Function at 0x140012bc0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push r15
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x158
mov r14, qword [rsp + 0x1c0]
mov edi, dword [rsp + 0x1c8]
lea eax, [rcx - 0x80]
mov r12d, ecx
mov r13, rdx
mov ebx, r8d
cmp eax, 0x80
ja 0x14001389d
cmp r9w, 8
ja 0x14001389d
test r8d, r8d
je 0x140012c16
lea eax, [r8 - 1]
test eax, r8d
jne 0x14001389d
movzx eax, r9w
mov dword [0x1400fac74], eax
cmp r9w, 1
jne 0x140012c86
mov rcx, qword [0x1400b1280]
mov edx, 1
shl rdx, 0x23
cmp qword [rcx], rdx
jg 0x140012c4f
mov rcx, qword [0x1400b1870]
mov edx, edi
and edx, 0x10000
or edx, dword [rcx]
je 0x140012ccc
mov r9, qword [0x14007b568]
mov r8d, ebx
mov rdx, r13
mov ecx, r12d
mov dword [rsp + 0x1c8], edi
mov qword [rsp + 0x1c0], r14
add rsp, 0x158
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
jmp 0x1400178d0
sub r9d, 6
cmp r9w, 2
ja 0x140012ccc
lea rdx, [0x14007b560]
mov dword [rsp + 0x1c8], edi
mov r8d, ebx
mov ecx, r12d
mov qword [rsp + 0x1c0], r14
mov r9, qword [rdx + rax*8]
mov rdx, r13
add rsp, 0x158
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
jmp 0x140016cdc
mov rdx, qword [0x1400b1df0]
mov rcx, r14
mov ebp, dword [rdx]
lea rdx, [0x14007b560]
mov rsi, qword [rdx + rax*8]
test ebp, ebp
je 0x140013594
call fcn.140011da3
mov rcx, rsi
mov r15, rax
call fcn.140011da3
mov rdx, qword [0x14007b580]
mov rcx, rsi
mov qword [rsp + 0x60], rax
call sub.msvcrt.dll_strcmp
test eax, eax
jne 0x140012d4f
mov rax, qword [0x1400b1700]
mov rdx, qword [0x1400b1710]
mov eax, dword [rax]
mov edx, dword [rdx]
mov ecx, eax
or ecx, edx
je 0x140012d4f
mov dword [rsp + 0x30], edx
xor r8d, r8d
xor edx, edx
mov ecx, 1
mov dword [rsp + 0x28], eax
mov r9d, 0xc94
mov qword [rsp + 0x20], rsi
call fcn.14001d77b
jmp 0x140012d69
mov qword [rsp + 0x20], rsi
mov r9d, 0xc96
xor r8d, r8d
xor edx, edx
mov ecx, 1
call fcn.14001d77b
mov rdx, rsi
lea rcx, str.Formatting_to__s__using_VDS_
call fcn.140036717
xor r10d, r10d
xor r9d, r9d
xor r8d, r8d
mov dword [rsp + 0x20], r10d
mov edx, 1
or ecx, 0xffffffff
call fcn.140043acc
mov r9d, 1
mov rdx, r13
mov ecx, r12d
mov r8d, 1
call fcn.14000caf6
mov rcx, rax
mov qword [rsp + 0x68], rax
call fcn.140011da3
mov rsi, rax
test rax, rax
jne 0x140012dda
lea rcx, str.Could_not_read_volume_name
call fcn.140036717
mov dword [0x1400fac54], 0xc003001f
jmp 0x140013072
mov edx, 6
xor ecx, ecx
call qword [sym.imp.ole32.dll_CoInitializeEx]
xor ecx, ecx
xor r8d, r8d
xor r9d, r9d
mov qword [rsp + 0x40], rcx
or edx, 0xffffffff
xor ecx, ecx
mov dword [rsp + 0x38], r8d
xor r8d, r8d
mov qword [rsp + 0x30], r9
xor r9d, r9d
mov dword [rsp + 0x28], 3
mov dword [rsp + 0x20], 2
call qword [sym.imp.ole32.dll_CoInitializeSecurity]
lea rax, [rsp + 0x98]
xor edx, edx
mov rcx, qword [str.0G_b_]
mov qword [rsp + 0x20], rax
mov r9, qword [str._G_b_]
mov r8d, 0x14
call qword [sym.imp.ole32.dll_CoCreateInstance]
mov ecx, eax
test eax, eax
je 0x140012e72
call qword [sym.imp.KERNEL32.DLL_SetLastError]
mov dword [0x1400fac54], 0xc003001f
call fcn.140036bd7
lea rcx, str.Could_not_create_VDS_Loader_Instance:__s
mov rdx, rax
jmp 0x140013062
mov rcx, qword [rsp + 0x98]
lea r8, [rsp + 0xa0]
lea rdx, [0x140085e70]
mov rax, qword [rcx]
call qword [rax + 0x18]
mov rcx, qword [rsp + 0x98]
mov ebp, eax
mov rax, qword [rcx]
call qword [rax + 0x10]
test ebp, ebp
je 0x140012ec9
mov ecx, ebp
call qword [sym.imp.KERNEL32.DLL_SetLastError]
mov dword [0x1400fac54], 0xc003001f
call fcn.140036bd7
lea rcx, str.Could_not_load_VDS_Service:__s
mov rdx, rax
jmp 0x140013062
mov rcx, qword [rsp + 0xa0]
mov rax, qword [rcx]
call qword [rax + 0x20]
mov ecx, eax
test eax, eax
je 0x140012f01
call qword [sym.imp.KERNEL32.DLL_SetLastError]
mov dword [0x1400fac54], 0xc003001f
call fcn.140036bd7
lea rcx, str.VDS_Service_is_not_ready:__s
mov rdx, rax
jmp 0x140013062
mov rcx, qword [rsp + 0xa0]
lea r8, [rsp + 0xa8]
mov edx, 1
mov rax, qword [rcx]
call qword [rax + 0x30]
mov ecx, eax
test eax, eax
jne 0x140012f49
lea rax, [rsp + 0x88]
lea r13, [rsp + 0xd0]
mov qword [rsp + 0x58], rax
lea rax, [rsp + 0xb0]
mov qword [rsp + 0x70], rax
jmp 0x140012fdf
call qword [sym.imp.KERNEL32.DLL_SetLastError]
mov dword [0x1400fac54], 0xc003001f
call fcn.140036bd7
lea rcx, str.Could_not_query_VDS_Service_Providers:__s
mov rdx, rax
jmp 0x140013062
mov rcx, qword [rsp + 0xd8]
lea rdx, [rsp + 0xe0]
mov rax, qword [rcx]
call qword [rax + 0x28]
mov ecx, eax
test eax, eax
jne 0x140013197
mov r12, qword [sym.imp.ole32.dll_CoTaskMemFree]
mov rcx, qword [rsp + 0xe0]
mov r9, qword [rsp + 0x58]
mov edx, 1
lea r8, [rsp + 0xe8]
mov rax, qword [rcx]
call qword [rax + 0x18]
test eax, eax
je 0x1400131bb
mov rcx, qword [rsp + 0xc8]
mov r9, qword [rsp + 0x58]
mov r8, r13
mov edx, 1
mov rax, qword [rcx]
call qword [rax + 0x18]
test eax, eax
je 0x140013126
mov r9, qword [rsp + 0x58]
mov r8, qword [rsp + 0x70]
mov edx, 1
mov rcx, qword [rsp + 0xa8]
mov rax, qword [rcx]
call qword [rax + 0x18]
test eax, eax
jne 0x140013549
mov eax, dword [0x1400fac54]
test eax, eax
js 0x14001306c
mov rcx, qword [rsp + 0xb0]
mov rdx, qword [0x1400b11a0]
lea r8, [rsp + 0xb8]
mov rax, qword [rcx]
call qword [rax]
mov rcx, qword [rsp + 0xb0]
mov r12d, eax
mov rax, qword [rcx]
call qword [rax + 0x10]
test r12d, r12d
je 0x140013079
mov ecx, r12d
call qword [sym.imp.KERNEL32.DLL_SetLastError]
mov dword [0x1400fac54], 0xc003001f
call fcn.140036bd7
lea rcx, str.Could_not_get_VDS_Provider:__s
mov rdx, rax
call fcn.140036717
jmp 0x140013549
cmp ax, 0x4c7
jne 0x14001300e
xor ebp, ebp
jmp 0x140013565
mov rcx, qword [rsp + 0xb8]
mov rdx, qword [0x1400b11c0]
lea r8, [rsp + 0xc0]
mov rax, qword [rcx]
call qword [rax]
mov rcx, qword [rsp + 0xb8]
mov r12d, eax
mov rax, qword [rcx]
call qword [rax + 0x10]
test r12d, r12d
je 0x1400130cf
mov ecx, r12d
call qword [sym.imp.KERNEL32.DLL_SetLastError]
mov dword [0x1400fac54], 0xc003001f
call fcn.140036bd7
lea rcx, str.Could_not_get_VDS_Software_Provider:__s
mov rdx, rax
jmp 0x140013062
mov rcx, qword [rsp + 0xc0]
lea rdx, [rsp + 0xc8]
mov rax, qword [rcx]
call qword [rax + 0x18]
mov rcx, qword [rsp + 0xc0]
mov r12d, eax
mov rax, qword [rcx]
call qword [rax + 0x10]
test r12d, r12d
je 0x140012fbc
mov ecx, r12d
call qword [sym.imp.KERNEL32.DLL_SetLastError]
mov dword [0x1400fac54], 0xc003001f
call fcn.140036bd7
lea rcx, str.Could_not_get_VDS_Software_Provider_Packs:__s
mov rdx, rax
jmp 0x140013062
mov eax, dword [0x1400fac54]
test eax, eax
jns 0x14001313a
cmp ax, 0x4c7
je 0x140013549
mov rcx, qword [rsp + 0xd0]
mov rdx, qword [0x1400b1190]
lea r8, [rsp + 0xd8]
mov rax, qword [rcx]
call qword [rax]
mov rcx, qword [rsp + 0xd0]
mov r12d, eax
mov rax, qword [rcx]
call qword [rax + 0x10]
test r12d, r12d
je 0x140012f6d
mov ecx, r12d
call qword [sym.imp.KERNEL32.DLL_SetLastError]
mov dword [0x1400fac54], 0xc003001f
call fcn.140036bd7
lea rcx, str.Could_not_query_VDS_Software_Provider_Pack:__s
mov rdx, rax
jmp 0x140013062
call qword [sym.imp.KERNEL32.DLL_SetLastError]
mov dword [0x1400fac54], 0xc003001f
call fcn.140036bd7
lea rcx, str.Could_not_query_VDS_volumes:__s
mov rdx, rax
jmp 0x140013062
mov eax, dword [0x1400fac54]
mov dword [rsp + 0x8c], 0x80004005
test eax, eax
jns 0x1400131da
cmp ax, 0x4c7
je 0x140013549
mov rcx, qword [rsp + 0xe8]
mov rdx, qword [0x1400b11d0]
lea r8, [rsp + 0xf8]
mov rax, qword [rcx]
call qword [rax]
mov ecx, eax
test eax, eax
je 0x140013220
call qword [sym.imp.KERNEL32.DLL_SetLastError]
mov dword [0x1400fac54], 0xc003001f
call fcn.140036bd7
lea rcx, str.Could_not_query_VDS_Volume_Interface:__s
mov rdx, rax
jmp 0x140013062
mov rcx, qword [rsp + 0xf8]
lea rdx, [rsp + 0x110]
mov rax, qword [rcx]
call qword [rax + 0x18]
mov ecx, eax
test eax, eax
je 0x140013275
cmp eax, 0x42715
je 0x140013275
call qword [sym.imp.KERNEL32.DLL_SetLastError]
mov rcx, qword [rsp + 0xf8]
mov dword [0x1400fac54], 0xc003001f
mov rax, qword [rcx]
call qword [rax + 0x10]
call fcn.140036bd7
lea rcx, str.Could_not_query_VDS_Volume_Properties:__s
mov rdx, rax
jmp 0x140013316
mov rcx, qword [rsp + 0x140]
call r12
mov rcx, qword [rsp + 0xf8]
mov rdx, qword [0x1400b11e0]
lea r8, [rsp + 0x108]
mov rax, qword [rcx]
call qword [rax]
mov rcx, qword [rsp + 0xf8]
mov ebp, eax
mov rax, qword [rcx]
call qword [rax + 0x10]
test ebp, ebp
je 0x1400132d3
mov ecx, ebp
call qword [sym.imp.KERNEL32.DLL_SetLastError]
mov dword [0x1400fac54], 0xc003001f
call fcn.140036bd7
lea rcx, str.Could_not_access_VDS_VolumeMF3_interface:__s
mov rdx, rax
jmp 0x140013316
mov rcx, qword [rsp + 0x108]
lea rdx, [rsp + 0xf0]
lea r8, [rsp + 0x94]
mov rax, qword [rcx]
call qword [rax + 0x18]
mov ecx, eax
test eax, eax
je 0x140013320
call qword [sym.imp.KERNEL32.DLL_SetLastError]
mov dword [0x1400fac54], 0xc003001f
call fcn.140036bd7
lea rcx, str.Could_not_query_VDS_VolumeGuidPathnames:__s
mov rdx, rax
call fcn.140036717
jmp 0x140012f94
cmp dword [rsp + 0x94], 1
jbe 0x140013341
mov rax, qword [rsp + 0xf0]
lea rcx, str.Notice:_Volume__S_has_more_than_one_GUID...
mov rdx, qword [rax]
call fcn.140036717
mov rax, qword [rsp + 0xf0]
mov rcx, rsi
mov rdx, qword [rax]
call sub.msvcrt.dll_wcscmp
mov rcx, qword [rsp + 0xf0]
mov dword [rsp + 0x7c], eax
call r12
mov eax, dword [rsp + 0x7c]
test eax, eax
jne 0x140012f94
mov rdx, qword [0x14007b578]
mov rcx, r14
xor r12d, r12d
call sub.msvcrt.dll_strcmp
test eax, eax
jne 0x140013394
lea rcx, str.UseUdfVersion
call fcn.14001208b
mov r12d, eax
cmp ebx, 0x1ff
ja 0x1400133ac
lea rcx, str.Using_default_cluster_size
xor ebx, ebx
call fcn.140036717
jmp 0x1400133ba
mov edx, ebx
lea rcx, str.Using_cluster_size:__d_bytes
call fcn.140036717
mov ebp, edi
lea rdx, str.Slow
lea rax, str.Quick
mov dword [0x1400fac7c], 0
and ebp, 2
lea rcx, str._s_format_was_selected
cmovne rdx, rax
call fcn.140036717
test edi, 4
je 0x1400133fb
lea rcx, str.NTFS_compression_is_enabled
call fcn.140036717
mov rcx, qword [rsp + 0x108]
lea rdx, [rsp + 0x100]
mov r9d, ebx
movzx r8d, r12w
lea rbx, [rsp + 0x90]
mov rax, qword [rcx]
mov qword [rsp + 0x30], rdx
mov dword [rsp + 0x28], edi
mov rdx, qword [rsp + 0x60]
lea rdi, [rsp + 0x8c]
mov qword [rsp + 0x20], r15
call qword [rax + 0x20]
mov r12, qword [sym.imp.KERNEL32.DLL_Sleep]
mov r13d, eax
test r13d, r13d
js 0x1400138a1
mov rcx, qword [rsp + 0x100]
cmp dword [0x1400fac54], 0
mov rax, qword [rcx]
jns 0x14001346a
call qword [rax + 0x18]
jmp 0x14001350d
mov r8, rbx
mov rdx, rdi
call qword [rax + 0x28]
mov r13d, eax
test eax, eax
js 0x140013500
mov r8d, dword [rsp + 0x90]
test ebp, ebp
je 0x1400134cc
cmp r8d, 0x64
mov r9d, 0xc92
mov ecx, 1
mov dword [rsp + 0x28], 2
sbb eax, eax
xor r8d, r8d
xor edx, edx
add eax, 2
mov dword [rsp + 0x20], eax
call fcn.14001d77b
mov eax, dword [rsp + 0x90]
mov ecx, 5
cvtsi2ss xmm1, rax
call fcn.140043995
jmp 0x1400134e7
xor edx, edx
mov r9d, 0x64
mov ecx, 4
mov dword [rsp + 0x20], edx
mov edx, 0xc91
call fcn.140043acc
mov r13d, dword [rsp + 0x8c]
test r13d, r13d
je 0x14001350d
cmp r13d, 0x80042409
jne 0x140013500
xor r13d, r13d
mov ecx, 0x1f4
call r12
jmp 0x140013445
mov rcx, qword [rsp + 0x100]
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [rsp + 0x108]
mov rax, qword [rcx]
call qword [rax + 0x10]
cmp dword [0x1400fac54], 0
js 0x140013072
lea rcx, [0x1400860ed]
mov ebp, 1
call fcn.140036717
jmp 0x140013565
cmp dword [0x1400fac54], 0
jne 0x140013072
mov dword [0x1400fac54], 0xc0030003
jmp 0x140013072
mov rcx, qword [rsp + 0x68]
call sub.msvcrt.dll_free
mov rcx, rsi
call sub.msvcrt.dll_free
mov rcx, r15
call sub.msvcrt.dll_free
mov rcx, qword [rsp + 0x60]
call sub.msvcrt.dll_free
call qword [sym.imp.ole32.dll_CoUninitialize]
jmp 0x1400138cd
call fcn.140011da3
mov rcx, rsi
mov qword [rsp + 0x60], rax
call fcn.140011da3
mov rdx, qword [0x14007b580]
mov rcx, rsi
mov qword [rsp + 0x68], rax
call sub.msvcrt.dll_strcmp
test eax, eax
jne 0x1400135fa
mov rax, qword [0x1400b1700]
mov rdx, qword [0x1400b1710]
mov eax, dword [rax]
mov edx, dword [rdx]
mov ecx, eax
or ecx, edx
je 0x1400135fa
mov dword [rsp + 0x30], edx
xor r8d, r8d
xor edx, edx
mov ecx, 1
mov dword [rsp + 0x28], eax
mov r9d, 0xc94
mov qword [rsp + 0x20], rsi
call fcn.14001d77b
jmp 0x140013614
mov qword [rsp + 0x20], rsi
mov r9d, 0xc96
xor r8d, r8d
xor edx, edx
mov ecx, 1
call fcn.14001d77b
mov rdx, rsi
lea rcx, str.Formatting_to__s__using_IFS_
call fcn.140036717
mov r9d, 1
mov rdx, r13
mov ecx, r12d
mov r8d, 1
call fcn.14000caf6
mov rcx, rax
mov qword [rsp + 0x58], rax
call fcn.140011da3
mov rsi, rax
test rax, rax
jne 0x14001366f
mov rdx, qword [rsp + 0x58]
lea rcx, str.Could_not_read_volume_name___s_
call fcn.140036717
mov dword [0x1400fac54], 0xc003001f
jmp 0x140013875
mov rcx, rax
call sub.msvcrt.dll_wcslen
xor edx, edx
xor ecx, ecx
mov word [rsi + rax*2 - 2], 0
call sub.msvcrt.dll_setlocale
cmp qword [0x1400fac68], 0
mov r12, rax
jne 0x140013702
lea r14, str.fmifs
lea r13, str.FormatEx
mov rcx, r14
call fcn.140011927
mov rdx, r13
mov rcx, rax
call qword [sym.imp.KERNEL32.DLL_GetProcAddress]
mov qword [0x1400fac68], rax
test rax, rax
jne 0x140013702
call fcn.140036bd7
mov r8, r14
mov rdx, r13
lea rcx, [0x14008614b]
mov r9, rax
call fcn.140036717
cmp dword [0x1400fac54], 0
js 0x140013875
call qword [sym.imp.KERNEL32.DLL_GetLastError]
movzx eax, ax
or eax, 0xc0030000
mov dword [0x1400fac54], eax
jmp 0x140013875
cmp qword [0x1400fac60], 0
jne 0x14001372f
lea rcx, str.fmifs
call fcn.140011927
lea rdx, str.EnableVolumeCompression
mov rcx, rax
call qword [sym.imp.KERNEL32.DLL_GetProcAddress]
mov qword [0x1400fac60], rax
xor ecx, ecx
mov rdx, r12
call sub.msvcrt.dll_setlocale
cmp ebx, 0x1ff
ja 0x140013751
lea rcx, str.Using_default_cluster_size
xor ebx, ebx
call fcn.140036717
jmp 0x14001375f
mov edx, ebx
lea rcx, str.Using_cluster_size:__d_bytes
call fcn.140036717
xor eax, eax
mov r14d, edi
lea rdx, str.Slow
mov dword [0x1400fac7c], 0
mov dword [0x1400fac78], eax
and r14d, 2
lea rax, str.Quick
lea rcx, str._s_format_was_selected
cmovne rdx, rax
mov r12d, 4
lea r15, [0x140011621]
lea r13, str._s___Retrying...
call fcn.140036717
mov rax, qword [0x1400b1280]
mov r9, qword [rsp + 0x60]
mov rcx, rsi
mov r8, qword [rsp + 0x68]
mov edx, dword [rax + 0x18]
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], ebx
mov dword [rsp + 0x20], r14d
call qword [0x1400fac68]
mov eax, dword [0x1400fac54]
test eax, eax
jns 0x140013812
cmp ax, 0x4c7
je 0x140013875
call fcn.140036bd7
mov rcx, r13
mov rdx, rax
call fcn.140036717
mov ecx, 0x1388
call qword [sym.imp.KERNEL32.DLL_Sleep]
dec r12
jne 0x1400137aa
cmp dword [0x1400fac54], 0
js 0x140013875
and edi, 4
jne 0x14001382a
lea rcx, [0x1400860ed]
mov ebp, 1
call fcn.140036717
jmp 0x140013875
mov rcx, rsi
call sub.msvcrt.dll_wcslen
mov edx, 1
mov rcx, rsi
mov word [rsi + rax*2], 0x5c
call qword [0x1400fac60]
test al, al
je 0x140013858
lea rcx, str.Enabled_NTFS_compression
call fcn.140036717
jmp 0x14001386c
call fcn.140036bd7
lea rcx, str.Could_not_enable_NTFS_compression:__s
mov rdx, rax
call fcn.140036717
cmp dword [0x1400fac54], 0
jns 0x140013817
mov rcx, qword [rsp + 0x58]
call sub.msvcrt.dll_free
mov rcx, rsi
call sub.msvcrt.dll_free
mov rcx, qword [rsp + 0x60]
call sub.msvcrt.dll_free
mov rcx, qword [rsp + 0x68]
call sub.msvcrt.dll_free
jmp 0x1400138cd
xor ebp, ebp
jmp 0x1400138cd
mov ecx, r13d
call qword [sym.imp.KERNEL32.DLL_SetLastError]
mov dword [0x1400fac54], 0xc003001f
call fcn.140036bd7
lea rcx, str.Could_not_format_drive:__s
mov rdx, rax
call fcn.140036717
jmp 0x140013072
mov eax, ebp
add rsp, 0x158
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
ret
push r15
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x598
movups xmmword [rsp + 0x570], xmm6
movups xmmword [rsp + 0x580], xmm7
xor eax, eax
lea rsi, [0x14007b5c0]
xor r11d, r11d
mov r10d, ecx
lea rdi, [rsp + 0x78]
mov ecx, 0x1e
mov rbx, r9
rep movsd dword [rdi], dword [rsi]
mov ecx, 0x100
mov qword [rsp + 0x48], r11
mov ebp, r8d
lea rdi, [rsp + 0x170]
mov qword [rsp + 0x58], r11
lea r14, [rsp + 0x170]
rep stosd dword [rdi], eax
mov rax, qword [0x1400b1b70]
mov ecx, r10d
mov r15, qword [rax]
call fcn.14000cff3
mov rcx, rbx
mov r12, rax
call sub.msvcrt.dll_strlen
test r12, r12
sete dil
cmp rax, 4
setne al
or dil, al
jne 0x140016d8a
mov r8d, 3
lea rdx, [0x140087696]
mov rcx, rbx
call sub.msvcrt.dll_strncmp
test eax, eax
je 0x140016d9c
mov rax, qword [0x1400b1100]
mov dword [rax], 0xc0030057
jmp 0x140016e90
mov edx, 0x20
mov rcx, r12
call sub.msvcrt.dll_strchr
test rax, rax
je 0x140016dba
lea rcx, str.Notice:_Using_physical_device_to_access_partition_data
call fcn.140036717
mov r13, qword [0x1400b10f0]
mov rcx, rbx
mov rdx, qword [r13 + 0x30]
call sub.msvcrt.dll_strcmp
test eax, eax
je 0x140016e08
mov rdx, qword [r13 + 0x38]
mov rcx, rbx
call sub.msvcrt.dll_strcmp
test eax, eax
je 0x140016e08
mov rdx, qword [r13 + 0x40]
mov rcx, rbx
call sub.msvcrt.dll_strcmp
lea rcx, str.ext4_file_system_is_not_supported__defaulting_to_ext3
test eax, eax
je 0x140016dff
lea rcx, str.Invalid_ext_file_system_version_requested__defaulting_to_ext3
call fcn.140036717
mov rbx, qword [r13 + 0x38]
mov qword [rsp + 0x20], rbx
mov r9d, 0xc96
xor r8d, r8d
mov edx, 1
mov ecx, 1
call fcn.14001d77b
xor r9d, r9d
xor r8d, r8d
mov edx, 1
mov dword [rsp + 0x20], r9d
or ecx, 0xffffffff
xor r9d, r9d
call fcn.140043acc
lea r8, [rsp + 0x48]
mov edx, 0x400
mov rcx, r12
call fcn.14005fb9f
mov esi, eax
test eax, eax
jne 0x140016e62
mov rax, qword [rsp + 0x48]
test rax, rax
jne 0x140016e97
mov rbx, qword [0x1400b1100]
cmp dword [rbx], 0
js 0x140016e7a
mov ecx, 0x1e
call fcn.14005fa8f
mov dword [rbx], eax
mov ecx, esi
call fcn.140016880
lea rcx, str.Could_not_read_device_size:__s
mov rdx, rax
call fcn.140036717
xor ebx, ebx
jmp 0x14001788e
shl rax, 0xa
lea rdx, [rsp + 0x78]
mov qword [rsp + 0x48], rax
cmp rax, qword [rdx]
jb 0x140016ecf
inc esi
add rdx, 0x18
cmp esi, 5
jne 0x140016ea5
mov r8d, 0x131
lea rdx, [0x14008765e]
lea rcx, str.i___ARRAYSIZE_ext2fs_default_
call qword [sym.imp.msvcrt.dll__wassert]
cmp ebp, 0x3ff
ja 0x140016ee9
movsxd rdx, esi
imul rdx, rdx, 0x18
mov ebp, dword [rsp + rdx + 0x80]
test ebp, ebp
je 0x140016ef0
lea ecx, [rbp - 1]
and ecx, ebp
je 0x140016f06
mov r8d, 0x134
lea rdx, [0x14008765e]
lea rcx, str.IS_POWER_OF_2_BlockSize_
jmp 0x140016ec9
xor r8d, r8d
mov edx, 0x400
mov dword [rsp + 0x188], r8d
cmp ecx, 7
je 0x140016f64
mov r9d, edx
lea r8d, [rcx + 1]
shl r9d, cl
cmp r9d, ebp
jne 0x140016f5c
test dil, dil
je 0x140016f36
mov dword [rsp + 0x188], ecx
xor edx, edx
mov dword [rsp + 0x18c], ecx
mov rcx, rbx
div rbp
mov rdx, qword [r13 + 0x30]
mov qword [rsp + 0x48], rax
mov rdi, rax
call sub.msvcrt.dll_strcmp
test eax, eax
je 0x140016f9f
jmp 0x140016f8f
mov ecx, r8d
mov dil, 1
jmp 0x140016f16
test dil, dil
jne 0x140016f82
mov r8d, 0x139
lea rdx, [0x14008765e]
lea rcx, str.EXT2_BLOCK_SIZE_BITS_features____EXT2_MAX_BLOCK_LOG_SIZE
jmp 0x140016ec9
mov dword [rsp + 0x188], 7
jmp 0x140016f69
mov rdx, qword [r13 + 0x38]
mov rcx, rbx
call sub.msvcrt.dll_strcmp
test eax, eax
jne 0x140016fd2
mov eax, 0xffffffff
cmp rax, rdi
jae 0x140016fd2
mov rbx, qword [0x1400b1100]
cmp dword [rbx], 0
js 0x140016fc1
mov ecx, 0x1204
call fcn.14005fa8f
mov dword [rbx], eax
lea rcx, str.Volume_size_is_too_large_for_ext2_or_ext3
call fcn.140036717
jmp 0x140016e90
mov rdx, rdi
mov rcx, r14
call fcn.1400522c1
mov rax, qword [rsp + 0x48]
test rax, rax
js 0x140016fee
cvtsi2ss xmm0, rax
jmp 0x140017003
mov rdx, rax
and eax, 1
shr rdx, 1
or rdx, rax
cvtsi2ss xmm0, rdx
addss xmm0, xmm0
mulss xmm0, dword [0x140087b68]
comiss xmm0, dword [0x140087b50]
jae 0x14001701b
cvttss2si rdx, xmm0
jmp 0x14001702d
subss xmm0, dword [0x140087b50]
cvttss2si rdx, xmm0
btc rdx, 0x3f
movsxd rsi, esi
mov rcx, r14
call fcn.140052304
imul rsi, rsi, 0x18
mov rcx, r14
mov dword [rsp + 0x1bc], 1
mov eax, dword [rsp + rsi + 0x84]
mov word [rsp + 0x1c8], ax
call fcn.14005223a
mov esi, dword [rsp + rsi + 0x88]
or edx, 0xffffffff
mov ecx, esi
shr rax, cl
mov ecx, 0xffffffff
cmp rcx, rax
jb 0x140017087
mov rcx, r14
call fcn.14005223a
mov ecx, esi
shr rax, cl
mov rdx, rax
mov ecx, dword [rsp + 0x188]
mov r8, qword [rsp + 0x48]
mov r9d, 0x400
mov dword [rsp + 0x170], edx
shl r9d, cl
lea rcx, str._d_possible_inodes_out_of__lld_blocks__block_size___d_
call fcn.140036717
mov rcx, r14
call fcn.1400522eb
lea rcx, str._lld_blocks___0.1f____reserved_for_the_super_user
movabs r8, 0x4014000000000000
mov rdx, rax
mov rax, qword [0x140087b70]
movq xmm2, rax
call fcn.140036717
mov edx, 0x40000005
or dword [rsp + 0x1d4], 3
mov eax, dword [rsp + 0x1cc]
shl rdx, 3
or qword [rsp + 0x1cc], rdx
cmp byte [rbx + 3], 0x32
je 0x14001710c
or eax, 0x2c
mov dword [rsp + 0x1cc], eax
lea rax, [rsp + 0x58]
mov r9, r15
mov r8, r14
mov edx, 0x24000
mov qword [rsp + 0x20], rax
mov rcx, r12
mov dword [rsp + 0x270], 0xc
call fcn.140059a30
mov esi, eax
test eax, eax
je 0x14001716b
mov rdi, qword [0x1400b1100]
cmp dword [rdi], 0
js 0x140017152
mov ecx, 0xd
call fcn.14005fa8f
mov dword [rdi], eax
mov ecx, esi
call fcn.140016880
mov rdx, rbx
lea rcx, str.Could_not_initialize__s_features:__s
mov r8, rax
jmp 0x14001785e
mov rax, qword [rsp + 0x58]
mov ecx, 0x10
mov rdi, qword [rax + 8]
movsxd rdx, dword [rdi + 0x18]
call sub.msvcrt.dll_calloc
mov r8d, 0x163
lea rdx, [0x14008765e]
lea rcx, str.buf___NULL
mov rsi, rax
test rax, rax
je 0x140016ec9
mov rcx, rdi
xor edx, edx
mov r9, rax
mov r8d, 0x10
call fcn.14005c9cb
mov rcx, rsi
mov edi, eax
call sub.msvcrt.dll_free
test edi, edi
je 0x1400171f4
mov rsi, qword [0x1400b1100]
cmp dword [rsi], 0
js 0x1400171db
mov ecx, 0x1d
call fcn.14005fa8f
mov dword [rsi], eax
mov ecx, edi
call fcn.140016880
mov rdx, rbx
lea rcx, str.Could_not_zero__s_superblock_area:__s
mov r8, rax
jmp 0x14001785e
mov rax, qword [rsp + 0x58]
mov rsi, qword [sym.imp.ole32.dll_CoCreateGuid]
mov rcx, qword [rax + 0x20]
add rcx, 0x68
call rsi
mov rcx, qword [rsp + 0x58]
call fcn.1400542de
mov rax, qword [rsp + 0x58]
mov rcx, qword [rax + 0x20]
mov byte [rcx + 0xfc], 1
add rcx, 0xec
call rsi
mov rbp, qword [rsp + 0x58]
cmp qword [rsp + 0x600], 0
mov rdi, qword [rbp + 0x20]
mov word [rdi + 0x36], 0xffff
mov dword [rdi + 0x48], 5
mov word [rdi + 0x3c], 1
je 0x1400172ab
mov rcx, qword [rsp + 0x600]
call sub.msvcrt.dll_strlen
lea rdx, [rdi + 0x78]
mov rsi, qword [rsp + 0x600]
lea rcx, [rax + 1]
mov eax, 0x10
mov rdi, rdx
cmp rcx, rax
cmova rcx, rax
mov ecx, ecx
rep movsb byte [rdi], byte [rsi]
mov rcx, qword [rsp + 0x600]
mov rsi, qword [rbp + 0x20]
call sub.msvcrt.dll_strlen
lea rdx, [rax + 1]
cmp rdx, 0x10
mov edx, 0xf
cmovae rax, rdx
mov byte [rsi + rax + 0x78], 0
mov rcx, qword [rsp + 0x58]
call fcn.140051980
mov esi, eax
test eax, eax
je 0x1400172ec
mov rdi, qword [0x1400b1100]
cmp dword [rdi], 0
js 0x1400172d3
mov ecx, 0xd
call fcn.14005fa8f
mov dword [rdi], eax
mov ecx, esi
call fcn.140016880
mov rdx, rbx
lea rcx, str.Could_not_allocate__s_tables:__s
mov r8, rax
jmp 0x14001785e
mov rcx, qword [rsp + 0x58]
lea rdx, [rcx + 0x50]
call fcn.1400592ce
mov ecx, eax
test eax, eax
je 0x140017317
call fcn.140016880
mov rdx, rbx
lea rcx, str.Could_not_set__s_cluster_bitmap:__s
mov r8, rax
jmp 0x14001785e
cmp byte [rbx + 3], 0x32
movss xmm0, dword [0x140087b58]
mov dword [0x1400fada0], 0
movss xmm6, dword [0x140087b54]
jne 0x14001733a
movaps xmm0, xmm6
mov rax, qword [rsp + 0x58]
movss xmm7, dword [0x140087b4c]
movss dword [0x14007b640], xmm0
mov eax, dword [rax + 0x30]
cvtsi2ss xmm2, rax
mov rdx, rax
divss xmm2, xmm7
comiss xmm2, xmm6
jbe 0x140017369
cvtss2sd xmm2, xmm2
jmp 0x140017371
movsd xmm2, qword [0x140087b60]
movq r8, xmm2
lea rcx, str.Creating__d_inode_sets:__1_marker___0.1f_set_s__
xor esi, esi
mov ebp, 0x400
call fcn.140036717
lea r13, [rsp + 0x50]
mov rax, qword [rsp + 0x58]
mov edx, dword [rax + 0x30]
cmp edx, esi
jle 0x140017470
mov rcx, rsi
call fcn.140016b3f
test eax, eax
jne 0x140016e90
mov rcx, qword [rsp + 0x58]
mov edx, esi
mov r14d, ebp
call fcn.1400525cb
mov qword [rsp + 0x50], rax
mov rax, qword [rsp + 0x58]
mov rdx, qword [rax + 0x20]
mov ecx, dword [rdx + 0x18]
mov edi, dword [rdx + 0x28]
mov edx, esi
shl r14d, cl
mov rcx, rax
call fcn.14005277c
sub edi, eax
mov eax, pe_nt_image_headers64
mov ecx, edi
mov rdi, qword [rsp + 0x58]
mov rdx, qword [rdi + 0x20]
cmp dword [rdx + 0x4c], 0
je 0x1400173fa
movzx eax, word [rdx + 0x58]
imul ecx, eax
mov edx, r14d
inc rsi
call fcn.14005a9f8
mov rdx, qword [rsp + 0x50]
mov rcx, rdi
mov r9, r13
mov dword [rsp + 0x3c], eax
mov r8d, eax
lea rax, [rsp + 0x3c]
mov qword [rsp + 0x20], rax
call fcn.14005de4a
mov edi, eax
test eax, eax
je 0x14001738e
mov rbx, qword [0x1400b1100]
cmp dword [rbx], 0
js 0x14001744b
mov ecx, 0x1d
call fcn.14005fa8f
mov dword [rbx], eax
mov ecx, edi
call fcn.140016880
mov r8d, dword [rsp + 0x3c]
mov rdx, qword [rsp + 0x50]
lea rcx, str._r_nCould_not_zero_inode_set_at_position__llu___d_blocks_:__s
mov r9, rax
call fcn.140036717
jmp 0x140016e90
lea rdi, [0x1400879b7]
mov rcx, rdi
call fcn.140036810
mov rcx, qword [rsp + 0x58]
xor r9d, r9d
mov r8d, 2
mov edx, 2
call fcn.14005d980
mov esi, eax
test eax, eax
je 0x1400174ce
mov rdi, qword [0x1400b1100]
cmp dword [rdi], 0
js 0x1400174b5
mov ecx, 0x570
call fcn.14005fa8f
mov dword [rdi], eax
mov ecx, esi
call fcn.140016880
mov rdx, rbx
lea rcx, str.Failed_to_create__s_root_dir:__s
mov r8, rax
jmp 0x14001785e
mov rcx, qword [rsp + 0x58]
lea r9, str.lostfound
xor r8d, r8d
mov edx, 2
mov esi, 3
mov dword [rcx + 0xa8], 0x3f
call fcn.14005d980
mov ebp, eax
test eax, eax
je 0x140017540
mov rsi, qword [0x1400b1100]
cmp dword [rsi], 0
js 0x140017514
mov ecx, 0x570
call fcn.14005fa8f
mov dword [rsi], eax
mov ecx, ebp
call fcn.140016880
mov rdx, rbx
lea rcx, str.Failed_to_create__s_lostfound_dir:__s
mov r8, rax
jmp 0x14001785e
cmp esi, eax
jge 0x140017559
mov edx, esi
mov r8d, 1
inc esi
call fcn.140051061
mov rcx, qword [rsp + 0x58]
mov eax, 0xb
mov rdx, qword [rcx + 0x20]
cmp dword [rdx + 0x4c], 0
je 0x14001752d
mov eax, dword [rdx + 0x54]
jmp 0x14001752d
or dword [rcx + 0x10], 0x12
mov rcx, qword [rcx + 0x48]
mov edx, 1
call fcn.140058c80
mov esi, eax
test eax, eax
je 0x14001759f
mov rbx, qword [0x1400b1100]
cmp dword [rbx], 0
js 0x140017589
mov ecx, 0x1d
call fcn.14005fa8f
mov dword [rbx], eax
mov ecx, esi
call fcn.140016880
lea rcx, str.Could_not_set_inode_bitmaps:__s
mov rdx, rax
jmp 0x140016e8b
mov rcx, qword [rsp + 0x58]
mov r8d, 1
mov edx, 1
call fcn.140051061
mov rcx, qword [rsp + 0x58]
xor edx, edx
call fcn.140051b8f
mov esi, eax
test eax, eax
je 0x1400175f4
mov rbx, qword [0x1400b1100]
cmp dword [rbx], 0
js 0x1400175de
mov ecx, 0x1d
call fcn.14005fa8f
mov dword [rbx], eax
mov ecx, esi
call fcn.140016880
lea rcx, str.Could_not_set_inode_stats:__s
mov rdx, rax
jmp 0x140016e8b
cmp byte [rbx + 3], 0x32
je 0x1400176ab
mov dword [0x1400fada0], 0x3f000000
mov rax, qword [rsp + 0x58]
mov rcx, qword [rax + 0x20]
call fcn.14005223a
mov rcx, rax
call fcn.14005dfc6
shr eax, 1
cvtsi2ss xmm2, eax
mov esi, eax
divss xmm2, xmm7
comiss xmm2, xmm6
jbe 0x140017635
cvtss2sd xmm2, xmm2
jmp 0x14001763d
movsd xmm2, qword [0x140087b60]
movq r8, xmm2
mov edx, esi
lea rcx, str.Creating__d_journal_blocks:__1_marker___0.1f_block_s__
call fcn.140036717
mov r8d, dword [rsp + 0x608]
mov rcx, qword [rsp + 0x58]
mov edx, esi
and r8d, 2
or r8d, 4
call fcn.14005e6a4
mov rcx, rdi
mov esi, eax
call fcn.140036810
test esi, esi
je 0x1400176ab
mov rdi, qword [0x1400b1100]
cmp dword [rdi], 0
js 0x140017692
mov ecx, 0x1d
call fcn.14005fa8f
mov dword [rdi], eax
mov ecx, esi
call fcn.140016880
mov rdx, rbx
lea rcx, str.Could_not_create__s_journal:__s
mov r8, rax
jmp 0x14001785e
bt dword [rsp + 0x608], 0x12
jae 0x140017822
xor edx, edx
xor ecx, ecx
mov byte [rsp + 0x77], 0
lea rsi, [rsp + 0x44]
movabs rax, 0xa6e6f696e75202f
mov dword [rsp + 0x40], edx
lea rdi, [rsp + 0xf2]
mov qword [rsp + 0x6f], rax
call qword [sym.imp.msvcrt.dll__time64]
mov ecx, 0x7e
lea r9, str.persistence.conf
mov r8d, 2
mov word [rsp + 0xf0], 0x81a4
mov rdx, rax
xor eax, eax
rep stosb byte [rdi], al
mov eax, 0xffffffff
mov qword [rsp + 0x20], rsi
mov rcx, qword [rsp + 0x58]
mov word [rsp + 0x10a], 1
cmp rdx, rax
mov dword [rsp + 0xf4], 8
cmovle rax, rdx
mov edx, 2
mov dword [rsp + 0xf8], eax
mov dword [rsp + 0xfc], eax
mov dword [rsp + 0x100], eax
call fcn.14005e985
mov qword [rsp + 0x20], rsi
mov rcx, qword [rsp + 0x58]
xor r9d, r9d
mov r8d, 0x11ed
mov edx, 2
call fcn.1400504e1
mov r9d, dword [rsp + 0x44]
mov dword [rsp + 0x20], 1
lea r8, str.persistence.conf
mov rcx, qword [rsp + 0x58]
mov edx, 2
call fcn.14005ce9a
mov edx, dword [rsp + 0x44]
mov rcx, qword [rsp + 0x58]
mov r8d, 1
call fcn.140051061
mov edx, dword [rsp + 0x44]
mov rcx, qword [rsp + 0x58]
lea r8, [rsp + 0xf0]
call fcn.14005c66b
mov edx, dword [rsp + 0x44]
mov rcx, qword [rsp + 0x58]
lea r9, [rsp + 0x60]
mov r8d, 1
call fcn.14005700f
mov rcx, qword [rsp + 0x60]
lea rdx, [rsp + 0x6f]
lea r9, [rsp + 0x40]
mov r8d, 8
call fcn.1400576ea
lea rdx, str.persistence.conf
test eax, eax
jne 0x14001780c
cmp dword [rsp + 0x40], 8
lea rcx, str.Created__s_file
je 0x140017813
lea rcx, str.Error:_Could_not_create__s_file
call fcn.140036717
mov rcx, qword [rsp + 0x60]
call fcn.140057227
mov rcx, qword [rsp + 0x58]
call fcn.140053f70
mov esi, eax
test eax, eax
je 0x140017868
mov rdi, qword [0x1400b1100]
cmp dword [rdi], 0
js 0x14001784a
mov ecx, 0x1d
call fcn.14005fa8f
mov dword [rdi], eax
mov ecx, esi
call fcn.140016880
mov rdx, rbx
lea rcx, str.Could_not_create__s_volume:__s
mov r8, rax
call fcn.140036717
jmp 0x140016e90
xor eax, eax
mov r9d, 0x64
mov r8d, 0x64
mov edx, 0xc91
mov dword [rsp + 0x20], eax
mov ecx, 4
mov ebx, 1
call fcn.140043acc
mov rcx, r12
call sub.msvcrt.dll_free
mov rcx, qword [rsp + 0x58]
call fcn.140057b99
nop
movups xmm6, xmmword [rsp + 0x570]
movups xmm7, xmmword [rsp + 0x580]
mov eax, ebx
add rsp, 0x598
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
ret
push r15
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x268
movabs rax, 0x20454d414e204f4e
mov dword [rsp + 0x2b0], ecx
mov r12d, r8d
mov rcx, r9
mov qword [rsp + 0x2b8], rdx
mov qword [rsp + 0x8c], rax
mov dword [rsp + 0x94], 0x202020
test r9, r9
je 0x140017934
mov r8d, 3
lea rdx, [0x140087b80]
call sub.msvcrt.dll_strncmp
mov dword [rsp + 0x5c], eax
test eax, eax
je 0x14001795b
mov rax, qword [0x1400b1100]
xor ebp, ebp
xor r12d, r12d
xor r13d, r13d
mov dword [rsp + 0x5c], ebp
xor edi, edi
xor ebx, ebx
xor esi, esi
mov dword [rax], 0xc0030057
xor r15d, r15d
jmp 0x140018328
xor r8d, r8d
mov r9d, 0xc96
mov edx, 1
xor ebx, ebx
lea rax, str.Large_FAT32
mov ecx, 1
mov qword [rsp + 0x20], rax
call fcn.14001d77b
mov dword [rsp + 0x20], ebx
xor r9d, r9d
xor r8d, r8d
mov edx, 1
or ecx, 0xffffffff
call fcn.140043acc
lea rcx, [rsp + 0x160]
call qword [sym.imp.KERNEL32.DLL_GetLocalTime]
mov ax, word [rsp + 0x16e]
mov r14w, word [rsp + 0x166]
mov r9d, 1
mov bp, word [rsp + 0x162]
mov rdx, qword [rsp + 0x2b8]
mov r8d, 1
mov word [rsp + 0x60], ax
mov eax, dword [rsp + 0x16c]
mov ecx, dword [rsp + 0x2b0]
mov word [rsp + 0x6c], ax
mov ax, word [rsp + 0x16a]
mov word [rsp + 0x70], ax
mov eax, dword [rsp + 0x168]
mov word [rsp + 0x74], ax
mov eax, dword [rsp + 0x160]
mov word [rsp + 0x76], ax
mov rax, qword [0x1400b1e40]
cmp dword [rax], 0
mov dword [rsp + 0x20], 0
je 0x140017a2b
call fcn.14000dd40
jmp 0x140017a30
call fcn.14000dce7
mov rbx, qword [0x1400b1100]
mov r15, rax
lea rax, [rax - 1]
cmp dword [rbx], 0
js 0x140017a5b
cmp rax, 0xfffffffffffffffd
jbe 0x140017a6a
lea rcx, str.Invalid_logical_volume_handle
call fcn.140036717
mov dword [rbx], 0xc0030006
xor r12d, r12d
xor r13d, r13d
xor edi, edi
xor ebx, ebx
jmp 0x140017dc0
mov rcx, r15
lea rdi, [rsp + 0x88]
call fcn.14000f08c
xor r11d, r11d
xor r9d, r9d
xor r8d, r8d
lea rax, [rsp + 0x98]
mov qword [rsp + 0x38], r11
mov rsi, qword [sym.imp.KERNEL32.DLL_DeviceIoControl]
mov edx, 0x70000
mov qword [rsp + 0x30], rdi
mov rcx, r15
mov dword [rsp + 0x28], 0x18
mov qword [rsp + 0x20], rax
call rsi
test eax, eax
jne 0x140017b2d
xor r10d, r10d
xor r9d, r9d
xor r8d, r8d
mov qword [rsp + 0x30], rdi
lea rax, [rsp + 0x160]
mov qword [rsp + 0x38], r10
mov edx, 0x700a0
mov rcx, r15
mov dword [rsp + 0x28], 0x100
mov qword [rsp + 0x20], rax
call rsi
test eax, eax
jne 0x140017b0d
call fcn.140036bd7
lea rcx, str.IOCTL_DISK_GET_DRIVE_GEOMETRY_error:__s
mov rdx, rax
call fcn.140036717
lea rcx, str.Failed_to_get_device_geometry__both_regular_and__ex_
jmp 0x140017bef
mov rax, qword [rsp + 0x170]
movups xmm0, xmmword [rsp + 0x160]
mov qword [rsp + 0xa8], rax
movups xmmword [rsp + 0x98], xmm0
cmp dword [rsp + 0xac], 0x1ff
ja 0x140017b45
mov dword [rsp + 0xac], 0x200
mov rbx, qword [0x1400b1100]
cmp dword [rbx], 0
js 0x140017a5b
xor r9d, r9d
xor r8d, r8d
mov rsi, qword [sym.imp.KERNEL32.DLL_DeviceIoControl]
mov rcx, r15
lea rdi, [rsp + 0x88]
lea rax, [rsp + 0xb0]
mov qword [rsp + 0x38], r9
xor r9d, r9d
mov qword [rsp + 0x30], rdi
mov edx, 0x74004
mov dword [rsp + 0x28], 0x20
mov qword [rsp + 0x20], rax
call rsi
test eax, eax
jne 0x140017c45
xor r8d, r8d
xor r9d, r9d
mov qword [rsp + 0x30], rdi
mov edx, 0x70048
lea rax, [rsp + 0xd0]
mov qword [rsp + 0x38], r8
mov rcx, r15
xor r8d, r8d
mov dword [rsp + 0x28], 0x90
mov qword [rsp + 0x20], rax
call rsi
test eax, eax
jne 0x140017bff
call fcn.140036bd7
lea rcx, str.IOCTL_DISK_GET_PARTITION_INFO_error:__s
mov rdx, rax
call fcn.140036717
lea rcx, str.Failed_to_get_partition_info__both_regular_and__ex_
call fcn.140036717
mov dword [rbx], 0xc0030032
jmp 0x140017a5b
xor edx, edx
mov rax, qword [rsp + 0xd8]
xor ecx, ecx
mov qword [rsp + 0xc4], rdx
mov rdx, qword [rsp + 0xe0]
mov dword [rsp + 0xcc], ecx
mov ecx, dword [rsp + 0xac]
mov qword [rsp + 0xb8], rdx
cqo
mov qword [rsp + 0xb0], rax
idiv rcx
mov dword [rsp + 0xc0], eax
mov rbx, qword [0x1400b1100]
mov eax, dword [rbx]
shr eax, 0x1f
mov dword [rsp + 0x68], eax
jne 0x140017a5b
mov r9, qword [rsp + 0xb8]
mov ecx, dword [rsp + 0xac]
mov rax, r9
mov rsi, rcx
cqo
idiv rcx
mov qword [rsp + 0x50], rax
cmp rax, 0xffff
ja 0x140017c99
lea rcx, str.This_drive_is_too_small_for_FAT32___there_must_be_at_least_64K_clusters
call fcn.140036717
mov dword [rbx], 0xe0031203
jmp 0x140017a5b
mov rdi, qword [rsp + 0x50]
mov eax, 0xfffffffe
cmp rax, rdi
jae 0x140017cbf
lea rcx, str.This_drive_is_too_big_for_FAT32___max_2TB_supported
call fcn.140036717
mov dword [rbx], 0xe0031204
jmp 0x140017a5b
test r12d, r12d
jne 0x140017d50
mov r12d, 0x200
cmp r9, 0x3ffffff
jle 0x140017d50
mov r12d, 0x400
cmp r9, 0x7ffffff
jle 0x140017d50
mov r12d, 0x800
cmp r9, 0xfffffff
jle 0x140017d50
movabs rax, 0x1ffffffff
mov r12d, 0x1000
cmp r9, rax
jle 0x140017d50
movabs rax, 0x3ffffffff
mov r12d, 0x2000
cmp r9, rax
jle 0x140017d50
movabs rax, 0x7ffffffff
mov r12d, 0x4000
cmp r9, rax
jle 0x140017d50
movabs rax, 0x1ffffffffff
mov r12d, 0x10000
cmp r9, rax
mov eax, 0x8000
cmovle r12d, eax
mov eax, esi
mov edx, 1
mov ecx, esi
mov qword [rsp + 0x78], r9
mov qword [rsp + 0x48], rax
call sub.msvcrt.dll_calloc
mov edx, 1
mov ecx, esi
mov rbx, rax
call sub.msvcrt.dll_calloc
mov edx, 1
mov ecx, esi
mov rdi, rax
call sub.msvcrt.dll_calloc
test rbx, rbx
mov r13, rax
sete al
test rdi, rdi
sete dl
or al, dl
jne 0x140017da3
test r13, r13
mov r9, qword [rsp + 0x78]
jne 0x140017dc7
lea rcx, str.Failed_to_allocate_memory
call fcn.140036717
mov eax, 0xc0030008
mov rdx, qword [0x1400b1100]
mov dword [rdx], eax
xor r12d, r12d
xor esi, esi
jmp 0x140018328
mov eax, dword [rsp + 0x60]
mov r8d, 0xa
xor edx, edx
mov ecx, ebp
shl ecx, 8
mov word [rbx], 0x58eb
div r8w
mov edx, dword [rsp + 0x70]
mov byte [rbx + 2], 0x90
mov word [rbx + 0xb], si
mov word [rbx + 0xe], 0x20
mov dword [rbx + 0x30], 0x60001
mov word [rbx + 0x40], pe_nt_image_headers64
mov byte [rbx + 0x42], 0x29
add dx, word [rsp + 0x76]
add ecx, eax
mov eax, dword [rsp + 0x6c]
add ecx, r14d
shl eax, 8
add ecx, eax
mov eax, dword [rsp + 0x74]
movzx ecx, cx
shl eax, 8
add edx, eax
shl edx, 0x10
lea eax, [rcx + rdx]
xor edx, edx
mov dword [rsp + 0x60], eax
movabs rax, 0x312e344e4957534d
mov qword [rbx + 3], rax
mov eax, r12d
div esi
mov byte [rbx + 0xd], al
mov r14d, eax
movabs rax, 0xf80000000002
mov qword [rbx + 0x10], rax
mov eax, dword [rsp + 0xa8]
movzx ecx, r14b
mov word [rbx + 0x18], ax
mov eax, dword [rsp + 0xa4]
mov word [rbx + 0x1a], ax
mov eax, dword [rsp + 0xc0]
mov dword [rbx + 0x1c], eax
mov eax, dword [rsp + 0x50]
lea edx, [rax - 0x20]
mov dword [rbx + 0x20], eax
lea rax, [rcx + rcx]
add rax, rdx
mov r11, rdx
mov edx, esi
imul rcx, rdx
xor edx, edx
shr rcx, 2
add rcx, 2
div rcx
lea rbp, [rax + 1]
mov eax, 1
shl rax, 0x21
mov dword [rbx + 0x24], ebp
mov qword [rbx + 0x28], rax
mov eax, dword [rsp + 0x60]
mov dword [rbx + 0x43], eax
mov rax, qword [rsp + 0x8c]
mov qword [rbx + 0x47], rax
mov eax, dword [rsp + 0x93]
mov dword [rbx + 0x4e], eax
movabs rax, 0x2020203233544146
mov qword [rbx + 0x52], rax
mov word [rbx + 0x1fe], 0xaa55
cmp esi, 0x200
je 0x140017eff
lea eax, [rsi - 2]
mov byte [rbx + rax], 0x55
lea eax, [rsi - 1]
mov byte [rbx + rax], 0xaa
movabs rax, 0xfffffff0ffffff8
lea r10d, [rbp + rbp]
mov dword [rdi], 0x41615252
mov qword [r13], rax
mov eax, r11d
mov dword [rdi + 0x1e4], 0x61417272
sub eax, r10d
mov qword [rdi + 0x1e8], 0xffffffffffffffff
mov dword [rdi + 0x1fc], 0xaa550000
mov dword [r13 + 8], 0xfffffff
cmp r12d, esi
jae 0x140017f64
mov r8d, 0x172
lea rdx, str.format_fat32.c
lea rcx, str.SectorsPerCluster___0
call qword [sym.imp.msvcrt.dll__wassert]
xor edx, edx
div r14d
mov dword [rsp + 0x6c], eax
mov r12d, eax
cmp eax, 0xfffffff
jbe 0x140017f95
lea rcx, str.This_drive_has_more_than_228_clusters__try_to_specify_a_larger_cluster_size_or_use_the_default
call fcn.140036717
mov rax, qword [0x1400b1100]
mov dword [rax], 0xc0031203
jmp 0x140017dbd
cmp r12, 0xffff
ja 0x140017fb4
lea rcx, str.FAT32_must_have_at_least_65536_clusters__try_to_specify_a_smaller_cluster_size_or_use_the_default
call fcn.140036717
mov eax, 0xc0031203
jmp 0x140017db4
lea eax, [rsi - 1]
xor edx, edx
lea rax, [rax + r12*4]
div qword [rsp + 0x48]
cmp rbp, rax
jae 0x140017fdd
lea rcx, str.This_drive_is_too_big_for_large_FAT32_format
call fcn.140036717
mov eax, 0xe0031204
jmp 0x140017db4
mov rcx, r9
xor r8d, r8d
mov edx, 1
mov dword [rsp + 0x70], r10d
call fcn.140037ab9
mov r8d, dword [rsp + 0x50]
lea rcx, str.Size_:__s__lu_sectors
mov rdx, rax
call fcn.140036717
mov edx, esi
mov r8d, esi
lea rcx, str.Cluster_size__lu_bytes___lu_bytes_per_sector
imul edx, r14d
call fcn.140036717
mov edx, dword [rsp + 0x60]
movzx r8d, word [rsp + 0x60]
lea rcx, str.Volume_ID_is__x:_x
shr edx, 0x10
call fcn.140036717
mov r9d, 2
mov r8d, ebp
mov edx, 0x20
lea rcx, str._lu_Reserved_sectors___lu_sectors_per_FAT___lu_FATs
call fcn.140036717
mov rdx, r12
lea rcx, str._llu_Total_clusters
call fcn.140036717
mov edx, dword [rsp + 0x6c]
lea rcx, str._lu_Free_clusters
mov dword [rdi + 0x1ec], 3
dec edx
mov dword [rdi + 0x1e8], edx
call fcn.140036717
mov r10d, dword [rsp + 0x70]
lea rcx, str.Clearing_out__d_sectors_for_reserved_sectors__FATs_and_root_cluster...
lea r14d, [r10 + r14 + 0x20]
mov edx, r14d
call fcn.140036717
mov edx, pe_nt_image_headers64
mov ecx, esi
call sub.msvcrt.dll_calloc
mov r12, rax
test rax, rax
je 0x140017da3
mov eax, r14d
shl esi, 7
sub rax, 0xffffffffffffff80
mov qword [rsp + 0x50], rax
lea eax, [r14 + 0x7f]
cmp dword [rsp + 0x68], eax
jae 0x140018152
xor eax, eax
mov r8d, dword [rsp + 0x68]
mov r9, qword [rsp + 0x50]
mov edx, 0xc91
mov dword [rsp + 0x20], eax
mov ecx, 4
mov qword [rsp + 0x60], r8
call fcn.140043acc
mov rax, qword [0x1400b1100]
mov r8, qword [rsp + 0x60]
mov eax, dword [rax]
test eax, eax
jns 0x14001810d
cmp ax, 0x4c7
je 0x140017dc0
mov qword [rsp + 0x20], r12
mov rdx, qword [rsp + 0x48]
mov r9d, pe_nt_image_headers64
mov rcx, r15
call fcn.14006a8bf
cmp rax, rsi
je 0x140018148
lea rcx, str.Error_clearing_reserved_sectors
call fcn.140036717
mov rax, qword [0x1400b1100]
mov dword [rax], 0xc003001d
jmp 0x140017dc0
sub dword [rsp + 0x68], 0xffffff80
jmp 0x1400180bf
lea rcx, str.Initializing_reserved_sectors_and_FATs...
lea rsi, str.FAT__d_sector_at_address:__d
add ebp, 0x20
call fcn.140036717
mov qword [rsp + 0x20], rbx
xor r8d, r8d
mov rcx, r15
mov rdx, qword [rsp + 0x48]
mov r9d, 1
call fcn.14006a8bf
mov qword [rsp + 0x20], rdi
mov rdx, qword [rsp + 0x48]
mov r9d, 1
mov r8d, 1
mov rcx, r15
call fcn.14006a8bf
mov qword [rsp + 0x20], rbx
mov rdx, qword [rsp + 0x48]
mov r9d, 1
mov r8d, 6
mov rcx, r15
call fcn.14006a8bf
mov qword [rsp + 0x20], rdi
mov rdx, qword [rsp + 0x48]
mov r9d, 1
mov r8d, 7
mov rcx, r15
call fcn.14006a8bf
xor edx, edx
mov r8d, 0x20
mov rcx, rsi
call fcn.140036717
mov qword [rsp + 0x20], r13
mov rdx, qword [rsp + 0x48]
mov r9d, 1
mov r8d, 0x20
mov rcx, r15
call fcn.14006a8bf
mov r8d, ebp
mov edx, 1
mov rcx, rsi
call fcn.140036717
mov qword [rsp + 0x20], r13
movsxd r8, ebp
mov rcx, r15
mov rdx, qword [rsp + 0x48]
mov r9d, 1
call fcn.14006a8bf
bt dword [rsp + 0x2d8], 0x11
jb 0x140018271
xor r8d, r8d
mov ecx, 1
mov r9d, 0xc9d
mov edx, 1
call fcn.14001d77b
mov rcx, r15
call fcn.1400138e3
test eax, eax
jne 0x140018271
lea rcx, str.Could_not_write_partition_boot_record___drive_may_not_boot...
call fcn.140036717
mov ecx, 0xceb
call fcn.14001d5c1
xor r8d, r8d
xor edx, edx
mov r9d, 0xc95
mov qword [rsp + 0x20], rax
mov ecx, 1
call fcn.14001d77b
lea rcx, str.Setting_label...
call fcn.140036717
mov rcx, r15
call qword [sym.imp.KERNEL32.DLL_CloseHandle]
mov rax, qword [0x1400b1e40]
mov rdx, qword [rsp + 0x2b8]
mov r9d, 1
mov ecx, dword [rsp + 0x2b0]
mov r8d, 1
cmp dword [rax], 0
je 0x1400182d8
call fcn.14000c95a
jmp 0x1400182dd
call fcn.14000caf6
mov rsi, rax
test rax, rax
jne 0x1400182fb
call fcn.140036bd7
lea rcx, str.Could_not_set_label:__s
mov rdx, rax
call fcn.140036717
jmp 0x140018310
mov rdx, qword [rsp + 0x2d0]
mov rcx, rax
call qword [sym.imp.KERNEL32.DLL_SetVolumeLabelA]
test eax, eax
je 0x1400182e5
lea rcx, str.Format_completed.
or r15, 0xffffffffffffffff
call fcn.140036717
mov dword [rsp + 0x5c], 1
mov rcx, rsi
call sub.msvcrt.dll_free
lea rax, [r15 - 1]
cmp rax, 0xfffffffffffffffd
ja 0x140018343
mov rcx, r15
call qword [sym.imp.KERNEL32.DLL_CloseHandle]
mov rcx, rbx
call sub.msvcrt.dll_free
mov rcx, rdi
call sub.msvcrt.dll_free
mov rcx, r13
call sub.msvcrt.dll_free
mov rcx, r12
call sub.msvcrt.dll_free
mov eax, dword [rsp + 0x5c]
add rsp, 0x268
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
ret