Function at 0x1400fc430
Capabilities:
Check for time delay via gettickcount

Disassembly:
push rdi
push r12
push r13
push r14
push r15
mov eax, 0x4330
call sub.ntdll.dll___chkstk
sub rsp, rax
mov qword [rsp + 0x90], 0xfffffffffffffffe
mov qword [rsp + 0x4368], rbx
mov qword [rsp + 0x4370], rbp
mov qword [rsp + 0x4378], rsi
movaps xmmword [rsp + 0x4320], xmm6
movaps xmmword [rsp + 0x4310], xmm7
movaps xmmword [rsp + 0x4300], xmm8
mov rax, qword [0x14042d950]
xor rax, rsp
mov qword [rsp + 0x42f0], rax
mov rsi, rcx
lea rdx, [rcx + 0x32]
mov r8d, 0x100
lea rcx, [rsp + 0x41f0]
call qword [sym.imp.ntdll.dll_wcstombs]
call fcn.140049470
mov rbx, rax
xor edx, edx
mov r8d, 0x80
lea r13, [0x14043d3a0]
mov rcx, r13
call sub.ntdll.dll_memset
mov edx, 0x5c
lea rcx, str..._ntfscpyex.cpp
call qword [sym.imp.ntdll.dll_strrchr]
mov rdi, rax
xor ebp, ebp
test rax, rax
jne 0x1400fc4f4
mov r8, rbp
jmp 0x1400fc583
mov byte [rsp + 0x41e0], bpl
xor eax, eax
mov qword [rsp + 0x41e1], rax
mov word [rsp + 0x41e9], ax
mov byte [rsp + 0x41eb], al
mov r8d, 0xaf
lea rdx, [0x1402dfd08]
lea rcx, [rsp + 0x41e0]
call qword [sym.imp.ntdll.dll_sprintf]
lea rdx, [rdi + 1]
mov rcx, r13
sub rcx, rdx
nop
nop
movzx eax, byte [rdx]
mov byte [rdx + rcx], al
add rdx, 1
test al, al
jne 0x1400fc540
mov rdi, r13
xor eax, eax
or rcx, 0xffffffffffffffff
repne scasb al, byte [rdi]
lea rdx, [rsp + 0x41e0]
xor ecx, ecx
nop
nop
nop
nop
movzx eax, byte [rdx + rcx]
mov byte [rdi + rcx - 1], al
add rcx, 1
test al, al
jne 0x1400fc570
mov r8, r13
mov rax, qword [rbx]
lea r9, [rsp + 0x41f0]
lea rdx, str._s:_Shrink_Work_on__s.
mov rcx, rbx
call qword [rax + 0x10]
movabs rax, 0x3f947ae147ae147b
mov qword [rsi + 0x4320], rax
mov rcx, qword [rsi + 0x138]
mov rax, qword [rcx]
call qword [rax + 0xe0]
cvtsi2sd xmm6, eax
movsd xmm8, qword [0x1403b85a8]
divsd xmm6, xmm8
mov rcx, qword [rsi + 0x138]
mov rax, qword [rcx]
call qword [rax + 0xa0]
cvtsi2sd xmm0, eax
mulsd xmm0, xmm6
cvttsd2si eax, xmm0
mov dword [rsi + 0x4328], eax
mov edx, 0x64
mov rcx, rsi
call fcn.1400f1f90
mov rcx, rsi
call fcn.1400f1ac0
test eax, eax
je 0x1400fc6ff
call fcn.140049470
mov rbx, rax
xor edx, edx
mov r8d, 0x80
mov rcx, r13
call sub.ntdll.dll_memset
mov edx, 0x5c
lea rcx, str..._ntfscpyex.cpp
call qword [sym.imp.ntdll.dll_strrchr]
mov rdi, rax
test rax, rax
je 0x1400fc6d3
mov byte [rsp + 0x41e0], bpl
xor eax, eax
mov qword [rsp + 0x41e1], rax
mov word [rsp + 0x41e9], ax
mov byte [rsp + 0x41eb], al
mov r8d, 0xbe
lea rdx, [0x1402dfd08]
lea rcx, [rsp + 0x41e0]
call qword [sym.imp.ntdll.dll_sprintf]
lea rdx, [rdi + 1]
mov rcx, r13
sub rcx, rdx
nop
nop
movzx eax, byte [rdx]
mov byte [rdx + rcx], al
add rdx, 1
test al, al
jne 0x1400fc690
mov rdi, r13
xor eax, eax
or rcx, 0xffffffffffffffff
repne scasb al, byte [rdi]
lea rdx, [rsp + 0x41e0]
xor ecx, ecx
nop
nop
nop
nop
movzx eax, byte [rdx + rcx]
mov byte [rdi + rcx - 1], al
add rcx, 1
test al, al
jne 0x1400fc6c0
mov rbp, r13
mov rax, qword [rbx]
mov r8, rbp
lea rdx, str._s:_There_is_0x20_in__Bitmap.
mov rcx, rbx
call qword [rax + 0x10]
mov rcx, qword [rsi + 0x138]
mov rax, qword [rcx]
mov edx, 0xdc
call qword [rax + 0x40]
xor eax, eax
jmp 0x1400fd74f
mov qword [rsp + 0x78], rbp
mov qword [rsp + 0x80], rbp
mov qword [rsp + 0x88], rbp
mov qword [rsp + 0x38], rbp
mov qword [rsp + 0x40], rbp
mov qword [rsp + 0x48], rbp
call qword [sym.imp.KERNEL32.dll_GetTickCount]
lea r14, [rsi + 0x148]
mov rdx, qword [rsi + reloc.MFC80U.DLL_Ordinal_576]
mov rcx, r14
call fcn.140111c70
mov rcx, rsi
call fcn.1400f68e0
test eax, eax
jne 0x1400fc7ac
call fcn.140049470
mov rdi, rax
mov rbx, qword [rax]
mov edx, 0xcc
lea rcx, str..._ntfscpyex.cpp
call fcn.1400f1280
mov r8, rax
lea rdx, [0x1402f11d0]
mov rcx, rdi
call qword [rbx + 0x10]
nop
mov rcx, qword [rsp + 0x38]
test rcx, rcx
je 0x1400fc787
call sub.MFC80U.DLL_Ordinal_776
mov qword [rsp + 0x38], rbp
mov qword [rsp + 0x40], rbp
mov qword [rsp + 0x48], rbp
mov rcx, qword [rsp + 0x78]
test rcx, rcx
je 0x1400fc7a5
call sub.MFC80U.DLL_Ordinal_776
xor eax, eax
jmp 0x1400fd74f
mov dword [rsp + 0x20], ebp
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rsp + 0x160]
call fcn.1400d9890
nop
lea r12, [rsi + 0x248]
xor r9d, r9d
lea r8, [rsp + 0x160]
lea edx, [r9 + 1]
mov rcx, r12
call fcn.1400de420
test eax, eax
jne 0x1400fc873
call fcn.140049470
mov rdi, rax
mov rbx, qword [rax]
mov edx, 0xd4
lea rcx, str..._ntfscpyex.cpp
call fcn.1400f1280
mov r8, rax
mov r9d, 1
lea rdx, str._s:_Failed_to_read_the_file_record__FrNumber:_I64d.
mov rcx, rdi
call qword [rbx + 0x10]
mov rcx, qword [rsi + 0x138]
mov rax, qword [rcx]
mov edx, 0xd2
call qword [rax + 0x40]
nop
lea rcx, [rsp + 0x160]
call fcn.1400d9920
nop
mov rcx, qword [rsp + 0x38]
test rcx, rcx
je 0x1400fc84e
call sub.MFC80U.DLL_Ordinal_776
mov qword [rsp + 0x38], rbp
mov qword [rsp + 0x40], rbp
mov qword [rsp + 0x48], rbp
mov rcx, qword [rsp + 0x78]
test rcx, rcx
je 0x1400fc86c
call sub.MFC80U.DLL_Ordinal_776
xor eax, eax
jmp 0x1400fd74f
lea rdx, [rsi + reloc.MFC80U.DLL_Ordinal_752]
mov r8d, dword [rsi + 0x43f0]
lea rcx, [rsp + 0x160]
call fcn.1400d9540
nop
lea rcx, [rsp + 0x160]
call fcn.1400d9920
movabs rdx, 0x3fb999999999999a
mov qword [rsi + 0x4320], rdx
mov rcx, qword [rsi + 0x138]
mov rax, qword [rcx]
call qword [rax + 0xe0]
cvtsi2sd xmm6, eax
divsd xmm6, xmm8
mov rcx, qword [rsi + 0x138]
mov rax, qword [rcx]
call qword [rax + 0xa0]
cvtsi2sd xmm0, eax
mulsd xmm0, xmm6
cvttsd2si eax, xmm0
mov dword [rsi + 0x4328], eax
lea rdi, [rsi + reloc.MFC80U.DLL_Ordinal_744]
mov qword [rsp + 0x20], rdi
mov r9, r14
lea r8, [rsp + 0x30]
lea rdx, [rsp + 0x70]
mov rcx, rsi
call fcn.1400f6c30
test eax, eax
jne 0x1400fc96e
call fcn.140049470
mov rdi, rax
mov rbx, qword [rax]
mov edx, 0xe2
lea rcx, str..._ntfscpyex.cpp
call fcn.1400f1280
mov r8, rax
lea rdx, [0x1402f11b0]
mov rcx, rdi
call qword [rbx + 0x10]
nop
mov rcx, qword [rsp + 0x38]
test rcx, rcx
je 0x1400fc949
call sub.MFC80U.DLL_Ordinal_776
mov qword [rsp + 0x38], rbp
mov qword [rsp + 0x40], rbp
mov qword [rsp + 0x48], rbp
mov rcx, qword [rsp + 0x78]
test rcx, rcx
je 0x1400fc967
call sub.MFC80U.DLL_Ordinal_776
xor eax, eax
jmp 0x1400fd74f
cmp qword [rdi], 0
jne 0x1400fc97b
mov qword [rdi], 1
lea rcx, [rsp + 0xa0]
call fcn.140112e60
nop
mov rdx, r14
lea rcx, [rsp + 0xa0]
call fcn.1401130f0
mov qword [rsp + 0x58], rbp
mov qword [rsp + 0x60], rbp
mov qword [rsp + 0x68], rbp
mov r15d, ebp
movsd xmm7, qword [0x1402f11a8]
test r15d, r15d
jne 0x1400fca43
mov dword [rsi + reloc.MFC80U.DLL_Ordinal_320], 1
call fcn.140049470
mov rdi, rax
mov rbx, qword [rax]
mov edx, 0x10c
lea rcx, str..._ntfscpyex.cpp
call fcn.1400f1280
mov r8, rax
lea rdx, str._s:_Begin_checking_volume.
mov rcx, rdi
call qword [rbx + 0x10]
movabs rax, 0x3fbeb851eb851eb8
mov qword [rsi + 0x4320], rax
mov rcx, qword [rsi + 0x138]
mov rax, qword [rcx]
call qword [rax + 0xe0]
cvtsi2sd xmm6, eax
divsd xmm6, xmm8
mov rcx, qword [rsi + 0x138]
mov rax, qword [rcx]
call qword [rax + 0xa0]
cvtsi2sd xmm0, eax
mulsd xmm0, xmm6
cvttsd2si eax, xmm0
mov dword [rsi + 0x4328], eax
jmp 0x1400fcca8
cmp dword [rsi + 0x4340], 0
je 0x1400fca7a
call fcn.140049470
mov rdi, rax
mov rbx, qword [rax]
mov edx, Ordinal_277
lea rcx, str..._ntfscpyex.cpp
call fcn.1400f1280
mov r8, rax
lea rdx, str._s:_Begin_copying_partition.
mov rcx, rdi
call qword [rbx + 0x10]
jmp 0x1400fcaa6
call fcn.140049470
mov rdi, rax
mov rbx, qword [rax]
mov edx, Ordinal_280
lea rcx, str..._ntfscpyex.cpp
call fcn.1400f1280
mov r8, rax
lea rdx, str._s:_Begin_shrinking_volume.
mov rcx, rdi
call qword [rbx + 0x10]
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [rsi + 0x4338], eax
mov rcx, qword [rsp + 0x60]
mov rdi, rcx
mov rbx, qword [rsp + 0x58]
cmp rbx, rcx
jbe 0x1400fcad4
call qword [sym.imp.MSVCR80.dll__invalid_parameter_noinfo]
mov rcx, qword [rsp + 0x60]
mov rbx, qword [rsp + 0x58]
cmp rbx, rcx
jbe 0x1400fcae4
call qword [sym.imp.MSVCR80.dll__invalid_parameter_noinfo]
mov rcx, qword [rsp + 0x60]
cmp rbx, rdi
je 0x1400fcb1e
mov rdx, rcx
sub rdx, rdi
and rdx, 0xfffffffffffffff0
add rdx, rbx
cmp rdi, rcx
je 0x1400fcb19
sub rbx, rdi
nop
mov rax, qword [rdi]
mov qword [rbx + rdi], rax
mov rax, qword [rdi + 8]
mov qword [rbx + rdi + 8], rax
add rdi, 0x10
cmp rdi, rcx
jne 0x1400fcb00
mov qword [rsp + 0x60], rdx
mov dword [rsi + reloc.MFC80U.DLL_Ordinal_320], ebp
lea rdx, [rsp + 0xa0]
mov rcx, r14
call fcn.1401130f0
lea rcx, [rsp + 0xa0]
call fcn.140112f00
movabs rax, 0x3fe6666666666666
mov qword [rsi + 0x4320], rax
mov rcx, qword [rsi + 0x138]
mov rax, qword [rcx]
call qword [rax + 0xe0]
cvtsi2sd xmm6, eax
divsd xmm6, xmm8
mov rcx, qword [rsi + 0x138]
mov rax, qword [rcx]
call qword [rax + 0xa0]
cvtsi2sd xmm0, eax
mulsd xmm0, xmm6
cvttsd2si eax, xmm0
mov dword [rsi + 0x4328], eax
mov qword [rsi + 0x42f0], 0xffffffffffffffff
cmp dword [rsi + 0x4340], 0
je 0x1400fcc99
mov rcx, qword [rsi + 0x138]
mov rax, qword [rcx]
mov edx, 1
call qword [rax + 0x48]
mov rdx, r14
mov rcx, rsi
call fcn.1400f33e0
test eax, eax
je 0x1400fcedf
mov rcx, rsi
call fcn.1400f98a0
mov rcx, rsi
call fcn.1400f3090
test eax, eax
je 0x1400fce52
mov r12d, ebp
movabs r14, 0x2aaaaaaaaaaaaaab
nop
mov rax, qword [rsi + 0x4358]
test rax, rax
jne 0x1400fcc01
mov rdx, rbp
jmp 0x1400fcc1f
mov rcx, qword [rsi + 0x4360]
sub rcx, rax
mov rax, r14
imul rcx
sar rdx, 3
mov rax, rdx
shr rax, 0x3f
add rdx, rax
mov edi, r12d
cmp rdi, rdx
jae 0x1400fcc7d
mov rax, qword [rsi + 0x4358]
test rax, rax
je 0x1400fcc56
mov rcx, qword [rsi + 0x4360]
sub rcx, rax
mov rax, r14
imul rcx
sar rdx, 3
mov rax, rdx
shr rax, 0x3f
add rdx, rax
cmp rdi, rdx
jb 0x1400fcc5c
call qword [sym.imp.MSVCR80.dll__invalid_parameter_noinfo]
lea rcx, [rdi + rdi*2]
add rcx, rcx
mov rax, qword [rsi + 0x4358]
lea rcx, [rax + rcx*8 + 0x10]
call fcn.1400ea5f0
add r12d, 1
jmp 0x1400fcbf0
lea rcx, [rsi + 0x4350]
call fcn.1400f9c80
lea r14, [rsi + 0x148]
lea r12, [rsi + 0x248]
jmp 0x1400fcca8
mov rcx, qword [rsi + 0x138]
mov rax, qword [rcx]
xor edx, edx
call qword [rax + 0x48]
mov rcx, qword [rsp + 0x78]
test rcx, rcx
je 0x1400fcd0a
mov rax, qword [rsp + 0x80]
sub rax, rcx
sar rax, 3
je 0x1400fcd0a
call qword [sym.imp.KERNEL32.dll_GetTickCount]
xor r9d, r9d
mov r8, r14
lea rdx, [rsp + 0x70]
mov rcx, rsi
call fcn.1400fa220
test eax, eax
je 0x1400fcf6c
mov rcx, r12
call fcn.1400ddc50
cmp dword [rsi + 0x4340], 0
je 0x1400fcd0a
cmp dword [rsi + reloc.MFC80U.DLL_Ordinal_320], 0
jne 0x1400fcd0a
lea rcx, [rsi + 0x4370]
call fcn.1400ddc50
mov rcx, rsi
call fcn.1400f14c0
test eax, eax
jne 0x1400fcd42
call fcn.140049470
mov rdi, rax
mov rbx, qword [rax]
mov edx, 0x15b
lea rcx, str..._ntfscpyex.cpp
call fcn.1400f1280
mov r8, rax
lea rdx, str._s:_Failed_to_reset__Logfile.
mov rcx, rdi
call qword [rbx + 0x10]
mov rcx, rsi
call fcn.1400f78b0
test eax, eax
jne 0x1400fcd7a
call fcn.140049470
mov rdi, rax
mov rbx, qword [rax]
mov edx, Ordinal_355
lea rcx, str..._ntfscpyex.cpp
call fcn.1400f1280
mov r8, rax
lea rdx, str._s:_Failed_to_reset__Badclus.
mov rcx, rdi
call qword [rbx + 0x10]
lea rdx, [rsp + 0x50]
mov rcx, rsi
call fcn.1400f8430
test eax, eax
je 0x1400fd6c7
cmp dword [rsi + 0x4340], 0
je 0x1400fcdad
cmp dword [rsi + reloc.MFC80U.DLL_Ordinal_320], 0
jne 0x1400fcdad
lea rcx, [rsi + 0x4370]
call fcn.1400ddc50
mov rcx, qword [rsp + 0x38]
test rcx, rcx
je 0x1400fcdc5
mov rax, qword [rsp + 0x40]
sub rax, rcx
sar rax, 3
jne 0x1400fcde1
mov rcx, qword [rsi + reloc.MFC80U.DLL_Ordinal_512]
test rcx, rcx
je 0x1400fce3f
mov rax, qword [rsi + 0x208]
sub rax, rcx
sar rax, 3
je 0x1400fce3f
cmp dword [rsi + reloc.MFC80U.DLL_Ordinal_320], 0
je 0x1400fcdf6
movsd xmm1, xmm7
mov rcx, rsi
call fcn.1400f2380
cmp dword [rsi + 0x4340], 0
je 0x1400fce21
lea rdx, [rsi + 0x1f8]
mov r9d, 1
mov r8, r14
mov rcx, rsi
call fcn.1400fa220
test eax, eax
je 0x1400fcff9
jmp 0x1400fce3f
mov r9d, 1
mov r8, r14
lea rdx, [rsp + 0x30]
mov rcx, rsi
call fcn.1400fa220
test eax, eax
je 0x1400fd086
add r15d, 1
cmp r15d, 2
jge 0x1400fd113
jmp 0x1400fc9b3
call fcn.140049470
mov rdi, rax
mov rbx, qword [rax]
mov edx, 0x133
lea rcx, str..._ntfscpyex.cpp
call fcn.1400f1280
mov r8, rax
lea rdx, str._s:_Copy_data_to_target_partition_fail.
mov rcx, rdi
call qword [rbx + 0x10]
nop
mov rcx, qword [rsp + 0x58]
test rcx, rcx
je 0x1400fce8e
call sub.MFC80U.DLL_Ordinal_776
mov qword [rsp + 0x58], rbp
mov qword [rsp + 0x60], rbp
mov qword [rsp + 0x68], rbp
lea rcx, [rsp + 0xa0]
call fcn.140112fb0
nop
mov rcx, qword [rsp + 0x38]
test rcx, rcx
je 0x1400fceba
call sub.MFC80U.DLL_Ordinal_776
mov qword [rsp + 0x38], rbp
mov qword [rsp + 0x40], rbp
mov qword [rsp + 0x48], rbp
mov rcx, qword [rsp + 0x78]
test rcx, rcx
je 0x1400fced8
call sub.MFC80U.DLL_Ordinal_776
xor eax, eax
jmp 0x1400fd74f
call fcn.140049470
mov rdi, rax
mov rbx, qword [rax]
mov edx, 0x12a
lea rcx, str..._ntfscpyex.cpp
call fcn.1400f1280
mov r8, rax
lea rdx, str._s:_Copy_data_to_target_partition_fail.
mov rcx, rdi
call qword [rbx + 0x10]
nop
mov rcx, qword [rsp + 0x58]
test rcx, rcx
je 0x1400fcf1b
call sub.MFC80U.DLL_Ordinal_776
mov qword [rsp + 0x58], rbp
mov qword [rsp + 0x60], rbp
mov qword [rsp + 0x68], rbp
lea rcx, [rsp + 0xa0]
call fcn.140112fb0
nop
mov rcx, qword [rsp + 0x38]
test rcx, rcx
je 0x1400fcf47
call sub.MFC80U.DLL_Ordinal_776
mov qword [rsp + 0x38], rbp
mov qword [rsp + 0x40], rbp
mov qword [rsp + 0x48], rbp
mov rcx, qword [rsp + 0x78]
test rcx, rcx
je 0x1400fcf65
call sub.MFC80U.DLL_Ordinal_776
xor eax, eax
jmp 0x1400fd74f
call fcn.140049470
mov rdi, rax
mov rbx, qword [rax]
mov edx, reloc.MFC80U.DLL_Ordinal_332
lea rcx, str..._ntfscpyex.cpp
call fcn.1400f1280
mov r8, rax
lea rdx, str._s:_MoveFrData_failed.
mov rcx, rdi
call qword [rbx + 0x10]
nop
mov rcx, qword [rsp + 0x58]
test rcx, rcx
je 0x1400fcfa8
call sub.MFC80U.DLL_Ordinal_776
mov qword [rsp + 0x58], rbp
mov qword [rsp + 0x60], rbp
mov qword [rsp + 0x68], rbp
lea rcx, [rsp + 0xa0]
call fcn.140112fb0
nop
mov rcx, qword [rsp + 0x38]
test rcx, rcx
je 0x1400fcfd4
call sub.MFC80U.DLL_Ordinal_776
mov qword [rsp + 0x38], rbp
mov qword [rsp + 0x40], rbp
mov qword [rsp + 0x48], rbp
mov rcx, qword [rsp + 0x78]
test rcx, rcx
je 0x1400fcff2
call sub.MFC80U.DLL_Ordinal_776
xor eax, eax
jmp 0x1400fd74f
call fcn.140049470
mov rdi, rax
mov rbx, qword [rax]
mov edx, reloc.MFC80U.DLL_Ordinal_376
lea rcx, str..._ntfscpyex.cpp
call fcn.1400f1280
mov r8, rax
lea rdx, str._s:_MoveFrData_failed.
mov rcx, rdi
call qword [rbx + 0x10]
nop
mov rcx, qword [rsp + 0x58]
test rcx, rcx
je 0x1400fd035
call sub.MFC80U.DLL_Ordinal_776
mov qword [rsp + 0x58], rbp
mov qword [rsp + 0x60], rbp
mov qword [rsp + 0x68], rbp
lea rcx, [rsp + 0xa0]
call fcn.140112fb0
nop
mov rcx, qword [rsp + 0x38]
test rcx, rcx
je 0x1400fd061
call sub.MFC80U.DLL_Ordinal_776
mov qword [rsp + 0x38], rbp
mov qword [rsp + 0x40], rbp
mov qword [rsp + 0x48], rbp
mov rcx, qword [rsp + 0x78]
test rcx, rcx
je 0x1400fd07f
call sub.MFC80U.DLL_Ordinal_776
xor eax, eax
jmp 0x1400fd74f
call fcn.140049470
mov rdi, rax
mov rbx, qword [rax]
mov edx, 0x182
lea rcx, str..._ntfscpyex.cpp
call fcn.1400f1280
mov r8, rax
lea rdx, str._s:_MoveFrData_failed.
mov rcx, rdi
call qword [rbx + 0x10]
nop
mov rcx, qword [rsp + 0x58]
test rcx, rcx
je 0x1400fd0c2
call sub.MFC80U.DLL_Ordinal_776
mov qword [rsp + 0x58], rbp
mov qword [rsp + 0x60], rbp
mov qword [rsp + 0x68], rbp
lea rcx, [rsp + 0xa0]
call fcn.140112fb0
nop
mov rcx, qword [rsp + 0x38]
test rcx, rcx
je 0x1400fd0ee
call sub.MFC80U.DLL_Ordinal_776
mov qword [rsp + 0x38], rbp
mov qword [rsp + 0x40], rbp
mov qword [rsp + 0x48], rbp
mov rcx, qword [rsp + 0x78]
test rcx, rcx
je 0x1400fd10c
call sub.MFC80U.DLL_Ordinal_776
xor eax, eax
jmp 0x1400fd74f
mov r9d, 1
xor r8d, r8d
lea rdx, [rsp + 0x160]
mov rcx, qword [rsi]
call fcn.1401117f0
test eax, eax
jne 0x1400fd15c
call fcn.140049470
mov rdi, rax
mov rbx, qword [rax]
mov edx, Ordinal_403
lea rcx, str..._ntfscpyex.cpp
call fcn.1400f1280
mov r8, rax
lea rdx, str._s:_Read_dbr_sector_failed.
mov rcx, rdi
call qword [rbx + 0x10]
lea rax, [0x1402edbf0]
mov qword [rsp + 0x41e0], rax
lea r8, [rsp + 0x120]
lea rdx, [rsp + 0x160]
lea rcx, [rsp + 0x41e0]
call fcn.1400db5c0
cmp qword [rsi + 0x42f0], 0
jge 0x1400fd1a1
mov rax, qword [rsp + 0x124]
mov qword [rsi + 0x42f0], rax
mov rcx, rsi
call fcn.1400f5740
test eax, eax
jne 0x1400fd1d9
call fcn.140049470
mov rdi, rax
mov rbx, qword [rax]
mov edx, Ordinal_418
lea rcx, str..._ntfscpyex.cpp
call fcn.1400f1280
mov r8, rax
lea rdx, str._s:_Failed_to_process__MFTMirror
mov rcx, rdi
call qword [rbx + 0x10]
cmp qword [rsi + 0x42f8], 0
jge 0x1400fd1f2
mov rax, qword [rsp + 0x12c]
mov qword [rsi + 0x42f8], rax
mov rcx, qword [rsi + 0x2d0]
test rcx, rcx
je 0x1400fd2b1
mov rax, qword [rsi + 0x2d8]
sub rax, rcx
sar rax, 4
je 0x1400fd2b1
mov ebx, ebp
mov r12, rbp
mov rdi, rbp
nop
mov rax, qword [rsi + 0x2d0]
test rax, rax
jne 0x1400fd231
mov rcx, rbp
jmp 0x1400fd23f
mov rcx, qword [rsi + 0x2d8]
sub rcx, rax
sar rcx, 4
mov eax, ebx
cmp rax, rcx
jae 0x1400fd2b1
mov rcx, qword [rsi + 0x2d0]
test rcx, rcx
je 0x1400fd265
mov rax, qword [rsi + 0x2d8]
sub rax, rcx
sar rax, 4
cmp r12, rax
jb 0x1400fd26b
call qword [sym.imp.MSVCR80.dll__invalid_parameter_noinfo]
mov rcx, qword [rsi + 0x2d0]
lea rdx, [rsp + 0x41e0]
mov rax, qword [rdi + rcx]
mov qword [rdx], rax
mov rax, qword [rdi + rcx + 8]
mov qword [rdx + 8], rax
mov r8d, dword [rsp + 0x41e8]
mov edx, dword [rsp + 0x41e0]
mov rcx, r14
call fcn.140112b30
add ebx, 1
add r12, 1
add rdi, 0x10
jmp 0x1400fd220
lea rdx, [rsp + 0x50]
mov rcx, rsi
call fcn.1400f4090
test eax, eax
jne 0x1400fd3a3
call fcn.140049470
mov rbx, rax
xor edx, edx
mov r8d, 0x80
mov rcx, r13
call sub.ntdll.dll_memset
mov edx, 0x5c
lea rcx, str..._ntfscpyex.cpp
call qword [sym.imp.ntdll.dll_strrchr]
mov rdi, rax
test rax, rax
jne 0x1400fd300
mov r8, rbp
jmp 0x1400fd393
mov byte [rsp + 0x41e0], 0
xor eax, eax
mov qword [rsp + 0x41e1], rax
mov word [rsp + 0x41e9], ax
mov byte [rsp + 0x41eb], al
mov r8d, Ordinal_438
lea rdx, [0x1402dfd08]
lea rcx, [rsp + 0x41e0]
call qword [sym.imp.ntdll.dll_sprintf]
lea rdx, [rdi + 1]
mov rcx, r13
sub rcx, rdx
nop
nop
nop
movzx eax, byte [rdx]
mov byte [rcx + rdx], al
add rdx, 1
test al, al
jne 0x1400fd350
mov rdi, r13
xor eax, eax
or rcx, 0xffffffffffffffff
repne scasb al, byte [rdi]
lea rdx, [rsp + 0x41e0]
xor ecx, ecx
nop
nop
nop
nop
movzx eax, byte [rdx + rcx]
mov byte [rdi + rcx - 1], al
add rcx, 1
test al, al
jne 0x1400fd380
mov r8, r13
mov rax, qword [rbx]
lea rdx, str._s:_Move__Bitmap_data_failed.
mov rcx, rbx
call qword [rax + 0x10]
mov rcx, rsi
call fcn.1400f1ce0
test eax, eax
jne 0x1400fd493
call fcn.140049470
mov rbx, rax
xor edx, edx
mov r8d, 0x80
mov rcx, r13
call sub.ntdll.dll_memset
mov edx, 0x5c
lea rcx, str..._ntfscpyex.cpp
call qword [sym.imp.ntdll.dll_strrchr]
mov rdi, rax
test rax, rax
jne 0x1400fd3ed
mov r8, rbp
jmp 0x1400fd483
mov byte [rsp + 0x41e0], 0
xor eax, eax
mov qword [rsp + 0x41e1], rax
mov word [rsp + 0x41e9], ax
mov byte [rsp + 0x41eb], al
mov r8d, Ordinal_443
lea rdx, [0x1402dfd08]
lea rcx, [rsp + 0x41e0]
call qword [sym.imp.ntdll.dll_sprintf]
lea rdx, [rdi + 1]
mov rcx, r13
sub rcx, rdx
nop
nop
nop
nop
movzx eax, byte [rdx]
mov byte [rcx + rdx], al
add rdx, 1
test al, al
jne 0x1400fd440
mov rdi, r13
xor eax, eax
or rcx, 0xffffffffffffffff
repne scasb al, byte [rdi]
lea rdx, [rsp + 0x41e0]
xor ecx, ecx
nop
nop
nop
nop
movzx eax, byte [rdx + rcx]
mov byte [rdi + rcx - 1], al
add rcx, 1
test al, al
jne 0x1400fd470
mov r8, r13
mov rax, qword [rbx]
lea rdx, str._s:_Failed_to_process__Boot
mov rcx, rbx
call qword [rax + 0x10]
mov rcx, qword [rsi + 0x138]
mov rax, qword [rcx]
mov edx, 0x64
call qword [rax + 0x10]
cmp dword [rsi + 0x4340], 0
je 0x1400fd588
call fcn.140049470
mov rbx, rax
xor edx, edx
mov r8d, 0x80
mov rcx, r13
call sub.ntdll.dll_memset
mov edx, 0x5c
lea rcx, str..._ntfscpyex.cpp
call qword [sym.imp.ntdll.dll_strrchr]
mov rdi, rax
test rax, rax
jne 0x1400fd4ec
mov r13, rbp
jmp 0x1400fd570
mov byte [rsp + 0x41e0], 0
xor eax, eax
mov qword [rsp + 0x41e1], rax
mov word [rsp + 0x41e9], ax
mov byte [rsp + 0x41eb], al
mov r8d, Ordinal_452
lea rdx, [0x1402dfd08]
lea rcx, [rsp + 0x41e0]
call qword [sym.imp.ntdll.dll_sprintf]
lea rdx, [rdi + 1]
mov rcx, r13
sub rcx, rdx
movzx eax, byte [rdx]
mov byte [rcx + rdx], al
add rdx, 1
test al, al
jne 0x1400fd532
mov rdi, r13
xor eax, eax
or rcx, 0xffffffffffffffff
repne scasb al, byte [rdi]
lea rdx, [rsp + 0x41e0]
xor ecx, ecx
nop
nop
nop
movzx eax, byte [rdx + rcx]
mov byte [rdi + rcx - 1], al
add rcx, 1
test al, al
jne 0x1400fd560
mov rax, qword [rbx]
mov r8, r13
lea rdx, str._s:_End_copying_partition.
mov rcx, rbx
call qword [rax + 0x10]
jmp 0x1400fd664
call fcn.140049470
mov rbx, rax
xor edx, edx
mov r8d, 0x80
mov rcx, r13
call sub.ntdll.dll_memset
mov edx, 0x5c
lea rcx, str..._ntfscpyex.cpp
call qword [sym.imp.ntdll.dll_strrchr]
mov rdi, rax
test rax, rax
jne 0x1400fd5c2
mov r13, rbp
jmp 0x1400fd650
mov byte [rsp + 0x41e0], 0
xor eax, eax
mov qword [rsp + 0x41e1], rax
mov word [rsp + 0x41e9], ax
mov byte [rsp + 0x41eb], al
mov r8d, Ordinal_452
lea rdx, [0x1402dfd08]
lea rcx, [rsp + 0x41e0]
call qword [sym.imp.ntdll.dll_sprintf]
lea rdx, [rdi + 1]
mov rcx, r13
sub rcx, rdx
nop
nop
movzx eax, byte [rdx]
mov byte [rcx + rdx], al
add rdx, 1
test al, al
jne 0x1400fd610
mov rdi, r13
xor eax, eax
or rcx, 0xffffffffffffffff
repne scasb al, byte [rdi]
lea rdx, [rsp + 0x41e0]
xor ecx, ecx
nop
nop
nop
nop
movzx eax, byte [rdx + rcx]
mov byte [rdi + rcx - 1], al
add rcx, 1
test al, al
jne 0x1400fd640
mov rax, qword [rbx]
mov r8, r13
lea rdx, str._s:_End_shrinking_volume.
mov rcx, rbx
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x58]
test rcx, rcx
je 0x1400fd673
call sub.MFC80U.DLL_Ordinal_776
mov qword [rsp + 0x58], rbp
mov qword [rsp + 0x60], rbp
mov qword [rsp + 0x68], rbp
lea rcx, [rsp + 0xa0]
call fcn.140112fb0
nop
mov rcx, qword [rsp + 0x38]
test rcx, rcx
je 0x1400fd69f
call sub.MFC80U.DLL_Ordinal_776
mov qword [rsp + 0x38], rbp
mov qword [rsp + 0x40], rbp
mov qword [rsp + 0x48], rbp
mov rcx, qword [rsp + 0x78]
test rcx, rcx
je 0x1400fd6bd
call sub.MFC80U.DLL_Ordinal_776
mov eax, 1
jmp 0x1400fd74f
call fcn.140049470
mov rdi, rax
mov rbx, qword [rax]
mov edx, 0x164
lea rcx, str..._ntfscpyex.cpp
call fcn.1400f1280
mov r8, rax
lea rdx, str._s:_Failed_to_process__Bitmap.
mov rcx, rdi
call qword [rbx + 0x10]
nop
mov rcx, qword [rsp + 0x58]
test rcx, rcx
je 0x1400fd703
call sub.MFC80U.DLL_Ordinal_776
mov qword [rsp + 0x58], rbp
mov qword [rsp + 0x60], rbp
mov qword [rsp + 0x68], rbp
lea rcx, [rsp + 0xa0]
call fcn.140112fb0
nop
mov rcx, qword [rsp + 0x38]
test rcx, rcx
je 0x1400fd72f
call sub.MFC80U.DLL_Ordinal_776
mov qword [rsp + 0x38], rbp
mov qword [rsp + 0x40], rbp
mov qword [rsp + 0x48], rbp
mov rcx, qword [rsp + 0x78]
test rcx, rcx
je 0x1400fd74d
call sub.MFC80U.DLL_Ordinal_776
xor eax, eax
mov rcx, qword [rsp + 0x42f0]
xor rcx, rsp
call fcn.140161080
lea r11, [rsp + 0x4330]
mov rbx, qword [r11 + 0x38]
mov rbp, qword [r11 + 0x40]
mov rsi, qword [r11 + 0x48]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret