Function at 0x1400a95b0
Capabilities:
Get disk information
Get file size
Read file on windows

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x908]
sub rsp, 0xa08
mov rax, qword [0x140173040]
xor rax, rsp
mov qword [rbp + 0x8f0], rax
mov r12, r9
mov r13, r8
mov rbx, rdx
mov r15, rcx
mov rax, qword [rbp + 0x970]
mov qword [rsp + 0x48], rax
xor r8d, r8d
test rdx, rdx
je 0x1400aa198
mov rsi, 0xffffffffffffffff
mov rax, rsi
nop dword [rax + rax]
inc rax
cmp word [rdx + rax*2], r8w
jne 0x1400a9610
cmp rax, 5
jb 0x1400aa198
mov rax, qword [rcx + 0x30c8]
sub rdx, rax
nop
movzx ecx, word [rax]
cmp cx, word [rax + rdx]
jne 0x1400a9647
add rax, 2
test cx, cx
jne 0x1400a9630
mov eax, r8d
jmp 0x1400a964c
sbb eax, eax
or eax, 1
test eax, eax
je 0x1400a96ce
movzx edi, word [rbx]
cmp di, 0x5c
jne 0x1400a965d
mov al, 1
jmp 0x1400a96aa
xor edx, edx
mov r8d, 0x800
lea rcx, [rbp + 0xf0]
call fcn.14012ce40
mov word [rbp + 0xe0], di
mov dword [rbp + 0xe2], 0x5c003a
xor eax, eax
mov word [rbp + 0xe6], ax
mov r8d, 0x400
lea rdx, [rbp + 0xf0]
lea rcx, [rbp + 0xe0]
call qword [sym.imp.KERNEL32.dll_GetVolumeNameForVolumeMountPointW]
test eax, eax
sete al
mov byte [r15 + 0x3156], al
mov r8, rsi
inc r8
cmp word [rbx + r8*2], 0
jne 0x1400a96b4
mov rdx, rbx
lea rcx, [r15 + 0x30c8]
call fcn.140005a90
xor r15d, r15d
mov qword [rbp + 0xb8], r15
lea rcx, [rbp + 0xb8]
call fcn.1400055e0
nop
mov qword [rbp + 0xb0], r15
lea rcx, [rbp + 0xb0]
call fcn.1400055e0
nop
mov qword [rbp + 0xd0], r15
lea rcx, [rbp + 0xd0]
call fcn.1400055e0
nop
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 4
xor r9d, r9d
mov edx, 0x80000000
lea r8d, [r15 + 1]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov rdi, rax
cmp rax, 0xffffffffffffffff
jne 0x1400a9869
cmp r15w, word [rbx]
je 0x1400a97a2
mov qword [rbp + 0xc8], r15
mov rdx, rbx
lea rcx, [rbp + 0xc8]
call fcn.14003f460
nop
lea rcx, [rbp + 0xc8]
call fcn.140005330
mov rax, qword [rbp + 0xc8]
cmp dword [rax - 0x10], 2
jl 0x1400a9789
movzx ecx, word [rax]
cmp cx, 0x5c
jne 0x1400a97f4
cmp word [rax + 2], cx
je 0x1400a9800
lea rdx, [rax - 0x18]
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x1400a97a2
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov r14d, 0x14
mov edi, r15d
nop dword [rax + rax]
mov ecx, 0x14
call qword [sym.imp.KERNEL32.dll_Sleep]
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 4
xor r9d, r9d
mov edx, 0x80000000
lea r8d, [r9 + 1]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CreateFileW]
cmp rax, 0xffffffffffffffff
jne 0x1400a9821
inc edi
cmp edi, r14d
jb 0x1400a97b0
jmp 0x1400a982a
cmp cx, 0x2f
jne 0x1400a9789
cmp word [rax + 2], cx
jne 0x1400a9789
lea rdx, [rax - 0x18]
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x1400a9819
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov r14d, 0x190
jmp 0x1400a97a8
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov r8, rbx
call fcn.1400af510
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 4
xor r9d, r9d
mov edx, 0x80000000
lea r8d, [r9 + 1]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov rdi, rax
cmp rax, 0xffffffffffffffff
je 0x1400aa130
lea rdx, [rbp + 0xd8]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov r14d, eax
cmp eax, 0xffffffff
je 0x1400aa122
lea rcx, [r14 + 2]
call fcn.1400ff0c4
mov r15, rax
lea r8, [r14 + 2]
xor edx, edx
mov rcx, rax
call fcn.14012ce40
xor eax, eax
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0xc0]
mov r8d, r14d
mov rdx, r15
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x1400aa115
cmp dword [rbp + 0xc0], r14d
jne 0x1400aa115
test rdi, rdi
je 0x1400a98df
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor bl, bl
cmp r14d, 2
jbe 0x1400a9907
movzx eax, word [r15]
mov ecx, 0xfeff
cmp ax, cx
jne 0x1400a98f9
mov bl, 1
jmp 0x1400a9907
mov ecx, 0xfffe
cmp ax, cx
je 0x1400aa130
xor r14d, r14d
mov qword [rbp + 0xa8], r14
lea rcx, [rbp + 0xa8]
call fcn.1400055e0
nop
test bl, bl
jne 0x1400a9990
xor edx, edx
mov r8d, 0x108
lea rcx, [rsp + 0x70]
call fcn.14012ce40
lea rax, [rsp + 0x78]
mov qword [rsp + 0x70], rax
lea r8d, [r14 + 3]
mov rdx, r15
lea rcx, [rsp + 0x70]
call fcn.140070400
nop
mov rdx, qword [rsp + 0x70]
test rdx, rdx
jne 0x1400a995f
mov r8d, r14d
jmp 0x1400a996d
mov r8, rsi
inc r8
cmp word [rdx + r8*2], 0
jne 0x1400a9962
lea rcx, [rbp + 0xa8]
call fcn.140005a90
nop
lea rax, [rsp + 0x78]
mov rcx, qword [rsp + 0x70]
cmp rcx, rax
je 0x1400a99b8
call fcn.14010b5e8
jmp 0x1400a99b8
lea rdx, [r15 + 2]
test rdx, rdx
jne 0x1400a999e
mov r8d, r14d
jmp 0x1400a99ac
mov r8, rsi
inc r8
cmp word [rdx + r8*2], 0
jne 0x1400a99a1
lea rcx, [rbp + 0xa8]
call fcn.140005a90
mov edx, 1
mov rcx, r15
call fcn.1400ff054
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x88], xmm0
mov qword [rbp + 0x98], rax
lea rcx, [rbp + 0x88]
call fcn.1400055e0
nop
mov dword [rbp + 0x98], r14d
mov dword [rbp + 0x90], r14d
lea rcx, [rbp + 0x88]
call fcn.1400056e0
nop
mov rdx, qword [rbp + 0xa8]
cmp dword [rdx - 8], 1
jle 0x1400a9a23
mov edx, dword [rdx - 0x10]
lea rcx, [rbp + 0xa8]
call fcn.140005760
mov rdx, qword [rbp + 0xa8]
mov dword [rbp + 0x90], r14d
test rdx, rdx
je 0x1400a9a6d
mov rax, rsi
inc rax
cmp word [rdx + rax*2], 0
jne 0x1400a9a32
test rax, rax
je 0x1400a9a6d
mov r8, rsi
inc r8
cmp word [rdx + r8*2], 0
jne 0x1400a9a44
lea rcx, [rbp + 0x88]
call fcn.140005a90
mov rax, qword [rbp + 0x88]
mov ecx, dword [rax - 0x10]
mov dword [rbp + 0x98], ecx
jmp 0x1400a9a79
lea rcx, [rbp + 0x88]
call fcn.1400056e0
mov qword [rbp + 0x80], r14
lea rcx, [rbp + 0x80]
call fcn.1400055e0
nop
mov qword [rbp + 0xa0], r14
lea rcx, [rbp + 0xa0]
call fcn.1400055e0
nop
mov qword [rbp + 0x90], r14
lea r9, [rbp + 0x90]
lea r8, [0x140148cac]
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0x88]
call fcn.14003ec80
nop
mov rdx, qword [rax]
lea rcx, [rdx - 0x18]
mov rbx, qword [rbp + 0x80]
add rbx, 0xffffffffffffffe8
cmp rcx, rbx
je 0x1400a9b2c
cmp dword [rbx + 0x10], 0
jl 0x1400a9b1b
mov rax, qword [rbx]
cmp qword [rcx], rax
jne 0x1400a9b1b
call fcn.140041570
mov rdi, rax
mov ecx, esi
lock xadd dword [rbx + 0x10], ecx
sub ecx, 1
jg 0x1400a9b0e
mov rcx, qword [rbx]
mov r8, qword [rcx]
mov rdx, rbx
call qword [rreloc.OLEAUT32.dll_VariantClear + 8]
lea rax, [rdi + 0x18]
mov qword [rbp + 0x80], rax
jmp 0x1400a9b2c
mov r8d, dword [rdx - 0x10]
lea rcx, [rbp + 0x80]
call fcn.140005a90
nop
mov rdx, qword [rsp + 0x50]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x1400a9b4a
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rax, qword [rbp + 0x80]
mov ecx, dword [rax - 0x10]
test ecx, ecx
je 0x1400a9ff0
mov r15d, 0xa0d
cmp ecx, 1
jne 0x1400a9b90
cmp word [rax], r15w
je 0x1400a9ff0
cmp word [rax], 0x23
je 0x1400a9ff0
cmp word [rax], 0x3b
je 0x1400a9ff0
nop word [rax + rax]
lea rcx, [rbp + 0x80]
call fcn.140005330
mov rax, qword [rbp + 0x80]
mov ebx, dword [rax - 0x10]
test ebx, ebx
js 0x1400aa1ce
cmp word [rax], 0x5b
jne 0x1400a9cf6
cmp ebx, 1
jl 0x1400a9c35
dec ebx
lea edi, [rbx + 1]
cmp dword [rax - 8], 1
jle 0x1400a9bde
mov edx, dword [rax - 0x10]
lea rcx, [rbp + 0x80]
call fcn.140005760
mov rax, qword [rbp + 0x80]
movsxd r8, edi
add r8, r8
lea rdx, [rax + 2]
je 0x1400a9c0b
test rax, rax
je 0x1400aa1bd
test rdx, rdx
je 0x1400aa1bd
mov rcx, rax
call fcn.14012c6c0
mov rax, qword [rbp + 0x80]
test ebx, ebx
js 0x1400aa1ce
cmp ebx, dword [rax - 0xc]
jg 0x1400aa1ce
mov dword [rax - 0x10], ebx
movsxd rcx, ebx
mov rax, qword [rbp + 0x80]
mov word [rax + rcx*2], r14w
mov rax, qword [rbp + 0x80]
cmp dword [rax - 0x10], 0
jle 0x1400a9f0d
mov edx, 0x5d
mov rcx, rax
call fcn.140101040
mov rdx, rax
test rax, rax
mov rax, qword [rbp + 0x80]
je 0x1400a9f0d
sub rdx, rax
sar rdx, 1
cmp edx, 0xffffffff
je 0x1400a9f0d
mov r8d, 1
lea rcx, [rbp + 0x80]
call fcn.14003f160
mov rax, qword [rbp + 0x80]
lea rcx, [rax - 0x18]
mov rbx, qword [rbp + 0xa0]
add rbx, 0xffffffffffffffe8
cmp rcx, rbx
je 0x1400a9f0d
cmp dword [rbx + 0x10], 0
jl 0x1400a9cde
mov rdx, qword [rbx]
cmp qword [rcx], rdx
jne 0x1400a9cde
call fcn.140041570
mov rdi, rax
mov ecx, esi
lock xadd dword [rbx + 0x10], ecx
sub ecx, 1
jg 0x1400a9cce
mov rcx, qword [rbx]
mov r8, qword [rcx]
mov rdx, rbx
call qword [rreloc.OLEAUT32.dll_VariantClear + 8]
lea rax, [rdi + 0x18]
mov qword [rbp + 0xa0], rax
jmp 0x1400a9f06
mov r8d, dword [rax - 0x10]
mov rdx, rax
lea rcx, [rbp + 0xa0]
call fcn.140005a90
jmp 0x1400a9f06
test ebx, ebx
jg 0x1400a9cfe
mov ebx, esi
jmp 0x1400a9d21
mov edx, 0x3d
mov rcx, rax
call fcn.140101040
mov rbx, rax
test rax, rax
jne 0x1400a9d17
mov ebx, esi
jmp 0x1400a9d21
sub rbx, qword [rbp + 0x80]
sar rbx, 1
mov r9d, ebx
xor r8d, r8d
lea rdx, [rsp + 0x58]
lea rcx, [rbp + 0x80]
call fcn.140040880
nop
mov rdx, qword [rax]
lea rcx, [rdx - 0x18]
mov rdi, qword [rbp + 0xb8]
add rdi, 0xffffffffffffffe8
cmp rcx, rdi
je 0x1400a9da0
cmp dword [rdi + 0x10], 0
jl 0x1400a9d8f
mov rax, qword [rdi]
cmp qword [rcx], rax
jne 0x1400a9d8f
call fcn.140041570
mov r14, rax
mov ecx, esi
lock xadd dword [rdi + 0x10], ecx
sub ecx, 1
jg 0x1400a9d7f
mov rcx, qword [rdi]
mov r8, qword [rcx]
mov rdx, rdi
call qword [rreloc.OLEAUT32.dll_VariantClear + 8]
lea rax, [r14 + 0x18]
mov qword [rbp + 0xb8], rax
xor r14d, r14d
jmp 0x1400a9da0
mov r8d, dword [rdx - 0x10]
lea rcx, [rbp + 0xb8]
call fcn.140005a90
nop
mov rdx, qword [rsp + 0x58]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x1400a9dbe
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
lea r8d, [rbx + 1]
mov rax, qword [rbp + 0x80]
mov r9d, dword [rax - 0x10]
sub r9d, r8d
lea rdx, [rsp + 0x40]
lea rcx, [rbp + 0x80]
call fcn.140040880
nop
mov rax, qword [rsp + 0x40]
lea rcx, [rax - 0x18]
mov rbx, qword [rbp + 0xb0]
add rbx, 0xffffffffffffffe8
cmp rcx, rbx
je 0x1400a9e4f
cmp dword [rbx + 0x10], 0
jl 0x1400a9e37
mov rdx, qword [rbx]
cmp qword [rcx], rdx
jne 0x1400a9e37
call fcn.140041570
mov rdi, rax
mov ecx, esi
lock xadd dword [rbx + 0x10], ecx
sub ecx, 1
jg 0x1400a9e2a
mov rcx, qword [rbx]
mov r8, qword [rcx]
mov rdx, rbx
call qword [rreloc.OLEAUT32.dll_VariantClear + 8]
lea rax, [rdi + 0x18]
mov qword [rbp + 0xb0], rax
jmp 0x1400a9e4a
mov r8d, dword [rax - 0x10]
mov rdx, rax
lea rcx, [rbp + 0xb0]
call fcn.140005a90
mov rax, qword [rsp + 0x40]
lea rdx, [rax - 0x18]
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x1400a9e68
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rax, qword [r13 + 8]
cmp rax, qword [r13 + 0x10]
je 0x1400a9e88
lea rdx, [rbp + 0xa0]
mov rcx, rax
call fcn.14003f4f0
add qword [r13 + 8], 8
jmp 0x1400a9e9a
lea r8, [rbp + 0xa0]
mov rdx, rax
mov rcx, r13
call fcn.1400482c0
mov rax, qword [r12 + 8]
cmp rax, qword [r12 + 0x10]
je 0x1400a9ebd
lea rdx, [rbp + 0xb8]
mov rcx, rax
call fcn.14003f4f0
add qword [r12 + 8], 8
jmp 0x1400a9ecf
lea r8, [rbp + 0xb8]
mov rdx, rax
mov rcx, r12
call fcn.1400482c0
mov rbx, qword [rsp + 0x48]
mov rax, qword [rbx + 8]
cmp rax, qword [rbx + 0x10]
je 0x1400a9ef4
lea rdx, [rbp + 0xb0]
mov rcx, rax
call fcn.14003f4f0
add qword [rbx + 8], 8
jmp 0x1400a9f06
lea r8, [rbp + 0xb0]
mov rdx, rax
mov rcx, rbx
call fcn.1400482c0
mov rax, qword [rbp + 0x80]
mov ecx, dword [rbp + 0x90]
mov dword [rbp + 0x94], ecx
test ecx, ecx
js 0x1400aa0b2
lea r9, [rbp + 0x90]
lea r8, [0x140148cac]
lea rdx, [rsp + 0x60]
lea rcx, [rbp + 0x88]
call fcn.14003ec80
nop
mov rdx, qword [rax]
lea rcx, [rdx - 0x18]
mov rbx, qword [rbp + 0x80]
add rbx, 0xffffffffffffffe8
cmp rcx, rbx
je 0x1400a9fa5
cmp dword [rbx + 0x10], 0
jl 0x1400a9f94
mov rax, qword [rbx]
cmp qword [rcx], rax
jne 0x1400a9f94
call fcn.140041570
mov rdi, rax
mov ecx, esi
lock xadd dword [rbx + 0x10], ecx
sub ecx, 1
jg 0x1400a9f87
mov rcx, qword [rbx]
mov r8, qword [rcx]
mov rdx, rbx
call qword [rreloc.OLEAUT32.dll_VariantClear + 8]
lea rax, [rdi + 0x18]
mov qword [rbp + 0x80], rax
jmp 0x1400a9fa5
mov r8d, dword [rdx - 0x10]
lea rcx, [rbp + 0x80]
call fcn.140005a90
nop
mov rdx, qword [rsp + 0x60]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x1400a9fc3
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rax, qword [rbp + 0x80]
mov ecx, dword [rax - 0x10]
test ecx, ecx
je 0x1400a9ff0
cmp ecx, 1
jne 0x1400a9b90
cmp word [rax], r15w
je 0x1400a9ff0
cmp word [rax], 0x23
je 0x1400a9ff0
cmp word [rax], 0x3b
jne 0x1400a9b90
mov dword [rbp + 0x94], r14d
lea rcx, [rbp + 0x88]
call fcn.1400056e0
mov dword [rbp + 0x98], r14d
mov bl, 1
mov rdx, qword [rbp + 0xa0]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x1400aa02d
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0x80]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x1400aa04e
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov dword [rbp + 0x94], r14d
lea rcx, [rbp + 0x88]
call fcn.1400056e0
mov dword [rbp + 0x98], r14d
mov rdx, qword [rbp + 0x88]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x1400aa089
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0xa8]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x1400aa132
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
jmp 0x1400aa132
lea rdx, [rax - 0x18]
mov rbx, qword [rdx]
cmp dword [rdx + 8], 0
je 0x1400a9ff0
cmp dword [rdx + 0x10], 0
jge 0x1400aa0e7
cmp dword [rax - 0xc], 0
jl 0x1400aa1ce
mov dword [rax - 0x10], r14d
mov rax, qword [rbp + 0x80]
mov word [rax], r14w
jmp 0x1400a9ff0
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x1400aa0fc
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp + 0x80], rax
jmp 0x1400a9ff0
mov edx, 1
mov rcx, r15
call fcn.1400ff054
test rdi, rdi
je 0x1400aa130
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor bl, bl
mov rdx, qword [rbp + 0xd0]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x1400aa153
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0xb0]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x1400aa174
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0xb8]
add rdx, 0xffffffffffffffe8
lock xadd dword [rdx + 0x10], esi
sub esi, 1
jg 0x1400aa193
mov rcx, qword [rdx]
mov r8, qword [rcx]
call qword [rreloc.OLEAUT32.dll_VariantClear + 8]
movzx eax, bl
jmp 0x1400aa19a
xor al, al
mov rcx, qword [rbp + 0x8f0]
xor rcx, rsp
call fcn.1400ff350
add rsp, 0xa08
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
call fcn.14010b5c8
nop
mov dword [rax], 0x16
call fcn.14010b428
mov ecx, 0x80070057
call fcn.140002b00
int3