Function at 0x14001bcb0
Capabilities:
Create directory
Get file attributes

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1f]
sub rsp, 0xe8
mov rax, qword [0x14004d298]
xor rax, rsp
mov qword [rbp + 7], rax
mov rax, qword gs:[0x58]
mov rdi, rcx
mov r13, rdx
mov qword [rbp - 0x49], rdx
mov edx, 8
mov ebx, r8d
mov qword [rbp - 0x61], r9
xor esi, esi
mov rcx, qword [rax]
lea rax, str.CTieredVolume::InitializeJetInstance
mov dword [rbp - 0x69], ebx
mov qword [rdx + rcx], rax
lea rcx, [rbp - 0x59]
call fcn.140005448
mov rcx, qword [rdi + 0x258]
xor eax, eax
and dword [rbp - 0x71], eax
xor r12d, r12d
mov dword [rbp - 0x75], eax
mov byte [rbp - 0x79], sil
call qword [sym.imp.api_ms_win_core_file_l1_1_0.dll_GetFileAttributesW]
nop dword [rax + rax]
or r15d, 0xffffffff
mov r14d, 0xb7
cmp eax, r15d
jne 0x14001bf16
lea r13, [rdi + 0x2b8]
mov rcx, r13
call qword [sym.imp.ntdll.dll_RtlCreateSystemVolumeInformationFolder]
nop dword [rax + rax]
mov ebx, eax
test eax, eax
jns 0x14001bdc4
lea r14d, [rsi + 1]
bts ebx, 0x1c
mov r12d, r14d
mov dword [rbp - 0x51], ebx
mov rcx, qword [0x14004d128]
lea r15, [0x14004d128]
cmp rcx, r15
je 0x14001cd48
test byte [rcx + 0x1c], r14b
je 0x14001cd05
cmp byte [rcx + 0x19], 2
jb 0x14001cd05
mov rcx, qword [rcx + 0x10]
lea edx, [rsi + 0x26]
mov r9, r13
mov dword [rsp + 0x20], ebx
lea r8, [0x140046aa8]
call fcn.14000c3e8
mov rcx, qword [0x14004d128]
mov eax, esi
jmp 0x14001cd08
mov rcx, qword [rdi + 0x270]
call qword [sym.imp.api_ms_win_core_file_l1_1_0.dll_GetFileAttributesW]
nop dword [rax + rax]
cmp eax, r15d
jne 0x14001be86
mov rcx, qword [rdi + 0x270]
xor edx, edx
call qword [sym.imp.api_ms_win_core_file_l1_1_0.dll_CreateDirectoryW]
nop dword [rax + rax]
test eax, eax
jne 0x14001be86
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
cmp eax, r14d
je 0x14001be86
mov r12d, 2
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
mov ecx, eax
call fcn.140002f1c
mov ebx, eax
mov dword [rbp - 0x51], eax
mov rcx, qword [0x14004d128]
lea r15, [0x14004d128]
cmp rcx, r15
je 0x14001cd48
lea r14d, [r12 - 1]
test byte [rcx + 0x1c], r14b
je 0x14001cd05
cmp byte [rcx + 0x19], r12b
jb 0x14001cd05
lea r9, [rdi + 0x268]
lea edx, [r12 + 0x25]
mov rcx, qword [rcx + 0x10]
lea rax, [rdi + 0x2a0]
mov dword [rsp + 0x28], ebx
mov qword [rsp + 0x20], rax
call fcn.14001ec18
jmp 0x14001bdb6
mov rcx, qword [rdi + 0x258]
xor edx, edx
call qword [sym.imp.api_ms_win_core_file_l1_1_0.dll_CreateDirectoryW]
nop dword [rax + rax]
test eax, eax
jne 0x14001bf0f
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
cmp eax, r14d
je 0x14001bf0f
mov r12d, 3
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
mov ecx, eax
call fcn.140002f1c
mov ebx, eax
mov dword [rbp - 0x51], eax
mov rcx, qword [0x14004d128]
lea r15, [0x14004d128]
cmp rcx, r15
je 0x14001cd48
lea r14d, [r12 - 2]
test byte [rcx + 0x1c], r14b
je 0x14001cd05
cmp byte [rcx + 0x19], 2
jb 0x14001cd05
lea r9, [rdi + 0x250]
lea edx, [r12 + 0x25]
jmp 0x14001be68
mov ebx, dword [rbp - 0x69]
mov r13, qword [rbp - 0x49]
mov rcx, qword [rdi + 0x288]
call qword [sym.imp.api_ms_win_core_file_l1_1_0.dll_GetFileAttributesW]
nop dword [rax + rax]
cmp eax, r15d
jne 0x14001bfb5
mov rcx, qword [rdi + 0x288]
xor edx, edx
call qword [sym.imp.api_ms_win_core_file_l1_1_0.dll_CreateDirectoryW]
nop dword [rax + rax]
test eax, eax
jne 0x14001bfb5
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
cmp eax, r14d
je 0x14001bfb5
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
mov ecx, eax
call fcn.140002f1c
mov ebx, eax
mov dword [rbp - 0x51], eax
mov rcx, qword [0x14004d128]
lea r15, [0x14004d128]
cmp rcx, r15
je 0x14001cd48
mov r14d, 1
test byte [rcx + 0x1c], r14b
je 0x14001cd05
cmp byte [rcx + 0x19], 2
jb 0x14001cd05
lea r9, [rdi + 0x280]
lea edx, [r14 + 0x28]
jmp 0x14001be68
xor eax, eax
lea r15, [0x14004d128]
mov dword [rbp - 0x75], eax
lea r14d, [rax + 1]
test ebx, ebx
je 0x14001c405
lea r12d, [rax + 7]
jmp 0x14001bfd6
mov ebx, dword [rbp - 0x69]
cmp byte [rdi + 0xa5], 0
jne 0x14001c37f
cmp byte [rdi + 0xa6], 0
jne 0x14001c37f
mov rcx, qword [rdi + 0x300]
xor edx, edx
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_WaitForSingleObject]
nop dword [rax + rax]
cmp eax, 0x102
jne 0x14001c37f
mov rcx, qword [rdi + 0x2f8]
xor edx, edx
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_WaitForSingleObject]
nop dword [rax + rax]
cmp eax, 0x102
jne 0x14001c37f
mov r9, qword [rbp - 0x61]
mov r8d, ebx
mov rdx, r13
mov rcx, rdi
call fcn.14001a19c
mov dword [rbp - 0x51], eax
mov ebx, eax
test eax, eax
jne 0x14001c335
mov rdx, r13
mov byte [rbp - 0x79], r14b
mov rcx, rdi
call fcn.14001b4dc
mov rcx, qword [rbp - 0x61]
xor r8d, r8d
xor edx, edx
call qword [sym.imp.ESENT.dll_JetInit3W]
nop dword [rax + rax]
mov rdx, r13
mov rcx, rdi
mov esi, eax
call fcn.14001b4dc
test esi, esi
je 0x14001c32b
cmp esi, 0xfffffbfa
je 0x14001c2e0
cmp esi, 0xfffffdef
je 0x14001c28c
cmp esi, 0xfffffbbc
je 0x14001c28c
cmp esi, 0xfffff8f0
je 0x14001c28c
cmp esi, 0xfffffc0d
jne 0x14001c0c7
mov ebx, 0x8007000e
jmp 0x14001c0e2
test esi, esi
mov eax, 0x8e5e0000
mov ecx, 0xe5e0000
cmovs ecx, eax
mov eax, esi
cdq
xor eax, edx
sub eax, edx
movzx ebx, ax
or ebx, ecx
mov dword [rbp - 0x51], ebx
mov rcx, qword [0x14004d128]
cmp rcx, r15
je 0x14001c119
test byte [rcx + 0x1c], r14b
je 0x14001c119
cmp byte [rcx + 0x19], 2
jb 0x14001c119
mov rcx, qword [rcx + 0x10]
lea r8, [0x140046aa8]
mov edx, 0x2e
mov dword [rsp + 0x20], esi
mov r9, r13
call fcn.14001ead4
mov rax, qword [rbp - 0x61]
mov r8d, 8
mov rcx, rdi
mov rdx, qword [rax]
call fcn.14001ac60
xor eax, eax
mov byte [rbp - 0x79], al
cmp byte [rdi + 0xa5], al
jne 0x14001c247
cmp byte [rdi + 0xa6], al
jne 0x14001c247
mov rcx, qword [rdi + 0x300]
xor edx, edx
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_WaitForSingleObject]
nop dword [rax + rax]
cmp eax, 0x102
jne 0x14001c247
mov rcx, qword [rdi + 0x2f8]
xor edx, edx
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_WaitForSingleObject]
nop dword [rax + rax]
cmp eax, 0x102
jne 0x14001c247
cmp dword [0x14004d098], 5
jbe 0x14001c218
movabs rdx, 0x400000000000
test qword [0x14004d0a8], rdx
je 0x14001c218
mov rax, qword [0x14004d0b0]
and rax, rdx
cmp rax, qword [0x14004d0b0]
jne 0x14001c218
lea rax, str.InitializeJetInstance
mov dword [rbp - 0x71], r12d
mov qword [rbp - 0x41], rax
lea rdx, [0x140047a75]
lea rax, [rdi + 0x2b8]
mov dword [rbp - 0x65], esi
mov qword [rbp - 0x31], rax
lea rax, [rbp - 0x71]
mov qword [rsp + 0x40], rax
lea rax, [rbp - 0x41]
mov qword [rsp + 0x38], rax
lea rax, [rbp - 0x65]
mov qword [rsp + 0x30], rax
lea rax, [rbp - 0x39]
mov qword [rsp + 0x28], rax
lea rax, [rbp - 0x31]
mov qword [rsp + 0x20], rax
mov qword [rbp - 0x39], r13
call fcn.140001134
mov ecx, 0x7d0
call qword [sym.imp.api_ms_win_core_synch_l1_2_0.dll_Sleep]
nop dword [rax + rax]
mov eax, dword [rbp - 0x75]
add eax, r14d
mov dword [rbp - 0x75], eax
cmp eax, 5
jb 0x14001bfd3
mov rcx, qword [0x14004d128]
jmp 0x14001cd08
mov rcx, qword [0x14004d128]
cmp rcx, r15
je 0x14001cd05
test byte [rcx + 0x1c], r14b
je 0x14001cd05
cmp byte [rcx + 0x19], 5
jb 0x14001cd05
mov rcx, qword [rcx + 0x10]
lea r9, [rdi + 0x2a0]
mov edx, 0xfc
lea r8, [0x1400467b0]
call fcn.140019588
jmp 0x14001ccfe
mov ecx, 0x70
call fcn.140002f1c
mov ebx, eax
mov dword [rbp - 0x51], eax
mov rcx, qword [0x14004d128]
cmp rcx, r15
je 0x14001cd54
test byte [rcx + 0x1c], r14b
je 0x14001cd05
cmp byte [rcx + 0x19], 2
jb 0x14001cd05
mov rcx, qword [rcx + 0x10]
lea r8, [0x140046aa8]
mov edx, 0x2d
mov dword [rsp + 0x20], esi
mov r9, r13
call fcn.14001ead4
jmp 0x14001ccfe
mov rcx, qword [0x14004d128]
cmp rcx, r15
je 0x14001c31f
test byte [rcx + 0x1c], r14b
je 0x14001c31f
cmp byte [rcx + 0x19], 2
jb 0x14001c31f
mov rcx, qword [rcx + 0x10]
lea r8, [0x140046aa8]
mov edx, 0x2c
mov dword [rsp + 0x20], 0xfffffbfa
mov r9, r13
call fcn.14001ead4
mov rcx, qword [0x14004d128]
xor esi, esi
xor ebx, ebx
mov dword [rbp - 0x51], ebx
jmp 0x14001cd05
xor ebx, ebx
mov dword [rbp - 0x51], ebx
jmp 0x14001ccfe
mov r12d, 5
mov rcx, qword [0x14004d128]
cmp rcx, r15
je 0x14001c376
test byte [rcx + 0x1c], r14b
je 0x14001c376
cmp byte [rcx + 0x19], 2
jb 0x14001c376
mov rcx, qword [rcx + 0x10]
lea edx, [r12 + 0x26]
mov r9, r13
mov dword [rsp + 0x20], eax
lea r8, [0x140046aa8]
call fcn.14000a60c
mov rcx, qword [0x14004d128]
mov byte [rbp - 0x79], 0
jmp 0x14001cd05
mov rcx, qword [0x14004d128]
cmp rcx, r15
je 0x14001c3ba
test byte [rcx + 0x1c], r14b
je 0x14001c3ba
cmp byte [rcx + 0x19], 5
jb 0x14001c3ba
mov rcx, qword [rcx + 0x10]
lea r9, [rdi + 0x2a0]
mov edx, 0xfc
lea r8, [0x1400467b0]
call fcn.140019588
mov rcx, qword [0x14004d128]
mov eax, 0x80830002
mov r12d, 4
mov ebx, eax
mov dword [rbp - 0x51], eax
mov esi, 0xfffffc18
cmp rcx, r15
je 0x14001c376
test byte [rcx + 0x1c], r14b
je 0x14001c376
cmp byte [rcx + 0x19], 2
jb 0x14001c376
mov r9d, dword [rdi + 0x80]
lea edx, [r12 + 0x26]
mov rcx, qword [rcx + 0x10]
lea r8, [0x140046aa8]
mov dword [rsp + 0x20], eax
call fcn.14000a318
jmp 0x14001c36f
mov rcx, qword [0x14004d128]
cmp byte [rdi + 0xa5], 0
mov r12d, 0x102
jne 0x14001cbd0
cmp byte [rdi + 0xa6], 0
jne 0x14001cbd0
mov rcx, qword [rdi + 0x300]
xor edx, edx
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_WaitForSingleObject]
nop dword [rax + rax]
cmp eax, r12d
jne 0x14001cbc9
mov rcx, qword [rdi + 0x2f8]
xor edx, edx
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_WaitForSingleObject]
nop dword [rax + rax]
cmp eax, r12d
jne 0x14001cbc9
mov r9, qword [rbp - 0x61]
xor r8d, r8d
mov rdx, r13
mov rcx, rdi
call fcn.14001a19c
mov dword [rbp - 0x51], eax
mov ebx, eax
test eax, eax
jne 0x14001cb7e
mov rdx, r13
mov byte [rbp - 0x79], r14b
mov rcx, rdi
call fcn.14001b4dc
cmp byte [rdi + 0xa5], bl
jne 0x14001cb07
cmp byte [rdi + 0xa6], bl
jne 0x14001cb07
mov rcx, qword [rdi + 0x300]
xor edx, edx
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_WaitForSingleObject]
nop dword [rax + rax]
cmp eax, r12d
jne 0x14001cb07
mov rcx, qword [rdi + 0x2f8]
xor edx, edx
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_WaitForSingleObject]
nop dword [rax + rax]
cmp eax, r12d
jne 0x14001cb07
mov r8d, dword [rbp - 0x71]
xor edx, edx
mov rcx, qword [rbp - 0x61]
call qword [sym.imp.ESENT.dll_JetInit3W]
nop dword [rax + rax]
mov esi, eax
test eax, eax
je 0x14001c552
cmp eax, 0xfffffdef
je 0x14001c546
cmp eax, 0xfffffbbc
je 0x14001c546
cmp eax, 0xfffff8f0
je 0x14001c546
cmp eax, 0xfffffc0d
jne 0x14001c529
mov ebx, 0x8007000e
jmp 0x14001c552
test esi, esi
mov eax, 0x8e5e0000
mov ecx, 0xe5e0000
cmovs ecx, eax
mov eax, esi
cdq
xor eax, edx
sub eax, edx
movzx ebx, ax
or ebx, ecx
jmp 0x14001c552
mov ecx, 0x70
call fcn.140002f1c
mov ebx, eax
mov rdx, r13
mov dword [rbp - 0x51], ebx
mov rcx, rdi
call fcn.14001b4dc
mov r12d, 0xc
test esi, esi
je 0x14001cafd
cmp esi, 0xfffffbfa
je 0x14001cab2
cmp esi, 0xfffffdef
je 0x14001ca75
cmp esi, 0xfffffbbc
je 0x14001ca75
cmp esi, 0xfffff8f0
je 0x14001ca75
lea eax, [rsi + 0x21f]
cmp eax, 0x2a
ja 0x14001c6f9
movabs rcx, 0x40000000011
bt rcx, rax
jae 0x14001c6f9
mov rcx, qword [0x14004d128]
cmp rcx, r15
je 0x14001c5f5
test byte [rcx + 0x1c], r14b
je 0x14001c5f5
cmp byte [rcx + 0x19], 2
jb 0x14001c5f5
mov rcx, qword [rcx + 0x10]
lea edx, [r12 + 0x28]
mov r9, r13
mov dword [rsp + 0x20], esi
lea r8, [0x140046aa8]
call fcn.14001ead4
mov rax, qword [rbp - 0x61]
mov r12d, 0xd
mov rcx, rdi
mov rdx, qword [rax]
lea r8d, [r12 - 5]
call fcn.14001ac60
cmp byte [rdi + 0xa5], 0
mov byte [rbp - 0x79], 0
jne 0x14001c91d
cmp byte [rdi + 0xa6], 0
jne 0x14001c91d
mov rcx, qword [rdi + 0x300]
xor edx, edx
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_WaitForSingleObject]
nop dword [rax + rax]
cmp eax, 0x102
jne 0x14001c91d
mov rcx, qword [rdi + 0x2f8]
xor edx, edx
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_WaitForSingleObject]
nop dword [rax + rax]
cmp eax, 0x102
jne 0x14001c91d
mov ecx, 0x7d0
call qword [sym.imp.api_ms_win_core_synch_l1_2_0.dll_Sleep]
nop dword [rax + rax]
lea r9, str.edb.log
xor r8d, r8d
xor edx, edx
mov rcx, r13
call fcn.140039cfc
lea r9, str.edbtmp.log
xor r8d, r8d
xor edx, edx
mov rcx, r13
call fcn.140039cfc
lea r9, str.edb.chk
xor r8d, r8d
xor edx, edx
mov rcx, r13
call fcn.140039cfc
lea rax, str..log
xor r9d, r9d
xor r8d, r8d
mov qword [rsp + 0x20], rax
mov rdx, r13
mov rcx, rdi
call fcn.14003a374
lea rax, str..jrs
xor r9d, r9d
xor r8d, r8d
mov qword [rsp + 0x20], rax
mov rdx, r13
mov rcx, rdi
call fcn.14003a374
jmp 0x14001c867
cmp esi, 0xfffffb40
jne 0x14001c78f
mov rax, qword [rbp - 0x61]
mov r8d, 8
mov rcx, rdi
mov rdx, qword [rax]
call fcn.14001ac60
mov byte [rbp - 0x79], 0
mov rcx, qword [0x14004d128]
cmp rcx, r15
je 0x14001c75d
test byte [rcx + 0x1c], r14b
je 0x14001c75d
cmp byte [rcx + 0x19], 2
jb 0x14001c75d
mov rcx, qword [rcx + 0x10]
lea r8, [0x140046aa8]
mov edx, 0x35
mov dword [rsp + 0x20], 0xfffffb40
mov r9, r13
call fcn.14001ead4
mov rcx, qword [0x14004d128]
mov eax, dword [rbp - 0x71]
test eax, eax
jne 0x14001c774
lea r12d, [rax + 0xe]
mov dword [rbp - 0x71], 0x80
jmp 0x14001c86e
cmp eax, 0x80
jne 0x14001c969
lea r12d, [rax - 0x71]
mov dword [rbp - 0x71], 0x84
jmp 0x14001c86e
cmp esi, 0xfffffddf
je 0x14001c7a3
cmp esi, 0xfffffbc3
jne 0x14001c9ae
mov rax, qword [rbp - 0x61]
mov r12d, 0x11
mov rcx, rdi
mov rdx, qword [rax]
lea r8d, [r12 - 9]
call fcn.14001ac60
mov byte [rbp - 0x79], 0
mov rcx, qword [0x14004d128]
cmp rcx, r15
je 0x14001c7fc
test byte [rcx + 0x1c], r14b
je 0x14001c7fc
cmp byte [rcx + 0x19], 2
jb 0x14001c7fc
mov rcx, qword [rcx + 0x10]
lea edx, [r12 + 0x26]
mov r9, r13
mov dword [rsp + 0x20], esi
lea r8, [0x140046aa8]
call fcn.14001ead4
mov rcx, qword [0x14004d128]
cmp byte [rdi + 0xa5], 0
jne 0x14001c9ea
cmp byte [rdi + 0xa6], 0
jne 0x14001c9ea
mov rcx, qword [rdi + 0x300]
xor edx, edx
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_WaitForSingleObject]
nop dword [rax + rax]
cmp eax, 0x102
jne 0x14001c9e3
mov rcx, qword [rdi + 0x2f8]
xor edx, edx
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_WaitForSingleObject]
nop dword [rax + rax]
cmp eax, 0x102
jne 0x14001c9e3
mov ecx, 0x7d0
call qword [sym.imp.api_ms_win_core_synch_l1_2_0.dll_Sleep]
nop dword [rax + rax]
mov rcx, qword [0x14004d128]
cmp dword [0x14004d098], 5
jbe 0x14001c902
movabs r8, 0x400000000000
test qword [0x14004d0a8], r8
je 0x14001c902
mov rax, qword [0x14004d0b0]
and rax, r8
cmp rax, qword [0x14004d0b0]
jne 0x14001c902
lea rax, str.InitializeJetInstance
mov dword [rbp - 0x65], r12d
mov qword [rbp - 0x31], rax
lea rdx, [0x140047a75]
lea rax, [rdi + 0x2b8]
mov dword [rbp - 0x69], esi
mov qword [rbp - 0x41], rax
lea rax, [rbp - 0x65]
mov qword [rsp + 0x40], rax
lea rax, [rbp - 0x31]
mov qword [rsp + 0x38], rax
lea rax, [rbp - 0x69]
mov qword [rsp + 0x30], rax
lea rax, [rbp - 0x39]
mov qword [rsp + 0x28], rax
lea rax, [rbp - 0x41]
mov qword [rsp + 0x20], rax
mov qword [rbp - 0x39], r13
call fcn.140001134
mov rcx, qword [0x14004d128]
mov eax, dword [rbp - 0x75]
add eax, r14d
mov dword [rbp - 0x75], eax
cmp eax, 5
jb 0x14001c40c
mov byte [rbp - 0x79], 0
jmp 0x14001cc58
mov rcx, qword [0x14004d128]
cmp rcx, r15
je 0x14001cc55
test byte [rcx + 0x1c], r14b
je 0x14001cc55
cmp byte [rcx + 0x19], 5
jb 0x14001cc55
mov rcx, qword [rcx + 0x10]
lea r9, [rdi + 0x2a0]
mov edx, 0xfc
lea r8, [0x1400467b0]
call fcn.140019588
mov rcx, qword [0x14004d128]
jmp 0x14001cc55
mov r12d, 0x10
cmp rcx, r15
je 0x14001cc55
test byte [rcx + 0x1c], r14b
je 0x14001cc55
cmp byte [rcx + 0x19], 2
jb 0x14001cc55
lea edx, [r12 + 0x26]
mov dword [rsp + 0x20], 0xfffffb40
mov rcx, qword [rcx + 0x10]
lea r8, [0x140046aa8]
mov r9, r13
call fcn.14001ead4
jmp 0x14001c95d
mov r12d, 0x13
mov rcx, qword [0x14004d128]
cmp rcx, r15
je 0x14001cc55
test byte [rcx + 0x1c], r14b
je 0x14001cc55
cmp byte [rcx + 0x19], 2
jb 0x14001cc55
lea edx, [r12 + 0x26]
mov dword [rsp + 0x20], esi
jmp 0x14001c999
mov rcx, qword [0x14004d128]
cmp rcx, r15
je 0x14001ca1e
test byte [rcx + 0x1c], r14b
je 0x14001ca1e
cmp byte [rcx + 0x19], 5
jb 0x14001ca1e
mov rcx, qword [rcx + 0x10]
lea r9, [rdi + 0x2a0]
mov edx, 0xfc
lea r8, [0x1400467b0]
call fcn.140019588
mov rcx, qword [0x14004d128]
mov eax, 0x80830002
mov r12d, 0x12
mov ebx, eax
mov dword [rbp - 0x51], eax
mov esi, 0xfffffc18
cmp rcx, r15
je 0x14001cc55
test byte [rcx + 0x1c], r14b
je 0x14001cc55
cmp byte [rcx + 0x19], 2
jb 0x14001cc55
lea edx, [r12 + 0x26]
mov r9d, dword [rdi + 0x80]
lea r8, [0x140046aa8]
mov rcx, qword [rcx + 0x10]
mov dword [rsp + 0x20], eax
call fcn.14000a318
jmp 0x14001c95d
mov ecx, 0x70
call fcn.140002f1c
mov ebx, eax
mov dword [rbp - 0x51], eax
mov rcx, qword [0x14004d128]
cmp rcx, r15
je 0x14001cc55
test byte [rcx + 0x1c], r14b
je 0x14001cc55
cmp byte [rcx + 0x19], 2
jb 0x14001cc55
mov edx, 0x33
jmp 0x14001c9dd
mov rcx, qword [0x14004d128]
cmp rcx, r15
je 0x14001caf1
test byte [rcx + 0x1c], r14b
je 0x14001caf1
cmp byte [rcx + 0x19], 2
jb 0x14001caf1
mov rcx, qword [rcx + 0x10]
lea r8, [0x140046aa8]
mov edx, 0x32
mov dword [rsp + 0x20], 0xfffffbfa
mov r9, r13
call fcn.14001ead4
mov rcx, qword [0x14004d128]
xor esi, esi
xor ebx, ebx
mov dword [rbp - 0x51], ebx
jmp 0x14001cc55
xor ebx, ebx
mov dword [rbp - 0x51], ebx
jmp 0x14001c95d
mov rcx, qword [0x14004d128]
cmp rcx, r15
je 0x14001cb42
test byte [rcx + 0x1c], r14b
je 0x14001cb42
cmp byte [rcx + 0x19], 5
jb 0x14001cb42
mov rcx, qword [rcx + 0x10]
lea r9, [rdi + 0x2a0]
mov edx, 0xfc
lea r8, [0x1400467b0]
call fcn.140019588
mov rcx, qword [0x14004d128]
mov eax, 0x80830002
mov esi, 0xfffffc18
mov ebx, eax
mov dword [rbp - 0x51], eax
mov r12d, 0xb
cmp rcx, r15
je 0x14001cc55
test byte [rcx + 0x1c], r14b
je 0x14001cc55
cmp byte [rcx + 0x19], 2
jb 0x14001cc55
lea edx, [r12 + 0x26]
jmp 0x14001ca55
mov r12d, 9
mov rcx, qword [0x14004d128]
cmp rcx, r15
je 0x14001cc51
test byte [rcx + 0x1c], r14b
je 0x14001cc51
cmp byte [rcx + 0x19], 2
jb 0x14001cc51
mov rcx, qword [rcx + 0x10]
lea edx, [r12 + 0x27]
mov r9, r13
mov dword [rsp + 0x20], eax
lea r8, [0x140046aa8]
call fcn.14000a60c
jmp 0x14001cc4a
mov rcx, qword [0x14004d128]
cmp rcx, r15
je 0x14001cc04
test byte [rcx + 0x1c], r14b
je 0x14001cc04
cmp byte [rcx + 0x19], 5
jb 0x14001cc04
mov rcx, qword [rcx + 0x10]
lea r9, [rdi + 0x2a0]
mov edx, 0xfc
lea r8, [0x1400467b0]
call fcn.140019588
mov rcx, qword [0x14004d128]
mov eax, 0x80830002
mov r12d, 8
mov ebx, eax
mov dword [rbp - 0x51], eax
mov esi, 0xfffffc18
cmp rcx, r15
je 0x14001cc51
test byte [rcx + 0x1c], r14b
je 0x14001cc51
cmp byte [rcx + 0x19], 2
jb 0x14001cc51
mov r9d, dword [rdi + 0x80]
lea edx, [r12 + 0x27]
mov rcx, qword [rcx + 0x10]
lea r8, [0x140046aa8]
mov dword [rsp + 0x20], eax
call fcn.14000a318
mov rcx, qword [0x14004d128]
mov byte [rbp - 0x79], 0
mov eax, dword [rbp - 0x75]
cmp dword [rbp - 0x71], 0x84
jne 0x14001cd08
test ebx, ebx
jne 0x14001cd08
test byte [0x14004dcc0], 2
je 0x14001ccce
movzx eax, word [rdi + 0x2b8]
lea r9d, [rbx + 3]
and dword [rbp - 0xd], ebx
lea rdx, [0x140045b70]
and dword [rbp + 3], ebx
shr ax, 1
movzx ecx, ax
lea rax, [rbp - 0x71]
mov qword [rbp - 0x19], rax
mov rax, qword [rdi + 0x2c0]
mov qword [rbp - 9], rax
lea rax, [rbp - 0x29]
mov word [rbp - 0x71], cx
add ecx, ecx
mov qword [rsp + 0x20], rax
mov dword [rbp - 0x11], 2
mov dword [rbp - 1], ecx
call fcn.140018d70
mov rcx, qword [0x14004d128]
jmp 0x14001ccd0
xor eax, eax
cmp rcx, r15
je 0x14001cd44
test byte [rcx + 0x1c], r14b
je 0x14001cd05
cmp byte [rcx + 0x19], 4
jb 0x14001cd05
mov rcx, qword [rcx + 0x10]
lea r8, [0x140046aa8]
mov edx, 0x3a
mov qword [rsp + 0x20], r13
mov r9d, eax
call fcn.14000a290
mov rcx, qword [0x14004d128]
mov eax, dword [rbp - 0x75]
cmp rcx, r15
je 0x14001cd40
test byte [rcx + 0x1c], r14b
je 0x14001cd40
cmp byte [rcx + 0x19], 2
mov r13, qword [rbp - 0x49]
jb 0x14001cd44
mov rcx, qword [rcx + 0x10]
lea r8, [0x140046aa8]
mov edx, 0x3b
mov dword [rsp + 0x28], ebx
mov r9d, eax
mov qword [rsp + 0x20], r13
call fcn.14001ea34
jmp 0x14001cd44
mov r13, qword [rbp - 0x49]
test esi, esi
jne 0x14001cd54
test ebx, ebx
je 0x14001ce0c
mov r13, qword [rbp - 0x49]
cmp dword [0x14004d098], 5
jbe 0x14001cded
movabs rcx, 0x400000000000
test qword [0x14004d0a8], rcx
je 0x14001cded
mov rax, qword [0x14004d0b0]
and rax, rcx
cmp rax, qword [0x14004d0b0]
jne 0x14001cded
lea rax, str.InitializeJetInstance
mov dword [rbp - 0x65], ebx
mov qword [rbp - 0x31], rax
lea rdx, [0x140047a03]
lea rax, [rdi + 0x2b8]
mov dword [rbp - 0x69], r12d
mov qword [rbp - 0x41], rax
lea rax, [rbp - 0x65]
mov qword [rsp + 0x48], rax
lea rax, [rbp - 0x69]
mov qword [rsp + 0x40], rax
lea rax, [rbp - 0x31]
mov qword [rsp + 0x38], rax
lea rax, [rbp - 0x75]
mov qword [rsp + 0x30], rax
lea rax, [rbp - 0x39]
mov qword [rsp + 0x28], rax
lea rax, [rbp - 0x41]
mov qword [rsp + 0x20], rax
mov dword [rbp - 0x75], esi
mov qword [rbp - 0x39], r13
call fcn.14000124c
test esi, esi
je 0x14001ce0c
cmp byte [rbp - 0x79], 0
je 0x14001ce0c
mov rax, qword [rbp - 0x61]
mov r8d, 8
mov rcx, rdi
mov rdx, qword [rax]
call fcn.14001ac60
lea rcx, [rbp - 0x59]
call fcn.1400059b8
mov eax, ebx
mov rcx, qword [rbp + 7]
xor rcx, rsp
call fcn.140001e70
add rsp, 0xe8
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret