Function at 0x140005480
Capabilities:
Create thread
Resume thread
Terminate process

Disassembly:
mov rax, rsp
push rdi
sub rsp, 0xa30
mov qword [rsp + 0x50], 0xfffffffffffffffe
mov qword [rax + 8], rbx
mov qword [rax + 0x18], rbp
mov qword [rax + 0x20], rsi
mov rax, qword [0x14000a110]
xor rax, rsp
mov qword [rsp + 0xa20], rax
mov rbx, rdx
mov ebp, ecx
mov ecx, 0x1b5
call qword [sym.imp.KERNEL32.dll_SetConsoleOutputCP]
mov ecx, 0xfffffff6
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rdi, rax
lea rdx, [rsp + 0x30]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetConsoleMode]
mov edx, dword [rsp + 0x30]
and edx, 0xfffffffb
mov dword [rsp + 0x30], edx
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_SetConsoleMode]
mov r8d, 0x104
mov rdx, qword [rbx + 8]
lea rcx, [rsp + 0x810]
call qword [sym.imp.MSVCR80.dll_mbstowcs]
test rax, rax
je 0x140005892
mov r8d, 0x104
mov rdx, qword [rbx + 0x10]
lea rcx, [rsp + 0x600]
call qword [sym.imp.MSVCR80.dll_mbstowcs]
test rax, rax
je 0x140005892
mov rax, qword [rbx + 0x18]
lea rdi, str.DEBUG
mov rsi, rax
mov ecx, 6
repe cmpsb byte [rsi], byte [rdi]
jne 0x1400055e1
lea rcx, [rsp + 0x330]
call fcn.1400036f0
nop
xor r9d, r9d
lea r8, [rsp + 0x600]
lea rdx, [rsp + 0x810]
lea rcx, [rsp + 0x330]
call fcn.140003620
test al, al
jne 0x1400055b1
mov r8d, 0x3d
lea rdx, str.H:EPM7Srclegacy_modmod.WinChkdskMain.cpp
lea rcx, str.Chkdsk::Initialize_failed____s___d__n
call qword [sym.imp.MSVCR80.dll_printf]
nop
lea rcx, [rsp + 0x330]
call fcn.140003440
or eax, 0xffffffff
jmp 0x1400058af
lea rcx, [rsp + 0x330]
call fcn.140001770
lea rcx, [rsp + 0x330]
call fcn.1400010c0
mov edi, eax
lea rcx, [rsp + 0x330]
call fcn.140003440
mov eax, edi
jmp 0x1400058af
cmp ebp, 6
je 0x140005608
mov r8d, 0x49
lea rdx, str.H:EPM7Srclegacy_modmod.WinChkdskMain.cpp
lea rcx, str.Invalid_argument____s___d__n
call qword [sym.imp.MSVCR80.dll_printf]
or eax, 0xffffffff
jmp 0x1400058af
mov rcx, rax
call qword [sym.imp.MSVCR80.dll_atol]
movsxd rdi, eax
test eax, eax
jne 0x140005638
lea r8d, [rax + 0x51]
lea rdx, str.H:EPM7Srclegacy_modmod.WinChkdskMain.cpp
lea rcx, str.Invalid_argument____s___d__n
call qword [sym.imp.MSVCR80.dll_printf]
or eax, 0xffffffff
jmp 0x1400058af
mov rcx, qword [rbx + 0x20]
call qword [sym.imp.MSVCR80.dll_atol]
movsxd rsi, eax
test eax, eax
jne 0x140005674
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov r8d, 0x59
lea rdx, str.H:EPM7Srclegacy_modmod.WinChkdskMain.cpp
lea rcx, str.Invalid_argument____s___d__n
call qword [sym.imp.MSVCR80.dll_printf]
or eax, 0xffffffff
jmp 0x1400058af
mov rcx, qword [rbx + 0x28]
call qword [sym.imp.MSVCR80.dll_atol]
movsxd rbx, eax
test eax, eax
jne 0x1400056b9
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov r8d, 0x62
lea rdx, str.H:EPM7Srclegacy_modmod.WinChkdskMain.cpp
lea rcx, str.Invalid_argument____s___d__n
call qword [sym.imp.MSVCR80.dll_printf]
or eax, 0xffffffff
jmp 0x1400058af
lea rcx, [rsp + 0x60]
call fcn.1400036f0
nop
mov r9, rsi
lea r8, [rsp + 0x600]
lea rdx, [rsp + 0x810]
lea rcx, [rsp + 0x60]
call fcn.140003620
test al, al
jne 0x14000572d
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov r8d, 0x6f
lea rdx, str.H:EPM7Srclegacy_modmod.WinChkdskMain.cpp
lea rcx, str.Chkdsk::Initialize_failed____s___d__n
call qword [sym.imp.MSVCR80.dll_printf]
nop
lea rcx, [rsp + 0x60]
call fcn.140003440
or eax, 0xffffffff
jmp 0x1400058af
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 4
lea r9, [rsp + 0x60]
lea r8, [0x140005470]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.MSVCR80.dll__beginthreadex]
mov rbp, rax
test rax, rax
jne 0x1400057a2
lea r8d, [rax + 0x7c]
lea rdx, str.H:EPM7Srclegacy_modmod.WinChkdskMain.cpp
lea rcx, str.Cant_create_work_thread____s___d__n
call qword [sym.imp.MSVCR80.dll_printf]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
lea rcx, [rsp + 0x60]
call fcn.140003440
or eax, 0xffffffff
jmp 0x1400058af
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_ResumeThread]
cmp eax, 0xffffffff
jne 0x1400057f8
mov r8d, 0x85
lea rdx, str.H:EPM7Srclegacy_modmod.WinChkdskMain.cpp
lea rcx, str.Cant_create_work_thread____s___d__n
call qword [sym.imp.MSVCR80.dll_printf]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
lea rcx, [rsp + 0x60]
call fcn.140003440
or eax, 0xffffffff
jmp 0x1400058af
mov qword [rsp + 0x38], rdi
mov qword [rsp + 0x40], rbp
mov qword [rsp + 0x48], rbx
or r9d, 0xffffffff
xor r8d, r8d
lea rdx, [rsp + 0x38]
lea ecx, [r8 + 3]
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
test eax, eax
je 0x140005864
cmp eax, 2
je 0x140005864
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [rsp + 0x60]
call fcn.1400010c0
mov edi, eax
lea rcx, [rsp + 0x60]
call fcn.140003440
mov eax, edi
jmp 0x1400058af
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
or ecx, 0xffffffff
call qword [sym.imp.KERNEL32.dll_ExitProcess]
mov r8d, 0x2e
lea rdx, str.H:EPM7Srclegacy_modmod.WinChkdskMain.cpp
lea rcx, str.Invalid_argument____s___d__n
call qword [sym.imp.MSVCR80.dll_printf]
or eax, 0xffffffff
mov rcx, qword [rsp + 0xa20]
xor rcx, rsp
call fcn.140005a90
lea r11, [rsp + 0xa30]
mov rbx, qword [r11 + 0x10]
mov rbp, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rsp, r11
pop rdi
ret