Function at 0x14001a1a0
Capabilities:
Create directory
Get file attributes

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1f]
sub rsp, 0xe8
mov rax, qword [0x14004d298]
xor rax, rsp
mov qword [rbp + 7], rax
mov rax, qword gs:[0x58]
mov rdi, rcx
mov r13, rdx
mov qword [rbp - 0x61], rdx
mov edx, 8
mov ebx, r8d
mov qword [rbp - 0x59], r9
xor esi, esi
mov rcx, qword [rax]
lea rax, str.CTieredVolume::InitializeJetInstance
mov dword [rbp - 0x69], ebx
mov qword [rdx + rcx], rax
lea rcx, [rbp - 0x51]
call fcn.140009790
mov rcx, qword [rdi + 0x258]
xor eax, eax
and dword [rbp - 0x71], eax
xor r12d, r12d
mov dword [rbp - 0x75], eax
mov byte [rbp - 0x79], sil
call qword [sym.imp.api_ms_win_core_file_l1_1_0.dll_GetFileAttributesW]
nop dword [rax + rax]
or r15d, 0xffffffff
mov r14d, 0xb7
cmp eax, r15d
jne 0x14001a406
lea r13, [rdi + 0x2b8]
mov rcx, r13
call qword [sym.imp.ntdll.dll_RtlCreateSystemVolumeInformationFolder]
nop dword [rax + rax]
mov ebx, eax
test eax, eax
jns 0x14001a2b4
lea r14d, [rsi + 1]
bts ebx, 0x1c
mov r12d, r14d
mov dword [rbp - 0x49], ebx
mov rcx, qword [0x14004d128]
lea r15, [0x14004d128]
cmp rcx, r15
je 0x14001a4a1
test byte [rcx + 0x1c], r14b
je 0x14001b1f9
cmp byte [rcx + 0x19], 2
jb 0x14001b1f9
mov rcx, qword [rcx + 0x10]
lea edx, [rsi + 0x26]
mov r9, r13
mov dword [rsp + 0x20], ebx
lea r8, [0x140045948]
call fcn.140009c84
mov rcx, qword [0x14004d128]
mov eax, esi
jmp 0x14001b1fc
mov rcx, qword [rdi + 0x270]
call qword [sym.imp.api_ms_win_core_file_l1_1_0.dll_GetFileAttributesW]
nop dword [rax + rax]
cmp eax, r15d
jne 0x14001a376
mov rcx, qword [rdi + 0x270]
xor edx, edx
call qword [sym.imp.api_ms_win_core_file_l1_1_0.dll_CreateDirectoryW]
nop dword [rax + rax]
test eax, eax
jne 0x14001a376
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
cmp eax, r14d
je 0x14001a376
mov r12d, 2
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
mov ecx, eax
call fcn.14000433c
mov ebx, eax
mov dword [rbp - 0x49], eax
mov rcx, qword [0x14004d128]
lea r15, [0x14004d128]
cmp rcx, r15
je 0x14001a4a1
lea r14d, [r12 - 1]
test byte [rcx + 0x1c], r14b
je 0x14001b1f9
cmp byte [rcx + 0x19], r12b
jb 0x14001b1f9
lea r9, [rdi + 0x268]
lea edx, [r12 + 0x25]
mov rcx, qword [rcx + 0x10]
lea rax, [rdi + 0x2a0]
mov dword [rsp + 0x28], ebx
mov qword [rsp + 0x20], rax
call fcn.140019024
jmp 0x14001a2a6
mov rcx, qword [rdi + 0x258]
xor edx, edx
call qword [sym.imp.api_ms_win_core_file_l1_1_0.dll_CreateDirectoryW]
nop dword [rax + rax]
test eax, eax
jne 0x14001a3ff
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
cmp eax, r14d
je 0x14001a3ff
mov r12d, 3
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
mov ecx, eax
call fcn.14000433c
mov ebx, eax
mov dword [rbp - 0x49], eax
mov rcx, qword [0x14004d128]
lea r15, [0x14004d128]
cmp rcx, r15
je 0x14001a4a1
lea r14d, [r12 - 2]
test byte [rcx + 0x1c], r14b
je 0x14001b1f9
cmp byte [rcx + 0x19], 2
jb 0x14001b1f9
lea r9, [rdi + 0x250]
lea edx, [r12 + 0x25]
jmp 0x14001a358
mov ebx, dword [rbp - 0x69]
mov r13, qword [rbp - 0x61]
mov rcx, qword [rdi + 0x288]
call qword [sym.imp.api_ms_win_core_file_l1_1_0.dll_GetFileAttributesW]
nop dword [rax + rax]
cmp eax, r15d
jne 0x14001a4aa
mov rcx, qword [rdi + 0x288]
xor edx, edx
call qword [sym.imp.api_ms_win_core_file_l1_1_0.dll_CreateDirectoryW]
nop dword [rax + rax]
test eax, eax
jne 0x14001a4aa
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
cmp eax, r14d
je 0x14001a4aa
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
mov ecx, eax
call fcn.14000433c
mov ebx, eax
mov dword [rbp - 0x49], eax
mov rcx, qword [0x14004d128]
lea r15, [0x14004d128]
cmp rcx, r15
je 0x14001a4a1
mov r14d, 1
test byte [rcx + 0x1c], r14b
je 0x14001b1f9
cmp byte [rcx + 0x19], 2
jb 0x14001b1f9
lea r9, [rdi + 0x280]
lea edx, [r14 + 0x28]
jmp 0x14001a358
mov r14, qword [rbp - 0x61]
jmp 0x14001b23c
xor eax, eax
lea r15, [0x14004d128]
mov dword [rbp - 0x75], eax
lea r14d, [rax + 1]
test ebx, ebx
je 0x14001a8fb
lea r12d, [rax + 7]
jmp 0x14001a4cb
mov ebx, dword [rbp - 0x69]
cmp byte [rdi + 0xa5], 0
jne 0x14001a875
cmp byte [rdi + 0xa6], 0
jne 0x14001a875
mov rcx, qword [rdi + 0x300]
xor edx, edx
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_WaitForSingleObject]
nop dword [rax + rax]
cmp eax, 0x102
jne 0x14001a875
mov rcx, qword [rdi + 0x2f8]
xor edx, edx
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_WaitForSingleObject]
nop dword [rax + rax]
cmp eax, 0x102
jne 0x14001a875
mov r9, qword [rbp - 0x59]
mov r8d, ebx
mov rdx, r13
mov rcx, rdi
call fcn.1400194f8
mov dword [rbp - 0x49], eax
mov ebx, eax
test eax, eax
jne 0x14001a82b
mov rdx, r13
mov byte [rbp - 0x79], r14b
mov rcx, rdi
call fcn.1400191d8
mov rcx, qword [rbp - 0x59]
xor r8d, r8d
xor edx, edx
call qword [sym.imp.ESENT.dll_JetInit3W]
nop dword [rax + rax]
mov rdx, r13
mov rcx, rdi
mov esi, eax
call fcn.1400191d8
test esi, esi
je 0x14001a821
cmp esi, 0xfffffbfa
je 0x14001a7d6
cmp esi, 0xfffffdef
je 0x14001a782
cmp esi, 0xfffffbbc
je 0x14001a782
cmp esi, 0xfffff8f0
je 0x14001a782
cmp esi, 0xfffffc0d
jne 0x14001a5bc
mov ebx, 0x8007000e
jmp 0x14001a5d7
mov eax, esi
mov ecx, 0x8e5e0000
cdq
xor eax, edx
sub eax, edx
movzx ebx, ax
test esi, esi
mov eax, 0xe5e0000
cmovs eax, ecx
or ebx, eax
mov dword [rbp - 0x49], ebx
mov rcx, qword [0x14004d128]
cmp rcx, r15
je 0x14001a60e
test byte [rcx + 0x1c], r14b
je 0x14001a60e
cmp byte [rcx + 0x19], 2
jb 0x14001a60e
mov rcx, qword [rcx + 0x10]
lea r8, [0x140045948]
mov edx, 0x2e
mov dword [rsp + 0x20], esi
mov r9, r13
call fcn.14000476c
mov rax, qword [rbp - 0x59]
mov r8d, 8
mov rcx, rdi
mov rdx, qword [rax]
call fcn.140019f74
cmp byte [rdi + 0xa5], 0
mov byte [rbp - 0x79], 0
jne 0x14001a73d
cmp byte [rdi + 0xa6], 0
jne 0x14001a73d
mov rcx, qword [rdi + 0x300]
xor edx, edx
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_WaitForSingleObject]
nop dword [rax + rax]
cmp eax, 0x102
jne 0x14001a73d
mov rcx, qword [rdi + 0x2f8]
xor edx, edx
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_WaitForSingleObject]
nop dword [rax + rax]
cmp eax, 0x102
jne 0x14001a73d
cmp dword [0x14004d098], 5
jbe 0x14001a70e
movabs rdx, 0x400000000000
test qword [0x14004d0a8], rdx
je 0x14001a70e
mov rax, qword [0x14004d0b0]
and rax, rdx
cmp rax, qword [0x14004d0b0]
jne 0x14001a70e
lea rax, str.InitializeJetInstance
mov dword [rbp - 0x71], r12d
mov qword [rbp - 0x41], rax
lea rdx, [0x1400472d5]
lea rax, [rdi + 0x2b8]
mov dword [rbp - 0x65], esi
mov qword [rbp - 0x31], rax
lea rax, [rbp - 0x71]
mov qword [rsp + 0x40], rax
lea rax, [rbp - 0x41]
mov qword [rsp + 0x38], rax
lea rax, [rbp - 0x65]
mov qword [rsp + 0x30], rax
lea rax, [rbp - 0x39]
mov qword [rsp + 0x28], rax
lea rax, [rbp - 0x31]
mov qword [rsp + 0x20], rax
mov qword [rbp - 0x39], r13
call fcn.14000112c
mov ecx, 0x7d0
call qword [sym.imp.api_ms_win_core_synch_l1_2_0.dll_Sleep]
nop dword [rax + rax]
mov eax, dword [rbp - 0x75]
add eax, r14d
mov dword [rbp - 0x75], eax
cmp eax, 5
jb 0x14001a4c8
mov rcx, qword [0x14004d128]
jmp 0x14001b1fc
mov rcx, qword [0x14004d128]
cmp rcx, r15
je 0x14001b1f9
test byte [rcx + 0x1c], r14b
je 0x14001b1f9
cmp byte [rcx + 0x19], 5
jb 0x14001b1f9
mov rcx, qword [rcx + 0x10]
lea r9, [rdi + 0x2a0]
mov edx, 0xfc
lea r8, [0x140045650]
call fcn.14000bc20
jmp 0x14001b1f2
mov ecx, 0x70
call fcn.14000433c
mov ebx, eax
mov dword [rbp - 0x49], eax
mov rcx, qword [0x14004d128]
cmp rcx, r15
je 0x14001b234
test byte [rcx + 0x1c], r14b
je 0x14001b1f9
cmp byte [rcx + 0x19], 2
jb 0x14001b1f9
mov rcx, qword [rcx + 0x10]
lea r8, [0x140045948]
mov edx, 0x2d
mov dword [rsp + 0x20], esi
mov r9, r13
call fcn.14000476c
jmp 0x14001b1f2
mov rcx, qword [0x14004d128]
cmp rcx, r15
je 0x14001a815
test byte [rcx + 0x1c], r14b
je 0x14001a815
cmp byte [rcx + 0x19], 2
jb 0x14001a815
mov rcx, qword [rcx + 0x10]
lea r8, [0x140045948]
mov edx, 0x2c
mov dword [rsp + 0x20], 0xfffffbfa
mov r9, r13
call fcn.14000476c
mov rcx, qword [0x14004d128]
xor esi, esi
xor ebx, ebx
mov dword [rbp - 0x49], ebx
jmp 0x14001b1f9
xor ebx, ebx
mov dword [rbp - 0x49], ebx
jmp 0x14001b1f2
mov r12d, 5
mov rcx, qword [0x14004d128]
cmp rcx, r15
je 0x14001a86c
test byte [rcx + 0x1c], r14b
je 0x14001a86c
cmp byte [rcx + 0x19], 2
jb 0x14001a86c
mov rcx, qword [rcx + 0x10]
lea edx, [r12 + 0x26]
mov r9, r13
mov dword [rsp + 0x20], eax
lea r8, [0x140045948]
call fcn.14000476c
mov rcx, qword [0x14004d128]
mov byte [rbp - 0x79], 0
jmp 0x14001b1f9
mov rcx, qword [0x14004d128]
cmp rcx, r15
je 0x14001a8b0
test byte [rcx + 0x1c], r14b
je 0x14001a8b0
cmp byte [rcx + 0x19], 5
jb 0x14001a8b0
mov rcx, qword [rcx + 0x10]
lea r9, [rdi + 0x2a0]
mov edx, 0xfc
lea r8, [0x140045650]
call fcn.14000bc20
mov rcx, qword [0x14004d128]
mov eax, 0x80830002
mov r12d, 4
mov ebx, eax
mov dword [rbp - 0x49], eax
mov esi, 0xfffffc18
cmp rcx, r15
je 0x14001a86c
test byte [rcx + 0x1c], r14b
je 0x14001a86c
cmp byte [rcx + 0x19], 2
jb 0x14001a86c
mov r9d, dword [rdi + 0x80]
lea edx, [r12 + 0x26]
mov rcx, qword [rcx + 0x10]
lea r8, [0x140045948]
mov dword [rsp + 0x20], eax
call fcn.140001adc
jmp 0x14001a865
mov rcx, qword [0x14004d128]
cmp byte [rdi + 0xa5], 0
mov r12d, 0x102
jne 0x14001b0c4
cmp byte [rdi + 0xa6], 0
jne 0x14001b0c4
mov rcx, qword [rdi + 0x300]
xor edx, edx
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_WaitForSingleObject]
nop dword [rax + rax]
cmp eax, r12d
jne 0x14001b0bd
mov rcx, qword [rdi + 0x2f8]
xor edx, edx
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_WaitForSingleObject]
nop dword [rax + rax]
cmp eax, r12d
jne 0x14001b0bd
mov r9, qword [rbp - 0x59]
xor r8d, r8d
mov rdx, r13
mov rcx, rdi
call fcn.1400194f8
mov dword [rbp - 0x49], eax
mov ebx, eax
test eax, eax
jne 0x14001b072
mov rdx, r13
mov byte [rbp - 0x79], r14b
mov rcx, rdi
call fcn.1400191d8
cmp byte [rdi + 0xa5], bl
jne 0x14001affb
cmp byte [rdi + 0xa6], bl
jne 0x14001affb
mov rcx, qword [rdi + 0x300]
xor edx, edx
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_WaitForSingleObject]
nop dword [rax + rax]
cmp eax, r12d
jne 0x14001affb
mov rcx, qword [rdi + 0x2f8]
xor edx, edx
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_WaitForSingleObject]
nop dword [rax + rax]
cmp eax, r12d
jne 0x14001affb
mov r8d, dword [rbp - 0x71]
xor edx, edx
mov rcx, qword [rbp - 0x59]
call qword [sym.imp.ESENT.dll_JetInit3W]
nop dword [rax + rax]
mov esi, eax
test eax, eax
je 0x14001aa46
cmp eax, 0xfffffdef
je 0x14001aa3a
cmp eax, 0xfffffbbc
je 0x14001aa3a
cmp eax, 0xfffff8f0
je 0x14001aa3a
cmp eax, 0xfffffc0d
jne 0x14001aa1f
mov ebx, 0x8007000e
jmp 0x14001aa46
cdq
mov ecx, 0x8e5e0000
xor eax, edx
sub eax, edx
movzx ebx, ax
test esi, esi
mov eax, 0xe5e0000
cmovs eax, ecx
or ebx, eax
jmp 0x14001aa46
mov ecx, 0x70
call fcn.14000433c
mov ebx, eax
mov rdx, r13
mov dword [rbp - 0x49], ebx
mov rcx, rdi
call fcn.1400191d8
mov r12d, 0xc
test esi, esi
je 0x14001aff1
cmp esi, 0xfffffbfa
je 0x14001afa6
cmp esi, 0xfffffdef
je 0x14001af69
cmp esi, 0xfffffbbc
je 0x14001af69
cmp esi, 0xfffff8f0
je 0x14001af69
lea eax, [rsi + 0x21f]
cmp eax, 0x2a
ja 0x14001abed
movabs rcx, 0x40000000011
bt rcx, rax
jae 0x14001abed
mov rcx, qword [0x14004d128]
cmp rcx, r15
je 0x14001aae9
test byte [rcx + 0x1c], r14b
je 0x14001aae9
cmp byte [rcx + 0x19], 2
jb 0x14001aae9
mov rcx, qword [rcx + 0x10]
lea edx, [r12 + 0x28]
mov r9, r13
mov dword [rsp + 0x20], esi
lea r8, [0x140045948]
call fcn.14000476c
mov rax, qword [rbp - 0x59]
mov r12d, 0xd
mov rcx, rdi
mov rdx, qword [rax]
lea r8d, [r12 - 5]
call fcn.140019f74
cmp byte [rdi + 0xa5], 0
mov byte [rbp - 0x79], 0
jne 0x14001ae11
cmp byte [rdi + 0xa6], 0
jne 0x14001ae11
mov rcx, qword [rdi + 0x300]
xor edx, edx
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_WaitForSingleObject]
nop dword [rax + rax]
cmp eax, 0x102
jne 0x14001ae11
mov rcx, qword [rdi + 0x2f8]
xor edx, edx
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_WaitForSingleObject]
nop dword [rax + rax]
cmp eax, 0x102
jne 0x14001ae11
mov ecx, 0x7d0
call qword [sym.imp.api_ms_win_core_synch_l1_2_0.dll_Sleep]
nop dword [rax + rax]
lea r9, str.edb.log
xor r8d, r8d
xor edx, edx
mov rcx, r13
call fcn.140037ce0
lea r9, str.edbtmp.log
xor r8d, r8d
xor edx, edx
mov rcx, r13
call fcn.140037ce0
lea r9, str.edb.chk
xor r8d, r8d
xor edx, edx
mov rcx, r13
call fcn.140037ce0
lea rax, str..log
xor r9d, r9d
xor r8d, r8d
mov qword [rsp + 0x20], rax
mov rdx, r13
mov rcx, rdi
call fcn.1400382f0
lea rax, str..jrs
xor r9d, r9d
xor r8d, r8d
mov qword [rsp + 0x20], rax
mov rdx, r13
mov rcx, rdi
call fcn.1400382f0
jmp 0x14001ad5b
cmp esi, 0xfffffb40
jne 0x14001ac83
mov rax, qword [rbp - 0x59]
mov r8d, 8
mov rcx, rdi
mov rdx, qword [rax]
call fcn.140019f74
mov byte [rbp - 0x79], 0
mov rcx, qword [0x14004d128]
cmp rcx, r15
je 0x14001ac51
test byte [rcx + 0x1c], r14b
je 0x14001ac51
cmp byte [rcx + 0x19], 2
jb 0x14001ac51
mov rcx, qword [rcx + 0x10]
lea r8, [0x140045948]
mov edx, 0x35
mov dword [rsp + 0x20], 0xfffffb40
mov r9, r13
call fcn.14000476c
mov rcx, qword [0x14004d128]
mov eax, dword [rbp - 0x71]
test eax, eax
jne 0x14001ac68
lea r12d, [rax + 0xe]
mov dword [rbp - 0x71], 0x80
jmp 0x14001ad62
cmp eax, 0x80
jne 0x14001ae5d
lea r12d, [rax - 0x71]
mov dword [rbp - 0x71], 0x84
jmp 0x14001ad62
cmp esi, 0xfffffddf
je 0x14001ac97
cmp esi, 0xfffffbc3
jne 0x14001aea2
mov rax, qword [rbp - 0x59]
mov r12d, 0x11
mov rcx, rdi
mov rdx, qword [rax]
lea r8d, [r12 - 9]
call fcn.140019f74
mov byte [rbp - 0x79], 0
mov rcx, qword [0x14004d128]
cmp rcx, r15
je 0x14001acf0
test byte [rcx + 0x1c], r14b
je 0x14001acf0
cmp byte [rcx + 0x19], 2
jb 0x14001acf0
mov rcx, qword [rcx + 0x10]
lea edx, [r12 + 0x26]
mov r9, r13
mov dword [rsp + 0x20], esi
lea r8, [0x140045948]
call fcn.14000476c
mov rcx, qword [0x14004d128]
cmp byte [rdi + 0xa5], 0
jne 0x14001aede
cmp byte [rdi + 0xa6], 0
jne 0x14001aede
mov rcx, qword [rdi + 0x300]
xor edx, edx
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_WaitForSingleObject]
nop dword [rax + rax]
cmp eax, 0x102
jne 0x14001aed7
mov rcx, qword [rdi + 0x2f8]
xor edx, edx
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_WaitForSingleObject]
nop dword [rax + rax]
cmp eax, 0x102
jne 0x14001aed7
mov ecx, 0x7d0
call qword [sym.imp.api_ms_win_core_synch_l1_2_0.dll_Sleep]
nop dword [rax + rax]
mov rcx, qword [0x14004d128]
cmp dword [0x14004d098], 5
jbe 0x14001adf6
movabs r8, 0x400000000000
test qword [0x14004d0a8], r8
je 0x14001adf6
mov rax, qword [0x14004d0b0]
and rax, r8
cmp rax, qword [0x14004d0b0]
jne 0x14001adf6
lea rax, str.InitializeJetInstance
mov dword [rbp - 0x65], r12d
mov qword [rbp - 0x31], rax
lea rdx, [0x1400472d5]
lea rax, [rdi + 0x2b8]
mov dword [rbp - 0x69], esi
mov qword [rbp - 0x41], rax
lea rax, [rbp - 0x65]
mov qword [rsp + 0x40], rax
lea rax, [rbp - 0x31]
mov qword [rsp + 0x38], rax
lea rax, [rbp - 0x69]
mov qword [rsp + 0x30], rax
lea rax, [rbp - 0x39]
mov qword [rsp + 0x28], rax
lea rax, [rbp - 0x41]
mov qword [rsp + 0x20], rax
mov qword [rbp - 0x39], r13
call fcn.14000112c
mov rcx, qword [0x14004d128]
mov eax, dword [rbp - 0x75]
add eax, r14d
mov dword [rbp - 0x75], eax
cmp eax, 5
jb 0x14001a902
mov byte [rbp - 0x79], 0
jmp 0x14001b14c
mov rcx, qword [0x14004d128]
cmp rcx, r15
je 0x14001b149
test byte [rcx + 0x1c], r14b
je 0x14001b149
cmp byte [rcx + 0x19], 5
jb 0x14001b149
mov rcx, qword [rcx + 0x10]
lea r9, [rdi + 0x2a0]
mov edx, 0xfc
lea r8, [0x140045650]
call fcn.14000bc20
mov rcx, qword [0x14004d128]
jmp 0x14001b149
mov r12d, 0x10
cmp rcx, r15
je 0x14001b149
test byte [rcx + 0x1c], r14b
je 0x14001b149
cmp byte [rcx + 0x19], 2
jb 0x14001b149
lea edx, [r12 + 0x26]
mov dword [rsp + 0x20], 0xfffffb40
mov rcx, qword [rcx + 0x10]
lea r8, [0x140045948]
mov r9, r13
call fcn.14000476c
jmp 0x14001ae51
mov r12d, 0x13
mov rcx, qword [0x14004d128]
cmp rcx, r15
je 0x14001b149
test byte [rcx + 0x1c], r14b
je 0x14001b149
cmp byte [rcx + 0x19], 2
jb 0x14001b149
lea edx, [r12 + 0x26]
mov dword [rsp + 0x20], esi
jmp 0x14001ae8d
mov rcx, qword [0x14004d128]
cmp rcx, r15
je 0x14001af12
test byte [rcx + 0x1c], r14b
je 0x14001af12
cmp byte [rcx + 0x19], 5
jb 0x14001af12
mov rcx, qword [rcx + 0x10]
lea r9, [rdi + 0x2a0]
mov edx, 0xfc
lea r8, [0x140045650]
call fcn.14000bc20
mov rcx, qword [0x14004d128]
mov eax, 0x80830002
mov r12d, 0x12
mov ebx, eax
mov dword [rbp - 0x49], eax
mov esi, 0xfffffc18
cmp rcx, r15
je 0x14001b149
test byte [rcx + 0x1c], r14b
je 0x14001b149
cmp byte [rcx + 0x19], 2
jb 0x14001b149
lea edx, [r12 + 0x26]
mov r9d, dword [rdi + 0x80]
lea r8, [0x140045948]
mov rcx, qword [rcx + 0x10]
mov dword [rsp + 0x20], eax
call fcn.140001adc
jmp 0x14001ae51
mov ecx, 0x70
call fcn.14000433c
mov ebx, eax
mov dword [rbp - 0x49], eax
mov rcx, qword [0x14004d128]
cmp rcx, r15
je 0x14001b149
test byte [rcx + 0x1c], r14b
je 0x14001b149
cmp byte [rcx + 0x19], 2
jb 0x14001b149
mov edx, 0x33
jmp 0x14001aed1
mov rcx, qword [0x14004d128]
cmp rcx, r15
je 0x14001afe5
test byte [rcx + 0x1c], r14b
je 0x14001afe5
cmp byte [rcx + 0x19], 2
jb 0x14001afe5
mov rcx, qword [rcx + 0x10]
lea r8, [0x140045948]
mov edx, 0x32
mov dword [rsp + 0x20], 0xfffffbfa
mov r9, r13
call fcn.14000476c
mov rcx, qword [0x14004d128]
xor esi, esi
xor ebx, ebx
mov dword [rbp - 0x49], ebx
jmp 0x14001b149
xor ebx, ebx
mov dword [rbp - 0x49], ebx
jmp 0x14001ae51
mov rcx, qword [0x14004d128]
cmp rcx, r15
je 0x14001b036
test byte [rcx + 0x1c], r14b
je 0x14001b036
cmp byte [rcx + 0x19], 5
jb 0x14001b036
mov rcx, qword [rcx + 0x10]
lea r9, [rdi + 0x2a0]
mov edx, 0xfc
lea r8, [0x140045650]
call fcn.14000bc20
mov rcx, qword [0x14004d128]
mov eax, 0x80830002
mov esi, 0xfffffc18
mov ebx, eax
mov dword [rbp - 0x49], eax
mov r12d, 0xb
cmp rcx, r15
je 0x14001b149
test byte [rcx + 0x1c], r14b
je 0x14001b149
cmp byte [rcx + 0x19], 2
jb 0x14001b149
lea edx, [r12 + 0x26]
jmp 0x14001af49
mov r12d, 9
mov rcx, qword [0x14004d128]
cmp rcx, r15
je 0x14001b145
test byte [rcx + 0x1c], r14b
je 0x14001b145
cmp byte [rcx + 0x19], 2
jb 0x14001b145
mov rcx, qword [rcx + 0x10]
lea edx, [r12 + 0x27]
mov r9, r13
mov dword [rsp + 0x20], eax
lea r8, [0x140045948]
call fcn.14000476c
jmp 0x14001b13e
mov rcx, qword [0x14004d128]
cmp rcx, r15
je 0x14001b0f8
test byte [rcx + 0x1c], r14b
je 0x14001b0f8
cmp byte [rcx + 0x19], 5
jb 0x14001b0f8
mov rcx, qword [rcx + 0x10]
lea r9, [rdi + 0x2a0]
mov edx, 0xfc
lea r8, [0x140045650]
call fcn.14000bc20
mov rcx, qword [0x14004d128]
mov eax, 0x80830002
mov r12d, 8
mov ebx, eax
mov dword [rbp - 0x49], eax
mov esi, 0xfffffc18
cmp rcx, r15
je 0x14001b145
test byte [rcx + 0x1c], r14b
je 0x14001b145
cmp byte [rcx + 0x19], 2
jb 0x14001b145
mov r9d, dword [rdi + 0x80]
lea edx, [r12 + 0x27]
mov rcx, qword [rcx + 0x10]
lea r8, [0x140045948]
mov dword [rsp + 0x20], eax
call fcn.140001adc
mov rcx, qword [0x14004d128]
mov byte [rbp - 0x79], 0
mov eax, dword [rbp - 0x75]
cmp dword [rbp - 0x71], 0x84
jne 0x14001b1fc
test ebx, ebx
jne 0x14001b1fc
test byte [0x14004dcc0], 2
je 0x14001b1c2
movzx eax, word [rdi + 0x2b8]
lea r9d, [rbx + 3]
and dword [rbp - 0xd], ebx
lea rdx, [0x140044ab0]
and dword [rbp + 3], ebx
shr ax, 1
movzx ecx, ax
lea rax, [rbp - 0x71]
mov qword [rbp - 0x19], rax
mov rax, qword [rdi + 0x2c0]
mov qword [rbp - 9], rax
lea rax, [rbp - 0x29]
mov word [rbp - 0x71], cx
add ecx, ecx
mov qword [rsp + 0x20], rax
mov dword [rbp - 0x11], 2
mov dword [rbp - 1], ecx
call fcn.14000b3e8
mov rcx, qword [0x14004d128]
jmp 0x14001b1c4
xor eax, eax
cmp rcx, r15
je 0x14001b234
test byte [rcx + 0x1c], r14b
je 0x14001b1f9
cmp byte [rcx + 0x19], 4
jb 0x14001b1f9
mov rcx, qword [rcx + 0x10]
lea r8, [0x140045948]
mov edx, 0x3a
mov qword [rsp + 0x20], r13
mov r9d, eax
call fcn.140004420
mov rcx, qword [0x14004d128]
mov eax, dword [rbp - 0x75]
cmp rcx, r15
je 0x14001b234
test byte [rcx + 0x1c], r14b
je 0x14001b234
cmp byte [rcx + 0x19], 2
mov r14, qword [rbp - 0x61]
jb 0x14001b238
mov rcx, qword [rcx + 0x10]
lea r8, [0x140045948]
mov edx, 0x3b
mov dword [rsp + 0x28], ebx
mov r9d, eax
mov qword [rsp + 0x20], r14
call fcn.140018eb4
jmp 0x14001b238
mov r14, qword [rbp - 0x61]
test esi, esi
jne 0x14001b244
test ebx, ebx
je 0x14001b2fc
cmp dword [0x14004d098], 5
jbe 0x14001b2dd
movabs rcx, 0x400000000000
test qword [0x14004d0a8], rcx
je 0x14001b2dd
mov rax, qword [0x14004d0b0]
and rax, rcx
cmp rax, qword [0x14004d0b0]
jne 0x14001b2dd
lea rax, str.InitializeJetInstance
mov dword [rbp - 0x65], ebx
mov qword [rbp - 0x31], rax
lea rdx, [0x140047263]
lea rax, [rdi + 0x2b8]
mov dword [rbp - 0x69], r12d
mov qword [rbp - 0x41], rax
lea rax, [rbp - 0x65]
mov qword [rsp + 0x48], rax
lea rax, [rbp - 0x69]
mov qword [rsp + 0x40], rax
lea rax, [rbp - 0x31]
mov qword [rsp + 0x38], rax
lea rax, [rbp - 0x75]
mov qword [rsp + 0x30], rax
lea rax, [rbp - 0x39]
mov qword [rsp + 0x28], rax
lea rax, [rbp - 0x41]
mov qword [rsp + 0x20], rax
mov dword [rbp - 0x75], esi
mov qword [rbp - 0x39], r14
call fcn.140001244
test esi, esi
je 0x14001b2fc
cmp byte [rbp - 0x79], 0
je 0x14001b2fc
mov rax, qword [rbp - 0x59]
mov r8d, 8
mov rcx, rdi
mov rdx, qword [rax]
call fcn.140019f74
lea rcx, [rbp - 0x51]
call fcn.1400095e0
mov eax, ebx
mov rcx, qword [rbp + 7]
xor rcx, rsp
call fcn.140041040
add rsp, 0xe8
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret