Function at 0x12882b90
Capabilities:
Create directory
Get disk information
Set file attributes

Disassembly:
mov rax, rsp
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x580
mov qword [rsp + 0x88], 0xfffffffffffffffe
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rbp
mov qword [rax + 0x20], rsi
mov rax, qword [0x12a52ee0]
xor rax, rsp
mov qword [rsp + 0x570], rax
mov rbp, rcx
call fcn.12888850
test eax, eax
je 0x1288453b
mov rcx, rbp
call fcn.12863590
call fcn.1285e220
mov byte [0x129ae620], 1
mov ecx, 0x2000
call fcn.12958238
mov r14, rax
mov qword [rsp + 0x80], rax
mov ecx, 0x2000
call fcn.12958238
mov r13, rax
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x150], 7
xor esi, esi
mov qword [rsp + 0x148], rsi
mov word [rsp + 0x138], si
mov qword [rsp + 0x100], 7
mov qword [rsp + 0xf8], rsi
mov word [rsp + 0xe8], si
mov qword [rsp + 0xb0], 7
mov qword [rsp + 0xa8], rsi
mov word [rsp + 0x98], si
mov qword [rsp + 0x178], 7
mov qword [rsp + 0x170], rsi
mov word [rsp + 0x160], si
lea rax, vtable.um_i_buffer.0
mov qword [rsp + 0x1d0], rax
lea rax, vtable.um_i_buffer_vector_byte.0
mov qword [rsp + 0x1d0], rax
lea rax, [rsp + 0x1d8]
mov qword [rsp + 0x350], rax
lea ecx, [rsi + 8]
call fcn.12958d80
mov qword [rsp + 0x78], rax
mov qword [rsp + 0x60], rax
test rax, rax
je 0x12882cdc
lea rcx, [rsp + 0x1d8]
mov qword [rax], rcx
jmp 0x12882cdf
mov rax, rsi
mov qword [rsp + 0x1d8], rax
mov qword [rsp + 0x1f0], rsi
mov qword [rsp + 0x1f8], rsi
mov qword [rsp + 0x200], rsi
lea rax, [rsp + 0x208]
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x228], 7
mov qword [rsp + 0x220], rsi
mov word [rsp + 0x210], si
lea rax, [rsp + 0x230]
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x250], 7
mov qword [rsp + 0x248], rsi
mov word [rsp + 0x238], si
lea rax, [rsp + 0x258]
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x278], 7
mov qword [rsp + 0x270], rsi
mov word [rsp + 0x260], si
lea rax, [rsp + 0x280]
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x2a0], 7
mov qword [rsp + 0x298], rsi
mov word [rsp + 0x288], si
lea rax, [rsp + 0x2a8]
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x2c8], 7
mov qword [rsp + 0x2c0], rsi
mov word [rsp + 0x2b0], si
lea rax, [rsp + 0x2d0]
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x2f0], 7
mov qword [rsp + 0x2e8], rsi
mov word [rsp + 0x2d8], si
lea rax, [rsp + 0x2f8]
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x318], 7
mov qword [rsp + 0x310], rsi
mov word [rsp + 0x300], si
lea rax, [rsp + 0x320]
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x340], 7
mov qword [rsp + 0x338], rsi
mov word [rsp + 0x328], si
mov qword [rsp + 0xd8], 7
mov qword [rsp + 0xd0], rsi
mov word [rsp + 0xc0], si
xor eax, eax
or rcx, 0xffffffffffffffff
lea rdi, str.Sys_windir
repne scasw ax, word [rdi]
not rcx
lea r8, [rcx - 1]
lea rdx, str.Sys_windir
lea rcx, [rsp + 0xb8]
call fcn.12803dc0
nop
lea rdx, [rsp + 0xe0]
lea rcx, [rsp + 0xb8]
call fcn.12888930
test eax, eax
sete dil
cmp qword [rsp + 0xd8], 8
jb 0x12882ec2
mov rcx, qword [rsp + 0xc0]
call fcn.12958250
mov qword [rsp + 0xd8], 7
mov qword [rsp + 0xd0], rsi
mov word [rsp + 0xc0], si
test dil, dil
je 0x12882f79
mov qword [rsp + 0xd8], 7
mov qword [rsp + 0xd0], rsi
mov word [rsp + 0xc0], si
xor eax, eax
or rcx, 0xffffffffffffffff
lea rdi, [0x129beb70]
repne scasw ax, word [rdi]
not rcx
lea r8, [rcx - 1]
lea rdx, [0x129beb70]
lea rcx, [rsp + 0xb8]
call fcn.12803dc0
nop
lea rdx, [rsp + 0xe0]
lea rcx, [rsp + 0xb8]
call fcn.12888930
nop
cmp qword [rsp + 0xd8], 8
jb 0x12882f5d
mov rcx, qword [rsp + 0xc0]
call fcn.12958250
mov qword [rsp + 0xd8], 7
mov qword [rsp + 0xd0], rsi
mov word [rsp + 0xc0], si
cmp qword [rsp + 0xf8], 0
je 0x1288444a
lea rcx, [rsp + 0xe8]
cmp qword [rsp + 0x100], 8
cmovae rcx, qword [rsp + 0xe8]
mov r8d, 0x1000
mov rdx, r13
call qword [sym.imp.KERNEL32.dll_GetLongPathNameW]
test eax, eax
je 0x12882fec
test r13, r13
je 0x12882fdf
xor eax, eax
or rcx, 0xffffffffffffffff
mov rdi, r13
repne scasw ax, word [rdi]
not rcx
lea r8, [rcx - 1]
mov rdx, r13
lea rcx, [rsp + 0xe0]
call fcn.12803dc0
jmp 0x12882fec
lea rcx, [rsp + 0xe0]
call fcn.12803f90
cmp qword [rsp + 0xf8], 0
je 0x1288444a
mov qword [rsp + 0x128], 7
mov qword [rsp + 0x120], rsi
mov word [rsp + 0x110], si
mov qword [rsp + 0xd8], 7
mov qword [rsp + 0xd0], rsi
mov word [rsp + 0xc0], si
xor eax, eax
or rcx, 0xffffffffffffffff
lea rdi, str.VosInstallDir
repne scasw ax, word [rdi]
not rcx
lea r8, [rcx - 1]
lea rdx, str.VosInstallDir
lea rcx, [rsp + 0xb8]
call fcn.12803dc0
nop
lea rdx, [rsp + 0x108]
lea rcx, [rsp + 0xb8]
call fcn.12888930
test eax, eax
sete dil
cmp qword [rsp + 0xd8], 8
jb 0x12883092
mov rcx, qword [rsp + 0xc0]
call fcn.12958250
mov qword [rsp + 0xd8], 7
mov qword [rsp + 0xd0], rsi
mov word [rsp + 0xc0], si
test dil, dil
je 0x128832c2
mov qword [rsp + 0xd8], 7
mov qword [rsp + 0xd0], rsi
mov word [rsp + 0xc0], si
xor eax, eax
or rcx, 0xffffffffffffffff
lea rdi, [0x129bf720]
repne scasw ax, word [rdi]
not rcx
lea r8, [rcx - 1]
lea rdx, [0x129bf720]
lea rcx, [rsp + 0xb8]
call fcn.12803dc0
nop
lea rdx, [rsp + 0x108]
lea rcx, [rsp + 0xb8]
call fcn.12888930
test eax, eax
sete dil
cmp qword [rsp + 0xd8], 8
jb 0x12883132
mov rcx, qword [rsp + 0xc0]
call fcn.12958250
mov qword [rsp + 0xd8], 7
mov qword [rsp + 0xd0], rsi
mov word [rsp + 0xc0], si
test dil, dil
je 0x12883281
cmp qword [rsp + 0x128], 8
jb 0x1288316f
mov rcx, qword [rsp + 0x110]
call fcn.12958250
mov qword [rsp + 0x128], 7
mov qword [rsp + 0x120], rsi
mov word [rsp + 0x110], si
lea rcx, [rsp + 0x1d0]
call fcn.1284c4a0
nop
cmp qword [rsp + 0x178], 8
jb 0x128831b1
mov rcx, qword [rsp + 0x160]
call fcn.12958250
mov qword [rsp + 0x178], 7
mov qword [rsp + 0x170], rsi
mov word [rsp + 0x160], si
cmp qword [rsp + 0xb0], 8
jb 0x128831e5
mov rcx, qword [rsp + 0x98]
call fcn.12958250
mov qword [rsp + 0xb0], 7
mov qword [rsp + 0xa8], rsi
mov word [rsp + 0x98], si
cmp qword [rsp + 0x100], 8
jb 0x12883219
mov rcx, qword [rsp + 0xe8]
call fcn.12958250
mov qword [rsp + 0x100], 7
mov qword [rsp + 0xf8], rsi
mov word [rsp + 0xe8], si
cmp qword [rsp + 0x150], 8
jb 0x1288324d
mov rcx, qword [rsp + 0x138]
call fcn.12958250
mov qword [rsp + 0x150], 7
mov qword [rsp + 0x148], rsi
mov word [rsp + 0x138], si
mov rcx, r13
call fcn.12958250
nop
mov rcx, r14
call fcn.12958250
xor eax, eax
jmp 0x1288453b
cmp qword [rsp + 0x120], 0
ja 0x12883291
call fcn.129581ac
lea rcx, [rsp + 0x110]
cmp qword [rsp + 0x128], 8
cmovae rcx, qword [rsp + 0x110]
call qword [sym.imp.SHLWAPI.dll_PathRemoveFileSpecW]
or rdx, 0xffffffffffffffff
lea rcx, [rsp + 0x108]
call fcn.1280d350
lea rcx, [rsp + 0x108]
call fcn.12858bf0
or r9, 0xffffffffffffffff
xor r8d, r8d
lea rdx, [rsp + 0x108]
lea rcx, [rbp + 0x698]
call fcn.12803c90
cmp qword [rsp + 0x120], 0
ja 0x128832fa
call fcn.129581ac
lea rax, [rsp + 0x110]
cmp qword [rsp + 0x128], 8
cmovae rax, qword [rsp + 0x110]
movzx r15d, word [rax]
or r9, 0xffffffffffffffff
xor r8d, r8d
lea rdx, [rsp + 0x108]
lea rcx, [rbp + 0x550]
call fcn.12803c90
mov edx, 0x5c
lea rcx, [rbp + 0x550]
call fcn.1280d2e0
or r9, 0xffffffffffffffff
xor r8d, r8d
lea rdx, [rbp + 0x550]
lea rcx, [rbp + 0x578]
call fcn.12803c90
lea rcx, [rbp + 0x578]
call fcn.1285f2a0
xor edx, edx
lea r8d, [rdx + 2]
lea rcx, [rbp + 0x578]
call fcn.128033a0
xor edx, edx
lea r8d, [rdx + 2]
lea rcx, [rbp + 0x550]
call fcn.128033a0
cmp qword [rbp + 0x590], 0
je 0x12884320
cmp qword [rbp + 0x568], 0
je 0x12884320
or r9, 0xffffffffffffffff
xor r8d, r8d
lea rdx, [rsp + 0x108]
lea rcx, [rbp + 0x5e0]
call fcn.12803c90
xor r8d, r8d
lea rdx, str.Software_
lea rcx, [rbp + 0x5e0]
call fcn.1281b460
xor edx, edx
lea r8d, [rdx + 2]
lea rcx, [rbp + 0x5e0]
call fcn.128033a0
lea rcx, [rbp + 0x5e0]
call fcn.12826200
mov r8d, 4
lea rdx, [0x129bf6c0]
lea rcx, [rbp + 0x4d8]
call fcn.12803dc0
movzx r8d, r15w
mov edx, 1
lea rcx, [rbp + 0x4d8]
call fcn.12803b90
mov r8d, 1
lea rdx, [0x129b4d08]
lea rcx, [rbp + 0x4d8]
call fcn.12803a10
lea rdx, [rbp + 0x4b0]
xor r8d, r8d
lea rcx, [rbp + 0x4d8]
call fcn.1285f350
cmp qword [rbp + 0x4c8], 0
jne 0x128834cc
lea rcx, [rsp + 0x108]
call fcn.12803630
nop
lea rcx, [rsp + 0x1d0]
call fcn.1284c4a0
nop
lea rcx, [rsp + 0x158]
call fcn.12803630
nop
lea rcx, [rsp + 0x90]
call fcn.12803630
nop
lea rcx, [rsp + 0xe0]
call fcn.12803630
nop
lea rcx, [rsp + 0x130]
call fcn.12803630
nop
mov rcx, r13
call fcn.12958250
nop
mov rcx, r14
call fcn.12958250
xor eax, eax
jmp 0x1288453b
mov r8d, 4
lea rdx, [0x129bf6c0]
lea rcx, [rsp + 0x90]
call fcn.12803dc0
xor edx, edx
lea rcx, [rsp + 0xe0]
call fcn.1280d060
movzx r8d, word [rax]
mov edx, 1
lea rcx, [rsp + 0x90]
call fcn.12803b90
mov r8d, 1
lea rdx, [0x129b4d08]
lea rcx, [rsp + 0x90]
call fcn.12803a10
lea rdx, [rbp + 0x488]
xor r8d, r8d
lea rcx, [rsp + 0x90]
call fcn.1285f350
cmp qword [rbp + 0x4a0], 0
jne 0x128835b2
lea rcx, [rsp + 0x108]
call fcn.12803630
nop
lea rcx, [rsp + 0x1d0]
call fcn.1284c4a0
nop
lea rcx, [rsp + 0x158]
call fcn.12803630
nop
lea rcx, [rsp + 0x90]
call fcn.12803630
nop
lea rcx, [rsp + 0xe0]
call fcn.12803630
nop
lea rcx, [rsp + 0x130]
call fcn.12803630
nop
mov rcx, r13
call fcn.12958250
nop
mov rcx, r14
call fcn.12958250
xor eax, eax
jmp 0x1288453b
lea rcx, [rsp + 0x90]
call fcn.12803f90
lea rdx, str.Sys_SystemRoot
lea rcx, [rsp + 0x1a8]
call fcn.12804480
nop
lea rdx, [rbp + 0x500]
lea rcx, [rsp + 0x1a8]
call fcn.12888930
test eax, eax
sete dil
lea rcx, [rsp + 0x1a8]
call fcn.12803630
test dil, dil
je 0x12883637
lea rdx, str.SystemRoot
lea rcx, [rsp + 0x1a8]
call fcn.12804480
nop
lea rdx, [rbp + 0x500]
lea rcx, [rsp + 0x1a8]
call fcn.12888930
nop
lea rcx, [rsp + 0x1a8]
call fcn.12803630
cmp qword [rbp + 0x518], 0
jne 0x128836ad
lea rcx, [rsp + 0x108]
call fcn.12803630
nop
lea rcx, [rsp + 0x1d0]
call fcn.1284c4a0
nop
lea rcx, [rsp + 0x158]
call fcn.12803630
nop
lea rcx, [rsp + 0x90]
call fcn.12803630
nop
lea rcx, [rsp + 0xe0]
call fcn.12803630
nop
lea rcx, [rsp + 0x130]
call fcn.12803630
nop
mov rcx, r13
call fcn.12958250
nop
mov rcx, r14
call fcn.12958250
xor eax, eax
jmp 0x1288453b
mov r9d, 4
lea r8, [0x129bf6c0]
xor edx, edx
lea rcx, [rbp + 0x500]
call fcn.12830f40
mov rcx, rbp
call fcn.1287f160
lea rdx, str.CurrentUserSid
lea rcx, [rsp + 0x1a8]
call fcn.12804480
nop
lea rdx, [rsp + 0x130]
lea rcx, [rsp + 0x1a8]
call fcn.12888930
test eax, eax
sete dil
lea rcx, [rsp + 0x1a8]
call fcn.12803630
test dil, dil
je 0x1288377e
lea rcx, [rsp + 0x108]
call fcn.12803630
nop
lea rcx, [rsp + 0x1d0]
call fcn.1284c4a0
nop
lea rcx, [rsp + 0x158]
call fcn.12803630
nop
lea rcx, [rsp + 0x90]
call fcn.12803630
nop
lea rcx, [rsp + 0xe0]
call fcn.12803630
nop
lea rcx, [rsp + 0x130]
call fcn.12803630
nop
mov rcx, r13
call fcn.12958250
nop
mov rcx, r14
call fcn.12958250
xor eax, eax
jmp 0x1288453b
mov r9d, 0xf
lea r8, str.REGISTRYUSER_
xor edx, edx
lea rcx, [rsp + 0x130]
call fcn.12830f40
xor edx, edx
lea rcx, [rsp + 0xe0]
call fcn.1280d060
movzx r8d, word [rax]
lea rdx, str._c:_
lea rcx, [rsp + 0x90]
call fcn.12804810
lea rbx, str.Documents_and_Settings
lea rdx, str.Users
cmp dword [0x129adcc4], 8
cmovl rdx, rbx
xor eax, eax
or rcx, 0xffffffffffffffff
mov rdi, rdx
repne scasw ax, word [rdi]
not rcx
lea r8, [rcx - 1]
lea rcx, [rsp + 0x90]
call fcn.12803a10
cmp qword [rbp + 0x6b8], 8
jb 0x1288380d
mov r8, qword [rbp + 0x6a0]
jmp 0x12883814
lea r8, [rbp + 0x6a0]
mov r9, rbx
lea rdx, str._sSoftware_s
lea rcx, [rsp + 0x158]
call fcn.12804810
mov qword [rsp + 0x50], rsi
mov dword [rsp + 0x48], esi
mov qword [rsp + 0x40], rsi
mov dword [rsp + 0x38], esi
mov dword [rsp + 0x30], 2
mov dword [rsp + 0x28], 0xd01301bf
mov dword [rsp + 0x20], esi
lea r9, [rsp + 0x158]
lea r8, [rsp + 0x90]
lea rdx, [rsp + 0x1d0]
mov rcx, rbp
call fcn.1287ec70
or r9, 0xffffffffffffffff
xor r8d, r8d
lea rdx, [rsp + 0x108]
lea rcx, [rbp + 0x670]
call fcn.12803c90
xor r8d, r8d
lea rdx, str.Software
lea rcx, [rbp + 0x670]
call fcn.1281b460
or r9, 0xffffffffffffffff
xor r8d, r8d
lea rdx, [rbp + 0x670]
lea rcx, [rbp + 0x648]
call fcn.12803c90
xor edx, edx
lea rcx, [rsp + 0xe0]
call fcn.1280d060
mov rdi, rax
xor edx, edx
lea rcx, [rbp + 0x648]
call fcn.1280d060
movzx ecx, word [rdi]
mov word [rax], cx
mov qword [rsp + 0x1a0], 7
xor eax, eax
mov qword [rsp + 0x198], rax
mov word [rsp + 0x188], ax
or r9, 0xffffffffffffffff
xor r8d, r8d
lea rdx, [rbp + 0x670]
lea rcx, [rsp + 0x180]
call fcn.12803c90
nop
mov r8d, 1
lea rdx, [rbp + 0x670]
lea rcx, [rsp + 0x180]
call fcn.1285f350
or r9, 0xffffffffffffffff
xor r8d, r8d
lea rdx, [rbp + 0x648]
lea rcx, [rsp + 0x180]
call fcn.12803c90
mov r8d, 1
lea rdx, [rbp + 0x648]
lea rcx, [rsp + 0x180]
call fcn.1285f350
lea rcx, [rbp + 0x648]
call fcn.12826200
nop
lea rcx, [rsp + 0x180]
call fcn.12803630
xor esi, esi
mov word [rsp + 0x360], si
movabs rax, 0x5c003a0078
mov qword [rsp + 0x350], rax
mov word [rsp + 0x350], r15w
mov r8d, 0x104
lea rdx, [rsp + 0x360]
lea rcx, [rsp + 0x350]
call qword [sym.imp.KERNEL32.dll_GetVolumeNameForVolumeMountPointW]
test eax, eax
je 0x128839de
lea rcx, [rbp + 0x7b8]
lea rdx, [rsp + 0x360]
call fcn.128044f0
xor edx, edx
lea rcx, [rsp + 0xe0]
call fcn.1280d060
movzx ecx, word [rax]
mov word [rsp + 0x350], cx
mov r8d, 0x104
lea rdx, [rsp + 0x360]
lea rcx, [rsp + 0x350]
call qword [sym.imp.KERNEL32.dll_GetVolumeNameForVolumeMountPointW]
test eax, eax
je 0x12883a2c
lea rcx, [rbp + 0x7e0]
lea rdx, [rsp + 0x360]
call fcn.128044f0
movzx edx, r15w
mov rcx, rbp
call fcn.12863770
xor edx, edx
lea rcx, [rsp + 0xe0]
call fcn.1280d060
movzx edx, word [rax]
mov rcx, rbp
call fcn.12863770
mov qword [rsp + 0x1c8], 7
mov qword [rsp + 0x1c0], rsi
mov word [rsp + 0x1b0], si
mov qword [rsp + 0xd8], 7
mov qword [rsp + 0xd0], rsi
mov word [rsp + 0xc0], si
mov qword [rsp + 0x1a0], 7
mov qword [rsp + 0x198], rsi
mov word [rsp + 0x188], si
cmp qword [rbp + 0x6b8], 8
jb 0x12883ab9
mov r8, qword [rbp + 0x6a0]
jmp 0x12883ac0
lea r8, [rbp + 0x6a0]
lea r9, str.RECYCLERS
lea rdx, str._sSoftware_s
lea rcx, [rsp + 0xb8]
call fcn.12804810
lea rdx, [rsp + 0xc0]
cmp qword [rsp + 0xd8], 8
cmovae rdx, qword [rsp + 0xc0]
lea r8, [0x129ada60]
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_SHCreateDirectoryExW]
lea rcx, [rsp + 0xc0]
cmp qword [rsp + 0xd8], 8
cmovae rcx, qword [rsp + 0xc0]
mov edx, 6
call qword [sym.imp.KERNEL32.dll_SetFileAttributesW]
cmp qword [rbp + 0x6b8], 8
jb 0x12883b3c
mov r8, qword [rbp + 0x6a0]
jmp 0x12883b43
lea r8, [rbp + 0x6a0]
lea rax, str.RECYCLER_V
mov qword [rsp + 0x20], rax
lea r9, str.RECYCLERS
lea rdx, str._sSoftware_s_s
lea rcx, [rsp + 0xb8]
call fcn.12804810
cmp qword [rbp + 0x6b8], 8
jb 0x12883b7d
mov r8, qword [rbp + 0x6a0]
jmp 0x12883b84
lea r8, [rbp + 0x6a0]
lea rax, str.RECYCLER_S
mov qword [rsp + 0x20], rax
lea r9, str.RECYCLERS
lea rdx, str._sSoftware_s_s
lea rcx, [rsp + 0x1a8]
call fcn.12804810
cmp qword [rbp + 0x6b8], 8
jb 0x12883bbe
mov r8, qword [rbp + 0x6a0]
jmp 0x12883bc5
lea r8, [rbp + 0x6a0]
lea rax, str.RECYCLER_VsC
mov qword [rsp + 0x20], rax
lea r9, str.RECYCLERS
lea rdx, str._sSoftware_s_s
lea rcx, [rsp + 0x180]
call fcn.12804810
lea rdx, [rsp + 0x1a8]
lea rbx, [rsp + 0x180]
cmp byte [rbp + 0x809], 0
cmove rbx, rdx
cmp dword [0x129adcc4], 8
jge 0x12883f33
xor edx, edx
lea rcx, [rsp + 0xe0]
call fcn.1280d060
movzx r8d, word [rax]
lea rdx, str._c:RECYCLER
lea rcx, [rsp + 0x90]
call fcn.12804810
mov qword [rsp + 0x50], rsi
mov dword [rsp + 0x48], esi
mov qword [rsp + 0x40], rsi
mov dword [rsp + 0x38], 0x18
mov dword [rsp + 0x30], esi
mov dword [rsp + 0x28], 0xd01301bf
mov dword [rsp + 0x20], esi
mov r9, rbx
lea r8, [rsp + 0x90]
lea rdx, [rsp + 0x1d0]
mov rcx, rbp
call fcn.1287ec70
movzx edi, r15w
mov r8d, edi
lea rdx, str._c:RECYCLER
lea rcx, [rsp + 0x90]
call fcn.12804810
mov qword [rsp + 0x50], rsi
mov dword [rsp + 0x48], esi
mov qword [rsp + 0x40], rsi
mov dword [rsp + 0x38], 0x18
mov dword [rsp + 0x30], 1
mov dword [rsp + 0x28], 0xd01301bf
mov dword [rsp + 0x20], esi
lea r9, [rsp + 0xb8]
lea r8, [rsp + 0x90]
lea rdx, [rsp + 0x1d0]
mov rcx, rbp
call fcn.1287ec70
lea rcx, [rsp + 0x98]
cmp qword [rsp + 0xb0], 8
cmovae rcx, qword [rsp + 0x98]
mov edx, 6
call qword [sym.imp.KERNEL32.dll_SetFileAttributesW]
xor edx, edx
lea rcx, [rsp + 0xe0]
call fcn.1280d060
movzx r8d, word [rax]
lea rdx, str._c:Recycled
lea rcx, [rsp + 0x90]
call fcn.12804810
mov qword [rsp + 0x50], rsi
mov dword [rsp + 0x48], esi
mov qword [rsp + 0x40], rsi
mov dword [rsp + 0x38], 0x18
mov dword [rsp + 0x30], esi
mov dword [rsp + 0x28], 0xd01301bf
mov dword [rsp + 0x20], esi
mov r9, rbx
lea r8, [rsp + 0x90]
lea rdx, [rsp + 0x1d0]
mov rcx, rbp
call fcn.1287ec70
mov r8d, edi
lea rdx, str._c:Recycled
lea rcx, [rsp + 0x90]
call fcn.12804810
mov qword [rsp + 0x50], rsi
mov dword [rsp + 0x48], esi
mov qword [rsp + 0x40], rsi
mov dword [rsp + 0x38], 0x18
mov dword [rsp + 0x30], 1
mov dword [rsp + 0x28], 0xd01301bf
mov dword [rsp + 0x20], esi
lea r9, [rsp + 0xb8]
lea r8, [rsp + 0x90]
lea rdx, [rsp + 0x1d0]
mov rcx, rbp
call fcn.1287ec70
lea rcx, [rsp + 0x98]
cmp qword [rsp + 0xb0], 8
cmovae rcx, qword [rsp + 0x98]
mov edx, 6
call qword [sym.imp.KERNEL32.dll_SetFileAttributesW]
cmp qword [rbp + 0x6b8], 8
jb 0x12883e07
mov r8, qword [rbp + 0x6a0]
jmp 0x12883e0e
lea r8, [rbp + 0x6a0]
lea rdx, str._sSoftwareRECYCLER
lea rcx, [rsp + 0x90]
call fcn.12804810
mov qword [rsp + 0x50], rsi
mov dword [rsp + 0x48], esi
mov qword [rsp + 0x40], rsi
mov dword [rsp + 0x38], 0x18
mov dword [rsp + 0x30], 1
mov dword [rsp + 0x28], 0xd01301bf
mov dword [rsp + 0x20], esi
lea r9, [rsp + 0x180]
lea r8, [rsp + 0x90]
lea rdx, [rsp + 0x1d0]
mov rcx, rbp
call fcn.1287ec70
lea rcx, [rsp + 0x98]
cmp qword [rsp + 0xb0], 8
cmovae rcx, qword [rsp + 0x98]
mov edx, 6
call qword [sym.imp.KERNEL32.dll_SetFileAttributesW]
cmp qword [rbp + 0x6b8], 8
jb 0x12883ea4
mov r8, qword [rbp + 0x6a0]
jmp 0x12883eab
lea r8, [rbp + 0x6a0]
lea rdx, str._sSoftwareRecycled
lea rcx, [rsp + 0x90]
call fcn.12804810
mov qword [rsp + 0x50], rsi
mov dword [rsp + 0x48], esi
mov qword [rsp + 0x40], rsi
mov dword [rsp + 0x38], 0x18
mov dword [rsp + 0x30], 1
mov dword [rsp + 0x28], 0xd01301bf
mov dword [rsp + 0x20], esi
lea r9, [rsp + 0x180]
lea r8, [rsp + 0x90]
lea rdx, [rsp + 0x1d0]
mov rcx, rbp
call fcn.1287ec70
lea rcx, [rsp + 0x98]
cmp qword [rsp + 0xb0], 8
cmovae rcx, qword [rsp + 0x98]
mov edx, 6
call qword [sym.imp.KERNEL32.dll_SetFileAttributesW]
jmp 0x128840c5
xor edx, edx
lea rcx, [rsp + 0xe0]
call fcn.1280d060
movzx r8d, word [rax]
lea rdx, str._c:_RECYCLE.BIN
lea rcx, [rsp + 0x90]
call fcn.12804810
mov qword [rsp + 0x50], rsi
mov dword [rsp + 0x48], esi
mov qword [rsp + 0x40], rsi
mov dword [rsp + 0x38], 0x18
mov dword [rsp + 0x30], esi
mov dword [rsp + 0x28], 0xd01301bf
mov dword [rsp + 0x20], esi
lea r9, [rsp + 0x1a8]
lea r8, [rsp + 0x90]
lea rdx, [rsp + 0x1d0]
mov rcx, rbp
call fcn.1287ec70
movzx r8d, r15w
lea rdx, str._c:_RECYCLE.BIN
lea rcx, [rsp + 0x90]
call fcn.12804810
mov qword [rsp + 0x50], rsi
mov dword [rsp + 0x48], esi
mov qword [rsp + 0x40], rsi
mov dword [rsp + 0x38], 0x18
mov dword [rsp + 0x30], 1
mov dword [rsp + 0x28], 0xd01301bf
mov dword [rsp + 0x20], esi
lea r9, [rsp + 0xb8]
lea r8, [rsp + 0x90]
lea rdx, [rsp + 0x1d0]
mov rcx, rbp
call fcn.1287ec70
lea rcx, [rsp + 0x98]
cmp qword [rsp + 0xb0], 8
cmovae rcx, qword [rsp + 0x98]
mov edx, 6
call qword [sym.imp.KERNEL32.dll_SetFileAttributesW]
cmp qword [rbp + 0x6b8], 8
jb 0x1288403a
mov r8, qword [rbp + 0x6a0]
jmp 0x12884041
lea r8, [rbp + 0x6a0]
lea rdx, str._sSoftware_RECYCLE.BIN
lea rcx, [rsp + 0x90]
call fcn.12804810
mov qword [rsp + 0x50], rsi
mov dword [rsp + 0x48], esi
mov qword [rsp + 0x40], rsi
mov dword [rsp + 0x38], 0x18
mov dword [rsp + 0x30], 1
mov dword [rsp + 0x28], 0xd01301bf
mov dword [rsp + 0x20], esi
lea r9, [rsp + 0x180]
lea r8, [rsp + 0x90]
lea rdx, [rsp + 0x1d0]
mov rcx, rbp
call fcn.1287ec70
lea rcx, [rsp + 0x98]
cmp qword [rsp + 0xb0], 8
cmovae rcx, qword [rsp + 0x98]
mov edx, 6
call qword [sym.imp.KERNEL32.dll_SetFileAttributesW]
nop
lea rcx, [rsp + 0x180]
call fcn.12803630
nop
lea rcx, [rsp + 0xb8]
call fcn.12803630
nop
lea rcx, [rsp + 0x1a8]
call fcn.12803630
or r9, 0xffffffffffffffff
xor r8d, r8d
lea rdx, [rsp + 0xe0]
lea rcx, [rbp + 0x528]
call fcn.12803c90
cmp qword [rbp + 0x548], 8
jb 0x1288411c
mov rcx, qword [rbp + 0x530]
jmp 0x12884123
lea rcx, [rbp + 0x530]
mov rax, qword [rbp + 0x540]
lea rdx, [rcx + rax*2]
lea r8, [rbp + 0x528]
lea rcx, [rsp + 0x60]
call fcn.128031c0
lea rcx, [rsp + 0x60]
call fcn.128262f0
mov rcx, rax
call fcn.12826290
cmp word [rax], 0x5c
je 0x1288416c
mov edx, 1
lea r8d, [rdx + 0x5b]
lea rcx, [rbp + 0x528]
call fcn.12803b90
mov r8d, 5
lea rdx, str.fonts
lea rcx, [rbp + 0x528]
call fcn.12803a10
lea rdx, [rsp + 0x1d0]
mov rcx, rbp
call fcn.12882760
test eax, eax
jne 0x12884205
lea rcx, [rsp + 0x108]
call fcn.12803630
nop
lea rcx, [rsp + 0x1d0]
call fcn.1284c4a0
nop
lea rcx, [rsp + 0x158]
call fcn.12803630
nop
lea rcx, [rsp + 0x90]
call fcn.12803630
nop
lea rcx, [rsp + 0xe0]
call fcn.12803630
nop
lea rcx, [rsp + 0x130]
call fcn.12803630
nop
mov rcx, r13
call fcn.12958250
nop
mov rcx, r14
call fcn.12958250
xor eax, eax
jmp 0x1288453b
mov rcx, rbp
call fcn.12862d30
test eax, eax
jne 0x1288427d
lea rcx, [rsp + 0x108]
call fcn.12803630
nop
lea rcx, [rsp + 0x1d0]
call fcn.1284c4a0
nop
lea rcx, [rsp + 0x158]
call fcn.12803630
nop
lea rcx, [rsp + 0x90]
call fcn.12803630
nop
lea rcx, [rsp + 0xe0]
call fcn.12803630
nop
lea rcx, [rsp + 0x130]
call fcn.12803630
nop
mov rcx, r13
call fcn.12958250
nop
mov rcx, r14
call fcn.12958250
xor eax, eax
jmp 0x1288453b
mov byte [0x129ae620], 0
xor edx, edx
lea rcx, [rsp + 0xe0]
call fcn.1280d060
movzx r8d, word [rax]
movzx edx, r15w
mov rcx, rbp
call fcn.1285fe40
call fcn.12853f20
mov rcx, rbp
call fcn.128540c0
nop
lea rcx, [rsp + 0x108]
call fcn.12803630
nop
lea rcx, [rsp + 0x1d0]
call fcn.1284c4a0
nop
lea rcx, [rsp + 0x158]
call fcn.12803630
nop
lea rcx, [rsp + 0x90]
call fcn.12803630
nop
lea rcx, [rsp + 0xe0]
call fcn.12803630
nop
lea rcx, [rsp + 0x130]
call fcn.12803630
nop
mov rcx, r13
call fcn.12958250
nop
mov rcx, r14
call fcn.12958250
mov eax, 1
jmp 0x1288453b
cmp qword [rsp + 0x128], 8
jb 0x12884338
mov rcx, qword [rsp + 0x110]
call fcn.12958250
mov qword [rsp + 0x128], 7
mov qword [rsp + 0x120], rsi
mov word [rsp + 0x110], si
lea rcx, [rsp + 0x1d0]
call fcn.1284c4a0
nop
cmp qword [rsp + 0x178], 8
jb 0x1288437a
mov rcx, qword [rsp + 0x160]
call fcn.12958250
mov qword [rsp + 0x178], 7
mov qword [rsp + 0x170], rsi
mov word [rsp + 0x160], si
cmp qword [rsp + 0xb0], 8
jb 0x128843ae
mov rcx, qword [rsp + 0x98]
call fcn.12958250
mov qword [rsp + 0xb0], 7
mov qword [rsp + 0xa8], rsi
mov word [rsp + 0x98], si
cmp qword [rsp + 0x100], 8
jb 0x128843e2
mov rcx, qword [rsp + 0xe8]
call fcn.12958250
mov qword [rsp + 0x100], 7
mov qword [rsp + 0xf8], rsi
mov word [rsp + 0xe8], si
cmp qword [rsp + 0x150], 8
jb 0x12884416
mov rcx, qword [rsp + 0x138]
call fcn.12958250
mov qword [rsp + 0x150], 7
mov qword [rsp + 0x148], rsi
mov word [rsp + 0x138], si
mov rcx, r13
call fcn.12958250
nop
mov rcx, r14
call fcn.12958250
xor eax, eax
jmp 0x1288453b
lea rcx, [rsp + 0x1d0]
call fcn.1284c4a0
nop
cmp qword [rsp + 0x178], 8
jb 0x12884470
mov rcx, qword [rsp + 0x160]
call fcn.12958250
mov qword [rsp + 0x178], 7
mov qword [rsp + 0x170], rsi
mov word [rsp + 0x160], si
cmp qword [rsp + 0xb0], 8
jb 0x128844a4
mov rcx, qword [rsp + 0x98]
call fcn.12958250
mov qword [rsp + 0xb0], 7
mov qword [rsp + 0xa8], rsi
mov word [rsp + 0x98], si
cmp qword [rsp + 0x100], 8
jb 0x128844d8
mov rcx, qword [rsp + 0xe8]
call fcn.12958250
mov qword [rsp + 0x100], 7
mov qword [rsp + 0xf8], rsi
mov word [rsp + 0xe8], si
cmp qword [rsp + 0x150], 8
jb 0x1288450c
mov rcx, qword [rsp + 0x138]
call fcn.12958250
mov qword [rsp + 0x150], 7
mov qword [rsp + 0x148], rsi
mov word [rsp + 0x138], si
mov rcx, r13
call fcn.12958250
nop
mov rcx, r14
call fcn.12958250
xor eax, eax
mov rcx, qword [rsp + 0x570]
xor rcx, rsp
call fcn.12959850
lea r11, [rsp + 0x580]
mov rbx, qword [r11 + 0x38]
mov rbp, qword [r11 + 0x40]
mov rsi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret