Function at 0x14001a0c0
Capabilities:
Create directory
Get file attributes

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1f]
sub rsp, 0xe8
mov rax, qword [0x14004d298]
xor rax, rsp
mov qword [rbp + 7], rax
mov rax, qword gs:[0x58]
mov rdi, rcx
mov r13, rdx
mov qword [rbp - 0x61], rdx
mov edx, 8
mov ebx, r8d
mov qword [rbp - 0x59], r9
xor esi, esi
mov rcx, qword [rax]
lea rax, str.CTieredVolume::InitializeJetInstance
mov dword [rbp - 0x69], ebx
mov qword [rdx + rcx], rax
lea rcx, [rbp - 0x51]
call fcn.1400096b0
mov rcx, qword [rdi + 0x258]
xor eax, eax
and dword [rbp - 0x71], eax
xor r12d, r12d
mov dword [rbp - 0x75], eax
mov byte [rbp - 0x79], sil
call qword [sym.imp.api_ms_win_core_file_l1_1_0.dll_GetFileAttributesW]
nop dword [rax + rax]
or r15d, 0xffffffff
mov r14d, 0xb7
cmp eax, r15d
jne 0x14001a326
lea r13, [rdi + 0x2b8]
mov rcx, r13
call qword [sym.imp.ntdll.dll_RtlCreateSystemVolumeInformationFolder]
nop dword [rax + rax]
mov ebx, eax
test eax, eax
jns 0x14001a1d4
lea r14d, [rsi + 1]
bts ebx, 0x1c
mov r12d, r14d
mov dword [rbp - 0x49], ebx
mov rcx, qword [0x14004d128]
lea r15, [0x14004d128]
cmp rcx, r15
je 0x14001a3c1
test byte [rcx + 0x1c], r14b
je 0x14001b119
cmp byte [rcx + 0x19], 2
jb 0x14001b119
mov rcx, qword [rcx + 0x10]
lea edx, [rsi + 0x26]
mov r9, r13
mov dword [rsp + 0x20], ebx
lea r8, [0x1400458f8]
call fcn.140009ba4
mov rcx, qword [0x14004d128]
mov eax, esi
jmp 0x14001b11c
mov rcx, qword [rdi + 0x270]
call qword [sym.imp.api_ms_win_core_file_l1_1_0.dll_GetFileAttributesW]
nop dword [rax + rax]
cmp eax, r15d
jne 0x14001a296
mov rcx, qword [rdi + 0x270]
xor edx, edx
call qword [sym.imp.api_ms_win_core_file_l1_1_0.dll_CreateDirectoryW]
nop dword [rax + rax]
test eax, eax
jne 0x14001a296
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
cmp eax, r14d
je 0x14001a296
mov r12d, 2
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
mov ecx, eax
call fcn.14000425c
mov ebx, eax
mov dword [rbp - 0x49], eax
mov rcx, qword [0x14004d128]
lea r15, [0x14004d128]
cmp rcx, r15
je 0x14001a3c1
lea r14d, [r12 - 1]
test byte [rcx + 0x1c], r14b
je 0x14001b119
cmp byte [rcx + 0x19], r12b
jb 0x14001b119
lea r9, [rdi + 0x268]
lea edx, [r12 + 0x25]
mov rcx, qword [rcx + 0x10]
lea rax, [rdi + 0x2a0]
mov dword [rsp + 0x28], ebx
mov qword [rsp + 0x20], rax
call fcn.140018f44
jmp 0x14001a1c6
mov rcx, qword [rdi + 0x258]
xor edx, edx
call qword [sym.imp.api_ms_win_core_file_l1_1_0.dll_CreateDirectoryW]
nop dword [rax + rax]
test eax, eax
jne 0x14001a31f
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
cmp eax, r14d
je 0x14001a31f
mov r12d, 3
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
mov ecx, eax
call fcn.14000425c
mov ebx, eax
mov dword [rbp - 0x49], eax
mov rcx, qword [0x14004d128]
lea r15, [0x14004d128]
cmp rcx, r15
je 0x14001a3c1
lea r14d, [r12 - 2]
test byte [rcx + 0x1c], r14b
je 0x14001b119
cmp byte [rcx + 0x19], 2
jb 0x14001b119
lea r9, [rdi + 0x250]
lea edx, [r12 + 0x25]
jmp 0x14001a278
mov ebx, dword [rbp - 0x69]
mov r13, qword [rbp - 0x61]
mov rcx, qword [rdi + 0x288]
call qword [sym.imp.api_ms_win_core_file_l1_1_0.dll_GetFileAttributesW]
nop dword [rax + rax]
cmp eax, r15d
jne 0x14001a3ca
mov rcx, qword [rdi + 0x288]
xor edx, edx
call qword [sym.imp.api_ms_win_core_file_l1_1_0.dll_CreateDirectoryW]
nop dword [rax + rax]
test eax, eax
jne 0x14001a3ca
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
cmp eax, r14d
je 0x14001a3ca
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
mov ecx, eax
call fcn.14000425c
mov ebx, eax
mov dword [rbp - 0x49], eax
mov rcx, qword [0x14004d128]
lea r15, [0x14004d128]
cmp rcx, r15
je 0x14001a3c1
mov r14d, 1
test byte [rcx + 0x1c], r14b
je 0x14001b119
cmp byte [rcx + 0x19], 2
jb 0x14001b119
lea r9, [rdi + 0x280]
lea edx, [r14 + 0x28]
jmp 0x14001a278
mov r14, qword [rbp - 0x61]
jmp 0x14001b15c
xor eax, eax
lea r15, [0x14004d128]
mov dword [rbp - 0x75], eax
lea r14d, [rax + 1]
test ebx, ebx
je 0x14001a81b
lea r12d, [rax + 7]
jmp 0x14001a3eb
mov ebx, dword [rbp - 0x69]
cmp byte [rdi + 0xa5], 0
jne 0x14001a795
cmp byte [rdi + 0xa6], 0
jne 0x14001a795
mov rcx, qword [rdi + 0x300]
xor edx, edx
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_WaitForSingleObject]
nop dword [rax + rax]
cmp eax, 0x102
jne 0x14001a795
mov rcx, qword [rdi + 0x2f8]
xor edx, edx
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_WaitForSingleObject]
nop dword [rax + rax]
cmp eax, 0x102
jne 0x14001a795
mov r9, qword [rbp - 0x59]
mov r8d, ebx
mov rdx, r13
mov rcx, rdi
call fcn.140019418
mov dword [rbp - 0x49], eax
mov ebx, eax
test eax, eax
jne 0x14001a74b
mov rdx, r13
mov byte [rbp - 0x79], r14b
mov rcx, rdi
call fcn.1400190f8
mov rcx, qword [rbp - 0x59]
xor r8d, r8d
xor edx, edx
call qword [sym.imp.ESENT.dll_JetInit3W]
nop dword [rax + rax]
mov rdx, r13
mov rcx, rdi
mov esi, eax
call fcn.1400190f8
test esi, esi
je 0x14001a741
cmp esi, 0xfffffbfa
je 0x14001a6f6
cmp esi, 0xfffffdef
je 0x14001a6a2
cmp esi, 0xfffffbbc
je 0x14001a6a2
cmp esi, 0xfffff8f0
je 0x14001a6a2
cmp esi, 0xfffffc0d
jne 0x14001a4dc
mov ebx, 0x8007000e
jmp 0x14001a4f7
mov eax, esi
mov ecx, 0x8e5e0000
cdq
xor eax, edx
sub eax, edx
movzx ebx, ax
test esi, esi
mov eax, 0xe5e0000
cmovs eax, ecx
or ebx, eax
mov dword [rbp - 0x49], ebx
mov rcx, qword [0x14004d128]
