Function at 0x1000a18c0
Capabilities:
Unmount volume via ioctl

Disassembly:
mov r11, rsp
push rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x778
mov qword [rsp + 0x3b8], 0xfffffffffffffffe
mov rax, qword [0x100176150]
xor rax, rsp
mov qword [rsp + 0x760], rax
mov qword [rsp + 0x2f0], r9
mov qword [rsp + 0x2e0], r8
mov rdi, rdx
mov qword [rsp + 0x300], rdx
mov qword [rsp + 0x168], rcx
mov rax, qword [rsp + 0x7e8]
mov qword [rsp + 0x170], rax
mov rax, qword [rsp + 0x800]
mov qword [rsp + 0x190], rax
lea r12, [0x10001e260]
mov qword [r11 - 0x728], r12
lea rbx, [0x10001e610]
mov qword [r11 - 0x720], rbx
lea rsi, [0x10001e240]
mov qword [r11 - 0x718], rsi
mov dword [rsp + 0xa8], 0x210
mov dword [rsp + 0xac], 6
mov ebp, 0xff
mov dword [rsp + 0xb0], ebp
xor r14d, r14d
mov word [r11 - 0x688], r14w
mov byte [r11 - 0x686], r14b
lea r15d, [r14 + 1]
mov byte [r11 - 0x685], r15b
lea r13d, [r14 + 0x78]
mov r8, r13
xor edx, edx
lea rcx, [r11 - 0x700]
call sub.msvcrt.dll_memset
xor r8d, r8d
lea rdx, [rsp + 0x90]
lea rcx, [rsp + 0x1a0]
call fcn.1000e842c
nop
mov qword [rsp + 0x160], r14
mov rax, qword [rdi]
lea rdx, [rsp + 0x160]
mov rcx, rdi
call qword [rax + 0x80]
mov dword [rsp + 0x1a8], eax
mov qword [rsp + 0x90], r12
mov qword [rsp + 0x98], rbx
mov qword [rsp + 0xa0], rsi
mov dword [rsp + 0xa8], 0x214
mov dword [rsp + 0xac], r15d
mov dword [rsp + 0xb0], ebp
mov word [rsp + 0x130], r14w
mov byte [rsp + 0x132], r14b
mov byte [rsp + 0x133], r15b
mov r8, r13
xor edx, edx
lea rcx, [rsp + 0xb8]
call sub.msvcrt.dll_memset
lea r8, [0x10001a430]
lea rdx, [rsp + 0x90]
lea rcx, [rsp + 0x1a0]
call fcn.100052900
mov rax, qword [rdi]
lea rdx, [rsp + 0x88]
mov rcx, rdi
call qword [rax + 0x60]
mov dword [rsp + 0x1a8], eax
mov qword [rsp + 0x90], r12
mov qword [rsp + 0x98], rbx
mov qword [rsp + 0xa0], rsi
mov dword [rsp + 0xa8], 0x218
mov dword [rsp + 0xac], r15d
mov dword [rsp + 0xb0], ebp
mov word [rsp + 0x130], r14w
mov byte [rsp + 0x132], r14b
mov byte [rsp + 0x133], r15b
mov r8, r13
xor edx, edx
lea rcx, [rsp + 0xb8]
call sub.msvcrt.dll_memset
lea r8, [0x10001e680]
lea rdx, [rsp + 0x90]
lea rcx, [rsp + 0x1a0]
call fcn.100052900
mov rax, qword [rdi]
lea rdx, [rsp + 0x258]
mov rcx, rdi
call qword [rax + 0x40]
mov dword [rsp + 0x1a8], eax
mov qword [rsp + 0x90], r12
mov qword [rsp + 0x98], rbx
mov qword [rsp + 0xa0], rsi
mov dword [rsp + 0xa8], 0x21c
mov dword [rsp + 0xac], r15d
mov dword [rsp + 0xb0], ebp
mov word [rsp + 0x130], r14w
mov byte [rsp + 0x132], r14b
mov byte [rsp + 0x133], r15b
mov r8, r13
xor edx, edx
lea rcx, [rsp + 0xb8]
call sub.msvcrt.dll_memset
lea r8, [0x10001b200]
lea rdx, [rsp + 0x90]
lea rcx, [rsp + 0x1a0]
call fcn.100052900
mov rax, qword [rdi]
lea rdx, [rsp + 0x468]
mov rcx, rdi
call qword [rax + 0x18]
mov dword [rsp + 0x1a8], eax
mov qword [rsp + 0x90], r12
mov qword [rsp + 0x98], rbx
mov qword [rsp + 0xa0], rsi
mov dword [rsp + 0xa8], 0x220
mov dword [rsp + 0xac], r15d
mov dword [rsp + 0xb0], ebp
mov word [rsp + 0x130], r14w
mov byte [rsp + 0x132], r14b
mov byte [rsp + 0x133], r15b
mov r8, r13
xor edx, edx
lea rcx, [rsp + 0xb8]
call sub.msvcrt.dll_memset
lea r8, [0x10000cf50]
lea rdx, [rsp + 0x90]
lea rcx, [rsp + 0x1a0]
call fcn.100052900
mov eax, dword [rsp + 0x258]
and eax, r15d
mov dword [rsp + 0x84], eax
mov r13, qword [rsp + 0x160]
mov qword [rsp + 0x220], r14
mov qword [rsp + 0x228], r14
mov qword [rsp + 0x230], r14
mov dword [rsp + 0x238], r14d
mov dword [rsp + 0x23c], r14d
mov qword [rsp + 0x90], r12
mov qword [rsp + 0x98], rbx
mov qword [rsp + 0xa0], rsi
mov dword [rsp + 0xa8], 0x22c
mov dword [rsp + 0xac], 6
mov dword [rsp + 0xb0], ebp
mov word [rsp + 0x130], r14w
mov byte [rsp + 0x132], r14b
mov byte [rsp + 0x133], r15b
xor edx, edx
lea r8d, [r14 + 0x78]
lea rcx, [rsp + 0xb8]
call sub.msvcrt.dll_memset
lea rcx, [0x10001e6d8]
lea rax, [0x10001e6f8]
mov edi, dword [rsp + 0x7f8]
cmp edi, r14d
cmovne rax, rcx
mov ebp, dword [rsp + 0x7f0]
lea rcx, [0x10001e718]
lea r9, [0x10001e730]
cmp ebp, r14d
cmove r9, rcx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r13
lea r8, [0x10001e748]
lea rdx, [rsp + 0x90]
lea rcx, [rsp + 0x1a0]
call fcn.1000e9608
cmp ebp, r14d
jne 0x1000a1e05
lea rcx, [rsp + 0x220]
call fcn.1000ccec4
mov r8b, byte [rsp + 0x88]
mov rdx, r13
lea rcx, [rsp + 0x220]
call fcn.1000d0bf0
cmp al, r14b
jne 0x1000a1e05
mov qword [rsp + 0x90], r12
mov qword [rsp + 0x98], rbx
mov qword [rsp + 0xa0], rsi
mov dword [rsp + 0xa8], 0x239
mov dword [rsp + 0xac], 6
mov dword [rsp + 0xb0], 0xff
mov word [rsp + 0x130], r14w
mov byte [rsp + 0x132], r14b
mov byte [rsp + 0x133], r15b
xor edx, edx
lea r8d, [r14 + 0x78]
lea rcx, [rsp + 0xb8]
call sub.msvcrt.dll_memset
lea r8, [0x10001e770]
lea rdx, [rsp + 0x90]
lea rcx, [rsp + 0x1a0]
call fcn.1000e9608
nop
lea rcx, [rsp + 0x220]
call fcn.1000cce5c
nop
mov rcx, qword [rsp + 0x160]
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
nop
lea rcx, [rsp + 0x1a0]
call fcn.1000e8518
jmp 0x1000a43d0
cmp edi, r14d
je 0x1000a1e90
mov qword [rsp + 0x90], r12
mov qword [rsp + 0x98], rbx
mov qword [rsp + 0xa0], rsi
mov dword [rsp + 0xa8], 0x23f
mov dword [rsp + 0xac], r15d
mov dword [rsp + 0xb0], 0xff
mov word [rsp + 0x130], r14w
mov byte [rsp + 0x132], r14b
mov byte [rsp + 0x133], r15b
xor edx, edx
lea r8d, [rdx + 0x78]
lea rcx, [rsp + 0xb8]
call sub.msvcrt.dll_memset
mov r8d, 0x1780
lea rdx, [rsp + 0x90]
lea rcx, [rsp + 0x1a0]
call fcn.1000ecb00
jmp 0x1000a1f9d
cmp ebp, r15d
jne 0x1000a1f1b
mov qword [rsp + 0x90], r12
mov qword [rsp + 0x98], rbx
mov qword [rsp + 0xa0], rsi
mov dword [rsp + 0xa8], 0x241
mov dword [rsp + 0xac], r15d
mov dword [rsp + 0xb0], 0xff
mov word [rsp + 0x130], r14w
mov byte [rsp + 0x132], r14b
mov byte [rsp + 0x133], r15b
xor edx, edx
lea r8d, [rdx + 0x78]
lea rcx, [rsp + 0xb8]
call sub.msvcrt.dll_memset
mov r8d, 0x1782
lea rdx, [rsp + 0x90]
lea rcx, [rsp + 0x1a0]
call fcn.1000ecb00
jmp 0x1000a1f9d
cmp ebp, r14d
jne 0x1000a1f9d
mov qword [rsp + 0x90], r12
mov qword [rsp + 0x98], rbx
mov qword [rsp + 0xa0], rsi
mov dword [rsp + 0xa8], 0x243
mov dword [rsp + 0xac], r15d
mov dword [rsp + 0xb0], 0xff
mov word [rsp + 0x130], r14w
mov byte [rsp + 0x132], r14b
mov byte [rsp + 0x133], r15b
xor edx, edx
lea r8d, [rdx + 0x78]
lea rcx, [rsp + 0xb8]
call sub.msvcrt.dll_memset
mov r8d, 0x1781
lea rdx, [rsp + 0x90]
lea rcx, [rsp + 0x1a0]
call fcn.1000ecb00
mov qword [rsp + 0x90], r12
mov qword [rsp + 0x98], rbx
mov qword [rsp + 0xa0], rsi
mov dword [rsp + 0xa8], 0x245
mov dword [rsp + 0xac], r15d
mov dword [rsp + 0xb0], 0xff
mov word [rsp + 0x130], r14w
mov byte [rsp + 0x132], r14b
mov byte [rsp + 0x133], r15b
xor edx, edx
lea r8d, [rdx + 0x78]
lea rcx, [rsp + 0xb8]
call sub.msvcrt.dll_memset
mov r9, r13
mov r8d, 0x1392
lea rdx, [rsp + 0x90]
lea rcx, [rsp + 0x1a0]
call fcn.1000ecc98
mov qword [rsp + 0x90], r12
mov qword [rsp + 0x98], rbx
mov qword [rsp + 0xa0], rsi
mov dword [rsp + 0xa8], 0x246
mov dword [rsp + 0xac], r15d
mov dword [rsp + 0xb0], 0xff
mov word [rsp + 0x130], r14w
mov byte [rsp + 0x132], r14b
mov byte [rsp + 0x133], r15b
xor edx, edx
lea r8d, [rdx + 0x78]
lea rcx, [rsp + 0xb8]
call sub.msvcrt.dll_memset
movzx edx, byte [rsp + 0x477]
movzx eax, byte [rsp + 0x476]
movzx ecx, byte [rsp + 0x475]
movzx edi, byte [rsp + 0x474]
movzx r8d, byte [rsp + 0x473]
movzx r9d, byte [rsp + 0x472]
movzx r10d, byte [rsp + 0x471]
movzx r11d, byte [rsp + 0x470]
movzx ebx, word [rsp + 0x46e]
movzx esi, word [rsp + 0x46c]
mov dword [rsp + 0x70], edx
mov dword [rsp + 0x68], eax
mov dword [rsp + 0x60], ecx
mov dword [rsp + 0x58], edi
mov dword [rsp + 0x50], r8d
mov dword [rsp + 0x48], r9d
mov dword [rsp + 0x40], r10d
mov dword [rsp + 0x38], r11d
mov dword [rsp + 0x30], ebx
mov dword [rsp + 0x28], esi
mov eax, dword [rsp + 0x468]
mov dword [rsp + 0x20], eax
lea r9, [0x10000a9c0]
mov r8d, 0x1396
lea rdx, [rsp + 0x90]
lea rcx, [rsp + 0x1a0]
call fcn.1000ecd7c
mov qword [rsp + 0x90], r12
lea rdi, [0x10001e610]
mov qword [rsp + 0x98], rdi
lea rbx, [0x10001e240]
mov qword [rsp + 0xa0], rbx
mov dword [rsp + 0xa8], 0x248
mov dword [rsp + 0xac], 6
mov dword [rsp + 0xb0], 0xff
mov word [rsp + 0x130], r14w
mov byte [rsp + 0x132], r14b
mov byte [rsp + 0x133], r15b
xor edx, edx
lea r8d, [rdx + 0x78]
lea rcx, [rsp + 0xb8]
call sub.msvcrt.dll_memset
lea r8, [0x10001e800]
lea rdx, [rsp + 0x90]
lea rcx, [rsp + 0x1a0]
call fcn.1000e9608
cmp ebp, r15d
sete r12b
mov byte [rsp + 0x80], r12b
or qword [rsp + 0x218], 0xffffffffffffffff
lea rax, [0x1000228a8]
mov qword [rsp + 0x210], rax
mov qword [rsp + 0x268], r14
lea rax, [0x10000d460]
mov qword [rsp + 0x260], rax
mov byte [rsp + 0x81], r14b
lea rax, [rsp + 0x478]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x260]
lea r8, [rsp + 0x210]
mov rdx, r13
mov rsi, qword [rsp + 0x168]
mov rcx, rsi
call fcn.1000af46c
cmp al, r14b
jne 0x1000a2326
lea rax, [rsp + 0x478]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x260]
lea r8, [rsp + 0x210]
mov rdx, r13
mov rcx, rsi
call fcn.1000afc00
cmp al, r14b
jne 0x1000a231c
lea rax, [0x10001e260]
mov qword [rsp + 0x4a0], rax
mov qword [rsp + 0x4a8], rdi
mov qword [rsp + 0x4b0], rbx
mov dword [rsp + 0x4b8], 0x265
mov dword [rsp + 0x4bc], r15d
mov dword [rsp + 0x4c0], 0xff
mov word [rsp + 0x540], r14w
mov byte [rsp + 0x542], r14b
mov byte [rsp + 0x543], r15b
xor edx, edx
lea r8d, [rdx + 0x78]
lea rcx, [rsp + 0x4c8]
call sub.msvcrt.dll_memset
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r8d, eax
lea rdx, [rsp + 0x90]
lea rcx, [rsp + 0x4a0]
call fcn.1000e80d4
mov r9d, 2
mov r8, rax
mov edx, 0x3029
lea rcx, [rsp + 0x1a0]
call fcn.1000eba6c
lea rcx, [rsp + 0x4a0]
call fcn.1000e7e7c
jmp 0x1000a232e
mov byte [rsp + 0x81], r15b
jmp 0x1000a232e
mov byte [rsp + 0x81], r15b
mov dword [rsp + 0x188], r14d
mov rbx, r14
mov qword [rsp + 0x150], rbx
mov qword [rsp + 0x270], r14
mov byte [rsp + 0x298], r14b
mov byte [rsp + 0x299], r14b
mov dword [rsp + 0x29c], r14d
mov dword [rsp + 0x2a0], r14d
mov qword [rsp + 0x2a8], r14
mov dword [rsp + 0x2b0], r14d
mov dword [rsp + 0x2b4], r14d
mov dword [rsp + 0x2b8], r14d
mov qword [rsp + 0x2c0], r14
mov word [rsp + 0x2c8], r14w
mov qword [rsp + 0x2d8], r14
lea rax, [0x10000d460]
mov qword [rsp + 0x2d0], rax
xor edx, edx
lea r8d, [rdx + 0x20]
lea rcx, [rsp + 0x278]
call sub.msvcrt.dll_memset
nop
mov dword [rsp + 0x40], 0x80
mov dword [rsp + 0x38], 3
mov dword [rsp + 0x30], 0xc0000000
mov dword [rsp + 0x28], r14d
mov byte [rsp + 0x20], r14b
xor r9d, r9d
mov r8, r13
lea rdx, [rsp + 0x1a0]
lea rcx, [rsp + 0x270]
call fcn.10005330c
mov edi, eax
mov dword [rsp + 0x1a8], eax
cmp eax, r14d
jge 0x1000a26e2
cmp eax, 0x80042308
jne 0x1000a253d
lea rax, [0x10001e260]
mov qword [rsp + 0x4a0], rax
lea rax, [0x10001e610]
mov qword [rsp + 0x4a8], rax
lea rax, [0x10001e240]
mov qword [rsp + 0x4b0], rax
mov dword [rsp + 0x4b8], 0x286
mov dword [rsp + 0x4bc], r15d
mov dword [rsp + 0x4c0], 0xff
mov word [rsp + 0x540], r14w
mov byte [rsp + 0x542], r14b
mov byte [rsp + 0x543], r15b
xor edx, edx
lea r8d, [rdx + 0x78]
lea rcx, [rsp + 0x4c8]
call sub.msvcrt.dll_memset
mov r8, r13
lea rdx, [rsp + 0x90]
lea rcx, [rsp + 0x4a0]
call fcn.1000e825c
mov r9d, 2
mov r8, rax
mov edx, 0x302a
lea rcx, [rsp + 0x1a0]
call fcn.1000eba6c
lea rcx, [rsp + 0x4a0]
call fcn.1000e7e7c
nop
lea rcx, [rsp + 0x270]
call fcn.100053268
nop
mov rcx, qword [rsp + 0x268]
cmp rcx, r14
je 0x1000a24f9
call qword [sym.imp.ole32.dll_CoTaskMemFree]
nop
mov rcx, qword [rsp + 0x218]
cmp rcx, 0xffffffffffffffff
je 0x1000a250e
call qword [sym.imp.SETUPAPI.dll_SetupDiDestroyDeviceInfoList]
nop
lea rcx, [rsp + 0x220]
call fcn.1000cce5c
nop
mov rcx, qword [rsp + 0x160]
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
nop
lea rcx, [rsp + 0x1a0]
call fcn.1000e8518
jmp 0x1000a43d0
cmp r12b, r14b
je 0x1000a2647
lea rax, [0x10001e260]
mov qword [rsp + 0x90], rax
lea rax, [0x10001e610]
mov qword [rsp + 0x98], rax
lea rax, [0x10001e240]
mov qword [rsp + 0xa0], rax
mov dword [rsp + 0xa8], 0x28c
mov dword [rsp + 0xac], r15d
mov dword [rsp + 0xb0], 0xff
mov word [rsp + 0x130], r14w
mov byte [rsp + 0x132], r14b
mov byte [rsp + 0x133], r15b
xor edx, edx
lea r8d, [rdx + 0x78]
lea rcx, [rsp + 0xb8]
call sub.msvcrt.dll_memset
mov dword [rsp + 0x20], edi
mov r9, r13
lea r8, [0x10001e8a0]
lea rdx, [rsp + 0x90]
lea rcx, [rsp + 0x1a0]
call fcn.1000eb470
nop
lea rcx, [rsp + 0x270]
call fcn.100053268
nop
mov rcx, qword [rsp + 0x268]
cmp rcx, r14
je 0x1000a2603
call qword [sym.imp.ole32.dll_CoTaskMemFree]
nop
mov rcx, qword [rsp + 0x218]
cmp rcx, 0xffffffffffffffff
je 0x1000a2618
call qword [sym.imp.SETUPAPI.dll_SetupDiDestroyDeviceInfoList]
nop
lea rcx, [rsp + 0x220]
call fcn.1000cce5c
nop
mov rcx, qword [rsp + 0x160]
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
nop
lea rcx, [rsp + 0x1a0]
call fcn.1000e8518
jmp 0x1000a43d0
lea rax, [0x10001e260]
mov qword [rsp + 0x90], rax
lea rax, [0x10001e610]
mov qword [rsp + 0x98], rax
lea rax, [0x10001e240]
mov qword [rsp + 0xa0], rax
mov dword [rsp + 0xa8], 0x290
mov dword [rsp + 0xac], r15d
mov dword [rsp + 0xb0], 0xff
mov word [rsp + 0x130], r14w
mov byte [rsp + 0x132], r14b
mov byte [rsp + 0x133], r15b
xor edx, edx
lea r8d, [rdx + 0x78]
lea rcx, [rsp + 0xb8]
call sub.msvcrt.dll_memset
mov dword [rsp + 0x20], edi
mov r9, r13
lea r8, [0x10001e8a0]
lea rdx, [rsp + 0x90]
lea rcx, [rsp + 0x1a0]
call fcn.1000ea04c
int3
mov qword [rsp + 0x30], r14
mov byte [rsp + 0x28], r14b
mov dword [rsp + 0x20], r14d
xor r9d, r9d
mov r8d, 0x560000
lea rdx, [rsp + 0x1a0]
lea rcx, [rsp + 0x270]
call fcn.100053a50
mov edi, eax
mov dword [rsp + 0x1a8], eax
cmp eax, r14d
jge 0x1000a27bc
lea rax, [0x10001e260]
mov qword [rsp + 0x90], rax
lea rax, [0x10001e610]
mov qword [rsp + 0x98], rax
lea rax, [0x10001e240]
mov qword [rsp + 0xa0], rax
mov dword [rsp + 0xa8], 0x29b
mov dword [rsp + 0xac], r15d
mov dword [rsp + 0xb0], 0xff
mov word [rsp + 0x130], r14w
mov byte [rsp + 0x132], r14b
mov byte [rsp + 0x133], r15b
xor edx, edx
lea r8d, [rdx + 0x78]
lea rcx, [rsp + 0xb8]
call sub.msvcrt.dll_memset
mov dword [rsp + 0x20], edi
mov r9, r13
lea r8, [0x10001e8f0]
lea rdx, [rsp + 0x90]
lea rcx, [rsp + 0x1a0]
call fcn.1000ea04c
int3
mov rax, qword [rsp + 0x2c0]
mov qword [rsp + 0x180], rax
mov qword [rsp + 0x2c0], r14
mov dword [rsp + 0x2b4], r14d
mov dword [rsp + 0x2b0], r14d
mov dword [rsp + 0x2b8], r14d
mov qword [rsp + 0x3b0], rax
mov ecx, dword [rax]
mov dword [rsp + 0x158], ecx
add rax, 8
mov qword [rsp + 0x178], rax
cmp ebp, r14d
jne 0x1000a284e
lea r9, [rsp + 0x188]
lea r8, [rsp + 0x150]
mov edx, dword [rax]
lea rcx, [rsp + 0x220]
call fcn.1000cf420
cmp al, r14b
je 0x1000a2846
mov al, r15b
mov byte [rsp + 0x89], al
mov rbx, qword [rsp + 0x150]
jmp 0x1000a2858
mov rbx, qword [rsp + 0x150]
mov al, r14b
mov byte [rsp + 0x89], al
mov qword [rsp + 0x3a8], rbx
lea rcx, [0x1000228b0]
mov qword [rsp + 0x3a0], rcx
mov rdi, r14
mov qword [rsp + 0x250], r14
mov qword [rsp + 0x198], r14
mov r15, r14
mov qword [rsp + 0x240], r14
mov dword [rsp + 0x248], r14d
mov dword [rsp + 0x24c], r14d
mov rbp, r14
mov qword [rsp + 0x310], r14
lea rcx, [0x1000228a0]
mov qword [rsp + 0x308], rcx
mov qword [rsp + 0x320], r14
lea rcx, [0x100039468]
mov qword [rsp + 0x318], rcx
xor r12d, r12d
cmp dword [rsp + 0x84], r12d
je 0x1000a2933
cmp al, r12b
je 0x1000a2933
lea rax, [rsp + 0x250]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x198]
lea r8, [rsp + 0x240]
mov rdx, r13
mov rcx, rsi
call fcn.1000a43fc
mov rbp, qword [rsp + 0x198]
mov qword [rsp + 0x310], rbp
mov rdi, qword [rsp + 0x250]
mov r14, rdi
mov qword [rsp + 0x320], rdi
mov r15, qword [rsp + 0x240]
mov dword [rsp + 0x29c], r12d
mov dword [rsp + 0x2b0], r12d
mov qword [rsp + 0x30], r12
mov byte [rsp + 0x28], r12b
mov dword [rsp + 0x20], r12d
xor r9d, r9d
mov r8d, 0x90018
lea rdx, [rsp + 0x1a0]
lea rcx, [rsp + 0x270]
call fcn.100053a50
mov r12d, eax
mov dword [rsp + 0x1a8], eax
xor eax, eax
cmp r12d, eax
jge 0x1000a2a1c
lea rcx, [0x10001e260]
mov qword [rsp + 0x90], rcx
lea rcx, [0x10001e610]
mov qword [rsp + 0x98], rcx
lea rcx, [0x10001e240]
mov qword [rsp + 0xa0], rcx
mov dword [rsp + 0xa8], 0x2cb
lea ecx, [rax + 1]
mov dword [rsp + 0xac], ecx
mov dword [rsp + 0xb0], 0xff
mov word [rsp + 0x130], ax
mov byte [rsp + 0x132], al
mov byte [rsp + 0x133], cl
xor edx, edx
lea r8d, [rax + 0x78]
lea rcx, [rsp + 0xb8]
call sub.msvcrt.dll_memset
mov r9d, r12d
lea r8, [0x10001e950]
lea rdx, [rsp + 0x90]
lea rcx, [rsp + 0x1a0]
call fcn.1000e9608
xor eax, eax
mov dword [rsp + 0x29c], eax
mov dword [rsp + 0x2b0], eax
mov qword [rsp + 0x30], rax
mov byte [rsp + 0x28], al
mov dword [rsp + 0x20], eax
xor r9d, r9d
mov r8d, 0x90020
lea rdx, [rsp + 0x1a0]
lea rcx, [rsp + 0x270]
call fcn.100053a50
mov r12d, eax
mov dword [rsp + 0x1a8], eax
xor eax, eax
cmp r12d, eax
jge 0x1000a2bdf
lea rcx, [0x10001e260]
mov qword [rsp + 0x4a0], rcx
lea rcx, [0x10001e610]
mov qword [rsp + 0x4a8], rcx
lea rcx, [0x10001e240]
mov qword [rsp + 0x4b0], rcx
mov dword [rsp + 0x4b8], 0x2d5
lea ecx, [rax + 1]
mov dword [rsp + 0x4bc], ecx
mov dword [rsp + 0x4c0], 0xff
mov word [rsp + 0x540], ax
mov byte [rsp + 0x542], al
mov byte [rsp + 0x543], cl
xor edx, edx
lea r8d, [rax + 0x78]
lea rcx, [rsp + 0x4c8]
call sub.msvcrt.dll_memset
mov r8d, r12d
lea rdx, [rsp + 0x90]
lea rcx, [rsp + 0x4a0]
call fcn.1000e7fa0
mov r12b, byte [rsp + 0x80]
mov cl, r12b
neg cl
sbb r9w, r9w
neg r9w
inc r9w
mov r8, rax
mov edx, 0x302b
lea rcx, [rsp + 0x1a0]
call fcn.1000eba6c
lea rcx, [rsp + 0x4a0]
call fcn.1000e7e7c
xor eax, eax
cmp r12b, al
jne 0x1000a2bdf
lea rcx, [0x10001e260]
mov qword [rsp + 0x90], rcx
lea rcx, [0x10001e610]
mov qword [rsp + 0x98], rcx
lea rcx, [0x10001e240]
mov qword [rsp + 0xa0], rcx
mov dword [rsp + 0xa8], 0x2d8
lea ecx, [rax + 1]
mov dword [rsp + 0xac], ecx
mov dword [rsp + 0xb0], 0xff
mov word [rsp + 0x130], ax
mov byte [rsp + 0x132], al
mov byte [rsp + 0x133], cl
xor edx, edx
lea r8d, [rax + 0x78]
lea rcx, [rsp + 0xb8]
call sub.msvcrt.dll_memset
mov edx, dword [rsp + 0x1a8]
mov dword [rsp + 0x20], edx
mov r9, r13
lea r8, [0x10001e9a0]
lea rdx, [rsp + 0x90]
lea rcx, [rsp + 0x1a0]
call fcn.1000ea04c
int3
mov dword [rsp + 0x29c], eax
mov dword [rsp + 0x2b0], eax
mov qword [rsp + 0x30], rax
mov byte [rsp + 0x28], al
mov dword [rsp + 0x20], eax
xor r9d, r9d
mov r8d, 0x56c00c
lea rdx, [rsp + 0x1a0]
lea rcx, [rsp + 0x270]
call fcn.100053a50
mov r12d, eax
mov dword [rsp + 0x1a8], eax
xor eax, eax
cmp r12d, eax
jge 0x1000a2cc4
lea rcx, [0x10001e260]
mov qword [rsp + 0x90], rcx
lea rcx, [0x10001e610]
mov qword [rsp + 0x98], rcx
lea rcx, [0x10001e240]
mov qword [rsp + 0xa0], rcx
mov dword [rsp + 0xa8], 0x2e3
lea ecx, [rax + 1]
mov dword [rsp + 0xac], ecx
mov dword [rsp + 0xb0], 0xff
mov word [rsp + 0x130], ax
mov byte [rsp + 0x132], al
mov byte [rsp + 0x133], cl
xor edx, edx
lea r8d, [rax + 0x78]
lea rcx, [rsp + 0xb8]
call sub.msvcrt.dll_memset
mov r9d, r12d
lea r8, [0x10001ea00]
lea rdx, [rsp + 0x90]
lea rcx, [rsp + 0x1a0]
call fcn.1000e9608
xor eax, eax
mov rcx, qword [rsp + 0x270]
cmp rcx, rax
je 0x1000a2cd9
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor eax, eax
mov qword [rsp + 0x270], rax
mov dword [rsp + 0x29c], eax
mov dword [rsp + 0x2b0], eax
mov dword [rsp + 0x2b8], eax
mov ecx, 1
cmp dword [rsp + 0x7f0], ecx
je 0x1000a2d11
cmp byte [rsp + 0x89], al
je 0x1000a2ed5
lea rdx, [0x10001e260]
mov qword [rsp + 0x90], rdx
lea rdx, [0x10001e610]
mov qword [rsp + 0x98], rdx
lea rdx, [0x10001e240]
mov qword [rsp + 0xa0], rdx
mov dword [rsp + 0xa8], 0x2fa
mov dword [rsp + 0xac], ecx
mov dword [rsp + 0xb0], 0xff
mov word [rsp + 0x130], ax
mov byte [rsp + 0x132], al
mov byte [rsp + 0x133], cl
xor edx, edx
lea r8d, [rdx + 0x78]
lea rcx, [rsp + 0xb8]
call sub.msvcrt.dll_memset
mov r9, r13
lea r8, [0x10001ea60]
lea rdx, [rsp + 0x90]
lea rcx, [rsp + 0x1a0]
call fcn.1000e9608
mov r12, rdi
xor eax, eax
cmp rdi, rax
je 0x1000a2ed0
xor esi, esi
lea ebx, [rax + 1]
lea r15, [0x10001e260]
lea rbp, [0x10001e610]
lea r14, [0x10001e240]
xor eax, eax
or rcx, 0xffffffffffffffff
mov rdi, r12
repne scasw ax, word [rdi]
not rcx
cmp rcx, rbx
je 0x1000a2ea1
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_DeleteVolumeMountPointW]
cmp eax, esi
jne 0x1000a2e81
mov qword [rsp + 0x90], r15
mov qword [rsp + 0x98], rbp
mov qword [rsp + 0xa0], r14
mov dword [rsp + 0xa8], 0x301
mov dword [rsp + 0xac], ebx
mov dword [rsp + 0xb0], 0xff
mov word [rsp + 0x130], si
mov byte [rsp + 0x132], sil
mov byte [rsp + 0x133], bl
xor edx, edx
lea r8d, [rdx + 0x78]
lea rcx, [rsp + 0xb8]
call sub.msvcrt.dll_memset
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], r13
mov r9, r12
lea r8, [0x10001eac0]
lea rdx, [rsp + 0x90]
lea rcx, [rsp + 0x1a0]
call fcn.1000e9608
xor eax, eax
or rcx, 0xffffffffffffffff
mov rdi, r12
repne scasw ax, word [rdi]
not rcx
sub rcx, rbx
lea r12, [r12 + rcx*2 + 2]
cmp r12, rsi
jne 0x1000a2dcb
mov rbx, qword [rsp + 0x150]
mov rbp, qword [rsp + 0x310]
mov r14, qword [rsp + 0x320]
mov r15, qword [rsp + 0x240]
mov rsi, qword [rsp + 0x168]
xor eax, eax
lea ecx, [rax + 1]
jmp 0x1000a2ed5
mov ecx, 1
lea rdx, [0x10001e260]
mov qword [rsp + 0x90], rdx
lea rdx, [0x10001e610]
mov qword [rsp + 0x98], rdx
lea rdx, [0x10001e240]
mov qword [rsp + 0xa0], rdx
mov dword [rsp + 0xa8], 0x30a
mov dword [rsp + 0xac], ecx
mov dword [rsp + 0xb0], 0xff
mov word [rsp + 0x130], ax
mov byte [rsp + 0x132], al
mov byte [rsp + 0x133], cl
xor edx, edx
lea r8d, [rdx + 0x78]
lea rcx, [rsp + 0xb8]
call sub.msvcrt.dll_memset
mov r12, qword [rsp + 0x268]
mov r9, r12
lea r8, [0x10001eb38]
lea rdx, [rsp + 0x90]
lea rcx, [rsp + 0x1a0]
call fcn.1000e9608
xor ecx, ecx
cmp byte [rsp + 0x81], cl
je 0x1000a2fb4
lea r8, [rsp + 0x478]
mov rdi, qword [rsp + 0x218]
mov rdx, rdi
mov rcx, rsi
call fcn.1000b0228
cmp rdi, 0xffffffffffffffff
je 0x1000a2fa4
mov rcx, rdi
call qword [sym.imp.SETUPAPI.dll_SetupDiDestroyDeviceInfoList]
or rdi, 0xffffffffffffffff
mov qword [rsp + 0x218], rdi
xor ecx, ecx
jmp 0x1000a2fbc
mov rdi, qword [rsp + 0x218]
cmp byte [rsp + 0x88], cl
je 0x1000a35a2
mov qword [rsp + 0x138], rcx
mov dword [rsp + 0x140], ecx
mov dword [rsp + 0x144], ecx
mov eax, dword [rsp + 0x7f8]
mov dword [rsp + 0x148], eax
mov dword [rsp + 0x150], ecx
cmp dword [rsp + 0x158], ecx
jbe 0x1000a3127
mov rax, qword [rsp + 0x178]
lea rdx, [rsp + 0x138]
mov ecx, dword [rax]
call fcn.1000cb5b4
xor edx, edx
cmp al, dl
jne 0x1000a30d5
movsxd r13, dword [rsp + 0x140]
lea eax, [r13 + 1]
cmp eax, edx
jle 0x1000a3107
mov ecx, dword [rsp + 0x144]
cmp r13d, ecx
jne 0x1000a30b1
cmp r13d, 0x3fffffff
jg 0x1000a3107
movabs r8, 0x1fffffffffffffff
cmp r13, r8
ja 0x1000a3107
lea eax, [r13 + r13]
cmp ecx, edx
lea ecx, [rdx + 1]
cmove eax, ecx
mov dword [rsp + 0x84], eax
movsxd rdx, eax
shl rdx, 2
mov rcx, qword [rsp + 0x138]
call qword [sym.imp.msvcrt.dll_realloc]
mov r11, rax
xor edx, edx
cmp rax, rdx
je 0x1000a3107
mov eax, dword [rsp + 0x84]
mov dword [rsp + 0x144], eax
mov qword [rsp + 0x138], r11
lea eax, [r13 + 1]
jmp 0x1000a30b9
mov r11, qword [rsp + 0x138]
mov dword [rsp + 0x140], eax
lea rcx, [r11 + r13*4]
cmp rcx, rdx
je 0x1000a30d5
mov rax, qword [rsp + 0x178]
mov eax, dword [rax]
mov dword [rcx], eax
mov ecx, dword [rsp + 0x150]
inc ecx
mov dword [rsp + 0x150], ecx
mov rax, qword [rsp + 0x178]
add rax, 0x18
mov qword [rsp + 0x178], rax
cmp ecx, dword [rsp + 0x158]
jae 0x1000a3127
jmp 0x1000a3009
mov dword [rsp + 0x84], 0x8007000e
lea rdx, [0x1001731d8]
lea rcx, [rsp + 0x84]
call sub.msvcrt.dll__CxxThrowException
int3
lea rdx, [rsp + 0x138]
mov rcx, rsi
call fcn.1000aceec
xor r10d, r10d
mov r13d, r10d
mov edx, dword [rsp + 0x140]
cmp edx, r10d
jle 0x1000a31e9
mov rcx, r10
mov qword [rsp + 0x198], rcx
lea r11d, [r10 + 1]
cmp rcx, r10
jl 0x1000a31d4
cmp r13d, edx
jge 0x1000a31d4
mov rax, qword [rsp + 0x138]
mov dl, byte [rsp + 0x80]
mov byte [rsp + 0x28], dl
mov edx, dword [rsp + 0x7e0]
mov dword [rsp + 0x20], edx
mov r9, qword [rsp + 0x2f0]
mov r8, qword [rsp + 0x2e0]
mov edx, dword [rax + rcx]
mov rcx, rsi
call fcn.1000aac8c
xor r10d, r10d
cmp al, r10b
je 0x1000a34c7
lea r11d, [r10 + 1]
add r13d, r11d
mov rcx, qword [rsp + 0x198]
add rcx, 4
mov qword [rsp + 0x198], rcx
mov edx, dword [rsp + 0x140]
cmp r13d, edx
jl 0x1000a315c
jmp 0x1000a31ef
xor r9d, r9d
xor r8d, r8d
mov edx, r11d
mov ecx, 0xc000008c
call qword [sym.imp.KERNEL32.dll_RaiseException]
mov r11d, 1
mov rax, qword [rsp + 0x170]
mov byte [rax], r11b
cmp dword [rsp + 0x7f8], r10d
je 0x1000a34a4
mov r13d, r10d
cmp edx, r10d
jle 0x1000a33c9
mov rax, r10
mov qword [rsp + 0x168], rax
mov rsi, qword [rsp + 0x190]
cmp rax, r10
jl 0x1000a33b4
cmp r13d, edx
jge 0x1000a33b4
mov rax, qword [rsp + 0x138]
mov rdx, rsi
mov rcx, qword [rsp + 0x168]
mov ecx, dword [rax + rcx]
call fcn.1000cb5b4
xor r10d, r10d
cmp al, r10b
jne 0x1000a3346
mov edx, dword [rsp + 0x140]
cmp r13d, edx
jge 0x1000a339e
mov r9, qword [rsp + 0x138]
mov qword [rsp + 0x170], r9
mov r8, qword [rsp + 0x190]
movsxd rsi, dword [r8 + 8]
lea eax, [rsi + 1]
cmp eax, r10d
jle 0x1000a337e
cmp esi, dword [r8 + 0xc]
jne 0x1000a3316
cmp esi, 0x3fffffff
jg 0x1000a337e
movabs rcx, 0x1fffffffffffffff
cmp rsi, rcx
ja 0x1000a337e
lea eax, [rsi + rsi]
cmp dword [r8 + 0xc], r10d
lea ecx, [r10 + 1]
cmove eax, ecx
mov dword [rsp + 0x84], eax
movsxd rdx, eax
shl rdx, 2
mov rcx, qword [r8]
call qword [sym.imp.msvcrt.dll_realloc]
xor r10d, r10d
cmp rax, r10
je 0x1000a337e
mov ecx, dword [rsp + 0x84]
mov r8, qword [rsp + 0x190]
mov dword [r8 + 0xc], ecx
mov qword [r8], rax
mov edx, dword [rsp + 0x140]
lea eax, [rsi + 1]
mov r9, qword [rsp + 0x170]
mov dword [r8 + 8], eax
mov rax, qword [r8]
lea r8, [rax + rsi*4]
cmp r8, r10
je 0x1000a334f
mov rax, qword [rsp + 0x168]
mov eax, dword [r9 + rax]
mov dword [r8], eax
mov edx, dword [rsp + 0x140]
mov rsi, qword [rsp + 0x190]
jmp 0x1000a3357
mov edx, dword [rsp + 0x140]
jmp 0x1000a3357
mov rsi, qword [rsp + 0x190]
mov r11d, 1
add r13d, r11d
mov rax, qword [rsp + 0x168]
add rax, 4
mov qword [rsp + 0x168], rax
cmp r13d, edx
jge 0x1000a33c9
jmp 0x1000a3227
mov dword [rsp + 0x84], 0x8007000e
lea rdx, [0x1001731d8]
lea rcx, [rsp + 0x84]
call sub.msvcrt.dll__CxxThrowException
int3
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 1]
mov ecx, 0xc000008c
call qword [sym.imp.KERNEL32.dll_RaiseException]
xor r9d, r9d
xor r8d, r8d
mov edx, r11d
mov ecx, 0xc000008c
call qword [sym.imp.KERNEL32.dll_RaiseException]
mov rcx, qword [rsp + 0x138]
cmp rcx, r10
je 0x1000a33e7
call qword [sym.imp.msvcrt.dll_free]
xor r10d, r10d
mov qword [rsp + 0x138], r10
mov dword [rsp + 0x140], r10d
mov dword [rsp + 0x144], r10d
cmp r14, r10
je 0x1000a3408
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_LocalFree]
xor r10d, r10d
cmp rbp, r10
je 0x1000a3418
mov rcx, rbp
call sub.NETAPI32.dll_NetApiBufferFree
xor r10d, r10d
cmp r15, r10
je 0x1000a3429
mov rcx, r15
call qword [sym.imp.msvcrt.dll_free]
xor r10d, r10d
cmp rbx, r10
je 0x1000a3437
mov rcx, rbx
call fcn.1001308d8
nop
mov rcx, qword [rsp + 0x180]
call qword [sym.imp.msvcrt.dll_free]
nop
lea rcx, [rsp + 0x270]
call fcn.100053268
nop
xor ecx, ecx
cmp r12, rcx
je 0x1000a3465
mov rcx, r12
call qword [sym.imp.ole32.dll_CoTaskMemFree]
nop
cmp rdi, 0xffffffffffffffff
je 0x1000a3475
mov rcx, rdi
call qword [sym.imp.SETUPAPI.dll_SetupDiDestroyDeviceInfoList]
nop
lea rcx, [rsp + 0x220]
call fcn.1000cce5c
nop
mov rcx, qword [rsp + 0x160]
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
nop
lea rcx, [rsp + 0x1a0]
call fcn.1000e8518
jmp 0x1000a43d0
lea rdx, [rsp + 0x138]
mov rcx, rsi
call fcn.1000ac6f8
lea rdx, [rsp + 0x138]
mov rcx, rsi
call fcn.1000abc20
xor r10d, r10d
mov rcx, qword [rsp + 0x138]
cmp rcx, r10
je 0x1000a34e5
call qword [sym.imp.msvcrt.dll_free]
xor r10d, r10d
mov qword [rsp + 0x138], r10
mov dword [rsp + 0x140], r10d
mov dword [rsp + 0x144], r10d
cmp r14, r10
je 0x1000a3506
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_LocalFree]
xor r10d, r10d
cmp rbp, r10
je 0x1000a3516
mov rcx, rbp
call sub.NETAPI32.dll_NetApiBufferFree
xor r10d, r10d
cmp r15, r10
je 0x1000a3527
mov rcx, r15
call qword [sym.imp.msvcrt.dll_free]
xor r10d, r10d
cmp rbx, r10
je 0x1000a3535
mov rcx, rbx
call fcn.1001308d8
nop
mov rcx, qword [rsp + 0x180]
call qword [sym.imp.msvcrt.dll_free]
nop
lea rcx, [rsp + 0x270]
call fcn.100053268
nop
xor ecx, ecx
cmp r12, rcx
je 0x1000a3563
mov rcx, r12
call qword [sym.imp.ole32.dll_CoTaskMemFree]
nop
cmp rdi, 0xffffffffffffffff
je 0x1000a3573
mov rcx, rdi
call qword [sym.imp.SETUPAPI.dll_SetupDiDestroyDeviceInfoList]
nop
lea rcx, [rsp + 0x220]
call fcn.1000cce5c
nop
mov rcx, qword [rsp + 0x160]
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
nop
lea rcx, [rsp + 0x1a0]
call fcn.1000e8518
jmp 0x1000a43d0
mov rax, qword [rsp + 0x178]
mov ecx, dword [rax]
mov dword [rsp + 0x150], ecx
mov al, byte [rsp + 0x80]
mov byte [rsp + 0x28], al
mov eax, dword [rsp + 0x7e0]
mov dword [rsp + 0x20], eax
mov r9, qword [rsp + 0x2f0]
mov r8, qword [rsp + 0x2e0]
mov edx, ecx
mov rcx, rsi
call fcn.1000aac8c
xor ecx, ecx
cmp al, cl
jne 0x1000a3730
lea rax, [0x10001e260]
mov qword [rsp + 0x90], rax
lea rax, [0x10001e610]
mov qword [rsp + 0x98], rax
lea rax, [0x10001e240]
mov qword [rsp + 0xa0], rax
mov dword [rsp + 0xa8], 0x367
lea eax, [rcx + 1]
mov dword [rsp + 0xac], eax
mov dword [rsp + 0xb0], 0xff
xor esi, esi
mov word [rsp + 0x130], si
mov byte [rsp + 0x132], sil
mov byte [rsp + 0x133], al
xor edx, edx
lea r8d, [rcx + 0x78]
lea rcx, [rsp + 0xb8]
call sub.msvcrt.dll_memset
mov r9d, dword [rsp + 0x150]
lea r8, [0x10001eb80]
lea rdx, [rsp + 0x90]
lea rcx, [rsp + 0x1a0]
call fcn.1000e9608
nop
cmp r14, rsi
je 0x1000a369a
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_LocalFree]
nop
cmp rbp, rsi
je 0x1000a36a8
mov rcx, rbp
call sub.NETAPI32.dll_NetApiBufferFree
nop
cmp r15, rsi
je 0x1000a36b7
mov rcx, r15
call qword [sym.imp.msvcrt.dll_free]
nop
cmp rbx, rsi
je 0x1000a36c5
mov rcx, rbx
call fcn.1001308d8
nop
mov rcx, qword [rsp + 0x180]
call qword [sym.imp.msvcrt.dll_free]
nop
lea rcx, [rsp + 0x270]
call fcn.100053268
nop
cmp r12, rsi
je 0x1000a36f1
mov rcx, r12
call qword [sym.imp.ole32.dll_CoTaskMemFree]
nop
cmp rdi, 0xffffffffffffffff
je 0x1000a3701
mov rcx, rdi
call qword [sym.imp.SETUPAPI.dll_SetupDiDestroyDeviceInfoList]
nop
lea rcx, [rsp + 0x220]
call fcn.1000cce5c
nop
mov rcx, qword [rsp + 0x160]
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
nop
lea rcx, [rsp + 0x1a0]
call fcn.1000e8518
jmp 0x1000a43d0
mov eax, 1
cmp dword [rsp + 0x7f0], eax
jne 0x1000a38b2
xor r13d, r13d
mov qword [rsp + 0x138], r13
mov dword [rsp + 0x140], r13d
mov dword [rsp + 0x144], r13d
lea edx, [rax + 3]
xor ecx, ecx
call qword [sym.imp.msvcrt.dll_realloc]
cmp rax, r13
je 0x1000a3892
lea ecx, [r13 + 1]
mov dword [rsp + 0x144], ecx
mov qword [rsp + 0x138], rax
mov dword [rsp + 0x140], ecx
mov r8d, dword [rsp + 0x150]
mov dword [rax], r8d
mov eax, dword [rsp + 0x7f8]
mov dword [rsp + 0x148], eax
lea rdx, [rsp + 0x138]
mov rcx, rsi
call fcn.1000abc20
mov rax, qword [rsp + 0x170]
lea ecx, [r13 + 1]
mov byte [rax], cl
mov rcx, qword [rsp + 0x138]
cmp rcx, r13
je 0x1000a37dd
call qword [sym.imp.msvcrt.dll_free]
mov qword [rsp + 0x138], r13
mov dword [rsp + 0x140], r13d
mov dword [rsp + 0x144], r13d
cmp r14, r13
je 0x1000a37fc
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_LocalFree]
nop
cmp rbp, r13
je 0x1000a380a
mov rcx, rbp
call sub.NETAPI32.dll_NetApiBufferFree
nop
cmp r15, r13
je 0x1000a3819
mov rcx, r15
call qword [sym.imp.msvcrt.dll_free]
nop
cmp rbx, r13
je 0x1000a3827
mov rcx, rbx
call fcn.1001308d8
nop
mov rcx, qword [rsp + 0x180]
call qword [sym.imp.msvcrt.dll_free]
nop
lea rcx, [rsp + 0x270]
call fcn.100053268
nop
cmp r12, r13
je 0x1000a3853
mov rcx, r12
call qword [sym.imp.ole32.dll_CoTaskMemFree]
nop
cmp rdi, 0xffffffffffffffff
je 0x1000a3863
mov rcx, rdi
call qword [sym.imp.SETUPAPI.dll_SetupDiDestroyDeviceInfoList]
nop
lea rcx, [rsp + 0x220]
call fcn.1000cce5c
nop
mov rcx, qword [rsp + 0x160]
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
nop
lea rcx, [rsp + 0x1a0]
call fcn.1000e8518
jmp 0x1000a43d0
mov dword [rsp + 0x84], 0x8007000e
lea rdx, [0x1001731d8]
lea rcx, [rsp + 0x84]
call sub.msvcrt.dll__CxxThrowException
nop
mov dword [rsp + 0x158], ecx
lea rdx, [0x10017743c]
mov ecx, 0x28
call fcn.100130fb4
mov rsi, rax
xor eax, eax
cmp rsi, rax
jne 0x1000a3971
lea rcx, [0x10001e260]
mov qword [rsp + 0x90], rcx
lea rcx, [0x10001e610]
mov qword [rsp + 0x98], rcx
lea rcx, [0x10001e240]
mov qword [rsp + 0xa0], rcx
mov dword [rsp + 0xa8], 0x38a
lea ecx, [rax + 1]
mov dword [rsp + 0xac], ecx
mov dword [rsp + 0xb0], 0xff
mov word [rsp + 0x130], ax
mov byte [rsp + 0x132], al
mov byte [rsp + 0x133], cl
xor edx, edx
lea r8d, [rax + 0x78]
lea rcx, [rsp + 0xb8]
call sub.msvcrt.dll_memset
lea r9, [0x10001ebd0]
mov r8d, 0x8007000e
lea rdx, [rsp + 0x90]
lea rcx, [rsp + 0x1a0]
call fcn.1000e97ec
int3
xor edx, edx
lea r8d, [rdx + 0x28]
mov rcx, rsi
call sub.msvcrt.dll_memset
mov rax, qword [rsp + 0x178]
mov qword [rsi + 0x10], rax
mov qword [rsi], rbx
mov eax, dword [rsp + 0x188]
mov dword [rsi + 8], eax
xor ecx, ecx
mov qword [rsp + 0x2e8], rcx
lea rax, [0x100039468]
mov qword [rsp + 0x2e0], rax
mov qword [rsp + 0x2f8], rsi
lea rax, [0x1000228b0]
mov qword [rsp + 0x2f0], rax
lea rax, [rsp + 0x158]
mov qword [rsp + 0x20], rax
mov r9, rsi
mov r8d, dword [rsp + 0x150]
lea rdx, [rsp + 0x220]
mov rcx, qword [rsp + 0x168]
call fcn.1000a4ed4
xor ecx, ecx
cmp al, cl
jne 0x1000a3d0a
mov word [rsp + 0x4a0], cx
xor edx, edx
lea r8d, [rcx + 0x7e]
lea rcx, [rsp + 0x4a2]
call sub.msvcrt.dll_memset
mov dword [rsp + 0x20], 0x40
lea r9, [rsp + 0x4a0]
mov r8d, dword [rsp + 0x150]
lea rdx, [rsp + 0x1a0]
mov rcx, qword [rsp + 0x168]
call fcn.1000c617c
xor ecx, ecx
cmp dword [rsp + 0x158], ecx
je 0x1000a3b98
lea rsi, [0x10001e260]
mov qword [rsp + 0x90], rsi
lea rbp, [0x10001e610]
mov qword [rsp + 0x98], rbp
lea r12, [0x10001e240]
mov qword [rsp + 0xa0], r12
mov dword [rsp + 0xa8], 0x3a5
mov dword [rsp + 0xac], 6
mov r14d, 0xff
mov dword [rsp + 0xb0], r14d
xor edi, edi
mov word [rsp + 0x130], di
mov byte [rsp + 0x132], dil
lea ebx, [rcx + 1]
mov byte [rsp + 0x133], bl
lea r15d, [rcx + 0x78]
mov r8, r15
xor edx, edx
lea rcx, [rsp + 0xb8]
call sub.msvcrt.dll_memset
mov r8, r13
lea rdx, [rsp + 0x3c0]
lea rcx, [rsp + 0x90]
call fcn.1000e825c
mov r9d, ebx
mov r8, rax
mov edx, 0x303e
lea rcx, [rsp + 0x1a0]
call fcn.1000eba6c
lea rcx, [rsp + 0x90]
call fcn.1000e7e7c
mov qword [rsp + 0x90], rsi
mov qword [rsp + 0x98], rbp
mov qword [rsp + 0xa0], r12
mov dword [rsp + 0xa8], 0x3a6
mov dword [rsp + 0xac], 6
mov dword [rsp + 0xb0], r14d
mov word [rsp + 0x130], di
mov byte [rsp + 0x132], dil
mov byte [rsp + 0x133], bl
mov r8, r15
xor edx, edx
lea rcx, [rsp + 0xb8]
call sub.msvcrt.dll_memset
lea r9, [0x10001ec30]
mov r8d, 0x80042302
lea rdx, [rsp + 0x90]
lea rcx, [rsp + 0x1a0]
call fcn.1000e97ec
int3
lea rax, [0x10001e260]
mov qword [rsp + 0x90], rax
lea rax, [0x10001e610]
mov qword [rsp + 0x98], rax
lea rax, [0x10001e240]
mov qword [rsp + 0xa0], rax
mov dword [rsp + 0xa8], 0x3a9
mov dword [rsp + 0xac], 6
mov dword [rsp + 0xb0], 0xff
xor r13d, r13d
mov word [rsp + 0x130], r13w
mov byte [rsp + 0x132], r13b
lea eax, [r13 + 1]
mov byte [rsp + 0x133], al
xor edx, edx
lea r8d, [r13 + 0x78]
lea rcx, [rsp + 0xb8]
call sub.msvcrt.dll_memset
lea r8, [rsp + 0x4a0]
lea rdx, [rsp + 0x3c0]
lea rcx, [rsp + 0x90]
call fcn.1000e825c
lea r9d, [r13 + 1]
mov r8, rax
mov edx, 0x3040
lea rcx, [rsp + 0x1a0]
call fcn.1000eba6c
lea rcx, [rsp + 0x90]
call fcn.1000e7e7c
nop
mov rcx, rsi
call fcn.1001308d8
nop
cmp r14, r13
je 0x1000a3c74
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_LocalFree]
nop
cmp rbp, r13
je 0x1000a3c82
mov rcx, rbp
call sub.NETAPI32.dll_NetApiBufferFree
nop
cmp r15, r13
je 0x1000a3c91
mov rcx, r15
call qword [sym.imp.msvcrt.dll_free]
nop
cmp rbx, r13
je 0x1000a3c9f
mov rcx, rbx
call fcn.1001308d8
nop
mov rcx, qword [rsp + 0x180]
call qword [sym.imp.msvcrt.dll_free]
nop
lea rcx, [rsp + 0x270]
call fcn.100053268
nop
cmp r12, r13
je 0x1000a3ccb
mov rcx, r12
call qword [sym.imp.ole32.dll_CoTaskMemFree]
nop
cmp rdi, 0xffffffffffffffff
je 0x1000a3cdb
mov rcx, rdi
call qword [sym.imp.SETUPAPI.dll_SetupDiDestroyDeviceInfoList]
nop
lea rcx, [rsp + 0x220]
call fcn.1000cce5c
nop
mov rcx, qword [rsp + 0x160]
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
nop
lea rcx, [rsp + 0x1a0]
call fcn.1000e8518
jmp 0x1000a43d0
mov rcx, qword [rsi + 0x18]
mov qword [rsp + 0x170], rcx
mov qword [rsp + 0x2e8], rcx
mov r8, qword [rsp + 0x300]
mov rax, qword [r8]
mov rdx, rcx
mov rcx, r8
call qword [rax + 0x88]
mov dword [rsp + 0x1a8], eax
lea rax, [0x10001e260]
mov qword [rsp + 0x90], rax
lea rax, [0x10001e610]
mov qword [rsp + 0x98], rax
lea rax, [0x10001e240]
mov qword [rsp + 0xa0], rax
mov dword [rsp + 0xa8], 0x3b2
mov eax, 1
mov dword [rsp + 0xac], eax
mov dword [rsp + 0xb0], 0xff
xor r15d, r15d
mov word [rsp + 0x130], r15w
mov byte [rsp + 0x132], r15b
mov byte [rsp + 0x133], al
xor edx, edx
lea r8d, [rax + 0x77]
lea rcx, [rsp + 0xb8]
call sub.msvcrt.dll_memset
lea r8, [0x10001ecb0]
lea rdx, [rsp + 0x90]
lea rcx, [rsp + 0x1a0]
call fcn.100052900
mov qword [rsp + 0x330], r15
mov byte [rsp + 0x358], r15b
mov byte [rsp + 0x359], r15b
mov dword [rsp + 0x35c], r15d
mov dword [rsp + 0x360], r15d
mov qword [rsp + 0x368], r15
mov dword [rsp + 0x370], r15d
mov dword [rsp + 0x374], r15d
mov dword [rsp + 0x378], r15d
mov qword [rsp + 0x380], r15
mov word [rsp + 0x388], r15w
mov qword [rsp + 0x398], r15
lea rax, [0x10000d460]
mov qword [rsp + 0x390], rax
xor edx, edx
lea r8d, [r15 + 0x20]
lea rcx, [rsp + 0x338]
call sub.msvcrt.dll_memset
nop
mov dword [rsp + 0x40], 0x80
mov dword [rsp + 0x38], 3
mov dword [rsp + 0x30], 0xc0000000
mov dword [rsp + 0x28], r15d
mov byte [rsp + 0x20], r15b
xor r9d, r9d
mov r8, qword [rsi + 0x18]
lea rdx, [rsp + 0x1a0]
lea rcx, [rsp + 0x330]
call fcn.10005330c
mov r15d, eax
mov dword [rsp + 0x1a8], eax
xor eax, eax
cmp r15d, eax
jge 0x1000a3f4e
lea rcx, [0x10001e260]
mov qword [rsp + 0x90], rcx
lea rcx, [0x10001e610]
mov qword [rsp + 0x98], rcx
lea rcx, [0x10001e240]
mov qword [rsp + 0xa0], rcx
mov dword [rsp + 0xa8], 0x3bb
lea ecx, [rax + 1]
mov dword [rsp + 0xac], ecx
mov dword [rsp + 0xb0], 0xff
mov word [rsp + 0x130], ax
mov byte [rsp + 0x132], al
mov byte [rsp + 0x133], cl
xor edx, edx
lea r8d, [rax + 0x78]
lea rcx, [rsp + 0xb8]
call sub.msvcrt.dll_memset
mov dword [rsp + 0x20], r15d
mov r9, qword [rsi + 0x18]
lea r8, [0x10001ed10]
lea rdx, [rsp + 0x90]
lea rcx, [rsp + 0x1a0]
call fcn.1000e9608
xor eax, eax
jmp 0x1000a4064
mov qword [rsp + 0x30], rax
mov byte [rsp + 0x28], al
mov dword [rsp + 0x20], eax
xor r9d, r9d
mov r8d, 0x56c008
lea rdx, [rsp + 0x1a0]
lea rcx, [rsp + 0x330]
call fcn.100053a50
mov r15d, eax
mov dword [rsp + 0x1a8], eax
xor eax, eax
cmp r15d, eax
jge 0x1000a4032
lea rcx, [0x10001e260]
mov qword [rsp + 0x90], rcx
lea rcx, [0x10001e610]
mov qword [rsp + 0x98], rcx
lea rcx, [0x10001e240]
mov qword [rsp + 0xa0], rcx
mov dword [rsp + 0xa8], 0x3c3
lea ecx, [rax + 1]
mov dword [rsp + 0xac], ecx
mov dword [rsp + 0xb0], 0xff
mov word [rsp + 0x130], ax
mov byte [rsp + 0x132], al
mov byte [rsp + 0x133], cl
xor edx, edx
lea r8d, [rax + 0x78]
lea rcx, [rsp + 0xb8]
call sub.msvcrt.dll_memset
mov dword [rsp + 0x20], r15d
mov r9, qword [rsi + 0x18]
lea r8, [0x10001ed60]
lea rdx, [rsp + 0x90]
lea rcx, [rsp + 0x1a0]
call fcn.1000e9608
xor eax, eax
mov dword [rsp + 0x1a8], eax
mov rcx, qword [rsp + 0x330]
cmp rcx, rax
je 0x1000a4047
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor eax, eax
mov qword [rsp + 0x330], rax
mov dword [rsp + 0x35c], eax
mov dword [rsp + 0x370], eax
mov dword [rsp + 0x378], eax
mov word [rsp + 0x550], ax
xor edx, edx
mov r8d, 0x206
lea rcx, [rsp + 0x552]
call sub.msvcrt.dll_memset
mov r9d, 0x104
lea r8, [rsp + 0x550]
mov rdx, qword [rsi + 0x18]
mov r15, qword [rsp + 0x168]
mov rcx, r15
call fcn.1000ae790
xor ecx, ecx
cmp al, cl
jne 0x1000a4149
lea rax, [0x10001e260]
mov qword [rsp + 0x90], rax
lea rax, [0x10001e610]
mov qword [rsp + 0x98], rax
lea rax, [0x10001e240]
mov qword [rsp + 0xa0], rax
mov dword [rsp + 0xa8], 0x3cf
mov dword [rsp + 0xac], 6
mov dword [rsp + 0xb0], 0xff
mov word [rsp + 0x130], cx
mov byte [rsp + 0x132], cl
lea eax, [rcx + 1]
mov byte [rsp + 0x133], al
xor edx, edx
lea r8d, [rcx + 0x78]
lea rcx, [rsp + 0xb8]
call sub.msvcrt.dll_memset
mov r9, qword [rsi + 0x18]
lea r8, [0x10001edd8]
lea rdx, [rsp + 0x90]
lea rcx, [rsp + 0x1a0]
call fcn.1000e9608
xor ecx, ecx
cmp dword [rsp + 0x84], ecx
je 0x1000a421e
lea r8, [rsp + 0x550]
mov rdx, r13
mov rcx, r15
call fcn.1000af17c
xor ecx, ecx
cmp al, cl
jne 0x1000a42e1
lea rax, [0x10001e260]
mov qword [rsp + 0x90], rax
lea rax, [0x10001e610]
mov qword [rsp + 0x98], rax
lea rax, [0x10001e240]
mov qword [rsp + 0xa0], rax
mov dword [rsp + 0xa8], 0x3d5
mov dword [rsp + 0xac], 6
mov dword [rsp + 0xb0], 0xff
mov word [rsp + 0x130], cx
mov byte [rsp + 0x132], cl
lea eax, [rcx + 1]
mov byte [rsp + 0x133], al
xor edx, edx
lea r8d, [rcx + 0x78]
lea rcx, [rsp + 0xb8]
call sub.msvcrt.dll_memset
lea r11, [rsp + 0x550]
mov qword [rsp + 0x20], r11
mov r9, r13
lea r8, [0x10001ee08]
lea rdx, [rsp + 0x90]
lea rcx, [rsp + 0x1a0]
call fcn.1000e9608
jmp 0x1000a42e1
lea r8, [rsp + 0x550]
mov rdx, r13
mov rcx, r15
call fcn.1000aedfc
xor ecx, ecx
cmp al, cl
jne 0x1000a42e1
lea rax, [0x10001e260]
mov qword [rsp + 0x90], rax
lea rax, [0x10001e610]
mov qword [rsp + 0x98], rax
lea rax, [0x10001e240]
mov qword [rsp + 0xa0], rax
mov dword [rsp + 0xa8], 0x3dd
mov dword [rsp + 0xac], 6
mov dword [rsp + 0xb0], 0xff
mov word [rsp + 0x130], cx
mov byte [rsp + 0x132], cl
lea eax, [rcx + 1]
mov byte [rsp + 0x133], al
xor edx, edx
lea r8d, [rcx + 0x78]
lea rcx, [rsp + 0xb8]
call sub.msvcrt.dll_memset
lea r11, [rsp + 0x550]
mov qword [rsp + 0x20], r11
mov r9, r13
lea r8, [0x10001ee40]
lea rdx, [rsp + 0x90]
lea rcx, [rsp + 0x1a0]
call fcn.1000e9608
mov r9, qword [rsp + 0x250]
lea r8, [rsp + 0x240]
mov rdx, qword [rsi + 0x18]
mov rcx, r15
call fcn.1000a64fc
nop
lea rcx, [rsp + 0x330]
call fcn.100053268
nop
mov rcx, rsi
call fcn.1001308d8
nop
mov rcx, qword [rsp + 0x170]
xor esi, esi
cmp rcx, rsi
je 0x1000a432b
call qword [sym.imp.KERNEL32.dll_LocalFree]
nop
cmp r14, rsi
je 0x1000a433a
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_LocalFree]
nop
cmp rbp, rsi
je 0x1000a4348
mov rcx, rbp
call sub.NETAPI32.dll_NetApiBufferFree
nop
mov rcx, qword [rsp + 0x240]
cmp rcx, rsi
je 0x1000a435c
call qword [sym.imp.msvcrt.dll_free]
nop
cmp rbx, rsi
je 0x1000a436a
mov rcx, rbx
call fcn.1001308d8
nop
mov rcx, qword [rsp + 0x180]
call qword [sym.imp.msvcrt.dll_free]
nop
lea rcx, [rsp + 0x270]
call fcn.100053268
nop
cmp r12, rsi
je 0x1000a4396
mov rcx, r12
call qword [sym.imp.ole32.dll_CoTaskMemFree]
nop
cmp rdi, 0xffffffffffffffff
je 0x1000a43a6
mov rcx, rdi
call qword [sym.imp.SETUPAPI.dll_SetupDiDestroyDeviceInfoList]
nop
lea rcx, [rsp + 0x220]
call fcn.1000cce5c
nop
mov rcx, qword [rsp + 0x160]
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
nop
lea rcx, [rsp + 0x1a0]
call fcn.1000e8518
mov rcx, qword [rsp + 0x760]
xor rcx, rsp
call fcn.100130df0
add rsp, 0x778
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret