0], dil
cmp r12b, dil
je 0x140024f11
mov r11d, dword [rsp + 0x80]
lea ecx, [rbp - 5]
mov r15, rbx
mov qword [rsp + 0x70], rbx
mov qword [rsp + 0x60], rbx
mov r10b, dil
mov esi, r11d
mov r8b, dil
cmp cx, ax
je 0x140024cfd
cmp bp, ax
je 0x140024cfd
lea ebp, [rcx - 0x19]
cmp ax, di
je 0x140024d3d
sub ax, 0x30
cmp ax, bp
lea rax, [rbx + 2]
cmova esi, edi
jmp 0x140024d38
movzx eax, word [rbx + 2]
mov ebp, 9
lea rcx, [rsp + 0x60]
sub ax, 0x30
mov r8d, 0xc1
cmp ax, bp
cmova esi, edi
xor edx, edx
call fcn.140023d48
mov r11d, dword [rsp + 0x80]
mov r10b, 1
mov r15, rax
mov qword [rsp + 0x70], rax
mov r8b, r10b
mov qword [rsp + 0x40], rax
lea rcx, [rsp + 0x40]
call fcn.140014c28
mov rbx, qword [rsp + 0x40]
movsxd r9, esi
movzx eax, word [rbx]
cmp ax, di
je 0x140024e36
mov esi, 0x7c
cmp bp, ax
ja 0x140024d6b
cmp ax, 0xd
jbe 0x140024d75
mov ecx, 0x20
cmp cx, ax
jne 0x140024d9a
cmp r8b, 1
jg 0x140024e36
lea rcx, [rsp + 0x40]
inc r8b
call fcn.140014c28
mov rbx, qword [rsp + 0x40]
sub rbx, 2
jmp 0x140024e21
cmp ax, 0x3e
je 0x140024e96
cmp ax, 0x3c
je 0x140024e96
cmp ax, r13w
je 0x140024e96
cmp ax, 0x21
je 0x140024e96
cmp r9, rdi
je 0x140024e1c
cmp r11d, edi
je 0x140024e1c
mov edx, 0x26
cmp dx, ax
je 0x140024de5
cmp si, ax
je 0x140024de5
mov edx, 0x40
cmp dx, ax
jne 0x140024e1c
cmp bp, word [rbx + 2]
ja 0x140024df2
cmp word [rbx + 2], 0xd
jbe 0x140024df8
cmp cx, word [rbx + 2]
jne 0x140024e1c
movzx eax, word [rbx - 2]
cmp bp, ax
ja 0x140024e07
cmp ax, 0xd
jbe 0x140024e0c
cmp cx, ax
jne 0x140024e1c
cmp bp, ax
ja 0x140024e17
cmp ax, 0xd
jbe 0x140024e7c
cmp cx, ax
je 0x140024e7c
cmp r8b, dil
jg 0x140024e36
add rbx, 2
mov qword [rsp + 0x40], rbx
mov ax, word [rbx]
cmp ax, di
jne 0x140024d60
cmp r10b, dil
jne 0x140024eda
lea rcx, [rsp + 0x60]
xor edx, edx
mov r8d, 0xc1
call fcn.140023d48
mov r15, rax
mov qword [rsp + 0x70], rax
cmp r14b, dil
je 0x140024eda
mov r8, rax
lea rcx, [rsp + 0x98]
mov rdx, rbx
sub r8, rbx
sar r8, 1
call fcn.1400573bc
jmp 0x140024f33
movzx eax, word [rbx]
cmp word [rbx + 2], ax
jne 0x140024e91
mov word [rbx], di
mov r14b, 5
add rbx, 2
jmp 0x140024e99
mov r14b, 3
jmp 0x140024e99
mov r14b, 1
lea rax, [rbx + 2]
mov byte [rsp + 0x1d0], r14b
mov qword [rsp + 0x60], rax
cmp r14b, 1
jne 0x140024e3f
cmp word [rax], 0x3e
je 0x140024ecc
cmp word [rax], 0x3c
je 0x140024ecc
cmp word [rax], r13w
je 0x140024ecc
cmp word [rax], 0x21
jne 0x140024e3f
add rax, 2
mov qword [rsp + 0x60], rax
jmp 0x140024e3f
mov rsi, rdi
cmp word [r15], di
je 0x140024f43
mov word [r15], di
add r15, 2
mov qword [rsp + 0x70], r15
jmp 0x140024f43
cmp ax, 0x3e
je 0x140024f18
cmp ax, 0x3c
je 0x140024f18
cmp ax, r13w
je 0x140024f18
cmp ax, 0x21
je 0x140024f18
add rbx, 2
movzx eax, word [rbx]
cmp ax, di
jne 0x140024ef2
jmp 0x140024f43
lea rcx, [rsp + 0x98]
mov r14b, 1
mov rdx, rbx
mov byte [rsp + 0x1d0], r14b
call fcn.140061724
mov rsi, qword [rsp + 0x98]
mov word [rbx], di
mov qword [rsp + 0x68], rsi
mov ebp, dword [rsp + 0x90]
lea rcx, [0x14010ce50]
mov r13d, ebp
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov rax, qword [rsp + 0x1c8]
mov edx, dword [rsp + 0xb0]
mov r8d, 0x2a
mov ebx, edx
cmp r8w, word [rax]
jne 0x140024f9a
cmp r12b, dil
je 0x140024f9a
mov ecx, dword [rsp + 0x58]
cmp ecx, ebp
jne 0x140024f88
cmp edx, edi
je 0x140024f9a
add rax, 2
mov r13d, ecx
mov ebx, r8d
mov qword [rsp + 0x1c8], rax
mov r15, qword [rsp + 0x1c0]
cmp byte [r15 + 0xda], dil
jne 0x14002508e
cmp byte [r15 + 0xd], dil
jne 0x14002508e
cmp ebx, edi
jne 0x140025092
lea r8, [rsp + 0x38]
xor r9d, r9d
mov rdx, rax
mov rcx, r15
mov byte [rsp + 0x20], 1
call fcn.14006a8f4
mov rdx, qword [rsp + 0x38]
lea r8, [rsp + 0x38]
xor r9d, r9d
mov rcx, r15
mov qword [rsp + 0x108], rdx
mov qword [rsp + 0x38], rdi
mov byte [rsp + 0x20], dil
call fcn.140069518
cmp rsi, rdi
je 0x14002507c
lea r8, [rsp + 0x78]
xor r9d, r9d
mov rdx, rsi
mov rcx, r15
mov byte [rsp + 0x20], 1
call fcn.14006a8f4
mov rdx, qword [rsp + 0x78]
lea r8, [rsp + 0x78]
xor r9d, r9d
mov rcx, r15
mov qword [rsp + 0x110], rdx
mov qword [rsp + 0x78], rdi
mov byte [rsp + 0x20], dil
call fcn.140069518
mov rcx, qword [rsp + 0x38]
call qword [sym.imp.KERNEL32.dll_lstrlenW]
mov rdx, qword [rsp + 0x78]
lea rcx, [rsp + 0x38]
movsxd rbx, eax
call fcn.140057290
mov rax, qword [rsp + 0x38]
lea rsi, [rax + rbx*2]
lea rcx, [rsp + 0x110]
mov qword [rsp + 0x68], rsi
call fcn.14004f564
lea rcx, [rsp + 0x108]
call fcn.14004f564
jmp 0x140025233
cmp ebx, edi
je 0x1400250e0
cmp byte [r15 + 0xd], dil
jne 0x1400250b1
mov ecx, 0x26
cmp cx, word [rax]
je 0x1400250b1
lea rdx, [rsp + 0x38]
mov rcx, rax
call fcn.140060990
jmp 0x1400250f8
or r9d, 0xffffffff
xor r8d, r8d
mov rdx, rax
mov rcx, r15
call fcn.14001b2ac
cmp rax, rdi
je 0x1400250cd
mov rdx, qword [rax]
jmp 0x1400250d4
lea rdx, [0x1400ee4c4]
lea rcx, [rsp + 0x38]
call fcn.140061724
jmp 0x1400250f8
lea r8, [rsp + 0x38]
xor r9d, r9d
mov rdx, rax
mov rcx, r15
mov byte [rsp + 0x20], 1
call fcn.14006a8f4
cmp rsi, rdi
je 0x140025233
mov rcx, qword [rsp + 0x38]
call qword [sym.imp.KERNEL32.dll_lstrlenW]
movsxd r12, eax
cmp ebx, edi
je 0x1400251fe
mov rax, rsi
lea rbp, [0x1400ee4c4]
mov qword [rsp + 0x60], rdi
mov r14d, 0x3d
cmp word [rax], 0x3e
je 0x140025144
cmp word [rax], 0x3c
je 0x140025144
cmp word [rax], r14w
je 0x140025144
cmp word [rax], 0x21
jne 0x14002514a
add rax, 2
jmp 0x14002512c
mov r14b, byte [rsp + 0x1d0]
mov rbx, rax
sub rbx, rsi
sar rbx, 1
cmp byte [r15 + 0xd], dil
jne 0x14002517f
mov ecx, 0x26
cmp cx, word [rax]
je 0x14002517f
lea rdx, [rsp + 0x60]
mov rcx, rax
call fcn.140060990
mov rbp, qword [rsp + 0x60]
jmp 0x140025199
or r9d, 0xffffffff
xor r8d, r8d
mov rdx, rax
mov rcx, r15
call fcn.14001b2ac
cmp rax, rdi
je 0x140025199
mov rbp, qword [rax]
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_lstrlenW]
lea rcx, [rsp + 0x38]
movsxd rsi, eax
lea rdx, [rsi + rbx]
add rdx, r12
call fcn.140057254
cmp rbx, rdi
je 0x1400251d4
mov rax, qword [rsp + 0x38]
mov rdx, qword [rsp + 0x68]
movsxd r8, ebx
lea rcx, [rax + r12*2]
add r8, r8
call fcn.14001a9b0
lea eax, [rsi + 1]
lea rcx, [rbx + r12]
mov rdx, rbp
movsxd r8, eax
mov rax, qword [rsp + 0x38]
lea rcx, [rax + rcx*2]
add r8, r8
call fcn.14001a9b0
lea rcx, [rsp + 0x60]
call fcn.14004f564
jmp 0x140025225
lea r8, [rsp + 0x78]
xor r9d, r9d
mov rdx, rsi
mov rcx, r15
mov byte [rsp + 0x20], 1
call fcn.14006a8f4
mov rdx, qword [rsp + 0x78]
lea rcx, [rsp + 0x38]
call fcn.140057290
mov rax, qword [rsp + 0x38]
lea rsi, [rax + r12*2]
mov qword [rsp + 0x68], rsi
mov rax, qword [rsp + 0x38]
lea rcx, [0x14010ce50]
mov qword [rsp + 0x1c8], rax
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov rcx, qword [rsp + 0x1c8]
call fcn.140016268
mov rcx, qword [rsp + 0x1c8]
call qword [sym.imp.KERNEL32.dll_lstrlenW]
mov r10, qword [rsp + 0x1c8]
movsxd rdx, eax
mov r15, r10
lea rbx, [r10 + rdx*2]
cmp rsi, rdi
jne 0x14002529c
mov rcx, r10
call qword [sym.imp.KERNEL32.dll_lstrlenW]
mov r10, qword [rsp + 0x1c8]
movsxd rcx, eax
lea rsi, [r10 + rcx*2]
mov qword [rsp + 0x68], rsi
mov r12, r10
mov r9d, edi
mov ebp, 9
cmp rsi, rdi
je 0x1400252d0
lea eax, [rbp + 0x17]
cmp bp, word [r12]
ja 0x1400252be
cmp word [r12], 0xd
jbe 0x1400252d0
cmp ax, word [r12]
je 0x1400252d0
cmp r12, rsi
jae 0x1400252d0
add r12, 2
jmp 0x1400252af
mov r11, qword [rsp + 0xe0]
sub r12, r10
sar r12, 1
cmp r14b, dil
jne 0x140025307
cmp r11, rdi
jne 0x140025307
mov eax, 0x3a
cmp word [r10], ax
je 0x140025307
cmp dword [rsp + 0x80], edi
je 0x14002582d
mov ebx, eax
jmp 0x140025b5b
mov rax, rsi
mov ecx, 0x3a
mov qword [rsp + 0x40], rax
cmp word [r10], cx
jne 0x140025328
cmp r14b, dil
mov rcx, 0xffffffffffffffff
cmove r13d, ecx
cmp r14b, 1
jne 0x140025350
lea rcx, [rsi + 2]
mov edx, 0x3d
cmp word [rcx], dx
je 0x140025348
cmp word [rsi], 0x3c
jne 0x140025355
cmp word [rcx], 0x3e
jne 0x140025355
mov rax, rcx
mov qword [rsp + 0x40], rcx
cmp r14b, dil
je 0x14002535e
add rax, 2
mov qword [rsp + 0x40], rax
lea rcx, [rsp + 0x40]
call fcn.140014c28
mov r8, qword [rsp + 0x40]
cmp byte [rsp + 0x31], dil
je 0x14002539a
mov eax, 0x3f
cmp ax, word [r8]
jne 0x14002539a
add r8, 2
lea rcx, [rsp + 0x1d8]
mov r14b, 1
mov qword [rsp + 0x40], r8
call fcn.140014c28
jmp 0x14002539d
mov r14b, dil
mov ecx, dword [rsp + 0x58]
cmp r13d, ecx
je 0x1400253cf
movzx eax, word [r10]
cmp ecx, eax
je 0x1400253bd
cmp dword [rsp + 0x84], eax
je 0x1400253bd
cmp dword [rsp + 0x48], eax
jne 0x1400253cf
add r10, 2
mov r13d, eax
mov r9d, eax
mov qword [rsp + 0x1c8], r10
mov eax, dword [rsp + 0x48]
cmp r11, rdi
je 0x14002541c
cmp byte [rsp + 0x30], dil
jne 0x14002541c
cmp r13d, eax
je 0x14002541c
lea rcx, [rsp + 0x1c8]
call fcn.140014c28
mov r10, qword [rsp + 0x1c8]
cmp word [r10], 0x30
jb 0x140025407
cmp word [r10], 0x39
jbe 0x140025414
mov eax, 0x2e
cmp ax, word [r10]
cmovne r13d, edi
mov eax, dword [rsp + 0x48]
mov ecx, dword [rsp + 0x58]
cmp qword [rsp + 0xe8], rdi
jne 0x140025438
cmp r9d, edi
jne 0x140025438
mov edx, 0x27
cmp dx, word [r10]
cmove r13d, ecx
cmp ecx, r13d
jne 0x140025517
lea rcx, [rsp + 0x60]
mov qword [rsp + 0x60], r10
call fcn.140014c28
mov r9, qword [rsp + 0x60]
add rsi, 0xfffffffffffffffe
cmp rsi, r9
jb 0x14002547e
mov edi, 0x20
cmp bp, word [rsi]
ja 0x14002546e
cmp word [rsi], 0xd
jbe 0x140025473
cmp di, word [rsi]
jne 0x14002547c
sub rsi, 2
cmp rsi, r9
jae 0x140025463
xor edi, edi
sub rsi, r9
lea rcx, [rsp + 0xb8]
mov qword [rsp + 0xb8], r8
add rsi, 2
sar rsi, 1
call fcn.140014c28
mov rdx, qword [rsp + 0xb8]
add rbx, 0xfffffffffffffffe
cmp rbx, rdx
jb 0x1400254d3
mov r9d, 0x20
cmp bp, word [rbx]
ja 0x1400254bf
cmp word [rbx], 0xd
jbe 0x1400254c5
cmp r9w, word [rbx]
jne 0x1400254ce
sub rbx, 2
cmp rbx, rdx
jae 0x1400254b4
mov r9, qword [rsp + 0x60]
sub rbx, rdx
mov r8d, esi
add rbx, 2
sar rbx, 1
cmp esi, ebx
cmovg r8d, ebx
cmp r8d, edi
jle 0x14002550e
mov rcx, r9
cmp qword [rsp + 0x100], rdi
je 0x140025500
call qword [sym.imp.SHLWAPI.dll_StrCmpNW]
jmp 0x140025506
call qword [sym.imp.SHLWAPI.dll_StrCmpNIW]
cmp eax, edi
jne 0x140025a0c
mov eax, esi
sub eax, ebx
jmp 0x140025a0c
cmp eax, r13d
jne 0x1400255e2
lea rdx, [rsp + 0xb8]
lea rcx, [rsp + 0x1c8]
movsd qword [rsp + 0xb8], xmm7
movsd qword [rsp + 0x60], xmm7
call fcn.1400676cc
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x40]
call fcn.1400676cc
cmp byte [rsp + 0x1d0], 1
movsd xmm5, qword [rsp + 0xb8]
movsd xmm1, qword [rsp + 0x60]
cvttsd2si rcx, xmm5
cvttsd2si rax, xmm1
mov qword [rsp + 0x88], rcx
mov qword [rsp + 0x50], rax
jg 0x140025a24
pxor xmm0, xmm0
cvtsi2sd xmm0, rcx
ucomisd xmm5, xmm0
jp 0x1400255ad
jne 0x1400255ad
pxor xmm0, xmm0
cvtsi2sd xmm0, rax
ucomisd xmm1, xmm0
jp 0x1400255ad
je 0x140025a24
comisd xmm5, xmm1
jbe 0x1400255ba
mov eax, 1
jmp 0x1400255ca
ucomisd xmm5, xmm1
jp 0x1400255c6
jne 0x1400255c6
mov eax, edi
jmp 0x1400255ca
or rax, 0xffffffffffffffff
movsxd rcx, eax
mov rax, rdi
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x88], rcx
jmp 0x140025a24
cmp dword [rsp + 0x84], r13d
jne 0x140025622
lea rdx, [rsp + 0x88]
lea rcx, [rsp + 0x1c8]
call fcn.14005ce78
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x40]
call fcn.14005ce78
mov rcx, qword [rsp + 0x88]
mov rax, qword [rsp + 0x50]
jmp 0x140025a24
cmp r12d, 3
jl 0x140025b4d
lea rcx, [rsp + 0x40]
mov bpl, dil
call fcn.140014c28
mov rax, qword [rsp + 0x40]
mov ecx, 0x23
cmp cx, word [rax]
jne 0x140025654
add rax, 2
mov bpl, 1
mov qword [rsp + 0x40], rax
mov bl, byte [rsp + 0x80]
lea rdx, [rsp + 0xa0]
lea rcx, [rsp + 0xc0]
movsd qword [rsp + 0xa0], xmm7
mov sil, dil
mov qword [rsp + 0xc0], rax
call fcn.1400676cc
mov rcx, qword [rsp + 0x40]
lea rdx, [rsp + 0x50]
mov r13d, eax
mov qword [rsp + 0xc0], rcx
lea rcx, [rsp + 0xc0]
call fcn.14005ce78
mov rcx, qword [rsp + 0xc0]
mov eax, 0x2e
cmp ax, word [rcx]
jne 0x1400256c9
cvttsd2si rcx, qword [rsp + 0xa0]
mov qword [rsp + 0x50], rcx
jmp 0x1400256ce
mov rcx, qword [rsp + 0x50]
lea eax, [r12 - 3]
cmp eax, 2
ja 0x1400257c0
lea rdx, [0x1400f2230]
mov r8d, 3
mov rcx, r15
call qword [sym.imp.SHLWAPI.dll_StrCmpNIW]
cmp eax, edi
jne 0x1400257bb
cmp r12d, 3
je 0x140025728
movzx eax, word [r15 + 6]
movzx ecx, word [r15 + 8]
mov edx, 0xffdf
and ax, dx
and cx, dx
cmp r12d, 4
jne 0x140025789
lea ecx, [r12 + 0x3d]
cmp ax, cx
jne 0x140025779
mov bl, dil
mov sil, 1
movsx ecx, bl
call fcn.14001b43c
mov rcx, rax
mov qword [rsp + 0x88], rax
mov rdx, rax
cmp sil, dil
je 0x140025751
lea rdx, [rax + 0xfffff]
shr rdx, 0x14
cmp r14b, dil
jne 0x140025e8e
cmp r13d, edi
jle 0x140025e65
cmp sil, dil
je 0x1400257b1
pxor xmm0, xmm0
test rdx, rdx
cvtsi2sd xmm0, rdx
jmp 0x1400259db
cmp ax, 0x42
je 0x14002572b
cmp ax, 0x55
jne 0x1400257dd
mov bl, 1
jmp 0x140025728
cmp r12d, 5
jne 0x1400257bb
cmp ax, 0x42
jne 0x1400257dd
cmp cx, 0x55
jne 0x14002579f
mov bl, 1
jmp 0x14002572b
mov eax, 0x41
cmp cx, ax
jne 0x1400257dd
mov bl, dil
jmp 0x14002572b
mov rax, qword [rsp + 0x50]
jmp 0x140025a1f
mov rcx, qword [rsp + 0x50]
cmp r12d, 3
jne 0x1400257e2
lea rdx, [0x1400f2228]
mov r8d, r12d
mov rcx, r15
call qword [sym.imp.SHLWAPI.dll_StrCmpNIW]
cmp eax, edi
je 0x140025812
mov rcx, qword [rsp + 0x50]
mov r10, qword [rsp + 0x1c8]
mov ebx, 0x3a
cmp word [r10], bx
jne 0x14002596f
cmp word [r10 + 2], 0x65
jne 0x140025819
add r10, 4
mov qword [rsp + 0x1c8], r10
jmp 0x140025b5b
mov rcx, qword [rsp + 0x50]
jmp 0x140025866
cmp word [r10 + 2], 0x70
jne 0x14002584e
add r10, 4
mov qword [rsp + 0x1c8], r10
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov rcx, r10
mov dword [rsp + 0x20], edi
call fcn.14001f6dc
mov ebx, edi
cmp rax, rdi
setg bl
jmp 0x140025cab
cmp word [r10 + 2], 0x6b
jne 0x14002596f
add r10, 4
mov qword [rsp + 0x1c8], r10
mov r8, qword [rsp + 0x40]
mov ebx, 9
movzx eax, word [r8]
sub ax, 0x30
cmp ax, bx
ja 0x140025897
movzx edx, word [r8 + 2]
lea eax, [rdx - 0x30]
cmp ax, bx
jbe 0x140025894
or dx, 0x20
cmp dx, 0x78
jne 0x140025897
mov bpl, 2
cmp bpl, dil
jne 0x1400258ae
xor edx, edx
mov rcx, r8
call fcn.14001f230
movsxd rcx, eax
mov qword [rsp + 0x50], rcx
cmp rcx, rdi
jle 0x140025e65
lea rax, [rcx - 0x61]
mov edx, 0x19
cmp rax, rdx
ja 0x1400258ce
sub rcx, 0x20
mov qword [rsp + 0x50], rcx
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
mov ecx, 0x8000
mov word [rsp + 0x122], di
and ax, cx
neg ax
sbb r8d, r8d
and r8d, dword [rsp + 0x50]
movsxd rax, r8d
mov word [rsp + 0x120], r8w
mov qword [rsp + 0x88], rax
mov eax, 0x41
cmp r8d, eax
jl 0x140025913
cmp r8d, 0x5a
jle 0x140025930
lea eax, [r8 - 0x30]
cmp eax, ebx
jbe 0x140025930
lea rdx, str.0x_lX
lea rcx, [rsp + 0x120]
call qword [sym.imp.USER32.dll_wsprintfW]
lea r8, [rsp + 0x120]
cmp r14b, dil
jne 0x140025e6e
mov rbp, qword [rsp + 0x1c0]
lea rdx, str.PressKey
mov rcx, rbp
call fcn.140056790
mov rcx, qword [rsp + 0x88]
mov rax, qword [rsp + 0x50]
mov rsi, qword [rsp + 0x68]
jmp 0x140025a2c
movzx eax, word [r15]
movsx edx, byte [rsp + 0x80]
lea rcx, [rsp + 0xc8]
mov word [rsp + 0xc8], ax
mov eax, 0x5c
xor r8d, r8d
mov word [rsp + 0xcc], ax
xor eax, eax
mov word [rsp + 0xca], bx
mov dword [rsp + 0xd0], eax
mov word [rsp + 0xce], di
call fcn.1400162e8
cmp r14b, dil
jne 0x140025e8b
cmp r13d, edi
jle 0x140025e85
shr rax, 0x14
pxor xmm0, xmm0
cvtsi2sd xmm0, rax
test rax, rax
jns 0x1400259e5
addsd xmm0, qword [0x1400f21f8]
comisd xmm0, xmmword [rsp + 0xa0]
jbe 0x1400259f7
mov eax, 1
jmp 0x140025a0c
ucomisd xmm0, qword [rsp + 0xa0]
jp 0x140025a08
jne 0x140025a08
mov eax, edi
jmp 0x140025a0c
or rax, 0xffffffffffffffff
movsxd rcx, eax
mov rax, rdi
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x88], rcx
mov rsi, qword [rsp + 0x68]
mov rbp, qword [rsp + 0x1c0]
mov r9d, 0x3d
cmp word [rsi], di
jne 0x140025a44
cmp rcx, rdi
mov ebx, edi
setne bl
jmp 0x140025cb9
cmp word [rsi], r9w
jne 0x140025a57
cmp rcx, rax
mov ebx, edi
sete bl
jmp 0x140025cb9
mov dx, 0x3e
cmp word [rsi], dx
jne 0x140025a74
cmp word [rsi + 2], r9w
jne 0x140025a74
cmp rcx, rax
mov ebx, edi
setge bl
jmp 0x140025cb9
cmp word [rsi], 0x3c
jne 0x140025a99
cmp word [rsi + 2], r9w
jne 0x140025a8e
cmp rcx, rax
mov ebx, edi
setle bl
jmp 0x140025cb9
cmp word [rsi + 2], dx
jne 0x140025a99
cmp rcx, rax
jmp 0x140025a3a
cmp word [rsi], 0x21
jne 0x140025ab3
cmp word [rsi + 2], r9w
je 0x140025a94
cmp word [rsi + 2], dx
je 0x140025a81
cmp word [rsi + 2], 0x3c
je 0x140025a67
cmp word [rsi], dx
jne 0x140025ac5
cmp rcx, rax
mov ebx, edi
setg bl
jmp 0x140025cb9
cmp word [rsi], 0x3c
mov r10d, 0x26
jne 0x140025ade
cmp rcx, rax
mov ebx, edi
setl bl
jmp 0x140025cbf
cmp word [rsi], r10w
jne 0x140025aff
cmp rcx, rdi
je 0x140025af8
cmp rax, rdi
je 0x140025af8
mov ebx, 1
jmp 0x140025cbf
mov ebx, edi
jmp 0x140025cbf
mov r8d, 0x7c
cmp word [rsi], r8w
jne 0x140025b26
cmp rcx, rdi
jne 0x140025b1c
cmp rax, rdi
jne 0x140025b1c
mov ebx, edi
jmp 0x140025cc5
mov ebx, 1
jmp 0x140025cc5
mov r11d, 0x40
cmp word [rsi], r11w
jne 0x140025e65
cmp rax, rdi
mov ebx, edi
mov eax, edi
setne bl
cmp rcx, rdi
setne al
xor ebx, eax
jmp 0x140025ccb
cmp r11, rdi
je 0x140025ecc
mov ebx, 0x3a
mov rcx, r10
call fcn.140018fa4
mov rcx, rax
mov qword [rsp + 0x1c8], rax
call qword [sym.imp.KERNEL32.dll_lstrlenW]
mov r8, qword [rsp + 0x1c8]
mov r12d, 0xfffffff8
movzx esi, word [r8]
movsxd rbp, eax
mov eax, 0xffdf
and si, ax
lea r13d, [r12 + 0x49]
lea eax, [r12 + 0x21]
movzx ecx, si
sub cx, r13w
cmp cx, ax
ja 0x140025c09
cmp word [r8 + 2], bx
jne 0x140025c09
cmp word [r8 + 4], di
je 0x140025bdb
cmp si, 0x42
ja 0x140025c09
movzx ecx, si
call fcn.1400d1488
mov r12d, edi
cmp eax, edi
sete r12b
cmp r12d, edi
jne 0x140025bdb
mov r8, qword [rsp + 0x1c8]
jmp 0x140025c09
call qword [sym.imp.KERNEL32.dll_GetLogicalDrives]
mov ebx, eax
mov al, sil
sub al, r13b
mov cl, al
shr ebx, cl
and ebx, 1
je 0x140025cab
mov r8, qword [rsp + 0x1c8]
cmp word [r8 + 4], di
je 0x140025cab
cmp ebp, edi
jle 0x140025c5d
mov ecx, 0x5c
mov rax, rbp
lea edx, [rcx - 0x2d]
cmp cx, word [r8 + rbp*2 - 2]
je 0x140025c28
cmp dx, word [r8 + rbp*2 - 2]
jne 0x140025c5d
lea eax, [rbp - 1]
mov sil, 1
cdqe
cmp rax, rdi
jl 0x140025c56
cmp cx, word [r8 + rax*2]
je 0x140025c43
cmp dx, word [r8 + rax*2]
jne 0x140025c56
mov word [r8 + rax*2], di
sub rax, 1
mov r8, qword [rsp + 0x1c8]
jns 0x140025c35
mov ebp, 1
jmp 0x140025c60
mov sil, dil
mov ebx, edi
cmp ebp, edi
je 0x140025cab
cmp qword [rsp + 0xf0], rdi
je 0x140025c9d
movzx ecx, word [r8]
cmp cx, di
je 0x140025c9d
mov eax, 0x3a
cmp word [r8 + 2], ax
jne 0x140025c9d
cmp r12d, edi
jg 0x140025cab
jge 0x140025c9d
call fcn.1400d1488
cmp eax, edi
je 0x140025cab
mov r8, qword [rsp + 0x1c8]
movsx edx, sil
mov rcx, r8
call fcn.1400d1688
mov ebx, eax
mov rbp, qword [rsp + 0x1c0]
mov r9d, 0x3d
mov r10d, 0x26
mov r8d, 0x7c
mov r11d, 0x40
mov rsi, rdi
cmp dword [rsp + 0xdc], edi
je 0x140025cdf
cmp ebx, edi
sete sil
jmp 0x140025ce5
cmp ebx, edi
setne sil
mov r13, qword [rsp + 0xa8]
mov r12b, byte [rsp + 0x32]
lea eax, [rsi + 0x30]
mov word [r13], ax
add r13, 2
mov qword [rsp + 0xa8], r13
cmp r12b, dil
je 0x140025dd2
mov r15, qword [rsp + 0x70]
movzx eax, word [r15]
cmp ax, di
je 0x140025d9c
mov edx, 9
mov ecx, 0x5b
cmp cx, ax
je 0x140025d79
mov ecx, 0x5d
cmp cx, ax
je 0x140025d79
mov ecx, 0x28
cmp cx, ax
je 0x140025d79
mov ecx, 0x29
cmp cx, ax
je 0x140025d79
cmp r10w, ax
je 0x140025d79
cmp r8w, ax
jne 0x140025e0e
cmp dx, word [r15 + 2]
ja 0x140025d69
cmp word [r15 + 2], 0xd
jbe 0x140025d79
mov ecx, 0x20
cmp cx, word [r15 + 2]
jne 0x140025e13
mov word [r13], ax
add r13, 2
mov qword [rsp + 0xa8], r13
add r15, 2
mov qword [rsp + 0x70], r15
mov ax, word [r15]
cmp ax, di
jne 0x140025d22
mov rax, qword [rsp + 0xf8]
mov ecx, 0x23
lea r8, [rsp + 0x120]
mov word [rax - 6], cx
lea rdx, [rax - 2]
mov word [rax - 4], r10w
mov word [rdx], r9w
mov rcx, rbp
mov word [r13], di
call fcn.1400a6120
mov rsi, rax
cmp dword [rsp + 0xd8], edi
je 0x140025de5
cmp rsi, rdi
sete dil
mov rsi, rdi
lea rcx, [rsp + 0x98]
call fcn.14004f564
lea rcx, [rsp + 0x78]
call fcn.14004f564
lea rcx, [rsp + 0x38]
call fcn.14004f564
mov rax, rsi
jmp 0x140025ef4
mov ecx, 0x20
cmp r11w, ax
je 0x140025d79
cmp dx, ax
ja 0x140025e2c
cmp ax, 0xd
jbe 0x140025d8a
cmp cx, ax
je 0x140025d8a
cmp word [r15], di
je 0x140025d9c
lea rcx, [rsp + 0x98]
call fcn.14004f564
lea rcx, [rsp + 0x78]
call fcn.14004f564
lea rcx, [rsp + 0x38]
call fcn.14004f564
jmp 0x140024c3b
mov rdi, 0xffffffff80070057
jmp 0x140025ea6
mov rdx, qword [rsp + 0x1d8]
mov rcx, qword [rsp + 0x1c0]
call fcn.140056790
jmp 0x140025ea6
or rdi, 0xffffffffffffffff
jmp 0x140025ea6
mov rdx, rax
mov r8, qword [rsp + 0x1c0]
mov rcx, qword [rsp + 0x1d8]
call fcn.140018be8
movsxd rdi, eax
lea rcx, [rsp + 0x98]
call fcn.14004f564
lea rcx, [rsp + 0x78]
call fcn.14004f564
lea rcx, [rsp + 0x38]
call fcn.14004f564
mov rax, rdi
jmp 0x140025ef4
lea rcx, [rsp + 0x98]
call fcn.14004f564
lea rcx, [rsp + 0x78]
call fcn.14004f564
lea rcx, [rsp + 0x38]
call fcn.14004f564
mov rax, 0xffffffff80070057
movaps xmm7, xmmword [rsp + 0x160]
add rsp, 0x178
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret