Function at 0x1000a16f4
Capabilities:
Unmount volume via ioctl

Disassembly:
mov r11, rsp
push rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x778
mov qword [rsp + 0x3b8], 0xfffffffffffffffe
mov rax, qword [0x100176150]
xor rax, rsp
mov qword [rsp + 0x760], rax
mov qword [rsp + 0x2f0], r9
mov qword [rsp + 0x2e0], r8
mov rdi, rdx
mov qword [rsp + 0x300], rdx
mov qword [rsp + 0x168], rcx
mov rax, qword [rsp + 0x7e8]
mov qword [rsp + 0x170], rax
mov rax, qword [rsp + 0x800]
mov qword [rsp + 0x190], rax
lea r12, [0x10001e270]
mov qword [r11 - 0x728], r12
lea rbx, [0x10001e620]
mov qword [r11 - 0x720], rbx
lea rsi, [0x10001e250]
mov qword [r11 - 0x718], rsi
mov dword [rsp + 0xa8], 0x210
mov dword [rsp + 0xac], 6
mov ebp, 0xff
mov dword [rsp + 0xb0], ebp
xor r14d, r14d
mov word [r11 - 0x688], r14w
mov byte [r11 - 0x686], r14b
lea r15d, [r14 + 1]
mov byte [r11 - 0x685], r15b
lea r13d, [r14 + 0x78]
mov r8, r13
xor edx, edx
lea rcx, [r11 - 0x700]
call sub.msvcrt.dll_memset
xor r8d, r8d
lea rdx, [rsp + 0x90]
lea rcx, [rsp + 0x1a0]
call fcn.1000e8000
nop
mov qword [rsp + 0x160], r14
mov rax, qword [rdi]
lea rdx, [rsp + 0x160]
mov rcx, rdi
call qword [rax + 0x80]
mov dword [rsp + 0x1a8], eax
mov qword [rsp + 0x90], r12
mov qword [rsp + 0x98], rbx
mov qword [rsp + 0xa0], rsi
mov dword [rsp + 0xa8], 0x214
mov dword [rsp + 0xac], r15d
mov dword [rsp + 0xb0], ebp
mov word [rsp + 0x130], r14w
mov byte [rsp + 0x132], r14b
mov byte [rsp + 0x133], r15b
mov r8, r13
xor edx, edx
lea rcx, [rsp + 0xb8]
call sub.msvcrt.dll_memset
lea r8, [0x10001a440]
lea rdx, [rsp + 0x90]
lea rcx, [rsp + 0x1a0]
call fcn.100052760
mov rax, qword [rdi]
lea rdx, [rsp + 0x88]
mov rcx, rdi
call qword [rax + 0x60]
mov dword [rsp + 0x1a8], eax
mov qword [rsp + 0x90], r12
mov qword [rsp + 0x98], rbx
mov qword [rsp + 0xa0], rsi
mov dword [rsp + 0xa8], 0x218
mov dword [rsp + 0xac], r15d
mov dword [rsp + 0xb0], ebp
mov word [rsp + 0x130], r14w
mov byte [rsp + 0x132], r14b
mov byte [rsp + 0x133], r15b
mov r8, r13
xor edx, edx
lea rcx, [rsp + 0xb8]
call sub.msvcrt.dll_memset
lea r8, [0x10001e690]
lea rdx, [rsp + 0x90]
lea rcx, [rsp + 0x1a0]
call fcn.100052760
mov rax, qword [rdi]
lea rdx, [rsp + 0x258]
mov rcx, rdi
call qword [rax + 0x40]
mov dword [rsp + 0x1a8], eax
mov qword [rsp + 0x90], r12
mov qword [rsp + 0x98], rbx
mov qword [rsp + 0xa0], rsi
mov dword [rsp + 0xa8], 0x21c
mov dword [rsp + 0xac], r15d
mov dword [rsp + 0xb0], ebp
mov word [rsp + 0x130], r14w
mov byte [rsp + 0x132], r14b
mov byte [rsp + 0x133], r15b
mov r8, r13
xor edx, edx
lea rcx, [rsp + 0xb8]
call sub.msvcrt.dll_memset
lea r8, [0x10001b210]
lea rdx, [rsp + 0x90]
lea rcx, [rsp + 0x1a0]
call fcn.100052760
mov rax, qword [rdi]
lea rdx, [rsp + 0x468]
mov rcx, rdi
call qword [rax + 0x18]
mov dword [rsp + 0x1a8], eax
mov qword [rsp + 0x90], r12
mov qword [rsp + 0x98], rbx
mov qword [rsp + 0xa0], rsi
mov dword [rsp + 0xa8], 0x220
mov dword [rsp + 0xac], r15d
mov dword [rsp + 0xb0], ebp
mov word [rsp + 0x130], r14w
mov byte [rsp + 0x132], r14b
mov byte [rsp + 0x133], r15b
mov r8, r13
xor edx, edx
lea rcx, [rsp + 0xb8]
call sub.msvcrt.dll_memset
lea r8, [0x10000cf50]
lea rdx, [rsp + 0x90]
lea rcx, [rsp + 0x1a0]
call fcn.100052760
mov eax, dword [rsp + 0x258]
and eax, r15d
mov dword [rsp + 0x84], eax
mov r13, qword [rsp + 0x160]
mov qword [rsp + 0x220], r14
mov qword [rsp + 0x228], r14
mov qword [rsp + 0x230], r14
mov dword [rsp + 0x238], r14d
mov dword [rsp + 0x23c], r14d
mov qword [rsp + 0x90], r12
mov qword [rsp + 0x98], rbx
mov qword [rsp + 0xa0], rsi
mov dword [rsp + 0xa8], 0x22c
mov dword [rsp + 0xac], 6
mov dword [rsp + 0xb0], ebp
mov word [rsp + 0x130], r14w
mov byte [rsp + 0x132], r14b
mov byte [rsp + 0x133], r15b
xor edx, edx
lea r8d, [r14 + 0x78]
lea rcx, [rsp + 0xb8]
call sub.msvcrt.dll_memset
lea rcx, [0x10001e6e8]
lea rax, [0x10001e708]
mov edi, dword [rsp + 0x7f8]
cmp edi, r14d
cmovne rax, rcx
mov ebp, dword [rsp + 0x7f0]
lea rcx, [0x10001e728]
lea r9, [0x10001e740]
cmp ebp, r14d
cmove r9, rcx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r13
lea r8, [0x10001e758]
lea rdx, [rsp + 0x90]
lea rcx, [rsp + 0x1a0]
call fcn.1000e91dc
cmp ebp, r14d
jne 0x1000a1c39
lea rcx, [rsp + 0x220]
call fcn.1000ccd04
mov r8b, byte [rsp + 0x88]
mov rdx, r13
lea rcx, [rsp + 0x220]
call fcn.1000d0a30
cmp al, r14b
jne 0x1000a1c39
mov qword [rsp + 0x90], r12
mov qword [rsp + 0x98], rbx
mov qword [rsp + 0xa0], rsi
mov dword [rsp + 0xa8], 0x239
mov dword [rsp + 0xac], 6
mov dword [rsp + 0xb0], 0xff
mov word [rsp + 0x130], r14w
mov byte [rsp + 0x132], r14b
mov byte [rsp + 0x133], r15b
xor edx, edx
lea r8d, [r14 + 0x78]
lea rcx, [rsp + 0xb8]
call sub.msvcrt.dll_memset
lea r8, [0x10001e780]
lea rdx, [rsp + 0x90]
lea rcx, [rsp + 0x1a0]
call fcn.1000e91dc
nop
lea rcx, [rsp + 0x220]
call fcn.1000ccc9c
nop
mov rcx, qword [rsp + 0x160]
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
nop
lea rcx, [rsp + 0x1a0]
call fcn.1000e80ec
jmp 0x1000a4204
cmp edi, r14d
je 0x1000a1cc4
mov qword [rsp + 0x90], r12
mov qword [rsp + 0x98], rbx
mov qword [rsp + 0xa0], rsi
mov dword [rsp + 0xa8], 0x23f
mov dword [rsp + 0xac], r15d
mov dword [rsp + 0xb0], 0xff
mov word [rsp + 0x130], r14w
mov byte [rsp + 0x132], r14b
mov byte [rsp + 0x133], r15b
xor edx, edx
lea r8d, [rdx + 0x78]
lea rcx, [rsp + 0xb8]
call sub.msvcrt.dll_memset
mov r8d, 0x1780
lea rdx, [rsp + 0x90]
lea rcx, [rsp + 0x1a0]
call fcn.1000ec6d4
jmp 0x1000a1dd1
cmp ebp, r15d
jne 0x1000a1d4f
mov qword [rsp + 0x90], r12
mov qword [rsp + 0x98], rbx
mov qword [rsp + 0xa0], rsi
mov dword [rsp + 0xa8], 0x241
mov dword [rsp + 0xac], r15d
mov dword [rsp + 0xb0], 0xff
mov word [rsp + 0x130], r14w
mov byte [rsp + 0x132], r14b
mov byte [rsp + 0x133], r15b
xor edx, edx
lea r8d, [rdx + 0x78]
lea rcx, [rsp + 0xb8]
call sub.msvcrt.dll_memset
mov r8d, 0x1782
lea rdx, [rsp + 0x90]
lea rcx, [rsp + 0x1a0]
call fcn.1000ec6d4
jmp 0x1000a1dd1
cmp ebp, r14d
jne 0x1000a1dd1
mov qword [rsp + 0x90], r12
mov qword [rsp + 0x98], rbx
mov qword [rsp + 0xa0], rsi
mov dword [rsp + 0xa8], 0x243
mov dword [rsp + 0xac], r15d
mov dword [rsp + 0xb0], 0xff
mov word [rsp + 0x130], r14w
mov byte [rsp + 0x132], r14b
mov byte [rsp + 0x133], r15b
xor edx, edx
lea r8d, [rdx + 0x78]
lea rcx, [rsp + 0xb8]
call sub.msvcrt.dll_memset
mov r8d, 0x1781
lea rdx, [rsp + 0x90]
lea rcx, [rsp + 0x1a0]
call fcn.1000ec6d4
mov qword [rsp + 0x90], r12
mov qword [rsp + 0x98], rbx
mov qword [rsp + 0xa0], rsi
mov dword [rsp + 0xa8], 0x245
mov dword [rsp + 0xac], r15d
mov dword [rsp + 0xb0], 0xff
mov word [rsp + 0x130], r14w
mov byte [rsp + 0x132], r14b
mov byte [rsp + 0x133], r15b
xor edx, edx
lea r8d, [rdx + 0x78]
lea rcx, [rsp + 0xb8]
call sub.msvcrt.dll_memset
mov r9, r13
mov r8d, 0x1392
lea rdx, [rsp + 0x90]
lea rcx, [rsp + 0x1a0]
call fcn.1000ec86c
mov qword [rsp + 0x90], r12
mov qword [rsp + 0x98], rbx
mov qword [rsp + 0xa0], rsi
mov dword [rsp + 0xa8], 0x246
mov dword [rsp + 0xac], r15d
mov dword [rsp + 0xb0], 0xff
mov word [rsp + 0x130], r14w
mov byte [rsp + 0x132], r14b
mov byte [rsp + 0x133], r15b
xor edx, edx
lea r8d, [rdx + 0x78]
lea rcx, [rsp + 0xb8]
call sub.msvcrt.dll_memset
movzx edx, byte [rsp + 0x477]
movzx eax, byte [rsp + 0x476]
movzx ecx, byte [rsp + 0x475]
movzx edi, byte [rsp + 0x474]
movzx r8d, byte [rsp + 0x473]
movzx r9d, byte [rsp + 0x472]
movzx r10d, byte [rsp + 0x471]
movzx r11d, byte [rsp + 0x470]
movzx ebx, word [rsp + 0x46e]
movzx esi, word [rsp + 0x46c]
mov dword [rsp + 0x70], edx
mov dword [rsp + 0x68], eax
mov dword [rsp + 0x60], ecx
mov dword [rsp + 0x58], edi
mov dword [rsp + 0x50], r8d
mov dword [rsp + 0x48], r9d
mov dword [rsp + 0x40], r10d
mov dword [rsp + 0x38], r11d
mov dword [rsp + 0x30], ebx
mov dword [rsp + 0x28], esi
mov eax, dword [rsp + 0x468]
mov dword [rsp + 0x20], eax
lea r9, [0x10000a9c0]
mov r8d, 0x1396
lea rdx, [rsp + 0x90]
lea rcx, [rsp + 0x1a0]
call fcn.1000ec950
mov qword [rsp + 0x90], r12
lea rdi, [0x10001e620]
mov qword [rsp + 0x98], rdi
lea rbx, [0x10001e250]
mov qword [rsp + 0xa0], rbx
mov dword [rsp + 0xa8], 0x248
mov dword [rsp + 0xac], 6
mov dword [rsp + 0xb0], 0xff
mov word [rsp + 0x130], r14w
mov byte [rsp + 0x132], r14b
mov byte [rsp + 0x133], r15b
xor edx, edx
lea r8d, [rdx + 0x78]
lea rcx, [rsp + 0xb8]
call sub.msvcrt.dll_memset
lea r8, [0x10001e810]
lea rdx, [rsp + 0x90]
lea rcx, [rsp + 0x1a0]
call fcn.1000e91dc
cmp ebp, r15d
sete r12b
mov byte [rsp + 0x80], r12b
or qword [rsp + 0x218], 0xffffffffffffffff
lea rax, [0x1000228b8]
mov qword [rsp + 0x210], rax
mov qword [rsp + 0x268], r14
lea rax, [0x100035878]
mov qword [rsp + 0x260], rax
mov byte [rsp + 0x81], r14b
lea rax, [rsp + 0x478]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x260]
lea r8, [rsp + 0x210]
mov rdx, r13
mov rsi, qword [rsp + 0x168]
mov rcx, rsi
call fcn.1000af2a0
cmp al, r14b
jne 0x1000a215a
lea rax, [rsp + 0x478]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x260]
lea r8, [rsp + 0x210]
mov rdx, r13
mov rcx, rsi
call fcn.1000afa34
cmp al, r14b
jne 0x1000a2150
lea rax, [0x10001e270]
mov qword [rsp + 0x4a0], rax
mov qword [rsp + 0x4a8], rdi
mov qword [rsp + 0x4b0], rbx
mov dword [rsp + 0x4b8], 0x265
mov dword [rsp + 0x4bc], r15d
mov dword [rsp + 0x4c0], 0xff
mov word [rsp + 0x540], r14w
mov byte [rsp + 0x542], r14b
mov byte [rsp + 0x543], r15b
xor edx, edx
lea r8d, [rdx + 0x78]
lea rcx, [rsp + 0x4c8]
call sub.msvcrt.dll_memset
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r8d, eax
lea rdx, [rsp + 0x90]
lea rcx, [rsp + 0x4a0]
call fcn.1000e7ca8
mov r9d, 2
mov r8, rax
mov edx, 0x3029
lea rcx, [rsp + 0x1a0]
call fcn.1000eb640
lea rcx, [rsp + 0x4a0]
call fcn.1000e7a50
jmp 0x1000a2162
mov byte [rsp + 0x81], r15b
jmp 0x1000a2162
mov byte [rsp + 0x81], r15b
mov dword [rsp + 0x188], r14d
mov rbx, r14
mov qword [rsp + 0x150], rbx
mov qword [rsp + 0x270], r14
mov byte [rsp + 0x298], r14b
mov byte [rsp + 0x299], r14b
mov dword [rsp + 0x29c], r14d
mov dword [rsp + 0x2a0], r14d
mov qword [rsp + 0x2a8], r14
mov dword [rsp + 0x2b0], r14d
mov dword [rsp + 0x2b4], r14d
mov dword [rsp + 0x2b8], r14d
mov qword [rsp + 0x2c0], r14
mov word [rsp + 0x2c8], r14w
mov qword [rsp + 0x2d8], r14
lea rax, [0x100035878]
mov qword [rsp + 0x2d0], rax
xor edx, edx
lea r8d, [rdx + 0x20]
lea rcx, [rsp + 0x278]
call sub.msvcrt.dll_memset
nop
mov dword [rsp + 0x40], 0x80
mov dword [rsp + 0x38], 3
mov dword [rsp + 0x30], 0xc0000000
mov dword [rsp + 0x28], r14d
mov byte [rsp + 0x20], r14b
xor r9d, r9d
mov r8, r13
lea rdx, [rsp + 0x1a0]
lea rcx, [rsp + 0x270]
call fcn.10005315c
mov edi, eax
mov dword [rsp + 0x1a8], eax
cmp eax, r14d
jge 0x1000a2516
cmp eax, 0x80042308
jne 0x1000a2371
lea rax, [0x10001e270]
mov qword [rsp + 0x4a0], rax
lea rax, [0x10001e620]
mov qword [rsp + 0x4a8], rax
lea rax, [0x10001e250]
mov qword [rsp + 0x4b0], rax
mov dword [rsp + 0x4b8], 0x286
mov dword [rsp + 0x4bc], r15d
mov dword [rsp + 0x4c0], 0xff
mov word [rsp + 0x540], r14w
mov byte [rsp + 0x542], r14b
mov byte [rsp + 0x543], r15b
xor edx, edx
lea r8d, [rdx + 0x78]
lea rcx, [rsp + 0x4c8]
call sub.msvcrt.dll_memset
mov r8, r13
lea rdx, [rsp + 0x90]
lea rcx, [rsp + 0x4a0]
call fcn.1000e7e30
mov r9d, 2
mov r8, rax
mov edx, 0x302a
lea rcx, [rsp + 0x1a0]
call fcn.1000eb640
lea rcx, [rsp + 0x4a0]
call fcn.1000e7a50
nop
lea rcx, [rsp + 0x270]
call fcn.1000530b8
nop
mov rcx, qword [rsp + 0x268]
cmp rcx, r14
je 0x1000a232d
call qword [sym.imp.ole32.dll_CoTaskMemFree]
nop
mov rcx, qword [rsp + 0x218]
cmp rcx, 0xffffffffffffffff
je 0x1000a2342
call qword [sym.imp.SETUPAPI.dll_SetupDiDestroyDeviceInfoList]
nop
lea rcx, [rsp + 0x220]
call fcn.1000ccc9c
nop
mov rcx, qword [rsp + 0x160]
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
nop
lea rcx, [rsp + 0x1a0]
call fcn.1000e80ec
jmp 0x1000a4204
cmp r12b, r14b
je 0x1000a247b
lea rax, [0x10001e270]
mov qword [rsp + 0x90], rax
lea rax, [0x10001e620]
mov qword [rsp + 0x98], rax
lea rax, [0x10001e250]
mov qword [rsp + 0xa0], rax
mov dword [rsp + 0xa8], 0x28c
mov dword [rsp + 0xac], r15d
mov dword [rsp + 0xb0], 0xff
mov word [rsp + 0x130], r14w
mov byte [rsp + 0x132], r14b
mov byte [rsp + 0x133], r15b
xor edx, edx
lea r8d, [rdx + 0x78]
lea rcx, [rsp + 0xb8]
call sub.msvcrt.dll_memset
mov dword [rsp + 0x20], edi
mov r9, r13
lea r8, [0x10001e8b0]
lea rdx, [rsp + 0x90]
lea rcx, [rsp + 0x1a0]
call fcn.1000eb044
nop
lea rcx, [rsp + 0x270]
call fcn.1000530b8
nop
mov rcx, qword [rsp + 0x268]
cmp rcx, r14
je 0x1000a2437
call qword [sym.imp.ole32.dll_CoTaskMemFree]
nop
mov rcx, qword [rsp + 0x218]
cmp rcx, 0xffffffffffffffff
je 0x1000a244c
call qword [sym.imp.SETUPAPI.dll_SetupDiDestroyDeviceInfoList]
nop
lea rcx, [rsp + 0x220]
call fcn.1000ccc9c
nop
mov rcx, qword [rsp + 0x160]
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
nop
lea rcx, [rsp + 0x1a0]
call fcn.1000e80ec
jmp 0x1000a4204
lea rax, [0x10001e270]
mov qword [rsp + 0x90], rax
lea rax, [0x10001e620]
mov qword [rsp + 0x98], rax
lea rax, [0x10001e250]
mov qword [rsp + 0xa0], rax
mov dword [rsp + 0xa8], 0x290
mov dword [rsp + 0xac], r15d
mov dword [rsp + 0xb0], 0xff
mov word [rsp + 0x130], r14w
mov byte [rsp + 0x132], r14b
mov byte [rsp + 0x133], r15b
xor edx, edx
lea r8d, [rdx + 0x78]
lea rcx, [rsp + 0xb8]
call sub.msvcrt.dll_memset
mov dword [rsp + 0x20], edi
mov r9, r13
lea r8, [0x10001e8b0]
lea rdx, [rsp + 0x90]
lea rcx, [rsp + 0x1a0]
call fcn.1000e9c20
int3
mov qword [rsp + 0x30], r14
mov byte [rsp + 0x28], r14b
mov dword [rsp + 0x20], r14d
xor r9d, r9d
mov r8d, 0x560000
lea rdx, [rsp + 0x1a0]
lea rcx, [rsp + 0x270]
call fcn.1000538a0
mov edi, eax
mov dword [rsp + 0x1a8], eax
cmp eax, r14d
jge 0x1000a25f0
lea rax, [0x10001e270]
mov qword [rsp + 0x90], rax
lea rax, [0x10001e620]
mov qword [rsp + 0x98], rax
lea rax, [0x10001e250]
mov qword [rsp + 0xa0], rax
mov dword [rsp + 0xa8], 0x29b
mov dword [rsp + 0xac], r15d
mov dword [rsp + 0xb0], 0xff
mov word [rsp + 0x130], r14w
mov byte [rsp + 0x132], r14b
mov byte [rsp + 0x133], r15b
xor edx, edx
lea r8d, [rdx + 0x78]
lea rcx, [rsp + 0xb8]
call sub.msvcrt.dll_memset
mov dword [rsp + 0x20], edi
mov r9, r13
lea r8, [0x10001e900]
lea rdx, [rsp + 0x90]
lea rcx, [rsp + 0x1a0]
call fcn.1000e9c20
int3
mov rax, qword [rsp + 0x2c0]
mov qword [rsp + 0x180], rax
mov qword [rsp + 0x2c0], r14
mov dword [rsp + 0x2b4], r14d
mov dword [rsp + 0x2b0], r14d
mov dword [rsp + 0x2b8], r14d
mov qword [rsp + 0x3b0], rax
mov ecx, dword [rax]
mov dword [rsp + 0x158], ecx
add rax, 8
mov qword [rsp + 0x178], rax
cmp ebp, r14d
jne 0x1000a2682
lea r9, [rsp + 0x188]
lea r8, [rsp + 0x150]
mov edx, dword [rax]
lea rcx, [rsp + 0x220]
call fcn.1000cf260
cmp al, r14b
je 0x1000a267a
mov al, r15b
mov byte [rsp + 0x89], al
mov rbx, qword [rsp + 0x150]
jmp 0x1000a268c
mov rbx, qword [rsp + 0x150]
mov al, r14b
mov byte [rsp + 0x89], al
mov qword [rsp + 0x3a8], rbx
lea rcx, [0x1000138d0]
mov qword [rsp + 0x3a0], rcx
mov rdi, r14
mov qword [rsp + 0x250], r14
mov qword [rsp + 0x198], r14
mov r15, r14
mov qword [rsp + 0x240], r14
mov dword [rsp + 0x248], r14d
mov dword [rsp + 0x24c], r14d
mov rbp, r14
mov qword [rsp + 0x310], r14
lea rcx, [0x1000228b0]
mov qword [rsp + 0x308], rcx
mov qword [rsp + 0x320], r14
lea rcx, [0x10000d460]
mov qword [rsp + 0x318], rcx
xor r12d, r12d
cmp dword [rsp + 0x84], r12d
je 0x1000a2767
cmp al, r12b
je 0x1000a2767
lea rax, [rsp + 0x250]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x198]
lea r8, [rsp + 0x240]
mov rdx, r13
mov rcx, rsi
call fcn.1000a4230
mov rbp, qword [rsp + 0x198]
mov qword [rsp + 0x310], rbp
mov rdi, qword [rsp + 0x250]
mov r14, rdi
mov qword [rsp + 0x320], rdi
mov r15, qword [rsp + 0x240]
mov dword [rsp + 0x29c], r12d
mov dword [rsp + 0x2b0], r12d
mov qword [rsp + 0x30], r12
mov byte [rsp + 0x28], r12b
mov dword [rsp + 0x20], r12d
xor r9d, r9d
mov r8d, 0x90018
lea rdx, [rsp + 0x1a0]
lea rcx, [rsp + 0x270]
call fcn.1000538a0
mov r12d, eax
mov dword [rsp + 0x1a8], eax
xor eax, eax
cmp r12d, eax
jge 0x1000a2850
lea rcx, [0x10001e270]
mov qword [rsp + 0x90], rcx
lea rcx, [0x10001e620]
mov qword [rsp + 0x98], rcx
lea rcx, [0x10001e250]
mov qword [rsp + 0xa0], rcx
mov dword [rsp + 0xa8], 0x2cb
lea ecx, [rax + 1]
mov dword [rsp + 0xac], ecx
mov dword [rsp + 0xb0], 0xff
mov word [rsp + 0x130], ax
mov byte [rsp + 0x132], al
mov byte [rsp + 0x133], cl
xor edx, edx
lea r8d, [rax + 0x78]
lea rcx, [rsp + 0xb8]
call sub.msvcrt.dll_memset
mov r9d, r12d
lea r8, [0x10001e960]
lea rdx, [rsp + 0x90]
lea rcx, [rsp + 0x1a0]
call fcn.1000e91dc
xor eax, eax
mov dword [rsp + 0x29c], eax
mov dword [rsp + 0x2b0], eax
mov qword [rsp + 0x30], rax
mov byte [rsp + 0x28], al
mov dword [rsp + 0x20], eax
xor r9d, r9d
mov r8d, 0x90020
lea rdx, [rsp + 0x1a0]
lea rcx, [rsp + 0x270]
call fcn.1000538a0
mov r12d, eax
mov dword [rsp + 0x1a8], eax
xor eax, eax
cmp r12d, eax
jge 0x1000a2a13
lea rcx, [0x10001e270]
mov qword [rsp + 0x4a0], rcx
lea rcx, [0x10001e620]
mov qword [rsp + 0x4a8], rcx
lea rcx, [0x10001e250]
mov qword [rsp + 0x4b0], rcx
mov dword [rsp + 0x4b8], 0x2d5
lea ecx, [rax + 1]
mov dword [rsp + 0x4bc], ecx
mov dword [rsp + 0x4c0], 0xff
mov word [rsp + 0x540], ax
mov byte [rsp + 0x542], al
mov byte [rsp + 0x543], cl
xor edx, edx
lea r8d, [rax + 0x78]
lea rcx, [rsp + 0x4c8]
call sub.msvcrt.dll_memset
mov r8d, r12d
lea rdx, [rsp + 0x90]
lea rcx, [rsp + 0x4a0]
call fcn.1000e7b74
mov r12b, byte [rsp + 0x80]
mov cl, r12b
neg cl
sbb r9w, r9w
neg r9w
inc r9w
mov r8, rax
mov edx, 0x302b
lea rcx, [rsp + 0x1a0]
call fcn.1000eb640
lea rcx, [rsp + 0x4a0]
call fcn.1000e7a50
xor eax, eax
cmp r12b, al
jne 0x1000a2a13
lea rcx, [0x10001e270]
mov qword [rsp + 0x90], rcx
lea rcx, [0x10001e620]
mov qword [rsp + 0x98], rcx
lea rcx, [0x10001e250]
mov qword [rsp + 0xa0], rcx
mov dword [rsp + 0xa8], 0x2d8
lea ecx, [rax + 1]
mov dword [rsp + 0xac], ecx
mov dword [rsp + 0xb0], 0xff
mov word [rsp + 0x130], ax
mov byte [rsp + 0x132], al
mov byte [rsp + 0x133], cl
xor edx, edx
lea r8d, [rax + 0x78]
lea rcx, [rsp + 0xb8]
call sub.msvcrt.dll_memset
mov edx, dword [rsp + 0x1a8]
mov dword [rsp + 0x20], edx
mov r9, r13
lea r8, [0x10001e9b0]
lea rdx, [rsp + 0x90]
lea rcx, [rsp + 0x1a0]
call fcn.1000e9c20
int3
mov dword [rsp + 0x29c], eax
mov dword [rsp + 0x2b0], eax
mov qword [rsp + 0x30], rax
mov byte [rsp + 0x28], al
mov dword [rsp + 0x20], eax
xor r9d, r9d
mov r8d, 0x56c00c
lea rdx, [rsp + 0x1a0]
lea rcx, [rsp + 0x270]
call fcn.1000538a0
mov r12d, eax
mov dword [rsp + 0x1a8], eax
xor eax, eax
cmp r12d, eax
jge 0x1000a2af8
lea rcx, [0x10001e270]
mov qword [rsp + 0x90], rcx
lea rcx, [0x10001e620]
mov qword [rsp + 0x98], rcx
lea rcx, [0x10001e250]
mov qword [rsp + 0xa0], rcx
mov dword [rsp + 0xa8], 0x2e3
lea ecx, [rax + 1]
mov dword [rsp + 0xac], ecx
mov dword [rsp + 0xb0], 0xff
mov word [rsp + 0x130], ax
mov byte [rsp + 0x132], al
mov byte [rsp + 0x133], cl
xor edx, edx
lea r8d, [rax + 0x78]
lea rcx, [rsp + 0xb8]
call sub.msvcrt.dll_memset
mov r9d, r12d
lea r8, [0x10001ea10]
lea rdx, [rsp + 0x90]
lea rcx, [rsp + 0x1a0]
call fcn.1000e91dc
xor eax, eax
mov rcx, qword [rsp + 0x270]
cmp rcx, rax
je 0x1000a2b0d
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor eax, eax
mov qword [rsp + 0x270], rax
mov dword [rsp + 0x29c], eax
mov dword [rsp + 0x2b0], eax
mov dword [rsp + 0x2b8], eax
mov ecx, 1
cmp dword [rsp + 0x7f0], ecx
je 0x1000a2b45
cmp byte [rsp + 0x89], al
je 0x1000a2d09
lea rdx, [0x10001e270]
mov qword [rsp + 0x90], rdx
lea rdx, [0x10001e620]
mov qword [rsp + 0x98], rdx
lea rdx, [0x10001e250]
mov qword [rsp + 0xa0], rdx
mov dword [rsp + 0xa8], 0x2fa
mov dword [rsp + 0xac], ecx
mov dword [rsp + 0xb0], 0xff
mov word [rsp + 0x130], ax
mov byte [rsp + 0x132], al
mov byte [rsp + 0x133], cl
xor edx, edx
lea r8d, [rdx + 0x78]
lea rcx, [rsp + 0xb8]
call sub.msvcrt.dll_memset
mov r9, r13
lea r8, [0x10001ea70]
lea rdx, [rsp + 0x90]
lea rcx, [rsp + 0x1a0]
call fcn.1000e91dc
mov r12, rdi
xor eax, eax
cmp rdi, rax
je 0x1000a2d04
xor esi, esi
lea ebx, [rax + 1]
lea r15, [0x10001e270]
lea rbp, [0x10001e620]
lea r14, [0x10001e250]
xor eax, eax
or rcx, 0xffffffffffffffff
mov rdi, r12
repne scasw ax, word [rdi]
not rcx
cmp rcx, rbx
je 0x1000a2cd5
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_DeleteVolumeMountPointW]
cmp eax, esi
jne 0x1000a2cb5
mov qword [rsp + 0x90], r15
mov qword [rsp + 0x98], rbp
mov qword [rsp + 0xa0], r14
mov dword [rsp + 0xa8], 0x301
mov dword [rsp + 0xac], ebx
mov dword [rsp + 0xb0], 0xff
mov word [rsp + 0x130], si
mov byte [rsp + 0x132], sil
mov byte [rsp + 0x133], bl
xor edx, edx
lea r8d, [rdx + 0x78]
lea rcx, [rsp + 0xb8]
call sub.msvcrt.dll_memset
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], r13
mov r9, r12
lea r8, [0x10001ead0]
lea rdx, [rsp + 0x90]
lea rcx, [rsp + 0x1a0]
call fcn.1000e91dc
xor eax, eax
or rcx, 0xffffffffffffffff
mov rdi, r12
repne scasw ax, word [rdi]
not rcx
sub rcx, rbx
lea r12, [r12 + rcx*2 + 2]
cmp r12, rsi
jne 0x1000a2bff
mov rbx, qword [rsp + 0x150]
mov rbp, qword [rsp + 0x310]
mov r14, qword [rsp + 0x320]
mov r15, qword [rsp + 0x240]
mov rsi, qword [rsp + 0x168]
xor eax, eax
lea ecx, [rax + 1]
jmp 0x1000a2d09
mov ecx, 1
lea rdx, [0x10001e270]
mov qword [rsp + 0x90], rdx
lea rdx, [0x10001e620]
mov qword [rsp + 0x98], rdx
lea rdx, [0x10001e250]
mov qword [rsp + 0xa0], rdx
mov dword [rsp + 0xa8], 0x30a
mov dword [rsp + 0xac], ecx
mov dword [rsp + 0xb0], 0xff
mov word [rsp + 0x130], ax
mov byte [rsp + 0x132], al
mov byte [rsp + 0x133], cl
xor edx, edx
lea r8d, [rdx + 0x78]
lea rcx, [rsp + 0xb8]
call sub.msvcrt.dll_memset
mov r12, qword [rsp + 0x268]
mov r9, r12
lea r8, [0x10001eb48]
lea rdx, [rsp + 0x90]
lea rcx, [rsp + 0x1a0]
call fcn.1000e91dc
xor ecx, ecx
cmp byte [rsp + 0x81], cl
je 0x1000a2de8
lea r8, [rsp + 0x478]
mov rdi, qword [rsp + 0x218]
mov rdx, rdi
mov rcx, rsi
call fcn.1000b005c
cmp rdi, 0xffffffffffffffff
je 0x1000a2dd8
mov rcx, rdi
call qword [sym.imp.SETUPAPI.dll_SetupDiDestroyDeviceInfoList]
or rdi, 0xffffffffffffffff
mov qword [rsp + 0x218], rdi
xor ecx, ecx
jmp 0x1000a2df0
mov rdi, qword [rsp + 0x218]
cmp byte [rsp + 0x88], cl
je 0x1000a33d6
mov qword [rsp + 0x138], rcx
mov dword [rsp + 0x140], ecx
mov dword [rsp + 0x144], ecx
mov eax, dword [rsp + 0x7f8]
mov dword [rsp + 0x148], eax
mov dword [rsp + 0x150], ecx
cmp dword [rsp + 0x158], ecx
jbe 0x1000a2f5b
mov rax, qword [rsp + 0x178]
lea rdx, [rsp + 0x138]
mov ecx, dword [rax]
call fcn.1000cb38c
xor edx, edx
cmp al, dl
jne 0x1000a2f09
movsxd r13, dword [rsp + 0x140]
lea eax, [r13 + 1]
cmp eax, edx
jle 0x1000a2f3b
mov ecx, dword [rsp + 0x144]
cmp r13d, ecx
jne 0x1000a2ee5
cmp r13d, 0x3fffffff
jg 0x1000a2f3b
movabs r8, 0x1fffffffffffffff
cmp r13, r8
ja 0x1000a2f3b
lea eax, [r13 + r13]
cmp ecx, edx
lea ecx, [rdx + 1]
cmove eax, ecx
mov dword [rsp + 0x84], eax
movsxd rdx, eax
shl rdx, 2
mov rcx, qword [rsp + 0x138]
call qword [sym.imp.msvcrt.dll_realloc]
mov r11, rax
xor edx, edx
cmp rax, rdx
je 0x1000a2f3b
mov eax, dword [rsp + 0x84]
mov dword [rsp + 0x144], eax
mov qword [rsp + 0x138], r11
lea eax, [r13 + 1]
jmp 0x1000a2eed
mov r11, qword [rsp + 0x138]
mov dword [rsp + 0x140], eax
lea rcx, [r11 + r13*4]
cmp rcx, rdx
je 0x1000a2f09
mov rax, qword [rsp + 0x178]
mov eax, dword [rax]
mov dword [rcx], eax
mov ecx, dword [rsp + 0x150]
inc ecx
mov dword [rsp + 0x150], ecx
mov rax, qword [rsp + 0x178]
add rax, 0x18
mov qword [rsp + 0x178], rax
cmp ecx, dword [rsp + 0x158]
jae 0x1000a2f5b
jmp 0x1000a2e3d
mov dword [rsp + 0x84], 0x8007000e
lea rdx, [0x100172be0]
lea rcx, [rsp + 0x84]
call sub.msvcrt.dll__CxxThrowException
int3
lea rdx, [rsp + 0x138]
mov rcx, rsi
call fcn.1000acd20
xor r10d, r10d
mov r13d, r10d
mov edx, dword [rsp + 0x140]
cmp edx, r10d
jle 0x1000a301d
mov rcx, r10
mov qword [rsp + 0x198], rcx
lea r11d, [r10 + 1]
cmp rcx, r10
jl 0x1000a3008
cmp r13d, edx
jge 0x1000a3008
mov rax, qword [rsp + 0x138]
mov dl, byte [rsp + 0x80]
mov byte [rsp + 0x28], dl
mov edx, dword [rsp + 0x7e0]
mov dword [rsp + 0x20], edx
mov r9, qword [rsp + 0x2f0]
mov r8, qword [rsp + 0x2e0]
mov edx, dword [rax + rcx]
mov rcx, rsi
call fcn.1000aaac0
xor r10d, r10d
cmp al, r10b
je 0x1000a32fb
lea r11d, [r10 + 1]
add r13d, r11d
mov rcx, qword [rsp + 0x198]
add rcx, 4
mov qword [rsp + 0x198], rcx
mov edx, dword [rsp + 0x140]
cmp r13d, edx
jl 0x1000a2f90
jmp 0x1000a3023
xor r9d, r9d
xor r8d, r8d
mov edx, r11d
mov ecx, 0xc000008c
call qword [sym.imp.KERNEL32.dll_RaiseException]
mov r11d, 1
mov rax, qword [rsp + 0x170]
mov byte [rax], r11b
cmp dword [rsp + 0x7f8], r10d
je 0x1000a32d8
mov r13d, r10d
cmp edx, r10d
jle 0x1000a31fd
mov rax, r10
mov qword [rsp + 0x168], rax
mov rsi, qword [rsp + 0x190]
cmp rax, r10
jl 0x1000a31e8
cmp r13d, edx
jge 0x1000a31e8
mov rax, qword [rsp + 0x138]
mov rdx, rsi
mov rcx, qword [rsp + 0x168]
mov ecx, dword [rax + rcx]
call fcn.1000cb38c
xor r10d, r10d
cmp al, r10b
jne 0x1000a317a
mov edx, dword [rsp + 0x140]
cmp r13d, edx
jge 0x1000a31d2
mov r9, qword [rsp + 0x138]
mov qword [rsp + 0x170], r9
mov r8, qword [rsp + 0x190]
movsxd rsi, dword [r8 + 8]
lea eax, [rsi + 1]
cmp eax, r10d
jle 0x1000a31b2
cmp esi, dword [r8 + 0xc]
jne 0x1000a314a
cmp esi, 0x3fffffff
jg 0x1000a31b2
movabs rcx, 0x1fffffffffffffff
cmp rsi, rcx
ja 0x1000a31b2
lea eax, [rsi + rsi]
cmp dword [r8 + 0xc], r10d
lea ecx, [r10 + 1]
cmove eax, ecx
mov dword [rsp + 0x84], eax
movsxd rdx, eax
shl rdx, 2
mov rcx, qword [r8]
call qword [sym.imp.msvcrt.dll_realloc]
xor r10d, r10d
cmp rax, r10
je 0x1000a31b2
mov ecx, dword [rsp + 0x84]
mov r8, qword [rsp + 0x190]
mov dword [r8 + 0xc], ecx
mov qword [r8], rax
mov edx, dword [rsp + 0x140]
lea eax, [rsi + 1]
mov r9, qword [rsp + 0x170]
mov dword [r8 + 8], eax
mov rax, qword [r8]
lea r8, [rax + rsi*4]
cmp r8, r10
je 0x1000a3183
mov rax, qword [rsp + 0x168]
mov eax, dword [r9 + rax]
mov dword [r8], eax
mov edx, dword [rsp + 0x140]
mov rsi, qword [rsp + 0x190]
jmp 0x1000a318b
mov edx, dword [rsp + 0x140]
jmp 0x1000a318b
mov rsi, qword [rsp + 0x190]
mov r11d, 1
add r13d, r11d
mov rax, qword [rsp + 0x168]
add rax, 4
mov qword [rsp + 0x168], rax
cmp r13d, edx
jge 0x1000a31fd
jmp 0x1000a305b
mov dword [rsp + 0x84], 0x8007000e
lea rdx, [0x100172be0]
lea rcx, [rsp + 0x84]
call sub.msvcrt.dll__CxxThrowException
int3
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 1]
mov ecx, 0xc000008c
call qword [sym.imp.KERNEL32.dll_RaiseException]
xor r9d, r9d
xor r8d, r8d
mov edx, r11d
mov ecx, 0xc000008c
call qword [sym.imp.KERNEL32.dll_RaiseException]
mov rcx, qword [rsp + 0x138]
cmp rcx, r10
je 0x1000a321b
call qword [sym.imp.msvcrt.dll_free]
xor r10d, r10d
mov qword [rsp + 0x138], r10
mov dword [rsp + 0x140], r10d
mov dword [rsp + 0x144], r10d
cmp r14, r10
je 0x1000a323c
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_LocalFree]
xor r10d, r10d
cmp rbp, r10
je 0x1000a324c
mov rcx, rbp
call sub.NETAPI32.dll_NetApiBufferFree
xor r10d, r10d
cmp r15, r10
je 0x1000a325d
mov rcx, r15
call qword [sym.imp.msvcrt.dll_free]
xor r10d, r10d
cmp rbx, r10
je 0x1000a326b
mov rcx, rbx
call fcn.10013031c
nop
mov rcx, qword [rsp + 0x180]
call qword [sym.imp.msvcrt.dll_free]
nop
lea rcx, [rsp + 0x270]
call fcn.1000530b8
nop
xor ecx, ecx
cmp r12, rcx
je 0x1000a3299
mov rcx, r12
call qword [sym.imp.ole32.dll_CoTaskMemFree]
nop
cmp rdi, 0xffffffffffffffff
je 0x1000a32a9
mov rcx, rdi
call qword [sym.imp.SETUPAPI.dll_SetupDiDestroyDeviceInfoList]
nop
lea rcx, [rsp + 0x220]
call fcn.1000ccc9c
nop
mov rcx, qword [rsp + 0x160]
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
nop
lea rcx, [rsp + 0x1a0]
call fcn.1000e80ec
jmp 0x1000a4204
lea rdx, [rsp + 0x138]
mov rcx, rsi
call fcn.1000ac52c
lea rdx, [rsp + 0x138]
mov rcx, rsi
call fcn.1000aba54
xor r10d, r10d
mov rcx, qword [rsp + 0x138]
cmp rcx, r10
je 0x1000a3319
call qword [sym.imp.msvcrt.dll_free]
xor r10d, r10d
mov qword [rsp + 0x138], r10
mov dword [rsp + 0x140], r10d
mov dword [rsp + 0x144], r10d
cmp r14, r10
je 0x1000a333a
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_LocalFree]
xor r10d, r10d
cmp rbp, r10
je 0x1000a334a
mov rcx, rbp
call sub.NETAPI32.dll_NetApiBufferFree
xor r10d, r10d
cmp r15, r10
je 0x1000a335b
mov rcx, r15
call qword [sym.imp.msvcrt.dll_free]
xor r10d, r10d
cmp rbx, r10
je 0x1000a3369
mov rcx, rbx
call fcn.10013031c
nop
mov rcx, qword [rsp + 0x180]
call qword [sym.imp.msvcrt.dll_free]
nop
lea rcx, [rsp + 0x270]
call fcn.1000530b8
nop
xor ecx, ecx
cmp r12, rcx
je 0x1000a3397
mov rcx, r12
call qword [sym.imp.ole32.dll_CoTaskMemFree]
nop
cmp rdi, 0xffffffffffffffff
je 0x1000a33a7
mov rcx, rdi
call qword [sym.imp.SETUPAPI.dll_SetupDiDestroyDeviceInfoList]
nop
lea rcx, [rsp + 0x220]
call fcn.1000ccc9c
nop
mov rcx, qword [rsp + 0x160]
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
nop
lea rcx, [rsp + 0x1a0]
call fcn.1000e80ec
jmp 0x1000a4204
mov rax, qword [rsp + 0x178]
mov ecx, dword [rax]
mov dword [rsp + 0x150], ecx
mov al, byte [rsp + 0x80]
mov byte [rsp + 0x28], al
mov eax, dword [rsp + 0x7e0]
mov dword [rsp + 0x20], eax
mov r9, qword [rsp + 0x2f0]
mov r8, qword [rsp + 0x2e0]
mov edx, ecx
mov rcx, rsi
call fcn.1000aaac0
xor ecx, ecx
cmp al, cl
jne 0x1000a3564
lea rax, [0x10001e270]
mov qword [rsp + 0x90], rax
lea rax, [0x10001e620]
mov qword [rsp + 0x98], rax
lea rax, [0x10001e250]
mov qword [rsp + 0xa0], rax
mov dword [rsp + 0xa8], 0x367
lea eax, [rcx + 1]
mov dword [rsp + 0xac], eax
mov dword [rsp + 0xb0], 0xff
xor esi, esi
mov word [rsp + 0x130], si
mov byte [rsp + 0x132], sil
mov byte [rsp + 0x133], al
xor edx, edx
lea r8d, [rcx + 0x78]
lea rcx, [rsp + 0xb8]
call sub.msvcrt.dll_memset
mov r9d, dword [rsp + 0x150]
lea r8, [0x10001eb90]
lea rdx, [rsp + 0x90]
lea rcx, [rsp + 0x1a0]
call fcn.1000e91dc
nop
cmp r14, rsi
je 0x1000a34ce
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_LocalFree]
nop
cmp rbp, rsi
je 0x1000a34dc
mov rcx, rbp
call sub.NETAPI32.dll_NetApiBufferFree
nop
cmp r15, rsi
je 0x1000a34eb
mov rcx, r15
call qword [sym.imp.msvcrt.dll_free]
nop
cmp rbx, rsi
je 0x1000a34f9
mov rcx, rbx
call fcn.10013031c
nop
mov rcx, qword [rsp + 0x180]
call qword [sym.imp.msvcrt.dll_free]
nop
lea rcx, [rsp + 0x270]
call fcn.1000530b8
nop
cmp r12, rsi
je 0x1000a3525
mov rcx, r12
call qword [sym.imp.ole32.dll_CoTaskMemFree]
nop
cmp rdi, 0xffffffffffffffff
je 0x1000a3535
mov rcx, rdi
call qword [sym.imp.SETUPAPI.dll_SetupDiDestroyDeviceInfoList]
nop
lea rcx, [rsp + 0x220]
call fcn.1000ccc9c
nop
mov rcx, qword [rsp + 0x160]
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
nop
lea rcx, [rsp + 0x1a0]
call fcn.1000e80ec
jmp 0x1000a4204
mov eax, 1
cmp dword [rsp + 0x7f0], eax
jne 0x1000a36e6
xor r13d, r13d
mov qword [rsp + 0x138], r13
mov dword [rsp + 0x140], r13d
mov dword [rsp + 0x144], r13d
lea edx, [rax + 3]
xor ecx, ecx
call qword [sym.imp.msvcrt.dll_realloc]
cmp rax, r13
je 0x1000a36c6
lea ecx, [r13 + 1]
mov dword [rsp + 0x144], ecx
mov qword [rsp + 0x138], rax
mov dword [rsp + 0x140], ecx
mov r8d, dword [rsp + 0x150]
mov dword [rax], r8d
mov eax, dword [rsp + 0x7f8]
mov dword [rsp + 0x148], eax
lea rdx, [rsp + 0x138]
mov rcx, rsi
call fcn.1000aba54
mov rax, qword [rsp + 0x170]
lea ecx, [r13 + 1]
mov byte [rax], cl
mov rcx, qword [rsp + 0x138]
cmp rcx, r13
je 0x1000a3611
call qword [sym.imp.msvcrt.dll_free]
mov qword [rsp + 0x138], r13
mov dword [rsp + 0x140], r13d
mov dword [rsp + 0x144], r13d
cmp r14, r13
je 0x1000a3630
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_LocalFree]
nop
cmp rbp, r13
je 0x1000a363e
mov rcx, rbp
call sub.NETAPI32.dll_NetApiBufferFree
nop
cmp r15, r13
je 0x1000a364d
mov rcx, r15
call qword [sym.imp.msvcrt.dll_free]
nop
cmp rbx, r13
je 0x1000a365b
mov rcx, rbx
call fcn.10013031c
nop
mov rcx, qword [rsp + 0x180]
call qword [sym.imp.msvcrt.dll_free]
nop
lea rcx, [rsp + 0x270]
call fcn.1000530b8
nop
cmp r12, r13
je 0x1000a3687
mov rcx, r12
call qword [sym.imp.ole32.dll_CoTaskMemFree]
nop
cmp rdi, 0xffffffffffffffff
je 0x1000a3697
mov rcx, rdi
call qword [sym.imp.SETUPAPI.dll_SetupDiDestroyDeviceInfoList]
nop
lea rcx, [rsp + 0x220]
call fcn.1000ccc9c
nop
mov rcx, qword [rsp + 0x160]
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
nop
lea rcx, [rsp + 0x1a0]
call fcn.1000e80ec
jmp 0x1000a4204
mov dword [rsp + 0x84], 0x8007000e
lea rdx, [0x100172be0]
lea rcx, [rsp + 0x84]
call sub.msvcrt.dll__CxxThrowException
nop
mov dword [rsp + 0x158], ecx
lea rdx, [0x10017743c]
mov ecx, 0x28
call fcn.1001309f4
mov rsi, rax
xor eax, eax
cmp rsi, rax
jne 0x1000a37a5
lea rcx, [0x10001e270]
mov qword [rsp + 0x90], rcx
lea rcx, [0x10001e620]
mov qword [rsp + 0x98], rcx
lea rcx, [0x10001e250]
mov qword [rsp + 0xa0], rcx
mov dword [rsp + 0xa8], 0x38a
lea ecx, [rax + 1]
mov dword [rsp + 0xac], ecx
mov dword [rsp + 0xb0], 0xff
mov word [rsp + 0x130], ax
mov byte [rsp + 0x132], al
mov byte [rsp + 0x133], cl
xor edx, edx
lea r8d, [rax + 0x78]
lea rcx, [rsp + 0xb8]
call sub.msvcrt.dll_memset
lea r9, [0x10001ebe0]
mov r8d, 0x8007000e
lea rdx, [rsp + 0x90]
lea rcx, [rsp + 0x1a0]
call fcn.1000e93c0
int3
xor edx, edx
lea r8d, [rdx + 0x28]
mov rcx, rsi
call sub.msvcrt.dll_memset
mov rax, qword [rsp + 0x178]
mov qword [rsi + 0x10], rax
mov qword [rsi], rbx
mov eax, dword [rsp + 0x188]
mov dword [rsi + 8], eax
xor ecx, ecx
mov qword [rsp + 0x2e8], rcx
lea rax, [0x10000d460]
mov qword [rsp + 0x2e0], rax
mov qword [rsp + 0x2f8], rsi
lea rax, [0x1000138d0]
mov qword [rsp + 0x2f0], rax
lea rax, [rsp + 0x158]
mov qword [rsp + 0x20], rax
mov r9, rsi
mov r8d, dword [rsp + 0x150]
lea rdx, [rsp + 0x220]
mov rcx, qword [rsp + 0x168]
call fcn.1000a4d08
xor ecx, ecx
cmp al, cl
jne 0x1000a3b3e
mov word [rsp + 0x4a0], cx
xor edx, edx
lea r8d, [rcx + 0x7e]
lea rcx, [rsp + 0x4a2]
call sub.msvcrt.dll_memset
mov dword [rsp + 0x20], 0x40
lea r9, [rsp + 0x4a0]
mov r8d, dword [rsp + 0x150]
lea rdx, [rsp + 0x1a0]
mov rcx, qword [rsp + 0x168]
call fcn.1000c5f54
xor ecx, ecx
cmp dword [rsp + 0x158], ecx
je 0x1000a39cc
lea rsi, [0x10001e270]
mov qword [rsp + 0x90], rsi
lea rbp, [0x10001e620]
mov qword [rsp + 0x98], rbp
lea r12, [0x10001e250]
mov qword [rsp + 0xa0], r12
mov dword [rsp + 0xa8], 0x3a5
mov dword [rsp + 0xac], 6
mov r14d, 0xff
mov dword [rsp + 0xb0], r14d
xor edi, edi
mov word [rsp + 0x130], di
mov byte [rsp + 0x132], dil
lea ebx, [rcx + 1]
mov byte [rsp + 0x133], bl
lea r15d, [rcx + 0x78]
mov r8, r15
xor edx, edx
lea rcx, [rsp + 0xb8]
call sub.msvcrt.dll_memset
mov r8, r13
lea rdx, [rsp + 0x3c0]
lea rcx, [rsp + 0x90]
call fcn.1000e7e30
mov r9d, ebx
mov r8, rax
mov edx, 0x303e
lea rcx, [rsp + 0x1a0]
call fcn.1000eb640
lea rcx, [rsp + 0x90]
call fcn.1000e7a50
mov qword [rsp + 0x90], rsi
mov qword [rsp + 0x98], rbp
mov qword [rsp + 0xa0], r12
mov dword [rsp + 0xa8], 0x3a6
mov dword [rsp + 0xac], 6
mov dword [rsp + 0xb0], r14d
mov word [rsp + 0x130], di
mov byte [rsp + 0x132], dil
mov byte [rsp + 0x133], bl
mov r8, r15
xor edx, edx
lea rcx, [rsp + 0xb8]
call sub.msvcrt.dll_memset
lea r9, [0x10001ec40]
mov r8d, 0x80042302
lea rdx, [rsp + 0x90]
lea rcx, [rsp + 0x1a0]
call fcn.1000e93c0
int3
lea rax, [0x10001e270]
mov qword [rsp + 0x90], rax
lea rax, [0x10001e620]
mov qword [rsp + 0x98], rax
lea rax, [0x10001e250]
mov qword [rsp + 0xa0], rax
mov dword [rsp + 0xa8], 0x3a9
mov dword [rsp + 0xac], 6
mov dword [rsp + 0xb0], 0xff
xor r13d, r13d
mov word [rsp + 0x130], r13w
mov byte [rsp + 0x132], r13b
lea eax, [r13 + 1]
mov byte [rsp + 0x133], al
xor edx, edx
lea r8d, [r13 + 0x78]
lea rcx, [rsp + 0xb8]
call sub.msvcrt.dll_memset
lea r8, [rsp + 0x4a0]
lea rdx, [rsp + 0x3c0]
lea rcx, [rsp + 0x90]
call fcn.1000e7e30
lea r9d, [r13 + 1]
mov r8, rax
mov edx, 0x3040
lea rcx, [rsp + 0x1a0]
call fcn.1000eb640
lea rcx, [rsp + 0x90]
call fcn.1000e7a50
nop
mov rcx, rsi
call fcn.10013031c
nop
cmp r14, r13
je 0x1000a3aa8
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_LocalFree]
nop
cmp rbp, r13
je 0x1000a3ab6
mov rcx, rbp
call sub.NETAPI32.dll_NetApiBufferFree
nop
cmp r15, r13
je 0x1000a3ac5
mov rcx, r15
call qword [sym.imp.msvcrt.dll_free]
nop
cmp rbx, r13
je 0x1000a3ad3
mov rcx, rbx
call fcn.10013031c
nop
mov rcx, qword [rsp + 0x180]
call qword [sym.imp.msvcrt.dll_free]
nop
lea rcx, [rsp + 0x270]
call fcn.1000530b8
nop
cmp r12, r13
je 0x1000a3aff
mov rcx, r12
call qword [sym.imp.ole32.dll_CoTaskMemFree]
nop
cmp rdi, 0xffffffffffffffff
je 0x1000a3b0f
mov rcx, rdi
call qword [sym.imp.SETUPAPI.dll_SetupDiDestroyDeviceInfoList]
nop
lea rcx, [rsp + 0x220]
call fcn.1000ccc9c
nop
mov rcx, qword [rsp + 0x160]
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
nop
lea rcx, [rsp + 0x1a0]
call fcn.1000e80ec
jmp 0x1000a4204
mov rcx, qword [rsi + 0x18]
mov qword [rsp + 0x170], rcx
mov qword [rsp + 0x2e8], rcx
mov r8, qword [rsp + 0x300]
mov rax, qword [r8]
mov rdx, rcx
mov rcx, r8
call qword [rax + 0x88]
mov dword [rsp + 0x1a8], eax
lea rax, [0x10001e270]
mov qword [rsp + 0x90], rax
lea rax, [0x10001e620]
mov qword [rsp + 0x98], rax
lea rax, [0x10001e250]
mov qword [rsp + 0xa0], rax
mov dword [rsp + 0xa8], 0x3b2
mov eax, 1
mov dword [rsp + 0xac], eax
mov dword [rsp + 0xb0], 0xff
xor r15d, r15d
mov word [rsp + 0x130], r15w
mov byte [rsp + 0x132], r15b
mov byte [rsp + 0x133], al
xor edx, edx
lea r8d, [rax + 0x77]
lea rcx, [rsp + 0xb8]
call sub.msvcrt.dll_memset
lea r8, [0x10001ecc0]
lea rdx, [rsp + 0x90]
lea rcx, [rsp + 0x1a0]
call fcn.100052760
mov qword [rsp + 0x330], r15
mov byte [rsp + 0x358], r15b
mov byte [rsp + 0x359], r15b
mov dword [rsp + 0x35c], r15d
mov dword [rsp + 0x360], r15d
mov qword [rsp + 0x368], r15
mov dword [rsp + 0x370], r15d
mov dword [rsp + 0x374], r15d
mov dword [rsp + 0x378], r15d
mov qword [rsp + 0x380], r15
mov word [rsp + 0x388], r15w
mov qword [rsp + 0x398], r15
lea rax, [0x100035878]
mov qword [rsp + 0x390], rax
xor edx, edx
lea r8d, [r15 + 0x20]
lea rcx, [rsp + 0x338]
call sub.msvcrt.dll_memset
nop
mov dword [rsp + 0x40], 0x80
mov dword [rsp + 0x38], 3
mov dword [rsp + 0x30], 0xc0000000
mov dword [rsp + 0x28], r15d
mov byte [rsp + 0x20], r15b
xor r9d, r9d
mov r8, qword [rsi + 0x18]
lea rdx, [rsp + 0x1a0]
lea rcx, [rsp + 0x330]
call fcn.10005315c
mov r15d, eax
mov dword [rsp + 0x1a8], eax
xor eax, eax
cmp r15d, eax
jge 0x1000a3d82
lea rcx, [0x10001e270]
mov qword [rsp + 0x90], rcx
lea rcx, [0x10001e620]
mov qword [rsp + 0x98], rcx
lea rcx, [0x10001e250]
mov qword [rsp + 0xa0], rcx
mov dword [rsp + 0xa8], 0x3bb
lea ecx, [rax + 1]
mov dword [rsp + 0xac], ecx
mov dword [rsp + 0xb0], 0xff
mov word [rsp + 0x130], ax
mov byte [rsp + 0x132], al
mov byte [rsp + 0x133], cl
xor edx, edx
lea r8d, [rax + 0x78]
lea rcx, [rsp + 0xb8]
call sub.msvcrt.dll_memset
mov dword [rsp + 0x20], r15d
mov r9, qword [rsi + 0x18]
lea r8, [0x10001ed20]
lea rdx, [rsp + 0x90]
lea rcx, [rsp + 0x1a0]
call fcn.1000e91dc
xor eax, eax
jmp 0x1000a3e98
mov qword [rsp + 0x30], rax
mov byte [rsp + 0x28], al
mov dword [rsp + 0x20], eax
xor r9d, r9d
mov r8d, 0x56c008
lea rdx, [rsp + 0x1a0]
lea rcx, [rsp + 0x330]
call fcn.1000538a0
mov r15d, eax
mov dword [rsp + 0x1a8], eax
xor eax, eax
cmp r15d, eax
jge 0x1000a3e66
lea rcx, [0x10001e270]
mov qword [rsp + 0x90], rcx
lea rcx, [0x10001e620]
mov qword [rsp + 0x98], rcx
lea rcx, [0x10001e250]
mov qword [rsp + 0xa0], rcx
mov dword [rsp + 0xa8], 0x3c3
lea ecx, [rax + 1]
mov dword [rsp + 0xac], ecx
mov dword [rsp + 0xb0], 0xff
mov word [rsp + 0x130], ax
mov byte [rsp + 0x132], al
mov byte [rsp + 0x133], cl
xor edx, edx
lea r8d, [rax + 0x78]
lea rcx, [rsp + 0xb8]
call sub.msvcrt.dll_memset
mov dword [rsp + 0x20], r15d
mov r9, qword [rsi + 0x18]
lea r8, [0x10001ed70]
lea rdx, [rsp + 0x90]
lea rcx, [rsp + 0x1a0]
call fcn.1000e91dc
xor eax, eax
mov dword [rsp + 0x1a8], eax
mov rcx, qword [rsp + 0x330]
cmp rcx, rax
je 0x1000a3e7b
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor eax, eax
mov qword [rsp + 0x330], rax
mov dword [rsp + 0x35c], eax
mov dword [rsp + 0x370], eax
mov dword [rsp + 0x378], eax
mov word [rsp + 0x550], ax
xor edx, edx
mov r8d, 0x206
lea rcx, [rsp + 0x552]
call sub.msvcrt.dll_memset
mov r9d, 0x104
lea r8, [rsp + 0x550]
mov rdx, qword [rsi + 0x18]
mov r15, qword [rsp + 0x168]
mov rcx, r15
call fcn.1000ae5c4
xor ecx, ecx
cmp al, cl
jne 0x1000a3f7d
lea rax, [0x10001e270]
mov qword [rsp + 0x90], rax
lea rax, [0x10001e620]
mov qword [rsp + 0x98], rax
lea rax, [0x10001e250]
mov qword [rsp + 0xa0], rax
mov dword [rsp + 0xa8], 0x3cf
mov dword [rsp + 0xac], 6
mov dword [rsp + 0xb0], 0xff
mov word [rsp + 0x130], cx
mov byte [rsp + 0x132], cl
lea eax, [rcx + 1]
mov byte [rsp + 0x133], al
xor edx, edx
lea r8d, [rcx + 0x78]
lea rcx, [rsp + 0xb8]
call sub.msvcrt.dll_memset
mov r9, qword [rsi + 0x18]
lea r8, [0x10001ede8]
lea rdx, [rsp + 0x90]
lea rcx, [rsp + 0x1a0]
call fcn.1000e91dc
xor ecx, ecx
cmp dword [rsp + 0x84], ecx
je 0x1000a4052
lea r8, [rsp + 0x550]
mov rdx, r13
mov rcx, r15
call fcn.1000aefb0
xor ecx, ecx
cmp al, cl
jne 0x1000a4115
lea rax, [0x10001e270]
mov qword [rsp + 0x90], rax
lea rax, [0x10001e620]
mov qword [rsp + 0x98], rax
lea rax, [0x10001e250]
mov qword [rsp + 0xa0], rax
mov dword [rsp + 0xa8], 0x3d5
mov dword [rsp + 0xac], 6
mov dword [rsp + 0xb0], 0xff
mov word [rsp + 0x130], cx
mov byte [rsp + 0x132], cl
lea eax, [rcx + 1]
mov byte [rsp + 0x133], al
xor edx, edx
lea r8d, [rcx + 0x78]
lea rcx, [rsp + 0xb8]
call sub.msvcrt.dll_memset
lea r11, [rsp + 0x550]
mov qword [rsp + 0x20], r11
mov r9, r13
lea r8, [0x10001ee18]
lea rdx, [rsp + 0x90]
lea rcx, [rsp + 0x1a0]
call fcn.1000e91dc
jmp 0x1000a4115
lea r8, [rsp + 0x550]
mov rdx, r13
mov rcx, r15
call fcn.1000aec30
xor ecx, ecx
cmp al, cl
jne 0x1000a4115
lea rax, [0x10001e270]
mov qword [rsp + 0x90], rax
lea rax, [0x10001e620]
mov qword [rsp + 0x98], rax
lea rax, [0x10001e250]
mov qword [rsp + 0xa0], rax
mov dword [rsp + 0xa8], 0x3dd
mov dword [rsp + 0xac], 6
mov dword [rsp + 0xb0], 0xff
mov word [rsp + 0x130], cx
mov byte [rsp + 0x132], cl
lea eax, [rcx + 1]
mov byte [rsp + 0x133], al
xor edx, edx
lea r8d, [rcx + 0x78]
lea rcx, [rsp + 0xb8]
call sub.msvcrt.dll_memset
lea r11, [rsp + 0x550]
mov qword [rsp + 0x20], r11
mov r9, r13
lea r8, [0x10001ee50]
lea rdx, [rsp + 0x90]
lea rcx, [rsp + 0x1a0]
call fcn.1000e91dc
mov r9, qword [rsp + 0x250]
lea r8, [rsp + 0x240]
mov rdx, qword [rsi + 0x18]
mov rcx, r15
call fcn.1000a6330
nop
lea rcx, [rsp + 0x330]
call fcn.1000530b8
nop
mov rcx, rsi
call fcn.10013031c
nop
mov rcx, qword [rsp + 0x170]
xor esi, esi
cmp rcx, rsi
je 0x1000a415f
call qword [sym.imp.KERNEL32.dll_LocalFree]
nop
cmp r14, rsi
je 0x1000a416e
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_LocalFree]
nop
cmp rbp, rsi
je 0x1000a417c
mov rcx, rbp
call sub.NETAPI32.dll_NetApiBufferFree
nop
mov rcx, qword [rsp + 0x240]
cmp rcx, rsi
je 0x1000a4190
call qword [sym.imp.msvcrt.dll_free]
nop
cmp rbx, rsi
je 0x1000a419e
mov rcx, rbx
call fcn.10013031c
nop
mov rcx, qword [rsp + 0x180]
call qword [sym.imp.msvcrt.dll_free]
nop
lea rcx, [rsp + 0x270]
call fcn.1000530b8
nop
cmp r12, rsi
je 0x1000a41ca
mov rcx, r12
call qword [sym.imp.ole32.dll_CoTaskMemFree]
nop
cmp rdi, 0xffffffffffffffff
je 0x1000a41da
mov rcx, rdi
call qword [sym.imp.SETUPAPI.dll_SetupDiDestroyDeviceInfoList]
nop
lea rcx, [rsp + 0x220]
call fcn.1000ccc9c
nop
mov rcx, qword [rsp + 0x160]
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
nop
lea rcx, [rsp + 0x1a0]
call fcn.1000e80ec
mov rcx, qword [rsp + 0x760]
xor rcx, rsp
call fcn.100130830
add rsp, 0x778
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret