Function at 0x1400fa220
Capabilities:
Check for time delay via gettickcount

Disassembly:
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
mov eax, 0xcbe0
call sub.ntdll.dll___chkstk
sub rsp, rax
mov qword [rsp + reloc.MFC80U.DLL_Ordinal_576], 0xfffffffffffffffe
mov qword [rsp + 0xcc30], rbx
movaps xmmword [rsp + 0xcbd0], xmm6
mov rax, qword [0x14042d950]
xor rax, rsp
mov qword [rsp + 0xcbc0], rax
mov edi, r9d
mov dword [rsp + 0x58], r9d
mov rbp, rdx
mov qword [rsp + 0x100], rdx
mov r15, rcx
mov qword [rsp + reloc.MFC80U.DLL_Ordinal_280], rcx
lea r12, [rcx + 0x248]
mov word [rsp + 0x43c0], 0
xor edx, edx
mov r8d, 0x7fe
lea rcx, [rsp + 0x43c2]
call sub.ntdll.dll_memset
lea r8, [r15 + 0x32]
lea rdx, str.The__s_has_too_much_file_fragment__please_defragment_at_first_or_reserve_free_space_of_2GB_or_more_for_the_partition__and_retry_
lea rcx, [rsp + 0x43c0]
call qword [sym.imp.MSVCR80.dll__swprintf]
xor ebx, ebx
mov dword [rsp + 0x90], ebx
mov qword [rsp + 0xa0], rbx
mov qword [rsp + 0xa8], rbx
mov qword [rsp + 0xb0], rbx
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov r14d, eax
mov dword [rsp + 0xdc], eax
mov r13, rbx
mov qword [rsp + 0xd0], rbx
mov rcx, rbp
call fcn.140007310
movabs r9, 0x2aaaaaaaaaaaaaab
test rax, rax
je 0x1400fc0fd
movsd xmm6, qword [0x1403b85a8]
movzx ebx, byte [rsp + 0x30]
movzx esi, byte [rsp + 0x30]
movzx edi, byte [rsp + 0x30]
cmp dword [r15 + reloc.MFC80U.DLL_Ordinal_320], 0
je 0x1400fa42a
call qword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, r14d
cmp eax, 0x3e8
jb 0x1400fa42a
mov rcx, rbp
call fcn.140007310
mov rbp, rax
lea r12, [r13 + 1]
cvtsi2sd xmm1, r12
cvtsi2sd xmm0, rax
divsd xmm1, xmm0
mulsd xmm1, xmm6
cvttsd2si r13d, xmm1
mov word [rsp + 0x42f0], 0
xor edx, edx
mov r8d, 0xc6
lea rcx, [rsp + 0x42f2]
call sub.ntdll.dll_memset
mov dword [rsp + 0x20], r13d
mov r9, rbp
mov r8, r12
lea rdx, str.Analyzing_partition:__I64d__I64d___d__.
lea rcx, [rsp + 0x42f0]
call qword [sym.imp.MSVCR80.dll__swprintf]
mov rcx, qword [r15 + 0x138]
mov rax, qword [rcx]
lea rdx, [rsp + 0x42f0]
call qword [rax + 0x70]
mov r8d, r13d
lea rdx, str.Status:_d
lea rcx, [rsp + 0x42f0]
call qword [sym.imp.MSVCR80.dll__swprintf]
mov edx, r13d
mov rcx, r15
call fcn.1400f1f90
mov rcx, qword [r15 + 0x138]
mov rax, qword [rcx]
lea rdx, [rsp + 0x42f0]
call qword [rax + 0x78]
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [rsp + 0xdc], eax
mov r13, qword [rsp + 0xd0]
mov rbp, qword [rsp + 0x100]
lea r12, [r15 + 0x248]
mov rcx, qword [r15 + 0x138]
mov rax, qword [rcx]
call qword [rax + 0xf0]
test eax, eax
jne 0x1400fbfb3
xor r14d, r14d
mov dword [rsp + 0xcc], r14d
mov rcx, qword [rbp + 8]
test rcx, rcx
je 0x1400fa466
mov rax, qword [rbp + 0x10]
sub rax, rcx
sar rax, 3
cmp r13, rax
jb 0x1400fa46c
call qword [sym.imp.MSVCR80.dll__invalid_parameter_noinfo]
mov rax, qword [rbp + 8]
mov r13, qword [rax + r13*8]
mov qword [rsp + 0xb8], r13
cmp r13, 7
je 0x1400fb715
cmp r13, 1
je 0x1400fb715
mov dword [rsp + 0x20], r14d
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rsp + 0x260]
call fcn.1400d9890
nop
xor r9d, r9d
lea r8, [rsp + 0x260]
mov rdx, r13
mov rcx, r12
call fcn.1400de420
test eax, eax
je 0x1400fbef9
mov byte [rsp + 0x4bc0], 0
xor edx, edx
mov r8d, 0x3fff
lea rcx, [rsp + 0x4bc1]
call sub.ntdll.dll_memset
mov byte [rsp + 0x8bc0], 0
xor edx, edx
mov r8d, 0x3fff
lea rcx, [rsp + 0x8bc1]
call sub.ntdll.dll_memset
mov ebp, dword [r15 + 0x43f0]
lea rcx, [rsp + 0x260]
call fcn.140111140
mov rdx, rax
mov r8, rbp
lea rcx, [rsp + 0x4bc0]
call sub.ntdll.dll_memcpy
mov r8d, dword [r15 + 0x43f0]
lea rdx, [rsp + 0x4bc0]
lea rcx, [rsp + 0x8bc0]
call sub.ntdll.dll_memcpy
movzx r11d, word [rsp + 0x4bd4]
mov ebp, r11d
mov dword [rsp + 0x80], r11d
mov r8, r11
lea rdx, [rsp + 0x4bc0]
lea rcx, [rsp + 0x8bc0]
call sub.ntdll.dll_memcpy
mov r12d, ebp
mov dword [rsp + 0x8bd8], ebp
xor r13d, r13d
mov qword [rsp + 0x68], r13
mov qword [rsp + 0x70], r13
mov qword [rsp + 0x78], r13
mov dword [rsp + 0x84], r13d
lea rcx, [rsp + 0x260]
call fcn.1400d9510
lea rcx, [rsp + 0x260]
call fcn.1400da8d0
mov r14, rax
mov qword [rsp + 0x88], rax
test rax, rax
je 0x1400fb6a1
cmp byte [r14 + 8], 0
jne 0x1400fa620
movsxd rcx, ebp
lea rcx, [rsp + rcx + 0x8bc0]
mov r8d, dword [r14 + 4]
mov rdx, r14
call sub.ntdll.dll_memcpy
mov r11d, dword [r14 + 4]
add ebp, r11d
mov dword [rsp + 0x80], ebp
mov r12d, dword [rsp + 0x8bd8]
add r12d, r11d
mov dword [rsp + 0x8bd8], r12d
lea rcx, [rsp + 0x260]
call fcn.1400da1e0
mov r14, rax
mov qword [rsp + 0x88], rax
jmp 0x1400fb11e
lea rcx, [rsp + 0x1f0]
call fcn.1400db9e0
nop
mov rdx, r14
lea rcx, [rsp + 0x1f0]
call fcn.1400dbb00
test eax, eax
je 0x1400fbd25
mov qword [rsp + 0x40], r13
mov qword [rsp + 0x48], r13
mov qword [rsp + 0x50], r13
mov dword [rsp + 0xc8], r13d
lea rcx, [rsp + 0x1f0]
call fcn.1400dbfc0
mov ecx, eax
mov dword [rsp + 0x110], eax
xor ebp, ebp
mov eax, ebp
mov dword [rsp + 0xd8], eax
test ecx, ecx
je 0x1400faf63
nop
nop
nop
mov edx, eax
lea rcx, [rsp + 0x1f0]
call fcn.1400db970
mov r11, rax
mov rcx, qword [rax]
cmp rcx, 0xffffffffffffffff
jne 0x1400fa87d
mov qword [rsp + 0x190], rcx
mov eax, dword [rax + 0x10]
mov dword [rsp + 0x198], eax
mov r13, qword [rsp + 0x48]
mov rbp, qword [rsp + 0x40]
test rbp, rbp
je 0x1400fa71b
mov rcx, r13
sub rcx, rbp
sar rcx, 4
mov rax, qword [rsp + 0x50]
sub rax, rbp
sar rax, 4
cmp rcx, rax
jae 0x1400fa71b
xor eax, eax
mov byte [rsp + 0x28], al
mov byte [rsp + 0x20], bl
lea r9, [rsp + 0x38]
lea r8, [rsp + 0x190]
lea edx, [rax + 1]
mov rcx, r13
call fcn.14004cd40
lea r11, [r13 + 0x10]
mov qword [rsp + 0x48], r11
jmp 0x1400fa7cf
mov r12, r13
cmp rbp, r13
jbe 0x1400fa733
call qword [sym.imp.MSVCR80.dll__invalid_parameter_noinfo]
mov r13, qword [rsp + 0x48]
mov rbp, qword [rsp + 0x40]
lea rax, [rsp + 0x38]
mov qword [rsp + 0x1b0], rax
mov qword [rsp + 0x1b8], r12
test rbp, rbp
je 0x1400fa76d
mov rax, r13
sub rax, rbp
sar rax, 4
je 0x1400fa76d
cmp rbp, r13
jbe 0x1400fa764
call qword [sym.imp.MSVCR80.dll__invalid_parameter_noinfo]
sub r12, rbp
sar r12, 4
jmp 0x1400fa770
xor r12d, r12d
movaps xmm0, xmmword [rsp + 0x1b0]
movdqa xmmword [rsp + 0x220], xmm0
lea r9, [rsp + 0x190]
mov r8d, 1
lea rdx, [rsp + 0x220]
lea rcx, [rsp + 0x38]
call fcn.14004cda0
mov rbp, qword [rsp + 0x40]
cmp rbp, qword [rsp + 0x48]
jbe 0x1400fa7b3
call qword [sym.imp.MSVCR80.dll__invalid_parameter_noinfo]
add r12, r12
lea rax, [rbp + r12*8]
cmp rax, qword [rsp + 0x48]
ja 0x1400fa7c9
cmp rax, qword [rsp + 0x40]
jae 0x1400fa7cf
call qword [sym.imp.MSVCR80.dll__invalid_parameter_noinfo]
cmp dword [r15 + 0x4340], 0
je 0x1400faf2b
cmp dword [r14], 0x80
jne 0x1400faf27
cmp dword [rsp + 0x58], 0
je 0x1400faf23
cmp dword [r15 + reloc.MFC80U.DLL_Ordinal_320], 0
je 0x1400faf1f
xor r13d, r13d
mov qword [rsp + 0x138], r13
mov qword [rsp + reloc.MFC80U.DLL_Ordinal_320], r13
mov qword [rsp + 0x148], r13
mov qword [rsp + reloc.MFC80U.DLL_Ordinal_296], 0xffffffffffffffff
mov qword [rsp + 0x120], 0xffffffffffffffff
lea rdx, [rsp + 0x190]
lea rcx, [rsp + 0x130]
call fcn.140128460
lea rcx, [r15 + 0x4350]
lea rdx, [rsp + 0x120]
call fcn.140107c70
nop
mov rcx, qword [rsp + 0x138]
test rcx, rcx
je 0x1400faf2f
call sub.MFC80U.DLL_Ordinal_776
xor ebp, ebp
jmp 0x1400faf35
mov r12, qword [rax + 0x10]
mov qword [rsp + 0x108], r12
mov r14, qword [r15 + reloc.MFC80U.DLL_Ordinal_576]
mov qword [rsp + 0xc0], r14
lea rax, [r12 + rcx]
cmp rax, r14
jle 0x1400fae49
mov dword [rsp + 0xc8], 1
mov dword [rsp + 0xcc], 1
cmp rcx, r14
jl 0x1400fa8d0
mov qword [rsp + 0xc0], rcx
xor r13d, r13d
jmp 0x1400faacf
sub r12, r14
add r12, rcx
mov qword [rsp + 0x108], r12
mov qword [rsp + 0x180], rcx
mov eax, dword [r11 + 0x10]
sub eax, r12d
mov dword [rsp + 0x188], eax
mov r13, qword [rsp + 0x48]
mov rbp, qword [rsp + 0x40]
test rbp, rbp
je 0x1400fa94f
mov rcx, r13
sub rcx, rbp
sar rcx, 4
mov rax, qword [rsp + 0x50]
sub rax, rbp
sar rax, 4
cmp rcx, rax
jae 0x1400fa94f
xor eax, eax
mov byte [rsp + 0x28], al
mov byte [rsp + 0x20], sil
lea r9, [rsp + 0x38]
lea r8, [rsp + 0x180]
lea edx, [rax + 1]
mov rcx, r13
call fcn.14004cd40
lea r11, [r13 + 0x10]
mov qword [rsp + 0x48], r11
jmp 0x1400faa15
mov r12, r13
cmp rbp, r13
jbe 0x1400fa967
call qword [sym.imp.MSVCR80.dll__invalid_parameter_noinfo]
mov r13, qword [rsp + 0x48]
mov rbp, qword [rsp + 0x40]
lea rax, [rsp + 0x38]
mov qword [rsp + 0x1e0], rax
mov qword [rsp + 0x1e8], r12
test rbp, rbp
je 0x1400fa9a1
mov rax, r13
sub rax, rbp
sar rax, 4
je 0x1400fa9a1
cmp rbp, r13
jbe 0x1400fa998
call qword [sym.imp.MSVCR80.dll__invalid_parameter_noinfo]
sub r12, rbp
sar r12, 4
jmp 0x1400fa9a4
xor r12d, r12d
movaps xmm0, xmmword [rsp + 0x1e0]
movdqa xmmword [rsp + 0x250], xmm0
lea r9, [rsp + 0x180]
mov r8d, 1
lea rdx, [rsp + 0x250]
lea rcx, [rsp + 0x38]
call fcn.14004cda0
mov rbp, qword [rsp + 0x40]
cmp rbp, qword [rsp + 0x48]
jbe 0x1400fa9e7
call qword [sym.imp.MSVCR80.dll__invalid_parameter_noinfo]
add r12, r12
lea rax, [rbp + r12*8]
cmp rax, qword [rsp + 0x48]
ja 0x1400fa9fd
cmp rax, qword [rsp + 0x40]
jae 0x1400faa0d
call qword [sym.imp.MSVCR80.dll__invalid_parameter_noinfo]
mov r12, qword [rsp + 0x108]
jmp 0x1400faa15
mov r12, qword [rsp + 0x108]
cmp dword [r15 + 0x4340], 0
je 0x1400faacc
mov rax, qword [rsp + 0x88]
cmp dword [rax], 0x80
jne 0x1400faac7
cmp dword [rsp + 0x58], 0
je 0x1400faac2
cmp dword [r15 + reloc.MFC80U.DLL_Ordinal_320], 0
je 0x1400faabd
xor r13d, r13d
mov qword [rsp + 0x168], r13
mov qword [rsp + 0x170], r13
mov qword [rsp + reloc.MFC80U.DLL_Ordinal_376], r13
mov qword [rsp + 0x158], 0xffffffffffffffff
mov qword [rsp + reloc.MFC80U.DLL_Ordinal_336], 0xffffffffffffffff
lea rdx, [rsp + 0x180]
lea rcx, [rsp + 0x160]
call fcn.140128460
lea rcx, [r15 + 0x4350]
lea rdx, [rsp + reloc.MFC80U.DLL_Ordinal_336]
call fcn.140107c70
nop
mov rcx, qword [rsp + 0x168]
test rcx, rcx
je 0x1400faacf
call sub.MFC80U.DLL_Ordinal_776
jmp 0x1400faacf
xor r13d, r13d
jmp 0x1400faacf
xor r13d, r13d
jmp 0x1400faacf
xor r13d, r13d
jmp 0x1400faacf
xor r13d, r13d
mov qword [rsp + 0xe8], r13
mov qword [rsp + 0xf0], r13
mov qword [rsp + 0xf8], r13
mov ecx, dword [rsp + 0x90]
test ecx, ecx
jne 0x1400fab16
lea rcx, [r15 + 0x148]
xor r9d, r9d
lea r8, [rsp + 0xe0]
mov rdx, r12
call fcn.140113ad0
test eax, eax
je 0x1400fb74e
jmp 0x1400fab7b
mov rbp, qword [rsp + 0x40]
test rbp, rbp
je 0x1400fab56
mov rax, qword [rsp + 0x48]
sub rax, rbp
sar rax, 4
je 0x1400fab56
lea rbp, [rax - 1]
cmp rbp, rax
jb 0x1400fab3d
call qword [sym.imp.MSVCR80.dll__invalid_parameter_noinfo]
shl rbp, 4
add rbp, qword [rsp + 0x40]
mov rdx, rbp
lea rcx, [rsp + 0xe0]
call fcn.140128460
lea rcx, [r15 + 0x148]
mov r9d, 1
lea r8, [rsp + 0xe0]
mov rdx, r12
call fcn.140113ad0
test eax, eax
je 0x1400fb8b9
mov r15d, r13d
lea rcx, [rsp + 0xe0]
call fcn.1400e79c0
test rax, rax
je 0x1400fad1e
mov r14, r13
mov r12, qword [rsp + 0x48]
mov rbp, qword [rsp + 0x40]
mov rcx, qword [rsp + 0xe8]
test rcx, rcx
je 0x1400fabc2
mov rax, qword [rsp + 0xf0]
sub rax, rcx
sar rax, 4
cmp r14, rax
jb 0x1400fabda
call qword [sym.imp.MSVCR80.dll__invalid_parameter_noinfo]
mov r12, qword [rsp + 0x48]
mov rbp, qword [rsp + 0x40]
mov rcx, qword [rsp + 0xe8]
shl r14, 4
add r14, rcx
test rbp, rbp
je 0x1400fac32
mov rcx, r12
sub rcx, rbp
sar rcx, 4
mov rax, qword [rsp + 0x50]
sub rax, rbp
sar rax, 4
cmp rcx, rax
jae 0x1400fac32
xor eax, eax
mov byte [rsp + 0x28], al
mov byte [rsp + 0x20], dil
lea r9, [rsp + 0x38]
mov r8, r14
lea edx, [rax + 1]
mov rcx, r12
call fcn.14004cd40
add r12, 0x10
mov qword [rsp + 0x48], r12
mov rbp, qword [rsp + 0x40]
jmp 0x1400facf6
mov r13, r12
cmp rbp, r12
jbe 0x1400fac4a
call qword [sym.imp.MSVCR80.dll__invalid_parameter_noinfo]
mov r12, qword [rsp + 0x48]
mov rbp, qword [rsp + 0x40]
lea rax, [rsp + 0x38]
mov qword [rsp + 0x1d0], rax
mov qword [rsp + 0x1d8], r13
test rbp, rbp
je 0x1400fac84
mov rax, r12
sub rax, rbp
sar rax, 4
je 0x1400fac84
cmp rbp, r12
jbe 0x1400fac7b
call qword [sym.imp.MSVCR80.dll__invalid_parameter_noinfo]
sub r13, rbp
sar r13, 4
jmp 0x1400fac87
xor r13d, r13d
movaps xmm0, xmmword [rsp + 0x1d0]
movdqa xmmword [rsp + 0x230], xmm0
mov r9, r14
mov r8d, 1
lea rdx, [rsp + 0x230]
lea rcx, [rsp + 0x38]
call fcn.14004cda0
mov rbp, qword [rsp + 0x40]
mov r14, rbp
mov r12, qword [rsp + 0x48]
cmp rbp, r12
jbe 0x1400facd5
call qword [sym.imp.MSVCR80.dll__invalid_parameter_noinfo]
mov r12, qword [rsp + 0x48]
mov rbp, qword [rsp + 0x40]
add r13, r13
lea rax, [r14 + r13*8]
cmp rax, r12
ja 0x1400face6
cmp rax, rbp
jae 0x1400facf6
call qword [sym.imp.MSVCR80.dll__invalid_parameter_noinfo]
mov r12, qword [rsp + 0x48]
mov rbp, qword [rsp + 0x40]
add r15d, 1
mov r14d, r15d
lea rcx, [rsp + 0xe0]
call fcn.1400e79c0
cmp r14, rax
jb 0x1400faba1
mov r12, qword [rsp + 0x108]
xor r13d, r13d
mov qword [rsp + 0x138], r13
mov qword [rsp + reloc.MFC80U.DLL_Ordinal_320], r13
mov qword [rsp + 0x148], r13
mov rax, qword [rsp + 0xc0]
mov qword [rsp + 0x120], rax
mov qword [rsp + reloc.MFC80U.DLL_Ordinal_296], r12
lea rdx, [rsp + 0xe0]
lea rcx, [rsp + 0x130]
call fcn.140128220
mov r15, qword [rsp + reloc.MFC80U.DLL_Ordinal_280]
cmp dword [r15 + 0x4340], 0
je 0x1400fadae
cmp dword [r15 + reloc.MFC80U.DLL_Ordinal_320], 0
jne 0x1400fada4
mov eax, dword [rsp + 0x58]
test eax, eax
je 0x1400fad9a
mov r14, qword [rsp + 0x88]
cmp dword [r14], 0x80
je 0x1400fadcc
jmp 0x1400fadb6
mov r14, qword [rsp + 0x88]
jmp 0x1400fadb6
mov r14, qword [rsp + 0x88]
jmp 0x1400fadb6
mov r14, qword [rsp + 0x88]
lea rdx, [rsp + 0x120]
lea rcx, [rsp + 0x60]
call fcn.140107c70
mov eax, dword [rsp + 0x58]
cmp dword [r15 + 0x4340], 0
je 0x1400fae02
cmp dword [r14], 0x80
jne 0x1400fae02
test eax, eax
je 0x1400fae02
cmp dword [r15 + reloc.MFC80U.DLL_Ordinal_320], 0
je 0x1400fae02
lea rcx, [r15 + 0x4350]
lea rdx, [rsp + 0x120]
call fcn.140107c70
nop
mov rcx, qword [rsp + 0x138]
test rcx, rcx
je 0x1400fae14
call sub.MFC80U.DLL_Ordinal_776
mov qword [rsp + 0x138], r13
mov qword [rsp + reloc.MFC80U.DLL_Ordinal_320], r13
mov qword [rsp + 0x148], r13
mov rcx, qword [rsp + 0xe8]
test rcx, rcx
je 0x1400faf33
call sub.MFC80U.DLL_Ordinal_776
xor ebp, ebp
jmp 0x1400faf35
mov qword [rsp + 0x1a0], rcx
mov dword [rsp + reloc.MFC80U.DLL_Ordinal_424], r12d
lea rdx, [rsp + 0x1a0]
lea rcx, [rsp + 0x38]
call fcn.140128460
cmp dword [r15 + 0x4340], 0
je 0x1400faf15
mov r14, qword [rsp + 0x88]
cmp dword [r14], 0x80
jne 0x1400faf35
cmp dword [rsp + 0x58], 0
je 0x1400faf35
cmp dword [r15 + reloc.MFC80U.DLL_Ordinal_320], 0
je 0x1400faf35
mov qword [rsp + 0x168], rbp
mov qword [rsp + 0x170], rbp
mov qword [rsp + reloc.MFC80U.DLL_Ordinal_376], rbp
mov qword [rsp + 0x158], 0xffffffffffffffff
mov qword [rsp + reloc.MFC80U.DLL_Ordinal_336], 0xffffffffffffffff
lea rdx, [rsp + 0x1a0]
lea rcx, [rsp + 0x160]
call fcn.140128460
lea rcx, [r15 + 0x4350]
lea rdx, [rsp + reloc.MFC80U.DLL_Ordinal_336]
call fcn.140107c70
nop
mov rcx, qword [rsp + 0x168]
test rcx, rcx
je 0x1400faf35
call sub.MFC80U.DLL_Ordinal_776
jmp 0x1400faf35
mov r14, qword [rsp + 0x88]
jmp 0x1400faf35
xor ebp, ebp
jmp 0x1400faf35
xor ebp, ebp
jmp 0x1400faf35
xor ebp, ebp
jmp 0x1400faf35
xor ebp, ebp
jmp 0x1400faf35
xor ebp, ebp
jmp 0x1400faf35
xor ebp, ebp
mov eax, dword [rsp + 0xd8]
add eax, 1
mov dword [rsp + 0xd8], eax
cmp eax, dword [rsp + 0x110]
jb 0x1400fa690
mov r12d, dword [rsp + 0x8bd8]
mov r13d, dword [rsp + 0xc8]
cmp qword [r15 + 0x42f0], 0
jge 0x1400fafbe
cmp qword [rsp + 0xb8], 0
jne 0x1400fafbe
cmp dword [r14], 0x80
jne 0x1400fafbe
mov rbp, qword [rsp + 0x40]
test rbp, rbp
je 0x1400fafbe
mov rax, qword [rsp + 0x48]
sub rax, rbp
sar rax, 4
je 0x1400fafbe
test rax, rax
jne 0x1400fafa4
call qword [sym.imp.MSVCR80.dll__invalid_parameter_noinfo]
mov rax, qword [rsp + 0x40]
mov rcx, qword [rax]
mov qword [r15 + 0x42f0], rcx
mov dword [rsp + 0x84], 1
test r13d, r13d
jne 0x1400fb005
movsxd rbp, dword [rsp + 0x80]
lea rcx, [rsp + rbp + 0x8bc0]
mov r8d, dword [r14 + 4]
mov rdx, r14
call sub.ntdll.dll_memcpy
mov r11d, dword [r14 + 4]
add ebp, r11d
mov dword [rsp + 0x80], ebp
mov r12d, dword [rsp + 0x8bd8]
add r12d, r11d
mov dword [rsp + 0x8bd8], r12d
jmp 0x1400fb0d8
mov ecx, 0x80000
call sub.MFC80U.DLL_Ordinal_265
mov r13, rax
xor edx, edx
mov r8d, 0x80000
mov rcx, rax
call sub.ntdll.dll_memset
lea rdx, [rsp + 0x38]
mov rcx, r15
call fcn.1400ebba0
mov r9, r13
lea r8, [rsp + 0x38]
mov rdx, r14
mov rcx, r15
call fcn.1400f2d20
movsxd rbp, dword [rsp + 0x80]
lea r9, [rsp + rbp + 0x8bc0]
mov ecx, dword [r13 + 4]
lea eax, [rcx + r12]
cmp eax, dword [r15 + 0x43f0]
ja 0x1400fb073
mov r8, rcx
mov rdx, r13
mov rcx, r9
call sub.ntdll.dll_memcpy
jmp 0x1400fb0b0
call fcn.140049470
mov rbp, rax
mov r12, qword [rax]
mov edx, 0x4c1
lea rcx, str..._ntfscpyex.cpp
call fcn.1400f1280
mov r8, rax
mov r9, qword [rsp + 0xb8]
lea rdx, str._s:_File_fragments__FrNumber:_I64d.
mov rcx, rbp
call qword [r12 + 0x10]
mov ebp, dword [rsp + 0x80]
mov eax, dword [r13 + 4]
add ebp, eax
mov dword [rsp + 0x80], ebp
mov r12d, dword [rsp + 0x8bd8]
add r12d, eax
mov dword [rsp + 0x8bd8], r12d
mov rcx, r13
call sub.MFC80U.DLL_Ordinal_266
lea rcx, [rsp + 0x260]
call fcn.1400da1e0
mov r14, rax
mov qword [rsp + 0x88], rax
mov rcx, qword [rsp + 0x40]
test rcx, rcx
je 0x1400fb0ff
call sub.MFC80U.DLL_Ordinal_776
xor r13d, r13d
mov qword [rsp + 0x40], r13
mov qword [rsp + 0x48], r13
mov qword [rsp + 0x50], r13
lea rcx, [rsp + 0x1f0]
call fcn.1400dbc40
test r14, r14
jne 0x1400fa5c4
mov eax, dword [rsp + 0xcc]
test eax, eax
je 0x1400fb6a1
movsxd rcx, ebp
lea eax, [r12 + 8]
cmp eax, dword [r15 + 0x43f0]
ja 0x1400fb15c
mov eax, 0xffffffff
mov qword [rsp + rcx + 0x8bc0], rax
mov r12d, dword [rsp + 0x8bd8]
add r12d, 8
mov dword [rsp + 0x8bd8], r12d
mov ebp, dword [r15 + 0x43f0]
mov r14d, dword [rsp + 0x90]
cmp r12d, ebp
cmovbe r14d, r13d
mov dword [rsp + 0x90], r14d
cmp r12d, ebp
jbe 0x1400fb3ad
test r14d, r14d
jne 0x1400fba29
mov eax, dword [rsp + 0x84]
test eax, eax
je 0x1400fb1ae
mov qword [r15 + 0x42f0], 0xffffffffffffffff
sub qword [rsp + 0xd0], 1
mov dword [rsp + 0x90], 1
mov r8d, r13d
mov dword [rsp + 0x84], r13d
mov r9, r13
mov qword [rsp + 0xc0], r13
mov r12, r13
mov rbx, qword [rsp + reloc.MFC80U.DLL_Ordinal_280]
xor esi, esi
movabs rdi, 0x2aaaaaaaaaaaaaab
nop
mov r13, qword [rsp + 0x70]
mov rbp, qword [rsp + 0x68]
test rbp, rbp
jne 0x1400fb204
mov rdx, rsi
jmp 0x1400fb21e
mov rcx, r13
sub rcx, rbp
mov rax, rdi
imul rcx
sar rdx, 3
mov rax, rdx
shr rax, 0x3f
add rdx, rax
mov eax, r8d
cmp rax, rdx
jae 0x1400fb31f
test rbp, rbp
je 0x1400fb24b
sub r13, rbp
mov rax, rdi
imul r13
sar rdx, 3
mov rax, rdx
shr rax, 0x3f
add rdx, rax
cmp r9, rdx
jb 0x1400fb256
call qword [sym.imp.MSVCR80.dll__invalid_parameter_noinfo]
mov rbp, qword [rsp + 0x68]
mov r14d, esi
mov r15, rsi
mov r13, rsi
nop
mov rax, qword [r12 + rbp + 0x18]
test rax, rax
jne 0x1400fb26f
mov rcx, rsi
jmp 0x1400fb27b
mov rcx, qword [r12 + rbp + 0x20]
sub rcx, rax
sar rcx, 4
mov eax, r14d
cmp rax, rcx
jae 0x1400fb2ee
mov rcx, qword [r12 + rbp + 0x18]
test rcx, rcx
je 0x1400fb29e
mov rax, qword [r12 + rbp + 0x20]
sub rax, rcx
sar rax, 4
cmp r15, rax
jb 0x1400fb2a4
call qword [sym.imp.MSVCR80.dll__invalid_parameter_noinfo]
mov rcx, qword [r12 + rbp + 0x18]
lea rdx, [rsp + 0x1c0]
mov rax, qword [r13 + rcx]
mov qword [rdx], rax
mov rax, qword [r13 + rcx + 8]
mov qword [rdx + 8], rax
lea rcx, [rbx + 0x148]
mov r8d, dword [rsp + 0x1c8]
mov edx, dword [rsp + 0x1c0]
call fcn.140112b30
add r14d, 1
add r15, 1
add r13, 0x10
jmp 0x1400fb260
mov r8d, dword [rsp + 0x84]
add r8d, 1
mov dword [rsp + 0x84], r8d
mov r9, qword [rsp + 0xc0]
add r9, 1
mov qword [rsp + 0xc0], r9
add r12, 0x30
jmp 0x1400fb1f0
test rbp, rbp
mov dil, byte [rsp + 0x30]
mov bl, byte [rsp + 0x30]
mov sil, byte [rsp + 0x30]
je 0x1400fb379
cmp rbp, r13
je 0x1400fb371
add rbp, 0x18
xor edi, edi
nop
mov rcx, qword [rbp]
test rcx, rcx
je 0x1400fb34e
call sub.MFC80U.DLL_Ordinal_776
mov qword [rbp], rdi
mov qword [rbp + 8], rdi
mov qword [rbp + 0x10], rdi
add rbp, 0x30
lea rax, [rbp - 0x18]
cmp rax, r13
jne 0x1400fb340
mov dil, byte [rsp + 0x30]
mov rbp, qword [rsp + 0x68]
mov rcx, rbp
call sub.MFC80U.DLL_Ordinal_776
xor r14d, r14d
mov qword [rsp + 0x68], r14
mov qword [rsp + 0x70], r14
mov qword [rsp + 0x78], r14
lea rcx, [rsp + 0x260]
call fcn.1400d9920
mov r15, qword [rsp + reloc.MFC80U.DLL_Ordinal_280]
mov rbp, qword [rsp + 0x100]
jmp 0x1400fb715
cmp dword [r15 + reloc.MFC80U.DLL_Ordinal_320], 0
jne 0x1400fb62a
mov byte [rsp + 0x4bc0], 0
xor edx, edx
mov r8d, 0x3fff
lea rcx, [rsp + 0x4bc1]
call sub.ntdll.dll_memset
mov r8, rbp
lea rdx, [rsp + 0x8bc0]
lea rcx, [rsp + 0x4bc0]
call sub.ntdll.dll_memcpy
mov r11d, r13d
movzx eax, word [rsp + 0x4bc6]
sub eax, 1
test eax, eax
jle 0x1400fb45a
mov r9, r13
lea r8, [rsp + 0x4dbe]
nop
movzx ecx, word [rsp + 0x4bc4]
add rcx, r9
movzx eax, word [r8]
mov word [rsp + rcx + 0x4bc2], ax
movzx eax, word [rsp + 0x4bc4]
movzx ecx, word [rsp + rax + 0x4bc0]
mov word [r8], cx
add r11d, 1
add r9, 2
add r8, reloc.MFC80U.DLL_Ordinal_512
movzx eax, word [rsp + 0x4bc6]
sub eax, 1
cmp r11d, eax
jl 0x1400fb410
cmp dword [r15 + 0x4340], 0
je 0x1400fb491
lea rcx, [r15 + 0x4370]
mov r9d, dword [r15 + 0x43f0]
lea r8, [rsp + 0x4bc0]
mov rdx, qword [rsp + 0xb8]
call fcn.1400dcd00
test eax, eax
je 0x1400fbab2
jmp 0x1400fb4bc
mov r9d, dword [r15 + 0x43f0]
lea r8, [rsp + 0x4bc0]
mov rdx, qword [rsp + 0xb8]
lea rcx, [r15 + 0x248]
call fcn.1400dd290
test eax, eax
je 0x1400fbcb9
cmp dword [rsp + 0x58], 0
jne 0x1400fb590
mov r12d, r13d
nop
nop
mov r9, qword [rsp + 0x70]
mov r8, qword [rsp + 0x68]
test r8, r8
jne 0x1400fb4ee
mov rdx, r13
movabs r10, 0x2aaaaaaaaaaaaaab
jmp 0x1400fb512
mov rcx, r9
sub rcx, r8
movabs r10, 0x2aaaaaaaaaaaaaab
mov rax, r10
imul rcx
sar rdx, 3
mov rax, rdx
shr rax, 0x3f
add rdx, rax
mov ebp, r12d
cmp rbp, rdx
jae 0x1400fb56d
test r8, r8
je 0x1400fb53b
sub r9, r8
mov rax, r10
imul r9
sar rdx, 3
mov rax, rdx
shr rax, 0x3f
add rdx, rax
cmp rbp, rdx
jb 0x1400fb546
call qword [sym.imp.MSVCR80.dll__invalid_parameter_noinfo]
mov r8, qword [rsp + 0x68]
lea rdx, [rbp + rbp*2]
shl rdx, 4
add rdx, r8
mov rcx, r15
call fcn.1400f23e0
mov ebp, eax
test eax, eax
jne 0x1400fbbb9
add r12d, 1
jmp 0x1400fb4d0
xor r9d, r9d
or r8, 0xffffffffffffffff
xor edx, edx
mov rcx, r15
call fcn.1400f1370
mov r12, qword [rsp + 0x70]
mov r8, qword [rsp + 0x68]
jmp 0x1400fb639
mov r12, qword [rsp + 0x70]
mov r8, qword [rsp + 0x68]
test r8, r8
jne 0x1400fb5b0
xor eax, eax
mov rdx, rax
movabs r9, 0x2aaaaaaaaaaaaaab
jmp 0x1400fb5d4
mov rcx, r12
sub rcx, r8
movabs r9, 0x2aaaaaaaaaaaaaab
mov rax, r9
imul rcx
sar rdx, 3
mov rax, rdx
shr rax, 0x3f
add rdx, rax
mov ebp, r13d
cmp rbp, rdx
jae 0x1400fb636
test r8, r8
je 0x1400fb5fd
sub r12, r8
mov rax, r9
imul r12
sar rdx, 3
mov rax, rdx
shr rax, 0x3f
add rdx, rax
cmp rbp, rdx
jb 0x1400fb608
call qword [sym.imp.MSVCR80.dll__invalid_parameter_noinfo]
mov r8, qword [rsp + 0x68]
lea rdx, [rbp + rbp*2]
shl rdx, 4
add rdx, r8
lea rcx, [rsp + 0x98]
call fcn.140107c70
add r13d, 1
jmp 0x1400fb590
mov r12, qword [rsp + 0x70]
mov r8, qword [rsp + 0x68]
jmp 0x1400fb639
xor r13d, r13d
test r8, r8
je 0x1400fb67b
cmp r8, r12
je 0x1400fb673
lea rbp, [r8 + 0x18]
mov rcx, qword [rbp]
test rcx, rcx
je 0x1400fb655
call sub.MFC80U.DLL_Ordinal_776
mov qword [rbp], r13
mov qword [rbp + 8], r13
mov qword [rbp + 0x10], r13
add rbp, 0x30
lea rax, [rbp - 0x18]
cmp rax, r12
jne 0x1400fb647
mov r8, qword [rsp + 0x68]
mov rcx, r8
call sub.MFC80U.DLL_Ordinal_776
mov qword [rsp + 0x68], r13
mov qword [rsp + 0x70], r13
mov qword [rsp + 0x78], r13
lea rcx, [rsp + 0x260]
call fcn.1400d9920
mov rbp, qword [rsp + 0x100]
jmp 0x1400fb715
mov rcx, qword [rsp + 0x68]
test rcx, rcx
je 0x1400fb6f1
mov r12, qword [rsp + 0x70]
cmp rcx, r12
je 0x1400fb6ec
lea rbp, [rcx + 0x18]
nop
nop
mov rcx, qword [rbp]
test rcx, rcx
je 0x1400fb6ce
call sub.MFC80U.DLL_Ordinal_776
mov qword [rbp], r13
mov qword [rbp + 8], r13
mov qword [rbp + 0x10], r13
add rbp, 0x30
lea rax, [rbp - 0x18]
cmp rax, r12
jne 0x1400fb6c0
mov rcx, qword [rsp + 0x68]
call sub.MFC80U.DLL_Ordinal_776
mov qword [rsp + 0x68], r13
mov qword [rsp + 0x70], r13
mov qword [rsp + 0x78], r13
lea rcx, [rsp + 0x260]
call fcn.1400d9920
mov rbp, qword [rsp + 0x100]
mov r13, qword [rsp + 0xd0]
add r13, 1
mov qword [rsp + 0xd0], r13
mov rcx, rbp
call fcn.140007310
cmp r13, rax
jae 0x1400fbfa0
lea r12, [r15 + 0x248]
mov r14d, dword [rsp + 0xdc]
jmp 0x1400fa332
mov rcx, qword [r15 + 0x138]
mov rax, qword [rcx]
lea rdx, [rsp + 0x43c0]
call qword [rax + 0x68]
call fcn.140049470
mov rdi, rax
mov rbx, qword [rax]
mov edx, 0x466
lea rcx, str..._ntfscpyex.cpp
call fcn.1400f1280
mov r8, rax
lea rdx, str._s:_Too_much_file_fragment__please_defragment.
mov rcx, rdi
call qword [rbx + 0x10]
mov rcx, qword [r15 + 0x138]
mov rax, qword [rcx]
mov edx, 0xd7
call qword [rax + 0x40]
nop
mov rcx, qword [rsp + 0xe8]
test rcx, rcx
je 0x1400fb7b4
call sub.MFC80U.DLL_Ordinal_776
mov qword [rsp + 0xe8], r13
mov qword [rsp + 0xf0], r13
mov qword [rsp + 0xf8], r13
mov rcx, qword [rsp + 0x40]
test rcx, rcx
je 0x1400fb7db
call sub.MFC80U.DLL_Ordinal_776
mov qword [rsp + 0x40], r13
mov qword [rsp + 0x48], r13
mov qword [rsp + 0x50], r13
lea rcx, [rsp + 0x1f0]
call fcn.1400dbc40
nop
mov rcx, qword [rsp + 0x68]
test rcx, rcx
je 0x1400fb83f
mov rbx, qword [rsp + 0x70]
cmp rcx, rbx
je 0x1400fb83a
lea rdi, [rcx + 0x18]
mov rcx, qword [rdi]
test rcx, rcx
je 0x1400fb81d
call sub.MFC80U.DLL_Ordinal_776
mov qword [rdi], r13
mov qword [rdi + 8], r13
mov qword [rdi + 0x10], r13
add rdi, 0x30
lea rax, [rdi - 0x18]
cmp rax, rbx
jne 0x1400fb810
mov rcx, qword [rsp + 0x68]
call sub.MFC80U.DLL_Ordinal_776
mov qword [rsp + 0x68], r13
mov qword [rsp + 0x70], r13
mov qword [rsp + 0x78], r13
lea rcx, [rsp + 0x260]
call fcn.1400d9920
nop
mov rcx, qword [rsp + 0xa0]
test rcx, rcx
je 0x1400fb8b2
mov rbx, qword [rsp + 0xa8]
cmp rcx, rbx
je 0x1400fb8ad
lea rdi, [rcx + 0x18]
nop
nop
mov rcx, qword [rdi]
test rcx, rcx
je 0x1400fb88d
call sub.MFC80U.DLL_Ordinal_776
mov qword [rdi], r13
mov qword [rdi + 8], r13
mov qword [rdi + 0x10], r13
add rdi, 0x30
lea rax, [rdi - 0x18]
cmp rax, rbx
jne 0x1400fb880
mov rcx, qword [rsp + 0xa0]
call sub.MFC80U.DLL_Ordinal_776
xor eax, eax
jmp 0x1400fc2b9
mov rcx, qword [r15 + 0x138]
mov rax, qword [rcx]
lea rdx, [rsp + 0x43c0]
call qword [rax + 0x68]
call fcn.140049470
mov rdi, rax
mov rbx, qword [rax]
mov edx, 0x475
lea rcx, str..._ntfscpyex.cpp
call fcn.1400f1280
mov r8, rax
lea rdx, str._s:_Too_much_file_fragment__please_defragment.
mov rcx, rdi
call qword [rbx + 0x10]
mov rcx, qword [r15 + 0x138]
mov rax, qword [rcx]
mov edx, 0xd7
call qword [rax + 0x40]
nop
mov rcx, qword [rsp + 0xe8]
test rcx, rcx
je 0x1400fb91f
call sub.MFC80U.DLL_Ordinal_776
mov qword [rsp + 0xe8], r13
mov qword [rsp + 0xf0], r13
mov qword [rsp + 0xf8], r13
mov rcx, qword [rsp + 0x40]
test rcx, rcx
je 0x1400fb946
call sub.MFC80U.DLL_Ordinal_776
mov qword [rsp + 0x40], r13
mov qword [rsp + 0x48], r13
mov qword [rsp + 0x50], r13
lea rcx, [rsp + 0x1f0]
call fcn.1400dbc40
nop
mov rcx, qword [rsp + 0x68]
test rcx, rcx
je 0x1400fb9af
mov rbx, qword [rsp + 0x70]
cmp rcx, rbx
je 0x1400fb9aa
lea rdi, [rcx + 0x18]
nop
nop
mov rcx, qword [rdi]
test rcx, rcx
je 0x1400fb98d
call sub.MFC80U.DLL_Ordinal_776
mov qword [rdi], r13
mov qword [rdi + 8], r13
mov qword [rdi + 0x10], r13
add rdi, 0x30
lea rax, [rdi - 0x18]
cmp rax, rbx
jne 0x1400fb980
mov rcx, qword [rsp + 0x68]
call sub.MFC80U.DLL_Ordinal_776
mov qword [rsp + 0x68], r13
mov qword [rsp + 0x70], r13
mov qword [rsp + 0x78], r13
lea rcx, [rsp + 0x260]
call fcn.1400d9920
nop
mov rcx, qword [rsp + 0xa0]
test rcx, rcx
je 0x1400fba22
mov rbx, qword [rsp + 0xa8]
cmp rcx, rbx
je 0x1400fba1d
lea rdi, [rcx + 0x18]
nop
nop
mov rcx, qword [rdi]
test rcx, rcx
je 0x1400fb9fd
call sub.MFC80U.DLL_Ordinal_776
mov qword [rdi], r13
mov qword [rdi + 8], r13
mov qword [rdi + 0x10], r13
add rdi, 0x30
lea rax, [rdi - 0x18]
cmp rax, rbx
jne 0x1400fb9f0
mov rcx, qword [rsp + 0xa0]
call sub.MFC80U.DLL_Ordinal_776
xor eax, eax
jmp 0x1400fc2b9
mov rcx, qword [r15 + 0x138]
mov rax, qword [rcx]
lea rdx, [rsp + 0x43c0]
call qword [rax + 0x68]
call fcn.140049470
mov rdi, rax
mov rbx, qword [rax]
mov edx, 0x4e3
lea rcx, str..._ntfscpyex.cpp
call fcn.1400f1280
mov r8, rax
mov r9, qword [rsp + 0xb8]
lea rdx, str._s:_Too_much_file_fragment__please_defragment__FrNumber:_I64d.
mov rcx, rdi
call qword [rbx + 0x10]
mov rcx, qword [r15 + 0x138]
mov rax, qword [rcx]
mov edx, 0xd7
call qword [rax + 0x40]
nop
lea rcx, [rsp + 0x60]
call fcn.1400ede30
nop
lea rcx, [rsp + 0x260]
call fcn.1400d9920
nop
lea rcx, [rsp + 0x98]
call fcn.1400ede30
xor eax, eax
jmp 0x1400fc2b9
call fcn.140049470
mov rdi, rax
mov rbx, qword [rax]
mov edx, 0x514
lea rcx, str..._ntfscpyex.cpp
call fcn.1400f1280
mov r8, rax
lea rdx, str._s:_Write_mft_file_failed.
mov rcx, rdi
call qword [rbx + 0x10]
mov rcx, qword [r15 + 0x138]
mov rax, qword [rcx]
mov edx, 0xd2
call qword [rax + 0x40]
nop
mov rcx, qword [rsp + 0x68]
test rcx, rcx
je 0x1400fbb3f
mov rbx, qword [rsp + 0x70]
cmp rcx, rbx
je 0x1400fbb3a
lea rdi, [rcx + 0x18]
nop
nop
mov rcx, qword [rdi]
test rcx, rcx
je 0x1400fbb1d
call sub.MFC80U.DLL_Ordinal_776
mov qword [rdi], r13
mov qword [rdi + 8], r13
mov qword [rdi + 0x10], r13
add rdi, 0x30
lea rax, [rdi - 0x18]
cmp rax, rbx
jne 0x1400fbb10
mov rcx, qword [rsp + 0x68]
call sub.MFC80U.DLL_Ordinal_776
mov qword [rsp + 0x68], r13
mov qword [rsp + 0x70], r13
mov qword [rsp + 0x78], r13
lea rcx, [rsp + 0x260]
call fcn.1400d9920
nop
mov rcx, qword [rsp + 0xa0]
test rcx, rcx
je 0x1400fbbb2
mov rbx, qword [rsp + 0xa8]
cmp rcx, rbx
je 0x1400fbbad
lea rdi, [rcx + 0x18]
nop
nop
mov rcx, qword [rdi]
test rcx, rcx
je 0x1400fbb8d
call sub.MFC80U.DLL_Ordinal_776
mov qword [rdi], r13
mov qword [rdi + 8], r13
mov qword [rdi + 0x10], r13
add rdi, 0x30
lea rax, [rdi - 0x18]
cmp rax, rbx
jne 0x1400fbb80
mov rcx, qword [rsp + 0xa0]
call sub.MFC80U.DLL_Ordinal_776
xor eax, eax
jmp 0x1400fc2b9
call fcn.140049470
mov rdi, rax
mov rbx, qword [rax]
mov edx, 0x52c
lea rcx, str..._ntfscpyex.cpp
call fcn.1400f1280
mov r8, rax
lea rdx, str._s:_Move_file_data_error.
mov rcx, rdi
call qword [rbx + 0x10]
mov rcx, qword [r15 + 0x138]
mov rax, qword [rcx]
mov edx, ebp
call qword [rax + 0x40]
nop
mov rcx, qword [rsp + 0x68]
test rcx, rcx
je 0x1400fbc3f
mov rbx, qword [rsp + 0x70]
cmp rcx, rbx
je 0x1400fbc3a
lea rdi, [rcx + 0x18]
nop
mov rcx, qword [rdi]
test rcx, rcx
je 0x1400fbc1d
call sub.MFC80U.DLL_Ordinal_776
mov qword [rdi], r13
mov qword [rdi + 8], r13
mov qword [rdi + 0x10], r13
add rdi, 0x30
lea rax, [rdi - 0x18]
cmp rax, rbx
jne 0x1400fbc10
mov rcx, qword [rsp + 0x68]
call sub.MFC80U.DLL_Ordinal_776
mov qword [rsp + 0x68], r13
mov qword [rsp + 0x70], r13
mov qword [rsp + 0x78], r13
lea rcx, [rsp + 0x260]
call fcn.1400d9920
nop
mov rcx, qword [rsp + 0xa0]
test rcx, rcx
je 0x1400fbcb2
mov rbx, qword [rsp + 0xa8]
cmp rcx, rbx
je 0x1400fbcad
lea rdi, [rcx + 0x18]
nop
nop
mov rcx, qword [rdi]
test rcx, rcx
je 0x1400fbc8d
call sub.MFC80U.DLL_Ordinal_776
mov qword [rdi], r13
mov qword [rdi + 8], r13
mov qword [rdi + 0x10], r13
add rdi, 0x30
lea rax, [rdi - 0x18]
cmp rax, rbx
jne 0x1400fbc80
mov rcx, qword [rsp + 0xa0]
call sub.MFC80U.DLL_Ordinal_776
xor eax, eax
jmp 0x1400fc2b9
call fcn.140049470
mov rdi, rax
mov rbx, qword [rax]
mov edx, Ordinal_1311
lea rcx, str..._ntfscpyex.cpp
call fcn.1400f1280
mov r8, rax
lea rdx, str._s:_Write_mft_file_failed.
mov rcx, rdi
call qword [rbx + 0x10]
mov rcx, qword [r15 + 0x138]
mov rax, qword [rcx]
mov edx, 0xd2
call qword [rax + 0x40]
nop
lea rcx, [rsp + 0x60]
call fcn.1400ede30
nop
lea rcx, [rsp + 0x260]
call fcn.1400d9920
nop
lea rcx, [rsp + 0x98]
call fcn.1400ede30
xor eax, eax
jmp 0x1400fc2b9
call fcn.140049470
mov rsi, rax
xor edx, edx
mov r8d, 0x80
lea rbx, [0x14043d3a0]
mov rcx, rbx
call sub.ntdll.dll_memset
mov edx, 0x5c
lea rcx, str..._ntfscpyex.cpp
call qword [sym.imp.ntdll.dll_strrchr]
mov rdi, rax
test rax, rax
jne 0x1400fbd66
mov rbx, r13
jmp 0x1400fbdf0
mov byte [rsp + 0x42e0], 0
xor eax, eax
mov qword [rsp + 0x42e1], rax
mov word [rsp + 0x42e9], ax
mov byte [rsp + 0x42eb], al
mov r8d, Ordinal_1062
lea rdx, [0x1402dfd08]
lea rcx, [rsp + 0x42e0]
call qword [sym.imp.ntdll.dll_sprintf]
lea rdx, [rdi + 1]
mov rcx, rbx
sub rcx, rdx
nop
movzx eax, byte [rdx]
mov byte [rcx + rdx], al
add rdx, 1
test al, al
jne 0x1400fbdb0
mov rdi, rbx
xor eax, eax
or rcx, 0xffffffffffffffff
repne scasb al, byte [rdi]
lea rdx, [rsp + 0x42e0]
xor ecx, ecx
nop
nop
nop
nop
movzx eax, byte [rdx + rcx]
mov byte [rdi + rcx - 1], al
add rcx, 1
test al, al
jne 0x1400fbde0
mov rdi, qword [rsi]
mov eax, dword [r14]
mov dword [rsp + 0x20], eax
mov r9, qword [rsp + 0xb8]
mov r8, rbx
lea rdx, str._s:_Failed_to_initialize_DataRun_List__FrNumber:_I64d__AttrCode:0x_X.
mov rcx, rsi
call qword [rdi + 0x10]
mov rcx, qword [r15 + 0x138]
mov rax, qword [rcx]
mov edx, 0xd3
call qword [rax + 0x40]
nop
lea rcx, [rsp + 0x1f0]
call fcn.1400dbc40
nop
mov rcx, qword [rsp + 0x68]
test rcx, rcx
je 0x1400fbe7f
mov rbx, qword [rsp + 0x70]
cmp rcx, rbx
je 0x1400fbe7a
lea rdi, [rcx + 0x18]
nop
nop
mov rcx, qword [rdi]
test rcx, rcx
je 0x1400fbe5d
call sub.MFC80U.DLL_Ordinal_776
mov qword [rdi], r13
mov qword [rdi + 8], r13
mov qword [rdi + 0x10], r13
add rdi, 0x30
lea rax, [rdi - 0x18]
cmp rax, rbx
jne 0x1400fbe50
mov rcx, qword [rsp + 0x68]
call sub.MFC80U.DLL_Ordinal_776
mov qword [rsp + 0x68], r13
mov qword [rsp + 0x70], r13
mov qword [rsp + 0x78], r13
lea rcx, [rsp + 0x260]
call fcn.1400d9920
nop
mov rcx, qword [rsp + 0xa0]
test rcx, rcx
je 0x1400fbef2
mov rbx, qword [rsp + 0xa8]
cmp rcx, rbx
je 0x1400fbeed
lea rdi, [rcx + 0x18]
nop
nop
mov rcx, qword [rdi]
test rcx, rcx
je 0x1400fbecd
call sub.MFC80U.DLL_Ordinal_776
mov qword [rdi], r13
mov qword [rdi + 8], r13
mov qword [rdi + 0x10], r13
add rdi, 0x30
lea rax, [rdi - 0x18]
cmp rax, rbx
jne 0x1400fbec0
mov rcx, qword [rsp + 0xa0]
call sub.MFC80U.DLL_Ordinal_776
xor eax, eax
jmp 0x1400fc2b9
call fcn.140049470
mov rdi, rax
mov rbx, qword [rax]
mov edx, reloc.MFC80U.DLL_Ordinal_1021
lea rcx, str..._ntfscpyex.cpp
call fcn.1400f1280
mov r8, rax
mov r9, r13
lea rdx, str._s:_Failed_to_read_the_file_record__FrNumber:_I64d.
mov rcx, rdi
call qword [rbx + 0x10]
mov rcx, qword [r15 + 0x138]
mov rax, qword [rcx]
mov edx, 0xd2
call qword [rax + 0x40]
nop
lea rcx, [rsp + 0x260]
call fcn.1400d9920
nop
mov rcx, qword [rsp + 0xa0]
test rcx, rcx
je 0x1400fbf99
mov rbx, qword [rsp + 0xa8]
cmp rcx, rbx
je 0x1400fbf94
lea rdi, [rcx + 0x18]
mov rcx, qword [rdi]
test rcx, rcx
je 0x1400fbf74
call sub.MFC80U.DLL_Ordinal_776
mov qword [rdi], r14
mov qword [rdi + 8], r14
mov qword [rdi + 0x10], r14
add rdi, 0x30
lea rax, [rdi - 0x18]
cmp rax, rbx
jne 0x1400fbf67
mov rcx, qword [rsp + 0xa0]
call sub.MFC80U.DLL_Ordinal_776
xor eax, eax
jmp 0x1400fc2b9
mov edi, dword [rsp + 0x58]
movabs r9, 0x2aaaaaaaaaaaaaab
jmp 0x1400fc0fd
mov rcx, qword [r15 + 0x138]
mov rax, qword [rcx]
mov edx, 0x17
call qword [rax + 0x40]
call fcn.140049470
mov rsi, rax
xor edx, edx
mov r8d, 0x80
lea rbx, [0x14043d3a0]
mov rcx, rbx
call sub.ntdll.dll_memset
mov edx, 0x5c
lea rcx, str..._ntfscpyex.cpp
call qword [sym.imp.ntdll.dll_strrchr]
mov rdi, rax
test rax, rax
jne 0x1400fc008
xor ebp, ebp
mov rbx, rbp
jmp 0x1400fc092
mov byte [rsp + 0x42e0], 0
xor eax, eax
mov qword [rsp + 0x42e1], rax
mov word [rsp + 0x42e9], ax
mov byte [rsp + 0x42eb], al
mov r8d, 0x3ed
lea rdx, [0x1402dfd08]
lea rcx, [rsp + 0x42e0]
call qword [sym.imp.ntdll.dll_sprintf]
lea rdx, [rdi + 1]
mov rcx, rbx
sub rcx, rdx
nop
movzx eax, byte [rdx]
mov byte [rdx + rcx], al
add rdx, 1
test al, al
jne 0x1400fc050
mov rdi, rbx
xor eax, eax
or rcx, 0xffffffffffffffff
repne scasb al, byte [rdi]
lea rdx, [rsp + 0x42e0]
xor ecx, ecx
nop
nop
nop
nop
movzx eax, byte [rdx + rcx]
mov byte [rdi + rcx - 1], al
add rcx, 1
test al, al
jne 0x1400fc080
xor ebp, ebp
mov rax, qword [rsi]
mov r8, rbx
lea rdx, str._s:_User_cancel_operations.
mov rcx, rsi
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0xa0]
test rcx, rcx
je 0x1400fc0f6
mov rbx, qword [rsp + 0xa8]
cmp rcx, rbx
je 0x1400fc0f1
lea rdi, [rcx + 0x18]
mov rcx, qword [rdi]
test rcx, rcx
je 0x1400fc0d1
call sub.MFC80U.DLL_Ordinal_776
mov qword [rdi], rbp
mov qword [rdi + 8], rbp
mov qword [rdi + 0x10], rbp
add rdi, 0x30
lea rax, [rdi - 0x18]
cmp rax, rbx
jne 0x1400fc0c4
mov rcx, qword [rsp + 0xa0]
call sub.MFC80U.DLL_Ordinal_776
xor eax, eax
jmp 0x1400fc2b9
cmp dword [r15 + reloc.MFC80U.DLL_Ordinal_320], 0
jne 0x1400fc25c
test edi, edi
je 0x1400fc261
xor r12d, r12d
mov esi, r12d
nop
nop
mov r8, qword [rsp + 0xa8]
mov rdi, qword [rsp + 0xa0]
test rdi, rdi
jne 0x1400fc13a
mov rdx, r12
jmp 0x1400fc154
mov rcx, r8
sub rcx, rdi
mov rax, r9
imul rcx
sar rdx, 3
mov rax, rdx
shr rax, 0x3f
add rdx, rax
mov ebx, esi
cmp rbx, rdx
jae 0x1400fc249
test rdi, rdi
je 0x1400fc180
sub r8, rdi
mov rax, r9
imul r8
sar rdx, 3
mov rax, rdx
shr rax, 0x3f
add rdx, rax
cmp rbx, rdx
jb 0x1400fc18e
call qword [sym.imp.MSVCR80.dll__invalid_parameter_noinfo]
mov rdi, qword [rsp + 0xa0]
lea rdx, [rbx + rbx*2]
shl rdx, 4
add rdx, rdi
mov rcx, r15
call fcn.1400f23e0
mov ebp, eax
test eax, eax
jne 0x1400fc1b9
add esi, 1
movabs r9, 0x2aaaaaaaaaaaaaab
jmp 0x1400fc120
call fcn.140049470
mov rdi, rax
mov rbx, qword [rax]
mov edx, Ordinal_1359
lea rcx, str..._ntfscpyex.cpp
call fcn.1400f1280
mov r8, rax
lea rdx, str._s:_Move_file_data_error.
mov rcx, rdi
call qword [rbx + 0x10]
mov rcx, qword [r15 + 0x138]
mov rax, qword [rcx]
mov edx, ebp
call qword [rax + 0x40]
nop
mov rcx, qword [rsp + 0xa0]
test rcx, rcx
je 0x1400fc245
mov rbx, qword [rsp + 0xa8]
cmp rcx, rbx
je 0x1400fc240
lea rdi, [rcx + 0x18]
mov rcx, qword [rdi]
test rcx, rcx
je 0x1400fc220
call sub.MFC80U.DLL_Ordinal_776
mov qword [rdi], r12
mov qword [rdi + 8], r12
mov qword [rdi + 0x10], r12
add rdi, 0x30
lea rax, [rdi - 0x18]
cmp rax, rbx
jne 0x1400fc213
mov rcx, qword [rsp + 0xa0]
call sub.MFC80U.DLL_Ordinal_776
xor eax, eax
jmp 0x1400fc2b9
xor r9d, r9d
or r8, 0xffffffffffffffff
xor edx, edx
mov rcx, r15
call fcn.1400f1370
jmp 0x1400fc264
xor r12d, r12d
jmp 0x1400fc264
xor r12d, r12d
mov rcx, qword [rsp + 0xa0]
test rcx, rcx
je 0x1400fc2b4
mov rbx, qword [rsp + 0xa8]
cmp rcx, rbx
je 0x1400fc2af
lea rdi, [rcx + 0x18]
mov rcx, qword [rdi]
test rcx, rcx
je 0x1400fc28f
call sub.MFC80U.DLL_Ordinal_776
mov qword [rdi], r12
mov qword [rdi + 8], r12
mov qword [rdi + 0x10], r12
add rdi, 0x30
lea rcx, [rdi - 0x18]
cmp rcx, rbx
jne 0x1400fc282
mov rcx, qword [rsp + 0xa0]
call sub.MFC80U.DLL_Ordinal_776
mov eax, 1
mov rcx, qword [rsp + 0xcbc0]
xor rcx, rsp
call fcn.140161080
mov rbx, qword [rsp + 0xcc30]
movaps xmm6, xmmword [rsp + 0xcbd0]
add rsp, 0xcbe0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret