Function at 0x1400edec0
Capabilities:
Check for time delay via gettickcount

Disassembly:
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
mov eax, 0xcbb0
call sub.ntdll.dll___chkstk
sub rsp, rax
mov qword [rsp + 0x1f0], 0xfffffffffffffffe
mov qword [rsp + 0xcc00], rbx
movaps xmmword [rsp + 0xcba0], xmm6
mov rax, qword [0x14042d950]
xor rax, rsp
mov qword [rsp + 0xcb90], rax
mov edi, r9d
mov dword [rsp + 0xc0], r9d
mov rbp, rdx
mov qword [rsp + 0x100], rdx
mov r14, rcx
mov qword [rsp + 0x38], rcx
lea r12, [rcx + 0x248]
mov word [rsp + 0x4390], 0
xor edx, edx
mov r8d, 0x7fe
lea rcx, [rsp + 0x4392]
call sub.ntdll.dll_memset
lea r8, [r14 + 0x32]
lea rdx, str.The__s_has_too_much_file_fragment__please_defragment_at_first_or_reserve_free_space_of_2GB_or_more_for_the_partition__and_retry_
lea rcx, [rsp + 0x4390]
call qword [sym.imp.MSVCR80.dll__swprintf]
xor ebx, ebx
mov dword [rsp + 0x84], ebx
mov qword [rsp + 0x98], rbx
mov qword [rsp + 0xa0], rbx
mov qword [rsp + 0xa8], rbx
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov r15d, eax
mov dword [rsp + 0xc4], eax
mov r13, rbx
mov qword [rsp + 0xb8], rbx
mov rcx, rbp
call fcn.140007310
movabs r9, 0x2aaaaaaaaaaaaaab
test rax, rax
je 0x1400efb2d
movsd xmm6, qword [0x1403b85a8]
movzx ebx, byte [rsp + 0x30]
movzx esi, byte [rsp + 0x30]
movzx edi, byte [rsp + 0x30]
cmp dword [r14 + reloc.MFC80U.DLL_Ordinal_320], 0
je 0x1400ee0ca
call qword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, r15d
cmp eax, 0x3e8
jb 0x1400ee0ca
mov rcx, rbp
call fcn.140007310
mov rbp, rax
lea r12, [r13 + 1]
cvtsi2sd xmm1, r12
cvtsi2sd xmm0, rax
divsd xmm1, xmm0
mulsd xmm1, xmm6
cvttsd2si r13d, xmm1
mov word [rsp + 0x42c0], 0
xor edx, edx
mov r8d, 0xc6
lea rcx, [rsp + 0x42c2]
call sub.ntdll.dll_memset
mov dword [rsp + 0x20], r13d
mov r9, rbp
mov r8, r12
lea rdx, str.Analyzing_partition:__I64d__I64d___d__.
lea rcx, [rsp + 0x42c0]
call qword [sym.imp.MSVCR80.dll__swprintf]
mov rcx, qword [r14 + 0x138]
mov rax, qword [rcx]
lea rdx, [rsp + 0x42c0]
call qword [rax + 0x70]
mov r8d, r13d
lea rdx, str.Status:_d
lea rcx, [rsp + 0x42c0]
call qword [sym.imp.MSVCR80.dll__swprintf]
mov edx, r13d
mov rcx, r14
call fcn.1400e7640
mov rcx, qword [r14 + 0x138]
mov rax, qword [rcx]
lea rdx, [rsp + 0x42c0]
call qword [rax + 0x78]
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [rsp + 0xc4], eax
mov r13, qword [rsp + 0xb8]
mov rbp, qword [rsp + 0x100]
lea r12, [r14 + 0x248]
mov rcx, qword [r14 + 0x138]
mov rax, qword [rcx]
call qword [rax + 0xf0]
test eax, eax
jne 0x1400ef9e6
xor r15d, r15d
mov dword [rsp + 0xdc], r15d
mov rcx, qword [rbp + 8]
test rcx, rcx
je 0x1400ee106
mov rax, qword [rbp + 0x10]
sub rax, rcx
sar rax, 3
cmp r13, rax
jb 0x1400ee10c
call qword [sym.imp.MSVCR80.dll__invalid_parameter_noinfo]
mov rax, qword [rbp + 8]
mov r13, qword [rax + r13*8]
mov qword [rsp + 0xd0], r13
cmp r13, 7
je 0x1400ef12a
cmp r13, 1
je 0x1400ef12a
mov dword [rsp + 0x20], r15d
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rsp + 0x230]
call fcn.1400d9890
nop
xor r9d, r9d
lea r8, [rsp + 0x230]
mov rdx, r13
mov rcx, r12
call fcn.1400de420
test eax, eax
je 0x1400ef929
mov byte [rsp + 0x4b90], 0
xor edx, edx
mov r8d, 0x3fff
lea rcx, [rsp + 0x4b91]
call sub.ntdll.dll_memset
mov byte [rsp + 0x8b90], 0
xor edx, edx
mov r8d, 0x3fff
lea rcx, [rsp + 0x8b91]
call sub.ntdll.dll_memset
mov ebp, dword [r14 + 0x4344]
lea rcx, [rsp + 0x230]
call fcn.140111140
mov rdx, rax
mov r8, rbp
lea rcx, [rsp + 0x4b90]
call sub.ntdll.dll_memcpy
mov rbp, qword [rsp + 0x38]
mov r8d, dword [rbp + 0x4344]
lea rdx, [rsp + 0x4b90]
lea rcx, [rsp + 0x8b90]
call sub.ntdll.dll_memcpy
movzx r11d, word [rsp + 0x4ba4]
mov r15d, r11d
mov dword [rsp + 0x88], r11d
mov r8, r11
lea rdx, [rsp + 0x4b90]
lea rcx, [rsp + 0x8b90]
call sub.ntdll.dll_memcpy
mov r12d, r15d
mov dword [rsp + 0x8ba8], r15d
xor r13d, r13d
mov qword [rsp + 0x68], r13
mov qword [rsp + 0x70], r13
mov qword [rsp + 0x78], r13
mov dword [rsp + 0x80], r13d
lea rcx, [rsp + 0x230]
call fcn.1400d9510
lea rcx, [rsp + 0x230]
call fcn.1400da8d0
mov r14, rax
mov qword [rsp + 0x110], rax
test rax, rax
je 0x1400ef0b1
nop
nop
cmp byte [r14 + 8], 0
jne 0x1400ee2cd
movsxd rcx, r15d
lea rcx, [rsp + rcx + 0x8b90]
mov r8d, dword [r14 + 4]
mov rdx, r14
call sub.ntdll.dll_memcpy
mov r11d, dword [r14 + 4]
add r15d, r11d
mov dword [rsp + 0x88], r15d
mov r12d, dword [rsp + 0x8ba8]
add r12d, r11d
mov dword [rsp + 0x8ba8], r12d
lea rcx, [rsp + 0x230]
call fcn.1400da1e0
mov r14, rax
mov qword [rsp + 0x110], rax
jmp 0x1400eeb5b
lea rcx, [rsp + 0x1c0]
call fcn.1400db9e0
nop
mov rdx, r14
lea rcx, [rsp + 0x1c0]
call fcn.1400dbb00
test eax, eax
je 0x1400ef759
mov qword [rsp + 0x48], r13
mov qword [rsp + 0x50], r13
mov qword [rsp + 0x58], r13
mov dword [rsp + 0xc8], r13d
lea rcx, [rsp + 0x1c0]
call fcn.1400dbfc0
mov ecx, eax
mov dword [rsp + reloc.MFC80U.DLL_Ordinal_280], eax
xor eax, eax
mov dword [rsp + 0xd8], eax
test ecx, ecx
je 0x1400ee997
mov edx, eax
lea rcx, [rsp + 0x1c0]
call fcn.1400db970
mov r11, rax
mov rcx, qword [rax]
cmp rcx, 0xffffffffffffffff
jne 0x1400ee483
mov qword [rsp + 0x120], rcx
mov eax, dword [rax + 0x10]
mov dword [rsp + reloc.MFC80U.DLL_Ordinal_296], eax
mov r13, qword [rsp + 0x50]
mov rbp, qword [rsp + 0x48]
test rbp, rbp
je 0x1400ee3c1
mov rcx, r13
sub rcx, rbp
sar rcx, 4
mov rax, qword [rsp + 0x58]
sub rax, rbp
sar rax, 4
cmp rcx, rax
jae 0x1400ee3c1
xor eax, eax
mov byte [rsp + 0x28], al
mov byte [rsp + 0x20], bl
lea r9, [rsp + 0x40]
lea r8, [rsp + 0x120]
lea edx, [rax + 1]
mov rcx, r13
call fcn.14004cd40
lea r11, [r13 + 0x10]
mov qword [rsp + 0x50], r11
mov rbp, qword [rsp + 0x38]
jmp 0x1400ee959
mov r12, r13
cmp rbp, r13
jbe 0x1400ee3d9
call qword [sym.imp.MSVCR80.dll__invalid_parameter_noinfo]
mov r13, qword [rsp + 0x50]
mov rbp, qword [rsp + 0x48]
lea rax, [rsp + 0x40]
mov qword [rsp + 0x1b0], rax
mov qword [rsp + 0x1b8], r12
test rbp, rbp
je 0x1400ee413
mov rax, r13
sub rax, rbp
sar rax, 4
je 0x1400ee413
cmp rbp, r13
jbe 0x1400ee40a
call qword [sym.imp.MSVCR80.dll__invalid_parameter_noinfo]
sub r12, rbp
sar r12, 4
jmp 0x1400ee416
xor r12d, r12d
movaps xmm0, xmmword [rsp + 0x1b0]
movdqa xmmword [rsp + 0x210], xmm0
lea r9, [rsp + 0x120]
mov r8d, 1
lea rdx, [rsp + 0x210]
lea rcx, [rsp + 0x40]
call fcn.14004cda0
mov rbp, qword [rsp + 0x48]
cmp rbp, qword [rsp + 0x50]
jbe 0x1400ee459
call qword [sym.imp.MSVCR80.dll__invalid_parameter_noinfo]
add r12, r12
lea rax, [rbp + r12*8]
cmp rax, qword [rsp + 0x50]
ja 0x1400ee473
cmp rax, qword [rsp + 0x48]
jae 0x1400ee954
call qword [sym.imp.MSVCR80.dll__invalid_parameter_noinfo]
mov rbp, qword [rsp + 0x38]
jmp 0x1400ee959
mov r12, qword [rax + 0x10]
mov qword [rsp + 0x108], r12
mov r14, qword [rbp + reloc.MFC80U.DLL_Ordinal_576]
mov qword [rsp + 0xb0], r14
lea rax, [r12 + rcx]
cmp rax, r14
jle 0x1400ee930
mov dword [rsp + 0xc8], 1
mov dword [rsp + 0xdc], 1
cmp rcx, r14
jl 0x1400ee4d8
mov qword [rsp + 0xb0], rcx
mov rax, qword [rsp + 0x48]
jmp 0x1400ee63c
sub r12, r14
add r12, rcx
mov qword [rsp + 0x108], r12
mov qword [rsp + 0x130], rcx
mov eax, dword [r11 + 0x10]
sub eax, r12d
mov dword [rsp + 0x138], eax
mov r13, qword [rsp + 0x50]
mov rbp, qword [rsp + 0x48]
test rbp, rbp
je 0x1400ee561
mov rcx, r13
sub rcx, rbp
sar rcx, 4
mov rax, qword [rsp + 0x58]
sub rax, rbp
sar rax, 4
cmp rcx, rax
jae 0x1400ee561
xor eax, eax
mov byte [rsp + 0x28], al
mov byte [rsp + 0x20], sil
lea r9, [rsp + 0x40]
lea r8, [rsp + 0x130]
lea edx, [rax + 1]
mov rcx, r13
call fcn.14004cd40
lea r11, [r13 + 0x10]
mov qword [rsp + 0x50], r11
mov rax, qword [rsp + 0x48]
mov rbp, qword [rsp + 0x38]
jmp 0x1400ee63c
mov r12, r13
cmp rbp, r13
jbe 0x1400ee579
call qword [sym.imp.MSVCR80.dll__invalid_parameter_noinfo]
mov r13, qword [rsp + 0x50]
mov rbp, qword [rsp + 0x48]
lea rax, [rsp + 0x40]
mov qword [rsp + 0x190], rax
mov qword [rsp + 0x198], r12
test rbp, rbp
je 0x1400ee5b3
mov rax, r13
sub rax, rbp
sar rax, 4
je 0x1400ee5b3
cmp rbp, r13
jbe 0x1400ee5aa
call qword [sym.imp.MSVCR80.dll__invalid_parameter_noinfo]
sub r12, rbp
sar r12, 4
jmp 0x1400ee5b6
xor r12d, r12d
movaps xmm0, xmmword [rsp + 0x190]
movdqa xmmword [rsp + 0x220], xmm0
lea r9, [rsp + 0x130]
mov r8d, 1
lea rdx, [rsp + 0x220]
lea rcx, [rsp + 0x40]
call fcn.14004cda0
mov rax, qword [rsp + 0x48]
mov rbp, rax
cmp rax, qword [rsp + 0x50]
jbe 0x1400ee601
call qword [sym.imp.MSVCR80.dll__invalid_parameter_noinfo]
mov rax, qword [rsp + 0x48]
add r12, r12
lea rcx, [rbp + r12*8]
cmp rcx, qword [rsp + 0x50]
ja 0x1400ee615
cmp rcx, rax
jae 0x1400ee62f
call qword [sym.imp.MSVCR80.dll__invalid_parameter_noinfo]
mov rax, qword [rsp + 0x48]
mov r12, qword [rsp + 0x108]
mov rbp, qword [rsp + 0x38]
jmp 0x1400ee63c
mov r12, qword [rsp + 0x108]
mov rbp, qword [rsp + 0x38]
xor r13d, r13d
mov qword [rsp + 0xe8], r13
mov qword [rsp + 0xf0], r13
mov qword [rsp + 0xf8], r13
mov edx, dword [rsp + 0x84]
test edx, edx
jne 0x1400ee686
lea rcx, [rbp + 0x148]
xor r9d, r9d
lea r8, [rsp + 0xe0]
mov rdx, r12
call fcn.140113ad0
test eax, eax
je 0x1400ef163
jmp 0x1400ee6eb
test rax, rax
je 0x1400ee6c6
mov rcx, qword [rsp + 0x50]
sub rcx, rax
sar rcx, 4
je 0x1400ee6c6
lea rbp, [rcx - 1]
cmp rbp, rcx
jb 0x1400ee6ad
call qword [sym.imp.MSVCR80.dll__invalid_parameter_noinfo]
mov rax, qword [rsp + 0x48]
add rbp, rbp
lea rdx, [rax + rbp*8]
lea rcx, [rsp + 0xe0]
call fcn.140128460
mov rbp, qword [rsp + 0x38]
lea rcx, [rbp + 0x148]
mov r9d, 1
lea r8, [rsp + 0xe0]
mov rdx, r12
call fcn.140113ad0
test eax, eax
je 0x1400ef2c9
mov r15d, r13d
lea rcx, [rsp + 0xe0]
call fcn.1400e79c0
test rax, rax
je 0x1400ee88e
mov r14, r13
mov r12, qword [rsp + 0x50]
mov rbp, qword [rsp + 0x48]
mov rcx, qword [rsp + 0xe8]
test rcx, rcx
je 0x1400ee732
mov rax, qword [rsp + 0xf0]
sub rax, rcx
sar rax, 4
cmp r14, rax
jb 0x1400ee74a
call qword [sym.imp.MSVCR80.dll__invalid_parameter_noinfo]
mov r12, qword [rsp + 0x50]
mov rbp, qword [rsp + 0x48]
mov rcx, qword [rsp + 0xe8]
shl r14, 4
add r14, rcx
test rbp, rbp
je 0x1400ee7a2
mov rcx, r12
sub rcx, rbp
sar rcx, 4
mov rax, qword [rsp + 0x58]
sub rax, rbp
sar rax, 4
cmp rcx, rax
jae 0x1400ee7a2
xor eax, eax
mov byte [rsp + 0x28], al
mov byte [rsp + 0x20], dil
lea r9, [rsp + 0x40]
mov r8, r14
lea edx, [rax + 1]
mov rcx, r12
call fcn.14004cd40
add r12, 0x10
mov qword [rsp + 0x50], r12
mov rbp, qword [rsp + 0x48]
jmp 0x1400ee866
mov r13, r12
cmp rbp, r12
jbe 0x1400ee7ba
call qword [sym.imp.MSVCR80.dll__invalid_parameter_noinfo]
mov r12, qword [rsp + 0x50]
mov rbp, qword [rsp + 0x48]
lea rax, [rsp + 0x40]
mov qword [rsp + 0x180], rax
mov qword [rsp + 0x188], r13
test rbp, rbp
je 0x1400ee7f4
mov rax, r12
sub rax, rbp
sar rax, 4
je 0x1400ee7f4
cmp rbp, r12
jbe 0x1400ee7eb
call qword [sym.imp.MSVCR80.dll__invalid_parameter_noinfo]
sub r13, rbp
sar r13, 4
jmp 0x1400ee7f7
xor r13d, r13d
movaps xmm0, xmmword [rsp + 0x180]
movdqa xmmword [rsp + reloc.MFC80U.DLL_Ordinal_512], xmm0
mov r9, r14
mov r8d, 1
lea rdx, [rsp + reloc.MFC80U.DLL_Ordinal_512]
lea rcx, [rsp + 0x40]
call fcn.14004cda0
mov rbp, qword [rsp + 0x48]
mov r14, rbp
mov r12, qword [rsp + 0x50]
cmp rbp, r12
jbe 0x1400ee845
call qword [sym.imp.MSVCR80.dll__invalid_parameter_noinfo]
mov r12, qword [rsp + 0x50]
mov rbp, qword [rsp + 0x48]
add r13, r13
lea rax, [r14 + r13*8]
cmp rax, r12
ja 0x1400ee856
cmp rax, rbp
jae 0x1400ee866
call qword [sym.imp.MSVCR80.dll__invalid_parameter_noinfo]
mov r12, qword [rsp + 0x50]
mov rbp, qword [rsp + 0x48]
add r15d, 1
mov r14d, r15d
lea rcx, [rsp + 0xe0]
call fcn.1400e79c0
cmp r14, rax
jb 0x1400ee711
mov r12, qword [rsp + 0x108]
xor r13d, r13d
mov qword [rsp + 0x158], r13
mov qword [rsp + 0x160], r13
mov qword [rsp + 0x168], r13
mov rax, qword [rsp + 0xb0]
mov qword [rsp + reloc.MFC80U.DLL_Ordinal_320], rax
mov qword [rsp + 0x148], r12
lea rdx, [rsp + 0xe0]
lea rcx, [rsp + reloc.MFC80U.DLL_Ordinal_336]
call fcn.140128220
lea rdx, [rsp + reloc.MFC80U.DLL_Ordinal_320]
lea rcx, [rsp + 0x60]
call fcn.140107c70
nop
mov rcx, qword [rsp + 0x158]
test rcx, rcx
je 0x1400ee8f8
call sub.MFC80U.DLL_Ordinal_776
mov qword [rsp + 0x158], r13
mov qword [rsp + 0x160], r13
mov qword [rsp + 0x168], r13
mov rcx, qword [rsp + 0xe8]
test rcx, rcx
je 0x1400ee929
call sub.MFC80U.DLL_Ordinal_776
mov rbp, qword [rsp + 0x38]
jmp 0x1400ee959
mov rbp, qword [rsp + 0x38]
jmp 0x1400ee959
mov qword [rsp + 0x1a0], rcx
mov dword [rsp + reloc.MFC80U.DLL_Ordinal_424], r12d
lea rdx, [rsp + 0x1a0]
lea rcx, [rsp + 0x40]
call fcn.140128460
jmp 0x1400ee959
mov rbp, qword [rsp + 0x38]
mov eax, dword [rsp + 0xd8]
add eax, 1
mov dword [rsp + 0xd8], eax
cmp eax, dword [rsp + reloc.MFC80U.DLL_Ordinal_280]
jb 0x1400ee331
mov r12d, dword [rsp + 0x8ba8]
mov r14, qword [rsp + 0x110]
mov r13d, dword [rsp + 0xc8]
mov r15d, dword [rsp + 0x88]
cmp qword [rbp + 0x42f0], 0
jge 0x1400eea05
cmp qword [rsp + 0xd0], 0
jne 0x1400eea05
cmp dword [r14], 0x80
jne 0x1400eea05
mov rbp, qword [rsp + 0x48]
test rbp, rbp
je 0x1400ee9f9
mov rax, qword [rsp + 0x50]
sub rax, rbp
sar rax, 4
je 0x1400eea00
test rax, rax
jne 0x1400ee9d8
call qword [sym.imp.MSVCR80.dll__invalid_parameter_noinfo]
mov rax, qword [rsp + 0x48]
mov rcx, qword [rax]
mov rbp, qword [rsp + 0x38]
mov qword [rbp + 0x42f0], rcx
mov dword [rsp + 0x80], 1
jmp 0x1400eea05
mov rbp, qword [rsp + 0x38]
jmp 0x1400eea05
mov rbp, qword [rsp + 0x38]
test r13d, r13d
jne 0x1400eea48
movsxd rax, r15d
lea rcx, [rsp + rax + 0x8b90]
mov r8d, dword [r14 + 4]
mov rdx, r14
call sub.ntdll.dll_memcpy
mov r11d, dword [r14 + 4]
add r15d, r11d
mov dword [rsp + 0x88], r15d
mov r12d, dword [rsp + 0x8ba8]
add r12d, r11d
mov dword [rsp + 0x8ba8], r12d
jmp 0x1400eeb15
mov ecx, 0x80000
call sub.MFC80U.DLL_Ordinal_265
mov r13, rax
xor edx, edx
mov r8d, 0x80000
mov rcx, rax
call sub.ntdll.dll_memset
lea rdx, [rsp + 0x40]
mov rcx, rbp
call fcn.1400ebba0
mov r9, r13
lea r8, [rsp + 0x40]
mov rdx, r14
mov rcx, rbp
call fcn.1400e8140
movsxd r11, r15d
lea r9, [rsp + r11 + 0x8b90]
mov ecx, dword [r13 + 4]
lea eax, [rcx + r12]
cmp eax, dword [rbp + 0x4344]
ja 0x1400eeab0
mov r8, rcx
mov rdx, r13
mov rcx, r9
call sub.ntdll.dll_memcpy
jmp 0x1400eeaeb
call fcn.140049470
mov rbp, rax
mov r12, qword [rax]
mov edx, 0x498
lea rcx, str..._ntfsresize.cpp
call fcn.1400e68c0
mov r8, rax
mov r9, qword [rsp + 0xd0]
lea rdx, str._s:_File_fragments__FrNumber:_I64d.
mov rcx, rbp
call qword [r12 + 0x10]
mov rbp, qword [rsp + 0x38]
mov eax, dword [r13 + 4]
add r15d, eax
mov dword [rsp + 0x88], r15d
mov r12d, dword [rsp + 0x8ba8]
add r12d, eax
mov dword [rsp + 0x8ba8], r12d
mov rcx, r13
call sub.MFC80U.DLL_Ordinal_266
lea rcx, [rsp + 0x230]
call fcn.1400da1e0
mov r14, rax
mov qword [rsp + 0x110], rax
mov rcx, qword [rsp + 0x48]
test rcx, rcx
je 0x1400eeb3c
call sub.MFC80U.DLL_Ordinal_776
xor r13d, r13d
mov qword [rsp + 0x48], r13
mov qword [rsp + 0x50], r13
mov qword [rsp + 0x58], r13
lea rcx, [rsp + 0x1c0]
call fcn.1400dbc40
test r14, r14
jne 0x1400ee270
mov eax, dword [rsp + 0xdc]
test eax, eax
je 0x1400ef0b1
movsxd rcx, r15d
lea eax, [r12 + 8]
cmp eax, dword [rbp + 0x4344]
ja 0x1400eeb98
mov eax, 0xffffffff
mov qword [rsp + rcx + 0x8b90], rax
mov r12d, dword [rsp + 0x8ba8]
add r12d, 8
mov dword [rsp + 0x8ba8], r12d
mov ebp, dword [rbp + 0x4344]
mov r15d, dword [rsp + 0x84]
cmp r12d, ebp
cmovbe r15d, r13d
mov dword [rsp + 0x84], r15d
cmp r12d, ebp
jbe 0x1400eedea
test r15d, r15d
jne 0x1400ef439
mov eax, dword [rsp + 0x80]
test eax, eax
je 0x1400eebee
mov rax, qword [rsp + 0x38]
mov qword [rax + 0x42f0], 0xffffffffffffffff
sub qword [rsp + 0xb8], 1
mov dword [rsp + 0x84], 1
mov r8d, r13d
mov dword [rsp + 0x80], r13d
mov r9, r13
mov qword [rsp + 0xb0], r13
mov r12, r13
mov rbx, qword [rsp + 0x38]
xor esi, esi
movabs rdi, 0x2aaaaaaaaaaaaaab
nop
mov r13, qword [rsp + 0x70]
mov rbp, qword [rsp + 0x68]
test rbp, rbp
jne 0x1400eec44
mov rdx, rsi
jmp 0x1400eec5e
mov rcx, r13
sub rcx, rbp
mov rax, rdi
imul rcx
sar rdx, 3
mov rax, rdx
shr rax, 0x3f
add rdx, rax
mov eax, r8d
cmp rax, rdx
jae 0x1400eed5f
test rbp, rbp
je 0x1400eec8b
sub r13, rbp
mov rax, rdi
imul r13
sar rdx, 3
mov rax, rdx
shr rax, 0x3f
add rdx, rax
cmp r9, rdx
jb 0x1400eec96
call qword [sym.imp.MSVCR80.dll__invalid_parameter_noinfo]
mov rbp, qword [rsp + 0x68]
mov r14d, esi
mov r15, rsi
mov r13, rsi
nop
mov rax, qword [r12 + rbp + 0x18]
test rax, rax
jne 0x1400eecaf
mov rcx, rsi
jmp 0x1400eecbb
mov rcx, qword [r12 + rbp + 0x20]
sub rcx, rax
sar rcx, 4
mov eax, r14d
cmp rax, rcx
jae 0x1400eed2e
mov rcx, qword [r12 + rbp + 0x18]
test rcx, rcx
je 0x1400eecde
mov rax, qword [r12 + rbp + 0x20]
sub rax, rcx
sar rax, 4
cmp r15, rax
jb 0x1400eece4
call qword [sym.imp.MSVCR80.dll__invalid_parameter_noinfo]
mov rcx, qword [r12 + rbp + 0x18]
lea rdx, [rsp + 0x170]
mov rax, qword [r13 + rcx]
mov qword [rdx], rax
mov rax, qword [r13 + rcx + 8]
mov qword [rdx + 8], rax
lea rcx, [rbx + 0x148]
mov r8d, dword [rsp + reloc.MFC80U.DLL_Ordinal_376]
mov edx, dword [rsp + 0x170]
call fcn.140112b30
add r14d, 1
add r15, 1
add r13, 0x10
jmp 0x1400eeca0
mov r8d, dword [rsp + 0x80]
add r8d, 1
mov dword [rsp + 0x80], r8d
mov r9, qword [rsp + 0xb0]
add r9, 1
mov qword [rsp + 0xb0], r9
add r12, 0x30
jmp 0x1400eec30
test rbp, rbp
mov dil, byte [rsp + 0x30]
mov bl, byte [rsp + 0x30]
mov sil, byte [rsp + 0x30]
je 0x1400eedb9
cmp rbp, r13
je 0x1400eedb1
add rbp, 0x18
xor edi, edi
nop
mov rcx, qword [rbp]
test rcx, rcx
je 0x1400eed8e
call sub.MFC80U.DLL_Ordinal_776
mov qword [rbp], rdi
mov qword [rbp + 8], rdi
mov qword [rbp + 0x10], rdi
add rbp, 0x30
lea rax, [rbp - 0x18]
cmp rax, r13
jne 0x1400eed80
mov dil, byte [rsp + 0x30]
mov rbp, qword [rsp + 0x68]
mov rcx, rbp
call sub.MFC80U.DLL_Ordinal_776
xor r15d, r15d
mov qword [rsp + 0x68], r15
mov qword [rsp + 0x70], r15
mov qword [rsp + 0x78], r15
lea rcx, [rsp + 0x230]
call fcn.1400d9920
mov r14, qword [rsp + 0x38]
mov rbp, qword [rsp + 0x100]
jmp 0x1400ef12a
mov r14, qword [rsp + 0x38]
cmp dword [r14 + reloc.MFC80U.DLL_Ordinal_320], 0
jne 0x1400ef03a
mov byte [rsp + 0x4b90], 0
xor edx, edx
mov r8d, 0x3fff
lea rcx, [rsp + 0x4b91]
call sub.ntdll.dll_memset
mov r8, rbp
lea rdx, [rsp + 0x8b90]
lea rcx, [rsp + 0x4b90]
call sub.ntdll.dll_memcpy
mov r11d, r13d
movzx eax, word [rsp + 0x4b96]
sub eax, 1
test eax, eax
jle 0x1400eee9a
mov r9, r13
lea r8, [rsp + 0x4d8e]
nop
movzx ecx, word [rsp + 0x4b94]
add rcx, r9
movzx eax, word [r8]
mov word [rsp + rcx + 0x4b92], ax
movzx eax, word [rsp + 0x4b94]
movzx ecx, word [rsp + rax + 0x4b90]
mov word [r8], cx
add r11d, 1
add r9, 2
add r8, reloc.MFC80U.DLL_Ordinal_512
movzx eax, word [rsp + 0x4b96]
sub eax, 1
cmp r11d, eax
jl 0x1400eee50
mov r9d, dword [r14 + 0x4344]
lea r8, [rsp + 0x4b90]
mov rdx, qword [rsp + 0xd0]
lea rcx, [r14 + 0x248]
call fcn.1400dd290
test eax, eax
je 0x1400ef659
cmp dword [rsp + 0xc0], 0
jne 0x1400eefa0
mov r12d, r13d
nop
nop
nop
mov r9, qword [rsp + 0x70]
mov r8, qword [rsp + 0x68]
test r8, r8
jne 0x1400eeefe
mov rdx, r13
movabs r10, 0x2aaaaaaaaaaaaaab
jmp 0x1400eef22
mov rcx, r9
sub rcx, r8
movabs r10, 0x2aaaaaaaaaaaaaab
mov rax, r10
imul rcx
sar rdx, 3
mov rax, rdx
shr rax, 0x3f
add rdx, rax
mov ebp, r12d
cmp rbp, rdx
jae 0x1400eef7d
test r8, r8
je 0x1400eef4b
sub r9, r8
mov rax, r10
imul r9
sar rdx, 3
mov rax, rdx
shr rax, 0x3f
add rdx, rax
cmp rbp, rdx
jb 0x1400eef56
call qword [sym.imp.MSVCR80.dll__invalid_parameter_noinfo]
mov r8, qword [rsp + 0x68]
lea rdx, [rbp + rbp*2]
shl rdx, 4
add rdx, r8
mov rcx, r14
call fcn.1400e79e0
mov ebp, eax
test eax, eax
jne 0x1400ef559
add r12d, 1
jmp 0x1400eeee0
xor r9d, r9d
or r8, 0xffffffffffffffff
xor edx, edx
mov rcx, r14
call fcn.1400e69b0
mov r12, qword [rsp + 0x70]
mov r8, qword [rsp + 0x68]
jmp 0x1400ef049
mov r12, qword [rsp + 0x70]
mov r8, qword [rsp + 0x68]
test r8, r8
jne 0x1400eefc0
xor eax, eax
mov rdx, rax
movabs r9, 0x2aaaaaaaaaaaaaab
jmp 0x1400eefe4
mov rcx, r12
sub rcx, r8
movabs r9, 0x2aaaaaaaaaaaaaab
mov rax, r9
imul rcx
sar rdx, 3
mov rax, rdx
shr rax, 0x3f
add rdx, rax
mov ebp, r13d
cmp rbp, rdx
jae 0x1400ef046
test r8, r8
je 0x1400ef00d
sub r12, r8
mov rax, r9
imul r12
sar rdx, 3
mov rax, rdx
shr rax, 0x3f
add rdx, rax
cmp rbp, rdx
jb 0x1400ef018
call qword [sym.imp.MSVCR80.dll__invalid_parameter_noinfo]
mov r8, qword [rsp + 0x68]
lea rdx, [rbp + rbp*2]
shl rdx, 4
add rdx, r8
lea rcx, [rsp + 0x90]
call fcn.140107c70
add r13d, 1
jmp 0x1400eefa0
mov r12, qword [rsp + 0x70]
mov r8, qword [rsp + 0x68]
jmp 0x1400ef049
xor r13d, r13d
test r8, r8
je 0x1400ef08b
cmp r8, r12
je 0x1400ef083
lea rbp, [r8 + 0x18]
mov rcx, qword [rbp]
test rcx, rcx
je 0x1400ef065
call sub.MFC80U.DLL_Ordinal_776
mov qword [rbp], r13
mov qword [rbp + 8], r13
mov qword [rbp + 0x10], r13
add rbp, 0x30
lea rax, [rbp - 0x18]
cmp rax, r12
jne 0x1400ef057
mov r8, qword [rsp + 0x68]
mov rcx, r8
call sub.MFC80U.DLL_Ordinal_776
mov qword [rsp + 0x68], r13
mov qword [rsp + 0x70], r13
mov qword [rsp + 0x78], r13
lea rcx, [rsp + 0x230]
call fcn.1400d9920
mov rbp, qword [rsp + 0x100]
jmp 0x1400ef12a
mov rcx, qword [rsp + 0x68]
test rcx, rcx
je 0x1400ef101
mov r12, qword [rsp + 0x70]
cmp rcx, r12
je 0x1400ef0fc
lea rbp, [rcx + 0x18]
nop
nop
mov rcx, qword [rbp]
test rcx, rcx
je 0x1400ef0de
call sub.MFC80U.DLL_Ordinal_776
mov qword [rbp], r13
mov qword [rbp + 8], r13
mov qword [rbp + 0x10], r13
add rbp, 0x30
lea rax, [rbp - 0x18]
cmp rax, r12
jne 0x1400ef0d0
mov rcx, qword [rsp + 0x68]
call sub.MFC80U.DLL_Ordinal_776
mov qword [rsp + 0x68], r13
mov qword [rsp + 0x70], r13
mov qword [rsp + 0x78], r13
lea rcx, [rsp + 0x230]
call fcn.1400d9920
mov r14, qword [rsp + 0x38]
mov rbp, qword [rsp + 0x100]
mov r13, qword [rsp + 0xb8]
add r13, 1
mov qword [rsp + 0xb8], r13
mov rcx, rbp
call fcn.140007310
cmp r13, rax
jae 0x1400ef9d0
lea r12, [r14 + 0x248]
mov r15d, dword [rsp + 0xc4]
jmp 0x1400edfd2
mov rcx, qword [rbp + 0x138]
mov rax, qword [rcx]
lea rdx, [rsp + 0x4390]
call qword [rax + 0x68]
call fcn.140049470
mov rdi, rax
mov rbx, qword [rax]
mov edx, reloc.MFC80U.DLL_Ordinal_1103
lea rcx, str..._ntfsresize.cpp
call fcn.1400e68c0
mov r8, rax
lea rdx, str._s:_Too_much_file_fragment__please_defragment.
mov rcx, rdi
call qword [rbx + 0x10]
mov rcx, qword [rbp + 0x138]
mov rax, qword [rcx]
mov edx, 0xd7
call qword [rax + 0x40]
nop
mov rcx, qword [rsp + 0xe8]
test rcx, rcx
je 0x1400ef1c9
call sub.MFC80U.DLL_Ordinal_776
mov qword [rsp + 0xe8], r13
mov qword [rsp + 0xf0], r13
mov qword [rsp + 0xf8], r13
mov rcx, qword [rsp + 0x48]
test rcx, rcx
je 0x1400ef1f0
call sub.MFC80U.DLL_Ordinal_776
mov qword [rsp + 0x48], r13
mov qword [rsp + 0x50], r13
mov qword [rsp + 0x58], r13
lea rcx, [rsp + 0x1c0]
call fcn.1400dbc40
nop
mov rcx, qword [rsp + 0x68]
test rcx, rcx
je 0x1400ef254
mov rbx, qword [rsp + 0x70]
cmp rcx, rbx
je 0x1400ef24f
lea rdi, [rcx + 0x18]
mov rcx, qword [rdi]
test rcx, rcx
je 0x1400ef232
call sub.MFC80U.DLL_Ordinal_776
mov qword [rdi], r13
mov qword [rdi + 8], r13
mov qword [rdi + 0x10], r13
add rdi, 0x30
lea rax, [rdi - 0x18]
cmp rax, rbx
jne 0x1400ef225
mov rcx, qword [rsp + 0x68]
call sub.MFC80U.DLL_Ordinal_776
mov qword [rsp + 0x68], r13
mov qword [rsp + 0x70], r13
mov qword [rsp + 0x78], r13
lea rcx, [rsp + 0x230]
call fcn.1400d9920
nop
mov rcx, qword [rsp + 0x98]
test rcx, rcx
je 0x1400ef2c2
mov rbx, qword [rsp + 0xa0]
cmp rcx, rbx
je 0x1400ef2bd
lea rdi, [rcx + 0x18]
nop
mov rcx, qword [rdi]
test rcx, rcx
je 0x1400ef29d
call sub.MFC80U.DLL_Ordinal_776
mov qword [rdi], r13
mov qword [rdi + 8], r13
mov qword [rdi + 0x10], r13
add rdi, 0x30
lea rax, [rdi - 0x18]
cmp rax, rbx
jne 0x1400ef290
mov rcx, qword [rsp + 0x98]
call sub.MFC80U.DLL_Ordinal_776
xor eax, eax
jmp 0x1400efce9
mov rcx, qword [rbp + 0x138]
mov rax, qword [rcx]
lea rdx, [rsp + 0x4390]
call qword [rax + 0x68]
call fcn.140049470
mov rdi, rax
mov rbx, qword [rax]
mov edx, 0x45e
lea rcx, str..._ntfsresize.cpp
call fcn.1400e68c0
mov r8, rax
lea rdx, str._s:_Too_much_file_fragment__please_defragment.
mov rcx, rdi
call qword [rbx + 0x10]
mov rcx, qword [rbp + 0x138]
mov rax, qword [rcx]
mov edx, 0xd7
call qword [rax + 0x40]
nop
mov rcx, qword [rsp + 0xe8]
test rcx, rcx
je 0x1400ef32f
call sub.MFC80U.DLL_Ordinal_776
mov qword [rsp + 0xe8], r13
mov qword [rsp + 0xf0], r13
mov qword [rsp + 0xf8], r13
mov rcx, qword [rsp + 0x48]
test rcx, rcx
je 0x1400ef356
call sub.MFC80U.DLL_Ordinal_776
mov qword [rsp + 0x48], r13
mov qword [rsp + 0x50], r13
mov qword [rsp + 0x58], r13
lea rcx, [rsp + 0x1c0]
call fcn.1400dbc40
nop
mov rcx, qword [rsp + 0x68]
test rcx, rcx
je 0x1400ef3bf
mov rbx, qword [rsp + 0x70]
cmp rcx, rbx
je 0x1400ef3ba
lea rdi, [rcx + 0x18]
nop
nop
mov rcx, qword [rdi]
test rcx, rcx
je 0x1400ef39d
call sub.MFC80U.DLL_Ordinal_776
mov qword [rdi], r13
mov qword [rdi + 8], r13
mov qword [rdi + 0x10], r13
add rdi, 0x30
lea rax, [rdi - 0x18]
cmp rax, rbx
jne 0x1400ef390
mov rcx, qword [rsp + 0x68]
call sub.MFC80U.DLL_Ordinal_776
mov qword [rsp + 0x68], r13
mov qword [rsp + 0x70], r13
mov qword [rsp + 0x78], r13
lea rcx, [rsp + 0x230]
call fcn.1400d9920
nop
mov rcx, qword [rsp + 0x98]
test rcx, rcx
je 0x1400ef432
mov rbx, qword [rsp + 0xa0]
cmp rcx, rbx
je 0x1400ef42d
lea rdi, [rcx + 0x18]
nop
nop
mov rcx, qword [rdi]
test rcx, rcx
je 0x1400ef40d
call sub.MFC80U.DLL_Ordinal_776
mov qword [rdi], r13
mov qword [rdi + 8], r13
mov qword [rdi + 0x10], r13
add rdi, 0x30
lea rax, [rdi - 0x18]
cmp rax, rbx
jne 0x1400ef400
mov rcx, qword [rsp + 0x98]
call sub.MFC80U.DLL_Ordinal_776
xor eax, eax
jmp 0x1400efce9
mov rsi, qword [rsp + 0x38]
mov rcx, qword [rsi + 0x138]
mov rax, qword [rcx]
lea rdx, [rsp + 0x4390]
call qword [rax + 0x68]
call fcn.140049470
mov rdi, rax
mov rbx, qword [rax]
mov edx, 0x4bb
lea rcx, str..._ntfsresize.cpp
call fcn.1400e68c0
mov r8, rax
mov r9, qword [rsp + 0xd0]
lea rdx, str._s:_Too_much_file_fragment__please_defragment__FrNumber:_I64d.
mov rcx, rdi
call qword [rbx + 0x10]
mov rcx, qword [rsi + 0x138]
mov rax, qword [rcx]
mov edx, 0xd7
call qword [rax + 0x40]
nop
mov rcx, qword [rsp + 0x68]
test rcx, rcx
je 0x1400ef4e1
mov rbx, qword [rsp + 0x70]
cmp rcx, rbx
je 0x1400ef4dc
lea rdi, [rcx + 0x18]
mov rcx, qword [rdi]
test rcx, rcx
je 0x1400ef4bf
call sub.MFC80U.DLL_Ordinal_776
mov qword [rdi], r13
mov qword [rdi + 8], r13
mov qword [rdi + 0x10], r13
add rdi, 0x30
lea rax, [rdi - 0x18]
cmp rax, rbx
jne 0x1400ef4b2
mov rcx, qword [rsp + 0x68]
call sub.MFC80U.DLL_Ordinal_776
mov qword [rsp + 0x68], r13
mov qword [rsp + 0x70], r13
mov qword [rsp + 0x78], r13
lea rcx, [rsp + 0x230]
call fcn.1400d9920
nop
mov rcx, qword [rsp + 0x98]
test rcx, rcx
je 0x1400ef552
mov rbx, qword [rsp + 0xa0]
cmp rcx, rbx
je 0x1400ef54d
lea rdi, [rcx + 0x18]
nop
mov rcx, qword [rdi]
test rcx, rcx
je 0x1400ef52d
call sub.MFC80U.DLL_Ordinal_776
mov qword [rdi], r13
mov qword [rdi + 8], r13
mov qword [rdi + 0x10], r13
add rdi, 0x30
lea rax, [rdi - 0x18]
cmp rax, rbx
jne 0x1400ef520
mov rcx, qword [rsp + 0x98]
call sub.MFC80U.DLL_Ordinal_776
xor eax, eax
jmp 0x1400efce9
call fcn.140049470
mov rdi, rax
mov rbx, qword [rax]
mov edx, 0x4f8
lea rcx, str..._ntfsresize.cpp
call fcn.1400e68c0
mov r8, rax
lea rdx, str._s:_Move_file_data_error.
mov rcx, rdi
call qword [rbx + 0x10]
mov rcx, qword [r14 + 0x138]
mov rax, qword [rcx]
mov edx, ebp
call qword [rax + 0x40]
nop
mov rcx, qword [rsp + 0x68]
test rcx, rcx
je 0x1400ef5df
mov rbx, qword [rsp + 0x70]
cmp rcx, rbx
je 0x1400ef5da
lea rdi, [rcx + 0x18]
nop
mov rcx, qword [rdi]
test rcx, rcx
je 0x1400ef5bd
call sub.MFC80U.DLL_Ordinal_776
mov qword [rdi], r13
mov qword [rdi + 8], r13
mov qword [rdi + 0x10], r13
add rdi, 0x30
lea rax, [rdi - 0x18]
cmp rax, rbx
jne 0x1400ef5b0
mov rcx, qword [rsp + 0x68]
call sub.MFC80U.DLL_Ordinal_776
mov qword [rsp + 0x68], r13
mov qword [rsp + 0x70], r13
mov qword [rsp + 0x78], r13
lea rcx, [rsp + 0x230]
call fcn.1400d9920
nop
mov rcx, qword [rsp + 0x98]
test rcx, rcx
je 0x1400ef652
mov rbx, qword [rsp + 0xa0]
cmp rcx, rbx
je 0x1400ef64d
lea rdi, [rcx + 0x18]
nop
nop
mov rcx, qword [rdi]
test rcx, rcx
je 0x1400ef62d
call sub.MFC80U.DLL_Ordinal_776
mov qword [rdi], r13
mov qword [rdi + 8], r13
mov qword [rdi + 0x10], r13
add rdi, 0x30
lea rax, [rdi - 0x18]
cmp rax, rbx
jne 0x1400ef620
mov rcx, qword [rsp + 0x98]
call sub.MFC80U.DLL_Ordinal_776
xor eax, eax
jmp 0x1400efce9
call fcn.140049470
mov rdi, rax
mov rbx, qword [rax]
mov edx, Ordinal_1262
lea rcx, str..._ntfsresize.cpp
call fcn.1400e68c0
mov r8, rax
lea rdx, str._s:_Write_mft_file_failed.
mov rcx, rdi
call qword [rbx + 0x10]
mov rcx, qword [r14 + 0x138]
mov rax, qword [rcx]
mov edx, 0xd2
call qword [rax + 0x40]
nop
mov rcx, qword [rsp + 0x68]
test rcx, rcx
je 0x1400ef6df
mov rbx, qword [rsp + 0x70]
cmp rcx, rbx
je 0x1400ef6da
lea rdi, [rcx + 0x18]
mov rcx, qword [rdi]
test rcx, rcx
je 0x1400ef6bd
call sub.MFC80U.DLL_Ordinal_776
mov qword [rdi], r13
mov qword [rdi + 8], r13
mov qword [rdi + 0x10], r13
add rdi, 0x30
lea rax, [rdi - 0x18]
cmp rax, rbx
jne 0x1400ef6b0
mov rcx, qword [rsp + 0x68]
call sub.MFC80U.DLL_Ordinal_776
mov qword [rsp + 0x68], r13
mov qword [rsp + 0x70], r13
mov qword [rsp + 0x78], r13
lea rcx, [rsp + 0x230]
call fcn.1400d9920
nop
mov rcx, qword [rsp + 0x98]
test rcx, rcx
je 0x1400ef752
mov rbx, qword [rsp + 0xa0]
cmp rcx, rbx
je 0x1400ef74d
lea rdi, [rcx + 0x18]
nop
nop
mov rcx, qword [rdi]
test rcx, rcx
je 0x1400ef72d
call sub.MFC80U.DLL_Ordinal_776
mov qword [rdi], r13
mov qword [rdi + 8], r13
mov qword [rdi + 0x10], r13
add rdi, 0x30
lea rax, [rdi - 0x18]
cmp rax, rbx
jne 0x1400ef720
mov rcx, qword [rsp + 0x98]
call sub.MFC80U.DLL_Ordinal_776
xor eax, eax
jmp 0x1400efce9
call fcn.140049470
mov rsi, rax
xor edx, edx
mov r8d, 0x80
lea rbx, [0x14043d310]
mov rcx, rbx
call sub.ntdll.dll_memset
mov edx, 0x5c
lea rcx, str..._ntfsresize.cpp
call qword [sym.imp.ntdll.dll_strrchr]
mov rdi, rax
test rax, rax
jne 0x1400ef79a
mov rbx, r13
jmp 0x1400ef820
mov byte [rsp + 0x42b0], 0
xor eax, eax
mov qword [rsp + 0x42b1], rax
mov word [rsp + 0x42b9], ax
mov byte [rsp + 0x42bb], al
mov r8d, Ordinal_1054
lea rdx, [0x1402dfd08]
lea rcx, [rsp + 0x42b0]
call qword [sym.imp.ntdll.dll_sprintf]
lea rdx, [rdi + 1]
mov rcx, rbx
sub rcx, rdx
movzx eax, byte [rdx]
mov byte [rdx + rcx], al
add rdx, 1
test al, al
jne 0x1400ef7e0
mov rdi, rbx
xor eax, eax
or rcx, 0xffffffffffffffff
repne scasb al, byte [rdi]
lea rdx, [rsp + 0x42b0]
xor ecx, ecx
nop
nop
nop
nop
movzx eax, byte [rdx + rcx]
mov byte [rdi + rcx - 1], al
add rcx, 1
test al, al
jne 0x1400ef810
mov rdi, qword [rsi]
mov eax, dword [r14]
mov dword [rsp + 0x20], eax
mov r9, qword [rsp + 0xd0]
mov r8, rbx
lea rdx, str._s:_Failed_to_initialize_DataRun_List__FrNumber:_I64d__AttrCode:0x_X.
mov rcx, rsi
call qword [rdi + 0x10]
mov rcx, qword [rbp + 0x138]
mov rax, qword [rcx]
mov edx, 0xd3
call qword [rax + 0x40]
nop
lea rcx, [rsp + 0x1c0]
call fcn.1400dbc40
nop
mov rcx, qword [rsp + 0x68]
test rcx, rcx
je 0x1400ef8af
mov rbx, qword [rsp + 0x70]
cmp rcx, rbx
je 0x1400ef8aa
lea rdi, [rcx + 0x18]
nop
nop
mov rcx, qword [rdi]
test rcx, rcx
je 0x1400ef88d
call sub.MFC80U.DLL_Ordinal_776
mov qword [rdi], r13
mov qword [rdi + 8], r13
mov qword [rdi + 0x10], r13
add rdi, 0x30
lea rax, [rdi - 0x18]
cmp rax, rbx
jne 0x1400ef880
mov rcx, qword [rsp + 0x68]
call sub.MFC80U.DLL_Ordinal_776
mov qword [rsp + 0x68], r13
mov qword [rsp + 0x70], r13
mov qword [rsp + 0x78], r13
lea rcx, [rsp + 0x230]
call fcn.1400d9920
nop
mov rcx, qword [rsp + 0x98]
test rcx, rcx
je 0x1400ef922
mov rbx, qword [rsp + 0xa0]
cmp rcx, rbx
je 0x1400ef91d
lea rdi, [rcx + 0x18]
nop
nop
mov rcx, qword [rdi]
test rcx, rcx
je 0x1400ef8fd
call sub.MFC80U.DLL_Ordinal_776
mov qword [rdi], r13
mov qword [rdi + 8], r13
mov qword [rdi + 0x10], r13
add rdi, 0x30
lea rax, [rdi - 0x18]
cmp rax, rbx
jne 0x1400ef8f0
mov rcx, qword [rsp + 0x98]
call sub.MFC80U.DLL_Ordinal_776
xor eax, eax
jmp 0x1400efce9
call fcn.140049470
mov rdi, rax
mov rbx, qword [rax]
mov edx, Ordinal_1015
lea rcx, str..._ntfsresize.cpp
call fcn.1400e68c0
mov r8, rax
mov r9, r13
lea rdx, str._s:_Failed_to_read_the_file_record__FrNumber:_I64d.
mov rcx, rdi
call qword [rbx + 0x10]
mov rcx, qword [r14 + 0x138]
mov rax, qword [rcx]
mov edx, 0xd2
call qword [rax + 0x40]
nop
lea rcx, [rsp + 0x230]
call fcn.1400d9920
nop
mov rcx, qword [rsp + 0x98]
test rcx, rcx
je 0x1400ef9c9
mov rbx, qword [rsp + 0xa0]
cmp rcx, rbx
je 0x1400ef9c4
lea rdi, [rcx + 0x18]
mov rcx, qword [rdi]
test rcx, rcx
je 0x1400ef9a4
call sub.MFC80U.DLL_Ordinal_776
mov qword [rdi], r15
mov qword [rdi + 8], r15
mov qword [rdi + 0x10], r15
add rdi, 0x30
lea rax, [rdi - 0x18]
cmp rax, rbx
jne 0x1400ef997
mov rcx, qword [rsp + 0x98]
call sub.MFC80U.DLL_Ordinal_776
xor eax, eax
jmp 0x1400efce9
mov edi, dword [rsp + 0xc0]
movabs r9, 0x2aaaaaaaaaaaaaab
jmp 0x1400efb2d
mov rcx, qword [r14 + 0x138]
mov rax, qword [rcx]
mov edx, 0x17
call qword [rax + 0x40]
call fcn.140049470
mov rsi, rax
xor edx, edx
mov r8d, 0x80
lea rbx, [0x14043d310]
mov rcx, rbx
call sub.ntdll.dll_memset
mov edx, 0x5c
lea rcx, str..._ntfsresize.cpp
call qword [sym.imp.ntdll.dll_strrchr]
mov rdi, rax
test rax, rax
jne 0x1400efa3b
xor ebp, ebp
mov rbx, rbp
jmp 0x1400efac2
mov byte [rsp + 0x42b0], 0
xor eax, eax
mov qword [rsp + 0x42b1], rax
mov word [rsp + 0x42b9], ax
mov byte [rsp + 0x42bb], al
mov r8d, 0x3e6
lea rdx, [0x1402dfd08]
lea rcx, [rsp + 0x42b0]
call qword [sym.imp.ntdll.dll_sprintf]
lea rdx, [rdi + 1]
mov rcx, rbx
sub rcx, rdx
movzx eax, byte [rdx]
mov byte [rcx + rdx], al
add rdx, 1
test al, al
jne 0x1400efa81
mov rdi, rbx
xor eax, eax
or rcx, 0xffffffffffffffff
repne scasb al, byte [rdi]
lea rdx, [rsp + 0x42b0]
xor ecx, ecx
nop
nop
nop
movzx eax, byte [rdx + rcx]
mov byte [rdi + rcx - 1], al
add rcx, 1
test al, al
jne 0x1400efab0
xor ebp, ebp
mov rax, qword [rsi]
mov r8, rbx
lea rdx, str._s:_User_cancel_operations.
mov rcx, rsi
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x98]
test rcx, rcx
je 0x1400efb26
mov rbx, qword [rsp + 0xa0]
cmp rcx, rbx
je 0x1400efb21
lea rdi, [rcx + 0x18]
mov rcx, qword [rdi]
test rcx, rcx
je 0x1400efb01
call sub.MFC80U.DLL_Ordinal_776
mov qword [rdi], rbp
mov qword [rdi + 8], rbp
mov qword [rdi + 0x10], rbp
add rdi, 0x30
lea rax, [rdi - 0x18]
cmp rax, rbx
jne 0x1400efaf4
mov rcx, qword [rsp + 0x98]
call sub.MFC80U.DLL_Ordinal_776
xor eax, eax
jmp 0x1400efce9
cmp dword [r14 + reloc.MFC80U.DLL_Ordinal_320], 0
jne 0x1400efc8c
test edi, edi
je 0x1400efc91
xor r12d, r12d
mov esi, r12d
nop
nop
mov r8, qword [rsp + 0xa0]
mov rdi, qword [rsp + 0x98]
test rdi, rdi
jne 0x1400efb6a
mov rdx, r12
jmp 0x1400efb84
mov rcx, r8
sub rcx, rdi
mov rax, r9
imul rcx
sar rdx, 3
mov rax, rdx
shr rax, 0x3f
add rdx, rax
mov ebx, esi
cmp rbx, rdx
jae 0x1400efc79
test rdi, rdi
je 0x1400efbb0
sub r8, rdi
mov rax, r9
imul r8
sar rdx, 3
mov rax, rdx
shr rax, 0x3f
add rdx, rax
cmp rbx, rdx
jb 0x1400efbbe
call qword [sym.imp.MSVCR80.dll__invalid_parameter_noinfo]
mov rdi, qword [rsp + 0x98]
lea rdx, [rbx + rbx*2]
shl rdx, 4
add rdx, rdi
mov rcx, r14
call fcn.1400e79e0
mov ebp, eax
test eax, eax
jne 0x1400efbe9
add esi, 1
movabs r9, 0x2aaaaaaaaaaaaaab
jmp 0x1400efb50
call fcn.140049470
mov rdi, rax
mov rbx, qword [rax]
mov edx, 0x517
lea rcx, str..._ntfsresize.cpp
call fcn.1400e68c0
mov r8, rax
lea rdx, str._s:_Move_file_data_error.
mov rcx, rdi
call qword [rbx + 0x10]
mov rcx, qword [r14 + 0x138]
mov rax, qword [rcx]
mov edx, ebp
call qword [rax + 0x40]
nop
mov rcx, qword [rsp + 0x98]
test rcx, rcx
je 0x1400efc75
mov rbx, qword [rsp + 0xa0]
cmp rcx, rbx
je 0x1400efc70
lea rdi, [rcx + 0x18]
mov rcx, qword [rdi]
test rcx, rcx
je 0x1400efc50
call sub.MFC80U.DLL_Ordinal_776
mov qword [rdi], r12
mov qword [rdi + 8], r12
mov qword [rdi + 0x10], r12
add rdi, 0x30
lea rax, [rdi - 0x18]
cmp rax, rbx
jne 0x1400efc43
mov rcx, qword [rsp + 0x98]
call sub.MFC80U.DLL_Ordinal_776
xor eax, eax
jmp 0x1400efce9
xor r9d, r9d
or r8, 0xffffffffffffffff
xor edx, edx
mov rcx, r14
call fcn.1400e69b0
jmp 0x1400efc94
xor r12d, r12d
jmp 0x1400efc94
xor r12d, r12d
mov rcx, qword [rsp + 0x98]
test rcx, rcx
je 0x1400efce4
mov rbx, qword [rsp + 0xa0]
cmp rcx, rbx
je 0x1400efcdf
lea rdi, [rcx + 0x18]
mov rcx, qword [rdi]
test rcx, rcx
je 0x1400efcbf
call sub.MFC80U.DLL_Ordinal_776
mov qword [rdi], r12
mov qword [rdi + 8], r12
mov qword [rdi + 0x10], r12
add rdi, 0x30
lea rcx, [rdi - 0x18]
cmp rcx, rbx
jne 0x1400efcb2
mov rcx, qword [rsp + 0x98]
call sub.MFC80U.DLL_Ordinal_776
mov eax, 1
mov rcx, qword [rsp + 0xcb90]
xor rcx, rsp
call fcn.140161080
mov rbx, qword [rsp + 0xcc00]
movaps xmm6, xmmword [rsp + 0xcba0]
add rsp, 0xcbb0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret