Function at 0x1400efe00
Capabilities:
Check for time delay via gettickcount

Disassembly:
push rdi
push r12
push r13
push r14
push r15
mov eax, 0x4330
call sub.ntdll.dll___chkstk
sub rsp, rax
mov qword [rsp + 0x90], 0xfffffffffffffffe
mov qword [rsp + 0x4368], rbx
mov qword [rsp + 0x4370], rbp
mov qword [rsp + 0x4378], rsi
movaps xmmword [rsp + 0x4320], xmm6
movaps xmmword [rsp + 0x4310], xmm7
movaps xmmword [rsp + 0x4300], xmm8
mov rax, qword [0x14042d950]
xor rax, rsp
mov qword [rsp + 0x42f0], rax
mov rbp, rcx
lea rdx, [rcx + 0x32]
mov r8d, 0x100
lea rcx, [rsp + 0x41f0]
call qword [sym.imp.ntdll.dll_wcstombs]
call fcn.140049470
mov rbx, rax
xor edx, edx
mov r8d, 0x80
lea r13, [0x14043d310]
mov rcx, r13
call sub.ntdll.dll_memset
mov edx, 0x5c
lea rcx, str..._ntfsresize.cpp
call qword [sym.imp.ntdll.dll_strrchr]
mov rdi, rax
xor esi, esi
test rax, rax
jne 0x1400efec4
mov r8, rsi
jmp 0x1400eff53
mov byte [rsp + 0x41e0], sil
xor eax, eax
mov qword [rsp + 0x41e1], rax
mov word [rsp + 0x41e9], ax
mov byte [rsp + 0x41eb], al
mov r8d, 0xc3
lea rdx, [0x1402dfd08]
lea rcx, [rsp + 0x41e0]
call qword [sym.imp.ntdll.dll_sprintf]
lea rdx, [rdi + 1]
mov rcx, r13
sub rcx, rdx
nop
nop
movzx eax, byte [rdx]
mov byte [rdx + rcx], al
add rdx, 1
test al, al
jne 0x1400eff10
mov rdi, r13
xor eax, eax
or rcx, 0xffffffffffffffff
repne scasb al, byte [rdi]
lea rdx, [rsp + 0x41e0]
xor ecx, ecx
nop
nop
nop
nop
movzx eax, byte [rdx + rcx]
mov byte [rdi + rcx - 1], al
add rcx, 1
test al, al
jne 0x1400eff40
mov r8, r13
mov rax, qword [rbx]
lea r9, [rsp + 0x41f0]
lea rdx, str._s:_Shrink_Work_on__s.
mov rcx, rbx
call qword [rax + 0x10]
movabs rax, 0x3f947ae147ae147b
mov qword [rbp + 0x4320], rax
mov rcx, qword [rbp + 0x138]
mov rax, qword [rcx]
call qword [rax + 0xe0]
cvtsi2sd xmm6, eax
movsd xmm8, qword [0x1403b85a8]
divsd xmm6, xmm8
mov rcx, qword [rbp + 0x138]
mov rax, qword [rcx]
call qword [rax + 0xa0]
cvtsi2sd xmm0, eax
mulsd xmm0, xmm6
cvttsd2si eax, xmm0
mov dword [rbp + 0x4328], eax
mov edx, 0x64
mov rcx, rbp
call fcn.1400e7640
mov rcx, rbp
call fcn.1400e7180
test eax, eax
je 0x1400f00cf
call fcn.140049470
mov rbx, rax
xor edx, edx
mov r8d, 0x80
mov rcx, r13
call sub.ntdll.dll_memset
mov edx, 0x5c
lea rcx, str..._ntfsresize.cpp
call qword [sym.imp.ntdll.dll_strrchr]
mov rdi, rax
test rax, rax
je 0x1400f00a3
mov byte [rsp + 0x41e0], sil
xor eax, eax
mov qword [rsp + 0x41e1], rax
mov word [rsp + 0x41e9], ax
mov byte [rsp + 0x41eb], al
mov r8d, 0xd2
lea rdx, [0x1402dfd08]
lea rcx, [rsp + 0x41e0]
call qword [sym.imp.ntdll.dll_sprintf]
lea rdx, [rdi + 1]
mov rcx, r13
sub rcx, rdx
nop
nop
movzx eax, byte [rdx]
mov byte [rdx + rcx], al
add rdx, 1
test al, al
jne 0x1400f0060
mov rdi, r13
xor eax, eax
or rcx, 0xffffffffffffffff
repne scasb al, byte [rdi]
lea rdx, [rsp + 0x41e0]
xor ecx, ecx
nop
nop
nop
nop
movzx eax, byte [rdx + rcx]
mov byte [rdi + rcx - 1], al
add rcx, 1
test al, al
jne 0x1400f0090
mov rsi, r13
mov rax, qword [rbx]
mov r8, rsi
lea rdx, str._s:_There_is_0x20_in__Bitmap.
mov rcx, rbx
call qword [rax + 0x10]
mov rcx, qword [rbp + 0x138]
mov rax, qword [rcx]
mov edx, 0xdc
call qword [rax + 0x40]
xor eax, eax
jmp 0x1400f0cef
mov qword [rsp + 0x78], rsi
mov qword [rsp + 0x80], rsi
mov qword [rsp + 0x88], rsi
mov qword [rsp + 0x38], rsi
mov qword [rsp + 0x40], rsi
mov qword [rsp + 0x48], rsi
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov rdx, qword [rbp + reloc.MFC80U.DLL_Ordinal_576]
lea rcx, [rbp + 0x148]
call fcn.140111c70
mov rcx, rbp
call fcn.1400eabc0
test eax, eax
jne 0x1400f0179
call fcn.140049470
mov rdi, rax
mov rbx, qword [rax]
mov edx, 0xe0
lea rcx, str..._ntfsresize.cpp
call fcn.1400e68c0
mov r8, rax
lea rdx, [0x1402f11d0]
mov rcx, rdi
call qword [rbx + 0x10]
nop
mov rcx, qword [rsp + 0x38]
test rcx, rcx
je 0x1400f0154
call sub.MFC80U.DLL_Ordinal_776
mov qword [rsp + 0x38], rsi
mov qword [rsp + 0x40], rsi
mov qword [rsp + 0x48], rsi
mov rcx, qword [rsp + 0x78]
test rcx, rcx
je 0x1400f0172
call sub.MFC80U.DLL_Ordinal_776
xor eax, eax
jmp 0x1400f0cef
mov dword [rsp + 0x20], esi
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rsp + 0x160]
call fcn.1400d9890
nop
xor r9d, r9d
lea r8, [rsp + 0x160]
lea edx, [r9 + 1]
lea rcx, [rbp + 0x248]
call fcn.1400de420
test eax, eax
jne 0x1400f023d
call fcn.140049470
mov rdi, rax
mov rbx, qword [rax]
mov edx, 0xe8
lea rcx, str..._ntfsresize.cpp
call fcn.1400e68c0
mov r8, rax
mov r9d, 1
lea rdx, str._s:_Failed_to_read_the_file_record__FrNumber:_I64d.
mov rcx, rdi
call qword [rbx + 0x10]
mov rcx, qword [rbp + 0x138]
mov rax, qword [rcx]
mov edx, 0xd2
call qword [rax + 0x40]
nop
lea rcx, [rsp + 0x160]
call fcn.1400d9920
nop
mov rcx, qword [rsp + 0x38]
test rcx, rcx
je 0x1400f0218
call sub.MFC80U.DLL_Ordinal_776
mov qword [rsp + 0x38], rsi
mov qword [rsp + 0x40], rsi
mov qword [rsp + 0x48], rsi
mov rcx, qword [rsp + 0x78]
test rcx, rcx
je 0x1400f0236
call sub.MFC80U.DLL_Ordinal_776
xor eax, eax
jmp 0x1400f0cef
lea rdx, [rbp + reloc.MFC80U.DLL_Ordinal_752]
mov r8d, dword [rbp + 0x4344]
lea rcx, [rsp + 0x160]
call fcn.1400d9540
nop
lea rcx, [rsp + 0x160]
call fcn.1400d9920
movabs rdx, 0x3fb999999999999a
mov qword [rbp + 0x4320], rdx
mov rcx, qword [rbp + 0x138]
mov rax, qword [rcx]
call qword [rax + 0xe0]
cvtsi2sd xmm6, eax
divsd xmm6, xmm8
mov rcx, qword [rbp + 0x138]
mov rax, qword [rcx]
call qword [rax + 0xa0]
cvtsi2sd xmm0, eax
mulsd xmm0, xmm6
cvttsd2si eax, xmm0
mov dword [rbp + 0x4328], eax
lea rdi, [rbp + reloc.MFC80U.DLL_Ordinal_744]
mov qword [rsp + 0x20], rdi
lea r9, [rbp + 0x148]
lea r8, [rsp + 0x30]
lea rdx, [rsp + 0x70]
mov rcx, rbp
call fcn.1400eaf10
test eax, eax
jne 0x1400f033c
call fcn.140049470
mov rdi, rax
mov rbx, qword [rax]
mov edx, 0xf6
lea rcx, str..._ntfsresize.cpp
call fcn.1400e68c0
mov r8, rax
lea rdx, [0x1402f11b0]
mov rcx, rdi
call qword [rbx + 0x10]
nop
mov rcx, qword [rsp + 0x38]
test rcx, rcx
je 0x1400f0317
call sub.MFC80U.DLL_Ordinal_776
mov qword [rsp + 0x38], rsi
mov qword [rsp + 0x40], rsi
mov qword [rsp + 0x48], rsi
mov rcx, qword [rsp + 0x78]
test rcx, rcx
je 0x1400f0335
call sub.MFC80U.DLL_Ordinal_776
xor eax, eax
jmp 0x1400f0cef
cmp qword [rdi], 0
jne 0x1400f0349
mov qword [rdi], 1
lea rcx, [rsp + 0xa0]
call fcn.140112e60
nop
lea rdx, [rbp + 0x148]
lea rcx, [rsp + 0xa0]
call fcn.1401130f0
mov qword [rsp + 0x58], rsi
mov qword [rsp + 0x60], rsi
mov qword [rsp + 0x68], rsi
mov r12d, esi
movsd xmm7, qword [0x1402f11a8]
test r12d, r12d
jne 0x1400f0415
mov dword [rbp + reloc.MFC80U.DLL_Ordinal_320], 1
call fcn.140049470
mov rdi, rax
mov rbx, qword [rax]
mov edx, 0x11f
lea rcx, str..._ntfsresize.cpp
call fcn.1400e68c0
mov r8, rax
lea rdx, str._s:_Begin_checking_volume.
mov rcx, rdi
call qword [rbx + 0x10]
movabs rax, 0x3fbeb851eb851eb8
mov qword [rbp + 0x4320], rax
mov rcx, qword [rbp + 0x138]
mov rax, qword [rcx]
call qword [rax + 0xe0]
cvtsi2sd xmm6, eax
divsd xmm6, xmm8
mov rcx, qword [rbp + 0x138]
mov rax, qword [rcx]
call qword [rax + 0xa0]
cvtsi2sd xmm0, eax
mulsd xmm0, xmm6
cvttsd2si eax, xmm0
mov dword [rbp + 0x4328], eax
jmp 0x1400f054b
call fcn.140049470
mov rdi, rax
mov rbx, qword [rax]
mov edx, Ordinal_293
lea rcx, str..._ntfsresize.cpp
call fcn.1400e68c0
mov r8, rax
lea rdx, str._s:_Begin_shrinking_volume.
mov rcx, rdi
call qword [rbx + 0x10]
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [rbp + 0x4338], eax
mov rcx, qword [rsp + 0x60]
mov rdi, rcx
mov rbx, qword [rsp + 0x58]
cmp rbx, rcx
jbe 0x1400f046f
call qword [sym.imp.MSVCR80.dll__invalid_parameter_noinfo]
mov rcx, qword [rsp + 0x60]
mov rbx, qword [rsp + 0x58]
cmp rbx, rcx
jbe 0x1400f047f
call qword [sym.imp.MSVCR80.dll__invalid_parameter_noinfo]
mov rcx, qword [rsp + 0x60]
cmp rbx, rdi
je 0x1400f04be
mov rdx, rcx
sub rdx, rdi
and rdx, 0xfffffffffffffff0
add rdx, rbx
cmp rdi, rcx
je 0x1400f04b9
sub rbx, rdi
nop
nop
mov rax, qword [rdi]
mov qword [rdi + rbx], rax
mov rax, qword [rdi + 8]
mov qword [rdi + rbx + 8], rax
add rdi, 0x10
cmp rdi, rcx
jne 0x1400f04a0
mov qword [rsp + 0x60], rdx
mov dword [rbp + reloc.MFC80U.DLL_Ordinal_320], esi
lea rdx, [rsp + 0xa0]
lea rcx, [rbp + 0x148]
call fcn.1401130f0
lea rcx, [rsp + 0xa0]
call fcn.140112f00
movabs rax, 0x3fe6666666666666
mov qword [rbp + 0x4320], rax
mov rcx, qword [rbp + 0x138]
mov rax, qword [rcx]
call qword [rax + 0xe0]
cvtsi2sd xmm6, eax
divsd xmm6, xmm8
mov rcx, qword [rbp + 0x138]
mov rax, qword [rcx]
call qword [rax + 0xa0]
cvtsi2sd xmm0, eax
mulsd xmm0, xmm6
cvttsd2si eax, xmm0
mov dword [rbp + 0x4328], eax
mov rcx, qword [rbp + 0x138]
mov rax, qword [rcx]
xor edx, edx
call qword [rax + 0x48]
mov qword [rbp + 0x42f0], 0xffffffffffffffff
mov rcx, qword [rsp + 0x78]
test rcx, rcx
je 0x1400f0597
mov rax, qword [rsp + 0x80]
sub rax, rcx
sar rax, 3
je 0x1400f0597
call qword [sym.imp.KERNEL32.dll_GetTickCount]
xor r9d, r9d
lea r8, [rbp + 0x148]
lea rdx, [rsp + 0x70]
mov rcx, rbp
call fcn.1400edec0
test eax, eax
je 0x1400f067e
lea rcx, [rbp + 0x248]
call fcn.1400ddc50
mov rcx, rbp
call fcn.1400e6b00
test eax, eax
jne 0x1400f05cf
call fcn.140049470
mov rdi, rax
mov rbx, qword [rax]
mov edx, 0x141
lea rcx, str..._ntfsresize.cpp
call fcn.1400e68c0
mov r8, rax
lea rdx, str._s:_Failed_to_reset__Logfile.
mov rcx, rdi
call qword [rbx + 0x10]
mov rcx, rbp
call fcn.1400ec0c0
test eax, eax
jne 0x1400f0607
call fcn.140049470
mov rdi, rax
mov rbx, qword [rax]
mov edx, 0x145
lea rcx, str..._ntfsresize.cpp
call fcn.1400e68c0
mov r8, rax
lea rdx, str._s:_Failed_to_reset__Badclus.
mov rcx, rdi
call qword [rbx + 0x10]
lea rdx, [rsp + 0x50]
mov rcx, rbp
call fcn.1400ec9e0
test eax, eax
je 0x1400f0c67
mov rcx, qword [rsp + 0x38]
test rcx, rcx
je 0x1400f066b
mov rax, qword [rsp + 0x40]
sub rax, rcx
sar rax, 3
je 0x1400f066b
cmp dword [rbp + reloc.MFC80U.DLL_Ordinal_320], 0
je 0x1400f0649
movsd xmm1, xmm7
mov rcx, rbp
call fcn.1400f2380
mov r9d, 1
lea r8, [rbp + 0x148]
lea rdx, [rsp + 0x30]
mov rcx, rbp
call fcn.1400edec0
test eax, eax
je 0x1400f070b
add r12d, 1
cmp r12d, 2
jge 0x1400f0798
jmp 0x1400f0385
call fcn.140049470
mov rdi, rax
mov rbx, qword [rax]
mov edx, 0x136
lea rcx, str..._ntfsresize.cpp
call fcn.1400e68c0
mov r8, rax
lea rdx, str._s:_MoveFrData_failed.
mov rcx, rdi
call qword [rbx + 0x10]
nop
mov rcx, qword [rsp + 0x58]
test rcx, rcx
je 0x1400f06ba
call sub.MFC80U.DLL_Ordinal_776
mov qword [rsp + 0x58], rsi
mov qword [rsp + 0x60], rsi
mov qword [rsp + 0x68], rsi
lea rcx, [rsp + 0xa0]
call fcn.140112fb0
nop
mov rcx, qword [rsp + 0x38]
test rcx, rcx
je 0x1400f06e6
call sub.MFC80U.DLL_Ordinal_776
mov qword [rsp + 0x38], rsi
mov qword [rsp + 0x40], rsi
mov qword [rsp + 0x48], rsi
mov rcx, qword [rsp + 0x78]
test rcx, rcx
je 0x1400f0704
call sub.MFC80U.DLL_Ordinal_776
xor eax, eax
jmp 0x1400f0cef
call fcn.140049470
mov rdi, rax
mov rbx, qword [rax]
mov edx, 0x158
lea rcx, str..._ntfsresize.cpp
call fcn.1400e68c0
mov r8, rax
lea rdx, str._s:_MoveFrData_failed.
mov rcx, rdi
call qword [rbx + 0x10]
nop
mov rcx, qword [rsp + 0x58]
test rcx, rcx
je 0x1400f0747
call sub.MFC80U.DLL_Ordinal_776
mov qword [rsp + 0x58], rsi
mov qword [rsp + 0x60], rsi
mov qword [rsp + 0x68], rsi
lea rcx, [rsp + 0xa0]
call fcn.140112fb0
nop
mov rcx, qword [rsp + 0x38]
test rcx, rcx
je 0x1400f0773
call sub.MFC80U.DLL_Ordinal_776
mov qword [rsp + 0x38], rsi
mov qword [rsp + 0x40], rsi
mov qword [rsp + 0x48], rsi
mov rcx, qword [rsp + 0x78]
test rcx, rcx
je 0x1400f0791
call sub.MFC80U.DLL_Ordinal_776
xor eax, eax
jmp 0x1400f0cef
mov r9d, 1
xor r8d, r8d
lea rdx, [rsp + 0x160]
mov rcx, qword [rbp]
call fcn.1401117f0
test eax, eax
jne 0x1400f07e2
call fcn.140049470
mov rdi, rax
mov rbx, qword [rax]
mov edx, 0x164
lea rcx, str..._ntfsresize.cpp
call fcn.1400e68c0
mov r8, rax
lea rdx, str._s:_Read_dbr_sector_failed.
mov rcx, rdi
call qword [rbx + 0x10]
lea rax, [0x1402edbf0]
mov qword [rsp + 0x41e0], rax
lea r8, [rsp + 0x120]
lea rdx, [rsp + 0x160]
lea rcx, [rsp + 0x41e0]
call fcn.1400db5c0
cmp qword [rbp + 0x42f0], 0
jge 0x1400f0827
mov rax, qword [rsp + 0x124]
mov qword [rbp + 0x42f0], rax
mov rcx, rbp
call fcn.1400e9b10
test eax, eax
jne 0x1400f085f
call fcn.140049470
mov rdi, rax
mov rbx, qword [rax]
mov edx, 0x172
lea rcx, str..._ntfsresize.cpp
call fcn.1400e68c0
mov r8, rax
lea rdx, str._s:_Failed_to_process__MFTMirror
mov rcx, rdi
call qword [rbx + 0x10]
cmp qword [rbp + 0x42f8], 0
jge 0x1400f0878
mov rax, qword [rsp + 0x12c]
mov qword [rbp + 0x42f8], rax
mov rcx, qword [rbp + 0x2d0]
test rcx, rcx
je 0x1400f0939
mov rax, qword [rbp + 0x2d8]
sub rax, rcx
sar rax, 4
je 0x1400f0939
mov ebx, esi
mov r12, rsi
mov rdi, rsi
mov rax, qword [rbp + 0x2d0]
test rax, rax
jne 0x1400f08b5
mov rcx, rsi
jmp 0x1400f08c3
mov rcx, qword [rbp + 0x2d8]
sub rcx, rax
sar rcx, 4
mov eax, ebx
cmp rax, rcx
jae 0x1400f0939
mov rcx, qword [rbp + 0x2d0]
test rcx, rcx
je 0x1400f08e9
mov rax, qword [rbp + 0x2d8]
sub rax, rcx
sar rax, 4
cmp r12, rax
jb 0x1400f08ef
call qword [sym.imp.MSVCR80.dll__invalid_parameter_noinfo]
mov rcx, qword [rbp + 0x2d0]
lea rdx, [rsp + 0x41e0]
mov rax, qword [rcx + rdi]
mov qword [rdx], rax
mov rax, qword [rcx + rdi + 8]
mov qword [rdx + 8], rax
mov r8d, dword [rsp + 0x41e8]
mov edx, dword [rsp + 0x41e0]
lea rcx, [rbp + 0x148]
call fcn.140112b30
add ebx, 1
add r12, 1
add rdi, 0x10
jmp 0x1400f08a4
lea rdx, [rsp + 0x50]
mov rcx, rbp
call fcn.1400e8550
test eax, eax
jne 0x1400f0a23
call fcn.140049470
mov rbx, rax
xor edx, edx
mov r8d, 0x80
mov rcx, r13
call sub.ntdll.dll_memset
mov edx, 0x5c
lea rcx, str..._ntfsresize.cpp
call qword [sym.imp.ntdll.dll_strrchr]
mov rdi, rax
test rax, rax
jne 0x1400f0988
mov r8, rsi
jmp 0x1400f0a13
mov byte [rsp + 0x41e0], 0
xor eax, eax
mov qword [rsp + 0x41e1], rax
mov word [rsp + 0x41e9], ax
mov byte [rsp + 0x41eb], al
mov r8d, Ordinal_393
lea rdx, [0x1402dfd08]
lea rcx, [rsp + 0x41e0]
call qword [sym.imp.ntdll.dll_sprintf]
lea rdx, [rdi + 1]
mov rcx, r13
sub rcx, rdx
nop
movzx eax, byte [rdx]
mov byte [rdx + rcx], al
add rdx, 1
test al, al
jne 0x1400f09d0
mov rdi, r13
xor eax, eax
or rcx, 0xffffffffffffffff
repne scasb al, byte [rdi]
lea rdx, [rsp + 0x41e0]
xor ecx, ecx
nop
nop
nop
nop
movzx eax, byte [rdx + rcx]
mov byte [rdi + rcx - 1], al
add rcx, 1
test al, al
jne 0x1400f0a00
mov r8, r13
mov rax, qword [rbx]
lea rdx, str._s:_Move__Bitmap_data_failed.
mov rcx, rbx
call qword [rax + 0x10]
mov rcx, rbp
call fcn.1400e73a0
test eax, eax
jne 0x1400f0b13
call fcn.140049470
mov rbx, rax
xor edx, edx
mov r8d, 0x80
mov rcx, r13
call sub.ntdll.dll_memset
mov edx, 0x5c
lea rcx, str..._ntfsresize.cpp
call qword [sym.imp.ntdll.dll_strrchr]
mov rdi, rax
test rax, rax
jne 0x1400f0a6d
mov r8, rsi
jmp 0x1400f0b03
mov byte [rsp + 0x41e0], 0
xor eax, eax
mov qword [rsp + 0x41e1], rax
mov word [rsp + 0x41e9], ax
mov byte [rsp + 0x41eb], al
mov r8d, Ordinal_401
lea rdx, [0x1402dfd08]
lea rcx, [rsp + 0x41e0]
call qword [sym.imp.ntdll.dll_sprintf]
lea rdx, [rdi + 1]
mov rcx, r13
sub rcx, rdx
nop
nop
nop
nop
movzx eax, byte [rdx]
mov byte [rdx + rcx], al
add rdx, 1
test al, al
jne 0x1400f0ac0
mov rdi, r13
xor eax, eax
or rcx, 0xffffffffffffffff
repne scasb al, byte [rdi]
lea rdx, [rsp + 0x41e0]
xor ecx, ecx
nop
nop
nop
nop
movzx eax, byte [rdx + rcx]
mov byte [rdi + rcx - 1], al
add rcx, 1
test al, al
jne 0x1400f0af0
mov r8, r13
mov rax, qword [rbx]
lea rdx, str._s:_Failed_to_process__Boot
mov rcx, rbx
call qword [rax + 0x10]
mov rcx, qword [rbp + 0x138]
mov rax, qword [rcx]
mov edx, 0x64
call qword [rax + 0x10]
call fcn.140049470
mov rbx, rax
xor edx, edx
mov r8d, 0x80
mov rcx, r13
call sub.ntdll.dll_memset
mov edx, 0x5c
lea rcx, str..._ntfsresize.cpp
call qword [sym.imp.ntdll.dll_strrchr]
mov rdi, rax
test rax, rax
jne 0x1400f0b5f
mov r13, rsi
jmp 0x1400f0bf0
mov byte [rsp + 0x41e0], 0
xor eax, eax
mov qword [rsp + 0x41e1], rax
mov word [rsp + 0x41e9], ax
mov byte [rsp + 0x41eb], al
mov r8d, reloc.MFC80U.DLL_Ordinal_401
lea rdx, [0x1402dfd08]
lea rcx, [rsp + 0x41e0]
call qword [sym.imp.ntdll.dll_sprintf]
lea rdx, [rdi + 1]
mov rcx, r13
sub rcx, rdx
nop
nop
nop
movzx eax, byte [rdx]
mov byte [rdx + rcx], al
add rdx, 1
test al, al
jne 0x1400f0bb0
mov rdi, r13
xor eax, eax
or rcx, 0xffffffffffffffff
repne scasb al, byte [rdi]
lea rdx, [rsp + 0x41e0]
xor ecx, ecx
nop
nop
nop
nop
movzx eax, byte [rdx + rcx]
mov byte [rdi + rcx - 1], al
add rcx, 1
test al, al
jne 0x1400f0be0
mov rax, qword [rbx]
mov r8, r13
lea rdx, str._s:_End_shrinking_volume.
mov rcx, rbx
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x58]
test rcx, rcx
je 0x1400f0c13
call sub.MFC80U.DLL_Ordinal_776
mov qword [rsp + 0x58], rsi
mov qword [rsp + 0x60], rsi
mov qword [rsp + 0x68], rsi
lea rcx, [rsp + 0xa0]
call fcn.140112fb0
nop
mov rcx, qword [rsp + 0x38]
test rcx, rcx
je 0x1400f0c3f
call sub.MFC80U.DLL_Ordinal_776
mov qword [rsp + 0x38], rsi
mov qword [rsp + 0x40], rsi
mov qword [rsp + 0x48], rsi
mov rcx, qword [rsp + 0x78]
test rcx, rcx
je 0x1400f0c5d
call sub.MFC80U.DLL_Ordinal_776
mov eax, 1
jmp 0x1400f0cef
call fcn.140049470
mov rdi, rax
mov rbx, qword [rax]
mov edx, Ordinal_332
lea rcx, str..._ntfsresize.cpp
call fcn.1400e68c0
mov r8, rax
lea rdx, str._s:_Failed_to_process__Bitmap.
mov rcx, rdi
call qword [rbx + 0x10]
nop
mov rcx, qword [rsp + 0x58]
test rcx, rcx
je 0x1400f0ca3
call sub.MFC80U.DLL_Ordinal_776
mov qword [rsp + 0x58], rsi
mov qword [rsp + 0x60], rsi
mov qword [rsp + 0x68], rsi
lea rcx, [rsp + 0xa0]
call fcn.140112fb0
nop
mov rcx, qword [rsp + 0x38]
test rcx, rcx
je 0x1400f0ccf
call sub.MFC80U.DLL_Ordinal_776
mov qword [rsp + 0x38], rsi
mov qword [rsp + 0x40], rsi
mov qword [rsp + 0x48], rsi
mov rcx, qword [rsp + 0x78]
test rcx, rcx
je 0x1400f0ced
call sub.MFC80U.DLL_Ordinal_776
xor eax, eax
mov rcx, qword [rsp + 0x42f0]
xor rcx, rsp
call fcn.140161080
lea r11, [rsp + 0x4330]
mov rbx, qword [r11 + 0x38]
mov rbp, qword [r11 + 0x40]
mov rsi, qword [r11 + 0x48]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret