Function at 0x417bd4
Capabilities:
Get disk information
Log keystrokes via polling
Parse credit card information

Disassembly:
push ebp
lea ebp, [esp - 0x6c]
sub esp, 0x110
mov eax, dword [ebp + 0x78]
and eax, 0x10000
mov dword [ebp - 0x44], eax
mov eax, dword [ebp + 0x78]
and eax, 0x20000
push ebx
push esi
mov dword [ebp + 0x18], ecx
xor ecx, ecx
mov dword [ebp - 0x54], eax
movzx eax, byte [ebp + 0x78]
push edi
xor edi, edi
cmp eax, edi
sete cl
xor ebx, ebx
cmp eax, 1
sete bl
mov dword [ebp - 8], edi
mov dword [ebp - 0x14], ecx
xor ecx, ecx
cmp eax, 2
sete cl
cmp dword [ebp - 0x14], edi
mov dword [ebp + 0x14], ebx
mov dword [ebp + 0xc], ecx
jne 0x417c31
cmp ebx, edi
mov byte [ebp + 0x43], 0
je 0x417c35
mov byte [ebp + 0x43], 1
mov eax, dword [ebp + 0x74]
add eax, 0xfffffffe
mov dword [ebp - 0x30], eax
mov dword [ebp + 0x20], eax
push 1
lea eax, [ebp + 0x74]
push eax
push 0x49aab8
mov dword [ebp + 0x2c], edi
call fcn.00438eee
add esp, 0xc
cmp dword [ebp - 0x14], edi
push 0x24
pop edx
movzx eax, al
push 0x7c
mov dword [ebp - 0x40], eax
mov dword [ebp + 8], 0x100001
mov dword [ebp + 0x10], 0x100002
mov dword [ebp + 0x24], 0x100003
pop esi
jne 0x417c91
cmp ebx, edi
je 0x417c89
mov dword [ebp + 8], esi
mov dword [ebp + 0x24], edx
jmp 0x417c97
cmp dword [ebp + 0xc], edi
je 0x417c9e
mov dword [ebp - 8], esi
mov dword [ebp + 8], edx
mov dword [ebp + 0x24], esi
mov dword [ebp + 0x10], 0x23
mov eax, dword [ebp + 0x74]
mov cx, word [eax]
cmp cx, dx
mov byte [ebp + 0x42], 0
je 0x417cb8
cmp cx, 0x23
je 0x417cb8
cmp cx, si
jne 0x417cc6
movzx ecx, cx
inc eax
inc eax
mov dword [ebp - 8], ecx
mov byte [ebp + 0x42], cl
mov dword [ebp + 0x74], eax
cmp word [eax], 0x5b
mov esi, eax
sete byte [ebp + 0x53]
cmp byte [ebp + 0x53], 0
mov dword [ebp + 0x48], esi
je 0x417d36
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
lea ecx, [esi + eax*2 - 2]
jmp 0x417ceb
mov word [ecx], di
dec ecx
dec ecx
mov ax, word [ecx]
call fcn.00431c5f
test al, al
jne 0x417ce6
cmp word [ecx], 0x5d
jne 0x417d00
mov word [ecx], di
push 2
pop edx
add esi, edx
xor ecx, ecx
jmp 0x417d2b
mov eax, ecx
call fcn.00431c5f
test al, al
jne 0x417d29
cmp cx, 0x5b
je 0x417d20
cmp cx, 0x28
jne 0x417d36
mov eax, dword [ebp + 0x20]
add dword [ebp + 0x20], edx
mov word [eax], cx
add esi, edx
mov cx, word [esi]
cmp cx, di
mov dword [ebp + 0x48], esi
jne 0x417d09
push 1
lea eax, [ebp + 0x74]
push eax
push 0x49aab8
mov dword [ebp + 0x74], esi
call fcn.00438eee
mov edx, dword [ebp + 0x74]
movzx eax, al
add esp, 0xc
cmp byte [ebp + 0x53], 0
mov esi, edx
mov dword [ebp - 0x34], eax
mov dword [ebp + 0x54], edi
mov dword [ebp + 0x58], edi
mov dword [ebp + 0x60], edi
mov dword [ebp + 0x64], edi
mov dword [ebp + 0x38], esi
mov dword [ebp + 0x28], edi
mov dword [ebp + 0x44], edi
mov dword [ebp + 0x34], edi
mov dword [ebp + 0x1c], edi
mov byte [ebp + 0x7b], 0
je 0x417f3d
mov eax, dword [ebp + 0x14]
mov dword [ebp + 0x30], eax
xor eax, eax
mov ax, word [edx]
xor bl, bl
cmp ax, 0x22
mov dword [ebp + 0x48], edx
mov dword [ebp + 0x3c], edx
mov byte [ebp + 0x6b], 0
je 0x417dbd
cmp ax, 0x27
je 0x417dbd
cmp ax, di
je 0x417df4
push eax
call fcn.00410c71
add esp, 4
test al, al
jne 0x417db8
mov dword [ebp + 0x30], edi
lea eax, [edx + 2]
jmp 0x417df1
xor eax, eax
mov ax, word [edx + 2]
push eax
call fcn.00410c71
add esp, 4
test al, al
jne 0x417dd3
mov dword [ebp + 0x30], edi
push 0xc1
lea eax, [ebp + 0x3c]
push edi
push eax
call fcn.00417571
mov edx, dword [ebp + 0x74]
add esp, 0xc
mov byte [ebp + 0x6b], 1
mov bl, 1
mov dword [ebp + 0x48], eax
mov dword [ebp + 0x38], eax
lea ecx, [ebp + 0x38]
call fcn.0040c032
mov esi, dword [ebp + 0x38]
xor ecx, ecx
jmp 0x417e95
mov eax, ecx
call fcn.00431c5f
test al, al
je 0x417e2b
cmp bl, 1
jg 0x417ea1
lea ecx, [ebp + 0x38]
inc bl
call fcn.0040c032
mov esi, dword [ebp + 0x38]
dec esi
dec esi
jmp 0x417e90
cmp cx, 0x3e
je 0x417ef7
cmp cx, 0x3c
je 0x417ef7
cmp cx, 0x3d
je 0x417ef7
cmp cx, 0x21
je 0x417ef7
cmp dword [ebp + 0x30], edi
je 0x417e8c
cmp dword [ebp + 0x14], 0
je 0x417e8a
cmp cx, 0x26
je 0x417e70
cmp cx, 0x7c
je 0x417e70
cmp cx, 0x40
jne 0x417e8a
mov ax, word [esi + 2]
call fcn.00431c5f
test al, al
je 0x417e8a
mov ax, word [esi - 2]
call fcn.00431c5f
test al, al
jne 0x417ed9
xor edi, edi
test bl, bl
jg 0x417ea1
inc esi
inc esi
mov dword [ebp + 0x38], esi
mov cx, word [esi]
cmp cx, di
jne 0x417e06
cmp byte [ebp + 0x6b], 0
jne 0x417f2c
push 0xc1
lea eax, [ebp + 0x3c]
push edi
push eax
call fcn.00417571
add esp, 0xc
cmp byte [ebp + 0x7b], 0
mov dword [ebp + 0x48], eax
je 0x417f29
sub eax, esi
sar eax, 1
push eax
push esi
lea ecx, [ebp + 0x1c]
call fcn.004372a4
jmp 0x417f75
lea eax, [esi + 2]
mov cx, word [eax]
xor edi, edi
cmp cx, word [esi]
jne 0x417ef1
mov word [esi], di
mov esi, eax
mov byte [ebp + 0x7b], 5
jmp 0x417efb
mov byte [ebp + 0x7b], 3
jmp 0x417efb
mov byte [ebp + 0x7b], 1
cmp byte [ebp + 0x7b], 1
lea ecx, [esi + 2]
mov dword [ebp + 0x3c], ecx
jne 0x417eab
mov ax, word [ecx]
cmp ax, 0x3e
je 0x417f22
cmp ax, 0x3c
je 0x417f22
cmp ax, 0x3d
je 0x417f22
cmp ax, 0x21
jne 0x417eab
inc ecx
inc ecx
mov dword [ebp + 0x3c], ecx
jmp 0x417eab
mov edx, dword [ebp + 0x74]
mov eax, dword [ebp + 0x48]
cmp word [eax], di
je 0x417f81
add dword [ebp + 0x48], 2
mov word [eax], di
jmp 0x417f7e
xor eax, eax
mov ax, word [edx]
jmp 0x417f61
cmp ax, 0x3e
je 0x417f68
cmp ax, 0x3c
je 0x417f68
cmp ax, 0x3d
je 0x417f68
cmp ax, 0x21
je 0x417f68
inc esi
inc esi
mov ax, word [esi]
cmp ax, di
jne 0x417f44
jmp 0x417f81
push esi
lea ecx, [ebp + 0x1c]
mov byte [ebp + 0x7b], 1
call fcn.00441a80
mov eax, dword [ebp + 0x1c]
mov word [esi], di
mov dword [ebp + 0x28], eax
mov edx, dword [ebp + 0x74]
mov ebx, dword [ebp + 0x18]
cmp byte [ebx + 0x92], 0
jne 0x41801c
cmp byte [ebx + 9], 0
jne 0x41801c
push 1
push edi
lea eax, [ebp + 0x44]
push eax
push edx
mov ecx, ebx
call fcn.0043fdd2
mov eax, dword [ebp + 0x44]
push edi
push edi
lea ecx, [ebp + 0x44]
push ecx
push eax
mov ecx, ebx
mov dword [ebp - 0x38], eax
mov dword [ebp + 0x44], edi
call fcn.0043eb92
mov esi, dword [ebp + 0x28]
cmp esi, edi
je 0x418012
push 1
push edi
lea eax, [ebp + 0x34]
push eax
push esi
mov ecx, ebx
call fcn.0043fdd2
mov eax, dword [ebp + 0x34]
push edi
push edi
lea ecx, [ebp + 0x34]
push ecx
push eax
mov ecx, ebx
mov dword [ebp - 0x3c], eax
mov dword [ebp + 0x34], edi
call fcn.0043eb92
push dword [ebp + 0x44]
call dword [sym.imp.KERNEL32.dll_lstrlenW]
push dword [ebp + 0x34]
lea ecx, [ebp + 0x44]
mov esi, eax
call fcn.004371ec
mov eax, dword [ebp + 0x44]
lea ecx, [ebp - 0x3c]
lea esi, [eax + esi*2]
call fcn.00431c4c
lea ecx, [ebp - 0x38]
call fcn.00431c4c
jmp 0x41805d
push 1
push edi
lea eax, [ebp + 0x44]
push eax
push edx
mov ecx, ebx
call fcn.0043fdd2
mov esi, dword [ebp + 0x28]
cmp esi, edi
je 0x41805d
push 1
push edi
lea eax, [ebp + 0x34]
push eax
push esi
mov ecx, ebx
call fcn.0043fdd2
push dword [ebp + 0x44]
call dword [sym.imp.KERNEL32.dll_lstrlenW]
push dword [ebp + 0x34]
lea ecx, [ebp + 0x44]
mov esi, eax
call fcn.004371ec
mov eax, dword [ebp + 0x44]
lea esi, [eax + esi*2]
mov eax, dword [ebp + 0x44]
push eax
mov dword [ebp + 0x74], eax
call fcn.0040d1db
mov ebx, dword [sym.imp.KERNEL32.dll_lstrlenW]
pop ecx
push dword [ebp + 0x74]
call ebx
cmp esi, edi
mov edx, dword [ebp + 0x74]
lea eax, [edx + eax*2]
mov dword [ebp - 0xc], eax
mov dword [ebp], edx
mov dword [ebp + 0x38], esi
jne 0x418094
push edx
call ebx
mov edx, dword [ebp + 0x74]
lea esi, [edx + eax*2]
mov dword [ebp + 0x38], esi
cmp esi, edi
mov eax, dword [ebp - 8]
mov ecx, edx
mov dword [ebp + 0x3c], eax
mov dword [ebp + 0x30], edi
je 0x4180ba
mov ax, word [edx]
jmp 0x4180b1
cmp ecx, esi
jae 0x4180ba
inc ecx
inc ecx
mov ax, word [ecx]
call fcn.00431c5f
test al, al
je 0x4180a8
mov bl, byte [ebp + 0x7b]
sub ecx, edx
sar ecx, 1
test bl, bl
mov dword [ebp + 0x28], ecx
jne 0x4180e1
cmp dword [ebp + 0xc], edi
jne 0x4180e1
cmp word [edx], 0x3a
je 0x4180e1
cmp dword [ebp + 0x14], edi
je 0x41853f
jmp 0x41883d
mov dword [ebp + 0x4c], esi
cmp word [edx], 0x3a
jne 0x4180f2
test bl, bl
jne 0x4180f2
or dword [ebp + 0x3c], 0xffffffff
cmp bl, 1
jne 0x418112
lea eax, [esi + 2]
mov cx, word [eax]
cmp cx, 0x3d
je 0x41810f
cmp word [esi], 0x3c
jne 0x418116
cmp cx, 0x3e
jne 0x418116
mov dword [ebp + 0x4c], eax
test bl, bl
je 0x41811a
add dword [ebp + 0x4c], 2
lea ecx, [ebp + 0x4c]
call fcn.0040c032
cmp byte [ebp + 0x43], 0
je 0x4181d4
mov eax, dword [ebp + 0x4c]
cmp word [eax], 0x3f
jne 0x4181d4
add dword [ebp + 0x4c], 2
lea ecx, [ebp + 0x7c]
mov byte [ebp + 0x5f], 1
call fcn.0040c032
mov ebx, dword [ebp + 8]
mov ecx, dword [ebp + 0x3c]
cmp ecx, ebx
je 0x418171
movzx eax, word [edx]
cmp ebx, eax
je 0x418164
cmp dword [ebp + 0x10], eax
je 0x418164
cmp dword [ebp + 0x24], eax
jne 0x418171
inc edx
mov ecx, eax
inc edx
mov dword [ebp + 0x3c], ecx
mov dword [ebp + 0x30], ecx
mov dword [ebp + 0x74], edx
cmp dword [ebp + 0xc], edi
je 0x4181a4
cmp byte [ebp + 0x42], 0
jne 0x4181a4
cmp ecx, dword [ebp + 0x24]
je 0x4181a4
lea ecx, [ebp + 0x74]
call fcn.0040c032
mov edx, dword [ebp + 0x74]
mov ax, word [edx]
cmp ax, 0x30
jb 0x41819b
cmp ax, 0x39
jbe 0x4181a4
cmp ax, 0x2e
je 0x4181a4
mov dword [ebp + 0x3c], edi
cmp dword [ebp - 0x14], edi
jne 0x4181b6
cmp dword [ebp + 0x30], edi
jne 0x4181b6
cmp word [edx], 0x27
mov eax, ebx
je 0x4181b9
mov eax, dword [ebp + 0x3c]
cmp ebx, eax
jne 0x41826b
lea ecx, [ebp + 0x78]
mov dword [ebp + 0x78], edx
call fcn.0040c032
mov edi, dword [ebp + 0x78]
lea ecx, [esi - 2]
jmp 0x4181eb
mov byte [ebp + 0x5f], 0
jmp 0x418149
mov ax, word [ecx]
call fcn.00431c5f
test al, al
je 0x4181ef
dec ecx
dec ecx
cmp ecx, edi
jae 0x4181dd
mov eax, dword [ebp + 0x4c]
sub ecx, edi
inc ecx
inc ecx
sar ecx, 1
mov esi, ecx
lea ecx, [ebp + 0x78]
mov dword [ebp + 0x78], eax
call fcn.0040c032
mov ecx, dword [ebp - 0xc]
mov edx, dword [ebp + 0x78]
add ecx, 0xfffffffe
jmp 0x41821e
mov ax, word [ecx]
call fcn.00431c5f
test al, al
je 0x418222
dec ecx
dec ecx
cmp ecx, edx
jae 0x418210
sub ecx, edx
inc ecx
inc ecx
sar ecx, 1
mov ebx, ecx
cmp esi, ebx
mov eax, esi
jle 0x418232
mov eax, ebx
test eax, eax
jle 0x418251
cmp dword [ebp - 0x44], 0
push eax
push edx
push edi
je 0x418247
call dword [sym.imp.SHLWAPI.dll_StrCmpNW]
jmp 0x41824d
call dword [sym.imp.SHLWAPI.dll_StrCmpNIW]
test eax, eax
jne 0x418255
sub esi, ebx
mov eax, esi
cdq
xor ecx, ecx
mov esi, eax
mov dword [ebp + 0x54], esi
mov dword [ebp + 0x58], edx
mov dword [ebp + 0x60], ecx
mov dword [ebp + 0x64], ecx
jmp 0x41866c
cmp dword [ebp + 0x24], eax
jne 0x41831a
fldz
lea eax, [ebp - 4]
fstp qword [ebp - 4]
push eax
lea eax, [ebp + 0x74]
fldz
push eax
fstp qword [ebp - 0x10]
call fcn.0043c215
lea eax, [ebp - 0x10]
push eax
lea eax, [ebp + 0x4c]
push eax
call fcn.0043c215
fld qword [ebp - 4]
add esp, 0x10
call fcn.00483ab4
fld qword [ebp - 0x10]
mov esi, eax
mov dword [ebp + 0x54], esi
mov dword [ebp + 0x58], edx
call fcn.00483ab4
cmp byte [ebp + 0x7b], 1
mov ecx, eax
mov dword [ebp + 0x60], ecx
mov dword [ebp + 0x64], edx
jg 0x41866c
fild qword [ebp + 0x54]
fld qword [ebp - 4]
fucompp
fnstsw ax
test ah, 0x44
jp 0x4182e7
fild qword [ebp + 0x60]
fld qword [ebp - 0x10]
fucompp
fnstsw ax
test ah, 0x44
jnp 0x41866c
fld qword [ebp - 4]
fcomp qword [ebp - 0x10]
fnstsw ax
test ah, 0x41
jne 0x4182fc
xor eax, eax
inc eax
jmp 0x418255
fld qword [ebp - 0x10]
fld qword [ebp - 4]
fucompp
fnstsw ax
test ah, 0x44
jp 0x418312
xor eax, eax
jmp 0x418255
or eax, 0xffffffff
jmp 0x418255
cmp dword [ebp + 0x10], eax
jne 0x418341
lea eax, [ebp + 0x54]
push eax
lea eax, [ebp + 0x74]
push eax
call fcn.0043bfa0
lea eax, [ebp + 0x60]
push eax
lea eax, [ebp + 0x4c]
push eax
call fcn.0043bfa0
add esp, 0x10
jmp 0x418666
cmp dword [ebp + 0x28], 3
jl 0x418834
lea ecx, [ebp + 0x4c]
mov byte [ebp + 0x6b], 0
call fcn.0040c032
mov eax, dword [ebp + 0x4c]
cmp word [eax], 0x23
jne 0x418369
inc eax
inc eax
mov dword [ebp + 0x4c], eax
mov byte [ebp + 0x6b], 1
mov bl, byte [ebp + 0x14]
fldz
mov dword [ebp + 4], eax
fstp qword [ebp - 0x1c]
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp + 4]
push eax
mov byte [ebp + 0x7b], 0
call fcn.0043c215
mov dword [ebp + 0x30], eax
mov eax, dword [ebp + 0x4c]
mov dword [ebp + 4], eax
lea eax, [ebp + 0x60]
push eax
lea eax, [ebp + 4]
push eax
call fcn.0043bfa0
mov eax, dword [ebp + 4]
add esp, 0x10
cmp word [eax], 0x2e
jne 0x4183b5
fld qword [ebp - 0x1c]
call fcn.00483ab4
mov dword [ebp + 0x60], eax
mov dword [ebp + 0x64], edx
mov edi, dword [ebp + 0x28]
cmp edi, 3
jl 0x4184f6
cmp edi, 5
jg 0x4184f6
mov esi, dword [ebp]
push 3
push 0x49aab0
push esi
call dword [sym.imp.SHLWAPI.dll_StrCmpNIW]
test eax, eax
jne 0x4184f9
cmp edi, 3
je 0x41841c
mov ax, word [esi + 6]
xor ecx, ecx
mov cx, word [esi + 8]
mov edx, 0xffdf
and eax, edx
and ecx, edx
cmp edi, 4
jne 0x418422
cmp ax, 0x41
jne 0x41840a
xor bl, bl
jmp 0x41841c
cmp ax, 0x42
je 0x41844b
cmp ax, 0x55
jne 0x41850f
mov bl, 1
mov byte [ebp + 0x7b], 1
jmp 0x41844b
cmp edi, 5
jne 0x4184f9
cmp ax, 0x42
jne 0x41850f
cmp cx, 0x55
jne 0x41843f
mov bl, 1
jmp 0x41844b
cmp cx, 0x41
jne 0x41850f
xor bl, bl
movsx eax, bl
push eax
call fcn.0041128a
cmp byte [ebp + 0x7b], 0
mov esi, eax
mov eax, edx
pop ecx
mov dword [ebp + 0x54], esi
mov dword [ebp + 0x58], eax
mov ecx, esi
je 0x418477
add ecx, 0xfffff
adc eax, 0
shrd ecx, eax, 0x14
shr eax, 0x14
cmp byte [ebp + 0x5f], 0
jne 0x4189c9
xor edi, edi
cmp dword [ebp + 0x30], edi
jle 0x418a34
cmp byte [ebp + 0x7b], 0
je 0x418669
mov dword [ebp - 0x28], eax
and dword [ebp - 0x28], 0x80000000
and eax, 0x7fffffff
mov dword [ebp - 0x58], eax
mov dword [ebp - 0x5c], ecx
fild qword [ebp - 0x5c]
mov dword [ebp - 0x2c], edi
fild qword [ebp - 0x2c]
fchs
faddp st(1)
fcom qword [ebp - 0x1c]
fnstsw ax
test ah, 0x41
jne 0x4184c9
xor eax, eax
fstp st(0)
inc eax
jmp 0x4184e0
fld qword [ebp - 0x1c]
fld st(1)
fucompp
fnstsw ax
fstp st(0)
test ah, 0x44
jp 0x4184dd
xor eax, eax
jmp 0x4184e0
or eax, 0xffffffff
cdq
mov esi, eax
xor ecx, ecx
mov dword [ebp + 0x54], esi
mov dword [ebp + 0x58], edx
mov dword [ebp + 0x60], ecx
mov dword [ebp + 0x64], edi
jmp 0x41866c
mov esi, dword [ebp]
cmp edi, 3
jne 0x41850f
push edi
push 0x49aaa8
push esi
call dword [sym.imp.SHLWAPI.dll_StrCmpNIW]
test eax, eax
je 0x41856a
mov edx, dword [ebp + 0x74]
cmp word [edx], 0x3a
jne 0x418683
mov ax, word [edx + 2]
cmp ax, 0x65
jne 0x418531
add edx, 4
mov dword [ebp + 0x74], edx
jmp 0x41883d
cmp ax, 0x70
jne 0x41855a
add edx, 4
mov dword [ebp + 0x74], edx
xor edi, edi
push edi
push edi
push edi
push edi
push edx
call fcn.004148f2
xor ecx, ecx
add esp, 0x14
test eax, eax
setg cl
mov esi, ecx
jmp 0x418908
cmp ax, 0x6b
jne 0x418683
add edx, 4
mov dword [ebp + 0x74], edx
mov edx, dword [ebp + 0x4c]
xor eax, eax
mov ax, word [edx]
push eax
call fcn.00410c71
add esp, 4
test al, al
je 0x4185a0
xor ecx, ecx
mov cx, word [edx + 2]
push ecx
call fcn.00410c71
add esp, 4
test al, al
jne 0x41859c
or cx, 0x20
cmp cx, 0x78
jne 0x4185a0
mov byte [ebp + 0x6b], 2
xor esi, esi
cmp byte [ebp + 0x6b], 0
jne 0x4185b8
push esi
push edx
call fcn.004145b3
cdq
pop ecx
pop ecx
mov dword [ebp + 0x60], eax
mov dword [ebp + 0x64], edx
cmp dword [ebp + 0x64], esi
jl 0x418a34
jg 0x4185cc
cmp dword [ebp + 0x60], esi
jbe 0x418a34
cmp dword [ebp + 0x64], esi
jl 0x4185ee
jg 0x4185d9
cmp dword [ebp + 0x60], 0x61
jb 0x4185ee
cmp dword [ebp + 0x64], esi
jg 0x4185ee
jl 0x4185e6
cmp dword [ebp + 0x60], 0x7a
ja 0x4185ee
add dword [ebp + 0x60], 0xffffffe0
adc dword [ebp + 0x64], 0xffffffff
push dword [ebp + 0x60]
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
mov cx, ax
and cx, 0x8000
neg cx
mov word [ebp - 0xa2], si
sbb ecx, ecx
and ecx, dword [ebp + 0x60]
cmp ecx, 0x41
mov eax, ecx
cdq
mov dword [ebp + 0x54], eax
mov dword [ebp + 0x58], edx
mov word [ebp - 0xa4], cx
jl 0x418628
cmp ecx, 0x5a
jle 0x418648
cmp ecx, 0x30
jl 0x418632
cmp ecx, 0x39
jle 0x418648
push ecx
lea eax, [ebp - 0xa4]
push str.0x_lX
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
cmp byte [ebp + 0x5f], 0
mov ecx, dword [ebp + 0x18]
lea eax, [ebp - 0xa4]
push eax
jne 0x4189dd
push str.PressKey
call fcn.00436b54
mov esi, dword [ebp + 0x54]
mov ecx, dword [ebp + 0x60]
mov edi, dword [ebp + 0x38]
mov dx, word [edi]
test dx, dx
jne 0x41872e
or esi, dword [ebp + 0x58]
jmp 0x41878d
mov ax, word [esi]
mov word [ebp - 0x50], ax
xor eax, eax
xor ebx, ebx
mov word [ebp - 0x4e], 0x3a
mov word [ebp - 0x4c], 0x5c
mov word [ebp - 0x4a], bx
lea edi, [ebp - 0x48]
stosd dword es:[edi], eax
movsx eax, byte [ebp + 0x14]
push ebx
push eax
lea eax, [ebp - 0x50]
push eax
call fcn.0040d237
add esp, 0xc
cmp byte [ebp + 0x5f], bl
jne 0x4189e7
cmp dword [ebp + 0x30], ebx
jle 0x4189ee
shrd eax, edx, 0x14
shr edx, 0x14
mov dword [ebp - 0x20], edx
and dword [ebp - 0x20], 0x80000000
and edx, 0x7fffffff
mov dword [ebp - 0x64], eax
mov dword [ebp - 0x60], edx
mov dword [ebp - 0x24], ebx
fild qword [ebp - 0x64]
fild qword [ebp - 0x24]
fchs
faddp st(1)
fcom qword [ebp - 0x1c]
fnstsw ax
test ah, 0x41
jne 0x418701
xor eax, eax
fstp st(0)
inc eax
jmp 0x418718
fld qword [ebp - 0x1c]
fld st(1)
fucompp
fnstsw ax
fstp st(0)
test ah, 0x44
jp 0x418715
xor eax, eax
jmp 0x418718
or eax, 0xffffffff
cdq
mov esi, eax
xor ecx, ecx
mov dword [ebp + 0x54], esi
mov dword [ebp + 0x58], edx
mov dword [ebp + 0x60], ecx
mov dword [ebp + 0x64], ebx
jmp 0x41866c
push 0x3d
pop ebx
cmp dx, bx
jne 0x41874f
cmp esi, ecx
jne 0x4187f9
mov eax, dword [ebp + 0x64]
cmp dword [ebp + 0x58], eax
jne 0x4187f9
jmp 0x41880b
cmp dx, 0x3e
jne 0x41875b
cmp word [edi + 2], bx
je 0x4187ad
cmp dx, 0x3c
jne 0x418770
mov ax, word [edi + 2]
cmp ax, bx
je 0x418797
cmp ax, 0x3e
je 0x41877f
cmp dx, 0x21
jne 0x4187bd
mov ax, word [edi + 2]
cmp ax, bx
jne 0x418791
cmp esi, ecx
jne 0x41880b
mov eax, dword [ebp + 0x64]
cmp dword [ebp + 0x58], eax
je 0x4187f9
jmp 0x41880b
cmp ax, 0x3e
jne 0x4187a7
mov eax, dword [ebp + 0x64]
cmp dword [ebp + 0x58], eax
jg 0x4187f9
jl 0x41880b
cmp esi, ecx
ja 0x4187f9
jmp 0x41880b
cmp ax, 0x3c
jne 0x4187bd
mov eax, dword [ebp + 0x64]
cmp dword [ebp + 0x58], eax
jl 0x4187f9
jg 0x41880b
cmp esi, ecx
jb 0x4187f9
jmp 0x41880b
cmp dx, 0x3e
jne 0x4187d3
mov eax, dword [ebp + 0x64]
cmp dword [ebp + 0x58], eax
jl 0x4187f9
jg 0x41880b
cmp esi, ecx
jbe 0x4187f9
jmp 0x41880b
cmp dx, 0x3c
jne 0x4187e9
mov eax, dword [ebp + 0x64]
cmp dword [ebp + 0x58], eax
jg 0x4187f9
jl 0x41880b
cmp esi, ecx
jae 0x4187f9
jmp 0x41880b
cmp dx, 0x26
jne 0x418800
or esi, dword [ebp + 0x58]
je 0x4187f9
or ecx, dword [ebp + 0x64]
jne 0x41880b
xor esi, esi
jmp 0x418908
cmp dx, 0x7c
jne 0x418813
or esi, dword [ebp + 0x58]
je 0x4187f4
xor esi, esi
inc esi
jmp 0x418908
cmp dx, 0x40
jne 0x418a34
xor eax, eax
or esi, dword [ebp + 0x58]
je 0x418825
inc eax
xor esi, esi
or ecx, dword [ebp + 0x64]
je 0x41882d
inc esi
xor esi, eax
jmp 0x418908
cmp dword [ebp + 0xc], edi
je 0x418a34
push edx
call fcn.0040f738
pop ecx
push eax
mov dword [ebp + 0x74], eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
mov ecx, dword [ebp + 0x74]
xor ebx, ebx
mov bx, word [ecx]
mov edi, eax
and ebx, 0xffdf
cmp bx, 0x41
jb 0x41888e
cmp bx, 0x5a
ja 0x41888e
cmp word [ecx + 2], 0x3a
jne 0x41888e
cmp word [ecx + 4], 0
jne 0x41888e
call dword [sym.imp.KERNEL32.dll_GetLogicalDrives]
xor ecx, ecx
mov cl, bl
sub cl, 0x41
mov esi, eax
shr esi, cl
and esi, 1
jmp 0x418908
test edi, edi
jle 0x4188aa
xor eax, eax
mov ax, word [ecx + edi*2 - 2]
push eax
call fcn.0040c0aa
add esp, 4
test al, al
je 0x4188aa
mov bl, 1
jmp 0x4188ca
xor bl, bl
jmp 0x4188d0
xor eax, eax
lea edx, [ecx + edi*2]
mov ax, word [edx]
push eax
call fcn.0040c0aa
add esp, 4
test al, al
je 0x4188cd
and word [edx], 0
mov ecx, dword [ebp + 0x74]
dec edi
jns 0x4188ae
xor edi, edi
inc edi
xor esi, esi
cmp edi, esi
je 0x418908
cmp dword [ebp - 0x54], esi
je 0x4188fa
xor eax, eax
mov ax, word [ecx]
cmp ax, si
je 0x4188fa
cmp word [ecx + 2], 0x3a
jne 0x4188fa
push eax
call fcn.00482b12
test eax, eax
pop ecx
je 0x418908
mov ecx, dword [ebp + 0x74]
movsx eax, bl
push eax
push ecx
call fcn.00482d3d
pop ecx
pop ecx
mov esi, eax
xor eax, eax
cmp dword [ebp - 0x34], eax
je 0x418916
test esi, esi
sete al
jmp 0x41891b
test esi, esi
setne al
mov edx, dword [ebp + 0x20]
mov dword [ebp + 0x2c], eax
add eax, 0x30
push 2
pop edi
mov word [edx], ax
add edx, edi
cmp byte [ebp + 0x53], 0
mov dword [ebp + 0x20], edx
je 0x418a1e
mov esi, dword [ebp + 0x48]
mov cx, word [esi]
test cx, cx
je 0x4189f3
cmp cx, 0x5b
je 0x41898c
cmp cx, 0x5d
je 0x41898c
cmp cx, 0x28
je 0x41898c
cmp cx, 0x29
je 0x41898c
cmp cx, 0x26
je 0x41898c
cmp cx, 0x7c
jne 0x418979
mov ax, word [esi + 2]
call fcn.00431c5f
test al, al
jne 0x41898c
cmp cx, 0x40
je 0x41898c
mov eax, ecx
call fcn.00431c5f
test al, al
je 0x4189a1
jmp 0x418994
mov word [edx], cx
add edx, edi
mov dword [ebp + 0x20], edx
add esi, edi
mov cx, word [esi]
test cx, cx
mov dword [ebp + 0x48], esi
jne 0x418948
cmp word [esi], 0
je 0x4189f3
lea ecx, [ebp + 0x1c]
call fcn.00431c4c
lea ecx, [ebp + 0x34]
call fcn.00431c4c
lea ecx, [ebp + 0x44]
call fcn.00431c4c
mov esi, dword [ebp + 0x48]
xor edi, edi
jmp 0x417d36
push dword [ebp + 0x18]
push eax
push ecx
push dword [ebp + 0x7c]
call fcn.0040f585
add esp, 0x10
mov esi, eax
jmp 0x418a39
push dword [ebp + 0x7c]
call fcn.00436b54
jmp 0x418a39
push dword [ebp + 0x18]
push edx
push eax
jmp 0x4189ce
or esi, 0xffffffff
jmp 0x418a39
mov eax, dword [ebp - 0x30]
mov word [eax - 6], 0x23
mov word [eax - 4], 0x26
lea ecx, [ebp + 0x2c]
add eax, 0xfffffffe
push ecx
mov ecx, dword [ebp + 0x18]
mov word [eax], 0x3d
and word [edx], 0
push eax
call fcn.00473554
mov dword [ebp + 0x2c], eax
cmp dword [ebp - 0x40], 0
je 0x418a2f
xor eax, eax
cmp dword [ebp + 0x2c], eax
sete al
mov dword [ebp + 0x2c], eax
mov esi, dword [ebp + 0x2c]
jmp 0x418a39
mov esi, 0x80070057
lea ecx, [ebp + 0x1c]
call fcn.00431c4c
lea ecx, [ebp + 0x34]
call fcn.00431c4c
lea ecx, [ebp + 0x44]
call fcn.00431c4c
pop edi
mov eax, esi
pop esi
pop ebx
add ebp, 0x6c
leave
ret 0xc