Function at 0x1400047a0
Capabilities:
Get disk information
Get system information on windows

Disassembly:
mov rax, rsp
push rbp
lea rbp, [rax - 0x268]
sub rsp, 0x360
mov qword [rbp + 0x80], 0xfffffffffffffffe
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rdi
mov rax, qword [0x140026008]
xor rax, rsp
mov qword [rbp + 0x250], rax
xor edi, edi
mov dword [rbp + 0x88], edi
mov dword [rbp + 0xc0], edi
mov dword [rsp + 0x38], edi
mov qword [rsp + 0x30], rdi
lea rax, [rbp + 0xc0]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rdi
lea r9, [rbp + 0x88]
xor r8d, r8d
xor edx, edx
lea rcx, str.C:__
call qword [sym.imp.KERNEL32.dll_GetVolumeInformationA]
lea rcx, [rbp + 0x90]
call qword [sym.imp.KERNEL32.dll_GetSystemInfo]
lea rcx, [rbp + 0x1d0]
call qword [sym.imp.ADVAPI32.dll_GetCurrentHwProfileA]
mov qword [rbp + 0x120], 0xf
mov qword [rbp + 0x118], rdi
mov byte [rbp + 0x108], dil
cmp byte [rbp + 0x1d4], dil
jne 0x140004858
mov r8d, edi
jmp 0x14000486c
lea rax, [rbp + 0x1d4]
or r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], dil
jne 0x140004863
lea rdx, [rbp + 0x1d4]
lea rcx, [rbp + 0x108]
call fcn.1400035e0
nop
mov r9d, 1
lea rdx, [0x140018b7c]
lea rcx, [rbp + 0x108]
call fcn.140003440
mov r9, rax
mov r8d, 1
lea rdx, [rbp + 0x1a8]
lea rcx, [rbp + 0x108]
call fcn.1400024e0
nop
mov r9d, 0x24
xor r8d, r8d
lea rdx, [rbp + 0xc8]
lea rcx, [rbp + 0x1a8]
call fcn.1400024e0
nop
mov rcx, qword [rbp + 0xd8]
cmp rcx, 1
jb 0x140004952
lea rax, [rbp + 0xc8]
mov rdx, qword [rbp + 0xc8]
mov r8, qword [rbp + 0xe0]
cmp r8, 0x10
cmovae rax, rdx
lea r9, [rcx - 1]
add r9, rax
cmp byte [r9], 0x2d
sete al
test al, al
je 0x140004928
movzx eax, byte [r9]
cmp al, byte [0x140018b80]
jne 0x14000491f
mov eax, edi
jmp 0x140004924
sbb eax, eax
or eax, 1
test eax, eax
je 0x14000493e
lea rcx, [rbp + 0xc8]
call fcn.1400032d0
cmp r9, rax
je 0x140004952
dec r9
jmp 0x140004904
lea rax, [rbp + 0xc8]
cmp r8, 0x10
cmovae rax, rdx
sub r9, rax
jmp 0x140004956
or r9, 0xffffffffffffffff
xor r8d, r8d
lea rdx, [rbp + 0xe8]
lea rcx, [rbp + 0xc8]
call fcn.1400024e0
nop
mov r9d, 8
xor r8d, r8d
lea rdx, [rbp + 0x188]
lea rcx, [rbp + 0xe8]
call fcn.1400024e0
nop
mov r9d, 4
lea r8d, [r9 + 5]
lea rdx, [rbp + 0x168]
lea rcx, [rbp + 0xe8]
call fcn.1400024e0
nop
mov r9d, 4
lea r8d, [r9 + 0xa]
lea rdx, [rbp + 0x148]
lea rcx, [rbp + 0xe8]
call fcn.1400024e0
nop
mov r9d, 4
lea r8d, [r9 + 0xf]
lea rdx, [rbp + 0x128]
lea rcx, [rbp + 0xe8]
call fcn.1400024e0
nop
mov edx, dword [rbp + 0x88]
lea rcx, [rbp + 0x60]
call fcn.140004780
mov rbx, rax
movzx edx, word [rbp + 0xbe]
lea rcx, [rbp + 0x40]
call fcn.140004780
nop
mov r8, rax
lea rdx, [0x140018b8c]
lea rcx, [rbp + 0x20]
call fcn.1400054c0
nop
lea r8, [0x140018b88]
mov rdx, rax
lea rcx, [rbp]
call fcn.1400043d0
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rbp - 0x20]
call fcn.140005520
nop
lea r8, [rbp + 0x168]
mov rdx, rax
lea rcx, [rbp - 0x40]
call fcn.1400045b0
nop
lea r8, [rbp + 0x148]
mov rdx, rax
lea rcx, [rbp - 0x60]
call fcn.1400045b0
nop
lea r8, [0x140018b84]
mov rdx, rax
lea rcx, [rbp - 0x80]
call fcn.1400043d0
nop
lea r8, [rbp + 0x188]
mov rdx, rax
lea rcx, [rsp + 0x60]
call fcn.1400045b0
nop
lea r8, [rbp + 0x128]
mov rdx, rax
lea rcx, [rsp + 0x40]
call fcn.1400045b0
mov rdx, rax
lea rcx, [0x1400280c0]
call fcn.1400025b0
mov rax, qword [rsp + 0x58]
cmp rax, 0x10
jb 0x140004b0f
inc rax
mov rcx, qword [rsp + 0x40]
cmp rax, 0x1000
jb 0x140004b0a
test cl, 0x1f
je 0x140004ada
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rax, qword [rcx - 8]
cmp rax, rcx
jb 0x140004aea
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
sub rcx, rax
cmp rcx, 8
jae 0x140004afa
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
cmp rcx, 0x27
jbe 0x140004b07
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rax
call fcn.140014a30
mov qword [rsp + 0x58], 0xf
mov qword [rsp + 0x50], rdi
mov byte [rsp + 0x40], 0
mov rax, qword [rsp + 0x78]
cmp rax, 0x10
jb 0x140004b7e
inc rax
mov rcx, qword [rsp + 0x60]
cmp rax, 0x1000
jb 0x140004b79
test cl, 0x1f
je 0x140004b49
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rax, qword [rcx - 8]
cmp rax, rcx
jb 0x140004b59
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
sub rcx, rax
cmp rcx, 8
jae 0x140004b69
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
cmp rcx, 0x27
jbe 0x140004b76
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rax
call fcn.140014a30
mov qword [rsp + 0x78], 0xf
mov qword [rsp + 0x70], rdi
mov byte [rsp + 0x60], 0
mov rax, qword [rbp - 0x68]
cmp rax, 0x10
jb 0x140004beb
inc rax
mov rcx, qword [rbp - 0x80]
cmp rax, 0x1000
jb 0x140004be6
test cl, 0x1f
je 0x140004bb6
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rax, qword [rcx - 8]
cmp rax, rcx
jb 0x140004bc6
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
sub rcx, rax
cmp rcx, 8
jae 0x140004bd6
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
cmp rcx, 0x27
jbe 0x140004be3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rax
call fcn.140014a30
mov qword [rbp - 0x68], 0xf
mov qword [rbp - 0x70], rdi
mov byte [rbp - 0x80], 0
mov rax, qword [rbp - 0x48]
cmp rax, 0x10
jb 0x140004c55
inc rax
mov rcx, qword [rbp - 0x60]
cmp rax, 0x1000
jb 0x140004c50
test cl, 0x1f
je 0x140004c20
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rax, qword [rcx - 8]
cmp rax, rcx
jb 0x140004c30
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
sub rcx, rax
cmp rcx, 8
jae 0x140004c40
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
cmp rcx, 0x27
jbe 0x140004c4d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rax
call fcn.140014a30
mov qword [rbp - 0x48], 0xf
mov qword [rbp - 0x50], rdi
mov byte [rbp - 0x60], 0
mov rax, qword [rbp - 0x28]
cmp rax, 0x10
jb 0x140004cbf
inc rax
mov rcx, qword [rbp - 0x40]
cmp rax, 0x1000
jb 0x140004cba
test cl, 0x1f
je 0x140004c8a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rax, qword [rcx - 8]
cmp rax, rcx
jb 0x140004c9a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
sub rcx, rax
cmp rcx, 8
jae 0x140004caa
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
cmp rcx, 0x27
jbe 0x140004cb7
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rax
call fcn.140014a30
mov qword [rbp - 0x28], 0xf
mov qword [rbp - 0x30], rdi
mov byte [rbp - 0x40], 0
mov rax, qword [rbp - 8]
cmp rax, 0x10
jb 0x140004d29
inc rax
mov rcx, qword [rbp - 0x20]
cmp rax, 0x1000
jb 0x140004d24
test cl, 0x1f
je 0x140004cf4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rax, qword [rcx - 8]
cmp rax, rcx
jb 0x140004d04
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
sub rcx, rax
cmp rcx, 8
jae 0x140004d14
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
cmp rcx, 0x27
jbe 0x140004d21
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rax
call fcn.140014a30
mov qword [rbp - 8], 0xf
mov qword [rbp - 0x10], rdi
mov byte [rbp - 0x20], 0
mov rax, qword [rbp + 0x18]
cmp rax, 0x10
jb 0x140004d93
inc rax
mov rcx, qword [rbp]
cmp rax, 0x1000
jb 0x140004d8e
test cl, 0x1f
je 0x140004d5e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rax, qword [rcx - 8]
cmp rax, rcx
jb 0x140004d6e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
sub rcx, rax
cmp rcx, 8
jae 0x140004d7e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
cmp rcx, 0x27
jbe 0x140004d8b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rax
call fcn.140014a30
mov qword [rbp + 0x18], 0xf
mov qword [rbp + 0x10], rdi
mov byte [rbp], 0
mov rax, qword [rbp + 0x38]
cmp rax, 0x10
jb 0x140004dfd
inc rax
mov rcx, qword [rbp + 0x20]
cmp rax, 0x1000
jb 0x140004df8
test cl, 0x1f
je 0x140004dc8
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rax, qword [rcx - 8]
cmp rax, rcx
jb 0x140004dd8
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
sub rcx, rax
cmp rcx, 8
jae 0x140004de8
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
cmp rcx, 0x27
jbe 0x140004df5
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rax
call fcn.140014a30
mov qword [rbp + 0x38], 0xf
mov qword [rbp + 0x30], rdi
mov byte [rbp + 0x20], 0
mov rax, qword [rbp + 0x58]
cmp rax, 0x10
jb 0x140004e67
inc rax
mov rcx, qword [rbp + 0x40]
cmp rax, 0x1000
jb 0x140004e62
test cl, 0x1f
je 0x140004e32
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rax, qword [rcx - 8]
cmp rax, rcx
jb 0x140004e42
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
sub rcx, rax
cmp rcx, 8
jae 0x140004e52
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
cmp rcx, 0x27
jbe 0x140004e5f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rax
call fcn.140014a30
mov qword [rbp + 0x58], 0xf
mov qword [rbp + 0x50], rdi
mov byte [rbp + 0x40], 0
mov rax, qword [rbp + 0x78]
cmp rax, 0x10
jb 0x140004ed1
inc rax
mov rcx, qword [rbp + 0x60]
cmp rax, 0x1000
jb 0x140004ecc
test cl, 0x1f
je 0x140004e9c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rax, qword [rcx - 8]
cmp rax, rcx
jb 0x140004eac
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
sub rcx, rax
cmp rcx, 8
jae 0x140004ebc
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
cmp rcx, 0x27
jbe 0x140004ec9
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rax
call fcn.140014a30
mov edx, dword [rbp + 0x88]
lea rcx, [rbp + 0x60]
call fcn.140004780
mov rdx, rax
lea rcx, [0x1400280e0]
call fcn.1400025b0
mov rax, qword [rbp + 0x78]
cmp rax, 0x10
jb 0x140004f49
inc rax
mov rcx, qword [rbp + 0x60]
cmp rax, 0x1000
jb 0x140004f44
test cl, 0x1f
je 0x140004f14
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rax, qword [rcx - 8]
cmp rax, rcx
jb 0x140004f24
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
sub rcx, rax
cmp rcx, 8
jae 0x140004f34
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
cmp rcx, 0x27
jbe 0x140004f41
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rax
call fcn.140014a30
lea rdx, [0x140018b71]
lea rcx, [0x1400280e0]
call fcn.140005360
test eax, eax
je 0x140004f7b
lea rdx, [0x140018b71]
lea rcx, [0x1400280c0]
call fcn.140005360
test eax, eax
je 0x140004f7b
mov bl, 1
jmp 0x140004f7d
xor bl, bl
mov rax, qword [rbp + 0x140]
cmp rax, 0x10
jb 0x140004fdd
inc rax
mov rcx, qword [rbp + 0x128]
cmp rax, 0x1000
jb 0x140004fd8
test cl, 0x1f
je 0x140004fa8
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rax, qword [rcx - 8]
cmp rax, rcx
jb 0x140004fb8
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
sub rcx, rax
cmp rcx, 8
jae 0x140004fc8
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
cmp rcx, 0x27
jbe 0x140004fd5
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rax
call fcn.140014a30
mov qword [rbp + 0x140], 0xf
mov qword [rbp + 0x138], rdi
mov byte [rbp + 0x128], 0
mov rax, qword [rbp + 0x160]
cmp rax, 0x10
jb 0x140005056
inc rax
mov rcx, qword [rbp + 0x148]
cmp rax, 0x1000
jb 0x140005051
test cl, 0x1f
je 0x140005021
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rax, qword [rcx - 8]
cmp rax, rcx
jb 0x140005031
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
sub rcx, rax
cmp rcx, 8
jae 0x140005041
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
cmp rcx, 0x27
jbe 0x14000504e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rax
call fcn.140014a30
mov qword [rbp + 0x160], 0xf
mov qword [rbp + 0x158], rdi
mov byte [rbp + 0x148], 0
mov rax, qword [rbp + 0x180]
cmp rax, 0x10
jb 0x1400050cf
inc rax
mov rcx, qword [rbp + 0x168]
cmp rax, 0x1000
jb 0x1400050ca
test cl, 0x1f
je 0x14000509a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rax, qword [rcx - 8]
cmp rax, rcx
jb 0x1400050aa
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
sub rcx, rax
cmp rcx, 8
jae 0x1400050ba
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
cmp rcx, 0x27
jbe 0x1400050c7
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rax
call fcn.140014a30
mov qword [rbp + 0x180], 0xf
mov qword [rbp + 0x178], rdi
mov byte [rbp + 0x168], 0
mov rax, qword [rbp + 0x1a0]
cmp rax, 0x10
jb 0x140005148
inc rax
mov rcx, qword [rbp + 0x188]
cmp rax, 0x1000
jb 0x140005143
test cl, 0x1f
je 0x140005113
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rax, qword [rcx - 8]
cmp rax, rcx
jb 0x140005123
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
sub rcx, rax
cmp rcx, 8
jae 0x140005133
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
cmp rcx, 0x27
jbe 0x140005140
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rax
call fcn.140014a30
mov qword [rbp + 0x1a0], 0xf
mov qword [rbp + 0x198], rdi
mov byte [rbp + 0x188], 0
mov rax, qword [rbp + 0x100]
cmp rax, 0x10
jb 0x1400051c1
inc rax
mov rcx, qword [rbp + 0xe8]
cmp rax, 0x1000
jb 0x1400051bc
test cl, 0x1f
je 0x14000518c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rax, qword [rcx - 8]
cmp rax, rcx
jb 0x14000519c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
sub rcx, rax
cmp rcx, 8
jae 0x1400051ac
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
cmp rcx, 0x27
jbe 0x1400051b9
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rax
call fcn.140014a30
mov qword [rbp + 0x100], 0xf
mov qword [rbp + 0xf8], rdi
mov byte [rbp + 0xe8], 0
mov rax, qword [rbp + 0xe0]
cmp rax, 0x10
jb 0x14000523a
inc rax
mov rcx, qword [rbp + 0xc8]
cmp rax, 0x1000
jb 0x140005235
test cl, 0x1f
je 0x140005205
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rax, qword [rcx - 8]
cmp rax, rcx
jb 0x140005215
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
sub rcx, rax
cmp rcx, 8
jae 0x140005225
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
cmp rcx, 0x27
jbe 0x140005232
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rax
call fcn.140014a30
mov qword [rbp + 0xe0], 0xf
mov qword [rbp + 0xd8], rdi
mov byte [rbp + 0xc8], 0
mov rax, qword [rbp + 0x1c0]
cmp rax, 0x10
jb 0x1400052b3
inc rax
mov rcx, qword [rbp + 0x1a8]
cmp rax, 0x1000
jb 0x1400052ae
test cl, 0x1f
je 0x14000527e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rax, qword [rcx - 8]
cmp rax, rcx
jb 0x14000528e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
sub rcx, rax
cmp rcx, 8
jae 0x14000529e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
cmp rcx, 0x27
jbe 0x1400052ab
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rax
call fcn.140014a30
mov qword [rbp + 0x1c0], 0xf
mov qword [rbp + 0x1b8], rdi
mov byte [rbp + 0x1a8], 0
mov rax, qword [rbp + 0x120]
cmp rax, 0x10
jb 0x14000532c
inc rax
mov rcx, qword [rbp + 0x108]
cmp rax, 0x1000
jb 0x140005327
test cl, 0x1f
je 0x1400052f7
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rax, qword [rcx - 8]
cmp rax, rcx
jb 0x140005307
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
sub rcx, rax
cmp rcx, 8
jae 0x140005317
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
cmp rcx, 0x27
jbe 0x140005324
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rax
call fcn.140014a30
movzx eax, bl
mov rcx, qword [rbp + 0x250]
xor rcx, rsp
call fcn.1400149d0
lea r11, [rsp + 0x360]
mov rbx, qword [r11 + 0x10]
mov rdi, qword [r11 + 0x18]
mov rsp, r11
pop rbp
ret