Function at 0x10000acd4
Capabilities:
Create thread

Disassembly:
push rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x2a8
mov rax, qword [0x100019110]
xor rax, rsp
mov qword [rsp + 0x290], rax
mov r14, rcx
mov rbp, r8
mov rsi, rdx
lea rcx, [rsp + 0x82]
xor r15d, r15d
xor edx, edx
mov r8d, 0x206
mov r13d, r9d
mov word [rsp + 0x80], r15w
call sub.msvcrt.dll_memset
call qword [sym.imp.SETUPAPI.dll_SetupGetThreadLogToken]
lea r12d, [r15 + 1]
mov edx, r12d
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
mov rdi, rax
mov qword [rsp + 0x50], rsi
mov qword [rsp + 0x58], rbp
mov qword [rsp + 0x70], rax
call qword [sym.imp.API_MS_Win_Core_Synch_L1_1_0.dll_CreateEventW]
lea r8, [0x100001cf0]
xor edx, edx
mov ecx, 0x100000
mov qword [rsp + 0x60], rax
call qword [sym.imp.API_MS_Win_Core_Synch_L1_1_0.dll_OpenEventW]
mov qword [rsp + 0x68], rax
cmp qword [rsp + 0x60], r15
jne 0x10000ada2
call qword [sym.imp.API_MS_Win_Core_ErrorHandling_L1_1_0.dll_GetLastError]
lea r9, [0x1000035e8]
mov r8d, r12d
mov edx, 0x1000000
mov rcx, rdi
mov ebx, eax
mov dword [rsp + 0x20], eax
call qword [sym.imp.SETUPAPI.dll_SetupWriteTextLog]
jmp 0x10000af4f
cmp rax, r15
jne 0x10000adb6
call qword [sym.imp.API_MS_Win_Core_ErrorHandling_L1_1_0.dll_GetLastError]
lea r9, [0x100003618]
jmp 0x10000ad86
lea r9, [rsp + 0x50]
lea r8, [0x100007d58]
xor edx, edx
xor ecx, ecx
mov qword [rsp + 0x28], r15
mov dword [rsp + 0x20], r15d
call qword [sym.imp.API_MS_Win_Core_ProcessThreads_L1_1_0.dll_CreateThread]
mov r12, rax
cmp rax, r15
jne 0x10000adf3
call qword [sym.imp.API_MS_Win_Core_ErrorHandling_L1_1_0.dll_GetLastError]
lea r9, [0x100003648]
mov r8d, 1
jmp 0x10000ad89
mov ebx, 4
test r13b, 0x20
jne 0x10000ae77
mov dword [rsp + 0x38], r15d
lea rax, [rsp + 0x40]
mov qword [rsp + 0x30], r15
lea r9, [rsp + 0x48]
lea r8, [0x100002110]
mov rdx, rbp
mov rcx, rsi
mov dword [rsp + 0x28], ebx
mov dword [rsp + 0x40], r15d
mov qword [rsp + 0x20], rax
call qword [sym.imp.SETUPAPI.dll_SetupDiGetDevicePropertyW]
lea r9d, [rbx + 3]
cmp eax, r15d
je 0x10000ae47
mov eax, dword [rsp + 0x40]
cmp dword [rsp + 0x48], r9d
je 0x10000ae4a
mov eax, r15d
and eax, 0xffffffdf
mov dword [rsp + 0x30], r15d
lea r8, [0x100002110]
mov dword [rsp + 0x40], eax
lea rax, [rsp + 0x40]
mov rdx, rbp
mov rcx, rsi
mov dword [rsp + 0x28], ebx
mov qword [rsp + 0x20], rax
call qword [sym.imp.SETUPAPI.dll_SetupDiSetDevicePropertyW]
lea r9, [rsp + 0x80]
mov r8d, r13d
mov rdx, rbp
mov rcx, rsi
call fcn.10000a574
mov rcx, qword [rsp + 0x60]
mov ebx, eax
call qword [sym.imp.API_MS_Win_Core_Synch_L1_1_0.dll_SetEvent]
xor r8d, r8d
mov edx, 0x2710
mov rcx, r12
call qword [sym.imp.API_MS_Win_Core_Synch_L1_1_0.dll_WaitForSingleObjectEx]
mov rcx, r12
call qword [sym.imp.API_MS_Win_Core_Handle_L1_1_0.dll_CloseHandle]
mov rcx, qword [rsp + 0x60]
call qword [sym.imp.API_MS_Win_Core_Handle_L1_1_0.dll_CloseHandle]
mov rcx, qword [rsp + 0x68]
mov qword [rsp + 0x60], r15
call qword [sym.imp.API_MS_Win_Core_Handle_L1_1_0.dll_CloseHandle]
mov qword [rsp + 0x68], r15
cmp ebx, r15d
je 0x10000aee3
cmp ebx, 0xe0000228
jne 0x10000af4f
jmp 0x10000af3c
lea rcx, [rsp + 0x40]
mov dword [rsp + 0x40], 0x3c
call fcn.10000b6f8
lea r8, [rsp + 0x48]
mov rdx, rbp
mov rcx, rsi
call fcn.10000aae0
mov edx, 0x1000000
mov rcx, rdi
mov ebx, eax
cmp eax, r15d
je 0x10000af29
lea r9, [0x100003670]
mov r8d, 1
call qword [sym.imp.SETUPAPI.dll_SetupWriteTextLog]
jmp 0x10000af4f
lea r9, [0x1000036a0]
mov r8d, 4
call qword [sym.imp.SETUPAPI.dll_SetupWriteTextLog]
mov r9d, r13d
mov r8, rbp
mov rdx, rsi
mov rcx, r14
call fcn.100008630
mov ebx, eax
cmp word [rsp + 0x80], r15w
je 0x10000afa8
mov rcx, qword [0x1000197e0]
cmp rcx, r15
je 0x10000af9f
lea rdx, [0x1000036d0]
call qword [sym.imp.API_MS_Win_Core_LibraryLoader_L1_1_0.dll_GetProcAddress]
cmp rax, r15
je 0x10000af84
lea rcx, [rsp + 0x80]
call rax
jmp 0x10000af9f
lea r9, [0x1000036e8]
mov edx, 0x1000000
mov r8d, 2
mov rcx, rdi
call qword [sym.imp.SETUPAPI.dll_SetupWriteTextLog]
mov word [rsp + 0x80], r15w
mov rcx, qword [rsp + 0x60]
cmp rcx, r15
je 0x10000afb8
call qword [sym.imp.API_MS_Win_Core_Handle_L1_1_0.dll_CloseHandle]
mov rcx, qword [rsp + 0x68]
cmp rcx, r15
je 0x10000afc8
call qword [sym.imp.API_MS_Win_Core_Handle_L1_1_0.dll_CloseHandle]
mov rcx, qword [0x1000197e0]
cmp rcx, r15
je 0x10000afda
call qword [sym.imp.API_MS_Win_Core_LibraryLoader_L1_1_0.dll_FreeLibrary]
mov eax, ebx
mov rcx, qword [rsp + 0x290]
xor rcx, rsp
call fcn.100014800
add rsp, 0x2a8
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret