Function at 0x40e2f0
Capabilities:
Authenticate hmac
Encode data using xor
Get common file path
Get disk information
Get disk size
Get system information on windows
Manipulate boot configuration

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x66c5b4
mov eax, dword fs:[0]
push eax
sub esp, 0x398
mov eax, dword [0x74b1ac]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov dword [ebp - 0x368], edi
lea ecx, [ebp - 0x248]
mov dword [ebp - 0x354], 0
call fcn.00406990
mov esi, eax
lea eax, [edi + 0x894]
cmp eax, esi
je 0x40e377
mov ecx, eax
call fcn.00403260
movups xmm0, xmmword [esi]
xor eax, eax
movups xmmword [edi + 0x894], xmm0
movq xmm0, qword [esi + 0x10]
movq qword [edi + 0x8a4], xmm0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 7
mov word [esi], ax
mov edx, dword [ebp - 0x234]
cmp edx, 8
jb 0x40e3b7
mov ecx, dword [ebp - 0x248]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40e3ad
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40f8ff
push edx
push ecx
call fcn.004cd516
add esp, 8
push str.GetNativeSystemInfo
push str.kernel32
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x40e3dd
lea ecx, [ebp - 0x3a4]
push ecx
call eax
jmp 0x40e3ea
lea eax, [ebp - 0x3a4]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov ax, word [ebp - 0x3a4]
cmp ax, 9
je 0x40e401
cmp ax, 6
je 0x40e401
xor eax, eax
jmp 0x40e406
mov eax, 1
push str.LabSysPath
lea ecx, [edi + 0x30]
mov dword [edi + 0x8b0], eax
call sym._1.0.0.4_10001.exe_public:_class_DuiLib::CControlUI____thiscall_DuiLib::CPaintManagerUI::FindControl_wchar_t_const__const
push str.LabIsoFilePath
lea ecx, [edi + 0x30]
mov dword [edi + 0x77c], eax
call sym._1.0.0.4_10001.exe_public:_class_DuiLib::CControlUI____thiscall_DuiLib::CPaintManagerUI::FindControl_wchar_t_const__const
push str.LabWinSupport
lea ecx, [edi + 0x30]
mov dword [edi + 0x780], eax
call sym._1.0.0.4_10001.exe_public:_class_DuiLib::CControlUI____thiscall_DuiLib::CPaintManagerUI::FindControl_wchar_t_const__const
push str.LabInfo
lea ecx, [edi + 0x30]
mov dword [edi + 0x784], eax
call sym._1.0.0.4_10001.exe_public:_class_DuiLib::CControlUI____thiscall_DuiLib::CPaintManagerUI::FindControl_wchar_t_const__const
push str.BtnHandSel
lea ecx, [edi + 0x30]
mov dword [edi + 0x788], eax
call sym._1.0.0.4_10001.exe_public:_class_DuiLib::CControlUI____thiscall_DuiLib::CPaintManagerUI::FindControl_wchar_t_const__const
push str.BtnInstall
lea ecx, [edi + 0x30]
mov dword [edi + 0x78c], eax
call sym._1.0.0.4_10001.exe_public:_class_DuiLib::CControlUI____thiscall_DuiLib::CPaintManagerUI::FindControl_wchar_t_const__const
mov ecx, dword [edi + 0x78c]
mov dword [edi + 0x790], eax
push 0
mov eax, dword [ecx]
call dword [eax + 0x104]
mov ecx, dword [edi + 0x790]
push 0
mov eax, dword [ecx]
call dword [eax + 0x110]
push 0x208
call fcn.004cd54c
add esp, 4
mov esi, eax
mov dword [ebp - 0x35c], esi
push esi
push 0x104
call dword [sym.imp.KERNEL32.dll_GetTempPathW]
mov ecx, esi
mov dword [ebp - 0x298], 0
xor eax, eax
mov dword [ebp - 0x294], 7
mov word [ebp - 0x2a8], ax
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x40e4e1
sub ecx, edx
sar ecx, 1
push ecx
push esi
lea ecx, [ebp - 0x2a8]
call fcn.00409b90
mov dword [ebp - 4], 0
xor esi, esi
mov eax, dword [0x70a654]
movq xmm0, qword [0x70a64c]
mov dword [ebp - 0x238], eax
mov ax, word [0x70a658]
movq qword [ebp - 0x240], xmm0
mov word [ebp - 0x234], ax
nop
mov eax, 0xa0a0a0a1
mov ecx, esi
imul esi
add edx, esi
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
imul eax, eax, 0x33
sub ecx, eax
add ecx, 0x36
xor word [ebp + esi*2 - 0x240], cx
inc esi
cmp esi, 7
jl 0x40e530
lea eax, [ebp - 0x240]
push eax
lea ecx, [ebp - 0x2a8]
call fcn.00408690
lea esi, [edi + 0x794]
lea eax, [ebp - 0x2a8]
mov dword [ebp - 0x360], esi
cmp esi, eax
je 0x40e59f
cmp dword [ebp - 0x294], 8
mov ecx, esi
push dword [ebp - 0x298]
cmovae eax, dword [ebp - 0x2a8]
push eax
call fcn.00409b90
sub esp, 0x18
mov ecx, esp
push esi
call fcn.004088b0
call fcn.00407f20
add esp, 0x18
mov dword [ebp - 0x358], esi
cmp dword [esi + 0x14], 8
mov eax, esi
jb 0x40e5c8
mov eax, dword [esi]
mov dword [ebp - 0x358], eax
sub esp, 0x18
xor ecx, ecx
mov edx, esp
mov dword [ebp - 0x354], esp
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 7
mov word [edx], cx
mov ecx, eax
lea esi, [ecx + 2]
nop dword [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x40e5f0
sub ecx, esi
sar ecx, 1
push ecx
push dword [ebp - 0x358]
mov ecx, edx
call fcn.00409b90
mov byte [ebp - 4], 1
cmp word [0x70a5a2], 0
movq xmm0, qword [0x70a598]
mov eax, dword [0x70a5a0]
movq qword [ebp - 0x23c], xmm0
mov dword [ebp - 0x234], eax
je 0x40e66b
xor esi, esi
nop dword [eax + eax]
mov eax, 0xa0a0a0a1
mov ecx, esi
imul esi
add edx, esi
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
imul eax, eax, 0x33
sub ecx, eax
add ecx, 0x36
xor word [ebp + esi*2 - 0x23c], cx
inc esi
cmp esi, 6
jl 0x40e640
sub esp, 0x18
lea ecx, [ebp - 0x23c]
mov edx, esp
lea esi, [ecx + 2]
xor eax, eax
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 7
mov word [edx], ax
nop dword [eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x40e690
sub ecx, esi
lea eax, [ebp - 0x23c]
sar ecx, 1
push ecx
push eax
mov ecx, edx
call fcn.00409b90
mov byte [ebp - 4], 0
call fcn.00404cb0
mov edx, dword [ebp - 0x35c]
add esp, 0x30
mov ecx, edx
mov dword [ebp - 0x280], 0
xor eax, eax
mov dword [ebp - 0x27c], 7
mov word [ebp - 0x290], ax
lea esi, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x40e6e2
sub ecx, esi
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0x290]
call fcn.00409b90
mov byte [ebp - 4], 2
cmp word [0x70a50a], 0
movq xmm0, qword [0x70a500]
mov eax, dword [0x70a508]
movq qword [ebp - 0x23c], xmm0
mov dword [ebp - 0x234], eax
je 0x40e75b
xor esi, esi
nop dword [eax]
mov eax, 0xa0a0a0a1
mov ecx, esi
imul esi
add edx, esi
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
imul eax, eax, 0x33
sub ecx, eax
add ecx, 0x36
xor word [ebp + esi*2 - 0x23c], cx
inc esi
cmp esi, 6
jl 0x40e730
lea eax, [ebp - 0x23c]
push eax
lea ecx, [ebp - 0x290]
call fcn.00408690
add edi, 0x80c
lea eax, [ebp - 0x290]
cmp edi, eax
je 0x40e799
cmp dword [ebp - 0x27c], 8
mov ecx, edi
push dword [ebp - 0x280]
cmovae eax, dword [ebp - 0x290]
push eax
call fcn.00409b90
sub esp, 0x18
mov ecx, esp
push edi
call fcn.004088b0
call fcn.00407f20
add esp, 0x18
cmp dword [edi + 0x14], 8
jb 0x40e7b4
mov edi, dword [edi]
sub esp, 0x18
mov ecx, edi
mov edx, esp
mov dword [ebp - 0x354], esp
xor eax, eax
lea esi, [ecx + 2]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 7
mov word [edx], ax
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x40e7d7
sub ecx, esi
sar ecx, 1
push ecx
push edi
mov ecx, edx
call fcn.00409b90
mov byte [ebp - 4], 3
xor esi, esi
mov eax, dword [0x70a580]
movups xmm0, xmmword [0x70a570]
mov dword [ebp - 0x238], eax
mov ax, word [0x70a584]
movups xmmword [ebp - 0x248], xmm0
mov word [ebp - 0x234], ax
nop dword [eax + eax]
mov eax, 0xa0a0a0a1
mov ecx, esi
imul esi
add edx, esi
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
imul eax, eax, 0x33
sub ecx, eax
add ecx, 0x36
xor word [ebp + esi*2 - 0x248], cx
inc esi
cmp esi, 0xb
jl 0x40e820
sub esp, 0x18
lea ecx, [ebp - 0x248]
mov edx, esp
lea esi, [ecx + 2]
xor eax, eax
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 7
mov word [edx], ax
nop dword [eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x40e870
sub ecx, esi
lea eax, [ebp - 0x248]
sar ecx, 1
push ecx
push eax
mov ecx, edx
call fcn.00409b90
mov byte [ebp - 4], 2
call fcn.00404cb0
add esp, 0x30
mov dword [ebp - 0x23c], 0
mov dword [ebp - 0x238], 0
mov dword [ebp - 0x234], 0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x23c]
push dword [ebp - 0x354]
push 0x7f6efd
push 0x74fa48
push 0
call fcn.00412d70
mov ax, word [0x70a558]
movq xmm0, qword [0x70a550]
movq qword [ebp - 0x22c], xmm0
mov word [ebp - 0x224], ax
test ah, ah
je 0x40e93f
xor edx, edx
mov dword [ebp - 0x358], edx
mov eax, 0xa0a0a0a1
imul edx
add edx, dword [ebp - 0x358]
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [ebp - 0x358]
movsx eax, al
mov cl, dl
imul eax, eax, 0x33
sub cl, al
add cl, 0x36
xor byte [ebp + edx - 0x22c], cl
inc edx
mov dword [ebp - 0x358], edx
cmp edx, 0xa
jl 0x40e902
lea ecx, [ebp - 0x22c]
mov dword [ebp - 0x250], 0
mov dword [ebp - 0x24c], 0xf
lea edx, [ecx + 1]
mov byte [ebp - 0x260], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x40e963
sub ecx, edx
lea eax, [ebp - 0x22c]
push ecx
push eax
lea ecx, [ebp - 0x260]
call fcn.004036b0
mov esi, dword [ebp - 0x238]
xor edi, edi
mov eax, dword [ebp - 0x23c]
sub esi, eax
mov ecx, dword [ebp - 0x260]
mov dword [ebp - 0x35c], esi
je 0x40e9e2
nop dword [eax]
cmp dword [ebp - 0x24c], 0x10
lea esi, [ebp - 0x260]
cmovae esi, ecx
mov cl, byte [edi + eax]
mov eax, edi
xor edx, edx
div dword [ebp - 0x250]
mov al, byte [edx + esi]
mov esi, dword [ebp - 0x35c]
xor al, cl
mov ecx, dword [ebp - 0x23c]
mov byte [edi + ecx], al
inc edi
mov ecx, dword [ebp - 0x260]
mov eax, dword [ebp - 0x23c]
cmp edi, esi
jne 0x40e9a0
mov eax, dword [ebp - 0x24c]
cmp eax, 0x10
jb 0x40ea18
lea edx, [eax + 1]
mov eax, ecx
cmp edx, 0x1000
jb 0x40ea0e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40f904
push edx
push ecx
call fcn.004cd516
add esp, 8
lea ecx, [ebp - 0x350]
call fcn.0047b0d8
push 0
push 0
push esi
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x350]
mov edi, dword [ebp - 0x23c]
push edi
push dword [ebp - 0x360]
call fcn.0047b17e
push 0x1f4
call dword [sym.imp.KERNEL32.dll_Sleep]
sub esp, 0x18
xor eax, eax
mov ecx, esp
mov dword [ebp - 0x354], esp
push eax
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 7
push 0x708fec
mov word [ecx], ax
call fcn.00409b90
mov byte [ebp - 4], 6
xor esi, esi
mov eax, dword [0x70a548]
movq xmm0, qword [0x70a540]
mov dword [ebp - 0x228], eax
mov ax, word [0x70a54c]
movq qword [ebp - 0x230], xmm0
mov word [ebp - 0x224], ax
mov eax, 0xa0a0a0a1
mov ecx, esi
imul esi
add edx, esi
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
imul eax, eax, 0x33
sub ecx, eax
add ecx, 0x36
xor word [ebp + esi*2 - 0x230], cx
inc esi
cmp esi, 7
jl 0x40eaa6
sub esp, 0x18
lea ecx, [ebp - 0x230]
mov edx, esp
lea esi, [ecx + 2]
xor eax, eax
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 7
mov word [edx], ax
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x40eaf2
sub ecx, esi
lea eax, [ebp - 0x230]
sar ecx, 1
push ecx
push eax
mov ecx, edx
call fcn.00409b90
mov byte [ebp - 4], 5
call fcn.00404cb0
add esp, 0x18
mov eax, esp
push str.bcdedit.exe__enum
push dword [ebp - 0x360]
push eax
call fcn.00412cd0
add esp, 0xc
lea ecx, [ebp - 0x2c0]
call fcn.004078f0
add esp, 0x18
mov byte [ebp - 4], 7
cmp dword [ebp - 0x2b0], 0
je 0x40f7af
sub esp, 0x18
xor eax, eax
mov ecx, esp
mov dword [ebp - 0x354], esp
push 1
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 7
push 0x7092a8
mov word [ecx], ax
call fcn.00409b90
sub esp, 0x18
mov byte [ebp - 4], 8
mov ecx, esp
mov dword [ebp - 0x35c], esp
xor eax, eax
push 0x22
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 7
push str.osdevice________________partition
mov word [ecx], ax
call fcn.00409b90
sub esp, 0x18
mov byte [ebp - 4], 9
lea eax, [ebp - 0x2c0]
mov ecx, esp
push eax
call fcn.004088b0
lea ecx, [ebp - 0x278]
mov byte [ebp - 4], 7
call fcn.00407c50
add esp, 0x48
mov byte [ebp - 4], 0xa
mov ecx, dword [ebp - 0x268]
test ecx, ecx
jne 0x40ecec
sub esp, 0x18
xor eax, eax
mov ecx, esp
mov dword [ebp - 0x354], esp
push 1
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 7
push 0x7092a8
mov word [ecx], ax
call fcn.00409b90
sub esp, 0x18
mov byte [ebp - 4], 0xb
mov ecx, esp
mov dword [ebp - 0x35c], esp
xor eax, eax
push 0x22
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 7
push str.device__________________partition
mov word [ecx], ax
call fcn.00409b90
sub esp, 0x18
mov byte [ebp - 4], 0xc
lea eax, [ebp - 0x2c0]
mov ecx, esp
push eax
call fcn.004088b0
lea ecx, [ebp - 0x260]
mov byte [ebp - 4], 0xa
call fcn.00407c50
mov esi, eax
add esp, 0x48
lea eax, [ebp - 0x278]
cmp eax, esi
je 0x40ec9e
mov ecx, eax
call fcn.00403260
movups xmm0, xmmword [esi]
xor eax, eax
movups xmmword [ebp - 0x278], xmm0
movq xmm0, qword [esi + 0x10]
movq qword [ebp - 0x268], xmm0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 7
mov word [esi], ax
mov edx, dword [ebp - 0x24c]
cmp edx, 8
jb 0x40ecde
mov ecx, dword [ebp - 0x260]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40ecd4
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40f909
push edx
push ecx
call fcn.004cd516
add esp, 8
mov ecx, dword [ebp - 0x268]
test ecx, ecx
je 0x40f752
mov edi, dword [ebp - 0x368]
lea eax, [ebp - 0x278]
lea esi, [edi + 0x7c4]
cmp esi, eax
je 0x40ed19
cmp dword [ebp - 0x264], 8
push ecx
cmovae eax, dword [ebp - 0x278]
mov ecx, esi
push eax
call fcn.00409b90
cmp dword [esi + 0x14], 8
mov eax, esi
mov dword [ebp - 0x358], esi
jb 0x40ed2f
mov eax, dword [esi]
mov dword [ebp - 0x358], eax
sub esp, 0x18
xor ecx, ecx
mov edx, esp
mov dword [ebp - 0x354], esp
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 7
mov word [edx], cx
mov ecx, eax
lea esi, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x40ed52
sub ecx, esi
sar ecx, 1
push ecx
push dword [ebp - 0x358]
mov ecx, edx
call fcn.00409b90
mov byte [ebp - 4], 0xd
cmp word [0x70a67a], 0
movq xmm0, qword [0x70a670]
mov eax, dword [0x70a678]
movq qword [ebp - 0x22c], xmm0
mov dword [ebp - 0x224], eax
je 0x40edcb
xor esi, esi
nop word [eax + eax]
mov eax, 0xa0a0a0a1
mov ecx, esi
imul esi
add edx, esi
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
imul eax, eax, 0x33
sub ecx, eax
add ecx, 0x36
xor word [ebp + esi*2 - 0x22c], cx
inc esi
cmp esi, 6
jl 0x40eda0
sub esp, 0x18
lea ecx, [ebp - 0x22c]
mov edx, esp
lea esi, [ecx + 2]
xor eax, eax
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 7
mov word [edx], ax
nop dword [eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x40edf0
sub ecx, esi
lea eax, [ebp - 0x22c]
sar ecx, 1
push ecx
push eax
mov ecx, edx
call fcn.00409b90
mov byte [ebp - 4], 0xa
call fcn.00404cb0
add esp, 0x18
xor eax, eax
mov ecx, esp
mov dword [ebp - 0x354], esp
push 1
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 7
push 0x7092a8
mov word [ecx], ax
call fcn.00409b90
sub esp, 0x18
mov byte [ebp - 4], 0xe
mov ecx, esp
mov dword [ebp - 0x35c], esp
xor eax, eax
push 0x18
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 7
push str.path
mov word [ecx], ax
call fcn.00409b90
sub esp, 0x18
mov byte [ebp - 4], 0xf
lea eax, [ebp - 0x2c0]
mov ecx, esp
push eax
call fcn.004088b0
lea ecx, [ebp - 0x260]
mov byte [ebp - 4], 0xa
call fcn.00407c50
mov esi, eax
add esp, 0x48
lea eax, [ebp - 0x278]
cmp eax, esi
je 0x40eed3
mov ecx, eax
call fcn.00403260
movups xmm0, xmmword [esi]
xor eax, eax
movups xmmword [ebp - 0x278], xmm0
movq xmm0, qword [esi + 0x10]
movq qword [ebp - 0x268], xmm0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 7
mov word [esi], ax
mov edx, dword [ebp - 0x24c]
cmp edx, 8
jb 0x40ef13
mov ecx, dword [ebp - 0x260]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40ef09
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40f90e
push edx
push ecx
call fcn.004cd516
add esp, 8
cmp dword [ebp - 0x268], 0
je 0x40f74c
push 0xb
lea esi, [edi + 0x824]
push str.UEFI
mov ecx, esi
call fcn.00409b90
cmp dword [ebp - 0x264], 8
lea ecx, [ebp - 0x278]
mov edx, dword [ebp - 0x268]
cmovae ecx, dword [ebp - 0x278]
push 3
push 0x70938c
push 0
call fcn.0040b610
add esp, 0xc
cmp eax, 0xffffffff
jne 0x40ef72
push 4
push 0x709394
mov ecx, esi
call fcn.00409b90
cmp dword [esi + 0x14], 8
jb 0x40ef7a
mov esi, dword [esi]
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x354], esp
push esi
call fcn.00408860
mov byte [ebp - 4], 0x10
cmp word [0x70a516], 0
movq xmm0, qword [0x70a50c]
mov eax, dword [0x70a514]
movq qword [ebp - 0x22c], xmm0
mov dword [ebp - 0x224], eax
je 0x40efe1
xor esi, esi
mov eax, 0xa0a0a0a1
mov ecx, esi
imul esi
add edx, esi
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
imul eax, eax, 0x33
sub ecx, eax
add ecx, 0x36
xor word [ebp + esi*2 - 0x22c], cx
inc esi
cmp esi, 6
jl 0x40efb6
sub esp, 0x18
lea eax, [ebp - 0x22c]
mov ecx, esp
push eax
call fcn.00408860
mov byte [ebp - 4], 0xa
call fcn.00404cb0
add esp, 0x30
lea eax, [ebp - 0x220]
push 0x104
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea eax, [ebp - 0x220]
push 0x5c
push eax
call fcn.004e5293
mov edx, eax
add esp, 8
test edx, edx
je 0x40f02e
add edx, 2
jmp 0x40f034
lea edx, [ebp - 0x220]
mov ecx, edx
lea esi, [ecx + 2]
nop dword [eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x40f040
sub ecx, esi
lea esi, [edi + 0x7ac]
sar ecx, 1
push ecx
push edx
mov ecx, esi
call fcn.00409b90
cmp dword [esi + 0x14], 8
jb 0x40f066
mov esi, dword [esi]
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x354], esp
push esi
call fcn.00408860
mov byte [ebp - 4], 0x11
mov ecx, 5
movups xmm0, xmmword [str.e_zR]
pextrw eax, xmm0, 7
movups xmmword [ebp - 0x230], xmm0
lea edx, [ecx + 0x1a]
test ax, ax
mov eax, dword [0x7fe91c]
je 0x40f1d0
xor esi, esi
cmp eax, 2
jl 0x40f1a5
movaps xmm2, xmmword [0x70a720]
mov eax, str.e_zR
movaps xmm4, xmmword [0x70a7a0]
movaps xmm1, xmm2
punpckldq xmm1, xmm2
movaps xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
movd xmm5, ecx
psrad xmm1, xmm5
movd xmm6, edx
movaps xmm0, xmm1
psrld xmm0, xmm6
paddd xmm0, xmm1
pmulld xmm0, xmmword [str.33339999]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
movaps xmm2, xmmword [0x70a730]
paddd xmm2, xmmword [0x70a720]
pshufhw xmm0, xmm0, 0xd8
pshufd xmm1, xmm0, 0xd8
paddw xmm1, xmmword [0x70a760]
movq xmm0, qword [eax]
pxor xmm1, xmm0
movaps xmm0, xmm2
movq qword [ebp - 0x230], xmm1
movaps xmm1, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm4
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, xmm5
movaps xmm0, xmm1
psrld xmm0, xmm6
paddd xmm0, xmm1
pmulld xmm0, xmmword [str.33339999]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm0, xmm0, 0xd8
pshufd xmm1, xmm0, 0xd8
movq xmm0, qword [ebp - 0x228]
paddw xmm1, xmmword [0x70a760]
pxor xmm1, xmm0
movq qword [ebp - 0x228], xmm1
jmp 0x40f1d0
mov eax, 0xa0a0a0a1
mov ecx, esi
imul esi
add edx, esi
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
imul eax, eax, 0x33
sub ecx, eax
add ecx, 0x36
xor word [ebp + esi*2 - 0x230], cx
inc esi
cmp esi, 8
jl 0x40f1a5
sub esp, 0x18
lea eax, [ebp - 0x230]
mov ecx, esp
push eax
call fcn.00408860
mov byte [ebp - 4], 0xa
call fcn.00404cb0
add esp, 0x30
mov byte [ebp - 4], 0x12
mov dword [ebp - 0x35c], 0
call dword [sym.imp.KERNEL32.dll_GetLogicalDrives]
mov dword [ebp - 0x360], eax
xorps xmm0, xmm0
movq qword [ebp - 0x18], xmm0
mov esi, 0x41
test eax, eax
je 0x40f2d2
mov edx, dword [ebp - 0x18]
mov edi, dword [ebp - 0x14]
mov dword [ebp - 0x364], edx
nop dword [eax + eax]
mov ecx, eax
mov dword [ebp - 0x358], ecx
test al, 1
je 0x40f2ba
xor eax, eax
mov word [ebp - 0x18], si
mov word [ebp - 0x12], ax
lea eax, [ebp - 0x18]
push eax
mov dword [ebp - 0x16], 0x5c003a
call dword [sym.imp.KERNEL32.dll_GetDriveTypeW]
cmp eax, 3
jne 0x40f2ae
cmp si, 0x43
je 0x40f2ae
lea eax, [ebp - 0x228]
push eax
push 0
push 0
lea eax, [ebp - 0x18]
push eax
call dword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
test eax, eax
je 0x40f2ae
mov ecx, dword [ebp - 0x224]
cmp ecx, edi
jb 0x40f2ae
mov eax, dword [ebp - 0x228]
ja 0x40f295
cmp eax, dword [ebp - 0x364]
jbe 0x40f2ae
mov edx, eax
mov dword [ebp - 0x354], ecx
movzx eax, si
mov edi, ecx
mov dword [ebp - 0x364], edx
mov dword [ebp - 0x35c], eax
mov ecx, dword [ebp - 0x358]
mov eax, dword [ebp - 0x360]
shr eax, 1
inc esi
mov dword [ebp - 0x360], eax
cmp ecx, 2
jae 0x40f230
mov edi, dword [ebp - 0x368]
xor eax, eax
mov dword [ebp - 0x250], 0
mov word [ebp - 0x260], ax
mov eax, dword [ebp - 0x35c]
mov dword [ebp - 0x24c], 7
mov dword [ebp - 0x354], 2
test ax, ax
je 0x40f31e
mov word [ebp - 0x260], ax
xor eax, eax
mov dword [ebp - 0x250], 1
mov word [ebp - 0x25e], ax
push 0x709080
lea ecx, [ebp - 0x260]
call fcn.00408690
lea esi, [edi + 0x7f4]
lea eax, [ebp - 0x260]
cmp esi, eax
je 0x40f379
mov ecx, esi
call fcn.00403260
movups xmm0, xmmword [ebp - 0x260]
xor eax, eax
mov word [ebp - 0x260], ax
movups xmmword [esi], xmm0
movq xmm0, qword [ebp - 0x250]
movq qword [esi + 0x10], xmm0
mov dword [ebp - 0x250], 0
mov dword [ebp - 0x24c], 7
lea ecx, [ebp - 0x260]
mov byte [ebp - 4], 0xa
call fcn.00403260
cmp dword [esi + 0x14], 8
mov ecx, esi
jb 0x40f392
mov ecx, dword [esi]
cmp dword [esi + 0x10], 1
jne 0x40f3cb
push 1
mov edx, 0x709080
call fcn.0040a050
add esp, 4
test eax, eax
jne 0x40f3cb
push eax
push 0x7093a0
push 0x7093a8
push eax
call dword [sym.imp.USER32.dll_MessageBoxW]
push 1
mov ecx, edi
call sym._1.0.0.4_10001.exe_public:_void___thiscall_DuiLib::CWindowWnd::Close_unsigned_int_
jmp 0x40f74c
push str.IsoIntl_
lea eax, [ebp - 0x260]
push esi
push eax
call fcn.00412cd0
add esp, 0xc
lea esi, [edi + 0x7dc]
mov ecx, esi
push eax
call fcn.00408820
lea ecx, [ebp - 0x260]
call fcn.00403260
sub esp, 0x18
mov ecx, esp
push esi
call fcn.004088b0
call fcn.00407f20
add esp, 0x18
cmp dword [esi + 0x14], 8
jb 0x40f414
mov esi, dword [esi]
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x354], esp
push esi
call fcn.00408860
mov byte [ebp - 4], 0x13
movups xmm0, xmmword [0x70a520]
pextrw eax, xmm0, 7
movups xmmword [ebp - 0x230], xmm0
test ax, ax
je 0x40f58b
xor esi, esi
cmp dword [0x7fe91c], 2
jl 0x40f560
movaps xmm2, xmmword [0x70a720]
mov eax, 5
movaps xmm4, xmmword [0x70a7a0]
movaps xmm1, xmm2
punpckldq xmm1, xmm2
movaps xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
movd xmm5, eax
psrad xmm1, xmm5
mov eax, 0x1f
movaps xmm0, xmm1
movd xmm6, eax
mov eax, 0x70a520
psrld xmm0, xmm6
paddd xmm0, xmm1
pmulld xmm0, xmmword [str.33339999]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
movaps xmm2, xmmword [0x70a730]
paddd xmm2, xmmword [0x70a720]
pshufhw xmm0, xmm0, 0xd8
pshufd xmm1, xmm0, 0xd8
movq xmm0, qword [0x70a760]
paddw xmm1, xmm0
movq xmm0, qword [eax]
pxor xmm1, xmm0
movaps xmm0, xmm2
movq qword [ebp - 0x230], xmm1
movaps xmm1, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm4
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, xmm5
movaps xmm0, xmm1
psrld xmm0, xmm6
paddd xmm0, xmm1
pmulld xmm0, xmmword [str.33339999]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm0, xmm0, 0xd8
pshufd xmm1, xmm0, 0xd8
movq xmm0, qword [0x70a760]
paddw xmm1, xmm0
movq xmm0, qword [ebp - 0x228]
pxor xmm1, xmm0
movq qword [ebp - 0x228], xmm1
jmp 0x40f58b
mov eax, 0xa0a0a0a1
mov ecx, esi
imul esi
add edx, esi
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
imul eax, eax, 0x33
sub ecx, eax
add ecx, 0x36
xor word [ebp + esi*2 - 0x230], cx
inc esi
cmp esi, 8
jl 0x40f560
sub esp, 0x18
lea eax, [ebp - 0x230]
mov ecx, esp
push eax
call fcn.00408860
mov byte [ebp - 4], 0xa
call fcn.00404cb0
lea esi, [edi + 0x7c4]
add esp, 0x30
cmp dword [esi + 0x14], 8
mov eax, esi
jb 0x40f5b8
mov eax, dword [esi]
lea ecx, [ebp - 0x378]
push ecx
lea ecx, [ebp - 0x370]
push ecx
lea ecx, [ebp - 0x380]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
test eax, eax
je 0x40f647
mov edx, dword [ebp - 0x36c]
mov ecx, dword [ebp - 0x370]
call fcn.004ce2b0
cmp dword [esi + 0x14], 8
mulsd xmm0, qword [0x70a718]
jb 0x40f5f9
mov esi, dword [esi]
sub esp, 8
lea eax, [ebp - 0x260]
movsd qword [esp], xmm0
push esi
push 0x7093d0
push eax
call fcn.00404f60
add esp, 0x14
mov byte [ebp - 4], 0x14
mov ecx, dword [edi + 0x77c]
cmp dword [ebp - 0x24c], 8
mov eax, dword [ecx]
mov edx, dword [eax + 0x2c]
lea eax, [ebp - 0x260]
cmovae eax, dword [ebp - 0x260]
push eax
call edx
lea ecx, [ebp - 0x260]
call fcn.00403260
xor eax, eax
mov dword [ebp - 0x2c8], 0
mov dword [ebp - 0x2c4], 7
mov word [ebp - 0x2d8], ax
lea ecx, [ebp - 0x2d8]
mov byte [ebp - 4], 0x15
call fcn.004075f0
cmp dword [ebp - 0x2c4], 8
lea eax, [ebp - 0x2d8]
cmovae eax, dword [ebp - 0x2d8]
push eax
call fcn.004ef110
mov dword [edi + 0x8ac], eax
add esp, 4
add eax, 0xfffffff9
cmp eax, 4
ja case.0x40f69e.9
jmp dword [eax*4 + 0x40f92c]
push 6
push str.Win_11
jmp 0x40f6d0
push 6
push str.Win_10
jmp 0x40f6d0
push 5
push str.Win_8
jmp 0x40f6d0
push 5
push str.Win_7
jmp 0x40f6d0
push 6
push str.Win_xp
lea esi, [edi + 0x8b4]
mov ecx, esi
call fcn.00409b90
cmp dword [esi + 0x14], 8
jb 0x40f6e5
mov esi, dword [esi]
push esi
lea eax, [ebp - 0x2f0]
push 0x709430
push eax
call fcn.00404f60
add esp, 0xc
mov byte [ebp - 4], 0x16
mov ecx, dword [edi + 0x784]
cmp dword [ebp - 0x2dc], 8
mov eax, dword [ecx]
mov edx, dword [eax + 0x2c]
lea eax, [ebp - 0x2f0]
cmovae eax, dword [ebp - 0x2f0]
push eax
call edx
sub esp, 0x18
mov ecx, esp
push str.start
call fcn.00408860
mov ecx, edi
call fcn.00412080
lea ecx, [ebp - 0x2f0]
call fcn.00403260
lea ecx, [ebp - 0x2d8]
call fcn.00403260
mov edi, dword [ebp - 0x23c]
mov edx, dword [ebp - 0x264]
cmp edx, 8
jb 0x40f792
mov ecx, dword [ebp - 0x278]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40f788
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40f913
push edx
push ecx
call fcn.004cd516
add esp, 8
xor eax, eax
mov dword [ebp - 0x268], 0
mov dword [ebp - 0x264], 7
mov word [ebp - 0x278], ax
mov edx, dword [ebp - 0x2ac]
cmp edx, 8
jb 0x40f7ef
mov ecx, dword [ebp - 0x2c0]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40f7e5
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40f918
push edx
push ecx
call fcn.004cd516
add esp, 8
xor eax, eax
mov dword [ebp - 0x2b0], 0
lea ecx, [ebp - 0x350]
mov dword [ebp - 0x2ac], 7
mov word [ebp - 0x2c0], ax
call fcn.0047b143
test edi, edi
je 0x40f84b
mov ecx, dword [ebp - 0x234]
mov eax, edi
sub ecx, edi
cmp ecx, 0x1000
jb 0x40f841
mov edi, dword [edi - 4]
add ecx, 0x23
sub eax, edi
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40f91d
push ecx
push edi
call fcn.004cd516
add esp, 8
mov edx, dword [ebp - 0x27c]
cmp edx, 8
jb 0x40f88b
mov ecx, dword [ebp - 0x290]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40f881
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40f922
push edx
push ecx
call fcn.004cd516
add esp, 8
mov edx, dword [ebp - 0x294]
xor eax, eax
mov dword [ebp - 0x280], 0
mov dword [ebp - 0x27c], 7
mov word [ebp - 0x290], ax
cmp edx, 8
jb 0x40f8e4
mov ecx, dword [ebp - 0x2a8]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40f8da
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40f927
push edx
push ecx
call fcn.004cd516
add esp, 8
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004cd30a
mov esp, ebp
pop ebp
ret
call fcn.004e9059
call fcn.004e9059
call fcn.004e9059
call fcn.004e9059
call fcn.004e9059
call fcn.004e9059
call fcn.004e9059
call fcn.004e9059
call fcn.004e9059
sal dh, 0x40
add byte [edi - 922730250], dh
test byte [eax], 0xae
test byte [eax], 0xa5
test byte [eax], 0x55
push ebp
mov ebp, esp
push dword [ebp + 0x10]
push dword [ebp + 0xc]
push dword [ebp + 8]
call sym._1.0.0.4_10001.exe_protected_virtual:_long_int___thiscall_DuiLib::CWindowWnd::HandleMessage_unsigned_int__unsigned_int__long_int_
pop ebp
ret 0x10