Function at 0x1000a134c
Capabilities:
Unmount volume via ioctl

Disassembly:
mov r11, rsp
push rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x778
mov qword [rsp + 0x3b8], 0xfffffffffffffffe
mov rax, qword [0x100175150]
xor rax, rsp
mov qword [rsp + 0x760], rax
mov qword [rsp + 0x2f0], r9
mov qword [rsp + 0x2e0], r8
mov rdi, rdx
mov qword [rsp + 0x300], rdx
mov qword [rsp + 0x168], rcx
mov rax, qword [rsp + 0x7e8]
mov qword [rsp + 0x170], rax
mov rax, qword [rsp + 0x800]
mov qword [rsp + 0x190], rax
lea r12, [0x10001e120]
mov qword [r11 - 0x728], r12
lea rbx, [0x10001e4d0]
mov qword [r11 - 0x720], rbx
lea rsi, [0x10001e100]
mov qword [r11 - 0x718], rsi
mov dword [rsp + 0xa8], 0x210
mov dword [rsp + 0xac], 6
mov ebp, 0xff
mov dword [rsp + 0xb0], ebp
xor r14d, r14d
mov word [r11 - 0x688], r14w
mov byte [r11 - 0x686], r14b
lea r15d, [r14 + 1]
mov byte [r11 - 0x685], r15b
lea r13d, [r14 + 0x78]
mov r8, r13
xor edx, edx
lea rcx, [r11 - 0x700]
call sub.msvcrt.dll_memset
xor r8d, r8d
lea rdx, [rsp + 0x90]
lea rcx, [rsp + 0x1a0]
call fcn.1000e7c38
nop
mov qword [rsp + 0x160], r14
mov rax, qword [rdi]
lea rdx, [rsp + 0x160]
mov rcx, rdi
call qword [rax + 0x80]
mov dword [rsp + 0x1a8], eax
mov qword [rsp + 0x90], r12
mov qword [rsp + 0x98], rbx
mov qword [rsp + 0xa0], rsi
mov dword [rsp + 0xa8], 0x214
mov dword [rsp + 0xac], r15d
mov dword [rsp + 0xb0], ebp
mov word [rsp + 0x130], r14w
mov byte [rsp + 0x132], r14b
mov byte [rsp + 0x133], r15b
mov r8, r13
xor edx, edx
lea rcx, [rsp + 0xb8]
call sub.msvcrt.dll_memset
lea r8, [0x10001a430]
lea rdx, [rsp + 0x90]
lea rcx, [rsp + 0x1a0]
call fcn.100052600
mov rax, qword [rdi]
lea rdx, [rsp + 0x88]
mov rcx, rdi
call qword [rax + 0x60]
mov dword [rsp + 0x1a8], eax
mov qword [rsp + 0x90], r12
mov qword [rsp + 0x98], rbx
mov qword [rsp + 0xa0], rsi
mov dword [rsp + 0xa8], 0x218
mov dword [rsp + 0xac], r15d
mov dword [rsp + 0xb0], ebp
mov word [rsp + 0x130], r14w
mov byte [rsp + 0x132], r14b
mov byte [rsp + 0x133], r15b
mov r8, r13
xor edx, edx
lea rcx, [rsp + 0xb8]
call sub.msvcrt.dll_memset
lea r8, [0x10001e540]
lea rdx, [rsp + 0x90]
lea rcx, [rsp + 0x1a0]
call fcn.100052600
mov rax, qword [rdi]
lea rdx, [rsp + 0x258]
mov rcx, rdi
call qword [rax + 0x40]
mov dword [rsp + 0x1a8], eax
mov qword [rsp + 0x90], r12
mov qword [rsp + 0x98], rbx
mov qword [rsp + 0xa0], rsi
mov dword [rsp + 0xa8], 0x21c
mov dword [rsp + 0xac], r15d
mov dword [rsp + 0xb0], ebp
mov word [rsp + 0x130], r14w
mov byte [rsp + 0x132], r14b
mov byte [rsp + 0x133], r15b
mov r8, r13
xor edx, edx
lea rcx, [rsp + 0xb8]
call sub.msvcrt.dll_memset
lea r8, [0x10001b0c0]
lea rdx, [rsp + 0x90]
lea rcx, [rsp + 0x1a0]
call fcn.100052600
mov rax, qword [rdi]
lea rdx, [rsp + 0x468]
mov rcx, rdi
call qword [rax + 0x18]
mov dword [rsp + 0x1a8], eax
mov qword [rsp + 0x90], r12
mov qword [rsp + 0x98], rbx
mov qword [rsp + 0xa0], rsi
mov dword [rsp + 0xa8], 0x220
mov dword [rsp + 0xac], r15d
mov dword [rsp + 0xb0], ebp
mov word [rsp + 0x130], r14w
mov byte [rsp + 0x132], r14b
mov byte [rsp + 0x133], r15b
mov r8, r13
xor edx, edx
lea rcx, [rsp + 0xb8]
call sub.msvcrt.dll_memset
lea r8, [0x10000cf50]
lea rdx, [rsp + 0x90]
lea rcx, [rsp + 0x1a0]
call fcn.100052600
mov eax, dword [rsp + 0x258]
and eax, r15d
mov dword [rsp + 0x84], eax
mov r13, qword [rsp + 0x160]
mov qword [rsp + 0x220], r14
mov qword [rsp + 0x228], r14
mov qword [rsp + 0x230], r14
mov dword [rsp + 0x238], r14d
mov dword [rsp + 0x23c], r14d
mov qword [rsp + 0x90], r12
mov qword [rsp + 0x98], rbx
mov qword [rsp + 0xa0], rsi
mov dword [rsp + 0xa8], 0x22c
mov dword [rsp + 0xac], 6
mov dword [rsp + 0xb0], ebp
mov word [rsp + 0x130], r14w
mov byte [rsp + 0x132], r14b
mov byte [rsp + 0x133], r15b
xor edx, edx
lea r8d, [r14 + 0x78]
lea rcx, [rsp + 0xb8]
call sub.msvcrt.dll_memset
lea rcx, [0x10001e598]
lea rax, [0x10001e5b8]
mov edi, dword [rsp + 0x7f8]
cmp edi, r14d
cmovne rax, rcx
mov ebp, dword [rsp + 0x7f0]
lea rcx, [0x10001e5d8]
lea r9, [0x10001e5f0]
cmp ebp, r14d
cmove r9, rcx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r13
lea r8, [0x10001e608]
lea rdx, [rsp + 0x90]
lea rcx, [rsp + 0x1a0]
call fcn.1000e8e14
cmp ebp, r14d
jne 0x1000a1891
lea rcx, [rsp + 0x220]
call fcn.1000cc93c
mov r8b, byte [rsp + 0x88]
mov rdx, r13
lea rcx, [rsp + 0x220]
call fcn.1000d0668
cmp al, r14b
jne 0x1000a1891
mov qword [rsp + 0x90], r12
mov qword [rsp + 0x98], rbx
mov qword [rsp + 0xa0], rsi
mov dword [rsp + 0xa8], 0x239
mov dword [rsp + 0xac], 6
mov dword [rsp + 0xb0], 0xff
mov word [rsp + 0x130], r14w
mov byte [rsp + 0x132], r14b
mov byte [rsp + 0x133], r15b
xor edx, edx
lea r8d, [r14 + 0x78]
lea rcx, [rsp + 0xb8]
call sub.msvcrt.dll_memset
lea r8, [0x10001e630]
lea rdx, [rsp + 0x90]
lea rcx, [rsp + 0x1a0]
call fcn.1000e8e14
nop
lea rcx, [rsp + 0x220]
call fcn.1000cc8d4
nop
mov rcx, qword [rsp + 0x160]
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
nop
lea rcx, [rsp + 0x1a0]
call fcn.1000e7d24
jmp 0x1000a3e5c
cmp edi, r14d
je 0x1000a191c
mov qword [rsp + 0x90], r12
mov qword [rsp + 0x98], rbx
mov qword [rsp + 0xa0], rsi
mov dword [rsp + 0xa8], 0x23f
mov dword [rsp + 0xac], r15d
mov dword [rsp + 0xb0], 0xff
mov word [rsp + 0x130], r14w
mov byte [rsp + 0x132], r14b
mov byte [rsp + 0x133], r15b
xor edx, edx
lea r8d, [rdx + 0x78]
lea rcx, [rsp + 0xb8]
call sub.msvcrt.dll_memset
mov r8d, 0x1780
lea rdx, [rsp + 0x90]
lea rcx, [rsp + 0x1a0]
call fcn.1000ec30c
jmp 0x1000a1a29
cmp ebp, r15d
jne 0x1000a19a7
mov qword [rsp + 0x90], r12
mov qword [rsp + 0x98], rbx
mov qword [rsp + 0xa0], rsi
mov dword [rsp + 0xa8], 0x241
mov dword [rsp + 0xac], r15d
mov dword [rsp + 0xb0], 0xff
mov word [rsp + 0x130], r14w
mov byte [rsp + 0x132], r14b
mov byte [rsp + 0x133], r15b
xor edx, edx
lea r8d, [rdx + 0x78]
lea rcx, [rsp + 0xb8]
call sub.msvcrt.dll_memset
mov r8d, 0x1782
lea rdx, [rsp + 0x90]
lea rcx, [rsp + 0x1a0]
call fcn.1000ec30c
jmp 0x1000a1a29
cmp ebp, r14d
jne 0x1000a1a29
mov qword [rsp + 0x90], r12
mov qword [rsp + 0x98], rbx
mov qword [rsp + 0xa0], rsi
mov dword [rsp + 0xa8], 0x243
mov dword [rsp + 0xac], r15d
mov dword [rsp + 0xb0], 0xff
mov word [rsp + 0x130], r14w
mov byte [rsp + 0x132], r14b
mov byte [rsp + 0x133], r15b
xor edx, edx
lea r8d, [rdx + 0x78]
lea rcx, [rsp + 0xb8]
call sub.msvcrt.dll_memset
mov r8d, 0x1781
lea rdx, [rsp + 0x90]
lea rcx, [rsp + 0x1a0]
call fcn.1000ec30c
mov qword [rsp + 0x90], r12
mov qword [rsp + 0x98], rbx
mov qword [rsp + 0xa0], rsi
mov dword [rsp + 0xa8], 0x245
mov dword [rsp + 0xac], r15d
mov dword [rsp + 0xb0], 0xff
mov word [rsp + 0x130], r14w
mov byte [rsp + 0x132], r14b
mov byte [rsp + 0x133], r15b
xor edx, edx
lea r8d, [rdx + 0x78]
lea rcx, [rsp + 0xb8]
call sub.msvcrt.dll_memset
mov r9, r13
mov r8d, 0x1392
lea rdx, [rsp + 0x90]
lea rcx, [rsp + 0x1a0]
call fcn.1000ec4a4
mov qword [rsp + 0x90], r12
mov qword [rsp + 0x98], rbx
mov qword [rsp + 0xa0], rsi
mov dword [rsp + 0xa8], 0x246
mov dword [rsp + 0xac], r15d
mov dword [rsp + 0xb0], 0xff
mov word [rsp + 0x130], r14w
mov byte [rsp + 0x132], r14b
mov byte [rsp + 0x133], r15b
xor edx, edx
lea r8d, [rdx + 0x78]
lea rcx, [rsp + 0xb8]
call sub.msvcrt.dll_memset
movzx edx, byte [rsp + 0x477]
movzx eax, byte [rsp + 0x476]
movzx ecx, byte [rsp + 0x475]
movzx edi, byte [rsp + 0x474]
movzx r8d, byte [rsp + 0x473]
movzx r9d, byte [rsp + 0x472]
movzx r10d, byte [rsp + 0x471]
movzx r11d, byte [rsp + 0x470]
movzx ebx, word [rsp + 0x46e]
movzx esi, word [rsp + 0x46c]
mov dword [rsp + 0x70], edx
mov dword [rsp + 0x68], eax
mov dword [rsp + 0x60], ecx
mov dword [rsp + 0x58], edi
mov dword [rsp + 0x50], r8d
mov dword [rsp + 0x48], r9d
mov dword [rsp + 0x40], r10d
mov dword [rsp + 0x38], r11d
mov dword [rsp + 0x30], ebx
mov dword [rsp + 0x28], esi
mov eax, dword [rsp + 0x468]
mov dword [rsp + 0x20], eax
lea r9, [0x10000a9c0]
mov r8d, 0x1396
lea rdx, [rsp + 0x90]
lea rcx, [rsp + 0x1a0]
call fcn.1000ec588
mov qword [rsp + 0x90], r12
lea rdi, [0x10001e4d0]
mov qword [rsp + 0x98], rdi
lea rbx, [0x10001e100]
mov qword [rsp + 0xa0], rbx
mov dword [rsp + 0xa8], 0x248
mov dword [rsp + 0xac], 6
mov dword [rsp + 0xb0], 0xff
mov word [rsp + 0x130], r14w
mov byte [rsp + 0x132], r14b
mov byte [rsp + 0x133], r15b
xor edx, edx
lea r8d, [rdx + 0x78]
lea rcx, [rsp + 0xb8]
call sub.msvcrt.dll_memset
lea r8, [0x10001e6c0]
lea rdx, [rsp + 0x90]
lea rcx, [rsp + 0x1a0]
call fcn.1000e8e14
cmp ebp, r15d
sete r12b
mov byte [rsp + 0x80], r12b
or qword [rsp + 0x218], 0xffffffffffffffff
lea rax, [0x100022768]
mov qword [rsp + 0x210], rax
mov qword [rsp + 0x268], r14
lea rax, [0x10000d468]
mov qword [rsp + 0x260], rax
mov byte [rsp + 0x81], r14b
lea rax, [rsp + 0x478]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x260]
lea r8, [rsp + 0x210]
mov rdx, r13
mov rsi, qword [rsp + 0x168]
mov rcx, rsi
call fcn.1000aeee0
cmp al, r14b
jne 0x1000a1db2
lea rax, [rsp + 0x478]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x260]
lea r8, [rsp + 0x210]
mov rdx, r13
mov rcx, rsi
call fcn.1000af674
cmp al, r14b
jne 0x1000a1da8
lea rax, [0x10001e120]
mov qword [rsp + 0x4a0], rax
mov qword [rsp + 0x4a8], rdi
mov qword [rsp + 0x4b0], rbx
mov dword [rsp + 0x4b8], 0x265
mov dword [rsp + 0x4bc], r15d
mov dword [rsp + 0x4c0], 0xff
mov word [rsp + 0x540], r14w
mov byte [rsp + 0x542], r14b
mov byte [rsp + 0x543], r15b
xor edx, edx
lea r8d, [rdx + 0x78]
lea rcx, [rsp + 0x4c8]
call sub.msvcrt.dll_memset
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r8d, eax
lea rdx, [rsp + 0x90]
lea rcx, [rsp + 0x4a0]
call fcn.1000e78e0
mov r9d, 2
mov r8, rax
mov edx, 0x3029
lea rcx, [rsp + 0x1a0]
call fcn.1000eb278
lea rcx, [rsp + 0x4a0]
call fcn.1000e7688
jmp 0x1000a1dba
mov byte [rsp + 0x81], r15b
jmp 0x1000a1dba
mov byte [rsp + 0x81], r15b
mov dword [rsp + 0x188], r14d
mov rbx, r14
mov qword [rsp + 0x150], rbx
mov qword [rsp + 0x270], r14
mov byte [rsp + 0x298], r14b
mov byte [rsp + 0x299], r14b
mov dword [rsp + 0x29c], r14d
mov dword [rsp + 0x2a0], r14d
mov qword [rsp + 0x2a8], r14
mov dword [rsp + 0x2b0], r14d
mov dword [rsp + 0x2b4], r14d
mov dword [rsp + 0x2b8], r14d
mov qword [rsp + 0x2c0], r14
mov word [rsp + 0x2c8], r14w
mov qword [rsp + 0x2d8], r14
lea rax, [0x10000d468]
mov qword [rsp + 0x2d0], rax
xor edx, edx
lea r8d, [rdx + 0x20]
lea rcx, [rsp + 0x278]
call sub.msvcrt.dll_memset
nop
mov dword [rsp + 0x40], 0x80
mov dword [rsp + 0x38], 3
mov dword [rsp + 0x30], 0xc0000000
mov dword [rsp + 0x28], r14d
mov byte [rsp + 0x20], r14b
xor r9d, r9d
mov r8, r13
lea rdx, [rsp + 0x1a0]
lea rcx, [rsp + 0x270]
call fcn.100052ffc
mov edi, eax
mov dword [rsp + 0x1a8], eax
cmp eax, r14d
jge 0x1000a216e
cmp eax, 0x80042308
jne 0x1000a1fc9
lea rax, [0x10001e120]
mov qword [rsp + 0x4a0], rax
lea rax, [0x10001e4d0]
mov qword [rsp + 0x4a8], rax
lea rax, [0x10001e100]
mov qword [rsp + 0x4b0], rax
mov dword [rsp + 0x4b8], 0x286
mov dword [rsp + 0x4bc], r15d
mov dword [rsp + 0x4c0], 0xff
mov word [rsp + 0x540], r14w
mov byte [rsp + 0x542], r14b
mov byte [rsp + 0x543], r15b
xor edx, edx
lea r8d, [rdx + 0x78]
lea rcx, [rsp + 0x4c8]
call sub.msvcrt.dll_memset
mov r8, r13
lea rdx, [rsp + 0x90]
lea rcx, [rsp + 0x4a0]
call fcn.1000e7a68
mov r9d, 2
mov r8, rax
mov edx, 0x302a
lea rcx, [rsp + 0x1a0]
call fcn.1000eb278
lea rcx, [rsp + 0x4a0]
call fcn.1000e7688
nop
lea rcx, [rsp + 0x270]
call fcn.100052f58
nop
mov rcx, qword [rsp + 0x268]
cmp rcx, r14
je 0x1000a1f85
call qword [sym.imp.ole32.dll_CoTaskMemFree]
nop
mov rcx, qword [rsp + 0x218]
cmp rcx, 0xffffffffffffffff
je 0x1000a1f9a
call qword [sym.imp.SETUPAPI.dll_SetupDiDestroyDeviceInfoList]
nop
lea rcx, [rsp + 0x220]
call fcn.1000cc8d4
nop
mov rcx, qword [rsp + 0x160]
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
nop
lea rcx, [rsp + 0x1a0]
call fcn.1000e7d24
jmp 0x1000a3e5c
cmp r12b, r14b
je 0x1000a20d3
lea rax, [0x10001e120]
mov qword [rsp + 0x90], rax
lea rax, [0x10001e4d0]
mov qword [rsp + 0x98], rax
lea rax, [0x10001e100]
mov qword [rsp + 0xa0], rax
mov dword [rsp + 0xa8], 0x28c
mov dword [rsp + 0xac], r15d
mov dword [rsp + 0xb0], 0xff
mov word [rsp + 0x130], r14w
mov byte [rsp + 0x132], r14b
mov byte [rsp + 0x133], r15b
xor edx, edx
lea r8d, [rdx + 0x78]
lea rcx, [rsp + 0xb8]
call sub.msvcrt.dll_memset
mov dword [rsp + 0x20], edi
mov r9, r13
lea r8, [0x10001e760]
lea rdx, [rsp + 0x90]
lea rcx, [rsp + 0x1a0]
call fcn.1000eac7c
nop
lea rcx, [rsp + 0x270]
call fcn.100052f58
nop
mov rcx, qword [rsp + 0x268]
cmp rcx, r14
je 0x1000a208f
call qword [sym.imp.ole32.dll_CoTaskMemFree]
nop
mov rcx, qword [rsp + 0x218]
cmp rcx, 0xffffffffffffffff
je 0x1000a20a4
call qword [sym.imp.SETUPAPI.dll_SetupDiDestroyDeviceInfoList]
nop
lea rcx, [rsp + 0x220]
call fcn.1000cc8d4
nop
mov rcx, qword [rsp + 0x160]
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
nop
lea rcx, [rsp + 0x1a0]
call fcn.1000e7d24
jmp 0x1000a3e5c
lea rax, [0x10001e120]
mov qword [rsp + 0x90], rax
lea rax, [0x10001e4d0]
mov qword [rsp + 0x98], rax
lea rax, [0x10001e100]
mov qword [rsp + 0xa0], rax
mov dword [rsp + 0xa8], 0x290
mov dword [rsp + 0xac], r15d
mov dword [rsp + 0xb0], 0xff
mov word [rsp + 0x130], r14w
mov byte [rsp + 0x132], r14b
mov byte [rsp + 0x133], r15b
xor edx, edx
lea r8d, [rdx + 0x78]
lea rcx, [rsp + 0xb8]
call sub.msvcrt.dll_memset
mov dword [rsp + 0x20], edi
mov r9, r13
lea r8, [0x10001e760]
lea rdx, [rsp + 0x90]
lea rcx, [rsp + 0x1a0]
call fcn.1000e9858
int3
mov qword [rsp + 0x30], r14
mov byte [rsp + 0x28], r14b
mov dword [rsp + 0x20], r14d
xor r9d, r9d
mov r8d, 0x560000
lea rdx, [rsp + 0x1a0]
lea rcx, [rsp + 0x270]
call fcn.100053740
mov edi, eax
mov dword [rsp + 0x1a8], eax
cmp eax, r14d
jge 0x1000a2248
lea rax, [0x10001e120]
mov qword [rsp + 0x90], rax
lea rax, [0x10001e4d0]
mov qword [rsp + 0x98], rax
lea rax, [0x10001e100]
mov qword [rsp + 0xa0], rax
mov dword [rsp + 0xa8], 0x29b
mov dword [rsp + 0xac], r15d
mov dword [rsp + 0xb0], 0xff
mov word [rsp + 0x130], r14w
mov byte [rsp + 0x132], r14b
mov byte [rsp + 0x133], r15b
xor edx, edx
lea r8d, [rdx + 0x78]
lea rcx, [rsp + 0xb8]
call sub.msvcrt.dll_memset
mov dword [rsp + 0x20], edi
mov r9, r13
lea r8, [0x10001e7b0]
lea rdx, [rsp + 0x90]
lea rcx, [rsp + 0x1a0]
call fcn.1000e9858
int3
mov rax, qword [rsp + 0x2c0]
mov qword [rsp + 0x180], rax
mov qword [rsp + 0x2c0], r14
mov dword [rsp + 0x2b4], r14d
mov dword [rsp + 0x2b0], r14d
mov dword [rsp + 0x2b8], r14d
mov qword [rsp + 0x3b0], rax
mov ecx, dword [rax]
mov dword [rsp + 0x158], ecx
add rax, 8
mov qword [rsp + 0x178], rax
cmp ebp, r14d
jne 0x1000a22da
lea r9, [rsp + 0x188]
lea r8, [rsp + 0x150]
mov edx, dword [rax]
lea rcx, [rsp + 0x220]
call fcn.1000cee98
cmp al, r14b
je 0x1000a22d2
mov al, r15b
mov byte [rsp + 0x89], al
mov rbx, qword [rsp + 0x150]
jmp 0x1000a22e4
mov rbx, qword [rsp + 0x150]
mov al, r14b
mov byte [rsp + 0x89], al
mov qword [rsp + 0x3a8], rbx
lea rcx, [0x100022770]
mov qword [rsp + 0x3a0], rcx
mov rdi, r14
mov qword [rsp + 0x250], r14
mov qword [rsp + 0x198], r14
mov r15, r14
mov qword [rsp + 0x240], r14
mov dword [rsp + 0x248], r14d
mov dword [rsp + 0x24c], r14d
mov rbp, r14
mov qword [rsp + 0x310], r14
lea rcx, [0x100022760]
mov qword [rsp + 0x308], rcx
mov qword [rsp + 0x320], r14
lea rcx, [0x1000391a8]
mov qword [rsp + 0x318], rcx
xor r12d, r12d
cmp dword [rsp + 0x84], r12d
je 0x1000a23bf
cmp al, r12b
je 0x1000a23bf
lea rax, [rsp + 0x250]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x198]
lea r8, [rsp + 0x240]
mov rdx, r13
mov rcx, rsi
call fcn.1000a3e88
mov rbp, qword [rsp + 0x198]
mov qword [rsp + 0x310], rbp
mov rdi, qword [rsp + 0x250]
mov r14, rdi
mov qword [rsp + 0x320], rdi
mov r15, qword [rsp + 0x240]
mov dword [rsp + 0x29c], r12d
mov dword [rsp + 0x2b0], r12d
mov qword [rsp + 0x30], r12
mov byte [rsp + 0x28], r12b
mov dword [rsp + 0x20], r12d
xor r9d, r9d
mov r8d, 0x90018
lea rdx, [rsp + 0x1a0]
lea rcx, [rsp + 0x270]
call fcn.100053740
mov r12d, eax
mov dword [rsp + 0x1a8], eax
xor eax, eax
cmp r12d, eax
jge 0x1000a24a8
lea rcx, [0x10001e120]
mov qword [rsp + 0x90], rcx
lea rcx, [0x10001e4d0]
mov qword [rsp + 0x98], rcx
lea rcx, [0x10001e100]
mov qword [rsp + 0xa0], rcx
mov dword [rsp + 0xa8], 0x2cb
lea ecx, [rax + 1]
mov dword [rsp + 0xac], ecx
mov dword [rsp + 0xb0], 0xff
mov word [rsp + 0x130], ax
mov byte [rsp + 0x132], al
mov byte [rsp + 0x133], cl
xor edx, edx
lea r8d, [rax + 0x78]
lea rcx, [rsp + 0xb8]
call sub.msvcrt.dll_memset
mov r9d, r12d
lea r8, [0x10001e810]
lea rdx, [rsp + 0x90]
lea rcx, [rsp + 0x1a0]
call fcn.1000e8e14
xor eax, eax
mov dword [rsp + 0x29c], eax
mov dword [rsp + 0x2b0], eax
mov qword [rsp + 0x30], rax
mov byte [rsp + 0x28], al
mov dword [rsp + 0x20], eax
xor r9d, r9d
mov r8d, 0x90020
lea rdx, [rsp + 0x1a0]
lea rcx, [rsp + 0x270]
call fcn.100053740
mov r12d, eax
mov dword [rsp + 0x1a8], eax
xor eax, eax
cmp r12d, eax
jge 0x1000a266b
lea rcx, [0x10001e120]
mov qword [rsp + 0x4a0], rcx
lea rcx, [0x10001e4d0]
mov qword [rsp + 0x4a8], rcx
lea rcx, [0x10001e100]
mov qword [rsp + 0x4b0], rcx
mov dword [rsp + 0x4b8], 0x2d5
lea ecx, [rax + 1]
mov dword [rsp + 0x4bc], ecx
mov dword [rsp + 0x4c0], 0xff
mov word [rsp + 0x540], ax
mov byte [rsp + 0x542], al
mov byte [rsp + 0x543], cl
xor edx, edx
lea r8d, [rax + 0x78]
lea rcx, [rsp + 0x4c8]
call sub.msvcrt.dll_memset
mov r8d, r12d
lea rdx, [rsp + 0x90]
lea rcx, [rsp + 0x4a0]
call fcn.1000e77ac
mov r12b, byte [rsp + 0x80]
mov cl, r12b
neg cl
sbb r9w, r9w
neg r9w
inc r9w
mov r8, rax
mov edx, 0x302b
lea rcx, [rsp + 0x1a0]
call fcn.1000eb278
lea rcx, [rsp + 0x4a0]
call fcn.1000e7688
xor eax, eax
cmp r12b, al
jne 0x1000a266b
lea rcx, [0x10001e120]
mov qword [rsp + 0x90], rcx
lea rcx, [0x10001e4d0]
mov qword [rsp + 0x98], rcx
lea rcx, [0x10001e100]
mov qword [rsp + 0xa0], rcx
mov dword [rsp + 0xa8], 0x2d8
lea ecx, [rax + 1]
mov dword [rsp + 0xac], ecx
mov dword [rsp + 0xb0], 0xff
mov word [rsp + 0x130], ax
mov byte [rsp + 0x132], al
mov byte [rsp + 0x133], cl
xor edx, edx
lea r8d, [rax + 0x78]
lea rcx, [rsp + 0xb8]
call sub.msvcrt.dll_memset
mov edx, dword [rsp + 0x1a8]
mov dword [rsp + 0x20], edx
mov r9, r13
lea r8, [0x10001e860]
lea rdx, [rsp + 0x90]
lea rcx, [rsp + 0x1a0]
call fcn.1000e9858
int3
mov dword [rsp + 0x29c], eax
mov dword [rsp + 0x2b0], eax
mov qword [rsp + 0x30], rax
mov byte [rsp + 0x28], al
mov dword [rsp + 0x20], eax
xor r9d, r9d
mov r8d, 0x56c00c
lea rdx, [rsp + 0x1a0]
lea rcx, [rsp + 0x270]
call fcn.100053740
mov r12d, eax
mov dword [rsp + 0x1a8], eax
xor eax, eax
cmp r12d, eax
jge 0x1000a2750
lea rcx, [0x10001e120]
mov qword [rsp + 0x90], rcx
lea rcx, [0x10001e4d0]
mov qword [rsp + 0x98], rcx
lea rcx, [0x10001e100]
mov qword [rsp + 0xa0], rcx
mov dword [rsp + 0xa8], 0x2e3
lea ecx, [rax + 1]
mov dword [rsp + 0xac], ecx
mov dword [rsp + 0xb0], 0xff
mov word [rsp + 0x130], ax
mov byte [rsp + 0x132], al
mov byte [rsp + 0x133], cl
xor edx, edx
lea r8d, [rax + 0x78]
lea rcx, [rsp + 0xb8]
call sub.msvcrt.dll_memset
mov r9d, r12d
lea r8, [0x10001e8c0]
lea rdx, [rsp + 0x90]
lea rcx, [rsp + 0x1a0]
call fcn.1000e8e14
xor eax, eax
mov rcx, qword [rsp + 0x270]
cmp rcx, rax
je 0x1000a2765
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor eax, eax
mov qword [rsp + 0x270], rax
mov dword [rsp + 0x29c], eax
mov dword [rsp + 0x2b0], eax
mov dword [rsp + 0x2b8], eax
mov ecx, 1
cmp dword [rsp + 0x7f0], ecx
je 0x1000a279d
cmp byte [rsp + 0x89], al
je 0x1000a2961
lea rdx, [0x10001e120]
mov qword [rsp + 0x90], rdx
lea rdx, [0x10001e4d0]
mov qword [rsp + 0x98], rdx
lea rdx, [0x10001e100]
mov qword [rsp + 0xa0], rdx
mov dword [rsp + 0xa8], 0x2fa
mov dword [rsp + 0xac], ecx
mov dword [rsp + 0xb0], 0xff
mov word [rsp + 0x130], ax
mov byte [rsp + 0x132], al
mov byte [rsp + 0x133], cl
xor edx, edx
lea r8d, [rdx + 0x78]
lea rcx, [rsp + 0xb8]
call sub.msvcrt.dll_memset
mov r9, r13
lea r8, [0x10001e920]
lea rdx, [rsp + 0x90]
lea rcx, [rsp + 0x1a0]
call fcn.1000e8e14
mov r12, rdi
xor eax, eax
cmp rdi, rax
je 0x1000a295c
xor esi, esi
lea ebx, [rax + 1]
lea r15, [0x10001e120]
lea rbp, [0x10001e4d0]
lea r14, [0x10001e100]
xor eax, eax
or rcx, 0xffffffffffffffff
mov rdi, r12
repne scasw ax, word [rdi]
not rcx
cmp rcx, rbx
je 0x1000a292d
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_DeleteVolumeMountPointW]
cmp eax, esi
jne 0x1000a290d
mov qword [rsp + 0x90], r15
mov qword [rsp + 0x98], rbp
mov qword [rsp + 0xa0], r14
mov dword [rsp + 0xa8], 0x301
mov dword [rsp + 0xac], ebx
mov dword [rsp + 0xb0], 0xff
mov word [rsp + 0x130], si
mov byte [rsp + 0x132], sil
mov byte [rsp + 0x133], bl
xor edx, edx
lea r8d, [rdx + 0x78]
lea rcx, [rsp + 0xb8]
call sub.msvcrt.dll_memset
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], r13
mov r9, r12
lea r8, [0x10001e980]
lea rdx, [rsp + 0x90]
lea rcx, [rsp + 0x1a0]
call fcn.1000e8e14
xor eax, eax
or rcx, 0xffffffffffffffff
mov rdi, r12
repne scasw ax, word [rdi]
not rcx
sub rcx, rbx
lea r12, [r12 + rcx*2 + 2]
cmp r12, rsi
jne 0x1000a2857
mov rbx, qword [rsp + 0x150]
mov rbp, qword [rsp + 0x310]
mov r14, qword [rsp + 0x320]
mov r15, qword [rsp + 0x240]
mov rsi, qword [rsp + 0x168]
xor eax, eax
lea ecx, [rax + 1]
jmp 0x1000a2961
mov ecx, 1
lea rdx, [0x10001e120]
mov qword [rsp + 0x90], rdx
lea rdx, [0x10001e4d0]
mov qword [rsp + 0x98], rdx
lea rdx, [0x10001e100]
mov qword [rsp + 0xa0], rdx
mov dword [rsp + 0xa8], 0x30a
mov dword [rsp + 0xac], ecx
mov dword [rsp + 0xb0], 0xff
mov word [rsp + 0x130], ax
mov byte [rsp + 0x132], al
mov byte [rsp + 0x133], cl
xor edx, edx
lea r8d, [rdx + 0x78]
lea rcx, [rsp + 0xb8]
call sub.msvcrt.dll_memset
mov r12, qword [rsp + 0x268]
mov r9, r12
lea r8, [0x10001e9f8]
lea rdx, [rsp + 0x90]
lea rcx, [rsp + 0x1a0]
call fcn.1000e8e14
xor ecx, ecx
cmp byte [rsp + 0x81], cl
je 0x1000a2a40
lea r8, [rsp + 0x478]
mov rdi, qword [rsp + 0x218]
mov rdx, rdi
mov rcx, rsi
call fcn.1000afc9c
cmp rdi, 0xffffffffffffffff
je 0x1000a2a30
mov rcx, rdi
call qword [sym.imp.SETUPAPI.dll_SetupDiDestroyDeviceInfoList]
or rdi, 0xffffffffffffffff
mov qword [rsp + 0x218], rdi
xor ecx, ecx
jmp 0x1000a2a48
mov rdi, qword [rsp + 0x218]
cmp byte [rsp + 0x88], cl
je 0x1000a302e
mov qword [rsp + 0x138], rcx
mov dword [rsp + 0x140], ecx
mov dword [rsp + 0x144], ecx
mov eax, dword [rsp + 0x7f8]
mov dword [rsp + 0x148], eax
mov dword [rsp + 0x150], ecx
cmp dword [rsp + 0x158], ecx
jbe 0x1000a2bb3
mov rax, qword [rsp + 0x178]
lea rdx, [rsp + 0x138]
mov ecx, dword [rax]
call fcn.1000cafd0
xor edx, edx
cmp al, dl
jne 0x1000a2b61
movsxd r13, dword [rsp + 0x140]
lea eax, [r13 + 1]
cmp eax, edx
jle 0x1000a2b93
mov ecx, dword [rsp + 0x144]
cmp r13d, ecx
jne 0x1000a2b3d
cmp r13d, 0x3fffffff
jg 0x1000a2b93
movabs r8, 0x1fffffffffffffff
cmp r13, r8
ja 0x1000a2b93
lea eax, [r13 + r13]
cmp ecx, edx
lea ecx, [rdx + 1]
cmove eax, ecx
mov dword [rsp + 0x84], eax
movsxd rdx, eax
shl rdx, 2
mov rcx, qword [rsp + 0x138]
call qword [sym.imp.msvcrt.dll_realloc]
mov r11, rax
xor edx, edx
cmp rax, rdx
je 0x1000a2b93
mov eax, dword [rsp + 0x84]
mov dword [rsp + 0x144], eax
mov qword [rsp + 0x138], r11
lea eax, [r13 + 1]
jmp 0x1000a2b45
mov r11, qword [rsp + 0x138]
mov dword [rsp + 0x140], eax
lea rcx, [r11 + r13*4]
cmp rcx, rdx
je 0x1000a2b61
mov rax, qword [rsp + 0x178]
mov eax, dword [rax]
mov dword [rcx], eax
mov ecx, dword [rsp + 0x150]
inc ecx
mov dword [rsp + 0x150], ecx
mov rax, qword [rsp + 0x178]
add rax, 0x18
mov qword [rsp + 0x178], rax
cmp ecx, dword [rsp + 0x158]
jae 0x1000a2bb3
jmp 0x1000a2a95
mov dword [rsp + 0x84], 0x8007000e
lea rdx, [0x100172740]
lea rcx, [rsp + 0x84]
call sub.msvcrt.dll__CxxThrowException
int3
lea rdx, [rsp + 0x138]
mov rcx, rsi
call fcn.1000ac960
xor r10d, r10d
mov r13d, r10d
mov edx, dword [rsp + 0x140]
cmp edx, r10d
jle 0x1000a2c75
mov rcx, r10
mov qword [rsp + 0x198], rcx
lea r11d, [r10 + 1]
cmp rcx, r10
jl 0x1000a2c60
cmp r13d, edx
jge 0x1000a2c60
mov rax, qword [rsp + 0x138]
mov dl, byte [rsp + 0x80]
mov byte [rsp + 0x28], dl
mov edx, dword [rsp + 0x7e0]
mov dword [rsp + 0x20], edx
mov r9, qword [rsp + 0x2f0]
mov r8, qword [rsp + 0x2e0]
mov edx, dword [rax + rcx]
mov rcx, rsi
call fcn.1000aa700
xor r10d, r10d
cmp al, r10b
je 0x1000a2f53
lea r11d, [r10 + 1]
add r13d, r11d
mov rcx, qword [rsp + 0x198]
add rcx, 4
mov qword [rsp + 0x198], rcx
mov edx, dword [rsp + 0x140]
cmp r13d, edx
jl 0x1000a2be8
jmp 0x1000a2c7b
xor r9d, r9d
xor r8d, r8d
mov edx, r11d
mov ecx, 0xc000008c
call qword [sym.imp.KERNEL32.dll_RaiseException]
mov r11d, 1
mov rax, qword [rsp + 0x170]
mov byte [rax], r11b
cmp dword [rsp + 0x7f8], r10d
je 0x1000a2f30
mov r13d, r10d
cmp edx, r10d
jle 0x1000a2e55
mov rax, r10
mov qword [rsp + 0x168], rax
mov rsi, qword [rsp + 0x190]
cmp rax, r10
jl 0x1000a2e40
cmp r13d, edx
jge 0x1000a2e40
mov rax, qword [rsp + 0x138]
mov rdx, rsi
mov rcx, qword [rsp + 0x168]
mov ecx, dword [rax + rcx]
call fcn.1000cafd0
xor r10d, r10d
cmp al, r10b
jne 0x1000a2dd2
mov edx, dword [rsp + 0x140]
cmp r13d, edx
jge 0x1000a2e2a
mov r9, qword [rsp + 0x138]
mov qword [rsp + 0x170], r9
mov r8, qword [rsp + 0x190]
movsxd rsi, dword [r8 + 8]
lea eax, [rsi + 1]
cmp eax, r10d
jle 0x1000a2e0a
cmp esi, dword [r8 + 0xc]
jne 0x1000a2da2
cmp esi, 0x3fffffff
jg 0x1000a2e0a
movabs rcx, 0x1fffffffffffffff
cmp rsi, rcx
ja 0x1000a2e0a
lea eax, [rsi + rsi]
cmp dword [r8 + 0xc], r10d
lea ecx, [r10 + 1]
cmove eax, ecx
mov dword [rsp + 0x84], eax
movsxd rdx, eax
shl rdx, 2
mov rcx, qword [r8]
call qword [sym.imp.msvcrt.dll_realloc]
xor r10d, r10d
cmp rax, r10
je 0x1000a2e0a
mov ecx, dword [rsp + 0x84]
mov r8, qword [rsp + 0x190]
mov dword [r8 + 0xc], ecx
mov qword [r8], rax
mov edx, dword [rsp + 0x140]
lea eax, [rsi + 1]
mov r9, qword [rsp + 0x170]
mov dword [r8 + 8], eax
mov rax, qword [r8]
lea r8, [rax + rsi*4]
cmp r8, r10
je 0x1000a2ddb
mov rax, qword [rsp + 0x168]
mov eax, dword [r9 + rax]
mov dword [r8], eax
mov edx, dword [rsp + 0x140]
mov rsi, qword [rsp + 0x190]
jmp 0x1000a2de3
mov edx, dword [rsp + 0x140]
jmp 0x1000a2de3
mov rsi, qword [rsp + 0x190]
mov r11d, 1
add r13d, r11d
mov rax, qword [rsp + 0x168]
add rax, 4
mov qword [rsp + 0x168], rax
cmp r13d, edx
jge 0x1000a2e55
jmp 0x1000a2cb3
mov dword [rsp + 0x84], 0x8007000e
lea rdx, [0x100172740]
lea rcx, [rsp + 0x84]
call sub.msvcrt.dll__CxxThrowException
int3
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 1]
mov ecx, 0xc000008c
call qword [sym.imp.KERNEL32.dll_RaiseException]
xor r9d, r9d
xor r8d, r8d
mov edx, r11d
mov ecx, 0xc000008c
call qword [sym.imp.KERNEL32.dll_RaiseException]
mov rcx, qword [rsp + 0x138]
cmp rcx, r10
je 0x1000a2e73
call qword [sym.imp.msvcrt.dll_free]
xor r10d, r10d
mov qword [rsp + 0x138], r10
mov dword [rsp + 0x140], r10d
mov dword [rsp + 0x144], r10d
cmp r14, r10
je 0x1000a2e94
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_LocalFree]
xor r10d, r10d
cmp rbp, r10
je 0x1000a2ea4
mov rcx, rbp
call sub.NETAPI32.dll_NetApiBufferFree
xor r10d, r10d
cmp r15, r10
je 0x1000a2eb5
mov rcx, r15
call qword [sym.imp.msvcrt.dll_free]
xor r10d, r10d
cmp rbx, r10
je 0x1000a2ec3
mov rcx, rbx
call fcn.10012fea8
nop
mov rcx, qword [rsp + 0x180]
call qword [sym.imp.msvcrt.dll_free]
nop
lea rcx, [rsp + 0x270]
call fcn.100052f58
nop
xor ecx, ecx
cmp r12, rcx
je 0x1000a2ef1
mov rcx, r12
call qword [sym.imp.ole32.dll_CoTaskMemFree]
nop
cmp rdi, 0xffffffffffffffff
je 0x1000a2f01
mov rcx, rdi
call qword [sym.imp.SETUPAPI.dll_SetupDiDestroyDeviceInfoList]
nop
lea rcx, [rsp + 0x220]
call fcn.1000cc8d4
nop
mov rcx, qword [rsp + 0x160]
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
nop
lea rcx, [rsp + 0x1a0]
call fcn.1000e7d24
jmp 0x1000a3e5c
lea rdx, [rsp + 0x138]
mov rcx, rsi
call fcn.1000ac16c
lea rdx, [rsp + 0x138]
mov rcx, rsi
call fcn.1000ab694
xor r10d, r10d
mov rcx, qword [rsp + 0x138]
cmp rcx, r10
je 0x1000a2f71
call qword [sym.imp.msvcrt.dll_free]
xor r10d, r10d
mov qword [rsp + 0x138], r10
mov dword [rsp + 0x140], r10d
mov dword [rsp + 0x144], r10d
cmp r14, r10
je 0x1000a2f92
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_LocalFree]
xor r10d, r10d
cmp rbp, r10
je 0x1000a2fa2
mov rcx, rbp
call sub.NETAPI32.dll_NetApiBufferFree
xor r10d, r10d
cmp r15, r10
je 0x1000a2fb3
mov rcx, r15
call qword [sym.imp.msvcrt.dll_free]
xor r10d, r10d
cmp rbx, r10
je 0x1000a2fc1
mov rcx, rbx
call fcn.10012fea8
nop
mov rcx, qword [rsp + 0x180]
call qword [sym.imp.msvcrt.dll_free]
nop
lea rcx, [rsp + 0x270]
call fcn.100052f58
nop
xor ecx, ecx
cmp r12, rcx
je 0x1000a2fef
mov rcx, r12
call qword [sym.imp.ole32.dll_CoTaskMemFree]
nop
cmp rdi, 0xffffffffffffffff
je 0x1000a2fff
mov rcx, rdi
call qword [sym.imp.SETUPAPI.dll_SetupDiDestroyDeviceInfoList]
nop
lea rcx, [rsp + 0x220]
call fcn.1000cc8d4
nop
mov rcx, qword [rsp + 0x160]
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
nop
lea rcx, [rsp + 0x1a0]
call fcn.1000e7d24
jmp 0x1000a3e5c
mov rax, qword [rsp + 0x178]
mov ecx, dword [rax]
mov dword [rsp + 0x150], ecx
mov al, byte [rsp + 0x80]
mov byte [rsp + 0x28], al
mov eax, dword [rsp + 0x7e0]
mov dword [rsp + 0x20], eax
mov r9, qword [rsp + 0x2f0]
mov r8, qword [rsp + 0x2e0]
mov edx, ecx
mov rcx, rsi
call fcn.1000aa700
xor ecx, ecx
cmp al, cl
jne 0x1000a31bc
lea rax, [0x10001e120]
mov qword [rsp + 0x90], rax
lea rax, [0x10001e4d0]
mov qword [rsp + 0x98], rax
lea rax, [0x10001e100]
mov qword [rsp + 0xa0], rax
mov dword [rsp + 0xa8], 0x367
lea eax, [rcx + 1]
mov dword [rsp + 0xac], eax
mov dword [rsp + 0xb0], 0xff
xor esi, esi
mov word [rsp + 0x130], si
mov byte [rsp + 0x132], sil
mov byte [rsp + 0x133], al
xor edx, edx
lea r8d, [rcx + 0x78]
lea rcx, [rsp + 0xb8]
call sub.msvcrt.dll_memset
mov r9d, dword [rsp + 0x150]
lea r8, [0x10001ea40]
lea rdx, [rsp + 0x90]
lea rcx, [rsp + 0x1a0]
call fcn.1000e8e14
nop
cmp r14, rsi
je 0x1000a3126
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_LocalFree]
nop
cmp rbp, rsi
je 0x1000a3134
mov rcx, rbp
call sub.NETAPI32.dll_NetApiBufferFree
nop
cmp r15, rsi
je 0x1000a3143
mov rcx, r15
call qword [sym.imp.msvcrt.dll_free]
nop
cmp rbx, rsi
je 0x1000a3151
mov rcx, rbx
call fcn.10012fea8
nop
mov rcx, qword [rsp + 0x180]
call qword [sym.imp.msvcrt.dll_free]
nop
lea rcx, [rsp + 0x270]
call fcn.100052f58
nop
cmp r12, rsi
je 0x1000a317d
mov rcx, r12
call qword [sym.imp.ole32.dll_CoTaskMemFree]
nop
cmp rdi, 0xffffffffffffffff
je 0x1000a318d
mov rcx, rdi
call qword [sym.imp.SETUPAPI.dll_SetupDiDestroyDeviceInfoList]
nop
lea rcx, [rsp + 0x220]
call fcn.1000cc8d4
nop
mov rcx, qword [rsp + 0x160]
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
nop
lea rcx, [rsp + 0x1a0]
call fcn.1000e7d24
jmp 0x1000a3e5c
mov eax, 1
cmp dword [rsp + 0x7f0], eax
jne 0x1000a333e
xor r13d, r13d
mov qword [rsp + 0x138], r13
mov dword [rsp + 0x140], r13d
mov dword [rsp + 0x144], r13d
lea edx, [rax + 3]
xor ecx, ecx
call qword [sym.imp.msvcrt.dll_realloc]
cmp rax, r13
je 0x1000a331e
lea ecx, [r13 + 1]
mov dword [rsp + 0x144], ecx
mov qword [rsp + 0x138], rax
mov dword [rsp + 0x140], ecx
mov r8d, dword [rsp + 0x150]
mov dword [rax], r8d
mov eax, dword [rsp + 0x7f8]
mov dword [rsp + 0x148], eax
lea rdx, [rsp + 0x138]
mov rcx, rsi
call fcn.1000ab694
mov rax, qword [rsp + 0x170]
lea ecx, [r13 + 1]
mov byte [rax], cl
mov rcx, qword [rsp + 0x138]
cmp rcx, r13
je 0x1000a3269
call qword [sym.imp.msvcrt.dll_free]
mov qword [rsp + 0x138], r13
mov dword [rsp + 0x140], r13d
mov dword [rsp + 0x144], r13d
cmp r14, r13
je 0x1000a3288
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_LocalFree]
nop
cmp rbp, r13
je 0x1000a3296
mov rcx, rbp
call sub.NETAPI32.dll_NetApiBufferFree
nop
cmp r15, r13
je 0x1000a32a5
mov rcx, r15
call qword [sym.imp.msvcrt.dll_free]
nop
cmp rbx, r13
je 0x1000a32b3
mov rcx, rbx
call fcn.10012fea8
nop
mov rcx, qword [rsp + 0x180]
call qword [sym.imp.msvcrt.dll_free]
nop
lea rcx, [rsp + 0x270]
call fcn.100052f58
nop
cmp r12, r13
je 0x1000a32df
mov rcx, r12
call qword [sym.imp.ole32.dll_CoTaskMemFree]
nop
cmp rdi, 0xffffffffffffffff
je 0x1000a32ef
mov rcx, rdi
call qword [sym.imp.SETUPAPI.dll_SetupDiDestroyDeviceInfoList]
nop
lea rcx, [rsp + 0x220]
call fcn.1000cc8d4
nop
mov rcx, qword [rsp + 0x160]
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
nop
lea rcx, [rsp + 0x1a0]
call fcn.1000e7d24
jmp 0x1000a3e5c
mov dword [rsp + 0x84], 0x8007000e
lea rdx, [0x100172740]
lea rcx, [rsp + 0x84]
call sub.msvcrt.dll__CxxThrowException
nop
mov dword [rsp + 0x158], ecx
lea rdx, [0x10017643c]
mov ecx, 0x28
call fcn.100130584
mov rsi, rax
xor eax, eax
cmp rsi, rax
jne 0x1000a33fd
lea rcx, [0x10001e120]
mov qword [rsp + 0x90], rcx
lea rcx, [0x10001e4d0]
mov qword [rsp + 0x98], rcx
lea rcx, [0x10001e100]
mov qword [rsp + 0xa0], rcx
mov dword [rsp + 0xa8], 0x38a
lea ecx, [rax + 1]
mov dword [rsp + 0xac], ecx
mov dword [rsp + 0xb0], 0xff
mov word [rsp + 0x130], ax
mov byte [rsp + 0x132], al
mov byte [rsp + 0x133], cl
xor edx, edx
lea r8d, [rax + 0x78]
lea rcx, [rsp + 0xb8]
call sub.msvcrt.dll_memset
lea r9, [0x10001ea90]
mov r8d, 0x8007000e
lea rdx, [rsp + 0x90]
lea rcx, [rsp + 0x1a0]
call fcn.1000e8ff8
int3
xor edx, edx
lea r8d, [rdx + 0x28]
mov rcx, rsi
call sub.msvcrt.dll_memset
mov rax, qword [rsp + 0x178]
mov qword [rsi + 0x10], rax
mov qword [rsi], rbx
mov eax, dword [rsp + 0x188]
mov dword [rsi + 8], eax
xor ecx, ecx
mov qword [rsp + 0x2e8], rcx
lea rax, [0x1000391a8]
mov qword [rsp + 0x2e0], rax
mov qword [rsp + 0x2f8], rsi
lea rax, [0x100022770]
mov qword [rsp + 0x2f0], rax
lea rax, [rsp + 0x158]
mov qword [rsp + 0x20], rax
mov r9, rsi
mov r8d, dword [rsp + 0x150]
lea rdx, [rsp + 0x220]
mov rcx, qword [rsp + 0x168]
call fcn.1000a4960
xor ecx, ecx
cmp al, cl
jne 0x1000a3796
mov word [rsp + 0x4a0], cx
xor edx, edx
lea r8d, [rcx + 0x7e]
lea rcx, [rsp + 0x4a2]
call sub.msvcrt.dll_memset
mov dword [rsp + 0x20], 0x40
lea r9, [rsp + 0x4a0]
mov r8d, dword [rsp + 0x150]
lea rdx, [rsp + 0x1a0]
mov rcx, qword [rsp + 0x168]
call fcn.1000c5b98
xor ecx, ecx
cmp dword [rsp + 0x158], ecx
je 0x1000a3624
lea rsi, [0x10001e120]
mov qword [rsp + 0x90], rsi
lea rbp, [0x10001e4d0]
mov qword [rsp + 0x98], rbp
lea r12, [0x10001e100]
mov qword [rsp + 0xa0], r12
mov dword [rsp + 0xa8], 0x3a5
mov dword [rsp + 0xac], 6
mov r14d, 0xff
mov dword [rsp + 0xb0], r14d
xor edi, edi
mov word [rsp + 0x130], di
mov byte [rsp + 0x132], dil
lea ebx, [rcx + 1]
mov byte [rsp + 0x133], bl
lea r15d, [rcx + 0x78]
mov r8, r15
xor edx, edx
lea rcx, [rsp + 0xb8]
call sub.msvcrt.dll_memset
mov r8, r13
lea rdx, [rsp + 0x3c0]
lea rcx, [rsp + 0x90]
call fcn.1000e7a68
mov r9d, ebx
mov r8, rax
mov edx, 0x303e
lea rcx, [rsp + 0x1a0]
call fcn.1000eb278
lea rcx, [rsp + 0x90]
call fcn.1000e7688
mov qword [rsp + 0x90], rsi
mov qword [rsp + 0x98], rbp
mov qword [rsp + 0xa0], r12
mov dword [rsp + 0xa8], 0x3a6
mov dword [rsp + 0xac], 6
mov dword [rsp + 0xb0], r14d
mov word [rsp + 0x130], di
mov byte [rsp + 0x132], dil
mov byte [rsp + 0x133], bl
mov r8, r15
xor edx, edx
lea rcx, [rsp + 0xb8]
call sub.msvcrt.dll_memset
lea r9, [0x10001eaf0]
mov r8d, 0x80042302
lea rdx, [rsp + 0x90]
lea rcx, [rsp + 0x1a0]
call fcn.1000e8ff8
int3
lea rax, [0x10001e120]
mov qword [rsp + 0x90], rax
lea rax, [0x10001e4d0]
mov qword [rsp + 0x98], rax
lea rax, [0x10001e100]
mov qword [rsp + 0xa0], rax
mov dword [rsp + 0xa8], 0x3a9
mov dword [rsp + 0xac], 6
mov dword [rsp + 0xb0], 0xff
xor r13d, r13d
mov word [rsp + 0x130], r13w
mov byte [rsp + 0x132], r13b
lea eax, [r13 + 1]
mov byte [rsp + 0x133], al
xor edx, edx
lea r8d, [r13 + 0x78]
lea rcx, [rsp + 0xb8]
call sub.msvcrt.dll_memset
lea r8, [rsp + 0x4a0]
lea rdx, [rsp + 0x3c0]
lea rcx, [rsp + 0x90]
call fcn.1000e7a68
lea r9d, [r13 + 1]
mov r8, rax
mov edx, 0x3040
lea rcx, [rsp + 0x1a0]
call fcn.1000eb278
lea rcx, [rsp + 0x90]
call fcn.1000e7688
nop
mov rcx, rsi
call fcn.10012fea8
nop
cmp r14, r13
je 0x1000a3700
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_LocalFree]
nop
cmp rbp, r13
je 0x1000a370e
mov rcx, rbp
call sub.NETAPI32.dll_NetApiBufferFree
nop
cmp r15, r13
je 0x1000a371d
mov rcx, r15
call qword [sym.imp.msvcrt.dll_free]
nop
cmp rbx, r13
je 0x1000a372b
mov rcx, rbx
call fcn.10012fea8
nop
mov rcx, qword [rsp + 0x180]
call qword [sym.imp.msvcrt.dll_free]
nop
lea rcx, [rsp + 0x270]
call fcn.100052f58
nop
cmp r12, r13
je 0x1000a3757
mov rcx, r12
call qword [sym.imp.ole32.dll_CoTaskMemFree]
nop
cmp rdi, 0xffffffffffffffff
je 0x1000a3767
mov rcx, rdi
call qword [sym.imp.SETUPAPI.dll_SetupDiDestroyDeviceInfoList]
nop
lea rcx, [rsp + 0x220]
call fcn.1000cc8d4
nop
mov rcx, qword [rsp + 0x160]
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
nop
lea rcx, [rsp + 0x1a0]
call fcn.1000e7d24
jmp 0x1000a3e5c
mov rcx, qword [rsi + 0x18]
mov qword [rsp + 0x170], rcx
mov qword [rsp + 0x2e8], rcx
mov r8, qword [rsp + 0x300]
mov rax, qword [r8]
mov rdx, rcx
mov rcx, r8
call qword [rax + 0x88]
mov dword [rsp + 0x1a8], eax
lea rax, [0x10001e120]
mov qword [rsp + 0x90], rax
lea rax, [0x10001e4d0]
mov qword [rsp + 0x98], rax
lea rax, [0x10001e100]
mov qword [rsp + 0xa0], rax
mov dword [rsp + 0xa8], 0x3b2
mov eax, 1
mov dword [rsp + 0xac], eax
mov dword [rsp + 0xb0], 0xff
xor r15d, r15d
mov word [rsp + 0x130], r15w
mov byte [rsp + 0x132], r15b
mov byte [rsp + 0x133], al
xor edx, edx
lea r8d, [rax + 0x77]
lea rcx, [rsp + 0xb8]
call sub.msvcrt.dll_memset
lea r8, [0x10001eb70]
lea rdx, [rsp + 0x90]
lea rcx, [rsp + 0x1a0]
call fcn.100052600
mov qword [rsp + 0x330], r15
mov byte [rsp + 0x358], r15b
mov byte [rsp + 0x359], r15b
mov dword [rsp + 0x35c], r15d
mov dword [rsp + 0x360], r15d
mov qword [rsp + 0x368], r15
mov dword [rsp + 0x370], r15d
mov dword [rsp + 0x374], r15d
mov dword [rsp + 0x378], r15d
mov qword [rsp + 0x380], r15
mov word [rsp + 0x388], r15w
mov qword [rsp + 0x398], r15
lea rax, [0x10000d468]
mov qword [rsp + 0x390], rax
xor edx, edx
lea r8d, [r15 + 0x20]
lea rcx, [rsp + 0x338]
call sub.msvcrt.dll_memset
nop
mov dword [rsp + 0x40], 0x80
mov dword [rsp + 0x38], 3
mov dword [rsp + 0x30], 0xc0000000
mov dword [rsp + 0x28], r15d
mov byte [rsp + 0x20], r15b
xor r9d, r9d
mov r8, qword [rsi + 0x18]
lea rdx, [rsp + 0x1a0]
lea rcx, [rsp + 0x330]
call fcn.100052ffc
mov r15d, eax
mov dword [rsp + 0x1a8], eax
xor eax, eax
cmp r15d, eax
jge 0x1000a39da
lea rcx, [0x10001e120]
mov qword [rsp + 0x90], rcx
lea rcx, [0x10001e4d0]
mov qword [rsp + 0x98], rcx
lea rcx, [0x10001e100]
mov qword [rsp + 0xa0], rcx
mov dword [rsp + 0xa8], 0x3bb
lea ecx, [rax + 1]
mov dword [rsp + 0xac], ecx
mov dword [rsp + 0xb0], 0xff
mov word [rsp + 0x130], ax
mov byte [rsp + 0x132], al
mov byte [rsp + 0x133], cl
xor edx, edx
lea r8d, [rax + 0x78]
lea rcx, [rsp + 0xb8]
call sub.msvcrt.dll_memset
mov dword [rsp + 0x20], r15d
mov r9, qword [rsi + 0x18]
lea r8, [0x10001ebd0]
lea rdx, [rsp + 0x90]
lea rcx, [rsp + 0x1a0]
call fcn.1000e8e14
xor eax, eax
jmp 0x1000a3af0
mov qword [rsp + 0x30], rax
mov byte [rsp + 0x28], al
mov dword [rsp + 0x20], eax
xor r9d, r9d
mov r8d, 0x56c008
lea rdx, [rsp + 0x1a0]
lea rcx, [rsp + 0x330]
call fcn.100053740
mov r15d, eax
mov dword [rsp + 0x1a8], eax
xor eax, eax
cmp r15d, eax
jge 0x1000a3abe
lea rcx, [0x10001e120]
mov qword [rsp + 0x90], rcx
lea rcx, [0x10001e4d0]
mov qword [rsp + 0x98], rcx
lea rcx, [0x10001e100]
mov qword [rsp + 0xa0], rcx
mov dword [rsp + 0xa8], 0x3c3
lea ecx, [rax + 1]
mov dword [rsp + 0xac], ecx
mov dword [rsp + 0xb0], 0xff
mov word [rsp + 0x130], ax
mov byte [rsp + 0x132], al
mov byte [rsp + 0x133], cl
xor edx, edx
lea r8d, [rax + 0x78]
lea rcx, [rsp + 0xb8]
call sub.msvcrt.dll_memset
mov dword [rsp + 0x20], r15d
mov r9, qword [rsi + 0x18]
lea r8, [0x10001ec20]
lea rdx, [rsp + 0x90]
lea rcx, [rsp + 0x1a0]
call fcn.1000e8e14
xor eax, eax
mov dword [rsp + 0x1a8], eax
mov rcx, qword [rsp + 0x330]
cmp rcx, rax
je 0x1000a3ad3
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor eax, eax
mov qword [rsp + 0x330], rax
mov dword [rsp + 0x35c], eax
mov dword [rsp + 0x370], eax
mov dword [rsp + 0x378], eax
mov word [rsp + 0x550], ax
xor edx, edx
mov r8d, 0x206
lea rcx, [rsp + 0x552]
call sub.msvcrt.dll_memset
mov r9d, 0x104
lea r8, [rsp + 0x550]
mov rdx, qword [rsi + 0x18]
mov r15, qword [rsp + 0x168]
mov rcx, r15
call fcn.1000ae204
xor ecx, ecx
cmp al, cl
jne 0x1000a3bd5
lea rax, [0x10001e120]
mov qword [rsp + 0x90], rax
lea rax, [0x10001e4d0]
mov qword [rsp + 0x98], rax
lea rax, [0x10001e100]
mov qword [rsp + 0xa0], rax
mov dword [rsp + 0xa8], 0x3cf
mov dword [rsp + 0xac], 6
mov dword [rsp + 0xb0], 0xff
mov word [rsp + 0x130], cx
mov byte [rsp + 0x132], cl
lea eax, [rcx + 1]
mov byte [rsp + 0x133], al
xor edx, edx
lea r8d, [rcx + 0x78]
lea rcx, [rsp + 0xb8]
call sub.msvcrt.dll_memset
mov r9, qword [rsi + 0x18]
lea r8, [0x10001ec98]
lea rdx, [rsp + 0x90]
lea rcx, [rsp + 0x1a0]
call fcn.1000e8e14
xor ecx, ecx
cmp dword [rsp + 0x84], ecx
je 0x1000a3caa
lea r8, [rsp + 0x550]
mov rdx, r13
mov rcx, r15
call fcn.1000aebf0
xor ecx, ecx
cmp al, cl
jne 0x1000a3d6d
lea rax, [0x10001e120]
mov qword [rsp + 0x90], rax
lea rax, [0x10001e4d0]
mov qword [rsp + 0x98], rax
lea rax, [0x10001e100]
mov qword [rsp + 0xa0], rax
mov dword [rsp + 0xa8], 0x3d5
mov dword [rsp + 0xac], 6
mov dword [rsp + 0xb0], 0xff
mov word [rsp + 0x130], cx
mov byte [rsp + 0x132], cl
lea eax, [rcx + 1]
mov byte [rsp + 0x133], al
xor edx, edx
lea r8d, [rcx + 0x78]
lea rcx, [rsp + 0xb8]
call sub.msvcrt.dll_memset
lea r11, [rsp + 0x550]
mov qword [rsp + 0x20], r11
mov r9, r13
lea r8, [0x10001ecc8]
lea rdx, [rsp + 0x90]
lea rcx, [rsp + 0x1a0]
call fcn.1000e8e14
jmp 0x1000a3d6d
lea r8, [rsp + 0x550]
mov rdx, r13
mov rcx, r15
call fcn.1000ae870
xor ecx, ecx
cmp al, cl
jne 0x1000a3d6d
lea rax, [0x10001e120]
mov qword [rsp + 0x90], rax
lea rax, [0x10001e4d0]
mov qword [rsp + 0x98], rax
lea rax, [0x10001e100]
mov qword [rsp + 0xa0], rax
mov dword [rsp + 0xa8], 0x3dd
mov dword [rsp + 0xac], 6
mov dword [rsp + 0xb0], 0xff
mov word [rsp + 0x130], cx
mov byte [rsp + 0x132], cl
lea eax, [rcx + 1]
mov byte [rsp + 0x133], al
xor edx, edx
lea r8d, [rcx + 0x78]
lea rcx, [rsp + 0xb8]
call sub.msvcrt.dll_memset
lea r11, [rsp + 0x550]
mov qword [rsp + 0x20], r11
mov r9, r13
lea r8, [0x10001ed00]
lea rdx, [rsp + 0x90]
lea rcx, [rsp + 0x1a0]
call fcn.1000e8e14
mov r9, qword [rsp + 0x250]
lea r8, [rsp + 0x240]
mov rdx, qword [rsi + 0x18]
mov rcx, r15
call fcn.1000a5f88
nop
lea rcx, [rsp + 0x330]
call fcn.100052f58
nop
mov rcx, rsi
call fcn.10012fea8
nop
mov rcx, qword [rsp + 0x170]
xor esi, esi
cmp rcx, rsi
je 0x1000a3db7
call qword [sym.imp.KERNEL32.dll_LocalFree]
nop
cmp r14, rsi
je 0x1000a3dc6
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_LocalFree]
nop
cmp rbp, rsi
je 0x1000a3dd4
mov rcx, rbp
call sub.NETAPI32.dll_NetApiBufferFree
nop
mov rcx, qword [rsp + 0x240]
cmp rcx, rsi
je 0x1000a3de8
call qword [sym.imp.msvcrt.dll_free]
nop
cmp rbx, rsi
je 0x1000a3df6
mov rcx, rbx
call fcn.10012fea8
nop
mov rcx, qword [rsp + 0x180]
call qword [sym.imp.msvcrt.dll_free]
nop
lea rcx, [rsp + 0x270]
call fcn.100052f58
nop
cmp r12, rsi
je 0x1000a3e22
mov rcx, r12
call qword [sym.imp.ole32.dll_CoTaskMemFree]
nop
cmp rdi, 0xffffffffffffffff
je 0x1000a3e32
mov rcx, rdi
call qword [sym.imp.SETUPAPI.dll_SetupDiDestroyDeviceInfoList]
nop
lea rcx, [rsp + 0x220]
call fcn.1000cc8d4
nop
mov rcx, qword [rsp + 0x160]
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
nop
lea rcx, [rsp + 0x1a0]
call fcn.1000e7d24
mov rcx, qword [rsp + 0x760]
xor rcx, rsp
call fcn.1001303c0
add rsp, 0x778
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret