Function at 0x14000db80
Capabilities:
Get file size
Resolve function by parsing pe exports

Disassembly:
push r15
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x158
mov r14, qword [rsp + 0x1c0]
mov edi, dword [rsp + 0x1c8]
lea eax, [rcx - 0x80]
mov r12d, ecx
mov r13, rdx
mov ebx, r8d
cmp eax, 0x80
ja 0x14000dbca
cmp r9w, 8
ja 0x14000dbca
test r8d, r8d
je 0x14000dbdb
lea eax, [r8 - 1]
test eax, r8d
je 0x14000dbdb
mov dword [0x1400cfd94], 0xc0030057
xor ebp, ebp
jmp 0x14000e88c
movzx eax, r9w
mov dword [0x1400cfdb4], eax
cmp r9w, 1
jne 0x14000dc4b
mov rcx, qword [0x1400b5f80]
mov edx, 1
shl rdx, 0x23
cmp qword [rcx], rdx
jg 0x14000dc14
mov rcx, qword [0x1400b6580]
mov edx, edi
and edx, 0x10000
or edx, dword [rcx]
je 0x14000dc91
mov r9, qword [0x14007d928]
mov r8d, ebx
mov rdx, r13
mov ecx, r12d
mov dword [rsp + 0x1c8], edi
mov qword [rsp + 0x1c0], r14
add rsp, 0x158
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
jmp 0x140012590
sub r9d, 6
cmp r9w, 2
ja 0x14000dc91
lea rdx, [0x14007d920]
mov r8d, ebx
mov ecx, r12d
mov r9, qword [rdx + rax*8]
mov rdx, r13
mov dword [rsp + 0x1c8], edi
mov qword [rsp + 0x1c0], r14
add rsp, 0x158
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
jmp 0x140011992
mov rdx, qword [0x1400b6bc0]
mov rcx, r14
mov ebp, dword [rdx]
lea rdx, [0x14007d920]
mov rsi, qword [rdx + rax*8]
test ebp, ebp
je 0x14000e559
call fcn.14000ccb2
mov rcx, rsi
mov r15, rax
call fcn.14000ccb2
mov rdx, qword [0x14007d940]
mov rcx, rsi
mov qword [rsp + 0x60], rax
call fcn.1400797d0
test eax, eax
jne 0x14000dd14
mov rax, qword [0x1400b6400]
mov rdx, qword [0x1400b6410]
mov eax, dword [rax]
mov edx, dword [rdx]
mov ecx, eax
or ecx, edx
je 0x14000dd14
mov dword [rsp + 0x30], edx
xor r8d, r8d
xor edx, edx
mov ecx, 1
mov dword [rsp + 0x28], eax
mov r9d, 0xc94
mov qword [rsp + 0x20], rsi
call fcn.14001ea8e
jmp 0x14000dd2e
mov qword [rsp + 0x20], rsi
mov r9d, 0xc96
xor r8d, r8d
xor edx, edx
mov ecx, 1
call fcn.14001ea8e
mov rdx, rsi
lea rcx, str.Formatting_to__s__using_VDS_
call fcn.140038472
xor r10d, r10d
xor r9d, r9d
xor r8d, r8d
mov dword [rsp + 0x20], r10d
mov edx, 1
or ecx, 0xffffffff
call fcn.140045210
mov r9d, 1
mov rdx, r13
mov ecx, r12d
mov r8d, 1
call fcn.140007977
mov rcx, rax
mov qword [rsp + 0x68], rax
call fcn.14000ccb2
mov rsi, rax
test rax, rax
jne 0x14000dd9f
lea rcx, str.Could_not_read_volume_name
call fcn.140038472
mov dword [0x1400cfd94], 0xc003001f
jmp 0x14000e039
mov edx, 6
xor ecx, ecx
call qword [sym.imp.ole32.dll_CoTaskMemFree]
xor ecx, ecx
xor r8d, r8d
xor r9d, r9d
mov qword [rsp + 0x40], rcx
or edx, 0xffffffff
xor ecx, ecx
mov dword [rsp + 0x38], r8d
xor r8d, r8d
mov qword [rsp + 0x30], r9
xor r9d, r9d
mov dword [rsp + 0x28], 3
mov dword [rsp + 0x20], 2
call qword [0x14011cc60]
lea rax, [rsp + 0x98]
xor edx, edx
mov rcx, qword [0x1400b5dc0]
mov qword [rsp + 0x20], rax
mov r9, qword [0x1400b5ec0]
mov r8d, 0x14
call qword [sym.imp.ole32.dll_CoInitializeEx]
mov ecx, eax
test eax, eax
je 0x14000de37
call qword [0x14011c730]
mov dword [0x1400cfd94], 0xc003001f
call fcn.14003893c
lea rcx, str.Could_not_create_VDS_Loader_Instance:__s
mov rdx, rax
jmp 0x14000e029
mov rcx, qword [rsp + 0x98]
lea r8, [rsp + 0xa0]
lea rdx, [0x14008ca38]
mov rax, qword [rcx]
call qword [rax + 0x18]
mov rcx, qword [rsp + 0x98]
mov ebp, eax
mov rax, qword [rcx]
call qword [rax + 0x10]
test ebp, ebp
je 0x14000de8e
mov ecx, ebp
call qword [0x14011c730]
mov dword [0x1400cfd94], 0xc003001f
call fcn.14003893c
lea rcx, str.Could_not_load_VDS_Service:__s
mov rdx, rax
jmp 0x14000e029
mov rcx, qword [rsp + 0xa0]
mov rax, qword [rcx]
call qword [rax + 0x20]
mov ecx, eax
test eax, eax
je 0x14000dec6
call qword [0x14011c730]
mov dword [0x1400cfd94], 0xc003001f
call fcn.14003893c
lea rcx, str.VDS_Service_is_not_ready:__s
mov rdx, rax
jmp 0x14000e029
mov rcx, qword [rsp + 0xa0]
lea r8, [rsp + 0xa8]
mov edx, 1
mov rax, qword [rcx]
call qword [rax + 0x30]
mov ecx, eax
test eax, eax
jne 0x14000df0e
lea rax, [rsp + 0x88]
lea r13, [rsp + 0xd0]
mov qword [rsp + 0x58], rax
lea rax, [rsp + 0xb0]
mov qword [rsp + 0x70], rax
jmp 0x14000dfa4
call qword [0x14011c730]
mov dword [0x1400cfd94], 0xc003001f
call fcn.14003893c
lea rcx, str.Could_not_query_VDS_Service_Providers:__s
mov rdx, rax
jmp 0x14000e029
mov rcx, qword [rsp + 0xd8]
lea rdx, [rsp + 0xe0]
mov rax, qword [rcx]
call qword [rax + 0x28]
mov ecx, eax
test eax, eax
jne 0x14000e15e
mov r12, qword [0x14011cc68]
mov rcx, qword [rsp + 0xe0]
mov r9, qword [rsp + 0x58]
mov edx, 1
lea r8, [rsp + 0xe8]
mov rax, qword [rcx]
call qword [rax + 0x18]
test eax, eax
je 0x14000e182
mov rcx, qword [rsp + 0xc8]
mov r9, qword [rsp + 0x58]
mov r8, r13
mov edx, 1
mov rax, qword [rcx]
call qword [rax + 0x18]
test eax, eax
je 0x14000e0ed
mov edx, 1
mov r9, qword [rsp + 0x58]
mov r8, qword [rsp + 0x70]
mov rcx, qword [rsp + 0xa8]
mov rax, qword [rcx]
call qword [rax + 0x18]
mov edx, eax
mov eax, dword [0x1400cfd94]
test edx, edx
jne 0x14000e50e
test eax, eax
js 0x14000e033
mov rcx, qword [rsp + 0xb0]
mov rdx, qword [0x1400b5eb0]
lea r8, [rsp + 0xb8]
mov rax, qword [rcx]
call qword [rax]
mov rcx, qword [rsp + 0xb0]
mov r12d, eax
mov rax, qword [rcx]
call qword [rax + 0x10]
test r12d, r12d
je 0x14000e040
mov ecx, r12d
call qword [0x14011c730]
mov dword [0x1400cfd94], 0xc003001f
call fcn.14003893c
lea rcx, str.Could_not_get_VDS_Provider:__s
mov rdx, rax
call fcn.140038472
jmp 0x14000e50e
cmp ax, 0x4c7
jne 0x14000dfd5
xor ebp, ebp
jmp 0x14000e52a
mov rcx, qword [rsp + 0xb8]
mov rdx, qword [0x1400b5ed0]
lea r8, [rsp + 0xc0]
mov rax, qword [rcx]
call qword [rax]
mov rcx, qword [rsp + 0xb8]
mov r12d, eax
mov rax, qword [rcx]
call qword [rax + 0x10]
test r12d, r12d
je 0x14000e096
mov ecx, r12d
call qword [0x14011c730]
mov dword [0x1400cfd94], 0xc003001f
call fcn.14003893c
lea rcx, str.Could_not_get_VDS_Software_Provider:__s
mov rdx, rax
jmp 0x14000e029
mov rcx, qword [rsp + 0xc0]
lea rdx, [rsp + 0xc8]
mov rax, qword [rcx]
call qword [rax + 0x18]
mov rcx, qword [rsp + 0xc0]
mov r12d, eax
mov rax, qword [rcx]
call qword [rax + 0x10]
test r12d, r12d
je 0x14000df81
mov ecx, r12d
call qword [0x14011c730]
mov dword [0x1400cfd94], 0xc003001f
call fcn.14003893c
lea rcx, str.Could_not_get_VDS_Software_Provider_Packs:__s
mov rdx, rax
jmp 0x14000e029
mov eax, dword [0x1400cfd94]
test eax, eax
jns 0x14000e101
cmp ax, 0x4c7
je 0x14000e50e
mov rcx, qword [rsp + 0xd0]
mov rdx, qword [0x1400b5ea0]
lea r8, [rsp + 0xd8]
mov rax, qword [rcx]
call qword [rax]
mov rcx, qword [rsp + 0xd0]
mov r12d, eax
mov rax, qword [rcx]
call qword [rax + 0x10]
test r12d, r12d
je 0x14000df32
mov ecx, r12d
call qword [0x14011c730]
mov dword [0x1400cfd94], 0xc003001f
call fcn.14003893c
lea rcx, str.Could_not_query_VDS_Software_Provider_Pack:__s
mov rdx, rax
jmp 0x14000e029
call qword [0x14011c730]
mov dword [0x1400cfd94], 0xc003001f
call fcn.14003893c
lea rcx, str.Could_not_query_VDS_volumes:__s
mov rdx, rax
jmp 0x14000e029
mov eax, dword [0x1400cfd94]
mov dword [rsp + 0x8c], 0x80004005
test eax, eax
jns 0x14000e1a1
cmp ax, 0x4c7
je 0x14000e50e
mov rcx, qword [rsp + 0xe8]
mov rdx, qword [0x1400b5ee0]
lea r8, [rsp + 0xf8]
mov rax, qword [rcx]
call qword [rax]
mov ecx, eax
test eax, eax
je 0x14000e1e7
call qword [0x14011c730]
mov dword [0x1400cfd94], 0xc003001f
call fcn.14003893c
lea rcx, str.Could_not_query_VDS_Volume_Interface:__s
mov rdx, rax
jmp 0x14000e029
mov rcx, qword [rsp + 0xf8]
lea rdx, [rsp + 0x110]
mov rax, qword [rcx]
call qword [rax + 0x18]
mov ecx, eax
test eax, eax
je 0x14000e23c
cmp eax, 0x42715
je 0x14000e23c
call qword [0x14011c730]
mov rcx, qword [rsp + 0xf8]
mov dword [0x1400cfd94], 0xc003001f
mov rax, qword [rcx]
call qword [rax + 0x10]
call fcn.14003893c
lea rcx, str.Could_not_query_VDS_Volume_Properties:__s
mov rdx, rax
jmp 0x14000e2dd
mov rcx, qword [rsp + 0x140]
call r12
mov rcx, qword [rsp + 0xf8]
mov rdx, qword [0x1400b5ef0]
lea r8, [rsp + 0x108]
mov rax, qword [rcx]
call qword [rax]
mov rcx, qword [rsp + 0xf8]
mov ebp, eax
mov rax, qword [rcx]
call qword [rax + 0x10]
test ebp, ebp
je 0x14000e29a
mov ecx, ebp
call qword [0x14011c730]
mov dword [0x1400cfd94], 0xc003001f
call fcn.14003893c
lea rcx, str.Could_not_access_VDS_VolumeMF3_interface:__s
mov rdx, rax
jmp 0x14000e2dd
mov rcx, qword [rsp + 0x108]
lea rdx, [rsp + 0xf0]
lea r8, [rsp + 0x94]
mov rax, qword [rcx]
call qword [rax + 0x18]
mov ecx, eax
test eax, eax
je 0x14000e2e7
call qword [0x14011c730]
mov dword [0x1400cfd94], 0xc003001f
call fcn.14003893c
lea rcx, str.Could_not_query_VDS_VolumeGuidPathnames:__s
mov rdx, rax
call fcn.140038472
jmp 0x14000df59
cmp dword [rsp + 0x94], 1
jbe 0x14000e308
mov rax, qword [rsp + 0xf0]
lea rcx, str.Notice:_Volume__S_has_more_than_one_GUID...
mov rdx, qword [rax]
call fcn.140038472
mov rax, qword [rsp + 0xf0]
mov rcx, rsi
mov rdx, qword [rax]
call fcn.140079858
mov rcx, qword [rsp + 0xf0]
mov dword [rsp + 0x7c], eax
call r12
mov eax, dword [rsp + 0x7c]
test eax, eax
jne 0x14000df59
mov rdx, qword [0x14007d938]
mov rcx, r14
xor r12d, r12d
call fcn.1400797d0
test eax, eax
jne 0x14000e35b
lea rcx, str.UseUdfVersion
call fcn.14000cef2
mov r12d, eax
cmp ebx, 0x1ff
ja 0x14000e373
lea rcx, str.Using_default_cluster_size
xor ebx, ebx
call fcn.140038472
jmp 0x14000e381
mov edx, ebx
lea rcx, str.Using_cluster_size:__d_bytes
call fcn.140038472
mov ebp, edi
lea rdx, str.Slow
mov dword [0x1400cfdbc], 0
and ebp, 2
je 0x14000e3a0
lea rdx, str.Quick
lea rcx, str._s_format_was_selected
call fcn.140038472
test edi, 4
je 0x14000e3c0
lea rcx, str.NTFS_compression_is_enabled
call fcn.140038472
mov rcx, qword [rsp + 0x108]
lea rdx, [rsp + 0x100]
mov r9d, ebx
movzx r8d, r12w
lea rbx, [rsp + 0x90]
mov rax, qword [rcx]
mov qword [rsp + 0x30], rdx
mov dword [rsp + 0x28], edi
mov rdx, qword [rsp + 0x60]
lea rdi, [rsp + 0x8c]
mov qword [rsp + 0x20], r15
call qword [rax + 0x20]
mov r12, qword [0x14011c770]
mov r13d, eax
test r13d, r13d
js 0x14000e860
mov rcx, qword [rsp + 0x100]
cmp dword [0x1400cfd94], 0
mov rax, qword [rcx]
jns 0x14000e42f
call qword [rax + 0x18]
jmp 0x14000e4d2
mov r8, rbx
mov rdx, rdi
call qword [rax + 0x28]
mov r13d, eax
test eax, eax
js 0x14000e4c5
mov r8d, dword [rsp + 0x90]
test ebp, ebp
je 0x14000e491
cmp r8d, 0x64
mov r9d, 0xc92
mov ecx, 1
mov dword [rsp + 0x28], 2
sbb eax, eax
xor r8d, r8d
xor edx, edx
add eax, 2
mov dword [rsp + 0x20], eax
call fcn.14001ea8e
mov eax, dword [rsp + 0x90]
mov ecx, 5
cvtsi2ss xmm1, rax
call fcn.1400450da
jmp 0x14000e4ac
xor edx, edx
mov r9d, 0x64
mov ecx, 4
mov dword [rsp + 0x20], edx
mov edx, 0xc91
call fcn.140045210
mov r13d, dword [rsp + 0x8c]
test r13d, r13d
je 0x14000e4d2
cmp r13d, 0x80042409
jne 0x14000e4c5
xor r13d, r13d
mov ecx, 0x1f4
call r12
jmp 0x14000e40a
mov rcx, qword [rsp + 0x100]
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [rsp + 0x108]
mov rax, qword [rcx]
call qword [rax + 0x10]
cmp dword [0x1400cfd94], 0
js 0x14000e039
lea rcx, [0x14008ccb5]
mov ebp, 1
call fcn.140038472
jmp 0x14000e52a
cmp dword [0x1400cfd94], 0
jne 0x14000e039
mov dword [0x1400cfd94], 0xc0030003
jmp 0x14000e039
mov rcx, qword [rsp + 0x68]
call fcn.1400796c8
mov rcx, rsi
call fcn.1400796c8
mov rcx, r15
call fcn.1400796c8
mov rcx, qword [rsp + 0x60]
call fcn.1400796c8
call qword [0x14011cc70]
jmp 0x14000e88c
call fcn.14000ccb2
mov rcx, rsi
mov qword [rsp + 0x60], rax
call fcn.14000ccb2
mov rdx, qword [0x14007d940]
mov rcx, rsi
mov qword [rsp + 0x68], rax
call fcn.1400797d0
test eax, eax
jne 0x14000e5bf
mov rax, qword [0x1400b6400]
mov rdx, qword [0x1400b6410]
mov eax, dword [rax]
mov edx, dword [rdx]
mov ecx, eax
or ecx, edx
je 0x14000e5bf
mov dword [rsp + 0x30], edx
xor r8d, r8d
xor edx, edx
mov ecx, 1
mov dword [rsp + 0x28], eax
mov r9d, 0xc94
mov qword [rsp + 0x20], rsi
call fcn.14001ea8e
jmp 0x14000e5d9
mov qword [rsp + 0x20], rsi
mov r9d, 0xc96
xor r8d, r8d
xor edx, edx
mov ecx, 1
call fcn.14001ea8e
mov rdx, rsi
lea rcx, str.Formatting_to__s__using_IFS_
call fcn.140038472
mov r9d, 1
mov rdx, r13
mov ecx, r12d
mov r8d, 1
call fcn.140007977
mov rcx, rax
mov qword [rsp + 0x58], rax
call fcn.14000ccb2
mov rsi, rax
test rax, rax
jne 0x14000e634
mov rdx, qword [rsp + 0x58]
lea rcx, str.Could_not_read_volume_name___s_
call fcn.140038472
mov dword [0x1400cfd94], 0xc003001f
jmp 0x14000e838
mov rcx, rax
call fcn.140079868
xor edx, edx
xor ecx, ecx
mov word [rsi + rax*2 - 2], 0
call fcn.140079790
cmp qword [0x1400cfda8], 0
mov r12, rax
jne 0x14000e6c7
lea r14, str.fmifs
lea r13, str.FormatEx
mov rcx, r14
call fcn.14000c81d
mov rdx, r13
mov rcx, rax
call qword [sym.imp.KERNEL32.DLL_SetVolumeLabelA]
mov qword [0x1400cfda8], rax
test rax, rax
jne 0x14000e6c7
call fcn.14003893c
mov r8, r14
mov rdx, r13
lea rcx, [0x14008cd13]
mov r9, rax
call fcn.140038472
cmp dword [0x1400cfd94], 0
js 0x14000e838
call qword [sym.imp.KERNEL32.DLL_PeekNamedPipe]
movzx eax, ax
or eax, 0xc0030000
mov dword [0x1400cfd94], eax
jmp 0x14000e838
cmp qword [0x1400cfda0], 0
jne 0x14000e6f4
lea rcx, str.fmifs
call fcn.14000c81d
lea rdx, str.EnableVolumeCompression
mov rcx, rax
call qword [sym.imp.KERNEL32.DLL_SetVolumeLabelA]
mov qword [0x1400cfda0], rax
xor ecx, ecx
mov rdx, r12
call fcn.140079790
cmp ebx, 0x1ff
ja 0x14000e716
lea rcx, str.Using_default_cluster_size
xor ebx, ebx
call fcn.140038472
jmp 0x14000e724
mov edx, ebx
lea rcx, str.Using_cluster_size:__d_bytes
call fcn.140038472
xor eax, eax
mov r14d, edi
mov dword [0x1400cfdbc], 0
lea rdx, str.Slow
mov dword [0x1400cfdb8], eax
and r14d, 2
je 0x14000e74d
lea rdx, str.Quick
lea rcx, str._s_format_was_selected
mov r12d, 4
lea r15, [0x14000c50f]
call fcn.140038472
lea r13, str._s___Retrying...
mov rax, qword [0x1400b5f80]
mov r9, qword [rsp + 0x60]
mov rcx, rsi
mov r8, qword [rsp + 0x68]
mov edx, dword [rax + 0x18]
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], ebx
mov dword [rsp + 0x20], r14d
call qword [0x1400cfda8]
mov eax, dword [0x1400cfd94]
test eax, eax
jns 0x14000e7d5
cmp ax, 0x4c7
je 0x14000e838
call fcn.14003893c
mov rcx, r13
mov rdx, rax
call fcn.140038472
mov ecx, 0x1388
call qword [0x14011c770]
dec r12
jne 0x14000e76d
cmp dword [0x1400cfd94], 0
js 0x14000e838
and edi, 4
jne 0x14000e7ed
lea rcx, [0x14008ccb5]
mov ebp, 1
call fcn.140038472
jmp 0x14000e838
mov rcx, rsi
call fcn.140079868
mov edx, 1
mov rcx, rsi
mov word [rsi + rax*2], 0x5c
call qword [0x1400cfda0]
test al, al
je 0x14000e81b
lea rcx, str.Enabled_NTFS_compression
call fcn.140038472
jmp 0x14000e82f
call fcn.14003893c
lea rcx, str.Could_not_enable_NTFS_compression:__s
mov rdx, rax
call fcn.140038472
cmp dword [0x1400cfd94], 0
jns 0x14000e7da
mov rcx, qword [rsp + 0x58]
call fcn.1400796c8
mov rcx, rsi
call fcn.1400796c8
mov rcx, qword [rsp + 0x60]
call fcn.1400796c8
mov rcx, qword [rsp + 0x68]
call fcn.1400796c8
jmp 0x14000e88c
mov ecx, r13d
call qword [0x14011c730]
mov dword [0x1400cfd94], 0xc003001f
call fcn.14003893c
lea rcx, str.Could_not_format_drive:__s
mov rdx, rax
call fcn.140038472
jmp 0x14000e039
mov eax, ebp
add rsp, 0x158
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
ret
push r15
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x598
movups xmmword [rsp + 0x570], xmm6
movups xmmword [rsp + 0x580], xmm7
xor eax, eax
lea rsi, [0x14007d980]
xor r11d, r11d
mov r10d, ecx
lea rdi, [rsp + 0x78]
mov ecx, 0x1e
mov rbx, r9
rep movsd dword [rdi], dword [rsi]
mov ecx, 0x100
mov qword [rsp + 0x48], r11
mov ebp, r8d
lea rdi, [rsp + 0x170]
mov qword [rsp + 0x58], r11
lea r14, [rsp + 0x170]
rep stosd dword [rdi], eax
mov rax, qword [str._H_b_]
mov ecx, r10d
mov r15, qword [rax]
call fcn.140007e7d
mov rcx, rbx
mov r12, rax
call fcn.1400797e8
test r12, r12
sete dil
cmp rax, 4
setne al
or dil, al
jne 0x140011a40
mov r8d, 3
lea rdx, [0x14008e166]
mov rcx, rbx
call fcn.140079800
test eax, eax
je 0x140011a52
mov rax, qword [0x1400b5de0]
mov dword [rax], 0xc0030057
jmp 0x140011c85
mov edx, 0x20
mov rcx, r12
call fcn.1400797c8
test rax, rax
je 0x140011a70
lea rcx, str.Notice:_Using_physical_device_to_access_partition_data
call fcn.140038472
mov r13, qword [0x1400b5df0]
mov rcx, rbx
mov rdx, qword [r13 + 0x30]
call fcn.1400797d0
test eax, eax
je 0x140011abe
mov rdx, qword [r13 + 0x38]
mov rcx, rbx
call fcn.1400797d0
test eax, eax
je 0x140011abe
mov rdx, qword [r13 + 0x40]
mov rcx, rbx
call fcn.1400797d0
lea rcx, str.ext4_file_system_is_not_supported__defaulting_to_ext3
test eax, eax
je 0x140011ab5
lea rcx, str.Invalid_ext_file_system_version_requested__defaulting_to_ext3
call fcn.140038472
mov rbx, qword [r13 + 0x38]
mov qword [rsp + 0x20], rbx
mov r9d, 0xc96
xor r8d, r8d
mov edx, 1
mov ecx, 1
call fcn.14001ea8e
xor r9d, r9d
xor r8d, r8d
mov edx, 1
mov dword [rsp + 0x20], r9d
or ecx, 0xffffffff
xor r9d, r9d
call fcn.140045210
lea r8, [rsp + 0x48]
mov edx, 0x400
mov rcx, r12
call fcn.1400627ae
mov esi, eax
test eax, eax
jne 0x140011b18
mov rax, qword [rsp + 0x48]
test rax, rax
jne 0x140011b43
mov rbx, qword [0x1400b5de0]
cmp dword [rbx], 0
js 0x140011b30
mov ecx, 0x1e
call fcn.1400626a3
mov dword [rbx], eax
mov ecx, esi
call fcn.140011520
lea rcx, str.Could_not_read_device_size:__s
mov rdx, rax
jmp 0x140011bc0
shl rax, 0xa
lea rdx, [rsp + 0x78]
mov qword [rsp + 0x48], rax
cmp rax, qword [rdx]
jb 0x140011bca
inc esi
add rdx, 0x18
cmp esi, 5
jne 0x140011b51
mov r8d, 0x131
lea rdx, [0x14008e12e]
lea rcx, str.i___ARRAYSIZE_ext2fs_default_
call qword [sym.imp.msvcrt.dll_memmove]
or dword [rcx + 0x10], 0x12
mov rcx, qword [rcx + 0x48]
mov edx, 1
call fcn.14005b8fc
mov esi, eax
test eax, eax
je 0x14001225f
mov rbx, qword [0x1400b5de0]
cmp dword [rbx], 0
js 0x140011baf
mov ecx, 0x1d
call fcn.1400626a3
mov dword [rbx], eax
mov ecx, esi
call fcn.140011520
lea rcx, str.Could_not_set_inode_bitmaps:__s
mov rdx, rax
call fcn.140038472
jmp 0x140011c85
cmp ebp, 0x3ff
ja 0x140011be8
movsxd rdx, esi
imul rdx, rdx, 0x18
mov ebp, dword [rsp + rdx + 0x80]
test ebp, ebp
je 0x140011c8c
lea ecx, [rbp - 1]
and ecx, ebp
jne 0x140011c8c
xor r8d, r8d
mov edx, 0x400
mov dword [rsp + 0x188], r8d
cmp ecx, 7
je 0x140011cb0
mov r9d, edx
lea r8d, [rcx + 1]
shl r9d, cl
cmp r9d, ebp
jne 0x140011ca5
test dil, dil
je 0x140011c2b
mov dword [rsp + 0x188], ecx
xor edx, edx
mov dword [rsp + 0x18c], ecx
mov rcx, rbx
div rbp
mov rdx, qword [r13 + 0x30]
mov qword [rsp + 0x48], rax
mov rdi, rax
call fcn.1400797d0
test eax, eax
jne 0x140011cdb
mov eax, 0xffffffff
cmp rax, rdi
jae 0x140011cef
mov rbx, qword [0x1400b5de0]
cmp dword [rbx], 0
js 0x140011c79
mov ecx, 0x1204
call fcn.1400626a3
mov dword [rbx], eax
lea rcx, str.Volume_size_is_too_large_for_ext2_or_ext3
call fcn.140038472
xor ebx, ebx
jmp 0x140012556
mov r8d, 0x134
lea rdx, [0x14008e12e]
lea rcx, str.IS_POWER_OF_2_BlockSize_
jmp 0x140011b75
mov ecx, r8d
mov dil, 1
jmp 0x140011c03
test dil, dil
jne 0x140011cce
mov r8d, 0x139
lea rdx, [0x14008e12e]
lea rcx, str.EXT2_BLOCK_SIZE_BITS_features____EXT2_MAX_BLOCK_LOG_SIZE
jmp 0x140011b75
mov dword [rsp + 0x188], 7
jmp 0x140011cb5
mov rdx, qword [r13 + 0x38]
mov rcx, rbx
call fcn.1400797d0
test eax, eax
je 0x140011c53
mov rdx, rdi
mov rcx, r14
call fcn.140054d51
mov rax, qword [rsp + 0x48]
test rax, rax
js 0x140011d0b
cvtsi2ss xmm0, rax
jmp 0x140011d20
mov rdx, rax
and eax, 1
shr rdx, 1
or rdx, rax
cvtsi2ss xmm0, rdx
addss xmm0, xmm0
mulss xmm0, dword [0x14008e638]
comiss xmm0, dword [0x14008e61c]
jae 0x140011d38
cvttss2si rdx, xmm0
jmp 0x140011d4a
subss xmm0, dword [0x14008e61c]
cvttss2si rdx, xmm0
btc rdx, 0x3f
movsxd rsi, esi
mov rcx, r14
call fcn.140054d94
imul rsi, rsi, 0x18
mov rcx, r14
mov dword [rsp + 0x1bc], 1
mov eax, dword [rsp + rsi + 0x84]
mov word [rsp + 0x1c8], ax
call fcn.140054cca
mov esi, dword [rsp + rsi + 0x88]
or edx, 0xffffffff
mov ecx, esi
shr rax, cl
mov ecx, 0xffffffff
cmp rcx, rax
jb 0x140011da4
mov rcx, r14
call fcn.140054cca
mov ecx, esi
shr rax, cl
mov rdx, rax
mov ecx, dword [rsp + 0x188]
mov r8, qword [rsp + 0x48]
mov r9d, 0x400
mov dword [rsp + 0x170], edx
shl r9d, cl
lea rcx, str._d_possible_inodes_out_of__lld_blocks__block_size___d_
call fcn.140038472
mov rcx, r14
call fcn.140054d7b
movsd xmm2, qword [0x14008e640]
movabs r8, 0x4014000000000000
lea rcx, str._lld_blocks___0.1f____reserved_for_the_super_user
mov rdx, rax
call fcn.140038472
mov edx, 0x40000005
or dword [rsp + 0x1d4], 3
mov eax, dword [rsp + 0x1cc]
shl rdx, 3
or qword [rsp + 0x1cc], rdx
cmp byte [rbx + 3], 0x32
je 0x140011e25
or eax, 0x2c
mov dword [rsp + 0x1cc], eax
lea rax, [rsp + 0x58]
mov r9, r15
mov r8, r14
mov edx, 0x24000
mov qword [rsp + 0x20], rax
mov rcx, r12
mov dword [rsp + 0x270], 0xc
call fcn.14005c6b0
mov esi, eax
test eax, eax
je 0x140011e84
mov rdi, qword [0x1400b5de0]
cmp dword [rdi], 0
js 0x140011e6b
mov ecx, 0xd
call fcn.1400626a3
mov dword [rdi], eax
mov ecx, esi
call fcn.140011520
mov rdx, rbx
lea rcx, str.Could_not_initialize__s_features:__s
mov r8, rax
jmp 0x14001254c
mov rax, qword [rsp + 0x58]
mov ecx, 0x10
mov rdi, qword [rax + 8]
movsxd rdx, dword [rdi + 0x18]
call sub.msvcrt.dll_vfprintf
mov r8d, 0x163
lea rdx, [0x14008e12e]
lea rcx, str.buf___NULL
mov rsi, rax
test rax, rax
je 0x140011b75
mov rcx, rdi
xor edx, edx
mov r9, rax
mov r8d, 0x10
call fcn.14005f62b
mov rcx, rsi
mov edi, eax
call fcn.1400796c8
test edi, edi
je 0x140011f0d
mov rsi, qword [0x1400b5de0]
cmp dword [rsi], 0
js 0x140011ef4
mov ecx, 0x1d
call fcn.1400626a3
mov dword [rsi], eax
mov ecx, edi
call fcn.140011520
mov rdx, rbx
lea rcx, str.Could_not_zero__s_superblock_area:__s
mov r8, rax
jmp 0x14001254c
mov rax, qword [rsp + 0x58]
mov rsi, qword [sym.imp.ole32.dll_CoCreateGuid]
mov rcx, qword [rax + 0x20]
add rcx, 0x68
call rsi
mov rcx, qword [rsp + 0x58]
call fcn.140056d68
mov rax, qword [rsp + 0x58]
mov rcx, qword [rax + 0x20]
mov byte [rcx + 0xfc], 1
add rcx, 0xec
call rsi
mov rax, qword [rsp + 0x58]
cmp qword [rsp + 0x600], 0
mov rdi, qword [rax + 0x20]
mov word [rdi + 0x36], 0xffff
mov dword [rdi + 0x48], 5
mov word [rdi + 0x3c], 1
je 0x140011faf
mov rcx, qword [rsp + 0x600]
call fcn.1400797e8
mov r8d, 0x10
lea rcx, [rdi + 0x78]
mov rdx, qword [rsp + 0x600]
lea rbp, [rax + 1]
mov rsi, rax
cmp rbp, r8
cmovbe r8, rbp
call fcn.140079750
cmp rbp, 0xf
jbe 0x140011faa
mov esi, 0xf
mov byte [rdi + rsi + 0x78], 0
mov rcx, qword [rsp + 0x58]
call fcn.140054420
mov esi, eax
test eax, eax
je 0x140011ff0
mov rdi, qword [0x1400b5de0]
cmp dword [rdi], 0
js 0x140011fd7
mov ecx, 0xd
call fcn.1400626a3
mov dword [rdi], eax
mov ecx, esi
call fcn.140011520
mov rdx, rbx
lea rcx, str.Could_not_allocate__s_tables:__s
mov r8, rax
jmp 0x14001254c
mov rcx, qword [rsp + 0x58]
lea rdx, [rcx + 0x50]
call fcn.14005bf4a
mov ecx, eax
test eax, eax
je 0x14001201b
call fcn.140011520
mov rdx, rbx
lea rcx, str.Could_not_set__s_cluster_bitmap:__s
mov r8, rax
jmp 0x14001254c
cmp byte [rbx + 3], 0x32
movss xmm0, dword [0x14008e628]
mov dword [0x1400cfee0], 0
movss xmm6, dword [0x14008e624]
jne 0x14001203e
movaps xmm0, xmm6
mov rax, qword [rsp + 0x58]
movss xmm7, dword [0x14008e620]
movss dword [0x14007da00], xmm0
mov eax, dword [rax + 0x30]
cvtsi2ss xmm2, rax
mov rdx, rax
divss xmm2, xmm7
comiss xmm2, xmm6
jbe 0x14001206d
cvtss2sd xmm2, xmm2
jmp 0x140012075
movsd xmm2, qword [0x14008e630]
movq r8, xmm2
lea rcx, str.Creating__d_inode_sets:__1_marker___0.1f_set_s__
xor esi, esi
call fcn.140038472
lea rbp, [rsp + 0x50]
mov rax, qword [rsp + 0x58]
mov edx, dword [rax + 0x30]
cmp edx, esi
jle 0x140012172
mov rcx, rsi
call fcn.1400117e9
test eax, eax
jne 0x140011c85
mov rcx, qword [rsp + 0x58]
mov edx, esi
mov r13d, 0x400
call fcn.14005504f
mov qword [rsp + 0x50], rax
mov rax, qword [rsp + 0x58]
mov rdx, qword [rax + 0x20]
mov ecx, dword [rdx + 0x18]
mov edi, dword [rdx + 0x28]
mov edx, esi
shl r13d, cl
mov rcx, rax
call fcn.140055200
sub edi, eax
mov eax, pe_nt_image_headers64
mov ecx, edi
mov rdi, qword [rsp + 0x58]
mov rdx, qword [rdi + 0x20]
cmp dword [rdx + 0x4c], 0
je 0x1400120fc
movzx eax, word [rdx + 0x58]
imul ecx, eax
mov edx, r13d
inc rsi
call fcn.14005d678
mov rdx, qword [rsp + 0x50]
mov rcx, rdi
mov r9, rbp
mov dword [rsp + 0x3c], eax
mov r8d, eax
lea rax, [rsp + 0x3c]
mov qword [rsp + 0x20], rax
call fcn.140060a47
mov edi, eax
test eax, eax
je 0x14001208d
mov rbx, qword [0x1400b5de0]
cmp dword [rbx], 0
js 0x14001214d
mov ecx, 0x1d
call fcn.1400626a3
mov dword [rbx], eax
mov ecx, edi
call fcn.140011520
mov r8d, dword [rsp + 0x3c]
mov rdx, qword [rsp + 0x50]
lea rcx, str._r_nCould_not_zero_inode_set_at_position__llu___d_blocks_:__s
mov r9, rax
call fcn.140038472
jmp 0x140011c85
lea rdi, [0x14008e487]
mov rcx, rdi
call fcn.14003856b
mov rcx, qword [rsp + 0x58]
xor r9d, r9d
mov r8d, 2
mov edx, 2
call fcn.140060570
mov esi, eax
test eax, eax
je 0x1400121d0
mov rdi, qword [0x1400b5de0]
cmp dword [rdi], 0
js 0x1400121b7
mov ecx, 0x570
call fcn.1400626a3
mov dword [rdi], eax
mov ecx, esi
call fcn.140011520
mov rdx, rbx
lea rcx, str.Failed_to_create__s_root_dir:__s
mov r8, rax
jmp 0x14001254c
mov rcx, qword [rsp + 0x58]
lea r9, str.lostfound
xor r8d, r8d
mov edx, 2
mov esi, 3
mov dword [rcx + 0xa8], 0x3f
call fcn.140060570
mov ebp, eax
test eax, eax
je 0x140012246
mov rsi, qword [0x1400b5de0]
cmp dword [rsi], 0
js 0x140012216
mov ecx, 0x570
call fcn.1400626a3
mov dword [rsi], eax
mov ecx, ebp
call fcn.140011520
mov rdx, rbx
lea rcx, str.Failed_to_create__s_lostfound_dir:__s
mov r8, rax
jmp 0x14001254c
cmp esi, eax
jge 0x140011b7b
mov edx, esi
mov r8d, 1
inc esi
call fcn.140053b00
mov rcx, qword [rsp + 0x58]
mov eax, 0xb
mov rdx, qword [rcx + 0x20]
cmp dword [rdx + 0x4c], 0
je 0x14001222f
mov eax, dword [rdx + 0x54]
jmp 0x14001222f
mov rcx, qword [rsp + 0x58]
mov r8d, 1
mov edx, 1
call fcn.140053b00
mov rcx, qword [rsp + 0x58]
xor edx, edx
call fcn.14005462f
mov esi, eax
test eax, eax
je 0x1400122b4
mov rbx, qword [0x1400b5de0]
cmp dword [rbx], 0
js 0x14001229e
mov ecx, 0x1d
call fcn.1400626a3
mov dword [rbx], eax
mov ecx, esi
call fcn.140011520
lea rcx, str.Could_not_set_inode_stats:__s
mov rdx, rax
jmp 0x140011bc0
cmp byte [rbx + 3], 0x32
je 0x14001236b
mov dword [0x1400cfee0], 0x3f000000
mov rax, qword [rsp + 0x58]
mov rcx, qword [rax + 0x20]
call fcn.140054cca
mov rcx, rax
call fcn.140060bbf
shr eax, 1
cvtsi2ss xmm2, eax
mov esi, eax
divss xmm2, xmm7
comiss xmm2, xmm6
jbe 0x1400122f5
cvtss2sd xmm2, xmm2
jmp 0x1400122fd
movsd xmm2, qword [0x14008e630]
movq r8, xmm2
mov edx, esi
lea rcx, str.Creating__d_journal_blocks:__1_marker___0.1f_block_s__
call fcn.140038472
mov r8d, dword [rsp + 0x608]
mov rcx, qword [rsp + 0x58]
mov edx, esi
and r8d, 2
or r8d, 4
call fcn.14006129c
mov rcx, rdi
mov esi, eax
call fcn.14003856b
test esi, esi
je 0x14001236b
mov rdi, qword [0x1400b5de0]
cmp dword [rdi], 0
js 0x140012352
mov ecx, 0x1d
call fcn.1400626a3
mov dword [rdi], eax
mov ecx, esi
call fcn.140011520
mov rdx, rbx
lea rcx, str.Could_not_create__s_journal:__s
mov r8, rax
jmp 0x14001254c
bt dword [rsp + 0x608], 0x12
jae 0x1400124e1
xor ecx, ecx
mov byte [rsp + 0x77], 0
movabs rax, 0xa6e6f696e75202f
lea rdi, [rsp + 0xf2]
mov dword [rsp + 0x40], ecx
xor ecx, ecx
lea rsi, [rsp + 0x44]
mov qword [rsp + 0x6f], rax
call sub.msvcrt.dll_getc
mov ecx, 0x7e
lea r9, str.persistence.conf
mov r8d, 2
mov word [rsp + 0xf0], 0x81a4
mov rdx, rax
xor eax, eax
rep stosb byte [rdi], al
mov eax, 0xffffffff
mov qword [rsp + 0x20], rsi
mov rcx, qword [rsp + 0x58]
mov word [rsp + 0x10a], 1
cmp rdx, rax
mov dword [rsp + 0xf4], 8
cmovle rax, rdx
mov edx, 2
mov dword [rsp + 0xf8], eax
mov dword [rsp + 0xfc], eax
mov dword [rsp + 0x100], eax
call fcn.140061585
mov qword [rsp + 0x20], rsi
mov rcx, qword [rsp + 0x58]
xor r9d, r9d
mov r8d, 0x11ed
mov edx, 2
call fcn.140052f80
mov r9d, dword [rsp + 0x44]
mov dword [rsp + 0x20], 1
lea r8, str.persistence.conf
mov rcx, qword [rsp + 0x58]
mov edx, 2
call fcn.14005faf6
mov edx, dword [rsp + 0x44]
mov rcx, qword [rsp + 0x58]
mov r8d, 1
call fcn.140053b00
mov edx, dword [rsp + 0x44]
mov rcx, qword [rsp + 0x58]
lea r8, [rsp + 0xf0]
call fcn.14005f2ca
mov edx, dword [rsp + 0x44]
mov rcx, qword [rsp + 0x58]
lea r9, [rsp + 0x60]
mov r8d, 1
call fcn.140059ca1
mov rcx, qword [rsp + 0x60]
lea rdx, [rsp + 0x6f]
lea r9, [rsp + 0x40]
mov r8d, 8
call fcn.14005a37a
lea rdx, str.persistence.conf
test eax, eax
jne 0x1400124cb
cmp dword [rsp + 0x40], 8
lea rcx, str.Created__s_file
je 0x1400124d2
lea rcx, str.Error:_Could_not_create__s_file
call fcn.140038472
mov rcx, qword [rsp + 0x60]
call fcn.140059eb0
mov rcx, qword [rsp + 0x58]
call fcn.140056a08
mov esi, eax
test eax, eax
jne 0x140012520
xor edx, edx
xor eax, eax
mov r9d, 0x64
mov r8d, 0x64
mov dword [rsp + 0x20], edx
mov ecx, 4
mov edx, 0xc91
mov ebx, 1
mov qword [rsp + 0x58], rax
call fcn.140045210
jmp 0x140012556
mov rdi, qword [0x1400b5de0]
cmp dword [rdi], 0
js 0x140012538
mov ecx, 0x1d
call fcn.1400626a3
mov dword [rdi], eax
mov ecx, esi
call fcn.140011520
mov rdx, rbx
lea rcx, str.Could_not_create__s_volume:__s
mov r8, rax
call fcn.140038472
jmp 0x140011c85
mov rcx, r12
call fcn.1400796c8
mov rcx, qword [rsp + 0x58]
call fcn.14005a813
nop
movups xmm6, xmmword [rsp + 0x570]
movups xmm7, xmmword [rsp + 0x580]
mov eax, ebx
add rsp, 0x598
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
ret
push r15
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x268
movabs rax, 0x20454d414e204f4e
mov dword [rsp + 0x2b0], ecx
mov ebp, r8d
mov rcx, r9
mov qword [rsp + 0x2b8], rdx
mov qword [rsp + 0x8c], rax
mov dword [rsp + 0x94], 0x202020
test r9, r9
je 0x1400125f4
mov r8d, 3
lea rdx, [0x14008e650]
call fcn.140079800
mov dword [rsp + 0x54], eax
test eax, eax
je 0x14001261c
mov rax, qword [0x1400b5de0]
xor r12d, r12d
xor ebp, ebp
xor r13d, r13d
mov dword [rsp + 0x54], r12d
xor edi, edi
xor ebx, ebx
xor esi, esi
mov dword [rax], 0xc0030057
xor r15d, r15d
jmp 0x14001300e
xor r8d, r8d
mov r9d, 0xc96
mov edx, 1
xor ebx, ebx
lea rax, str.Large_FAT32
mov ecx, 1
mov qword [rsp + 0x20], rax
call fcn.14001ea8e
mov dword [rsp + 0x20], ebx
xor r9d, r9d
xor r8d, r8d
mov edx, 1
or ecx, 0xffffffff
call fcn.140045210
lea rcx, [rsp + 0x160]
call qword [sym.imp.KERNEL32.DLL_QueryFullProcessReadFile]
mov ax, word [rsp + 0x16e]
mov r14w, word [rsp + 0x166]
mov r9d, 1
mov r12w, word [rsp + 0x162]
mov rdx, qword [rsp + 0x2b8]
mov r8d, 1
mov word [rsp + 0x50], ax
mov eax, dword [rsp + 0x16c]
mov ecx, dword [rsp + 0x2b0]
mov word [rsp + 0x58], ax
mov ax, word [rsp + 0x16a]
mov word [rsp + 0x64], ax
mov eax, dword [rsp + 0x168]
mov word [rsp + 0x68], ax
mov eax, dword [rsp + 0x160]
mov word [rsp + 0x6e], ax
mov rax, qword [0x1400b6c20]
cmp dword [rax], 0
mov dword [rsp + 0x20], 0
je 0x1400126ed
call fcn.140008bcd
jmp 0x1400126f2
call fcn.140008b74
mov rbx, qword [0x1400b5de0]
mov r15, rax
lea rax, [rax - 1]
cmp dword [rbx], 0
js 0x14001271d
cmp rax, 0xfffffffffffffffd
jbe 0x14001272b
lea rcx, str.Invalid_logical_volume_handle
call fcn.140038472
mov dword [rbx], 0xc0030006
xor ebp, ebp
xor r13d, r13d
xor edi, edi
xor ebx, ebx
jmp 0x140012a7d
mov rcx, r15
lea rdi, [rsp + 0x88]
call fcn.140009f10
xor r11d, r11d
xor r9d, r9d
xor r8d, r8d
lea rax, [rsp + 0x98]
mov qword [rsp + 0x38], r11
mov rsi, qword [sym.imp.KERNEL32.DLL_GetFileSizeEx]
mov edx, 0x70000
mov qword [rsp + 0x30], rdi
mov rcx, r15
mov dword [rsp + 0x28], 0x18
mov qword [rsp + 0x20], rax
call rsi
test eax, eax
jne 0x1400127ee
xor r10d, r10d
xor r9d, r9d
xor r8d, r8d
mov qword [rsp + 0x30], rdi
lea rax, [rsp + 0x160]
mov qword [rsp + 0x38], r10
mov edx, 0x700a0
mov rcx, r15
mov dword [rsp + 0x28], 0x100
mov qword [rsp + 0x20], rax
call rsi
test eax, eax
jne 0x1400127ce
call fcn.14003893c
lea rcx, str.IOCTL_DISK_GET_DRIVE_GEOMETRY_error:__s
mov rdx, rax
call fcn.140038472
lea rcx, str.Failed_to_get_device_geometry__both_regular_and__ex_
jmp 0x1400128b0
mov rax, qword [rsp + 0x170]
movups xmm0, xmmword [rsp + 0x160]
mov qword [rsp + 0xa8], rax
movups xmmword [rsp + 0x98], xmm0
cmp dword [rsp + 0xac], 0x1ff
ja 0x140012806
mov dword [rsp + 0xac], 0x200
mov rbx, qword [0x1400b5de0]
cmp dword [rbx], 0
js 0x14001271d
xor r9d, r9d
xor r8d, r8d
mov rsi, qword [sym.imp.KERNEL32.DLL_GetFileSizeEx]
mov rcx, r15
lea rdi, [rsp + 0x88]
lea rax, [rsp + 0xb0]
mov qword [rsp + 0x38], r9
xor r9d, r9d
mov qword [rsp + 0x30], rdi
mov edx, 0x74004
mov dword [rsp + 0x28], 0x20
mov qword [rsp + 0x20], rax
call rsi
test eax, eax
jne 0x140012906
xor r8d, r8d
xor r9d, r9d
mov qword [rsp + 0x30], rdi
mov edx, 0x70048
lea rax, [rsp + 0xd0]
mov qword [rsp + 0x38], r8
mov rcx, r15
xor r8d, r8d
mov dword [rsp + 0x28], 0x90
mov qword [rsp + 0x20], rax
call rsi
test eax, eax
jne 0x1400128c0
call fcn.14003893c
lea rcx, str.IOCTL_DISK_GET_PARTITION_INFO_error:__s
mov rdx, rax
call fcn.140038472
lea rcx, str.Failed_to_get_partition_info__both_regular_and__ex_
call fcn.140038472
mov dword [rbx], 0xc0030032
jmp 0x14001271d
xor edx, edx
mov rax, qword [rsp + 0xd8]
xor ecx, ecx
mov qword [rsp + 0xc4], rdx
mov rdx, qword [rsp + 0xe0]
mov dword [rsp + 0xcc], ecx
mov ecx, dword [rsp + 0xac]
mov qword [rsp + 0xb8], rdx
cqo
mov qword [rsp + 0xb0], rax
idiv rcx
mov dword [rsp + 0xc0], eax
mov rbx, qword [0x1400b5de0]
mov eax, dword [rbx]
shr eax, 0x1f
mov dword [rsp + 0x60], eax
jne 0x14001271d
mov r9, qword [rsp + 0xb8]
mov r8d, dword [rsp + 0xac]
mov rax, r9
mov rsi, r8
cqo
idiv r8
mov qword [rsp + 0x48], rax
cmp rax, 0xffff
ja 0x14001295b
lea rcx, str.This_drive_is_too_small_for_FAT32___there_must_be_at_least_64K_clusters
call fcn.140038472
mov dword [rbx], 0xe0031203
jmp 0x14001271d
mov rdi, qword [rsp + 0x48]
mov eax, 0xfffffffe
cmp rax, rdi
jae 0x140012981
lea rcx, str.This_drive_is_too_big_for_FAT32___max_2TB_supported
call fcn.140038472
mov dword [rbx], 0xe0031204
jmp 0x14001271d
test ebp, ebp
jne 0x140012a04
mov ebp, 0x200
cmp r9, 0x3ffffff
jle 0x140012a04
mov ebp, 0x400
cmp r9, 0x7ffffff
jle 0x140012a04
mov ebp, 0x800
cmp r9, 0xfffffff
jle 0x140012a04
movabs rax, 0x1ffffffff
mov ebp, 0x1000
cmp r9, rax
jle 0x140012a04
movabs rax, 0x3ffffffff
mov ebp, 0x2000
cmp r9, rax
jle 0x140012a04
movabs rax, 0x7ffffffff
mov ebp, 0x4000
cmp r9, rax
jle 0x140012a04
movabs rax, 0x1ffffffffff
mov ebp, 0x10000
cmp r9, rax
jg 0x140012a04
mov ebp, 0x8000
mov eax, esi
mov edx, 1
mov ecx, esi
mov qword [rsp + 0x78], r8
mov qword [rsp + 0x70], r9
mov qword [rsp + 0x40], rax
call sub.msvcrt.dll_vfprintf
mov edx, 1
mov ecx, esi
mov rbx, rax
call sub.msvcrt.dll_vfprintf
mov edx, 1
mov ecx, esi
mov rdi, rax
call sub.msvcrt.dll_vfprintf
test rbx, rbx
mov r13, rax
sete al
test rdi, rdi
sete dl
or al, dl
jne 0x140012a61
test r13, r13
mov r9, qword [rsp + 0x70]
mov r8, qword [rsp + 0x78]
jne 0x140012a84
lea rcx, str.Failed_to_allocate_memory
call fcn.140038472
mov eax, 0xc0030008
mov rdx, qword [0x1400b5de0]
mov dword [rdx], eax
xor ebp, ebp
xor esi, esi
jmp 0x14001300e
mov eax, dword [rsp + 0x50]
mov r10d, 0xa
xor edx, edx
mov ecx, r12d
shl ecx, 8
mov word [rbx], 0x58eb
div r10w
mov edx, dword [rsp + 0x68]
mov byte [rbx + 2], 0x90
mov word [rbx + 0xb], si
mov dword [rbx + 0x30], 0x60001
mov word [rbx + 0x40], pe_nt_image_headers64
mov byte [rbx + 0x42], 0x29
shl edx, 8
add ecx, eax
mov eax, dword [rsp + 0x58]
add ecx, r14d
shl eax, 8
add ecx, eax
mov eax, dword [rsp + 0x64]
add ax, word [rsp + 0x6e]
add eax, edx
movzx ecx, cx
xor edx, edx
shl eax, 0x10
lea r11d, [rcx + rax]
movzx ecx, word [rbx + 0xe]
movabs rax, 0x312e344e4957534d
mov qword [rbx + 3], rax
mov eax, ebp
div esi
mov dword [rbx + 0x43], r11d
mov byte [rbx + 0xd], al
mov r14d, eax
movabs rax, 0xf80000000002
mov qword [rbx + 0x10], rax
mov eax, dword [rsp + 0xa8]
movzx edx, r14b
mov word [rbx + 0x18], ax
mov eax, dword [rsp + 0xa4]
mov word [rbx + 0x1a], ax
mov eax, dword [rsp + 0xc0]
mov dword [rbx + 0x1c], eax
mov eax, dword [rsp + 0x48]
mov dword [rbx + 0x20], eax
sub eax, ecx
lea rcx, [rdx + rdx]
add rax, rcx
mov ecx, esi
imul rdx, rcx
shr rdx, 2
lea rcx, [rdx + 2]
xor edx, edx
div rcx
lea r12, [rax + 1]
mov eax, 0x100000
cqo
lea r10d, [r12 + r12]
mov dword [rbx + 0x24], r12d
idiv r8
xor edx, edx
lea r8d, [r10 + rax + 0x1f]
mov rcx, rax
mov eax, r8d
div ecx
sub r8d, edx
mov eax, r8d
mov dword [rsp + 0x58], r8d
sub eax, r10d
mov dword [rsp + 0x50], eax
mov eax, dword [rsp + 0x50]
mov word [rbx + 0xe], ax
mov eax, 1
shl rax, 0x21
mov qword [rbx + 0x28], rax
mov rax, qword [rsp + 0x8c]
mov qword [rbx + 0x47], rax
mov eax, dword [rsp + 0x93]
mov word [rbx + 0x1fe], 0xaa55
mov dword [rbx + 0x4e], eax
movabs rax, 0x2020203233544146
mov qword [rbx + 0x52], rax
cmp esi, 0x200
je 0x140012be8
lea eax, [rsi - 2]
mov byte [rbx + rax], 0x55
lea eax, [rsi - 1]
mov byte [rbx + rax], 0xaa
movabs rax, 0xfffffff0ffffff8
mov edx, dword [rsp + 0x58]
mov dword [rdi], 0x41615252
mov qword [r13], rax
mov eax, dword [rsp + 0x48]
mov dword [rdi + 0x1e4], 0x61417272
mov qword [rdi + 0x1e8], 0xffffffffffffffff
sub eax, edx
mov dword [rdi + 0x1fc], 0xaa550000
mov dword [r13 + 8], 0xfffffff
cmp ebp, esi
jae 0x140012c4b
mov r8d, 0x177
lea rdx, str.format_fat32.c
lea rcx, str.SectorsPerCluster___0
call qword [sym.imp.msvcrt.dll_memmove]
xor edx, edx
div r14d
mov dword [rsp + 0x64], eax
mov ebp, eax
cmp eax, 0xfffffff
jbe 0x140012c7b
lea rcx, str.This_drive_has_more_than_228_clusters__try_to_specify_a_larger_cluster_size_or_use_the_default
call fcn.140038472
mov rax, qword [0x1400b5de0]
mov dword [rax], 0xc0031203
jmp 0x140012a7b
cmp rbp, 0xffff
ja 0x140012c9a
lea rcx, str.FAT32_must_have_at_least_65536_clusters__try_to_specify_a_smaller_cluster_size_or_use_the_default
call fcn.140038472
mov eax, 0xc0031203
jmp 0x140012a72
lea eax, [rsi - 1]
xor edx, edx
lea rax, [rax + rbp*4]
div qword [rsp + 0x40]
cmp r12, rax
jae 0x140012cc3
lea rcx, str.This_drive_is_too_big_for_large_FAT32_format
call fcn.140038472
mov eax, 0xe0031204
jmp 0x140012a72
mov rcx, r9
xor r8d, r8d
mov edx, 1
mov dword [rsp + 0x68], r11d
call fcn.140038d8b
mov r8d, dword [rsp + 0x48]
lea rcx, str.Size_:__s__lu_sectors
mov rdx, rax
call fcn.140038472
mov edx, esi
mov r8d, esi
lea rcx, str.Cluster_size__lu_bytes___lu_bytes_per_sector
imul edx, r14d
call fcn.140038472
mov r11d, dword [rsp + 0x68]
lea rcx, str.Volume_ID_is__x:_x
mov edx, r11d
movzx r8d, r11w
shr edx, 0x10
call fcn.140038472
mov edx, dword [rsp + 0x50]
mov r8d, r12d
mov r9d, 2
lea rcx, str._lu_Reserved_sectors___lu_sectors_per_FAT___lu_FATs
call fcn.140038472
mov rdx, rbp
lea rcx, str._llu_Total_clusters
call fcn.140038472
mov edx, dword [rsp + 0x64]
lea rcx, str._lu_Free_clusters
mov dword [rdi + 0x1ec], 3
dec edx
mov dword [rdi + 0x1e8], edx
call fcn.140038472
mov eax, dword [rsp + 0x58]
lea rcx, str.Clearing_out__d_sectors_for_reserved_sectors__FATs_and_root_cluster...
add r14d, eax
mov edx, r14d
call fcn.140038472
mov edx, pe_nt_image_headers64
mov ecx, esi
call sub.msvcrt.dll_vfprintf
mov rbp, rax
test rax, rax
je 0x140012a61
mov eax, r14d
shl esi, 7
sub rax, 0xffffffffffffff80
mov qword [rsp + 0x48], rax
lea eax, [r14 + 0x7f]
cmp dword [rsp + 0x60], eax
jae 0x140012e36
xor eax, eax
mov r8d, dword [rsp + 0x60]
mov r9, qword [rsp + 0x48]
mov edx, 0xc91
mov dword [rsp + 0x20], eax
mov ecx, 4
mov qword [rsp + 0x58], r8
call fcn.140045210
mov rax, qword [0x1400b5de0]
mov r8, qword [rsp + 0x58]
mov eax, dword [rax]
test eax, eax
jns 0x140012df1
cmp ax, 0x4c7
je 0x140012a7d
mov qword [rsp + 0x20], rbp
mov rdx, qword [rsp + 0x40]
mov r9d, pe_nt_image_headers64
mov rcx, r15
call fcn.14006d55f
cmp rax, rsi
je 0x140012e2c
lea rcx, str.Error_clearing_reserved_sectors
call fcn.140038472
mov rax, qword [0x1400b5de0]
mov dword [rax], 0xc003001d
jmp 0x140012a7d
sub dword [rsp + 0x60], 0xffffff80
jmp 0x140012da3
lea rcx, str.Initializing_reserved_sectors_and_FATs...
lea rsi, str.FAT__d_sector_at_address:__d
call fcn.140038472
mov qword [rsp + 0x20], rbx
xor r8d, r8d
mov rcx, r15
mov rdx, qword [rsp + 0x40]
mov r9d, 1
call fcn.14006d55f
mov qword [rsp + 0x20], rdi
mov rdx, qword [rsp + 0x40]
mov r9d, 1
mov r8d, 1
mov rcx, r15
call fcn.14006d55f
mov qword [rsp + 0x20], rbx
mov rdx, qword [rsp + 0x40]
mov r9d, 1
mov r8d, 6
mov rcx, r15
call fcn.14006d55f
mov qword [rsp + 0x20], rdi
mov rdx, qword [rsp + 0x40]
mov r9d, 1
mov r8d, 7
mov rcx, r15
call fcn.14006d55f
mov r8d, dword [rsp + 0x50]
xor edx, edx
mov rcx, rsi
call fcn.140038472
mov qword [rsp + 0x20], r13
movsxd r8, dword [rsp + 0x50]
mov r9d, 1
mov rdx, qword [rsp + 0x40]
mov rcx, r15
call fcn.14006d55f
mov eax, dword [rsp + 0x50]
mov edx, 1
mov rcx, rsi
add r12d, eax
mov r8d, r12d
call fcn.140038472
mov qword [rsp + 0x20], r13
movsxd r8, r12d
mov rcx, r15
mov rdx, qword [rsp + 0x40]
mov r9d, 1
call fcn.14006d55f
bt dword [rsp + 0x2d8], 0x11
jb 0x140012f57
xor r8d, r8d
mov ecx, 1
mov r9d, 0xc9d
mov edx, 1
call fcn.14001ea8e
mov rcx, r15
call fcn.14000e8a2
test eax, eax
jne 0x140012f57
lea rcx, str.Could_not_write_partition_boot_record___drive_may_not_boot...
call fcn.140038472
mov ecx, 0xceb
call fcn.14001e8f5
xor r8d, r8d
xor edx, edx
mov r9d, 0xc95
mov qword [rsp + 0x20], rax
mov ecx, 1
call fcn.14001ea8e
lea rcx, str.Setting_label...
call fcn.140038472
mov rcx, r15
call qword [sym.imp.KERNEL32.DLL_CreateDirectorCreateEventACreateFileA]
mov rax, qword [0x1400b6c20]
mov rdx, qword [rsp + 0x2b8]
mov r9d, 1
mov ecx, dword [rsp + 0x2b0]
mov r8d, 1
cmp dword [rax], 0
je 0x140012fbe
call fcn.1400077fe
jmp 0x140012fc3
call fcn.140007977
mov rsi, rax
test rax, rax
jne 0x140012fe1
call fcn.14003893c
lea rcx, str.Could_not_set_label:__s
mov rdx, rax
call fcn.140038472
jmp 0x140012ff6
mov rdx, qword [rsp + 0x2d0]
mov rcx, rax
call qword [0x14011c758]
test eax, eax
je 0x140012fcb
lea rcx, str.Format_completed.
or r15, 0xffffffffffffffff
call fcn.140038472
mov dword [rsp + 0x54], 1
mov rcx, rsi
call fcn.1400796c8
lea rax, [r15 - 1]
cmp rax, 0xfffffffffffffffd
ja 0x140013029
mov rcx, r15
call qword [sym.imp.KERNEL32.DLL_CreateDirectorCreateEventACreateFileA]
mov rcx, rbx
call fcn.1400796c8
mov rcx, rdi
call fcn.1400796c8
mov rcx, r13
call fcn.1400796c8
mov rcx, rbp
call fcn.1400796c8
mov eax, dword [rsp + 0x54]
add rsp, 0x268
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
ret