Function at 0x1400285a0
Capabilities:
Get disk information

Disassembly:
mov qword [rsp + 8], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0xa20]
sub rsp, 0xb20
mov rax, qword [0x14016b400]
xor rax, rsp
mov qword [rbp + 0xa10], rax
mov rbx, r8
mov qword [rsp + 0x70], rdx
mov qword [rsp + 0x78], rbx
mov r12, rdx
xor edi, edi
lea rcx, str.CVssAsrAPIBackup::GetVolumeComponents
mov dword [rsp + 0x38], edi
call fcn.140029428
xor edx, edx
mov qword [rsp + 0x68], rdi
mov r8d, 0x208
lea rcx, [rbp - 0x40]
mov r14d, edi
mov r13d, edi
call sub.msvcrt.dll_memset
xor edx, edx
lea rcx, [rbp + 0x1d0]
mov r8d, 0x208
call sub.msvcrt.dll_memset
xor edx, edx
lea rcx, [rbp + 0x800]
mov r8d, 0x208
call sub.msvcrt.dll_memset
xor edx, edx
lea rcx, [rbp + 0x5f0]
mov r8d, 0x208
call sub.msvcrt.dll_memset
xor edx, edx
mov qword [rsp + 0x60], rdi
lea r8d, [rdi + 0x38]
mov qword [rsp + 0x50], rdi
lea rcx, [rbp - 0x80]
mov dword [rsp + 0x48], edi
mov r15d, edi
mov qword [rsp + 0x30], rdi
mov esi, edi
call sub.msvcrt.dll_memset
xor eax, eax
test r12, r12
je 0x14002867c
mov dword [r12], eax
test rbx, rbx
je 0x140028684
mov qword [rbx], rax
test r12, r12
je 0x140056d18
test rbx, rbx
je 0x140056d92
lea rcx, [rbp + 0x5f0]
call fcn.1400299dc
test eax, eax
je 0x140056dc4
lea rcx, [rsp + 0x60]
call fcn.14002a490
test eax, eax
je 0x140056df2
lea rcx, [rbp + 0x800]
call fcn.14002a7e8
lea r12, section..data
test eax, eax
je 0x140056e35
call fcn.14002b748
mov r14, rax
test rax, rax
je 0x140056eb7
mov ecx, 0x448
call fcn.1400293f0
mov qword [rsp + 0x68], rax
mov r13, rax
test rax, rax
je 0x140056ef3
xor r10d, r10d
mov ebx, r10d
cmp dword [r14 + 4], ebx
jbe 0x14002875c
nop
mov eax, ebx
mov qword [rsp + 0x28], r10
lea rcx, [rax + rax*2]
movzx eax, word [r14 + rcx*8 + 0xc]
mov edx, dword [r14 + rcx*8 + 0x18]
movzx r8d, word [r14 + rcx*8 + 0x1c]
add rdx, r14
mov r9d, dword [r14 + rcx*8 + 8]
mov rcx, r13
shr eax, 1
add r9, r14
shr r8d, 1
mov word [rsp + 0x20], ax
call fcn.1400290dc
test eax, eax
je 0x140056f21
inc ebx
mov r10, rsi
cmp ebx, dword [r14 + 4]
jb 0x140028710
mov rbx, r13
mov rdi, r10
xor ecx, ecx
call qword [sym.imp.api_ms_win_core_com_l1_1_0.dll_CoTaskMemFree]
cmp qword [rbx + 0x10], rsi
je 0x140028773
inc r15d
mov rbx, qword [rbx]
test rbx, rbx
jne 0x140028762
imul ecx, r15d, 0x38
mov dword [rsp + 0x58], r15d
call fcn.1400293f0
mov qword [rsp + 0x30], rax
mov rsi, rax
test rax, rax
je 0x140056f5d
mov ebx, dword [rsp + 0x48]
lea rsi, [0x1400fd76c]
mov r15, r13
mov r12d, 0x104
mov rcx, rdi
call qword [sym.imp.api_ms_win_core_com_l1_1_0.dll_CoTaskMemFree]
mov r8, qword [r15 + 0x10]
xor eax, eax
mov qword [rsp + 0x40], rax
mov edi, eax
test r8, r8
je 0x140028af9
movzx r9d, word [r15 + 0x2e]
lea rcx, [rbp - 0x40]
mov rdx, r12
call fcn.140029060
test eax, eax
js 0x14005739d
mov eax, 0x5c
mov rcx, r12
mov word [rbp - 0x3e], ax
lea rax, [rbp - 0x40]
cmp word [rax], di
je 0x14002880a
add rax, 2
sub rcx, 1
jne 0x1400287f6
jmp 0x1400572c1
test rcx, rcx
je 0x1400572c1
lea rax, [rcx + rcx]
mov r9, rsi
lea rdx, [rbp + 0x1c8]
mov r8d, 0x7ffffffe
sub rdx, rax
xor eax, eax
mov r10d, eax
sub r9, rdx
test r8, r8
je 0x140028856
movzx eax, word [rdx + r9]
test ax, ax
je 0x140028856
mov word [rdx], ax
dec r8
add rdx, 2
sub rcx, 1
jne 0x140028832
jmp 0x140056f81
test rcx, rcx
je 0x140056f81
xor eax, eax
mov word [rdx], ax
test r10d, r10d
js 0x1400572ba
lea rcx, [rbp - 0x40]
call qword [sym.imp.api_ms_win_core_file_l1_1_0.dll_GetDriveTypeW]
cmp eax, 3
jne 0x140028af9
movzx r9d, word [r15 + 0x2e]
lea rcx, [rbp + 0x1d0]
mov r8, qword [r15 + 0x10]
mov rdx, r12
call fcn.140029060
test eax, eax
js 0x140057267
mov r8d, 1
lea r9, [rsp + 0x40]
mov eax, 0x5c
lea rcx, [rbp + 0x1d0]
movzx edx, r8b
mov word [rbp + 0x1d2], ax
call fcn.140027e08
test eax, eax
je 0x140056f90
mov rdi, qword [rsp + 0x40]
mov qword [rsp + 0x40], rdi
test rdi, rdi
jne 0x140056fe6
mov rbx, qword [r15 + 0x18]
test rbx, rbx
je 0x140057036
movzx ecx, word [rbx + 8]
mov eax, ecx
add rax, rax
cmp rax, 0x18
jbe 0x140057029
mov rdx, qword [rbx]
mov rax, qword [rdx]
sub rax, qword [str.DosDevices_]
jne 0x140028929
mov rax, qword [rdx + 8]
sub rax, qword [0x1400fd948]
jne 0x140028929
mov rax, qword [rdx + 0x10]
sub rax, qword [0x1400fd950]
test rax, rax
jne 0x140057029
cmp ecx, 0xe
jb 0x140057036
add rdx, 0x18
lea r8, [rbp + 0x3e0]
xor esi, esi
mov rcx, r12
mov r9d, esi
lea rax, [rcx - 0x102]
test rax, rax
je 0x140028979
movzx eax, word [rdx]
test ax, ax
je 0x140028979
mov word [r8], ax
add rdx, 2
add r8, 2
sub rcx, 1
jne 0x14002894e
jmp 0x14005705d
test rcx, rcx
je 0x14005705d
mov word [r8], si
test r9d, r9d
js 0x140057081
mov rcx, qword [rsp + 0x50]
call qword [sym.imp.api_ms_win_core_com_l1_1_0.dll_CoTaskMemFree]
lea r8, [rbp + 0x3e0]
mov qword [rsp + 0x50], rsi
lea rdx, [rsp + 0x50]
mov ecx, 0xb003
call fcn.140027f84
test eax, eax
je 0x140057170
movzx r8d, word [r15 + 0x2e]
lea rdx, [rbp - 0x40]
mov rcx, qword [rsp + 0x60]
call qword [sym.imp.msvcrt.dll__wcsnicmp]
test eax, eax
mov edi, esi
lea rax, [rbp + 0x5f0]
sete dil
or r8, 0xffffffffffffffff
inc r8
cmp word [rax + r8*2], 0
jne 0x1400289e4
mov rdx, qword [r15 + 8]
mov ebx, esi
test rdx, rdx
je 0x140028a16
movzx eax, word [r15 + 0x2c]
cmp r8, rax
jne 0x140028a16
lea rcx, [rbp + 0x5f0]
call qword [sym.imp.msvcrt.dll__wcsnicmp]
test eax, eax
sete bl
mov r8, r12
lea rdx, [rbp - 0x40]
lea rcx, [rbp + 0x800]
call qword [sym.imp.msvcrt.dll__wcsnicmp]
test eax, eax
mov ecx, esi
sete cl
test ebx, ebx
jne 0x140028be8
test edi, edi
jne 0x14005706c
test ecx, ecx
jne 0x14005706c
lea esi, [rbx + 1]
mov ebx, 1
lea rcx, [rbp - 0x38]
or rax, 0xffffffffffffffff
nop dword [rax]
cmp word [rcx + rax*2 + 2], 0
lea rax, [rax + 1]
jne 0x140028a60
xor ecx, ecx
mov word [rbp + rax*2 - 0x3a], cx
lea rcx, [rbp - 0x38]
call fcn.140028f70
mov qword [rbp - 0x78], rax
test rax, rax
je 0x140057150
mov rcx, qword [rsp + 0x50]
call fcn.140028f70
mov qword [rbp - 0x70], rax
test rax, rax
je 0x1400570fb
mov rax, qword [rsp + 0x30]
xor edx, edx
movups xmm0, xmmword [rbp - 0x80]
mov dword [rbp - 0x5c], ebx
movups xmm1, xmmword [rbp - 0x70]
mov ebx, dword [rsp + 0x48]
lea r8d, [rdx + 0x38]
imul rcx, rbx, 0x38
mov dword [rbp - 0x60], esi
movups xmmword [rcx + rax], xmm0
movups xmm0, xmmword [rbp - 0x60]
movups xmmword [rcx + rax + 0x10], xmm1
movsd xmm1, qword [rbp - 0x50]
movups xmmword [rcx + rax + 0x20], xmm0
movsd qword [rcx + rax + 0x30], xmm1
lea rcx, [rbp - 0x80]
call sub.msvcrt.dll_memset
inc ebx
lea rsi, [0x1400fd76c]
mov dword [rsp + 0x48], ebx
mov rdi, qword [rsp + 0x40]
mov rcx, qword [section..data]
mov r15, qword [r15]
test r15, r15
jne 0x1400287ae
lea rax, section..data
cmp rcx, rax
je 0x140028b22
test byte [rcx + 0x1c], 2
jne 0x1400573cc
mov rsi, qword [rsp + 0x30]
xor ecx, ecx
mov rax, qword [rsp + 0x70]
mov dword [rsp + 0x48], ecx
mov qword [rsp + 0x30], rcx
mov dword [rax], ebx
mov rax, qword [rsp + 0x78]
mov ebx, dword [rsp + 0x38]
mov qword [rax], rsi
mov esi, ecx
mov rcx, r14
call qword [sym.imp.api_ms_win_core_com_l1_1_0.dll_CoTaskMemFree]
mov rcx, qword [rsp + 0x60]
call qword [sym.imp.api_ms_win_core_com_l1_1_0.dll_CoTaskMemFree]
mov rcx, qword [rsp + 0x50]
call qword [sym.imp.api_ms_win_core_com_l1_1_0.dll_CoTaskMemFree]
xor eax, eax
mov qword [rsp + 0x50], rax
test rsi, rsi
jne 0x1400573f2
lea rcx, [rbp - 0x80]
call fcn.14002b3bc
test r13, r13
je 0x140028b8e
lea rcx, [rsp + 0x68]
call fcn.14002b6d8
mov rcx, rdi
call qword [sym.imp.api_ms_win_core_com_l1_1_0.dll_CoTaskMemFree]
nop word [rax + rax]
lea rcx, str.CVssAsrAPIBackup::GetVolumeComponents
call fcn.140027f60
mov ecx, ebx
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_SetLastError]
test ebx, ebx
jg 0x140057407
mov eax, ebx
mov rcx, qword [rbp + 0xa10]
xor rcx, rsp
call fcn.1400321c0
mov rbx, qword [rsp + 0xb60]
add rsp, 0xb20
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
xor eax, eax
mov ebx, eax
jmp 0x140028a51
mov ebx, 0x57
mov rcx, qword [section..data]
lea rax, section..data
cmp rcx, rax
je 0x140028b47
test byte [rcx + 0x1c], 8
je 0x140028b47
lea edx, [rbx - 0x2a]
lea rax, str.pcComponents
jmp 0x140056d56
mov edx, 0x36
lea rax, str.rgComponents
mov r9d, ebx
jmp 0x140056d77
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
mov r9d, eax
mov edx, 0x2f
lea rax, str.AsrGetSystemVolumeDevPath_wszSystemPartitionDevPath__ARRAYSIZE_wszSystemPartitionDevPath___
mov rcx, qword [section..data]
mov rcx, qword [rcx + 0x10]
lea r8, [0x1401053c0]
mov qword [rsp + 0x20], rax
call fcn.1400e4514
nop
jmp 0x140028b47
mov ebx, 0x57
mov rcx, qword [section..data]
lea rax, section..data
cmp rcx, rax
je 0x140028b47
test byte [rcx + 0x1c], 8
je 0x140028b47
lea edx, [rbx - 0x29]
lea rax, str.prgComponents
jmp 0x140056d56
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
mov ebx, eax
mov rcx, qword [section..data]
lea rax, section..data
cmp rcx, rax
je 0x140028b47
test byte [rcx + 0x1c], 8
je 0x140028b47
jmp 0x140056d5b
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
mov ebx, eax
mov rax, qword [section..data]
lea rcx, section..data
cmp rax, rcx
je 0x140028b47
test byte [rax + 0x1c], 8
je 0x140028b47
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
mov r9d, eax
mov edx, 0x30
lea rax, str.GetBootVolumeGuidName_pwszBootPartitionVolGuid_
jmp 0x140056d70
mov rax, qword [section..data]
cmp rax, r12
je 0x140056e6c
test byte [rax + 0x1c], 2
je 0x140056e6c
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
mov rcx, qword [section..data]
lea r8, [0x1401053c0]
mov r9d, eax
mov edx, 0x31
mov rcx, qword [rcx + 0x10]
call fcn.1400e46a8
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
cmp eax, 0xe
jne 0x1400286d7
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
mov ebx, eax
mov rax, qword [section..data]
cmp rax, r12
je 0x140028b47
test byte [rax + 0x1c], 8
je 0x140028b47
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
mov r9d, eax
mov edx, 0x32
lea rax, str.GetLastError_____ERROR_OUTOFMEMORY
jmp 0x140056d70
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
mov ebx, eax
mov rcx, qword [section..data]
cmp rcx, r12
je 0x140028b47
test byte [rcx + 0x1c], 8
je 0x140028b47
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
mov r9d, eax
mov edx, 0x33
lea rax, str.GetLastError___
jmp 0x140056d70
mov ebx, 0xe
mov rcx, qword [section..data]
cmp rcx, r12
je 0x140028b47
test byte [rcx + 0x1c], 8
je 0x140028b47
lea edx, [rbx + 0x26]
lea rax, str.pMpInfoList
jmp 0x140056d56
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
mov ebx, eax
mov rax, qword [section..data]
cmp rax, r12
je 0x140028b47
test byte [rax + 0x1c], 8
je 0x140028b47
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
mov r9d, eax
mov edx, 0x35
lea rax, str.::GetLastError__
jmp 0x140056d70
mov ebx, 0xe
mov rcx, qword [section..data]
cmp rcx, r12
je 0x140028b47
test byte [rcx + 0x1c], 8
je 0x140028b47
jmp 0x140056d4a
sub rdx, 2
mov r10d, 0x8007007a
jmp 0x14002885f
mov rcx, qword [section..data]
lea rax, section..data
cmp rcx, rax
je 0x140056fdc
test byte [rcx + 0x1c], 4
je 0x140056fdc
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
mov rcx, qword [section..data]
lea r9, [rbp + 0x1d0]
mov edx, 0x3a
mov dword [rsp + 0x20], eax
lea r8, [0x1401053c0]
mov rcx, qword [rcx + 0x10]
call fcn.1400e5a88
nop
jmp 0x140028af4
mov rdi, qword [rsp + 0x40]
jmp 0x140028b00
mov rcx, qword [section..data]
lea rax, section..data
cmp rcx, rax
je 0x140028b00
test byte [rcx + 0x1c], 4
je 0x140028b00
mov rcx, qword [rcx + 0x10]
lea r9, [rbp + 0x1d0]
mov edx, 0x3b
lea r8, [0x1401053c0]
call fcn.1400e4650
nop
jmp 0x140028af9
mov rbx, qword [rbx + 0x10]
test rbx, rbx
jne 0x1400288ef
movzx r9d, word [r15 + 0x2e]
lea rcx, [rbp + 0x3e0]
mov r8, qword [r15 + 0x10]
mov rdx, r12
call fcn.140029060
test eax, eax
js 0x1400571cf
xor esi, esi
jmp 0x14002898f
sub r8, 2
mov r9d, 0x8007007a
jmp 0x140028982
test ebx, ebx
jne 0x140028be8
test edi, edi
jne 0x140028be8
jmp 0x140028a4c
mov ecx, r9d
call fcn.1400f2b1c
mov dword [rsp + 0x38], eax
mov rax, qword [section..data]
lea rcx, section..data
cmp rax, rcx
je 0x1400570ed
test byte [rax + 0x1c], 8
je 0x1400570ed
mov r8, qword [rbx]
lea rcx, [rbp + 0x3e0]
add r8, 0x18
mov r9d, 2
mov rdx, r12
call fcn.140029060
mov rcx, qword [section..data]
lea r8, [0x1401053c0]
mov r9d, eax
mov edx, 0x3c
lea rax, str.::StringCchCopyN__ARRAY_COUNT_PARAM_wszVolumeMtPt____WCHAR__pVolSymLink__pLink_12___2_
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 0x10]
call fcn.1400e4514
mov ebx, dword [rsp + 0x38]
mov rsi, qword [rsp + 0x30]
jmp 0x140028b47
mov ebx, 0xe
mov rcx, qword [section..data]
lea rax, section..data
cmp rcx, rax
je 0x140057149
test byte [rcx + 0x1c], 8
je 0x140057149
lea edx, [rbx + 0x32]
lea rax, str.Component.pwszCaption
jmp 0x140057131
mov edx, 0x3f
lea rax, str.Component.pwszComponentName
mov rcx, qword [rcx + 0x10]
lea r8, [0x1401053c0]
mov r9d, ebx
mov qword [rsp + 0x20], rax
call fcn.1400e4514
mov rdi, qword [rsp + 0x40]
jmp 0x1400570f1
mov ebx, 0xe
mov rcx, qword [section..data]
lea rax, section..data
cmp rcx, rax
je 0x140057149
test byte [rcx + 0x1c], 8
je 0x140057149
jmp 0x140057125
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
mov ebx, eax
mov rax, qword [section..data]
lea rcx, section..data
cmp rax, rcx
je 0x1400570f1
test byte [rax + 0x1c], 8
je 0x1400570f1
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
mov rcx, qword [section..data]
lea r8, [0x1401053c0]
mov r9d, eax
mov edx, 0x3e
lea rax, str.::GetLastError__
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 0x10]
call fcn.1400e4514
jmp 0x1400570f1
mov ecx, eax
call fcn.1400f2b1c
mov ebx, eax
mov rax, qword [section..data]
lea rcx, section..data
cmp rax, rcx
je 0x1400570f1
test byte [rax + 0x1c], 8
je 0x1400570f1
movzx r9d, word [r15 + 0x2e]
lea rcx, [rbp + 0x3e0]
mov r8, qword [r15 + 0x10]
mov rdx, r12
call fcn.140029060
mov r9d, eax
mov edx, 0x3d
lea rax, str.::StringCchCopyN__ARRAY_COUNT_PARAM_wszVolumeMtPt___pCurMpInfo__pVolumeGuid__pCurMpInfo__cchVolumeGuid_
jmp 0x140057246
movzx r9d, word [r15 + 0x2e]
lea rcx, [rbp - 0x40]
mov r8, qword [r15 + 0x10]
mov rdx, r12
call fcn.140029060
mov r9d, eax
mov edx, 0x37
lea rax, str.::StringCchCopyN_ARRAY_COUNT_PARAM_wszVolGuidName___pCurMpInfo__pVolumeGuid__pCurMpInfo__cchVolumeGuid_
mov rcx, qword [section..data]
lea r8, [0x1401053c0]
mov qword [rsp + 0x20], rax
mov rcx, qword [rcx + 0x10]
call fcn.1400e4514
jmp 0x1400570f1
mov ecx, eax
call fcn.1400f2b1c
mov ebx, eax
mov rax, qword [section..data]
lea rcx, section..data
cmp rax, rcx
je 0x1400570f1
test byte [rax + 0x1c], 8
je 0x1400570f1
movzx r9d, word [r15 + 0x2e]
lea rcx, [rbp + 0x1d0]
mov r8, qword [r15 + 0x10]
mov rdx, r12
call fcn.140029060
mov r9d, eax
mov edx, 0x39
lea rax, str.::StringCchCopyN_ARRAY_COUNT_PARAM_wszVolGuidNameWithoutSlash___pCurMpInfo__pVolumeGuid__pCurMpInfo__cchVolumeGuid_
jmp 0x140057246
mov ebx, 0x80070057
jmp 0x1400572c9
mov ebx, 0x80070057
mov r10d, ebx
mov ecx, r10d
call fcn.1400f2b1c
mov dword [rsp + 0x38], eax
mov r10, qword [section..data]
lea rax, section..data
cmp r10, rax
je 0x1400570ed
test byte [r10 + 0x1c], 8
je 0x1400570ed
mov rcx, r12
lea rax, [rbp - 0x40]
cmp word [rax], di
je 0x14005730d
add rax, 2
sub rcx, 1
jne 0x1400572fe
test rcx, rcx
mov r8, rdi
cmovne ebx, r8d
je 0x140057321
mov rax, r12
sub rax, rcx
jmp 0x140057324
mov rax, r8
test rcx, rcx
je 0x140057379
lea rcx, [rbp - 0x40]
lea rcx, [rcx + rax*2]
sub r12, rax
je 0x140057361
lea rdx, [rax + 0x7ffffefa]
add rdx, r12
sub rsi, rcx
test rdx, rdx
je 0x140057361
movzx eax, word [rcx + rsi]
test ax, ax
je 0x140057361
mov word [rcx], ax
dec rdx
add rcx, 2
sub r12, 1
jne 0x140057343
test r12, r12
lea rax, [rcx - 2]
mov ebx, 0x8007007a
cmovne rax, rcx
cmovne ebx, r8d
mov word [rax], r8w
mov rcx, qword [r10 + 0x10]
lea rax, str.::StringCchCat__ARRAY_COUNT_PARAM_wszVolGuidName___L____
mov qword [rsp + 0x20], rax
lea r8, [0x1401053c0]
mov edx, 0x38
mov r9d, ebx
jmp 0x1400570e8
mov ecx, eax
call fcn.1400f2b1c
mov ebx, eax
mov rax, qword [section..data]
lea rcx, section..data
cmp rax, rcx
je 0x1400570f1
test byte [rax + 0x1c], 8
je 0x1400570f1
jmp 0x140057222
mov eax, dword [rsp + 0x58]
lea r8, [0x1401053c0]
mov rcx, qword [rcx + 0x10]
mov edx, 0x41
mov r9d, ebx
mov dword [rsp + 0x20], eax
call fcn.1400e46dc
nop
jmp 0x140028b22
lea rdx, [rsp + 0x30]
lea rcx, [rsp + 0x48]
call fcn.14002b360
nop
jmp 0x140028b76
movzx eax, bx
or eax, 0x80070000
jmp 0x140028bbe