cmp rcx, r15
je 0x14001a52e
test byte [rcx + 0x1c], r14b
je 0x14001a52e
cmp byte [rcx + 0x19], 2
jb 0x14001a52e
mov rcx, qword [rcx + 0x10]
lea r8, [0x1400458f8]
mov edx, 0x2e
mov dword [rsp + 0x20], esi
mov r9, r13
call fcn.14000468c
mov rax, qword [rbp - 0x59]
mov r8d, 8
mov rcx, rdi
mov rdx, qword [rax]
call fcn.140019e94
cmp byte [rdi + 0xa5], 0
mov byte [rbp - 0x79], 0
jne 0x14001a65d
cmp byte [rdi + 0xa6], 0
jne 0x14001a65d
mov rcx, qword [rdi + 0x300]
xor edx, edx
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_WaitForSingleObject]
nop dword [rax + rax]
cmp eax, 0x102
jne 0x14001a65d
mov rcx, qword [rdi + 0x2f8]
xor edx, edx
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_WaitForSingleObject]
nop dword [rax + rax]
cmp eax, 0x102
jne 0x14001a65d
cmp dword [0x14004d098], 5
jbe 0x14001a62e
movabs rdx, 0x400000000000
test qword [0x14004d0a8], rdx
je 0x14001a62e
mov rax, qword [0x14004d0b0]
and rax, rdx
cmp rax, qword [0x14004d0b0]
jne 0x14001a62e
lea rax, str.InitializeJetInstance
mov dword [rbp - 0x71], r12d
mov qword [rbp - 0x41], rax
lea rdx, [0x140047285]
lea rax, [rdi + 0x2b8]
mov dword [rbp - 0x65], esi
mov qword [rbp - 0x31], rax
lea rax, [rbp - 0x71]
mov qword [rsp + 0x40], rax
lea rax, [rbp - 0x41]
mov qword [rsp + 0x38], rax
lea rax, [rbp - 0x65]
mov qword [rsp + 0x30], rax
lea rax, [rbp - 0x39]
mov qword [rsp + 0x28], rax
lea rax, [rbp - 0x31]
mov qword [rsp + 0x20], rax
mov qword [rbp - 0x39], r13
call fcn.14000112c
mov ecx, 0x7d0
call qword [sym.imp.api_ms_win_core_synch_l1_2_0.dll_Sleep]
nop dword [rax + rax]
mov eax, dword [rbp - 0x75]
add eax, r14d
mov dword [rbp - 0x75], eax
cmp eax, 5
jb 0x14001a3e8
mov rcx, qword [0x14004d128]
jmp 0x14001b11c
mov rcx, qword [0x14004d128]
cmp rcx, r15
je 0x14001b119
test byte [rcx + 0x1c], r14b
je 0x14001b119
cmp byte [rcx + 0x19], 5
jb 0x14001b119
mov rcx, qword [rcx + 0x10]
lea r9, [rdi + 0x2a0]
mov edx, 0xfc
lea r8, [0x140045600]
call fcn.14000bb40
jmp 0x14001b112
mov ecx, 0x70
call fcn.14000425c
mov ebx, eax
mov dword [rbp - 0x49], eax
mov rcx, qword [0x14004d128]
cmp rcx, r15
je 0x14001b154
test byte [rcx + 0x1c], r14b
je 0x14001b119
cmp byte [rcx + 0x19], 2
jb 0x14001b119
mov rcx, qword [rcx + 0x10]
lea r8, [0x1400458f8]
mov edx, 0x2d
mov dword [rsp + 0x20], esi
mov r9, r13
call fcn.14000468c
jmp 0x14001b112
mov rcx, qword [0x14004d128]
cmp rcx, r15
je 0x14001a735
test byte [rcx + 0x1c], r14b
je 0x14001a735
cmp byte [rcx + 0x19], 2
jb 0x14001a735
mov rcx, qword [rcx + 0x10]
lea r8, [0x1400458f8]
mov edx, 0x2c
mov dword [rsp + 0x20], 0xfffffbfa
mov r9, r13
call fcn.14000468c
mov rcx, qword [0x14004d128]
xor esi, esi
xor ebx, ebx
mov dword [rbp - 0x49], ebx
jmp 0x14001b119
xor ebx, ebx
mov dword [rbp - 0x49], ebx
jmp 0x14001b112
mov r12d, 5
mov rcx, qword [0x14004d128]
cmp rcx, r15
je 0x14001a78c
test byte [rcx + 0x1c], r14b
je 0x14001a78c
cmp byte [rcx + 0x19], 2
jb 0x14001a78c
mov rcx, qword [rcx + 0x10]
lea edx, [r12 + 0x26]
mov r9, r13
mov dword [rsp + 0x20], eax
lea r8, [0x1400458f8]
call fcn.14000468c
mov rcx, qword [0x14004d128]
mov byte [rbp - 0x79], 0
jmp 0x14001b119
mov rcx, qword [0x14004d128]
cmp rcx, r15
je 0x14001a7d0
test byte [rcx + 0x1c], r14b
je 0x14001a7d0
cmp byte [rcx + 0x19], 5
jb 0x14001a7d0
mov rcx, qword [rcx + 0x10]
lea r9, [rdi + 0x2a0]
mov edx, 0xfc
lea r8, [0x140045600]
call fcn.14000bb40
mov rcx, qword [0x14004d128]
mov eax, 0x80830002
mov r12d, 4
mov ebx, eax
mov dword [rbp - 0x49], eax
mov esi, 0xfffffc18
cmp rcx, r15
je 0x14001a78c
test byte [rcx + 0x1c], r14b
je 0x14001a78c
cmp byte [rcx + 0x19], 2
jb 0x14001a78c
mov r9d, dword [rdi + 0x80]
lea edx, [r12 + 0x26]
mov rcx, qword [rcx + 0x10]
lea r8, [0x1400458f8]
mov dword [rsp + 0x20], eax
call fcn.140001adc
jmp 0x14001a785
mov rcx, qword [0x14004d128]
cmp byte [rdi + 0xa5], 0
mov r12d, 0x102
jne 0x14001afe4
cmp byte [rdi + 0xa6], 0
jne 0x14001afe4
mov rcx, qword [rdi + 0x300]
xor edx, edx
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_WaitForSingleObject]
nop dword [rax + rax]
cmp eax, r12d
jne 0x14001afdd
mov rcx, qword [rdi + 0x2f8]
xor edx, edx
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_WaitForSingleObject]
nop dword [rax + rax]
cmp eax, r12d
jne 0x14001afdd
mov r9, qword [rbp - 0x59]
xor r8d, r8d
mov rdx, r13
mov rcx, rdi
call fcn.140019418
mov dword [rbp - 0x49], eax
mov ebx, eax
test eax, eax
jne 0x14001af92
mov rdx, r13
mov byte [rbp - 0x79], r14b
mov rcx, rdi
call fcn.1400190f8
cmp byte [rdi + 0xa5], bl
jne 0x14001af1b
cmp byte [rdi + 0xa6], bl
jne 0x14001af1b
mov rcx, qword [rdi + 0x300]
xor edx, edx
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_WaitForSingleObject]
nop dword [rax + rax]
cmp eax, r12d
jne 0x14001af1b
mov rcx, qword [rdi + 0x2f8]
xor edx, edx
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_WaitForSingleObject]
nop dword [rax + rax]
cmp eax, r12d
jne 0x14001af1b
mov r8d, dword [rbp - 0x71]
xor edx, edx
mov rcx, qword [rbp - 0x59]
call qword [sym.imp.ESENT.dll_JetInit3W]
nop dword [rax + rax]
mov esi, eax
test eax, eax
je 0x14001a966
cmp eax, 0xfffffdef
je 0x14001a95a
cmp eax, 0xfffffbbc
je 0x14001a95a
cmp eax, 0xfffff8f0
je 0x14001a95a
cmp eax, 0xfffffc0d
jne 0x14001a93f
mov ebx, 0x8007000e
jmp 0x14001a966
cdq
mov ecx, 0x8e5e0000
xor eax, edx
sub eax, edx
movzx ebx, ax
test esi, esi
mov eax, 0xe5e0000
cmovs eax, ecx
or ebx, eax
jmp 0x14001a966
mov ecx, 0x70
call fcn.14000425c
mov ebx, eax
mov rdx, r13
mov dword [rbp - 0x49], ebx
mov rcx, rdi
call fcn.1400190f8
mov r12d, 0xc
test esi, esi
je 0x14001af11
cmp esi, 0xfffffbfa
je 0x14001aec6
cmp esi, 0xfffffdef
je 0x14001ae89
cmp esi, 0xfffffbbc
je 0x14001ae89
cmp esi, 0xfffff8f0
je 0x14001ae89
lea eax, [rsi + 0x21f]
cmp eax, 0x2a
ja 0x14001ab0d
movabs rcx, 0x40000000011
bt rcx, rax
jae 0x14001ab0d
mov rcx, qword [0x14004d128]
cmp rcx, r15
je 0x14001aa09
test byte [rcx + 0x1c], r14b
je 0x14001aa09
cmp byte [rcx + 0x19], 2
jb 0x14001aa09
mov rcx, qword [rcx + 0x10]
lea edx, [r12 + 0x28]
mov r9, r13
mov dword [rsp + 0x20], esi
lea r8, [0x1400458f8]
call fcn.14000468c
mov rax, qword [rbp - 0x59]
mov r12d, 0xd
mov rcx, rdi
mov rdx, qword [rax]
lea r8d, [r12 - 5]
call fcn.140019e94
cmp byte [rdi + 0xa5], 0
mov byte [rbp - 0x79], 0
jne 0x14001ad31
cmp byte [rdi + 0xa6], 0
jne 0x14001ad31
mov rcx, qword [rdi + 0x300]
xor edx, edx
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_WaitForSingleObject]
nop dword [rax + rax]
cmp eax, 0x102
jne 0x14001ad31
mov rcx, qword [rdi + 0x2f8]
xor edx, edx
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_WaitForSingleObject]
nop dword [rax + rax]
cmp eax, 0x102
jne 0x14001ad31
mov ecx, 0x7d0
call qword [sym.imp.api_ms_win_core_synch_l1_2_0.dll_Sleep]
nop dword [rax + rax]
lea r9, str.edb.log
xor r8d, r8d
xor edx, edx
mov rcx, r13
call fcn.140037c00
lea r9, str.edbtmp.log
xor r8d, r8d
xor edx, edx
mov rcx, r13
call fcn.140037c00
lea r9, str.edb.chk
xor r8d, r8d
xor edx, edx
mov rcx, r13
call fcn.140037c00
lea rax, str..log
xor r9d, r9d
xor r8d, r8d
mov qword [rsp + 0x20], rax
mov rdx, r13
mov rcx, rdi
call fcn.140038210
lea rax, str..jrs
xor r9d, r9d
xor r8d, r8d
mov qword [rsp + 0x20], rax
mov rdx, r13
mov rcx, rdi
call fcn.140038210
jmp 0x14001ac7b
cmp esi, 0xfffffb40
jne 0x14001aba3
mov rax, qword [rbp - 0x59]
mov r8d, 8
mov rcx, rdi
mov rdx, qword [rax]
call fcn.140019e94
mov byte [rbp - 0x79], 0
mov rcx, qword [0x14004d128]
cmp rcx, r15
je 0x14001ab71
test byte [rcx + 0x1c], r14b
je 0x14001ab71
cmp byte [rcx + 0x19], 2
jb 0x14001ab71
mov rcx, qword [rcx + 0x10]
lea r8, [0x1400458f8]
mov edx, 0x35
mov dword [rsp + 0x20], 0xfffffb40
mov r9, r13
call fcn.14000468c
mov rcx, qword [0x14004d128]
mov eax, dword [rbp - 0x71]
test eax, eax
jne 0x14001ab88
lea r12d, [rax + 0xe]
mov dword [rbp - 0x71], 0x80
jmp 0x14001ac82
cmp eax, 0x80
jne 0x14001ad7d
lea r12d, [rax - 0x71]
mov dword [rbp - 0x71], 0x84
jmp 0x14001ac82
cmp esi, 0xfffffddf
je 0x14001abb7
cmp esi, 0xfffffbc3
jne 0x14001adc2
mov rax, qword [rbp - 0x59]
mov r12d, 0x11
mov rcx, rdi
mov rdx, qword [rax]
lea r8d, [r12 - 9]
call fcn.140019e94
mov byte [rbp - 0x79], 0
mov rcx, qword [0x14004d128]
cmp rcx, r15
je 0x14001ac10
test byte [rcx + 0x1c], r14b
je 0x14001ac10
cmp byte [rcx + 0x19], 2
jb 0x14001ac10
mov rcx, qword [rcx + 0x10]
lea edx, [r12 + 0x26]
mov r9, r13
mov dword [rsp + 0x20], esi
lea r8, [0x1400458f8]
call fcn.14000468c
mov rcx, qword [0x14004d128]
cmp byte [rdi + 0xa5], 0
jne 0x14001adfe
cmp byte [rdi + 0xa6], 0
jne 0x14001adfe
mov rcx, qword [rdi + 0x300]
xor edx, edx
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_WaitForSingleObject]
nop dword [rax + rax]
cmp eax, 0x102
jne 0x14001adf7
mov rcx, qword [rdi + 0x2f8]
xor edx, edx
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_WaitForSingleObject]
nop dword [rax + rax]
cmp eax, 0x102
jne 0x14001adf7
mov ecx, 0x7d0
call qword [sym.imp.api_ms_win_core_synch_l1_2_0.dll_Sleep]
nop dword [rax + rax]
mov rcx, qword [0x14004d128]
cmp dword [0x14004d098], 5
jbe 0x14001ad16
movabs r8, 0x400000000000
test qword [0x14004d0a8], r8
je 0x14001ad16
mov rax, qword [0x14004d0b0]
and rax, r8
cmp rax, qword [0x14004d0b0]
jne 0x14001ad16
lea rax, str.InitializeJetInstance
mov dword [rbp - 0x65], r12d
mov qword [rbp - 0x31], rax
lea rdx, [0x140047285]
lea rax, [rdi + 0x2b8]
mov dword [rbp - 0x69], esi
mov qword [rbp - 0x41], rax
lea rax, [rbp - 0x65]
mov qword [rsp + 0x40], rax
lea rax, [rbp - 0x31]
mov qword [rsp + 0x38], rax
lea rax, [rbp - 0x69]
mov qword [rsp + 0x30], rax
lea rax, [rbp - 0x39]
mov qword [rsp + 0x28], rax
lea rax, [rbp - 0x41]
mov qword [rsp + 0x20], rax
mov qword [rbp - 0x39], r13
call fcn.14000112c
mov rcx, qword [0x14004d128]
mov eax, dword [rbp - 0x75]
add eax, r14d
mov dword [rbp - 0x75], eax
cmp eax, 5
jb 0x14001a822
mov byte [rbp - 0x79], 0
jmp 0x14001b06c
mov rcx, qword [0x14004d128]
cmp rcx, r15
je 0x14001b069
test byte [rcx + 0x1c], r14b
je 0x14001b069
cmp byte [rcx + 0x19], 5
jb 0x14001b069
mov rcx, qword [rcx + 0x10]
lea r9, [rdi + 0x2a0]
mov edx, 0xfc
lea r8, [0x140045600]
call fcn.14000bb40
mov rcx, qword [0x14004d128]
jmp 0x14001b069
mov r12d, 0x10
cmp rcx, r15
je 0x14001b069
test byte [rcx + 0x1c], r14b
je 0x14001b069
cmp byte [rcx + 0x19], 2
jb 0x14001b069
lea edx, [r12 + 0x26]
mov dword [rsp + 0x20], 0xfffffb40
mov rcx, qword [rcx + 0x10]
lea r8, [0x1400458f8]
mov r9, r13
call fcn.14000468c
jmp 0x14001ad71
mov r12d, 0x13
mov rcx, qword [0x14004d128]
cmp rcx, r15
je 0x14001b069
test byte [rcx + 0x1c], r14b
je 0x14001b069
cmp byte [rcx + 0x19], 2
jb 0x14001b069
lea edx, [r12 + 0x26]
mov dword [rsp + 0x20], esi
jmp 0x14001adad
mov rcx, qword [0x14004d128]
cmp rcx, r15
je 0x14001ae32
test byte [rcx + 0x1c], r14b
je 0x14001ae32
cmp byte [rcx + 0x19], 5
jb 0x14001ae32
mov rcx, qword [rcx + 0x10]
lea r9, [rdi + 0x2a0]
mov edx, 0xfc
lea r8, [0x140045600]
call fcn.14000bb40
mov rcx, qword [0x14004d128]
mov eax, 0x80830002
mov r12d, 0x12
mov ebx, eax
mov dword [rbp - 0x49], eax
mov esi, 0xfffffc18
cmp rcx, r15
je 0x14001b069
test byte [rcx + 0x1c], r14b
je 0x14001b069
cmp byte [rcx + 0x19], 2
jb 0x14001b069
lea edx, [r12 + 0x26]
mov r9d, dword [rdi + 0x80]
lea r8, [0x1400458f8]
mov rcx, qword [rcx + 0x10]
mov dword [rsp + 0x20], eax
call fcn.140001adc
jmp 0x14001ad71
mov ecx, 0x70
call fcn.14000425c
mov ebx, eax
mov dword [rbp - 0x49], eax
mov rcx, qword [0x14004d128]
cmp rcx, r15
je 0x14001b069
test byte [rcx + 0x1c], r14b
je 0x14001b069
cmp byte [rcx + 0x19], 2
jb 0x14001b069
mov edx, 0x33
jmp 0x14001adf1
mov rcx, qword [0x14004d128]
cmp rcx, r15
je 0x14001af05
test byte [rcx + 0x1c], r14b
je 0x14001af05
cmp byte [rcx + 0x19], 2
jb 0x14001af05
mov rcx, qword [rcx + 0x10]
lea r8, [0x1400458f8]
mov edx, 0x32
mov dword [rsp + 0x20], 0xfffffbfa
mov r9, r13
call fcn.14000468c
mov rcx, qword [0x14004d128]
xor esi, esi
xor ebx, ebx
mov dword [rbp - 0x49], ebx
jmp 0x14001b069
xor ebx, ebx
mov dword [rbp - 0x49], ebx
jmp 0x14001ad71
mov rcx, qword [0x14004d128]
cmp rcx, r15
je 0x14001af56
test byte [rcx + 0x1c], r14b
je 0x14001af56
cmp byte [rcx + 0x19], 5
jb 0x14001af56
mov rcx, qword [rcx + 0x10]
lea r9, [rdi + 0x2a0]
mov edx, 0xfc
lea r8, [0x140045600]
call fcn.14000bb40
mov rcx, qword [0x14004d128]
mov eax, 0x80830002
mov esi, 0xfffffc18
mov ebx, eax
mov dword [rbp - 0x49], eax
mov r12d, 0xb
cmp rcx, r15
je 0x14001b069
test byte [rcx + 0x1c], r14b
je 0x14001b069
cmp byte [rcx + 0x19], 2
jb 0x14001b069
lea edx, [r12 + 0x26]
jmp 0x14001ae69
mov r12d, 9
mov rcx, qword [0x14004d128]
cmp rcx, r15
je 0x14001b065
test byte [rcx + 0x1c], r14b
je 0x14001b065
cmp byte [rcx + 0x19], 2
jb 0x14001b065
mov rcx, qword [rcx + 0x10]
lea edx, [r12 + 0x27]
mov r9, r13
mov dword [rsp + 0x20], eax
lea r8, [0x1400458f8]
call fcn.14000468c
jmp 0x14001b05e
mov rcx, qword [0x14004d128]
cmp rcx, r15
je 0x14001b018
test byte [rcx + 0x1c], r14b
je 0x14001b018
cmp byte [rcx + 0x19], 5
jb 0x14001b018
mov rcx, qword [rcx + 0x10]
lea r9, [rdi + 0x2a0]
mov edx, 0xfc
lea r8, [0x140045600]
call fcn.14000bb40
mov rcx, qword [0x14004d128]
mov eax, 0x80830002
mov r12d, 8
mov ebx, eax
mov dword [rbp - 0x49], eax
mov esi, 0xfffffc18
cmp rcx, r15
je 0x14001b065
test byte [rcx + 0x1c], r14b
je 0x14001b065
cmp byte [rcx + 0x19], 2
jb 0x14001b065
mov r9d, dword [rdi + 0x80]
lea edx, [r12 + 0x27]
mov rcx, qword [rcx + 0x10]
lea r8, [0x1400458f8]
mov dword [rsp + 0x20], eax
call fcn.140001adc
mov rcx, qword [0x14004d128]
mov byte [rbp - 0x79], 0
mov eax, dword [rbp - 0x75]
cmp dword [rbp - 0x71], 0x84
jne 0x14001b11c
test ebx, ebx
jne 0x14001b11c
test byte [0x14004dcc0], 2
je 0x14001b0e2
movzx eax, word [rdi + 0x2b8]
lea r9d, [rbx + 3]
and dword [rbp - 0xd], ebx
lea rdx, [0x140044a60]
and dword [rbp + 3], ebx
shr ax, 1
movzx ecx, ax
lea rax, [rbp - 0x71]
mov qword [rbp - 0x19], rax
mov rax, qword [rdi + 0x2c0]
mov qword [rbp - 9], rax
lea rax, [rbp - 0x29]
mov word [rbp - 0x71], cx
add ecx, ecx
mov qword [rsp + 0x20], rax
mov dword [rbp - 0x11], 2
mov dword [rbp - 1], ecx
call fcn.14000b308
mov rcx, qword [0x14004d128]
jmp 0x14001b0e4
xor eax, eax
cmp rcx, r15
je 0x14001b154
test byte [rcx + 0x1c], r14b
je 0x14001b119
cmp byte [rcx + 0x19], 4
jb 0x14001b119
mov rcx, qword [rcx + 0x10]
lea r8, [0x1400458f8]
mov edx, 0x3a
mov qword [rsp + 0x20], r13
mov r9d, eax
call fcn.140004340
mov rcx, qword [0x14004d128]
mov eax, dword [rbp - 0x75]
cmp rcx, r15
je 0x14001b154
test byte [rcx + 0x1c], r14b
je 0x14001b154
cmp byte [rcx + 0x19], 2
mov r14, qword [rbp - 0x61]
jb 0x14001b158
mov rcx, qword [rcx + 0x10]
lea r8, [0x1400458f8]
mov edx, 0x3b
mov dword [rsp + 0x28], ebx
mov r9d, eax
mov qword [rsp + 0x20], r14
call fcn.140018dd4
jmp 0x14001b158
mov r14, qword [rbp - 0x61]
test esi, esi
jne 0x14001b164
test ebx, ebx
je 0x14001b21c
cmp dword [0x14004d098], 5
jbe 0x14001b1fd
movabs rcx, 0x400000000000
test qword [0x14004d0a8], rcx
je 0x14001b1fd
mov rax, qword [0x14004d0b0]
and rax, rcx
cmp rax, qword [0x14004d0b0]
jne 0x14001b1fd
lea rax, str.InitializeJetInstance
mov dword [rbp - 0x65], ebx
mov qword [rbp - 0x31], rax
lea rdx, [0x140047213]
lea rax, [rdi + 0x2b8]
mov dword [rbp - 0x69], r12d
mov qword [rbp - 0x41], rax
lea rax, [rbp - 0x65]
mov qword [rsp + 0x48], rax
lea rax, [rbp - 0x69]
mov qword [rsp + 0x40], rax
lea rax, [rbp - 0x31]
mov qword [rsp + 0x38], rax
lea rax, [rbp - 0x75]
mov qword [rsp + 0x30], rax
lea rax, [rbp - 0x39]
mov qword [rsp + 0x28], rax
lea rax, [rbp - 0x41]
mov qword [rsp + 0x20], rax
mov dword [rbp - 0x75], esi
mov qword [rbp - 0x39], r14
call fcn.140001244
test esi, esi
je 0x14001b21c
cmp byte [rbp - 0x79], 0
je 0x14001b21c
mov rax, qword [rbp - 0x59]
mov r8d, 8
mov rcx, rdi
mov rdx, qword [rax]
call fcn.140019e94
lea rcx, [rbp - 0x51]
call fcn.140009500
mov eax, ebx
mov rcx, qword [rbp + 7]
xor rcx, rsp
call fcn.140040f60
add rsp, 0xe8
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret