Function at 0x1400ccd14
Capabilities:
Get disk information

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rdx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x9a0
lea rdi, [0x14013e0e8]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov r11, qword [rsp + 0x9e8]
mov eax, 0x2a
cmp ax, word [r11]
mov r13d, 2
sete al
xor r14d, r14d
mov byte [rsp + 0x51], al
cmp al, r14b
je 0x1400ccd71
add r11, r13
mov qword [rsp + 0x9e8], r11
lea rcx, [0x14012a2c8]
mov r8d, r13d
mov rdx, r11
call fcn.14005c4dc
mov r15d, 1
mov r12b, al
cmp al, r14b
jne 0x1400ccdab
lea rcx, [0x14012a2c4]
mov r8d, r13d
mov rdx, r11
call fcn.14005c4dc
mov bl, r14b
cmp al, r14b
je 0x1400ccdae
mov bl, r15b
lea rcx, [0x1401255a0]
mov r8d, r13d
mov rdx, r11
mov byte [rsp + 0x42], bl
call fcn.14005c4dc
lea rcx, [0x14012a2c0]
mov r8d, 3
mov rdx, r11
mov sil, al
mov byte [rsp + 0x40], al
call fcn.14005c4dc
lea rcx, [0x140125594]
mov r8d, r13d
mov rdx, r11
mov bpl, al
mov byte [rsp + 0xec], al
call fcn.14005c4dc
mov r13b, al
mov byte [rsp + 0x6c], al
cmp bl, r14b
jne 0x1400cce1a
cmp sil, r14b
jne 0x1400cce1a
cmp bpl, r14b
jne 0x1400cce1a
mov ebx, r14d
cmp al, r14b
je 0x1400cce1d
mov ebx, r15d
mov ecx, 9
mov dword [rsp + 0xbc], ebx
lea edx, [rcx + 0x17]
jmp 0x1400cce4a
cmp cx, ax
ja 0x1400cce39
cmp ax, 0xd
jbe 0x1400cce54
cmp dx, ax
je 0x1400cce54
add r11, 2
mov qword [rsp + 0x9e8], r11
movzx eax, word [r11]
cmp ax, r14w
jne 0x1400cce2e
lea rcx, [rsp + 0x9e8]
call fcn.14005aec8
lea rcx, [rsp + 0xd8]
mov edx, 5
call fcn.140063314
lea rcx, [rsp + 0x80]
mov edx, 0x14
call fcn.140063314
lea rcx, [rsp + 0x108]
call fcn.1400632a0
xor ecx, ecx
or rax, 0xffffffffffffffff
mov esi, eax
mov dword [rsp + 0x70], eax
mov dword [rsp + 0x148], eax
mov byte [rsp + 0x9f8], cl
mov byte [rsp + 0x41], cl
mov byte [rsp + 0x74], cl
mov byte [rsp + 0x98], cl
mov word [rsp + 0xa8], cx
mov sil, cl
mov byte [rsp + 0x49], cl
mov byte [rsp + 0x1c0], cl
mov byte [rsp + 0x180], cl
mov dword [rsp + 0x88], ebx
lea ebx, [rax + 0x44]
mov al, r13b
neg al
lea rdx, [rsp + 0x1c0]
mov ecx, ebx
sbb al, al
mov ebp, r14d
mov dword [rsp + 0xe4], r14d
and al, 0x55
mov dword [rsp + 0xfc], r14d
mov dword [rsp + 0x94], r14d
mov byte [rsp + 0x43], al
xor eax, eax
mov dword [rsp + 0x4c], r14d
mov qword [rsp + 0x1c1], rax
mov qword [rsp + 0x1c9], rax
mov qword [rsp + 0x1d1], rax
mov word [rsp + 0x1d9], ax
mov qword [rsp + 0x181], rax
mov qword [rsp + 0x189], rax
mov qword [rsp + 0x191], rax
mov word [rsp + 0x199], ax
lea rax, [rsp + 0x1c0]
mov dword [rsp + 0x128], 0x3e8
mov dword [rsp + 0x150], r14d
mov byte [rsp + 0x5f], r14b
mov qword [rsp + 0x140], rax
mov dword [rsp + 0x54], r14d
mov dword [rsp + 0xa0], r14d
mov dword [rsp + 0x9c], ebx
mov byte [rsp + 0x5d], bl
call fcn.140060050
xor r10d, r10d
movzx ebx, bp
mov byte [rsp + 0x154], r10b
mov r13b, r10b
mov byte [rsp + 0x53], r10b
mov r11d, 0x2d
lea edx, [r11 + 0x10]
mov rcx, qword [rsp + 0x9e8]
cmp r11w, word [rcx]
je 0x1400ccfd7
cmp dx, word [rcx]
jne 0x1400cd49e
lea rdx, [rsp + 0x9e8]
lea rcx, [0x14012a2bc]
mov r8d, 2
call fcn.140065d7c
xor r10d, r10d
cmp al, r10b
je 0x1400cd000
mov byte [rsp + 0x5f], r15b
jmp 0x1400ccfb6
lea rdx, [rsp + 0x9e8]
lea rcx, str._cdrom
mov r8d, 6
call fcn.140065d7c
xor r10d, r10d
cmp al, r10b
je 0x1400cd02c
mov dword [rsp + 0x150], r15d
jmp 0x1400ccfb6
lea rdx, [rsp + 0x9e8]
lea rcx, [0x140126e14]
mov r8d, 3
call fcn.140065d7c
xor r10d, r10d
cmp al, r10b
je 0x1400cd058
mov byte [rsp + 0x53], 0x10
jmp 0x1400ccfb6
lea rdx, [rsp + 0x9e8]
lea rcx, [0x140121f54]
mov r8d, 6
call fcn.140065d7c
xor r10d, r10d
cmp al, r10b
je 0x1400cd082
mov r13b, r15b
jmp 0x1400ccfb6
mov r11, qword [rsp + 0x9e8]
lea rcx, str._from:
mov r8d, 6
mov rdx, r11
call fcn.14005c4dc
xor r10d, r10d
cmp al, r10b
je 0x1400cd140
mov eax, 0xffdf
lea r9, [r11 + 0xc]
movzx r8d, word [r9]
and r8w, ax
movzx eax, word [r11]
cmp ax, r10w
je 0x1400cd0f3
lea ecx, [r10 + 9]
lea edx, [rcx + 0x17]
cmp cx, ax
ja 0x1400cd0d8
cmp ax, 0xd
jbe 0x1400cd0f3
cmp dx, ax
je 0x1400cd0f3
add r11, 2
mov qword [rsp + 0x9e8], r11
mov ax, word [r11]
cmp ax, r10w
jne 0x1400cd0cd
lea rcx, [rsp + 0x9e8]
call fcn.14005aec8
mov eax, 0x41
movzx ecx, r8w
sub cx, ax
lea edx, [rax - 4]
lea r11d, [rax - 0x14]
cmp cx, 0x19
ja 0x1400ccfc0
mov word [rsp + 0x9c], r8w
mov r8, qword [rsp + 0x9e8]
lea rcx, [rsp + 0x1c0]
mov rdx, r9
call fcn.14006a748
jmp 0x1400cd1af
lea rcx, str._SKIP
mov r8d, 6
mov rdx, r11
call fcn.14005c4dc
xor ecx, ecx
cmp al, cl
je 0x1400cd1b7
lea rcx, [rsp + 0x9e8]
add r11, 0xc
mov qword [rsp + 0x9e8], r11
call fcn.14005aec8
lea rdx, [rsp + 0x12c]
lea rcx, [rsp + 0x9e8]
mov dword [rsp + 0x12c], 0x42
call fcn.140074498
mov al, byte [rsp + 0x12c]
lea rcx, [rsp + 0x9e8]
mov byte [rsp + 0x98], al
call fcn.14005aec8
xor r10d, r10d
jmp 0x1400ccfb6
lea rcx, str._skiptp:
mov r8d, 8
mov rdx, r11
call fcn.14005c4dc
xor r10d, r10d
cmp al, r10b
je 0x1400cd330
lea rcx, [rsp + 0x9e8]
add r11, 0x10
mov qword [rsp + 0x9e8], r11
call fcn.14005aec8
cmp bx, 0x3c
jge 0x1400cd2dd
mov rbx, qword [rsp + 0x9e8]
xor eax, eax
lea rdx, [rsp + 0x1a0]
lea rcx, [rsp + 0x9e8]
movzx esi, sil
mov r8d, r15d
mov qword [rsp + 0x1a0], r10
mov qword [rsp + 0x1a8], r10
mov qword [rsp + 0x1b0], rax
imul rsi, rsi, 0x11
call fcn.140077d5c
xor ecx, ecx
cmp rax, rcx
setge al
mov byte [rsp + rsi + 0x2f0], al
cmp al, cl
jne 0x1400cd275
lea rdx, [rsp + 0x1a0]
lea rcx, [rsp + 0x9e8]
mov qword [rsp + 0x9e8], rbx
call fcn.1400c13f0
xor r10d, r10d
cmp eax, r10d
jle 0x1400cd2d8
lea rcx, [rsp + rsi + 0x2f1]
lea rdx, [rsp + 0x1a0]
mov r8d, 0x10
call fcn.14001d7d8
mov sil, byte [rsp + 0x49]
mov rbx, qword [rsp + 0x9e8]
xor r10d, r10d
add sil, r15b
mov byte [rsp + 0x49], sil
lea ecx, [r10 + 9]
cmp word [rbx], r10w
je 0x1400cd2ea
cmp cx, word [rbx]
ja 0x1400cd2bd
cmp word [rbx], 0xd
jbe 0x1400cd2ea
mov edx, 0x20
cmp dx, word [rbx]
je 0x1400cd30d
add rbx, 2
mov qword [rsp + 0x9e8], rbx
jmp 0x1400cd203
mov sil, byte [rsp + 0x49]
mov rbx, qword [rsp + 0x9e8]
mov ecx, 9
mov edx, 0x20
jmp 0x1400cd30d
cmp cx, ax
ja 0x1400cd2fc
cmp ax, 0xd
jbe 0x1400cd316
cmp dx, ax
je 0x1400cd316
add rbx, 2
mov qword [rsp + 0x9e8], rbx
movzx eax, word [rbx]
cmp ax, r10w
jne 0x1400cd2f1
lea rcx, [rsp + 0x9e8]
call fcn.14005aec8
mov bx, word [rsp + 0xa8]
jmp 0x1400ccfb6
lea rcx, str._skippt:
mov r8d, 8
mov rdx, r11
call fcn.14005c4dc
xor r10d, r10d
cmp al, r10b
je 0x1400cd439
or rax, 0xffffffffffffffff
add r11, 0x10
cmp bx, 0x3c
mov qword [rsp + 0x9e8], r11
mov qword [rsp + 0x138], rax
mov qword [rsp + 0xf0], rax
jge 0x1400cd3ef
lea rdx, [rsp + 0x138]
lea rcx, [rsp + 0x9e8]
call fcn.1400ca704
xor r10d, r10d
cmp eax, r10d
jle 0x1400cd3df
lea rdx, [rsp + 0xf0]
lea rcx, [rsp + 0x9e8]
call fcn.1400ca704
xor r10d, r10d
cmp eax, r10d
jle 0x1400cd3df
movzx eax, word [rsp + 0x138]
movsx rcx, bx
add bx, r15w
cmp bx, 0x3c
mov word [rsp + rcx*4 + 0x200], ax
movzx eax, word [rsp + 0xf0]
mov word [rsp + rcx*4 + 0x202], ax
jl 0x1400cd377
mov r11, qword [rsp + 0x9e8]
mov word [rsp + 0xa8], bx
movzx eax, word [r11]
cmp ax, r10w
je 0x1400cd427
mov ecx, 9
lea edx, [rcx + 0x17]
cmp cx, ax
ja 0x1400cd40c
cmp ax, 0xd
jbe 0x1400cd427
cmp dx, ax
je 0x1400cd427
add r11, 2
mov qword [rsp + 0x9e8], r11
mov ax, word [r11]
cmp ax, r10w
jne 0x1400cd401
lea rcx, [rsp + 0x9e8]
call fcn.14005aec8
jmp 0x1400ccfb6
lea rdx, [rsp + 0x9e8]
lea rcx, str._check
mov r8d, 6
call fcn.140065d7c
xor r10d, r10d
cmp al, r10b
je 0x1400cd468
mov byte [rsp + 0x154], r15b
jmp 0x1400ccfb6
lea rdx, [rsp + 0x9e8]
lea rcx, [0x14012a288]
mov r8d, 6
call fcn.140065d7c
xor r10d, r10d
lea edx, [r10 + 0x3d]
lea r11d, [r10 + 0x2d]
cmp al, r10b
jne 0x1400ccfc0
mov rcx, qword [rsp + 0x9e8]
movzx eax, word [rcx]
cmp ax, r10w
je 0x1400cd532
mov r8d, 0x2a
mov edi, ebp
lea r9d, [r8 - 0x21]
cmp r8w, ax
jne 0x1400cd4e7
cmp r8w, word [rcx + 2]
jne 0x1400cd4d7
add rcx, 2
mov dword [rsp + 0x88], r15d
mov byte [rsp + 0x53], 0x10
jmp 0x1400cd50f
cmp r8w, ax
jne 0x1400cd4e7
mov dword [rsp + 0x88], r15d
jmp 0x1400cd50f
mov edx, 0x26
cmp dx, ax
jne 0x1400cd4f6
or edi, 8
jmp 0x1400cd50f
cmp r11w, ax
jne 0x1400cd524
movzx eax, word [rcx + 2]
sub ax, 0x30
cmp ax, r9w
jbe 0x1400cd524
mov dword [rsp + 0x4c], r15d
add rcx, 2
mov qword [rsp + 0x9e8], rcx
mov ax, word [rcx]
cmp ax, r10w
jne 0x1400cd4b7
mov dword [rsp + 0x94], edi
lea rdi, [0x14013e0e8]
lea rcx, [rsp + 0x9e8]
call fcn.14005aec8
call fcn.140060094
mov rcx, qword [rsp + 0x9e8]
xor r9d, r9d
mov word [rsp + 0x164], ax
cmp word [rcx], r9w
jne 0x1400cd57e
or rax, 0xffffffffffffffff
mov r14d, eax
mov dword [rsp + 0x54], eax
mov dword [rsp + 0xa0], eax
mov esi, eax
mov dword [rsp + 0x70], eax
mov dword [rsp + 0x148], eax
jmp 0x1400cd582
mov esi, dword [rsp + 0x70]
mov word [rsp + 0x160], r9w
mov dword [rsp + 0xcc], r9d
mov eax, 0x2c
cmp word [rcx], r9w
je 0x1400cda71
lea rdx, [rsp + 0x108]
lea rcx, [rsp + 0x9e8]
mov r8d, eax
call fcn.140067288
mov rbx, qword [rsp + 0x9e8]
mov r10d, 0x2c
cmp r10w, word [rbx]
jne 0x1400cd721
lea rdx, [rsp + 0xd8]
lea rcx, [rsp + 0x9e8]
add rbx, 2
mov r8d, r10d
mov qword [rsp + 0x9e8], rbx
call fcn.140067288
movzx r11d, word [rbx]
mov eax, 0xffdf
and r11w, ax
lea eax, [r11 - 0x41]
cmp ax, 0x19
ja 0x1400cd62f
mov r8, qword [rsp + 0x9e8]
lea rcx, [rsp + 0x180]
mov rdx, rbx
mov byte [rsp + 0x5d], r11b
mov byte [rsp + 0x43], r11b
call fcn.14006a748
mov rbx, qword [rsp + 0x9e8]
mov r10d, 0x2c
cmp r10w, word [rbx]
jne 0x1400cd721
lea rdx, [rsp + 0xfc]
lea rcx, [rsp + 0x9e8]
add rbx, 2
mov r8d, r10d
mov qword [rsp + 0x9e8], rbx
call fcn.140067680
mov rbx, qword [rsp + 0x9e8]
mov r10d, 0x2c
cmp r10w, word [rbx]
jne 0x1400cd721
add rbx, 2
lea rcx, [rsp + 0x138]
mov qword [rsp + 0x9e8], rbx
mov qword [rsp + 0x138], rbx
call fcn.14005aec8
lea rcx, [rsp + 0x9e8]
mov edx, r10d
call fcn.1400e8c3c
mov rdx, qword [rsp + 0x138]
mov eax, 0xffdf
movzx ecx, word [rdx]
xor r9d, r9d
and cx, ax
cmp r14d, r9d
jg 0x1400cd6df
lea eax, [r10 - 2]
cmp ax, word [rdx]
jne 0x1400cd6df
mov dword [rsp + 0x160], eax
movzx eax, cx
mov r8d, 0x41
sub ax, r8w
cmp ax, 0x19
ja 0x1400cd876
mov r8, qword [rsp + 0x9e8]
mov byte [rsp + 0x5d], cl
mov byte [rsp + 0x43], cl
lea rcx, [rsp + 0x180]
call fcn.14006a748
mov rbx, qword [rsp + 0x9e8]
mov r10d, 0x2c
xor r9d, r9d
cmp r10w, word [rbx]
jne 0x1400cd80a
lea rcx, [rbx + 2]
mov edx, 9
movzx eax, word [rcx]
sub ax, 0x30
cmp ax, dx
ja 0x1400cd78b
mov qword [rsp + 0x9e8], rcx
lea rdx, [rsp + 0xe4]
lea rcx, [rsp + 0x9e8]
mov r8d, r10d
call fcn.140067680
mov rbx, qword [rsp + 0x9e8]
mov ebp, dword [rsp + 0xe4]
xor r9d, r9d
lea r10d, [r9 + 0x2c]
cmp word [rbx], r9w
je 0x1400cd78b
add rbx, 2
mov qword [rsp + 0x9e8], rbx
cmp r10w, word [rbx]
jne 0x1400cd80a
add rbx, 2
lea rcx, [rsp + 0x138]
mov qword [rsp + 0x9e8], rbx
mov qword [rsp + 0x138], rbx
call fcn.14005aec8
lea rcx, [rsp + 0x9e8]
mov edx, r10d
call fcn.1400e8c3c
mov rdx, qword [rsp + 0x138]
mov eax, 0xffdf
movzx ecx, word [rdx]
mov r8d, 0x41
and cx, ax
movzx eax, cx
sub ax, r8w
cmp ax, 0x19
ja 0x1400cd80a
mov r8, qword [rsp + 0x9e8]
movsx eax, cl
lea rcx, [rsp + 0x1c0]
mov dword [rsp + 0x9c], eax
call fcn.14006a748
xor r9d, r9d
mov rcx, qword [rsp + 0x108]
mov eax, 0xffdf
mov r10d, 0x23
mov qword [rsp + 0x9e8], rcx
movzx edx, word [rcx]
lea r11d, [r10 - 0x1a]
and dx, ax
movzx eax, word [rcx]
sub ax, 0x30
cmp ax, r11w
jbe 0x1400cd9b5
lea eax, [r10 + 0xa]
cmp ax, word [rcx]
jne 0x1400cd85b
movzx eax, word [rcx + 2]
sub ax, 0x30
cmp ax, r11w
jbe 0x1400cd9b5
mov eax, 0x46
cmp ax, dx
jne 0x1400cd8a1
add rcx, 2
or dword [rsp + 0xcc], 0xffffffff
jmp 0x1400cd999
mov eax, 0x3f
cmp ax, word [rdx]
jne 0x1400cd894
cmp byte [rsp + 0x42], r9b
jne 0x1400cd88e
cmp byte [rsp + 0x40], r9b
je 0x1400cd894
mov al, byte [rdx]
mov byte [rsp + 0x43], al
mov rbx, qword [rsp + 0x9e8]
jmp 0x1400cd724
mov eax, 0x55
cmp ax, dx
je 0x1400cd988
mov eax, 0x52
cmp ax, dx
je 0x1400cd988
lea edx, [rax - 0x18]
mov eax, dword [rsp + 0x4c]
cmp dx, word [rcx]
je 0x1400cd8de
cmp r10w, word [rcx]
je 0x1400cd8de
cmp eax, r9d
jne 0x1400cd8de
cmp word [rcx], r9w
jne 0x1400cdd72
mov r8b, byte [rsp + 0x9f8]
mov rbx, qword [rsp + 0xd8]
cmp word [rcx], r9w
jne 0x1400cd900
cmp word [rbx], r9w
cmovne eax, r15d
mov dword [rsp + 0x4c], eax
lea rcx, [rsp + 0x9e8]
call fcn.14005aec8
mov rcx, qword [rsp + 0x9e8]
mov eax, 0x3a
cmp ax, word [rcx]
je 0x1400cd92e
cmp r10w, word [rcx]
jne 0x1400cda79
mov byte [rsp + 0x41], r15b
cmp r8b, r9b
jne 0x1400cd938
cmp esi, r9d
jge 0x1400cd93d
mov byte [rsp + 0x41], r9b
add rcx, 2
mov qword [rsp + 0x9e8], rcx
lea rcx, [rsp + 0x9e8]
call fcn.14005aec8
mov rax, qword [rsp + 0x9e8]
mov ecx, 0x2d
cmp cx, word [rax]
jne 0x1400cda44
movzx eax, word [rax + 2]
sub ax, 0x30
cmp ax, r11w
jbe 0x1400cda44
mov dword [rsp + 0x4c], r15d
jmp 0x1400cda79
mov dword [rsp + 0xcc], r15d
add rcx, 2
mov byte [rsp + 0x74], r15b
mov eax, dword [rsp + 0x4c]
mov r8b, 0xc
mov qword [rsp + 0x9e8], rcx
mov byte [rsp + 0x9f8], r8b
jmp 0x1400cd8e6
mov qword [rsp + 0x168], rcx
lea rdx, [rsp + 0x148]
lea rcx, [rsp + 0x168]
call fcn.1400c14f0
mov r11, qword [rsp + 0x9e8]
xor r9d, r9d
movzx eax, word [r11]
cmp ax, r9w
je 0x1400cda0e
lea ecx, [r9 + 0x23]
lea edx, [rcx + 0x17]
cmp ax, dx
je 0x1400cda0e
cmp ax, cx
je 0x1400cda0e
add r11, 2
mov qword [rsp + 0x9e8], r11
mov ax, word [r11]
cmp ax, r9w
jne 0x1400cd9ee
lea rcx, [rsp + 0x9e8]
call fcn.14005aec8
mov esi, dword [rsp + 0x148]
mov rcx, qword [rsp + 0x9e8]
mov eax, dword [rsp + 0x4c]
mov r10d, 0x23
mov dword [rsp + 0x70], esi
mov r8b, r9b
lea r11d, [r10 - 0x1a]
jmp 0x1400cd8e6
lea rdx, [rsp + 0xa0]
lea rcx, [rsp + 0x9e8]
mov r8d, 0x2c
call fcn.140067680
mov r14d, dword [rsp + 0xa0]
xor r9d, r9d
mov dword [rsp + 0x54], r14d
jmp 0x1400cda79
mov rbx, qword [rsp + 0xd8]
mov dword [rsp + 0x90], 0xfffffff8
mov dword [rsp + 0x68], r14d
cmp byte [rsp + 0x41], r9b
je 0x1400cdadf
cmp r14d, r9d
jle 0x1400cdd79
cmp r14d, 4
jg 0x1400cdaa4
sub r14d, r15d
jmp 0x1400cdaac
lea r14d, [r14*4 - 0x10]
cmp r14d, r9d
mov dword [rsp + 0x54], r14d
jl 0x1400cdac1
cmp r14d, 4
jge 0x1400cdac7
add r14d, r15d
jmp 0x1400cdada
cmp r14d, 4
jl 0x1400cdadf
mov eax, r14d
cdq
and edx, 3
lea r14d, [rdx + rax]
sar r14d, 2
add r14d, 4
mov dword [rsp + 0x54], r14d
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_lstrlenW]
lea rcx, [rsp + 0xd8]
movsxd rdx, eax
add rdx, 5
call fcn.1400633a0
mov rsi, qword [rsp + 0xd8]
cmp word [rsi], 0x61
jb 0x1400cdb18
cmp word [rsi], 0x7a
ja 0x1400cdb18
mov eax, 0xffe0
add word [rsi], ax
xor ecx, ecx
cmp word [rsi], 0x5a
mov eax, ecx
seta al
mov byte [rsp + 0x8c], cl
mov dword [rsp + 0x1b8], eax
cmp byte [rsp + 0x9f8], cl
jne 0x1400cdb99
cmp dword [rsp + 0x4c], ecx
jne 0x1400cdb99
mov eax, 0x100
cmp word [rsi], ax
jae 0x1400cdb99
lea eax, [rcx + 0x41]
cmp word [rsi], ax
jb 0x1400cdb58
cmp word [rsi], 0x5a
jbe 0x1400cdb99
mov eax, dword [rsp + 0x70]
mov word [rsi], cx
cmp eax, ecx
jl 0x1400cdb7a
mov eax, 0xfffffff8
cmp r14d, r15d
cmovge eax, r14d
mov dword [rsp + 0x90], eax
mov eax, dword [rsp + 0x70]
cmp byte [rsp + 0x41], cl
je 0x1400cdb99
cmp eax, ecx
jl 0x1400cdb99
cmp r14d, ecx
jl 0x1400cdb99
mov dword [rsp + 0x90], r14d
mov byte [rsp + 0x8c], r15b
mov ebx, dword [rsp + 0xbc]
cmp ebx, ecx
je 0x1400cdbae
mov byte [rsp + 0x50], r15b
test r15b, bpl
jne 0x1400cdbb2
mov byte [rsp + 0x50], cl
cmp ebx, ecx
je 0x1400cdbcf
mov eax, dword [rsp + 0x154]
test bpl, 2
movzx eax, al
cmovne eax, r15d
mov dword [rsp + 0x154], eax
cmp r12b, cl
jne 0x1400cdbe2
cmp ebx, ecx
je 0x1400cdbde
test bpl, 4
jne 0x1400cdbe2
mov al, cl
jmp 0x1400cdbe5
mov al, r15b
mov cl, bpl
and cl, 0x10
mov byte [rsp + 0xed], cl
mov cl, bpl
and cl, 0x40
mov byte [rsp + 0xf8], cl
mov ecx, 0x20
test cl, bpl
mov ecx, dword [rsp + 0x150]
cmovne ecx, r15d
xor ebp, ebp
mov dword [rsp + 0x150], ecx
cmp al, bpl
je 0x1400cdd0f
movzx ebp, byte [rsp + 0x49]
xor r12d, r12d
xor edx, edx
lea rbx, [rsp + rbp*4 + 0x202]
lea r8d, [r12 + 0x10]
mov word [rsp + rbp*4 + 0x200], r12w
mov rcx, rbx
call fcn.140101f00
mov r11d, 0xee
add bpl, r15b
movzx eax, bpl
mov word [rbx], r11w
xor edx, edx
lea rbx, [rsp + rax*4 + 0x202]
mov word [rsp + rax*4 + 0x200], r12w
mov r12d, 0x10
mov rcx, rbx
mov r8, r12
call fcn.140101f00
mov eax, 0xef
add bpl, r15b
mov word [rbx], ax
movzx eax, bpl
lea rdx, [0x14012a278]
lea rcx, [rsp + rax*4 + 0x202]
mov r8, r12
mov word [rsp + rax*4 + 0x200], r15w
call fcn.14001d7d8
add bpl, r15b
lea rdx, [0x14012a268]
movzx eax, bpl
mov r8, r12
lea rcx, [rsp + rax*4 + 0x202]
mov word [rsp + rax*4 + 0x200], r15w
call fcn.14001d7d8
add bpl, r15b
lea rdx, [0x14012a258]
movzx eax, bpl
mov r8, r12
lea rcx, [rsp + rax*4 + 0x202]
mov word [rsp + rax*4 + 0x200], r15w
call fcn.14001d7d8
mov ebx, dword [rsp + 0xbc]
add bpl, r15b
mov byte [rsp + 0x49], bpl
xor ebp, ebp
cmp dword [rsp + 0x70], ebp
jl 0x1400cdd1d
cmp r14d, ebp
mov al, r15b
jg 0x1400cdd20
mov al, bpl
cmp al, bpl
mov ax, word [rsi]
mov ecx, ebp
cmovne ecx, r15d
mov edx, 0x64
mov dword [rsp + 0xb8], eax
mov dword [rsp + 0xa0], ecx
mov dword [rsp + 0xd0], ecx
lea rcx, [rsp + 0x80]
call fcn.1400633a0
call qword [sym.imp.KERNEL32.dll_GetLogicalDrives]
mov cl, byte [rsp + 0x6c]
mov dword [rsp + 0xe8], eax
mov al, byte [rsp + 0x43]
cmp cl, bpl
je 0x1400cddb1
cmp al, bpl
jne 0x1400cddb1
mov r15, 0xffffffff80070057
lea rcx, [rsp + 0x108]
call fcn.14005aef8
lea rcx, [rsp + 0x80]
call fcn.14005aef8
lea rcx, [rsp + 0xd8]
call fcn.14005aef8
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov rax, r15
jmp 0x1400cfdb9
mov r12d, dword [rsp + 0xcc]
cmp r12d, ebp
jg 0x1400cddc3
cmp cl, bpl
je 0x1400cde06
cmp byte [rsp + 0x180], bpl
movsx eax, al
mov dword [rsp + 0x9c], eax
lea rax, [rsp + 0x180]
cmove rax, qword [rsp + 0x140]
mov qword [rsp + 0x140], rax
cmp cl, bpl
je 0x1400cde06
mov byte [rsp + 0x9f8], 0xc
mov r12d, r15d
mov dword [rsp + 0xcc], r15d
mov eax, 0xb
cmp ebx, ebp
jne 0x1400cde25
cmp r12d, ebp
jle 0x1400cde25
mov byte [rsp + 0x9f8], al
mov r12d, ebp
mov dword [rsp + 0xcc], ebp
mov ebx, dword [rsp + 0x68]
mov dword [rsp + 0xfc], r15d
cmp dword [rsp + 0x4c], ebp
jne 0x1400cde63
cmp ebx, ebp
jle 0x1400cde40
cmp r13b, bpl
jne 0x1400cde63
mov r13d, dword [rsp + 0x70]
mov byte [rsp + 0x64], r15b
cmp r13d, ebp
jl 0x1400cde6d
cmp r14d, ebp
mov byte [rsp + 0x5c], r15b
jle 0x1400cde72
mov byte [rsp + 0x99], r15b
jmp 0x1400cde7a
mov r13d, dword [rsp + 0x70]
mov byte [rsp + 0x64], bpl
mov byte [rsp + 0x5c], bpl
mov byte [rsp + 0x99], bpl
xor eax, eax
lea rcx, [rsp + 0x118]
mov edx, 0x3960
cmp r12d, eax
setle bpl
mov dword [rsp + 0x12c], ebp
call fcn.140063028
xor ebp, ebp
cmp dword [rsp + 0x150], ebp
lea ecx, [rbp + 9]
mov eax, r15d
cmovg eax, ecx
mov byte [rsp + 0xaa], bpl
mov dword [rsp + 0x1bc], eax
cmp byte [rsp + 0x42], bpl
jne 0x1400cdecb
cmp byte [rsp + 0x40], bpl
je 0x1400cdeef
mov eax, 0x3f
cmp byte [rsp + 0x43], al
jne 0x1400cdeef
lea r8d, [rax - 0x24]
lea rdx, [rsp + 0x1c0]
lea rcx, [rsp + 0x180]
call fcn.14001d7d8
cmp dword [rsp + 0xbc], ebp
mov al, bpl
mov dword [rsp + 0xe4], eax
jg 0x1400cdf12
movzx eax, al
cmp ebx, ebp
cmovle eax, r15d
mov dword [rsp + 0xe4], eax
cmp byte [rsp + 0x41], bpl
jne 0x1400cdf3d
cmp byte [rsp + 0x5f], bpl
je 0x1400cdf3d
cmp r13d, ebp
mov r13d, dword [rsp + 0x90]
jl 0x1400cdf45
cmp ebx, ebp
cmovg r13d, r14d
mov dword [rsp + 0x90], r13d
jmp 0x1400cdf45
mov r13d, dword [rsp + 0x90]
lea rcx, [rsp + 0xc0]
mov edx, 0x20fa38
call fcn.140063028
mov rbp, qword [rsp + 0xc0]
xor edx, edx
lea rbx, [rbp + 0x20c010]
lea r12, [rbp + 0x20f970]
mov qword [rsp + 0xf0], rbx
mov qword [rsp + 0x168], r12
cmp byte [rsp + 0x5c], dl
jne 0x1400cdfd7
cmp byte [rsp + 0x51], dl
jne 0x1400cdfd7
cmp byte [rsp + 0x9f8], dl
jne 0x1400cdfd7
cmp r13d, edx
jge 0x1400cdfd7
cmp byte [rsp + 0x41], dl
jne 0x1400cdfd7
mov eax, dword [rsp + 0x68]
cmp word [rsi], dx
jne 0x1400cdfb4
cmp eax, edx
je 0x1400cdfd7
or rcx, 0xffffffffffffffff
cmp eax, ecx
je 0x1400cdfd7
mov ecx, dword [rsp + 0x4c]
mov r13d, dword [rsp + 0x70]
cmp ecx, edx
je 0x1400cfa2d
cmp r13d, edx
jl 0x1400cfa29
cmp eax, r15d
jl 0x1400cfa29
mov r8d, dword [rsp + 0x1bc]
mov rdx, rbp
mov rcx, rbx
call fcn.1400767e8
xor edx, edx
cmp byte [rsp + 0x50], dl
je 0x1400cdfff
cmp byte [rsp + 0xaa], dl
jne 0x1400ce0bb
cmp byte [rsp + 0xf8], dl
je 0x1400ce09b
mov r9b, byte [rsp + 0x1c0]
mov r10b, byte [rsp + 0x180]
mov eax, 0x1a
mov r11, rax
lea r8, [rbx + 0x10]
mov ecx, dword [r8]
cmp ecx, edx
jle 0x1400ce08f
xor r12d, r12d
lea rdx, [rsp + 0x1c0]
cmp r9b, r12b
je 0x1400ce053
mov al, r9b
movsx eax, al
cmp eax, ecx
je 0x1400ce08d
add rdx, r15
mov al, byte [rdx]
cmp al, r12b
jne 0x1400ce042
lea rdx, [rsp + 0x180]
cmp r10b, r12b
je 0x1400ce074
mov al, r10b
movsx eax, al
cmp eax, ecx
je 0x1400ce08d
add rdx, r15
mov al, byte [rdx]
cmp al, r12b
jne 0x1400ce063
or ecx, 0xe000
mov dword [r8], ecx
mov r9b, byte [rsp + 0x1c0]
mov r10b, byte [rsp + 0x180]
xor edx, edx
add r8, 0x220
sub r11, r15
jne 0x1400ce028
mov rcx, qword [rsp + 0x118]
mov r8d, 0x3960
mov rdx, rbx
call fcn.14001d7d8
mov byte [rsp + 0xaa], r15b
xor edx, edx
mov ebx, dword [rsp + 0xb8]
mov r14b, byte [rsp + 0x9f8]
mov eax, 0x3a
mov word [rsp + 0x7a], ax
mov word [rsp + 0xb2], ax
mov eax, 0x5c
cmp r14b, 5
mov ecx, edx
mov word [rsp + 0xb4], ax
mov eax, dword [rsp + 0x70]
sete cl
mov word [rsp + 0x78], bx
cmp eax, edx
mov word [rsp + 0x7c], dx
mov word [rsp + 0xb0], bx
mov word [rsp + 0xb6], dx
mov dword [rsp + 0x178], edx
mov dword [rsp + 0x100], ecx
mov r13w, dx
jl 0x1400ce133
mov r12d, 0x7530
mov dword [rsp + 0x58], r12d
jmp 0x1400ce168
mov r12w, dx
mov eax, dword [rsp + 0x128]
mov dword [rsp + 0x58], r12d
sub eax, r15d
cmp eax, edx
mov dword [rsp + 0x128], eax
jle 0x1400cf65b
mov eax, 0x3e80
cmp r12w, ax
jge 0x1400cf65b
movzx eax, r12w
mov rbx, qword [rsp + 0x168]
xor r8d, r8d
mov word [rsp + 0xd4], ax
cmp ecx, r8d
cwde
lea rcx, str..CDROM_d
lea rdx, str..PhysicalDrive_d
mov r8d, eax
cmovne rdx, rcx
mov rcx, rbx
mov dword [rsp + 0x60], eax
call qword [sym.imp.USER32.dll_wsprintfW]
xor eax, eax
mov r8d, 0x80000000
lea ecx, [rax + 3]
mov qword [rsp + 0x38], rax
mov dword [rsp + 0x30], 0x20000000
mov dword [rsp + 0x28], ecx
mov r9d, ecx
lea rcx, [rsp + 0x148]
mov rdx, rbx
mov qword [rsp + 0x148], rax
mov qword [rsp + 0x20], rax
call fcn.140003888
mov rbx, qword [rsp + 0x148]
xor edx, edx
cmp rbx, rdx
je 0x1400cf648
or rax, 0xffffffffffffffff
mov r13d, edx
mov dword [rsp + 0xc8], edx
mov qword [rsp + 0x1f8], rax
mov qword [rsp + 0x1e0], rax
cmp byte [rsp + 0x64], dl
je 0x1400ce236
lea r8, [rsp + 0x1e0]
lea rdx, [rsp + 0x15c]
mov rcx, rbx
call fcn.140078174
xor edx, edx
mov qword [rsp + 0x1f8], rax
cmp r14b, dl
je 0x1400ce2fc
mov r9d, 0x800
mov r8d, r15d
mov rdx, rbp
mov rcx, rbx
call fcn.1400696cc
mov r12d, eax
cmp r14b, 5
je 0x1400ce286
mov eax, 0xb
cmp r12d, eax
jne 0x1400ce286
cmp r14b, al
je 0x1400ce286
or r14, 0xffffffffffffffff
cmp rbx, r14
je 0x1400ce40d
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x1400ce40d
mov r14d, dword [rsp + 0xcc]
xor edx, edx
cmp r14d, edx
jne 0x1400ce29b
cmp byte [rsp + 0x74], dl
jle 0x1400ce2c6
mov rdx, rbx
xor ecx, ecx
call fcn.140065bcc
xor edx, edx
cmp r14d, edx
jg 0x1400ce2b2
cmp byte [rsp + 0x74], dl
jle 0x1400ce2b7
cmp eax, 7
jne 0x1400ce2ea
cmp r14d, edx
jge 0x1400ce2c4
cmp eax, 7
je 0x1400ce2ea
cmp r14d, edx
jne 0x1400ce2d3
cmp r12d, 0xc
mov eax, 0xb
cmove r12d, eax
mov r14b, byte [rsp + 0x9f8]
cmp r14b, 5
je 0x1400ce2fc
movsx eax, r14b
cmp r12d, eax
je 0x1400ce2fc
or rax, 0xffffffffffffffff
cmp rbx, rax
je 0x1400ce40f
jmp 0x1400ce278
mov dword [rsp + 0xa4], edx
mov dword [rsp + 0x20], edx
lea r9, [rsp + 0x48]
lea rdx, [rsp + 0xc0]
lea r8, [rsp + 0xa4]
or r14, 0xffffffffffffffff
mov rcx, rbx
mov byte [rsp + 0x48], r14b
call fcn.14006a864
xor edx, edx
mov r12, rax
cmp rax, rdx
jne 0x1400ce33c
cmp rbx, r14
jmp 0x1400ce2f1
add rax, 0x30
cmp dword [r12], r15d
mov edx, 0x200
sete r14b
mov rcx, rbx
mov qword [rsp + 0x120], rax
mov byte [rsp + 0x52], r14b
call fcn.14005f5d4
mov dl, byte [rsp + 0x48]
mov r12d, dword [r12 + 0x28]
movsxd r13, eax
xor r8d, r8d
cmp dl, r8b
setl al
sub al, r15b
and al, 0x10
or al, r14b
cmp dl, r8b
lea r14, [rbp + r13*2 + 0x200010]
mov byte [rsp + 0x5e], al
jl 0x1400ce3a7
mov eax, dword [rsp + 0x68]
mov r14d, dword [rsp + 0xa4]
dec eax
mov dword [rsp + 0x54], eax
jmp 0x1400ce4bb
mov r8b, byte [rsp + 0x41]
xor edx, edx
cmp r8b, dl
je 0x1400ce4aa
cmp byte [rsp + 0x52], dl
je 0x1400ce48b
mov qword [rsp + 0x30], rdx
mov qword [rsp + 0x28], rdx
mov qword [rsp + 0x20], rdx
lea rdx, [rbp + 0x200010]
lea rcx, [rsp + 0x148]
mov r9d, r13d
mov r8d, r12d
call fcn.140069514
mov ecx, dword [rsp + 0x68]
cmp ecx, r12d
jle 0x1400ce42c
or rax, 0xffffffffffffffff
cmp rbx, rax
je 0x1400ce405
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov r13d, dword [rsp + 0xc8]
xor edx, edx
mov r12d, dword [rsp + 0x58]
mov ecx, dword [rsp + 0x100]
mov r14b, byte [rsp + 0x9f8]
add r12w, r15w
jmp 0x1400ce137
mov r12, qword [rsp + 0x120]
lea eax, [rcx - 1]
mov r9d, r13d
movsxd rcx, eax
mov rdx, r12
mov dword [rsp + 0x20], r15d
shl rcx, 7
add rcx, r14
mov r14d, dword [rsp + 0xa4]
mov r8d, r14d
call fcn.1400693b0
xor edx, edx
cmp eax, edx
mov dword [rsp + 0x54], eax
jge 0x1400ce479
or rax, 0xffffffffffffffff
cmp rbx, rax
jne 0x1400ce3fc
mov r13d, dword [rsp + 0xc8]
jmp 0x1400ce40f
cmp byte [rsp + 0x8c], dl
je 0x1400ce4c3
mov dword [rsp + 0x90], eax
jmp 0x1400ce4c3
mov ecx, dword [rsp + 0x68]
cmp ecx, edx
jle 0x1400ce4ae
cmp ecx, 4
jg 0x1400ce4a1
lea eax, [rcx - 1]
mov dword [rsp + 0x54], eax
jmp 0x1400ce4ae
lea eax, [rcx*4 - 0x10]
jmp 0x1400ce49b
mov ecx, dword [rsp + 0x68]
mov r14d, dword [rsp + 0xa4]
cmp ecx, r14d
jg 0x1400ce466
mov r12, qword [rsp + 0x120]
mov rdx, rbx
xor ecx, ecx
call fcn.140065bcc
xor edx, edx
cmp eax, 7
je 0x1400ce510
cmp byte [rsp + 0x5e], dl
jne 0x1400ce510
cmp r14d, 4
jne 0x1400ce510
mov al, byte [rsp + 0x98]
cmp al, byte [r12 + 0x20]
jne 0x1400ce510
cmp byte [r12 + 0xb0], dl
jne 0x1400ce510
cmp byte [r12 + 0x140], dl
jne 0x1400ce510
cmp byte [r12 + 0x1d0], dl
je 0x1400ce466
mov eax, dword [rsp + 0x128]
mov dword [rsp + 0x15c], edx
mov r13d, edx
sub eax, r15d
mov dword [rsp + 0x44], edx
cmp eax, edx
mov dword [rsp + 0x128], eax
jle 0x1400ce466
movsxd r11, dword [rsp + 0x90]
mov qword [rsp + 0x1f0], r11
cmp r13d, r14d
jge 0x1400ce466
mov r12d, r13d
mov dword [rsp + 0x148], r13d
cmp rdi, rdx
je 0x1400ce574
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
xor edx, edx
mov r11d, dword [rsp + 0x100]
cmp r11d, edx
je 0x1400ce58d
lea r13d, [r14 + 0x186a0]
mov dword [rsp + 0x44], r13d
mov r8b, byte [rsp + 0x41]
cmp r8b, dl
jne 0x1400ce5a1
cmp byte [rsp + 0x48], dl
jl 0x1400ce628
mov eax, dword [rsp + 0x54]
cmp eax, edx
jl 0x1400ce628
cmp byte [rsp + 0x48], dl
lea r13d, [r14 + 0x186a0]
mov dword [rsp + 0x44], r13d
jl 0x1400ce610
cmp r14d, edx
mov r12d, edx
mov dword [rsp + 0x148], edx
jle 0x1400ce466
mov r9, qword [rsp + 0x120]
mov edx, dword [rsp + 0x68]
lea rcx, [r9 + 0x18]
movsx eax, word [rcx]
cmp eax, edx
je 0x1400ce603
add r12d, r15d
add rcx, 0x90
cmp r12d, r14d
mov dword [rsp + 0x148], r12d
jl 0x1400ce5de
xor edx, edx
jmp 0x1400ce466
xor edx, edx
cmp r12d, edx
jl 0x1400ce466
jmp 0x1400ce630
cmp r8b, dl
je 0x1400ce628
cmp eax, r14d
mov r12d, eax
mov dword [rsp + 0x148], eax
jge 0x1400ce466
mov r9, qword [rsp + 0x120]
cmp byte [rsp + 0x52], dl
je 0x1400ce63e
mov r14d, 0xff07
jmp 0x1400ce64f
movsxd rax, r12d
lea rcx, [rax + rax*8]
shl rcx, 4
movzx r14d, byte [rcx + r9 + 0x20]
movsx r8d, word [rsp + 0xa8]
movsxd rax, r12d
mov dword [rsp + 0x130], r14d
lea r12, [rax + rax*8]
xor eax, eax
shl r12, 4
cmp r8d, eax
movsx r10d, word [r12 + r9 + 0x18]
mov qword [rsp + 0x138], r12
mov dword [rsp + 0xe0], r10d
jle 0x1400ce6ba
mov ax, word [rsp + 0xd4]
lea rcx, [rsp + 0x202]
cmp ax, word [rcx - 2]
jne 0x1400ce6ae
movsx eax, word [rcx]
cmp r10d, eax
je 0x1400ce6ba
mov ax, word [rsp + 0xd4]
add edx, r15d
add rcx, 4
cmp edx, r8d
jl 0x1400ce698
cmp edx, r8d
jl 0x1400ce865
mov dl, byte [rsp + 0x49]
xor r8d, r8d
cmp dl, r8b
jbe 0x1400ce769
mov cl, byte [rsp + 0x5e]
lea r13, [r12 + r9 + 0x20]
movzx r12d, dl
mov al, cl
mov r10d, r8d
neg al
sbb r11b, r11b
and r11b, 0xf
add r11b, r15b
cmp r12d, r8d
jle 0x1400ce743
lea r9, [rsp + 0x2f0]
xor edi, edi
cmp cl, byte [r9]
jne 0x1400ce728
movsxd rax, r10d
movzx r8d, r11b
mov rcx, r13
imul rax, rax, 0x11
lea rdx, [rsp + rax + 0x2f1]
call fcn.14005af28
cmp eax, edi
je 0x1400ce734
mov cl, byte [rsp + 0x5e]
add r10d, r15d
add r9, 0x11
cmp r10d, r12d
jl 0x1400ce700
mov r9, qword [rsp + 0x120]
lea rdi, [0x14013e0e8]
cmp r10d, r12d
mov r13d, dword [rsp + 0x44]
jl 0x1400ce865
mov r12, qword [rsp + 0x138]
mov r10d, dword [rsp + 0xe0]
mov r11d, dword [rsp + 0x100]
mov cl, byte [rsp + 0x51]
mov eax, dword [rsp + 0x54]
xor edx, edx
cmp cl, dl
je 0x1400ce77b
cmp eax, edx
jge 0x1400ce78e
cmp byte [rsp + 0x99], dl
je 0x1400ce7f1
cmp byte [rsp + 0x41], dl
jne 0x1400ce7f1
cmp eax, edx
jle 0x1400ce7f1
cmp r10d, eax
jne 0x1400ce867
cmp cl, dl
je 0x1400ce7dc
test r14b, 0x10
jne 0x1400cf846
cmp r14d, 0x84
je 0x1400cf846
mov eax, 0xef
cmp r14d, eax
je 0x1400cf846
cmp byte [rsp + 0x5e], r15b
jne 0x1400ce7dc
movabs rax, 0xc000000000000000
test qword [r12 + r9 + 0x40], rax
jne 0x1400cf846
mov ecx, dword [rsp + 0xa4]
lea r13d, [rcx + 0x186a0]
mov dword [rsp + 0x44], r13d
jmp 0x1400ce7f8
mov ecx, dword [rsp + 0xa4]
cmp byte [rsp + 0x64], dl
je 0x1400ce895
mov rax, qword [r12 + r9 + 8]
cmp rax, rdx
jle 0x1400ce895
cmp qword [rsp + 0x1f8], rax
je 0x1400ce824
cmp qword [rsp + 0x1e0], rax
jne 0x1400ce895
cmp word [rsp + 0x160], dx
je 0x1400ce867
cmp r10d, edx
jle 0x1400ce867
movzx eax, byte [rsp + 0x53]
mov rcx, qword [rsp + 0xf0]
mov qword [rsp + 0x38], rdx
mov qword [rsp + 0x30], rdx
mov edx, dword [rsp + 0x60]
or eax, r15d
xor r9d, r9d
mov r8d, r10d
mov dword [rsp + 0x28], r15d
mov dword [rsp + 0x20], eax
call fcn.14005f658
xor edx, edx
mov eax, dword [rsp + 0x128]
mov r14d, dword [rsp + 0xa4]
add r13d, r15d
sub eax, r15d
mov dword [rsp + 0x44], r13d
cmp eax, edx
mov dword [rsp + 0x128], eax
jg 0x1400ce547
jmp 0x1400ce466
cmp r11d, edx
jne 0x1400ce8b0
cmp r14d, edx
je 0x1400ce867
cmp r10d, edx
jle 0x1400ce867
cmp r14d, 5
je 0x1400ce867
cmp r14d, 0xf
je 0x1400ce867
mov eax, dword [rsp + 0x54]
cmp eax, edx
jg 0x1400ce8ce
cmp qword [r12 + r9 + 0x10], 0x200
jg 0x1400ce8ce
test r14b, 0x10
je 0x1400ce867
jmp 0x1400ce833
mov edx, dword [rsp + 0x178]
mov r8b, byte [rsp + 0x41]
mov r11, qword [rsp + 0x1f0]
add edx, r15d
mov dword [rsp + 0x178], edx
test r8b, r8b
jne 0x1400ce904
cmp r11, r15
jl 0x1400ce904
cmp dword [rsp + 0x90], r10d
jne 0x1400ce865
test r11, r11
js 0x1400ce915
lea r13d, [rcx + 0x3e8]
mov dword [rsp + 0x44], r13d
xor ecx, ecx
cmp r8b, cl
jne 0x1400cf408
xor r8d, r8d
cmp eax, r8d
jl 0x1400ce936
cmp eax, r10d
jne 0x1400ce936
cmp r10d, r8d
jg 0x1400cf40b
cmp word [rsp + 0x160], r8w
jne 0x1400ce865
mov ecx, dword [rsp + 0x4c]
cmp ecx, r8d
jne 0x1400ce960
cmp r11, r8
jge 0x1400ce960
cmp eax, r8d
jle 0x1400ce960
cmp edx, eax
jge 0x1400cf66b
xor edx, edx
or r14, 0xffffffffffffffff
cmp eax, edx
je 0x1400ce970
cmp byte [rsp + 0x51], dl
je 0x1400ce9e9
cmp byte [rsp + 0x52], dl
jne 0x1400cecbb
mov eax, dword [rsp + 0x130]
test al, 0x10
jne 0x1400ce997
cmp eax, 0x84
je 0x1400ce997
cmp eax, 0xef
jne 0x1400cecd2
cmp byte [rsp + 0xed], dl
je 0x1400ce9e9
mov r12, qword [rsp + 0xf0]
movzx ecx, dx
mov edx, dword [rsp + 0x60]
movsx rax, cx
imul rax, rax, 0x220
cmp dword [rax + r12 + 4], edx
jne 0x1400ce9d5
cmp dword [rax + r12], r10d
jne 0x1400ce9d5
xor r8d, r8d
cmp dword [rax + r12 + 0x10], r8d
jg 0x1400cece9
add cx, r15w
mov eax, 0x1a
cmp cx, ax
jl 0x1400ce9af
mov ecx, dword [rsp + 0x4c]
xor edx, edx
mov eax, dword [rsp + 0x54]
cmp byte [rsp + 0x5c], dl
je 0x1400ce9f8
cmp eax, r10d
je 0x1400cea0e
cmp eax, edx
jl 0x1400cea0e
cmp ecx, edx
je 0x1400cea05
cmp eax, r10d
je 0x1400cea0e
cmp r11, rdx
jl 0x1400ce867
mov rax, qword [rsp + 0xf0]
mov r13b, dl
mov word [rsp + 0x110], dx
movzx r12d, dx
mov ecx, 0x1a
mov r9d, dword [rsp + 0x100]
movsx r11, r12w
imul r11, r11, 0x220
cmp dword [r11 + rax + 8], 5
je 0x1400cea56
cmp r9d, edx
je 0x1400cea5f
cmp dword [r11 + rax + 8], 5
jne 0x1400ceb8c
cmp r9d, edx
je 0x1400ceb8c
mov r8d, dword [rsp + 0x60]
cmp dword [r11 + rax + 4], r8d
jne 0x1400ceb91
cmp dword [r11 + rax], r10d
jne 0x1400ceb91
cmp dword [r11 + rax + 0x10], edx
jle 0x1400ceb91
movzx ecx, byte [r11 + rax + 0x10]
mov r13b, r15b
mov word [rsp + 0x110], cx
cmp dword [rsp + 0x4c], edx
je 0x1400cebb9
mov rdx, rax
call fcn.14005feac
mov rax, qword [rsp + 0xf0]
mov r10d, dword [rsp + 0xa4]
movzx eax, word [r11 + rax + 0x10]
add r10d, 0x3e8
xor ecx, ecx
mov word [rsp + 0x78], ax
mov word [rsp + 0xb0], ax
mov dword [rsp + 0x44], r10d
cmp dword [rsp + 0xbc], ecx
je 0x1400ceb08
mov r9d, dword [rsp + 0xe0]
mov r8d, dword [rsp + 0x60]
movzx eax, ax
lea rdx, str.Unshow_pt:__d:_d__c_r_n
lea rcx, [0x14013d130]
mov dword [rsp + 0x20], eax
call fcn.140018dd8
mov ecx, dword [rsp + 0x88]
xor eax, eax
cmp ecx, eax
je 0x1400ceb2f
lea rcx, [rsp + 0xb0]
call qword [sym.imp.KERNEL32.dll_DeleteVolumeMountPointW]
xor ecx, ecx
cmp eax, ecx
jne 0x1400ceb2f
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rax, qword [rsp + 0x80]
lea rdx, [rsp + 0x78]
movzx ecx, word [rax]
neg cx
sbb r8, r8
and r8, rax
xor eax, eax
mov ecx, eax
or ecx, dword [rsp + 0x94]
or ecx, 2
call qword [sym.imp.KERNEL32.dll_DefineDosDeviceW]
xor edx, edx
cmp eax, edx
jne 0x1400ceb6a
call qword [sym.imp.KERNEL32.dll_GetLastError]
xor edx, edx
cmp dword [rsp + 0x88], edx
je 0x1400ceb7f
movzx ecx, word [rsp + 0x78]
call fcn.14005f454
xor edx, edx
mov rax, qword [rsp + 0xf0]
mov ecx, 0x1a
mov r8d, dword [rsp + 0x60]
mov r10d, dword [rsp + 0xe0]
add r12w, r15w
cmp r12w, cx
jl 0x1400cea2a
cmp dword [rsp + 0x4c], edx
jne 0x1400cf63e
mov r9d, dword [rsp + 0x100]
cmp r14w, dx
jg 0x1400cec1b
cmp byte [rsp + 0x51], dl
je 0x1400cec1b
mov cl, byte [rsp + 0x52]
cmp cl, dl
jne 0x1400cebf6
mov eax, dword [rsp + 0x130]
test al, 0x10
jne 0x1400cf63e
cmp eax, 0x84
je 0x1400cf63e
cmp eax, 0xef
je 0x1400cf63e
cmp cl, dl
je 0x1400cec1b
mov rax, qword [rsp + 0x138]
mov rcx, qword [rsp + 0x120]
movabs r11, 0xc000000000000000
test qword [rax + rcx + 0x40], r11
jne 0x1400cf63e
mov rax, qword [rsp + 0x140]
movzx r14d, word [rsp + 0x9c]
xor ecx, ecx
mov qword [rsp + 0x1e8], rax
mov word [rsp + 0x158], dx
mov word [rsp + 0x130], cx
movzx eax, cx
cmp dword [rsp + 0xbc], ecx
je 0x1400cf055
mov r11b, byte [rsp + 0x50]
xor r14d, r14d
cmp r11b, r14b
jne 0x1400cec71
cmp byte [rsp + 0x154], r14b
je 0x1400ced12
mov r11, qword [rsp + 0x118]
movsx rax, cx
imul rax, rax, 0x220
cmp dword [rax + r11 + 8], 5
je 0x1400cec99
cmp r9d, r14d
je 0x1400cec9e
cmp dword [rax + r11 + 8], 5
jne 0x1400cecab
cmp r9d, r14d
je 0x1400cecab
cmp dword [rax + r11 + 4], r8d
jne 0x1400cecab
cmp dword [rax + r11], r10d
je 0x1400cecf4
add cx, r15w
mov eax, 0x1a
cmp cx, ax
jge 0x1400ced0d
jmp 0x1400cec79
movabs r8, 0xc000000000000000
test qword [r12 + r9 + 0x40], r8
jne 0x1400ce997
jmp 0x1400cecd6
mov eax, dword [rsp + 0x54]
mov r14d, 2
cmp eax, edx
je 0x1400cea0e
jmp 0x1400ce9e9
mov r14w, r15w
xor edx, edx
jmp 0x1400cea0e
movsx rax, cx
imul rax, rax, 0x220
movzx edx, word [rax + r11 + 0x10]
mov word [rsp + 0x158], dx
mov r11b, byte [rsp + 0x50]
mov r8d, dword [rsp + 0x15c]
mov r10d, dword [rsp + 0x9c]
mov ecx, 0x41
add r8d, r15d
movzx eax, r10w
mov r12d, r15d
sub eax, ecx
mov dword [rsp + 0x15c], r8d
mov cl, al
mov al, byte [rsp + 0x40]
shl r12d, cl
cmp byte [rsp + 0xec], r14b
je 0x1400ced73
cmp al, r14b
je 0x1400ced97
cmp dword [rsp + 0x148], 4
jle 0x1400ced97
add r8d, r15d
mov dword [rsp + 0x15c], r8d
cmp al, r15b
je 0x1400ceecc
jmp 0x1400ced97
cmp al, r15b
jne 0x1400ced97
mov eax, dword [rsp + 0xa4]
lea r10d, [rax + 0x3e8]
mov al, byte [rsp + 0x40]
mov dword [rsp + 0x44], r10d
mov r10d, dword [rsp + 0x9c]
mov r13w, word [rsp + 0x110]
cmp al, 2
jne 0x1400cedb3
cmp r13w, r14w
je 0x1400cedb3
cmp r8d, r15d
je 0x1400ceecc
cmp r11b, r14b
je 0x1400cedd0
cmp dx, r14w
je 0x1400ceecc
mov eax, 0x2000
test ax, dx
jne 0x1400ceecc
movzx eax, word [rsp + 0x164]
cmp ax, r13w
je 0x1400ceecc
cmp ax, r10w
jne 0x1400cee09
mov rax, qword [rsp + 0x140]
xor edx, edx
cmp byte [rax], dl
je 0x1400cf63e
add rax, r15
mov qword [rsp + 0x140], rax
movsx r10d, byte [rax]
mov rdx, qword [rsp + 0xf0]
mov dword [rsp + 0x28], r9d
movzx r9d, word [rsp + 0xa8]
lea rax, [rsp + 0x140]
lea r8, [rsp + 0x200]
movzx ecx, r10w
mov qword [rsp + 0x20], rax
call fcn.14005ff58
mov dx, ax
mov r11w, ax
mov word [rsp + 0xb0], ax
mov word [rsp + 0x78], ax
mov r14w, ax
mov rax, qword [rsp + 0x140]
mov dword [rsp + 0x9c], edx
mov dword [rsp + 0xb8], r11d
mov qword [rsp + 0x1e8], rax
cmp dx, 0x5a
ja 0x1400ceecc
xor edx, edx
cmp byte [rax], dl
je 0x1400cee97
add rax, r15
mov qword [rsp + 0x140], rax
movsx eax, byte [rax]
mov dword [rsp + 0x9c], eax
jmp 0x1400ceea4
mov eax, 0x5b
mov word [rsp + 0x9c], ax
cmp r13w, r11w
jne 0x1400ceed6
movsxd rcx, dword [rsp + 0x12c]
cmp rcx, rdx
je 0x1400cf63e
lea rdx, [rsp + 0x180]
movzx ecx, r11w
call fcn.14005fef8
mov r13d, dword [rsp + 0x44]
jmp 0x1400ce865
mov eax, dword [rsp + 0xe8]
test eax, r12d
mov r12, qword [rsp + 0xf0]
je 0x1400cef8d
mov rdx, r12
movzx ecx, r11w
call fcn.14005feac
lea rdx, str.unShow_int1__c_r_n
lea rcx, [0x14013d130]
movzx r8d, r11w
mov word [rsp + 0xb0], r11w
mov word [rsp + 0x78], r11w
call fcn.140018dd8
lea rcx, [rsp + 0xb0]
call qword [sym.imp.KERNEL32.dll_DeleteVolumeMountPointW]
xor ecx, ecx
cmp eax, ecx
jne 0x1400cef3a
call qword [sym.imp.KERNEL32.dll_GetLastError]
xor eax, eax
lea rdx, [rsp + 0x78]
xor r8d, r8d
mov ecx, eax
or ecx, dword [rsp + 0x94]
or ecx, 2
call qword [sym.imp.KERNEL32.dll_DefineDosDeviceW]
xor edx, edx
cmp eax, edx
jne 0x1400cef64
call qword [sym.imp.KERNEL32.dll_GetLastError]
xor edx, edx
cmp dword [rsp + 0x88], edx
je 0x1400cef79
movzx ecx, word [rsp + 0x78]
call fcn.14005f454
xor edx, edx
mov r11d, dword [rsp + 0xb8]
mov ax, r11w
mov word [rsp + 0x130], ax
cmp r13w, dx
je 0x1400cf050
mov rdx, r12
movzx ecx, r13w
call fcn.14005feac
movzx r12d, r13w
lea rdx, str.unshow_int2__c_r_n
lea rcx, [0x14013d130]
mov r8d, r12d
mov word [rsp + 0xb0], r13w
mov word [rsp + 0x78], r13w
call fcn.140018dd8
lea rcx, [rsp + 0xb0]
call qword [sym.imp.KERNEL32.dll_DeleteVolumeMountPointW]
xor r13d, r13d
cmp eax, r13d
jne 0x1400cefe8
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, r13d
lea rdx, [rsp + 0x78]
xor r8d, r8d
or ecx, dword [rsp + 0x94]
or ecx, 2
call qword [sym.imp.KERNEL32.dll_DefineDosDeviceW]
xor edx, edx
cmp eax, edx
jne 0x1400cf011
call qword [sym.imp.KERNEL32.dll_GetLastError]
xor edx, edx
cmp dword [rsp + 0x88], edx
je 0x1400cf026
movzx ecx, word [rsp + 0x78]
call fcn.14005f454
xor edx, edx
mov r11d, dword [rsp + 0xb8]
lea ecx, [r12 - 0x41]
mov eax, r15d
shl eax, cl
mov word [rsp + 0xb0], r11w
mov word [rsp + 0x78], r11w
not eax
and dword [rsp + 0xe8], eax
mov r13b, dl
jmp 0x1400cf05f
mov r11d, dword [rsp + 0xb8]
xor edx, edx
cmp r13b, dl
je 0x1400cf078
cmp r11w, dx
je 0x1400cf63e
cmp byte [rsp + 0x5f], dl
jne 0x1400cf63e
cmp byte [rsp + 0x48], dl
jl 0x1400cf0a5
mov rax, qword [rsp + 0x138]
mov rcx, qword [rsp + 0x120]
lea rdx, [rsp + 0x80]
lea rcx, [rax + rcx + 0x30]
mov r8, r15
call fcn.14008ba28
jmp 0x1400cf0cb
mov r8d, dword [rsp + 0x60]
mov rcx, qword [rsp + 0x80]
cmp dword [rsp + 0x100], edx
je 0x1400cf0d5
lea rax, str..CDROM_d
mov rdx, rax
call qword [sym.imp.USER32.dll_wsprintfW]
mov r13d, dword [rsp + 0xe0]
jmp 0x1400cf0ee
mov r13d, dword [rsp + 0xe0]
lea rdx, str.DeviceHarddisk_dPartition_d
movsx r9d, r13w
call qword [sym.imp.USER32.dll_wsprintfW]
mov edx, dword [rsp + 0xb8]
mov r12d, dword [rsp + 0xe4]
xor r8d, r8d
cmp dx, r8w
je 0x1400cf11a
cmp r12b, r8b
jne 0x1400cf11a
movzx eax, word [rsp + 0x78]
movzx ecx, word [rsp + 0xb0]
jmp 0x1400cf157
mov r8b, byte [rsp + 0x5d]
mov r9, qword [rsp + 0x140]
lea rcx, [rsp + 0xe8]
sub r8b, 0x41
mov edx, 0xc
call fcn.14005f4d0
mov edx, dword [rsp + 0xb8]
xor r8d, r8d
mov cx, ax
mov word [rsp + 0xb0], ax
mov word [rsp + 0x78], ax
mov r9d, 0x41
sub ax, r9w
cmp ax, 0x19
ja 0x1400cf8b0
cmp cx, r8w
je 0x1400cf404
cmp dx, cx
jne 0x1400cf191
cmp dword [rsp + 0xbc], r8d
movzx eax, r12b
cmove eax, r15d
mov byte [rsp + 0xe4], al
mov eax, dword [rsp + 0x88]
mov r9d, dword [rsp + 0x94]
mov rcx, qword [rsp + 0x80]
lea r8, [rsp + 0xb0]
lea rdx, [rsp + 0x78]
mov byte [rsp + 0x20], al
call fcn.140075bfc
xor ecx, ecx
cmp eax, ecx
je 0x1400cf1cf
mov eax, ecx
mov dword [rsp + 0xd0], ecx
jmp 0x1400cf1dc
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0xd0], eax
test byte [rsp + 0x53], 0x10
mov dword [rsp + 0xa0], eax
mov r12d, r15d
je 0x1400cf203
movzx ecx, word [rsp + 0xb0]
mov edx, 2
lea r8d, [rdx + 0x30]
call fcn.140035c04
xor edx, edx
cmp byte [rsp + 0x154], dl
je 0x1400cf32d
cmp word [rsp + 0x158], dx
jne 0x1400cf32d
movzx eax, word [rsp + 0xb0]
mov word [rsp + 0x1ac], dx
lea rcx, [rsp + 0x1a0]
mov word [rsp + 0x1a0], ax
lea eax, [rdx + 0x3a]
mov word [rsp + reloc.OLEAUT32.dll_OleCreatePictureIndirect], ax
lea eax, [rdx + 0x5c]
mov word [rsp + 0x1a4], ax
lea eax, [rdx + 0x4e]
mov word [rsp + 0x1a6], ax
lea eax, [rdx + 0x55]
mov word [rsp + 0x1a8], ax
lea eax, [rdx + 0x4c]
lea rdx, [rsp + 0x750]
mov word [rsp + 0x1aa], ax
call qword [sym.imp.KERNEL32.dll_FindFirstFileW]
or rcx, 0xffffffffffffffff
cmp rax, rcx
je 0x1400cf2af
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_FindClose]
mov ecx, dword [rsp + 0xb0]
mov eax, r15d
add ecx, 0xffffffbf
shl eax, cl
or dword [rsp + 0xe8], eax
jmp 0x1400cf32b
mov rax, qword [rsp + 0x1e8]
mov word [rsp + 0x9c], r14w
xor r14d, r14d
lea rcx, [rsp + 0xb0]
mov dword [rsp + 0xb8], r14d
mov r12d, r14d
mov qword [rsp + 0x140], rax
call qword [sym.imp.KERNEL32.dll_DeleteVolumeMountPointW]
cmp eax, r14d
jne 0x1400cf2ef
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, r14d
lea rdx, [rsp + 0x78]
xor r8d, r8d
or ecx, dword [rsp + 0x94]
or ecx, 2
call qword [sym.imp.KERNEL32.dll_DefineDosDeviceW]
xor edx, edx
cmp eax, edx
jne 0x1400cf318
call qword [sym.imp.KERNEL32.dll_GetLastError]
xor edx, edx
cmp dword [rsp + 0x88], edx
je 0x1400cf32d
movzx ecx, word [rsp + 0x78]
call fcn.14005f454
xor edx, edx
cmp dword [rsp + 0xbc], edx
je 0x1400cf361
movzx eax, word [rsp + 0x78]
mov r8d, dword [rsp + 0x60]
lea rdx, str.Show_pt:__d:_d__c__d_r_n
lea rcx, [0x14013d130]
mov r9d, r13d
mov dword [rsp + 0x28], r12d
mov dword [rsp + 0x20], eax
call fcn.140018dd8
xor edx, edx
cmp r12d, edx
je 0x1400cf399
cmp byte [rsp + 0x42], dl
jne 0x1400cf372
cmp byte [rsp + 0x40], dl
je 0x1400cf399
movsxd rcx, dword [rsp + 0x12c]
mov rax, rcx
cmp rcx, rdx
je 0x1400cf399
movzx ecx, word [rsp + 0xb0]
lea rdx, [rsp + 0x180]
call fcn.14005fef8
xor edx, edx
mov r9d, 0x41
mov ax, word [rsp + 0x130]
cmp ax, dx
je 0x1400cf63e
mov edx, dword [rsp + 0xb8]
mov r12, qword [rsp + 0xf0]
sub ax, r9w
movsx rcx, ax
mov r9d, 0xfffffff1
xor r8d, r8d
mov eax, r9d
imul rcx, rcx, 0x220
cmp dx, r8w
cmovne eax, dword [rsp + 0x60]
cmp dx, r8w
mov dword [rcx + r12 + 4], eax
mov eax, r9d
cmovne eax, r13d
mov dword [rcx + r12], eax
movzx eax, dx
mov dword [rcx + r12 + 0x10], eax
jmp 0x1400ceecc
xor edx, edx
jmp 0x1400cf39f
xor r8d, r8d
mov ecx, dword [rsp + 0xbc]
mov edx, dword [rsp + 0x60]
mov r9d, r8d
or r9d, dword [rsp + 0x94]
shl ecx, 8
lea rax, [rsp + 0xd0]
or ecx, dword [rsp + 0x4c]
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0x80]
mov qword [rsp + 0x30], rax
mov eax, dword [rsp + 0x88]
mov r8d, r10d
mov dword [rsp + 0x28], eax
mov dword [rsp + 0x20], ecx
mov rcx, qword [rsp + 0xf0]
call fcn.14005f658
xor edx, edx
cmp word [rsp + 0x160], dx
jne 0x1400cf4b4
cmp dword [rsp + 0x4c], edx
jne 0x1400cf97c
cmp byte [rsp + 0x51], dl
je 0x1400cf4c7
test r14b, 0x10
jne 0x1400cf4b4
cmp r14d, 0x84
je 0x1400cf4b4
cmp r14d, 0xef
je 0x1400cf4b4
mov r14, qword [rsp + 0x120]
cmp byte [rsp + 0x52], dl
je 0x1400cf4cf
movabs rcx, 0xc000000000000000
test qword [r12 + r14 + 0x40], rcx
je 0x1400cf4cf
mov eax, dword [rsp + 0xd0]
mov dword [rsp + 0xa0], eax
jmp 0x1400ce867
mov r14, qword [rsp + 0x120]
cmp eax, edx
je 0x1400cf4eb
cmp word [rsp + 0xb8], dx
je 0x1400cf97c
cmp byte [rsp + 0x5f], dl
jne 0x1400cf97c
mov r13d, dword [rsp + 0xe0]
mov r8d, dword [rsp + 0x60]
mov rcx, qword [rsp + 0x80]
lea rdx, str.DeviceHarddisk_dPartition_d
movsx r9d, r13w
call qword [sym.imp.USER32.dll_wsprintfW]
xor eax, eax
cmp byte [rsp + 0x48], al
jl 0x1400cf52e
lea rcx, [r12 + r14 + 0x30]
lea rdx, [rsp + 0x80]
mov r8, r15
call fcn.14008ba28
movzx ecx, word [rsp + 0x78]
xor r12d, r12d
lea r14d, [r12 + 0x41]
cmp cx, r12w
jne 0x1400cf579
mov r8b, byte [rsp + 0x5d]
mov r9, qword [rsp + 0x140]
lea edx, [r12 + 0xc]
lea rcx, [rsp + 0xe8]
sub r8b, r14b
call fcn.14005f4d0
movzx r11d, ax
mov word [rsp + 0xb0], ax
mov cx, ax
mov word [rsp + 0x78], ax
jmp 0x1400cf582
mov r11w, word [rsp + 0xb0]
movsxd rdx, dword [rsp + 0x1b8]
cmp rdx, r12
jne 0x1400cf5a0
movzx eax, cx
sub ax, r14w
cmp ax, 0x19
ja 0x1400cf90a
xor edx, edx
cmp r11w, dx
je 0x1400cf624
cmp dword [rsp + 0xbc], edx
je 0x1400cf5d3
mov r8d, dword [rsp + 0x60]
movzx eax, cx
lea rdx, str.unshow_pt:__d:_d__c_r_n
lea rcx, [0x14013d130]
mov r9d, r13d
mov dword [rsp + 0x20], eax
call fcn.140018dd8
mov eax, dword [rsp + 0x88]
mov r9d, dword [rsp + 0x94]
mov rcx, qword [rsp + 0x80]
lea r8, [rsp + 0xb0]
lea rdx, [rsp + 0x78]
mov byte [rsp + 0x20], al
call fcn.140075bfc
xor edx, edx
cmp eax, edx
je 0x1400cf611
mov ecx, edx
mov dword [rsp + 0xd0], edx
jmp 0x1400cf62b
call qword [sym.imp.KERNEL32.dll_GetLastError]
xor edx, edx
mov ecx, eax
mov dword [rsp + 0xd0], eax
jmp 0x1400cf62b
mov ecx, dword [rsp + 0xd0]
mov eax, dword [rsp + 0x54]
mov dword [rsp + 0xa0], ecx
cmp eax, edx
jge 0x1400cf977
mov r13d, dword [rsp + 0x44]
jmp 0x1400ce867
add r13w, r15w
mov eax, 0x20
cmp r13w, ax
jl 0x1400ce414
mov r14d, dword [rsp + 0x54]
mov r13d, dword [rsp + 0x70]
mov ecx, dword [rsp + 0x4c]
jmp 0x1400cf699
movsx r13d, word [rsp + 0xd4]
or rax, 0xffffffffffffffff
mov r14d, r10d
mov dword [rsp + 0x70], r13d
mov dword [rsp + 0x54], r10d
cmp rbx, rax
je 0x1400cf697
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, dword [rsp + 0x4c]
xor edx, edx
mov bpl, byte [rsp + 0x40]
add dword [rsp + 0xfc], r15d
cmp bpl, r15b
jne 0x1400cf6c8
mov byte [rsp + 0x40], 2
lea rcx, [rsp + 0xc0]
call fcn.14005aef8
mov ebx, dword [rsp + 0x68]
xor ebp, ebp
jmp 0x1400cdf12
cmp byte [rsp + 0x6c], r15b
jne 0x1400cf6de
mov byte [rsp + 0x6c], 2
mov byte [rsp + 0x9f8], 0xb
jmp 0x1400cf6b0
mov r8b, byte [rsp + 0x42]
cmp r8b, dl
jne 0x1400cf6f1
cmp bpl, dl
je 0x1400cf9ef
mov r9b, byte [rsp + 0x43]
cmp r9b, dl
je 0x1400cf9ef
cmp r8b, r15b
je 0x1400cf796
cmp bpl, 2
je 0x1400cf796
cmp r8b, 3
je 0x1400cf76f
cmp bpl, 3
je 0x1400cf76f
cmp r8b, 4
je 0x1400cf765
cmp bpl, 4
je 0x1400cf765
cmp r8b, 5
je 0x1400cf73a
cmp bpl, 5
jne 0x1400cf9ef
mov byte [rsp + 0x9f8], 0xb
cmp r8b, dl
je 0x1400cf74f
add r8b, r15b
mov byte [rsp + 0x42], r8b
cmp bpl, dl
je 0x1400cf6b0
add bpl, r15b
mov byte [rsp + 0x40], bpl
jmp 0x1400cf6b0
mov byte [rsp + 0x9f8], 0xc
jmp 0x1400cf742
cmp r8b, dl
je 0x1400cf77c
add r8b, r15b
mov byte [rsp + 0x42], r8b
cmp bpl, dl
je 0x1400cf789
add bpl, r15b
mov byte [rsp + 0x40], bpl
mov dword [rsp + 0xcc], r15d
jmp 0x1400cf6b0
mov r10d, dword [rsp + 0x150]
movzx ecx, r8b
mov eax, r10d
neg eax
sbb edx, edx
xor r11d, r11d
and edx, 0xfffffffe
add edx, 5
cmp r8b, r11b
movzx eax, dl
cmovne ecx, eax
movzx eax, dl
cmp bpl, r11b
mov byte [rsp + 0x42], cl
movzx ecx, bpl
cmovne ecx, eax
lea eax, [r11 + 0x3f]
mov byte [rsp + 0x40], cl
cmp r9b, al
je 0x1400cf7f8
lea rax, [rsp + 0x180]
mov qword [rsp + 0x140], rax
movsx eax, byte [rsp + 0x180]
mov dword [rsp + 0x9c], eax
mov r12d, dword [rsp + 0xcc]
mov eax, r10d
lea rcx, [rsp + 0xc0]
neg eax
sbb bpl, bpl
and bpl, 0xf9
add bpl, 0xc
mov byte [rsp + 0x9f8], bpl
xor ebp, ebp
cmp r10d, ebp
mov dword [rsp + 0x12c], ebp
cmove r12d, r15d
mov dword [rsp + 0xcc], r12d
call fcn.14005aef8
mov ebx, dword [rsp + 0x68]
jmp 0x1400cdf12
or rax, 0xffffffffffffffff
cmp rbx, rax
je 0x1400cf858
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [rsp + 0xc0]
call fcn.14005aef8
lea rcx, [rsp + 0x118]
call fcn.14005aef8
lea rcx, [rsp + 0x108]
call fcn.14005aef8
lea rcx, [rsp + 0x80]
call fcn.14005aef8
lea rcx, [rsp + 0xd8]
call fcn.14005aef8
xor eax, eax
cmp rdi, rax
je 0x1400cf8a9
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
xor eax, eax
jmp 0x1400cfdb9
or rax, 0xffffffffffffffff
cmp rbx, rax
je 0x1400cf8c2
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [rsp + 0xc0]
call fcn.14005aef8
lea rcx, [rsp + 0x118]
call fcn.14005aef8
lea rcx, [rsp + 0x108]
call fcn.14005aef8
lea rcx, [rsp + 0x80]
call fcn.14005aef8
lea rcx, [rsp + 0xd8]
call fcn.14005aef8
xor eax, eax
cmp rdi, rax
jmp 0x1400cf960
or rax, 0xffffffffffffffff
cmp rbx, rax
je 0x1400cf91c
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [rsp + 0xc0]
call fcn.14005aef8
lea rcx, [rsp + 0x118]
call fcn.14005aef8
lea rcx, [rsp + 0x108]
call fcn.14005aef8
lea rcx, [rsp + 0x80]
call fcn.14005aef8
lea rcx, [rsp + 0xd8]
call fcn.14005aef8
cmp rdi, r12
je 0x1400cf96b
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov rax, 0xffffffff80070057
jmp 0x1400cfdb9
movsxd rsi, ecx
jmp 0x1400cf984
movsxd rsi, dword [rsp + 0xd0]
or rax, 0xffffffffffffffff
cmp rbx, rax
je 0x1400cf996
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [rsp + 0xc0]
call fcn.14005aef8
lea rcx, [rsp + 0x118]
call fcn.14005aef8
lea rcx, [rsp + 0x108]
call fcn.14005aef8
lea rcx, [rsp + 0x80]
call fcn.14005aef8
lea rcx, [rsp + 0xd8]
call fcn.14005aef8
xor eax, eax
cmp rdi, rax
je 0x1400cf9e7
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov rax, rsi
jmp 0x1400cfdb9
cmp r14d, edx
jle 0x1400cfd5d
cmp dword [rsp + 0x90], edx
jge 0x1400cfd5d
cmp ecx, edx
jne 0x1400cfd5d
cmp byte [rsp + 0x41], dl
jne 0x1400cfd5d
cmp byte [rsp + 0x5c], dl
jne 0x1400cfd5d
mov r12, qword [rsp + 0x168]
cmp ecx, edx
jne 0x1400cfa88
cmp r13d, edx
jl 0x1400cfa37
cmp r14d, edx
jg 0x1400cfa88
lea rcx, [rsp + 0xc0]
call fcn.14005aef8
lea rcx, [rsp + 0x118]
call fcn.14005aef8
lea rcx, [rsp + 0x108]
call fcn.14005aef8
lea rcx, [rsp + 0x80]
call fcn.14005aef8
lea rcx, [rsp + 0xd8]
call fcn.14005aef8
xor eax, eax
cmp rdi, rax
je 0x1400cdda9
jmp 0x1400cdda0
cmp r13d, edx
jl 0x1400cfbd0
cmp r14d, edx
jle 0x1400cfbd0
mov rcx, qword [rsp + 0x80]
lea rdx, str.DeviceHarddisk_dPartition_d
movsx r9d, r14w
movsx r8d, r13w
call qword [sym.imp.USER32.dll_wsprintfW]
lea rdx, str..PhysicalDrive_d
mov r8d, r13d
mov rcx, r12
call qword [sym.imp.USER32.dll_wsprintfW]
xor ebx, ebx
lea rcx, [rsp + 0x168]
lea eax, [rbx + 3]
mov qword [rsp + 0x38], rbx
mov dword [rsp + 0x30], 0x20000000
mov dword [rsp + 0x28], eax
mov r8d, 0x80000000
mov rdx, r12
mov r9d, eax
mov qword [rsp + 0x168], rbx
mov qword [rsp + 0x20], rbx
call fcn.140003888
mov dword [rsp + 0xfc], ebx
mov dword [rsp + 0x20], ebx
mov rbx, qword [rsp + 0x168]
lea r9, [rsp + 0x9f8]
lea r8, [rsp + 0xfc]
lea rdx, [rsp + 0xc0]
or r12, 0xffffffffffffffff
mov rcx, rbx
mov byte [rsp + 0x9f8], r12b
call fcn.14006a864
xor edx, edx
cmp byte [rsp + 0x9f8], dl
mov r11, rax
jl 0x1400cfbb7
mov r8d, dword [rsp + 0xfc]
mov ebp, edx
cmp r8d, edx
jle 0x1400cfba6
lea rdx, [rax + 0x48]
movsx ecx, word [rdx]
cmp ecx, r14d
je 0x1400cfb81
add ebp, r15d
add rdx, 0x90
cmp ebp, r8d
jl 0x1400cfb66
xor edx, edx
jmp 0x1400cfba6
movsxd rax, ebp
lea rdx, [rsp + 0x80]
mov r8, r15
lea rcx, [rax + rax*8]
add rcx, rcx
lea rcx, [r11 + rcx*8 + 0x60]
call fcn.14008ba28
xor edx, edx
cmp ebp, edx
jge 0x1400cfbb7
cmp rbx, rdx
je 0x1400cf8c2
cmp rbx, r12
jmp 0x1400cf8b7
cmp rbx, rdx
je 0x1400cfbcc
cmp rbx, r12
je 0x1400cfbcc
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor edx, edx
mov ecx, dword [rsp + 0x4c]
mov r8d, 0x3a
mov word [rsi + 2], r8w
lea eax, [r8 - 0xe]
cmp ax, word [rsi]
jne 0x1400cfbeb
mov eax, 0xff0c
jmp 0x1400cfc18
mov eax, 0x3b
cmp ax, word [rsi]
jne 0x1400cfbfc
mov eax, 0xff1b
jmp 0x1400cfc18
cmp r8w, word [rsi]
jne 0x1400cfc09
mov eax, 0xff1a
jmp 0x1400cfc18
mov eax, 0x3d
cmp ax, word [rsi]
jne 0x1400cfc1b
mov eax, 0xff1d
mov word [rsi], ax
mov eax, 0x5c
mov word [rsi + 4], ax
mov word [rsi + 6], dx
movzx eax, word [rsi]
mov word [rsp + 0x170], ax
mov rax, qword [rsp + 0x80]
mov word [rsp + 0x172], r8w
mov word [rsp + 0x174], dx
cmp word [rax], dx
je 0x1400cfce2
cmp ecx, edx
jne 0x1400cfce2
mov ecx, dword [rsp + 0x88]
mov r9d, edx
lea rdx, [rsp + 0x170]
or r9d, dword [rsp + 0x94]
mov byte [rsp + 0x20], cl
mov r8, rsi
mov rcx, rax
call fcn.140075bfc
xor esi, esi
cmp eax, esi
je 0x1400cfc90
mov eax, esi
jmp 0x1400cfc96
call qword [sym.imp.KERNEL32.dll_GetLastError]
movsxd rbx, eax
lea rcx, [rsp + 0xc0]
call fcn.14005aef8
lea rcx, [rsp + 0x118]
call fcn.14005aef8
lea rcx, [rsp + 0x108]
call fcn.14005aef8
lea rcx, [rsp + 0x80]
call fcn.14005aef8
lea rcx, [rsp + 0xd8]
call fcn.14005aef8
cmp rdi, rsi
jmp 0x1400cfdab
mov ebp, dword [rsp + 0x88]
cmp ebp, edx
je 0x1400cfd0c
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_DeleteVolumeMountPointW]
xor edx, edx
cmp eax, edx
jne 0x1400cfd04
call qword [sym.imp.KERNEL32.dll_GetLastError]
xor edx, edx
mov rax, qword [rsp + 0x80]
movzx ecx, word [rax]
neg cx
mov ecx, edx
lea rdx, [rsp + 0x170]
sbb r8, r8
or ecx, dword [rsp + 0x94]
or ecx, 2
and r8, rax
call qword [sym.imp.KERNEL32.dll_DefineDosDeviceW]
xor esi, esi
cmp eax, esi
je 0x1400cfd3c
mov ebx, esi
jmp 0x1400cfd44
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
cmp ebp, esi
je 0x1400cfd55
movzx ecx, word [rsp + 0x170]
call fcn.14005f454
movsxd rbx, ebx
jmp 0x1400cfc99
movsxd rbx, dword [rsp + 0xa0]
lea rcx, [rsp + 0xc0]
call fcn.14005aef8
lea rcx, [rsp + 0x118]
call fcn.14005aef8
lea rcx, [rsp + 0x108]
call fcn.14005aef8
lea rcx, [rsp + 0x80]
call fcn.14005aef8
lea rcx, [rsp + 0xd8]
call fcn.14005aef8
xor eax, eax
cmp rdi, rax
je 0x1400cfdb6
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov rax, rbx
mov rbx, qword [rsp + 0x9e0]
add rsp, 0x9a0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret