Function at 0x140004280
Capabilities:
Accept command line arguments
Terminate process

Disassembly:
mov rax, rsp
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x730
mov qword [rsp + 0xf0], 0xfffffffffffffffe
mov qword [rax + 8], rbx
mov qword [rax + 0x18], rbp
mov qword [rax + 0x20], rsi
mov rax, qword [0x14003b510]
xor rax, rsp
mov qword [rsp + 0x720], rax
mov rbx, rdx
movsxd r12, ecx
mov ecx, 1
call fcn.140016dcc
mov r15, rax
xor r13d, r13d
test rax, rax
je 0x1400042df
xor eax, eax
mov byte [r15], al
jmp 0x1400042e2
mov r15, r13
mov ecx, 0x10
call fcn.140016dcc
mov qword [rsp + 0x78], rax
test rax, rax
je 0x140004300
mov rcx, rax
call sym.DataShredderConsole64.exe_public:_void___cdecl_DataShredder::constructor_void____ptr64
jmp 0x140004303
mov rax, r13
mov qword [0x1400425d8], rax
mov ecx, 0x208
call fcn.140015044
mov qword [0x1400425c8], rax
mov ecx, 0xfffffff6
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov qword [0x1400425b8], rax
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov qword [0x1400425c0], rax
call qword [sym.imp.KERNEL32.dll_GetConsoleOutputCP]
mov dword [rsp + 0x70], r13d
cmp r12d, 2
jl 0x14000443e
lea rdi, str._check
mov rsi, qword [rbx + 8]
mov ecx, 7
repe cmpsb byte [rsi], byte [rdi]
jne 0x14000443e
cmp r12d, 3
jne 0x140004428
lea rcx, [rsp + 0x40]
call fcn.140011fd0
nop
mov r8, qword [rbx + 0x10]
lea rdx, [rsp + 0x300]
lea rcx, [rsp + 0x40]
call fcn.14000bba0
movzx edx, word [rsp + 0x30c]
cmp dx, 1
jne 0x1400043d3
lea r8, [rsp + 0x38e]
lea rdx, [rsp + 0x30e]
lea rcx, str.Professional:__S__S
call fcn.1400167ec
nop
lea rcx, [rsp + 0x40]
call fcn.140003050
xor eax, eax
jmp 0x140005fe1
cmp dx, 2
jne 0x140004407
lea r8, [rsp + 0x38e]
lea rdx, [rsp + 0x30e]
lea rcx, str.Server:__S__S
call fcn.1400167ec
nop
lea rcx, [rsp + 0x40]
call fcn.140003050
xor eax, eax
jmp 0x140005fe1
lea rcx, str.Freeware
call fcn.1400167ec
nop
lea rcx, [rsp + 0x40]
call fcn.140003050
mov eax, 1
jmp 0x140005fe1
lea rcx, str.Freeware
call fcn.1400167ec
mov eax, 1
jmp 0x140005fe1
call qword [sym.imp.KERNEL32.dll_GetCommandLineW]
mov rcx, rax
lea rdx, [rsp + 0x70]
call qword [sym.imp.SHELL32.dll_CommandLineToArgvW]
mov rbp, rax
mov qword [rsp + 0x168], 7
mov qword [rsp + 0x160], r13
mov word [rsp + 0x150], r13w
mov r8d, 0x26
lea rdx, str.ProtectStar_TM__Data_Shredder_ver._2.1
lea rcx, [rsp + 0x148]
call fcn.140006d30
nop
mov qword [rsp + 0x190], 7
mov qword [rsp + 0x188], r13
mov word [rsp + 0x178], r13w
mov qword [rsp + 0x1b8], 7
mov qword [rsp + 0x1b0], r13
mov word [rsp + 0x1a0], r13w
mov qword [rsp + 0x1e0], 7
mov qword [rsp + 0x1d8], r13
mov word [rsp + 0x1c8], r13w
lea rcx, [rsp + 0x170]
call sym.DataShredderConsole64.exe_public:_static_void___cdecl_DataShredder::ReadRegInfo_struct_DataShredder::structRegistrationInfo____ptr64_
movzx eax, word [rsp + 0x1f4]
test ax, ax
jne 0x14000451a
mov r8d, 0xb
lea rdx, str._Freeware_n_n
lea rcx, [rsp + 0x148]
call fcn.140006bb0
jmp 0x140004560
cmp ax, 1
jne 0x14000453c
mov r8d, 0xf
lea rdx, str._Professional_n_n
lea rcx, [rsp + 0x148]
call fcn.140006bb0
jmp 0x140004560
cmp ax, 2
jne 0x140005fd5
mov r8d, 9
lea rdx, str._Server_n_n
lea rcx, [rsp + 0x148]
call fcn.140006bb0
lea rcx, [rsp + 0x150]
cmp qword [rsp + 0x168], 8
cmovae rcx, qword [rsp + 0x150]
call fcn.1400060a0
mov ecx, 0x4b0
call qword [sym.imp.KERNEL32.dll_SetConsoleOutputCP]
test eax, eax
je 0x140004674
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.Could_not_set_console_output_codepage__Error:__x_n
call fcn.1400167ec
lea rcx, str.pause
call fcn.140016248
nop
cmp qword [rsp + 0x1e0], 8
jb 0x1400045cb
mov rcx, qword [rsp + 0x1c8]
call fcn.140016cb8
mov qword [rsp + 0x1e0], 7
mov qword [rsp + 0x1d8], r13
mov word [rsp + 0x1c8], r13w
cmp qword [rsp + 0x1b8], 8
jb 0x140004600
mov rcx, qword [rsp + 0x1a0]
call fcn.140016cb8
mov qword [rsp + 0x1b8], 7
mov qword [rsp + 0x1b0], r13
mov word [rsp + 0x1a0], r13w
cmp qword [rsp + 0x190], 8
jb 0x140004635
mov rcx, qword [rsp + 0x178]
call fcn.140016cb8
mov qword [rsp + 0x190], 7
mov qword [rsp + 0x188], r13
mov word [rsp + 0x178], r13w
cmp qword [rsp + 0x168], 8
jb 0x14000466a
mov rcx, qword [rsp + 0x150]
call fcn.140016cb8
mov eax, 0xfffffffe
jmp 0x140005fe1
mov ecx, 0x208
call fcn.140015044
test r12d, r12d
jle 0x140005faa
test rbx, rbx
je 0x140005faa
mov rbx, r13
or r14, 0xffffffffffffffff
test r12d, r12d
jle 0x140004d28
mov rax, qword [rbp + rbx*8]
test rax, rax
je 0x140004d28
test rbx, rbx
jle 0x140004779
lea rdi, str._method
mov rsi, qword [rbp + rbx*8 - 8]
mov ecx, 8
repe cmpsw word [rsi], word [rdi]
jne 0x140004779
lea rdx, str.slowest
mov rcx, rax
call fcn.140015de4
test eax, eax
jne 0x1400046f3
mov dword [0x1400425d0], 4
jmp 0x140004779
lea rdx, str.slower
mov rcx, qword [rbp + rbx*8]
call fcn.140015de4
test eax, eax
jne 0x140004714
mov dword [0x1400425d0], 3
jmp 0x140004779
lea rdx, str.faster
mov rcx, qword [rbp + rbx*8]
call fcn.140015de4
test eax, eax
jne 0x140004735
mov dword [0x1400425d0], 2
jmp 0x140004779
lea rdx, str.fastest
mov rcx, qword [rbp + rbx*8]
call fcn.140015de4
test eax, eax
jne 0x140004756
mov dword [0x1400425d0], 1
jmp 0x140004779
lea rdx, str.random
mov rcx, qword [rbp + rbx*8]
call fcn.140015de4
mov ecx, dword [0x1400425d0]
test eax, eax
cmove ecx, r13d
mov dword [0x1400425d0], ecx
cmp rbx, 1
jle 0x1400048d9
lea rdi, str._file
mov rsi, qword [rbp + rbx*8 - 0x10]
mov ecx, 6
repe cmpsw word [rsi], word [rdi]
jne 0x1400048d9
mov rdx, qword [rbp + rbx*8]
cmp word [rdx], 0x2f
je 0x14000484b
mov qword [rsp + 0x118], 7
mov qword [rsp + 0x110], r13
mov word [rsp + 0x100], r13w
xor eax, eax
mov rcx, r14
mov rdi, rdx
repne scasw ax, word [rdi]
not rcx
lea r8, [rcx - 1]
lea rcx, [rsp + 0xf8]
call fcn.140006d30
nop
mov rsi, qword [0x140042640]
lea r9, [rsp + 0xf8]
mov r8, qword [rsi + 8]
mov rdx, rsi
lea rcx, [0x140042618]
call fcn.140006fe0
mov rdi, rax
mov edx, 1
lea rcx, [0x140042618]
call fcn.140007080
mov qword [rsi + 8], rdi
mov rcx, qword [rdi + 8]
mov qword [rcx], rdi
cmp qword [rsp + 0x118], 8
jb 0x1400048d9
mov rcx, qword [rsp + 0x100]
call fcn.140016cb8
jmp 0x1400048d9
mov qword [rsp + 0x118], 7
mov qword [rsp + 0x110], r13
mov word [rsp + 0x100], r13w
xor r8d, r8d
lea rdx, [0x140033a0c]
lea rcx, [rsp + 0xf8]
call fcn.140006d30
nop
mov rsi, qword [0x140042640]
lea r9, [rsp + 0xf8]
mov r8, qword [rsi + 8]
mov rdx, rsi
lea rcx, [0x140042618]
call fcn.140006fe0
mov rdi, rax
mov edx, 1
lea rcx, [0x140042618]
call fcn.140007080
mov qword [rsi + 8], rdi
mov rcx, qword [rdi + 8]
mov qword [rcx], rdi
cmp qword [rsp + 0x118], 8
jb 0x1400048d9
mov rcx, qword [rsp + 0x100]
call fcn.140016cb8
test rbx, rbx
jle 0x140004d1c
lea rdi, str._file
mov rsi, qword [rbp + rbx*8 - 8]
mov ecx, 6
repe cmpsw word [rsi], word [rdi]
jne 0x140004997
mov rdx, qword [rbp + rbx*8]
mov qword [rsp + 0x118], 7
mov qword [rsp + 0x110], r13
mov word [rsp + 0x100], r13w
xor eax, eax
mov rcx, r14
mov rdi, rdx
repne scasw ax, word [rdi]
not rcx
lea r8, [rcx - 1]
lea rcx, [rsp + 0xf8]
call fcn.140006d30
nop
mov rsi, qword [0x140042720]
lea r9, [rsp + 0xf8]
mov r8, qword [rsi + 8]
mov rdx, rsi
lea rcx, [0x1400426f8]
call fcn.140006fe0
mov rdi, rax
mov edx, 1
lea rcx, [0x1400426f8]
call fcn.140007080
mov qword [rsi + 8], rdi
mov rcx, qword [rdi + 8]
mov qword [rcx], rdi
cmp qword [rsp + 0x118], 8
jb 0x140004997
mov rcx, qword [rsp + 0x100]
call fcn.140016cb8
lea rdi, str._directory
mov rsi, qword [rbp + rbx*8 - 8]
mov ecx, 0xb
repe cmpsw word [rsi], word [rdi]
jne 0x140004a4c
mov rdx, qword [rbp + rbx*8]
mov qword [rsp + 0x118], 7
mov qword [rsp + 0x110], r13
mov word [rsp + 0x100], r13w
xor eax, eax
mov rcx, r14
mov rdi, rdx
repne scasw ax, word [rdi]
not rcx
lea r8, [rcx - 1]
lea rcx, [rsp + 0xf8]
call fcn.140006d30
nop
mov rsi, qword [0x140042678]
lea r9, [rsp + 0xf8]
mov r8, qword [rsi + 8]
mov rdx, rsi
lea rcx, [0x140042650]
call fcn.140006fe0
mov rdi, rax
mov edx, 1
lea rcx, [0x140042650]
call fcn.140007080
mov qword [rsi + 8], rdi
mov rcx, qword [rdi + 8]
mov qword [rcx], rdi
cmp qword [rsp + 0x118], 8
jb 0x140004a4c
mov rcx, qword [rsp + 0x100]
call fcn.140016cb8
lea rdi, str._drive
mov rsi, qword [rbp + rbx*8 - 8]
mov ecx, 7
repe cmpsw word [rsi], word [rdi]
jne 0x140004b1d
cmp word [rsp + 0x1f4], 0
jne 0x140004a82
lea rcx, str._nDisk_Drive_shredding__is_available_in_Server_or_Professional_versions_of_Data_Shredder_only._n
call fcn.1400060a0
jmp 0x140004b1d
mov rdx, qword [rbp + rbx*8]
mov qword [rsp + 0x118], 7
mov qword [rsp + 0x110], r13
mov word [rsp + 0x100], r13w
xor eax, eax
mov rcx, r14
mov rdi, rdx
repne scasw ax, word [rdi]
not rcx
lea r8, [rcx - 1]
lea rcx, [rsp + 0xf8]
call fcn.140006d30
nop
mov rsi, qword [0x140042608]
lea r9, [rsp + 0xf8]
mov r8, qword [rsi + 8]
mov rdx, rsi
lea rcx, [0x1400425e0]
call fcn.140006fe0
mov rdi, rax
mov edx, 1
lea rcx, [0x1400425e0]
call fcn.140007080
mov qword [rsi + 8], rdi
mov rcx, qword [rdi + 8]
mov qword [rcx], rdi
cmp qword [rsp + 0x118], 8
jb 0x140004b1d
mov rcx, qword [rsp + 0x100]
call fcn.140016cb8
lea rdi, str._freespace
mov rsi, qword [rbp + rbx*8 - 8]
mov ecx, 0xb
repe cmpsw word [rsi], word [rdi]
jne 0x140004bd2
mov rdx, qword [rbp + rbx*8]
mov qword [rsp + 0x118], 7
mov qword [rsp + 0x110], r13
mov word [rsp + 0x100], r13w
xor eax, eax
mov rcx, r14
mov rdi, rdx
repne scasw ax, word [rdi]
not rcx
lea r8, [rcx - 1]
lea rcx, [rsp + 0xf8]
call fcn.140006d30
nop
mov rsi, qword [0x1400426e8]
lea r9, [rsp + 0xf8]
mov r8, qword [rsi + 8]
mov rdx, rsi
lea rcx, [0x1400426c0]
call fcn.140006fe0
mov rdi, rax
mov edx, 1
lea rcx, [0x1400426c0]
call fcn.140007080
mov qword [rsi + 8], rdi
mov rcx, qword [rdi + 8]
mov qword [rcx], rdi
cmp qword [rsp + 0x118], 8
jb 0x140004bd2
mov rcx, qword [rsp + 0x100]
call fcn.140016cb8
lea rdi, str._temporary
mov rsi, qword [rbp + rbx*8 - 8]
mov ecx, 0xb
repe cmpsw word [rsi], word [rdi]
jne 0x140004c8f
cmp word [rsp + 0x1f4], 0
jne 0x140004c08
lea rcx, str._nTemporary_file_shredding__is_available_in_Server_or_Professional_versions_of_Data_Shredder_only._n
call fcn.1400060a0
jmp 0x140004c8f
mov rax, qword [rbp + rbx*8]
lea rdi, str.recycled
mov rsi, rax
mov ecx, 9
repe cmpsw word [rsi], word [rdi]
jne 0x140004c39
lea r8, [0x140042650]
lea rdx, [0x1400426f8]
mov rcx, r15
call fcn.140003fa0
jmp 0x140004c8f
lea rdi, str.temp
mov rsi, rax
mov ecx, 5
repe cmpsw word [rsi], word [rdi]
jne 0x140004c65
lea r8, [0x140042650]
lea rdx, [0x1400426f8]
mov rcx, r15
call fcn.140003e20
jmp 0x140004c8f
lea rdi, str.internet
mov rsi, rax
mov ecx, 9
repe cmpsw word [rsi], word [rdi]
jne 0x140004c8f
lea r8, [0x140042650]
lea rdx, [0x1400426f8]
mov rcx, r15
call fcn.140003940
mov rax, qword [rbp + rbx*8]
lea rdi, str._help
mov rsi, rax
mov ecx, 6
repe cmpsw word [rsi], word [rdi]
je 0x140004cbc
lea rdi, [0x140033e44]
mov rsi, rax
mov ecx, 3
repe cmpsw word [rsi], word [rdi]
jne 0x140004d1c
lea rcx, str.Safely_removes_files_n
call fcn.1400060a0
lea rcx, str._n_file__file_name___optional:_output_path____erases_or_moves_safely_files_to_a_specified_output_path_n
call fcn.1400060a0
lea rcx, str._directory__folder_name____safely_erases_folders_n
call fcn.1400060a0
lea rcx, str._drive__drive_letter____safely_erases_physical_volumes_n
call fcn.1400060a0
lea rcx, str._freespace__drive_letter____safely_erases_physical_volumes_freespace_n
call fcn.1400060a0
lea rcx, str._temporary__temp_type:recycled__internet__temp____safely_erases_temporary_files__internet_cache__cookies__n
call fcn.1400060a0
lea rcx, str._method__method_type:random_fastest_faster_slower_slowest____selects_an_erase_method_n
call fcn.1400060a0
lea rcx, str._help___outputs_this_help_n_n
call fcn.1400060a0
inc rbx
cmp rbx, r12
jl 0x1400046a0
lea rcx, str.The_chosen_shred_method_is:
call fcn.1400060a0
mov edx, dword [0x1400425d0]
test edx, edx
jne 0x140004d4c
lea rcx, str.Overwrite_with_random_values__1_cycle__n_n
call fcn.1400060a0
jmp 0x140004d96
cmp edx, 1
jne 0x140004d5f
lea rcx, str.Fastest_Worst:_DoD_5220.22_M_E__3_cycles__n_n
call fcn.1400060a0
jmp 0x140004d96
cmp edx, 2
jne 0x140004d72
lea rcx, str.Faster_Worse:_BSI_Method__6_cycles__n_n
call fcn.1400060a0
jmp 0x140004d96
cmp edx, 3
jne 0x140004d85
lea rcx, str.Slower_Better:_DoD_Method__7_cycles__n_n
call fcn.1400060a0
jmp 0x140004d96
cmp edx, 4
jne 0x140004d96
lea rcx, str.Slowest_Best:_ProtectStar_TM__SDA__50_cycles__n_n
call fcn.1400060a0
lea rcx, str.Step_1:_Preparing_to_erase_selected_files..._n
call fcn.1400060a0
mov r12b, 1
lea rcx, str.Recursing_through
call fcn.1400060a0
mov dword [rsp + 0x78], r13d
mov rdi, qword [0x140042678]
mov rbp, qword [rdi]
mov rax, qword [0x140042650]
mov rbx, rax
nop word [rax + rax]
test rbx, rbx
je 0x140004dda
cmp rbx, rax
je 0x140004ddf
call fcn.1400167cc
cmp rbp, rdi
je 0x140004f6f
test rbx, rbx
jne 0x140004df7
call fcn.1400167cc
mov rdx, r13
jmp 0x140004dfa
mov rdx, qword [rbx]
cmp rbp, qword [rdx + 0x28]
jne 0x140004e05
call fcn.1400167cc
cmp qword [rbp + 0x30], 8
jb 0x140004e12
mov rdx, qword [rbp + 0x18]
jmp 0x140004e16
lea rdx, [rbp + 0x18]
lea rcx, [0x140034518]
call fcn.1400060a0
test rbx, rbx
jne 0x140004e31
call fcn.1400167cc
mov rdx, r13
jmp 0x140004e34
mov rdx, qword [rbx]
cmp rbp, qword [rdx + 0x28]
jne 0x140004e3f
call fcn.1400167cc
mov qword [rsp + 0x140], 7
mov qword [rsp + 0x138], r13
mov word [rsp + 0x128], r13w
mov r9, r14
xor r8d, r8d
lea rdx, [rbp + 0x10]
lea rcx, [rsp + 0x120]
call fcn.140006740
mov byte [rsp + 0x30], 1
mov qword [rsp + 0x28], r13
lea rax, [rsp + 0x78]
mov qword [rsp + 0x20], rax
lea r9, [0x1400426f8]
lea r8, [rsp + 0x120]
lea rdx, [rsp + 0x80]
mov rcx, r15
call fcn.1400033d0
mov rdx, qword [rsp + 0xa8]
mov rdi, qword [rdx]
mov qword [rdx], rdx
mov rax, qword [rsp + 0xa8]
mov qword [rax + 8], rax
mov qword [rsp + 0xb0], r13
mov rcx, qword [rsp + 0xa8]
cmp rdi, rcx
je 0x140004f11
mov rsi, qword [rdi]
cmp qword [rdi + 0x30], 8
jb 0x140004ee8
mov rcx, qword [rdi + 0x18]
call fcn.140016cb8
mov qword [rdi + 0x30], 7
mov qword [rdi + 0x28], r13
mov word [rdi + 0x18], r13w
mov rcx, rdi
call fcn.140016cb8
mov rdi, rsi
mov rcx, qword [rsp + 0xa8]
cmp rsi, rcx
jne 0x140004ed5
call fcn.140016cb8
mov qword [rsp + 0xa8], r13
mov rcx, qword [rsp + 0x80]
call fcn.140016cb8
mov edx, dword [rsp + 0x78]
lea rcx, str.__d_files_found__n
call fcn.1400060a0
test rbx, rbx
jne 0x140004f4a
call fcn.1400167cc
mov rdx, r13
jmp 0x140004f4d
mov rdx, qword [rbx]
cmp rbp, qword [rdx + 0x28]
jne 0x140004f58
call fcn.1400167cc
mov rbp, qword [rbp]
mov rdi, qword [0x140042678]
mov rax, qword [0x140042650]
jmp 0x140004dd0
mov rbx, qword [0x140042720]
mov rdi, qword [rbx]
mov rax, qword [0x1400426f8]
mov rsi, rax
test rsi, rsi
je 0x140004f8d
cmp rsi, rax
je 0x140004f92
call fcn.1400167cc
cmp rdi, rbx
je 0x140005049
test rsi, rsi
jne 0x140004faa
call fcn.1400167cc
mov r11, r13
jmp 0x140004fad
mov r11, qword [rsi]
cmp rdi, qword [r11 + 0x28]
jne 0x140004fb8
call fcn.1400167cc
cmp qword [rdi + 0x30], 8
jb 0x140004fc5
mov rdx, qword [rdi + 0x18]
jmp 0x140004fc9
lea rdx, [rdi + 0x18]
mov rcx, qword [0x1400425d8]
call sym.DataShredderConsole64.exe_public:_bool___cdecl_DataShredder::CheckAccessRights_wchar_t____ptr64____ptr64
test al, al
jne 0x140005016
test rsi, rsi
jne 0x140004fe8
call fcn.1400167cc
mov r11, r13
jmp 0x140004feb
mov r11, qword [rsi]
cmp rdi, qword [r11 + 0x28]
jne 0x140004ff6
call fcn.1400167cc
cmp qword [rdi + 0x30], 8
jb 0x140005003
mov rdx, qword [rdi + 0x18]
jmp 0x140005007
lea rdx, [rdi + 0x18]
lea rcx, str.The_file___s___does_not_have_full_access_rights_or_does_not_exist_and_shall_not_be_shredded._n
call fcn.1400060a0
xor r12b, r12b
test rsi, rsi
jne 0x140005025
call fcn.1400167cc
mov r11, r13
jmp 0x140005028
mov r11, qword [rsi]
cmp rdi, qword [r11 + 0x28]
jne 0x140005033
call fcn.1400167cc
mov rdi, qword [rdi]
mov rbx, qword [0x140042720]
mov rax, qword [0x1400426f8]
jmp 0x140004f83
test r12b, r12b
jne 0x140005092
lea rcx, str.You_do_not_have_full_access_rights_to_some_files._Would_you_like_to__a__abort___c__continue_
call fcn.1400060a0
call fcn.140016db4
cmp eax, 0x61
jne 0x140005092
lea rcx, [rsp + 0x170]
call fcn.140006020
nop
cmp qword [rsp + 0x168], 8
jb 0x14000508a
mov rcx, qword [rsp + 0x150]
call fcn.140016cb8
mov eax, r14d
jmp 0x140005fe1
lea rcx, str.End_of_Step_1_n_n
call fcn.1400060a0
mov r12d, r13d
mov rax, qword [0x140042640]
mov rsi, qword [rax]
mov rbx, qword [0x140042618]
mov rdi, qword [0x140042640]
test rbx, rbx
je 0x1400050c7
cmp rbx, qword [0x140042618]
je 0x1400050cc
call fcn.1400167cc
cmp rsi, rdi
je 0x140005417
test rbx, rbx
jne 0x1400050e4
call fcn.1400167cc
mov rdx, r13
jmp 0x1400050e7
mov rdx, qword [rbx]
cmp rsi, qword [rdx + 0x28]
jne 0x1400050f2
call fcn.1400167cc
mov rcx, qword [rsi + 0x28]
cmp rcx, rcx
cmovb rcx, rcx
mov eax, r13d
test rcx, rcx
setne al
test eax, eax
je 0x1400053ef
xor eax, eax
mov qword [rsp + 0x88], rax
mov qword [rsp + 0x90], rax
mov qword [rsp + 0x98], rax
mov qword [rsp + 0xa0], rax
mov qword [rsp + 0xa8], rax
mov qword [rsp + 0xb0], rax
mov qword [rsp + 0x80], r13
mov dword [rsp + 0x88], 2
test rbx, rbx
jne 0x140005162
call fcn.1400167cc
mov rdx, r13
jmp 0x140005165
mov rdx, qword [rbx]
cmp rsi, qword [rdx + 0x28]
jne 0x140005170
call fcn.1400167cc
mov rcx, qword [rsi + 0x28]
add rcx, 2
mov eax, 2
mul rcx
cmovo rax, r14
mov rcx, rax
call fcn.140015044
mov r13, rax
test rbx, rbx
jne 0x14000519d
call fcn.1400167cc
xor edx, edx
jmp 0x1400051a0
mov rdx, qword [rbx]
cmp rsi, qword [rdx + 0x28]
jne 0x1400051ab
call fcn.1400167cc
mov rdi, qword [rsi + 0x28]
test rbx, rbx
jne 0x1400051be
call fcn.1400167cc
xor r11d, r11d
jmp 0x1400051c1
mov r11, qword [rbx]
cmp rsi, qword [r11 + 0x28]
jne 0x1400051cc
call fcn.1400167cc
mov rax, qword [rsi + 0x28]
mov r9, rdi
cmp rax, rdi
cmovb r9, rax
cmp qword [rsi + 0x30], 8
jb 0x1400051e7
mov r8, qword [rsi + 0x18]
jmp 0x1400051eb
lea r8, [rsi + 0x18]
add r9, r9
lea rdx, [rdi + rdi]
mov rcx, r13
call fcn.140016cc0
test rbx, rbx
jne 0x14000520b
call fcn.1400167cc
xor edi, edi
mov rdx, rdi
jmp 0x140005210
mov rdx, qword [rbx]
xor edi, edi
cmp rsi, qword [rdx + 0x28]
jne 0x14000521b
call fcn.1400167cc
mov rax, qword [rsi + 0x28]
mov word [r13 + rax*2], di
test rbx, rbx
jne 0x140005234
call fcn.1400167cc
mov rdx, rdi
jmp 0x140005237
mov rdx, qword [rbx]
cmp rsi, qword [rdx + 0x28]
jne 0x140005242
call fcn.1400167cc
mov rax, qword [rsi + 0x28]
mov word [r13 + rax*2 + 2], di
mov qword [rsp + 0x98], r13
mov r8d, r12d
lea rdx, [0x1400426f8]
lea rcx, [rsp + 0xf8]
call fcn.140007bd0
nop
mov rcx, qword [rax + 0x18]
add rcx, 2
mov eax, 2
mul rcx
cmovo rax, r14
mov rcx, rax
call fcn.140015044
mov rbp, rax
cmp qword [rsp + 0x118], 8
jb 0x1400052a3
mov rcx, qword [rsp + 0x100]
call fcn.140016cb8
mov qword [rsp + 0x118], 7
mov qword [rsp + 0x110], rdi
mov word [rsp + 0x100], di
mov r8d, r12d
lea rdx, [0x1400426f8]
lea rcx, [rsp + 0x48]
call fcn.140007bd0
mov rdi, rax
mov r8d, r12d
lea rdx, [0x1400426f8]
lea rcx, [rsp + 0x120]
call fcn.140007bd0
nop
mov rdx, qword [rdi + 0x18]
mov rcx, qword [rax + 0x18]
mov r9, rdx
cmp rcx, rdx
cmovb r9, rcx
cmp qword [rax + 0x20], 8
jb 0x14000530d
mov r8, qword [rax + 8]
jmp 0x140005311
lea r8, [rax + 8]
add r9, r9
add rdx, rdx
mov rcx, rbp
call fcn.140016cc0
nop
cmp qword [rsp + 0x140], 8
jb 0x140005338
mov rcx, qword [rsp + 0x128]
call fcn.140016cb8
mov qword [rsp + 0x140], 7
xor edi, edi
mov qword [rsp + 0x138], rdi
mov word [rsp + 0x128], di
cmp qword [rsp + 0x68], 8
jb 0x140005368
mov rcx, qword [rsp + 0x50]
call fcn.140016cb8
mov r8d, r12d
lea rdx, [0x1400426f8]
lea rcx, [rsp + 0x48]
call fcn.140007bd0
mov rcx, qword [rax + 0x18]
mov word [rbp + rcx*2], di
cmp qword [rsp + 0x68], 8
jb 0x140005397
mov rcx, qword [rsp + 0x50]
call fcn.140016cb8
mov r8d, r12d
lea rdx, [0x1400426f8]
lea rcx, [rsp + 0x48]
call fcn.140007bd0
mov rcx, qword [rax + 0x18]
mov word [rbp + rcx*2 + 2], di
cmp qword [rsp + 0x68], 8
jb 0x1400053c6
mov rcx, qword [rsp + 0x50]
call fcn.140016cb8
mov qword [rsp + 0x90], rbp
lea rcx, [rsp + 0x80]
call qword [sym.imp.SHELL32.dll_SHFileOperationW]
mov rcx, rbp
call fcn.140016928
mov rcx, r13
call fcn.140016928
xor r13d, r13d
inc r12d
test rbx, rbx
jne 0x140005401
call fcn.1400167cc
mov rdx, r13
jmp 0x140005404
mov rdx, qword [rbx]
cmp rsi, qword [rdx + 0x28]
jne 0x14000540f
call fcn.1400167cc
mov rsi, qword [rsi]
jmp 0x1400050b2
lea rcx, str.Step_2:_Erasing_selected_files..._n
call fcn.1400060a0
mov rdi, qword [0x140042720]
mov rbp, qword [rdi]
mov rax, qword [0x1400426f8]
mov rsi, rax
test rsi, rsi
je 0x140005441
cmp rsi, rax
je 0x140005446
call fcn.1400167cc
cmp rbp, rdi
je 0x1400055c3
test rsi, rsi
jne 0x14000545e
call fcn.1400167cc
mov rdx, r13
jmp 0x140005461
mov rdx, qword [rsi]
cmp rbp, qword [rdx + 0x28]
jne 0x14000546c
call fcn.1400167cc
lea r8, [rbp + 0x10]
lea rdx, [0x140034738]
lea rcx, [rsp + 0x48]
call fcn.140007cd0
nop
cmp qword [rax + 0x20], 8
jb 0x14000548f
mov rdx, qword [rax + 8]
jmp 0x140005493
lea rdx, [rax + 8]
mov qword [rsp + 0x140], 7
mov qword [rsp + 0x138], r13
mov word [rsp + 0x128], r13w
xor eax, eax
mov rcx, r14
mov rdi, rdx
repne scasw ax, word [rdi]
not rcx
lea r8, [rcx - 1]
lea rcx, [rsp + 0x120]
call fcn.140006d30
mov dword [rsp + 0x28], r13d
mov eax, dword [0x1400425d0]
mov dword [rsp + 0x20], eax
mov r9, r15
lea r8, [0x140003340]
lea rdx, [rsp + 0x120]
mov rcx, qword [0x1400425d8]
call fcn.140007da0
test eax, eax
sete dil
cmp qword [rsp + 0x68], 8
jb 0x140005514
mov rcx, qword [rsp + 0x50]
call fcn.140016cb8
test dil, dil
je 0x140005555
test rsi, rsi
jne 0x140005528
call fcn.1400167cc
mov rdx, r13
jmp 0x14000552b
mov rdx, qword [rsi]
cmp rbp, qword [rdx + 0x28]
jne 0x140005536
call fcn.1400167cc
cmp qword [rbp + 0x30], 8
jb 0x140005543
mov rdx, qword [rbp + 0x18]
jmp 0x140005547
lea rdx, [rbp + 0x18]
lea rcx, str._s:_Done__n
call fcn.1400060a0
jmp 0x14000558f
test rsi, rsi
jne 0x140005564
call fcn.1400167cc
mov rdx, r13
jmp 0x140005567
mov rdx, qword [rsi]
cmp rbp, qword [rdx + 0x28]
jne 0x140005572
call fcn.1400167cc
cmp qword [rbp + 0x30], 8
jb 0x14000557f
mov rdx, qword [rbp + 0x18]
jmp 0x140005583
lea rdx, [rbp + 0x18]
lea rcx, str._s:_Failed__n
call fcn.1400060a0
test rsi, rsi
jne 0x14000559e
call fcn.1400167cc
mov rdx, r13
jmp 0x1400055a1
mov rdx, qword [rsi]
cmp rbp, qword [rdx + 0x28]
jne 0x1400055ac
call fcn.1400167cc
mov rbp, qword [rbp]
mov rdi, qword [0x140042720]
mov rax, qword [0x1400426f8]
jmp 0x140005437
lea rcx, str.End_of_Step_2_n_n
call fcn.1400060a0
lea rcx, str.Step_3:_Erasing_selected_drives_and_their_freespace..._n
call fcn.1400060a0
mov rdi, qword [0x1400426e8]
mov rbx, qword [rdi]
mov rax, qword [0x1400426c0]
mov rsi, rax
nop
test rsi, rsi
je 0x1400055fa
cmp rsi, rax
je 0x1400055ff
call fcn.1400167cc
cmp rbx, rdi
je 0x1400056e9
test rsi, rsi
jne 0x140005617
call fcn.1400167cc
mov rdx, r13
jmp 0x14000561a
mov rdx, qword [rsi]
cmp rbx, qword [rdx + 0x28]
jne 0x140005625
call fcn.1400167cc
lea r8, [rbx + 0x10]
lea rdx, [0x140034738]
lea rcx, [rsp + 0x48]
call fcn.140007cd0
nop
cmp qword [rax + 0x20], 8
jb 0x140005648
mov rdx, qword [rax + 8]
jmp 0x14000564c
lea rdx, [rax + 8]
mov qword [rsp + 0x140], 7
mov qword [rsp + 0x138], r13
mov word [rsp + 0x128], r13w
xor eax, eax
mov rcx, r14
mov rdi, rdx
repne scasw ax, word [rdi]
not rcx
lea r8, [rcx - 1]
lea rcx, [rsp + 0x120]
call fcn.140006d30
lea r8, [0x140042688]
lea rdx, [rsp + 0x120]
mov rcx, qword [0x1400425d8]
call sym.DataShredderConsole64.exe__SecureEraseFillVolumeFreeSpace_DataShredder__QEAA_NV__basic_string__WU__char_traits__W_std__V__allo
nop
cmp qword [rsp + 0x68], 8
jb 0x1400056b6
mov rcx, qword [rsp + 0x50]
call fcn.140016cb8
test rsi, rsi
jne 0x1400056c5
call fcn.1400167cc
mov rdx, r13
jmp 0x1400056c8
mov rdx, qword [rsi]
cmp rbx, qword [rdx + 0x28]
jne 0x1400056d3
call fcn.1400167cc
mov rbx, qword [rbx]
mov rdi, qword [0x1400426e8]
mov rax, qword [0x1400426c0]
jmp 0x1400055f0
mov rdi, qword [0x1400426b0]
mov rsi, qword [rdi]
mov rax, qword [0x140042688]
mov rbx, rax
nop dword [rax]
test rbx, rbx
je 0x14000570a
cmp rbx, rax
je 0x14000570f
call fcn.1400167cc
cmp rsi, rdi
je 0x140005800
test rbx, rbx
jne 0x140005727
call fcn.1400167cc
mov rdx, r13
jmp 0x14000572a
mov rdx, qword [rbx]
cmp rsi, qword [rdx + 0x28]
jne 0x140005735
call fcn.1400167cc
cmp qword [rsi + 0x30], 8
jb 0x140005742
mov rdx, qword [rsi + 0x18]
jmp 0x140005746
lea rdx, [rsi + 0x18]
mov qword [rsp + 0x140], 7
mov qword [rsp + 0x138], r13
mov word [rsp + 0x128], r13w
xor eax, eax
mov rcx, r14
mov rdi, rdx
repne scasw ax, word [rdi]
not rcx
lea r8, [rcx - 1]
lea rcx, [rsp + 0x120]
call fcn.140006d30
mov dword [rsp + 0x28], r13d
mov eax, dword [0x1400425d0]
mov dword [rsp + 0x20], eax
mov r9, r15
lea r8, [0x140003340]
lea rdx, [rsp + 0x120]
mov rcx, qword [0x1400425d8]
call fcn.140007da0
test eax, eax
jne 0x1400057c1
lea rcx, str.Done__n
call fcn.1400060a0
jmp 0x1400057cd
lea rcx, str.Failed__n
call fcn.1400060a0
test rbx, rbx
jne 0x1400057dc
call fcn.1400167cc
mov rdx, r13
jmp 0x1400057df
mov rdx, qword [rbx]
cmp rsi, qword [rdx + 0x28]
jne 0x1400057ea
call fcn.1400167cc
mov rsi, qword [rsi]
mov rdi, qword [0x1400426b0]
mov rax, qword [0x140042688]
jmp 0x140005700
mov ecx, 8
call fcn.140016dcc
test rax, rax
je 0x14000581c
lea rcx, [rsp + 0xb8]
mov qword [rax], rcx
jmp 0x14000581f
mov rax, r13
mov qword [rsp + 0xb8], rax
lea rcx, [rsp + 0xb8]
call fcn.140006970
mov qword [rsp + 0xe0], rax
mov qword [rsp + 0xe8], r13
mov rdi, qword [0x140042608]
mov r12, qword [rdi]
mov rax, qword [0x1400425e0]
mov rbx, rax
test rbx, rbx
je 0x140005862
cmp rbx, rax
je 0x140005867
call fcn.1400167cc
cmp r12, rdi
je 0x140005b46
test rbx, rbx
jne 0x14000587f
call fcn.1400167cc
mov rdx, r13
jmp 0x140005882
mov rdx, qword [rbx]
cmp r12, qword [rdx + 0x28]
jne 0x14000588d
call fcn.1400167cc
lea r8, [r12 + 0x10]
lea rdx, [0x140034738]
lea rcx, [rsp + 0x48]
call fcn.140007cd0
mov dword [rsp + 0x28], r13d
mov ecx, dword [0x1400425d0]
mov dword [rsp + 0x20], ecx
mov r9, r15
lea r8, [0x140003340]
mov rdx, rax
mov rcx, qword [0x1400425d8]
call fcn.140007da0
test eax, eax
jne 0x1400058e0
lea rcx, str.Done__n
call fcn.1400060a0
jmp 0x140005b12
mov ecx, 0x18
call fcn.140016dcc
mov rbp, rax
test rax, rax
je 0x140005902
xor eax, eax
mov qword [rbp], rax
mov qword [rbp + 8], rax
mov qword [rbp + 0x10], rax
jmp 0x140005905
mov rbp, r13
test rbx, rbx
jne 0x140005914
call fcn.1400167cc
mov rdx, r13
jmp 0x140005917
mov rdx, qword [rbx]
cmp r12, qword [rdx + 0x28]
jne 0x140005922
call fcn.1400167cc
cmp qword [r12 + 0x30], 8
jb 0x140005931
mov rdx, qword [r12 + 0x18]
jmp 0x140005936
lea rdx, [r12 + 0x18]
mov dword [rsp + 0x30], 3
mov dword [rsp + 0x28], 0xc0110000
mov dword [rsp + 0x20], 1
xor r9d, r9d
xor r8d, r8d
mov rcx, rbp
call fcn.14000b9f0
mov rcx, rbp
call fcn.14000b650
movzx edi, al
mov rcx, rbp
call fcn.14000b380
mov rcx, rbp
call fcn.140016cb8
test dil, dil
je 0x1400059be
test rbx, rbx
jne 0x14000598b
call fcn.1400167cc
mov rdx, r13
jmp 0x14000598e
mov rdx, qword [rbx]
cmp r12, qword [rdx + 0x28]
jne 0x140005999
call fcn.1400167cc
cmp qword [r12 + 0x30], 8
jb 0x1400059a8
mov rdx, qword [r12 + 0x18]
jmp 0x1400059ad
lea rdx, [r12 + 0x18]
lea rcx, str._nCould_not_gain_full_access_rights_to_drive__s.
call fcn.1400060a0
jmp 0x140005b12
test rbx, rbx
jne 0x1400059cd
call fcn.1400167cc
mov rdx, r13
jmp 0x1400059d0
mov rdx, qword [rbx]
cmp r12, qword [rdx + 0x28]
jne 0x1400059db
call fcn.1400167cc
cmp qword [r12 + 0x30], 8
jb 0x1400059ea
mov rdx, qword [r12 + 0x18]
jmp 0x1400059ef
lea rdx, [r12 + 0x18]
lea rcx, str._nCould_not_gain_full_access_rights_to_drive__s._Would_you_like_to_schedule_its_erasure_on_boot___y_es___n_o_
call fcn.1400060a0
call fcn.140016db4
cmp eax, 0x79
jne 0x140005ad5
test rbx, rbx
jne 0x140005a18
call fcn.1400167cc
mov rdx, r13
jmp 0x140005a1b
mov rdx, qword [rbx]
cmp r12, qword [rdx + 0x28]
jne 0x140005a26
call fcn.1400167cc
cmp qword [r12 + 0x30], 8
jb 0x140005a35
mov rdx, qword [r12 + 0x18]
jmp 0x140005a3a
lea rdx, [r12 + 0x18]
mov qword [rsp + 0x118], 7
mov qword [rsp + 0x110], r13
mov word [rsp + 0x100], r13w
xor eax, eax
mov rcx, r14
mov rdi, rdx
repne scasw ax, word [rdi]
not rcx
lea r8, [rcx - 1]
lea rcx, [rsp + 0xf8]
call fcn.140006d30
nop
mov rsi, qword [rsp + 0xe0]
lea r9, [rsp + 0xf8]
mov r8, qword [rsi + 8]
mov rdx, rsi
lea rcx, [rsp + 0xb8]
call fcn.140006fe0
mov rdi, rax
mov edx, 1
lea rcx, [rsp + 0xb8]
call fcn.140007080
mov qword [rsi + 8], rdi
mov rcx, qword [rdi + 8]
mov qword [rcx], rdi
cmp qword [rsp + 0x118], 8
jb 0x140005b12
mov rcx, qword [rsp + 0x100]
call fcn.140016cb8
jmp 0x140005b12
test rbx, rbx
jne 0x140005ae4
call fcn.1400167cc
mov rdx, r13
jmp 0x140005ae7
mov rdx, qword [rbx]
cmp r12, qword [rdx + 0x28]
jne 0x140005af2
call fcn.1400167cc
cmp qword [r12 + 0x30], 8
jb 0x140005b01
mov rdx, qword [r12 + 0x18]
jmp 0x140005b06
lea rdx, [r12 + 0x18]
lea rcx, str.Could_not_erase__s._n
call fcn.1400060a0
test rbx, rbx
jne 0x140005b21
call fcn.1400167cc
mov rdx, r13
jmp 0x140005b24
mov rdx, qword [rbx]
cmp r12, qword [rdx + 0x28]
jne 0x140005b2f
call fcn.1400167cc
mov r12, qword [r12]
mov rdi, qword [0x140042608]
mov rax, qword [0x1400425e0]
jmp 0x140005858
cmp qword [rsp + 0xe8], 0
jbe 0x140005f37
mov qword [rsp + 0x140], 7
mov qword [rsp + 0x138], r13
mov word [rsp + 0x128], r13w
mov r8d, 0x13
lea rdx, str.autocheck_autochk_
lea rcx, [rsp + 0x120]
call fcn.140006d30
nop
mov qword [rsp + 0x118], 7
mov qword [rsp + 0x110], r13
mov word [rsp + 0x100], r13w
mov r8d, 0x1a
lea rdx, str.autocheck_DataShredderBoot
lea rcx, [rsp + 0xf8]
call fcn.140006d30
nop
mov word [rsp + 0x510], r13w
xor edx, edx
mov r8d, 0x206
lea rcx, [rsp + 0x512]
call fcn.140017030
mov word [rsp + 0x300], r13w
xor edx, edx
mov r8d, 0x206
lea rcx, [rsp + 0x302]
call fcn.140017030
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov rcx, rax
mov r8d, 0x104
lea rdx, [rsp + 0x300]
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
xor eax, eax
mov rcx, r14
lea rdi, [rsp + 0x300]
repne scasw ax, word [rdi]
not rcx
dec rcx
sub ecx, 1
movsxd rax, ecx
js 0x140005c61
nop
cmp word [rsp + rax*2 + 0x300], 0x5c
je 0x140005c55
dec ecx
sub rax, 1
jns 0x140005c40
jmp 0x140005c61
movsxd rax, ecx
mov word [rsp + rax*2 + 0x300], r13w
lea rdi, [rsp + 0x300]
xor eax, eax
mov rcx, r14
repne scasw ax, word [rdi]
mov rax, qword [str.DataShredderBoot.exe]
mov qword [rdi - 2], rax
mov rax, qword [0x140034a18]
mov qword [rdi + 6], rax
mov rax, qword [0x140034a20]
mov qword [rdi + 0xe], rax
mov rax, qword [0x140034a28]
mov qword [rdi + 0x16], rax
mov rax, qword [0x140034a30]
mov qword [rdi + 0x1e], rax
mov eax, dword [0x140034a38]
mov dword [rdi + 0x26], eax
mov r8d, 0x104
lea rdx, [rsp + 0x510]
lea rcx, [rsp + 0x300]
call qword [sym.imp.KERNEL32.dll_GetShortPathNameW]
test eax, eax
je 0x140005d22
mov eax, eax
mov word [rsp + rax*2 + 0x510], r13w
mov r8d, 0xa
lea rdx, str.autocheck
lea rcx, [rsp + 0xf8]
call fcn.140006d30
xor eax, eax
mov rcx, r14
lea rdi, [rsp + 0x510]
repne scasw ax, word [rdi]
not rcx
lea r8, [rcx - 1]
lea rdx, [rsp + 0x510]
lea rcx, [rsp + 0xf8]
call fcn.140006bb0
mov rdi, qword [rsp + 0xe0]
mov rsi, qword [rdi]
mov rax, qword [rsp + 0xb8]
mov rbx, rax
test rbx, rbx
je 0x140005d42
cmp rbx, rax
je 0x140005d47
call fcn.1400167cc
cmp rsi, rdi
je 0x140005dec
mov r8d, 8
lea rdx, str.__d____
lea rcx, [rsp + 0xf8]
call fcn.140006bb0
test rbx, rbx
jne 0x140005d79
call fcn.1400167cc
mov rdx, r13
jmp 0x140005d7c
mov rdx, qword [rbx]
cmp rsi, qword [rdx + 0x28]
jne 0x140005d87
call fcn.1400167cc
cmp qword [rsi + 0x30], 8
jb 0x140005d94
mov rdx, qword [rsi + 0x18]
jmp 0x140005d98
lea rdx, [rsi + 0x18]
xor eax, eax
mov rcx, r14
mov rdi, rdx
repne scasw ax, word [rdi]
not rcx
lea r8, [rcx - 1]
lea rcx, [rsp + 0xf8]
call fcn.140006bb0
test rbx, rbx
jne 0x140005dc6
call fcn.1400167cc
mov rdx, r13
jmp 0x140005dc9
mov rdx, qword [rbx]
cmp rsi, qword [rdx + 0x28]
jne 0x140005dd4
call fcn.1400167cc
mov rsi, qword [rsi]
mov rdi, qword [rsp + 0xe0]
mov rax, qword [rsp + 0xb8]
jmp 0x140005d38
mov r8d, 4
lea rdx, str.__m
lea rcx, [rsp + 0xf8]
call fcn.140006bb0
mov edx, dword [0x1400425d0]
test edx, edx
jne 0x140005e2a
lea r8d, [rdx + 1]
lea rdx, str.01234
lea rcx, [rsp + 0xf8]
call fcn.140006bb0
jmp 0x140005ea3
cmp edx, 1
jne 0x140005e48
mov r8d, edx
lea rdx, [0x140034a80]
lea rcx, [rsp + 0xf8]
call fcn.140006bb0
jmp 0x140005ea3
cmp edx, 2
jne 0x140005e67
lea r8d, [rdx - 1]
lea rdx, [0x140034a84]
lea rcx, [rsp + 0xf8]
call fcn.140006bb0
jmp 0x140005ea3
cmp edx, 3
jne 0x140005e86
lea r8d, [rdx - 2]
lea rdx, [0x140034a88]
lea rcx, [rsp + 0xf8]
call fcn.140006bb0
jmp 0x140005ea3
cmp edx, 4
jne 0x140005ea3
lea r8d, [rdx - 3]
lea rdx, [0x140034a8c]
lea rcx, [rsp + 0xf8]
call fcn.140006bb0
mov qword [rsp + 0x68], 7
mov qword [rsp + 0x60], r13
mov word [rsp + 0x50], r13w
mov r9, r14
xor r8d, r8d
lea rdx, [rsp + 0xf8]
lea rcx, [rsp + 0x48]
call fcn.140006740
lea rcx, [rsp + 0x48]
call sym.DataShredderConsole64.exe_public:_static_long_int___cdecl_DataShredder::ScheduleErase_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___
test eax, eax
je 0x140005eea
lea rcx, [0x140034a90]
call fcn.1400060a0
nop
cmp qword [rsp + 0x118], 8
jb 0x140005f02
mov rcx, qword [rsp + 0x100]
call fcn.140016cb8
mov qword [rsp + 0x118], 7
mov qword [rsp + 0x110], r13
mov word [rsp + 0x100], r13w
cmp qword [rsp + 0x140], 8
jb 0x140005f37
mov rcx, qword [rsp + 0x128]
call fcn.140016cb8
lea rcx, str.End_of_Step_3_n_n
call fcn.1400060a0
lea rcx, str.pause
call fcn.140016248
nop
lea rcx, [rsp + 0xb8]
call fcn.140006f60
mov rcx, qword [rsp + 0xe0]
call fcn.140016cb8
mov qword [rsp + 0xe0], r13
mov rcx, qword [rsp + 0xb8]
call fcn.140016cb8
nop
lea rcx, [rsp + 0x170]
call fcn.140006020
nop
cmp qword [rsp + 0x168], 8
jb 0x140005fa6
mov rcx, qword [rsp + 0x150]
call fcn.140016cb8
xor eax, eax
jmp 0x140005fe1
lea rcx, [rsp + 0x170]
call fcn.140006020
nop
cmp qword [rsp + 0x168], 8
jb 0x140005fd0
mov rcx, qword [rsp + 0x150]
call fcn.140016cb8
or eax, 0xffffffff
jmp 0x140005fe1
mov ecx, 0xc4653600
call qword [sym.imp.KERNEL32.dll_ExitProcess]
mov rcx, qword [rsp + 0x720]
xor rcx, rsp
call fcn.140015ba0
lea r11, [rsp + 0x730]
mov rbx, qword [r11 + 0x30]
mov rbp, qword [r11 + 0x40]
mov rsi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret