Function at 0x140002ff0
Capabilities:
Read file on windows

Disassembly:
push rbp
push rbx
push rsi
push r12
push r14
push r15
lea rbp, [rsp - 0x2f]
sub rsp, 0xe8
mov rax, qword [0x140067008]
xor rax, rsp
mov qword [rbp + 0x17], rax
mov r12d, 1
mov qword [rbp - 0x69], 0x9063eb
mov rbx, rdx
mov qword [rbp - 0x61], 0
mov r9d, ecx
mov qword [rbp - 0x59], 0
lea r8, str..PhysicalDrive_d
mov qword [rbp - 0x51], 0
lea edx, [r12 + 0x3f]
mov qword [rbp - 0x49], 0
lea rcx, [rbp - 0x29]
mov qword [rbp - 0x41], 0
mov esi, r12d
mov dword [rbp - 0x39], 0x47005456
mov dword [rbp - 0x35], 0x44480065
mov dword [rbp - 0x31], 0x645200
mov dword [rbp - 0x2d], 0xd724520
call fcn.140001120
xor r15d, r15d
lea rcx, [rbp - 0x29]
mov qword [rsp + 0x30], r15
xor r9d, r9d
mov dword [rsp + 0x28], r15d
mov r8d, r12d
mov edx, 0x80000000
mov dword [rsp + 0x20], 3
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov r14, rax
cmp rax, 0xffffffffffffffff
jne 0x1400030db
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea r8, [rbp - 0x29]
mov ecx, r12d
mov r9d, eax
lea rdx, str.CreateFileA__s_failed__u_n
call fcn.140001c50
mov eax, r12d
jmp 0x1400033ab
mov ecx, 0x4400
mov qword [rsp + 0x130], rdi
call fcn.14002da3c
mov rdi, rax
test rax, rax
je 0x140003398
xor edx, edx
mov r8d, 0x4400
mov rcx, rax
call fcn.14002cbb0
lea r9, [rbp - 0x79]
mov qword [rsp + 0x20], r15
mov r8d, 0x4400
mov rdx, rdi
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x140003378
cmp dword [rbp - 0x79], 0x4400
jne 0x140003378
mov r8d, 0x30
lea rdx, [rbp - 0x69]
mov rcx, rdi
call fcn.14004f3f0
test eax, eax
jne 0x140003369
mov rax, qword [rdi + 0x190]
cmp rax, qword [rbp - 0x39]
jne 0x140003369
mov rax, qword [rdi + 0x198]
cmp rax, qword [rbp - 0x31]
jne 0x140003369
cmp byte [rdi + 0x1c2], 0xee
jne 0x1400031ae
movabs rax, 0x5452415020494645
mov ecx, r12d
cmp qword [rdi + 0x200], rax
je 0x1400031a5
lea rdx, str.Invalid_GPT_Signature_n
call fcn.140001c50
jmp 0x140003390
mov rax, qword [rdi + 0x4a0]
jmp 0x1400031b7
mov eax, dword [rdi + 0x1d6]
mov ecx, r15d
mov qword [rsp + 0xe0], r13
lea r13, [0x14006a480]
mov dword [rbx + 0x208], ecx
lea rcx, [0x140069ba0]
mov qword [0x140069b88], rax
lea rax, [0x14006a8d0]
mov qword [0x14006a038], rax
mov qword [0x14006a488], rax
lea rax, [0x140002f60]
mov qword [0x140069bd8], rax
mov qword [0x140069b70], r14
mov qword [0x14006a8e8], r15
mov qword [0x14006a8e0], r15
mov qword [0x14006a030], r13
mov qword [0x14006a480], r15
mov qword [0x14006a8d0], r13
mov qword [0x14006a8d8], r15
mov dword [0x140069b98], r12d
mov qword [0x140069be0], r15
call fcn.1400039f0
test eax, eax
je 0x140003255
mov edx, eax
lea rcx, str.FAT_FS:_Error_could_not_load_FAT_details___d___r_n
call fcn.140001b10
jmp 0x14000328e
lea rcx, [rbx + 0x1c4]
mov dword [0x140069b84], r12d
call fcn.140002d00
mov esi, eax
test eax, eax
jne 0x14000328e
lea rcx, str._EFI_BOOT_grubx64_real.efi
call fcn.140004c70
test rax, rax
je 0x14000328e
mov rcx, rax
mov dword [rbx + 0x204], r12d
call fcn.140005110
cmp dword [0x140069b98], r15d
jne 0x1400032dd
lea rax, [0x14006a8d0]
mov qword [0x14006a8e8], r15
mov qword [0x14006a038], rax
mov qword [0x14006a488], rax
mov qword [0x14006a8e0], r15
mov qword [0x14006a030], r13
mov qword [0x14006a480], r15
mov qword [0x14006a8d0], r13
mov qword [0x14006a8d8], r15
mov dword [0x140069b98], r12d
mov rax, qword [0x140069be8]
mov r13, qword [rsp + 0xe0]
test rax, rax
je 0x1400032f3
call rax
mov rbx, qword [0x140069e10]
test rbx, rbx
je 0x140003359
nop
cmp dword [rbx + 0x204], r15d
je 0x14000334d
mov r10, qword [0x140069be0]
test r10, r10
je 0x140003346
mov ecx, dword [rbx + 0x200]
mov edx, ecx
sub edx, dword [0x140069bb4]
mov r8d, dword [0x140069bc0]
sub r8d, edx
lea r9d, [rdx + 1]
mov rdx, rbx
cmp r9d, dword [0x140069bc0]
cmovbe r8d, r12d
call r10
test eax, eax
je 0x140003359
mov dword [rbx + 0x204], r15d
mov rbx, qword [rbx + 0x210]
test rbx, rbx
jne 0x140003300
mov rax, qword [0x140069bf0]
test rax, rax
je 0x140003390
call rax
jmp 0x140003390
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea rdx, str.Invalid_MBR_Code__u_n
jmp 0x140003385
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea rdx, str.ReadFile_failed__u_n
mov r8d, eax
mov ecx, r12d
call fcn.140001c50
mov rcx, rdi
call fcn.14002da28
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rdi, qword [rsp + 0x130]
mov eax, esi
mov rcx, qword [rbp + 0x17]
xor rcx, rsp
call fcn.14002b5c0
add rsp, 0xe8
pop r15
pop r14
pop r12
pop rsi
pop rbx
pop rbp
ret