Function at 0x1400239dc
Capabilities:
Get disk size
Query or enumerate registry value

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x108]
sub rsp, 0x208
mov qword [rbp + 0xa0], 0xfffffffffffffffe
mov rax, qword [0x14016f608]
xor rax, rsp
mov qword [rbp + 0xf0], rax
mov ebx, r9d
mov dword [rbp - 0x58], ebx
mov qword [rbp + 0x38], r8
mov qword [rbp + 0x78], rdx
mov r13, rcx
mov qword [rbp - 0x40], rcx
mov r14, qword [rbp + 0x178]
mov qword [rbp - 0x70], r14
mov r12, qword [rbp + 0x170]
mov qword [rbp - 0x30], r12
mov rax, qword [rbp + 0x180]
mov qword [rbp + 0x28], rax
mov rax, qword [rbp + 0x188]
mov qword [rbp + 0x70], rax
xor ecx, ecx
mov dword [rbp - 0x20], ecx
mov dword [rbp - 0x60], ecx
mov qword [rbp + 0x20], rcx
mov qword [rbp + 0x18], rcx
mov qword [rbp - 8], rcx
mov qword [rbp + 0x40], rcx
mov r15d, ecx
mov qword [rbp - 0x38], rcx
mov esi, ecx
mov qword [rbp - 0x50], rcx
mov qword [rbp - 0x10], rcx
mov dword [rsp + 0x70], ecx
mov qword [rbp - 0x18], rcx
mov byte [rbp - 0x65], cl
mov byte [rbp - 0x77], cl
mov byte [rbp - 0x66], cl
mov edi, ecx
mov byte [rbp - 0x5b], cl
mov byte [rbp - 0x76], cl
mov qword [rbp + 0x58], rcx
mov qword [rbp + 0x10], rcx
lea rax, [0x14016f048]
mov rcx, qword [0x14016f048]
cmp rcx, rax
je 0x140023ad3
test byte [rcx + 0x1c], 1
je 0x140023ad3
cmp byte [rcx + 0x19], 4
jb 0x140023ad3
mov edx, 0x1fc
lea r8, [0x140148140]
mov rcx, qword [rcx + 0x10]
call fcn.1400049d8
cmp ebx, dword [r13 + 0x170]
je 0x140023af4
lea r8, str.cVolumeName__m_cVolume
mov edx, 0x2f13
lea rcx, str.base_stor_blbengine_service_backup.cpp
call fcn.140082070
mov rax, qword [rbp + 0x28]
mov byte [rax], sil
mov rax, qword [rbp + 0x70]
and dword [rax], esi
lea rcx, [r13 + 0x58]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
inc dword [r13 + 0xe0]
lea rcx, [r13 + 0x58]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov eax, dword [r13 + 0xe0]
mov dword [r14 + 0x10], eax
lea rcx, [rbp - 0x5b]
call fcn.14008bdac
mov ebx, eax
test eax, eax
jns 0x140023b7e
mov rcx, qword [0x14016f048]
lea rax, [0x14016f048]
cmp rcx, rax
je 0x140025dac
test byte [rcx + 0x1c], 1
je 0x140025dac
cmp byte [rcx + 0x19], 2
jb 0x140025dac
mov edx, 0x1fd
mov r9d, ebx
lea r8, [0x140148140]
mov rcx, qword [rcx + 0x10]
call fcn.1400049f8
jmp 0x140025dac
lea r8, [rbp + 0x20]
lea rdx, [0x140145788]
mov rcx, qword [r13 + 0x158]
call fcn.140082ef4
mov ebx, eax
test eax, eax
js 0x140025dac
mov esi, dword [rbp - 0x58]
shl rsi, 4
mov rcx, rsi
call qword [sym.imp.ole32.dll_CoTaskMemAlloc]
mov qword [rbp + 0x18], rax
test rax, rax
jne 0x140023bc2
mov ebx, 0x8007000e
jmp 0x140025da8
mov r8, rsi
xor edx, edx
mov rcx, rax
call sub.msvcrt.dll_memset
mov eax, dword [rbp - 0x58]
shl eax, 4
mov esi, eax
mov ecx, eax
call qword [sym.imp.ole32.dll_CoTaskMemAlloc]
mov qword [rbp - 8], rax
test rax, rax
je 0x140023bb8
mov r8d, esi
xor edx, edx
mov rcx, rax
call sub.msvcrt.dll_memset
mov esi, dword [r14 + 8]
mov r15d, dword [rbp - 0x58]
cmp esi, r15d
jae 0x140025c8b
xor eax, eax
mov byte [rsp + 0x74], al
mov byte [rbp - 0x78], al
neg byte [rbp - 0x77]
sbb r15d, r15d
and r15d, edi
mov dword [rbp - 0x64], r15d
mov byte [rbp - 0x77], al
mov eax, esi
imul rcx, rax, 0x170
add rcx, qword [r13 + 0xd8]
mov qword [rbp - 0x80], rcx
mov rcx, qword [rbp + 0x38]
mov r12, qword [rcx + rax*8]
mov qword [rsp + 0x78], r12
lea rcx, [r13 + 0x58]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov dword [r13 + 0x174], esi
lea rcx, [r13 + 0x58]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
lea rcx, [rbp + 0xe0]
call qword [sym.imp.RPCRT4.dll_UuidCreate]
mov rsi, qword [rbp - 0x80]
test byte [rsi + 0x54], 1
je 0x140023d0c
mov ecx, dword [r14 + 8]
mov rax, qword [rbp + 0x38]
mov rcx, qword [rax + rcx*8]
lea rdx, [rbp - 0x38]
call fcn.140082ccc
test eax, eax
mov edi, r15d
mov r12d, eax
js 0x140024d25
test byte [rsi + 0x54], 0x40
je 0x140023e21
mov rdx, rsi
mov rcx, r13
call fcn.14002249c
mov ebx, eax
test eax, eax
js 0x140025d8e
lea rcx, [r13 + 0x58]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
inc dword [r13 + 0xe4]
lea rcx, [r13 + 0x58]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov eax, dword [r13 + 0xe4]
mov dword [r14 + 0xc], eax
mov eax, dword [r13 + 0x174]
add rax, rax
movups xmm0, xmmword [rbp + 0xe0]
mov rcx, qword [rbp + 0x18]
movdqu xmmword [rcx + rax*8], xmm0
mov ecx, dword [r14 + 8]
inc ecx
mov dword [r14 + 8], ecx
mov edi, r15d
xor eax, eax
jmp 0x140025c2f
xor edi, edi
mov rcx, qword [r13 + 0x1b0]
cmp dword [rcx + 0x50], edi
jbe 0x140023d4b
mov eax, edi
imul r14, rax, 0x38
add r14, qword [rcx + 0x58]
mov qword [rbp + 0x40], r14
mov rdx, r12
mov rcx, qword [r14 + 0x10]
call qword [sym.imp.msvcrt.dll__wcsicmp]
test eax, eax
je 0x140023d47
inc edi
mov rcx, qword [r13 + 0x1b0]
cmp edi, dword [rcx + 0x50]
jb 0x140023d1a
mov r14, qword [rbp - 0x70]
mov rax, qword [r13 + 0x1b0]
cmp edi, dword [rax + 0x50]
jne 0x140023db2
mov r12d, dword [rsi + 0x20]
test r12d, r12d
js 0x140023d9f
mov r12d, 0x80780020
mov rcx, qword [0x14016f048]
lea rax, [0x14016f048]
cmp rcx, rax
je 0x140023da6
test byte [rcx + 0x1c], 1
je 0x140023da6
cmp byte [rcx + 0x19], 2
jb 0x140023da6
mov edx, 0x1fe
mov r9, qword [rsp + 0x78]
lea r8, [0x140148140]
mov rcx, qword [rcx + 0x10]
call fcn.1400058d8
mov rcx, qword [0x14016f048]
mov byte [rbp - 0x78], 1
mov edi, r15d
jmp 0x140024d2c
mov rax, qword [rbp - 0x38]
test rax, rax
je 0x140023dca
mov rcx, rax
call qword [sym.imp.ole32.dll_CoTaskMemFree]
xor eax, eax
mov qword [rbp - 0x38], rax
mov rax, qword [rbp + 0x40]
mov rcx, qword [rax + 0x18]
test rcx, rcx
jne 0x140023c82
mov rcx, qword [0x14016f048]
lea rax, [0x14016f048]
cmp rcx, rax
je 0x140023e19
test byte [rcx + 0x1c], 1
je 0x140023e19
cmp byte [rcx + 0x19], 2
jb 0x140023e19
mov edx, 0x1ff
mov r9, r12
lea r8, [0x140148140]
mov rcx, qword [rcx + 0x10]
call fcn.1400058d8
mov rcx, qword [0x14016f048]
mov r12d, 0x80780020
jmp 0x140023da6
mov edi, 8
test byte [rsi + 0x54], dil
jne 0x140023ec5
test byte [rsi + 0x54], 0x20
jne 0x140023e4e
lea r8, str.VOLUME_HAS_SYSTEMSTATE_pVolCtxt__m_dwVolumeFlags_
mov edx, 0x2faf
lea rcx, str.base_stor_blbengine_service_backup.cpp
call fcn.140082070
mov rax, qword [0x14016f048]
lea rcx, [0x14016f048]
cmp rax, rcx
je 0x140023ea2
test byte [rax + 0x1c], 1
je 0x140023ea2
cmp byte [rax + 0x19], 4
jb 0x140023ea2
lea rdx, [rsi + 0x44]
lea rcx, [rbp + 0x80]
call fcn.14000fa10
nop
or dword [rbp - 0x20], 1
mov edx, 0x200
mov r9, qword [rax]
lea r8, [0x140148140]
mov rcx, qword [0x14016f048]
mov rcx, qword [rcx + 0x10]
call fcn.1400058d8
nop
mov eax, dword [rbp - 0x20]
test al, 1
je 0x140023cf8
and eax, 0xfffffffe
mov dword [rbp - 0x20], eax
mov rcx, qword [rbp + 0x80]
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
jmp 0x140023cf8
mov r8b, 1
mov edx, edi
mov rcx, r13
call fcn.14002bbbc
mov dword [r14 + 0x2c], edi
mov eax, dword [r14 + 8]
mov rdi, qword [rbp - 0x30]
cmp eax, dword [rdi + 8]
jne 0x140023ef7
cmp qword [rdi + 0x30], 0
je 0x140023ef7
mov rbx, qword [rdi + 0x30]
mov qword [rbp - 0x50], rbx
jmp 0x1400244a7
mov rax, qword [rbp - 0x50]
test rax, rax
je 0x140023f14
cmp rax, qword [r14 + 0x30]
je 0x140023f14
cmp rax, qword [rdi + 0x30]
je 0x140023f14
mov rcx, rax
call fcn.1400b9c24
xor edi, edi
mov eax, edi
mov qword [rbp - 0x50], rax
mov qword [rbp - 0x48], rax
test byte [rsi + 0x54], 1
je 0x140023f84
mov rcx, r13
call fcn.14002cc18
mov r12d, eax
test eax, eax
jns 0x140023f84
mov rcx, qword [0x14016f048]
lea rax, [0x14016f048]
cmp rcx, rax
je 0x140023daa
test byte [rcx + 0x1c], 1
je 0x140023daa
cmp byte [rcx + 0x19], 2
jb 0x140023daa
mov edx, 0x201
mov r9d, ebx
lea r8, [0x140148140]
mov rcx, qword [rcx + 0x10]
call fcn.1400049f8
mov rcx, qword [0x14016f048]
jmp 0x140023daa
lea r14, [r13 + 0x58]
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov eax, dword [r13 + 0x174]
imul rcx, rax, 0x170
add rcx, qword [r13 + 0xd8]
mov qword [rcx], rdi
mov qword [rcx + 8], rdi
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
test byte [r13 + 0x154], 0x10
jne 0x140023fea
cmp byte [r13 + 0x17c], dil
jne 0x140023fd2
cmp byte [r13 + 0x17d], dil
je 0x140023fea
lea r8, str.COMPACT_m_ulFeatures____m_rules.m_bExcludeAudio___m_rules.m_bExcludeVideo
mov edx, 0x2fe9
lea rcx, str.base_stor_blbengine_service_backup.cpp
call fcn.140082070
mov rcx, qword [0x14016f048]
lea rax, [0x14016f048]
cmp rcx, rax
je 0x14002402e
test byte [rcx + 0x1c], 1
je 0x14002402e
mov rbx, qword [rbp - 0x38]
cmp byte [rcx + 0x19], 4
jb 0x140024032
mov edx, 0x202
mov qword [rsp + 0x20], rbx
mov r9, qword [rsp + 0x78]
lea r8, [0x140148140]
mov rcx, qword [rcx + 0x10]
call fcn.1400059ac
jmp 0x140024032
mov rbx, qword [rbp - 0x38]
mov eax, dword [r13 + 0x174]
imul rcx, rax, 0x170
mov rax, qword [r13 + 0xd8]
add rax, 0x8c
add rcx, rax
call qword [sym.imp.KERNEL32.dll_GetSystemTimeAsFileTime]
mov eax, dword [r13 + 0x154]
mov r8b, byte [r13 + 0x17d]
mov dl, byte [r13 + 0x17c]
test al, 2
je 0x140024257
shr eax, 4
and al, 1
lea rcx, [rsp + 0x70]
mov qword [rsp + 0x58], rcx
lea rcx, [rbp]
mov qword [rsp + 0x50], rcx
lea rcx, [rbp + 8]
mov qword [rsp + 0x48], rcx
lea rcx, [rbp - 0x48]
mov qword [rsp + 0x40], rcx
lea rcx, [rbp + 0x88]
mov qword [rsp + 0x38], rcx
mov r9b, r8b
mov r8b, dl
mov dl, al
mov rcx, rbx
call fcn.1400b21a4
mov esi, eax
mov rax, qword [rbp - 0x48]
mov qword [rbp - 0x50], rax
mov eax, dword [r13 + 0x174]
imul rcx, rax, 0x170
mov rax, qword [r13 + 0xd8]
add rax, 0x94
add rcx, rax
call qword [sym.imp.KERNEL32.dll_GetSystemTimeAsFileTime]
mov r10, qword [0x14016f048]
lea rax, [0x14016f048]
cmp r10, rax
je 0x140024176
test byte [r10 + 0x1c], 1
je 0x140024176
cmp byte [r10 + 0x19], 4
jb 0x140024176
mov eax, dword [r13 + 0x174]
imul rdx, rax, 0x170
mov rcx, qword [r13 + 0xd8]
mov eax, dword [rdx + rcx + 0x8c]
mov dword [rbp + 0x50], eax
mov eax, dword [rdx + rcx + 0x90]
mov dword [rbp + 0x54], eax
mov eax, dword [rdx + rcx + 0x94]
mov dword [rbp + 0x48], eax
mov eax, dword [rdx + rcx + 0x98]
mov dword [rbp + 0x4c], eax
mov rcx, qword [rbp + 0x48]
sub rcx, qword [rbp + 0x50]
movabs rax, 0x346dc5d63886594b
mul rcx
mov r9, rdx
shr r9, 0xb
mov edx, 0x205
lea r8, [0x140148140]
mov rcx, qword [r10 + 0x10]
call fcn.14000fcd0
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov eax, dword [r13 + 0x174]
imul rcx, rax, 0x170
add rcx, qword [r13 + 0xd8]
mov rdi, qword [rbp]
mov qword [rcx], rdi
mov rbx, qword [rbp + 8]
mov qword [rcx + 8], rbx
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov r14, qword [rbp - 0x70]
mov qword [r14 + 0x20], rbx
mov qword [r14 + 0x18], rdi
mov ecx, esi
test esi, esi
je 0x14002449b
sub ecx, 1
je 0x14002447a
sub ecx, 3
je 0x1400243e4
sub ecx, 1
je 0x140024385
sub ecx, 1
je 0x1400243e4
sub ecx, 1
je 0x140024385
sub ecx, 0xf
je 0x1400243e4
cmp ecx, 9
je 0x1400243e4
mov rcx, qword [0x14016f048]
lea rax, [0x14016f048]
cmp rcx, rax
je 0x14002435e
test byte [rcx + 0x1c], 1
je 0x14002435e
mov edi, dword [rsp + 0x70]
cmp byte [rcx + 0x19], 2
jb 0x140024362
mov edx, 0x208
mov dword [rsp + 0x28], edi
mov dword [rsp + 0x20], esi
mov r9, qword [rsp + 0x78]
lea r8, [0x140148140]
mov rcx, qword [rcx + 0x10]
call fcn.14001017c
jmp 0x140024362
lea rax, [rsp + 0x70]
mov qword [rsp + 0x68], rax
lea rax, [rbp + 0x58]
mov qword [rsp + 0x60], rax
lea rax, [rbp]
mov qword [rsp + 0x58], rax
lea rax, [rbp + 8]
mov qword [rsp + 0x50], rax
lea rax, [rbp - 0x48]
mov qword [rsp + 0x48], rax
lea rax, [rbp + 0x88]
mov qword [rsp + 0x40], rax
mov byte [rsp + 0x38], dil
xor r9d, r9d
mov rcx, rbx
call fcn.1400b237c
mov esi, eax
test eax, eax
jne 0x1400240bb
mov rbx, qword [rbp - 0x48]
mov qword [rbp - 0x50], rbx
test rbx, rbx
jne 0x1400242d0
lea r8, str.ReplicationContext___NULL
mov edx, 0x1fb9
lea rcx, str.base_stor_blb_blbimg_blbimg.cxx
call fcn.140082070
cmp byte [rbx + 0xb8], dil
je 0x14002432c
mov edx, 0x2000
mov rcx, qword [rbp - 0x80]
call fcn.1400122c0
mov rcx, qword [0x14016f048]
lea rax, [0x14016f048]
cmp rcx, rax
je 0x1400240c3
test byte [rcx + 0x1c], 1
je 0x1400240c3
cmp byte [rcx + 0x19], 4
jb 0x1400240c3
mov edx, 0x203
lea r8, [0x140148140]
mov rcx, qword [rcx + 0x10]
call fcn.1400049d8
jmp 0x1400240c3
mov rcx, qword [0x14016f048]
lea rax, [0x14016f048]
cmp rcx, rax
je 0x1400240c3
test byte [rcx + 0x1c], 1
je 0x1400240c3
cmp byte [rcx + 0x19], 4
jb 0x1400240c3
mov edx, 0x204
jmp 0x140024317
mov edi, dword [rsp + 0x70]
mov ecx, esi
mov edx, edi
lea r8, [rbp - 0x60]
call fcn.1400f77a0
mov r12d, eax
mov edi, r15d
mov rcx, qword [0x14016f048]
mov rsi, qword [rbp - 0x80]
jmp 0x140024d2c
mov rcx, qword [0x14016f048]
lea rax, [0x14016f048]
cmp rcx, rax
je 0x1400243cc
test byte [rcx + 0x1c], 1
je 0x1400243cc
mov edi, dword [rsp + 0x70]
cmp byte [rcx + 0x19], 2
jb 0x1400243d0
mov edx, 0x207
mov dword [rsp + 0x28], edi
mov dword [rsp + 0x20], esi
mov r9, qword [rsp + 0x78]
lea r8, [0x140148140]
mov rcx, qword [rcx + 0x10]
call fcn.14001017c
jmp 0x1400243d0
mov edi, dword [rsp + 0x70]
lea r8, [rbp - 0x60]
mov edx, edi
mov ecx, esi
call fcn.1400f77a0
mov byte [rsp + 0x74], 1
jmp 0x14002436f
mov rcx, qword [0x14016f048]
lea rax, [0x14016f048]
cmp rcx, rax
je 0x14002442b
test byte [rcx + 0x1c], 1
je 0x14002442b
mov edi, dword [rsp + 0x70]
cmp byte [rcx + 0x19], 2
jb 0x14002442f
mov edx, 0x206
mov dword [rsp + 0x28], edi
mov dword [rsp + 0x20], esi
mov r9, qword [rsp + 0x78]
lea r8, [0x140148140]
mov rcx, qword [rcx + 0x10]
call fcn.14001017c
jmp 0x14002442f
mov edi, dword [rsp + 0x70]
lea r8, [rbp - 0x60]
mov edx, edi
mov ecx, esi
call fcn.1400f77a0
mov r12d, eax
mov rsi, qword [rbp - 0x80]
test byte [rsi + 0x54], 1
jne 0x140024467
lea rdx, [rbp - 0x76]
mov rcx, qword [rbp - 0x38]
call fcn.14002377c
test eax, eax
js 0x140024467
cmp byte [rbp - 0x76], 0
mov eax, 0x80780169
cmove r12d, eax
mov byte [rbp - 0x78], 1
mov edi, r15d
mov rcx, qword [0x14016f048]
jmp 0x140024d2c
lea rcx, [r13 + 0x18]
mov rax, qword [rcx]
mov rax, qword [rax + 0x10]
call qword [case.0x1400057f3.0]
test al, al
mov eax, 0x80780167
cmovne r12d, eax
jmp 0x140024372
mov rsi, qword [rbp - 0x80]
mov rbx, qword [rbp - 0x50]
mov rdi, qword [rbp - 0x30]
mov qword [r14 + 0x30], rbx
mov ecx, dword [r14 + 8]
mov eax, ecx
cmp ecx, dword [rdi + 8]
jne 0x1400244cb
cmp qword [rdi + 0x30], 0
jne 0x1400244cb
test byte [rsi + 0x54], 1
jne 0x1400244cb
mov qword [rdi + 0x30], rbx
mov eax, dword [r14 + 8]
cmp eax, dword [rdi + 8]
jne 0x1400244e5
mov rcx, qword [rdi + 0x38]
test rcx, rcx
je 0x1400244e5
mov qword [rbp - 0x10], rcx
mov edx, dword [rdi + 0x40]
jmp 0x14002458d
mov rcx, qword [rbp - 0x10]
test rcx, rcx
je 0x140024500
cmp rcx, qword [r14 + 0x38]
je 0x140024500
cmp rcx, qword [rdi + 0x38]
je 0x140024500
call qword [sym.imp.KERNEL32.dll_LocalFree]
xor ecx, ecx
mov qword [rbp - 0x10], rcx
xor edx, edx
mov dword [rbp - 0x28], edx
test byte [r13 + 0x154], 2
je 0x14002458d
lea r9, [rsp + 0x70]
lea r8, [rbp - 0x28]
lea rdx, [rbp - 0x10]
mov rcx, rbx
call fcn.1400b616c
mov ebx, eax
test eax, eax
je 0x140024582
mov rcx, qword [0x14016f048]
lea rax, [0x14016f048]
cmp rcx, rax
je 0x140024577
test byte [rcx + 0x1c], 1
je 0x140024577
mov edi, dword [rsp + 0x70]
cmp byte [rcx + 0x19], 2
jb 0x14002457b
mov edx, 0x209
mov dword [rsp + 0x28], edi
mov dword [rsp + 0x20], ebx
mov r9, qword [rsp + 0x78]
lea r8, [0x140148140]
mov rcx, qword [rcx + 0x10]
call fcn.14001017c
jmp 0x14002457b
mov edi, dword [rsp + 0x70]
mov ecx, ebx
jmp 0x140024364
mov rcx, qword [rbp - 0x10]
mov edx, dword [rbp - 0x28]
mov rbx, qword [rbp - 0x50]
mov qword [r14 + 0x38], rcx
mov dword [r14 + 0x40], edx
mov eax, dword [r14 + 8]
cmp eax, dword [rdi + 8]
jne 0x1400245b2
cmp qword [rdi + 0x38], 0
jne 0x1400245b2
test byte [rsi + 0x54], 1
jne 0x1400245b2
mov qword [rdi + 0x38], rcx
mov dword [rdi + 0x40], edx
mov r8b, 1
mov edi, 9
mov edx, edi
mov rcx, r13
call fcn.14002bbbc
mov edx, edi
mov rcx, r14
call fcn.140013ee8
test byte [r13 + 0x154], 2
je 0x140024628
lea r9, [rsp + 0x70]
mov rdx, qword [rbp - 0x10]
mov rcx, rbx
call fcn.1400b6324
mov ebx, eax
test eax, eax
je 0x140024628
mov rcx, qword [0x14016f048]
lea rax, [0x14016f048]
cmp rcx, rax
je 0x140024577
test byte [rcx + 0x1c], 1
je 0x140024577
mov edi, dword [rsp + 0x70]
cmp byte [rcx + 0x19], 2
jb 0x14002457b
mov edx, 0x20a
jmp 0x140024558
mov rax, qword [rbp - 0x18]
test rax, rax
je 0x14002463f
mov rcx, rax
call qword [sym.imp.ole32.dll_CoTaskMemFree]
and qword [rbp - 0x18], 0
lea rdx, [rsi + 0x44]
lea rax, [rbp - 0x18]
mov qword [rsp + 0x20], rax
lea r9, str..vhdx
mov r8d, dword [rsi + 0x54]
mov rcx, qword [r13 + 0x1d8]
call fcn.1401082b0
mov r12d, eax
mov edi, r15d
test eax, eax
js 0x140024375
lea r14, [r13 + 0x28]
mov rcx, r14
call fcn.1400f4ef4
mov rbx, qword [rbp - 0x18]
mov rdx, rbx
mov rcx, r13
call fcn.14001fb74
mov r12d, eax
test eax, eax
jns 0x1400246e4
mov byte [rsp + 0x74], 1
mov rcx, qword [0x14016f048]
lea rax, [0x14016f048]
cmp rcx, rax
je 0x1400246db
test byte [rcx + 0x1c], 1
je 0x1400246db
cmp byte [rcx + 0x19], 2
jb 0x1400246db
mov edx, 0x20b
mov dword [rsp + 0x20], r12d
mov r9, rbx
lea r8, [0x140148140]
mov rcx, qword [rcx + 0x10]
call fcn.140005938
mov rcx, qword [0x14016f048]
mov r14, qword [rbp - 0x70]
jmp 0x14002437c
xor edx, edx
mov rcx, r14
call fcn.1400f4d68
mov ebx, eax
test eax, eax
js 0x140025d85
xor ebx, ebx
xor edi, edi
lea r9, [rbp + 0xa8]
lea r8, [rbp + 0x90]
lea rdx, [rbp + 0x98]
mov rsi, qword [rbp + 0x20]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
test eax, eax
jne 0x14002472f
mov rcx, rsi
call fcn.14012aee4
mov r12d, eax
jmp 0x140024740
mov rbx, qword [rbp + 0x90]
mov rdi, qword [rbp + 0x98]
xor r12d, r12d
and qword [rbp + 0x30], 0
xor sil, sil
lea rax, [rbp + 0x30]
mov qword [rsp + 0x20], rax
mov r9d, 1
xor r8d, r8d
lea rdx, str.SYSTEMCurrentControlSetServiceswbengine
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x140024849
and dword [rbp - 0x28], eax
mov dword [rbp - 0x48], 4
lea rax, [rbp - 0x48]
mov qword [rsp + 0x28], rax
lea rax, [rbp - 0x28]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea rdx, str.FreeSpace
mov rcx, qword [rbp + 0x30]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
jne 0x1400247c6
mov eax, dword [rbp - 0x28]
shl rax, 0x14
test rax, rax
je 0x140024801
cmp rax, rdi
jae 0x140024801
mov rdi, rax
mov sil, 1
jmp 0x140024801
mov rcx, qword [0x14016f048]
lea rax, [0x14016f048]
cmp rcx, rax
je 0x14002483d
test byte [rcx + 0x1c], 1
je 0x14002480f
cmp byte [rcx + 0x19], 5
jb 0x14002480f
mov edx, 0x20c
lea r9, str.SYSTEMCurrentControlSetServiceswbengine
lea r8, [0x140148140]
mov rcx, qword [rcx + 0x10]
call fcn.1400058d8
mov rcx, qword [0x14016f048]
lea rax, [0x14016f048]
cmp rcx, rax
je 0x14002483d
test byte [rcx + 0x1c], 1
je 0x14002483d
cmp byte [rcx + 0x19], 4
jb 0x14002483d
mov edx, 0x20d
lea rax, str.SYSTEMCurrentControlSetServiceswbengine
mov qword [rsp + 0x20], rax
mov r9, rdi
mov rcx, qword [rcx + 0x10]
call fcn.140010948
mov rcx, qword [rbp + 0x30]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x140024884
mov rcx, qword [0x14016f048]
lea rax, [0x14016f048]
cmp rcx, rax
je 0x140024892
test byte [rcx + 0x1c], 1
je 0x140024892
cmp byte [rcx + 0x19], 5
jb 0x140024892
mov edx, 0x20e
lea r9, str.SYSTEMCurrentControlSetServiceswbengine
lea r8, [0x140148140]
mov rcx, qword [rcx + 0x10]
call fcn.1400058d8
lea rax, [0x14016f048]
mov rcx, qword [0x14016f048]
test r12d, r12d
jns 0x1400248a4
mov byte [rsp + 0x74], 1
mov edi, r15d
jmp 0x1400246db
cmp rcx, rax
je 0x1400248d2
test byte [rcx + 0x1c], 1
je 0x1400248d2
cmp byte [rcx + 0x19], 4
jb 0x1400248d2
mov edx, 0x20f
mov qword [rsp + 0x20], rdi
mov r9, rbx
lea r8, [0x140148140]
mov rcx, qword [rcx + 0x10]
call fcn.140004b44
mov rcx, r14
call fcn.1400f4ef4
test byte [r13 + 0x154], 2
je 0x140024a96
mov r8, qword [rbp - 0x70]
mov eax, dword [r8 + 0xc]
mov r9, qword [rbp - 0x30]
cmp eax, dword [r9 + 0xc]
jne 0x140024921
mov bl, 1
mov rcx, qword [0x14016f048]
lea rdx, [0x14016f048]
cmp rcx, rdx
je 0x14002498c
test byte [rcx + 0x1c], bl
je 0x14002498c
cmp byte [rcx + 0x19], 4
jb 0x14002498c
mov edx, 0x210
jmp 0x14002496d
ja 0x140024943
lea r8, str.pMediaCtxt__m_ulBagCount___pInitialMediaCtxt__m_ulBagCount
mov edx, 0x3112
lea rcx, str.base_stor_blbengine_service_backup.cpp
call fcn.140082070
mov r8, qword [rbp - 0x70]
mov r9, qword [rbp - 0x30]
xor bl, bl
mov rcx, qword [0x14016f048]
lea rax, [0x14016f048]
cmp rcx, rax
je 0x140024993
test byte [rcx + 0x1c], 1
je 0x140024993
cmp byte [rcx + 0x19], 4
jb 0x140024993
mov edx, 0x211
mov eax, dword [r8 + 0xc]
mov dword [rsp + 0x20], eax
mov r9d, dword [r9 + 0xc]
lea r8, [0x140148140]
mov rcx, qword [rcx + 0x10]
call fcn.14000fa80
mov rcx, qword [0x14016f048]
lea rax, [0x14016f048]
mov edx, 0x1400000
cmp rdi, rdx
ja 0x1400249f3
neg bl
sbb r12d, r12d
and r12d, 0x44
add r12d, 0x80780030
mov byte [rsp + 0x74], 1
cmp rcx, rax
je 0x14002489c
test byte [rcx + 0x1c], 1
je 0x14002489c
cmp byte [rcx + 0x19], 3
jb 0x14002489c
mov edx, 0x212
mov r9, rdi
lea r8, [0x140148140]
mov rcx, qword [rcx + 0x10]
call fcn.14000fcd0
mov rcx, qword [0x14016f048]
jmp 0x14002489c
test sil, sil
jne 0x140024a4e
mov r8d, 0x40000000
cmp rdi, r8
ja 0x140024a4e
test bl, bl
je 0x140024a4e
mov r12d, 0x80780080
mov byte [rsp + 0x74], 1
cmp rcx, rax
je 0x14002489c
test byte [rcx + 0x1c], 1
je 0x14002489c
cmp byte [rcx + 0x19], 3
jb 0x14002489c
mov edx, 0x213
mov qword [rsp + 0x20], r8
mov r9, rdi
lea r8, [0x140148140]
mov rcx, qword [rcx + 0x10]
call fcn.140004b44
jmp 0x1400249e7
sub rdi, rdx
cmp rdi, 0x1100000
ja 0x140024a96
neg bl
sbb r12d, r12d
and r12d, 0x44
add r12d, 0x80780030
mov byte [rsp + 0x74], 1
cmp rcx, rax
je 0x14002489c
test byte [rcx + 0x1c], 1
je 0x14002489c
cmp byte [rcx + 0x19], 3
jb 0x14002489c
mov edx, 0x214
jmp 0x1400249d4
mov sil, 1
mov byte [rbp - 0x68], sil
test byte [r13 + 0x154], 4
je 0x140024ad4
mov r9d, dword [r13 + 0x174]
shl r9d, 4
add r9, qword [rbp - 8]
lea r8, [rbp - 0x68]
mov rdx, qword [rbp + 0x78]
mov rcx, r13
call fcn.14001e33c
mov ebx, eax
test eax, eax
js 0x140025d85
mov sil, byte [rbp - 0x68]
mov byte [rbp - 0x67], sil
lea r15, [r13 + 0x58]
mov qword [rbp - 0x28], r15
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov eax, dword [r13 + 0x174]
imul rcx, rax, 0x170
add rcx, qword [r13 + 0xd8]
and qword [rcx], 0
and qword [rcx + 8], 0
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov rcx, qword [0x14016f048]
lea rbx, [0x14016f048]
cmp rcx, rbx
je 0x140024b79
test byte [rcx + 0x1c], 1
je 0x140024b4e
cmp byte [rcx + 0x19], 4
jb 0x140024b4e
mov edx, 0x215
mov r9, rdi
lea r8, [0x140148140]
mov rcx, qword [rcx + 0x10]
call fcn.14000fcd0
mov rcx, qword [0x14016f048]
cmp rcx, rbx
je 0x140024b79
test byte [rcx + 0x1c], 1
je 0x140024b79
cmp byte [rcx + 0x19], 4
jb 0x140024b79
mov edx, 0x216
mov r9, qword [rsp + 0x78]
lea r8, [0x140148140]
mov rcx, qword [rcx + 0x10]
call fcn.1400058d8
mov eax, dword [r13 + 0x174]
imul rcx, rax, 0x170
mov rax, qword [r13 + 0xd8]
add rax, 0x9c
add rcx, rax
call qword [sym.imp.KERNEL32.dll_GetSystemTimeAsFileTime]
test byte [r13 + 0x154], 2
je 0x140024c40
mov rdx, qword [r14]
cmp rdx, 0xffffffffffffffff
jne 0x140024bc1
or rdx, rdx
cmp qword [r14 + 8], 0xffffffffffffffff
cmovne rdx, qword [r14 + 8]
mov ecx, dword [r13 + 0x174]
shl ecx, 4
add rcx, qword [rbp - 8]
cmp dword [r13 + 0x150], 4
sete r8b
lea rax, [rbp - 0x66]
mov qword [rsp + 0x68], rax
lea rax, [rsp + 0x70]
mov qword [rsp + 0x60], rax
lea rax, [rbp]
mov qword [rsp + 0x58], rax
lea rax, [rbp + 8]
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x48], rcx
lea rax, [rbp - 0x5c]
mov qword [rsp + 0x40], rax
lea rax, [rbp - 0x67]
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], rdx
mov qword [rsp + 0x28], r13
mov r9, rdi
mov rdx, qword [rbp - 0x18]
mov rbx, qword [rbp - 0x50]
mov rcx, rbx
call fcn.1400b307c
mov r13d, eax
mov r14b, byte [rbp - 0x5c]
jmp 0x140025241
and qword [rbp - 0x48], 0
xor edx, edx
lea r8d, [rdx + 0x20]
lea rcx, [rbp + 0xc0]
call sub.msvcrt.dll_memset
test sil, sil
jne 0x140024cf8
xor edx, edx
mov rcx, r14
call fcn.1400f4d68
mov ebx, eax
test eax, eax
js 0x140025d85
mov r15, qword [rbp - 0x18]
mov rcx, r15
call fcn.140089350
mov bl, al
mov rcx, r14
call fcn.1400f4ef4
test bl, bl
je 0x140024cfc
mov dword [rbp + 0xc0], 2
lea r8, [rbp + 0xc0]
mov rdx, r15
mov rcx, r14
call fcn.140116eec
test eax, eax
jns 0x140024cfc
mov rcx, qword [0x14016f048]
lea rdx, [0x14016f048]
cmp rcx, rdx
je 0x140024cf0
test byte [rcx + 0x1c], 1
je 0x140024cf0
cmp byte [rcx + 0x19], 2
jb 0x140024cf0
mov edx, 0x217
mov dword [rsp + 0x20], eax
mov r9, r15
lea r8, [0x140148140]
mov rcx, qword [rcx + 0x10]
call fcn.140005938
mov rcx, qword [0x14016f048]
mov edi, dword [rbp - 0x64]
jmp 0x1400246db
mov r15, qword [rbp - 0x18]
lea r9, [rbp - 0x48]
mov r8, qword [rbp + 0x58]
mov rsi, qword [rbp - 0x80]
mov rdx, rsi
mov rcx, r13
call fcn.140021ac4
test eax, eax
jns 0x140024e65
mov r12d, eax
mov edi, dword [rbp - 0x64]
mov r14, qword [rbp - 0x70]
mov rcx, qword [0x14016f048]
mov r15, qword [rsp + 0x78]
mov rbx, qword [rbp + 0x10]
test rbx, rbx
je 0x140024dde
xor r8d, r8d
xor edx, edx
mov rcx, rbx
call qword [sym.imp.VirtDisk.dll_DetachVirtualDisk]
test eax, eax
je 0x140024d87
mov rcx, qword [0x14016f048]
lea rdx, [0x14016f048]
cmp rcx, rdx
je 0x140024d87
test byte [rcx + 0x1c], 1
je 0x140024d87
cmp byte [rcx + 0x19], 3
jb 0x140024d87
mov edx, 0x229
mov r9d, eax
lea r8, [0x140148140]
mov rcx, qword [rcx + 0x10]
call fcn.1400049f8
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
test eax, eax
jne 0x140024dd1
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rcx, qword [0x14016f048]
lea rdx, [0x14016f048]
cmp rcx, rdx
je 0x140024dd8
test byte [rcx + 0x1c], 1
je 0x140024dd8
cmp byte [rcx + 0x19], 3
jb 0x140024dd8
mov edx, 0x22a
mov r9d, eax
lea r8, [0x140148140]
mov rcx, qword [rcx + 0x10]
call fcn.1400049f8
mov rcx, qword [0x14016f048]
xor ebx, ebx
mov qword [rbp + 0x10], rbx
cmp r12d, 0x80780030
je 0x140024dff
cmp r12d, 0x8078002a
jne 0x140025a66
cmp dword [rsp + 0x70], 0x70
jne 0x140025a8a
test byte [r13 + 0x154], 2
jne 0x1400259ea
mov rcx, rsi
call fcn.140013898
test eax, eax
jns 0x1400259ea
mov rcx, qword [0x14016f048]
lea rbx, [0x14016f048]
cmp rcx, rbx
je 0x1400259f1
test byte [rcx + 0x1c], 1
je 0x1400259f1
cmp byte [rcx + 0x19], 3
jb 0x1400259f1
mov edx, 0x22b
mov r9d, eax
lea r8, [0x140148140]
mov rcx, qword [rcx + 0x10]
call fcn.1400049f8
jmp 0x1400259f1
xor edx, edx
mov rcx, r14
call fcn.1400f4d68
mov ebx, eax
test eax, eax
js 0x140025d85
lea rdx, [rbp + 0x10]
mov rcx, r15
call fcn.1401134d0
mov ebx, eax
mov rcx, r14
call fcn.1400f4ef4
test ebx, ebx
jns 0x140024ee4
mov rcx, qword [0x14016f048]
lea rax, [0x14016f048]
cmp rcx, rax
je 0x140024ed5
test byte [rcx + 0x1c], 1
je 0x140024ed5
cmp byte [rcx + 0x19], 2
jb 0x140024ed5
mov edx, 0x218
mov dword [rsp + 0x20], ebx
mov r9, r15
lea r8, [0x140148140]
mov rcx, qword [rcx + 0x10]
call fcn.140005938
mov rcx, qword [0x14016f048]
mov r12d, ebx
mov edi, dword [rbp - 0x64]
mov r14, qword [rbp - 0x70]
jmp 0x140024d2c
movups xmm0, xmmword [rbp + 0xc8]
movdqu xmmword [rbp + 0xb0], xmm0
mov ecx, dword [r13 + 0x174]
shl ecx, 4
add rcx, qword [rbp - 8]
lea rax, [rsp + 0x70]
mov qword [rsp + 0x60], rax
lea rax, [rbp - 0x66]
mov qword [rsp + 0x58], rax
lea rax, [rbp]
mov qword [rsp + 0x50], rax
lea rax, [rbp + 8]
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x40], rcx
mov rdi, qword [rbp + 0x10]
mov qword [rsp + 0x38], rdi
mov rax, qword [rbp - 0x48]
mov qword [rsp + 0x30], rax
lea rax, [rbp + 0xb0]
mov qword [rsp + 0x28], rax
lea rax, [rbp - 0x67]
mov qword [rsp + 0x20], rax
xor r9d, r9d
mov r8, r13
lea rdx, [0x14001f8e0]
mov rbx, qword [rbp - 0x50]
mov rcx, rbx
call fcn.1400b4be4
mov r13d, eax
test eax, eax
jne 0x140025073
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_FlushFileBuffers]
test eax, eax
jne 0x140024fe9
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x70], eax
mov rcx, qword [0x14016f048]
lea rdx, [0x14016f048]
cmp rcx, rdx
je 0x140024fcf
test byte [rcx + 0x1c], 1
je 0x140024fcf
cmp byte [rcx + 0x19], 2
jb 0x140024fcf
mov edx, 0x219
mov r9d, eax
lea r8, [0x140148140]
mov rcx, qword [rcx + 0x10]
call fcn.1400049f8
mov rcx, qword [0x14016f048]
mov eax, dword [rsp + 0x70]
movzx r12d, ax
or r12d, 0x80070000
test eax, eax
cmovle r12d, eax
mov r13, qword [rbp - 0x40]
jmp 0x140024ed8
xor r8d, r8d
xor edx, edx
mov rcx, rdi
call qword [sym.imp.VirtDisk.dll_DetachVirtualDisk]
mov dword [rsp + 0x70], eax
test eax, eax
je 0x140025025
mov rcx, qword [0x14016f048]
lea rdx, [0x14016f048]
cmp rcx, rdx
je 0x140024fcf
test byte [rcx + 0x1c], 1
je 0x140024fcf
cmp byte [rcx + 0x19], 2
jb 0x140024fcf
mov edx, 0x21a
jmp 0x140024fb1
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
test eax, eax
jne 0x14002506d
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x70], eax
mov rcx, qword [0x14016f048]
lea rdx, [0x14016f048]
cmp rcx, rdx
je 0x140024fcf
test byte [rcx + 0x1c], 1
je 0x140024fcf
cmp byte [rcx + 0x19], 2
jb 0x140024fcf
mov edx, 0x21b
jmp 0x140024fb1
xor edi, edi
mov qword [rbp + 0x10], rdi
mov r15, qword [0x14016f048]
lea rdi, [0x14016f048]
cmp r15, rdi
je 0x140025147
test byte [r15 + 0x1c], 4
je 0x140025147
cmp byte [r15 + 0x19], 4
jb 0x140025147
movzx eax, byte [rsi + 0x147]
movzx ecx, byte [rsi + 0x146]
movzx r8d, byte [rsi + 0x145]
movzx r9d, byte [rsi + 0x144]
movzx r10d, byte [rsi + 0x143]
movzx r11d, byte [rsi + 0x142]
movzx ebx, byte [rsi + 0x141]
movzx edi, byte [rsi + 0x140]
movzx esi, word [rsi + 0x13e]
mov rdx, qword [rbp - 0x80]
movzx r14d, word [rdx + 0x13c]
mov edx, 0x21c
mov dword [rsp + 0x68], eax
mov dword [rsp + 0x60], ecx
mov dword [rsp + 0x58], r8d
mov dword [rsp + 0x50], r9d
mov dword [rsp + 0x48], r10d
mov dword [rsp + 0x40], r11d
mov dword [rsp + 0x38], ebx
mov dword [rsp + 0x30], edi
mov dword [rsp + 0x28], esi
mov dword [rsp + 0x20], r14d
mov rsi, qword [rbp - 0x80]
mov r9d, dword [rsi + 0x138]
lea r8, [0x140148140]
mov rcx, qword [r15 + 0x10]
call fcn.14000fac4
mov rbx, qword [rbp - 0x50]
lea rdi, [0x14016f048]
test rbx, rbx
jne 0x140025164
lea r8, str.ReplicationContext___NULL
mov edx, 0x1fae
lea rcx, str.base_stor_blb_blbimg_blbimg.cxx
call fcn.140082070
movups xmm0, xmmword [rbx + 0x30]
movdqu xmmword [rsi + 0x148], xmm0
mov r15, qword [0x14016f048]
cmp r15, rdi
je 0x140025232
test byte [r15 + 0x1c], 4
je 0x140025232
cmp byte [r15 + 0x19], 4
jb 0x140025232
movzx eax, byte [rsi + 0x157]
movzx ecx, byte [rsi + 0x156]
movzx r8d, byte [rsi + 0x155]
movzx r9d, byte [rsi + 0x154]
movzx r10d, byte [rsi + 0x153]
movzx r11d, byte [rsi + 0x152]
movzx ebx, byte [rsi + 0x151]
movzx edi, byte [rsi + 0x150]
movzx esi, word [rsi + 0x14e]
mov rdx, qword [rbp - 0x80]
movzx r14d, word [rdx + 0x14c]
mov edx, 0x21d
mov dword [rsp + 0x68], eax
mov dword [rsp + 0x60], ecx
mov dword [rsp + 0x58], r8d
mov dword [rsp + 0x50], r9d
mov dword [rsp + 0x48], r10d
mov dword [rsp + 0x40], r11d
mov dword [rsp + 0x38], ebx
mov dword [rsp + 0x30], edi
mov dword [rsp + 0x28], esi
mov dword [rsp + 0x20], r14d
mov rax, qword [rbp - 0x80]
mov r9d, dword [rax + 0x148]
lea r8, [0x140148140]
mov rcx, qword [r15 + 0x10]
call fcn.14000fac4
mov r14b, 1
mov byte [rbp - 0x5c], r14b
mov sil, byte [rbp - 0x68]
mov r15, qword [rbp - 0x28]
mov rdi, qword [rbp - 0x40]
mov eax, dword [rdi + 0x174]
imul rcx, rax, 0x170
mov rax, qword [rdi + 0xd8]
add rax, 0xa4
add rcx, rax
call qword [sym.imp.KERNEL32.dll_GetSystemTimeAsFileTime]
mov r10, qword [0x14016f048]
lea rax, [0x14016f048]
cmp r10, rax
je 0x1400252f6
test byte [r10 + 0x1c], 1
je 0x1400252f6
cmp byte [r10 + 0x19], 4
jb 0x1400252f6
mov eax, dword [rdi + 0x174]
imul rdx, rax, 0x170
mov rcx, qword [rdi + 0xd8]
mov eax, dword [rdx + rcx + 0x9c]
mov dword [rbp + 0x68], eax
mov eax, dword [rdx + rcx + 0xa0]
mov dword [rbp + 0x6c], eax
mov eax, dword [rdx + rcx + 0xa4]
mov dword [rbp + 0x60], eax
mov eax, dword [rdx + rcx + 0xa8]
mov dword [rbp + 0x64], eax
mov rcx, qword [rbp + 0x60]
sub rcx, qword [rbp + 0x68]
movabs rax, 0x346dc5d63886594b
mul rcx
mov r9, rdx
shr r9, 0xb
mov edx, 0x21e
lea r8, [0x140148140]
mov rcx, qword [r10 + 0x10]
call fcn.14000fcd0
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov bl, byte [rbp - 0x67]
cmp byte [rbp - 0x66], 0
je 0x140025324
mov rax, qword [rbp - 0x80]
mov byte [rax + 0x84], 1
test bl, bl
jne 0x140025324
mov edx, 0x10
mov rcx, rax
call fcn.1400122c0
test sil, sil
jne 0x140025379
test bl, bl
je 0x140025379
mov rcx, qword [0x14016f048]
lea rax, [0x14016f048]
cmp rcx, rax
je 0x140025361
test byte [rcx + 0x1c], 1
je 0x140025361
cmp byte [rcx + 0x19], 4
jb 0x140025361
mov edx, 0x21f
lea r8, [0x140148140]
mov rcx, qword [rcx + 0x10]
call fcn.1400049d8
mov rax, qword [rdi + 0x188]
mov rsi, qword [rbp - 0x80]
mov qword [rsi + 0x78], rax
and dword [rsi + 0x80], 0
jmp 0x14002537d
mov rsi, qword [rbp - 0x80]
mov byte [rbp - 0x65], 1
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov eax, dword [rdi + 0x174]
imul rcx, rax, 0x170
add rcx, qword [rdi + 0xd8]
mov rdi, qword [rbp]
mov qword [rcx], rdi
mov rbx, qword [rbp + 8]
mov qword [rcx + 8], rbx
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov rax, qword [rbp - 0x70]
mov qword [rax + 0x20], rbx
mov rbx, rax
mov qword [rax + 0x18], rdi
mov ecx, r13d
test r13d, r13d
je 0x140025813
sub ecx, 1
je 0x1400257e7
sub ecx, 3
je 0x140025740
sub ecx, 1
je 0x1400256bd
sub ecx, 1
je 0x140025740
sub ecx, 1
je 0x1400254de
cmp ecx, 0xd
je 0x140025478
mov rcx, qword [0x14016f048]
lea rax, [0x14016f048]
cmp rcx, rax
je 0x140025454
test byte [rcx + 0x1c], 1
je 0x140025454
mov edi, dword [rsp + 0x70]
cmp byte [rcx + 0x19], 2
jb 0x140025458
mov edx, 0x227
mov dword [rsp + 0x28], edi
mov dword [rsp + 0x20], r13d
mov r9, qword [rsp + 0x78]
lea r8, [0x140148140]
mov rcx, qword [rcx + 0x10]
call fcn.14001017c
jmp 0x140025458
mov edi, dword [rsp + 0x70]
lea r8, [rbp - 0x60]
mov edx, edi
mov ecx, r13d
call fcn.1400f77a0
mov r12d, eax
mov r13, qword [rbp - 0x40]
mov edi, dword [rbp - 0x64]
mov r14, rbx
jmp 0x140024375
mov rcx, qword [0x14016f048]
lea rax, [0x14016f048]
cmp rcx, rax
je 0x1400254c3
test byte [rcx + 0x1c], 1
je 0x1400254c3
mov edi, dword [rsp + 0x70]
cmp byte [rcx + 0x19], 2
jb 0x1400254c7
mov edx, 0x222
mov dword [rsp + 0x28], edi
mov dword [rsp + 0x20], 0x14
mov r9, qword [rsp + 0x78]
lea r8, [0x140148140]
mov rcx, qword [rcx + 0x10]
call fcn.14001017c
jmp 0x1400254c7
mov edi, dword [rsp + 0x70]
lea r8, [rbp - 0x60]
mov edx, edi
mov ecx, 0x14
call fcn.1400f77a0
mov byte [rsp + 0x74], 1
jmp 0x140025466
mov rcx, qword [0x14016f048]
lea rax, [0x14016f048]
cmp rcx, rax
je 0x140025529
test byte [rcx + 0x1c], 1
je 0x140025529
mov edi, dword [rsp + 0x70]
cmp byte [rcx + 0x19], 2
jb 0x14002552d
mov edx, 0x223
mov dword [rsp + 0x28], edi
mov dword [rsp + 0x20], 7
mov r9, qword [rsp + 0x78]
lea r8, [0x140148140]
mov rcx, qword [rcx + 0x10]
call fcn.14001017c
jmp 0x14002552d
mov edi, dword [rsp + 0x70]
lea r8, [rbp - 0x60]
mov edx, edi
mov ecx, 7
call fcn.1400f77a0
mov r12d, eax
mov byte [rbp - 0x65], 0
cmp eax, 0x8078002a
jne 0x140025691
cmp edi, 0x70
jne 0x1400256a3
mov rcx, qword [0x14016f048]
lea rdi, [0x14016f048]
cmp rcx, rdi
je 0x140025590
test byte [rcx + 0x1c], 1
je 0x140025590
cmp byte [rcx + 0x19], 4
jb 0x140025590
mov edx, 0x224
mov r9, qword [rbp + 0x20]
lea r8, [0x140148140]
mov rcx, qword [rcx + 0x10]
call fcn.1400058d8
and qword [rbp - 0x28], 0
and dword [rbp - 0x48], 0
mov esi, dword [rbp - 0x64]
test esi, esi
je 0x1400255b8
lea r8, str.iNumVolumeRepeats__0
mov edx, 0x324e
lea rcx, str.base_stor_blbengine_service_backup.cpp
call fcn.140082070
lea r8, [rbp - 0x28]
lea rdx, [rbp - 0x48]
mov rcx, qword [rbp - 0x50]
call fcn.1400b2a64
test eax, eax
jne 0x1400256a6
mov r13, qword [rbp - 0x40]
mov rbx, qword [rbp - 0x28]
mov rdx, rbx
cmp byte [r13 + 0x428], al
je 0x1400255f3
mov rcx, qword [r13 + 0x158]
call fcn.14010d2d4
jmp 0x1400255fb
mov rcx, r13
call fcn.14001b5dc
test eax, eax
js 0x140025663
xor r12d, r12d
mov byte [rbp - 0x77], 1
lea edi, [rsi + 1]
mov rcx, qword [0x14016f048]
lea rax, [0x14016f048]
cmp rcx, rax
je 0x1400246db
test byte [rcx + 0x1c], 1
je 0x1400246db
cmp byte [rcx + 0x19], 4
jb 0x1400246db
mov edx, 0x225
mov rax, qword [rbp + 0x20]
mov qword [rsp + 0x20], rax
mov r15, qword [rsp + 0x78]
mov r9, r15
lea r8, [0x140148140]
mov rcx, qword [rcx + 0x10]
call fcn.1400059ac
mov r14, qword [rbp - 0x70]
jmp 0x1400257d7
mov rcx, qword [0x14016f048]
cmp rcx, rdi
je 0x1400256b1
test byte [rcx + 0x1c], 1
je 0x1400256b1
cmp byte [rcx + 0x19], 2
jb 0x1400256b1
mov dword [rsp + 0x20], eax
mov r9, rbx
mov rcx, qword [rcx + 0x10]
call fcn.14000fd04
mov rbx, qword [rbp - 0x70]
jmp 0x140025698
mov r13, qword [rbp - 0x40]
mov esi, dword [rbp - 0x64]
test r12d, r12d
jns 0x14002581a
jmp 0x1400256a6
mov esi, dword [rbp - 0x64]
mov rcx, qword [0x14016f048]
mov r13, qword [rbp - 0x40]
mov byte [rsp + 0x74], 1
mov edi, esi
jmp 0x1400246db
mov rcx, qword [0x14016f048]
lea rax, [0x14016f048]
cmp rcx, rax
je 0x14002570b
test byte [rcx + 0x1c], 1
je 0x14002570b
mov edi, dword [rsp + 0x70]
mov r15, qword [rsp + 0x78]
cmp byte [rcx + 0x19], 2
jb 0x140025714
mov edx, 0x221
mov dword [rsp + 0x28], edi
mov dword [rsp + 0x20], 5
mov r9, r15
lea r8, [0x140148140]
mov rcx, qword [rcx + 0x10]
call fcn.14001017c
jmp 0x140025714
mov r15, qword [rsp + 0x78]
mov edi, dword [rsp + 0x70]
lea r8, [rbp - 0x60]
mov edx, edi
mov ecx, 5
call fcn.1400f77a0
mov r12d, eax
cmp dword [rbp - 0x60], 0
jne 0x140025736
mov dword [rbp - 0x60], eax
mov r12d, 0x80780166
mov byte [rsp + 0x74], 1
jmp 0x1400257cd
mov rcx, qword [0x14016f048]
lea rax, [0x14016f048]
cmp rcx, rax
je 0x14002578b
test byte [rcx + 0x1c], 1
je 0x14002578b
mov edi, dword [rsp + 0x70]
mov r15, qword [rsp + 0x78]
cmp byte [rcx + 0x19], 2
jb 0x140025794
mov edx, 0x220
mov dword [rsp + 0x28], edi
mov dword [rsp + 0x20], r13d
mov r9, r15
lea r8, [0x140148140]
mov rcx, qword [rcx + 0x10]
call fcn.14001017c
jmp 0x140025794
mov r15, qword [rsp + 0x78]
mov edi, dword [rsp + 0x70]
lea r8, [rbp - 0x60]
mov edx, edi
mov ecx, r13d
call fcn.1400f77a0
mov r12d, eax
test byte [rsi + 0x54], 1
jne 0x1400257c9
lea rdx, [rbp - 0x76]
mov rcx, qword [rbp - 0x38]
call fcn.14002377c
test eax, eax
js 0x1400257c9
cmp byte [rbp - 0x76], 0
mov eax, 0x80780169
cmove r12d, eax
mov byte [rbp - 0x78], 1
mov edi, dword [rbp - 0x64]
mov r13, qword [rbp - 0x40]
mov r14, rbx
mov rcx, qword [0x14016f048]
mov rsi, qword [rbp - 0x80]
jmp 0x140024d31
mov r13, qword [rbp - 0x40]
lea rcx, [r13 + 0x18]
mov rax, qword [rcx]
mov rax, qword [rax + 0x10]
call qword [case.0x1400057f3.0]
test al, al
mov r12d, 0x80780167
jne 0x14002546d
mov r12d, dword [r13 + 0x20]
jmp 0x14002546d
mov r13, qword [rbp - 0x40]
mov esi, dword [rbp - 0x64]
lea rcx, [r13 + 0x58]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov rdi, qword [rbp - 0x80]
inc dword [rdi + 0x10]
lea rcx, [r13 + 0x58]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov eax, dword [rdi + 0x10]
mov dword [rbx + 0x28], eax
lea rcx, [r13 + 0x58]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
inc dword [r13 + 0xe4]
lea rcx, [r13 + 0x58]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov eax, dword [r13 + 0xe4]
mov dword [rbx + 0xc], eax
mov eax, dword [r13 + 0x174]
add rax, rax
movups xmm0, xmmword [rbp + 0xe0]
mov rcx, qword [rbp + 0x18]
movdqu xmmword [rcx + rax*8], xmm0
test byte [r13 + 0x154], 2
jne 0x1400258a7
mov rcx, rdi
call fcn.140013898
test eax, eax
jns 0x1400258a7
mov r8d, eax
mov edx, 0x80780151
mov rcx, rdi
call fcn.140012260
mov edi, esi
jmp 0x1400246d4
test r14b, r14b
jne 0x1400258ee
mov rax, qword [rbp - 0x10]
mov r14, qword [rbp - 0x70]
cmp qword [r14 + 0x38], rax
je 0x1400258d2
lea r8, str.pMediaCtxt__m_pBackupPtr__pBackupPtr
mov edx, 0x32a3
lea rcx, str.base_stor_blbengine_service_backup.cpp
call fcn.140082070
and qword [r14 + 0x38], 0
and dword [r14 + 0x40], 0
mov r12d, 0x80780030
mov byte [rsp + 0x74], 1
mov edi, esi
jmp 0x140024375
and qword [rbp - 0x48], 0
lea rdx, [rbp - 0x48]
mov rcx, qword [rbp - 0x50]
call fcn.1400bac04
test eax, eax
je 0x14002591c
lea r8, str.r1__BlbimgSuccess
mov edx, 0x32b1
lea rcx, str.base_stor_blbengine_service_backup.cpp
call fcn.140082070
mov rbx, qword [rbp - 0x48]
test rbx, rbx
je 0x14002595f
mov rcx, qword [0x14016f048]
lea rax, [0x14016f048]
cmp rcx, rax
je 0x14002595f
test byte [rcx + 0x1c], 1
je 0x14002595f
cmp byte [rcx + 0x19], 2
jb 0x14002595f
mov edx, 0x228
mov rax, qword [rsp + 0x78]
mov qword [rsp + 0x20], rax
mov r9, rbx
mov rcx, qword [rcx + 0x10]
call fcn.140010948
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov rcx, qword [rdi + 0xd0]
add rcx, 0x58
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov qword [rdi + 0x28], rbx
mov rcx, qword [rdi + 0xd0]
add rcx, 0x58
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
test rbx, rbx
jle 0x1400259a3
xor r8d, r8d
mov edx, 0x8078007d
mov rcx, rdi
call fcn.140012260
mov ebx, 0xe
mov edx, ebx
mov rcx, rdi
call fcn.140012380
mov edx, ebx
mov r14, qword [rbp - 0x70]
mov rcx, r14
call fcn.140013ee8
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov edi, esi
test byte [r13 + 0x154], 2
jne 0x140024375
mov rdx, qword [rbp - 0x80]
mov rcx, r13
call fcn.14002d5fc
jmp 0x140024375
lea rbx, [0x14016f048]
lea rax, [0x1400d7080]
mov qword [rsp + 0x20], rax
mov r9, qword [r13 + 0x188]
mov edx, dword [r13 + 0x150]
mov rcx, qword [r13 + 0x158]
call fcn.140105538
test eax, eax
jns 0x140025a5f
mov rcx, qword [0x14016f048]
cmp rcx, rbx
je 0x140025a66
test byte [rcx + 0x1c], 1
je 0x140025a66
cmp byte [rcx + 0x19], 2
jb 0x140025a66
mov edx, 0x22c
mov dword [rsp + 0x28], eax
mov rax, qword [r13 + 0x160]
mov qword [rsp + 0x20], rax
mov r9, qword [r13 + 0x158]
lea r8, [0x140148140]
mov rcx, qword [rcx + 0x10]
call fcn.140005a64
mov rcx, qword [0x14016f048]
cmp r12d, 0x80780030
jne 0x140025a8a
test byte [r13 + 0x154], 2
je 0x140025a8a
mov rax, qword [rbp - 0x30]
mov eax, dword [rax + 0xc]
cmp dword [r14 + 0xc], eax
ja 0x140025c3f
mov rbx, r15
cmp qword [rsi + 0x58], 0
cmovne rbx, qword [rsi + 0x58]
test r12d, r12d
jns 0x140025b81
mov edx, 0xc
mov rcx, r14
call fcn.140013ee8
mov rcx, qword [0x14016f048]
lea rax, [0x14016f048]
cmp rcx, rax
je 0x140025ae9
test byte [rcx + 0x1c], 1
je 0x140025ae9
cmp byte [rcx + 0x19], 2
jb 0x140025ae9
mov edx, 0x22e
mov dword [rsp + 0x20], r12d
mov r9, r15
lea r8, [0x140148140]
mov rcx, qword [rcx + 0x10]
call fcn.140005938
mov r9d, r12d
xor r8d, r8d
mov rdx, rbx
mov rcx, r13
call fcn.1400339c8
mov ebx, eax
test eax, eax
jns 0x140025b3e
mov rcx, qword [0x14016f048]
lea rax, [0x14016f048]
cmp rcx, rax
je 0x140025b3c
test byte [rcx + 0x1c], 1
je 0x140025b3c
cmp byte [rcx + 0x19], 3
jb 0x140025b3c
mov edx, 0x22f
mov dword [rsp + 0x20], r12d
mov r9, r15
lea r8, [0x140148140]
mov rcx, qword [rcx + 0x10]
call fcn.140005938
xor ebx, ebx
mov r8d, dword [rbp - 0x60]
mov edx, r12d
mov rcx, rsi
call fcn.14001246c
xor eax, eax
cmp byte [rbp - 0x78], al
je 0x140025b66
cmp byte [rbp - 0x5b], al
je 0x140025bfd
cmp byte [rsi + 0x68], al
je 0x140025bfd
mov al, byte [rsp + 0x74]
mov rcx, qword [rbp + 0x28]
mov byte [rcx], al
mov eax, dword [rbp - 0x60]
mov rcx, qword [rbp + 0x70]
mov dword [rcx], eax
mov ebx, r12d
jmp 0x140025d8e
lea rsi, [0x14016f048]
cmp rcx, rsi
je 0x140025bb1
test byte [rcx + 0x1c], 1
je 0x140025bb1
cmp byte [rcx + 0x19], 4
jb 0x140025bb1
mov edx, 0x230
mov r9, r15
lea r8, [0x140148140]
mov rcx, qword [rcx + 0x10]
call fcn.1400058d8
xor r9d, r9d
mov r8b, 1
mov rdx, rbx
mov rcx, r13
call fcn.1400339c8
mov ebx, eax
test eax, eax
jns 0x140025bfd
mov rcx, qword [0x14016f048]
cmp rcx, rsi
je 0x140025bfd
test byte [rcx + 0x1c], 1
je 0x140025bfd
cmp byte [rcx + 0x19], 3
jb 0x140025bfd
mov edx, 0x231
mov dword [rsp + 0x20], r12d
mov r9, r15
lea r8, [0x140148140]
mov rcx, qword [rcx + 0x10]
call fcn.140005938
mov ecx, dword [r14 + 8]
cmp byte [rbp - 0x77], 0
jne 0x140025c0d
inc ecx
mov dword [r14 + 8], ecx
xor eax, eax
mov qword [r14 + 0x18], rax
mov qword [r14 + 0x20], rax
mov dword [r14 + 0x28], eax
mov dword [r14 + 0x2c], 0xf
mov qword [r14 + 0x30], rax
mov qword [r14 + 0x38], rax
mov dword [r14 + 0x40], eax
mov esi, ecx
mov r15d, dword [rbp - 0x58]
cmp ecx, r15d
jae 0x140025c87
jmp 0x140023c08
mov edx, 4
mov rcx, r14
call fcn.140013ee8
mov rcx, qword [0x14016f048]
lea rax, [0x14016f048]
cmp rcx, rax
je 0x140025c83
test byte [rcx + 0x1c], 1
je 0x140025c83
cmp byte [rcx + 0x19], 4
jb 0x140025c83
mov edx, 0x22d
mov r9, r15
lea r8, [0x140148140]
mov rcx, qword [rcx + 0x10]
call fcn.1400058d8
mov r15d, dword [rbp - 0x58]
mov r12, qword [rbp - 0x30]
mov rdx, qword [rbp + 0x28]
mov rcx, r13
call fcn.14002022c
mov ebx, eax
test eax, eax
js 0x140025d8e
lea rcx, [r13 + 0x28]
xor edx, edx
call fcn.1400f4d68
mov ebx, eax
test eax, eax
js 0x140025d8e
mov r14d, dword [r12 + 0xc]
xor edi, edi
test r15d, r15d
je 0x140025d63
xor esi, esi
mov r12, qword [rbp + 0x18]
mov ecx, edi
mov edx, edi
shl rdx, 4
add rdx, r12
mov rax, qword [rdx]
cmp rax, qword [0x140151210]
jne 0x140025cf0
mov rax, qword [rdx + 8]
cmp rax, qword [0x140151218]
je 0x140025d51
mov r11, qword [r13 + 0xd8]
imul r8, rcx, 0x170
lea r10, [r11 + 0x78]
add r10, r8
mov ecx, edi
shl ecx, 4
add rcx, qword [rbp - 8]
lea r9, [r11 + 0x44]
add r9, r8
mov eax, dword [r11 + rsi + 0x80]
mov dword [rsp + 0x40], eax
mov qword [rsp + 0x38], r10
mov qword [rsp + 0x30], rcx
mov rax, qword [rbp + 0x78]
mov qword [rsp + 0x28], rax
mov eax, dword [r11 + rsi + 0x54]
mov dword [rsp + 0x20], eax
mov r8d, r14d
mov rcx, r13
call fcn.14001e6e4
mov ebx, eax
inc r14d
test eax, eax
js 0x140025d85
inc edi
add rsi, 0x170
cmp edi, r15d
jb 0x140025ccc
mov rax, qword [rbp - 0x70]
cmp r14d, dword [rax + 0xc]
je 0x140025d8b
lea r8, str.j__pMediaCtxt__m_ulBagCount
mov edx, 0x3382
lea rcx, str.base_stor_blbengine_service_backup.cpp
call fcn.140082070
mov r14, qword [rbp - 0x70]
jmp 0x140025d8e
mov r14, rax
mov rax, qword [rbp - 0x18]
test rax, rax
je 0x140025da0
mov rcx, rax
call qword [sym.imp.ole32.dll_CoTaskMemFree]
mov r12, qword [rbp - 0x30]
mov r15, qword [rbp - 0x38]
mov rsi, qword [rbp - 0x50]
mov rcx, qword [rbp - 0x10]
test rcx, rcx
je 0x140025dc8
cmp rcx, qword [r14 + 0x38]
je 0x140025dc8
cmp rcx, qword [r12 + 0x38]
je 0x140025dc8
call qword [sym.imp.KERNEL32.dll_LocalFree]
test rsi, rsi
je 0x140025de2
cmp rsi, qword [r14 + 0x30]
je 0x140025de2
cmp rsi, qword [r12 + 0x30]
je 0x140025de2
mov rcx, rsi
call fcn.1400b9c24
test r15, r15
je 0x140025df0
mov rcx, r15
call qword [sym.imp.ole32.dll_CoTaskMemFree]
mov rax, qword [rbp - 8]
test rax, rax
je 0x140025e02
mov rcx, rax
call qword [sym.imp.ole32.dll_CoTaskMemFree]
mov rax, qword [rbp + 0x18]
test rax, rax
je 0x140025e14
mov rcx, rax
call qword [sym.imp.ole32.dll_CoTaskMemFree]
mov rax, qword [rbp + 0x20]
test rax, rax
je 0x140025e26
mov rcx, rax
call qword [sym.imp.ole32.dll_CoTaskMemFree]
lea rdi, [r13 + 0x28]
mov rcx, rdi
call fcn.1400f4ef4
test ebx, ebx
jns 0x140025f2c
mov rcx, qword [0x14016f048]
lea rsi, [0x14016f048]
cmp rcx, rsi
je 0x140025e8a
test byte [rcx + 0x1c], 1
je 0x140025e8a
cmp byte [rcx + 0x19], 2
jb 0x140025e8a
lea r8, [0x140148108]
lea rax, [0x140147438]
mov rdx, qword [rbp + 0x28]
cmp byte [rdx], 0
cmovne rax, r8
mov qword [rsp + 0x20], rax
mov r9d, ebx
mov rcx, qword [rcx + 0x10]
call fcn.14000fe94
mov rcx, qword [0x14016f048]
cmp byte [rbp - 0x65], 0
jne 0x140025f3a
test byte [r13 + 0x154], 4
je 0x140025f3a
xor edx, edx
mov rcx, rdi
call fcn.1400f4d68
test eax, eax
jns 0x140025ee6
mov rcx, qword [0x14016f048]
cmp rcx, rsi
je 0x140025f60
test byte [rcx + 0x1c], 1
je 0x140025f3a
cmp byte [rcx + 0x19], 2
jb 0x140025f3a
mov edx, 0x233
mov r9d, eax
lea r8, [0x140148140]
mov rcx, qword [rcx + 0x10]
call fcn.1400049f8
jmp 0x140025f33
mov rcx, r13
call fcn.14001c3f4
test eax, eax
jns 0x140025f22
mov rcx, qword [0x14016f048]
cmp rcx, rsi
je 0x140025f22
test byte [rcx + 0x1c], 1
je 0x140025f22
cmp byte [rcx + 0x19], 2
jb 0x140025f22
mov edx, 0x234
mov r9d, eax
lea r8, [0x140148140]
mov rcx, qword [rcx + 0x10]
call fcn.1400049f8
mov rcx, rdi
call fcn.1400f4ef4
jmp 0x140025f33
lea rsi, [0x14016f048]
mov rcx, qword [0x14016f048]
cmp rcx, rsi
je 0x140025f60
test byte [rcx + 0x1c], 1
je 0x140025f60
cmp byte [rcx + 0x19], 4
jb 0x140025f60
mov edx, 0x235
lea r8, [0x140148140]
mov rcx, qword [rcx + 0x10]
call fcn.1400049d8
mov eax, ebx
mov rcx, qword [rbp + 0xf0]
xor rcx, rsp
call fcn.14013e2a0
add rsp, 0x208
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret