Function at 0x1400243c4
Capabilities:
Get disk size
Query or enumerate registry value

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x128]
sub rsp, 0x228
mov qword [rbp + 0xb8], 0xfffffffffffffffe
mov rax, qword [0x140172608]
xor rax, rsp
mov qword [rbp + 0x110], rax
mov ebx, r9d
mov dword [rbp - 0x44], ebx
mov qword [rbp + 0x48], r8
mov qword [rbp + 0x88], rdx
mov r13, rcx
mov qword [rbp - 0x40], rcx
mov r12, qword [rbp + 0x190]
mov qword [rbp - 0x38], r12
mov r15, qword [rbp + 0x198]
mov qword [rbp - 0x50], r15
mov rsi, qword [rbp + 0x1a0]
mov qword [rbp + 0x40], rsi
mov rax, qword [rbp + 0x1a8]
mov qword [rbp + 0x80], rax
xor ecx, ecx
mov dword [rbp - 0x10], ecx
mov dword [rbp - 0x58], ecx
mov qword [rbp + 8], rcx
mov qword [rbp + 0x30], rcx
mov qword [rbp + 0x10], rcx
mov qword [rbp + 0x50], rcx
mov edi, ecx
mov qword [rbp - 0x28], rcx
mov r14d, ecx
mov qword [rbp - 0x78], rcx
mov qword [rbp], rcx
mov dword [rsp + 0x70], ecx
mov qword [rbp - 8], rcx
mov byte [rbp - 0x5c], cl
mov byte [rbp - 0x5d], cl
mov dword [rbp - 0x20], ecx
mov byte [rbp - 0x47], cl
mov byte [rbp - 0x60], cl
mov qword [rbp + 0x68], rcx
mov qword [rbp + 0x28], rcx
lea rax, [0x1401720a0]
mov rcx, qword [0x1401720a0]
cmp rcx, rax
je 0x1400244bf
test byte [rcx + 0x1c], 1
je 0x1400244bf
cmp byte [rcx + 0x19], 4
jb 0x1400244bf
mov edx, 0x1fc
lea r8, [0x14014be60]
mov rcx, qword [rcx + 0x10]
call fcn.140004b74
cmp ebx, dword [r13 + 0x170]
je 0x1400244e0
lea r8, str.cVolumeName__m_cVolume
mov edx, 0x2f13
lea rcx, str.base_stor_blbengine_service_backup.cpp
call fcn.14008410c
mov byte [rsi], dil
mov rax, qword [rbp + 0x80]
and dword [rax], edi
lea rax, [r13 + 0x18]
mov qword [rbp + 0xb0], rax
lea rbx, [rax + 0x40]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
inc dword [r13 + 0xe0]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov eax, dword [r13 + 0xe0]
mov dword [r15 + 0x10], eax
lea rcx, [rbp - 0x47]
call fcn.14008e084
mov esi, eax
test eax, eax
jns 0x140024576
mov rcx, qword [0x1401720a0]
lea rax, [0x1401720a0]
cmp rcx, rax
je 0x140026784
test byte [rcx + 0x1c], 1
je 0x140026784
cmp byte [rcx + 0x19], 2
jb 0x140026784
mov edx, 0x1fd
mov r9d, esi
lea r8, [0x14014be60]
mov rcx, qword [rcx + 0x10]
call fcn.140004b98
jmp 0x140026784
lea r8, [rbp + 8]
lea rdx, [0x140149494]
mov rcx, qword [r13 + 0x158]
call fcn.140084fcc
mov esi, eax
test eax, eax
js 0x140026784
mov ebx, dword [rbp - 0x44]
shl rbx, 4
mov rcx, rbx
call qword [sym.imp.ole32.dll_CoTaskMemAlloc]
mov qword [rbp + 0x30], rax
test rax, rax
jne 0x1400245ba
mov esi, 0x8007000e
jmp 0x140026784
mov r8, rbx
xor edx, edx
mov rcx, rax
call sub.msvcrt.dll_memset
mov eax, dword [rbp - 0x44]
shl eax, 4
mov ebx, eax
mov ecx, eax
call qword [sym.imp.ole32.dll_CoTaskMemAlloc]
mov qword [rbp + 0x10], rax
test rax, rax
je 0x1400245b0
mov r8d, ebx
xor edx, edx
mov rcx, rax
call sub.msvcrt.dll_memset
mov edi, dword [rbp - 0x44]
cmp dword [r15 + 8], edi
jae 0x14002665f
mov al, r14b
mov byte [rsp + 0x74], 0
mov byte [rbp - 0x70], 0
neg al
sbb eax, eax
and dword [rbp - 0x20], eax
xor al, al
mov byte [rbp - 0x80], al
mov edi, dword [r15 + 8]
imul rax, rdi, 0x170
add rax, qword [r13 + 0xd8]
mov qword [rbp - 0x68], rax
mov rax, qword [rbp + 0x48]
mov r12, qword [rax + rdi*8]
mov qword [rsp + 0x78], r12
lea rcx, [r13 + 0x58]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov dword [r13 + 0x174], edi
lea rcx, [r13 + 0x58]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
lea rcx, [rbp + 0x100]
call qword [sym.imp.RPCRT4.dll_UuidCreate]
mov rdi, qword [rbp - 0x68]
test byte [rdi + 0x54], 1
je 0x140024678
mov ecx, dword [r15 + 8]
mov rax, qword [rbp + 0x48]
mov rcx, qword [rax + rcx*8]
jmp 0x140024786
xor ebx, ebx
mov rcx, qword [r13 + 0x1b0]
cmp dword [rcx + 0x50], ebx
jbe 0x1400246b7
mov eax, ebx
imul r14, rax, 0x38
add r14, qword [rcx + 0x58]
mov qword [rbp + 0x50], r14
mov rdx, r12
mov rcx, qword [r14 + 0x10]
call qword [sym.imp.msvcrt.dll__wcsicmp]
test eax, eax
je 0x1400246b3
inc ebx
mov rcx, qword [r13 + 0x1b0]
cmp ebx, dword [rcx + 0x50]
jb 0x140024686
mov r14, qword [rbp - 0x78]
mov rax, qword [r13 + 0x1b0]
cmp ebx, dword [rax + 0x50]
jne 0x14002471b
mov r12d, dword [rdi + 0x20]
test r12d, r12d
js 0x14002470b
mov r12d, 0x80780020
mov rcx, qword [0x1401720a0]
lea rax, [0x1401720a0]
cmp rcx, rax
je 0x140024712
test byte [rcx + 0x1c], 1
je 0x140024712
cmp byte [rcx + 0x19], 2
jb 0x140024712
mov edx, 0x1fe
mov r9, qword [rsp + 0x78]
lea r8, [0x14014be60]
mov rcx, qword [rcx + 0x10]
call fcn.140005afc
mov rcx, qword [0x1401720a0]
mov byte [rbp - 0x70], 1
jmp 0x140026290
mov rax, qword [rbp - 0x28]
test rax, rax
je 0x140024733
mov rcx, rax
call qword [sym.imp.ole32.dll_CoTaskMemFree]
xor eax, eax
mov qword [rbp - 0x28], rax
mov rax, qword [rbp + 0x50]
mov rcx, qword [rax + 0x18]
test rcx, rcx
jne 0x140024786
mov rcx, qword [0x1401720a0]
lea rax, [0x1401720a0]
cmp rcx, rax
je 0x14002477e
test byte [rcx + 0x1c], 1
je 0x14002477e
cmp byte [rcx + 0x19], 2
jb 0x14002477e
mov edx, 0x1ff
mov r9, r12
lea r8, [0x14014be60]
mov rcx, qword [rcx + 0x10]
call fcn.140005afc
mov rcx, qword [0x1401720a0]
mov r12d, 0x80780020
jmp 0x140024712
lea rdx, [rbp - 0x28]
call fcn.140084d90
test eax, eax
mov r12d, eax
js 0x140024955
test byte [rdi + 0x54], 0x40
je 0x140024802
mov rdx, rdi
mov rcx, r13
call fcn.140022e3c
mov esi, eax
test eax, eax
js 0x140026766
lea rcx, [r13 + 0x58]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
inc dword [r13 + 0xe4]
lea rcx, [r13 + 0x58]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov eax, dword [r13 + 0xe4]
mov dword [r15 + 0xc], eax
mov eax, dword [r13 + 0x174]
shl rax, 4
movups xmm0, xmmword [rbp + 0x100]
mov rcx, qword [rbp + 0x30]
movdqu xmmword [rax + rcx], xmm0
inc dword [r15 + 8]
mov al, byte [rbp - 0x80]
jmp 0x1400265e6
mov ebx, 8
test byte [rdi + 0x54], bl
jne 0x1400248a5
test byte [rdi + 0x54], 0x20
jne 0x14002482e
lea r8, str.VOLUME_HAS_SYSTEMSTATE_pVolCtxt__m_dwVolumeFlags_
mov edx, 0x2faf
lea rcx, str.base_stor_blbengine_service_backup.cpp
call fcn.14008410c
mov rax, qword [0x1401720a0]
lea rcx, [0x1401720a0]
cmp rax, rcx
je 0x140024882
test byte [rax + 0x1c], 1
je 0x140024882
cmp byte [rax + 0x19], 4
jb 0x140024882
lea rdx, [rdi + 0x44]
lea rcx, [rbp + 0x90]
call fcn.14000ff64
nop
or dword [rbp - 0x10], 1
mov edx, 0x200
mov r9, qword [rax]
lea r8, [0x14014be60]
mov rcx, qword [0x1401720a0]
mov rcx, qword [rcx + 0x10]
call fcn.140005afc
nop
mov eax, dword [rbp - 0x10]
test al, 1
je 0x1400247f6
and eax, 0xfffffffe
mov dword [rbp - 0x10], eax
mov rcx, qword [rbp + 0x90]
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
jmp 0x1400247f6
mov r8b, 1
mov edx, ebx
mov rcx, r13
call fcn.14002c580
mov dword [r15 + 0x2c], ebx
mov rbx, qword [rbp - 0x38]
mov eax, dword [rbx + 8]
cmp dword [r15 + 8], eax
jne 0x1400248d7
cmp qword [rbx + 0x30], 0
je 0x1400248d7
mov r14, qword [rbx + 0x30]
mov qword [rbp - 0x78], r14
jmp 0x140024e67
test r14, r14
je 0x1400248f0
cmp r14, qword [r15 + 0x30]
je 0x1400248f0
cmp r14, qword [rbx + 0x30]
je 0x1400248f0
mov rcx, r14
call fcn.1400bc370
xor ebx, ebx
mov r14d, ebx
mov qword [rbp - 0x78], rbx
mov qword [rbp - 0x30], rbx
test byte [rdi + 0x54], 1
je 0x140024961
mov rcx, r13
call fcn.14002d618
mov r12d, eax
test eax, eax
jns 0x140024961
mov rcx, qword [0x1401720a0]
lea rax, [0x1401720a0]
cmp rcx, rax
je 0x140026290
test byte [rcx + 0x1c], 1
je 0x140026290
cmp byte [rcx + 0x19], 2
jb 0x140026290
mov edx, 0x201
mov r9d, esi
lea r8, [0x14014be60]
mov rcx, qword [rcx + 0x10]
call fcn.140004b98
mov rcx, qword [0x1401720a0]
jmp 0x140026290
lea r14, [r13 + 0x58]
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov eax, dword [r13 + 0x174]
imul rcx, rax, 0x170
add rcx, qword [r13 + 0xd8]
mov qword [rcx], rbx
mov qword [rcx + 8], rbx
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
test byte [r13 + 0x154], 0x10
jne 0x1400249c7
cmp byte [r13 + 0x17c], bl
jne 0x1400249af
cmp byte [r13 + 0x17d], bl
je 0x1400249c7
lea r8, str.COMPACT_m_ulFeatures____m_rules.m_bExcludeAudio___m_rules.m_bExcludeVideo
mov edx, 0x2fe9
lea rcx, str.base_stor_blbengine_service_backup.cpp
call fcn.14008410c
mov rcx, qword [0x1401720a0]
lea rax, [0x1401720a0]
cmp rcx, rax
je 0x140024a0b
test byte [rcx + 0x1c], 1
je 0x140024a0b
mov rbx, qword [rbp - 0x28]
cmp byte [rcx + 0x19], 4
jb 0x140024a0f
mov edx, 0x202
mov qword [rsp + 0x20], rbx
mov r9, qword [rsp + 0x78]
lea r8, [0x14014be60]
mov rcx, qword [rcx + 0x10]
call fcn.140005bdc
jmp 0x140024a0f
mov rbx, qword [rbp - 0x28]
mov eax, dword [r13 + 0x174]
imul rcx, rax, 0x170
mov rax, qword [r13 + 0xd8]
add rax, 0x8c
add rcx, rax
call qword [sym.imp.KERNEL32.dll_GetSystemTimeAsFileTime]
mov eax, dword [r13 + 0x154]
test al, 2
je 0x140024a93
shr eax, 4
and al, 1
lea rcx, [rsp + 0x70]
mov qword [rsp + 0x58], rcx
lea rcx, [rbp + 0x18]
mov qword [rsp + 0x50], rcx
lea rcx, [rbp + 0x20]
mov qword [rsp + 0x48], rcx
lea rcx, [rbp - 0x30]
mov qword [rsp + 0x40], rcx
lea rcx, [rbp + 0x98]
mov qword [rsp + 0x38], rcx
mov r9b, byte [r13 + 0x17d]
mov r8b, byte [r13 + 0x17c]
mov dl, al
mov rcx, rbx
call fcn.1400b47ec
mov esi, eax
jmp 0x140024b8c
lea rax, [rsp + 0x70]
mov qword [rsp + 0x68], rax
lea rax, [rbp + 0x68]
mov qword [rsp + 0x60], rax
lea rax, [rbp + 0x18]
mov qword [rsp + 0x58], rax
lea rax, [rbp + 0x20]
mov qword [rsp + 0x50], rax
lea rax, [rbp - 0x30]
mov qword [rsp + 0x48], rax
lea rax, [rbp + 0x98]
mov qword [rsp + 0x40], rax
mov byte [rsp + 0x38], 0
xor r9d, r9d
mov r8b, byte [r13 + 0x17d]
mov dl, byte [r13 + 0x17c]
mov rcx, rbx
call fcn.1400b49c8
mov esi, eax
test eax, eax
jne 0x140024b8c
mov rbx, qword [rbp - 0x30]
mov qword [rbp - 0x78], rbx
test rbx, rbx
jne 0x140024b1a
lea r8, str.ReplicationContext___NULL
mov edx, 0x1fb9
lea rcx, str.base_stor_blb_blbimg_blbimg.cxx
call fcn.14008410c
cmp byte [rbx + 0xb8], 0
je 0x140024b66
mov edx, 0x2000
mov rcx, rdi
call fcn.140012930
mov rcx, qword [0x1401720a0]
lea rax, [0x1401720a0]
cmp rcx, rax
je 0x140024b94
test byte [rcx + 0x1c], 1
je 0x140024b94
cmp byte [rcx + 0x19], 4
jb 0x140024b94
mov edx, 0x203
lea r8, [0x14014be60]
mov rcx, qword [rcx + 0x10]
call fcn.140004b74
jmp 0x140024b94
mov rcx, qword [0x1401720a0]
lea rax, [0x1401720a0]
cmp rcx, rax
je 0x140024b94
test byte [rcx + 0x1c], 1
je 0x140024b94
cmp byte [rcx + 0x19], 4
jb 0x140024b94
mov edx, 0x204
jmp 0x140024b54
mov rax, qword [rbp - 0x30]
mov qword [rbp - 0x78], rax
mov eax, dword [r13 + 0x174]
imul rcx, rax, 0x170
mov rax, qword [r13 + 0xd8]
add rax, 0x94
add rcx, rax
call qword [sym.imp.KERNEL32.dll_GetSystemTimeAsFileTime]
mov r10, qword [0x1401720a0]
lea rax, [0x1401720a0]
cmp r10, rax
je 0x140024c47
test byte [r10 + 0x1c], 1
je 0x140024c47
cmp byte [r10 + 0x19], 4
jb 0x140024c47
mov eax, dword [r13 + 0x174]
imul rdx, rax, 0x170
mov rcx, qword [r13 + 0xd8]
mov eax, dword [rdx + rcx + 0x8c]
mov dword [rbp + 0x60], eax
mov eax, dword [rdx + rcx + 0x90]
mov dword [rbp + 0x64], eax
mov eax, dword [rdx + rcx + 0x94]
mov dword [rbp + 0x58], eax
mov eax, dword [rdx + rcx + 0x98]
mov dword [rbp + 0x5c], eax
mov rcx, qword [rbp + 0x58]
sub rcx, qword [rbp + 0x60]
movabs rax, 0x346dc5d63886594b
mul rcx
mov r9, rdx
shr r9, 0xb
mov edx, 0x205
lea r8, [0x14014be60]
mov rcx, qword [r10 + 0x10]
call fcn.140010244
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov eax, dword [r13 + 0x174]
imul rcx, rax, 0x170
add rcx, qword [r13 + 0xd8]
mov rdi, qword [rbp + 0x18]
mov qword [rcx], rdi
mov rbx, qword [rbp + 0x20]
mov qword [rcx + 8], rbx
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov qword [r15 + 0x20], rbx
mov qword [r15 + 0x18], rdi
mov ecx, esi
test esi, esi
je 0x140024e5b
sub ecx, 1
je 0x140024e23
sub ecx, 3
je 0x140024d90
sub ecx, 1
je 0x140024d31
sub ecx, 1
je 0x140024d90
sub ecx, 1
je 0x140024d31
sub ecx, 0xf
je 0x140024d90
cmp ecx, 9
je 0x140024d90
mov rcx, qword [0x1401720a0]
lea rax, [0x1401720a0]
cmp rcx, rax
je 0x140024d11
test byte [rcx + 0x1c], 1
je 0x140024d11
mov edi, dword [rsp + 0x70]
cmp byte [rcx + 0x19], 2
jb 0x140024d15
mov edx, 0x208
mov dword [rsp + 0x28], edi
mov dword [rsp + 0x20], esi
mov r9, qword [rsp + 0x78]
lea r8, [0x14014be60]
mov rcx, qword [rcx + 0x10]
call fcn.140010730
jmp 0x140024d15
mov edi, dword [rsp + 0x70]
lea r8, [rbp - 0x58]
mov edx, edi
mov ecx, esi
call fcn.1400fae68
mov r12d, eax
mov rcx, qword [0x1401720a0]
jmp 0x140026288
mov rcx, qword [0x1401720a0]
lea rax, [0x1401720a0]
cmp rcx, rax
je 0x140024d78
test byte [rcx + 0x1c], 1
je 0x140024d78
mov edi, dword [rsp + 0x70]
cmp byte [rcx + 0x19], 2
jb 0x140024d7c
mov edx, 0x207
mov dword [rsp + 0x28], edi
mov dword [rsp + 0x20], esi
mov r9, qword [rsp + 0x78]
lea r8, [0x14014be60]
mov rcx, qword [rcx + 0x10]
call fcn.140010730
jmp 0x140024d7c
mov edi, dword [rsp + 0x70]
lea r8, [rbp - 0x58]
mov edx, edi
mov ecx, esi
call fcn.1400fae68
mov byte [rsp + 0x74], 1
jmp 0x140024d22
mov rcx, qword [0x1401720a0]
lea rax, [0x1401720a0]
cmp rcx, rax
je 0x140024dd7
test byte [rcx + 0x1c], 1
je 0x140024dd7
mov edi, dword [rsp + 0x70]
cmp byte [rcx + 0x19], 2
jb 0x140024ddb
mov edx, 0x206
mov dword [rsp + 0x28], edi
mov dword [rsp + 0x20], esi
mov r9, qword [rsp + 0x78]
lea r8, [0x14014be60]
mov rcx, qword [rcx + 0x10]
call fcn.140010730
jmp 0x140024ddb
mov edi, dword [rsp + 0x70]
lea r8, [rbp - 0x58]
mov edx, edi
mov ecx, esi
call fcn.1400fae68
mov r12d, eax
mov rdi, qword [rbp - 0x68]
test byte [rdi + 0x54], 1
jne 0x140024e13
lea rdx, [rbp - 0x60]
mov rcx, qword [rbp - 0x28]
call fcn.14002415c
test eax, eax
js 0x140024e13
cmp byte [rbp - 0x60], 0
mov eax, 0x80780169
cmove r12d, eax
mov byte [rbp - 0x70], 1
mov rcx, qword [0x1401720a0]
jmp 0x14002628c
lea rcx, [r13 + 0x18]
mov rax, qword [rcx]
mov rax, qword [rax + 0x10]
call qword [case.0x1400059ff.0]
mov rcx, qword [0x1401720a0]
mov rdi, qword [rbp - 0x68]
mov r14, qword [rbp - 0x78]
mov rsi, qword [rsp + 0x78]
test al, al
je 0x140026295
mov r12d, 0x80780167
jmp 0x140026295
mov rdi, qword [rbp - 0x68]
mov r14, qword [rbp - 0x78]
mov rbx, qword [rbp - 0x38]
mov qword [r15 + 0x30], r14
mov eax, dword [rbx + 8]
cmp dword [r15 + 8], eax
jne 0x140024ea0
cmp qword [rbx + 0x30], 0
jne 0x140024e85
test byte [rdi + 0x54], 1
jne 0x140024e85
mov qword [rbx + 0x30], r14
cmp dword [r15 + 8], eax
jne 0x140024ea0
mov rcx, qword [rbx + 0x38]
test rcx, rcx
je 0x140024ea0
mov qword [rbp], rcx
mov edx, dword [rbx + 0x40]
jmp 0x140024f65
mov rcx, qword [rbp]
test rcx, rcx
je 0x140024ebb
cmp rcx, qword [r15 + 0x38]
je 0x140024ebb
cmp rcx, qword [rbx + 0x38]
je 0x140024ebb
call qword [sym.imp.KERNEL32.dll_LocalFree]
xor ecx, ecx
mov qword [rbp], rcx
xor edx, edx
mov dword [rbp - 0x18], edx
test byte [r13 + 0x154], 2
je 0x140024f65
lea r9, [rsp + 0x70]
lea r8, [rbp - 0x18]
lea rdx, [rbp]
mov rcx, r14
call fcn.1400b8818
mov ebx, eax
test eax, eax
je 0x140024f5a
mov rcx, qword [0x1401720a0]
lea rax, [0x1401720a0]
cmp rcx, rax
je 0x140024f36
test byte [rcx + 0x1c], 1
je 0x140024f36
mov edi, dword [rsp + 0x70]
cmp byte [rcx + 0x19], 2
jb 0x140024f3a
mov edx, 0x209
mov dword [rsp + 0x28], edi
mov dword [rsp + 0x20], ebx
mov r9, qword [rsp + 0x78]
lea r8, [0x14014be60]
mov rcx, qword [rcx + 0x10]
call fcn.140010730
jmp 0x140024f3a
mov edi, dword [rsp + 0x70]
lea r8, [rbp - 0x58]
mov edx, edi
mov ecx, ebx
call fcn.1400fae68
mov r12d, eax
mov rcx, qword [0x1401720a0]
mov rdi, qword [rbp - 0x68]
jmp 0x140026290
mov rcx, qword [rbp]
mov edx, dword [rbp - 0x18]
mov rbx, qword [rbp - 0x38]
mov qword [r15 + 0x38], rcx
mov dword [r15 + 0x40], edx
mov eax, dword [rbx + 8]
cmp dword [r15 + 8], eax
jne 0x140024f8a
cmp qword [rbx + 0x38], 0
jne 0x140024f8a
test byte [rdi + 0x54], 1
jne 0x140024f8a
mov qword [rbx + 0x38], rcx
mov dword [rbx + 0x40], edx
mov r8b, 1
mov ebx, 9
mov edx, ebx
mov rcx, r13
call fcn.14002c580
mov edx, ebx
mov rcx, r15
call fcn.1400145b8
test byte [r13 + 0x154], 2
je 0x140025000
lea r9, [rsp + 0x70]
mov rdx, qword [rbp]
mov rcx, r14
call fcn.1400b89d4
mov ebx, eax
test eax, eax
je 0x140025000
mov rcx, qword [0x1401720a0]
lea rax, [0x1401720a0]
cmp rcx, rax
je 0x140024f36
test byte [rcx + 0x1c], 1
je 0x140024f36
mov edi, dword [rsp + 0x70]
cmp byte [rcx + 0x19], 2
jb 0x140024f3a
mov edx, 0x20a
jmp 0x140024f17
mov rax, qword [rbp - 8]
test rax, rax
je 0x140025017
mov rcx, rax
call qword [sym.imp.ole32.dll_CoTaskMemFree]
and qword [rbp - 8], 0
lea rdx, [rdi + 0x44]
lea rax, [rbp - 8]
mov qword [rsp + 0x20], rax
lea r9, str..vhdx
mov r8d, dword [rdi + 0x54]
mov rcx, qword [r13 + 0x1d8]
call fcn.14010bc90
mov r12d, eax
test eax, eax
js 0x140024955
lea r14, [r13 + 0x28]
mov rcx, r14
call fcn.1400f8580
mov rbx, qword [rbp - 8]
mov rdx, rbx
mov rcx, r13
call fcn.140020480
mov r12d, eax
test eax, eax
jns 0x1400250ba
mov byte [rsp + 0x74], 1
mov rcx, qword [0x1401720a0]
lea rax, [0x1401720a0]
cmp rcx, rax
je 0x14002628c
test byte [rcx + 0x1c], 1
je 0x14002628c
cmp byte [rcx + 0x19], 2
jb 0x14002628c
mov edx, 0x20b
mov dword [rsp + 0x20], r12d
mov r9, rbx
lea r8, [0x14014be60]
mov rcx, qword [rcx + 0x10]
call fcn.140005b60
jmp 0x140024e17
xor edx, edx
mov rcx, r14
call fcn.1400f83ec
mov esi, eax
test eax, eax
js 0x140026766
xor ebx, ebx
xor edi, edi
lea r9, [rbp + 0xc0]
lea r8, [rbp + 0xa0]
lea rdx, [rbp + 0xa8]
mov rsi, qword [rbp + 8]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
test eax, eax
jne 0x140025105
mov rcx, rsi
call fcn.14012ebe0
mov r12d, eax
jmp 0x140025116
mov rbx, qword [rbp + 0xa0]
mov rdi, qword [rbp + 0xa8]
xor r12d, r12d
and qword [rbp + 0x38], 0
xor sil, sil
lea rax, [rbp + 0x38]
mov qword [rsp + 0x20], rax
mov r9d, 1
xor r8d, r8d
lea rdx, str.SYSTEMCurrentControlSetServiceswbengine
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x14002521f
and dword [rbp - 0x18], eax
mov dword [rbp - 0x30], 4
lea rax, [rbp - 0x30]
mov qword [rsp + 0x28], rax
lea rax, [rbp - 0x18]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea rdx, str.FreeSpace
mov rcx, qword [rbp + 0x38]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
jne 0x14002519c
mov eax, dword [rbp - 0x18]
shl rax, 0x14
test rax, rax
je 0x1400251d7
cmp rax, rdi
jae 0x1400251d7
mov rdi, rax
mov sil, 1
jmp 0x1400251d7
mov rcx, qword [0x1401720a0]
lea rax, [0x1401720a0]
cmp rcx, rax
je 0x140025213
test byte [rcx + 0x1c], 1
je 0x1400251e5
cmp byte [rcx + 0x19], 5
jb 0x1400251e5
mov edx, 0x20c
lea r9, str.SYSTEMCurrentControlSetServiceswbengine
lea r8, [0x14014be60]
mov rcx, qword [rcx + 0x10]
call fcn.140005afc
mov rcx, qword [0x1401720a0]
lea rax, [0x1401720a0]
cmp rcx, rax
je 0x140025213
test byte [rcx + 0x1c], 1
je 0x140025213
cmp byte [rcx + 0x19], 4
jb 0x140025213
mov edx, 0x20d
lea rax, str.SYSTEMCurrentControlSetServiceswbengine
mov qword [rsp + 0x20], rax
mov r9, rdi
mov rcx, qword [rcx + 0x10]
call fcn.140010f40
mov rcx, qword [rbp + 0x38]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x14002525a
mov rcx, qword [0x1401720a0]
lea rax, [0x1401720a0]
cmp rcx, rax
je 0x140025268
test byte [rcx + 0x1c], 1
je 0x140025268
cmp byte [rcx + 0x19], 5
jb 0x140025268
mov edx, 0x20e
lea r9, str.SYSTEMCurrentControlSetServiceswbengine
lea r8, [0x14014be60]
mov rcx, qword [rcx + 0x10]
call fcn.140005afc
lea rax, [0x1401720a0]
mov rcx, qword [0x1401720a0]
test r12d, r12d
jns 0x140025277
mov byte [rsp + 0x74], 1
jmp 0x140026288
cmp rcx, rax
je 0x1400252a5
test byte [rcx + 0x1c], 1
je 0x1400252a5
cmp byte [rcx + 0x19], 4
jb 0x1400252a5
mov edx, 0x20f
mov qword [rsp + 0x20], rdi
mov r9, rbx
lea r8, [0x14014be60]
mov rcx, qword [rcx + 0x10]
call fcn.140004cfc
mov rcx, r14
call fcn.1400f8580
test byte [r13 + 0x154], 2
je 0x14002545d
mov eax, dword [r15 + 0xc]
mov r8, qword [rbp - 0x38]
cmp eax, dword [r8 + 0xc]
jne 0x1400252f0
mov bl, 1
mov rcx, qword [0x1401720a0]
lea rdx, [0x1401720a0]
cmp rcx, rdx
je 0x140025357
test byte [rcx + 0x1c], bl
je 0x140025357
cmp byte [rcx + 0x19], 4
jb 0x140025357
mov edx, 0x210
jmp 0x140025338
ja 0x14002530e
lea r8, str.pMediaCtxt__m_ulBagCount___pInitialMediaCtxt__m_ulBagCount
mov edx, 0x3112
lea rcx, str.base_stor_blbengine_service_backup.cpp
call fcn.14008410c
mov r8, qword [rbp - 0x38]
xor bl, bl
mov rcx, qword [0x1401720a0]
lea rax, [0x1401720a0]
cmp rcx, rax
je 0x14002535e
test byte [rcx + 0x1c], 1
je 0x14002535e
cmp byte [rcx + 0x19], 4
jb 0x14002535e
mov edx, 0x211
mov eax, dword [r15 + 0xc]
mov r9d, dword [r8 + 0xc]
mov dword [rsp + 0x20], eax
lea r8, [0x14014be60]
mov rcx, qword [rcx + 0x10]
call fcn.14000ffdc
mov rcx, qword [0x1401720a0]
lea rax, [0x1401720a0]
mov edx, 0x1400000
cmp rdi, rdx
ja 0x1400253b7
neg bl
sbb r12d, r12d
and r12d, 0x44
add r12d, 0x80780030
mov byte [rsp + 0x74], 1
cmp rcx, rax
je 0x140026288
test byte [rcx + 0x1c], 1
je 0x140026288
cmp byte [rcx + 0x19], 3
jb 0x140026288
mov edx, 0x212
mov r9, rdi
lea r8, [0x14014be60]
mov rcx, qword [rcx + 0x10]
call fcn.140010244
jmp 0x140024d25
test sil, sil
jne 0x140025415
mov r8d, 0x40000000
cmp rdi, r8
ja 0x140025415
test bl, bl
je 0x140025415
mov r12d, 0x80780080
mov byte [rsp + 0x74], 1
cmp rcx, rax
je 0x140026288
test byte [rcx + 0x1c], 1
je 0x140026288
cmp byte [rcx + 0x19], 3
jb 0x140026288
mov edx, 0x213
mov qword [rsp + 0x20], r8
mov r9, rdi
lea r8, [0x14014be60]
mov rcx, qword [rcx + 0x10]
call fcn.140004cfc
jmp 0x140024d25
sub rdi, rdx
cmp rdi, 0x1100000
ja 0x14002545d
neg bl
sbb r12d, r12d
and r12d, 0x44
add r12d, 0x80780030
mov byte [rsp + 0x74], 1
cmp rcx, rax
je 0x140026288
test byte [rcx + 0x1c], 1
je 0x140026288
cmp byte [rcx + 0x19], 3
jb 0x140026288
mov edx, 0x214
jmp 0x14002539f
mov sil, 1
mov byte [rbp - 0x5f], sil
mov rbx, qword [rbp + 0x10]
test byte [r13 + 0x154], 4
je 0x1400254a1
mov r9d, dword [r13 + 0x174]
shl r9d, 4
add r9, rbx
lea r8, [rbp - 0x5f]
mov rdx, qword [rbp + 0x88]
mov rcx, r13
call fcn.14001eb48
mov esi, eax
test eax, eax
js 0x140026766
mov sil, byte [rbp - 0x5f]
mov byte [rbp - 0x5e], sil
lea r15, [r13 + 0x58]
mov qword [rbp - 0x18], r15
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov eax, dword [r13 + 0x174]
imul rcx, rax, 0x170
add rcx, qword [r13 + 0xd8]
and qword [rcx], 0
and qword [rcx + 8], 0
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov rcx, qword [0x1401720a0]
lea rax, [0x1401720a0]
cmp rcx, rax
je 0x14002554d
test byte [rcx + 0x1c], 1
je 0x140025522
cmp byte [rcx + 0x19], 4
jb 0x140025522
mov edx, 0x215
mov r9, rdi
lea r8, [0x14014be60]
mov rcx, qword [rcx + 0x10]
call fcn.140010244
mov rcx, qword [0x1401720a0]
lea rax, [0x1401720a0]
cmp rcx, rax
je 0x14002554d
test byte [rcx + 0x1c], 1
je 0x14002554d
cmp byte [rcx + 0x19], 4
jb 0x14002554d
mov edx, 0x216
mov r9, qword [rsp + 0x78]
lea r8, [0x14014be60]
mov rcx, qword [rcx + 0x10]
call fcn.140005afc
mov eax, dword [r13 + 0x174]
imul rcx, rax, 0x170
mov rax, qword [r13 + 0xd8]
add rax, 0x9c
add rcx, rax
call qword [sym.imp.KERNEL32.dll_GetSystemTimeAsFileTime]
test byte [r13 + 0x154], 2
je 0x140025610
mov rdx, qword [r14]
cmp rdx, 0xffffffffffffffff
jne 0x140025595
or rdx, rdx
cmp qword [r14 + 8], 0xffffffffffffffff
cmovne rdx, qword [r14 + 8]
mov ecx, dword [r13 + 0x174]
shl ecx, 4
add rcx, rbx
cmp dword [r13 + 0x150], 4
sete r8b
lea rax, [rbp - 0x5d]
mov qword [rsp + 0x68], rax
lea rax, [rsp + 0x70]
mov qword [rsp + 0x60], rax
lea rax, [rbp + 0x18]
mov qword [rsp + 0x58], rax
lea rax, [rbp + 0x20]
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x48], rcx
lea rax, [rbp - 0x48]
mov qword [rsp + 0x40], rax
lea rax, [rbp - 0x5e]
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], rdx
mov qword [rsp + 0x28], r13
mov r9, rdi
mov rdx, qword [rbp - 8]
mov rcx, qword [rbp - 0x78]
call fcn.1400b56e4
mov r13d, eax
mov r14b, byte [rbp - 0x48]
jmp 0x140025ad7
and qword [rbp - 0x30], 0
xor edx, edx
lea r8d, [rdx + 0x20]
lea rcx, [rbp + 0xe0]
call sub.msvcrt.dll_memset
test sil, sil
jne 0x1400256c9
xor edx, edx
mov rcx, r14
call fcn.1400f83ec
mov esi, eax
test eax, eax
js 0x140026762
mov r15, qword [rbp - 8]
mov rcx, r15
call fcn.14008b58c
mov bl, al
mov rcx, r14
call fcn.1400f8580
test bl, bl
je 0x1400256cd
mov dword [rbp + 0xe0], 2
lea r8, [rbp + 0xe0]
mov rdx, r15
mov rcx, r14
call fcn.14011ac9c
test eax, eax
jns 0x1400256cd
mov rcx, qword [0x1401720a0]
lea rdx, [0x1401720a0]
cmp rcx, rdx
je 0x1400256c0
test byte [rcx + 0x1c], 1
je 0x1400256c0
cmp byte [rcx + 0x19], 2
jb 0x1400256c0
mov edx, 0x217
mov dword [rsp + 0x20], eax
mov r9, r15
lea r8, [0x14014be60]
mov rcx, qword [rcx + 0x10]
call fcn.140005b60
mov rcx, qword [0x1401720a0]
mov r15, qword [rbp - 0x50]
jmp 0x140026288
mov r15, qword [rbp - 8]
lea r9, [rbp - 0x30]
mov r8, qword [rbp + 0x68]
mov rdi, qword [rbp - 0x68]
mov rdx, rdi
mov rcx, r13
call fcn.140022480
test eax, eax
jns 0x1400256fb
mov r12d, eax
mov rcx, qword [0x1401720a0]
mov r15, qword [rbp - 0x50]
jmp 0x14002628c
xor edx, edx
mov rcx, r14
call fcn.1400f83ec
mov esi, eax
test eax, eax
js 0x140026762
lea rdx, [rbp + 0x28]
mov rcx, r15
call fcn.14011719c
mov ebx, eax
mov rcx, r14
call fcn.1400f8580
test ebx, ebx
jns 0x140025770
mov rcx, qword [0x1401720a0]
lea rax, [0x1401720a0]
cmp rcx, rax
je 0x14002576b
test byte [rcx + 0x1c], 1
je 0x14002576b
cmp byte [rcx + 0x19], 2
jb 0x14002576b
mov edx, 0x218
mov dword [rsp + 0x20], ebx
mov r9, r15
lea r8, [0x14014be60]
mov rcx, qword [rcx + 0x10]
call fcn.140005b60
mov rcx, qword [0x1401720a0]
mov r12d, ebx
jmp 0x1400256f2
movups xmm0, xmmword [rbp + 0xe8]
movdqu xmmword [rbp + 0xd0], xmm0
mov ecx, dword [r13 + 0x174]
shl ecx, 4
add rcx, qword [rbp + 0x10]
lea rax, [rsp + 0x70]
mov qword [rsp + 0x60], rax
lea rax, [rbp - 0x5d]
mov qword [rsp + 0x58], rax
lea rax, [rbp + 0x18]
mov qword [rsp + 0x50], rax
lea rax, [rbp + 0x20]
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x40], rcx
mov rsi, qword [rbp + 0x28]
mov qword [rsp + 0x38], rsi
mov rax, qword [rbp - 0x30]
mov qword [rsp + 0x30], rax
lea rax, [rbp + 0xd0]
mov qword [rsp + 0x28], rax
lea rax, [rbp - 0x5e]
mov qword [rsp + 0x20], rax
xor r9d, r9d
mov r8, r13
lea rdx, [0x1400201e0]
mov r14, qword [rbp - 0x78]
mov rcx, r14
call fcn.1400b7274
mov r13d, eax
test eax, eax
jne 0x140025907
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_FlushFileBuffers]
test eax, eax
jne 0x140025879
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x70], eax
mov rcx, qword [0x1401720a0]
lea rdx, [0x1401720a0]
cmp rcx, rdx
je 0x14002585b
test byte [rcx + 0x1c], 1
je 0x14002585b
cmp byte [rcx + 0x19], 2
jb 0x14002585b
mov edx, 0x219
mov r9d, eax
lea r8, [0x14014be60]
mov rcx, qword [rcx + 0x10]
call fcn.140004b98
mov rcx, qword [0x1401720a0]
mov eax, dword [rsp + 0x70]
movzx r12d, ax
or r12d, 0x80070000
test eax, eax
cmovle r12d, eax
mov r13, qword [rbp - 0x40]
mov r15, qword [rbp - 0x50]
jmp 0x140026290
xor r8d, r8d
xor edx, edx
mov rcx, rsi
call qword [sym.imp.VirtDisk.dll_DetachVirtualDisk]
mov dword [rsp + 0x70], eax
test eax, eax
je 0x1400258b5
mov rcx, qword [0x1401720a0]
lea rdx, [0x1401720a0]
cmp rcx, rdx
je 0x14002585b
test byte [rcx + 0x1c], 1
je 0x14002585b
cmp byte [rcx + 0x19], 2
jb 0x14002585b
mov edx, 0x21a
jmp 0x14002583d
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
test eax, eax
jne 0x140025901
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x70], eax
mov rcx, qword [0x1401720a0]
lea rdx, [0x1401720a0]
cmp rcx, rdx
je 0x14002585b
test byte [rcx + 0x1c], 1
je 0x14002585b
cmp byte [rcx + 0x19], 2
jb 0x14002585b
mov edx, 0x21b
jmp 0x14002583d
xor esi, esi
mov qword [rbp + 0x28], rsi
mov r15, qword [0x1401720a0]
lea rbx, [0x1401720a0]
cmp r15, rbx
je 0x1400259dc
test byte [r15 + 0x1c], 4
je 0x1400259dc
cmp byte [r15 + 0x19], 4
jb 0x1400259dc
movzx eax, byte [rdi + 0x147]
movzx ecx, byte [rdi + 0x146]
movzx r8d, byte [rdi + 0x145]
movzx r9d, byte [rdi + 0x144]
movzx r10d, byte [rdi + 0x143]
movzx r11d, byte [rdi + 0x142]
movzx ebx, byte [rdi + 0x141]
movzx edi, byte [rdi + 0x140]
mov r14, qword [rbp - 0x68]
movzx esi, word [r14 + 0x13e]
movzx r14d, word [r14 + 0x13c]
mov edx, 0x21c
mov dword [rsp + 0x68], eax
mov dword [rsp + 0x60], ecx
mov dword [rsp + 0x58], r8d
mov dword [rsp + 0x50], r9d
mov dword [rsp + 0x48], r10d
mov dword [rsp + 0x40], r11d
mov dword [rsp + 0x38], ebx
mov dword [rsp + 0x30], edi
mov dword [rsp + 0x28], esi
mov dword [rsp + 0x20], r14d
mov rdi, qword [rbp - 0x68]
mov r9d, dword [rdi + 0x138]
lea r8, [0x14014be60]
mov rcx, qword [r15 + 0x10]
call fcn.140010024
mov r14, qword [rbp - 0x78]
lea rbx, [0x1401720a0]
test r14, r14
jne 0x1400259f9
lea r8, str.ReplicationContext___NULL
mov edx, 0x1fae
lea rcx, str.base_stor_blb_blbimg_blbimg.cxx
call fcn.14008410c
movups xmm0, xmmword [r14 + 0x30]
movdqu xmmword [rdi + 0x148], xmm0
mov r15, qword [0x1401720a0]
cmp r15, rbx
je 0x140025ac8
test byte [r15 + 0x1c], 4
je 0x140025ac8
cmp byte [r15 + 0x19], 4
jb 0x140025ac8
movzx eax, byte [rdi + 0x157]
movzx ecx, byte [rdi + 0x156]
movzx r8d, byte [rdi + 0x155]
movzx r9d, byte [rdi + 0x154]
movzx r10d, byte [rdi + 0x153]
movzx r11d, byte [rdi + 0x152]
movzx ebx, byte [rdi + 0x151]
movzx edi, byte [rdi + 0x150]
mov rdx, qword [rbp - 0x68]
movzx esi, word [rdx + 0x14e]
movzx r14d, word [rdx + 0x14c]
mov edx, 0x21d
mov dword [rsp + 0x68], eax
mov dword [rsp + 0x60], ecx
mov dword [rsp + 0x58], r8d
mov dword [rsp + 0x50], r9d
mov dword [rsp + 0x48], r10d
mov dword [rsp + 0x40], r11d
mov dword [rsp + 0x38], ebx
mov dword [rsp + 0x30], edi
mov dword [rsp + 0x28], esi
mov dword [rsp + 0x20], r14d
mov r14, qword [rbp - 0x68]
mov r9d, dword [r14 + 0x148]
lea r8, [0x14014be60]
mov rcx, qword [r15 + 0x10]
call fcn.140010024
mov r14b, 1
mov byte [rbp - 0x48], r14b
mov sil, byte [rbp - 0x5f]
mov r15, qword [rbp - 0x18]
mov rdi, qword [rbp - 0x40]
mov eax, dword [rdi + 0x174]
imul rcx, rax, 0x170
mov rax, qword [rdi + 0xd8]
add rax, 0xa4
add rcx, rax
call qword [sym.imp.KERNEL32.dll_GetSystemTimeAsFileTime]
mov r10, qword [0x1401720a0]
lea rax, [0x1401720a0]
cmp r10, rax
je 0x140025b8c
test byte [r10 + 0x1c], 1
je 0x140025b8c
cmp byte [r10 + 0x19], 4
jb 0x140025b8c
mov eax, dword [rdi + 0x174]
imul rdx, rax, 0x170
mov rcx, qword [rdi + 0xd8]
mov eax, dword [rdx + rcx + 0x9c]
mov dword [rbp + 0x78], eax
mov eax, dword [rdx + rcx + 0xa0]
mov dword [rbp + 0x7c], eax
mov eax, dword [rdx + rcx + 0xa4]
mov dword [rbp + 0x70], eax
mov eax, dword [rdx + rcx + 0xa8]
mov dword [rbp + 0x74], eax
mov rcx, qword [rbp + 0x70]
sub rcx, qword [rbp + 0x78]
movabs rax, 0x346dc5d63886594b
mul rcx
mov r9, rdx
shr r9, 0xb
mov edx, 0x21e
lea r8, [0x14014be60]
mov rcx, qword [r10 + 0x10]
call fcn.140010244
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov bl, byte [rbp - 0x5e]
cmp byte [rbp - 0x5d], 0
je 0x140025bba
mov rax, qword [rbp - 0x68]
mov byte [rax + 0x84], 1
test bl, bl
jne 0x140025bba
mov edx, 0x10
mov rcx, rax
call fcn.140012930
test sil, sil
jne 0x140025c0d
test bl, bl
je 0x140025c0d
mov rcx, qword [0x1401720a0]
lea rax, [0x1401720a0]
cmp rcx, rax
je 0x140025bf7
test byte [rcx + 0x1c], 1
je 0x140025bf7
cmp byte [rcx + 0x19], 4
jb 0x140025bf7
mov edx, 0x21f
lea r8, [0x14014be60]
mov rcx, qword [rcx + 0x10]
call fcn.140004b74
mov rax, qword [rdi + 0x188]
mov rcx, qword [rbp - 0x68]
mov qword [rcx + 0x78], rax
and dword [rcx + 0x80], 0
mov byte [rbp - 0x5c], 1
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov eax, dword [rdi + 0x174]
imul rcx, rax, 0x170
add rcx, qword [rdi + 0xd8]
mov rdi, qword [rbp + 0x18]
mov qword [rcx], rdi
mov rbx, qword [rbp + 0x20]
mov qword [rcx + 8], rbx
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov rsi, qword [rbp - 0x50]
mov qword [rsi + 0x20], rbx
mov qword [rsi + 0x18], rdi
mov ecx, r13d
xor ebx, ebx
test r13d, r13d
je 0x1400260b0
sub ecx, 1
je 0x140026070
sub ecx, 3
je 0x140025fc8
sub ecx, 1
je 0x140025f42
sub ecx, 1
je 0x140025fc8
sub ecx, 1
je 0x140025d71
cmp ecx, 0xd
je 0x140025d0b
mov rcx, qword [0x1401720a0]
lea rax, [0x1401720a0]
cmp rcx, rax
je 0x140025ce3
test byte [rcx + 0x1c], 1
je 0x140025ce3
mov edi, dword [rsp + 0x70]
cmp byte [rcx + 0x19], 2
jb 0x140025ce7
mov edx, 0x227
mov dword [rsp + 0x28], edi
mov dword [rsp + 0x20], r13d
mov r9, qword [rsp + 0x78]
lea r8, [0x14014be60]
mov rcx, qword [rcx + 0x10]
call fcn.140010730
jmp 0x140025ce7
mov edi, dword [rsp + 0x70]
lea r8, [rbp - 0x58]
mov edx, edi
mov ecx, r13d
call fcn.1400fae68
mov r12d, eax
mov rcx, qword [0x1401720a0]
mov r13, qword [rbp - 0x40]
mov r15, rsi
jmp 0x140026288
mov rcx, qword [0x1401720a0]
lea rax, [0x1401720a0]
cmp rcx, rax
je 0x140025d56
test byte [rcx + 0x1c], 1
je 0x140025d56
mov edi, dword [rsp + 0x70]
cmp byte [rcx + 0x19], 2
jb 0x140025d5a
mov edx, 0x222
mov dword [rsp + 0x28], edi
mov dword [rsp + 0x20], 0x14
mov r9, qword [rsp + 0x78]
lea r8, [0x14014be60]
mov rcx, qword [rcx + 0x10]
call fcn.140010730
jmp 0x140025d5a
mov edi, dword [rsp + 0x70]
lea r8, [rbp - 0x58]
mov edx, edi
mov ecx, 0x14
call fcn.1400fae68
mov byte [rsp + 0x74], 1
jmp 0x140025cf5
mov rcx, qword [0x1401720a0]
lea r13, [0x1401720a0]
cmp rcx, r13
je 0x140025dbc
test byte [rcx + 0x1c], 1
je 0x140025dbc
mov edi, dword [rsp + 0x70]
cmp byte [rcx + 0x19], 2
jb 0x140025dc0
mov edx, 0x223
mov dword [rsp + 0x28], edi
mov dword [rsp + 0x20], 7
mov r9, qword [rsp + 0x78]
lea r8, [0x14014be60]
mov rcx, qword [rcx + 0x10]
call fcn.140010730
jmp 0x140025dc0
mov edi, dword [rsp + 0x70]
lea r8, [rbp - 0x58]
mov edx, edi
mov ecx, 7
call fcn.1400fae68
mov r12d, eax
mov byte [rbp - 0x5c], bl
cmp eax, 0x8078002a
jne 0x140025f20
cmp edi, 0x70
jne 0x140025f2d
mov rcx, qword [0x1401720a0]
cmp rcx, r13
je 0x140025e20
test byte [rcx + 0x1c], 1
je 0x140025e20
mov rdi, qword [rbp + 8]
cmp byte [rcx + 0x19], 4
jb 0x140025e24
mov edx, 0x224
mov r9, rdi
lea r8, [0x14014be60]
mov rcx, qword [rcx + 0x10]
call fcn.140005afc
jmp 0x140025e24
mov rdi, qword [rbp + 8]
mov qword [rbp - 0x18], rbx
mov dword [rbp - 0x30], ebx
cmp dword [rbp - 0x20], ebx
je 0x140025e48
lea r8, str.iNumVolumeRepeats__0
mov edx, 0x324e
lea rcx, str.base_stor_blbengine_service_backup.cpp
call fcn.14008410c
lea r8, [rbp - 0x18]
lea rdx, [rbp - 0x30]
mov rcx, qword [rbp - 0x78]
call fcn.1400b50bc
test eax, eax
jne 0x140025f2d
mov r13, qword [rbp - 0x40]
cmp byte [r13 + 0x428], bl
mov rbx, qword [rbp - 0x18]
mov rdx, rbx
je 0x140025e83
mov rcx, qword [r13 + 0x158]
call fcn.140110ea4
jmp 0x140025e8b
mov rcx, r13
call fcn.14001bd98
test eax, eax
js 0x140025eef
xor r12d, r12d
mov byte [rbp - 0x80], 1
inc dword [rbp - 0x20]
mov rcx, qword [0x1401720a0]
lea rax, [0x1401720a0]
cmp rcx, rax
je 0x140025d03
test byte [rcx + 0x1c], 1
je 0x140025d03
cmp byte [rcx + 0x19], 4
jb 0x140025d03
mov edx, 0x225
mov qword [rsp + 0x20], rdi
mov rsi, qword [rsp + 0x78]
mov r9, rsi
lea r8, [0x14014be60]
mov rcx, qword [rcx + 0x10]
call fcn.140005bdc
mov rdi, qword [rbp - 0x68]
jmp 0x14002605c
mov rcx, qword [0x1401720a0]
lea rdx, [0x1401720a0]
cmp rcx, rdx
je 0x140025f38
test byte [rcx + 0x1c], 1
je 0x140025f38
cmp byte [rcx + 0x19], 2
jb 0x140025f38
mov dword [rsp + 0x20], eax
mov r9, rbx
mov rcx, qword [rcx + 0x10]
call fcn.140010280
jmp 0x140025f24
mov r13, qword [rbp - 0x40]
test r12d, r12d
jns 0x1400260b4
mov rcx, qword [0x1401720a0]
mov r13, qword [rbp - 0x40]
mov byte [rsp + 0x74], 1
jmp 0x140025d03
mov rcx, qword [0x1401720a0]
lea rax, [0x1401720a0]
cmp rcx, rax
je 0x140025f90
test byte [rcx + 0x1c], 1
je 0x140025f90
mov edi, dword [rsp + 0x70]
mov rsi, qword [rsp + 0x78]
cmp byte [rcx + 0x19], 2
jb 0x140025f99
mov edx, 0x221
mov dword [rsp + 0x28], edi
mov dword [rsp + 0x20], 5
mov r9, rsi
lea r8, [0x14014be60]
mov rcx, qword [rcx + 0x10]
call fcn.140010730
jmp 0x140025f99
mov rsi, qword [rsp + 0x78]
mov edi, dword [rsp + 0x70]
lea r8, [rbp - 0x58]
mov edx, edi
mov ecx, 5
call fcn.1400fae68
mov r12d, eax
cmp dword [rbp - 0x58], ebx
jne 0x140025fba
mov dword [rbp - 0x58], eax
mov r12d, 0x80780166
mov byte [rsp + 0x74], 1
mov rdi, qword [rbp - 0x68]
jmp 0x140026058
mov rcx, qword [0x1401720a0]
lea rax, [0x1401720a0]
cmp rcx, rax
je 0x140026013
test byte [rcx + 0x1c], 1
je 0x140026013
mov edi, dword [rsp + 0x70]
mov rsi, qword [rsp + 0x78]
cmp byte [rcx + 0x19], 2
jb 0x14002601c
mov edx, 0x220
mov dword [rsp + 0x28], edi
mov dword [rsp + 0x20], r13d
mov r9, rsi
lea r8, [0x14014be60]
mov rcx, qword [rcx + 0x10]
call fcn.140010730
jmp 0x14002601c
mov rsi, qword [rsp + 0x78]
mov edi, dword [rsp + 0x70]
lea r8, [rbp - 0x58]
mov edx, edi
mov ecx, r13d
call fcn.1400fae68
mov r12d, eax
mov rdi, qword [rbp - 0x68]
test byte [rdi + 0x54], 1
jne 0x140026054
lea rdx, [rbp - 0x60]
mov rcx, qword [rbp - 0x28]
call fcn.14002415c
test eax, eax
js 0x140026054
cmp byte [rbp - 0x60], bl
mov eax, 0x80780169
cmove r12d, eax
mov byte [rbp - 0x70], 1
mov r13, qword [rbp - 0x40]
mov rcx, qword [0x1401720a0]
mov r15, qword [rbp - 0x50]
mov r14, qword [rbp - 0x78]
jmp 0x140026295
mov rcx, qword [rbp + 0xb0]
mov rax, qword [rcx]
mov rax, qword [rax + 0x10]
call qword [case.0x1400059ff.0]
mov rcx, qword [0x1401720a0]
mov r13, qword [rbp - 0x40]
mov r15, rsi
mov rdi, qword [rbp - 0x68]
mov r14, qword [rbp - 0x78]
mov rsi, qword [rsp + 0x78]
test al, al
jne 0x140024e50
mov r12d, dword [r13 + 0x20]
jmp 0x140026295
mov r13, qword [rbp - 0x40]
lea rcx, [r13 + 0x58]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov rdi, qword [rbp - 0x68]
inc dword [rdi + 0x10]
lea rcx, [r13 + 0x58]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov eax, dword [rdi + 0x10]
mov dword [rsi + 0x28], eax
lea rcx, [r13 + 0x58]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
inc dword [r13 + 0xe4]
lea rcx, [r13 + 0x58]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov eax, dword [r13 + 0xe4]
mov dword [rsi + 0xc], eax
mov eax, dword [r13 + 0x174]
add rax, rax
movups xmm0, xmmword [rbp + 0x100]
mov rcx, qword [rbp + 0x30]
movdqu xmmword [rcx + rax*8], xmm0
test byte [r13 + 0x154], 2
jne 0x140026149
mov rcx, rdi
call fcn.140013f58
test eax, eax
jns 0x140026149
mov r8d, eax
mov edx, 0x80780151
mov rcx, rdi
call fcn.1400128c8
mov rcx, qword [0x1401720a0]
mov r15, rsi
jmp 0x14002628c
test r14b, r14b
jne 0x14002618d
mov rax, qword [rbp]
mov r15, rsi
cmp qword [rsi + 0x38], rax
je 0x140026173
lea r8, str.pMediaCtxt__m_pBackupPtr__pBackupPtr
mov edx, 0x32a3
lea rcx, str.base_stor_blbengine_service_backup.cpp
call fcn.14008410c
and qword [r15 + 0x38], 0
and dword [r15 + 0x40], 0
mov r12d, 0x80780030
mov byte [rsp + 0x74], 1
jmp 0x140024e17
and qword [rbp - 0x68], 0
lea rdx, [rbp - 0x68]
mov r14, qword [rbp - 0x78]
mov rcx, r14
call fcn.1400bd380
test eax, eax
je 0x1400261be
lea r8, str.r1__BlbimgSuccess
mov edx, 0x32b1
lea rcx, str.base_stor_blbengine_service_backup.cpp
call fcn.14008410c
mov rbx, qword [rbp - 0x68]
test rbx, rbx
je 0x140026201
mov rcx, qword [0x1401720a0]
lea rax, [0x1401720a0]
cmp rcx, rax
je 0x140026201
test byte [rcx + 0x1c], 1
je 0x140026201
cmp byte [rcx + 0x19], 2
jb 0x140026201
mov edx, 0x228
mov rax, qword [rsp + 0x78]
mov qword [rsp + 0x20], rax
mov r9, rbx
mov rcx, qword [rcx + 0x10]
call fcn.140010f40
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov rcx, qword [rdi + 0xd0]
add rcx, 0x58
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov qword [rdi + 0x28], rbx
mov rcx, qword [rdi + 0xd0]
add rcx, 0x58
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
test rbx, rbx
jle 0x140026245
xor r8d, r8d
mov edx, 0x8078007d
mov rcx, rdi
call fcn.1400128c8
mov ebx, 0xe
mov edx, ebx
mov rcx, rdi
call fcn.140012a08
mov edx, ebx
mov rcx, rsi
call fcn.1400145b8
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
test byte [r13 + 0x154], 2
jne 0x14002627c
mov rdx, rdi
mov rcx, r13
call fcn.14002e024
mov rcx, qword [0x1401720a0]
mov r15, rsi
jmp 0x140026290
mov rdi, qword [rbp - 0x68]
mov r14, qword [rbp - 0x78]
mov rsi, qword [rsp + 0x78]
mov rbx, qword [rbp + 0x28]
test rbx, rbx
je 0x140026342
xor r8d, r8d
xor edx, edx
mov rcx, rbx
call qword [sym.imp.VirtDisk.dll_DetachVirtualDisk]
test eax, eax
je 0x1400262eb
mov rcx, qword [0x1401720a0]
lea rdx, [0x1401720a0]
cmp rcx, rdx
je 0x1400262eb
test byte [rcx + 0x1c], 1
je 0x1400262eb
cmp byte [rcx + 0x19], 3
jb 0x1400262eb
mov edx, 0x229
mov r9d, eax
lea r8, [0x14014be60]
mov rcx, qword [rcx + 0x10]
call fcn.140004b98
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
test eax, eax
jne 0x140026335
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rcx, qword [0x1401720a0]
lea rdx, [0x1401720a0]
cmp rcx, rdx
je 0x14002633c
test byte [rcx + 0x1c], 1
je 0x14002633c
cmp byte [rcx + 0x19], 3
jb 0x14002633c
mov edx, 0x22a
mov r9d, eax
lea r8, [0x14014be60]
mov rcx, qword [rcx + 0x10]
call fcn.140004b98
mov rcx, qword [0x1401720a0]
xor ebx, ebx
mov qword [rbp + 0x28], rbx
cmp r12d, 0x80780030
je 0x140026363
cmp r12d, 0x8078002a
jne 0x14002642e
cmp dword [rsp + 0x70], 0x70
jne 0x140026452
test byte [r13 + 0x154], 2
jne 0x1400263b2
mov rcx, rdi
call fcn.140013f58
test eax, eax
jns 0x1400263b2
mov rcx, qword [0x1401720a0]
lea rbx, [0x1401720a0]
cmp rcx, rbx
je 0x1400263b9
test byte [rcx + 0x1c], 1
je 0x1400263b9
cmp byte [rcx + 0x19], 3
jb 0x1400263b9
mov edx, 0x22b
mov r9d, eax
lea r8, [0x14014be60]
mov rcx, qword [rcx + 0x10]
call fcn.140004b98
jmp 0x1400263b9
lea rbx, [0x1401720a0]
lea rax, [0x1400d9dc0]
mov qword [rsp + 0x20], rax
mov r9, qword [r13 + 0x188]
mov edx, dword [r13 + 0x150]
mov rcx, qword [r13 + 0x158]
call fcn.140108edc
test eax, eax
jns 0x140026427
mov rcx, qword [0x1401720a0]
cmp rcx, rbx
je 0x14002642e
test byte [rcx + 0x1c], 1
je 0x14002642e
cmp byte [rcx + 0x19], 2
jb 0x14002642e
mov edx, 0x22c
mov dword [rsp + 0x28], eax
mov rax, qword [r13 + 0x160]
mov qword [rsp + 0x20], rax
mov r9, qword [r13 + 0x158]
lea r8, [0x14014be60]
mov rcx, qword [rcx + 0x10]
call fcn.140005c9c
mov rcx, qword [0x1401720a0]
cmp r12d, 0x80780030
jne 0x140026452
test byte [r13 + 0x154], 2
je 0x140026452
mov rax, qword [rbp - 0x38]
mov eax, dword [rax + 0xc]
cmp dword [r15 + 0xc], eax
ja 0x1400265f4
mov rbx, rsi
cmp qword [rdi + 0x58], 0
cmovne rbx, qword [rdi + 0x58]
test r12d, r12d
jns 0x140026537
mov edx, 0xc
mov rcx, r15
call fcn.1400145b8
mov rcx, qword [0x1401720a0]
lea rax, [0x1401720a0]
cmp rcx, rax
je 0x1400264b1
test byte [rcx + 0x1c], 1
je 0x1400264b1
cmp byte [rcx + 0x19], 2
jb 0x1400264b1
mov edx, 0x22e
mov dword [rsp + 0x20], r12d
mov r9, rsi
lea r8, [0x14014be60]
mov rcx, qword [rcx + 0x10]
call fcn.140005b60
mov r9d, r12d
xor r8d, r8d
mov rdx, rbx
mov rcx, r13
call fcn.1400344b4
mov esi, eax
test eax, eax
jns 0x140026508
mov rcx, qword [0x1401720a0]
lea rax, [0x1401720a0]
cmp rcx, rax
je 0x140026506
test byte [rcx + 0x1c], 1
je 0x140026506
cmp byte [rcx + 0x19], 3
jb 0x140026506
mov edx, 0x22f
mov dword [rsp + 0x20], r12d
mov r9, qword [rsp + 0x78]
lea r8, [0x14014be60]
mov rcx, qword [rcx + 0x10]
call fcn.140005b60
xor esi, esi
mov r8d, dword [rbp - 0x58]
mov edx, r12d
mov rcx, rdi
call fcn.140012af8
cmp byte [rbp - 0x70], 0
je 0x14002663a
cmp byte [rbp - 0x47], 0
je 0x1400265b5
cmp byte [rdi + 0x68], 0
jne 0x14002663a
jmp 0x1400265b5
lea rdi, [0x1401720a0]
cmp rcx, rdi
je 0x140026567
test byte [rcx + 0x1c], 1
je 0x140026567
cmp byte [rcx + 0x19], 4
jb 0x140026567
mov edx, 0x230
mov r9, rsi
lea r8, [0x14014be60]
mov rcx, qword [rcx + 0x10]
call fcn.140005afc
xor r9d, r9d
mov r8b, 1
mov rdx, rbx
mov rcx, r13
call fcn.1400344b4
mov esi, eax
test eax, eax
jns 0x1400265b5
mov rcx, qword [0x1401720a0]
cmp rcx, rdi
je 0x1400265b5
test byte [rcx + 0x1c], 1
je 0x1400265b5
cmp byte [rcx + 0x19], 3
jb 0x1400265b5
mov edx, 0x231
mov dword [rsp + 0x20], r12d
mov r9, qword [rsp + 0x78]
lea r8, [0x14014be60]
mov rcx, qword [rcx + 0x10]
call fcn.140005b60
mov al, byte [rbp - 0x80]
test al, al
jne 0x1400265c0
inc dword [r15 + 8]
and qword [r15 + 0x18], 0
and qword [r15 + 0x20], 0
and dword [r15 + 0x28], 0
mov dword [r15 + 0x2c], 0xf
and qword [r15 + 0x30], 0
and qword [r15 + 0x38], 0
and dword [r15 + 0x40], 0
mov edi, dword [rbp - 0x44]
cmp dword [r15 + 8], edi
jae 0x14002665b
jmp 0x1400245fd
mov edx, 4
mov rcx, r15
call fcn.1400145b8
mov rcx, qword [0x1401720a0]
lea rax, [0x1401720a0]
cmp rcx, rax
je 0x140026658
test byte [rcx + 0x1c], 1
je 0x140026658
cmp byte [rcx + 0x19], 4
jb 0x140026658
mov edx, 0x22d
mov r9, rsi
lea r8, [0x14014be60]
mov rcx, qword [rcx + 0x10]
call fcn.140005afc
jmp 0x140026658
mov al, byte [rsp + 0x74]
mov rcx, qword [rbp + 0x40]
mov byte [rcx], al
mov eax, dword [rbp - 0x58]
mov rcx, qword [rbp + 0x80]
mov dword [rcx], eax
mov esi, r12d
jmp 0x140026766
mov edi, dword [rbp - 0x44]
mov r12, qword [rbp - 0x38]
mov rdx, qword [rbp + 0x40]
mov rcx, r13
call fcn.140020b44
mov esi, eax
test eax, eax
js 0x140026766
lea rcx, [r13 + 0x28]
xor edx, edx
call fcn.1400f83ec
mov esi, eax
test eax, eax
js 0x140026766
mov r14d, dword [r12 + 0xc]
xor ebx, ebx
test edi, edi
je 0x140026742
xor edi, edi
xor r15d, r15d
mov r12, qword [rbp + 0x30]
mov ecx, ebx
mov edx, ebx
shl rdx, 4
add rdx, r12
mov rax, qword [rdx]
cmp rax, qword [0x140154f60]
jne 0x1400266c6
mov rax, qword [rdx + 8]
cmp rax, qword [0x140154f68]
je 0x140026728
mov r10, qword [r13 + 0xd8]
imul rax, rcx, 0x170
lea rcx, [r10 + 0x78]
add rcx, rax
mov r8d, r15d
add r8, qword [rbp + 0x10]
lea r9, [r10 + 0x44]
add r9, rax
mov eax, dword [rdi + r10 + 0x80]
mov dword [rsp + 0x40], eax
mov qword [rsp + 0x38], rcx
mov qword [rsp + 0x30], r8
mov rax, qword [rbp + 0x88]
mov qword [rsp + 0x28], rax
mov eax, dword [rdi + r10 + 0x54]
mov dword [rsp + 0x20], eax
mov r8d, r14d
mov rcx, r13
call fcn.14001eef8
mov esi, eax
inc r14d
test eax, eax
js 0x140026762
inc ebx
add r15d, 0x10
add rdi, 0x170
cmp ebx, dword [rbp - 0x44]
jb 0x1400266a2
mov r15, qword [rbp - 0x50]
cmp r14d, dword [r15 + 0xc]
je 0x140026766
lea r8, str.j__pMediaCtxt__m_ulBagCount
mov edx, 0x3382
lea rcx, str.base_stor_blbengine_service_backup.cpp
call fcn.14008410c
jmp 0x140026766
mov r15, qword [rbp - 0x50]
mov rax, qword [rbp - 8]
test rax, rax
je 0x140026778
mov rcx, rax
call qword [sym.imp.ole32.dll_CoTaskMemFree]
mov r12, qword [rbp - 0x38]
mov rdi, qword [rbp - 0x28]
mov r14, qword [rbp - 0x78]
mov rcx, qword [rbp]
test rcx, rcx
je 0x1400267a0
cmp rcx, qword [r15 + 0x38]
je 0x1400267a0
cmp rcx, qword [r12 + 0x38]
je 0x1400267a0
call qword [sym.imp.KERNEL32.dll_LocalFree]
test r14, r14
je 0x1400267ba
cmp r14, qword [r15 + 0x30]
je 0x1400267ba
cmp r14, qword [r12 + 0x30]
je 0x1400267ba
mov rcx, r14
call fcn.1400bc370
test rdi, rdi
je 0x1400267c8
mov rcx, rdi
call qword [sym.imp.ole32.dll_CoTaskMemFree]
mov rax, qword [rbp + 0x10]
test rax, rax
je 0x1400267da
mov rcx, rax
call qword [sym.imp.ole32.dll_CoTaskMemFree]
mov rax, qword [rbp + 0x30]
test rax, rax
je 0x1400267ec
mov rcx, rax
call qword [sym.imp.ole32.dll_CoTaskMemFree]
mov rax, qword [rbp + 8]
test rax, rax
je 0x1400267fe
mov rcx, rax
call qword [sym.imp.ole32.dll_CoTaskMemFree]
lea rbx, [r13 + 0x28]
mov rcx, rbx
call fcn.1400f8580
test esi, esi
jns 0x140026904
mov rcx, qword [0x1401720a0]
lea rdi, [0x1401720a0]
cmp rcx, rdi
je 0x140026862
test byte [rcx + 0x1c], 1
je 0x140026862
cmp byte [rcx + 0x19], 2
jb 0x140026862
lea r8, [0x14014be28]
lea rax, [0x14014b158]
mov rdx, qword [rbp + 0x40]
cmp byte [rdx], 0
cmovne rax, r8
mov qword [rsp + 0x20], rax
mov r9d, esi
mov rcx, qword [rcx + 0x10]
call fcn.140010428
mov rcx, qword [0x1401720a0]
cmp byte [rbp - 0x5c], 0
jne 0x140026912
test byte [r13 + 0x154], 4
je 0x140026912
xor edx, edx
mov rcx, rbx
call fcn.1400f83ec
test eax, eax
jns 0x1400268be
mov rcx, qword [0x1401720a0]
cmp rcx, rdi
je 0x140026938
test byte [rcx + 0x1c], 1
je 0x140026912
cmp byte [rcx + 0x19], 2
jb 0x140026912
mov edx, 0x233
mov r9d, eax
lea r8, [0x14014be60]
mov rcx, qword [rcx + 0x10]
call fcn.140004b98
jmp 0x14002690b
mov rcx, r13
call fcn.14001cbc4
test eax, eax
jns 0x1400268fa
mov rcx, qword [0x1401720a0]
cmp rcx, rdi
je 0x1400268fa
test byte [rcx + 0x1c], 1
je 0x1400268fa
cmp byte [rcx + 0x19], 2
jb 0x1400268fa
mov edx, 0x234
mov r9d, eax
lea r8, [0x14014be60]
mov rcx, qword [rcx + 0x10]
call fcn.140004b98
mov rcx, rbx
call fcn.1400f8580
jmp 0x14002690b
lea rdi, [0x1401720a0]
mov rcx, qword [0x1401720a0]
cmp rcx, rdi
je 0x140026938
test byte [rcx + 0x1c], 1
je 0x140026938
cmp byte [rcx + 0x19], 4
jb 0x140026938
mov edx, 0x235
lea r8, [0x14014be60]
mov rcx, qword [rcx + 0x10]
call fcn.140004b74
mov eax, esi
mov rcx, qword [rbp + 0x110]
xor rcx, rsp
call fcn.140141cf0
add rsp, 0x228
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret