Function at 0x1400252b0
Capabilities:
Get disk information
Read file on windows

Disassembly:
xchg rsp, rax
mov rsp, rax
xchg rsp, rax
mov qword [rax + 0x10], rbx
jmp 0x14002572b
mov dword [rsp - 0x38], 0x10042969
movdqa xmm5, xmmword [0x140119390]
movdqa xmm4, xmmword [0x14011a500]
movdqa xmm7, xmmword [str.9999]
jmp 0x140025355
sub eax, 0x5b8edaa1
xor eax, 0x8cc03d6f
lea r8, [r8 + 1]
mov dword [rsp - 0x28], ebp
imul ecx
add edx, ecx
jmp 0x14002545b
je 0x140025a27
mov esi, dword [0x1402567d0]
xchg r12, r12
mov ebp, 0x1495bf0
xor ebp, 0x22709ebf
jmp 0x140025624
mov rdx, rdx
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
jmp 0x1400256d8
test eax, eax
je 0x140025a27
cmp byte [rsp + 0x1a0], 0
mov rbx, rbx
lea rbx, [rsp + 0x1a0]
jmp 0x140025300
mov r10, r10
xchg r13, rsp
movdqa xmmword [r13 + 0x40], xmm0
xchg r13, rsp
mov r8d, dword [rsp + 0x40]
xchg rsi, rsi
movd xmm6, ebp
jmp 0x140025693
mov dword [rsp - 0x44], 0x3791ec01
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
mov dword [rsp - 0x28], ebx
movd dword [rdx - 0xc], xmm2
jmp 0x140025716
paddd xmm1, xmm2
mov dword [rsp - 0x28], edx
psrad xmm1, xmm6
jmp 0x1400257be
pshuflw xmm0, xmm2, 0xd8
mov dword [rsp - 0x44], edi
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
movdqa xmm1, xmm3
jmp 0x140025746
mov rax, qword [0x1402567f0]
xor rax, rsp
mov qword [rsp + 0x2e0], rax
mov dword [rsp - 0xc], 0x5dc5a8b6
xchg rcx, r14
jmp 0x1400254aa
pshufd xmm2, xmm2, 0
lea rdx, [rdx + 8]
paddd xmm2, xmm5
movd xmm3, eax
mov r11, r11
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
jmp 0x140025682
mov dword [rsp - 0x34], edi
mov dword [rsp + 0x190], 0x35ed9760
xor dword [rsp + 0x190], 0x561edd2f
xor dword [rsp + 0x190], 0x37288f9a
jmp 0x1400256a7
mov dword [rsp - 0xc], 0x31949220
call fcn.14000ec40
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x1e0]
call qword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov rcx, rcx
jmp 0x140025667
sar edx, 5
mov rdx, rdx
mov eax, edx
shr eax, 0x19
shr eax, 3
jmp 0x1400255c3
movabs rax, 0xffffffff3f15e5e6
xor rax, 0x5d991375
sub rax, 0x4da2a08e
add rax, 0x4257e2fa
jmp 0x1400255ef
pxor xmm2, xmm0
movd dword [rdx - 8], xmm2
mov dword [rsp - 0x10], esp
cmp ecx, 0x10
jl 0x140025698
jmp 0x1400256f7
mov rcx, r14
xchg r14, rcx
lea rdx, [rsp + 0x1a0]
mov dword [rsp - 0x3c], esp
mov ecx, 0xcd56324
add ecx, 0x4bd081
jmp 0x140025511
jne 0x140025761
mov dword [rsp - 0x40], 0x1411603a
jmp 0x140025a27
packuswb xmm2, xmm2
mov r11, r11
paddb xmm2, xmm0
movd xmm0, dword [rdx - 8]
jmp 0x14002548f
movaps xmmword [r10 - 0x28], xmm6
xchg r10, rax
xchg r10, rax
movaps xmmword [r10 - 0x38], xmm7
xchg r10, rax
movaps xmmword [rax - 0x48], xmm8
xchg rbx, rbx
jmp 0x1400253c5
add ecx, 0x17388206
sub ecx, 0x11756822
xor ecx, 0x7c456823
xor ecx, 0x182e06c5
sub ecx, 0x768f232f
call qword [sym.imp.KERNEL32.dll_GetLogicalDriveStringsA]
mov r13, r13
jmp 0x140025335
movsx eax, dl
imul edx, eax, 0x39
mov r9, r9
movzx eax, cl
inc ecx
sub al, dl
mov dword [rsp - 0x18], ecx
jmp 0x1400255cf
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
jmp 0x14002531f
punpckhdq xmm0, xmm2
paddd xmm3, xmm5
pmuldq xmm0, xmm4
mov r9, r9
sub ecx, 0xfffffff8
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
jmp 0x140025398
sub dword [rsp + 0x190], 0x2f760eac
mov word [rsp + 0x194], ax
lea rcx, [rsp + 0x190]
movzx eax, byte [rbx]
jmp 0x14002581a
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
mov dword [rsp - 0x24], edx
jmp 0x140025782
shr eax, 2
shr eax, 1
add edx, eax
jmp 0x14002553d
neg al
add al, 0xce
neg al
xor byte [r8 - 1], al
cmp ecx, 0x11
jl 0x1400257a0
mov dword [rsp - 0x3c], 0x78f91533
jmp 0x140025768
add rax, 0x13e4bdab
add rax, 0x7fffffff
add rax, 0x14d90956
nop dword [rax]
jmp 0x14002564d
push r15
xchg rsp, rsp
add rsp, 0x4bba7f30
sub rsp, 0x4bba8250
xchg r10, rax
jmp 0x1400254f4
sub ebp, 0x1f57ae21
add ebp, 0xaf72adf
xor ebp, 0x5a94e6ae
sub ebp, 0x17302203
sub ebp, 0x17e0224b
sub ebp, 0x253d6050
jmp 0x14002575a
mov dword [rsp - 0x3c], ebp
inc rax
cmp byte [rbx + rax], 0
jne 0x140025651
mov dword [rsp - 0x1c], esi
jmp 0x14002580c
xchg rdi, rax
mov rax, rdi
xchg rdi, rax
cmp rax, 0xffffffffffffffff
mov dword [rsp - 0x2c], esp
jne 0x14002585f
nop
jmp 0x14002546e
punpckldq xmm1, xmm2
movdqa xmm0, xmm2
mov dword [rsp - 0x30], ecx
jmp 0x14002556d
movd xmm8, r15d
movd xmm2, ecx
lea eax, [rcx + 4]
xchg rsi, rsi
jmp 0x1400253e7
add dword [rsp + 0x190], 0x2453878b
xor dword [rsp + 0x190], 0x47b61de5
sub dword [rsp + 0x190], 0x8abab55
sub dword [rsp + 0x190], 0x61b5c45
jmp 0x14002558e
movd xmm0, r8d
mov dword [rsp - 0x10], 0x77d15de6
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x1401193d0]
jmp 0x1400254df
cmp ecx, 0x11
jge 0x140025768
xchg r12, r12
movsxd rax, ecx
lea r8, [rsp + 0x20]
add r8, rax
mov r13, r13
jmp 0x140025799
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, xmm6
mov dword [rsp - 0xc], edx
jmp 0x140025556
mov dword [rsp - 0x18], 0x134a35b3
mov qword [rax + 0x18], rbp
xchg rsi, rbx
mov qword [rax + 0x20], rbx
xchg rbx, rsi
jmp 0x1400257fd
xchg r13, r13
pand xmm2, xmmword [0x1401193d0]
packuswb xmm2, xmm2
jmp 0x1400255b1
lea r15d, [rbp + 0x1a]
nop dword [rax]
xor eax, eax
jmp 0x140025409
lea r8, [rsp + 0x190]
lea rdx, [rsp + 0x20]
lea rcx, [rsp + 0x1e0]
jmp 0x140025433
movd xmm0, r8d
paddb xmm2, xmm0
movd xmm0, dword [rdx - 0xc]
pxor xmm2, xmm0
jmp 0x140025375
nop dword [rax]
mov eax, 0x313c898a
add eax, 0x28d1cb5e
xor eax, 0x3eae2021
sub eax, 0x16ac02cc
xor eax, 0x12f288dc
jmp 0x1400252e5
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
mov dword [rsp - 0x1c], ecx
pmulld xmm0, xmm7
psubd xmm2, xmm0
jmp 0x1400253a9
movups xmm0, xmmword [0x140119e50]
movzx eax, byte [0x140119e60]
xor ecx, ecx
mov byte [rsp + 0x30], al
mov dword [rsp - 0x2c], esp
xchg rsp, rbx
jmp 0x14002583a
push rdi
mov dword [rsp - 0x14], ebp
push rbx
mov qword [rsp], r14
jmp 0x14002560a
inc rbx
add rbx, rax
cmp byte [rbx], 0
jmp 0x1400254cc
xchg r13, r13
mov byte [rsp + 0x190], al
call qword [sym.imp.KERNEL32.dll_GetDriveTypeA]
cmp eax, ebp
jne 0x14002567c
mov rdx, rdx
jmp 0x1400257dd
movups xmmword [rbx + 0x20], xmm0
xchg rbx, rsp
cmp esi, 2
xchg r14, r14
jl 0x140025703
movdqa xmm0, xmmword [0x1401193f0]
lea rdx, [rsp + 0x24]
jmp 0x1400252c0
lea rdx, [0x140119e64]
lea rcx, [rsp + 0x1e0]
call fcn.1400f5f8c
xchg rdi, rdi
jmp 0x1400259d3
xchg rbp, rax
mov rax, rbp
xchg rbp, rax
jmp 0x1400259eb
sub byte [r14 + 0x50c], 0x31
add byte [r14 + 0x50c], 3
add byte [r14 + 0x50c], 7
sub byte [r14 + 0x50c], 0x30
mov r8d, 0x38276d9e
xor r8d, 0x31d25809
xor r8d, 0x52d95187
jmp 0x1400258dc
xchg r11, rdx
mov r11, rbp
xchg r11, rdx
call fcn.1400eb910
xchg rdi, rcx
mov rdi, rbp
xchg rcx, rdi
jmp 0x140025923
xor r8d, 0x646c096
sub r8d, 0x4416cf8a
add r8d, 0x2d1be5c6
xor r8d, 0x466faac2
jmp 0x1400258c0
lea r8d, [rdx + 2]
mov dword [rsp - 0x14], ebx
call fcn.1400f64c8
xchg r14, rsi
mov rcx, r14
jmp 0x1400259a1
xor edx, edx
xchg r9, rax
mov rcx, r9
xchg r9, rax
jmp 0x1400258fd
call fcn.1400e9750
jmp 0x140025b0a
lea rcx, [r14 + 0x50d]
mov byte [r14 + 0x50c], 0x7d
sub byte [r14 + 0x50c], 0x25
jmp 0x140025887
xchg rbp, rdi
mov rcx, rbp
xchg rdi, rbp
call qword [sym.imp.KERNEL32.dll_FindClose]
mov dword [rsp - 0x38], 0x79ee9916
test rbp, rbp
je 0x140025a27
jmp 0x14002592d
mov r10, r10
xchg rsi, r9
mov rsi, r9
xchg r9, rsi
mov r8, rbx
xchg rsi, rsi
jmp 0x1400259b7
call fcn.1400f69cc
mov dword [rsp - 0x2c], edi
xchg rcx, rdi
mov rdi, rbx
xchg rdi, rcx
call fcn.1400e9b90
jmp 0x14002596e
xchg rsi, r14
call fcn.1400f69c4
mov r8, r8
mov rcx, rsi
movsxd rbx, eax
jmp 0x140025985
mov edx, 0x77d5295d
xor edx, 0x6f1ee3a4
xor edx, 0x6a4ea50d
sub edx, 0x328d8409
jmp 0x140025a03
xchg rsp, rax
mov rsi, rsp
xchg rsp, rax
test rax, rax
xchg r9, r9
je 0x140025a1b
jmp 0x140025915
call fcn.1400f61f8
xchg rbp, rcx
mov rbp, rsi
xchg rcx, rbp
call fcn.1400f5e6c
jmp 0x140025949
xor edx, 0x68259435
sub edx, 0x57d27fdd
xchg rsp, rax
mov rcx, rsp
xchg rsp, rax
jmp 0x14002587b
mov rcx, rdi
mov r11, r11
call qword [sym.imp.KERNEL32.dll_FindClose]
mov byte [r14 + 0x50c], 0x18
add byte [r14 + 0x50c], 0x24
sub byte [r14 + 0x50c], 0x18
jmp 0x140025ae2
add rsp, 8
ret
mov r11, rsp
xchg rsp, r11
nop
mov r15, qword [rsp]
jmp 0x140025a70
mov r13, qword [r11 + 0x38]
xchg r13, rsi
xchg r11, r9
movaps xmm6, xmmword [r9 - 0x10]
xchg r11, r9
jmp 0x140025ac4
add rsp, 8
pop r14
nop
mov rdi, qword [rsp]
jmp 0x140025a44
mov rbp, qword [rsp + 0x2e0]
xchg rbp, rcx
xor rcx, rsp
mov r11, r11
call fcn.1400e9870
jmp 0x140025a9b
lea r11, [rsp + 0x320]
xchg rbx, r8
mov r8, qword [r11 + 0x28]
xchg rbx, r8
jmp 0x140025ab2
xchg rbp, r12
mov r12, qword [r11 + 0x30]
xchg r12, rbp
xchg rsi, r13
jmp 0x140025a59
xchg r11, r15
movaps xmm7, xmmword [r15 - 0x20]
xchg r11, r15
xchg r15, r11
movaps xmm8, xmmword [r15 - 0x30]
xchg r11, r15
xchg r11, rsp
jmp 0x140025a49
add byte [r14 + 0x50c], 0x24
xor byte [r14 + 0x50c], 0x16
sub byte [r14 + 0x50c], 0x19
xor byte [r14 + 0x50c], 7
xor byte [r14 + 0x50c], 0x42
xchg rbp, rcx
jmp 0x140025a80