Function at 0x465b90
Capabilities:
Create process on windows
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5943b9
mov eax, dword fs:[0]
push eax
sub esp, 0x238
mov eax, dword [0x62d12c]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov ecx, dword [edi + 0x78]
push 1
push str.DeviceVolumeManager::ManagedVolumeDevice::MountDeviceVolumes
mov dword [ebp - 0x1dc], edi
call fcn.00475430
push eax
push str.MountDeviceVolumes
push 0x2da
push str.DeviceVolumeManager.cpp
lea ecx, [ebp - 0x1cc]
call fcn.004371e0
lea ebx, [edi + 0x38]
mov ecx, ebx
mov dword [ebp - 4], 0
mov dword [ebp - 0x23c], ebx
call fcn.0050a5d0
lea ecx, [edi + 0x3c]
mov byte [ebp - 4], 1
call fcn.0050a5d0
mov eax, dword [edi + 0x78]
push ecx
mov ecx, esp
mov dword [ebp - 0x218], esp
mov dword [ecx], eax
test eax, eax
je 0x465c2d
mov ecx, dword [eax]
mov edx, dword [ecx + 4]
push eax
call edx
mov ecx, dword [edi + 0xc4]
call fcn.00465030
cmp al, 1
jne 0x465c7f
mov esi, dword [edi + 0x78]
mov ecx, esi
call fcn.00475390
push eax
mov ecx, esi
call fcn.00475370
push eax
push str.Device_filtered._Pin:__S_Guid:__S
push 1
push str.DeviceVolumeManager
push 0x2e1
push str.DeviceVolumeManager.cpp
mov ecx, 0x632598
call fcn.004deb10
push eax
call fcn.004e2af0
add esp, 0x18
mov ecx, ebx
jmp 0x466dc9
mov ecx, dword [edi + 0x78]
call fcn.00473690
mov esi, eax
call fcn.004057c0
cmp eax, esi
jae 0x465d36
push str.Device_control_channel_protocol_not_supported.
push 1
push str.DeviceVolumeManager
push 0x2e7
push str.DeviceVolumeManager.cpp
mov ecx, 0x632598
call fcn.004deb10
push eax
call fcn.004e2af0
mov eax, dword [0x62c680]
mov edx, dword [eax + 0xc]
add esp, 0x10
mov ecx, 0x62c680
call edx
add eax, 0x10
mov dword [ebp - 0x1ec], eax
mov ecx, dword [edi + 0x78]
mov byte [ebp - 4], 2
call fcn.004753b0
push eax
lea eax, [ebp - 0x1ec]
push 0xe9
push eax
call fcn.00465610
add esp, 0xc
call fcn.00447a60
mov edx, dword [eax]
mov esi, dword [ebp - 0x1ec]
push 3
mov ecx, eax
mov eax, dword [edx + 0x18]
push esi
call eax
lea eax, [esi - 0x10]
mov byte [ebp - 4], 1
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x465d2f
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov ecx, ebx
jmp 0x466dc9
mov ecx, dword [edi + 0x78]
call fcn.004736e0
test al, al
jne 0x465d72
push str.Device_no_longer_valid.
push 1
push str.DeviceVolumeManager
push 0x2f2
push str.DeviceVolumeManager.cpp
mov ecx, 0x632598
call fcn.004deb10
push eax
call fcn.004e2af0
add esp, 0x10
mov ecx, ebx
jmp 0x466dc9
mov ecx, dword [edi + 0x78]
call fcn.004736a0
test al, al
jne 0x465e27
push str.Device_oobe_not_completed.
push 1
push str.DeviceVolumeManager
push 0x2f9
push str.DeviceVolumeManager.cpp
mov ecx, 0x632598
call fcn.004deb10
push eax
call fcn.004e2af0
mov edx, dword [0x62c680]
mov eax, dword [edx + 0xc]
add esp, 0x10
mov ecx, 0x62c680
call eax
add eax, 0x10
mov dword [ebp - 0x1ec], eax
mov ecx, dword [edi + 0x78]
mov byte [ebp - 4], 3
call fcn.004753b0
push eax
lea ecx, [ebp - 0x1ec]
push 0xea
push ecx
call fcn.00465610
add esp, 0xc
call fcn.00447a60
mov edx, dword [eax]
mov esi, dword [ebp - 0x1ec]
push 3
mov ecx, eax
mov eax, dword [edx + 0x18]
push esi
call eax
lea eax, [esi - 0x10]
mov byte [ebp - 4], 1
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x465d2f
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov ecx, ebx
jmp 0x466dc9
mov ecx, dword [edi + 0x78]
lea edx, [ebp - 0x1e5]
push edx
mov byte [ebp - 0x1e5], 1
call fcn.004754f0
mov esi, 8
test al, al
je 0x465ee3
cmp byte [ebp - 0x1e5], 0
jne 0x465f17
cmp dword [edi + 0x54], esi
lea eax, [edi + 0x40]
jb 0x465e61
mov eax, dword [eax]
push eax
push str._S_Device_not_booted.__Requeue_request.
push 1
push str.DeviceVolumeManager
push 0x307
push str.DeviceVolumeManager.cpp
mov ecx, 0x632598
call fcn.004deb10
push eax
call fcn.004e2af0
push 8
call fcn.00559a21
mov esi, eax
add esp, 0x18
mov dword [ebp - 0x218], esi
mov byte [ebp - 4], 4
test esi, esi
je 0x465ec9
mov eax, dword [edi + 0x78]
push ecx
mov ecx, esp
mov dword [ebp - 0x220], esp
mov dword [ecx], eax
test eax, eax
je 0x465ebc
mov ecx, dword [eax]
mov edx, dword [ecx + 4]
push eax
call edx
mov eax, dword [ebp + 8]
push eax
mov ecx, esi
call fcn.0045ef60
jmp 0x465ecb
xor eax, eax
push 0x1388
push eax
mov ecx, edi
mov byte [ebp - 4], 1
call fcn.00463790
mov ecx, ebx
jmp 0x466dc9
cmp dword [edi + 0x54], esi
lea eax, [edi + 0x40]
jb 0x465eed
mov eax, dword [eax]
push eax
push str._S_getIsBooted_failed.
push 1
push str.DeviceVolumeManager
push 0x30e
push str.DeviceVolumeManager.cpp
mov ecx, 0x632598
call fcn.004deb10
push eax
call fcn.004e2af0
add esp, 0x14
mov ecx, edi
call fcn.00460770
test al, al
jne 0x465f5d
cmp dword [edi + 0x54], esi
lea eax, [edi + 0x40]
jb 0x465f2c
mov eax, dword [eax]
push eax
push str._S_Volumemount_not_required.
push 1
push str.DeviceVolumeManager
push 0x314
push str.DeviceVolumeManager.cpp
mov ecx, 0x632598
call fcn.004deb10
push eax
call fcn.004e2af0
add esp, 0x14
mov ecx, ebx
jmp 0x466dc9
mov edx, dword [0x62c680]
mov eax, dword [edx + 0xc]
mov ecx, 0x62c680
call eax
add eax, 0x10
mov dword [ebp - 0x204], eax
mov ecx, dword [edi + 0x78]
mov byte [ebp - 4], 5
call fcn.004753b0
cmp dword [ebp + 8], 1
push eax
jne 0x465f94
push 0x66
lea ecx, [ebp - 0x204]
push ecx
jmp 0x465f9d
push 0x6c
lea edx, [ebp - 0x204]
push edx
call fcn.00465610
add esp, 0xc
call fcn.00447a60
mov ecx, dword [ebp - 0x204]
mov edx, dword [eax]
mov edx, dword [edx + 0x18]
push 1
push ecx
mov ecx, eax
call edx
xor esi, esi
mov dword [ebp - 0x210], esi
push 0xfe
lea ecx, [ebp - 0x12e]
xor eax, eax
push esi
push ecx
mov byte [ebp - 4], 6
mov dword [ebp - 0x20c], esi
mov byte [ebp - 0x1d5], 0
mov byte [ebp - 0x1e6], 0
mov word [ebp - 0x130], ax
call fcn.0055aed0
add esp, 0xc
lea ecx, [ebp - 0x234]
mov dword [ebp - 0x208], esi
call fcn.00462e10
mov dword [ebp - 0x1e4], 5
mov dword [ebp - 0x1fc], esi
mov ecx, dword [edi + 0x78]
lea edx, [ebp - 0x1fc]
push edx
mov byte [ebp - 4], 8
call fcn.0047af10
test al, al
jne 0x46606c
cmp dword [edi + 0x54], 8
lea eax, [edi + 0x40]
jb 0x46603d
mov eax, dword [eax]
push eax
push str._S_get_NetworkAddressses_failed.
push 1
push str.DeviceVolumeManager
push 0x331
push str.DeviceVolumeManager.cpp
mov ecx, 0x632598
call fcn.004deb10
push eax
call fcn.004e2af0
add esp, 0x14
jmp 0x466b05
mov ecx, dword [ebp - 0x1fc]
mov dword [ebp - 0x1e0], esi
call fcn.004747f0
test eax, eax
je 0x46619d
mov bl, 9
jmp 0x466092
xor esi, esi
mov eax, dword [ebp - 0x1e0]
push eax
lea ecx, [ebp - 0x1d4]
push ecx
mov ecx, dword [ebp - 0x1fc]
call fcn.00475d70
mov ecx, dword [ebp - 0x1d4]
mov byte [ebp - 4], bl
call fcn.004737d0
test eax, eax
je 0x4660ca
mov eax, dword [ebp - 0x1d4]
cmp eax, esi
jmp 0x46616d
mov ecx, dword [ebp - 0x1d4]
call fcn.004737e0
cmp eax, 1
jne 0x466119
mov esi, dword [ebp - 0x1d4]
mov dword [ebp - 0x1f8], esi
test esi, esi
je 0x4660f2
mov ecx, dword [esi]
mov edx, dword [ecx + 4]
push esi
call edx
lea eax, [ebp - 0x1f8]
push eax
lea ecx, [ebp - 0x234]
mov byte [ebp - 4], 0xa
call fcn.00464050
mov byte [ebp - 4], bl
test esi, esi
je 0x466165
mov ecx, dword [esi]
mov edx, dword [ecx + 8]
push esi
call edx
jmp 0x466165
mov ecx, dword [ebp - 0x1d4]
call fcn.004737e0
test eax, eax
jne 0x466165
mov esi, dword [ebp - 0x1d4]
mov dword [ebp - 0x1f8], esi
test esi, esi
je 0x466140
mov eax, dword [esi]
mov ecx, dword [eax + 4]
push esi
call ecx
lea edx, [ebp - 0x1f8]
push edx
lea ecx, [ebp - 0x234]
mov byte [ebp - 4], 0xb
call fcn.004640a0
mov byte [ebp - 4], bl
test esi, esi
je 0x466165
mov eax, dword [esi]
mov ecx, dword [eax + 8]
push esi
call ecx
mov eax, dword [ebp - 0x1d4]
test eax, eax
mov byte [ebp - 4], 8
je 0x46617b
mov edx, dword [eax]
push eax
mov eax, dword [edx + 8]
call eax
mov esi, dword [ebp - 0x1e0]
mov ecx, dword [ebp - 0x1fc]
inc esi
mov dword [ebp - 0x1e0], esi
call fcn.004747f0
cmp esi, eax
jb 0x466090
xor esi, esi
cmp dword [ebp - 0x230], esi
jne 0x4661c7
cmp dword [edi + 0x54], 8
lea eax, [edi + 0x40]
jb 0x4661b0
mov eax, dword [eax]
push eax
push str._S_no_valid_mounting_addresses.
push 1
push str.DeviceVolumeManager
push 0x343
jmp 0x46604f
mov eax, dword [edi + 0x78]
mov ecx, dword [eax]
lea edx, [ebp - 0x210]
push edx
push eax
mov eax, dword [ecx + 0x30]
call eax
cmp eax, esi
jge 0x4661ff
cmp dword [edi + 0x54], 8
lea eax, [edi + 0x40]
jb 0x4661e8
mov eax, dword [eax]
push eax
push str._S_get_Volumes_failed.
push 1
push str.DeviceVolumeManager
push 0x34b
jmp 0x46604f
mov eax, dword [ebp - 0x210]
mov ecx, dword [eax]
lea edx, [ebp - 0x20c]
push edx
push eax
mov eax, dword [ecx + 0x20]
call eax
cmp dword [ebp - 0x20c], esi
jne 0x46623e
cmp dword [edi + 0x54], 8
lea eax, [edi + 0x40]
jb 0x466227
mov eax, dword [eax]
push eax
push str._S_No_device_volumes_found.
push 1
push str.DeviceVolumeManager
push 0x352
jmp 0x46604f
mov ecx, dword [ebp - 0x234]
mov edx, dword [ecx]
mov dword [ebp - 0x1f8], esi
mov dword [ebp - 0x1e0], edx
mov eax, dword [ebp - 0x1e0]
cmp eax, dword [ebp - 0x234]
je 0x466aac
mov edi, dword [eax + 8]
mov dword [ebp - 0x1ec], edi
test edi, edi
je 0x466279
mov eax, dword [edi]
mov ecx, dword [eax + 4]
push edi
call ecx
mov ecx, edi
mov byte [ebp - 4], 0xc
call fcn.00473810
test al, al
je 0x466a81
mov ecx, dword [ebp - 0x1e0]
mov ebx, dword [ecx + 8]
mov dword [ebp - 0x214], ebx
test ebx, ebx
je 0x4662a7
mov edx, dword [ebx]
mov eax, dword [edx + 4]
push ebx
call eax
mov ecx, edi
mov byte [ebp - 4], 0xd
call fcn.004737e0
cmp eax, 1
jne 0x46634b
push eax
push eax
lea ecx, [ebp - 0x240]
push ecx
mov ecx, dword [ebp - 0x1fc]
call fcn.00475ef0
push eax
lea ecx, [ebp - 0x214]
call fcn.00460c70
mov eax, dword [ebp - 0x240]
test eax, eax
je 0x4662ed
mov edx, dword [eax]
push eax
mov eax, dword [edx + 8]
call eax
mov ebx, dword [ebp - 0x214]
test ebx, ebx
jne 0x46634b
mov eax, dword [ebp - 0x1dc]
add eax, 0x40
cmp dword [eax + 0x14], 8
jb 0x466308
mov eax, dword [eax]
push eax
push str._S_Unable_to_locate_tunnel_ipv6_route
push 1
push str.DeviceVolumeManager
push 0x363
push str.DeviceVolumeManager.cpp
mov ecx, 0x632598
call fcn.004deb10
push eax
call fcn.004e2af0
add esp, 0x14
mov byte [ebp - 4], 8
test edi, edi
je 0x466a91
mov ecx, dword [edi]
mov edx, dword [ecx + 8]
push edi
call edx
jmp 0x466a91
mov eax, dword [ebp - 0x1dc]
cmp dword [eax + 0x54], 8
jb 0x46635c
mov esi, dword [eax + 0x40]
jmp 0x466361
mov esi, eax
add esi, 0x40
mov ecx, edi
call fcn.00475c90
push eax
push esi
push str._S_InitializeDevice_ip:__S
push 1
push str.DeviceVolumeManager
push 0x368
push str.DeviceVolumeManager.cpp
mov ecx, 0x632598
call fcn.004deb10
push eax
call fcn.004e2af0
add esp, 0x14
mov eax, esp
mov dword [ebp - 0x1e4], esp
mov dword [eax], ebx
test ebx, ebx
je 0x4663a9
mov eax, dword [ebx]
mov ecx, dword [eax + 4]
push ebx
call ecx
mov esi, dword [ebp - 0x1dc]
mov ecx, esi
call fcn.00461b70
mov ecx, eax
mov dword [ebp - 0x1e4], ecx
test ecx, ecx
je 0x466433
cmp ecx, 3
je 0x466acb
cmp ecx, 6
je 0x466acb
cmp dword [esi + 0x54], 8
lea eax, [esi + 0x40]
jb 0x4663df
mov eax, dword [eax]
push ecx
push eax
push str._S_InitializeDevice_failed.__Error:__X
push 1
push str.DeviceVolumeManager
push 0x371
push str.DeviceVolumeManager.cpp
mov ecx, 0x632598
call fcn.004deb10
push eax
call fcn.004e2af0
add esp, 0x18
mov byte [ebp - 4], 0xc
test ebx, ebx
je 0x46641a
mov edx, dword [ebx]
mov eax, dword [edx + 8]
push ebx
call eax
mov byte [ebp - 4], 8
test edi, edi
je 0x466a91
mov ecx, dword [edi]
mov edx, dword [ecx + 8]
push edi
call edx
jmp 0x466a91
xor esi, esi
mov dword [ebp - 0x1e4], esi
cmp dword [ebp - 0x20c], esi
jle 0x466a71
jmp 0x466450
mov edi, dword [ebp - 0x1dc]
mov ebx, 8
mov dword [ebp - 0x1d0], 0
mov eax, dword [ebp - 0x210]
mov ecx, dword [eax]
lea edx, [ebp - 0x1d0]
push edx
push esi
push eax
mov eax, dword [ecx + 0x1c]
mov byte [ebp - 4], 0xe
call eax
test eax, eax
jns 0x4664bd
cmp dword [edi + 0x54], ebx
lea eax, [edi + 0x40]
jb 0x46648d
mov eax, dword [eax]
push esi
push eax
push str._S_get_Item__d_failed.
push 1
push str.DeviceVolumeManager
push 0x37b
push str.DeviceVolumeManager.cpp
mov ecx, 0x632598
call fcn.004deb10
push eax
call fcn.004e2af0
add esp, 0x18
jmp 0x466a36
mov eax, dword [ebp - 0x1d0]
mov ecx, dword [eax]
lea edx, [ebp - 0x21c]
push edx
push eax
mov eax, dword [ecx + 0x30]
call eax
cmp dword [edi + 0x54], ebx
jb 0x4664dc
mov eax, dword [edi + 0x40]
jmp 0x4664df
lea eax, [edi + 0x40]
mov ecx, dword [ebp - 0x21c]
push ecx
push eax
push str._S_Volume_Content_Type:__X
push 0x14
push str.DeviceVolumeManager
push 0x381
push str.DeviceVolumeManager.cpp
mov ecx, 0x632598
call fcn.004deb10
push eax
call fcn.004e2af0
mov eax, dword [ebp - 0x21c]
add esp, 0x18
cmp eax, 2
je 0x466572
cmp dword [edi + 0x54], ebx
jb 0x466525
mov ecx, dword [edi + 0x40]
jmp 0x466528
lea ecx, [edi + 0x40]
push eax
push ecx
push str._S_Volume_type_not_valid_for_auto_mounting._Type:__X
push 0x14
push str.DeviceVolumeManager
push 0x384
push str.DeviceVolumeManager.cpp
mov ecx, 0x632598
call fcn.004deb10
push eax
call fcn.004e2af0
mov eax, dword [ebp - 0x1d0]
add esp, 0x18
mov byte [ebp - 4], 0xd
test eax, eax
je 0x466a4c
mov edx, dword [eax]
push eax
mov eax, dword [edx + 8]
call eax
jmp 0x466a4c
mov ecx, dword [ebp - 0x1d0]
push ecx
lea ecx, [ebp - 0x1d4]
call fcn.00461040
mov eax, dword [ebp - 0x1d4]
mov byte [ebp - 4], 0xf
test eax, eax
jne 0x4665bd
cmp dword [edi + 0x54], ebx
jb 0x46659c
mov eax, dword [edi + 0x40]
jmp 0x46659f
lea eax, [edi + 0x40]
mov edx, dword [ebp - 0x21c]
push edx
push eax
push str._S_Volume_does_not_support_NetworkVolume_interface._Type:__X
push 1
push str.DeviceVolumeManager
push 0x38b
jmp 0x466a08
lea edx, [ebp - 0x224]
mov dword [ebp - 0x224], 0
mov ecx, dword [eax]
push edx
push eax
mov eax, dword [ecx + 0x44]
call eax
test eax, eax
js 0x4669e8
mov ecx, dword [ebp - 0x224]
cmp dword [ecx + 4], 0
je 0x4669e8
push ecx
lea ecx, [ebp - 0x1f4]
call fcn.00462740
xor esi, esi
mov dword [ebp - 0x1f0], esi
push esi
lea ecx, [ebp - 0x1f4]
mov byte [ebp - 4], 0x11
call fcn.0045d0d0
test eax, eax
je 0x4666d1
lea ebx, [ebx]
push esi
lea ecx, [ebp - 0x1f4]
call fcn.0045d880
mov eax, dword [eax]
push eax
lea ecx, [ebp - 0x244]
call fcn.00445b60
mov eax, dword [eax]
mov byte [ebp - 4], 0x12
test eax, eax
je 0x466648
mov eax, dword [eax]
jmp 0x46664a
xor eax, eax
push eax
lea ecx, [ebp - 0x2c]
call fcn.00422b70
lea ecx, [ebp - 0x244]
mov byte [ebp - 4], 0x14
call fcn.0044bbf0
mov ecx, dword [edi + 0x84]
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x18], ebx
jae 0x466673
lea eax, [ebp - 0x2c]
mov edx, dword [ecx]
lea ebx, [ebp - 0x1f0]
push ebx
push eax
mov eax, dword [edx + 0xc]
call eax
test eax, eax
jne 0x466697
mov ecx, dword [ebp - 0x1f0]
mov edx, dword [ecx]
mov eax, dword [edx + 0x10]
call eax
test eax, eax
jne 0x4666c0
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x11
call fcn.004222c0
push 0
lea ecx, [ebp - 0x1f4]
inc esi
call fcn.0045d0d0
mov ebx, 8
cmp esi, eax
jb 0x466620
jmp 0x4666d1
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x11
call fcn.004222c0
mov ebx, 8
cmp dword [ebp - 0x1f0], 0
jne 0x466733
cmp dword [edi + 0x54], ebx
lea eax, [edi + 0x40]
jb 0x4666e4
mov eax, dword [eax]
push eax
push str._S_No_valid_credentials_found
push 1
push str.DeviceVolumeManager
push 0x3a6
push str.DeviceVolumeManager.cpp
mov ecx, 0x632598
call fcn.004deb10
push eax
call fcn.004e2af0
mov ecx, dword [ebp - 0x1f0]
add esp, 0x14
mov byte [ebp - 4], 0x10
test ecx, ecx
je 0x466723
mov edx, dword [ecx]
mov eax, dword [edx + 8]
call eax
lea ecx, [ebp - 0x1f4]
call fcn.00460db0
jmp 0x466a20
mov eax, dword [ebp - 0x1d4]
push 0
push 0x61830c
push 0x6183e0
push 0
push eax
call fcn.0055a9cf
mov ebx, eax
add esp, 0x14
test ebx, ebx
jne 0x4667b0
cmp dword [edi + 0x54], 8
lea eax, [edi + 0x40]
jb 0x466761
mov eax, dword [eax]
push eax
push str._S_internal_cast_failed
push 1
push str.DeviceVolumeManager
push 0x3ad
push str.DeviceVolumeManager.cpp
mov ecx, 0x632598
call fcn.004deb10
push eax
call fcn.004e2af0
mov ecx, dword [ebp - 0x1f0]
add esp, 0x14
mov byte [ebp - 4], 0x10
test ecx, ecx
je 0x4667a0
mov edx, dword [ecx]
mov eax, dword [edx + 8]
call eax
lea ecx, [ebp - 0x1f4]
call fcn.00460db0
jmp 0x466a20
mov ecx, dword [ebp - 0x1f0]
mov dword [ebp - 0x228], 0
mov eax, dword [ecx]
mov edx, dword [eax + 0x10]
mov esi, ecx
call edx
push eax
lea ecx, [ebp - 0x218]
call fcn.00445b60
mov edi, eax
mov eax, dword [esi]
mov edx, dword [eax + 0xc]
mov ecx, esi
mov byte [ebp - 4], 0x15
call edx
push eax
lea ecx, [ebp - 0x220]
call fcn.00445b60
mov esi, eax
mov ecx, dword [ebp - 0x1ec]
mov byte [ebp - 4], 0x16
call fcn.00475c90
push eax
lea ecx, [ebp - 0x238]
call fcn.00445b60
mov ecx, dword [edi]
mov byte [ebp - 4], 0x17
test ecx, ecx
je 0x46681b
mov ecx, dword [ecx]
jmp 0x46681d
xor ecx, ecx
mov esi, dword [esi]
test esi, esi
je 0x466827
mov esi, dword [esi]
jmp 0x466829
xor esi, esi
mov eax, dword [eax]
test eax, eax
je 0x466833
mov eax, dword [eax]
jmp 0x466835
xor eax, eax
lea edx, [ebp - 0x228]
push edx
push ecx
push esi
push eax
mov ecx, ebx
call fcn.0045bb10
lea ecx, [ebp - 0x238]
mov esi, eax
call fcn.0044bbf0
lea ecx, [ebp - 0x220]
call fcn.0044bbf0
lea ecx, [ebp - 0x218]
mov byte [ebp - 4], 0x11
call fcn.0044bbf0
test esi, esi
jns 0x4668e5
mov eax, dword [ebp - 0x1dc]
add eax, 0x40
cmp dword [eax + 0x14], 8
jb 0x466882
mov eax, dword [eax]
push esi
push eax
push str._S_MountVolume_failed._Error:__X
push 1
push str.DeviceVolumeManager
push 0x3b5
push str.DeviceVolumeManager.cpp
mov ecx, 0x632598
call fcn.004deb10
push eax
call fcn.004e2af0
mov ecx, dword [ebp - 0x1f0]
mov eax, dword [ebp - 0x228]
add esp, 0x18
mov dword [ebp - 0x1f8], eax
mov byte [ebp - 0x1e6], 1
mov byte [ebp - 4], 0x10
test ecx, ecx
je 0x4668d5
mov edx, dword [ecx]
mov eax, dword [edx + 8]
call eax
lea ecx, [ebp - 0x1f4]
call fcn.00460db0
jmp 0x466a20
mov dword [ebp - 0x200], 0
mov eax, dword [ebp - 0x1d0]
mov ecx, dword [eax]
lea edx, [ebp - 0x200]
push edx
push eax
mov eax, dword [ecx + 0x1c]
mov byte [ebp - 4], 0x18
call eax
test eax, eax
js 0x46699d
mov ecx, dword [ebp - 0x200]
push ecx
call dword [sym.imp.OLEAUT32.dll_VariantInit]
test eax, eax
je 0x46699d
call fcn.004624b0
test al, al
je 0x466944
mov edx, dword [ebp - 0x200]
push 1
push 0
push 0
push edx
push str.explore
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
cmp dword [ebp - 0x208], 0
jne 0x466963
mov eax, dword [ebp - 0x200]
push eax
push str._S:
push 0xffffffffffffffff
push 0x10
lea ecx, [ebp - 0x30]
push ecx
jmp 0x466977
mov edx, dword [ebp - 0x200]
push edx
push str.__S:
push 0xffffffffffffffff
push 0x10
lea eax, [ebp - 0x30]
push eax
call fcn.0055abe8
add esp, 0x14
lea ecx, [ebp - 0x30]
push ecx
lea edx, [ebp - 0x130]
push 0x80
push edx
call fcn.0055b046
add esp, 0xc
inc dword [ebp - 0x208]
mov ecx, dword [ebp - 0x1dc]
lea eax, [ebp - 0x1ec]
push eax
add ecx, 0x7c
mov byte [ebp - 0x1d5], 1
call fcn.00459360
mov ecx, dword [ebp - 0x200]
push ecx
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov ecx, dword [ebp - 0x1f0]
mov byte [ebp - 4], 0x10
test ecx, ecx
je 0x4669db
mov edx, dword [ecx]
mov eax, dword [edx + 8]
call eax
lea ecx, [ebp - 0x1f4]
call fcn.00460db0
jmp 0x466a20
cmp dword [edi + 0x54], ebx
jb 0x4669f2
mov ecx, dword [edi + 0x40]
jmp 0x4669f5
lea ecx, [edi + 0x40]
push eax
push ecx
push str._S_get_ValidUsers_failed._Error:__X
push 1
push str.DeviceVolumeManager
push 0x393
push str.DeviceVolumeManager.cpp
mov ecx, 0x632598
call fcn.004deb10
push eax
call fcn.004e2af0
add esp, 0x18
mov eax, dword [ebp - 0x1d4]
mov byte [ebp - 4], 0xe
test eax, eax
je 0x466a36
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x1d0]
mov byte [ebp - 4], 0xd
test eax, eax
je 0x466a4c
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov esi, dword [ebp - 0x1e4]
inc esi
mov dword [ebp - 0x1e4], esi
cmp esi, dword [ebp - 0x20c]
jl 0x466450
mov ebx, dword [ebp - 0x214]
mov edi, dword [ebp - 0x1ec]
mov byte [ebp - 4], 0xc
test ebx, ebx
je 0x466a81
mov eax, dword [ebx]
mov ecx, dword [eax + 8]
push ebx
call ecx
mov byte [ebp - 4], 8
test edi, edi
je 0x466a91
mov edx, dword [edi]
mov eax, dword [edx + 8]
push edi
call eax
cmp byte [ebp - 0x1d5], 0
mov ecx, dword [ebp - 0x1e0]
mov edx, dword [ecx]
mov dword [ebp - 0x1e0], edx
je 0x466252
cmp byte [ebp - 0x1d5], 1
jne 0x466afb
mov al, byte [ebp - 0x1e6]
test al, al
jne 0x466aed
mov dword [ebp - 0x1e4], 0
jmp 0x466b05
mov byte [ebp - 4], 0xc
test ebx, ebx
je 0x466adb
mov eax, dword [ebx]
mov ecx, dword [eax + 8]
push ebx
call ecx
mov byte [ebp - 4], 8
test edi, edi
je 0x466b05
mov edx, dword [edi]
mov eax, dword [edx + 8]
push edi
call eax
jmp 0x466b05
mov dword [ebp - 0x1e4], 4
cmp al, 1
je 0x466b05
mov dword [ebp - 0x1e4], 5
mov edx, dword [0x62c680]
mov eax, dword [edx + 0xc]
mov ecx, 0x62c680
call eax
add eax, 0x10
mov dword [ebp - 0x1d0], eax
mov ebx, dword [ebp - 0x1e4]
mov byte [ebp - 4], 0x19
mov esi, 1
test ebx, ebx
je 0x466c5d
cmp ebx, 4
je 0x466c5d
cmp ebx, 2
jne 0x466b6b
mov edi, dword [ebp - 0x1dc]
mov ecx, dword [edi + 0x78]
lea esi, [ebx + 1]
call fcn.004753b0
push eax
lea ecx, [ebp - 0x1d0]
push 0x6a
push ecx
call fcn.00465610
add esp, 0xc
jmp 0x466ca4
cmp ebx, 6
jne 0x466b95
mov edi, dword [ebp - 0x1dc]
mov ecx, dword [edi + 0x78]
call fcn.004753b0
push eax
lea edx, [ebp - 0x1d0]
push 0x6e
push edx
call fcn.00465610
add esp, 0xc
jmp 0x466ca4
mov ebx, dword [ebp - 0x1f8]
mov esi, 3
test ebx, ebx
je 0x466c35
mov eax, dword [0x62c680]
mov edx, dword [eax + 0xc]
mov ecx, 0x62c680
call edx
add eax, 0x10
mov dword [ebp - 0x1e0], eax
mov edi, dword [ebp - 0x1dc]
mov ecx, dword [edi + 0x78]
mov byte [ebp - 4], 0x1a
call fcn.004753b0
push eax
lea eax, [ebp - 0x1e0]
push 0x69
push eax
call fcn.00465610
add esp, 0xc
call fcn.004e6740
push ebx
test al, al
je 0x466c03
mov ecx, dword [ebp - 0x1e0]
push ecx
push str._E:0x_2_X____1_s_
lea edx, [ebp - 0x1d0]
push edx
jmp 0x466c16
mov eax, dword [ebp - 0x1e0]
push eax
push str._1_s___E:0x_2_X__
lea ecx, [ebp - 0x1d0]
push ecx
call fcn.00465720
add esp, 0x10
lea ecx, [ebp - 0x1e0]
mov byte [ebp - 4], 0x19
call fcn.004495a0
mov ebx, dword [ebp - 0x1e4]
jmp 0x466ca4
mov edi, dword [ebp - 0x1dc]
mov ecx, dword [edi + 0x78]
call fcn.004753b0
push eax
lea edx, [ebp - 0x1d0]
push 0x69
push edx
call fcn.00465610
mov ebx, dword [ebp - 0x1e4]
add esp, 0xc
jmp 0x466ca4
mov edi, dword [ebp - 0x1dc]
mov ecx, dword [edi + 0x78]
cmp dword [ebp - 0x208], esi
jbe 0x466c86
lea eax, [ebp - 0x130]
push eax
call fcn.004753b0
push eax
push 0x67
lea ecx, [ebp - 0x1d0]
push ecx
jmp 0x466c9c
lea edx, [ebp - 0x130]
push edx
call fcn.004753b0
push eax
push 0x68
lea eax, [ebp - 0x1d0]
push eax
call fcn.00465610
add esp, 0x10
lea ecx, [edi + 0x3c]
call fcn.0050a5e0
cmp al, 1
je 0x466cf8
cmp ebx, 3
je 0x466cf8
mov ecx, dword [edi + 0x78]
call fcn.004736e0
test al, al
jne 0x466ce0
cmp dword [edi + 0x54], 8
lea eax, [edi + 0x40]
jb 0x466ccc
mov eax, dword [eax]
push eax
push str._S_Device_detached.__Notification_not_required
push 0x14
push str.DeviceVolumeManager
push 0x408
jmp 0x466d15
call fcn.00447a60
mov ecx, dword [ebp - 0x1d0]
mov edx, dword [eax]
mov edx, dword [edx + 0x18]
push esi
push ecx
mov ecx, eax
call edx
jmp 0x466d2d
cmp dword [edi + 0x54], 8
lea eax, [edi + 0x40]
jb 0x466d03
mov eax, dword [eax]
push eax
push str._S_Device_mount_cancelled.__Notification_not_required
push 0x14
push str.DeviceVolumeManager
push 0x404
push str.DeviceVolumeManager.cpp
mov ecx, 0x632598
call fcn.004deb10
push eax
call fcn.004e2af0
add esp, 0x14
mov eax, dword [ebp - 0x1d0]
add eax, 0xfffffff0
mov byte [ebp - 4], 8
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x466d53
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [ebp - 0x1fc]
mov byte [ebp - 4], 7
test eax, eax
je 0x466d69
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
lea ecx, [ebp - 0x234]
mov byte [ebp - 4], 0x1b
call fcn.00463980
mov eax, dword [ebp - 0x234]
push eax
call fcn.00558723
mov eax, dword [ebp - 0x210]
add esp, 4
mov byte [ebp - 4], 5
test eax, eax
je 0x466d9d
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x204]
add eax, 0xfffffff0
mov byte [ebp - 4], 1
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x466dc3
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov ecx, dword [ebp - 0x23c]
mov byte [ebp - 4], 0
call fcn.0050a5c0
lea ecx, [ebp - 0x1cc]
mov dword [ebp - 4], 0xffffffff
call fcn.004372a0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00558b78
mov esp, ebp
pop ebp
ret 4