Function at 0x140109f00
Capabilities:
Check for time delay via gettickcount

Disassembly:
push rdi
push r12
push r13
push r14
push r15
mov eax, 0x4280
call sub.ntdll.dll___chkstk
sub rsp, rax
mov qword [rsp + 0xb0], 0xfffffffffffffffe
mov qword [rsp + 0x42b8], rbx
mov qword [rsp + 0x42c0], rbp
mov qword [rsp + 0x42c8], rsi
movaps xmmword [rsp + 0x4270], xmm6
movaps xmmword [rsp + 0x4260], xmm7
mov rax, qword [0x14042d950]
xor rax, rsp
mov qword [rsp + 0x4250], rax
mov r12, rcx
movabs rax, 0x3f947ae147ae147b
mov qword [rcx + 0x41e0], rax
mov rcx, qword [rcx + 0x30]
mov rax, qword [rcx]
call qword [rax + 0xe0]
cvtsi2sd xmm6, eax
movsd xmm7, qword [0x1403b85a8]
divsd xmm6, xmm7
mov rcx, qword [r12 + 0x30]
mov rax, qword [rcx]
call qword [rax + 0xa0]
cvtsi2sd xmm0, eax
mulsd xmm0, xmm6
cvttsd2si eax, xmm0
mov dword [r12 + 0x41e8], eax
mov edx, 0x64
mov rcx, r12
call fcn.140100e10
mov rcx, r12
call fcn.1401008e0
test eax, eax
je 0x14010a0cd
call fcn.140049470
mov rbx, rax
xor edx, edx
mov r8d, 0x80
lea r13, [0x14043d4c0]
mov rcx, r13
call sub.ntdll.dll_memset
mov edx, 0x5c
lea rcx, str...quickmoventfs.cpp
call qword [sym.imp.ntdll.dll_strrchr]
mov rdi, rax
test rax, rax
jne 0x14010a00d
xor esi, esi
jmp 0x14010a0a3
mov byte [rsp + 0x4210], 0
xor eax, eax
mov qword [rsp + 0x4211], rax
mov word [rsp + 0x4219], ax
mov byte [rsp + 0x421b], al
mov r8d, 0xe8
lea rdx, [0x1402dfd08]
lea rcx, [rsp + 0x4210]
call qword [sym.imp.ntdll.dll_sprintf]
lea rdx, [rdi + 1]
mov rcx, r13
sub rcx, rdx
nop
nop
nop
nop
movzx eax, byte [rdx]
mov byte [rdx + rcx], al
add rdx, 1
test al, al
jne 0x14010a060
mov rdi, r13
xor eax, eax
or rcx, 0xffffffffffffffff
repne scasb al, byte [rdi]
lea rdx, [rsp + 0x4210]
xor ecx, ecx
nop
nop
nop
nop
movzx eax, byte [rdx + rcx]
mov byte [rdi + rcx - 1], al
add rcx, 1
test al, al
jne 0x14010a090
mov rsi, r13
mov rax, qword [rbx]
mov r8, rsi
lea rdx, str._s:_There_is_0x20_in__Bitmap.
mov rcx, rbx
call qword [rax + 0x10]
mov rcx, qword [r12 + 0x30]
mov rax, qword [rcx]
mov edx, 0xdc
call qword [rax + 0x40]
xor eax, eax
jmp 0x14010b5f6
xor esi, esi
mov qword [rsp + 0x98], rsi
mov qword [rsp + 0xa0], rsi
mov qword [rsp + 0xa8], rsi
mov qword [rsp + 0x58], rsi
mov qword [rsp + 0x60], rsi
mov qword [rsp + 0x68], rsi
mov qword [rsp + 0x38], rsi
mov qword [rsp + 0x40], rsi
mov qword [rsp + 0x48], rsi
call qword [sym.imp.KERNEL32.dll_GetTickCount]
lea r15, [r12 + 0x40]
mov rdx, qword [r12 + 0x100]
mov rcx, r15
call fcn.140111c70
mov rcx, r12
call fcn.140104330
test eax, eax
jne 0x14010a1b2
call fcn.140049470
mov rdi, rax
mov rbx, qword [rax]
mov edx, 0xf8
lea rcx, str...quickmoventfs.cpp
call fcn.140100000
mov r8, rax
lea rdx, [0x1402f11d0]
mov rcx, rdi
call qword [rbx + 0x10]
nop
mov rcx, qword [rsp + 0x38]
test rcx, rcx
je 0x14010a16c
call sub.MFC80U.DLL_Ordinal_776
mov qword [rsp + 0x38], rsi
mov qword [rsp + 0x40], rsi
mov qword [rsp + 0x48], rsi
mov rcx, qword [rsp + 0x58]
test rcx, rcx
je 0x14010a18a
call sub.MFC80U.DLL_Ordinal_776
mov qword [rsp + 0x58], rsi
mov qword [rsp + 0x60], rsi
mov qword [rsp + 0x68], rsi
mov rcx, qword [rsp + 0x98]
test rcx, rcx
je 0x14010a1ab
call sub.MFC80U.DLL_Ordinal_776
xor eax, eax
jmp 0x14010b5f6
mov dword [rsp + 0x20], esi
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rsp + 0x180]
call fcn.1400d9890
nop
xor r9d, r9d
lea r8, [rsp + 0x180]
lea edx, [r9 + 1]
lea rcx, [r12 + 0x108]
call fcn.1400de420
test eax, eax
jne 0x14010a296
call fcn.140049470
mov rdi, rax
mov rbx, qword [rax]
mov edx, 0x100
lea rcx, str...quickmoventfs.cpp
call fcn.140100000
mov r8, rax
mov r9d, 1
lea rdx, str._s:_Failed_to_read_the_file_record__FrNumber:_I64d.
mov rcx, rdi
call qword [rbx + 0x10]
mov rcx, qword [r12 + 0x30]
mov rax, qword [rcx]
mov edx, 0xd2
call qword [rax + 0x40]
nop
lea rcx, [rsp + 0x180]
call fcn.1400d9920
nop
mov rcx, qword [rsp + 0x38]
test rcx, rcx
je 0x14010a250
call sub.MFC80U.DLL_Ordinal_776
mov qword [rsp + 0x38], rsi
mov qword [rsp + 0x40], rsi
mov qword [rsp + 0x48], rsi
mov rcx, qword [rsp + 0x58]
test rcx, rcx
je 0x14010a26e
call sub.MFC80U.DLL_Ordinal_776
mov qword [rsp + 0x58], rsi
mov qword [rsp + 0x60], rsi
mov qword [rsp + 0x68], rsi
mov rcx, qword [rsp + 0x98]
test rcx, rcx
je 0x14010a28f
call sub.MFC80U.DLL_Ordinal_776
xor eax, eax
jmp 0x14010b5f6
lea rdx, [r12 + 0x1b0]
mov r8d, dword [r12 + 0x4234]
lea rcx, [rsp + 0x180]
call fcn.1400d9540
nop
lea rcx, [rsp + 0x180]
call fcn.1400d9920
movabs rdx, 0x3fb999999999999a
mov qword [r12 + 0x41e0], rdx
mov rcx, qword [r12 + 0x30]
mov rax, qword [rcx]
call qword [rax + 0xe0]
cvtsi2sd xmm6, eax
divsd xmm6, xmm7
mov rcx, qword [r12 + 0x30]
mov rax, qword [rcx]
call qword [rax + 0xa0]
cvtsi2sd xmm0, eax
mulsd xmm0, xmm6
cvttsd2si eax, xmm0
mov dword [r12 + 0x41e8], eax
lea r14, [r12 + reloc.MFC80U.DLL_Ordinal_424]
mov qword [rsp + 0x28], r14
mov qword [rsp + 0x20], r15
lea r9, [rsp + 0x50]
lea r8, [rsp + 0x30]
lea rdx, [rsp + 0x90]
mov rcx, r12
call fcn.140106b60
test eax, eax
jne 0x14010a3c1
call fcn.140049470
mov rdi, rax
mov rbx, qword [rax]
mov edx, reloc.MFC80U.DLL_Ordinal_277
lea rcx, str...quickmoventfs.cpp
call fcn.140100000
mov r8, rax
lea rdx, [0x1402f11b0]
mov rcx, rdi
call qword [rbx + 0x10]
nop
mov rcx, qword [rsp + 0x38]
test rcx, rcx
je 0x14010a37b
call sub.MFC80U.DLL_Ordinal_776
mov qword [rsp + 0x38], rsi
mov qword [rsp + 0x40], rsi
mov qword [rsp + 0x48], rsi
mov rcx, qword [rsp + 0x58]
test rcx, rcx
je 0x14010a399
call sub.MFC80U.DLL_Ordinal_776
mov qword [rsp + 0x58], rsi
mov qword [rsp + 0x60], rsi
mov qword [rsp + 0x68], rsi
mov rcx, qword [rsp + 0x98]
test rcx, rcx
je 0x14010a3ba
call sub.MFC80U.DLL_Ordinal_776
xor eax, eax
jmp 0x14010b5f6
mov r13d, esi
mov rdi, qword [rsp + 0x38]
cmp rdi, qword [rsp + 0x40]
jbe 0x14010a3d6
call qword [sym.imp.MSVCR80.dll__invalid_parameter_noinfo]
lea rbx, [rsp + 0x30]
mov qword [rsp + 0x4200], rbx
mov qword [rsp + 0x4208], rdi
nop
nop
mov rbp, qword [rsp + 0x40]
cmp qword [rsp + 0x38], rbp
jbe 0x14010a402
call qword [sym.imp.MSVCR80.dll__invalid_parameter_noinfo]
test rbx, rbx
je 0x14010a411
lea rax, [rsp + 0x30]
cmp rbx, rax
je 0x14010a417
call qword [sym.imp.MSVCR80.dll__invalid_parameter_noinfo]
cmp rdi, rbp
je 0x14010a4b1
test rbx, rbx
jne 0x14010a42b
call qword [sym.imp.MSVCR80.dll__invalid_parameter_noinfo]
cmp rdi, qword [rbx + 0x10]
jb 0x14010a437
call qword [sym.imp.MSVCR80.dll__invalid_parameter_noinfo]
cmp qword [rdi], 0
jne 0x14010a494
movaps xmm6, xmmword [rsp + 0x4200]
lea r8, [rdi + 8]
mov rdx, qword [rsp + 0x40]
sub rdx, r8
sar rdx, 3
test rdx, rdx
jle 0x14010a46a
shl rdx, 3
mov r9, rdx
mov rcx, rdi
call qword [sym.imp.MSVCR80.dll_memmove_s]
sub qword [rsp + 0x40], 8
movdqa xmmword [rsp + 0x4200], xmm6
mov r13d, 1
mov rdi, qword [rsp + 0x4208]
mov rbx, qword [rsp + 0x4200]
jmp 0x14010a3f0
cmp rdi, qword [rbx + 0x10]
jb 0x14010a4a0
call qword [sym.imp.MSVCR80.dll__invalid_parameter_noinfo]
add rdi, 8
mov qword [rsp + 0x4208], rdi
jmp 0x14010a3f0
test r13d, r13d
je 0x14010a4d0
mov qword [rsp + 0x4210], rsi
lea rdx, [rsp + 0x4210]
lea rcx, [rsp + 0x30]
call fcn.140007330
cmp qword [r14], 0
jne 0x14010a4dd
mov qword [r14], 1
mov rcx, r15
call fcn.140147040
mov rbx, rax
mov rcx, qword [rax + 8]
mov rdi, qword [rcx]
nop
cmp rdi, qword [rbx + 8]
je 0x14010a51f
cmp rdi, qword [rbx + 8]
jne 0x14010a502
call qword [sym.imp.MSVCR80.dll__invalid_parameter_noinfo]
mov rax, qword [r12 + 0x4218]
add qword [rdi + 0x10], rax
cmp rdi, qword [rbx + 8]
jne 0x14010a51a
call qword [sym.imp.MSVCR80.dll__invalid_parameter_noinfo]
mov rdi, qword [rdi]
jmp 0x14010a4f0
lea rcx, [rsp + 0xc0]
call fcn.140112e60
nop
mov rdx, r15
lea rcx, [rsp + 0xc0]
call fcn.1401130f0
mov qword [rsp + 0x78], rsi
mov qword [rsp + 0x80], rsi
mov qword [rsp + 0x88], rsi
mov r14d, esi
lea r13, [0x14043d4c0]
movabs rbp, 0x3fbeb851eb851eb8
test r14d, r14d
jne 0x14010a698
mov dword [r12 + 0x38], 1
call fcn.140049470
mov rbx, rax
xor edx, edx
mov r8d, 0x80
mov rcx, r13
call sub.ntdll.dll_memset
lea edx, [r14 + 0x5c]
lea rcx, str...quickmoventfs.cpp
call qword [sym.imp.ntdll.dll_strrchr]
mov rdi, rax
test rax, rax
jne 0x14010a5b1
mov r8, rsi
jmp 0x14010a643
mov byte [rsp + 0x4220], 0
xor eax, eax
mov qword [rsp + 0x4221], rax
mov word [rsp + 0x4229], ax
mov byte [rsp + 0x422b], al
mov r8d, Ordinal_332
lea rdx, [0x1402dfd08]
lea rcx, [rsp + 0x4220]
call qword [sym.imp.ntdll.dll_sprintf]
lea rdx, [rdi + 1]
mov rcx, r13
sub rcx, rdx
nop
nop
nop
movzx eax, byte [rdx]
mov byte [rcx + rdx], al
add rdx, 1
test al, al
jne 0x14010a600
mov rdi, r13
xor eax, eax
or rcx, 0xffffffffffffffff
repne scasb al, byte [rdi]
lea rdx, [rsp + 0x4220]
xor ecx, ecx
nop
nop
nop
nop
movzx eax, byte [rdx + rcx]
mov byte [rdi + rcx - 1], al
add rcx, 1
test al, al
jne 0x14010a630
mov r8, r13
mov rax, qword [rbx]
lea rdx, str._s:_Begin_checking_volume.
mov rcx, rbx
call qword [rax + 0x10]
mov qword [r12 + 0x41e0], rbp
mov rcx, qword [r12 + 0x30]
mov rax, qword [rcx]
call qword [rax + 0xe0]
cvtsi2sd xmm6, eax
divsd xmm6, xmm7
mov rcx, qword [r12 + 0x30]
mov rax, qword [rcx]
call qword [rax + 0xa0]
cvtsi2sd xmm0, eax
mulsd xmm0, xmm6
cvttsd2si eax, xmm0
mov dword [r12 + 0x41e8], eax
jmp 0x14010a88c
call fcn.140049470
mov rbx, rax
xor edx, edx
mov r8d, 0x80
mov rcx, r13
call sub.ntdll.dll_memset
mov edx, 0x5c
lea rcx, str...quickmoventfs.cpp
call qword [sym.imp.ntdll.dll_strrchr]
mov rdi, rax
test rax, rax
jne 0x14010a6d2
mov r8, rsi
jmp 0x14010a763
mov byte [rsp + 0x4240], 0
xor eax, eax
mov qword [rsp + 0x4241], rax
mov word [rsp + 0x4249], ax
mov byte [rsp + 0x424b], al
mov r8d, Ordinal_340
lea rdx, [0x1402dfd08]
lea rcx, [rsp + 0x4240]
call qword [sym.imp.ntdll.dll_sprintf]
lea rdx, [rdi + 1]
mov rcx, r13
sub rcx, rdx
nop
nop
movzx eax, byte [rdx]
mov byte [rcx + rdx], al
add rdx, 1
test al, al
jne 0x14010a720
mov rdi, r13
xor eax, eax
or rcx, 0xffffffffffffffff
repne scasb al, byte [rdi]
lea rdx, [rsp + 0x4240]
xor ecx, ecx
nop
nop
nop
nop
movzx eax, byte [rdx + rcx]
mov byte [rdi + rcx - 1], al
add rcx, 1
test al, al
jne 0x14010a750
mov r8, r13
mov rax, qword [rbx]
lea rdx, str._s:_Begin_moving_volume.
mov rcx, rbx
call qword [rax + 0x10]
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [r12 + 0x41f8], eax
mov rcx, qword [rsp + 0x80]
mov rdi, rcx
mov rbx, qword [rsp + 0x78]
cmp rbx, rcx
jbe 0x14010a7a9
call qword [sym.imp.MSVCR80.dll__invalid_parameter_noinfo]
mov rcx, qword [rsp + 0x80]
mov rbx, qword [rsp + 0x78]
cmp rbx, rcx
jbe 0x14010a7bc
call qword [sym.imp.MSVCR80.dll__invalid_parameter_noinfo]
mov rcx, qword [rsp + 0x80]
cmp rbx, rdi
je 0x14010a801
mov rdx, rcx
sub rdx, rdi
and rdx, 0xfffffffffffffff0
add rdx, rbx
cmp rdi, rcx
je 0x14010a7f9
sub rbx, rdi
nop
nop
nop
mov rax, qword [rdi]
mov qword [rdi + rbx], rax
mov rax, qword [rdi + 8]
mov qword [rdi + rbx + 8], rax
add rdi, 0x10
cmp rdi, rcx
jne 0x14010a7e0
mov qword [rsp + 0x80], rdx
mov dword [r12 + 0x38], esi
lea rdx, [rsp + 0xc0]
mov rcx, r15
call fcn.1401130f0
lea rcx, [rsp + 0xc0]
call fcn.140112f00
movabs rax, 0x3fe6666666666666
mov qword [r12 + 0x41e0], rax
mov rcx, qword [r12 + 0x30]
mov rax, qword [rcx]
call qword [rax + 0xe0]
cvtsi2sd xmm6, eax
divsd xmm6, xmm7
mov rcx, qword [r12 + 0x30]
mov rax, qword [rcx]
call qword [rax + 0xa0]
cvtsi2sd xmm0, eax
mulsd xmm0, xmm6
cvttsd2si eax, xmm0
mov dword [r12 + 0x41e8], eax
mov rcx, qword [r12 + 0x30]
mov rax, qword [rcx]
xor edx, edx
call qword [rax + 0x48]
movabs rax, 0xfeffffffffffffff
mov qword [r12 + 0x41b0], rax
mov rdi, qword [rsp + 0x98]
test rdi, rdi
je 0x14010a8e3
mov rax, qword [rsp + 0xa0]
sub rax, rdi
sar rax, 3
je 0x14010a8e3
call qword [sym.imp.KERNEL32.dll_GetTickCount]
xor r9d, r9d
mov r8, r15
lea rdx, [rsp + 0x90]
mov rcx, r12
call fcn.140107e00
test eax, eax
je 0x14010ac02
lea rcx, [r12 + 0x108]
call fcn.1400ddc50
mov rdi, qword [rsp + 0x98]
mov ebp, esi
mov rbx, rsi
lea rcx, [rsp + 0x90]
call fcn.140007310
test rax, rax
je 0x14010a953
nop
nop
test rdi, rdi
je 0x14010a919
mov rax, qword [rsp + 0xa0]
sub rax, rdi
sar rax, 3
cmp rbx, rax
jb 0x14010a927
call qword [sym.imp.MSVCR80.dll__invalid_parameter_noinfo]
mov rdi, qword [rsp + 0x98]
cmp qword [rdi + rbx*8], 2
je 0x14010a94c
add ebp, 1
add rbx, 1
lea rcx, [rsp + 0x90]
call fcn.140007310
movsxd rcx, ebp
cmp rcx, rax
jb 0x14010a900
jmp 0x14010a953
mov edx, 1
jmp 0x14010a955
mov edx, esi
mov rcx, r12
call fcn.140100250
test eax, eax
jne 0x14010aa43
call fcn.140049470
mov rbx, rax
xor edx, edx
mov r8d, 0x80
mov rcx, r13
call sub.ntdll.dll_memset
mov edx, 0x5c
lea rcx, str...quickmoventfs.cpp
call qword [sym.imp.ntdll.dll_strrchr]
mov rdi, rax
test rax, rax
jne 0x14010a99f
mov r8, rsi
jmp 0x14010aa33
mov byte [rsp + 0x4230], 0
xor eax, eax
mov qword [rsp + 0x4231], rax
mov word [rsp + 0x4239], ax
mov byte [rsp + 0x423b], al
mov r8d, reloc.MFC80U.DLL_Ordinal_365
lea rdx, [0x1402dfd08]
lea rcx, [rsp + 0x4230]
call qword [sym.imp.ntdll.dll_sprintf]
lea rdx, [rdi + 1]
mov rcx, r13
sub rcx, rdx
nop
nop
nop
movzx eax, byte [rdx]
mov byte [rdx + rcx], al
add rdx, 1
test al, al
jne 0x14010a9f0
mov rdi, r13
xor eax, eax
or rcx, 0xffffffffffffffff
repne scasb al, byte [rdi]
lea rdx, [rsp + 0x4230]
xor ecx, ecx
nop
nop
nop
nop
movzx eax, byte [rdx + rcx]
mov byte [rdi + rcx - 1], al
add rcx, 1
test al, al
jne 0x14010aa20
mov r8, r13
mov rax, qword [rbx]
lea rdx, str._s:_Failed_to_reset__Logfile.
mov rcx, rbx
call qword [rax + 0x10]
mov rcx, r12
call fcn.140104a10
test eax, eax
jne 0x14010ab33
call fcn.140049470
mov rbx, rax
xor edx, edx
mov r8d, 0x80
mov rcx, r13
call sub.ntdll.dll_memset
mov edx, 0x5c
lea rcx, str...quickmoventfs.cpp
call qword [sym.imp.ntdll.dll_strrchr]
mov rdi, rax
test rax, rax
jne 0x14010aa8d
mov r8, rsi
jmp 0x14010ab23
mov byte [rsp + 0x4200], 0
xor eax, eax
mov qword [rsp + 0x4201], rax
mov word [rsp + 0x4209], ax
mov byte [rsp + 0x420b], al
mov r8d, reloc.MFC80U.DLL_Ordinal_369
lea rdx, [0x1402dfd08]
lea rcx, [rsp + 0x4200]
call qword [sym.imp.ntdll.dll_sprintf]
lea rdx, [rdi + 1]
mov rcx, r13
sub rcx, rdx
nop
nop
nop
nop
movzx eax, byte [rdx]
mov byte [rdx + rcx], al
add rdx, 1
test al, al
jne 0x14010aae0
mov rdi, r13
xor eax, eax
or rcx, 0xffffffffffffffff
repne scasb al, byte [rdi]
lea rdx, [rsp + 0x4200]
xor ecx, ecx
nop
nop
nop
nop
movzx eax, byte [rdx + rcx]
mov byte [rdi + rcx - 1], al
add rcx, 1
test al, al
jne 0x14010ab10
mov r8, r13
mov rax, qword [rbx]
lea rdx, str._s:_Failed_to_reset__Badclus.
mov rcx, rbx
call qword [rax + 0x10]
lea rdx, [rsp + 0x70]
mov rcx, r12
call fcn.140105330
test eax, eax
je 0x14010b4a2
lea rdx, [rsp + 0x30]
mov rcx, r12
call fcn.140105d50
test eax, eax
je 0x14010b3ee
mov rcx, qword [rsp + 0x58]
test rcx, rcx
je 0x14010abe5
mov rax, qword [rsp + 0x60]
sub rax, rcx
sar rax, 3
je 0x14010abe5
cmp dword [r12 + 0x38], 0
je 0x14010abc7
movabs rax, 0x3f9eb851eb851eb8
mov qword [r12 + 0x41e0], rax
mov rcx, qword [r12 + 0x30]
mov rax, qword [rcx]
call qword [rax + 0xe0]
cvtsi2sd xmm6, eax
divsd xmm6, xmm7
mov rcx, qword [r12 + 0x30]
mov rax, qword [rcx]
call qword [rax + 0xa0]
cvtsi2sd xmm0, eax
mulsd xmm0, xmm6
cvttsd2si eax, xmm0
mov dword [r12 + 0x41e8], eax
mov r9d, 1
mov r8, r15
lea rdx, [rsp + 0x50]
mov rcx, r12
call fcn.140107e00
test eax, eax
je 0x14010ad5b
add r14d, 1
cmp r14d, 2
jge 0x14010ae0f
movabs rbp, 0x3fbeb851eb851eb8
jmp 0x14010a566
call fcn.140049470
mov rbx, rax
xor edx, edx
mov r8d, 0x80
mov rcx, r13
call sub.ntdll.dll_memset
mov edx, 0x5c
lea rcx, str...quickmoventfs.cpp
call qword [sym.imp.ntdll.dll_strrchr]
mov rdi, rax
test rax, rax
jne 0x14010ac3c
mov r13, rsi
jmp 0x14010acc0
mov byte [rsp + 0x4200], 0
xor eax, eax
mov qword [rsp + 0x4201], rax
mov word [rsp + 0x4209], ax
mov byte [rsp + 0x420b], al
mov r8d, Ordinal_355
lea rdx, [0x1402dfd08]
lea rcx, [rsp + 0x4200]
call qword [sym.imp.ntdll.dll_sprintf]
lea rdx, [rdi + 1]
mov rcx, r13
sub rcx, rdx
movzx eax, byte [rdx]
mov byte [rdx + rcx], al
add rdx, 1
test al, al
jne 0x14010ac82
mov rdi, r13
xor eax, eax
or rcx, 0xffffffffffffffff
repne scasb al, byte [rdi]
lea rdx, [rsp + 0x4200]
xor ecx, ecx
nop
nop
nop
movzx eax, byte [rdx + rcx]
mov byte [rdi + rcx - 1], al
add rcx, 1
test al, al
jne 0x14010acb0
mov rax, qword [rbx]
mov r8, r13
lea rdx, str._s:_MoveFrData_failed.
mov rcx, rbx
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x78]
test rcx, rcx
je 0x14010ace3
call sub.MFC80U.DLL_Ordinal_776
mov qword [rsp + 0x78], rsi
mov qword [rsp + 0x80], rsi
mov qword [rsp + 0x88], rsi
lea rcx, [rsp + 0xc0]
call fcn.140112fb0
nop
mov rcx, qword [rsp + 0x38]
test rcx, rcx
je 0x14010ad15
call sub.MFC80U.DLL_Ordinal_776
mov qword [rsp + 0x38], rsi
mov qword [rsp + 0x40], rsi
mov qword [rsp + 0x48], rsi
mov rcx, qword [rsp + 0x58]
test rcx, rcx
je 0x14010ad33
call sub.MFC80U.DLL_Ordinal_776
mov qword [rsp + 0x58], rsi
mov qword [rsp + 0x60], rsi
mov qword [rsp + 0x68], rsi
mov rcx, qword [rsp + 0x98]
test rcx, rcx
je 0x14010ad54
call sub.MFC80U.DLL_Ordinal_776
xor eax, eax
jmp 0x14010b5f6
call fcn.140049470
mov rdi, rax
mov rbx, qword [rax]
mov edx, Ordinal_401
lea rcx, str...quickmoventfs.cpp
call fcn.140100000
mov r8, rax
lea rdx, str._s:_MoveFrData_failed.
mov rcx, rdi
call qword [rbx + 0x10]
nop
mov rcx, qword [rsp + 0x78]
test rcx, rcx
je 0x14010ad97
call sub.MFC80U.DLL_Ordinal_776
mov qword [rsp + 0x78], rsi
mov qword [rsp + 0x80], rsi
mov qword [rsp + 0x88], rsi
lea rcx, [rsp + 0xc0]
call fcn.140112fb0
nop
mov rcx, qword [rsp + 0x38]
test rcx, rcx
je 0x14010adc9
call sub.MFC80U.DLL_Ordinal_776
mov qword [rsp + 0x38], rsi
mov qword [rsp + 0x40], rsi
mov qword [rsp + 0x48], rsi
mov rcx, qword [rsp + 0x58]
test rcx, rcx
je 0x14010ade7
call sub.MFC80U.DLL_Ordinal_776
mov qword [rsp + 0x58], rsi
mov qword [rsp + 0x60], rsi
mov qword [rsp + 0x68], rsi
mov rcx, qword [rsp + 0x98]
test rcx, rcx
je 0x14010ae08
call sub.MFC80U.DLL_Ordinal_776
xor eax, eax
jmp 0x14010b5f6
lea rax, [0x1402edbf0]
mov qword [rsp + 0x4210], rax
lea r8, [rsp + reloc.MFC80U.DLL_Ordinal_320]
mov rdx, qword [r12 + 0x4228]
lea rcx, [rsp + 0x4210]
call fcn.1400db5c0
movabs r14, 0xfeffffffffffffff
cmp qword [r12 + 0x41b0], r14
jne 0x14010ae5f
mov rax, qword [rsp + 0x144]
mov qword [r12 + 0x41b0], rax
mov ebp, esi
mov rbx, rsi
lea rcx, [rsp + 0x30]
call fcn.140007310
test rax, rax
je 0x14010aecb
mov rdi, qword [rsp + 0x38]
test rdi, rdi
je 0x14010ae8e
mov rax, qword [rsp + 0x40]
sub rax, rdi
sar rax, 3
cmp rbx, rax
jb 0x14010ae99
call qword [sym.imp.MSVCR80.dll__invalid_parameter_noinfo]
mov rdi, qword [rsp + 0x38]
cmp qword [rdi + rbx*8], 0
je 0x14010aebb
add ebp, 1
add rbx, 1
lea rcx, [rsp + 0x30]
call fcn.140007310
movsxd rcx, ebp
cmp rcx, rax
jb 0x14010ae78
jmp 0x14010aecb
mov rax, qword [r12 + 0x4218]
add qword [r12 + 0x41b0], rax
mov rcx, r12
call fcn.1401030b0
test eax, eax
jne 0x14010afb3
call fcn.140049470
mov rbx, rax
xor edx, edx
mov r8d, 0x80
mov rcx, r13
call sub.ntdll.dll_memset
mov edx, 0x5c
lea rcx, str...quickmoventfs.cpp
call qword [sym.imp.ntdll.dll_strrchr]
mov rdi, rax
test rax, rax
jne 0x14010af15
mov r8, rsi
jmp 0x14010afa3
mov byte [rsp + 0x4200], 0
xor eax, eax
mov qword [rsp + 0x4201], rax
mov word [rsp + 0x4209], ax
mov byte [rsp + 0x420b], al
mov r8d, Ordinal_424
lea rdx, [0x1402dfd08]
lea rcx, [rsp + 0x4200]
call qword [sym.imp.ntdll.dll_sprintf]
lea rdx, [rdi + 1]
mov rcx, r13
sub rcx, rdx
nop
nop
movzx eax, byte [rdx]
mov byte [rdx + rcx], al
add rdx, 1
test al, al
jne 0x14010af60
mov rdi, r13
xor eax, eax
or rcx, 0xffffffffffffffff
repne scasb al, byte [rdi]
lea rdx, [rsp + 0x4200]
xor ecx, ecx
nop
nop
nop
nop
movzx eax, byte [rdx + rcx]
mov byte [rdi + rcx - 1], al
add rcx, 1
test al, al
jne 0x14010af90
mov r8, r13
mov rax, qword [rbx]
lea rdx, str._s:_Failed_to_process__MFTMirror
mov rcx, rbx
call qword [rax + 0x10]
cmp qword [r12 + 0x41b8], r14
jne 0x14010afcd
mov rax, qword [rsp + reloc.MFC80U.DLL_Ordinal_332]
mov qword [r12 + 0x41b8], rax
mov rcx, qword [r12 + 0x190]
test rcx, rcx
je 0x14010b096
mov rax, qword [r12 + 0x198]
sub rax, rcx
sar rax, 4
je 0x14010b096
mov ebx, esi
mov rbp, rsi
mov rdi, rsi
nop
nop
mov rax, qword [r12 + 0x190]
test rax, rax
jne 0x14010b012
mov rcx, rsi
jmp 0x14010b021
mov rcx, qword [r12 + 0x198]
sub rcx, rax
sar rcx, 4
mov eax, ebx
cmp rax, rcx
jae 0x14010b096
mov rcx, qword [r12 + 0x190]
test rcx, rcx
je 0x14010b049
mov rax, qword [r12 + 0x198]
sub rax, rcx
sar rax, 4
cmp rbp, rax
jb 0x14010b04f
call qword [sym.imp.MSVCR80.dll__invalid_parameter_noinfo]
mov rcx, qword [r12 + 0x190]
lea rdx, [rsp + 0x4200]
mov rax, qword [rdi + rcx]
mov qword [rdx], rax
mov rax, qword [rdi + rcx + 8]
mov qword [rdx + 8], rax
mov r8d, dword [rsp + 0x4208]
mov edx, dword [rsp + 0x4200]
mov rcx, r15
call fcn.140112b30
add ebx, 1
add rbp, 1
add rdi, 0x10
jmp 0x14010b000
lea rdx, [rsp + 0x70]
mov rcx, r12
call fcn.140101e50
test eax, eax
jne 0x14010b183
call fcn.140049470
mov rbx, rax
xor edx, edx
mov r8d, 0x80
mov rcx, r13
call sub.ntdll.dll_memset
mov edx, 0x5c
lea rcx, str...quickmoventfs.cpp
call qword [sym.imp.ntdll.dll_strrchr]
mov rdi, rax
test rax, rax
jne 0x14010b0e5
mov r8, rsi
jmp 0x14010b173
mov byte [rsp + 0x4200], 0
xor eax, eax
mov qword [rsp + 0x4201], rax
mov word [rsp + 0x4209], ax
mov byte [rsp + 0x420b], al
mov r8d, reloc.MFC80U.DLL_Ordinal_444
lea rdx, [0x1402dfd08]
lea rcx, [rsp + 0x4200]
call qword [sym.imp.ntdll.dll_sprintf]
lea rdx, [rdi + 1]
mov rcx, r13
sub rcx, rdx
nop
nop
movzx eax, byte [rdx]
mov byte [rdx + rcx], al
add rdx, 1
test al, al
jne 0x14010b130
mov rdi, r13
xor eax, eax
or rcx, 0xffffffffffffffff
repne scasb al, byte [rdi]
lea rdx, [rsp + 0x4200]
xor ecx, ecx
nop
nop
nop
nop
movzx eax, byte [rdx + rcx]
mov byte [rdi + rcx - 1], al
add rcx, 1
test al, al
jne 0x14010b160
mov r8, r13
mov rax, qword [rbx]
lea rdx, str._s:_Move__Bitmap_data_failed.
mov rcx, rbx
call qword [rax + 0x10]
mov rcx, r12
call fcn.140100b00
test eax, eax
jne 0x14010b273
call fcn.140049470
mov rbx, rax
xor edx, edx
mov r8d, 0x80
mov rcx, r13
call sub.ntdll.dll_memset
mov edx, 0x5c
lea rcx, str...quickmoventfs.cpp
call qword [sym.imp.ntdll.dll_strrchr]
mov rdi, rax
test rax, rax
jne 0x14010b1cd
mov r8, rsi
jmp 0x14010b263
mov byte [rsp + 0x4200], 0
xor eax, eax
mov qword [rsp + 0x4201], rax
mov word [rsp + 0x4209], ax
mov byte [rsp + 0x420b], al
mov r8d, Ordinal_452
lea rdx, [0x1402dfd08]
lea rcx, [rsp + 0x4200]
call qword [sym.imp.ntdll.dll_sprintf]
lea rdx, [rdi + 1]
mov rcx, r13
sub rcx, rdx
nop
nop
nop
nop
movzx eax, byte [rdx]
mov byte [rdx + rcx], al
add rdx, 1
test al, al
jne 0x14010b220
mov rdi, r13
xor eax, eax
or rcx, 0xffffffffffffffff
repne scasb al, byte [rdi]
lea rdx, [rsp + 0x4200]
xor ecx, ecx
nop
nop
nop
nop
movzx eax, byte [rdx + rcx]
mov byte [rdi + rcx - 1], al
add rcx, 1
test al, al
jne 0x14010b250
mov r8, r13
mov rax, qword [rbx]
lea rdx, str._s:_Failed_to_process__Boot
mov rcx, rbx
call qword [rax + 0x10]
mov rcx, qword [r12 + 0x30]
mov rax, qword [rcx]
mov edx, 0x64
call qword [rax + 0x10]
call fcn.140049470
mov rbx, rax
xor edx, edx
mov r8d, 0x80
mov rcx, r13
call sub.ntdll.dll_memset
mov edx, 0x5c
lea rcx, str...quickmoventfs.cpp
call qword [sym.imp.ntdll.dll_strrchr]
mov rdi, rax
test rax, rax
jne 0x14010b2bd
mov r13, rsi
jmp 0x14010b350
mov byte [rsp + 0x4200], 0
xor eax, eax
mov qword [rsp + 0x4201], rax
mov word [rsp + 0x4209], ax
mov byte [rsp + 0x420b], al
mov r8d, 0x1c5
lea rdx, [0x1402dfd08]
lea rcx, [rsp + 0x4200]
call qword [sym.imp.ntdll.dll_sprintf]
lea rdx, [rdi + 1]
mov rcx, r13
sub rcx, rdx
nop
nop
nop
nop
movzx eax, byte [rdx]
mov byte [rdx + rcx], al
add rdx, 1
test al, al
jne 0x14010b310
mov rdi, r13
xor eax, eax
or rcx, 0xffffffffffffffff
repne scasb al, byte [rdi]
lea rdx, [rsp + 0x4200]
xor ecx, ecx
nop
nop
nop
nop
movzx eax, byte [rdx + rcx]
mov byte [rdi + rcx - 1], al
add rcx, 1
test al, al
jne 0x14010b340
mov rax, qword [rbx]
mov r8, r13
lea rdx, str._s:_End_shrinking_volume.
mov rcx, rbx
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x78]
test rcx, rcx
je 0x14010b373
call sub.MFC80U.DLL_Ordinal_776
mov qword [rsp + 0x78], rsi
mov qword [rsp + 0x80], rsi
mov qword [rsp + 0x88], rsi
lea rcx, [rsp + 0xc0]
call fcn.140112fb0
nop
mov rcx, qword [rsp + 0x38]
test rcx, rcx
je 0x14010b3a5
call sub.MFC80U.DLL_Ordinal_776
mov qword [rsp + 0x38], rsi
mov qword [rsp + 0x40], rsi
mov qword [rsp + 0x48], rsi
mov rcx, qword [rsp + 0x58]
test rcx, rcx
je 0x14010b3c3
call sub.MFC80U.DLL_Ordinal_776
mov qword [rsp + 0x58], rsi
mov qword [rsp + 0x60], rsi
mov qword [rsp + 0x68], rsi
mov rcx, qword [rsp + 0x98]
test rcx, rcx
je 0x14010b3e4
call sub.MFC80U.DLL_Ordinal_776
mov eax, 1
jmp 0x14010b5f6
call fcn.140049470
mov rdi, rax
mov rbx, qword [rax]
mov edx, 0x17d
lea rcx, str...quickmoventfs.cpp
call fcn.140100000
mov r8, rax
lea rdx, str._s:_RewirteNoMoveFr_fail.
mov rcx, rdi
call qword [rbx + 0x10]
nop
mov rcx, qword [rsp + 0x78]
test rcx, rcx
je 0x14010b42a
call sub.MFC80U.DLL_Ordinal_776
mov qword [rsp + 0x78], rsi
mov qword [rsp + 0x80], rsi
mov qword [rsp + 0x88], rsi
lea rcx, [rsp + 0xc0]
call fcn.140112fb0
nop
mov rcx, qword [rsp + 0x38]
test rcx, rcx
je 0x14010b45c
call sub.MFC80U.DLL_Ordinal_776
mov qword [rsp + 0x38], rsi
mov qword [rsp + 0x40], rsi
mov qword [rsp + 0x48], rsi
mov rcx, qword [rsp + 0x58]
test rcx, rcx
je 0x14010b47a
call sub.MFC80U.DLL_Ordinal_776
mov qword [rsp + 0x58], rsi
mov qword [rsp + 0x60], rsi
mov qword [rsp + 0x68], rsi
mov rcx, qword [rsp + 0x98]
test rcx, rcx
je 0x14010b49b
call sub.MFC80U.DLL_Ordinal_776
xor eax, eax
jmp 0x14010b5f6
call fcn.140049470
mov rbx, rax
xor edx, edx
mov r8d, 0x80
mov rcx, r13
call sub.ntdll.dll_memset
mov edx, 0x5c
lea rcx, str...quickmoventfs.cpp
call qword [sym.imp.ntdll.dll_strrchr]
mov rdi, rax
test rax, rax
jne 0x14010b4dc
mov r13, rsi
jmp 0x14010b560
mov byte [rsp + 0x4200], 0
xor eax, eax
mov qword [rsp + 0x4201], rax
mov word [rsp + 0x4209], ax
mov byte [rsp + 0x420b], al
mov r8d, Ordinal_376
lea rdx, [0x1402dfd08]
lea rcx, [rsp + 0x4200]
call qword [sym.imp.ntdll.dll_sprintf]
lea rdx, [rdi + 1]
mov rcx, r13
sub rcx, rdx
movzx eax, byte [rdx]
mov byte [rdx + rcx], al
add rdx, 1
test al, al
jne 0x14010b522
mov rdi, r13
xor eax, eax
or rcx, 0xffffffffffffffff
repne scasb al, byte [rdi]
lea rdx, [rsp + 0x4200]
xor ecx, ecx
nop
nop
nop
movzx eax, byte [rdx + rcx]
mov byte [rdi + rcx - 1], al
add rcx, 1
test al, al
jne 0x14010b550
mov rax, qword [rbx]
mov r8, r13
lea rdx, str._s:_Failed_to_process__Bitmap.
mov rcx, rbx
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x78]
test rcx, rcx
je 0x14010b583
call sub.MFC80U.DLL_Ordinal_776
mov qword [rsp + 0x78], rsi
mov qword [rsp + 0x80], rsi
mov qword [rsp + 0x88], rsi
lea rcx, [rsp + 0xc0]
call fcn.140112fb0
nop
mov rcx, qword [rsp + 0x38]
test rcx, rcx
je 0x14010b5b5
call sub.MFC80U.DLL_Ordinal_776
mov qword [rsp + 0x38], rsi
mov qword [rsp + 0x40], rsi
mov qword [rsp + 0x48], rsi
mov rcx, qword [rsp + 0x58]
test rcx, rcx
je 0x14010b5d3
call sub.MFC80U.DLL_Ordinal_776
mov qword [rsp + 0x58], rsi
mov qword [rsp + 0x60], rsi
mov qword [rsp + 0x68], rsi
mov rcx, qword [rsp + 0x98]
test rcx, rcx
je 0x14010b5f4
call sub.MFC80U.DLL_Ordinal_776
xor eax, eax
mov rcx, qword [rsp + 0x4250]
xor rcx, rsp
call fcn.140161080
lea r11, [rsp + 0x4280]
mov rbx, qword [r11 + 0x38]
mov rbp, qword [r11 + 0x40]
mov rsi, qword [r11 + 0x48]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret