Function at 0x140003210
Capabilities:
Enumerate disk volumes
Get disk information
Get disk information via ioctl

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1330]
mov eax, 0x1430
call fcn.14000b510
sub rsp, rax
movaps xmmword [rsp + 0x1420], xmm6
movaps xmmword [rsp + 0x1410], xmm7
movaps xmmword [rsp + 0x1400], xmm8
movaps xmmword [rsp + 0x13f0], xmm9
movaps xmmword [rsp + 0x13e0], xmm10
movaps xmmword [rsp + 0x13d0], xmm11
mov rax, qword [0x140042078]
xor rax, rsp
mov qword [rbp + 0x12c0], rax
xor ebx, ebx
mov r15d, ebx
mov dword [rbp + 0xbc0], ebx
mov dil, 1
mov word [rbp + 0xea0], bx
xor edx, edx
mov r8d, 0x206
lea rcx, [rbp + 0xea2]
call fcn.14000d180
mov word [rbp + 0x10b0], bx
xor edx, edx
mov r8d, 0x206
lea rcx, [rbp + 0x10b2]
call fcn.14000d180
mov dword [rbp + 0xbc8], ebx
mov edx, 0x104
lea rcx, [rbp + 0xea0]
call qword [sym.imp.KERNEL32.dll_FindFirstVolumeW]
mov qword [rsp + 0x60], rax
lea esi, [rbx + 2]
cmp rax, 0xffffffffffffffff
jne 0x1400033d7
movabs rax, 0xbe015c385ec015a
mov qword [rbp + 0xab0], rax
movabs rax, 0x68507097c1c89760
mov qword [rbp + 0xab8], rax
movabs rax, 0x6f8e7c85a5b12c01
mov qword [rbp + 0xad0], rax
movabs rax, 0x685a15fba5a6f628
mov qword [rbp + 0xad8], rax
xorps xmm2, xmm2
lea rax, [rbp + 0xbd0]
mov ecx, esi
mov qword [rax], rbx
mov qword [rax + 8], rbx
lea rax, [rax + 0x10]
sub rcx, 1
jne 0x140003340
movdqa xmm0, xmmword [rbp + 0xab0]
xorps xmm0, xmmword [rbp + 0xad0]
movdqa xmmword [rbp + 0xbd0], xmm0
movdqa xmmword [rbp + 0xbe0], xmm2
lea rax, [rbp + 0xab0]
lea rcx, [rbp + 0xbd0]
nop
movups xmm0, xmmword [rcx]
movups xmmword [rax], xmm0
movups xmm1, xmmword [rcx + 0x10]
movups xmmword [rax + 0x10], xmm1
movups xmm0, xmmword [rcx + 0x20]
movups xmmword [rax + 0x20], xmm0
movups xmm1, xmmword [rcx + 0x30]
movups xmmword [rax + 0x30], xmm1
movups xmm0, xmmword [rcx + 0x40]
movups xmmword [rax + 0x40], xmm0
movups xmm1, xmmword [rcx + 0x50]
movups xmmword [rax + 0x50], xmm1
movups xmm0, xmmword [rcx + 0x60]
movups xmmword [rax + 0x60], xmm0
lea rax, [rax + 0x80]
movups xmm1, xmmword [rcx + 0x70]
movups xmmword [rax - 0x10], xmm1
lea rcx, [rcx + 0x80]
sub rsi, 1
jne 0x140003380
jmp 0x140004b42
mov r14, 0xffffffffffffffff
lea r13d, [r14 + 5]
lea rcx, [rbp + 0xea0]
mov rax, r14
nop dword [rax]
inc rax
cmp word [rcx + rax*2], 0
jne 0x1400033f0
dec rax
cmp word [rbp + 0xea0], 0x5c
jne 0x140004a54
cmp word [rbp + 0xea2], 0x5c
jne 0x140004a54
cmp word [rbp + 0xea4], 0x3f
jne 0x140004a54
cmp word [rbp + 0xea6], 0x5c
jne 0x140004a54
lea rbx, [rax + rax]
cmp word [rbp + rbx + 0xea0], 0x5c
jne 0x140004a52
cmp rbx, 0x208
jae 0x140004b9e
xor r12d, r12d
mov word [rbp + rbx + 0xea0], r12w
mov r8d, 0x104
lea rdx, [rbp + 0x10b0]
lea rcx, [rbp + 0xea8]
call qword [sym.imp.KERNEL32.dll_QueryDosDeviceW]
mov ecx, 0x5c
mov word [rbp + rbx + 0xea0], cx
test eax, eax
je 0x140004944
lea rdx, [rbp + 0x10b0]
lea rcx, [rbp + 0xe80]
call qword [sym.imp.ntdll.dll_RtlInitUnicodeString]
mov dword [rbp + 0xab0], 0x30
xor ebx, ebx
mov qword [rbp + 0xab8], rbx
mov dword [rbp + 0xac8], 0x40
lea rax, [rbp + 0xe80]
mov qword [rbp + 0xac0], rax
xorps xmm0, xmm0
movdqu xmmword [rbp + 0xad0], xmm0
mov dword [rsp + 0x28], 0x40
mov dword [rsp + 0x20], 3
lea r9, [rbp + 0xe90]
lea r8, [rbp + 0xab0]
mov edx, 0x12019f
lea rcx, [rbp + 0xaa0]
call qword [sym.imp.ntdll.dll_NtOpenFile]
test eax, eax
js 0x140004183
mov r12, qword [rbp + 0xaa0]
cmp r12, 0xffffffffffffffff
je 0x140004183
mov dword [rbp + 0xbc0], ebx
xorps xmm0, xmm0
movups xmmword [rbp + 0xbd0], xmm0
movups xmmword [rbp + 0xbe0], xmm0
movups xmmword [rbp + 0xbf0], xmm0
movups xmmword [rbp + 0xc00], xmm0
movups xmmword [rbp + 0xc10], xmm0
movups xmmword [rbp + 0xc20], xmm0
movups xmmword [rbp + 0xc30], xmm0
movups xmmword [rbp + 0xc40], xmm0
movups xmmword [rbp + 0xc50], xmm0
mov qword [rsp + 0x38], rbx
lea rax, [rbp + 0xbc0]
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], 0x90
lea rax, [rbp + 0xbd0]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x70048
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
test eax, eax
je 0x14000415c
mov ecx, dword [rbp + 0xbd0]
test ecx, ecx
je 0x14000415c
cmp ecx, 1
jne 0x14000415c
mov rax, qword [rbp + 0xbf0]
cmp rax, qword [0x14003c018]
jne 0x14000415c
mov rax, qword [rbp + 0xbf8]
cmp rax, qword [0x14003c020]
jne 0x14000415c
xor eax, eax
mov qword [rbp + 0xe70], rax
mov dword [rbp + 0xe78], eax
mov qword [rsp + 0x38], rbx
lea rax, [rbp + 0xbc8]
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], 0xc
lea rax, [rbp + 0xe70]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x2d1080
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
test eax, eax
je 0x140004183
movabs rax, 0x13a96c826f2fe
mov qword [rbp - 0x50], rax
movabs rax, 0x51a0e3dbc86939a
mov qword [rbp - 0x48], rax
movabs rcx, 0x13aacc87cf2a2
mov qword [rbp - 0x30], rcx
mov qword [rbp - 0x28], rax
xorps xmm2, xmm2
lea rax, [rbp + 0xbd0]
mov rcx, rsi
nop word [rax + rax]
mov qword [rax], rbx
mov qword [rax + 8], rbx
lea rax, [rax + 0x10]
sub rcx, 1
jne 0x140003680
movdqa xmm0, xmmword [rbp - 0x50]
xorps xmm0, xmmword [rbp - 0x30]
movaps xmmword [rbp - 0x50], xmm0
movaps xmmword [rbp - 0x40], xmm2
movaps xmm0, xmmword [rbp + 0xbf0]
movaps xmmword [rbp - 0x30], xmm0
movaps xmm1, xmmword [rbp + 0xc00]
movaps xmmword [rbp - 0x20], xmm1
movaps xmm0, xmmword [rbp + 0xc10]
movaps xmmword [rbp - 0x10], xmm0
movaps xmm1, xmmword [rbp + 0xc20]
movaps xmmword [rbp], xmm1
movaps xmm0, xmmword [rbp + 0xc30]
movaps xmmword [rbp + 0x10], xmm0
movaps xmm1, xmmword [rbp + 0xc40]
movaps xmmword [rbp + 0x20], xmm1
lea r8, [rbp + 0x10b0]
lea rdx, [rbp - 0x50]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_DefineDosDeviceW]
xorps xmm5, xmm5
test eax, eax
je 0x1400047f7
movabs rax, 0x14b6e592fa69871c
mov qword [rbp + 0xbd0], rax
movabs rax, 0x31abb65d838a5b31
mov qword [rbp + 0xbd8], rax
movabs rax, 0x1ab5d6aa9d94cb7b
mov qword [rbp + 0xbe0], rax
movabs rax, 0x1c7bfbaaca6425b0
mov qword [rbp + 0xbe8], rax
movabs rax, 0x1fffffffe2227213
mov qword [rbp + 0xbf0], rax
movabs rax, 0x1fffffffe4e7f0e5
mov qword [rbp + 0xbf8], rax
movabs rcx, 0x59eaacd4bf35bd46
mov qword [rbp + 0xc30], rcx
movabs rcx, 0x45cdd92eecf83858
mov qword [rbp + 0xc38], rcx
movabs rcx, 0x75d78adef2fb8927
mov qword [rbp + 0xc40], rcx
movabs rcx, 0x79558cccad0951df
mov qword [rbp + 0xc48], rcx
movabs rcx, 0x1fffffffe2221b75
mov qword [rbp + 0xc50], rcx
mov qword [rbp + 0xc58], rax
xorps xmm6, xmm6
xorps xmm7, xmm7
lea rax, [rbp + 0x1e0]
mov ecx, 6
nop dword [rax]
mov qword [rax], rbx
mov qword [rax + 8], rbx
lea rax, [rax + 0x10]
sub rcx, 1
jne 0x1400037e0
movdqa xmm0, xmmword [rbp + 0xbd0]
xorps xmm0, xmmword [rbp + 0xc30]
movdqa xmmword [rbp + 0x1e0], xmm0
movdqa xmm1, xmmword [rbp + 0xbe0]
xorps xmm1, xmmword [rbp + 0xc40]
movdqa xmmword [rbp + 0x1f0], xmm1
movdqa xmm0, xmmword [rbp + 0xbf0]
xorps xmm0, xmmword [rbp + 0xc50]
movdqa xmmword [rbp + 0x200], xmm0
movdqa xmmword [rbp + 0x210], xmm5
movdqa xmmword [rbp + 0x220], xmm6
movdqa xmmword [rbp + 0x230], xmm7
lea rax, [rbp + 0xbd0]
lea rcx, [rbp + 0x1e0]
mov rdx, r13
nop
movups xmm0, xmmword [rcx]
movups xmmword [rax], xmm0
movups xmm1, xmmword [rcx + 0x10]
movups xmmword [rax + 0x10], xmm1
movups xmm0, xmmword [rcx + 0x20]
movups xmmword [rax + 0x20], xmm0
movups xmm1, xmmword [rcx + 0x30]
movups xmmword [rax + 0x30], xmm1
movups xmm0, xmmword [rcx + 0x40]
movups xmmword [rax + 0x40], xmm0
movups xmm1, xmmword [rcx + 0x50]
movups xmmword [rax + 0x50], xmm1
movups xmm0, xmmword [rcx + 0x60]
movups xmmword [rax + 0x60], xmm0
lea rax, [rax + 0x80]
movups xmm1, xmmword [rcx + 0x70]
movups xmmword [rax - 0x10], xmm1
lea rcx, [rcx + 0x80]
sub rdx, 1
jne 0x140003860
movups xmm0, xmmword [rcx]
movups xmmword [rax], xmm0
movups xmm1, xmmword [rcx + 0x10]
movups xmmword [rax + 0x10], xmm1
movups xmm0, xmmword [rcx + 0x20]
movups xmmword [rax + 0x20], xmm0
call fcn.1400097cc
lea rcx, [rbp + 0xbd0]
mov qword [rbp - 0x70], rcx
lea rdx, [rbp + 0xbd0]
mov rcx, r14
inc rcx
cmp byte [rdx + rcx], bl
jne 0x1400038e2
mov qword [rbp - 0x68], rcx
lea r8, [rbp - 0x70]
mov edx, eax
lea rcx, [rbp - 0x50]
call fcn.1400021a0
or r15d, 0xc
or r15d, 1
mov dword [rbp + 0xbc0], r15d
lea rcx, [rbp - 0x50]
call fcn.140002ba0
test al, al
je 0x140003b40
movabs rax, 0xfabeb47266012ad
mov qword [rbp + 0xbd0], rax
movabs rax, 0x3cbd88d487b6914f
mov qword [rbp + 0xbd8], rax
movabs rax, 0x1ccc2748be5a25d7
mov qword [rbp + 0xbe0], rax
movabs rax, 0x1cd4255aebe1b8bb
mov qword [rbp + 0xbe8], rax
movabs rax, 0x96d7a540223708a
mov qword [rbp + 0xbf0], rax
movabs rax, 0x64a5fab4524efd77
mov qword [rbp + 0xbf8], rax
xorps xmm5, xmm5
movabs rax, 0x42f7a201633c28f7
mov qword [rbp + 0xc30], rax
movabs rax, 0x48dbe7a7e8c4f226
mov qword [rbp + 0xc38], rax
movabs rax, 0x73ae7b3cd135678b
mov qword [rbp + 0xc40], rax
movabs rax, 0x79fa523c8c8cccd4
mov qword [rbp + 0xc48], rax
movabs rax, 0x7c061935600d19ec
mov qword [rbp + 0xc50], rax
movabs rax, 0x64a5fab4524efd07
mov qword [rbp + 0xc58], rax
xorps xmm6, xmm6
xorps xmm7, xmm7
lea rax, [rbp + 0x1e0]
mov ecx, 6
nop
mov qword [rax], rbx
mov qword [rax + 8], rbx
lea rax, [rax + 0x10]
sub rcx, 1
jne 0x140003a00
movdqa xmm0, xmmword [rbp + 0xbd0]
xorps xmm0, xmmword [rbp + 0xc30]
movdqa xmmword [rbp + 0x1e0], xmm0
movdqa xmm1, xmmword [rbp + 0xbe0]
xorps xmm1, xmmword [rbp + 0xc40]
movdqa xmmword [rbp + 0x1f0], xmm1
movdqa xmm0, xmmword [rbp + 0xbf0]
xorps xmm0, xmmword [rbp + 0xc50]
movdqa xmmword [rbp + 0x200], xmm0
movdqa xmmword [rbp + 0x210], xmm6
movdqa xmmword [rbp + 0x220], xmm7
movdqa xmmword [rbp + 0x230], xmm5
lea rax, [rbp + 0xbd0]
lea rcx, [rbp + 0x1e0]
mov edx, 5
movups xmm0, xmmword [rcx]
movups xmmword [rax], xmm0
movups xmm1, xmmword [rcx + 0x10]
movups xmmword [rax + 0x10], xmm1
movups xmm0, xmmword [rcx + 0x20]
movups xmmword [rax + 0x20], xmm0
movups xmm1, xmmword [rcx + 0x30]
movups xmmword [rax + 0x30], xmm1
movups xmm0, xmmword [rcx + 0x40]
movups xmmword [rax + 0x40], xmm0
movups xmm1, xmmword [rcx + 0x50]
movups xmmword [rax + 0x50], xmm1
movups xmm0, xmmword [rcx + 0x60]
movups xmmword [rax + 0x60], xmm0
lea rax, [rax + 0x80]
movups xmm1, xmmword [rcx + 0x70]
movups xmmword [rax - 0x10], xmm1
lea rcx, [rcx + 0x80]
sub rdx, 1
jne 0x140003a81
movups xmm0, xmmword [rcx]
movups xmmword [rax], xmm0
movups xmm1, xmmword [rcx + 0x10]
movups xmmword [rax + 0x10], xmm1
call fcn.1400097cc
lea rcx, [rbp + 0xbd0]
mov qword [rsp + 0x40], rcx
lea rdx, [rbp + 0xbd0]
mov rcx, r14
nop dword [rax]
inc rcx
cmp byte [rdx + rcx], 0
jne 0x140003b00
mov qword [rsp + 0x48], rcx
lea r8, [rsp + 0x40]
mov edx, eax
lea rcx, [rsp + 0x68]
call fcn.1400021a0
or r15d, 0x30
or r15d, 2
mov dword [rbp + 0xbc0], r15d
lea rcx, [rsp + 0x68]
call fcn.140002ba0
test al, al
je 0x140003b40
mov bl, 1
jmp 0x140003b42
xor bl, bl
test r15b, 2
je 0x140003ba3
and r15d, 0xfffffffd
mov rdx, qword [rbp - 0x80]
cmp rdx, 8
jb 0x140003b8d
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003b88
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004ba4
call fcn.14000ac20
xor edi, edi
mov qword [rsp + 0x78], rdi
mov qword [rbp - 0x80], 7
mov word [rsp + 0x68], di
jmp 0x140003ba5
xor edi, edi
test r15b, 1
je 0x140003bef
and r15d, 0xfffffffe
mov rdx, qword [rbp - 0x38]
cmp rdx, 8
jb 0x140003bef
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003bea
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004baa
call fcn.14000ac20
test bl, bl
jne 0x14000470b
movabs rax, 0x6df332e7e41bd92
mov qword [rbp + 0xbd0], rax
movabs rax, 0x698e715ac4e41ae5
mov qword [rbp + 0xbd8], rax
movabs rax, 0xa04319f4bc1429a
mov qword [rbp + 0xbe0], rax
movabs rax, 0x1fecefaefb044c0
mov qword [rbp + 0xbe8], rax
movabs rax, 0x42005acba921d0e
mov qword [rbp + 0xbf0], rax
movabs rax, 0x7e1815bed4ef42ba
mov qword [rbp + 0xbf8], rax
movabs rax, 0x2bff51470c35c9f3
mov qword [rbp + 0xc30], rax
movabs rax, 0x35b42b7aacc93a96
mov qword [rbp + 0xc38], rax
movabs rax, 0x786758d2178804df
mov qword [rbp + 0xc40], rax
movabs rax, 0x6ebc928e89df37af
mov qword [rbp + 0xc48], rax
movabs rax, 0x69546ac3d8ce6961
mov qword [rbp + 0xc50], rax
movabs rax, 0x7e7173dbfa9824dd
mov qword [rbp + 0xc58], rax
xorps xmm5, xmm5
xorps xmm6, xmm6
xorps xmm7, xmm7
lea rax, [rbp + 0x640]
mov ecx, 6
xor ebx, ebx
nop word [rax + rax]
mov qword [rax], rbx
mov qword [rax + 8], rbx
lea rax, [rax + 0x10]
sub rcx, 1
jne 0x140003ce0
movdqa xmm0, xmmword [rbp + 0xbd0]
xorps xmm0, xmmword [rbp + 0xc30]
movdqa xmmword [rbp + 0x640], xmm0
movdqa xmm1, xmmword [rbp + 0xbe0]
xorps xmm1, xmmword [rbp + 0xc40]
movdqa xmmword [rbp + 0x650], xmm1
movdqa xmm0, xmmword [rbp + 0xbf0]
xorps xmm0, xmmword [rbp + 0xc50]
movdqa xmmword [rbp + 0x660], xmm0
movdqa xmmword [rbp + 0x670], xmm5
movdqa xmmword [rbp + 0x680], xmm6
movdqa xmmword [rbp + 0x690], xmm7
lea rax, [rbp + 0x1e0]
lea rcx, [rbp + 0x640]
mov edx, 6
movups xmm0, xmmword [rcx]
movups xmmword [rax], xmm0
movups xmm1, xmmword [rcx + 0x10]
movups xmmword [rax + 0x10], xmm1
movups xmm0, xmmword [rcx + 0x20]
movups xmmword [rax + 0x20], xmm0
movups xmm1, xmmword [rcx + 0x30]
movups xmmword [rax + 0x30], xmm1
movups xmm0, xmmword [rcx + 0x40]
movups xmmword [rax + 0x40], xmm0
movups xmm1, xmmword [rcx + 0x50]
movups xmmword [rax + 0x50], xmm1
movups xmm0, xmmword [rcx + 0x60]
movups xmmword [rax + 0x60], xmm0
lea rax, [rax + 0x80]
movups xmm1, xmmword [rcx + 0x70]
movups xmmword [rax - 0x10], xmm1
lea rcx, [rcx + 0x80]
sub rdx, 1
jne 0x140003d61
lea rcx, [rbp + 0x1e0]
call fcn.140015fc8
movabs rax, 0x16ec7a033f89e932
mov qword [rbp + 0xbd0], rax
movabs rax, 0x2377df9302781651
mov qword [rbp + 0xbd8], rax
movabs rax, 0x10cc698d65fd6d68
mov qword [rbp + 0xbe0], rax
movabs rax, 0x1e9ba19a21cd6fbf
mov qword [rbp + 0xbe8], rax
movabs rax, 0xdac07d73c4c6795
mov qword [rbp + 0xbf0], rax
movabs rax, 0x717fc7934e51696a
mov qword [rbp + 0xbf8], rax
xorps xmm5, xmm5
movabs rax, 0x5bb033457ad5d368
mov qword [rbp + 0xc30], rax
movabs rax, 0x5711b0e06d0a7538
mov qword [rbp + 0xc38], rax
movabs rax, 0x7fae35f90a922f34
mov qword [rbp + 0xc40], rax
movabs rax, 0x7bb5d6fc46a01bd0
mov qword [rbp + 0xc48], rax
movabs rax, 0x78c764b65e620ef3
mov qword [rbp + 0xc50], rax
movabs rax, 0x717fc7934e51691a
mov qword [rbp + 0xc58], rax
xorps xmm6, xmm6
xorps xmm7, xmm7
lea rax, [rbp + 0x1e0]
mov ecx, 6
mov qword [rax], rbx
mov qword [rax + 8], rbx
lea rax, [rax + 0x10]
sub rcx, 1
jne 0x140003ea0
movdqa xmm0, xmmword [rbp + 0xbd0]
xorps xmm0, xmmword [rbp + 0xc30]
movdqa xmmword [rbp + 0x1e0], xmm0
movdqa xmm1, xmmword [rbp + 0xbe0]
xorps xmm1, xmmword [rbp + 0xc40]
movdqa xmmword [rbp + 0x1f0], xmm1
movdqa xmm0, xmmword [rbp + 0xbf0]
xorps xmm0, xmmword [rbp + 0xc50]
movdqa xmmword [rbp + 0x200], xmm0
movdqa xmmword [rbp + 0x210], xmm5
movdqa xmmword [rbp + 0x220], xmm6
movdqa xmmword [rbp + 0x230], xmm7
lea rax, [rbp + 0x640]
lea rcx, [rbp + 0x1e0]
mov edx, 5
movups xmm0, xmmword [rcx]
movups xmmword [rax], xmm0
movups xmm1, xmmword [rcx + 0x10]
movups xmmword [rax + 0x10], xmm1
movups xmm0, xmmword [rcx + 0x20]
movups xmmword [rax + 0x20], xmm0
movups xmm1, xmmword [rcx + 0x30]
movups xmmword [rax + 0x30], xmm1
movups xmm0, xmmword [rcx + 0x40]
movups xmmword [rax + 0x40], xmm0
movups xmm1, xmmword [rcx + 0x50]
movups xmmword [rax + 0x50], xmm1
movups xmm0, xmmword [rcx + 0x60]
movups xmmword [rax + 0x60], xmm0
lea rax, [rax + 0x80]
movups xmm1, xmmword [rcx + 0x70]
movups xmmword [rax - 0x10], xmm1
lea rcx, [rcx + 0x80]
sub rdx, 1
jne 0x140003f21
movups xmm0, xmmword [rcx]
movups xmmword [rax], xmm0
movups xmm1, xmmword [rcx + 0x10]
movups xmmword [rax + 0x10], xmm1
movabs rax, 0xa07192d2fa2e0ec
mov qword [rbp + 0xbd0], rax
movabs rax, 0x32e9cf6c06f12629
mov qword [rbp + 0xbd8], rax
movabs rax, 0x95368f53ff2685b
mov qword [rbp + 0xbe0], rax
movabs rax, 0x61f0c5ef68f38d8
mov qword [rbp + 0xbe8], rax
movabs rax, 0x1fffffffe2c3d643
mov qword [rbp + 0xbf0], rax
movabs rax, 0x1fffffffe446128d
mov qword [rbp + 0xbf8], rax
xorps xmm5, xmm5
xorps xmm6, xmm6
movabs rcx, 0x475b506b6afedab6
mov qword [rbp + 0xc30], rcx
movabs rcx, 0x468fa01f69834540
mov qword [rbp + 0xc38], rcx
movabs rcx, 0x66313481509d2a07
mov qword [rbp + 0xc40], rcx
movabs rcx, 0x63317b3891e24cb7
mov qword [rbp + 0xc48], rcx
movabs rcx, 0x1fffffffe2c3bf25
mov qword [rbp + 0xc50], rcx
mov qword [rbp + 0xc58], rax
xorps xmm7, xmm7
lea rax, [rbp + 0x1e0]
mov ecx, 6
nop dword [rax + rax]
mov qword [rax], rbx
mov qword [rax + 8], rbx
lea rax, [rax + 0x10]
sub rcx, 1
jne 0x140004060
movdqa xmm0, xmmword [rbp + 0xbd0]
xorps xmm0, xmmword [rbp + 0xc30]
movdqa xmmword [rbp + 0x1e0], xmm0
movdqa xmm1, xmmword [rbp + 0xc40]
xorps xmm1, xmmword [rbp + 0xbe0]
movdqa xmmword [rbp + 0x1f0], xmm1
movdqa xmm0, xmmword [rbp + 0xc50]
xorps xmm0, xmmword [rbp + 0xbf0]
movdqa xmmword [rbp + 0x200], xmm0
movdqa xmmword [rbp + 0x210], xmm5
movdqa xmmword [rbp + 0x220], xmm6
movdqa xmmword [rbp + 0x230], xmm7
lea rax, [rbp - 0x50]
lea rdx, [rbp + 0x1e0]
mov rcx, r13
nop dword [rax]
movups xmm0, xmmword [rdx]
movups xmmword [rax], xmm0
movups xmm1, xmmword [rdx + 0x10]
movups xmmword [rax + 0x10], xmm1
movups xmm0, xmmword [rdx + 0x20]
movups xmmword [rax + 0x20], xmm0
movups xmm1, xmmword [rdx + 0x30]
movups xmmword [rax + 0x30], xmm1
movups xmm0, xmmword [rdx + 0x40]
movups xmmword [rax + 0x40], xmm0
movups xmm1, xmmword [rdx + 0x50]
movups xmmword [rax + 0x50], xmm1
movups xmm0, xmmword [rdx + 0x60]
movups xmmword [rax + 0x60], xmm0
lea rax, [rax + 0x80]
movups xmm1, xmmword [rdx + 0x70]
movups xmmword [rax - 0x10], xmm1
lea rdx, [rdx + 0x80]
sub rcx, 1
jne 0x1400040e0
movups xmm0, xmmword [rdx]
movups xmmword [rax], xmm0
movups xmm1, xmmword [rdx + 0x10]
movups xmmword [rax + 0x10], xmm1
movups xmm0, xmmword [rdx + 0x20]
movups xmmword [rax + 0x20], xmm0
lea rdx, [rbp + 0x640]
lea rcx, [rbp - 0x50]
call fcn.140016328
test eax, eax
je 0x14000419e
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov r8d, 0x104
lea rdx, [rbp + 0xea0]
mov rcx, qword [rsp + 0x60]
call qword [sym.imp.KERNEL32.dll_FindNextVolumeW]
test eax, eax
setne dil
test dil, dil
jne 0x1400033e2
mov rcx, qword [rsp + 0x60]
call qword [sym.imp.KERNEL32.dll_FindVolumeClose]
mov al, 1
jmp 0x140004b50
movabs rax, 0x1f4bd46357fd476b
mov qword [rbp + 0xbd0], rax
movabs rax, 0xfa49a40975c8e88
mov qword [rbp + 0xbd8], rax
movabs rax, 0xf8f630161c528a7
mov qword [rbp + 0xbe0], rax
movabs rax, 0x139b83eead93df10
mov qword [rbp + 0xbe8], rax
movabs rax, 0xf8f4f8e0bd95462
mov qword [rbp + 0xbf0], rax
movabs rax, 0x10116b05f41c9e0f
mov qword [rbp + 0xbf8], rax
movabs rax, 0x1bb342984ff8cf8c
mov qword [rbp + 0xc00], rax
movabs rax, 0x18a5e0162ece2c7c
mov qword [rbp + 0xc08], rax
movabs rax, 0x288aa1535
mov qword [rbp + 0xc10], rax
movabs rcx, 0x5651b1db120
mov qword [rbp + 0xc18], rcx
movabs rax, 0x1f0ed43f57c74731
mov qword [rbp + 0xc70], rax
movabs rax, 0xfe99a1c97158ece
mov qword [rbp + 0xc78], rax
movabs rax, 0xfe0637361a628ce
mov qword [rbp + 0xc80], rax
movabs rax, 0x13ef8388adfcdf63
mov qword [rbp + 0xc88], rax
movabs rax, 0xfe04fe10b9b543e
mov qword [rbp + 0xc90], rax
movabs rax, 0x107e6b67f4409e7b
mov qword [rbp + 0xc98], rax
movabs rax, 0x1bd442f54f8ccfe3
mov qword [rbp + 0xca0], rax
movabs rax, 0x18c0e0382eb92c1a
mov qword [rbp + 0xca8], rax
movabs rax, 0x288c31553
mov qword [rbp + 0xcb0], rax
mov qword [rbp + 0xcb8], rcx
xorps xmm7, xmm7
xorps xmm8, xmm8
xorps xmm9, xmm9
xorps xmm10, xmm10
xorps xmm11, xmm11
lea rax, [rbp + 0x640]
mov r8d, 0xa
mov ecx, r8d
nop dword [rax + rax]
mov qword [rax], rbx
mov qword [rax + 8], rbx
lea rax, [rax + 0x10]
sub rcx, 1
jne 0x140004310
movdqa xmm0, xmmword [rbp + 0xc70]
xorps xmm0, xmmword [rbp + 0xbd0]
movdqa xmmword [rbp + 0x640], xmm0
movdqa xmm1, xmmword [rbp + 0xbe0]
xorps xmm1, xmmword [rbp + 0xc80]
movdqa xmmword [rbp + 0x650], xmm1
movdqa xmm0, xmmword [rbp + 0xbf0]
xorps xmm0, xmmword [rbp + 0xc90]
movdqa xmmword [rbp + 0x660], xmm0
movdqa xmm1, xmmword [rbp + 0xc00]
xorps xmm1, xmmword [rbp + 0xca0]
movdqa xmmword [rbp + 0x670], xmm1
movdqa xmm0, xmmword [rbp + 0xc10]
xorps xmm0, xmmword [rbp + 0xcb0]
movdqa xmmword [rbp + 0x680], xmm0
movdqa xmmword [rbp + 0x690], xmm7
movdqa xmmword [rbp + 0x6a0], xmm8
movdqa xmmword [rbp + 0x6b0], xmm9
movdqa xmmword [rbp + 0x6c0], xmm10
movdqa xmmword [rbp + 0x6d0], xmm11
lea rcx, [rbp + 0x1e0]
lea rax, [rbp + 0x640]
mov edx, 8
nop dword [rax]
nop word [rax + rax]
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx - 0x10], xmm1
lea rax, [rax + 0x80]
sub rdx, 1
jne 0x1400043e0
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], rbx
mov qword [rsp + 0x58], rbx
lea rax, [rbp + 0x1e0]
nop dword [rax]
inc r14
cmp word [rax + r14*2], bx
jne 0x140004480
movabs rbx, 0x7ffffffffffffffe
cmp r14, rbx
ja 0x140004bb0
mov qword [rsp + 0x58], 7
cmp r14, 8
jae 0x1400044d5
mov qword [rsp + 0x50], r14
lea rbx, [r14 + r14]
mov r8, rbx
lea rdx, [rbp + 0x1e0]
lea rcx, [rsp + 0x40]
call fcn.14000cae0
xor edi, edi
mov word [rsp + rbx + 0x40], di
jmp 0x140004591
mov rax, r14
or rax, 7
cmp rax, rbx
jbe 0x1400044f1
movabs rax, 0x7fffffffffffffff
lea rcx, [rax + rax]
jmp 0x14000451e
mov rbx, rax
cmp rax, r8
cmovb rbx, r8
lea rcx, [rbx + 1]
movabs rax, 0x7fffffffffffffff
cmp rcx, rax
ja 0x140004bbc
add rcx, rcx
cmp rcx, 0x1000
jb 0x14000454d
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140004bbc
mov rcx, rax
call fcn.14000aec4
test rax, rax
je 0x140004bb6
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
xor r15d, r15d
jmp 0x140004565
test rcx, rcx
je 0x14000455f
call fcn.14000aec4
mov rdi, rax
xor r15d, r15d
jmp 0x140004565
xor r15d, r15d
mov edi, r15d
mov qword [rsp + 0x40], rdi
mov qword [rsp + 0x50], r14
mov qword [rsp + 0x58], rbx
lea rbx, [r14 + r14]
mov r8, rbx
lea rdx, [rbp + 0x1e0]
mov rcx, rdi
call fcn.14000cae0
mov word [rdi + rbx], r15w
xor edi, edi
lea rcx, [rsp + 0x40]
call fcn.140002f40
movzx ebx, al
mov rdx, qword [rsp + 0x58]
cmp rdx, 8
jb 0x1400045e0
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400045db
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004bb6
call fcn.14000ac20
test bl, bl
je 0x140004b4e
movabs rax, 0x8c374f3e6ed66b1
mov qword [rbp - 0x50], rax
movabs rax, 0x25bf28d139ab7b9a
mov qword [rbp - 0x48], rax
movabs rax, 0x288a32b6c6b04cea
mov qword [rbp - 0x30], rax
movabs rax, 0x25bf22f05dc414dd
mov qword [rbp - 0x28], rax
xorps xmm2, xmm2
lea rax, [rbp + 0xbd0]
nop word [rax + rax]
mov qword [rax], rdi
mov qword [rax + 8], rdi
lea rax, [rax + 0x10]
sub rsi, 1
jne 0x140004630
movdqa xmm0, xmmword [rbp - 0x50]
xorps xmm0, xmmword [rbp - 0x30]
movdqa xmmword [rbp + 0xbd0], xmm0
movdqa xmmword [rbp + 0xbe0], xmm2
lea rcx, [rbp - 0x50]
lea rax, [rbp + 0xbd0]
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx - 0x10], xmm1
lea rax, [rax + 0x80]
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rbp - 0x50]
call fcn.1400010e0
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rsp + 0x60]
call qword [sym.imp.KERNEL32.dll_FindVolumeClose]
mov al, 1
jmp 0x140004b50
movabs rax, 0x166d7b98e7df5cbc
mov qword [rbp + 0xab0], rax
movabs rax, 0x4bbb7a6469c48661
mov qword [rbp + 0xab8], rax
movabs rax, 0x532132dec78271e7
mov qword [rbp + 0xad0], rax
movabs rax, 0x4bb12e37209cc33e
mov qword [rbp + 0xad8], rax
xorps xmm2, xmm2
lea rax, [rbp + 0xbd0]
mov rcx, rsi
nop dword [rax]
mov qword [rax], rdi
mov qword [rax + 8], rdi
lea rax, [rax + 0x10]
sub rcx, 1
jne 0x140004760
movdqa xmm0, xmmword [rbp + 0xab0]
xorps xmm0, xmmword [rbp + 0xad0]
movdqa xmmword [rbp + 0xbd0], xmm0
movdqa xmmword [rbp + 0xbe0], xmm2
lea rax, [rbp + 0xab0]
lea rcx, [rbp + 0xbd0]
nop
movups xmm0, xmmword [rcx]
movups xmmword [rax], xmm0
movups xmm1, xmmword [rcx + 0x10]
movups xmmword [rax + 0x10], xmm1
movups xmm0, xmmword [rcx + 0x20]
movups xmmword [rax + 0x20], xmm0
movups xmm1, xmmword [rcx + 0x30]
movups xmmword [rax + 0x30], xmm1
movups xmm0, xmmword [rcx + 0x40]
movups xmmword [rax + 0x40], xmm0
movups xmm1, xmmword [rcx + 0x50]
movups xmmword [rax + 0x50], xmm1
movups xmm0, xmmword [rcx + 0x60]
movups xmmword [rax + 0x60], xmm0
lea rax, [rax + 0x80]
movups xmm1, xmmword [rcx + 0x70]
movups xmmword [rax - 0x10], xmm1
lea rcx, [rcx + 0x80]
sub rsi, 1
jne 0x1400047a0
jmp 0x140004b42
movabs rax, 0xab549698bafa87a
mov qword [rbp + 0xab0], rax
movabs rax, 0x4334d6fa75df3ead
mov qword [rbp + 0xab8], rax
movabs rdx, 0x1fffffffe0000000
mov qword [rbp + 0xac0], rdx
movabs rcx, 0xe000000020000cd5
mov qword [rbp + 0xac8], rcx
movabs rax, 0x4de7083dabf28521
mov qword [rbp + 0xaf0], rax
movabs rax, 0x497c82bb25806ae8
mov qword [rbp + 0xaf8], rax
mov qword [rbp + 0xb00], rdx
mov qword [rbp + 0xb08], rcx
xorps xmm4, xmm4
lea rax, [rbp + 0xbd0]
nop word [rax + rax]
mov qword [rax], rbx
mov qword [rax + 8], rbx
lea rax, [rax + 0x10]
sub r13, 1
jne 0x140004880
movdqa xmm0, xmmword [rbp + 0xab0]
xorps xmm0, xmmword [rbp + 0xaf0]
movdqa xmmword [rbp + 0xbd0], xmm0
movdqa xmm1, xmmword [rbp + 0xac0]
xorps xmm1, xmmword [rbp + 0xb00]
movdqa xmmword [rbp + 0xbe0], xmm1
movdqa xmmword [rbp + 0xbf0], xmm4
movdqa xmmword [rbp + 0xc00], xmm5
lea rax, [rbp + 0xab0]
lea rcx, [rbp + 0xbd0]
nop dword [rax]
movups xmm0, xmmword [rcx]
movups xmmword [rax], xmm0
movups xmm1, xmmword [rcx + 0x10]
movups xmmword [rax + 0x10], xmm1
movups xmm0, xmmword [rcx + 0x20]
movups xmmword [rax + 0x20], xmm0
movups xmm1, xmmword [rcx + 0x30]
movups xmmword [rax + 0x30], xmm1
movups xmm0, xmmword [rcx + 0x40]
movups xmmword [rax + 0x40], xmm0
movups xmm1, xmmword [rcx + 0x50]
movups xmmword [rax + 0x50], xmm1
movups xmm0, xmmword [rcx + 0x60]
movups xmmword [rax + 0x60], xmm0
lea rax, [rax + 0x80]
movups xmm1, xmmword [rcx + 0x70]
movups xmmword [rax - 0x10], xmm1
lea rcx, [rcx + 0x80]
sub rsi, 1
jne 0x1400048e0
movups xmm0, xmmword [rcx]
movups xmmword [rax], xmm0
lea rcx, [rbp + 0xab0]
jmp 0x140004b49
movabs rax, 0x17d3a05b99b6c64e
mov qword [rbp + 0xab0], rax
movabs rax, 0x70ae804bff8515ab
mov qword [rbp + 0xab8], rax
movabs rax, 0x79a6cf18b9ebeb15
mov qword [rbp + 0xad0], rax
movabs rax, 0x70ae804bff851fdf
mov qword [rbp + 0xad8], rax
xorps xmm2, xmm2
lea rax, [rbp + 0xbd0]
nop dword [rax]
nop word [rax + rax]
mov qword [rax], r12
mov qword [rax + 8], r12
lea rax, [rax + 0x10]
sub rsi, 1
jne 0x1400049a0
movdqa xmm0, xmmword [rbp + 0xab0]
xorps xmm0, xmmword [rbp + 0xad0]
movdqa xmmword [rbp + 0xbd0], xmm0
movdqa xmmword [rbp + 0xbe0], xmm2
lea rcx, [rbp + 0xab0]
lea rax, [rbp + 0xbd0]
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx + 0x70], xmm1
movups xmm0, xmmword [rax + 0x80]
movups xmmword [rcx + 0x80], xmm0
movups xmm1, xmmword [rax + 0x90]
movups xmmword [rcx + 0x90], xmm1
movups xmm0, xmmword [rax + 0xa0]
movups xmmword [rcx + 0xa0], xmm0
lea rcx, [rbp + 0xab0]
jmp 0x140004b49
xor ebx, ebx
movabs rax, 0x72c0424b97277b
mov qword [rbp + 0xab0], rax
movabs rax, 0x7ddd2af65a861832
mov qword [rbp + 0xab8], rax
movabs rax, 0x751eaf146bca0a20
mov qword [rbp + 0xad0], rax
movabs rax, 0x7dd74f9b3bc87d5f
mov qword [rbp + 0xad8], rax
xorps xmm2, xmm2
lea rax, [rbp + 0xbd0]
mov rcx, rsi
nop word [rax + rax]
mov qword [rax], rbx
mov qword [rax + 8], rbx
lea rax, [rax + 0x10]
sub rcx, 1
jne 0x140004ab0
movdqa xmm0, xmmword [rbp + 0xab0]
xorps xmm0, xmmword [rbp + 0xad0]
movdqa xmmword [rbp + 0xbd0], xmm0
movdqa xmmword [rbp + 0xbe0], xmm2
lea rax, [rbp + 0xab0]
lea rcx, [rbp + 0xbd0]
nop
movups xmm0, xmmword [rcx]
movups xmmword [rax], xmm0
movups xmm1, xmmword [rcx + 0x10]
movups xmmword [rax + 0x10], xmm1
movups xmm0, xmmword [rcx + 0x20]
movups xmmword [rax + 0x20], xmm0
movups xmm1, xmmword [rcx + 0x30]
movups xmmword [rax + 0x30], xmm1
movups xmm0, xmmword [rcx + 0x40]
movups xmmword [rax + 0x40], xmm0
movups xmm1, xmmword [rcx + 0x50]
movups xmmword [rax + 0x50], xmm1
movups xmm0, xmmword [rcx + 0x60]
movups xmmword [rax + 0x60], xmm0
lea rax, [rax + 0x80]
movups xmm1, xmmword [rcx + 0x70]
movups xmmword [rax - 0x10], xmm1
lea rcx, [rcx + 0x80]
sub rsi, 1
jne 0x140004af0
lea rcx, [rbp + 0xab0]
call fcn.1400010e0
xor al, al
mov rcx, qword [rbp + 0x12c0]
xor rcx, rsp
call fcn.14000ac00
lea r11, [rsp + 0x1430]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.14000ad30
nop
call fcn.140017aa8
nop
call fcn.140017aa8
int3
call fcn.1400012d0
int3
call fcn.140017aa8
int3
call fcn.140001230
int3