Function at 0x1400b26f0
Capabilities:
Check if file exists
Create directory
Delete file
Get file attributes

Disassembly:
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
mov eax, 0x1d80
call sub.ntdll.dll___chkstk
sub rsp, rax
mov qword [rsp + reloc.MFC80U.DLL_Ordinal_752], 0xfffffffffffffffe
mov qword [rsp + 0x1dd8], rbx
mov rax, qword [0x14042d950]
xor rax, rsp
mov qword [rsp + 0x1d70], rax
mov r13, r8
mov qword [rsp + 0x70], r8
mov r15, rdx
mov qword [rsp + 0xd0], rdx
mov rbx, rcx
mov qword [rsp + 0x68], rcx
mov rax, qword [r8]
mov edx, 1
mov rcx, r8
call qword [rax + 0x48]
mov dword [rsp + 0xf4], 1
mov rcx, qword [rbx + reloc.MFC80U.DLL_Ordinal_1112]
mov rax, qword [rcx]
mov rdx, qword [r15 + 8]
call qword [rax + 0x48]
mov rcx, rax
mov r8, qword [r15 + 0x18]
mov edx, dword [r15 + 0x10]
call fcn.1400bcd20
mov rbp, rax
mov qword [rsp + 0x60], rax
mov r8, qword [r15 + 0x20]
mov edx, dword [r15 + 0x14]
mov rcx, qword [r15 + 8]
call fcn.1400bcd20
mov r12, rax
xor esi, esi
mov qword [rsp + 0xe8], rsi
mov qword [rsp + 0x148], rsi
mov rdx, qword [rbp]
mov rcx, rbp
call qword [rdx + 0xd0]
test eax, eax
je 0x1400b27d3
mov rax, qword [r12]
lea edx, [rsi + 1]
mov rcx, r12
call qword [rax + 0x1e0]
mov rax, qword [rbp]
mov rcx, rbp
call qword [rax + 0xc8]
test eax, eax
je 0x1400b27f6
mov rax, qword [r12]
mov edx, 1
mov rcx, r12
call qword [rax + 0x1d8]
mov rcx, qword [rbx + reloc.MFC80U.DLL_Ordinal_1112]
mov rax, qword [rcx]
mov rdx, qword [r15 + 8]
call qword [rax + 0x48]
mov qword [rsp + 0x138], rax
mov rcx, qword [rbx + reloc.MFC80U.DLL_Ordinal_1112]
mov rax, qword [rcx]
mov rdx, qword [r15 + 8]
call qword [rax + 0x48]
mov rcx, rax
mov edx, dword [r15 + 0x10]
call fcn.1400bcc40
mov qword [rsp + 0x88], rax
mov rcx, qword [rbx + reloc.MFC80U.DLL_Ordinal_1112]
mov rax, qword [rcx]
mov rdx, qword [r15 + 8]
call qword [rax + 0x48]
mov rcx, rax
mov edx, dword [r15 + 0x14]
call fcn.1400bcc40
mov qword [rsp + 0x100], rax
mov edx, dword [r15 + 0x14]
mov rcx, qword [r15 + 8]
call fcn.1400bcc40
mov rdi, rax
mov qword [rsp + 0xa0], rax
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0x40]
mov qword [rsp + 0xb8], rax
mov rax, qword [rdi]
xor edx, edx
mov rcx, rdi
call qword [rax + 0x78]
test eax, eax
je 0x1400b299d
mov rdx, qword [rdi]
mov rcx, rdi
call qword [rdx + 0x80]
mov rax, qword [r13]
mov edx, 8
mov rcx, r13
call qword [rax + 0x40]
call fcn.140049470
mov rbx, rax
xor edx, edx
mov r8d, 0x80
lea rbp, [0x1404342a0]
mov rcx, rbp
call sub.ntdll.dll_memset
mov edx, 0x5c
lea rcx, str...optcore.cpp
call qword [sym.imp.ntdll.dll_strrchr]
mov rdi, rax
test rax, rax
je 0x1400b2983
mov byte [rsp + Ordinal_4069], sil
xor eax, eax
mov qword [rsp + Ordinal_4069], rax
mov word [rsp + 0xfe9], ax
mov byte [rsp + 0xfeb], al
mov r8d, Ordinal_4808
lea rdx, [0x1402dfd08]
lea rcx, [rsp + 0xfe0]
call qword [sym.imp.ntdll.dll_sprintf]
lea rdx, [rdi + 1]
mov rcx, rbp
sub rcx, rdx
nop
nop
nop
nop
movzx eax, byte [rdx]
mov byte [rcx + rdx], al
add rdx, 1
test al, al
jne 0x1400b2940
mov rdi, rbp
xor eax, eax
or rcx, 0xffffffffffffffff
repne scasb al, byte [rdi]
lea rdx, [rsp + 0xfe0]
xor ecx, ecx
nop
nop
nop
nop
movzx eax, byte [rdx + rcx]
mov byte [rdi + rcx - 1], al
add rcx, 1
test al, al
jne 0x1400b2970
mov rsi, rbp
mov rax, qword [rbx]
mov r8, rsi
lea rdx, str._s:_Partition_Overlap_in__SetActive.
mov rcx, rbx
call qword [rax + 0x10]
xor eax, eax
jmp 0x1400b6ee0
mov r14, qword [r15 + 0x40]
mov eax, dword [r14 + 4]
mov dword [rsp + 0x78], eax
mov qword [rsp + 0x90], rsi
mov qword [rsp + reloc.MFC80U.DLL_Ordinal_280], rsi
mov qword [rsp + 0x108], rsi
mov dword [rsp + 0xf0], esi
mov qword [rsp + 0x48], rsi
mov qword [rsp + 0x58], rsi
test eax, eax
je 0x1400b2fe2
cmp dword [r14 + 0xc], esi
je 0x1400b2a8a
mov edi, esi
mov rcx, qword [rsp + 0x100]
mov rax, qword [rcx]
call qword [rax + 0x30]
mov rsi, rax
test rax, rax
je 0x1400b2a8a
mov rbx, qword [rsp + 0x100]
nop
nop
mov rdx, qword [rsi]
mov rcx, rsi
call qword [rdx + 0x78]
test al, al
je 0x1400b2a47
call fcn.140049400
mov rdi, rax
mov rbx, qword [rax]
mov rdx, qword [rsi]
mov rcx, rsi
call qword [rdx + 0x50]
movzx edx, ax
mov rcx, rdi
call qword [rbx + 0x20]
mov edi, 1
mov rbx, qword [rsp + 0x100]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x38]
mov rsi, rax
test rax, rax
jne 0x1400b2a10
test edi, edi
je 0x1400b2a85
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x10]
mov rax, qword [rbx]
xor r8d, r8d
xor edx, edx
mov rcx, rbx
call qword [rax + 0x58]
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rbx, qword [rsp + 0x68]
jmp 0x1400b2a8a
mov rbx, qword [rsp + 0x68]
mov rsi, qword [rsp + 0xa0]
mov rax, qword [rsi]
mov rcx, rsi
call qword [rax + 0x30]
mov rdi, rax
test rax, rax
je 0x1400b2ad2
mov rdx, qword [rdi]
mov rcx, rdi
call qword [rdx + 0xe0]
test eax, eax
je 0x1400b2ac1
mov rax, qword [rdi]
xor edx, edx
mov rcx, rdi
call qword [rax + Ordinal_403]
mov rax, qword [rsi]
mov rcx, rsi
call qword [rax + 0x38]
mov rdi, rax
test rax, rax
jne 0x1400b2aa3
lea r9, [rsp + 0x48]
lea r8, [rsp + 0x58]
mov rdx, qword [rsp + 0x138]
mov rcx, rbx
call fcn.1400c2b40
mov rcx, qword [rsp + 0x48]
mov qword [rsp + reloc.MFC80U.DLL_Ordinal_280], rcx
mov rax, qword [rcx]
call qword [rax + 0x30]
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0xb0]
mov ecx, eax
xor edx, edx
mov eax, 0x25800000
div ecx
mov esi, eax
mov rax, qword [rsp + 0x48]
cmp qword [rsp + 0x58], rax
je 0x1400b2b3d
call fcn.1400a5530
test eax, eax
jne 0x1400b2b3d
mov rcx, qword [rsp + 0x48]
mov rax, qword [rcx]
call qword [rax + 0x68]
cmp rax, rsi
jl 0x1400b2b53
mov rcx, qword [rsp + 0xb8]
mov rax, qword [rcx]
call qword [rax + 0x60]
test eax, eax
je 0x1400b2f8f
mov rax, qword [r12]
mov rcx, r12
call qword [rax + 0x38]
mov rbx, rax
mov rdi, qword [r12]
mov rcx, r12
call qword [rdi + 0x38]
lea rdx, [rsi + rax]
mov rcx, r12
call qword [rdi + 0x100]
mov rdi, qword [r12]
mov rcx, r12
call qword [rdi + 0x40]
sub rax, rsi
mov rdx, rax
mov rcx, r12
call qword [rdi + Ordinal_265]
mov rdi, qword [r12]
mov rcx, r12
call qword [rdi + 0x88]
sub rax, rsi
mov rdx, rax
mov rcx, r12
call qword [rdi + reloc.MFC80U.DLL_Ordinal_336]
mov rdx, qword [r12]
mov rcx, r12
call qword [rdx + 0x28]
mov rdi, qword [rax]
xor edx, edx
mov rcx, rax
call qword [rdi + 0x88]
mov rdx, qword [r12]
mov rcx, r12
call qword [rdx + 0x38]
mov qword [r15 + 0x20], rax
xor edx, edx
mov r8d, 0xa9
lea rcx, [rsp + 0x450]
call sub.ntdll.dll_memset
mov qword [rsp + 0x450], rbx
lea rax, [rsi - 1]
mov qword [rsp + reloc.MFC80U.DLL_Ordinal_1112], rax
mov rcx, qword [rsp + 0x48]
mov rax, qword [rcx]
call qword [rax + 0x28]
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0x40]
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0x60]
test eax, eax
je 0x1400b2c69
mov rax, qword [r12]
mov rcx, r12
call qword [rax + 0x28]
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0x40]
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0x60]
test eax, eax
jne 0x1400b2c69
mov rax, qword [r12]
mov rcx, r12
call qword [rax + 0x28]
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0x40]
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0x58]
test eax, eax
jne 0x1400b2c69
mov dword [rsp + reloc.MFC80U.DLL_Ordinal_1262], 1
jmp 0x1400b2c7b
mov rcx, qword [rsp + 0x48]
mov rax, qword [rcx]
call qword [rax + 0x48]
mov dword [rsp + reloc.MFC80U.DLL_Ordinal_1262], eax
mov dword [rsp + Ordinal_1137], 1
mov rcx, qword [rsp + 0x48]
mov rax, qword [rcx]
call qword [rax + 0xd8]
mov dword [rsp + 0x466], eax
mov dword [rsp + 0x462], 1
mov word [rsp + 0x460], 0x2a
mov rax, qword [rbp]
mov rcx, rbp
call qword [rax + 0x30]
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0x60]
test eax, eax
je 0x1400b2cea
mov rax, qword [r12]
mov rcx, r12
call qword [rax + 0x30]
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0x60]
test eax, eax
jne 0x1400b2cea
mov word [rsp + 0x4f2], 8
jmp 0x1400b2cfd
mov rcx, qword [rsp + 0x48]
mov rax, qword [rcx]
call qword [rax + 0x60]
mov word [rsp + 0x4f2], ax
mov rcx, qword [rsp + 0x48]
mov rax, qword [rcx]
call qword [rax + 0x210]
mov dword [rsp + 0x4f4], eax
mov rcx, qword [rsp + 0x48]
mov rax, qword [rcx]
call qword [rax + 0x78]
mov byte [rsp + 0x4f8], al
mov rcx, qword [rsp + 0x48]
mov rax, qword [rcx]
call qword [rax + 0x58]
mov rdx, rax
lea rcx, [rsp + reloc.MFC80U.DLL_Ordinal_1134]
call qword [sym.imp.MSVCR80.dll__swprintf]
mov rbx, qword [rsp + 0xa0]
mov rdi, qword [rbx]
mov rcx, rbx
call qword [rdi + 0x40]
mov rdx, rax
mov rcx, rbx
call qword [rdi + 8]
mov rcx, rax
mov qword [rsp + 0x108], rax
mov rax, qword [rax]
lea r8, [rsp + 0x90]
lea rdx, [rsp + 0x450]
call qword [rax + 0x48]
mov rdx, qword [rsp + 0x90]
mov rdi, qword [rdx]
mov rcx, qword [rsp + 0x48]
mov rdx, qword [rcx]
call qword [rdx + 0x68]
mov rdx, rax
mov rcx, qword [rsp + 0x90]
call qword [rdi + 0x130]
mov rdx, qword [r12]
mov rcx, r12
call qword [rdx + 0x28]
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0x40]
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0x60]
test eax, eax
je 0x1400b2fa1
mov rcx, qword [rsp + 0x90]
mov rax, qword [rcx]
call qword [rax + 0x18]
mov rdi, rax
mov rcx, qword [rsp + 0x48]
mov rdx, qword [rcx]
call qword [rdx + 0x18]
mov rbx, rax
xor edx, edx
mov r8d, 0x17a
lea rcx, [rsp + 0x500]
call sub.ntdll.dll_memset
lea rcx, [rsp + 0x500]
mov rdx, rdi
mov r8d, 0x17a
call sub.ntdll.dll_memcpy
mov rcx, qword [rsp + 0x48]
mov rdx, qword [rcx]
call qword [rdx + 0x30]
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0x60]
test eax, eax
je 0x1400b2e74
mov eax, dword [rbx + 0x15a]
mov dword [rsp + 0x65a], eax
movzx eax, word [rbx + 0x15e]
mov word [rsp + Ordinal_1635], ax
movzx eax, word [rbx + 0x160]
mov word [rsp + Ordinal_1635], ax
mov rax, qword [rbx + 0x162]
mov qword [rsp + Ordinal_1635], rax
mov eax, dword [rbx + 0xf2]
mov dword [rsp + 0x5f2], eax
jmp 0x1400b2f64
mov rcx, qword [rsp + 0x48]
mov rax, qword [rcx]
call qword [rax + 0x30]
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0x58]
test eax, eax
jne 0x1400b2f64
mov byte [rsp + reloc.MFC80U.DLL_Ordinal_4048], 0x28
mov byte [rsp + reloc.MFC80U.DLL_Ordinal_4049], 0x73
mov byte [rsp + 0xfd2], 0x2a
mov byte [rsp + 0xfd3], 0xc1
mov byte [rsp + 0xfd4], 0x1f
mov byte [rsp + Ordinal_4060], 0xf8
mov byte [rsp + Ordinal_4061], 0xd2
mov byte [rsp + Ordinal_4061], 0x11
mov byte [rsp + Ordinal_4061], 0xba
mov byte [rsp + Ordinal_4061], 0x4b
mov byte [rsp + Ordinal_4061], al
mov byte [rsp + Ordinal_4061], 0xa0
mov byte [rsp + reloc.MFC80U.DLL_Ordinal_4060], 0xc9
mov byte [rsp + reloc.MFC80U.DLL_Ordinal_4061], 0x3e
mov byte [rsp + Ordinal_4069], 0xc9
mov byte [rsp + Ordinal_4069], 0x3b
lea rdx, [rsp + 0x65a]
lea rcx, [rsp + reloc.MFC80U.DLL_Ordinal_4048]
mov rax, qword [rcx]
mov qword [rdx], rax
mov rax, qword [rcx + 8]
mov qword [rdx + 8], rax
mov dword [rsp + Ordinal_1532], 1
mov rcx, qword [rsp + 0x90]
mov rax, qword [rcx]
call qword [rax + 0x38]
mov qword [rsp + Ordinal_1532], rax
mov rcx, qword [rsp + 0x90]
mov rax, qword [rcx]
call qword [rax + 0x40]
mov qword [rsp + 0x602], rax
mov rcx, qword [rsp + 0x90]
mov rax, qword [rcx]
lea rdx, [rsp + 0x500]
call qword [rax + 0x20]
mov rcx, qword [rsp + 0x90]
mov rax, qword [rcx]
xor edx, edx
call qword [rax + Ordinal_277]
jmp 0x1400b2fa1
mov rax, qword [r12]
mov edx, 1
mov rcx, r12
call qword [rax + Ordinal_403]
mov rax, qword [rsp + 0x48]
cmp qword [rsp + 0x58], rax
je 0x1400b3102
call fcn.1400a5530
test eax, eax
jne 0x1400b3102
mov rcx, qword [rsp + 0x48]
mov rax, qword [rcx]
call qword [rax + 0x68]
cmp rax, rsi
jl 0x1400b3102
mov dword [rsp + 0xf0], 1
jmp 0x1400b3102
call fcn.140049400
mov rbp, rax
mov rdx, qword [r15 + 0x30]
cmp rdx, 0xffffffffffffffff
je 0x1400b30ef
mov rax, qword [rax]
mov rcx, rbp
call qword [rax + 0x10]
mov qword [r15 + 0x30], 0xffffffffffffffff
mov rdi, qword [rsp + 0x60]
mov rdx, qword [rdi]
mov rcx, rdi
call qword [rdx + 0x30]
mov rbx, rax
mov rsi, qword [rbp]
mov rdx, qword [rdi]
mov rcx, rdi
call qword [rdx + 0x38]
mov rdi, rax
mov rdx, qword [rbx]
mov rcx, rbx
call qword [rdx + 0x50]
mov r8d, eax
mov r9, rdi
lea rdx, [r15 + 0x30]
mov rcx, rbp
call qword [rsi]
test eax, eax
jne 0x1400b30f6
mov rdi, qword [rsp + 0x60]
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + 0x30]
mov rbx, rax
mov rsi, qword [rbp]
mov rdx, qword [rdi]
mov rcx, rdi
call qword [rdx + 0x38]
mov rdi, rax
mov rdx, qword [rbx]
mov rcx, rbx
call qword [rdx + 0x50]
mov edx, eax
mov r8, rdi
mov rcx, rbp
call qword [rsi + 0x30]
mov rdi, qword [rsp + 0x60]
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + 0x30]
mov rbx, rax
mov rsi, qword [rbp]
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + 0x38]
mov rdi, rax
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x50]
mov r8d, eax
mov r9, rdi
lea rdx, [r15 + 0x30]
mov rcx, rbp
call qword [rsi]
test eax, eax
jne 0x1400b30fd
call fcn.140049470
mov rdi, rax
mov rbx, qword [rax]
mov edx, reloc.MFC80U.DLL_Ordinal_4978
lea rcx, str...optcore.cpp
call fcn.1400a0fc0
mov r8, rax
lea rdx, str._s:_Lock_volume_failed.
mov rcx, rdi
call qword [rbx + 0x10]
mov rbp, qword [rsp + 0x60]
jmp 0x1400b3102
mov rbp, qword [rsp + 0x60]
jmp 0x1400b3102
mov rbp, qword [rsp + 0x60]
jmp 0x1400b3102
mov rbp, qword [rsp + 0x60]
movsxd rsi, dword [r15 + 0x28]
xor edi, edi
mov dword [rsp + 0x40], edi
mov rdx, qword [rsp + 0x88]
mov rax, qword [rdx]
mov rcx, rdx
call qword [rax + 0x40]
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0x28]
mov dword [rsp + 0xc8], eax
mov rax, qword [rsp + 0xa0]
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0x40]
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0x28]
mov dword [rsp + 0x98], eax
mov rdx, qword [r12]
mov rcx, r12
call qword [rdx + 0x48]
mov ebx, edi
cmp dword [r14 + 8], ebx
je 0x1400b3180
cmp dword [r14 + 4], ebx
je 0x1400b3180
mov edx, dword [r15 + 0x14]
mov rcx, qword [rsp + 0x68]
call fcn.1400aa070
mov dword [rsp + 0x98], eax
lea ebx, [rdi + 1]
jmp 0x1400b31c6
cmp dword [rsp + 0x98], ebx
jne 0x1400b31c6
mov rdi, qword [rsp + 0xb8]
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + 0x60]
test eax, eax
jne 0x1400b31c6
mov edx, dword [r15 + 0x14]
mov rcx, qword [rsp + 0x68]
call fcn.1400aa2d0
mov edx, eax
mov dword [rsp + 0x98], eax
mov ebx, 1
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + 0xc8]
mov rax, qword [rbp]
mov rcx, rbp
call qword [rax + 0x38]
mov qword [rsp + 0x1d0], rax
mov qword [rsp + 0xe0], rax
mov rdx, qword [r12]
mov rcx, r12
call qword [rdx + 0x38]
mov qword [rsp + 0xa8], rax
mov qword [rsp + 0x1c0], rax
mov eax, dword [rsp + 0xc8]
mov dword [rsp + 0x12c], eax
lea rdx, [rsp + reloc.MFC80U.DLL_Ordinal_768]
mov rcx, qword [r15]
mov qword [rdx], rcx
mov rcx, qword [r15 + 8]
mov qword [rdx + 8], rcx
mov rcx, qword [r15 + 0x10]
mov qword [rdx + 0x10], rcx
mov rcx, qword [r15 + 0x18]
mov qword [rdx + 0x18], rcx
mov rcx, qword [r15 + 0x20]
mov qword [rdx + 0x20], rcx
mov rax, qword [r15 + 0x28]
mov qword [rdx + 0x28], rax
mov rax, qword [r15 + 0x30]
mov qword [rdx + 0x30], rax
mov rax, qword [r15 + 0x38]
mov qword [rdx + 0x38], rax
mov rax, qword [r15 + 0x40]
mov qword [rdx + 0x40], rax
mov eax, dword [r15 + 0x10]
mov dword [rsp + 0x80], eax
mov eax, dword [r15 + 0x14]
mov dword [rsp + 0x7c], eax
mov rax, qword [r12]
mov rcx, r12
call qword [rax + 0x40]
mov rdi, rax
mov rdx, qword [rbp]
mov rcx, rbp
call qword [rdx + 0x68]
cmp rdi, rax
jg 0x1400b3386
call fcn.140049470
mov rbx, rax
xor edx, edx
mov r8d, 0x80
lea rsi, [0x1404342a0]
mov rcx, rsi
call sub.ntdll.dll_memset
mov edx, 0x5c
lea rcx, str...optcore.cpp
call qword [sym.imp.ntdll.dll_strrchr]
mov rdi, rax
test rax, rax
je 0x1400b3358
mov byte [rsp + Ordinal_4069], 0
xor eax, eax
mov qword [rsp + Ordinal_4069], rax
mov word [rsp + 0xfe9], ax
mov byte [rsp + 0xfeb], al
mov r8d, 0x13a0
lea rdx, [0x1402dfd08]
lea rcx, [rsp + 0xfe0]
call qword [sym.imp.ntdll.dll_sprintf]
lea rdx, [rdi + 1]
mov rcx, rsi
sub rcx, rdx
nop
movzx eax, byte [rdx]
mov byte [rcx + rdx], al
add rdx, 1
test al, al
jne 0x1400b3310
mov rdi, rsi
xor eax, eax
or rcx, 0xffffffffffffffff
repne scasb al, byte [rdi]
lea rdx, [rsp + 0xfe0]
xor ecx, ecx
nop
nop
nop
nop
movzx eax, byte [rdx + rcx]
mov byte [rdi + rcx - 1], al
add rcx, 1
test al, al
jne 0x1400b3340
mov qword [rsp + 0xe8], rsi
mov rax, qword [rbx]
mov r8, qword [rsp + 0xe8]
lea rdx, str._s:_Error_Parameters.
mov rcx, rbx
call qword [rax + 0x10]
mov rax, qword [r13]
mov edx, 0xd6
mov rcx, r13
call qword [rax + 0x40]
xor eax, eax
jmp 0x1400b6ee0
mov rax, qword [r12]
mov rcx, r12
call qword [rax + 0x38]
test rax, rax
jne 0x1400b3496
call fcn.140049470
mov rbx, rax
xor edx, edx
mov r8d, 0x80
lea rsi, [0x1404342a0]
mov rcx, rsi
call sub.ntdll.dll_memset
mov edx, 0x5c
lea rcx, str...optcore.cpp
call qword [sym.imp.ntdll.dll_strrchr]
mov rdi, rax
test rax, rax
je 0x1400b3468
mov byte [rsp + Ordinal_4069], 0
xor eax, eax
mov qword [rsp + Ordinal_4069], rax
mov word [rsp + 0xfe9], ax
mov byte [rsp + 0xfeb], al
mov r8d, 0x13a7
lea rdx, [0x1402dfd08]
lea rcx, [rsp + 0xfe0]
call qword [sym.imp.ntdll.dll_sprintf]
lea rdx, [rdi + 1]
mov rcx, rsi
sub rcx, rdx
nop
movzx eax, byte [rdx]
mov byte [rcx + rdx], al
add rdx, 1
test al, al
jne 0x1400b3420
mov rdi, rsi
xor eax, eax
or rcx, 0xffffffffffffffff
repne scasb al, byte [rdi]
lea rdx, [rsp + 0xfe0]
xor ecx, ecx
nop
nop
nop
nop
movzx eax, byte [rdx + rcx]
mov byte [rdi + rcx - 1], al
add rcx, 1
test al, al
jne 0x1400b3450
mov qword [rsp + 0xe8], rsi
mov rax, qword [rbx]
mov r8, qword [rsp + 0xe8]
lea rdx, str._s:_Invalid_Params.
mov rcx, rbx
call qword [rax + 0x10]
mov rax, qword [r13]
mov edx, 0x20
mov rcx, r13
call qword [rax + 0x40]
xor eax, eax
jmp 0x1400b6ee0
mov rax, qword [r12]
mov rcx, r12
call qword [rax + 0x38]
mov qword [rsp + reloc.MFC80U.DLL_Ordinal_320], rax
mov rax, qword [r12]
mov rdx, qword [rsp + 0xa0]
mov rcx, r12
call qword [rax + 8]
mov r14, rax
mov rdi, qword [rax]
mov rdx, qword [r12]
mov rcx, r12
call qword [rdx + reloc.MFC80U.DLL_Ordinal_512]
mov edx, eax
mov rcx, r14
call qword [rdi + 0x1e0]
mov rdi, qword [r14]
mov rdx, qword [r12]
mov rcx, r12
call qword [rdx + 0x1f8]
mov edx, eax
mov rcx, r14
call qword [rdi + 0x1d8]
xor edi, edi
mov dword [rsp + 0x50], edi
mov qword [rsp + 0x1e0], rsi
movsxd rax, ebx
mov qword [rsp + 0x1b8], rax
nop
mov rax, qword [r12]
mov rcx, r12
call qword [rax + 0x48]
mov esi, eax
cmp edi, 1
jne 0x1400b3802
mov rcx, qword [rsp + 0x90]
test rcx, rcx
je 0x1400b3802
mov rdx, qword [rcx]
call qword [rdx + 0x48]
cmp eax, edi
jne 0x1400b3802
mov rcx, qword [rsp + 0x88]
mov rax, qword [rcx]
call qword [rax + 0x40]
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0x60]
test eax, eax
je 0x1400b3802
mov rcx, qword [rsp + 0xa0]
mov rax, qword [rcx]
call qword [rax + 0x40]
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0x60]
test eax, eax
jne 0x1400b3802
mov qword [rsp + 0xc0], 0xffffffffffffffff
call fcn.140049400
mov rbp, rax
mov rdx, qword [r12]
mov rcx, r12
call qword [rdx + 0x28]
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0x40]
mov rbx, rax
mov rsi, qword [rbp]
mov rdx, qword [r12]
mov rcx, r12
call qword [rdx + 0x38]
mov rdi, rax
mov rdx, qword [rbx]
mov rcx, rbx
call qword [rdx + 0x50]
mov r8d, eax
mov r9, rdi
lea rdx, [rsp + 0xc0]
mov rcx, rbp
call qword [rsi]
test eax, eax
jne 0x1400b365b
mov rax, qword [r12]
mov rcx, r12
call qword [rax + 0x28]
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0x40]
mov rbx, rax
mov rsi, qword [rbp]
mov rdx, qword [r12]
mov rcx, r12
call qword [rdx + 0x38]
mov rdi, rax
mov rdx, qword [rbx]
mov rcx, rbx
call qword [rdx + 0x50]
mov edx, eax
mov r8, rdi
mov rcx, rbp
call qword [rsi + 0x30]
mov rdx, qword [r12]
mov rcx, r12
call qword [rdx + 0x28]
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0x40]
mov rbx, rax
mov rsi, qword [rbp]
mov rdx, qword [r12]
mov rcx, r12
call qword [rdx + 0x38]
mov rdi, rax
mov rdx, qword [rbx]
mov rcx, rbx
call qword [rdx + 0x50]
mov r8d, eax
mov r9, rdi
lea rdx, [rsp + 0xc0]
mov rcx, rbp
call qword [rsi]
mov rax, qword [r12]
mov rcx, r12
call qword [rax + 0x28]
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0x40]
mov rdi, qword [rax]
mov qword [rsp + 0x28], 0
lea rcx, [rsp + 0x1e8]
mov qword [rsp + 0x20], rcx
lea r9, [rsp + reloc.MFC80U.DLL_Ordinal_296]
lea r8, [rsp + 0x134]
lea rdx, [rsp + reloc.MFC80U.DLL_Ordinal_744]
mov rcx, rax
call qword [rdi + 0x30]
xor edx, edx
mov r8d, 0xa8
lea rcx, [rsp + 0x3a0]
call sub.ntdll.dll_memset
mov rdx, qword [r12]
mov rcx, r12
call qword [rdx + 0x30]
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0x50]
mov dword [rsp + 0x3a0], eax
mov rax, qword [r12]
mov rcx, r12
call qword [rax + 0x60]
mov word [rsp + Ordinal_1095], ax
mov rax, qword [r12]
mov rcx, r12
call qword [rax + 0x70]
mov qword [rsp + 0x3b8], rax
mov rax, qword [r12]
mov rcx, r12
call qword [rax + 0x38]
mov qword [rsp + 0x3a8], rax
mov rax, qword [r12]
mov rcx, r12
call qword [rax + 0x88]
mov qword [rsp + reloc.MFC80U.DLL_Ordinal_944], rax
mov rax, qword [r12]
mov rcx, r12
call qword [rax + 0x58]
lea rcx, [rsp + 0x3c0]
mov rdx, rax
mov r8d, 0x80
call sub.ntdll.dll_memcpy
movzx edx, word [rsp + 0x134]
mov word [rsp + Ordinal_1095], dx
movzx eax, word [rsp + reloc.MFC80U.DLL_Ordinal_296]
mov word [rsp + Ordinal_1095], ax
call fcn.1400d6a30
mov rdi, qword [rax]
mov r8, r13
lea rdx, [rsp + 0x3a0]
mov rcx, rax
call qword [rdi + 0x40]
test eax, eax
je 0x1400b37cf
mov rdx, r12
mov rsi, qword [rsp + 0x68]
mov rcx, rsi
call fcn.1400c3220
mov rdx, qword [r12]
mov rcx, r12
call qword [rdx + 0x28]
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0x40]
mov rdi, rax
mov rdx, qword [r12]
mov rcx, r12
call qword [rdx + 0x38]
mov rbx, rax
mov rdx, qword [rdi]
mov rcx, rdi
call qword [rdx + 0x50]
mov r8d, eax
mov qword [rsp + 0x20], r13
mov r9, rbx
mov dx, 0x2a
mov rcx, rsi
call fcn.1400c13a0
mov rax, qword [rbp]
mov rdx, qword [rsp + 0xc0]
mov rcx, rbp
call qword [rax + 0x10]
mov rdx, qword [r12]
mov rcx, r12
call qword [rdx + 0x28]
mov rdi, qword [rax]
xor r8d, r8d
xor edx, edx
mov rcx, rax
call qword [rdi + 0x58]
mov esi, dword [rsp + 0x40]
jmp 0x1400b4216
cmp esi, 4
jne 0x1400b390f
mov rax, qword [r13]
lea edx, [rsi + 0x5c]
mov rcx, r13
call qword [rax + 0x50]
call sub.ExFAT.dll_Ordinal_2
mov rbx, rax
mov rdx, qword [r12]
mov rcx, r12
call qword [rdx + 0x40]
mov rdi, rax
mov rdx, qword [rbp]
mov rcx, rbp
call qword [rdx + 0x40]
cmp rdi, rax
jne 0x1400b420c
xor edx, edx
lea r8d, [rsi + 0x4c]
lea rcx, [rsp + 0x290]
call sub.ntdll.dll_memset
mov eax, dword [rsp + 0x80]
mov dword [rsp + 0x298], eax
mov eax, dword [rsp + 0x7c]
mov dword [rsp + 0x2b0], eax
mov rax, qword [rsp + 0xe0]
mov qword [rsp + reloc.MFC80U.DLL_Ordinal_672], rax
mov rax, qword [rsp + 0xa8]
mov qword [rsp + 0x2b8], rax
mov rax, qword [rbp]
mov rcx, rbp
call qword [rax + 0x40]
mov qword [rsp + 0x2c8], rax
mov rax, qword [rbp]
mov rcx, rbp
call qword [rax + 0x40]
mov qword [rsp + 0x2d0], rax
mov rax, qword [rbp]
mov rcx, rbp
call qword [rax + 0x68]
mov qword [rsp + 0x2a8], rax
mov qword [rsp + 0x290], 0xffffffffffffffff
mov rax, qword [r12]
mov rcx, r12
call qword [rax + 0xc0]
mov dword [rsp + 0x2c0], eax
mov dword [rsp + 0x2d8], 1
mov rax, qword [rbx]
xor r9d, r9d
mov r8, r13
lea rdx, [rsp + 0x290]
mov rcx, rbx
call qword [rax + 0x58]
mov esi, eax
mov dword [rsp + 0x40], eax
jmp 0x1400b4216
cmp qword [rsp + 0x1e0], 0
jne 0x1400b411d
cmp esi, 5
je 0x1400b411d
cmp esi, 0xc
je 0x1400b411d
cmp esi, 0xa
je 0x1400b411d
cmp esi, 6
je 0x1400b411d
cmp esi, 7
je 0x1400b411d
cmp esi, 8
je 0x1400b411d
cmp esi, 9
je 0x1400b411d
cmp esi, 1
jne 0x1400b3d56
mov rax, qword [r13]
lea edx, [rsi + 0x5f]
mov rcx, r13
call qword [rax + 0x50]
call fcn.1400d6a30
mov rbx, rax
mov rdx, qword [r12]
mov rcx, r12
call qword [rdx + 0x40]
mov rdi, rax
mov rdx, qword [rbp]
mov rcx, rbp
call qword [rdx + 0x40]
cmp rdi, rax
jl 0x1400b3bda
xor edx, edx
lea r8d, [rsi + 0x4f]
lea rcx, [rsp + 0x1f0]
call sub.ntdll.dll_memset
mov eax, dword [rsp + 0x80]
mov dword [rsp + 0x1f0], eax
mov eax, dword [rsp + 0x7c]
mov dword [rsp + 0x208], eax
mov rax, qword [rsp + 0xe0]
mov qword [rsp + 0x1f8], rax
mov rax, qword [rsp + 0xa8]
mov qword [rsp + 0x210], rax
mov rax, qword [rbp]
mov rcx, rbp
call qword [rax + 0x40]
mov qword [rsp + 0x228], rax
mov rax, qword [rbp]
mov rcx, rbp
call qword [rax + 0x40]
mov qword [rsp + 0x230], rax
mov rax, qword [rbp]
mov rcx, rbp
call qword [rax + 0x68]
mov qword [rsp + reloc.MFC80U.DLL_Ordinal_512], rax
mov rax, qword [r12]
mov rcx, r12
call qword [rax + 0x60]
movzx edx, ax
mov dword [rsp + 0x220], edx
mov rax, qword [rbp]
mov rcx, rbp
call qword [rax + 0x60]
movzx ecx, ax
mov rax, qword [rsp + 0x228]
cqo
idiv rcx
mov qword [rsp + 0x218], rax
mov rax, qword [r12]
mov rcx, r12
call qword [rax + 0xc0]
mov dword [rsp + 0x224], eax
mov dword [rsp + reloc.MFC80U.DLL_Ordinal_568], esi
mov rax, qword [rbx]
xor r9d, r9d
mov r8, r13
lea rdx, [rsp + 0x1f0]
mov rcx, rbx
call qword [rax + 0x70]
mov esi, eax
mov dword [rsp + 0x40], eax
test eax, eax
je 0x1400b4247
mov rax, qword [r12]
mov rcx, r12
call qword [rax + 0x40]
cmp rax, qword [rsp + 0x228]
jle 0x1400b3d24
xor edx, edx
mov r8d, Ordinal_332
lea rcx, [rsp + 0x500]
call sub.ntdll.dll_memset
mov edx, dword [r15 + 0x14]
mov dword [rsp + Ordinal_1282], edx
mov rax, qword [r15 + 0x20]
mov qword [rsp + reloc.MFC80U.DLL_Ordinal_1288], rax
mov rax, qword [rbp]
mov rcx, rbp
call qword [rax + 0x88]
mov qword [rsp + 0x510], rax
mov rax, qword [rbp]
mov rcx, rbp
call qword [rax + 0x40]
mov qword [rsp + Ordinal_1311], rax
mov rax, qword [r12]
mov rcx, r12
call qword [rax + 0x88]
mov qword [rsp + Ordinal_1315], rax
mov rax, qword [r12]
mov rcx, r12
call qword [rax + 0x60]
mov word [rsp + 0x52c], ax
mov rax, qword [r12]
mov rcx, r12
call qword [rax + 0xc0]
mov dword [rsp + 0x528], eax
mov rax, qword [r12]
mov rcx, r12
call qword [rax + 0x30]
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0xa0]
mov word [rsp + 0x530], ax
mov rax, qword [r12]
mov rcx, r12
call qword [rax + 0x30]
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0xa8]
mov word [rsp + 0x52e], ax
mov rax, qword [rbp]
mov rcx, rbp
call qword [rax + 0x58]
mov rdi, rax
mov rdx, qword [rbp]
mov rcx, rbp
call qword [rdx + 0x50]
movzx r8d, ax
mov r9, rdi
lea rdx, str.__c:__s_
lea rcx, [rsp + 0x532]
call qword [sym.imp.MSVCR80.dll__swprintf]
mov rax, qword [rbx]
mov dword [rsp + 0x20], 0
xor r9d, r9d
mov r8, r13
lea rdx, [rsp + 0x500]
mov rcx, rbx
call qword [rax + 0x68]
mov esi, eax
mov dword [rsp + 0x40], eax
mov rbp, qword [rsp + 0xa8]
jmp 0x1400b3d2c
xor edx, edx
mov r8d, Ordinal_332
lea rcx, [rsp + 0x680]
call sub.ntdll.dll_memset
mov edx, dword [r15 + 0x10]
mov dword [rsp + Ordinal_1665], edx
mov rax, qword [r15 + 0x18]
mov qword [rsp + 0x688], rax
mov rax, qword [r12]
mov rcx, r12
call qword [rax + 0x60]
mov word [rsp + 0x6ac], ax
mov rax, qword [rbp]
mov rcx, rbp
call qword [rax + 0x88]
mov qword [rsp + Ordinal_1686], rax
mov rax, qword [rbp]
mov rcx, rbp
call qword [rax + 0x40]
mov qword [rsp + 0x698], rax
mov rax, qword [r12]
mov rcx, r12
call qword [rax + 0x88]
mov qword [rsp + Ordinal_1701], rax
mov rax, qword [r12]
mov rcx, r12
call qword [rax + 0xc0]
mov dword [rsp + 0x6a8], eax
mov rax, qword [r12]
mov rcx, r12
call qword [rax + 0x30]
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0xa0]
mov word [rsp + 0x6b0], ax
mov rax, qword [r12]
mov rcx, r12
call qword [rax + 0x30]
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0xa8]
mov word [rsp + 0x6ae], ax
mov rax, qword [rbp]
mov rcx, rbp
call qword [rax + 0x58]
mov rdi, rax
mov rdx, qword [rbp]
mov rcx, rbp
call qword [rdx + 0x50]
movzx r8d, ax
mov r9, rdi
lea rdx, str.__c:__s_
lea rcx, [rsp + 0x6b2]
call qword [sym.imp.MSVCR80.dll__swprintf]
mov eax, dword [rsp + 0x7c]
mov dword [rsp + Ordinal_1973], eax
mov rbp, qword [rsp + 0xa8]
mov qword [rsp + Ordinal_1980], rbp
mov dword [rsp + Ordinal_1986], 1
mov rax, qword [rbx]
mov dword [rsp + 0x20], 0
xor r9d, r9d
mov r8, r13
lea rdx, [rsp + 0x680]
mov rcx, rbx
call qword [rax + 0x68]
mov esi, eax
mov dword [rsp + 0x40], eax
jmp 0x1400b3d2c
mov rbp, qword [rsp + 0xa8]
test esi, esi
je 0x1400b4247
mov rdi, qword [rbx]
mov rax, qword [r12]
mov rcx, r12
call qword [rax + 0x58]
mov r9, rax
mov r8, rbp
mov edx, dword [rsp + 0x7c]
mov rcx, rbx
call qword [rdi + 0x50]
jmp 0x1400b4216
cmp esi, 2
je 0x1400b3d68
cmp esi, 3
je 0x1400b3d68
test esi, esi
jne 0x1400b4212
mov rax, qword [r13]
mov edx, 0x60
mov rcx, r13
call qword [rax + 0x50]
call fcn.140116720
mov r13, rax
mov rdx, qword [r12]
mov rcx, r12
call qword [rdx + 0x40]
mov rbp, rax
mov rax, qword [rsp + 0x60]
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0x40]
sub rbp, rax
mov rdx, qword [r12]
mov rcx, r12
call qword [rdx + 0x30]
mov rdi, rax
mov rdx, qword [r12]
mov rcx, r12
call qword [rdx + 0x30]
mov rbx, rax
mov rdx, qword [rdi]
mov rcx, rdi
call qword [rdx + 0xa0]
mov edi, eax
mov rdx, qword [rbx]
mov rcx, rbx
call qword [rdx + 0xa8]
imul edi, eax
mov eax, edi
test rbp, rbp
js 0x1400b3de4
cmp rbp, rax
jl 0x1400b3ff9
cmp esi, 2
je 0x1400b3ff9
cmp esi, 3
je 0x1400b3ff9
test esi, esi
jne 0x1400b40e9
mov rcx, qword [rsp + 0x48]
test rcx, rcx
je 0x1400b3ef2
cmp qword [rsp + 0x58], 0
je 0x1400b3ef2
mov rax, qword [rcx]
call qword [rax + 0x30]
mov rbx, rax
mov rcx, qword [rsp + 0x58]
mov rdx, qword [rcx]
call qword [rdx + 0x30]
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0x50]
mov edi, eax
mov rdx, qword [rbx]
mov rcx, rbx
call qword [rdx + 0x50]
cmp eax, edi
jne 0x1400b3e9d
mov rcx, qword [rsp + 0x58]
mov rax, qword [rcx]
call qword [rax + 0x38]
mov rdi, rax
mov rcx, qword [rsp + 0x48]
mov rdx, qword [rcx]
call qword [rdx + 0x38]
cmp rax, rdi
jne 0x1400b3e9d
mov rcx, qword [rsp + 0xb8]
mov rax, qword [rcx]
call qword [rax + 0x60]
test eax, eax
je 0x1400b3e9d
mov rcx, qword [rsp + 0x88]
mov rax, qword [rcx]
call qword [rax + 0x40]
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0x60]
test eax, eax
jne 0x1400b3e9d
mov esi, 1
mov dword [rsp + 0x40], esi
jmp 0x1400b40f5
mov rcx, qword [rsp + 0x48]
mov rax, qword [rcx]
call qword [rax + 0x30]
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0x60]
test eax, eax
jne 0x1400b3ef2
mov rcx, qword [rsp + 0x48]
mov rax, qword [rcx]
call qword [rax + 0x30]
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0x58]
test eax, eax
jne 0x1400b3ef2
mov rax, qword [r12]
mov rcx, r12
call qword [rax + 0x30]
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0x60]
test eax, eax
je 0x1400b3ef2
mov esi, 1
mov dword [rsp + 0x40], esi
jmp 0x1400b40f5
xor eax, eax
mov qword [rsp + 0x170], rax
mov qword [rsp + reloc.MFC80U.DLL_Ordinal_376], rax
mov qword [rsp + 0x180], rax
mov qword [rsp + 0x188], rax
mov qword [rsp + 0x190], rax
mov qword [rsp + 0x198], rax
mov qword [rsp + 0x1a0], rax
mov qword [rsp + reloc.MFC80U.DLL_Ordinal_424], rax
mov eax, dword [rsp + 0x80]
mov dword [rsp + 0x170], eax
mov eax, dword [rsp + 0x7c]
mov dword [rsp + 0x198], eax
mov rax, qword [rsp + 0xe0]
mov qword [rsp + reloc.MFC80U.DLL_Ordinal_376], rax
mov rax, qword [rsp + 0xa8]
mov qword [rsp + 0x1a0], rax
mov rdi, qword [rsp + 0x60]
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + 0x60]
mov word [rsp + 0x190], ax
mov rax, qword [r12]
mov rcx, r12
call qword [rax + 0x60]
mov word [rsp + 0x192], ax
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + 0x40]
mov qword [rsp + 0x180], rax
mov rax, qword [r12]
mov rcx, r12
call qword [rax + 0x40]
mov qword [rsp + 0x188], rax
mov rax, qword [r12]
mov rcx, r12
call qword [rax + 0x48]
mov dword [rsp + 0x194], eax
mov dword [rsp + reloc.MFC80U.DLL_Ordinal_424], 1
mov rax, qword [r13]
xor r9d, r9d
mov r8, qword [rsp + 0x70]
lea rdx, [rsp + 0x170]
mov rcx, r13
call qword [rax + 0x68]
mov esi, eax
mov dword [rsp + 0x40], eax
jmp 0x1400b40ed
mov rax, qword [r12]
mov rcx, r12
call qword [rax + 0x40]
mov rdi, rax
mov rbx, qword [rsp + 0x60]
mov rdx, qword [rbx]
mov rcx, rbx
call qword [rdx + 0x40]
cmp rdi, rax
jl 0x1400b6b09
xor edx, edx
lea r8d, [rdx + 0x50]
lea rcx, [rsp + 0x350]
call sub.ntdll.dll_memset
mov qword [rsp + 0x350], 0xffffffffffffffff
mov eax, dword [rsp + 0x80]
mov dword [rsp + 0x358], eax
mov eax, dword [rsp + 0x7c]
mov dword [rsp + 0x370], eax
mov rax, qword [rsp + 0xe0]
mov qword [rsp + 0x360], rax
mov rax, qword [rsp + 0xa8]
mov qword [rsp + 0x378], rax
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x40]
mov qword [rsp + 0x388], rax
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x40]
mov qword [rsp + 0x390], rax
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x68]
mov qword [rsp + 0x368], rax
mov rax, qword [r12]
mov rcx, r12
call qword [rax + 0xc0]
mov dword [rsp + 0x380], eax
mov dword [rsp + 0x398], 1
mov rax, qword [r13]
xor r9d, r9d
mov r8, qword [rsp + 0x70]
lea rdx, [rsp + 0x350]
mov rcx, r13
call qword [rax + 0x60]
mov esi, eax
mov dword [rsp + 0x40], eax
jmp 0x1400b40ed
mov esi, dword [rsp + 0x40]
test esi, esi
je 0x1400b423b
mov rdi, qword [r13]
mov rax, qword [r12]
mov rcx, r12
call qword [rax + 0x58]
mov r9, rax
mov r8, qword [rsp + 0xa8]
mov edx, dword [rsp + 0x7c]
mov rcx, r13
call qword [rdi + 0x50]
jmp 0x1400b4216
mov rax, qword [r13]
mov edx, 0x60
mov rcx, r13
call qword [rax + 0x50]
xor edx, edx
mov qword [rsp + 0x350], rdx
mov qword [rsp + 0x358], rdx
mov qword [rsp + 0x360], rdx
mov qword [rsp + 0x368], rdx
mov qword [rsp + 0x370], rdx
mov qword [rsp + 0x378], rdx
mov qword [rsp + 0x380], rdx
mov qword [rsp + 0x350], 0xffffffffffffffff
mov eax, dword [r15 + 0x10]
mov dword [rsp + 0x358], eax
mov eax, dword [r15 + 0x14]
mov dword [rsp + 0x368], eax
mov rax, qword [rsp + 0xa8]
mov qword [rsp + 0x370], rax
mov rax, qword [rbp]
mov rcx, rbp
call qword [rax + 0x88]
mov qword [rsp + 0x360], rax
mov rax, qword [rsp + 0xe0]
mov qword [rsp + 0x380], rax
mov rax, qword [rbp]
mov rcx, rbp
call qword [rax + 0xf0]
mov dword [rsp + 0x378], eax
lea rdx, [rsp + 0x350]
lea rcx, [rsp + 0x3a0]
call fcn.1400d23d0
nop
mov rdx, r13
lea rcx, [rsp + 0x3a0]
call fcn.1400d2660
mov esi, eax
mov dword [rsp + 0x40], eax
lea rcx, [rsp + 0x3a0]
call fcn.140050540
jmp 0x1400b4216
mov esi, dword [rsp + 0x40]
jmp 0x1400b4216
mov esi, dword [rsp + 0x40]
test esi, esi
je 0x1400b4242
mov rax, qword [r12]
mov rcx, r12
call qword [rax + 0x48]
mov r8d, eax
mov rdx, qword [r15 + 0x20]
mov ecx, dword [r15 + 0x14]
call fcn.140095e20
mov r13, qword [rsp + 0x70]
jmp 0x1400b4247
mov r13, qword [rsp + 0x70]
jmp 0x1400b4247
mov r13, qword [rsp + 0x70]
mov r8, r13
mov rdx, r15
mov rsi, qword [rsp + 0x68]
mov rcx, rsi
call fcn.1400c4380
test eax, eax
jne 0x1400b4343
call fcn.140049470
mov rbx, rax
xor edx, edx
mov r8d, 0x80
lea rbp, [0x1404342a0]
mov rcx, rbp
call sub.ntdll.dll_memset
mov edx, 0x5c
lea rcx, str...optcore.cpp
call qword [sym.imp.ntdll.dll_strrchr]
mov rdi, rax
test rax, rax
jne 0x1400b42a3
xor r8d, r8d
jmp 0x1400b4333
mov byte [rsp + Ordinal_4113], 0
xor eax, eax
mov qword [rsp + reloc.MFC80U.DLL_Ordinal_4113], rax
mov word [rsp + Ordinal_4127], ax
mov byte [rsp + Ordinal_4127], al
mov r8d, 0x14ad
lea rdx, [0x1402dfd08]
lea rcx, [rsp + 0x1010]
call qword [sym.imp.ntdll.dll_sprintf]
lea rdx, [rdi + 1]
mov rcx, rbp
sub rcx, rdx
nop
nop
movzx eax, byte [rdx]
mov byte [rcx + rdx], al
add rdx, 1
test al, al
jne 0x1400b42f0
mov rdi, rbp
xor eax, eax
or rcx, 0xffffffffffffffff
repne scasb al, byte [rdi]
lea rdx, [rsp + 0x1010]
xor ecx, ecx
nop
nop
nop
nop
movzx eax, byte [rdx + rcx]
mov byte [rdi + rcx - 1], al
add rcx, 1
test al, al
jne 0x1400b4320
mov r8, rbp
mov rax, qword [rbx]
lea rdx, str._s:_Failed_to_UnlockVolume.
mov rcx, rbx
call qword [rax + 0x10]
mov rax, qword [r13]
mov edx, 4
mov rcx, r13
call qword [rax + 0x50]
cmp dword [rsp + 0x40], 0
je 0x1400b6a02
call fcn.140049500
mov rdi, qword [rax]
lea rdx, str.0036
mov rcx, rax
call qword [rdi]
mov rdi, qword [r13]
mov rdx, rax
mov rcx, r13
call qword [rdi + 0x70]
call fcn.140049500
mov rdi, qword [rax]
lea rdx, str.1209
mov rcx, rax
call qword [rdi]
mov rdi, rax
cmp dword [rsp + 0xf4], 0
je 0x1400b4410
mov rdx, qword [r13]
mov rcx, r13
call qword [rdx + reloc.MFC80U.DLL_Ordinal_376]
mov rdx, rax
lea rcx, [rsp + 0x350]
call qword [sym.imp.MSVCP80.dll_public:_void___cdecl_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::constructor_wchar_t_const____ptr64____ptr64]
nop
mov rdx, rdi
lea rcx, [rsp + 0x350]
call qword [sym.imp.MSVCP80.dll_public:_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t______ptr64___cdecl_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::operator_wchar_t_const____ptr64____ptr64]
lea rdx, [rsp + 0x358]
cmp qword [rsp + 0x370], 8
cmovae rdx, qword [rsp + 0x358]
mov rax, qword [r13]
mov rcx, r13
call qword [rax + Ordinal_369]
nop
lea rcx, [rsp + 0x350]
call qword [sym.imp.MSVCP80.dll_public:_void___cdecl_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void____ptr64]
xor ebp, ebp
mov dword [rsp + 0xf4], ebp
jmp 0x1400b4412
xor ebp, ebp
mov rax, qword [r13]
xor edx, edx
mov rcx, r13
call qword [rax + 0x10]
mov rdx, qword [r12]
mov rcx, r12
call qword [rdx + 0xc0]
test eax, eax
je 0x1400b4457
mov rax, qword [r12]
mov rcx, r12
call qword [rax + 0x48]
mov edi, eax
mov rdx, qword [r12]
mov rcx, r12
call qword [rdx + 0x38]
mov r8, rax
mov r9d, edi
mov edx, dword [r15 + 0x14]
mov rcx, rsi
call fcn.1400a9c30
mov eax, dword [r15 + 0x14]
cmp dword [r15 + 0x10], eax
je 0x1400b44ba
mov rdi, qword [rsp + 0xb8]
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + 0xa8]
mov esi, eax
mov rdx, qword [rdi]
mov rcx, rdi
call qword [rdx + 0xa0]
mov ebx, eax
mov rdx, qword [r12]
mov rcx, r12
call qword [rdx + 0x48]
mov edi, eax
mov rdx, qword [r12]
mov rcx, r12
call qword [rdx + 0x38]
mov r8, rax
mov dword [rsp + 0x28], edi
mov dword [rsp + 0x20], ebx
mov r9d, esi
mov edx, dword [r15 + 0x14]
mov rsi, qword [rsp + 0x68]
mov rcx, rsi
call fcn.1400a9e40
mov rax, qword [r12]
mov rcx, r12
call qword [rax + 0xe0]
test eax, eax
je 0x1400b44ed
mov rcx, qword [rsp + 0xb8]
mov rax, qword [rcx]
call qword [rax + 0x60]
test eax, eax
jne 0x1400b44ed
mov r8d, dword [r15 + 0x14]
mov edx, dword [r15 + 0x10]
mov rcx, rsi
call fcn.1400aa670
mov rbx, qword [rsp + 0xa0]
mov rax, qword [rbx]
xor r8d, r8d
xor edx, edx
mov rcx, rbx
call qword [rax + 0x58]
test eax, eax
je 0x1400b6d13
mov ecx, 0x9c4
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rdx, qword [r12]
mov rcx, r12
call qword [rdx + 0x38]
mov rdi, rax
mov rdx, qword [r12]
mov rcx, r12
call qword [rdx + 0x50]
movzx edx, ax
mov qword [rsp + 0x20], r13
mov r9, rdi
mov r8d, dword [r15 + 0x14]
mov rcx, rsi
call fcn.1400c13a0
test eax, eax
jne 0x1400b4638
call fcn.140049470
mov rbx, rax
xor edx, edx
mov r8d, 0x80
lea rcx, [0x1404342a0]
call sub.ntdll.dll_memset
mov edx, 0x5c
lea rcx, str...optcore.cpp
call qword [sym.imp.ntdll.dll_strrchr]
mov rdi, rax
test rax, rax
jne 0x1400b458a
mov r8, rbp
jmp 0x1400b4620
mov byte [rsp + 0x1000], 0
xor eax, eax
mov qword [rsp + 0x1001], rax
mov word [rsp + Ordinal_4109], ax
mov byte [rsp + Ordinal_4109], al
mov r8d, 0x14e2
lea rdx, [0x1402dfd08]
lea rcx, [rsp + 0x1000]
call qword [sym.imp.ntdll.dll_sprintf]
lea rdx, [rdi + 1]
lea r8, [0x1404342a0]
mov rcx, r8
sub rcx, rdx
nop
nop
nop
movzx eax, byte [rdx]
mov byte [rcx + rdx], al
add rdx, 1
test al, al
jne 0x1400b45e0
mov rdi, r8
xor eax, eax
or rcx, 0xffffffffffffffff
repne scasb al, byte [rdi]
lea rdx, [rsp + 0x1000]
xor ecx, ecx
nop
nop
nop
nop
movzx eax, byte [rdx + rcx]
mov byte [rdi + rcx - 1], al
add rcx, 1
test al, al
jne 0x1400b4610
mov rax, qword [rbx]
lea rdx, str._s:_Failed_to_AttachDriveLetter.
mov rcx, rbx
call qword [rax + 0x10]
mov rbx, qword [rsp + 0xa0]
mov rax, qword [r13]
mov edx, 0x32
mov rcx, r13
call qword [rax + 0x10]
cmp dword [rsp + 0x78], 0
je 0x1400b4673
mov edi, dword [rsp + 0x50]
test edi, edi
jne 0x1400b4677
mov r9d, dword [rsp + 0xf0]
mov r8, r12
mov rdx, qword [rsp + 0x138]
mov rcx, rsi
call fcn.1400c2c10
jmp 0x1400b4677
mov edi, dword [rsp + 0x50]
mov rax, qword [r12]
mov rcx, r12
call qword [rax + 0x30]
mov rdx, rax
mov rcx, rsi
call fcn.1400c1cc0
test eax, eax
je 0x1400b469c
test edi, edi
jne 0x1400b469c
mov rcx, rsi
call fcn.1400c1850
mov r8, qword [rsp + 0x60]
mov rdi, qword [rsp + 0x100]
mov rdx, rdi
mov rcx, rsi
call fcn.1400c3170
test eax, eax
je 0x1400b46c3
mov eax, 1
mov dword [rsp + 0x78], eax
jmp 0x1400b46cb
mov eax, dword [rsp + 0x78]
test eax, eax
je 0x1400b473a
mov dword [rsp + 0x20], eax
mov r9, r13
mov r8, rbx
mov rdi, qword [rsp + 0x88]
mov rdx, rdi
mov rcx, rsi
call fcn.1400c0ef0
test eax, eax
jne 0x1400b47a5
call fcn.140049470
mov rdi, rax
mov rbx, qword [rax]
mov edx, 0x14f9
lea rcx, str...optcore.cpp
call fcn.1400a0fc0
mov r8, rax
lea rdx, str._s:_Failed_to_UpdateBootIni.
mov rcx, rdi
call qword [rbx + 0x10]
mov rax, qword [r13]
xor edx, edx
mov rcx, r13
call qword [rax + 0x40]
mov rbx, qword [rsp + 0xa0]
mov rdi, qword [rsp + 0x88]
jmp 0x1400b47a5
mov dword [rsp + 0x20], ebp
mov r9, r13
mov r8, rbx
mov rdx, rdi
mov rcx, rsi
call fcn.1400c0ef0
test eax, eax
jne 0x1400b479d
call fcn.140049470
mov rdi, rax
mov rbx, qword [rax]
mov edx, 0x1502
lea rcx, str...optcore.cpp
call fcn.1400a0fc0
mov r8, rax
lea rdx, str._s:_Failed_to_UpdateBootIni.
mov rcx, rdi
call qword [rbx + 0x10]
mov rax, qword [r13]
xor edx, edx
mov rcx, r13
call qword [rax + 0x40]
mov rbx, qword [rsp + 0xa0]
mov rdi, qword [rsp + 0x88]
jmp 0x1400b47a5
mov rdi, qword [rsp + 0x88]
cmp qword [rsp + 0x1b8], 0
je 0x1400b47c3
mov edx, dword [r15 + 0x14]
mov rcx, rsi
call fcn.1400aa900
mov dword [rsp + 0x98], eax
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + 0x40]
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0x60]
test eax, eax
jne 0x1400b4825
mov rcx, qword [rsp + 0xb8]
mov rax, qword [rcx]
call qword [rax + 0x60]
test eax, eax
jne 0x1400b4825
mov rax, qword [rsp + 0xa8]
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0xe0]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r12
mov r9d, dword [rsp + 0x98]
mov r8d, dword [rsp + 0xc8]
mov rdx, r15
mov rcx, rsi
call fcn.1400aba40
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + 0x40]
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0x60]
test eax, eax
jne 0x1400b4968
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x40]
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0x60]
test eax, eax
jne 0x1400b4968
cmp dword [rsp + 0x78], eax
je 0x1400b683f
cmp dword [rsp + 0x50], 1
jne 0x1400b48f5
cmp qword [rsp + 0x90], 0
je 0x1400b48f5
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + 0x40]
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0x60]
test eax, eax
jne 0x1400b683f
mov rcx, qword [rsp + 0xb8]
mov rax, qword [rcx]
call qword [rax + 0x60]
test eax, eax
jne 0x1400b683f
mov rax, qword [rsp + 0x1c0]
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x1d0]
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x90]
mov qword [rsp + 0x20], rax
mov r9d, dword [rsp + 0x98]
mov r8d, dword [rsp + 0x12c]
lea rdx, [rsp + reloc.MFC80U.DLL_Ordinal_768]
mov rcx, rsi
call fcn.1400aba40
jmp 0x1400b683f
lea rcx, [rsp + 0xf8]
call fcn.14005b260
nop
mov rax, qword [r15 + 0x20]
mov qword [rsp + 0x20], rax
mov r9d, dword [r15 + 0x14]
mov r8, qword [r15 + 0x18]
mov edx, dword [r15 + 0x10]
lea rcx, [rsp + 0xf8]
call fcn.14005efa0
test eax, eax
jne 0x1400b4956
call fcn.140049470
mov rdi, rax
mov rbx, qword [rax]
mov edx, Ordinal_6038
lea rcx, str...optcore.cpp
call fcn.1400a0fc0
mov r8, rax
lea rdx, str._s:_Change_registry_failed_on_MountedDevices.
mov rcx, rdi
call qword [rbx + 0x10]
nop
lea rcx, [rsp + 0xf8]
call fcn.140050540
jmp 0x1400b683f
cmp dword [rsp + 0x78], 0
je 0x1400b683f
call fcn.140049400
mov r13, rax
mov qword [rsp + 0xb0], rax
mov rdx, qword [r12]
mov rcx, r12
call qword [rdx + 0x28]
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0x40]
mov rbx, rax
mov rsi, qword [r13]
mov rdx, qword [r12]
mov rcx, r12
call qword [rdx + 0x38]
mov rdi, rax
mov rdx, qword [rbx]
mov rcx, rbx
call qword [rdx + 0x50]
mov edx, eax
mov r8, rdi
mov rcx, r13
call qword [rsi + 0x30]
test eax, eax
jne 0x1400b49c8
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rax, qword [r12]
mov rcx, r12
call qword [rax + 0x28]
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0x40]
mov rdi, rax
mov rsi, qword [r13]
mov rdx, qword [r12]
mov rcx, r12
call qword [rdx + 0x38]
mov rbx, rax
mov rdx, qword [rdi]
mov rcx, rdi
call qword [rdx + 0x50]
mov edi, eax
mov rdx, qword [r12]
mov rcx, r12
call qword [rdx + 0x50]
movzx edx, ax
mov r9, rbx
mov r8d, edi
mov rcx, r13
call qword [rsi + 0x18]
test eax, eax
jne 0x1400b4a1d
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rbx, qword [rsp + 0xa0]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x40]
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0x60]
test eax, eax
je 0x1400b5f8d
call fcn.140055490
mov rbx, rax
mov qword [rsp + 0xc0], rax
test rax, rax
jne 0x1400b4a88
call fcn.140049470
mov rdi, rax
mov rbx, qword [rax]
mov edx, 0x152b
lea rcx, str...optcore.cpp
call fcn.1400a0fc0
mov r8, rax
lea rdx, str._s:_CreateObjectMgr_failed.
mov rcx, rdi
call qword [rbx + 0x10]
mov rbx, qword [rsp + 0xc0]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 8]
test eax, eax
jne 0x1400b4ac9
call fcn.140049470
mov rdi, rax
mov rbx, qword [rax]
mov edx, 0x152f
lea rcx, str...optcore.cpp
call fcn.1400a0fc0
mov r8, rax
lea rdx, str._s:_InitManager_failed.
mov rcx, rdi
call qword [rbx + 0x10]
mov rbx, qword [rsp + 0xc0]
mov rsi, rbp
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x20]
mov r15, rax
test rax, rax
je 0x1400b4d40
test rsi, rsi
jne 0x1400b4bcc
mov rdx, qword [r15]
mov rcx, r15
call qword [rdx + 0x18]
mov rdi, rax
test rax, rax
je 0x1400b4bae
nop
test rsi, rsi
jne 0x1400b4ba6
mov rdx, qword [rdi]
mov rcx, rdi
call qword [rdx + 0x50]
mov rcx, qword [rsp + 0xd0]
cmp eax, dword [rcx + 0x14]
jne 0x1400b4b91
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + 0x78]
mov r13, rax
test rax, rax
je 0x1400b4b91
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0x30]
mov rbx, rax
test rax, rax
je 0x1400b4b91
test rsi, rsi
jne 0x1400b4b91
mov rdx, qword [r12]
mov rcx, r12
call qword [rdx + 0x38]
mov rdi, rax
mov rdx, qword [rbx]
mov rcx, rbx
call qword [rdx + 0x38]
cmp rax, rdi
cmove rsi, rbx
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x38]
mov rdi, rax
mov rdx, qword [r14]
mov rcx, r14
call qword [rdx + 0x38]
cmp rdi, rax
cmove rbp, rbx
mov rax, qword [r13]
mov rcx, r13
call qword [rax + 0x38]
mov rbx, rax
test rax, rax
jne 0x1400b4b41
mov rax, qword [r15]
mov rcx, r15
call qword [rax + 0x20]
mov rdi, rax
test rax, rax
jne 0x1400b4b00
mov rbx, qword [rsp + 0xc0]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x28]
mov r15, rax
test rax, rax
jne 0x1400b4ae1
test rsi, rsi
je 0x1400b4d13
mov rcx, qword [rsp + 0x48]
mov rax, qword [rcx]
call qword [rax + 0x30]
mov rbx, rax
mov rcx, qword [rsp + 0x58]
mov rdx, qword [rcx]
call qword [rdx + 0x30]
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0x50]
mov edi, eax
mov rdx, qword [rbx]
mov rcx, rbx
call qword [rdx + 0x50]
cmp eax, edi
jne 0x1400b4cd1
mov rcx, qword [rsp + 0x58]
mov rax, qword [rcx]
call qword [rax + 0x38]
mov rdi, rax
mov rcx, qword [rsp + 0x48]
mov rdx, qword [rcx]
call qword [rdx + 0x38]
cmp rax, rdi
jne 0x1400b4cd1
mov rcx, qword [rsp + 0xb8]
mov rax, qword [rcx]
call qword [rax + 0x60]
test eax, eax
je 0x1400b4cd1
mov rcx, qword [rsp + 0x88]
mov rax, qword [rcx]
call qword [rax + 0x40]
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0x60]
test eax, eax
jne 0x1400b4cd1
cmp dword [rsp + 0x50], 1
jne 0x1400b4cd1
mov rax, qword [rsi]
mov rcx, rsi
call qword [rax + 0xb0]
mov rdi, rax
mov rdx, qword [r12]
mov rcx, r12
call qword [rdx + 0xb0]
mov edx, dword [rdi + 0x68]
mov dword [rax + 0x68], edx
mov edx, dword [rdi + 0x6c]
mov dword [rax + 0x6c], edx
mov edx, dword [rdi + 0x70]
mov dword [rax + 0x70], edx
mov edx, dword [rdi + 0x74]
mov dword [rax + 0x74], edx
mov rax, qword [rsi]
mov rcx, rsi
call qword [rax + 0xb0]
mov rdi, rax
mov rdx, qword [r12]
mov rcx, r12
call qword [rdx + 0xb0]
mov ecx, dword [rdi + 0x78]
mov dword [rax + 0x78], ecx
mov ecx, dword [rdi + 0x7c]
mov dword [rax + 0x7c], ecx
mov ecx, dword [rdi + 0x80]
mov dword [rax + 0x80], ecx
mov ecx, dword [rdi + 0x84]
mov dword [rax + 0x84], ecx
jmp 0x1400b4d13
mov rax, qword [r12]
mov rcx, r12
call qword [rax + 0x60]
movzx ebx, ax
mov rdi, qword [r12]
mov rdx, qword [rsi]
mov rcx, rsi
call qword [rdx + 0x18]
mov rdx, rax
mov rcx, r12
call qword [rdi + 0x20]
mov rdx, qword [r12]
mov rcx, r12
call qword [rdx + 0x60]
test ax, ax
jne 0x1400b4d13
mov rax, qword [r12]
movzx edx, bx
mov rcx, r12
call qword [rax + reloc.MFC80U.DLL_Ordinal_296]
test rbp, rbp
je 0x1400b4d38
mov rdi, qword [r14]
mov rax, qword [rbp]
mov rcx, rbp
call qword [rax + 0x18]
mov rdx, rax
mov rcx, r14
call qword [rdi + 0x20]
mov r13, qword [rsp + 0xb0]
jmp 0x1400b4d40
mov r13, qword [rsp + 0xb0]
mov rax, qword [r12]
mov rcx, r12
call qword [rax + 0xc8]
test eax, eax
jne 0x1400b4d7c
mov rax, qword [r12]
mov rcx, r12
call qword [rax + 0xb0]
cmp dword [rax], 1
je 0x1400b4d7c
mov rax, qword [r12]
mov rcx, r12
call qword [rax + 0x48]
test eax, eax
je 0x1400b4d7c
cmp dword [rsp + 0x50], 1
jne 0x1400b5aaf
mov rdi, qword [rsp + 0x88]
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + 0x40]
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0x60]
test eax, eax
je 0x1400b5273
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + 0x40]
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0x58]
test eax, eax
jne 0x1400b5273
mov word [rsp + 0x1230], ax
xor edx, edx
mov r8d, 0xfe
lea rcx, [rsp + 0x1232]
call sub.ntdll.dll_memset
xor r15d, r15d
mov ebp, r15d
mov word [rsp + Ordinal_5447], bp
xor edx, edx
mov r8d, 0xfe
lea rcx, [rsp + 0x1542]
call sub.ntdll.dll_memset
nop
nop
mov rax, qword [r12]
mov rcx, r12
call qword [rax + 0x30]
mov rbx, rax
mov rsi, qword [r13]
mov rdx, qword [r12]
mov rcx, r12
call qword [rdx + 0x38]
mov rdi, rax
mov rdx, qword [rbx]
mov rcx, rbx
call qword [rdx + 0x50]
mov r9d, eax
mov qword [rsp + 0x20], rdi
mov r8d, 0x80
lea rdx, [rsp + 0x1540]
mov rcx, r13
call qword [rsi + 0x58]
test eax, eax
jne 0x1400b4e95
mov rax, qword [r12]
mov rcx, r12
call qword [rax + 0x30]
mov rbx, rax
mov rsi, qword [r13]
mov rdx, qword [r12]
mov rcx, r12
call qword [rdx + 0x38]
mov rdi, rax
mov rdx, qword [rbx]
mov rcx, rbx
call qword [rdx + 0x50]
mov edx, eax
mov r8, rdi
mov rcx, r13
call qword [rsi + 0xa8]
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
mov edx, ebp
add ebp, 1
cmp edx, 0x64
jl 0x1400b4e00
cmp ebp, 0x64
jge 0x1400b6c01
mov ebp, r15d
mov rax, qword [r12]
mov rcx, r12
call qword [rax + 0x30]
mov rbx, rax
mov rsi, qword [r13]
mov rdx, qword [r12]
mov rcx, r12
call qword [rdx + 0x38]
mov rdi, rax
mov rdx, qword [rbx]
mov rcx, rbx
call qword [rdx + 0x50]
mov r9d, eax
mov qword [rsp + 0x20], rdi
mov r8d, 0x80
lea rdx, [rsp + 0x1230]
mov rcx, r13
call qword [rsi + 0x58]
test eax, eax
jne 0x1400b4f36
mov rax, qword [r12]
mov rcx, r12
call qword [rax + 0x30]
mov rbx, rax
mov rsi, qword [r13]
mov rdx, qword [r12]
mov rcx, r12
call qword [rdx + 0x38]
mov rdi, rax
mov rdx, qword [rbx]
mov rcx, rbx
call qword [rdx + 0x50]
mov edx, eax
mov r8, rdi
mov rcx, r13
call qword [rsi + 0xa8]
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
mov edx, ebp
add ebp, 1
cmp edx, 0x64
jl 0x1400b4ea1
cmp ebp, 0x64
jge 0x1400b6bce
xor edx, edx
mov rbx, qword [rsp + 0x68]
mov rcx, rbx
call fcn.1400a1730
test eax, eax
je 0x1400b5106
mov word [rsp + Ordinal_4135], r15w
xor edx, edx
mov r8d, 0x206
lea rcx, [rsp + 0x1022]
call sub.ntdll.dll_memset
mov word [rsp + Ordinal_4920], r15w
xor edx, edx
mov r8d, 0x206
lea rcx, [rsp + 0x1332]
call sub.ntdll.dll_memset
mov word [rsp + Ordinal_5957], r15w
xor edx, edx
mov r8d, 0x206
lea rcx, [rsp + 0x1742]
call sub.ntdll.dll_memset
lea r8, [rsp + 0x1230]
lea rdx, str.__Volume_s
lea rcx, [rsp + 0x1740]
call qword [sym.imp.MSVCR80.dll__swprintf]
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov edx, 0xc0000000
lea r8d, [r9 + 7]
lea rcx, [rsp + 0x1740]
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov rdi, rax
cmp rax, 0xffffffffffffffff
je 0x1400b5046
mov dword [rsp + 0xb0], r15d
mov qword [rsp + 0x38], r15
lea rax, [rsp + 0xb0]
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], r15d
mov qword [rsp + 0x20], r15
xor r9d, r9d
xor r8d, r8d
mov edx, 0x56c008
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea r8, [rsp + 0x1230]
lea rdx, str.__Volume_sEFIMicrosoftBootBCD
lea rcx, [rsp + 0x1020]
call qword [sym.imp.MSVCR80.dll__swprintf]
lea rcx, [rsp + 0x1020]
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x1400b5084
lea rcx, [rsp + 0x1020]
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov rcx, qword [rsp + 0x58]
mov rax, qword [rcx]
call qword [rax + 0x50]
movzx r8d, ax
lea r9, [0x1402ebb68]
lea rdx, [0x1402ebb48]
lea rcx, [rsp + 0x1330]
call qword [sym.imp.MSVCR80.dll__swprintf]
lea rcx, [rsp + 0x1330]
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x1400b6b9b
lea rcx, [rsp + 0x7d0]
call fcn.140147040
nop
lea r8, [rsp + 0x1020]
lea rdx, [rsp + 0x1330]
lea rcx, [rsp + 0x7d0]
call fcn.140055db0
test eax, eax
je 0x1400b6b4f
lea rcx, [rsp + 0x7d0]
call fcn.140050540
mov qword [rsp + 0x20], r14
mov r9, r12
mov r8, qword [rsp + 0x58]
mov rdx, qword [rsp + 0x48]
mov rcx, rbx
call fcn.1400c3330
test eax, eax
je 0x1400b5a97
mov word [rsp + Ordinal_4135], 0
xor edx, edx
mov r8d, 0x206
lea rcx, [rsp + 0x1022]
call sub.ntdll.dll_memset
lea r8, [rsp + 0x1230]
lea rdx, str.__Volume_sBootBootx64.efi
lea rcx, [rsp + 0x1020]
call qword [sym.imp.MSVCR80.dll__swprintf]
lea rcx, [rsp + 0x1020]
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
jne 0x1400b5aa3
xor edx, edx
mov r8d, 0x208
lea rcx, [rsp + 0x1020]
call sub.ntdll.dll_memset
lea r8, [rsp + 0x1230]
lea rdx, str.__Volume_sBoot
lea rcx, [rsp + 0x1020]
call qword [sym.imp.MSVCR80.dll__swprintf]
xor edx, edx
lea rcx, [rsp + 0x1020]
call qword [sym.imp.KERNEL32.dll_CreateDirectoryW]
lea rcx, [rsp + 0x7d0]
call fcn.140147040
nop
mov word [rsp + Ordinal_4920], 0
xor edx, edx
mov r8d, 0x206
lea rcx, [rsp + 0x1332]
call sub.ntdll.dll_memset
xor edx, edx
mov r8d, 0x208
lea rcx, [rsp + 0x1020]
call sub.ntdll.dll_memset
lea r8, [rsp + 0x1230]
lea rdx, str.__Volume_sEFIMicrosoftBoot_bootmgfw.efi
lea rcx, [rsp + 0x1020]
call qword [sym.imp.MSVCR80.dll__swprintf]
lea r8, [rsp + 0x1230]
lea rdx, str.__Volume_sEFIBootBootx64.efi
lea rcx, [rsp + 0x1330]
call qword [sym.imp.MSVCR80.dll__swprintf]
lea r8, [rsp + 0x1330]
lea rdx, [rsp + 0x1020]
lea rcx, [rsp + 0x7d0]
call fcn.140055db0
nop
lea rcx, [rsp + 0x7d0]
call fcn.140050540
mov r15, qword [rsp + 0xd0]
xor ebp, ebp
jmp 0x1400b5ac5
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + 0x40]
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0x58]
test eax, eax
jne 0x1400b5abb
mov qword [rsp + reloc.MFC80U.DLL_Ordinal_336], 0xffffffffffffffff
mov rax, qword [r12]
mov rcx, r12
call qword [rax + 0x30]
mov rdi, qword [rax]
mov qword [rsp + 0x28], 0
lea rcx, [rsp + 0x1c8]
mov qword [rsp + 0x20], rcx
lea r9, [rsp + 0x110]
lea r8, [rsp + 0x130]
lea rdx, [rsp + 0x2e0]
mov rcx, rax
call qword [rdi + 0x30]
mov rax, qword [r12]
xor edx, edx
mov rcx, r12
call qword [rax + Ordinal_277]
mov r15, qword [rsp + 0xd0]
mov edi, dword [r15 + 0x28]
call fcn.140116720
mov rbp, rax
xor edx, edx
mov r8d, 0xb0
lea rcx, [rsp + 0x3a0]
call sub.ntdll.dll_memset
mov rdx, qword [r12]
mov rcx, r12
call qword [rdx + 0x30]
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0x50]
mov dword [rsp + 0x3a0], eax
mov rdx, qword [r12]
mov rcx, r12
call qword [rdx + 0x38]
mov qword [rsp + 0x3a8], rax
mov rax, qword [r12]
mov rcx, r12
call qword [rax + 0x40]
mov qword [rsp + reloc.MFC80U.DLL_Ordinal_944], rax
mov rax, qword [r12]
mov rcx, r12
call qword [rax + 0x70]
mov qword [rsp + 0x3b8], rax
mov rax, qword [r12]
mov rcx, r12
call qword [rax + 0x48]
mov dword [rsp + 0x440], eax
mov rax, qword [r12]
mov rcx, r12
call qword [rax + 0x60]
mov word [rsp + Ordinal_1095], ax
movzx eax, word [rsp + 0x130]
mov word [rsp + Ordinal_1095], ax
movzx eax, word [rsp + 0x110]
mov word [rsp + Ordinal_1102], ax
mov dword [rsp + Ordinal_1102], edi
mov rax, qword [r12]
mov rcx, r12
call qword [rax + 0x58]
lea rdx, [rsp + 0x3c0]
nop
movzx ecx, word [rax]
mov word [rdx], cx
add rax, 2
add rdx, 2
test cx, cx
jne 0x1400b53c0
mov rax, qword [r12]
mov rcx, r12
call qword [rax + 0x30]
mov rbx, rax
mov rsi, qword [r13]
mov rdx, qword [r12]
mov rcx, r12
call qword [rdx + 0x38]
mov rdi, rax
mov rdx, qword [rbx]
mov rcx, rbx
call qword [rdx + 0x50]
mov edx, eax
mov r8, rdi
mov rcx, r13
call qword [rsi + 0x30]
mov rdx, qword [r12]
mov rcx, r12
call qword [rdx + 0x30]
mov rbx, rax
mov rsi, qword [r13]
mov rdx, qword [r12]
mov rcx, r12
call qword [rdx + 0x38]
mov rdi, rax
mov rdx, qword [rbx]
mov rcx, rbx
call qword [rdx + 0x50]
mov r8d, eax
mov r9, rdi
lea rdx, [rsp + reloc.MFC80U.DLL_Ordinal_336]
mov rcx, r13
call qword [rsi]
mov rax, qword [rbp]
mov rdi, qword [rsp + 0x70]
mov r8, rdi
lea rdx, [rsp + 0x3a0]
mov rcx, rbp
call qword [rax + 0x28]
test eax, eax
je 0x1400b6c8c
mov rax, qword [r13]
mov rdx, qword [rsp + reloc.MFC80U.DLL_Ordinal_336]
mov rcx, r13
call qword [rax + 0x10]
mov rdx, qword [r12]
mov rcx, r12
call qword [rdx + 0x30]
mov rbx, rax
mov rsi, qword [r13]
mov rdx, qword [r12]
mov rcx, r12
call qword [rdx + 0x38]
mov rdi, rax
mov rdx, qword [rbx]
mov rcx, rbx
call qword [rdx + 0x50]
mov edx, eax
mov r8, rdi
mov rcx, r13
call qword [rsi + 0x30]
mov rdx, qword [r12]
mov rcx, r12
call qword [rdx + 0x28]
mov rdi, qword [rax]
xor r8d, r8d
xor edx, edx
mov rcx, rax
call qword [rdi + 0x58]
xor ebp, ebp
mov word [rsp + Ordinal_5957], bp
xor edx, edx
mov r8d, 0xfe
lea rcx, [rsp + 0x1742]
call sub.ntdll.dll_memset
nop
mov rax, qword [r12]
mov rcx, r12
call qword [rax + 0x30]
mov rbx, rax
mov rsi, qword [r13]
mov rdx, qword [r12]
mov rcx, r12
call qword [rdx + 0x38]
mov rdi, rax
mov rdx, qword [rbx]
mov rcx, rbx
call qword [rdx + 0x50]
mov r9d, eax
mov qword [rsp + 0x20], rdi
mov r8d, 0x80
lea rdx, [rsp + 0x1740]
mov rcx, r13
call qword [rsi + 0x58]
test eax, eax
jne 0x1400b5575
mov rax, qword [r12]
mov rcx, r12
call qword [rax + 0x30]
mov rbx, rax
mov rsi, qword [r13]
mov rdx, qword [r12]
mov rcx, r12
call qword [rdx + 0x38]
mov rdi, rax
mov rdx, qword [rbx]
mov rcx, rbx
call qword [rdx + 0x50]
mov edx, eax
mov r8, rdi
mov rcx, r13
call qword [rsi + 0xa8]
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
mov edx, ebp
add ebp, 1
cmp edx, 0x64
jl 0x1400b54e0
cmp ebp, 0x64
jl 0x1400b55a6
call fcn.140049470
mov rdi, rax
mov rbx, qword [rax]
mov edx, Ordinal_5655
lea rcx, str...optcore.cpp
call fcn.1400a0fc0
mov r8, rax
lea rdx, str._s:_AllocVolumeGuid_Failed.
mov rcx, rdi
call qword [rbx + 0x10]
mov ecx, 0xbb8
call qword [sym.imp.KERNEL32.dll_Sleep]
mov word [rsp + Ordinal_5447], 0
xor edx, edx
mov r8d, 0xfe
lea rcx, [rsp + 0x1542]
call sub.ntdll.dll_memset
mov word [rsp + 0x1230], 0
xor edx, edx
mov r8d, 0xfe
lea rcx, [rsp + 0x1232]
call sub.ntdll.dll_memset
mov rcx, qword [rsp + 0x58]
mov rax, qword [rcx]
call qword [rax + 0x30]
mov rbx, rax
mov rsi, qword [r13]
mov rcx, qword [rsp + 0x58]
mov rdx, qword [rcx]
call qword [rdx + 0x38]
mov rdi, rax
mov rdx, qword [rbx]
mov rcx, rbx
call qword [rdx + 0x50]
mov r9d, eax
mov qword [rsp + 0x20], rdi
mov r8d, 0x80
lea rdx, [rsp + 0x1540]
mov rcx, r13
call qword [rsi + 0x58]
test eax, eax
jne 0x1400b5664
call fcn.140049470
mov rdi, rax
mov rbx, qword [rax]
mov edx, 0x1620
lea rcx, str...optcore.cpp
call fcn.1400a0fc0
mov r8, rax
lea rdx, str._s:_Get_boot_partition_GUID_failed.
mov rcx, rdi
call qword [rbx + 0x10]
mov rax, qword [r12]
mov rcx, r12
call qword [rax + 0x30]
mov rbx, rax
mov rsi, qword [r13]
mov rdx, qword [r12]
mov rcx, r12
call qword [rdx + 0x38]
mov rdi, rax
mov rdx, qword [rbx]
mov rcx, rbx
call qword [rdx + 0x50]
mov r9d, eax
mov qword [rsp + 0x20], rdi
mov r8d, 0x80
lea rdx, [rsp + 0x1230]
mov rcx, r13
call qword [rsi + 0x58]
test eax, eax
jne 0x1400b56d7
call fcn.140049470
mov rdi, rax
mov rbx, qword [rax]
mov edx, Ordinal_5672
lea rcx, str...optcore.cpp
call fcn.1400a0fc0
mov r8, rax
lea rdx, str._s:_Get_system_partition_GUID_failed.
mov rcx, rdi
call qword [rbx + 0x10]
mov word [rsp + Ordinal_4135], 0
xor edx, edx
mov r8d, 0x206
lea rcx, [rsp + 0x1022]
call sub.ntdll.dll_memset
mov word [rsp + Ordinal_4920], 0
xor edx, edx
mov r8d, 0x206
lea rcx, [rsp + 0x1332]
call sub.ntdll.dll_memset
lea r9, str.WindowsBootEFI
lea r8, [rsp + 0x1540]
lea rdx, str.__Volume_s_s
lea rcx, [rsp + 0x1020]
call qword [sym.imp.MSVCR80.dll__swprintf]
mov word [rsp + 0x1950], 0
xor edx, edx
mov r8d, 0x206
lea rcx, [rsp + 0x1952]
call sub.ntdll.dll_memset
lea r8, [rsp + 0x1230]
lea rdx, str.__Volume_s
lea rcx, [rsp + 0x1950]
call qword [sym.imp.MSVCR80.dll__swprintf]
xor ebp, ebp
mov qword [rsp + 0x30], rbp
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov edx, 0xc0000000
lea r8d, [rbp + 7]
lea rcx, [rsp + 0x1950]
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov rdi, rax
cmp rax, 0xffffffffffffffff
je 0x1400b57ee
mov dword [rsp + 0xb0], ebp
mov qword [rsp + 0x38], rbp
lea rax, [rsp + 0xb0]
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], ebp
mov qword [rsp + 0x20], rbp
xor r9d, r9d
xor r8d, r8d
mov edx, 0x56c008
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea r8, [rsp + 0x1230]
lea rdx, str.__Volume_sEFI
lea rcx, [rsp + 0x1330]
call qword [sym.imp.MSVCR80.dll__swprintf]
xor edx, edx
lea rcx, [rsp + 0x1330]
call qword [sym.imp.KERNEL32.dll_CreateDirectoryW]
test eax, eax
je 0x1400b6c85
xor edx, edx
mov r8d, 0x208
lea rcx, [rsp + 0x1330]
call sub.ntdll.dll_memset
lea r8, [rsp + 0x1230]
lea rdx, str.__Volume_sEFIBoot
lea rcx, [rsp + 0x1330]
call qword [sym.imp.MSVCR80.dll__swprintf]
xor edx, edx
lea rcx, [rsp + 0x1330]
call qword [sym.imp.KERNEL32.dll_CreateDirectoryW]
test eax, eax
je 0x1400b6c7e
xor edx, edx
mov r8d, 0x208
lea rcx, [rsp + 0x1330]
call sub.ntdll.dll_memset
lea r8, [rsp + 0x1230]
lea rdx, str.__Volume_sEFIMicrosoft
lea rcx, [rsp + 0x1330]
call qword [sym.imp.MSVCR80.dll__swprintf]
xor edx, edx
lea rcx, [rsp + 0x1330]
call qword [sym.imp.KERNEL32.dll_CreateDirectoryW]
test eax, eax
je 0x1400b6c77
xor edx, edx
mov r8d, 0x208
lea rcx, [rsp + 0x1330]
call sub.ntdll.dll_memset
lea r8, [rsp + 0x1230]
lea rdx, str.__Volume_sEFIMicrosoftBoot
lea rcx, [rsp + 0x1330]
call qword [sym.imp.MSVCR80.dll__swprintf]
xor edx, edx
lea rcx, [rsp + 0x1330]
call qword [sym.imp.KERNEL32.dll_CreateDirectoryW]
test eax, eax
je 0x1400b6c70
lea rcx, [rsp + 0x7d0]
call fcn.140147040
nop
lea r8, [rsp + 0x1330]
lea rdx, [rsp + 0x1020]
lea rcx, [rsp + 0x7d0]
call fcn.1400561e0
test eax, eax
je 0x1400b6c5c
xor edx, edx
mov r8d, 0x208
lea rcx, [rsp + 0x1020]
call sub.ntdll.dll_memset
xor edx, edx
mov r8d, 0x208
lea rcx, [rsp + 0x1330]
call sub.ntdll.dll_memset
lea r9, str.EFIMicrosoftBoot_bootmgfw.efi
lea r8, [rsp + 0x1230]
lea rdx, str.__Volume_s_s
lea rcx, [rsp + 0x1020]
call qword [sym.imp.MSVCR80.dll__swprintf]
lea r8, [rsp + 0x1230]
lea rdx, str.__Volume_sEFIBootBootx64.efi
lea rcx, [rsp + 0x1330]
call qword [sym.imp.MSVCR80.dll__swprintf]
lea r8, [rsp + 0x1330]
lea rdx, [rsp + 0x1020]
lea rcx, [rsp + 0x7d0]
call fcn.140055db0
test eax, eax
je 0x1400b6c48
xor edx, edx
mov r8d, 0x208
lea rcx, [rsp + 0x1020]
call sub.ntdll.dll_memset
xor edx, edx
mov r8d, 0x208
lea rcx, [rsp + 0x1330]
call sub.ntdll.dll_memset
lea r9, [0x1402ebb68]
lea r8, [rsp + 0x1540]
lea rdx, [0x1402e38d8]
lea rcx, [rsp + 0x1020]
call qword [sym.imp.MSVCR80.dll__swprintf]
lea r8, [rsp + 0x1230]
lea rdx, str.__Volume_sEFIMicrosoftBootBCD
lea rcx, [rsp + 0x1330]
call qword [sym.imp.MSVCR80.dll__swprintf]
lea r8, [rsp + 0x1330]
lea rdx, [rsp + 0x1020]
lea rcx, [rsp + 0x7d0]
call fcn.140055db0
test eax, eax
je 0x1400b6c34
lea rcx, [rsp + 0x1020]
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov qword [rsp + 0x20], r14
mov r9, r12
xor r8d, r8d
xor edx, edx
mov rcx, qword [rsp + 0x68]
call fcn.1400c3330
lea rcx, [rsp + 0x1020]
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
nop
lea rcx, [rsp + 0x7d0]
call fcn.140050540
jmp 0x1400b5ac5
mov r15, qword [rsp + 0xd0]
xor ebp, ebp
jmp 0x1400b5ac5
mov r15, qword [rsp + 0xd0]
xor ebp, ebp
jmp 0x1400b5ac5
mov r15, qword [rsp + 0xd0]
xor ebp, ebp
jmp 0x1400b5ac5
mov r15, qword [rsp + 0xd0]
xor ebp, ebp
cmp dword [rsp + 0x50], 0
jne 0x1400b5f76
lea rcx, [rsp + 0xd8]
call fcn.14005b260
nop
mov word [rsp + Ordinal_5447], 0
xor edx, edx
mov r8d, 0xfe
lea rcx, [rsp + 0x1542]
call sub.ntdll.dll_memset
mov word [rsp + Ordinal_4135], 0
xor edx, edx
mov r8d, 0x206
lea rcx, [rsp + 0x1022]
call sub.ntdll.dll_memset
mov qword [rsp + 0x158], rbp
xor eax, eax
mov qword [rsp + 0x160], rax
mov qword [rsp + 0x168], rax
mov qword [rsp + 0x350], rbp
mov qword [rsp + 0x358], rax
mov qword [rsp + 0x360], rax
mov rcx, qword [rsp + 0x58]
mov rax, qword [rcx]
call qword [rax + 0x18]
mov qword [rsp + 0x158], rax
mov rcx, qword [rsp + 0x58]
mov rax, qword [rcx]
call qword [rax + 0x30]
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0x50]
mov dword [rsp + 0x16c], eax
mov rax, qword [r12]
mov rcx, r12
call qword [rax + 0x18]
mov qword [rsp + 0x350], rax
mov rax, qword [r12]
mov rcx, r12
call qword [rax + 0x30]
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0x50]
mov dword [rsp + 0x364], eax
mov rax, qword [r12]
mov rcx, r12
call qword [rax + 0x30]
mov rbx, rax
mov rsi, qword [r13]
mov rdx, qword [r12]
mov rcx, r12
call qword [rdx + 0x38]
mov rdi, rax
mov rdx, qword [rbx]
mov rcx, rbx
call qword [rdx + 0x50]
mov r9d, eax
mov qword [rsp + 0x20], rdi
mov r8d, 0x80
lea rdx, [rsp + 0x1540]
mov rcx, r13
call qword [rsi + 0x58]
lea r8, [rsp + 0x1540]
lea rdx, str._Volume_sWindowsSystem32configSYSTEM
lea rcx, [rsp + 0x1020]
call qword [sym.imp.MSVCR80.dll__swprintf]
mov rax, qword [rsp + 0x88]
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0x40]
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0x60]
test eax, eax
je 0x1400b5c9d
mov dword [rsp + 0x28], 2
lea rax, [rsp + 0x350]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x158]
lea r8, str.AomeiMigName
lea rdx, [rsp + 0x1020]
lea rcx, [rsp + 0xd8]
call fcn.14005f580
test eax, eax
jne 0x1400b5d52
call fcn.140049470
mov rdi, rax
mov rbx, qword [rax]
mov edx, 0x16a5
lea rcx, str...optcore.cpp
call fcn.1400a0fc0
mov r8, rax
lea rdx, str._s:_UpdateDosDeviceFromHiveFile_failed.
mov rcx, rdi
call qword [rbx + 0x10]
mov rsi, qword [rsp + 0x60]
jmp 0x1400b5d57
mov rsi, qword [rsp + 0x60]
mov rax, qword [rsi]
mov rcx, rsi
call qword [rax + 0x30]
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0x58]
test eax, eax
jne 0x1400b5d57
mov rcx, qword [rsp + 0x58]
mov rax, qword [rcx]
call qword [rax + 0x30]
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0x28]
mov dword [rsp + 0x120], eax
lea rax, [rsp + 0x120]
mov qword [rsp + 0x160], rax
mov dword [rsp + 0x28], 3
lea rax, [rsp + 0x350]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x158]
lea r8, str.AomeiMigName
lea rdx, [rsp + 0x1020]
lea rcx, [rsp + 0xd8]
call fcn.14005f580
test eax, eax
jne 0x1400b5d57
call fcn.140049470
mov rdi, rax
mov rbx, qword [rax]
mov edx, 0x16af
lea rcx, str...optcore.cpp
call fcn.1400a0fc0
mov r8, rax
lea rdx, str._s:_UpdateDosDeviceFromHiveFile_failed.
mov rcx, rdi
call qword [rbx + 0x10]
jmp 0x1400b5d57
mov rsi, qword [rsp + 0x60]
mov rax, qword [rsi]
mov rcx, rsi
call qword [rax + 0x30]
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0x60]
test eax, eax
je 0x1400b5f1b
mov rax, qword [rsi]
mov rcx, rsi
call qword [rax + 0x28]
mov rbx, rax
test rax, rax
je 0x1400b5ec8
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0x30]
mov rdi, rax
test rax, rax
je 0x1400b5ec8
nop
nop
mov rdx, qword [rdi]
mov rcx, rdi
call qword [rdx + 0xb0]
cmp dword [rax], 6
je 0x1400b5dc7
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x38]
mov rdi, rax
test rax, rax
jne 0x1400b5da0
jmp 0x1400b5ec8
mov r9d, 1
mov r8, r12
mov rdx, rdi
mov rcx, qword [rsp + 0x68]
call fcn.1400c3ac0
test eax, eax
jne 0x1400b5f69
call fcn.140049470
mov rbx, rax
xor edx, edx
mov r8d, 0x80
lea rsi, [0x1404342a0]
mov rcx, rsi
call sub.ntdll.dll_memset
mov edx, 0x5c
lea rcx, str...optcore.cpp
call qword [sym.imp.ntdll.dll_strrchr]
mov rdi, rax
test rax, rax
jne 0x1400b5e26
mov r8, rbp
jmp 0x1400b5eb3
mov byte [rsp + 0xff0], 0
xor eax, eax
mov qword [rsp + 0xff1], rax
mov word [rsp + Ordinal_4092], ax
mov byte [rsp + Ordinal_4092], al
mov r8d, Ordinal_5830
lea rdx, [0x1402dfd08]
lea rcx, [rsp + 0xff0]
call qword [sym.imp.ntdll.dll_sprintf]
lea rdx, [rdi + 1]
mov rcx, rsi
sub rcx, rdx
nop
movzx eax, byte [rdx]
mov byte [rcx + rdx], al
add rdx, 1
test al, al
jne 0x1400b5e70
mov rdi, rsi
xor eax, eax
or rcx, 0xffffffffffffffff
repne scasb al, byte [rdi]
lea rdx, [rsp + 0xff0]
xor ecx, ecx
nop
nop
nop
nop
movzx eax, byte [rdx + rcx]
mov byte [rdi + rcx - 1], al
add rcx, 1
test al, al
jne 0x1400b5ea0
mov r8, rsi
mov rax, qword [rbx]
lea rdx, str._s:_BackupRecoveryEnv_failed.
mov rcx, rbx
call qword [rax + 0x10]
jmp 0x1400b5f69
mov rdx, qword [rsp + 0x48]
test rdx, rdx
je 0x1400b5f69
mov r9d, 1
mov r8, r12
mov rcx, qword [rsp + 0x68]
call fcn.1400c3ac0
test eax, eax
jne 0x1400b5f69
call fcn.140049470
mov rdi, rax
mov rbx, qword [rax]
mov edx, 0x16cc
lea rcx, str...optcore.cpp
call fcn.1400a0fc0
mov r8, rax
lea rdx, str._s:_BackupRecoveryEnv_failed.
mov rcx, rdi
call qword [rbx + 0x10]
jmp 0x1400b5f69
mov rdx, qword [rsp + 0x48]
test rdx, rdx
je 0x1400b5f69
mov r9d, 1
mov r8, r12
mov rcx, qword [rsp + 0x68]
call fcn.1400c3ac0
test eax, eax
jne 0x1400b5f69
call fcn.140049470
mov rdi, rax
mov rbx, qword [rax]
mov edx, 0x16d7
lea rcx, str...optcore.cpp
call fcn.1400a0fc0
mov r8, rax
lea rdx, str._s:_BackupRecoveryEnv_failed.
mov rcx, rdi
call qword [rbx + 0x10]
nop
lea rcx, [rsp + 0xd8]
call fcn.140050540
mov rcx, qword [rsp + 0xc0]
mov rax, qword [rcx]
call qword [rax]
mov r13, qword [rsp + 0x70]
jmp 0x1400b683f
mov rcx, qword [rsp + 0x88]
mov rax, qword [rcx]
call qword [rax + 0x40]
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0x60]
test eax, eax
je 0x1400b683a
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x40]
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0x60]
test eax, eax
jne 0x1400b6833
mov rax, qword [r12]
mov rcx, r12
call qword [rax + 0xc8]
test eax, eax
jne 0x1400b5fec
mov rax, qword [r12]
mov rcx, r12
call qword [rax + 0xe0]
test eax, eax
je 0x1400b6631
call fcn.140049400
mov rbp, rax
mov rdx, qword [r12]
mov rcx, r12
call qword [rdx + 0x28]
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0x40]
mov rdi, qword [rax]
mov qword [rsp + 0x28], 0
lea rcx, [rsp + 0x1dc]
mov qword [rsp + 0x20], rcx
lea r9, [rsp + 0x1d8]
lea r8, [rsp + 0x1b0]
lea rdx, [rsp + 0xfe0]
mov rcx, rax
call qword [rdi + 0x30]
mov word [rsp + Ordinal_5447], 0
xor edx, edx
mov r8d, Ordinal_512
lea rcx, [rsp + 0x1542]
call sub.ntdll.dll_memset
mov word [rsp + Ordinal_5957], 0
xor edx, edx
mov r8d, Ordinal_512
lea rcx, [rsp + 0x1742]
call sub.ntdll.dll_memset
mov rcx, qword [rsp + 0x58]
mov rax, qword [rcx]
call qword [rax + 0x28]
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0x40]
mov rbx, rax
mov rsi, qword [rbp]
mov rcx, qword [rsp + 0x58]
mov rdx, qword [rcx]
call qword [rdx + 0x38]
mov rdi, rax
mov rdx, qword [rbx]
mov rcx, rbx
call qword [rdx + 0x50]
mov r9d, eax
mov qword [rsp + 0x20], rdi
mov r8d, 0x100
lea rdx, [rsp + 0x1540]
mov rcx, rbp
call qword [rsi + 0x58]
test eax, eax
jne 0x1400b60fa
call fcn.140049470
mov rdi, rax
mov rbx, qword [rax]
mov edx, 0x16f3
lea rcx, str...optcore.cpp
call fcn.1400a0fc0
mov r8, rax
lea rdx, str._s:_Get_boot_partition_GUID_failed.
mov rcx, rdi
call qword [rbx + 0x10]
mov rax, qword [r12]
mov rcx, r12
call qword [rax + 0x28]
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0x40]
mov rbx, rax
mov rsi, qword [rbp]
mov rdx, qword [r12]
mov rcx, r12
call qword [rdx + 0x38]
mov rdi, rax
mov rdx, qword [rbx]
mov rcx, rbx
call qword [rdx + 0x50]
mov r9d, eax
mov qword [rsp + 0x20], rdi
mov r8d, 0x100
lea rdx, [rsp + 0x1740]
mov rcx, rbp
call qword [rsi + 0x58]
test eax, eax
jne 0x1400b6176
call fcn.140049470
mov rdi, rax
mov rbx, qword [rax]
mov edx, 0x16f9
lea rcx, str...optcore.cpp
call fcn.1400a0fc0
mov r8, rax
lea rdx, str._s:_Get_system_partition_GUID_failed.
mov rcx, rdi
call qword [rbx + 0x10]
mov word [rsp + Ordinal_4920], 0
xor edx, edx
mov r8d, 0x206
lea rcx, [rsp + 0x1332]
call sub.ntdll.dll_memset
mov word [rsp + Ordinal_4135], 0
xor edx, edx
mov r8d, 0x206
lea rcx, [rsp + 0x1022]
call sub.ntdll.dll_memset
lea r9, [0x1402e33d8]
lea r8, [rsp + 0x1540]
lea rdx, str.__Volume_s_s
lea rcx, [rsp + 0x1330]
call qword [sym.imp.MSVCR80.dll__swprintf]
mov word [rsp + 0x1950], 0
xor edx, edx
mov r8d, 0x206
lea rcx, [rsp + 0x1952]
call sub.ntdll.dll_memset
lea r8, [rsp + 0x1740]
lea rdx, str.__Volume_s
lea rcx, [rsp + 0x1950]
call qword [sym.imp.MSVCR80.dll__swprintf]
xor ebp, ebp
mov qword [rsp + 0x30], rbp
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov edx, 0xc0000000
lea r8d, [rbp + 7]
lea rcx, [rsp + 0x1950]
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov rdi, rax
cmp rax, 0xffffffffffffffff
je 0x1400b628d
mov dword [rsp + 0xb0], ebp
mov qword [rsp + 0x38], rbp
lea rax, [rsp + 0xb0]
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], ebp
mov qword [rsp + 0x20], rbp
xor r9d, r9d
xor r8d, r8d
mov edx, 0x56c008
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea r8, [rsp + 0x1740]
lea rdx, str.__Volume_s_boot
lea rcx, [rsp + 0x1020]
call qword [sym.imp.MSVCR80.dll__swprintf]
xor edx, edx
lea rcx, [rsp + 0x1020]
call qword [sym.imp.KERNEL32.dll_CreateDirectoryW]
test eax, eax
je 0x1400b6d0c
lea rcx, [rsp + 0x7d0]
call fcn.140147040
nop
lea r8, [rsp + 0x1020]
lea rdx, [rsp + 0x1330]
lea rcx, [rsp + 0x7d0]
call fcn.1400561e0
test eax, eax
je 0x1400b6cf8
xor edx, edx
mov r8d, 0x208
lea rcx, [rsp + 0x1330]
call sub.ntdll.dll_memset
xor edx, edx
mov r8d, 0x208
lea rcx, [rsp + 0x1020]
call sub.ntdll.dll_memset
lea r9, str.boot_bootmgr
lea r8, [rsp + 0x1740]
lea rdx, str.__Volume_s_s
lea rcx, [rsp + 0x1330]
call qword [sym.imp.MSVCR80.dll__swprintf]
lea r8, [rsp + 0x1740]
lea rdx, str.__Volume_s_bootmgr
lea rcx, [rsp + 0x1020]
call qword [sym.imp.MSVCR80.dll__swprintf]
lea r8, [rsp + 0x1020]
lea rdx, [rsp + 0x1330]
lea rcx, [rsp + 0x7d0]
call fcn.140055db0
test eax, eax
je 0x1400b6ce4
xor edx, edx
mov r8d, 0x208
lea rcx, [rsp + 0x1330]
call sub.ntdll.dll_memset
xor edx, edx
mov r8d, 0x208
lea rcx, [rsp + 0x1020]
call sub.ntdll.dll_memset
lea r9, [0x1402ebb68]
lea r8, [rsp + 0x1540]
lea rdx, [0x1402e38d8]
lea rcx, [rsp + 0x1330]
call qword [sym.imp.MSVCR80.dll__swprintf]
lea r8, [rsp + 0x1740]
lea rdx, str.__Volume_sBootBCD
lea rcx, [rsp + 0x1020]
call qword [sym.imp.MSVCR80.dll__swprintf]
lea r8, [rsp + 0x1020]
lea rdx, [rsp + 0x1330]
lea rcx, [rsp + 0x7d0]
call fcn.140055db0
test eax, eax
je 0x1400b6cd0
lea rcx, [rsp + 0x1330]
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
mov word [rsp + 0x1b60], 0
xor edx, edx
mov r8d, 0x206
lea rcx, [rsp + 0x1b62]
call sub.ntdll.dll_memset
lea r8, [rsp + 0x1740]
lea rdx, str.__Volume_s
lea rcx, [rsp + 0x1b60]
call qword [sym.imp.MSVCR80.dll__swprintf]
mov rdx, qword [r12]
mov rcx, r12
call qword [rdx + 0x28]
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0x40]
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0x50]
mov edx, eax
lea rcx, [rsp + 0x350]
call fcn.14009e6c0
nop
xor edx, edx
mov rcx, qword [rsp + 0x68]
call fcn.1400a1730
test eax, eax
je 0x1400b64fa
mov rax, qword [r12]
mov rcx, r12
call qword [rax + 0x30]
mov rdi, rax
mov rdx, qword [r12]
mov rcx, r12
call qword [rdx + 0x30]
mov rbx, rax
mov rdx, qword [r12]
mov rcx, r12
call qword [rdx + 0x38]
mov rsi, rax
mov rdx, qword [rdi]
mov rcx, rdi
call qword [rdx + 0x28]
mov edi, eax
mov rdx, qword [rbx]
mov rcx, rbx
call qword [rdx + 0x50]
mov edx, eax
mov rax, qword [rsp + reloc.MFC80U.DLL_Ordinal_320]
mov qword [rsp + 0x20], rax
mov r9, rsi
mov r8d, edi
lea rcx, [rsp + 0x350]
call fcn.14009dd10
jmp 0x1400b656f
mov rax, qword [r12]
mov rcx, r12
call qword [rax + 0x38]
mov rcx, qword [rsp + reloc.MFC80U.DLL_Ordinal_320]
cmp rax, rcx
je 0x1400b6516
mov rsi, rcx
jmp 0x1400b6523
mov rax, qword [r12]
mov rcx, r12
call qword [rax + 0x38]
mov rsi, rax
mov rdx, qword [r12]
mov rcx, r12
call qword [rdx + 0x28]
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0x40]
mov rdi, rax
mov rdx, qword [r12]
mov rcx, r12
call qword [rdx + 0x38]
mov rbx, rax
mov rdx, qword [rdi]
mov rcx, rdi
call qword [rdx + 0x28]
mov r8d, eax
mov qword [rsp + 0x20], rsi
mov r9, rbx
lea rdx, [rsp + 0x1b60]
lea rcx, [rsp + 0x350]
call fcn.14009f0e0
xor eax, eax
mov qword [rsp + reloc.MFC80U.DLL_Ordinal_576], rax
mov qword [rsp + 0x248], rax
mov qword [rsp + 0x250], rax
mov qword [rsp + reloc.MFC80U.DLL_Ordinal_600], rax
mov qword [rsp + 0x260], rax
mov qword [rsp + 0x268], rax
mov qword [rsp + 0x270], rax
mov qword [rsp + reloc.MFC80U.DLL_Ordinal_632], rax
mov qword [rsp + 0x280], rax
mov rsi, qword [rsp + 0x68]
mov rcx, qword [rsi + reloc.MFC80U.DLL_Ordinal_1112]
mov rax, qword [rcx]
call qword [rax + 0x18]
mov qword [rsp + 0x248], rax
mov rax, qword [r12]
mov rcx, r12
call qword [rax + 0x30]
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0x50]
mov dword [rsp + 0x250], eax
mov dword [rsp + 0x268], 2
xor r9d, r9d
mov r13, qword [rsp + 0x70]
mov r8, r13
lea rdx, [rsp + reloc.MFC80U.DLL_Ordinal_576]
mov rcx, rsi
call fcn.1400acd50
nop
lea rcx, [rsp + 0x350]
call fcn.140050540
nop
lea rcx, [rsp + 0x7d0]
call fcn.140050540
jmp 0x1400b6636
mov r13, qword [rsp + 0x70]
mov rax, qword [r12]
mov rcx, r12
call qword [rax + 0x38]
mov rdi, rax
mov rcx, qword [rsp + 0x90]
mov rdx, qword [rcx]
call qword [rdx + 0x38]
cmp rdi, rax
je 0x1400b6822
call fcn.140049400
mov rbp, rax
lea rcx, [rsp + 0x124]
call fcn.14005b260
nop
mov word [rsp + Ordinal_5447], 0
xor edx, edx
mov r8d, 0xfe
lea rcx, [rsp + 0x1542]
call sub.ntdll.dll_memset
mov rdx, qword [r12]
mov rcx, r12
call qword [rdx + 0x28]
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0x40]
mov rbx, rax
mov rsi, qword [rbp]
mov rdx, qword [r12]
mov rcx, r12
call qword [rdx + 0x38]
mov rdi, rax
mov rdx, qword [rbx]
mov rcx, rbx
call qword [rdx + 0x50]
mov r9d, eax
mov qword [rsp + 0x20], rdi
mov r8d, 0x80
lea rdx, [rsp + 0x1540]
mov rcx, rbp
call qword [rsi + 0x58]
mov word [rsp + 0x1b60], 0
xor edx, edx
mov r8d, 0x206
lea rcx, [rsp + 0x1b62]
call sub.ntdll.dll_memset
mov rdx, qword [r12]
mov rcx, r12
call qword [rdx + 0x28]
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0x40]
mov rbx, rax
mov rsi, qword [rbp]
mov rdx, qword [r12]
mov rcx, r12
call qword [rdx + 0x38]
mov rdi, rax
mov rdx, qword [rbx]
mov rcx, rbx
call qword [rdx + 0x50]
mov edx, eax
mov r8, rdi
mov rcx, rbp
call qword [rsi + 0x30]
mov rdx, qword [r12]
mov rcx, r12
call qword [rdx + 0x28]
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0x40]
mov rdi, rax
mov rsi, qword [rbp]
mov rdx, qword [r12]
mov rcx, r12
call qword [rdx + 0x38]
mov rbx, rax
mov rdx, qword [rdi]
mov rcx, rdi
call qword [rdx + 0x50]
mov edi, eax
mov rdx, qword [r12]
mov rcx, r12
call qword [rdx + 0x50]
movzx edx, ax
mov r9, rbx
mov r8d, edi
mov rcx, rbp
call qword [rsi + 0x18]
lea r8, [rsp + 0x1540]
lea rdx, str.__Volume_sWindowsSystem32configSYSTEM
lea rcx, [rsp + 0x1b60]
call qword [sym.imp.MSVCR80.dll__swprintf]
mov rax, qword [rsp + 0x60]
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0x18]
mov rdx, qword [r12]
mov rcx, r12
call qword [rdx + 0x18]
mov rdx, qword [r12]
mov rcx, r12
call qword [rdx + 0x30]
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0x28]
mov dword [rsp + 0xe8], eax
xor r9d, r9d
mov r8, r12
mov rdx, qword [rsp + 0x48]
mov rcx, qword [rsp + 0x68]
call fcn.1400c3ac0
test eax, eax
jne 0x1400b6815
call fcn.140049470
mov rdi, rax
mov rbx, qword [rax]
mov edx, Ordinal_6013
lea rcx, str...optcore.cpp
call fcn.1400a0fc0
mov r8, rax
lea rdx, str._s:_BackupRecoveryEnv_failed.
mov rcx, rdi
call qword [rbx + 0x10]
nop
lea rcx, [rsp + 0x124]
call fcn.140050540
lea rdx, str.AMTAG.BIN
mov rcx, r12
call fcn.14009a450
jmp 0x1400b683f
mov r13, qword [rsp + 0x70]
jmp 0x1400b683f
mov r13, qword [rsp + 0x70]
mov rcx, qword [rsp + 0x88]
mov rax, qword [rcx]
call qword [rax + 0x40]
mov rbx, rax
mov rbp, qword [rsp + 0xa0]
mov rdx, qword [rbp]
mov rcx, rbp
call qword [rdx + 0x40]
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0x50]
mov edi, eax
mov rdx, qword [rbx]
mov rcx, rbx
call qword [rdx + 0x50]
cmp eax, edi
jne 0x1400b6983
xor esi, esi
mov dword [rsp + 0x20], esi
mov r9, r13
mov r8, rbp
mov rdx, qword [rsp + 0x88]
mov rcx, qword [rsp + 0x68]
call fcn.1400c0ef0
test eax, eax
jne 0x1400b6983
call fcn.140049470
mov rbx, rax
xor edx, edx
mov r8d, 0x80
lea rbp, [0x1404342a0]
mov rcx, rbp
call sub.ntdll.dll_memset
lea edx, [rsi + 0x5c]
lea rcx, str...optcore.cpp
call qword [sym.imp.ntdll.dll_strrchr]
mov rdi, rax
test rax, rax
jne 0x1400b68e3
mov r8, rsi
jmp 0x1400b6973
mov byte [rsp + reloc.MFC80U.DLL_Ordinal_4048], sil
xor eax, eax
mov qword [rsp + reloc.MFC80U.DLL_Ordinal_4049], rax
mov word [rsp + Ordinal_4061], ax
mov byte [rsp + Ordinal_4061], al
mov r8d, Ordinal_6051
lea rdx, [0x1402dfd08]
lea rcx, [rsp + reloc.MFC80U.DLL_Ordinal_4048]
call qword [sym.imp.ntdll.dll_sprintf]
lea rdx, [rdi + 1]
mov rcx, rbp
sub rcx, rdx
nop
nop
movzx eax, byte [rdx]
mov byte [rcx + rdx], al
add rdx, 1
test al, al
jne 0x1400b6930
mov rdi, rbp
xor eax, eax
or rcx, 0xffffffffffffffff
repne scasb al, byte [rdi]
lea rdx, [rsp + reloc.MFC80U.DLL_Ordinal_4048]
xor ecx, ecx
nop
nop
nop
nop
movzx eax, byte [rdx + rcx]
mov byte [rdi + rcx - 1], al
add rcx, 1
test al, al
jne 0x1400b6960
mov r8, rbp
mov rax, qword [rbx]
lea rdx, str._s:_Failed_to_UpdateBootIni_in__ChangePartType.
mov rcx, rbx
call qword [rax + 0x10]
mov rax, qword [r12]
mov rcx, r12
call qword [rax + 0x30]
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0xd0]
test eax, eax
je 0x1400b69d7
call fcn.140049400
mov rbp, rax
mov rdx, qword [r12]
mov rcx, r12
call qword [rdx + 0x30]
mov rbx, rax
mov rsi, qword [rbp]
mov rdx, qword [r12]
mov rcx, r12
call qword [rdx + 0x38]
mov rdi, rax
mov rdx, qword [rbx]
mov rcx, rbx
call qword [rdx + 0x50]
mov edx, eax
mov r8, rdi
mov rcx, rbp
call qword [rsi + 0x30]
mov rdx, r13
mov rcx, r15
call fcn.140095bd0
mov rax, qword [r13]
lea rdx, [0x1402ea888]
mov rcx, r13
call qword [rax + 0x70]
mov rax, qword [r13]
mov edx, 0x64
mov rcx, r13
call qword [rax + 0x10]
mov eax, dword [rsp + 0x78]
test eax, eax
je 0x1400b6ad5
mov rcx, qword [rsp + 0x90]
test rcx, rcx
je 0x1400b6acf
mov edi, dword [rsp + 0x50]
test edi, edi
jne 0x1400b6ad9
mov r12, rcx
mov rbx, qword [rsp + reloc.MFC80U.DLL_Ordinal_280]
mov rbp, rbx
mov qword [rsp + 0x60], rbx
mov rax, qword [rcx]
call qword [rax + 0x90]
mov qword [rsp + 0x148], rax
mov rdx, qword [rbx]
mov rcx, rbx
call qword [rdx + 0x30]
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0x50]
mov dword [rsp + 0x80], eax
mov rdx, qword [rbx]
mov rcx, rbx
call qword [rdx + 0x38]
mov rsi, rax
mov qword [rsp + 0xe0], rax
mov rdx, qword [r12]
mov rcx, r12
call qword [rdx + 0x38]
mov rbx, rax
mov qword [rsp + 0xa8], rax
mov rcx, rbp
mov rdx, qword [rcx]
call qword [rdx + 0x30]
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + 0x28]
mov dword [rsp + 0xc8], eax
mov eax, dword [rsp + 0x80]
mov dword [r15 + 0x10], eax
mov qword [r15 + 0x18], rsi
mov qword [r15 + 0x20], rbx
mov rax, qword [rsp + 0x108]
mov qword [rsp + 0xa0], rax
jmp 0x1400b6af4
mov edi, dword [rsp + 0x50]
jmp 0x1400b6ad9
mov edi, dword [rsp + 0x50]
cmp edi, 1
jne 0x1400b6e11
mov rcx, qword [rsp + 0x108]
mov rax, qword [rcx]
call qword [rax]
mov rbp, qword [rsp + 0x60]
add edi, 1
mov dword [rsp + 0x50], edi
cmp edi, 2
jge 0x1400b6e0d
jmp 0x1400b3510
call fcn.140049470
mov rdi, rax
mov rbx, qword [rax]
mov edx, Ordinal_5216
lea rcx, str...optcore.cpp
call fcn.1400a0fc0
mov r8, rax
lea rdx, str._s:_Error_Parameters.
mov rcx, rdi
call qword [rbx + 0x10]
mov rdi, qword [rsp + 0x70]
mov rax, qword [rdi]
mov edx, 0xd6
mov rcx, rdi
call qword [rax + 0x40]
xor eax, eax
jmp 0x1400b6ee0
call fcn.140049470
mov rbx, rax
mov rsi, qword [rax]
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
mov edx, 0x15bc
lea rcx, str...optcore.cpp
call fcn.1400a0fc0
mov r8, rax
mov r9d, edi
lea rdx, str._s:_CopyFile_failed._ErrorCode:_d_n
mov rcx, rbx
call qword [rsi + 0x10]
nop
lea rcx, [rsp + 0x7d0]
call fcn.140050540
xor eax, eax
jmp 0x1400b6ee0
call fcn.140049470
mov rdi, rax
mov rbx, qword [rax]
mov edx, Ordinal_5558
lea rcx, str...optcore.cpp
call fcn.1400a0fc0
mov r8, rax
lea rdx, str._s:_Not_found_AOMEI_BCD_NAME
mov rcx, rdi
call qword [rbx + 0x10]
xor eax, eax
jmp 0x1400b6ee0
call fcn.140049470
mov rdi, rax
mov rbx, qword [rax]
mov edx, 0x158f
lea rcx, str...optcore.cpp
call fcn.1400a0fc0
mov r8, rax
lea rdx, [0x1402eb918]
mov rcx, rdi
call qword [rbx + 0x10]
xor eax, eax
jmp 0x1400b6ee0
call fcn.140049470
mov rdi, rax
mov rbx, qword [rax]
mov edx, 0x157f
lea rcx, str...optcore.cpp
call fcn.1400a0fc0
mov r8, rax
lea rdx, str._s:_AllocVolumeGuid_Failed.
mov rcx, rdi
call qword [rbx + 0x10]
xor eax, eax
jmp 0x1400b6ee0
lea rcx, [rsp + 0x7d0]
call fcn.140050540
xor eax, eax
jmp 0x1400b6ee0
lea rcx, [rsp + 0x7d0]
call fcn.140050540
xor eax, eax
jmp 0x1400b6ee0
lea rcx, [rsp + 0x7d0]
call fcn.140050540
xor eax, eax
jmp 0x1400b6ee0
xor eax, eax
jmp 0x1400b6ee0
xor eax, eax
jmp 0x1400b6ee0
xor eax, eax
jmp 0x1400b6ee0
xor eax, eax
jmp 0x1400b6ee0
call fcn.140049470
mov rbx, rax
mov rsi, qword [rax]
mov rdx, qword [rdi]
mov rcx, rdi
call qword [rdx + 0xc8]
mov edi, eax
mov edx, 0x1600
lea rcx, str...optcore.cpp
call fcn.1400a0fc0
mov r8, rax
mov r9d, edi
lea rdx, str._s:_Format_fat_partition_failed._ErrCode:__d
mov rcx, rbx
call qword [rsi + 0x10]
xor eax, eax
jmp 0x1400b6ee0
lea rcx, [rsp + 0x7d0]
call fcn.140050540
xor eax, eax
jmp 0x1400b6ee0
lea rcx, [rsp + 0x7d0]
call fcn.140050540
xor eax, eax
jmp 0x1400b6ee0
lea rcx, [rsp + 0x7d0]
call fcn.140050540
xor eax, eax
jmp 0x1400b6ee0
xor eax, eax
jmp 0x1400b6ee0
mov rax, qword [r13]
mov edx, 6
mov rcx, r13
call qword [rax + 0x40]
call fcn.140049470
mov rbx, rax
xor edx, edx
mov r8d, 0x80
lea rsi, [0x1404342a0]
mov rcx, rsi
call sub.ntdll.dll_memset
mov edx, 0x5c
lea rcx, str...optcore.cpp
call qword [sym.imp.ntdll.dll_strrchr]
mov rdi, rax
test rax, rax
je 0x1400b6df3
mov byte [rsp + reloc.MFC80U.DLL_Ordinal_4048], 0
xor eax, eax
mov qword [rsp + reloc.MFC80U.DLL_Ordinal_4049], rax
mov word [rsp + Ordinal_4061], ax
mov byte [rsp + Ordinal_4061], al
mov r8d, 0x14db
lea rdx, [0x1402dfd08]
lea rcx, [rsp + reloc.MFC80U.DLL_Ordinal_4048]
call qword [sym.imp.ntdll.dll_sprintf]
lea rdx, [rdi + 1]
mov rcx, rsi
sub rcx, rdx
nop
nop
nop
movzx eax, byte [rdx]
mov byte [rcx + rdx], al
add rdx, 1
test al, al
jne 0x1400b6db0
mov rdi, rsi
xor eax, eax
or rcx, 0xffffffffffffffff
repne scasb al, byte [rdi]
lea rdx, [rsp + reloc.MFC80U.DLL_Ordinal_4048]
xor ecx, ecx
nop
nop
nop
nop
movzx eax, byte [rdx + rcx]
mov byte [rdi + rcx - 1], al
add rcx, 1
test al, al
jne 0x1400b6de0
mov rbp, rsi
mov rax, qword [rbx]
mov r8, rbp
lea rdx, str._s:_Failed_to_UpdatePartTable.
mov rcx, rbx
call qword [rax + 0x10]
xor eax, eax
jmp 0x1400b6ee0
mov eax, dword [rsp + 0x78]
mov ebp, dword [rsp + 0x40]
cmp ebp, 1
jne 0x1400b6ed6
test eax, eax
je 0x1400b6ed6
mov rax, qword [r14]
mov rcx, r14
call qword [rax + 0x30]
mov rcx, rax
call fcn.140095e80
mov rdx, qword [r14]
mov rcx, r14
call qword [rdx + reloc.MFC80U.DLL_Ordinal_512]
test eax, eax
je 0x1400b6e9d
mov rax, qword [r14]
mov rcx, r14
call qword [rax + 0x1f8]
test eax, eax
je 0x1400b6e9d
mov rax, qword [r14]
mov rcx, r14
call qword [rax + 0x30]
mov rbx, rax
mov rdx, qword [r14]
mov rcx, r14
call qword [rdx + 0x90]
mov rsi, rax
mov rdx, qword [r14]
mov rcx, r14
call qword [rdx + 0x90]
mov rdi, rax
mov rdx, qword [rbx]
mov rcx, rbx
call qword [rdx + 0x50]
mov ecx, eax
movzx r9d, bpl
mov r8, rsi
mov rdx, rdi
call fcn.140098550
jmp 0x1400b6ed6
mov rax, qword [r14]
mov rcx, r14
call qword [rax + 0x30]
mov rdi, rax
mov rdx, qword [r14]
mov rcx, r14
call qword [rdx + 0x90]
mov rbx, rax
mov rdx, qword [rdi]
mov rcx, rdi
call qword [rdx + 0x50]
mov ecx, eax
mov r9b, 1
mov r8, rbx
mov rdx, qword [rsp + 0x148]
call fcn.140098550
mov rax, qword [r14]
mov rcx, r14
call qword [rax]
mov eax, ebp
mov rcx, qword [rsp + 0x1d70]
xor rcx, rsp
call fcn.140161080
mov rbx, qword [rsp + 0x1dd8]
add rsp, 0x1d80
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret