Function at 0x14000e029
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push r15
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x158
mov r14, qword [rsp + 0x1c0]
mov edi, dword [rsp + 0x1c8]
lea eax, [rcx - 0x80]
mov r12d, ecx
mov r13, rdx
mov ebx, r8d
cmp eax, 0x80
ja 0x14000ed06
cmp r9w, 8
ja 0x14000ed06
test r8d, r8d
je 0x14000e07f
lea eax, [r8 - 1]
test eax, r8d
jne 0x14000ed06
movzx eax, r9w
mov dword [0x1400ce954], eax
cmp r9w, 1
jne 0x14000e0ef
mov rcx, qword [0x1400b4440]
mov edx, 1
shl rdx, 0x23
cmp qword [rcx], rdx
jg 0x14000e0b8
mov rcx, qword [0x1400b4a30]
mov edx, edi
and edx, 0x10000
or edx, dword [rcx]
je 0x14000e135
mov r9, qword [0x14007c928]
mov r8d, ebx
mov rdx, r13
mov ecx, r12d
mov dword [rsp + 0x1c8], edi
mov qword [rsp + 0x1c0], r14
add rsp, 0x158
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
jmp 0x140012a70
sub r9d, 6
cmp r9w, 2
ja 0x14000e135
lea rdx, [0x14007c920]
mov dword [rsp + 0x1c8], edi
mov r8d, ebx
mov ecx, r12d
mov qword [rsp + 0x1c0], r14
mov r9, qword [rdx + rax*8]
mov rdx, r13
add rsp, 0x158
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
jmp 0x140011e7c
mov rdx, qword [0x1400b5010]
mov rcx, r14
mov ebp, dword [rdx]
lea rdx, [0x14007c920]
mov rsi, qword [rdx + rax*8]
test ebp, ebp
je 0x14000e9fd
call fcn.14000d193
mov rcx, rsi
mov r15, rax
call fcn.14000d193
mov rdx, qword [0x14007c940]
mov rcx, rsi
mov qword [rsp + 0x60], rax
call sub.msvcrt.dll_strcmp
test eax, eax
jne 0x14000e1b8
mov rax, qword [0x1400b48c0]
mov rdx, qword [0x1400b48d0]
mov eax, dword [rax]
mov edx, dword [rdx]
mov ecx, eax
or ecx, edx
je 0x14000e1b8
mov dword [rsp + 0x30], edx
xor r8d, r8d
xor edx, edx
mov ecx, 1
mov dword [rsp + 0x28], eax
mov r9d, 0xc94
mov qword [rsp + 0x20], rsi
call fcn.14001e4cb
jmp 0x14000e1d2
mov qword [rsp + 0x20], rsi
mov r9d, 0xc96
xor r8d, r8d
xor edx, edx
mov ecx, 1
call fcn.14001e4cb
mov rdx, rsi
lea rcx, str.Formatting_to__s__using_VDS_
call fcn.1400380b9
xor r10d, r10d
xor r9d, r9d
xor r8d, r8d
mov dword [rsp + 0x20], r10d
mov edx, 1
or ecx, 0xffffffff
call fcn.140044e4a
mov r9d, 1
mov rdx, r13
mov ecx, r12d
mov r8d, 1
call fcn.140007e51
mov rcx, rax
mov qword [rsp + 0x68], rax
call fcn.14000d193
mov rsi, rax
test rax, rax
jne 0x14000e243
lea rcx, str.Could_not_read_volume_name
call fcn.1400380b9
mov dword [0x1400ce934], 0xc003001f
jmp 0x14000e4db
mov edx, 6
xor ecx, ecx
call qword [sym.imp.ole32.dll_CoInitializeEx]
xor ecx, ecx
xor r8d, r8d
xor r9d, r9d
mov qword [rsp + 0x40], rcx
or edx, 0xffffffff
xor ecx, ecx
mov dword [rsp + 0x38], r8d
xor r8d, r8d
mov qword [rsp + 0x30], r9
xor r9d, r9d
mov dword [rsp + 0x28], 3
mov dword [rsp + 0x20], 2
call qword [sym.imp.ole32.dll_CoInitializeSecurity]
lea rax, [rsp + 0x98]
xor edx, edx
mov rcx, qword [0x1400b4280]
mov qword [rsp + 0x20], rax
mov r9, qword [0x1400b4380]
mov r8d, 0x14
call qword [sym.imp.ole32.dll_CoCreateInstance]
mov ecx, eax
test eax, eax
je 0x14000e2db
call qword [sym.imp.KERNEL32.DLL_SetLastError]
mov dword [0x1400ce934], 0xc003001f
call fcn.140038579
lea rcx, str.Could_not_create_VDS_Loader_Instance:__s
mov rdx, rax
jmp 0x14000e4cb
mov rcx, qword [rsp + 0x98]
lea r8, [rsp + 0xa0]
lea rdx, [0x14008b836]
mov rax, qword [rcx]
call qword [rax + 0x18]
mov rcx, qword [rsp + 0x98]
mov ebp, eax
mov rax, qword [rcx]
call qword [rax + 0x10]
test ebp, ebp
je 0x14000e332
mov ecx, ebp
call qword [sym.imp.KERNEL32.DLL_SetLastError]
mov dword [0x1400ce934], 0xc003001f
call fcn.140038579
lea rcx, str.Could_not_load_VDS_Service:__s
mov rdx, rax
jmp 0x14000e4cb
mov rcx, qword [rsp + 0xa0]
mov rax, qword [rcx]
call qword [rax + 0x20]
mov ecx, eax
test eax, eax
je 0x14000e36a
call qword [sym.imp.KERNEL32.DLL_SetLastError]
mov dword [0x1400ce934], 0xc003001f
call fcn.140038579
lea rcx, str.VDS_Service_is_not_ready:__s
mov rdx, rax
jmp 0x14000e4cb
mov rcx, qword [rsp + 0xa0]
lea r8, [rsp + 0xa8]
mov edx, 1
mov rax, qword [rcx]
call qword [rax + 0x30]
mov ecx, eax
test eax, eax
jne 0x14000e3b2
lea rax, [rsp + 0x88]
lea r13, [rsp + 0xd0]
mov qword [rsp + 0x58], rax
lea rax, [rsp + 0xb0]
mov qword [rsp + 0x70], rax
jmp 0x14000e448
call qword [sym.imp.KERNEL32.DLL_SetLastError]
mov dword [0x1400ce934], 0xc003001f
call fcn.140038579
lea rcx, str.Could_not_query_VDS_Service_Providers:__s
mov rdx, rax
jmp 0x14000e4cb
mov rcx, qword [rsp + 0xd8]
lea rdx, [rsp + 0xe0]
mov rax, qword [rcx]
call qword [rax + 0x28]
mov ecx, eax
test eax, eax
jne 0x14000e600
mov r12, qword [sym.imp.ole32.dll_CoTaskMemFree]
mov rcx, qword [rsp + 0xe0]
mov r9, qword [rsp + 0x58]
mov edx, 1
lea r8, [rsp + 0xe8]
mov rax, qword [rcx]
call qword [rax + 0x18]
test eax, eax
je 0x14000e624
mov rcx, qword [rsp + 0xc8]
mov r9, qword [rsp + 0x58]
mov r8, r13
mov edx, 1
mov rax, qword [rcx]
call qword [rax + 0x18]
test eax, eax
je 0x14000e58f
mov r9, qword [rsp + 0x58]
mov r8, qword [rsp + 0x70]
mov edx, 1
mov rcx, qword [rsp + 0xa8]
mov rax, qword [rcx]
call qword [rax + 0x18]
test eax, eax
jne 0x14000e9b2
mov eax, dword [0x1400ce934]
test eax, eax
js 0x14000e4d5
mov rcx, qword [rsp + 0xb0]
mov rdx, qword [0x1400b4370]
lea r8, [rsp + 0xb8]
mov rax, qword [rcx]
call qword [rax]
mov rcx, qword [rsp + 0xb0]
mov r12d, eax
mov rax, qword [rcx]
call qword [rax + 0x10]
test r12d, r12d
je 0x14000e4e2
mov ecx, r12d
call qword [sym.imp.KERNEL32.DLL_SetLastError]
mov dword [0x1400ce934], 0xc003001f
call fcn.140038579
lea rcx, str.Could_not_get_VDS_Provider:__s
mov rdx, rax
call fcn.1400380b9
jmp 0x14000e9b2
cmp ax, 0x4c7
jne 0x14000e477
xor ebp, ebp
jmp 0x14000e9ce
mov rcx, qword [rsp + 0xb8]
mov rdx, qword [0x1400b4390]
lea r8, [rsp + 0xc0]
mov rax, qword [rcx]
call qword [rax]
mov rcx, qword [rsp + 0xb8]
mov r12d, eax
mov rax, qword [rcx]
call qword [rax + 0x10]
test r12d, r12d
je 0x14000e538
mov ecx, r12d
call qword [sym.imp.KERNEL32.DLL_SetLastError]
mov dword [0x1400ce934], 0xc003001f
call fcn.140038579
lea rcx, str.Could_not_get_VDS_Software_Provider:__s
mov rdx, rax
jmp 0x14000e4cb
mov rcx, qword [rsp + 0xc0]
lea rdx, [rsp + 0xc8]
mov rax, qword [rcx]
call qword [rax + 0x18]
mov rcx, qword [rsp + 0xc0]
mov r12d, eax
mov rax, qword [rcx]
call qword [rax + 0x10]
test r12d, r12d
je 0x14000e425
mov ecx, r12d
call qword [sym.imp.KERNEL32.DLL_SetLastError]
mov dword [0x1400ce934], 0xc003001f
call fcn.140038579
lea rcx, str.Could_not_get_VDS_Software_Provider_Packs:__s
mov rdx, rax
jmp 0x14000e4cb
mov eax, dword [0x1400ce934]
test eax, eax
jns 0x14000e5a3
cmp ax, 0x4c7
je 0x14000e9b2
mov rcx, qword [rsp + 0xd0]
mov rdx, qword [0x1400b4360]
lea r8, [rsp + 0xd8]
mov rax, qword [rcx]
call qword [rax]
mov rcx, qword [rsp + 0xd0]
mov r12d, eax
mov rax, qword [rcx]
call qword [rax + 0x10]
test r12d, r12d
je 0x14000e3d6
mov ecx, r12d
call qword [sym.imp.KERNEL32.DLL_SetLastError]
mov dword [0x1400ce934], 0xc003001f
call fcn.140038579
lea rcx, str.Could_not_query_VDS_Software_Provider_Pack:__s
mov rdx, rax
jmp 0x14000e4cb
call qword [sym.imp.KERNEL32.DLL_SetLastError]
mov dword [0x1400ce934], 0xc003001f
call fcn.140038579
lea rcx, str.Could_not_query_VDS_volumes:__s
mov rdx, rax
jmp 0x14000e4cb
mov eax, dword [0x1400ce934]
mov dword [rsp + 0x8c], 0x80004005
test eax, eax
jns 0x14000e643
cmp ax, 0x4c7
je 0x14000e9b2
mov rcx, qword [rsp + 0xe8]
mov rdx, qword [0x1400b43a0]
lea r8, [rsp + 0xf8]
mov rax, qword [rcx]
call qword [rax]
mov ecx, eax
test eax, eax
je 0x14000e689
call qword [sym.imp.KERNEL32.DLL_SetLastError]
mov dword [0x1400ce934], 0xc003001f
call fcn.140038579
lea rcx, str.Could_not_query_VDS_Volume_Interface:__s
mov rdx, rax
jmp 0x14000e4cb
mov rcx, qword [rsp + 0xf8]
lea rdx, [rsp + 0x110]
mov rax, qword [rcx]
call qword [rax + 0x18]
mov ecx, eax
test eax, eax
je 0x14000e6de
cmp eax, 0x42715
je 0x14000e6de
call qword [sym.imp.KERNEL32.DLL_SetLastError]
mov rcx, qword [rsp + 0xf8]
mov dword [0x1400ce934], 0xc003001f
mov rax, qword [rcx]
call qword [rax + 0x10]
call fcn.140038579
lea rcx, str.Could_not_query_VDS_Volume_Properties:__s
mov rdx, rax
jmp 0x14000e77f
mov rcx, qword [rsp + 0x140]
call r12
mov rcx, qword [rsp + 0xf8]
mov rdx, qword [0x1400b43b0]
lea r8, [rsp + 0x108]
mov rax, qword [rcx]
call qword [rax]
mov rcx, qword [rsp + 0xf8]
mov ebp, eax
mov rax, qword [rcx]
call qword [rax + 0x10]
test ebp, ebp
je 0x14000e73c
mov ecx, ebp
call qword [sym.imp.KERNEL32.DLL_SetLastError]
mov dword [0x1400ce934], 0xc003001f
call fcn.140038579
lea rcx, str.Could_not_access_VDS_VolumeMF3_interface:__s
mov rdx, rax
jmp 0x14000e77f
mov rcx, qword [rsp + 0x108]
lea rdx, [rsp + 0xf0]
lea r8, [rsp + 0x94]
mov rax, qword [rcx]
call qword [rax + 0x18]
mov ecx, eax
test eax, eax
je 0x14000e789
call qword [sym.imp.KERNEL32.DLL_SetLastError]
mov dword [0x1400ce934], 0xc003001f
call fcn.140038579
lea rcx, str.Could_not_query_VDS_VolumeGuidPathnames:__s
mov rdx, rax
call fcn.1400380b9
jmp 0x14000e3fd
cmp dword [rsp + 0x94], 1
jbe 0x14000e7aa
mov rax, qword [rsp + 0xf0]
lea rcx, str.Notice:_Volume__S_has_more_than_one_GUID...
mov rdx, qword [rax]
call fcn.1400380b9
mov rax, qword [rsp + 0xf0]
mov rcx, rsi
mov rdx, qword [rax]
call sub.msvcrt.dll_wcscmp
mov rcx, qword [rsp + 0xf0]
mov dword [rsp + 0x7c], eax
call r12
mov eax, dword [rsp + 0x7c]
test eax, eax
jne 0x14000e3fd
mov rdx, qword [0x14007c938]
mov rcx, r14
xor r12d, r12d
call sub.msvcrt.dll_strcmp
test eax, eax
jne 0x14000e7fd
lea rcx, str.UseUdfVersion
call fcn.14000d40a
mov r12d, eax
cmp ebx, 0x1ff
ja 0x14000e815
lea rcx, str.Using_default_cluster_size
xor ebx, ebx
call fcn.1400380b9
jmp 0x14000e823
mov edx, ebx
lea rcx, str.Using_cluster_size:__d_bytes
call fcn.1400380b9
mov ebp, edi
lea rdx, str.Slow
lea rax, str.Quick
mov dword [0x1400ce95c], 0
and ebp, 2
lea rcx, str._s_format_was_selected
cmovne rdx, rax
call fcn.1400380b9
test edi, 4
je 0x14000e864
lea rcx, str.NTFS_compression_is_enabled
call fcn.1400380b9
mov rcx, qword [rsp + 0x108]
lea rdx, [rsp + 0x100]
mov r9d, ebx
movzx r8d, r12w
lea rbx, [rsp + 0x90]
mov rax, qword [rcx]
mov qword [rsp + 0x30], rdx
mov dword [rsp + 0x28], edi
mov rdx, qword [rsp + 0x60]
lea rdi, [rsp + 0x8c]
mov qword [rsp + 0x20], r15
call qword [rax + 0x20]
mov r12, qword [sym.imp.KERNEL32.DLL_Sleep]
mov r13d, eax
test r13d, r13d
js 0x14000ed0a
mov rcx, qword [rsp + 0x100]
cmp dword [0x1400ce934], 0
mov rax, qword [rcx]
jns 0x14000e8d3
call qword [rax + 0x18]
jmp 0x14000e976
mov r8, rbx
mov rdx, rdi
call qword [rax + 0x28]
mov r13d, eax
test eax, eax
js 0x14000e969
mov r8d, dword [rsp + 0x90]
test ebp, ebp
je 0x14000e935
cmp r8d, 0x64
mov r9d, 0xc92
mov ecx, 1
mov dword [rsp + 0x28], 2
sbb eax, eax
xor r8d, r8d
xor edx, edx
add eax, 2
mov dword [rsp + 0x20], eax
call fcn.14001e4cb
mov eax, dword [rsp + 0x90]
mov ecx, 5
cvtsi2ss xmm1, rax
call fcn.140044d13
jmp 0x14000e950
xor edx, edx
mov r9d, 0x64
mov ecx, 4
mov dword [rsp + 0x20], edx
mov edx, 0xc91
call fcn.140044e4a
mov r13d, dword [rsp + 0x8c]
test r13d, r13d
je 0x14000e976
cmp r13d, 0x80042409
jne 0x14000e969
xor r13d, r13d
mov ecx, 0x1f4
call r12
jmp 0x14000e8ae
mov rcx, qword [rsp + 0x100]
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [rsp + 0x108]
mov rax, qword [rcx]
call qword [rax + 0x10]
cmp dword [0x1400ce934], 0
js 0x14000e4db
lea rcx, [0x14008bab3]
mov ebp, 1
call fcn.1400380b9
jmp 0x14000e9ce
cmp dword [0x1400ce934], 0
jne 0x14000e4db
mov dword [0x1400ce934], 0xc0030003
jmp 0x14000e4db
mov rcx, qword [rsp + 0x68]
call sub.msvcrt.dll_free
mov rcx, rsi
call sub.msvcrt.dll_free
mov rcx, r15
call sub.msvcrt.dll_free
mov rcx, qword [rsp + 0x60]
call sub.msvcrt.dll_free
call qword [sym.imp.ole32.dll_CoUninitialize]
jmp 0x14000ed36
call fcn.14000d193
mov rcx, rsi
mov qword [rsp + 0x60], rax
call fcn.14000d193
mov rdx, qword [0x14007c940]
mov rcx, rsi
mov qword [rsp + 0x68], rax
call sub.msvcrt.dll_strcmp
test eax, eax
jne 0x14000ea63
mov rax, qword [0x1400b48c0]
mov rdx, qword [0x1400b48d0]
mov eax, dword [rax]
mov edx, dword [rdx]
mov ecx, eax
or ecx, edx
je 0x14000ea63
mov dword [rsp + 0x30], edx
xor r8d, r8d
xor edx, edx
mov ecx, 1
mov dword [rsp + 0x28], eax
mov r9d, 0xc94
mov qword [rsp + 0x20], rsi
call fcn.14001e4cb
jmp 0x14000ea7d
mov qword [rsp + 0x20], rsi
mov r9d, 0xc96
xor r8d, r8d
xor edx, edx
mov ecx, 1
call fcn.14001e4cb
mov rdx, rsi
lea rcx, str.Formatting_to__s__using_IFS_
call fcn.1400380b9
mov r9d, 1
mov rdx, r13
mov ecx, r12d
mov r8d, 1
call fcn.140007e51
mov rcx, rax
mov qword [rsp + 0x58], rax
call fcn.14000d193
mov rsi, rax
test rax, rax
jne 0x14000ead8
mov rdx, qword [rsp + 0x58]
lea rcx, str.Could_not_read_volume_name___s_
call fcn.1400380b9
mov dword [0x1400ce934], 0xc003001f
jmp 0x14000ecde
mov rcx, rax
call sub.msvcrt.dll_wcslen
xor edx, edx
xor ecx, ecx
mov word [rsi + rax*2 - 2], 0
call sub.msvcrt.dll_setlocale
cmp qword [0x1400ce948], 0
mov r12, rax
jne 0x14000eb6b
lea r14, str.fmifs
lea r13, str.FormatEx
mov rcx, r14
call fcn.14000cd17
mov rdx, r13
mov rcx, rax
call qword [sym.imp.KERNEL32.DLL_GetProcAddress]
mov qword [0x1400ce948], rax
test rax, rax
jne 0x14000eb6b
call fcn.140038579
mov r8, r14
mov rdx, r13
lea rcx, [0x14008bb11]
mov r9, rax
call fcn.1400380b9
cmp dword [0x1400ce934], 0
js 0x14000ecde
call qword [sym.imp.KERNEL32.DLL_GetLastError]
movzx eax, ax
or eax, 0xc0030000
mov dword [0x1400ce934], eax
jmp 0x14000ecde
cmp qword [0x1400ce940], 0
jne 0x14000eb98
lea rcx, str.fmifs
call fcn.14000cd17
lea rdx, str.EnableVolumeCompression
mov rcx, rax
call qword [sym.imp.KERNEL32.DLL_GetProcAddress]
mov qword [0x1400ce940], rax
xor ecx, ecx
mov rdx, r12
call sub.msvcrt.dll_setlocale
cmp ebx, 0x1ff
ja 0x14000ebba
lea rcx, str.Using_default_cluster_size
xor ebx, ebx
call fcn.1400380b9
jmp 0x14000ebc8
mov edx, ebx
lea rcx, str.Using_cluster_size:__d_bytes
call fcn.1400380b9
xor eax, eax
mov r14d, edi
lea rdx, str.Slow
mov dword [0x1400ce95c], 0
mov dword [0x1400ce958], eax
and r14d, 2
lea rax, str.Quick
lea rcx, str._s_format_was_selected
cmovne rdx, rax
mov r12d, 4
lea r15, [0x14000ca11]
lea r13, str._s___Retrying...
call fcn.1400380b9
mov rax, qword [0x1400b4440]
mov r9, qword [rsp + 0x60]
mov rcx, rsi
mov r8, qword [rsp + 0x68]
mov edx, dword [rax + 0x18]
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], ebx
mov dword [rsp + 0x20], r14d
call qword [0x1400ce948]
mov eax, dword [0x1400ce934]
test eax, eax
jns 0x14000ec7b
cmp ax, 0x4c7
je 0x14000ecde
call fcn.140038579
mov rcx, r13
mov rdx, rax
call fcn.1400380b9
mov ecx, 0x1388
call qword [sym.imp.KERNEL32.DLL_Sleep]
dec r12
jne 0x14000ec13
cmp dword [0x1400ce934], 0
js 0x14000ecde
and edi, 4
jne 0x14000ec93
lea rcx, [0x14008bab3]
mov ebp, 1
call fcn.1400380b9
jmp 0x14000ecde
mov rcx, rsi
call sub.msvcrt.dll_wcslen
mov edx, 1
mov rcx, rsi
mov word [rsi + rax*2], 0x5c
call qword [0x1400ce940]
test al, al
je 0x14000ecc1
lea rcx, str.Enabled_NTFS_compression
call fcn.1400380b9
jmp 0x14000ecd5
call fcn.140038579
lea rcx, str.Could_not_enable_NTFS_compression:__s
mov rdx, rax
call fcn.1400380b9
cmp dword [0x1400ce934], 0
jns 0x14000ec80
mov rcx, qword [rsp + 0x58]
call sub.msvcrt.dll_free
mov rcx, rsi
call sub.msvcrt.dll_free
mov rcx, qword [rsp + 0x60]
call sub.msvcrt.dll_free
mov rcx, qword [rsp + 0x68]
call sub.msvcrt.dll_free
jmp 0x14000ed36
xor ebp, ebp
jmp 0x14000ed36
mov ecx, r13d
call qword [sym.imp.KERNEL32.DLL_SetLastError]
mov dword [0x1400ce934], 0xc003001f
call fcn.140038579
lea rcx, str.Could_not_format_drive:__s
mov rdx, rax
call fcn.1400380b9
jmp 0x14000e4db
mov eax, ebp
add rsp, 0x158
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
ret
push r15
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x598
movups xmmword [rsp + 0x570], xmm6
movups xmmword [rsp + 0x580], xmm7
xor eax, eax
lea rsi, [0x14007c980]
xor r11d, r11d
mov r10d, ecx
lea rdi, [rsp + 0x78]
mov ecx, 0x1e
mov rbx, r9
rep movsd dword [rdi], dword [rsi]
mov ecx, 0x100
mov qword [rsp + 0x48], r11
mov ebp, r8d
lea rdi, [rsp + 0x170]
mov qword [rsp + 0x58], r11
lea r14, [rsp + 0x170]
rep stosd dword [rdi], eax
mov rax, qword [0x1400b4d60]
mov ecx, r10d
mov r15, qword [rax]
call fcn.14000834e
mov rcx, rbx
mov r12, rax
call sub.msvcrt.dll_strlen
test r12, r12
sete dil
cmp rax, 4
setne al
or dil, al
jne 0x140011f2a
mov r8d, 3
lea rdx, [0x14008cf56]
mov rcx, rbx
call sub.msvcrt.dll_strncmp
test eax, eax
je 0x140011f3c
mov rax, qword [0x1400b42b0]
mov dword [rax], 0xc0030057
jmp 0x140012030
mov edx, 0x20
mov rcx, r12
call sub.msvcrt.dll_strchr
test rax, rax
je 0x140011f5a
lea rcx, str.Notice:_Using_physical_device_to_access_partition_data
call fcn.1400380b9
mov r13, qword [0x1400b42a0]
mov rcx, rbx
mov rdx, qword [r13 + 0x30]
call sub.msvcrt.dll_strcmp
test eax, eax
je 0x140011fa8
mov rdx, qword [r13 + 0x38]
mov rcx, rbx
call sub.msvcrt.dll_strcmp
test eax, eax
je 0x140011fa8
mov rdx, qword [r13 + 0x40]
mov rcx, rbx
call sub.msvcrt.dll_strcmp
lea rcx, str.ext4_file_system_is_not_supported__defaulting_to_ext3
test eax, eax
je 0x140011f9f
lea rcx, str.Invalid_ext_file_system_version_requested__defaulting_to_ext3
call fcn.1400380b9
mov rbx, qword [r13 + 0x38]
mov qword [rsp + 0x20], rbx
mov r9d, 0xc96
xor r8d, r8d
mov edx, 1
mov ecx, 1
call fcn.14001e4cb
xor r9d, r9d
xor r8d, r8d
mov edx, 1
mov dword [rsp + 0x20], r9d
or ecx, 0xffffffff
xor r9d, r9d
call fcn.140044e4a
lea r8, [rsp + 0x48]
mov edx, 0x400
mov rcx, r12
call fcn.1400620ff
mov esi, eax
test eax, eax
jne 0x140012002
mov rax, qword [rsp + 0x48]
test rax, rax
jne 0x140012037
mov rbx, qword [0x1400b42b0]
cmp dword [rbx], 0
js 0x14001201a
mov ecx, 0x1e
call fcn.140061fef
mov dword [rbx], eax
mov ecx, esi
call fcn.140011a20
lea rcx, str.Could_not_read_device_size:__s
mov rdx, rax
call fcn.1400380b9
xor ebx, ebx
jmp 0x140012a2e
shl rax, 0xa
lea rdx, [rsp + 0x78]
mov qword [rsp + 0x48], rax
cmp rax, qword [rdx]
jb 0x14001206f
inc esi
add rdx, 0x18
cmp esi, 5
jne 0x140012045
mov r8d, 0x131
lea rdx, [0x14008cf1e]
lea rcx, str.i___ARRAYSIZE_ext2fs_default_
call qword [sym.imp.msvcrt.dll__wassert]
cmp ebp, 0x3ff
ja 0x140012089
movsxd rdx, esi
imul rdx, rdx, 0x18
mov ebp, dword [rsp + rdx + 0x80]
test ebp, ebp
je 0x140012090
lea ecx, [rbp - 1]
and ecx, ebp
je 0x1400120a6
mov r8d, 0x134
lea rdx, [0x14008cf1e]
lea rcx, str.IS_POWER_OF_2_BlockSize_
jmp 0x140012069
xor r8d, r8d
mov edx, 0x400
mov dword [rsp + 0x188], r8d
cmp ecx, 7
je 0x140012104
mov r9d, edx
lea r8d, [rcx + 1]
shl r9d, cl
cmp r9d, ebp
jne 0x1400120fc
test dil, dil
je 0x1400120d6
mov dword [rsp + 0x188], ecx
xor edx, edx
mov dword [rsp + 0x18c], ecx
mov rcx, rbx
div rbp
mov rdx, qword [r13 + 0x30]
mov qword [rsp + 0x48], rax
mov rdi, rax
call sub.msvcrt.dll_strcmp
test eax, eax
je 0x14001213f
jmp 0x14001212f
mov ecx, r8d
mov dil, 1
jmp 0x1400120b6
test dil, dil
jne 0x140012122
mov r8d, 0x139
lea rdx, [0x14008cf1e]
lea rcx, str.EXT2_BLOCK_SIZE_BITS_features____EXT2_MAX_BLOCK_LOG_SIZE
jmp 0x140012069
mov dword [rsp + 0x188], 7
jmp 0x140012109
mov rdx, qword [r13 + 0x38]
mov rcx, rbx
call sub.msvcrt.dll_strcmp
test eax, eax
jne 0x140012172
mov eax, 0xffffffff
cmp rax, rdi
jae 0x140012172
mov rbx, qword [0x1400b42b0]
cmp dword [rbx], 0
js 0x140012161
mov ecx, 0x1204
call fcn.140061fef
mov dword [rbx], eax
lea rcx, str.Volume_size_is_too_large_for_ext2_or_ext3
call fcn.1400380b9
jmp 0x140012030
mov rdx, rdi
mov rcx, r14
call fcn.140054831
mov rax, qword [rsp + 0x48]
test rax, rax
js 0x14001218e
cvtsi2ss xmm0, rax
jmp 0x1400121a3
mov rdx, rax
and eax, 1
shr rdx, 1
or rdx, rax
cvtsi2ss xmm0, rdx
addss xmm0, xmm0
mulss xmm0, dword [0x14008d428]
comiss xmm0, dword [0x14008d410]
jae 0x1400121bb
cvttss2si rdx, xmm0
jmp 0x1400121cd
subss xmm0, dword [0x14008d410]
cvttss2si rdx, xmm0
btc rdx, 0x3f
movsxd rsi, esi
mov rcx, r14
call fcn.140054874
imul rsi, rsi, 0x18
mov rcx, r14
mov dword [rsp + 0x1bc], 1
mov eax, dword [rsp + rsi + 0x84]
mov word [rsp + 0x1c8], ax
call fcn.1400547aa
mov esi, dword [rsp + rsi + 0x88]
or edx, 0xffffffff
mov ecx, esi
shr rax, cl
mov ecx, 0xffffffff
cmp rcx, rax
jb 0x140012227
mov rcx, r14
call fcn.1400547aa
mov ecx, esi
shr rax, cl
mov rdx, rax
mov ecx, dword [rsp + 0x188]
mov r8, qword [rsp + 0x48]
mov r9d, 0x400
mov dword [rsp + 0x170], edx
shl r9d, cl
lea rcx, str._d_possible_inodes_out_of__lld_blocks__block_size___d_
call fcn.1400380b9
mov rcx, r14
call fcn.14005485b
lea rcx, str._lld_blocks___0.1f____reserved_for_the_super_user
movabs r8, 0x4014000000000000
mov rdx, rax
mov rax, qword [0x14008d430]
movq xmm2, rax
call fcn.1400380b9
mov edx, 0x40000005
or dword [rsp + 0x1d4], 3
mov eax, dword [rsp + 0x1cc]
shl rdx, 3
or qword [rsp + 0x1cc], rdx
cmp byte [rbx + 3], 0x32
je 0x1400122ac
or eax, 0x2c
mov dword [rsp + 0x1cc], eax
lea rax, [rsp + 0x58]
mov r9, r15
mov r8, r14
mov edx, 0x24000
mov qword [rsp + 0x20], rax
mov rcx, r12
mov dword [rsp + 0x270], 0xc
call fcn.14005bfa0
mov esi, eax
test eax, eax
je 0x14001230b
mov rdi, qword [0x1400b42b0]
cmp dword [rdi], 0
js 0x1400122f2
mov ecx, 0xd
call fcn.140061fef
mov dword [rdi], eax
mov ecx, esi
call fcn.140011a20
mov rdx, rbx
lea rcx, str.Could_not_initialize__s_features:__s
mov r8, rax
jmp 0x1400129fe
mov rax, qword [rsp + 0x58]
mov ecx, 0x10
mov rdi, qword [rax + 8]
movsxd rdx, dword [rdi + 0x18]
call sub.msvcrt.dll_calloc
mov r8d, 0x163
lea rdx, [0x14008cf1e]
lea rcx, str.buf___NULL
mov rsi, rax
test rax, rax
je 0x140012069
mov rcx, rdi
xor edx, edx
mov r9, rax
mov r8d, 0x10
call fcn.14005ef2b
mov rcx, rsi
mov edi, eax
call sub.msvcrt.dll_free
test edi, edi
je 0x140012394
mov rsi, qword [0x1400b42b0]
cmp dword [rsi], 0
js 0x14001237b
mov ecx, 0x1d
call fcn.140061fef
mov dword [rsi], eax
mov ecx, edi
call fcn.140011a20
mov rdx, rbx
lea rcx, str.Could_not_zero__s_superblock_area:__s
mov r8, rax
jmp 0x1400129fe
mov rax, qword [rsp + 0x58]
mov rsi, qword [sym.imp.ole32.dll_CoCreateGuid]
mov rcx, qword [rax + 0x20]
add rcx, 0x68
call rsi
mov rcx, qword [rsp + 0x58]
call fcn.14005684e
mov rax, qword [rsp + 0x58]
mov rcx, qword [rax + 0x20]
mov byte [rcx + 0xfc], 1
add rcx, 0xec
call rsi
mov rbp, qword [rsp + 0x58]
cmp qword [rsp + 0x600], 0
mov rdi, qword [rbp + 0x20]
mov word [rdi + 0x36], 0xffff
mov dword [rdi + 0x48], 5
mov word [rdi + 0x3c], 1
je 0x14001244b
mov rcx, qword [rsp + 0x600]
call sub.msvcrt.dll_strlen
lea rdx, [rdi + 0x78]
mov rsi, qword [rsp + 0x600]
lea rcx, [rax + 1]
mov eax, 0x10
mov rdi, rdx
cmp rcx, rax
cmova rcx, rax
mov ecx, ecx
rep movsb byte [rdi], byte [rsi]
mov rcx, qword [rsp + 0x600]
mov rsi, qword [rbp + 0x20]
call sub.msvcrt.dll_strlen
lea rdx, [rax + 1]
cmp rdx, 0x10
mov edx, 0xf
cmovae rax, rdx
mov byte [rsi + rax + 0x78], 0
mov rcx, qword [rsp + 0x58]
call fcn.140053ef0
mov esi, eax
test eax, eax
je 0x14001248c
mov rdi, qword [0x1400b42b0]
cmp dword [rdi], 0
js 0x140012473
mov ecx, 0xd
call fcn.140061fef
mov dword [rdi], eax
mov ecx, esi
call fcn.140011a20
mov rdx, rbx
lea rcx, str.Could_not_allocate__s_tables:__s
mov r8, rax
jmp 0x1400129fe
mov rcx, qword [rsp + 0x58]
lea rdx, [rcx + 0x50]
call fcn.14005b83e
mov ecx, eax
test eax, eax
je 0x1400124b7
call fcn.140011a20
mov rdx, rbx
lea rcx, str.Could_not_set__s_cluster_bitmap:__s
mov r8, rax
jmp 0x1400129fe
cmp byte [rbx + 3], 0x32
movss xmm0, dword [0x14008d418]
mov dword [0x1400cea80], 0
movss xmm6, dword [0x14008d414]
jne 0x1400124da
movaps xmm0, xmm6
mov rax, qword [rsp + 0x58]
movss xmm7, dword [0x14008d40c]
movss dword [0x14007ca00], xmm0
mov eax, dword [rax + 0x30]
cvtsi2ss xmm2, rax
mov rdx, rax
divss xmm2, xmm7
comiss xmm2, xmm6
jbe 0x140012509
cvtss2sd xmm2, xmm2
jmp 0x140012511
movsd xmm2, qword [0x14008d420]
movq r8, xmm2
lea rcx, str.Creating__d_inode_sets:__1_marker___0.1f_set_s__
xor esi, esi
mov ebp, 0x400
call fcn.1400380b9
lea r13, [rsp + 0x50]
mov rax, qword [rsp + 0x58]
mov edx, dword [rax + 0x30]
cmp edx, esi
jle 0x140012610
mov rcx, rsi
call fcn.140011cdf
test eax, eax
jne 0x140012030
mov rcx, qword [rsp + 0x58]
mov edx, esi
mov r14d, ebp
call fcn.140054b3b
mov qword [rsp + 0x50], rax
mov rax, qword [rsp + 0x58]
mov rdx, qword [rax + 0x20]
mov ecx, dword [rdx + 0x18]
mov edi, dword [rdx + 0x28]
mov edx, esi
shl r14d, cl
mov rcx, rax
call fcn.140054cec
sub edi, eax
mov eax, pe_nt_image_headers64
mov ecx, edi
mov rdi, qword [rsp + 0x58]
mov rdx, qword [rdi + 0x20]
cmp dword [rdx + 0x4c], 0
je 0x14001259a
movzx eax, word [rdx + 0x58]
imul ecx, eax
mov edx, r14d
inc rsi
call fcn.14005cf68
mov rdx, qword [rsp + 0x50]
mov rcx, rdi
mov r9, r13
mov dword [rsp + 0x3c], eax
mov r8d, eax
lea rax, [rsp + 0x3c]
mov qword [rsp + 0x20], rax
call fcn.1400603aa
mov edi, eax
test eax, eax
je 0x14001252e
mov rbx, qword [0x1400b42b0]
cmp dword [rbx], 0
js 0x1400125eb
mov ecx, 0x1d
call fcn.140061fef
mov dword [rbx], eax
mov ecx, edi
call fcn.140011a20
mov r8d, dword [rsp + 0x3c]
mov rdx, qword [rsp + 0x50]
lea rcx, str._r_nCould_not_zero_inode_set_at_position__llu___d_blocks_:__s
mov r9, rax
call fcn.1400380b9
jmp 0x140012030
lea rdi, [0x14008d277]
mov rcx, rdi
call fcn.1400381b2
mov rcx, qword [rsp + 0x58]
xor r9d, r9d
mov r8d, 2
mov edx, 2
call fcn.14005fee0
mov esi, eax
test eax, eax
je 0x14001266e
mov rdi, qword [0x1400b42b0]
cmp dword [rdi], 0
js 0x140012655
mov ecx, 0x570
call fcn.140061fef
mov dword [rdi], eax
mov ecx, esi
call fcn.140011a20
mov rdx, rbx
lea rcx, str.Failed_to_create__s_root_dir:__s
mov r8, rax
jmp 0x1400129fe
mov rcx, qword [rsp + 0x58]
lea r9, str.lostfound
xor r8d, r8d
mov edx, 2
mov esi, 3
mov dword [rcx + 0xa8], 0x3f
call fcn.14005fee0
mov ebp, eax
test eax, eax
je 0x1400126e0
mov rsi, qword [0x1400b42b0]
cmp dword [rsi], 0
js 0x1400126b4
mov ecx, 0x570
call fcn.140061fef
mov dword [rsi], eax
mov ecx, ebp
call fcn.140011a20
mov rdx, rbx
lea rcx, str.Failed_to_create__s_lostfound_dir:__s
mov r8, rax
jmp 0x1400129fe
cmp esi, eax
jge 0x1400126f9
mov edx, esi
mov r8d, 1
inc esi
call fcn.1400535d1
mov rcx, qword [rsp + 0x58]
mov eax, 0xb
mov rdx, qword [rcx + 0x20]
cmp dword [rdx + 0x4c], 0
je 0x1400126cd
mov eax, dword [rdx + 0x54]
jmp 0x1400126cd
or dword [rcx + 0x10], 0x12
mov rcx, qword [rcx + 0x48]
mov edx, 1
call fcn.14005b1f0
mov esi, eax
test eax, eax
je 0x14001273f
mov rbx, qword [0x1400b42b0]
cmp dword [rbx], 0
js 0x140012729
mov ecx, 0x1d
call fcn.140061fef
mov dword [rbx], eax
mov ecx, esi
call fcn.140011a20
lea rcx, str.Could_not_set_inode_bitmaps:__s
mov rdx, rax
jmp 0x14001202b
mov rcx, qword [rsp + 0x58]
mov r8d, 1
mov edx, 1
call fcn.1400535d1
mov rcx, qword [rsp + 0x58]
xor edx, edx
call fcn.1400540ff
mov esi, eax
test eax, eax
je 0x140012794
mov rbx, qword [0x1400b42b0]
cmp dword [rbx], 0
js 0x14001277e
mov ecx, 0x1d
call fcn.140061fef
mov dword [rbx], eax
mov ecx, esi
call fcn.140011a20
lea rcx, str.Could_not_set_inode_stats:__s
mov rdx, rax
jmp 0x14001202b
cmp byte [rbx + 3], 0x32
je 0x14001284b
mov dword [0x1400cea80], 0x3f000000
mov rax, qword [rsp + 0x58]
mov rcx, qword [rax + 0x20]
call fcn.1400547aa
mov rcx, rax
call fcn.140060526
shr eax, 1
cvtsi2ss xmm2, eax
mov esi, eax
divss xmm2, xmm7
comiss xmm2, xmm6
jbe 0x1400127d5
cvtss2sd xmm2, xmm2
jmp 0x1400127dd
movsd xmm2, qword [0x14008d420]
movq r8, xmm2
mov edx, esi
lea rcx, str.Creating__d_journal_blocks:__1_marker___0.1f_block_s__
call fcn.1400380b9
mov r8d, dword [rsp + 0x608]
mov rcx, qword [rsp + 0x58]
mov edx, esi
and r8d, 2
or r8d, 4
call fcn.140060c04
mov rcx, rdi
mov esi, eax
call fcn.1400381b2
test esi, esi
je 0x14001284b
mov rdi, qword [0x1400b42b0]
cmp dword [rdi], 0
js 0x140012832
mov ecx, 0x1d
call fcn.140061fef
mov dword [rdi], eax
mov ecx, esi
call fcn.140011a20
mov rdx, rbx
lea rcx, str.Could_not_create__s_journal:__s
mov r8, rax
jmp 0x1400129fe
bt dword [rsp + 0x608], 0x12
jae 0x1400129c2
xor edx, edx
xor ecx, ecx
mov byte [rsp + 0x77], 0
lea rsi, [rsp + 0x44]
movabs rax, 0xa6e6f696e75202f
mov dword [rsp + 0x40], edx
lea rdi, [rsp + 0xf2]
mov qword [rsp + 0x6f], rax
call qword [sym.imp.msvcrt.dll__time64]
mov ecx, 0x7e
lea r9, str.persistence.conf
mov r8d, 2
mov word [rsp + 0xf0], 0x81a4
mov rdx, rax
xor eax, eax
rep stosb byte [rdi], al
mov eax, 0xffffffff
mov qword [rsp + 0x20], rsi
mov rcx, qword [rsp + 0x58]
mov word [rsp + 0x10a], 1
cmp rdx, rax
mov dword [rsp + 0xf4], 8
cmovle rax, rdx
mov edx, 2
mov dword [rsp + 0xf8], eax
mov dword [rsp + 0xfc], eax
mov dword [rsp + 0x100], eax
call fcn.140060ee5
mov qword [rsp + 0x20], rsi
mov rcx, qword [rsp + 0x58]
xor r9d, r9d
mov r8d, 0x11ed
mov edx, 2
call fcn.140052a51
mov r9d, dword [rsp + 0x44]
mov dword [rsp + 0x20], 1
lea r8, str.persistence.conf
mov rcx, qword [rsp + 0x58]
mov edx, 2
call fcn.14005f3fa
mov edx, dword [rsp + 0x44]
mov rcx, qword [rsp + 0x58]
mov r8d, 1
call fcn.1400535d1
mov edx, dword [rsp + 0x44]
mov rcx, qword [rsp + 0x58]
lea r8, [rsp + 0xf0]
call fcn.14005ebcb
mov edx, dword [rsp + 0x44]
mov rcx, qword [rsp + 0x58]
lea r9, [rsp + 0x60]
mov r8d, 1
call fcn.14005957f
mov rcx, qword [rsp + 0x60]
lea rdx, [rsp + 0x6f]
lea r9, [rsp + 0x40]
mov r8d, 8
call fcn.140059c5a
lea rdx, str.persistence.conf
test eax, eax
jne 0x1400129ac
cmp dword [rsp + 0x40], 8
lea rcx, str.Created__s_file
je 0x1400129b3
lea rcx, str.Error:_Could_not_create__s_file
call fcn.1400380b9
mov rcx, qword [rsp + 0x60]
call fcn.140059797
mov rcx, qword [rsp + 0x58]
call fcn.1400564e0
mov esi, eax
test eax, eax
je 0x140012a08
mov rdi, qword [0x1400b42b0]
cmp dword [rdi], 0
js 0x1400129ea
mov ecx, 0x1d
call fcn.140061fef
mov dword [rdi], eax
mov ecx, esi
call fcn.140011a20
mov rdx, rbx
lea rcx, str.Could_not_create__s_volume:__s
mov r8, rax
call fcn.1400380b9
jmp 0x140012030
xor eax, eax
mov r9d, 0x64
mov r8d, 0x64
mov edx, 0xc91
mov dword [rsp + 0x20], eax
mov ecx, 4
mov ebx, 1
call fcn.140044e4a
mov rcx, r12
call sub.msvcrt.dll_free
mov rcx, qword [rsp + 0x58]
call fcn.14005a109
nop
movups xmm6, xmmword [rsp + 0x570]
movups xmm7, xmmword [rsp + 0x580]
mov eax, ebx
add rsp, 0x598
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
ret
push r15
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x268
movabs rax, 0x20454d414e204f4e
mov dword [rsp + 0x2b0], ecx
mov r12d, r8d
mov rcx, r9
mov qword [rsp + 0x2b8], rdx
mov qword [rsp + 0x8c], rax
mov dword [rsp + 0x94], 0x202020
test r9, r9
je 0x140012ad4
mov r8d, 3
lea rdx, [0x14008d440]
call sub.msvcrt.dll_strncmp
mov dword [rsp + 0x5c], eax
test eax, eax
je 0x140012afb
mov rax, qword [0x1400b42b0]
xor ebp, ebp
xor r12d, r12d
xor r13d, r13d
mov dword [rsp + 0x5c], ebp
xor edi, edi
xor ebx, ebx
xor esi, esi
mov dword [rax], 0xc0030057
xor r15d, r15d
jmp 0x1400134c8
xor r8d, r8d
mov r9d, 0xc96
mov edx, 1
xor ebx, ebx
lea rax, str.Large_FAT32
mov ecx, 1
mov qword [rsp + 0x20], rax
call fcn.14001e4cb
mov dword [rsp + 0x20], ebx
xor r9d, r9d
xor r8d, r8d
mov edx, 1
or ecx, 0xffffffff
call fcn.140044e4a
lea rcx, [rsp + 0x160]
call qword [sym.imp.KERNEL32.DLL_GetLocalTime]
mov ax, word [rsp + 0x16e]
mov r14w, word [rsp + 0x166]
mov r9d, 1
mov bp, word [rsp + 0x162]
mov rdx, qword [rsp + 0x2b8]
mov r8d, 1
mov word [rsp + 0x60], ax
mov eax, dword [rsp + 0x16c]
mov ecx, dword [rsp + 0x2b0]
mov word [rsp + 0x6c], ax
mov ax, word [rsp + 0x16a]
mov word [rsp + 0x70], ax
mov eax, dword [rsp + 0x168]
mov word [rsp + 0x74], ax
mov eax, dword [rsp + 0x160]
mov word [rsp + 0x76], ax
mov rax, qword [0x1400b5060]
cmp dword [rax], 0
mov dword [rsp + 0x20], 0
je 0x140012bcb
call fcn.14000909b
jmp 0x140012bd0
call fcn.140009042
mov rbx, qword [0x1400b42b0]
mov r15, rax
lea rax, [rax - 1]
cmp dword [rbx], 0
js 0x140012bfb
cmp rax, 0xfffffffffffffffd
jbe 0x140012c0a
lea rcx, str.Invalid_logical_volume_handle
call fcn.1400380b9
mov dword [rbx], 0xc0030006
xor r12d, r12d
xor r13d, r13d
xor edi, edi
xor ebx, ebx
jmp 0x140012f60
mov rcx, r15
lea rdi, [rsp + 0x88]
call fcn.14000a3fa
xor r11d, r11d
xor r9d, r9d
xor r8d, r8d
lea rax, [rsp + 0x98]
mov qword [rsp + 0x38], r11
mov rsi, qword [sym.imp.KERNEL32.DLL_DeviceIoControl]
mov edx, 0x70000
mov qword [rsp + 0x30], rdi
mov rcx, r15
mov dword [rsp + 0x28], 0x18
mov qword [rsp + 0x20], rax
call rsi
test eax, eax
jne 0x140012ccd
xor r10d, r10d
xor r9d, r9d
xor r8d, r8d
mov qword [rsp + 0x30], rdi
lea rax, [rsp + 0x160]
mov qword [rsp + 0x38], r10
mov edx, 0x700a0
mov rcx, r15
mov dword [rsp + 0x28], 0x100
mov qword [rsp + 0x20], rax
call rsi
test eax, eax
jne 0x140012cad
call fcn.140038579
lea rcx, str.IOCTL_DISK_GET_DRIVE_GEOMETRY_error:__s
mov rdx, rax
call fcn.1400380b9
lea rcx, str.Failed_to_get_device_geometry__both_regular_and__ex_
jmp 0x140012d8f
mov rax, qword [rsp + 0x170]
movups xmm0, xmmword [rsp + 0x160]
mov qword [rsp + 0xa8], rax
movups xmmword [rsp + 0x98], xmm0
cmp dword [rsp + 0xac], 0x1ff
ja 0x140012ce5
mov dword [rsp + 0xac], 0x200
mov rbx, qword [0x1400b42b0]
cmp dword [rbx], 0
js 0x140012bfb
xor r9d, r9d
xor r8d, r8d
mov rsi, qword [sym.imp.KERNEL32.DLL_DeviceIoControl]
mov rcx, r15
lea rdi, [rsp + 0x88]
lea rax, [rsp + 0xb0]
mov qword [rsp + 0x38], r9
xor r9d, r9d
mov qword [rsp + 0x30], rdi
mov edx, 0x74004
mov dword [rsp + 0x28], 0x20
mov qword [rsp + 0x20], rax
call rsi
test eax, eax
jne 0x140012de5
xor r8d, r8d
xor r9d, r9d
mov qword [rsp + 0x30], rdi
mov edx, 0x70048
lea rax, [rsp + 0xd0]
mov qword [rsp + 0x38], r8
mov rcx, r15
xor r8d, r8d
mov dword [rsp + 0x28], 0x90
mov qword [rsp + 0x20], rax
call rsi
test eax, eax
jne 0x140012d9f
call fcn.140038579
lea rcx, str.IOCTL_DISK_GET_PARTITION_INFO_error:__s
mov rdx, rax
call fcn.1400380b9
lea rcx, str.Failed_to_get_partition_info__both_regular_and__ex_
call fcn.1400380b9
mov dword [rbx], 0xc0030032
jmp 0x140012bfb
xor edx, edx
mov rax, qword [rsp + 0xd8]
xor ecx, ecx
mov qword [rsp + 0xc4], rdx
mov rdx, qword [rsp + 0xe0]
mov dword [rsp + 0xcc], ecx
mov ecx, dword [rsp + 0xac]
mov qword [rsp + 0xb8], rdx
cqo
mov qword [rsp + 0xb0], rax
idiv rcx
mov dword [rsp + 0xc0], eax
mov rbx, qword [0x1400b42b0]
mov eax, dword [rbx]
shr eax, 0x1f
mov dword [rsp + 0x68], eax
jne 0x140012bfb
mov r9, qword [rsp + 0xb8]
mov ecx, dword [rsp + 0xac]
mov rax, r9
mov rsi, rcx
cqo
idiv rcx
mov qword [rsp + 0x50], rax
cmp rax, 0xffff
ja 0x140012e39
lea rcx, str.This_drive_is_too_small_for_FAT32___there_must_be_at_least_64K_clusters
call fcn.1400380b9
mov dword [rbx], 0xe0031203
jmp 0x140012bfb
mov rdi, qword [rsp + 0x50]
mov eax, 0xfffffffe
cmp rax, rdi
jae 0x140012e5f
lea rcx, str.This_drive_is_too_big_for_FAT32___max_2TB_supported
call fcn.1400380b9
mov dword [rbx], 0xe0031204
jmp 0x140012bfb
test r12d, r12d
jne 0x140012ef0
mov r12d, 0x200
cmp r9, 0x3ffffff
jle 0x140012ef0
mov r12d, 0x400
cmp r9, 0x7ffffff
jle 0x140012ef0
mov r12d, 0x800
cmp r9, 0xfffffff
jle 0x140012ef0
movabs rax, 0x1ffffffff
mov r12d, 0x1000
cmp r9, rax
jle 0x140012ef0
movabs rax, 0x3ffffffff
mov r12d, 0x2000
cmp r9, rax
jle 0x140012ef0
movabs rax, 0x7ffffffff
mov r12d, 0x4000
cmp r9, rax
jle 0x140012ef0
movabs rax, 0x1ffffffffff
mov r12d, 0x10000
cmp r9, rax
mov eax, 0x8000
cmovle r12d, eax
mov eax, esi
mov edx, 1
mov ecx, esi
mov qword [rsp + 0x78], r9
mov qword [rsp + 0x48], rax
call sub.msvcrt.dll_calloc
mov edx, 1
mov ecx, esi
mov rbx, rax
call sub.msvcrt.dll_calloc
mov edx, 1
mov ecx, esi
mov rdi, rax
call sub.msvcrt.dll_calloc
test rbx, rbx
mov r13, rax
sete al
test rdi, rdi
sete dl
or al, dl
jne 0x140012f43
test r13, r13
mov r9, qword [rsp + 0x78]
jne 0x140012f67
lea rcx, str.Failed_to_allocate_memory
call fcn.1400380b9
mov eax, 0xc0030008
mov rdx, qword [0x1400b42b0]
mov dword [rdx], eax
xor r12d, r12d
xor esi, esi
jmp 0x1400134c8
mov eax, dword [rsp + 0x60]
mov r8d, 0xa
xor edx, edx
mov ecx, ebp
shl ecx, 8
mov word [rbx], 0x58eb
div r8w
mov edx, dword [rsp + 0x70]
mov byte [rbx + 2], 0x90
mov word [rbx + 0xb], si
mov word [rbx + 0xe], 0x20
mov dword [rbx + 0x30], 0x60001
mov word [rbx + 0x40], pe_nt_image_headers64
mov byte [rbx + 0x42], 0x29
add dx, word [rsp + 0x76]
add ecx, eax
mov eax, dword [rsp + 0x6c]
add ecx, r14d
shl eax, 8
add ecx, eax
mov eax, dword [rsp + 0x74]
movzx ecx, cx
shl eax, 8
add edx, eax
shl edx, 0x10
lea eax, [rcx + rdx]
xor edx, edx
mov dword [rsp + 0x60], eax
movabs rax, 0x312e344e4957534d
mov qword [rbx + 3], rax
mov eax, r12d
div esi
mov byte [rbx + 0xd], al
mov r14d, eax
movabs rax, 0xf80000000002
mov qword [rbx + 0x10], rax
mov eax, dword [rsp + 0xa8]
movzx ecx, r14b
mov word [rbx + 0x18], ax
mov eax, dword [rsp + 0xa4]
mov word [rbx + 0x1a], ax
mov eax, dword [rsp + 0xc0]
mov dword [rbx + 0x1c], eax
mov eax, dword [rsp + 0x50]
lea edx, [rax - 0x20]
mov dword [rbx + 0x20], eax
lea rax, [rcx + rcx]
add rax, rdx
mov r11, rdx
mov edx, esi
imul rcx, rdx
xor edx, edx
shr rcx, 2
add rcx, 2
div rcx
lea rbp, [rax + 1]
mov eax, 1
shl rax, 0x21
mov dword [rbx + 0x24], ebp
mov qword [rbx + 0x28], rax
mov eax, dword [rsp + 0x60]
mov dword [rbx + 0x43], eax
mov rax, qword [rsp + 0x8c]
mov qword [rbx + 0x47], rax
mov eax, dword [rsp + 0x93]
mov dword [rbx + 0x4e], eax
movabs rax, 0x2020203233544146
mov qword [rbx + 0x52], rax
mov word [rbx + 0x1fe], 0xaa55
cmp esi, 0x200
je 0x14001309f
lea eax, [rsi - 2]
mov byte [rbx + rax], 0x55
lea eax, [rsi - 1]
mov byte [rbx + rax], 0xaa
movabs rax, 0xfffffff0ffffff8
lea r10d, [rbp + rbp]
mov dword [rdi], 0x41615252
mov qword [r13], rax
mov eax, r11d
mov dword [rdi + 0x1e4], 0x61417272
sub eax, r10d
mov qword [rdi + 0x1e8], 0xffffffffffffffff
mov dword [rdi + 0x1fc], 0xaa550000
mov dword [r13 + 8], 0xfffffff
cmp r12d, esi
jae 0x140013104
mov r8d, 0x172
lea rdx, str.format_fat32.c
lea rcx, str.SectorsPerCluster___0
call qword [sym.imp.msvcrt.dll__wassert]
xor edx, edx
div r14d
mov dword [rsp + 0x6c], eax
mov r12d, eax
cmp eax, 0xfffffff
jbe 0x140013135
lea rcx, str.This_drive_has_more_than_228_clusters__try_to_specify_a_larger_cluster_size_or_use_the_default
call fcn.1400380b9
mov rax, qword [0x1400b42b0]
mov dword [rax], 0xc0031203
jmp 0x140012f5d
cmp r12, 0xffff
ja 0x140013154
lea rcx, str.FAT32_must_have_at_least_65536_clusters__try_to_specify_a_smaller_cluster_size_or_use_the_default
call fcn.1400380b9
mov eax, 0xc0031203
jmp 0x140012f54
lea eax, [rsi - 1]
xor edx, edx
lea rax, [rax + r12*4]
div qword [rsp + 0x48]
cmp rbp, rax
jae 0x14001317d
lea rcx, str.This_drive_is_too_big_for_large_FAT32_format
call fcn.1400380b9
mov eax, 0xe0031204
jmp 0x140012f54
mov rcx, r9
xor r8d, r8d
mov edx, 1
mov dword [rsp + 0x70], r10d
call fcn.1400389a1
mov r8d, dword [rsp + 0x50]
lea rcx, str.Size_:__s__lu_sectors
mov rdx, rax
call fcn.1400380b9
mov edx, esi
mov r8d, esi
lea rcx, str.Cluster_size__lu_bytes___lu_bytes_per_sector
imul edx, r14d
call fcn.1400380b9
mov edx, dword [rsp + 0x60]
movzx r8d, word [rsp + 0x60]
lea rcx, str.Volume_ID_is__x:_x
shr edx, 0x10
call fcn.1400380b9
mov r9d, 2
mov r8d, ebp
mov edx, 0x20
lea rcx, str._lu_Reserved_sectors___lu_sectors_per_FAT___lu_FATs
call fcn.1400380b9
mov rdx, r12
lea rcx, str._llu_Total_clusters
call fcn.1400380b9
mov edx, dword [rsp + 0x6c]
lea rcx, str._lu_Free_clusters
mov dword [rdi + 0x1ec], 3
dec edx
mov dword [rdi + 0x1e8], edx
call fcn.1400380b9
mov r10d, dword [rsp + 0x70]
lea rcx, str.Clearing_out__d_sectors_for_reserved_sectors__FATs_and_root_cluster...
lea r14d, [r10 + r14 + 0x20]
mov edx, r14d
call fcn.1400380b9
mov edx, pe_nt_image_headers64
mov ecx, esi
call sub.msvcrt.dll_calloc
mov r12, rax
test rax, rax
je 0x140012f43
mov eax, r14d
shl esi, 7
sub rax, 0xffffffffffffff80
mov qword [rsp + 0x50], rax
lea eax, [r14 + 0x7f]
cmp dword [rsp + 0x68], eax
jae 0x1400132f2
xor eax, eax
mov r8d, dword [rsp + 0x68]
mov r9, qword [rsp + 0x50]
mov edx, 0xc91
mov dword [rsp + 0x20], eax
mov ecx, 4
mov qword [rsp + 0x60], r8
call fcn.140044e4a
mov rax, qword [0x1400b42b0]
mov r8, qword [rsp + 0x60]
mov eax, dword [rax]
test eax, eax
jns 0x1400132ad
cmp ax, 0x4c7
je 0x140012f60
mov qword [rsp + 0x20], r12
mov rdx, qword [rsp + 0x48]
mov r9d, pe_nt_image_headers64
mov rcx, r15
call fcn.14006ce1f
cmp rax, rsi
je 0x1400132e8
lea rcx, str.Error_clearing_reserved_sectors
call fcn.1400380b9
mov rax, qword [0x1400b42b0]
mov dword [rax], 0xc003001d
jmp 0x140012f60
sub dword [rsp + 0x68], 0xffffff80
jmp 0x14001325f
lea rcx, str.Initializing_reserved_sectors_and_FATs...
lea rsi, str.FAT__d_sector_at_address:__d
add ebp, 0x20
call fcn.1400380b9
mov qword [rsp + 0x20], rbx
xor r8d, r8d
mov rcx, r15
mov rdx, qword [rsp + 0x48]
mov r9d, 1
call fcn.14006ce1f
mov qword [rsp + 0x20], rdi
mov rdx, qword [rsp + 0x48]
mov r9d, 1
mov r8d, 1
mov rcx, r15
call fcn.14006ce1f
mov qword [rsp + 0x20], rbx
mov rdx, qword [rsp + 0x48]
mov r9d, 1
mov r8d, 6
mov rcx, r15
call fcn.14006ce1f
mov qword [rsp + 0x20], rdi
mov rdx, qword [rsp + 0x48]
mov r9d, 1
mov r8d, 7
mov rcx, r15
call fcn.14006ce1f
xor edx, edx
mov r8d, 0x20
mov rcx, rsi
call fcn.1400380b9
mov qword [rsp + 0x20], r13
mov rdx, qword [rsp + 0x48]
mov r9d, 1
mov r8d, 0x20
mov rcx, r15
call fcn.14006ce1f
mov r8d, ebp
mov edx, 1
mov rcx, rsi
call fcn.1400380b9
mov qword [rsp + 0x20], r13
movsxd r8, ebp
mov rcx, r15
mov rdx, qword [rsp + 0x48]
mov r9d, 1
call fcn.14006ce1f
bt dword [rsp + 0x2d8], 0x11
jb 0x140013411
xor r8d, r8d
mov ecx, 1
mov r9d, 0xc9d
mov edx, 1
call fcn.14001e4cb
mov rcx, r15
call fcn.14000ed4c
test eax, eax
jne 0x140013411
lea rcx, str.Could_not_write_partition_boot_record___drive_may_not_boot...
call fcn.1400380b9
mov ecx, 0xceb
call fcn.14001e311
xor r8d, r8d
xor edx, edx
mov r9d, 0xc95
mov qword [rsp + 0x20], rax
mov ecx, 1
call fcn.14001e4cb
lea rcx, str.Setting_label...
call fcn.1400380b9
mov rcx, r15
call qword [sym.imp.KERNEL32.DLL_CloseHandle]
mov rax, qword [0x1400b5060]
mov rdx, qword [rsp + 0x2b8]
mov r9d, 1
mov ecx, dword [rsp + 0x2b0]
mov r8d, 1
cmp dword [rax], 0
je 0x140013478
call fcn.140007cb5
jmp 0x14001347d
call fcn.140007e51
mov rsi, rax
test rax, rax
jne 0x14001349b
call fcn.140038579
lea rcx, str.Could_not_set_label:__s
mov rdx, rax
call fcn.1400380b9
jmp 0x1400134b0
mov rdx, qword [rsp + 0x2d0]
mov rcx, rax
call qword [sym.imp.KERNEL32.DLL_SetVolumeLabelA]
test eax, eax
je 0x140013485
lea rcx, str.Format_completed.
or r15, 0xffffffffffffffff
call fcn.1400380b9
mov dword [rsp + 0x5c], 1
mov rcx, rsi
call sub.msvcrt.dll_free
lea rax, [r15 - 1]
cmp rax, 0xfffffffffffffffd
ja 0x1400134e3
mov rcx, r15
call qword [sym.imp.KERNEL32.DLL_CloseHandle]
mov rcx, rbx
call sub.msvcrt.dll_free
mov rcx, rdi
call sub.msvcrt.dll_free
mov rcx, r13
call sub.msvcrt.dll_free
mov rcx, r12
call sub.msvcrt.dll_free
mov eax, dword [rsp + 0x5c]
add rsp, 0x268
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
ret