Function at 0x1400e8550
Capabilities:
Check for time delay via gettickcount

Disassembly:
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
mov eax, 0x4300
call sub.ntdll.dll___chkstk
sub rsp, rax
mov qword [rsp + 0xb0], 0xfffffffffffffffe
mov qword [rsp + 0x4350], rbx
movaps xmmword [rsp + 0x42f0], xmm6
movaps xmmword [rsp + 0x42e0], xmm7
mov rax, qword [0x14042d950]
xor rax, rsp
mov qword [rsp + 0x42d0], rax
mov r13, rdx
mov qword [rsp + 0x68], rdx
mov rsi, rcx
xor r15d, r15d
mov qword [rsp + 0x38], r15
mov qword [rsp + 0x40], r15
movsd xmm6, qword [0x1403b85b0]
cmp dword [rcx + 0x144], r15d
je 0x1400e8689
mov byte [rsp + 0x2d0], r15b
xor edx, edx
mov r8d, 0x3fff
lea rcx, [rsp + reloc.MFC80U.DLL_Ordinal_721]
call sub.ntdll.dll_memset
lea r9d, [r15 + 1]
xor r8d, r8d
lea rdx, [rsp + 0x2d0]
mov rcx, qword [rsi]
call fcn.1401117f0
test eax, eax
jne 0x1400e8648
call fcn.140049470
mov rdi, rax
mov rbx, qword [rax]
mov edx, 0x805
lea rcx, str..._ntfsresize.cpp
call fcn.1400e68c0
mov r8, rax
lea rdx, [0x1402f06c0]
mov rcx, rdi
call qword [rbx + 0x10]
mov rcx, qword [rsi + 0x138]
mov rax, qword [rcx]
lea edx, [r15 + 0x21]
call qword [rax + 0x40]
xor eax, eax
jmp 0x1400e9645
movzx ecx, word [rsi + 0x2c]
xor edx, edx
mov rax, qword [rsp + reloc.MFC80U.DLL_Ordinal_760]
div rcx
cvtsi2sd xmm0, rax
test rax, rax
jns 0x1400e8667
addsd xmm0, xmm6
addsd xmm0, qword [0x1402f09c8]
cvttsd2si rax, xmm0
mov rcx, qword [rsi + reloc.MFC80U.DLL_Ordinal_576]
mov qword [rsp + 0x38], rcx
add rax, 0xffffffffffffffff
mov qword [rsp + 0x40], rax
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov r14d, eax
mov r12, r15
mov ebp, r15d
mov rbx, r15
mov rcx, r13
call fcn.1400e79c0
test rax, rax
je 0x1400e870e
mov rdi, r15
nop
nop
mov rcx, qword [r13 + 8]
test rcx, rcx
je 0x1400e86c9
mov rax, qword [r13 + 0x10]
sub rax, rcx
sar rax, 4
cmp rbx, rax
jb 0x1400e86cf
call qword [sym.imp.MSVCR80.dll__invalid_parameter_noinfo]
mov rcx, qword [r13 + 8]
lea rdx, [rsp + 0x70]
mov rax, qword [rdi + rcx]
mov qword [rdx], rax
mov rax, qword [rdi + rcx + 8]
mov qword [rdx + 8], rax
movzx eax, word [rsi + 0x2c]
imul eax, dword [rsp + 0x78]
add r12, rax
add ebp, 1
add rbx, 1
add rdi, 0x10
mov rcx, r13
call fcn.1400e79c0
mov ecx, ebp
cmp rcx, rax
jb 0x1400e86b0
xor edx, edx
mov eax, 0x20000000
div dword [rsi + 0x4348]
mov edi, eax
lea rcx, [rsp + 0x88]
call fcn.140110d30
nop
cmp r12, rdi
jg 0x1400e8db7
mov edx, dword [rsi + 0x4348]
imul rdx, r12
shl rdx, 3
lea rcx, [rsp + 0x88]
call fcn.140111150
test eax, eax
je 0x1400e8db7
lea rcx, [rsi + 0x148]
call fcn.140147040
mov rbp, rax
mov r12d, r15d
mov word [rsp + 0x1d0], r12w
xor edx, edx
mov r8d, 0xfe
lea rcx, [rsp + 0x1d2]
call sub.ntdll.dll_memset
mov rcx, qword [rbp + 8]
mov rdi, qword [rcx]
movsd xmm7, qword [0x1402f09c0]
nop
nop
nop
mov rax, qword [rbp + 8]
cmp rdi, rax
je 0x1400e88a6
cmp rdi, rax
jne 0x1400e87b8
call qword [sym.imp.MSVCR80.dll__invalid_parameter_noinfo]
mov r8d, dword [rdi + 0x18]
mov rdx, qword [rdi + 0x10]
lea rcx, [rsp + 0x88]
call fcn.140110d80
call qword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, r14d
cmp eax, 0xbb8
jb 0x1400e888e
mov eax, r12d
cvtsi2sd xmm0, rax
mov rax, qword [rbp + 0x10]
cvtsi2sd xmm1, rax
test rax, rax
jns 0x1400e87fb
addsd xmm1, xmm6
divsd xmm0, xmm1
mulsd xmm0, xmm7
cvttsd2si rbx, xmm0
cmp dword [rsi + 0x433c], 0
je 0x1400e882b
mov r8d, ebx
lea rdx, str.Extending_volume__Process_volume_bitmap:__d___
lea rcx, [rsp + 0x1d0]
call qword [sym.imp.MSVCR80.dll__swprintf]
jmp 0x1400e8843
mov r8d, ebx
lea rdx, str.Shrinking_volume__Process_volume_bitmap:__d___
lea rcx, [rsp + 0x1d0]
call qword [sym.imp.MSVCR80.dll__swprintf]
mov rcx, qword [rsi + 0x138]
mov rax, qword [rcx]
lea rdx, [rsp + 0x1d0]
call qword [rax + 0x70]
mov r8d, ebx
lea rdx, str.Status:_d
lea rcx, [rsp + 0x1d0]
call qword [sym.imp.MSVCR80.dll__swprintf]
mov rcx, qword [rsi + 0x138]
mov rax, qword [rcx]
lea rdx, [rsp + 0x1d0]
call qword [rax + 0x78]
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov r14d, eax
add r12d, 1
cmp rdi, qword [rbp + 8]
jne 0x1400e889e
call qword [sym.imp.MSVCR80.dll__invalid_parameter_noinfo]
mov rdi, qword [rdi]
jmp 0x1400e87a0
lea rcx, [rsi + 0x148]
call fcn.140111c80
mov edi, eax
lea rcx, [rsp + 0x88]
call fcn.140111130
sub rax, rdi
test rax, rax
jle 0x1400e8908
lea rcx, [rsi + 0x148]
call fcn.140111c80
mov edi, eax
lea rcx, [rsp + 0x88]
call fcn.140111130
mov rbx, rax
sub rbx, rdi
lea rcx, [rsi + 0x148]
call fcn.140111c80
mov edx, eax
mov r8, rbx
lea rcx, [rsp + 0x88]
call fcn.140110d80
lea rcx, [rsp + 0x88]
call fcn.140111140
mov rbp, rax
mov qword [rsp + 0x40], rax
mov rbx, r15
mov dword [rsp + 0x20], r15d
mov rdi, r15
mov qword [rsp + 0x38], r15
mov r12, qword [rsp + 0x68]
mov rcx, r12
call fcn.1400e79c0
test rax, rax
je 0x1400e8d2b
mov r13, r15
mov qword [rsp + 0x30], r15
movsd xmm6, qword [0x1403b85a8]
mov rcx, qword [r12 + 8]
test rcx, rcx
je 0x1400e896e
mov rax, qword [r12 + 0x10]
sub rax, rcx
sar rax, 4
cmp rdi, rax
jb 0x1400e8974
call qword [sym.imp.MSVCR80.dll__invalid_parameter_noinfo]
mov rcx, qword [r12 + 8]
lea rdx, [rsp + 0x70]
mov rax, qword [r13 + rcx]
mov qword [rdx], rax
mov rax, qword [r13 + rcx + 8]
mov qword [rdx + 8], rax
mov ecx, dword [rsp + 0x78]
xor edx, edx
mov eax, 0x800000
div dword [rsi + 0x4348]
mov edi, eax
movzx eax, word [rsi + 0x2c]
imul rax, rcx
cqo
idiv rdi
mov r15, rdx
mov r13, rax
xor eax, eax
mov r12, rax
mov r14, qword [rsp + 0x70]
test r13, r13
jle 0x1400e8a5b
mov rbp, rax
nop
nop
movzx r8d, word [rsi + 0x2c]
imul r8, r14
add r8, rbp
cmp dword [rsi + reloc.MFC80U.DLL_Ordinal_320], 0
jne 0x1400e8a39
mov rax, qword [rsp + 0x40]
lea rdx, [rbx + rax]
mov r9, rdi
mov rcx, qword [rsi]
call fcn.140111800
test eax, eax
je 0x1400e8b1f
add qword [rsi + 0x4330], rdi
cvtsi2sd xmm1, qword [rsi + 0x4330]
movzx eax, word [rsi + 0x2c]
mov rcx, qword [rsi + reloc.MFC80U.DLL_Ordinal_744]
imul rcx, rax
cvtsi2sd xmm0, rcx
divsd xmm1, xmm0
mulsd xmm1, xmm6
cvttsd2si edx, xmm1
mov rcx, rsi
call fcn.1400e7640
mov eax, dword [rsi + 0x4348]
imul rax, rdi
add rbx, rax
add r12, 1
add rbp, rdi
cmp r12, r13
jl 0x1400e89d0
mov rbp, qword [rsp + 0x40]
test r15, r15
jle 0x1400e8ad5
movzx r8d, word [rsi + 0x2c]
imul r8, r14
imul r13, rdi
add r8, r13
cmp dword [rsi + reloc.MFC80U.DLL_Ordinal_320], 0
jne 0x1400e8ac8
lea rdx, [rbx + rbp]
mov r9, r15
mov rcx, qword [rsi]
call fcn.140111800
test eax, eax
je 0x1400e8c2b
add qword [rsi + 0x4330], r15
cvtsi2sd xmm1, qword [rsi + 0x4330]
movzx eax, word [rsi + 0x2c]
mov rcx, qword [rsi + reloc.MFC80U.DLL_Ordinal_744]
imul rcx, rax
cvtsi2sd xmm0, rcx
divsd xmm1, xmm0
mulsd xmm1, xmm6
cvttsd2si edx, xmm1
mov rcx, rsi
call fcn.1400e7640
mov eax, dword [rsi + 0x4348]
imul rax, r15
add rbx, rax
mov r12d, dword [rsp + 0x20]
add r12d, 1
mov dword [rsp + 0x20], r12d
mov rdi, qword [rsp + 0x38]
add rdi, 1
mov qword [rsp + 0x38], rdi
mov r13, qword [rsp + 0x30]
add r13, 0x10
mov qword [rsp + 0x30], r13
mov rcx, qword [rsp + 0x68]
call fcn.1400e79c0
mov ecx, r12d
cmp rcx, rax
jae 0x1400e8d2b
mov r12, qword [rsp + 0x68]
jmp 0x1400e8953
call fcn.140049470
mov rbp, rax
xor edx, edx
mov r8d, 0x80
lea rbx, [0x14043d310]
mov rcx, rbx
call sub.ntdll.dll_memset
mov edx, 0x5c
lea rcx, str..._ntfsresize.cpp
call qword [sym.imp.ntdll.dll_strrchr]
mov rdi, rax
test rax, rax
jne 0x1400e8b5f
xor ebx, ebx
jmp 0x1400e8bf0
mov byte [rsp + 0xb8], 0
xor eax, eax
mov qword [rsp + 0xb9], rax
mov word [rsp + 0xc1], ax
mov byte [rsp + 0xc3], al
mov r8d, reloc.MFC80U.DLL_Ordinal_2293
lea rdx, [0x1402dfd08]
lea rcx, [rsp + 0xb8]
call qword [sym.imp.ntdll.dll_sprintf]
lea rdx, [rdi + 1]
mov rcx, rbx
sub rcx, rdx
nop
nop
nop
movzx eax, byte [rdx]
mov byte [rdx + rcx], al
add rdx, 1
test al, al
jne 0x1400e8bb0
mov rdi, rbx
xor eax, eax
or rcx, 0xffffffffffffffff
repne scasb al, byte [rdi]
lea rdx, [rsp + 0xb8]
xor ecx, ecx
nop
nop
nop
nop
movzx eax, byte [rdx + rcx]
mov byte [rdi + rcx - 1], al
add rcx, 1
test al, al
jne 0x1400e8be0
mov rax, qword [rbp]
mov r8, rbx
lea rdx, str._s:_Failed_to_write_sector.
mov rcx, rbp
call qword [rax + 0x10]
mov rcx, qword [rsi + 0x138]
mov rax, qword [rcx]
mov edx, 0x22
call qword [rax + 0x40]
nop
lea rcx, [rsp + 0x88]
call fcn.140110d50
xor eax, eax
jmp 0x1400e9645
call fcn.140049470
mov rbp, rax
xor edx, edx
mov r8d, 0x80
lea rbx, [0x14043d310]
mov rcx, rbx
call sub.ntdll.dll_memset
mov edx, 0x5c
lea rcx, str..._ntfsresize.cpp
call qword [sym.imp.ntdll.dll_strrchr]
mov rdi, rax
test rax, rax
jne 0x1400e8c6b
xor ebx, ebx
jmp 0x1400e8cf0
mov byte [rsp + 0xb8], 0
xor eax, eax
mov qword [rsp + 0xb9], rax
mov word [rsp + 0xc1], ax
mov byte [rsp + 0xc3], al
mov r8d, 0x909
lea rdx, [0x1402dfd08]
lea rcx, [rsp + 0xb8]
call qword [sym.imp.ntdll.dll_sprintf]
lea rdx, [rdi + 1]
mov rcx, rbx
sub rcx, rdx
movzx eax, byte [rdx]
mov byte [rdx + rcx], al
add rdx, 1
test al, al
jne 0x1400e8cb1
mov rdi, rbx
xor eax, eax
or rcx, 0xffffffffffffffff
repne scasb al, byte [rdi]
lea rdx, [rsp + 0xb8]
xor ecx, ecx
nop
nop
nop
movzx eax, byte [rdx + rcx]
mov byte [rdi + rcx - 1], al
add rcx, 1
test al, al
jne 0x1400e8ce0
mov rax, qword [rbp]
mov r8, rbx
lea rdx, str._s:_Failed_to_write_sector.
mov rcx, rbp
call qword [rax + 0x10]
mov rcx, qword [rsi + 0x138]
mov rax, qword [rcx]
mov edx, 0x22
call qword [rax + 0x40]
nop
lea rcx, [rsp + 0x88]
call fcn.140110d50
xor eax, eax
jmp 0x1400e9645
cmp dword [rsi + 0x433c], 0
je 0x1400e8d4b
lea rdx, str.Extending_volume__Process_volume_bitmap:_100___
lea rcx, [rsp + 0x1d0]
call qword [sym.imp.MSVCR80.dll__swprintf]
jmp 0x1400e8d60
lea rdx, str.Shrinking_volume__Process_volume_bitmap:_100___
lea rcx, [rsp + 0x1d0]
call qword [sym.imp.MSVCR80.dll__swprintf]
mov rcx, qword [rsi + 0x138]
mov rax, qword [rcx]
lea rdx, [rsp + 0x1d0]
call qword [rax + 0x70]
lea rdx, str.Status:100
lea rcx, [rsp + 0x1d0]
call qword [sym.imp.MSVCR80.dll__swprintf]
mov rcx, qword [rsi + 0x138]
mov rax, qword [rcx]
lea rdx, [rsp + 0x1d0]
call qword [rax + 0x78]
nop
lea rcx, [rsp + 0x88]
call fcn.140110d50
mov eax, 1
jmp 0x1400e9645
lea rcx, [rsp + 0x88]
call fcn.140110d50
xor edi, edi
mov rbp, rdi
mov qword [rsp + 0x28], rdi
mov r12d, edi
mov dword [rsp + 0x20], edi
mov rbx, rdi
mov qword [rsp + 0xa8], rbx
mov rcx, r13
call fcn.1400e79c0
test rax, rax
je 0x1400e9633
mov r15, rdi
mov qword [rsp + 0xb8], rdi
movsd xmm6, qword [0x1403b85a8]
mov rcx, qword [r13 + 8]
test rcx, rcx
je 0x1400e8e1d
mov rax, qword [r13 + 0x10]
sub rax, rcx
sar rax, 4
cmp rbx, rax
jb 0x1400e8e23
call qword [sym.imp.MSVCR80.dll__invalid_parameter_noinfo]
mov rcx, qword [r13 + 8]
lea rdx, [rsp + 0x70]
mov rax, qword [r15 + rcx]
mov qword [rdx], rax
mov rax, qword [r15 + rcx + 8]
mov qword [rdx + 8], rax
mov ecx, dword [rsp + 0x78]
xor edx, edx
mov eax, 0x800000
div dword [rsi + 0x4348]
mov r13d, eax
mov qword [rsp + 0x80], r13
movzx eax, word [rsi + 0x2c]
imul rax, rcx
cqo
idiv r13
mov qword [rsp + 0xa0], rdx
mov rbx, rax
mov qword [rsp + 0x48], rax
mov r15, rdi
test rax, rax
jle 0x1400e9113
mov rbx, rdi
mov qword [rsp + 0x30], rbx
nop
nop
mov r12d, dword [rsi + 0x4348]
imul r12, r13
shl r12, 3
lea rcx, [rsp + 0x50]
call fcn.140110d30
nop
mov rdx, r12
lea rcx, [rsp + 0x50]
call fcn.140111150
test r12, r12
jle 0x1400e9071
mov eax, dword [rsi + 0x4348]
imul rax, r15
imul rax, qword [rsp + 0x80]
lea rbx, [rdi + rax*8]
add rbx, rbp
lea rax, [rdi + 0x40]
cmp rax, r12
jge 0x1400e8f15
mov r8d, 0x40
mov edx, ebx
lea rcx, [rsi + 0x148]
call fcn.140112080
test eax, eax
je 0x1400e8f15
mov r8d, 0x40
mov rdx, rdi
lea rcx, [rsp + 0x50]
call fcn.140110d80
mov ebp, 0x40
jmp 0x1400e8f45
mov r8d, 1
mov edx, ebx
lea rcx, [rsi + 0x148]
call fcn.140112080
test eax, eax
je 0x1400e8f40
mov r8d, 1
mov rdx, rdi
lea rcx, [rsp + 0x50]
call fcn.140110d80
mov ebp, 1
cmp dword [rsi + 0x144], 0
je 0x1400e8f74
mov rax, qword [rsp + 0x28]
add rax, rdi
cmp rax, qword [rsp + 0x38]
jl 0x1400e8f74
cmp rax, qword [rsp + 0x40]
jg 0x1400e8f74
movsxd r8, ebp
mov rdx, rdi
lea rcx, [rsp + 0x50]
call fcn.140110f20
call qword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, r14d
cmp eax, 0xbb8
jb 0x1400e9050
mov rax, qword [rsp + 0x30]
add rax, rdi
cvtsi2sd xmm1, rax
cvtsi2sd xmm0, qword [rsi + reloc.MFC80U.DLL_Ordinal_576]
divsd xmm1, xmm0
mulsd xmm1, xmm6
cvttsd2si rbx, xmm1
mov word [rsp + 0xd0], 0
xor edx, edx
mov r8d, 0xfe
lea rcx, [rsp + 0xd2]
call sub.ntdll.dll_memset
cmp dword [rsi + 0x433c], 0
je 0x1400e8fed
mov r8d, ebx
lea rdx, str.Extending_volume__Process_volume_bitmap:__d___
lea rcx, [rsp + 0xd0]
call qword [sym.imp.MSVCR80.dll__swprintf]
jmp 0x1400e9005
mov r8d, ebx
lea rdx, str.Shrinking_volume__Process_volume_bitmap:__d___
lea rcx, [rsp + 0xd0]
call qword [sym.imp.MSVCR80.dll__swprintf]
mov rcx, qword [rsi + 0x138]
mov rax, qword [rcx]
lea rdx, [rsp + 0xd0]
call qword [rax + 0x70]
mov r8d, ebx
lea rdx, str.Status:_d
lea rcx, [rsp + 0xd0]
call qword [sym.imp.MSVCR80.dll__swprintf]
mov rcx, qword [rsi + 0x138]
mov rax, qword [rcx]
lea rdx, [rsp + 0xd0]
call qword [rax + 0x78]
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov r14d, eax
movsxd rax, ebp
add rdi, rax
cmp rdi, r12
mov rbp, qword [rsp + 0x28]
jl 0x1400e8ec0
mov rbx, qword [rsp + 0x30]
mov r13, qword [rsp + 0x80]
movzx edi, word [rsi + 0x2c]
imul rdi, qword [rsp + 0x70]
add rdi, rbx
cmp dword [rsi + reloc.MFC80U.DLL_Ordinal_320], 0
jne 0x1400e90e3
lea rcx, [rsp + 0x50]
call fcn.140111140
mov rdx, rax
mov r9, r13
mov r8, rdi
mov rcx, qword [rsi]
call fcn.140111800
test eax, eax
je 0x1400e940e
add qword [rsi + 0x4330], r13
cvtsi2sd xmm1, qword [rsi + 0x4330]
movzx eax, word [rsi + 0x2c]
mov rcx, qword [rsi + reloc.MFC80U.DLL_Ordinal_744]
imul rcx, rax
cvtsi2sd xmm0, rcx
divsd xmm1, xmm0
mulsd xmm1, xmm6
cvttsd2si edx, xmm1
mov rcx, rsi
call fcn.1400e7640
nop
lea rcx, [rsp + 0x50]
call fcn.140110d50
add r15, 1
add rbx, r13
mov qword [rsp + 0x30], rbx
cmp r15, qword [rsp + 0x48]
mov edi, 0
jl 0x1400e8e90
mov rbx, qword [rsp + 0x48]
mov r12d, dword [rsp + 0x20]
mov r15, qword [rsp + 0xa0]
test r15, r15
jle 0x1400e93a2
mov r12d, dword [rsi + 0x4348]
imul r12, r15
shl r12, 3
lea rcx, [rsp + 0x50]
call fcn.140110d30
nop
mov rdx, r12
lea rcx, [rsp + 0x50]
call fcn.140111150
test r12, r12
jle 0x1400e9313
mov r15, qword [rsp + 0x80]
jmp 0x1400e9165
mov rbx, qword [rsp + 0x48]
mov eax, dword [rsi + 0x4348]
imul rax, rbx
imul rax, r15
lea rbx, [rdi + rax*8]
add rbx, rbp
lea rax, [rdi + 0x40]
cmp rax, r12
jge 0x1400e91b5
mov r8d, 0x40
mov edx, ebx
lea rcx, [rsi + 0x148]
call fcn.140112080
test eax, eax
je 0x1400e91b5
mov r8d, 0x40
mov rdx, rdi
lea rcx, [rsp + 0x50]
call fcn.140110d80
mov ebp, 0x40
jmp 0x1400e91e5
mov r8d, 1
mov edx, ebx
lea rcx, [rsi + 0x148]
call fcn.140112080
test eax, eax
je 0x1400e91e0
mov r8d, 1
mov rdx, rdi
lea rcx, [rsp + 0x50]
call fcn.140110d80
mov ebp, 1
cmp dword [rsi + 0x144], 0
je 0x1400e9214
mov rax, qword [rsp + 0x28]
add rax, rdi
cmp rax, qword [rsp + 0x38]
jl 0x1400e9214
cmp rax, qword [rsp + 0x40]
jg 0x1400e9214
movsxd r8, ebp
mov rdx, rdi
lea rcx, [rsp + 0x50]
call fcn.140110f20
call qword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, r14d
cmp eax, 0xbb8
jb 0x1400e92f4
mov rax, qword [rsp + 0x48]
imul rax, r15
add rax, rdi
cvtsi2sd xmm1, rax
cvtsi2sd xmm0, qword [rsi + reloc.MFC80U.DLL_Ordinal_576]
divsd xmm1, xmm0
mulsd xmm1, xmm6
cvttsd2si rbx, xmm1
mov word [rsp + 0xd0], 0
xor edx, edx
mov r8d, 0xfe
lea rcx, [rsp + 0xd2]
call sub.ntdll.dll_memset
cmp dword [rsi + 0x433c], 0
je 0x1400e9291
mov r8d, ebx
lea rdx, str.Extending_volume__Process_volume_bitmap:__d___
lea rcx, [rsp + 0xd0]
call qword [sym.imp.MSVCR80.dll__swprintf]
jmp 0x1400e92a9
mov r8d, ebx
lea rdx, str.Shrinking_volume__Process_volume_bitmap:__d___
lea rcx, [rsp + 0xd0]
call qword [sym.imp.MSVCR80.dll__swprintf]
mov rcx, qword [rsi + 0x138]
mov rax, qword [rcx]
lea rdx, [rsp + 0xd0]
call qword [rax + 0x70]
mov r8d, ebx
lea rdx, str.Status:_d
lea rcx, [rsp + 0xd0]
call qword [sym.imp.MSVCR80.dll__swprintf]
mov rcx, qword [rsi + 0x138]
mov rax, qword [rcx]
lea rdx, [rsp + 0xd0]
call qword [rax + 0x78]
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov r14d, eax
movsxd rax, ebp
add rdi, rax
cmp rdi, r12
mov rbp, qword [rsp + 0x28]
jl 0x1400e9160
mov r13, r15
mov r15, qword [rsp + 0xa0]
movzx edi, word [rsi + 0x2c]
imul rdi, qword [rsp + 0x70]
mov rax, qword [rsp + 0x48]
imul rax, r13
add rdi, rax
cmp dword [rsi + reloc.MFC80U.DLL_Ordinal_320], 0
jne 0x1400e938e
lea rcx, [rsp + 0x50]
call fcn.140111140
mov rdx, rax
mov r9, r15
mov r8, rdi
mov rcx, qword [rsi]
call fcn.140111800
test eax, eax
je 0x1400e9526
add qword [rsi + 0x4330], r15
cvtsi2sd xmm1, qword [rsi + 0x4330]
movzx eax, word [rsi + 0x2c]
mov rcx, qword [rsi + reloc.MFC80U.DLL_Ordinal_744]
imul rcx, rax
cvtsi2sd xmm0, rcx
divsd xmm1, xmm0
mulsd xmm1, xmm6
cvttsd2si edx, xmm1
mov rcx, rsi
call fcn.1400e7640
nop
lea rcx, [rsp + 0x50]
call fcn.140110d50
mov rbp, qword [rsp + 0x28]
mov r12d, dword [rsp + 0x20]
movzx eax, word [rsi + 0x2c]
imul eax, dword [rsi + 0x4348]
imul eax, dword [rsp + 0x78]
shl eax, 3
add rbp, rax
mov qword [rsp + 0x28], rbp
add r12d, 1
mov dword [rsp + 0x20], r12d
mov rbx, qword [rsp + 0xa8]
add rbx, 1
mov qword [rsp + 0xa8], rbx
mov r15, qword [rsp + 0xb8]
add r15, 0x10
mov qword [rsp + 0xb8], r15
mov r13, qword [rsp + 0x68]
mov rcx, r13
call fcn.1400e79c0
mov ecx, r12d
cmp rcx, rax
jae 0x1400e9633
xor edi, edi
jmp 0x1400e8e04
call fcn.140049470
mov rbp, rax
xor edx, edx
mov r8d, 0x80
lea rbx, [0x14043d310]
mov rcx, rbx
call sub.ntdll.dll_memset
mov edx, 0x5c
lea rcx, str..._ntfsresize.cpp
call qword [sym.imp.ntdll.dll_strrchr]
mov rdi, rax
test rax, rax
jne 0x1400e944e
xor ebx, ebx
jmp 0x1400e94e0
mov byte [rsp + 0xb8], 0
xor eax, eax
mov qword [rsp + 0xb9], rax
mov word [rsp + 0xc1], ax
mov byte [rsp + 0xc3], al
mov r8d, 0x867
lea rdx, [0x1402dfd08]
lea rcx, [rsp + 0xb8]
call qword [sym.imp.ntdll.dll_sprintf]
lea rdx, [rdi + 1]
mov rcx, rbx
sub rcx, rdx
nop
nop
nop
movzx eax, byte [rdx]
mov byte [rcx + rdx], al
add rdx, 1
test al, al
jne 0x1400e94a0
mov rdi, rbx
xor eax, eax
or rcx, 0xffffffffffffffff
repne scasb al, byte [rdi]
lea rdx, [rsp + 0xb8]
xor ecx, ecx
nop
nop
nop
nop
movzx eax, byte [rdx + rcx]
mov byte [rdi + rcx - 1], al
add rcx, 1
test al, al
jne 0x1400e94d0
mov rax, qword [rbp]
mov r8, rbx
lea rdx, str._s:_Failed_to_write_sector.
mov rcx, rbp
call qword [rax + 0x10]
mov rcx, qword [rsi + 0x138]
mov rax, qword [rcx]
mov edx, 0x22
call qword [rax + 0x40]
nop
lea rcx, [rsp + 0x50]
call fcn.140110d50
nop
lea rcx, [rsp + 0x88]
call fcn.140110d50
xor eax, eax
jmp 0x1400e9645
call fcn.140049470
mov rbp, rax
xor edx, edx
mov r8d, 0x80
lea rbx, [0x14043d310]
mov rcx, rbx
call sub.ntdll.dll_memset
mov edx, 0x5c
lea rcx, str..._ntfsresize.cpp
call qword [sym.imp.ntdll.dll_strrchr]
mov rdi, rax
test rax, rax
jne 0x1400e9566
xor ebx, ebx
jmp 0x1400e95f0
mov byte [rsp + 0xb8], 0
xor eax, eax
mov qword [rsp + 0xb9], rax
mov word [rsp + 0xc1], ax
mov byte [rsp + 0xc3], al
mov r8d, 0x8ad
lea rdx, [0x1402dfd08]
lea rcx, [rsp + 0xb8]
call qword [sym.imp.ntdll.dll_sprintf]
lea rdx, [rdi + 1]
mov rcx, rbx
sub rcx, rdx
nop
movzx eax, byte [rdx]
mov byte [rcx + rdx], al
add rdx, 1
test al, al
jne 0x1400e95b0
mov rdi, rbx
xor eax, eax
or rcx, 0xffffffffffffffff
repne scasb al, byte [rdi]
lea rdx, [rsp + 0xb8]
xor ecx, ecx
nop
nop
nop
nop
movzx eax, byte [rdx + rcx]
mov byte [rdi + rcx - 1], al
add rcx, 1
test al, al
jne 0x1400e95e0
mov rax, qword [rbp]
mov r8, rbx
lea rdx, str._s:_Failed_to_write_sector.
mov rcx, rbp
call qword [rax + 0x10]
mov rcx, qword [rsi + 0x138]
mov rax, qword [rcx]
mov edx, 0x22
call qword [rax + 0x40]
nop
lea rcx, [rsp + 0x50]
call fcn.140110d50
nop
lea rcx, [rsp + 0x88]
call fcn.140110d50
xor eax, eax
jmp 0x1400e9645
lea rcx, [rsp + 0x88]
call fcn.140110d50
mov eax, 1
mov rcx, qword [rsp + 0x42d0]
xor rcx, rsp
call fcn.140161080
lea r11, [rsp + 0x4300]
mov rbx, qword [r11 + 0x50]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret