Function at 0x140082790
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
mov r11, rsp
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x810
mov qword [rsp + 0xf0], 0xfffffffffffffffe
mov qword [r11 + 0x10], rbx
mov qword [r11 + 0x18], rbp
mov qword [r11 + 0x20], rsi
mov rax, qword [0x14042d950]
xor rax, rsp
mov qword [rsp + 0x800], rax
mov r14, rcx
mov qword [rsp + 0xc0], rcx
mov byte [rsp + 0x5f0], 0x16
mov byte [rsp + 0x5f1], 0xe3
mov byte [rsp + 0x5f2], 0xc9
mov byte [rsp + 0x5f3], 0xe3
mov byte [rsp + 0x5f4], 0x5c
mov byte [rsp + Ordinal_1532], 0xb
mov byte [rsp + Ordinal_1532], 0xb8
mov byte [rsp + Ordinal_1532], 0x4d
mov byte [rsp + Ordinal_1532], 0x81
mov byte [rsp + Ordinal_1532], 0x7d
mov byte [rsp + Ordinal_1532], 0xf9
mov byte [rsp + Ordinal_1532], 0x2d
mov byte [rsp + reloc.MFC80U.DLL_Ordinal_1532], 0xf0
mov byte [rsp + 0x5fd], 2
mov byte [rsp + 0x5fe], 0x15
mov byte [rsp + 0x5ff], 0xae
mov byte [rsp + 0x5e0], 0xaa
mov byte [rsp + 0x5e1], 0xc8
mov byte [rsp + 0x5e2], 8
mov byte [rsp + 0x5e3], 0x58
mov byte [rsp + 0x5e4], 0x8f
mov byte [rsp + 0x5e5], 0x7e
mov byte [rsp + 0x5e6], 0xe0
mov byte [rsp + 0x5e7], 0x42
mov byte [rsp + 0x5e8], 0x85
mov byte [rsp + 0x5e9], 0xd2
mov byte [rsp + 0x5ea], 0xe1
mov byte [rsp + 0x5eb], 0xe9
mov byte [rsp + 0x5ec], 4
mov byte [rsp + 0x5ed], 0x34
mov byte [rsp + 0x5ee], 0xcf
mov byte [rsp + 0x5ef], 0xb3
mov byte [rsp + 0x5a0], 0xa0
mov byte [rsp + 0x5a1], 0x60
mov byte [rsp + 0x5a2], 0x9b
mov byte [rsp + 0x5a3], 0xaf
mov byte [rsp + 0x5a4], 0x31
mov byte [rsp + 0x5a5], 0x14
mov byte [rsp + 0x5a6], 0x62
mov byte [rsp + 0x5a7], 0x4f
mov byte [rsp + 0x5a8], 0xbc
mov byte [rsp + 0x5a9], 0x68
mov byte [rsp + 0x5aa], 0x33
mov byte [rsp + 0x5ab], 0x11
mov byte [rsp + 0x5ac], 0x71
mov byte [rsp + 0x5ad], 0x4a
mov byte [rsp + 0x5ae], 0x69
mov byte [rsp + 0x5af], 0xad
mov byte [rsp + 0x5c0], 0xa2
mov byte [rsp + 0x5c1], 0xa0
mov byte [rsp + 0x5c2], 0xd0
mov byte [rsp + 0x5c3], 0xeb
mov byte [rsp + 0x5c4], 0xe5
mov byte [rsp + 0x5c5], 0xb9
mov byte [rsp + 0x5c6], 0x33
mov byte [rsp + 0x5c7], 0x44
mov byte [rsp + 0x5c8], 0x87
mov byte [rsp + 0x5c9], 0xc0
mov byte [rsp + 0x5ca], 0x68
mov byte [rsp + 0x5cb], 0xb6
mov byte [rsp + Ordinal_1491], 0xb7
mov byte [rsp + Ordinal_1491], 0x26
mov byte [rsp + Ordinal_1493], 0x99
mov byte [rsp + Ordinal_1493], 0xc7
mov byte [rsp + Ordinal_1493], 0x28
mov byte [rsp + Ordinal_1493], 0x73
mov byte [rsp + Ordinal_1493], 0x2a
mov byte [rsp + reloc.MFC80U.DLL_Ordinal_1491], 0xc1
mov byte [rsp + Ordinal_1493], 0x1f
mov byte [rsp + reloc.MFC80U.DLL_Ordinal_1493], 0xf8
mov byte [rsp + Ordinal_1498], 0xd2
mov byte [rsp + Ordinal_1498], 0x11
mov byte [rsp + Ordinal_1498], 0xba
mov byte [rsp + Ordinal_1498], 0x4b
mov byte [rsp + reloc.MFC80U.DLL_Ordinal_1498], 0
mov byte [rsp + 0x5db], 0xa0
mov byte [rsp + 0x5dc], 0xc9
mov byte [rsp + 0x5dd], 0x3e
mov byte [rsp + 0x5de], 0xc9
mov byte [rsp + 0x5df], 0x3b
mov dword [rsp + 0xf8], 0xde94bba4
mov word [rsp + 0xfc], Ordinal_1750
mov word [rsp + 0xfe], 0x4d40
mov byte [rsp + 0x100], 0xa1
mov byte [rsp + 0x101], 0x6a
mov byte [rsp + 0x102], 0xbf
mov byte [rsp + 0x103], 0xd5
mov byte [rsp + 0x104], 1
mov byte [rsp + 0x105], 0x79
mov byte [rsp + 0x106], 0xd6
mov byte [rsp + 0x107], 0xac
xor r15d, r15d
mov qword [r11 - 0x7b8], r15
mov qword [r11 - 0x7b0], r15
mov qword [r11 - 0x7a8], r15
mov qword [rsp + 0x40], r15
mov qword [rsp + 0x48], r15
mov qword [rsp + 0x50], r15
mov qword [rsp + 0x60], r15
mov qword [rsp + 0x68], r15
mov qword [rsp + 0x70], r15
mov rsi, r15
mov rcx, qword [r14 + 0x18]
test rcx, rcx
je 0x140082c98
mov rax, qword [r14 + 0x20]
sub rax, rcx
sar rax, 3
cmp rsi, rax
jae 0x140082c98
test rcx, rcx
je 0x140082b26
mov rax, qword [r14 + 0x20]
sub rax, rcx
sar rax, 3
cmp rsi, rax
jb 0x140082b2c
call qword [sym.imp.MSVCR80.dll__invalid_parameter_noinfo]
mov rax, qword [r14 + 0x18]
mov rbx, qword [rax + rsi*8]
mov qword [rsp + 0x108], rbx
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x48]
cmp eax, 0xb
je 0x140082c8f
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x48]
cmp eax, 0xc
je 0x140082c8f
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x38]
mov rdi, rax
mov rdx, qword [rbx]
mov rcx, rbx
call qword [rdx + 0xb0]
mov qword [rax + 8], rdi
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x40]
mov rdi, rax
mov rdx, qword [rbx]
mov rcx, rbx
call qword [rdx + 0xb0]
mov qword [rax + 0x10], rdi
mov rdx, qword [rsp + 0x68]
mov rdi, qword [rsp + 0x60]
test rdi, rdi
je 0x140082bd3
mov rcx, rdx
sub rcx, rdi
sar rcx, 3
mov rax, qword [rsp + 0x70]
sub rax, rdi
sar rax, 3
cmp rcx, rax
jae 0x140082bd3
mov qword [rdx], rbx
lea rax, [rdx + 8]
mov qword [rsp + 0x68], rax
jmp 0x140082c8f
mov rbx, rdx
cmp rdi, rdx
jbe 0x140082beb
call qword [sym.imp.MSVCR80.dll__invalid_parameter_noinfo]
mov rdx, qword [rsp + 0x68]
mov rdi, qword [rsp + 0x60]
lea rax, [rsp + 0x58]
mov qword [rsp + 0xa0], rax
mov qword [rsp + 0xa8], rbx
test rdi, rdi
je 0x140082c25
mov rax, rdx
sub rax, rdi
sar rax, 3
je 0x140082c25
cmp rdi, rdx
jbe 0x140082c1c
call qword [sym.imp.MSVCR80.dll__invalid_parameter_noinfo]
sub rbx, rdi
sar rbx, 3
jmp 0x140082c28
mov rbx, r15
movaps xmm0, xmmword [rsp + 0xa0]
movdqa xmmword [rsp + 0xb0], xmm0
lea r9, [rsp + 0x108]
mov r8d, 1
lea rdx, [rsp + 0xb0]
lea rcx, [rsp + 0x58]
call fcn.140007440
mov rdx, qword [rsp + 0x60]
mov rdi, rdx
mov rax, qword [rsp + 0x68]
cmp rdx, rax
jbe 0x140082c7b
call qword [sym.imp.MSVCR80.dll__invalid_parameter_noinfo]
mov rax, qword [rsp + 0x68]
mov rdx, qword [rsp + 0x60]
lea rcx, [rdi + rbx*8]
cmp rcx, rax
ja 0x140082c89
cmp rcx, rdx
jae 0x140082c8f
call qword [sym.imp.MSVCR80.dll__invalid_parameter_noinfo]
add rsi, 1
jmp 0x140082af0
call fcn.140049550
mov r12, rax
mov rdx, qword [r14]
mov rcx, r14
call qword [rdx + 0x40]
mov rdi, qword [r12]
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0x50]
mov edx, eax
mov rcx, r12
call qword [rdi]
test eax, eax
jne 0x140082d16
mov rcx, qword [rsp + 0x60]
test rcx, rcx
je 0x140082cd0
call sub.MFC80U.DLL_Ordinal_776
mov qword [rsp + 0x60], r15
mov qword [rsp + 0x68], r15
mov qword [rsp + 0x70], r15
mov rcx, qword [rsp + 0x40]
test rcx, rcx
je 0x140082cee
call sub.MFC80U.DLL_Ordinal_776
mov qword [rsp + 0x40], r15
mov qword [rsp + 0x48], r15
mov qword [rsp + 0x50], r15
mov rcx, qword [rsp + 0x80]
test rcx, rcx
je 0x140082d0f
call sub.MFC80U.DLL_Ordinal_776
xor eax, eax
jmp 0x140083fa7
mov qword [rsp + 0x1a0], r15
xor edx, edx
mov r8d, 0x1f8
lea rcx, [rsp + reloc.MFC80U.DLL_Ordinal_424]
call sub.ntdll.dll_memset
mov rdx, qword [r12]
mov rcx, r12
call qword [rdx + 8]
lea rcx, [rsp + 0x1a0]
mov rdx, rax
mov r8d, reloc.MFC80U.DLL_Ordinal_512
call sub.ntdll.dll_memcpy
cmp qword [rsp + 0x1b8], 0
jne 0x140082dea
cmp qword [rsp + 0x1c0], 0
jne 0x140082dea
movabs rax, 0x5452415020494645
mov qword [rsp + 0x1a0], rax
mov qword [rsp + 0x1b8], 1
mov rcx, qword [r14 + 8]
mov rax, qword [rcx]
call qword [rax + 0x38]
sub rax, 1
mov qword [rsp + 0x1c0], rax
mov dword [rsp + reloc.MFC80U.DLL_Ordinal_424], 0x10000
mov qword [rsp + 0x1e8], 2
mov dword [rsp + 0x1ac], 0x5c
mov qword [rsp + 0x1c8], 0x22
mov rcx, qword [r14 + 8]
mov rax, qword [rcx]
call qword [rax + 0x38]
sub rax, 4
mov qword [rsp + 0x1d0], rax
jmp 0x14008305f
mov r13d, r15d
mov rax, qword [r12]
mov rcx, r12
call qword [rax + 0x18]
test eax, eax
je 0x14008305f
movzx edi, byte [rsp + 0x30]
xor eax, eax
mov qword [rsp + 0x121], rax
mov dword [rsp + 0x129], eax
mov word [rsp + 0x12d], ax
mov byte [rsp + 0x12f], al
xor edx, edx
lea r8d, [rax + 0x70]
lea rcx, [rsp + 0x130]
call sub.ntdll.dll_memset
mov r11, qword [r12]
mov edx, r13d
mov rcx, r12
call qword [r11 + 0x10]
mov r11, rax
lea rax, [rsp + 0x120]
mov ecx, dword [r11 + 0x68]
mov dword [rax], ecx
mov ecx, dword [r11 + 0x6c]
mov dword [rax + 4], ecx
mov ecx, dword [r11 + 0x70]
mov dword [rax + 8], ecx
mov ecx, dword [r11 + 0x74]
mov dword [rax + 0xc], ecx
lea rdx, [rsp + 0x130]
mov ecx, dword [r11 + 0x78]
mov dword [rdx], ecx
mov eax, dword [r11 + 0x7c]
mov dword [rdx + 4], eax
mov eax, dword [r11 + 0x80]
mov dword [rdx + 8], eax
mov eax, dword [r11 + 0x84]
mov dword [rdx + 0xc], eax
mov rcx, qword [r11 + 8]
mov qword [rsp + reloc.MFC80U.DLL_Ordinal_320], rcx
mov rax, qword [r11 + 0x10]
lea rcx, [rax + rcx - 1]
mov qword [rsp + 0x148], rcx
mov rax, qword [r11 + 0x18]
mov qword [rsp + reloc.MFC80U.DLL_Ordinal_336], rax
lea rcx, [rsp + 0x158]
mov rax, qword [r11 + 0x20]
mov qword [rcx], rax
mov rax, qword [r11 + 0x28]
mov qword [rcx + 8], rax
mov rax, qword [r11 + 0x30]
mov qword [rcx + 0x10], rax
mov rax, qword [r11 + 0x38]
mov qword [rcx + 0x18], rax
mov rax, qword [r11 + 0x40]
mov qword [rcx + 0x20], rax
mov rax, qword [r11 + 0x48]
mov qword [rcx + 0x28], rax
mov rax, qword [r11 + 0x50]
mov qword [rcx + 0x30], rax
mov rax, qword [r11 + 0x58]
mov qword [rcx + 0x38], rax
mov rax, qword [r11 + 0x60]
mov qword [rcx + 0x40], rax
mov rbp, qword [rsp + 0x88]
mov rsi, qword [rsp + 0x80]
test rsi, rsi
je 0x140082f76
mov rcx, rbp
sub rcx, rsi
sar rcx, 7
mov rax, qword [rsp + 0x90]
sub rax, rsi
sar rax, 7
cmp rcx, rax
jae 0x140082f76
xor eax, eax
mov byte [rsp + 0x28], al
mov byte [rsp + 0x20], dil
lea r9, [rsp + 0x78]
lea r8, [rsp + 0x120]
lea edx, [rax + 1]
mov rcx, rbp
call fcn.14007a7a0
lea r11, [rbp + 0x80]
mov qword [rsp + 0x88], r11
jmp 0x140083048
mov rbx, rbp
cmp rsi, rbp
jbe 0x140082f94
call qword [sym.imp.MSVCR80.dll__invalid_parameter_noinfo]
mov rbp, qword [rsp + 0x88]
mov rsi, qword [rsp + 0x80]
lea rax, [rsp + 0x78]
mov qword [rsp + 0xa0], rax
mov qword [rsp + 0xa8], rbx
test rsi, rsi
je 0x140082fce
mov rax, rbp
sub rax, rsi
sar rax, 7
je 0x140082fce
cmp rsi, rbp
jbe 0x140082fc5
call qword [sym.imp.MSVCR80.dll__invalid_parameter_noinfo]
sub rbx, rsi
sar rbx, 7
jmp 0x140082fd1
mov rbx, r15
movaps xmm0, xmmword [rsp + 0xa0]
movdqa xmmword [rsp + 0xb0], xmm0
lea r9, [rsp + 0x120]
mov r8d, 1
lea rdx, [rsp + 0xb0]
lea rcx, [rsp + 0x78]
call fcn.14007be50
mov r11, qword [rsp + 0x80]
mov rsi, r11
mov rax, qword [rsp + 0x88]
cmp r11, rax
jbe 0x140083030
call qword [sym.imp.MSVCR80.dll__invalid_parameter_noinfo]
mov rax, qword [rsp + 0x88]
mov r11, qword [rsp + 0x80]
shl rbx, 7
lea rcx, [rbx + rsi]
cmp rcx, rax
ja 0x140083042
cmp rcx, r11
jae 0x140083048
call qword [sym.imp.MSVCR80.dll__invalid_parameter_noinfo]
add r13d, 1
mov rax, qword [r12]
mov rcx, r12
call qword [rax + 0x18]
cmp r13d, eax
jb 0x140082e04
xor r13d, r13d
lea r14, [0x140000000]
movzx edi, byte [rsp + 0x30]
movzx ebx, byte [rsp + 0x30]
nop
nop
nop
nop
mov rdx, qword [rsp + 0x68]
mov rbp, qword [rsp + 0x60]
test rbp, rbp
jne 0x140083093
xor ecx, ecx
jmp 0x14008309d
mov rcx, rdx
sub rcx, rbp
sar rcx, 3
movsxd rax, r15d
cmp rax, rcx
jae 0x1400836cd
test rbp, rbp
je 0x1400830ba
sub rdx, rbp
sar rdx, 3
cmp r13, rdx
jb 0x1400830c5
call qword [sym.imp.MSVCR80.dll__invalid_parameter_noinfo]
mov rbp, qword [rsp + 0x60]
mov rbp, qword [rbp + r13*8]
mov byte [rsp + 0x120], 0
xor eax, eax
mov qword [rsp + 0x121], rax
mov dword [rsp + 0x129], eax
mov word [rsp + 0x12d], ax
mov byte [rsp + 0x12f], al
xor edx, edx
lea r8d, [rax + 0x70]
lea rcx, [rsp + 0x130]
call sub.ntdll.dll_memset
mov r11, qword [rsp + 0x80]
mov rsi, r11
mov rax, qword [rsp + 0x88]
cmp r11, rax
jbe 0x140083133
call qword [sym.imp.MSVCR80.dll__invalid_parameter_noinfo]
mov rax, qword [rsp + 0x88]
mov r11, qword [rsp + 0x80]
mov r12, rax
cmp r11, rax
jbe 0x140083149
call qword [sym.imp.MSVCR80.dll__invalid_parameter_noinfo]
mov rax, qword [rsp + 0x88]
cmp rsi, r12
je 0x140083217
cmp rsi, rax
jb 0x14008315d
call qword [sym.imp.MSVCR80.dll__invalid_parameter_noinfo]
mov rax, qword [rbp]
mov rcx, rbp
call qword [rax + 0xb0]
mov rdx, qword [rsi + 0x10]
cmp rdx, qword [rax + 0x78]
jne 0x140083185
mov rdx, qword [rsi + 0x18]
cmp rdx, qword [rax + 0x80]
jne 0x140083185
xor eax, eax
jmp 0x14008318a
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x1400831ba
mov rax, qword [rsp + 0x88]
cmp rsi, rax
jb 0x1400831a9
call qword [sym.imp.MSVCR80.dll__invalid_parameter_noinfo]
mov rax, qword [rsp + 0x88]
sub rsi, 0xffffffffffffff80
mov r11, qword [rsp + 0x80]
jmp 0x140083133
lea rcx, [rsp + 0x120]
mov rdx, rsi
mov r8d, 0x80
call sub.ntdll.dll_memcpy
mov r11, qword [rbp]
mov rcx, rbp
call qword [r11 + 0x38]
mov qword [rsp + reloc.MFC80U.DLL_Ordinal_320], rax
mov rax, qword [rbp]
mov rcx, rbp
call qword [rax + 0xb0]
mov rsi, qword [rax + 0x10]
mov rax, qword [rbp]
mov rcx, rbp
call qword [rax + 0xb0]
mov rcx, qword [rax + 8]
lea rax, [rcx + rsi - 1]
mov qword [rsp + 0x148], rax
jmp 0x1400835a3
mov rax, qword [rbp]
mov rcx, rbp
call qword [rax + 0x48]
cmp eax, 0xb
je 0x1400835a3
mov rax, qword [rbp]
mov rcx, rbp
call qword [rax + 0x48]
cmp eax, 0xc
je 0x1400835a3
mov byte [rsp + 0x120], 0
xor eax, eax
mov qword [rsp + 0x121], rax
mov dword [rsp + 0x129], eax
mov word [rsp + 0x12d], ax
mov byte [rsp + 0x12f], al
xor edx, edx
lea r8d, [rax + 0x70]
lea rcx, [rsp + 0x130]
call sub.ntdll.dll_memset
mov r11, qword [rbp]
mov rcx, rbp
call qword [r11 + 0xb0]
mov rsi, qword [rax + 8]
mov qword [rsp + reloc.MFC80U.DLL_Ordinal_320], rsi
mov rax, qword [rbp]
mov rcx, rbp
call qword [rax + 0xb0]
mov rcx, qword [rax + 0x10]
lea rax, [rcx + rsi - 1]
mov qword [rsp + 0x148], rax
mov rax, qword [rbp]
mov rcx, rbp
call qword [rax + 0xb0]
mov rcx, qword [rax + 0x18]
mov qword [rsp + reloc.MFC80U.DLL_Ordinal_336], rcx
mov rax, qword [rbp]
mov rcx, rbp
call qword [rax + 0xb0]
mov r11, rax
lea rdx, [rsp + 0x158]
mov rcx, qword [rax + 0x20]
mov qword [rdx], rcx
mov rcx, qword [rax + 0x28]
mov qword [rdx + 8], rcx
mov rcx, qword [rax + 0x30]
mov qword [rdx + 0x10], rcx
mov rcx, qword [rax + 0x38]
mov qword [rdx + 0x18], rcx
mov rcx, qword [rax + 0x40]
mov qword [rdx + 0x20], rcx
mov rcx, qword [rax + 0x48]
mov qword [rdx + 0x28], rcx
mov rax, qword [rax + 0x50]
mov qword [rdx + 0x30], rax
mov rax, qword [r11 + 0x58]
mov qword [rdx + 0x38], rax
mov rax, qword [r11 + 0x60]
mov qword [rdx + 0x40], rax
xor eax, eax
mov dword [rsp + 0x108], eax
mov dword [rsp + 0x10c], eax
mov dword [rsp + 0x110], eax
mov dword [rsp + 0x114], eax
lea rcx, [rsp + 0x108]
call qword [sym.imp.RPCRT4.dll_UuidCreate]
lea r11, [rsp + 0x130]
lea rcx, [rsp + 0x108]
mov rax, qword [rcx]
mov qword [r11], rax
mov rax, qword [rcx + 8]
mov qword [r11 + 8], rax
mov rax, qword [rbp]
mov rcx, rbp
call qword [rax + 0xb0]
movsxd rcx, dword [rax]
cmp ecx, 6
ja case.default.0x140083396
mov ecx, dword [r14 + rcx*4 + 0x83fd8]
add rcx, r14
jmp rcx
lea rdx, [rsp + 0x120]
lea rcx, [rsp + 0x5c0]
mov rax, qword [rcx]
mov qword [rdx], rax
mov rax, qword [rcx + 8]
mov qword [rdx + 8], rax
jmp case.default.0x140083396
lea rdx, [rsp + 0x120]
lea rcx, [rsp + 0x5d0]
mov rax, qword [rcx]
mov qword [rdx], rax
mov rax, qword [rcx + 8]
mov qword [rdx + 8], rax
jmp case.default.0x140083396
lea rdx, [rsp + 0x120]
lea rcx, [rsp + 0x5f0]
mov rax, qword [rcx]
mov qword [rdx], rax
mov rax, qword [rcx + 8]
mov qword [rdx + 8], rax
jmp case.default.0x140083396
lea rdx, [rsp + 0x120]
lea rcx, [rsp + 0x5e0]
mov rax, qword [rcx]
mov qword [rdx], rax
mov rax, qword [rcx + 8]
mov qword [rdx + 8], rax
jmp case.default.0x140083396
lea rdx, [rsp + 0x120]
lea rcx, [rsp + 0x5a0]
mov rax, qword [rcx]
mov qword [rdx], rax
mov rax, qword [rcx + 8]
mov qword [rdx + 8], rax
jmp case.default.0x140083396
lea rdx, [rsp + 0x120]
lea rcx, [rsp + 0x5c0]
mov rax, qword [rcx]
mov qword [rdx], rax
mov rax, qword [rcx + 8]
mov qword [rdx + 8], rax
jmp case.default.0x140083396
lea rdx, [rsp + 0x120]
lea rcx, [rsp + 0xf8]
mov rax, qword [rcx]
mov qword [rdx], rax
mov rax, qword [rcx + 8]
mov qword [rdx + 8], rax
mov r12, qword [rsp + 0x48]
mov rsi, qword [rsp + 0x40]
test rsi, rsi
je 0x1400834db
mov rcx, r12
sub rcx, rsi
sar rcx, 7
mov rax, qword [rsp + 0x50]
sub rax, rsi
sar rax, 7
cmp rcx, rax
jae 0x1400834db
xor eax, eax
mov byte [rsp + 0x28], al
mov byte [rsp + 0x20], dil
lea r9, [rsp + 0x38]
lea r8, [rsp + 0x120]
lea edx, [rax + 1]
mov rcx, r12
call fcn.14007a7a0
lea r11, [r12 + 0x80]
mov qword [rsp + 0x48], r11
jmp 0x1400836c0
mov rbp, r12
cmp rsi, r12
jbe 0x1400834f3
call qword [sym.imp.MSVCR80.dll__invalid_parameter_noinfo]
mov r12, qword [rsp + 0x48]
mov rsi, qword [rsp + 0x40]
lea rax, [rsp + 0x38]
mov qword [rsp + 0xa0], rax
mov qword [rsp + 0xa8], rbp
test rsi, rsi
je 0x14008352d
mov rax, r12
sub rax, rsi
sar rax, 7
je 0x14008352d
cmp rsi, r12
jbe 0x140083524
call qword [sym.imp.MSVCR80.dll__invalid_parameter_noinfo]
sub rbp, rsi
sar rbp, 7
jmp 0x14008352f
xor ebp, ebp
movaps xmm0, xmmword [rsp + 0xa0]
movdqa xmmword [rsp + 0xe0], xmm0
lea r9, [rsp + 0x120]
mov r8d, 1
lea rdx, [rsp + 0xe0]
lea rcx, [rsp + 0x38]
call fcn.14007be50
mov r11, qword [rsp + 0x40]
mov rsi, r11
mov rax, qword [rsp + 0x48]
cmp r11, rax
jbe 0x140083582
call qword [sym.imp.MSVCR80.dll__invalid_parameter_noinfo]
mov rax, qword [rsp + 0x48]
mov r11, qword [rsp + 0x40]
shl rbp, 7
lea rcx, [rsi + rbp]
cmp rcx, rax
ja 0x140083598
cmp rcx, r11
jae 0x1400836c0
call qword [sym.imp.MSVCR80.dll__invalid_parameter_noinfo]
jmp 0x1400836c0
mov r12, qword [rsp + 0x48]
mov rsi, qword [rsp + 0x40]
test rsi, rsi
je 0x140083601
mov rcx, r12
sub rcx, rsi
sar rcx, 7
mov rax, qword [rsp + 0x50]
sub rax, rsi
sar rax, 7
cmp rcx, rax
jae 0x140083601
xor eax, eax
mov byte [rsp + 0x28], al
mov byte [rsp + 0x20], bl
lea r9, [rsp + 0x38]
lea r8, [rsp + 0x120]
lea edx, [rax + 1]
mov rcx, r12
call fcn.14007a7a0
lea r11, [r12 + 0x80]
mov qword [rsp + 0x48], r11
jmp 0x1400836c0
mov rbp, r12
cmp rsi, r12
jbe 0x140083619
call qword [sym.imp.MSVCR80.dll__invalid_parameter_noinfo]
mov r12, qword [rsp + 0x48]
mov rsi, qword [rsp + 0x40]
lea rax, [rsp + 0x38]
mov qword [rsp + 0xb0], rax
mov qword [rsp + 0xb8], rbp
test rsi, rsi
je 0x140083653
mov rax, r12
sub rax, rsi
sar rax, 7
je 0x140083653
cmp rsi, r12
jbe 0x14008364a
call qword [sym.imp.MSVCR80.dll__invalid_parameter_noinfo]
sub rbp, rsi
sar rbp, 7
jmp 0x140083655
xor ebp, ebp
movaps xmm0, xmmword [rsp + 0xb0]
movdqa xmmword [rsp + 0xd0], xmm0
lea r9, [rsp + 0x120]
mov r8d, 1
lea rdx, [rsp + 0xd0]
lea rcx, [rsp + 0x38]
call fcn.14007be50
mov r11, qword [rsp + 0x40]
mov rsi, r11
mov rax, qword [rsp + 0x48]
cmp r11, rax
jbe 0x1400836a8
call qword [sym.imp.MSVCR80.dll__invalid_parameter_noinfo]
mov rax, qword [rsp + 0x48]
mov r11, qword [rsp + 0x40]
shl rbp, 7
lea rcx, [rsi + rbp]
cmp rcx, rax
ja 0x1400836ba
cmp rcx, r11
jae 0x1400836c0
call qword [sym.imp.MSVCR80.dll__invalid_parameter_noinfo]
add r15d, 1
add r13, 1
jmp 0x140083080
mov ecx, 0x4000
call sub.MFC80U.DLL_Ordinal_265
mov r12, rax
xor edx, edx
mov r8d, 0x4000
mov rcx, rax
call sub.ntdll.dll_memset
xor r13d, r13d
mov esi, r13d
mov rbp, r13
mov rbx, r13
mov r14, qword [rsp + 0xc0]
nop
mov rdi, qword [rsp + 0x48]
mov rdx, qword [rsp + 0x40]
test rdx, rdx
jne 0x140083714
mov rcx, r13
jmp 0x14008371e
mov rcx, rdi
sub rcx, rdx
sar rcx, 7
movsxd rax, esi
cmp rax, rcx
jae 0x140083761
test rdx, rdx
je 0x140083737
sub rdi, rdx
sar rdi, 7
cmp rbp, rdi
jb 0x140083742
call qword [sym.imp.MSVCR80.dll__invalid_parameter_noinfo]
mov rdx, qword [rsp + 0x40]
lea rcx, [r12 + rbx]
add rdx, rbx
mov r8d, 0x80
call sub.ntdll.dll_memcpy
add esi, 1
add rbp, 1
sub rbx, 0xffffffffffffff80
jmp 0x140083700
or ebx, 0xffffffff
mov edi, ebx
lea r8, [r12 + 1]
mov r9d, 0x1000
lea rsi, [0x140000000]
nop
nop
movzx ecx, byte [r8 - 1]
xor cl, dil
movzx eax, cl
shr edi, 8
mov edx, dword [rsi + rax*4 + 0x2e4c00]
xor edx, edi
mov eax, edx
xor al, byte [r8]
movzx ecx, al
shr edx, 8
mov edi, dword [rsi + rcx*4 + 0x2e4c00]
xor edi, edx
movzx ecx, byte [r8 + 1]
xor cl, dil
movzx eax, cl
shr edi, 8
mov edx, dword [rsi + rax*4 + 0x2e4c00]
xor edx, edi
movzx ecx, byte [r8 + 2]
xor cl, dl
movzx eax, cl
shr edx, 8
mov edi, dword [rsi + rax*4 + 0x2e4c00]
xor edi, edx
add r8, 4
sub r9, 1
jne 0x140083780
not edi
mov dword [rsp + 0x1f8], edi
mov rcx, qword [r14 + 8]
mov rax, qword [rcx]
mov r9d, 0x20
mov r8, qword [rsp + 0x1e8]
mov rdx, r12
call qword [rax + 0x20]
test eax, eax
jne 0x140083951
call fcn.140049470
mov rsi, rax
xor edx, edx
mov r8d, 0x80
lea rbx, [0x140433dd0]
mov rcx, rbx
call sub.ntdll.dll_memset
mov edx, 0x5c
lea rcx, str...partmgr.cpp
call qword [sym.imp.ntdll.dll_strrchr]
mov rdi, rax
test rax, rax
jne 0x14008384f
mov rbx, r13
jmp 0x1400838e0
mov byte [rsp + 0x5b0], r13b
xor eax, eax
mov qword [rsp + 0x5b1], rax
mov word [rsp + Ordinal_1468], ax
mov byte [rsp + Ordinal_1468], al
mov r8d, 0xc6a
lea rdx, [0x1402dfd08]
lea rcx, [rsp + 0x5b0]
call qword [sym.imp.ntdll.dll_sprintf]
lea rdx, [rdi + 1]
mov rcx, rbx
sub rcx, rdx
nop
nop
nop
movzx eax, byte [rdx]
mov byte [rdx + rcx], al
add rdx, 1
test al, al
jne 0x1400838a0
mov rdi, rbx
xor eax, eax
or rcx, 0xffffffffffffffff
repne scasb al, byte [rdi]
lea rdx, [rsp + 0x5b0]
xor ecx, ecx
nop
nop
nop
nop
movzx eax, byte [rdx + rcx]
mov byte [rdi + rcx - 1], al
add rcx, 1
test al, al
jne 0x1400838d0
mov rax, qword [rsi]
mov r8, rbx
lea rdx, str._s:_Write_sector_for_UpdateGptPartTable_failed.
mov rcx, rsi
call qword [rax + 0x10]
mov rcx, r12
call sub.MFC80U.DLL_Ordinal_266
nop
mov rcx, qword [rsp + 0x60]
test rcx, rcx
je 0x14008390b
call sub.MFC80U.DLL_Ordinal_776
mov qword [rsp + 0x60], r13
mov qword [rsp + 0x68], r13
mov qword [rsp + 0x70], r13
mov rcx, qword [rsp + 0x40]
test rcx, rcx
je 0x140083929
call sub.MFC80U.DLL_Ordinal_776
mov qword [rsp + 0x40], r13
mov qword [rsp + 0x48], r13
mov qword [rsp + 0x50], r13
mov rcx, qword [rsp + 0x80]
test rcx, rcx
je 0x14008394a
call sub.MFC80U.DLL_Ordinal_776
xor eax, eax
jmp 0x140083fa7
cmp dword [rsp + 0x1d8], r13d
jne 0x1400839a5
xor eax, eax
mov dword [rsp + 0xf8], eax
mov dword [rsp + 0xfc], eax
mov dword [rsp + 0x100], eax
mov dword [rsp + 0x104], eax
lea rcx, [rsp + 0xf8]
call qword [sym.imp.RPCRT4.dll_UuidCreate]
lea rdx, [rsp + 0x1d8]
lea rcx, [rsp + 0xf8]
mov rax, qword [rcx]
mov qword [rdx], rax
mov rax, qword [rcx + 8]
mov qword [rdx + 8], rax
mov dword [rsp + 0x1f0], 0x80
mov dword [rsp + 0x1f4], 0x80
mov dword [rsp + 0x1b0], r13d
mov edx, ebx
mov eax, dword [rsp + 0x1ac]
test eax, eax
je 0x1400839ff
lea rdi, [rsp + 0x1a0]
mov r8, rax
nop
nop
mov eax, edx
xor al, byte [rdi]
movzx ecx, al
mov eax, edx
shr eax, 8
mov edx, dword [rsi + rcx*4 + 0x2e4c00]
xor edx, eax
add rdi, 1
sub r8, 1
jne 0x1400839e0
not edx
mov dword [rsp + 0x1b0], edx
mov rcx, qword [r14 + 8]
mov rax, qword [rcx]
mov r9d, 1
mov r8, qword [rsp + 0x1b8]
lea rdx, [rsp + 0x1a0]
call qword [rax + 0x20]
test eax, eax
jne 0x140083b71
call fcn.140049470
mov rsi, rax
xor edx, edx
mov r8d, 0x80
lea rbx, [0x140433dd0]
mov rcx, rbx
call sub.ntdll.dll_memset
mov edx, 0x5c
lea rcx, str...partmgr.cpp
call qword [sym.imp.ntdll.dll_strrchr]
mov rdi, rax
test rax, rax
jne 0x140083a71
mov rbx, r13
jmp 0x140083b00
mov byte [rsp + 0x5b0], r13b
xor eax, eax
mov qword [rsp + 0x5b1], rax
mov word [rsp + Ordinal_1468], ax
mov byte [rsp + Ordinal_1468], al
mov r8d, Ordinal_3210
lea rdx, [0x1402dfd08]
lea rcx, [rsp + 0x5b0]
call qword [sym.imp.ntdll.dll_sprintf]
lea rdx, [rdi + 1]
mov rcx, rbx
sub rcx, rdx
nop
nop
nop
movzx eax, byte [rdx]
mov byte [rdx + rcx], al
add rdx, 1
test al, al
jne 0x140083ac0
mov rdi, rbx
xor eax, eax
or rcx, 0xffffffffffffffff
repne scasb al, byte [rdi]
lea rdx, [rsp + 0x5b0]
xor ecx, ecx
nop
nop
nop
nop
movzx eax, byte [rdx + rcx]
mov byte [rdi + rcx - 1], al
add rcx, 1
test al, al
jne 0x140083af0
mov rax, qword [rsi]
mov r8, rbx
lea rdx, str._s:_Write_sector_for_UpdateGptPartTable_failed.
mov rcx, rsi
call qword [rax + 0x10]
mov rcx, r12
call sub.MFC80U.DLL_Ordinal_266
nop
mov rcx, qword [rsp + 0x60]
test rcx, rcx
je 0x140083b2b
call sub.MFC80U.DLL_Ordinal_776
mov qword [rsp + 0x60], r13
mov qword [rsp + 0x68], r13
mov qword [rsp + 0x70], r13
mov rcx, qword [rsp + 0x40]
test rcx, rcx
je 0x140083b49
call sub.MFC80U.DLL_Ordinal_776
mov qword [rsp + 0x40], r13
mov qword [rsp + 0x48], r13
mov qword [rsp + 0x50], r13
mov rcx, qword [rsp + 0x80]
test rcx, rcx
je 0x140083b6a
call sub.MFC80U.DLL_Ordinal_776
xor eax, eax
jmp 0x140083fa7
lea rcx, [rsp + 0x3a0]
lea rdx, [rsp + 0x1a0]
mov r8d, reloc.MFC80U.DLL_Ordinal_512
call sub.ntdll.dll_memcpy
mov r8, qword [rsp + 0x1c0]
mov qword [rsp + 0x3b8], r8
mov rax, qword [rsp + 0x1b8]
mov qword [rsp + 0x3c0], rax
lea rax, [r8 - 0x20]
mov qword [rsp + 0x3e8], rax
mov dword [rsp + reloc.MFC80U.DLL_Ordinal_944], r13d
mov rax, qword [rsp + 0x3a8]
shr rax, 0x20
je 0x140083bff
lea rdx, [rsp + 0x3a0]
mov edi, dword [rsp + reloc.MFC80U.DLL_Ordinal_940]
nop
mov eax, ebx
xor al, byte [rdx]
movzx ecx, al
mov eax, ebx
shr eax, 8
mov ebx, dword [rsi + rcx*4 + 0x2e4c00]
xor ebx, eax
add rdx, 1
sub rdi, 1
jne 0x140083be0
not ebx
mov dword [rsp + reloc.MFC80U.DLL_Ordinal_944], ebx
mov rcx, qword [r14 + 8]
mov rax, qword [rcx]
mov r9d, 1
lea rdx, [rsp + 0x3a0]
call qword [rax + 0x20]
test eax, eax
jne 0x140083d61
call fcn.140049470
mov rsi, rax
xor edx, edx
mov r8d, 0x80
lea rbx, [0x140433dd0]
mov rcx, rbx
call sub.ntdll.dll_memset
mov edx, 0x5c
lea rcx, str...partmgr.cpp
call qword [sym.imp.ntdll.dll_strrchr]
mov rdi, rax
test rax, rax
jne 0x140083c69
mov rbx, r13
jmp 0x140083cf0
mov byte [rsp + 0x5b0], r13b
xor eax, eax
mov qword [rsp + 0x5b1], rax
mov word [rsp + Ordinal_1468], ax
mov byte [rsp + Ordinal_1468], al
mov r8d, Ordinal_3223
lea rdx, [0x1402dfd08]
lea rcx, [rsp + 0x5b0]
call qword [sym.imp.ntdll.dll_sprintf]
lea rdx, [rdi + 1]
mov rcx, rbx
sub rcx, rdx
nop
movzx eax, byte [rdx]
mov byte [rdx + rcx], al
add rdx, 1
test al, al
jne 0x140083cb0
mov rdi, rbx
xor eax, eax
or rcx, 0xffffffffffffffff
repne scasb al, byte [rdi]
lea rdx, [rsp + 0x5b0]
xor ecx, ecx
nop
nop
nop
nop
movzx eax, byte [rdx + rcx]
mov byte [rdi + rcx - 1], al
add rcx, 1
test al, al
jne 0x140083ce0
mov rax, qword [rsi]
mov r8, rbx
lea rdx, str._s:_Write_sector_for_UpdateGptPartTable_failed.
mov rcx, rsi
call qword [rax + 0x10]
mov rcx, r12
call sub.MFC80U.DLL_Ordinal_266
nop
mov rcx, qword [rsp + 0x60]
test rcx, rcx
je 0x140083d1b
call sub.MFC80U.DLL_Ordinal_776
mov qword [rsp + 0x60], r13
mov qword [rsp + 0x68], r13
mov qword [rsp + 0x70], r13
mov rcx, qword [rsp + 0x40]
test rcx, rcx
je 0x140083d39
call sub.MFC80U.DLL_Ordinal_776
mov qword [rsp + 0x40], r13
mov qword [rsp + 0x48], r13
mov qword [rsp + 0x50], r13
mov rcx, qword [rsp + 0x80]
test rcx, rcx
je 0x140083d5a
call sub.MFC80U.DLL_Ordinal_776
xor eax, eax
jmp 0x140083fa7
mov rcx, qword [r14 + 8]
mov rax, qword [rcx]
mov r9d, 0x20
mov r8, qword [rsp + 0x3e8]
mov rdx, r12
call qword [rax + 0x20]
test eax, eax
jne 0x140083dde
mov rcx, r12
call sub.MFC80U.DLL_Ordinal_266
nop
mov rcx, qword [rsp + 0x60]
test rcx, rcx
je 0x140083d98
call sub.MFC80U.DLL_Ordinal_776
mov qword [rsp + 0x60], r13
mov qword [rsp + 0x68], r13
mov qword [rsp + 0x70], r13
mov rcx, qword [rsp + 0x40]
test rcx, rcx
je 0x140083db6
call sub.MFC80U.DLL_Ordinal_776
mov qword [rsp + 0x40], r13
mov qword [rsp + 0x48], r13
mov qword [rsp + 0x50], r13
mov rcx, qword [rsp + 0x80]
test rcx, rcx
je 0x140083dd7
call sub.MFC80U.DLL_Ordinal_776
xor eax, eax
jmp 0x140083fa7
mov rcx, r12
call sub.MFC80U.DLL_Ordinal_266
mov byte [rsp + 0x5a0], r13b
mov byte [rsp + 0x5a1], r13b
mov byte [rsp + 0x5a2], 2
mov byte [rsp + 0x5a3], r13b
mov byte [rsp + 0x5a4], 0xee
mov byte [rsp + 0x5a5], 0xff
mov byte [rsp + 0x5a6], 0xff
mov byte [rsp + 0x5a7], 0xff
mov byte [rsp + 0x5a8], 1
mov byte [rsp + 0x5a9], r13b
mov byte [rsp + 0x5aa], r13b
mov byte [rsp + 0x5ab], r13b
mov byte [rsp + 0x5ac], 0xff
mov byte [rsp + 0x5ad], 0xff
mov byte [rsp + 0x5ae], 0xff
mov byte [rsp + 0x5af], 0xff
mov byte [rsp + 0x600], r13b
xor edx, edx
mov r8d, Ordinal_512
lea rcx, [rsp + 0x601]
call sub.ntdll.dll_memset
mov rcx, qword [r14 + 8]
mov rax, qword [rcx]
mov r9d, 1
xor r8d, r8d
lea rdx, [rsp + 0x600]
call qword [rax + 0x18]
test eax, eax
jne 0x140083ef7
mov rcx, qword [rsp + 0x60]
test rcx, rcx
je 0x140083eb1
call sub.MFC80U.DLL_Ordinal_776
mov qword [rsp + 0x60], r13
mov qword [rsp + 0x68], r13
mov qword [rsp + 0x70], r13
mov rcx, qword [rsp + 0x40]
test rcx, rcx
je 0x140083ecf
call sub.MFC80U.DLL_Ordinal_776
mov qword [rsp + 0x40], r13
mov qword [rsp + 0x48], r13
mov qword [rsp + 0x50], r13
mov rcx, qword [rsp + 0x80]
test rcx, rcx
je 0x140083ef0
call sub.MFC80U.DLL_Ordinal_776
xor eax, eax
jmp 0x140083fa7
mov edi, dword [rsp + 0x7b8]
xor edx, edx
mov r8d, Ordinal_512
lea rcx, [rsp + 0x600]
call sub.ntdll.dll_memset
mov dword [rsp + Ordinal_1980], edi
lea rdx, [rsp + reloc.MFC80U.DLL_Ordinal_1982]
lea rcx, [rsp + 0x5a0]
mov rax, qword [rcx]
mov qword [rdx], rax
mov rax, qword [rcx + 8]
mov qword [rdx + 8], rax
mov rcx, qword [r14 + 8]
mov rax, qword [rcx]
mov r9d, 1
xor r8d, r8d
lea rdx, [rsp + 0x600]
call qword [rax + 0x20]
nop
mov rcx, qword [rsp + 0x60]
test rcx, rcx
je 0x140083f63
call sub.MFC80U.DLL_Ordinal_776
mov qword [rsp + 0x60], r13
mov qword [rsp + 0x68], r13
mov qword [rsp + 0x70], r13
mov rcx, qword [rsp + 0x40]
test rcx, rcx
je 0x140083f81
call sub.MFC80U.DLL_Ordinal_776
mov qword [rsp + 0x40], r13
mov qword [rsp + 0x48], r13
mov qword [rsp + 0x50], r13
mov rcx, qword [rsp + 0x80]
test rcx, rcx
je 0x140083fa2
call sub.MFC80U.DLL_Ordinal_776
mov eax, 1
mov rcx, qword [rsp + 0x800]
xor rcx, rsp
call fcn.140161080
lea r11, [rsp + 0x810]
mov rbx, qword [r11 + 0x38]
mov rbp, qword [r11 + 0x40]
mov rsi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret