Function at 0x14001bc54
Capabilities:
Create directory
Get file attributes

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1f]
sub rsp, 0xd8
mov rax, qword [0x14004d298]
xor rax, rsp
mov qword [rbp + 0xf], rax
mov rax, qword gs:[0x58]
mov rdi, rcx
mov r13, rdx
mov qword [rbp - 0x51], r9
mov edx, 8
mov ebx, r8d
mov dword [rbp - 0x59], ebx
xor esi, esi
mov rcx, qword [rax]
lea rax, str.CTieredVolume::InitializeJetInstance
mov qword [rdx + rcx], rax
lea rcx, [rbp - 0x49]
call fcn.140005468
mov rcx, qword [rdi + 0x258]
xor eax, eax
and dword [rbp - 0x61], eax
xor r12d, r12d
mov dword [rbp - 0x65], eax
mov byte [rbp - 0x69], sil
call qword [sym.imp.api_ms_win_core_file_l1_1_0.dll_GetFileAttributesW]
nop dword [rax + rax]
or r15d, 0xffffffff
mov r14d, 0xb7
cmp eax, r15d
jne 0x14001beb3
lea rcx, [rdi + 0x2b8]
call qword [sym.imp.ntdll.dll_RtlCreateSystemVolumeInformationFolder]
nop dword [rax + rax]
mov ebx, eax
test eax, eax
jns 0x14001bd65
lea r14d, [rsi + 1]
bts ebx, 0x1c
mov r12d, r14d
mov dword [rbp - 0x41], ebx
mov rcx, qword [0x14004d128]
lea r15, [0x14004d128]
cmp rcx, r15
je 0x14001ccd7
test byte [rcx + 0x1c], r14b
je 0x14001cc9e
cmp byte [rcx + 0x19], 2
jb 0x14001cc9e
mov rcx, qword [rcx + 0x10]
lea edx, [rsi + 0x26]
lea r9, [rdi + 0x2b8]
mov dword [rsp + 0x20], ebx
lea r8, [0x140046ab8]
call fcn.14000c408
mov rcx, qword [0x14004d128]
mov eax, esi
jmp 0x14001cca1
mov rcx, qword [rdi + 0x270]
call qword [sym.imp.api_ms_win_core_file_l1_1_0.dll_GetFileAttributesW]
nop dword [rax + rax]
cmp eax, r15d
jne 0x14001be27
mov rcx, qword [rdi + 0x270]
xor edx, edx
call qword [sym.imp.api_ms_win_core_file_l1_1_0.dll_CreateDirectoryW]
nop dword [rax + rax]
test eax, eax
jne 0x14001be27
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
cmp eax, r14d
je 0x14001be27
mov r12d, 2
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
mov ecx, eax
call fcn.140002f2c
mov ebx, eax
mov dword [rbp - 0x41], eax
mov rcx, qword [0x14004d128]
lea r15, [0x14004d128]
cmp rcx, r15
je 0x14001ccd7
lea r14d, [r12 - 1]
test byte [rcx + 0x1c], r14b
je 0x14001cc9e
cmp byte [rcx + 0x19], r12b
jb 0x14001cc9e
lea r9, [rdi + 0x268]
lea edx, [r12 + 0x25]
mov rcx, qword [rcx + 0x10]
lea rax, [rdi + 0x2a0]
mov dword [rsp + 0x28], ebx
mov qword [rsp + 0x20], rax
call fcn.14001eb4c
jmp 0x14001bd57
mov rcx, qword [rdi + 0x258]
xor edx, edx
call qword [sym.imp.api_ms_win_core_file_l1_1_0.dll_CreateDirectoryW]
nop dword [rax + rax]
test eax, eax
jne 0x14001beb0
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
cmp eax, r14d
je 0x14001beb0
mov r12d, 3
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
mov ecx, eax
call fcn.140002f2c
mov ebx, eax
mov dword [rbp - 0x41], eax
mov rcx, qword [0x14004d128]
lea r15, [0x14004d128]
cmp rcx, r15
je 0x14001ccd7
lea r14d, [r12 - 2]
test byte [rcx + 0x1c], r14b
je 0x14001cc9e
cmp byte [rcx + 0x19], 2
jb 0x14001cc9e
lea r9, [rdi + 0x250]
lea edx, [r12 + 0x25]
jmp 0x14001be09
mov ebx, dword [rbp - 0x59]
mov rcx, qword [rdi + 0x288]
call qword [sym.imp.api_ms_win_core_file_l1_1_0.dll_GetFileAttributesW]
nop dword [rax + rax]
cmp eax, r15d
jne 0x14001bf52
mov rcx, qword [rdi + 0x288]
xor edx, edx
call qword [sym.imp.api_ms_win_core_file_l1_1_0.dll_CreateDirectoryW]
nop dword [rax + rax]
test eax, eax
jne 0x14001bf52
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
cmp eax, r14d
je 0x14001bf52
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
mov ecx, eax
call fcn.140002f2c
mov ebx, eax
mov dword [rbp - 0x41], eax
mov rcx, qword [0x14004d128]
lea r15, [0x14004d128]
cmp rcx, r15
je 0x14001ccd7
mov r14d, 1
test byte [rcx + 0x1c], r14b
je 0x14001cc9e
cmp byte [rcx + 0x19], 2
jb 0x14001cc9e
lea r9, [rdi + 0x280]
lea edx, [r14 + 0x28]
jmp 0x14001be09
xor eax, eax
lea r15, [0x14004d128]
mov dword [rbp - 0x65], eax
lea r14d, [rax + 1]
test ebx, ebx
je 0x14001c3a2
lea r12d, [rax + 7]
jmp 0x14001bf73
mov ebx, dword [rbp - 0x59]
cmp byte [rdi + 0xa5], 0
jne 0x14001c31c
cmp byte [rdi + 0xa6], 0
jne 0x14001c31c
mov rcx, qword [rdi + 0x300]
xor edx, edx
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_WaitForSingleObject]
nop dword [rax + rax]
cmp eax, 0x102
jne 0x14001c31c
mov rcx, qword [rdi + 0x2f8]
xor edx, edx
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_WaitForSingleObject]
nop dword [rax + rax]
cmp eax, 0x102
jne 0x14001c31c
mov r9, qword [rbp - 0x51]
mov r8d, ebx
mov rdx, r13
mov rcx, rdi
call fcn.14001a148
mov dword [rbp - 0x41], eax
mov ebx, eax
test eax, eax
jne 0x14001c2d2
mov rdx, r13
mov byte [rbp - 0x69], r14b
mov rcx, rdi
call fcn.14001b480
mov rcx, qword [rbp - 0x51]
xor r8d, r8d
xor edx, edx
call qword [sym.imp.ESENT.dll_JetInit3W]
nop dword [rax + rax]
mov rdx, r13
mov rcx, rdi
mov esi, eax
call fcn.14001b480
test esi, esi
je 0x14001c2c8
cmp esi, 0xfffffbfa
je 0x14001c27d
cmp esi, 0xfffffdef
je 0x14001c229
cmp esi, 0xfffffbbc
je 0x14001c229
cmp esi, 0xfffff8f0
je 0x14001c229
cmp esi, 0xfffffc0d
jne 0x14001c064
mov ebx, 0x8007000e
jmp 0x14001c07f
test esi, esi
mov eax, 0x8e5e0000
mov ecx, 0xe5e0000
cmovs ecx, eax
mov eax, esi
cdq
xor eax, edx
sub eax, edx
movzx ebx, ax
or ebx, ecx
mov dword [rbp - 0x41], ebx
mov rcx, qword [0x14004d128]
cmp rcx, r15
je 0x14001c0b6
test byte [rcx + 0x1c], r14b
je 0x14001c0b6
cmp byte [rcx + 0x19], 2
jb 0x14001c0b6
mov rcx, qword [rcx + 0x10]
lea r8, [0x140046ab8]
mov edx, 0x2e
mov dword [rsp + 0x20], esi
mov r9, r13
call fcn.14001ea08
mov rax, qword [rbp - 0x51]
mov r8d, 8
mov rcx, rdi
mov rdx, qword [rax]
call fcn.14001ac1c
xor eax, eax
mov byte [rbp - 0x69], al
cmp byte [rdi + 0xa5], al
jne 0x14001c1e4
cmp byte [rdi + 0xa6], al
jne 0x14001c1e4
mov rcx, qword [rdi + 0x300]
xor edx, edx
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_WaitForSingleObject]
nop dword [rax + rax]
cmp eax, 0x102
jne 0x14001c1e4
mov rcx, qword [rdi + 0x2f8]
xor edx, edx
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_WaitForSingleObject]
nop dword [rax + rax]
cmp eax, 0x102
jne 0x14001c1e4
cmp dword [0x14004d098], 5
jbe 0x14001c1b5
movabs rdx, 0x400000000000
test qword [0x14004d0a8], rdx
je 0x14001c1b5
mov rax, qword [0x14004d0b0]
and rax, rdx
cmp rax, qword [0x14004d0b0]
jne 0x14001c1b5
lea rax, str.InitializeJetInstance
mov dword [rbp - 0x61], r12d
mov qword [rbp - 0x39], rax
lea rdx, [0x140047c25]
lea rax, [rdi + 0x2b8]
mov dword [rbp - 0x55], esi
mov qword [rbp - 0x29], rax
lea rax, [rbp - 0x61]
mov qword [rsp + 0x40], rax
lea rax, [rbp - 0x39]
mov qword [rsp + 0x38], rax
lea rax, [rbp - 0x55]
mov qword [rsp + 0x30], rax
lea rax, [rbp - 0x31]
mov qword [rsp + 0x28], rax
lea rax, [rbp - 0x29]
mov qword [rsp + 0x20], rax
mov qword [rbp - 0x31], r13
call fcn.140001134
mov ecx, 0x7d0
call qword [sym.imp.api_ms_win_core_synch_l1_2_0.dll_Sleep]
nop dword [rax + rax]
mov eax, dword [rbp - 0x65]
add eax, r14d
mov dword [rbp - 0x65], eax
cmp eax, 5
jb 0x14001bf70
mov rcx, qword [0x14004d128]
jmp 0x14001cca1
mov rcx, qword [0x14004d128]
cmp rcx, r15
je 0x14001cc9e
test byte [rcx + 0x1c], r14b
je 0x14001cc9e
cmp byte [rcx + 0x19], 5
jb 0x14001cc9e
mov rcx, qword [rcx + 0x10]
lea r9, [rdi + 0x2a0]
mov edx, 0xfc
lea r8, [0x1400467c0]
call fcn.140019524
jmp 0x14001cc97
mov ecx, 0x70
call fcn.140002f2c
mov ebx, eax
mov dword [rbp - 0x41], eax
mov rcx, qword [0x14004d128]
cmp rcx, r15
je 0x14001ccdf
test byte [rcx + 0x1c], r14b
je 0x14001cc9e
cmp byte [rcx + 0x19], 2
jb 0x14001cc9e
mov rcx, qword [rcx + 0x10]
lea r8, [0x140046ab8]
mov edx, 0x2d
mov dword [rsp + 0x20], esi
mov r9, r13
call fcn.14001ea08
jmp 0x14001cc97
mov rcx, qword [0x14004d128]
cmp rcx, r15
je 0x14001c2bc
test byte [rcx + 0x1c], r14b
je 0x14001c2bc
cmp byte [rcx + 0x19], 2
jb 0x14001c2bc
mov rcx, qword [rcx + 0x10]
lea r8, [0x140046ab8]
mov edx, 0x2c
mov dword [rsp + 0x20], 0xfffffbfa
mov r9, r13
call fcn.14001ea08
mov rcx, qword [0x14004d128]
xor esi, esi
xor ebx, ebx
mov dword [rbp - 0x41], ebx
jmp 0x14001cc9e
xor ebx, ebx
mov dword [rbp - 0x41], ebx
jmp 0x14001cc97
mov r12d, 5
mov rcx, qword [0x14004d128]
cmp rcx, r15
je 0x14001c313
test byte [rcx + 0x1c], r14b
je 0x14001c313
cmp byte [rcx + 0x19], 2
jb 0x14001c313
mov rcx, qword [rcx + 0x10]
lea edx, [r12 + 0x26]
mov r9, r13
mov dword [rsp + 0x20], eax
lea r8, [0x140046ab8]
call fcn.14000a620
mov rcx, qword [0x14004d128]
mov byte [rbp - 0x69], 0
jmp 0x14001cc9e
mov rcx, qword [0x14004d128]
cmp rcx, r15
je 0x14001c357
test byte [rcx + 0x1c], r14b
je 0x14001c357
cmp byte [rcx + 0x19], 5
jb 0x14001c357
mov rcx, qword [rcx + 0x10]
lea r9, [rdi + 0x2a0]
mov edx, 0xfc
lea r8, [0x1400467c0]
call fcn.140019524
mov rcx, qword [0x14004d128]
mov eax, 0x80830002
mov r12d, 4
mov ebx, eax
mov dword [rbp - 0x41], eax
mov esi, 0xfffffc18
cmp rcx, r15
je 0x14001c313
test byte [rcx + 0x1c], r14b
je 0x14001c313
cmp byte [rcx + 0x19], 2
jb 0x14001c313
mov r9d, dword [rdi + 0x80]
lea edx, [r12 + 0x26]
mov rcx, qword [rcx + 0x10]
lea r8, [0x140046ab8]
mov dword [rsp + 0x20], eax
call fcn.14000a330
jmp 0x14001c30c
mov rcx, qword [0x14004d128]
cmp byte [rdi + 0xa5], 0
mov r12d, 0x102
jne 0x14001cb69
cmp byte [rdi + 0xa6], 0
jne 0x14001cb69
mov rcx, qword [rdi + 0x300]
xor edx, edx
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_WaitForSingleObject]
nop dword [rax + rax]
cmp eax, r12d
jne 0x14001cb62
mov rcx, qword [rdi + 0x2f8]
xor edx, edx
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_WaitForSingleObject]
nop dword [rax + rax]
cmp eax, r12d
jne 0x14001cb62
mov r9, qword [rbp - 0x51]
xor r8d, r8d
mov rdx, r13
mov rcx, rdi
call fcn.14001a148
mov dword [rbp - 0x41], eax
mov ebx, eax
test eax, eax
jne 0x14001cb17
mov rdx, r13
mov byte [rbp - 0x69], r14b
mov rcx, rdi
call fcn.14001b480
cmp byte [rdi + 0xa5], bl
jne 0x14001caa0
cmp byte [rdi + 0xa6], bl
jne 0x14001caa0
mov rcx, qword [rdi + 0x300]
xor edx, edx
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_WaitForSingleObject]
nop dword [rax + rax]
cmp eax, r12d
jne 0x14001caa0
mov rcx, qword [rdi + 0x2f8]
xor edx, edx
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_WaitForSingleObject]
nop dword [rax + rax]
cmp eax, r12d
jne 0x14001caa0
mov r8d, dword [rbp - 0x61]
xor edx, edx
mov rcx, qword [rbp - 0x51]
call qword [sym.imp.ESENT.dll_JetInit3W]
nop dword [rax + rax]
mov esi, eax
test eax, eax
je 0x14001c4ef
cmp eax, 0xfffffdef
je 0x14001c4e3
cmp eax, 0xfffffbbc
je 0x14001c4e3
cmp eax, 0xfffff8f0
je 0x14001c4e3
cmp eax, 0xfffffc0d
jne 0x14001c4c6
mov ebx, 0x8007000e
jmp 0x14001c4ef
test esi, esi
mov eax, 0x8e5e0000
mov ecx, 0xe5e0000
cmovs ecx, eax
mov eax, esi
cdq
xor eax, edx
sub eax, edx
movzx ebx, ax
or ebx, ecx
jmp 0x14001c4ef
mov ecx, 0x70
call fcn.140002f2c
mov ebx, eax
mov rdx, r13
mov dword [rbp - 0x41], ebx
mov rcx, rdi
call fcn.14001b480
mov r12d, 0xc
test esi, esi
je 0x14001ca96
cmp esi, 0xfffffbfa
je 0x14001ca4b
cmp esi, 0xfffffdef
je 0x14001ca0e
cmp esi, 0xfffffbbc
je 0x14001ca0e
cmp esi, 0xfffff8f0
je 0x14001ca0e
lea eax, [rsi + 0x21f]
cmp eax, 0x2a
ja 0x14001c696
movabs rcx, 0x40000000011
bt rcx, rax
jae 0x14001c696
mov rcx, qword [0x14004d128]
cmp rcx, r15
je 0x14001c592
test byte [rcx + 0x1c], r14b
je 0x14001c592
cmp byte [rcx + 0x19], 2
jb 0x14001c592
mov rcx, qword [rcx + 0x10]
lea edx, [r12 + 0x28]
mov r9, r13
mov dword [rsp + 0x20], esi
lea r8, [0x140046ab8]
call fcn.14001ea08
mov rax, qword [rbp - 0x51]
mov r12d, 0xd
mov rcx, rdi
mov rdx, qword [rax]
lea r8d, [r12 - 5]
call fcn.14001ac1c
cmp byte [rdi + 0xa5], 0
mov byte [rbp - 0x69], 0
jne 0x14001c8b6
cmp byte [rdi + 0xa6], 0
jne 0x14001c8b6
mov rcx, qword [rdi + 0x300]
xor edx, edx
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_WaitForSingleObject]
nop dword [rax + rax]
cmp eax, 0x102
jne 0x14001c8b6
mov rcx, qword [rdi + 0x2f8]
xor edx, edx
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_WaitForSingleObject]
nop dword [rax + rax]
cmp eax, 0x102
jne 0x14001c8b6
mov ecx, 0x7d0
call qword [sym.imp.api_ms_win_core_synch_l1_2_0.dll_Sleep]
nop dword [rax + rax]
lea r9, str.edb.log
xor r8d, r8d
xor edx, edx
mov rcx, r13
call fcn.140039ad4
lea r9, str.edbtmp.log
xor r8d, r8d
xor edx, edx
mov rcx, r13
call fcn.140039ad4
lea r9, str.edb.chk
xor r8d, r8d
xor edx, edx
mov rcx, r13
call fcn.140039ad4
lea rax, str..log
xor r9d, r9d
xor r8d, r8d
mov qword [rsp + 0x20], rax
mov rdx, r13
mov rcx, rdi
call fcn.14003a14c
lea rax, str..jrs
xor r9d, r9d
xor r8d, r8d
mov qword [rsp + 0x20], rax
mov rdx, r13
mov rcx, rdi
call fcn.14003a14c
jmp 0x14001c804
cmp esi, 0xfffffb40
jne 0x14001c72c
mov rax, qword [rbp - 0x51]
mov r8d, 8
mov rcx, rdi
mov rdx, qword [rax]
call fcn.14001ac1c
mov byte [rbp - 0x69], 0
mov rcx, qword [0x14004d128]
cmp rcx, r15
je 0x14001c6fa
test byte [rcx + 0x1c], r14b
je 0x14001c6fa
cmp byte [rcx + 0x19], 2
jb 0x14001c6fa
mov rcx, qword [rcx + 0x10]
lea r8, [0x140046ab8]
mov edx, 0x35
mov dword [rsp + 0x20], 0xfffffb40
mov r9, r13
call fcn.14001ea08
mov rcx, qword [0x14004d128]
mov eax, dword [rbp - 0x61]
test eax, eax
jne 0x14001c711
lea r12d, [rax + 0xe]
mov dword [rbp - 0x61], 0x80
jmp 0x14001c80b
cmp eax, 0x80
jne 0x14001c902
lea r12d, [rax - 0x71]
mov dword [rbp - 0x61], 0x84
jmp 0x14001c80b
cmp esi, 0xfffffddf
je 0x14001c740
cmp esi, 0xfffffbc3
jne 0x14001c947
mov rax, qword [rbp - 0x51]
mov r12d, 0x11
mov rcx, rdi
mov rdx, qword [rax]
lea r8d, [r12 - 9]
call fcn.14001ac1c
mov byte [rbp - 0x69], 0
mov rcx, qword [0x14004d128]
cmp rcx, r15
je 0x14001c799
test byte [rcx + 0x1c], r14b
je 0x14001c799
cmp byte [rcx + 0x19], 2
jb 0x14001c799
mov rcx, qword [rcx + 0x10]
lea edx, [r12 + 0x26]
mov r9, r13
mov dword [rsp + 0x20], esi
lea r8, [0x140046ab8]
call fcn.14001ea08
mov rcx, qword [0x14004d128]
cmp byte [rdi + 0xa5], 0
jne 0x14001c983
cmp byte [rdi + 0xa6], 0
jne 0x14001c983
mov rcx, qword [rdi + 0x300]
xor edx, edx
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_WaitForSingleObject]
nop dword [rax + rax]
cmp eax, 0x102
jne 0x14001c97c
mov rcx, qword [rdi + 0x2f8]
xor edx, edx
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_WaitForSingleObject]
nop dword [rax + rax]
cmp eax, 0x102
jne 0x14001c97c
mov ecx, 0x7d0
call qword [sym.imp.api_ms_win_core_synch_l1_2_0.dll_Sleep]
nop dword [rax + rax]
mov rcx, qword [0x14004d128]
cmp dword [0x14004d098], 5
jbe 0x14001c89f
movabs r8, 0x400000000000
test qword [0x14004d0a8], r8
je 0x14001c89f
mov rax, qword [0x14004d0b0]
and rax, r8
cmp rax, qword [0x14004d0b0]
jne 0x14001c89f
lea rax, str.InitializeJetInstance
mov dword [rbp - 0x55], r12d
mov qword [rbp - 0x29], rax
lea rdx, [0x140047c25]
lea rax, [rdi + 0x2b8]
mov dword [rbp - 0x59], esi
mov qword [rbp - 0x39], rax
lea rax, [rbp - 0x55]
mov qword [rsp + 0x40], rax
lea rax, [rbp - 0x29]
mov qword [rsp + 0x38], rax
lea rax, [rbp - 0x59]
mov qword [rsp + 0x30], rax
lea rax, [rbp - 0x31]
mov qword [rsp + 0x28], rax
lea rax, [rbp - 0x39]
mov qword [rsp + 0x20], rax
mov qword [rbp - 0x31], r13
call fcn.140001134
mov rcx, qword [0x14004d128]
mov eax, dword [rbp - 0x65]
add eax, r14d
mov dword [rbp - 0x65], eax
cmp eax, 5
jae 0x14001cbf1
jmp 0x14001c3a9
mov rcx, qword [0x14004d128]
cmp rcx, r15
je 0x14001cbee
test byte [rcx + 0x1c], r14b
je 0x14001cbee
cmp byte [rcx + 0x19], 5
jb 0x14001cbee
mov rcx, qword [rcx + 0x10]
lea r9, [rdi + 0x2a0]
mov edx, 0xfc
lea r8, [0x1400467c0]
call fcn.140019524
mov rcx, qword [0x14004d128]
jmp 0x14001cbee
mov r12d, 0x10
cmp rcx, r15
je 0x14001cbee
test byte [rcx + 0x1c], r14b
je 0x14001cbee
cmp byte [rcx + 0x19], 2
jb 0x14001cbee
lea edx, [r12 + 0x26]
mov dword [rsp + 0x20], 0xfffffb40
mov rcx, qword [rcx + 0x10]
lea r8, [0x140046ab8]
mov r9, r13
call fcn.14001ea08
jmp 0x14001c8f6
mov r12d, 0x13
mov rcx, qword [0x14004d128]
cmp rcx, r15
je 0x14001cbee
test byte [rcx + 0x1c], r14b
je 0x14001cbee
cmp byte [rcx + 0x19], 2
jb 0x14001cbee
lea edx, [r12 + 0x26]
mov dword [rsp + 0x20], esi
jmp 0x14001c932
mov rcx, qword [0x14004d128]
cmp rcx, r15
je 0x14001c9b7
test byte [rcx + 0x1c], r14b
je 0x14001c9b7
cmp byte [rcx + 0x19], 5
jb 0x14001c9b7
mov rcx, qword [rcx + 0x10]
lea r9, [rdi + 0x2a0]
mov edx, 0xfc
lea r8, [0x1400467c0]
call fcn.140019524
mov rcx, qword [0x14004d128]
mov eax, 0x80830002
mov r12d, 0x12
mov ebx, eax
mov dword [rbp - 0x41], eax
mov esi, 0xfffffc18
cmp rcx, r15
je 0x14001cbee
test byte [rcx + 0x1c], r14b
je 0x14001cbee
cmp byte [rcx + 0x19], 2
jb 0x14001cbee
lea edx, [r12 + 0x26]
mov r9d, dword [rdi + 0x80]
lea r8, [0x140046ab8]
mov rcx, qword [rcx + 0x10]
mov dword [rsp + 0x20], eax
call fcn.14000a330
jmp 0x14001c8f6
mov ecx, 0x70
call fcn.140002f2c
mov ebx, eax
mov dword [rbp - 0x41], eax
mov rcx, qword [0x14004d128]
cmp rcx, r15
je 0x14001cbee
test byte [rcx + 0x1c], r14b
je 0x14001cbee
cmp byte [rcx + 0x19], 2
jb 0x14001cbee
mov edx, 0x33
jmp 0x14001c976
mov rcx, qword [0x14004d128]
cmp rcx, r15
je 0x14001ca8a
test byte [rcx + 0x1c], r14b
je 0x14001ca8a
cmp byte [rcx + 0x19], 2
jb 0x14001ca8a
mov rcx, qword [rcx + 0x10]
lea r8, [0x140046ab8]
mov edx, 0x32
mov dword [rsp + 0x20], 0xfffffbfa
mov r9, r13
call fcn.14001ea08
mov rcx, qword [0x14004d128]
xor esi, esi
xor ebx, ebx
mov dword [rbp - 0x41], ebx
jmp 0x14001cbee
xor ebx, ebx
mov dword [rbp - 0x41], ebx
jmp 0x14001c8f6
mov rcx, qword [0x14004d128]
cmp rcx, r15
je 0x14001cadb
test byte [rcx + 0x1c], r14b
je 0x14001cadb
cmp byte [rcx + 0x19], 5
jb 0x14001cadb
mov rcx, qword [rcx + 0x10]
lea r9, [rdi + 0x2a0]
mov edx, 0xfc
lea r8, [0x1400467c0]
call fcn.140019524
mov rcx, qword [0x14004d128]
mov eax, 0x80830002
mov esi, 0xfffffc18
mov ebx, eax
mov dword [rbp - 0x41], eax
mov r12d, 0xb
cmp rcx, r15
je 0x14001cbee
test byte [rcx + 0x1c], r14b
je 0x14001cbee
cmp byte [rcx + 0x19], 2
jb 0x14001cbee
lea edx, [r12 + 0x26]
jmp 0x14001c9ee
mov r12d, 9
mov rcx, qword [0x14004d128]
cmp rcx, r15
je 0x14001cbea
test byte [rcx + 0x1c], r14b
je 0x14001cbea
cmp byte [rcx + 0x19], 2
jb 0x14001cbea
mov rcx, qword [rcx + 0x10]
lea edx, [r12 + 0x27]
mov r9, r13
mov dword [rsp + 0x20], eax
lea r8, [0x140046ab8]
call fcn.14000a620
jmp 0x14001cbe3
mov rcx, qword [0x14004d128]
cmp rcx, r15
je 0x14001cb9d
test byte [rcx + 0x1c], r14b
je 0x14001cb9d
cmp byte [rcx + 0x19], 5
jb 0x14001cb9d
mov rcx, qword [rcx + 0x10]
lea r9, [rdi + 0x2a0]
mov edx, 0xfc
lea r8, [0x1400467c0]
call fcn.140019524
mov rcx, qword [0x14004d128]
mov eax, 0x80830002
mov r12d, 8
mov ebx, eax
mov dword [rbp - 0x41], eax
mov esi, 0xfffffc18
cmp rcx, r15
je 0x14001cbea
test byte [rcx + 0x1c], r14b
je 0x14001cbea
cmp byte [rcx + 0x19], 2
jb 0x14001cbea
mov r9d, dword [rdi + 0x80]
lea edx, [r12 + 0x27]
mov rcx, qword [rcx + 0x10]
lea r8, [0x140046ab8]
mov dword [rsp + 0x20], eax
call fcn.14000a330
mov rcx, qword [0x14004d128]
mov byte [rbp - 0x69], 0
mov eax, dword [rbp - 0x65]
cmp dword [rbp - 0x61], 0x84
jne 0x14001cca1
test ebx, ebx
jne 0x14001cca1
test byte [0x14004dcc0], 2
je 0x14001cc67
movzx eax, word [rdi + 0x2b8]
lea r9d, [rbx + 3]
and dword [rbp - 5], ebx
lea rdx, [0x140045b80]
and dword [rbp + 0xb], ebx
shr ax, 1
movzx ecx, ax
lea rax, [rbp - 0x61]
mov qword [rbp - 0x11], rax
mov rax, qword [rdi + 0x2c0]
mov qword [rbp - 1], rax
lea rax, [rbp - 0x21]
mov word [rbp - 0x61], cx
add ecx, ecx
mov qword [rsp + 0x20], rax
mov dword [rbp - 9], 2
mov dword [rbp + 7], ecx
call fcn.140018d10
mov rcx, qword [0x14004d128]
jmp 0x14001cc69
xor eax, eax
cmp rcx, r15
je 0x14001ccd3
test byte [rcx + 0x1c], r14b
je 0x14001cc9e
cmp byte [rcx + 0x19], 4
jb 0x14001cc9e
mov rcx, qword [rcx + 0x10]
lea r8, [0x140046ab8]
mov edx, 0x3a
mov qword [rsp + 0x20], r13
mov r9d, eax
call fcn.14000a2a8
mov rcx, qword [0x14004d128]
mov eax, dword [rbp - 0x65]
cmp rcx, r15
je 0x14001ccd3
test byte [rcx + 0x1c], r14b
je 0x14001ccd3
cmp byte [rcx + 0x19], 2
jb 0x14001ccd3
mov rcx, qword [rcx + 0x10]
lea r8, [0x140046ab8]
mov edx, 0x3b
mov dword [rsp + 0x28], ebx
mov r9d, eax
mov qword [rsp + 0x20], r13
call fcn.14001e968
test esi, esi
jne 0x14001ccdf
test ebx, ebx
je 0x14001cd97
cmp dword [0x14004d098], 5
jbe 0x14001cd78
movabs rcx, 0x400000000000
test qword [0x14004d0a8], rcx
je 0x14001cd78
mov rax, qword [0x14004d0b0]
and rax, rcx
cmp rax, qword [0x14004d0b0]
jne 0x14001cd78
lea rax, str.InitializeJetInstance
mov dword [rbp - 0x55], ebx
mov qword [rbp - 0x29], rax
lea rdx, [0x140047bb3]
lea rax, [rdi + 0x2b8]
mov dword [rbp - 0x59], r12d
mov qword [rbp - 0x39], rax
lea rax, [rbp - 0x55]
mov qword [rsp + 0x48], rax
lea rax, [rbp - 0x59]
mov qword [rsp + 0x40], rax
lea rax, [rbp - 0x29]
mov qword [rsp + 0x38], rax
lea rax, [rbp - 0x65]
mov qword [rsp + 0x30], rax
lea rax, [rbp - 0x31]
mov qword [rsp + 0x28], rax
lea rax, [rbp - 0x39]
mov qword [rsp + 0x20], rax
mov dword [rbp - 0x65], esi
mov qword [rbp - 0x31], r13
call fcn.14000124c
test esi, esi
je 0x14001cd97
cmp byte [rbp - 0x69], 0
je 0x14001cd97
mov rax, qword [rbp - 0x51]
mov r8d, 8
mov rcx, rdi
mov rdx, qword [rax]
call fcn.14001ac1c
lea rcx, [rbp - 0x49]
call fcn.1400059dc
mov eax, ebx
mov rcx, qword [rbp + 0xf]
xor rcx, rsp
call fcn.140001e80
add rsp, 0xd8
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret