Function at 0x140281b55
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x208
mov r14, r8
mov r15, rdx
mov rbx, rcx
cmp byte [rdx + 0x38], 0
mov ebp, dword [r8 + 0x68]
mov r13d, dword [r8 + 0x6c]
je 0x140282188
bt ebp, 0xa
jae 0x140282188
mov eax, r13d
and eax, 0x20000000
je 0x140282188
mov rdi, qword [r14 + 0x48]
mov r12, qword [r14 + 0x50]
mov r8, qword [r14 + 0x58]
mov rsi, qword [r15 + 0xb0]
lea r13, [rsp + 0x188]
mov rcx, r13
mov rdx, rdi
call fcn.14025a880
lea rbp, [rsp + 0x40]
mov rcx, rbp
mov qword [rsp + 0x130], rsi
mov rdx, rsi
mov r8, r13
mov r9b, 1
call fcn.140284902
mov rax, qword [rbp]
cmp rax, 2
jne 0x140281c88
mov qword [rsp + 0x28], rdi
mov rdx, r12
mov r12, qword [rsp + 0x48]
mov rbp, qword [rsp + 0x50]
mov rdi, qword [rsp + 0x58]
mov rax, qword [rsp + 0x60]
mov qword [rsp + 0x138], rax
mov r15, qword [rsp + 0x68]
mov r14b, byte [rsp + 0x70]
movups xmm0, xmmword [rsp + 0x71]
movaps xmmword [rsp + 0xe0], xmm0
mov rax, qword [rsp + 0x80]
mov qword [rsp + 0xef], rax
mov r13b, byte [rsp + 0x88]
movzx eax, byte [rsp + 0x8f]
shl eax, 0x10
movzx ecx, word [rsp + 0x8d]
or ecx, eax
shl rcx, 0x20
mov esi, dword [rsp + 0x89]
or rsi, rcx
movaps xmm0, xmmword [rsp + 0xe0]
movaps xmmword [rsp + 0xc0], xmm0
mov rax, qword [rsp + 0xef]
mov qword [rsp + 0xcf], rax
jmp 0x140281ed8
mov qword [rsp + 0x180], rax
mov rax, qword [rsp + 0x48]
mov qword [rsp + 0x120], rax
mov rax, qword [rsp + 0x50]
mov qword [rsp + 0x118], rax
mov rax, qword [rsp + 0x58]
mov qword [rsp + 0x110], rax
mov rax, qword [rsp + 0x60]
mov qword [rsp + 0x108], rax
mov rax, qword [rsp + 0x68]
mov qword [rsp + 0x100], rax
mov al, byte [rsp + 0x70]
mov byte [rsp + 0x25], al
movups xmm0, xmmword [rsp + 0x71]
movaps xmmword [rsp + 0xe0], xmm0
mov rax, qword [rsp + 0x80]
mov qword [rsp + 0xef], rax
movzx eax, byte [rsp + 0x88]
mov qword [rsp + 0x128], rax
movzx eax, byte [rsp + 0x8f]
shl eax, 0x10
movzx ecx, word [rsp + 0x8d]
or ecx, eax
shl rcx, 0x20
mov eax, dword [rsp + 0x89]
or rax, rcx
mov rsi, qword [rsp + 0x90]
mov rcx, qword [rsp + 0x98]
mov qword [rsp + 0x28], rcx
mov rdx, qword [rsp + 0xa0]
mov ebp, dword [rsp + 0xa8]
mov r13d, dword [rsp + 0xac]
movups xmm0, xmmword [rsp + 0xb0]
movaps xmmword [rsp + 0x1f0], xmm0
mov rcx, rdi
mov rdi, rdx
mov rdx, r12
mov r12, rax
call fcn.14015e77d
mov rax, qword [rsp + 0xef]
mov qword [rsp + 0x1cf], rax
movaps xmm0, xmmword [rsp + 0xe0]
movaps xmmword [rsp + 0x1c0], xmm0
mov ecx, ebp
mov edx, r13d
call fcn.140255900
mov r11, qword [rsp + 0x100]
mov r10, qword [rsp + 0x108]
mov r9, qword [rsp + 0x110]
mov r8, qword [rsp + 0x118]
mov cl, byte [rsp + 0x25]
mov rdx, rsi
mov rsi, qword [rsp + 0x120]
test al, al
je 0x1402820cd
mov qword [rsp + 0x178], rdi
mov qword [rsp + 0x30], rdx
mov rdi, r12
shl rdi, 8
lea rcx, [rsp + 0x40]
and dword [rcx + 0x20], 0
mov rax, qword [rsp + 0x128]
or rdi, rax
and word [rcx + 0x24], 0
and dword [rcx], 0
xorps xmm0, xmm0
movups xmmword [rcx + 8], xmm0
mov qword [rcx + 0x18], 7
mov byte [rcx + 0x20], 1
mov dword [rcx + 0x10], 0x2000000
mov rdx, rdi
mov r8, qword [rsp + 0x28]
call fcn.1402558c0
mov rsi, rdx
test rax, rax
je 0x140281e40
mov qword [rsp + 0x28], rdi
mov rbp, rsi
jmp 0x140281e7d
mov qword [rsp + 0xf8], r12
lea rdx, [rsp + 0x200]
mov qword [rdx], rsi
lea r12, [rsp + 0x40]
mov rcx, r12
call fcn.14022b3a0
cmp dword [r12], 0
je 0x140281f42
mov qword [rsp + 0x28], rdi
mov rbp, qword [rsp + 0x48]
mov rcx, rsi
call sub.kernel32.dll_CloseHandle
movups xmm0, xmmword [rsp + 0xe0]
movaps xmmword [rsp + 0x140], xmm0
mov rax, qword [rsp + 0xef]
mov qword [rsp + 0x14f], rax
mov r14b, 2
mov r13b, 2
mov r12, qword [rsp + 0x130]
mov rdx, qword [rsp + 0x30]
mov rax, qword [rsp + 0x14f]
mov qword [rsp + 0xcf], rax
movaps xmm0, xmmword [rsp + 0x140]
movaps xmmword [rsp + 0xc0], xmm0
mov r15, qword [rsp + 0x170]
mov rcx, qword [rsp + 0x28]
call fcn.14015e77d
mov qword [rbx + 8], r12
mov qword [rbx + 0x10], rbp
mov qword [rbx + 0x18], rdi
mov rax, qword [rsp + 0x138]
mov qword [rbx + 0x20], rax
mov qword [rbx + 0x28], r15
mov byte [rbx + 0x30], r14b
movaps xmm0, xmmword [rsp + 0xc0]
movups xmmword [rbx + 0x31], xmm0
mov rax, qword [rsp + 0xcf]
mov qword [rbx + 0x40], rax
mov rax, rsi
shr rax, 0x30
mov byte [rbx + 0x4f], al
mov rax, rsi
shr rax, 0x20
mov word [rbx + 0x4d], ax
mov dword [rbx + 0x49], esi
mov qword [rbx], 2
mov byte [rbx + 0x48], r13b
jmp 0x140282436
mov eax, dword [rsp + 0x60]
mov ecx, dword [rsp + 0x70]
mov edx, dword [rsp + 0x74]
shl rcx, 0x20
or rcx, rdx
mov qword [rsp + 0x188], 1
mov qword [rsp + 0x190], rax
mov qword [rsp + 0x198], rcx
mov qword [rsp + 0x1a0], 2
mov qword [rsp + 0x1a8], rsi
mov r8, qword [r15 + 0x78]
imul r9, qword [r15 + 0x88], 0x48
mov r12, qword [rsp + 0xf8]
test r9, r9
je 0x140281fba
cmp qword [r8 + r9 - 0x48], 0
je 0x140281fb4
cmp qword [r8 + r9 - 0x40], rax
jne 0x140281fb4
cmp rcx, qword [r8 + r9 - 0x38]
je 0x140281fcc
add r9, 0xffffffffffffffb8
jmp 0x140281f99
lea rcx, [rsp + 0x188]
call fcn.140282743
jmp 0x140282094
mov rdx, qword [r8 + r9 - 0x20]
mov r8, qword [r8 + r9 - 0x10]
lea rcx, [rsp + 0x40]
call fcn.14025a880
lea r12, [rsp + 0x60]
mov rcx, r12
mov rdx, rdi
mov r8, qword [rsp + 0x28]
call fcn.14025a880
mov rax, qword [r12 - 0x20]
mov qword [rsp + 0x168], rax
mov rax, qword [r12 - 0x18]
mov qword [rsp + 0x160], rax
mov rax, qword [r12 - 0x10]
mov qword [rsp + 0x138], rax
mov rax, qword [r12 - 8]
mov qword [rsp + 0x170], rax
mov al, byte [r12]
mov byte [rsp + 0x26], al
movups xmm0, xmmword [r12 + 1]
movaps xmmword [rsp + 0x140], xmm0
mov rax, qword [r12 + 0x10]
mov qword [rsp + 0x14f], rax
mov al, byte [r12 + 0x18]
mov byte [rsp + 0x27], al
movzx eax, byte [r12 + 0x1f]
mov dword [rsp + 0x3c], eax
movzx eax, word [r12 + 0x1d]
mov qword [rsp + 0x158], rax
mov esi, dword [r12 + 0x19]
mov r12, qword [rsp + 0xf8]
lea rcx, [rsp + 0x188]
call fcn.140282743
mov cl, byte [rsp + 0x27]
cmp cl, 3
jne 0x14028244b
mov rdx, qword [rsp + 0x30]
mov cl, byte [rsp + 0x25]
mov rsi, qword [rsp + 0x120]
mov r8, qword [rsp + 0x118]
mov r9, qword [rsp + 0x110]
mov r10, qword [rsp + 0x108]
mov r11, qword [rsp + 0x100]
mov rdi, qword [rsp + 0x178]
mov rax, qword [rsp + 0x1cf]
mov qword [rsp + 0xcf], rax
mov qword [r14 + 8], rsi
mov qword [r14 + 0x10], r8
mov qword [r14 + 0x18], r9
mov qword [r14 + 0x20], r10
mov qword [r14 + 0x28], r11
lea rax, [r14 + 0x31]
movaps xmm0, xmmword [rsp + 0x1c0]
movaps xmmword [rsp + 0xc0], xmm0
mov byte [r14 + 0x30], cl
mov rcx, qword [rsp + 0xcf]
mov qword [rax + 0xf], rcx
movaps xmm0, xmmword [rsp + 0xc0]
movups xmmword [rax], xmm0
mov rax, r12
shr rax, 0x30
mov byte [r14 + 0x4f], al
mov rax, r12
shr rax, 0x20
mov word [r14 + 0x4d], ax
mov dword [r14 + 0x49], r12d
mov qword [r14 + 0x50], rdx
mov rax, qword [rsp + 0x28]
mov qword [r14 + 0x58], rax
mov qword [r14 + 0x60], rdi
movaps xmm0, xmmword [rsp + 0x1f0]
movaps xmmword [rsp + 0x1e0], xmm0
mov dword [r14 + 0x68], ebp
mov dword [r14 + 0x6c], r13d
movaps xmm0, xmmword [rsp + 0x1e0]
movups xmmword [r14 + 0x70], xmm0
mov rax, qword [rsp + 0x180]
mov qword [r14], rax
mov rax, qword [rsp + 0x128]
mov byte [r14 + 0x48], al
mov eax, ebp
shr eax, 0xa
mov esi, r13d
shr esi, 0x1d
and esi, eax
and esi, 1
jne 0x140282271
mov ecx, ebp
mov edx, r13d
call fcn.140255900
test al, al
je 0x140282271
cmp byte [r15 + 0x3b], 0
je 0x1402822ee
cmp qword [r14 + 0x70], 0
je 0x1402822ee
mov r12, qword [r14 + 0x48]
mov rsi, qword [r14 + 0x58]
mov rcx, r12
mov rdx, rsi
call fcn.14028456c
mov r8, rdx
test rax, rax
jne 0x140282205
lea rdi, [rsp + 0x188]
mov rcx, rdi
mov rdx, r8
call fcn.1402845b1
cmp dword [rdi], 0
je 0x140282354
mov r8, qword [rsp + 0x190]
lea rdi, [rsp + 0x40]
mov rcx, rdi
mov rdx, r14
call fcn.1402848a7
mov cl, byte [rdi + 0x40]
mov rax, qword [rdi]
cmp cl, 3
je 0x14028235b
mov rdx, qword [rsp + 0x78]
mov qword [rbx + 0x40], rdx
movups xmm0, xmmword [rsp + 0x48]
movups xmm1, xmmword [rsp + 0x58]
movups xmm2, xmmword [rsp + 0x68]
movups xmmword [rbx + 0x30], xmm2
movups xmmword [rbx + 0x20], xmm1
movups xmmword [rbx + 0x10], xmm0
mov edx, dword [rsp + 0x81]
mov r8d, dword [rsp + 0x84]
mov dword [rbx + 0x49], edx
mov dword [rbx + 0x4c], r8d
mov qword [rbx], 2
mov qword [rbx + 8], rax
mov byte [rbx + 0x48], cl
jmp 0x14028242a
cmp qword [r14 + 0x70], 0
jne 0x1402823de
cmp byte [r15 + 0x39], 0
setne al
and al, sil
cmp al, 1
jne 0x1402823de
mov r12, qword [r14 + 0x48]
mov rsi, qword [r14 + 0x58]
lea rdi, [rsp + 0x40]
mov rcx, rdi
mov rdx, r12
mov r8, rsi
call fcn.140257680
cmp dword [rdi], 2
jne 0x140282314
mov r15, qword [rsp + 0x48]
lea rdi, [rsp + 0x188]
mov rcx, rdi
mov rdx, r12
mov r8, rsi
call fcn.14025a880
and qword [rbx + 8], 0
mov qword [rbx + 0x10], r15
movups xmm0, xmmword [rdi]
movups xmm1, xmmword [rdi + 0x10]
movups xmmword [rbx + 0x18], xmm0
movups xmmword [rbx + 0x28], xmm1
mov dword [rbx + 0x48], 2
jmp 0x140282423
mov r12, qword [r14 + 0x48]
mov r9, qword [r14 + 0x58]
lea rsi, [rsp + 0x40]
mov rcx, rsi
mov rdx, r15
mov r8, r12
call fcn.14028280e
cmp byte [rsi + 0x40], 3
je 0x14028238b
jmp 0x140282412
mov ecx, dword [rsp + 0x80]
mov edx, dword [rsp + 0x84]
call fcn.140255900
test al, al
je 0x1402823de
lea rdi, [rsp + 0x40]
mov rcx, rdi
mov rdx, r15
mov r8, r12
mov r9, rsi
call fcn.14028280e
cmp byte [rdi + 0x40], 3
jne 0x140282412
jmp 0x1402823de
mov eax, dword [rsp + 0x1a8]
cmp qword [r15], 0
je 0x140282494
cmp rax, qword [r15 + 8]
jne 0x14028238b
lea rdi, [rsp + 0x40]
mov rcx, rdi
mov rdx, r15
mov r8, r12
mov r9, rsi
call fcn.14028280e
cmp byte [rdi + 0x40], 3
jne 0x140282412
cmp byte [r15 + 0x3a], 0
je 0x1402823de
mov rdi, qword [r15 + 0xa0]
cmp rdi, qword [r15 + 0x98]
jne 0x1402823b8
lea rcx, [r15 + 0x90]
mov rdx, rdi
call fcn.140283e1a
mov rdi, qword [r15 + 0xa0]
shl rdi, 7
add rdi, qword [r15 + 0x90]
mov ecx, 0x10
mov rsi, r14
rep movsq qword [rdi], qword [rsi]
inc qword [r15 + 0xa0]
mov qword [rbx], 3
jmp 0x140282436
mov rax, qword [r15 + 0xb0]
cmp rax, qword [r15 + 0x28]
jb 0x140282401
cmp rax, qword [r15 + 0x30]
ja 0x140282401
mov ecx, 0x10
mov rdi, rbx
mov rsi, r14
rep movsq qword [rdi], qword [rsi]
jmp 0x140282436
mov qword [rbx], 3
mov rcx, qword [r14 + 0x48]
mov rdx, qword [r14 + 0x50]
jmp 0x140282431
lea rdi, [rbx + 8]
lea rsi, [rsp + 0x40]
mov ecx, 9
rep movsq qword [rdi], qword [rsi]
mov qword [rbx], 2
mov rdx, qword [r14 + 0x50]
mov rcx, r12
call fcn.14015e77d
nop
add rsp, 0x208
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
mov eax, ecx
mov qword [rsp + 0x28], rdi
mov edx, dword [rsp + 0x3c]
shl edx, 0x10
mov rcx, qword [rsp + 0x158]
or ecx, edx
shl rcx, 0x20
or rsi, rcx
mov r12, qword [rsp + 0x130]
mov rdx, qword [rsp + 0x30]
mov rbp, qword [rsp + 0x168]
mov r14b, byte [rsp + 0x26]
mov rdi, qword [rsp + 0x160]
mov r13d, eax
jmp 0x140281eb0
lea rcx, str.BUG:_called_is_same_file_system_without_root_device
lea r8, [0x1404eb7b8]
mov edx, 0x33
call fcn.140058630
ud2