Function at 0x14000dd14
Capabilities:
Get disk information
Move file

Disassembly:
movsxd rax, dword [rcx - 4]
sub rcx, rax
jmp 0x140019b60
mov r11, rsp
push rdi
push r14
push r15
sub rsp, 0x570
mov qword [r11 - 0x428], 0xfffffffffffffffe
mov qword [r11 + 0x18], rbx
mov qword [r11 + 0x20], rsi
mov rax, qword [0x140079258]
xor rax, rsp
mov qword [rsp + 0x560], rax
mov rsi, rdx
mov rbx, rcx
mov qword [rsp + 0x40], rcx
mov eax, dword [rdx]
cmp eax, 0x50554b42
ja 0x14001aa23
je 0x14001a87b
cmp eax, 0x454d5453
je 0x14001a49b
cmp eax, 0x49455246
je 0x14001a336
cmp eax, 0x4a4e5355
je 0x14001a1b4
cmp eax, 0x4e465353
je 0x14001a023
cmp eax, 0x4e524450
jne 0x14001aa56
mov qword [r11 - 0x130], 7
xor edi, edi
mov qword [r11 - 0x138], rdi
mov word [rsp + 0x440], di
mov qword [r11 - 0x170], 7
mov qword [r11 - 0x178], rdi
mov word [rsp + 0x400], di
xor r9d, r9d
mov r8, qword [rdx + 8]
lea rdx, [r11 - 0x148]
add rcx, 0xffffffffffffffa0
call fcn.140010a00
test al, al
je 0x140019f54
lea rax, [rsp + 0x440]
mov r9, qword [rsp + 0x440]
mov r10, qword [rsp + 0x458]
cmp r10, 8
cmovae rax, r9
cmp word [rax], 0x5c
je 0x140019f54
mov r8, qword [rsi + 0x10]
test r8, r8
je 0x140019cc9
xor r9d, r9d
lea rdx, [rsp + 0x400]
lea rcx, [rbx - 0x60]
call fcn.140010a00
test al, al
je 0x140019f54
lea rax, [rsp + 0x400]
mov rcx, qword [rsp + 0x400]
mov rdx, qword [rsp + 0x418]
cmp rdx, 8
cmovae rax, rcx
cmp word [rax], 0x5c
je 0x140019f54
mov r10, qword [rsp + 0x458]
mov r9, qword [rsp + 0x440]
jmp 0x140019cd9
mov rdx, qword [rsp + 0x418]
mov rcx, qword [rsp + 0x400]
lea rax, [rsp + 0x440]
cmp r10, 8
cmovae rax, r9
mov r8, qword [rsp + 0x450]
cmp word [rax + r8*2 - 2], 0x5c
jne 0x140019d4c
lea rcx, [r8 - 1]
cmp r8, rcx
jae 0x140019d10
lea rcx, str.invalid_string_position
call fcn.14004b764
int3
mov qword [rsp + 0x450], rcx
lea rax, [rsp + 0x440]
cmp r10, 8
cmovae rax, r9
mov word [rax + rcx*2], di
mov r10, qword [rsp + 0x458]
mov r9, qword [rsp + 0x440]
mov rdx, qword [rsp + 0x418]
mov rcx, qword [rsp + 0x400]
mov r8, qword [rsp + 0x410]
test r8, r8
je 0x140019de8
lea rax, [rsp + 0x400]
cmp rdx, 8
cmovae rax, rcx
cmp word [rax + r8*2 - 2], 0x5c
jne 0x140019dd1
lea r9, [r8 - 1]
cmp r8, r9
jae 0x140019d8c
lea rcx, str.invalid_string_position
call fcn.14004b764
int3
mov qword [rsp + 0x410], r9
lea rax, [rsp + 0x400]
cmp rdx, 8
cmovae rax, rcx
mov word [rax + r9*2], di
mov r10, qword [rsp + 0x458]
mov r9, qword [rsp + 0x440]
mov rdx, qword [rsp + 0x418]
mov r8, qword [rsp + 0x410]
mov rcx, qword [rsp + 0x400]
test r8, r8
je 0x140019de8
lea rax, [rsp + 0x400]
cmp rdx, 8
cmovae rax, rcx
jmp 0x140019deb
mov rax, rdi
lea rcx, [rsp + 0x440]
cmp r10, 8
cmovae rcx, r9
mov r8d, 4
mov rdx, rax
call qword [sym.imp.KERNEL32.dll_MoveFileExW]
test eax, eax
jne 0x140019f37
movabs rax, 0xf35f747b3b21fef2
mov qword [rsp + 0x3e0], rax
lea rax, str.c:jaworkspacecommon_ati_cdp4443product_filewindowswinnt_dir.cpp
mov qword [rsp + 0x3e8], rax
lea rax, str.winnt_dir::IOCTL
mov qword [rsp + 0x3f0], rax
mov dword [rsp + 0x3f8], 0x7e9
movups xmm0, xmmword [rsp + 0x3e0]
movaps xmmword [rsp + 0x240], xmm0
movups xmm1, xmmword [rsp + 0x3f0]
movaps xmmword [rsp + 0x250], xmm1
lea rcx, [0x1400569ac]
call fcn.140005930
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0x40009
lea r9, [rsp + 0x440]
lea r8, [0x14005af48]
lea rdx, [rsp + 0x240]
lea rcx, [rsp + 0x150]
call fcn.1400147a0
nop
mov rcx, qword [rbx - 0x58]
movsxd rdx, dword [rcx + 4]
lea rcx, [rbx - 0x50]
add rcx, rdx
mov rdx, rax
call fcn.1400064c0
nop
mov rcx, qword [rsp + 0x150]
test rcx, rcx
je 0x140019ee7
lock dec dword [rcx]
jne 0x140019ee7
mov rbx, qword [rcx + 8]
mov rax, qword [rcx + 0x10]
call qword [rax]
mov rcx, rbx
test rbx, rbx
jne 0x140019ed0
cmp qword [rsp + 0x418], 8
jb 0x140019eff
mov rcx, qword [rsp + 0x400]
call fcn.1400376e4
mov qword [rsp + 0x418], 7
mov qword [rsp + 0x410], rdi
mov word [rsp + 0x400], di
cmp qword [rsp + 0x458], 8
jb 0x14001ba81
mov rcx, qword [rsp + 0x440]
jmp 0x14001ba7c
mov rax, qword [rbx - 0x58]
movsxd rcx, dword [rax + 4]
add rcx, 0xffffffffffffffb0
add rcx, rbx
lea rdx, [0x14007bf60]
call fcn.1400064c0
jmp 0x140019ee7
movabs rax, 0xf35f747b3b21fee5
mov qword [rsp + 0x3e0], rax
lea rax, str.c:jaworkspacecommon_ati_cdp4443product_filewindowswinnt_dir.cpp
mov qword [rsp + 0x3e8], rax
lea rax, str.winnt_dir::IOCTL
mov qword [rsp + 0x3f0], rax
mov dword [rsp + 0x3f8], 0x7dc
movups xmm0, xmmword [rsp + 0x3e0]
movaps xmmword [rsp + 0x280], xmm0
movups xmm1, xmmword [rsp + 0x3f0]
movaps xmmword [rsp + 0x290], xmm1
lea rcx, [0x1400569ac]
call fcn.140005930
mov r9, rax
mov r8d, 0x40009
lea rdx, [rsp + 0x280]
lea rcx, [rsp + 0xe0]
call fcn.140033ba0
nop
mov rcx, qword [rbx - 0x58]
movsxd rdx, dword [rcx + 4]
lea rcx, [rbx - 0x50]
add rcx, rdx
mov rdx, rax
call fcn.1400064c0
nop
mov rcx, qword [rsp + 0xe0]
test rcx, rcx
je 0x140019ee7
lock dec dword [rcx]
jne 0x140019ee7
mov rbx, qword [rcx + 8]
mov rax, qword [rcx + 0x10]
call qword [rax]
mov rcx, rbx
test rbx, rbx
jne 0x14001a003
jmp 0x140019ee7
mov rax, qword [rcx - 0x60]
mov dword [rsp + 0x30], 0x2000000
mov dword [rsp + 0x28], 3
mov dword [rsp + 0x20], 3
mov r9d, 0x40010000
xor r8d, r8d
mov rdx, qword [rdx + 8]
add rcx, 0xffffffffffffffa0
call qword [rax + 0x118]
mov r14, rax
mov rcx, qword [rbx - 0x58]
movsxd r8, dword [rcx + 4]
mov rax, qword [r8 + rbx - 0x50]
test rax, rax
je 0x14001a075
cmp dword [rax + 4], 0
jne 0x14001ba81
mov rdx, qword [rsi + 0x10]
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_SetFileShortNameW]
test eax, eax
jne 0x14001a1a6
mov qword [rsp + 0x3f8], 7
xor edi, edi
mov qword [rsp + 0x3f0], rdi
mov word [rsp + 0x3e0], di
lea rdx, [rsp + 0x3e0]
lea rcx, [rbx - 0x60]
call fcn.140018280
movabs rax, 0xf35f747b3b21ff92
mov qword [rsp + 0x4a0], rax
lea rax, str.c:jaworkspacecommon_ati_cdp4443product_filewindowswinnt_dir.cpp
mov qword [rsp + 0x4a8], rax
lea rax, str.winnt_dir::IOCTL
mov qword [rsp + 0x4b0], rax
mov dword [rsp + 0x4b8], 0x889
movups xmm0, xmmword [rsp + 0x4a0]
movaps xmmword [rsp + 0x180], xmm0
movups xmm1, xmmword [rsp + 0x4b0]
movaps xmmword [rsp + 0x190], xmm1
lea rcx, [0x1400569ac]
call fcn.140005930
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0x40009
lea r9, [rsp + 0x3e0]
lea r8, [0x14005b330]
lea rdx, [rsp + 0x180]
lea rcx, [rsp + 0x158]
call fcn.1400147a0
nop
mov rcx, qword [rbx - 0x58]
movsxd rdx, dword [rcx + 4]
lea rcx, [rbx - 0x50]
add rcx, rdx
mov rdx, rax
call fcn.1400064c0
nop
mov rcx, qword [rsp + 0x158]
test rcx, rcx
je 0x14001a18e
lock dec dword [rcx]
jne 0x14001a18e
mov rbx, qword [rcx + 8]
mov rax, qword [rcx + 0x10]
call qword [rax]
mov rcx, rbx
test rbx, rbx
jne 0x14001a177
cmp qword [rsp + 0x3f8], 8
jb 0x14001a1a6
mov rcx, qword [rsp + 0x3e0]
call fcn.1400376e4
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x14001ba81
mov qword [rsp + 0x558], 7
xor edi, edi
mov qword [rsp + 0x550], rdi
mov word [rsp + 0x540], di
add rcx, 0xffffffffffffffa0
lea rdx, [rsp + 0x540]
call fcn.140018400
test al, al
jne 0x14001a2c9
movabs rax, 0xf35f747b3b21ffd2
mov qword [rsp + 0x3e0], rax
lea rax, str.c:jaworkspacecommon_ati_cdp4443product_filewindowswinnt_dir.cpp
mov qword [rsp + 0x3e8], rax
lea rax, str.winnt_dir::IOCTL
mov qword [rsp + 0x3f0], rax
mov dword [rsp + 0x3f8], 0x8c9
movups xmm0, xmmword [rsp + 0x3e0]
movaps xmmword [rsp + 0x1a0], xmm0
movups xmm1, xmmword [rsp + 0x3f0]
movaps xmmword [rsp + 0x1b0], xmm1
lea rcx, [0x140056994]
call fcn.140005930
mov r9, rax
mov r8d, 0x40007
lea rdx, [rsp + 0x1a0]
lea rcx, [rsp + 0xb0]
call fcn.140033ba0
nop
mov rcx, qword [rbx - 0x58]
movsxd rdx, dword [rcx + 4]
lea rcx, [rbx - 0x50]
add rcx, rdx
mov rdx, rax
call fcn.1400064c0
nop
mov rcx, qword [rsp + 0xb0]
test rcx, rcx
je 0x14001a2ad
lock dec dword [rcx]
jne 0x14001a2ad
mov rbx, qword [rcx + 8]
mov rax, qword [rcx + 0x10]
call qword [rax]
mov rcx, rbx
test rbx, rbx
jne 0x14001a296
cmp qword [rsp + 0x558], 8
jb 0x14001ba81
mov rcx, qword [rsp + 0x540]
jmp 0x14001ba7c
mov ecx, 0x68
call fcn.14003763c
mov qword [rsp + 0x48], rax
test rax, rax
je 0x14001a2f6
mov r8d, 1
lea rdx, [rsp + 0x540]
mov rcx, rax
call fcn.1400131a0
mov rdi, rax
mov qword [rsp + 0x98], rdi
lea rcx, [rsi + 8]
lea rdx, [rsp + 0x98]
call fcn.140012d60
mov rax, qword [rsp + 0x98]
test rax, rax
je 0x14001a331
mov rcx, qword [rax]
movsxd rcx, dword [rcx + 4]
add rcx, rax
mov rax, qword [rcx]
mov edx, 1
call qword [rax]
nop
jmp 0x14001a2ad
mov qword [rsp + 0x518], 7
xor edi, edi
mov qword [rsp + 0x510], rdi
mov word [rsp + 0x500], di
add rcx, 0xffffffffffffffa0
lea rdx, [rsp + 0x500]
call fcn.140018400
test al, al
jne 0x14001a44b
movabs rax, 0xf35f747b3b21ffbd
mov qword [rsp + 0x3e0], rax
lea rax, str.c:jaworkspacecommon_ati_cdp4443product_filewindowswinnt_dir.cpp
mov qword [rsp + 0x3e8], rax
lea rax, str.winnt_dir::IOCTL
mov qword [rsp + 0x3f0], rax
mov dword [rsp + 0x3f8], 0x8b4
movups xmm0, xmmword [rsp + 0x3e0]
movaps xmmword [rsp + 0x1c0], xmm0
movups xmm1, xmmword [rsp + 0x3f0]
movaps xmmword [rsp + 0x1d0], xmm1
lea rcx, [0x140056994]
call fcn.140005930
mov r9, rax
mov r8d, 0x40007
lea rdx, [rsp + 0x1c0]
lea rcx, [rsp + 0x130]
call fcn.140033ba0
nop
mov rcx, qword [rbx - 0x58]
movsxd rdx, dword [rcx + 4]
lea rcx, [rbx - 0x50]
add rcx, rdx
mov rdx, rax
call fcn.1400064c0
nop
mov rcx, qword [rsp + 0x130]
test rcx, rcx
je 0x14001a42f
lock dec dword [rcx]
jne 0x14001a42f
mov rbx, qword [rcx + 8]
mov rax, qword [rcx + 0x10]
call qword [rax]
mov rcx, rbx
test rbx, rbx
jne 0x14001a418
cmp qword [rsp + 0x518], 8
jb 0x14001ba81
mov rcx, qword [rsp + 0x500]
jmp 0x14001ba7c
mov ecx, 0x30
call fcn.14003763c
mov qword [rsp + 0x48], rax
test rax, rax
je 0x14001a47a
mov r8d, 1
lea rdx, [rsp + 0x500]
mov rcx, rax
call fcn.140012e70
mov rdx, rax
jmp 0x14001a47d
mov rdx, rdi
test rdx, rdx
je 0x14001a48c
mov rax, qword [rdx]
movsxd rdi, dword [rax + 0xc]
add rdi, rdx
lea rcx, [rsi + 8]
mov rdx, rdi
call fcn.14001f3b0
nop
jmp 0x14001a42f
mov qword [rsp + 0x4d8], 7
xor edi, edi
mov qword [rsp + 0x4d0], rdi
mov word [rsp + 0x4c0], di
add rcx, 0xffffffffffffffa0
xor r9d, r9d
mov r8, qword [rdx + 8]
lea rdx, [rsp + 0x4c0]
call fcn.1400181b0
test al, al
jne 0x14001a5b0
movabs rax, 0xf35f747b3b21ff9d
mov qword [rsp + 0x3e0], rax
lea rax, str.c:jaworkspacecommon_ati_cdp4443product_filewindowswinnt_dir.cpp
mov qword [rsp + 0x3e8], rax
lea rax, str.winnt_dir::IOCTL
mov qword [rsp + 0x3f0], rax
mov dword [rsp + 0x3f8], 0x894
movups xmm0, xmmword [rsp + 0x3e0]
movaps xmmword [rsp + 0x2c0], xmm0
movups xmm1, xmmword [rsp + 0x3f0]
movaps xmmword [rsp + 0x2d0], xmm1
lea rcx, [0x140056994]
call fcn.140005930
mov r9, rax
mov r8d, 0x40007
lea rdx, [rsp + 0x2c0]
lea rcx, [rsp + 0xc0]
call fcn.140033ba0
nop
mov rcx, qword [rbx - 0x58]
movsxd rdx, dword [rcx + 4]
lea rcx, [rbx - 0x50]
add rcx, rdx
mov rdx, rax
call fcn.1400064c0
nop
mov rcx, qword [rsp + 0xc0]
test rcx, rcx
je 0x14001a85f
nop dword [rax + rax]
lock dec dword [rcx]
jne 0x14001a85f
mov rbx, qword [rcx + 8]
mov rax, qword [rcx + 0x10]
call qword [rax]
mov rcx, rbx
test rbx, rbx
jne 0x14001a590
jmp 0x14001a85f
mov rax, qword [rbx - 0x58]
movsxd rcx, dword [rax + 4]
lea r8, [rbx - 0x50]
add r8, rcx
lea rdx, [rsp + 0x4c0]
lea rcx, [rsp + 0x88]
call fcn.14002f550
nop
mov rax, qword [rbx - 0x58]
movsxd rcx, dword [rax + 4]
mov rax, qword [rcx + rbx - 0x50]
test rax, rax
je 0x14001a5f1
cmp dword [rax + 4], 0
jne 0x14001a851
lea rcx, [rsp + 0x4c0]
cmp qword [rsp + 0x4d8], 8
cmovae rcx, qword [rsp + 0x4c0]
mov qword [rsp + 0x30], rdi
mov dword [rsp + 0x28], 0x2200000
mov dword [rsp + 0x20], 3
xor r9d, r9d
xor r8d, r8d
mov edx, 0x100
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov rdi, rax
cmp rax, 0xffffffffffffffff
jne 0x14001a720
movabs rax, 0xf35f747b3b21ffa9
mov qword [rsp + 0x3e0], rax
lea rax, str.c:jaworkspacecommon_ati_cdp4443product_filewindowswinnt_dir.cpp
mov qword [rsp + 0x3e8], rax
lea rax, str.winnt_dir::IOCTL
mov qword [rsp + 0x3f0], rax
mov dword [rsp + 0x3f8], 0x8a0
movups xmm0, xmmword [rsp + 0x3e0]
movaps xmmword [rsp + 0x380], xmm0
movups xmm1, xmmword [rsp + 0x3f0]
movaps xmmword [rsp + 0x390], xmm1
lea rcx, [0x140056994]
call fcn.140005930
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0x40007
lea r9, [rsp + 0x4c0]
lea r8, str.OpenFileW
lea rdx, [rsp + 0x380]
lea rcx, [rsp + 0x110]
call fcn.1400147a0
nop
mov rcx, qword [rbx - 0x58]
movsxd rdx, dword [rcx + 4]
lea rcx, [rbx - 0x50]
add rcx, rdx
mov rdx, rax
call fcn.1400064c0
nop
mov rcx, qword [rsp + 0x110]
test rcx, rcx
je 0x14001a851
lock dec dword [rcx]
jne 0x14001a851
mov rbx, qword [rcx + 8]
mov rax, qword [rcx + 0x10]
call qword [rax]
mov rcx, rbx
test rbx, rbx
jne 0x14001a700
jmp 0x14001a851
mov rcx, qword [rsi + 0x10]
call fcn.140010cb0
mov qword [rsp + 0xd0], rax
mov rcx, qword [rsi + 0x18]
call fcn.140010cb0
mov qword [rsp + 0x48], rax
mov rcx, qword [rsi + 0x20]
call fcn.140010cb0
mov qword [rsp + 0xa0], rax
lea r9, [rsp + 0xd0]
lea r8, [rsp + 0xa0]
lea rdx, [rsp + 0x48]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_SetFileTime]
test eax, eax
jne 0x14001a847
movabs rax, 0xf35f747b3b21ffb0
mov qword [rsp + 0x3e0], rax
lea rax, str.c:jaworkspacecommon_ati_cdp4443product_filewindowswinnt_dir.cpp
mov qword [rsp + 0x3e8], rax
lea rax, str.winnt_dir::IOCTL
mov qword [rsp + 0x3f0], rax
mov dword [rsp + 0x3f8], 0x8a7
movups xmm0, xmmword [rsp + 0x3e0]
movaps xmmword [rsp + 0x300], xmm0
movups xmm1, xmmword [rsp + 0x3f0]
movaps xmmword [rsp + 0x310], xmm1
lea rcx, [0x1400569d8]
call fcn.140005930
mov qword [rsp + 0x20], rax
mov r9d, 0x40003
lea r8, [0x140059cc0]
lea rdx, [rsp + 0x300]
lea rcx, [rsp + 0x120]
call fcn.14000c540
nop
mov rcx, qword [rbx - 0x58]
movsxd rdx, dword [rcx + 4]
lea rcx, [rbx - 0x50]
add rcx, rdx
mov rdx, rax
call fcn.1400064c0
nop
mov rcx, qword [rsp + 0x120]
test rcx, rcx
je 0x14001a847
nop word [rax + rax]
lock dec dword [rcx]
jne 0x14001a847
mov rbx, qword [rcx + 8]
mov rax, qword [rcx + 0x10]
call qword [rax]
mov rcx, rbx
test rbx, rbx
jne 0x14001a830
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
lea rcx, [rsp + 0x88]
call fcn.14002f6c0
nop
cmp qword [rsp + 0x4d8], 8
jb 0x14001ba81
mov rcx, qword [rsp + 0x4c0]
jmp 0x14001ba7c
mov qword [rsp + 0x538], 7
xor edi, edi
mov qword [rsp + 0x530], rdi
mov word [rsp + 0x520], di
mov r8, qword [rdx + 0x20]
test r8, r8
je 0x14001a8ac
mov r8, qword [r8 + 8]
add r8, 0x10
jmp 0x14001a8b3
lea r8, [0x140059760]
add rcx, 0xffffffffffffffa0
xor r9d, r9d
lea rdx, [rsp + 0x520]
call fcn.1400181b0
test al, al
je 0x14001a940
lea r8, [rsi + 8]
lea rdx, [rsp + 0x520]
cmp qword [rsp + 0x538], 8
cmovae rdx, qword [rsp + 0x520]
lea rcx, [rsp + 0xf0]
call fcn.1400209b0
nop
mov rcx, qword [rbx - 0x58]
movsxd rdx, dword [rcx + 4]
lea rcx, [rbx - 0x50]
add rcx, rdx
mov rdx, rax
call fcn.1400064c0
nop
mov rcx, qword [rsp + 0xf0]
test rcx, rcx
je 0x14001aa07
lock dec dword [rcx]
jne 0x14001aa07
mov rbx, qword [rcx + 8]
mov rax, qword [rcx + 0x10]
call qword [rax]
mov rcx, rbx
test rbx, rbx
jne 0x14001a920
jmp 0x14001aa07
movabs rax, 0xf35f747b3b21fed0
mov qword [rsp + 0x3e0], rax
lea rax, str.c:jaworkspacecommon_ati_cdp4443product_filewindowswinnt_dir.cpp
mov qword [rsp + 0x3e8], rax
lea rax, str.winnt_dir::IOCTL
mov qword [rsp + 0x3f0], rax
mov dword [rsp + 0x3f8], 0x7c7
movups xmm0, xmmword [rsp + 0x3e0]
movaps xmmword [rsp + 0x1e0], xmm0
movups xmm1, xmmword [rsp + 0x3f0]
movaps xmmword [rsp + 0x1f0], xmm1
lea rcx, [0x140056994]
call fcn.140005930
mov r9, rax
mov r8d, 0x40007
lea rdx, [rsp + 0x1e0]
lea rcx, [rsp + 0x140]
call fcn.140033ba0
nop
mov rcx, qword [rbx - 0x58]
movsxd rdx, dword [rcx + 4]
lea rcx, [rbx - 0x50]
add rcx, rdx
mov rdx, rax
call fcn.1400064c0
nop
mov rcx, qword [rsp + 0x140]
test rcx, rcx
je 0x14001aa07
nop dword [rax + rax]
lock dec dword [rcx]
jne 0x14001aa07
mov rbx, qword [rcx + 8]
mov rax, qword [rcx + 0x10]
call qword [rax]
mov rcx, rbx
test rbx, rbx
jne 0x14001a9f0
cmp qword [rsp + 0x538], 8
jb 0x14001ba81
mov rcx, qword [rsp + 0x520]
jmp 0x14001ba7c
cmp eax, 0x51535253
je 0x14001b834
cmp eax, 0x52504d43
je 0x14001b413
cmp eax, 0x52545352
je 0x14001b272
cmp eax, 0x54505243
je 0x14001ae70
cmp eax, 0x54534647
je 0x14001aa60
call fcn.14000db50
jmp 0x14001ba81
add rsi, 4
xor edi, edi
mov word [rsi], di
mov qword [rsp + 0x478], 7
mov qword [rsp + 0x470], rdi
mov word [rsp + 0x460], di
lea rdx, [rsp + 0x460]
add rcx, 0xffffffffffffffa0
call fcn.140018280
test al, al
jne 0x14001ab83
movabs rax, 0xf35f747b3b21ff50
mov qword [rsp + 0x3e0], rax
lea rax, str.c:jaworkspacecommon_ati_cdp4443product_filewindowswinnt_dir.cpp
mov qword [rsp + 0x3e8], rax
lea rax, str.winnt_dir::IOCTL
mov qword [rsp + 0x3f0], rax
mov dword [rsp + 0x3f8], 0x847
movups xmm0, xmmword [rsp + 0x3e0]
movaps xmmword [rsp + 0x220], xmm0
movups xmm1, xmmword [rsp + 0x3f0]
movaps xmmword [rsp + 0x230], xmm1
lea rcx, [0x140056994]
call fcn.140005930
mov r9, rax
mov r8d, 0x40007
lea rdx, [rsp + 0x220]
lea rcx, [rsp + 0x100]
call fcn.140033ba0
nop
mov rcx, qword [rbx - 0x58]
movsxd rdx, dword [rcx + 4]
lea rcx, [rbx - 0x50]
add rcx, rdx
mov rdx, rax
call fcn.1400064c0
nop
mov rcx, qword [rsp + 0x100]
test rcx, rcx
je 0x14001ab67
nop dword [rax]
lock dec dword [rcx]
jne 0x14001ab67
mov rbx, qword [rcx + 8]
mov rax, qword [rcx + 0x10]
call qword [rax]
mov rcx, rbx
test rbx, rbx
jne 0x14001ab50
cmp qword [rsp + 0x478], 8
jb 0x14001ba81
mov rcx, qword [rsp + 0x460]
jmp 0x14001ba7c
mov rax, qword [rbx - 0x58]
movsxd rcx, dword [rax + 4]
lea r8, [rbx - 0x50]
add r8, rcx
lea rdx, [rsp + 0x460]
lea rcx, [rsp + 0x40]
call fcn.14002f550
nop
mov rax, qword [rbx - 0x58]
movsxd rcx, dword [rax + 4]
mov rax, qword [rcx + rbx - 0x50]
test rax, rax
je 0x14001abc9
cmp dword [rax + 4], 0
je 0x14001abc9
lea rcx, [rsp + 0x40]
call fcn.14002f6c0
jmp 0x14001ab67
lea rcx, [rsp + 0x460]
cmp qword [rsp + 0x478], 8
cmovae rcx, qword [rsp + 0x460]
mov dword [rsp + 0x38], 0x40
mov qword [rsp + 0x30], rsi
lea rax, [rsp + 0x50]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x54]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
call qword [sym.imp.KERNEL32.dll_GetVolumeInformationW]
test eax, eax
je 0x14001ac41
mov rax, qword [rbx - 0x58]
movsxd rcx, dword [rax + 4]
add rcx, 0xffffffffffffffb0
add rcx, rbx
lea rdx, [0x14007bf60]
call fcn.1400064c0
nop
lea rcx, [rsp + 0x40]
call fcn.14002f6c0
jmp 0x14001ab67
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x90
jne 0x14001ad8d
lea rdx, [rsp + 0x460]
lea rcx, [rbx - 0x60]
call fcn.140018400
test al, al
jne 0x14001ad3c
movabs rax, 0xf35f747b3b21ff67
mov qword [rsp + 0x3e0], rax
lea rax, str.c:jaworkspacecommon_ati_cdp4443product_filewindowswinnt_dir.cpp
mov qword [rsp + 0x3e8], rax
lea rax, str.winnt_dir::IOCTL
mov qword [rsp + 0x3f0], rax
mov dword [rsp + 0x3f8], 0x85e
movups xmm0, xmmword [rsp + 0x3e0]
movaps xmmword [rsp + 0x260], xmm0
movups xmm1, xmmword [rsp + 0x3f0]
movaps xmmword [rsp + 0x270], xmm1
lea rcx, [0x140056994]
call fcn.140005930
mov r9, rax
mov r8d, 0x40007
lea rdx, [rsp + 0x260]
lea rcx, [rsp + 0xa8]
call fcn.140033ba0
nop
mov rcx, qword [rbx - 0x58]
movsxd rdx, dword [rcx + 4]
lea rcx, [rbx - 0x50]
add rcx, rdx
mov rdx, rax
call fcn.1400064c0
nop
mov rcx, qword [rsp + 0xa8]
test rcx, rcx
je 0x14001ad2d
lock dec dword [rcx]
jne 0x14001ad2d
mov rbx, qword [rcx + 8]
mov rax, qword [rcx + 0x10]
call qword [rax]
mov rcx, rbx
test rbx, rbx
jne 0x14001ad16
lea rcx, [rsp + 0x40]
call fcn.14002f6c0
jmp 0x14001ab67
lea rcx, [rsp + 0x460]
cmp qword [rsp + 0x478], 8
cmovae rcx, qword [rsp + 0x460]
mov dword [rsp + 0x38], 0x40
mov qword [rsp + 0x30], rsi
lea rax, [rsp + 0x50]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x54]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
call qword [sym.imp.KERNEL32.dll_GetVolumeInformationW]
test eax, eax
jne 0x14001ac16
movabs rax, 0xf35f747b3b21ff72
mov qword [rsp + 0x3e0], rax
lea rax, str.c:jaworkspacecommon_ati_cdp4443product_filewindowswinnt_dir.cpp
mov qword [rsp + 0x3e8], rax
lea rax, str.winnt_dir::IOCTL
mov qword [rsp + 0x3f0], rax
mov dword [rsp + 0x3f8], 0x869
movups xmm0, xmmword [rsp + 0x3e0]
movaps xmmword [rsp + 0x2a0], xmm0
movups xmm1, xmmword [rsp + 0x3f0]
movaps xmmword [rsp + 0x2b0], xmm1
lea rcx, [0x140056994]
call fcn.140005930
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0x40007
lea r9, [rsp + 0x460]
lea r8, [0x14005b0b0]
lea rdx, [rsp + 0x2a0]
lea rcx, [rsp + 0xb8]
call fcn.1400147a0
nop
mov rcx, qword [rbx - 0x58]
movsxd rdx, dword [rcx + 4]
lea rcx, [rbx - 0x50]
add rcx, rdx
mov rdx, rax
call fcn.1400064c0
nop
mov rcx, qword [rsp + 0xb8]
test rcx, rcx
je 0x14001ac32
nop
lock dec dword [rcx]
jne 0x14001ac32
mov rbx, qword [rcx + 8]
mov rax, qword [rcx + 0x10]
call qword [rax]
mov rcx, rbx
test rbx, rbx
jne 0x14001ae50
jmp 0x14001ac32
mov qword [rsp + 0x498], 7
xor edi, edi
mov qword [rsp + 0x490], rdi
mov word [rsp + 0x480], di
add rcx, 0xffffffffffffffa0
xor r9d, r9d
mov r8, qword [rdx + 8]
lea rdx, [rsp + 0x480]
call fcn.1400181b0
test al, al
jne 0x14001af79
movabs rax, 0xf35f747b3b21ff17
mov qword [rsp + 0x3e0], rax
lea rax, str.c:jaworkspacecommon_ati_cdp4443product_filewindowswinnt_dir.cpp
mov qword [rsp + 0x3e8], rax
lea rax, str.winnt_dir::IOCTL
mov qword [rsp + 0x3f0], rax
mov dword [rsp + 0x3f8], 0x80e
movups xmm0, xmmword [rsp + 0x3e0]
movaps xmmword [rsp + 0x2e0], xmm0
movups xmm1, xmmword [rsp + 0x3f0]
movaps xmmword [rsp + 0x2f0], xmm1
lea rcx, [0x140056994]
call fcn.140005930
mov r9, rax
mov r8d, 0x40007
lea rdx, [rsp + 0x2e0]
lea rcx, [rsp + 0xc8]
call fcn.140033ba0
nop
mov rcx, qword [rbx - 0x58]
movsxd rdx, dword [rcx + 4]
lea rcx, [rbx - 0x50]
add rcx, rdx
mov rdx, rax
call fcn.1400064c0
nop
mov rcx, qword [rsp + 0xc8]
test rcx, rcx
je 0x14001afc8
nop dword [rax]
lock dec dword [rcx]
jne 0x14001afc8
mov rbx, qword [rcx + 8]
mov rax, qword [rcx + 0x10]
call qword [rax]
mov rcx, rbx
test rbx, rbx
jne 0x14001af60
jmp 0x14001afc8
mov rax, qword [rbx - 0x58]
lea r8, [rbx - 0x50]
lea rdx, [rsp + 0x480]
movsxd rcx, dword [rax + 4]
add r8, rcx
cmp byte [rsi + 0x10], 0
je 0x14001b110
lea rcx, [rsp + 0x70]
call fcn.14002f550
nop
mov rax, qword [rbx - 0x58]
movsxd rcx, dword [rax + 4]
mov rax, qword [rcx + rbx - 0x50]
test rax, rax
je 0x14001afe4
cmp dword [rax + 4], 0
je 0x14001afe4
lea rcx, [rsp + 0x70]
call fcn.14002f6c0
nop
cmp qword [rsp + 0x498], 8
jb 0x14001ba81
mov rcx, qword [rsp + 0x480]
jmp 0x14001ba7c
lea rcx, [rsp + 0x480]
cmp qword [rsp + 0x498], 8
cmovae rcx, qword [rsp + 0x480]
call qword [sym.imp.ADVAPI32.dll_EncryptFileW]
test eax, eax
jne 0x14001b0f0
movabs rax, 0xf35f747b3b21ff20
mov qword [rsp + 0x3e0], rax
lea rax, str.c:jaworkspacecommon_ati_cdp4443product_filewindowswinnt_dir.cpp
mov qword [rsp + 0x3e8], rax
lea rax, str.winnt_dir::IOCTL
mov qword [rsp + 0x3f0], rax
mov dword [rsp + 0x3f8], 0x817
movups xmm0, xmmword [rsp + 0x3e0]
movaps xmmword [rsp + 0x320], xmm0
movups xmm1, xmmword [rsp + 0x3f0]
movaps xmmword [rsp + 0x330], xmm1
lea rcx, [0x140056918]
call fcn.140005930
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0x40014
lea r9, [rsp + 0x480]
lea r8, [0x14005b310]
lea rdx, [rsp + 0x320]
lea rcx, [rsp + 0xd8]
call fcn.1400147a0
nop
mov rcx, qword [rbx - 0x58]
movsxd rdx, dword [rcx + 4]
lea rcx, [rbx - 0x50]
add rcx, rdx
mov rdx, rax
call fcn.1400064c0
nop
mov rcx, qword [rsp + 0xd8]
test rcx, rcx
je 0x14001afbd
nop
lock dec dword [rcx]
jne 0x14001afbd
mov rbx, qword [rcx + 8]
mov rax, qword [rcx + 0x10]
call qword [rax]
mov rcx, rbx
test rbx, rbx
jne 0x14001b0d0
jmp 0x14001afbd
mov rax, qword [rbx - 0x58]
movsxd rcx, dword [rax + 4]
add rcx, 0xffffffffffffffb0
add rcx, rbx
lea rdx, [0x14007bf60]
call fcn.1400064c0
jmp 0x14001afbd
lea rcx, [rsp + 0x80]
call fcn.14002f550
nop
mov rax, qword [rbx - 0x58]
movsxd rcx, dword [rax + 4]
mov rax, qword [rcx + rbx - 0x50]
test rax, rax
je 0x14001b143
cmp dword [rax + 4], 0
je 0x14001b143
lea rcx, [rsp + 0x80]
jmp 0x14001afc2
lea rcx, [rsp + 0x480]
cmp qword [rsp + 0x498], 8
cmovae rcx, qword [rsp + 0x480]
xor edx, edx
call qword [sym.imp.ADVAPI32.dll_DecryptFileW]
test eax, eax
jne 0x14001b249
movabs rax, 0xf35f747b3b21ff2c
mov qword [rsp + 0x3e0], rax
lea rax, str.c:jaworkspacecommon_ati_cdp4443product_filewindowswinnt_dir.cpp
mov qword [rsp + 0x3e8], rax
lea rax, str.winnt_dir::IOCTL
mov qword [rsp + 0x3f0], rax
mov dword [rsp + 0x3f8], 0x823
movups xmm0, xmmword [rsp + 0x3e0]
movaps xmmword [rsp + 0x360], xmm0
movups xmm1, xmmword [rsp + 0x3f0]
movaps xmmword [rsp + 0x370], xmm1
lea rcx, [0x140056918]
call fcn.140005930
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0x40014
lea r9, [rsp + 0x480]
lea r8, [0x14005b320]
lea rdx, [rsp + 0x360]
lea rcx, [rsp + 0xe8]
call fcn.1400147a0
nop
mov rcx, qword [rbx - 0x58]
movsxd rdx, dword [rcx + 4]
lea rcx, [rbx - 0x50]
add rcx, rdx
mov rdx, rax
call fcn.1400064c0
nop
mov rcx, qword [rsp + 0xe8]
test rcx, rcx
je 0x14001b265
nop dword [rax + rax]
lock dec dword [rcx]
jne 0x14001b265
mov rbx, qword [rcx + 8]
mov rax, qword [rcx + 0x10]
call qword [rax]
mov rcx, rbx
test rbx, rbx
jne 0x14001b230
jmp 0x14001b265
mov rax, qword [rbx - 0x58]
movsxd rcx, dword [rax + 4]
add rcx, 0xffffffffffffffb0
add rcx, rbx
lea rdx, [0x14007bf60]
call fcn.1400064c0
nop
lea rcx, [rsp + 0x80]
jmp 0x14001afc2
mov qword [rsp + 0x4b8], 7
xor edi, edi
mov qword [rsp + 0x4b0], rdi
mov word [rsp + 0x4a0], di
mov rax, qword [rdx + 0x20]
lea r8, [0x140059760]
test rax, rax
cmovne r8, rax
add rcx, 0xffffffffffffffa0
xor r9d, r9d
lea rdx, [rsp + 0x4a0]
call fcn.1400181b0
test al, al
je 0x14001b330
lea r8, [rsi + 8]
lea rdx, [rsp + 0x4a0]
cmp qword [rsp + 0x4b8], 8
cmovae rdx, qword [rsp + 0x4a0]
lea rcx, [rsp + 0xf8]
call fcn.140024480
nop
mov rcx, qword [rbx - 0x58]
movsxd rdx, dword [rcx + 4]
lea rcx, [rbx - 0x50]
add rcx, rdx
mov rdx, rax
call fcn.1400064c0
nop
mov rcx, qword [rsp + 0xf8]
test rcx, rcx
je 0x14001b3f7
nop
lock dec dword [rcx]
jne 0x14001b3f7
mov rbx, qword [rcx + 8]
mov rax, qword [rcx + 0x10]
call qword [rax]
mov rcx, rbx
test rbx, rbx
jne 0x14001b310
jmp 0x14001b3f7
movabs rax, 0xf35f747b3b21feda
mov qword [rsp + 0x3e0], rax
lea rax, str.c:jaworkspacecommon_ati_cdp4443product_filewindowswinnt_dir.cpp
mov qword [rsp + 0x3e8], rax
lea rax, str.winnt_dir::IOCTL
mov qword [rsp + 0x3f0], rax
mov dword [rsp + 0x3f8], 0x7d1
movups xmm0, xmmword [rsp + 0x3e0]
movaps xmmword [rsp + 0x3c0], xmm0
movups xmm1, xmmword [rsp + 0x3f0]
movaps xmmword [rsp + 0x3d0], xmm1
lea rcx, method.i_file.virtual_0
call fcn.140005930
mov r9, rax
mov r8d, 0x4000a
lea rdx, [rsp + 0x3c0]
lea rcx, [rsp + 0x108]
call fcn.140033ba0
nop
mov rcx, qword [rbx - 0x58]
movsxd rdx, dword [rcx + 4]
lea rcx, [rbx - 0x50]
add rcx, rdx
mov rdx, rax
call fcn.1400064c0
nop
mov rcx, qword [rsp + 0x108]
test rcx, rcx
je 0x14001b3f7
nop dword [rax + rax]
lock dec dword [rcx]
jne 0x14001b3f7
mov rbx, qword [rcx + 8]
mov rax, qword [rcx + 0x10]
call qword [rax]
mov rcx, rbx
test rbx, rbx
jne 0x14001b3e0
cmp qword [rsp + 0x4b8], 8
jb 0x14001ba81
mov rcx, qword [rsp + 0x4a0]
jmp 0x14001ba7c
mov qword [rsp + 0x438], 7
xor edi, edi
mov qword [rsp + 0x430], rdi
mov word [rsp + 0x420], di
add rcx, 0xffffffffffffffa0
xor r9d, r9d
lea r8, [0x14005ae48]
lea rdx, [rsp + 0x420]
call fcn.140010a00
test al, al
je 0x14001b765
mov rax, qword [rsp + 0x430]
test rax, rax
je 0x14001b765
lea rdx, [rax - 1]
cmp rdx, rax
ja 0x14001b496
mov qword [rsp + 0x430], rdx
lea rax, [rsp + 0x420]
cmp qword [rsp + 0x438], 8
cmovae rax, qword [rsp + 0x420]
mov word [rax + rdx*2], di
jmp 0x14001b4a9
xor r8d, r8d
sub rdx, rax
lea rcx, [rsp + 0x420]
call fcn.140009d70
lea rax, [rsp + 0x420]
mov rcx, qword [rsp + 0x420]
mov r8, qword [rsp + 0x438]
cmp r8, 8
cmovae rax, rcx
cmp word [rax], 0x5c
je 0x14001b4e0
mov r9d, 4
lea r8, [0x14005ae28]
xor edx, edx
jmp 0x14001b508
lea rax, [rsp + 0x420]
cmp r8, 8
cmovae rax, rcx
cmp word [rax + 4], 0x3f
je 0x14001b525
mov r9d, 6
lea r8, str._UNC
lea edx, [r9 - 5]
lea rcx, [rsp + 0x420]
call fcn.14001f180
mov rcx, qword [rsp + 0x420]
mov r8, qword [rsp + 0x438]
mov rax, qword [rsp + 0x430]
lea rdx, [rax - 1]
cmp rdx, rax
ja 0x14001b554
mov qword [rsp + 0x430], rdx
lea rax, [rsp + 0x420]
cmp r8, 8
cmovae rax, rcx
mov word [rax + rdx*2], di
jmp 0x14001b567
xor r8d, r8d
sub rdx, rax
lea rcx, [rsp + 0x420]
call fcn.140009d70
mov rax, qword [rbx - 0x58]
movsxd rcx, dword [rax + 4]
lea r8, [rbx - 0x50]
add r8, rcx
lea rdx, [rsp + 0x420]
lea rcx, [rsp + 0x90]
call fcn.14002f550
nop
mov rax, qword [rbx - 0x58]
movsxd rcx, dword [rax + 4]
mov rax, qword [rcx + rbx - 0x50]
test rax, rax
je 0x14001b5ce
cmp dword [rax + 4], 0
je 0x14001b5ce
lea rcx, [rsp + 0x90]
call fcn.14002f6c0
nop
cmp qword [rsp + 0x438], 8
jb 0x14001ba81
mov rcx, qword [rsp + 0x420]
jmp 0x14001ba7c
lea rcx, [rsp + 0x420]
cmp qword [rsp + 0x438], 8
cmovae rcx, qword [rsp + 0x420]
mov qword [rsp + 0x30], rdi
mov dword [rsp + 0x28], 0x2200000
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov edx, 0xc0000000
lea r8d, [r9 + 3]
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov rdi, rax
cmp rax, 0xffffffffffffffff
jne 0x14001b700
movabs rax, 0xf35f747b3b21ff09
mov qword [rsp + 0x3e0], rax
lea rax, str.c:jaworkspacecommon_ati_cdp4443product_filewindowswinnt_dir.cpp
mov qword [rsp + 0x3e8], rax
lea rax, str.winnt_dir::IOCTL
mov qword [rsp + 0x3f0], rax
mov dword [rsp + 0x3f8], 0x800
movups xmm0, xmmword [rsp + 0x3e0]
movaps xmmword [rsp + 0x3a0], xmm0
movups xmm1, xmmword [rsp + 0x3f0]
movaps xmmword [rsp + 0x3b0], xmm1
lea rcx, [0x140056994]
call fcn.140005930
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0x40007
lea r9, [rsp + 0x420]
lea r8, str.OpenFileW
lea rdx, [rsp + 0x3a0]
lea rcx, [rsp + 0x118]
call fcn.1400147a0
nop
mov rcx, qword [rbx - 0x58]
movsxd rdx, dword [rcx + 4]
lea rcx, [rbx - 0x50]
add rcx, rdx
mov rdx, rax
call fcn.1400064c0
nop
mov rcx, qword [rsp + 0x118]
test rcx, rcx
je 0x14001b5a4
nop
lock dec dword [rcx]
jne 0x14001b5a4
mov rbx, qword [rcx + 8]
mov rax, qword [rcx + 0x10]
call qword [rax]
mov rcx, rbx
test rbx, rbx
jne 0x14001b6e0
jmp 0x14001b5a4
movzx r8d, byte [rsi + 4]
mov rdx, rax
lea rcx, [rsp + 0x128]
call fcn.1400124f0
nop
mov rcx, qword [rbx - 0x58]
movsxd rdx, dword [rcx + 4]
lea rcx, [rbx - 0x50]
add rcx, rdx
mov rdx, rax
call fcn.1400064c0
nop
mov rcx, qword [rsp + 0x128]
test rcx, rcx
je 0x14001b757
nop dword [rax + rax]
lock dec dword [rcx]
jne 0x14001b757
mov rbx, qword [rcx + 8]
mov rax, qword [rcx + 0x10]
call qword [rax]
mov rcx, rbx
test rbx, rbx
jne 0x14001b740
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x14001b5a4
movabs rax, 0xf35f747b3b21fefd
mov qword [rsp + 0x3e0], rax
lea rax, str.c:jaworkspacecommon_ati_cdp4443product_filewindowswinnt_dir.cpp
mov qword [rsp + 0x3e8], rax
lea rax, str.winnt_dir::IOCTL
mov qword [rsp + 0x3f0], rax
mov dword [rsp + 0x3f8], 0x7f4
movups xmm0, xmmword [rsp + 0x3e0]
movaps xmmword [rsp + 0x340], xmm0
movups xmm1, xmmword [rsp + 0x3f0]
movaps xmmword [rsp + 0x350], xmm1
lea rcx, [0x140056994]
call fcn.140005930
mov r9, rax
mov r8d, 0x40007
lea rdx, [rsp + 0x340]
lea rcx, [rsp + 0x138]
call fcn.140033ba0
nop
mov rcx, qword [rbx - 0x58]
movsxd rdx, dword [rcx + 4]
lea rcx, [rbx - 0x50]
add rcx, rdx
mov rdx, rax
call fcn.1400064c0
nop
mov rcx, qword [rsp + 0x138]
test rcx, rcx
je 0x14001b5b2
lock dec dword [rcx]
jne 0x14001b5b2
mov rbx, qword [rcx + 8]
mov rax, qword [rcx + 0x10]
call qword [rax]
mov rcx, rbx
test rbx, rbx
jne 0x14001b814
jmp 0x14001b5b2
mov qword [rsp + 0x4f8], 7
xor edi, edi
mov qword [rsp + 0x4f0], rdi
mov word [rsp + 0x4e0], di
add rcx, 0xffffffffffffffa0
xor r9d, r9d
mov r8, qword [rdx + 8]
lea rdx, [rsp + 0x4e0]
call fcn.1400181b0
test al, al
je 0x14001b9a7
lea rcx, [rsp + 0x58]
call fcn.14002fb20
nop
mov r8d, dword [rsi + 0x18]
mov rdx, qword [rsi + 0x10]
lea rcx, [rsp + 0x58]
call fcn.14002fd80
mov rax, qword [rbx - 0x58]
movsxd rcx, dword [rax + 4]
lea r8, [rbx - 0x50]
add r8, rcx
lea rdx, [rsp + 0x4e0]
lea rcx, [rsp + 0x78]
call fcn.14002f550
nop
mov rax, qword [rbx - 0x58]
movsxd rcx, dword [rax + 4]
mov rax, qword [rcx + rbx - 0x50]
test rax, rax
je 0x14001b921
cmp dword [rax + 4], edi
je 0x14001b921
lea rcx, [rsp + 0x78]
call fcn.14002f6c0
nop
mov rbx, qword [rsp + 0x58]
test rbx, rbx
je 0x14001ba69
mov rsi, qword [rsp + 0x60]
cmp rbx, rsi
je 0x14001b906
nop dword [rax + rax]
mov rcx, rbx
call fcn.14002fc00
add rbx, 0x18
cmp rbx, rsi
jne 0x14001b8f0
mov rbx, qword [rsp + 0x58]
mov rcx, rbx
call fcn.1400376e4
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x58], xmm0
mov qword [rsp + 0x68], rdi
jmp 0x14001ba69
lea rdx, [rsp + 0x4e0]
cmp qword [rsp + 0x4f8], 8
cmovae rdx, qword [rsp + 0x4e0]
lea rcx, [rsp + 0x58]
call fcn.14002fdf0
nop
lea rcx, [rsp + 0x78]
call fcn.14002f6c0
mov rax, qword [rbx - 0x58]
movsxd rcx, dword [rax + 4]
add rbx, 0xffffffffffffffb0
add rcx, rbx
lea rdx, [0x14007bf60]
call fcn.1400064c0
nop
mov rbx, qword [rsp + 0x58]
test rbx, rbx
je 0x14001ba69
mov rdi, qword [rsp + 0x60]
cmp rbx, rdi
je 0x14001b99a
mov rcx, rbx
call fcn.14002fc00
add rbx, 0x18
cmp rbx, rdi
jne 0x14001b984
mov rbx, qword [rsp + 0x58]
mov rcx, rbx
call fcn.1400376e4
jmp 0x14001ba69
movabs rax, 0xf35f747b3b21ff46
mov qword [rsp + 0x3e0], rax
lea rax, str.c:jaworkspacecommon_ati_cdp4443product_filewindowswinnt_dir.cpp
mov qword [rsp + 0x3e8], rax
lea rax, str.winnt_dir::IOCTL
mov qword [rsp + 0x3f0], rax
mov dword [rsp + 0x3f8], 0x83d
movups xmm0, xmmword [rsp + 0x3e0]
movaps xmmword [rsp + 0x200], xmm0
movups xmm1, xmmword [rsp + 0x3f0]
movaps xmmword [rsp + 0x210], xmm1
lea rcx, method.i_file.virtual_0
call fcn.140005930
mov r9, rax
mov r8d, 0x4000a
lea rdx, [rsp + 0x200]
lea rcx, [rsp + 0x148]
call fcn.140033ba0
nop
mov rcx, qword [rbx - 0x58]
movsxd rdx, dword [rcx + 4]
lea rcx, [rbx - 0x50]
add rcx, rdx
mov rdx, rax
call fcn.1400064c0
nop
mov rcx, qword [rsp + 0x148]
test rcx, rcx
je 0x14001ba69
lock dec dword [rcx]
jne 0x14001ba69
mov rbx, qword [rcx + 8]
mov rax, qword [rcx + 0x10]
call qword [rax]
mov rcx, rbx
test rbx, rbx
jne 0x14001ba52
cmp qword [rsp + 0x4f8], 8
jb 0x14001ba81
mov rcx, qword [rsp + 0x4e0]
call fcn.1400376e4
mov rcx, qword [rsp + 0x560]
xor rcx, rsp
call fcn.140038d80
lea r11, [rsp + 0x570]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop rdi
ret