Function at 0x14001e7c0
Capabilities:
Enumerate files on windows

Disassembly:
push rdi
push r12
push r13
push r14
push r15
mov eax, 0x1790
call fcn.1400dc000
sub rsp, rax
mov qword [rsp + 0xe0], 0xfffffffffffffffe
mov qword [rsp + 0x17c8], rbx
mov qword [rsp + 0x17d0], rbp
mov qword [rsp + 0x17d8], rsi
mov rax, qword [0x1401216d8]
xor rax, rsp
mov qword [rsp + 0x1780], rax
mov rsi, rcx
mov qword [rsp + 0x88], rcx
call fcn.14004b378
mov rdx, rax
xor r13d, r13d
mov ecx, r13d
test rax, rax
setne cl
test ecx, ecx
jne 0x14001e83b
mov ecx, 0x80004005
call fcn.140001610
int3
mov rax, qword [rax]
mov rcx, rdx
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetElement]
add rax, 0x18
mov qword [rsp + 0xa0], rax
lea rdx, [0x1400e1150]
test rdx, 0xffffffffffff0000
jne 0x14001e884
movzx edi, dx
mov ecx, edi
call fcn.14004b1a0
test rax, rax
je 0x14001e892
mov r8d, edi
mov rdx, rax
lea rcx, [rsp + 0xa0]
call fcn.140005c00
jmp 0x14001e892
lea rcx, [rsp + 0xa0]
call fcn.140006080
nop
call fcn.14004b378
mov rdx, rax
mov ecx, r13d
test rax, rax
setne cl
test ecx, ecx
jne 0x14001e8b2
mov ecx, 0x80004005
call fcn.140001610
int3
mov rax, qword [rax]
mov rcx, rdx
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetElement]
add rax, 0x18
mov qword [rsp + 0x90], rax
lea rdx, [0x1400e1138]
test rdx, 0xffffffffffff0000
jne 0x14001e8fb
movzx edi, dx
mov ecx, edi
call fcn.14004b1a0
test rax, rax
je 0x14001e909
mov r8d, edi
mov rdx, rax
lea rcx, [rsp + 0x90]
call fcn.140005c00
jmp 0x14001e909
lea rcx, [rsp + 0x90]
call fcn.140006080
nop
call fcn.14004b378
mov rdx, rax
mov ecx, r13d
test rax, rax
setne cl
test ecx, ecx
jne 0x14001e929
mov ecx, 0x80004005
call fcn.140001610
int3
mov rax, qword [rax]
mov rcx, rdx
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetElement]
add rax, 0x18
mov qword [rsp + 0x80], rax
lea rdx, [0x1400e1120]
test rdx, 0xffffffffffff0000
jne 0x14001e972
movzx edi, dx
mov ecx, edi
call fcn.14004b1a0
test rax, rax
je 0x14001e980
mov r8d, edi
mov rdx, rax
lea rcx, [rsp + 0x80]
call fcn.140005c00
jmp 0x14001e980
lea rcx, [rsp + 0x80]
call fcn.140006080
nop
call fcn.14004b378
mov rdx, rax
mov ecx, r13d
test rax, rax
setne cl
test ecx, ecx
jne 0x14001e9a0
mov ecx, 0x80004005
call fcn.140001610
int3
mov rax, qword [rax]
mov rcx, rdx
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetElement]
add rax, 0x18
mov qword [rsp + 0x70], rax
lea rdx, [0x1400e1108]
test rdx, 0xffffffffffff0000
jne 0x14001e9e3
movzx edi, dx
mov ecx, edi
call fcn.14004b1a0
test rax, rax
je 0x14001e9ee
mov r8d, edi
mov rdx, rax
lea rcx, [rsp + 0x70]
call fcn.140005c00
jmp 0x14001e9ee
lea rcx, [rsp + 0x70]
call fcn.140006080
nop
call fcn.14004b378
mov rdx, rax
mov ecx, r13d
test rax, rax
setne cl
test ecx, ecx
jne 0x14001ea0e
mov ecx, 0x80004005
call fcn.140001610
int3
mov rax, qword [rax]
mov rcx, rdx
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetElement]
add rax, 0x18
mov qword [rsp + 0x60], rax
lea rdx, [0x1400e10f0]
test rdx, 0xffffffffffff0000
jne 0x14001ea51
movzx edi, dx
mov ecx, edi
call fcn.14004b1a0
test rax, rax
je 0x14001ea5c
mov r8d, edi
mov rdx, rax
lea rcx, [rsp + 0x60]
call fcn.140005c00
jmp 0x14001ea5c
lea rcx, [rsp + 0x60]
call fcn.140006080
nop
call fcn.14004b378
mov rdx, rax
mov ecx, r13d
test rax, rax
setne cl
test ecx, ecx
jne 0x14001ea7c
mov ecx, 0x80004005
call fcn.140001610
int3
mov rax, qword [rax]
mov rcx, rdx
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetElement]
add rax, 0x18
mov qword [rsp + 0x58], rax
lea rdx, [0x1400e10d8]
test rdx, 0xffffffffffff0000
jne 0x14001eabf
movzx edi, dx
mov ecx, edi
call fcn.14004b1a0
test rax, rax
je 0x14001eaca
mov r8d, edi
mov rdx, rax
lea rcx, [rsp + 0x58]
call fcn.140005c00
jmp 0x14001eaca
lea rcx, [rsp + 0x58]
call fcn.140006080
nop
call fcn.14004b378
mov rdx, rax
mov ecx, r13d
test rax, rax
setne cl
test ecx, ecx
jne 0x14001eaea
mov ecx, 0x80004005
call fcn.140001610
int3
mov rax, qword [rax]
mov rcx, rdx
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetElement]
add rax, 0x18
mov qword [rsp + 0x78], rax
lea rdx, [0x1400e10c0]
test rdx, 0xffffffffffff0000
jne 0x14001eb2d
movzx edi, dx
mov ecx, edi
call fcn.14004b1a0
test rax, rax
je 0x14001eb38
mov r8d, edi
mov rdx, rax
lea rcx, [rsp + 0x78]
call fcn.140005c00
jmp 0x14001eb38
lea rcx, [rsp + 0x78]
call fcn.140006080
nop
mov word [rsp + 0x580], 0
xor edx, edx
mov r8d, 0x3fe
lea rcx, [rsp + 0x582]
call fcn.140091cf0
mov word [rsp + 0x1380], 0
xor edx, edx
mov r8d, 0x3fe
lea rcx, [rsp + 0x1382]
call fcn.140091cf0
call fcn.14004b378
mov rdx, rax
mov ecx, r13d
test rax, rax
setne cl
test ecx, ecx
jne 0x14001eb96
mov ecx, 0x80004005
call fcn.140001610
int3
mov rax, qword [rax]
mov rcx, rdx
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetElement]
add rax, 0x18
mov qword [rsp + 0xa8], rax
lea rbx, [0x1400def30]
mov rdi, rbx
shr rdi, 0x10
jne 0x14001ebe6
movzx ebx, bx
mov ecx, ebx
call fcn.14004b1a0
test rax, rax
je 0x14001ebf8
mov r8d, ebx
mov rdx, rax
lea rcx, [rsp + 0xa8]
call fcn.140005c00
lea rbx, [0x1400def30]
jmp 0x14001ebff
mov rdx, rbx
lea rcx, [rsp + 0xa8]
call fcn.140006080
jmp 0x14001ebff
lea rbx, [0x1400def30]
mov dword [rsp + 0x68], r13d
mov ebp, r13d
mov dword [rsp + 0x38], r13d
mov r12d, r13d
call fcn.14004b378
mov rdx, rax
mov ecx, r13d
test rax, rax
setne cl
test ecx, ecx
jne 0x14001ec2f
mov ecx, 0x80004005
call fcn.140001610
int3
mov rax, qword [rax]
mov rcx, rdx
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetElement]
add rax, 0x18
mov qword [rsp + 0x30], rax
call fcn.14004b378
mov r11, rax
mov ecx, r13d
test rax, rax
setne cl
test ecx, ecx
jne 0x14001ec61
mov ecx, 0x80004005
call fcn.140001610
int3
mov rax, qword [rax]
mov rcx, r11
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetElement]
add rax, 0x18
mov qword [rsp + 0x48], rax
test rdi, rdi
jne 0x14001ec99
movzx edi, bx
mov ecx, edi
call fcn.14004b1a0
test rax, rax
je 0x14001eca7
mov r8d, edi
mov rdx, rax
lea rcx, [rsp + 0x48]
call fcn.140005c00
jmp 0x14001eca7
mov rdx, rbx
lea rcx, [rsp + 0x48]
call fcn.140006080
nop
lea rdx, [rsp + 0xc8]
mov rcx, rsi
call fcn.140010a00
nop
lea r8, [0x1400df530]
mov rdx, rax
lea rcx, [rsp + 0xd8]
call fcn.1400067f0
mov r8, qword [rax]
mov edx, 0x200
lea rcx, [rsp + 0xd80]
call fcn.140092450
mov rdx, qword [rsp + 0xd8]
add rdx, 0xffffffffffffffe8
or r14, 0xffffffffffffffff
mov eax, r14d
lock xadd dword [rdx + 0x10], eax
add eax, r14d
test eax, eax
jg 0x14001ed0d
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0xc8]
add rdx, 0xffffffffffffffe8
mov eax, r14d
lock xadd dword [rdx + 0x10], eax
add eax, 0xffffffff
test eax, eax
jg 0x14001ed31
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
xor edx, edx
mov r8d, 0x250
lea rcx, [rsp + 0x120]
call fcn.140091cf0
lea r8, [rsp + 0xd80]
mov edx, 0x200
lea rcx, [rsp + 0x580]
call fcn.140092450
mov r8, qword [0x140123328]
mov edx, 0x200
lea rcx, [rsp + 0x580]
call fcn.140092500
lea r8, [0x1400e1338]
mov edx, 0x200
lea rcx, [rsp + 0x580]
call fcn.140092500
lea rdx, [rsp + 0x120]
lea rcx, [rsp + 0x580]
call qword [sym.imp.KERNEL32.dll_FindFirstFileW]
cmp rax, 0xffffffffffffffff
je 0x14001faff
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_FindClose]
mov r9d, 6
xor r8d, r8d
lea rdx, str.HDAUDIO
xor ecx, ecx
call qword [sym.imp.SETUPAPI.dll_SetupDiGetClassDevsW]
mov qword [rsp + 0x50], rax
mov dword [rsp + 0xf8], SafeArrayDestroyData
mov dword [rsp + 0x98], r13d
lea r8, [rsp + 0xf8]
xor edx, edx
mov rcx, rax
call qword [sym.imp.SETUPAPI.dll_SetupDiEnumDeviceInfo]
mov r15d, 0xa
test eax, eax
je 0x14001f955
lea edi, [r15 - 5]
mov rbx, qword [rsp + 0x30]
mov qword [rsp + 0x20], r13
mov r9d, 0x100
lea r8, [rsp + 0x980]
lea rdx, [rsp + 0xf8]
mov rcx, qword [rsp + 0x50]
call qword [sym.imp.SETUPAPI.dll_SetupDiGetDeviceInstanceIdW]
mov edx, r13d
mov eax, dword [0x1401232c8]
cmp eax, 0x5a
cmovl edx, edi
add eax, edx
mov dword [0x1401232c8], eax
movsxd r8, eax
xor r9d, r9d
mov edx, 0x402
mov rcx, qword [rsi + 0x3b060]
call qword [sym.imp.USER32.dll_SendMessageW]
xor edx, edx
mov rcx, rsi
call fcn.140002180
mov rdx, qword [rsp + 0xa0]
lea rcx, [rsp + 0x980]
call fcn.140090a10
test rax, rax
jne 0x14001ef26
mov rdx, qword [rsp + 0x90]
lea rcx, [rsp + 0x980]
call fcn.140090a10
test rax, rax
jne 0x14001ef26
mov rdx, qword [rsp + 0x80]
lea rcx, [rsp + 0x980]
call fcn.140090a10
test rax, rax
jne 0x14001ef26
mov rdx, qword [rsp + 0x70]
lea rcx, [rsp + 0x980]
call fcn.140090a10
test rax, rax
jne 0x14001ef26
mov rdx, qword [rsp + 0x60]
lea rcx, [rsp + 0x980]
call fcn.140090a10
test rax, rax
jne 0x14001ef26
mov rdx, qword [rsp + 0x58]
lea rcx, [rsp + 0x980]
call fcn.140090a10
test rax, rax
jne 0x14001ef26
mov rdx, qword [rsp + 0x78]
lea rcx, [rsp + 0x980]
call fcn.140090a10
test rax, rax
je 0x14001f8fa
lea r8, [rsp + 0x980]
mov edx, 0x100
lea rcx, [rsp + 0xb80]
call fcn.140092450
lea r8, [rsp + 0x980]
mov edx, 0x100
lea rcx, [rsp + 0x1180]
call fcn.140092450
mov word [rsp + 0x11f4], 0
add r12d, 1
mov dword [rsp + 0x3c], r12d
mov edi, r13d
mov dword [rsp + 0x40], r13d
mov eax, r13d
mov ecx, dword [0x1401232c8]
cmp ecx, 0x5a
cmovl eax, r15d
add ecx, eax
mov dword [0x1401232c8], ecx
movsxd r8, ecx
xor r9d, r9d
mov edx, 0x402
mov rcx, qword [rsi + 0x3b060]
call qword [sym.imp.USER32.dll_SendMessageW]
xor edx, edx
mov rcx, rsi
call fcn.140002180
mov word [rsp + 0xbe2], di
xor edx, edx
mov r8d, 0x250
lea rcx, [rsp + 0x120]
call fcn.140091cf0
lea r8, [rsp + 0xd80]
mov edx, 0x200
lea rcx, [rsp + 0x580]
call fcn.140092450
mov r8, qword [0x140123328]
mov edx, 0x200
lea rcx, [rsp + 0x580]
call fcn.140092500
lea r8, [0x1400e1338]
mov edx, 0x200
lea rcx, [rsp + 0x580]
call fcn.140092500
lea rdx, [rsp + 0x120]
lea rcx, [rsp + 0x580]
call qword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov r15, rax
cmp rax, 0xffffffffffffffff
je 0x14001f315
nop
nop
lea r8, [rsp + 0xd80]
mov edx, 0x200
lea rcx, [rsp + 0x580]
call fcn.140092450
lea r8, [rsp + 0x14c]
mov edx, 0x200
lea rcx, [rsp + 0x580]
call fcn.140092500
xor r9d, r9d
xor edx, edx
lea r8d, [r9 + 2]
lea rcx, [rsp + 0x580]
call qword [sym.imp.SETUPAPI.dll_SetupOpenInfFileW]
mov r12, rax
cmp rax, 0xffffffffffffffff
je 0x14001f2f8
lea r9, [rsp + 0xb0]
xor r8d, r8d
lea rdx, str.Manufacturer
mov rcx, rax
call qword [sym.imp.SETUPAPI.dll_SetupFindFirstLineW]
test eax, eax
je 0x14001f2ef
mov qword [rsp + 0x20], r13
mov r9d, 0x104
lea r8, [rsp + 0x370]
mov edx, 1
lea rcx, [rsp + 0xb0]
call qword [sym.imp.SETUPAPI.dll_SetupGetStringFieldW]
test eax, eax
je 0x14001f2ef
lea rax, [rsp + 0xb0]
mov qword [rsp + 0x20], rax
xor r9d, r9d
lea r8, [rsp + 0x370]
mov rdx, r12
mov rcx, rsi
call fcn.140003650
test eax, eax
jne 0x14001f11e
mov rcx, r12
call qword [sym.imp.SETUPAPI.dll_SetupCloseInfFile]
jmp 0x14001f2fc
lea r9, [rsp + 0xb0]
xor r8d, r8d
lea rdx, [rsp + 0x370]
mov rcx, r12
call qword [sym.imp.SETUPAPI.dll_SetupFindFirstLineW]
test eax, eax
je 0x14001f2ef
mov qword [rsp + 0x20], r13
mov r9d, 0x104
lea r8, [rsp + 0x370]
mov edx, 2
lea rcx, [rsp + 0xb0]
call qword [sym.imp.SETUPAPI.dll_SetupGetStringFieldW]
test eax, eax
je 0x14001f297
xor eax, eax
mov rcx, r14
lea rdi, [rsp + 0x370]
repne scasw ax, word [rdi]
not rcx
sub rcx, 1
mov rdi, rcx
test ecx, ecx
jne 0x14001f1e7
lea rdx, [rbx - 0x18]
mov rdi, qword [rdx]
cmp dword [rdx + 8], eax
je 0x14001f271
cmp dword [rdx + 0x10], eax
jge 0x14001f1b8
cmp dword [rbx - 0xc], eax
jl 0x14001f929
mov dword [rbx - 0x10], r13d
mov word [rbx], ax
jmp 0x14001f271
mov eax, r14d
lock xadd dword [rdx + 0x10], eax
add eax, 0xffffffff
test eax, eax
jg 0x14001f1d0
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetElement]
lea rbx, [rax + 0x18]
mov qword [rsp + 0x30], rbx
jmp 0x14001f271
mov esi, dword [rbx - 0x10]
lea rbp, [rsp + 0x370]
sub rbp, rbx
sar rbp, 1
mov ecx, 1
sub ecx, dword [rbx - 8]
mov eax, dword [rbx - 0xc]
sub eax, edi
or eax, ecx
jge 0x14001f21a
mov edx, edi
lea rcx, [rsp + 0x30]
call fcn.140004650
mov rbx, qword [rsp + 0x30]
cmp rbp, rsi
ja 0x14001f23a
movsxd rax, edi
lea rsi, [rax + rax]
lea r8, [rbx + rbp*2]
mov r9, rsi
mov rdx, rsi
mov rcx, rbx
call fcn.140090b50
jmp 0x14001f257
movsxd rax, edi
lea rsi, [rax + rax]
mov r9, rsi
lea r8, [rsp + 0x370]
mov rdx, rsi
mov rcx, rbx
call fcn.140090a80
test edi, edi
js 0x14001f934
cmp edi, dword [rbx - 0xc]
jg 0x14001f934
mov dword [rbx - 0x10], edi
mov word [rsi + rbx], 0
cmp dword [rbx - 0x10], 0
jl 0x14001f297
lea rdx, [rsp + 0xb80]
mov rcx, rbx
call fcn.140090a10
test rax, rax
je 0x14001f297
sub rax, rbx
sar rax, 1
cmp eax, 0xffffffff
jne 0x14001f2b6
lea rdx, [rsp + 0xb0]
lea rcx, [rsp + 0xb0]
call qword [sym.imp.SETUPAPI.dll_SetupFindNextLine]
test eax, eax
je 0x14001f2e3
jmp 0x14001f142
lea r8, [rsp + 0x580]
mov edx, 0x200
lea rcx, [rsp + 0x1380]
call fcn.140092450
mov edi, 1
mov dword [rsp + 0x40], edi
mov rsi, qword [rsp + 0x88]
jmp 0x14001f2ef
mov edi, dword [rsp + 0x40]
mov rsi, qword [rsp + 0x88]
mov rcx, r12
call qword [sym.imp.SETUPAPI.dll_SetupCloseInfFile]
test edi, edi
jne 0x14001f315
lea rdx, [rsp + 0x120]
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x14001f040
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_FindClose]
test edi, edi
jne 0x14001f6bd
mov word [rsp + 0xbc2], di
xor edx, edx
mov r8d, 0x250
lea rcx, [rsp + 0x120]
call fcn.140091cf0
lea r8, [rsp + 0xd80]
mov edx, 0x200
lea rcx, [rsp + 0x580]
call fcn.140092450
mov r8, qword [0x140123328]
mov edx, 0x200
lea rcx, [rsp + 0x580]
call fcn.140092500
lea r8, [0x1400e1338]
mov edx, 0x200
lea rcx, [rsp + 0x580]
call fcn.140092500
lea rdx, [rsp + 0x120]
lea rcx, [rsp + 0x580]
call qword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov r15, rax
cmp rax, 0xffffffffffffffff
je 0x14001f6a4
lea r8, [rsp + 0xd80]
mov edx, 0x200
lea rcx, [rsp + 0x580]
call fcn.140092450
lea r8, [rsp + 0x14c]
mov edx, 0x200
lea rcx, [rsp + 0x580]
call fcn.140092500
xor r9d, r9d
xor edx, edx
lea r8d, [r9 + 2]
lea rcx, [rsp + 0x580]
call qword [sym.imp.SETUPAPI.dll_SetupOpenInfFileW]
mov r12, rax
cmp rax, 0xffffffffffffffff
je 0x14001f67f
lea r9, [rsp + 0xb0]
xor r8d, r8d
lea rdx, str.Manufacturer
mov rcx, rax
call qword [sym.imp.SETUPAPI.dll_SetupFindFirstLineW]
test eax, eax
je 0x14001f676
mov qword [rsp + 0x20], r13
mov r9d, 0x104
lea r8, [rsp + 0x370]
mov edx, 1
lea rcx, [rsp + 0xb0]
call qword [sym.imp.SETUPAPI.dll_SetupGetStringFieldW]
test eax, eax
je 0x14001f676
lea rax, [rsp + 0xb0]
mov qword [rsp + 0x20], rax
xor r9d, r9d
lea r8, [rsp + 0x370]
mov rdx, r12
mov rcx, rsi
call fcn.140003650
test eax, eax
jne 0x14001f490
mov rcx, r12
call qword [sym.imp.SETUPAPI.dll_SetupCloseInfFile]
jmp 0x14001f68b
lea r9, [rsp + 0xb0]
xor r8d, r8d
lea rdx, [rsp + 0x370]
mov rcx, r12
call qword [sym.imp.SETUPAPI.dll_SetupFindFirstLineW]
test eax, eax
je 0x14001f676
mov qword [rsp + 0x20], r13
mov r9d, 0x104
lea r8, [rsp + 0x370]
mov edx, 2
lea rcx, [rsp + 0xb0]
call qword [sym.imp.SETUPAPI.dll_SetupGetStringFieldW]
test eax, eax
je 0x14001f62e
xor eax, eax
mov rcx, r14
lea rdi, [rsp + 0x370]
repne scasw ax, word [rdi]
not rcx
sub rcx, 1
mov rdi, rcx
test ecx, ecx
jne 0x14001f559
lea rdx, [rbx - 0x18]
mov rdi, qword [rdx]
cmp dword [rdx + 8], eax
je 0x14001f5e3
cmp dword [rdx + 0x10], eax
jge 0x14001f52a
cmp dword [rbx - 0xc], eax
jl 0x14001f93f
mov dword [rbx - 0x10], r13d
mov word [rbx], ax
jmp 0x14001f5e3
mov eax, r14d
lock xadd dword [rdx + 0x10], eax
add eax, 0xffffffff
test eax, eax
jg 0x14001f542
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetElement]
lea rbx, [rax + 0x18]
mov qword [rsp + 0x30], rbx
jmp 0x14001f5e3
mov esi, dword [rbx - 0x10]
lea rbp, [rsp + 0x370]
sub rbp, rbx
sar rbp, 1
mov ecx, 1
sub ecx, dword [rbx - 8]
mov eax, dword [rbx - 0xc]
sub eax, edi
or eax, ecx
jge 0x14001f58c
mov edx, edi
lea rcx, [rsp + 0x30]
call fcn.140004650
mov rbx, qword [rsp + 0x30]
cmp rbp, rsi
ja 0x14001f5ac
movsxd rax, edi
lea rsi, [rax + rax]
lea r8, [rbx + rbp*2]
mov r9, rsi
mov rdx, rsi
mov rcx, rbx
call fcn.140090b50
jmp 0x14001f5c9
movsxd rax, edi
lea rsi, [rax + rax]
mov r9, rsi
lea r8, [rsp + 0x370]
mov rdx, rsi
mov rcx, rbx
call fcn.140090a80
test edi, edi
js 0x14001f94a
cmp edi, dword [rbx - 0xc]
jg 0x14001f94a
mov dword [rbx - 0x10], edi
mov word [rsi + rbx], 0
cmp dword [rbx - 0x10], 0
jl 0x14001f62e
lea rdx, [rsp + 0xb80]
mov rcx, rbx
call fcn.140090a10
test rax, rax
je 0x14001f62e
sub rax, rbx
sar rax, 1
cmp eax, 0xffffffff
je 0x14001f62e
cmp dword [rbx - 0x10], 0
jl 0x14001f64d
lea rdx, [0x1400e06c0]
mov rcx, rbx
call fcn.140090a10
test rax, rax
je 0x14001f64d
sub rax, rbx
sar rax, 1
cmp eax, 0xffffffff
je 0x14001f64d
lea rdx, [rsp + 0xb0]
lea rcx, [rsp + 0xb0]
call qword [sym.imp.SETUPAPI.dll_SetupFindNextLine]
test eax, eax
je 0x14001f672
jmp 0x14001f4b4
lea r8, [rsp + 0x580]
mov edx, 0x200
lea rcx, [rsp + 0x1380]
call fcn.140092450
mov edi, 1
mov dword [rsp + 0x40], edi
jmp 0x14001f676
mov edi, dword [rsp + 0x40]
mov rcx, r12
call qword [sym.imp.SETUPAPI.dll_SetupCloseInfFile]
test edi, edi
jne 0x14001f6a4
mov rsi, qword [rsp + 0x88]
lea rdx, [rsp + 0x120]
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x14001f3b2
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_FindClose]
test edi, edi
je 0x14001f8d0
mov rsi, qword [rsp + 0x88]
mov eax, r13d
mov ecx, dword [0x1401232c8]
cmp ecx, 0x5a
mov edx, 0xa
cmovl eax, edx
add ecx, eax
mov dword [0x1401232c8], ecx
movsxd r8, ecx
xor r9d, r9d
mov edx, 0x402
mov rcx, qword [rsi + 0x3b060]
call qword [sym.imp.USER32.dll_SendMessageW]
xor edx, edx
mov rcx, rsi
call fcn.140002180
lea rdx, [rsp + 0x68]
mov qword [rsp + 0x20], rdx
mov r15d, 1
mov r9d, r15d
lea r8, [rsp + 0x1380]
lea rdx, [rsp + 0x1180]
xor ecx, ecx
call sub.newdev.dll_UpdateDriverForPlugAndPlayDevicesW
test eax, eax
jne 0x14001f77e
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
cmp eax, 0x5b4
jne 0x14001f75d
lea r8, [rsp + 0xf8]
mov rdx, qword [rsp + 0x50]
mov rcx, rsi
call fcn.140004a10
mov ebp, dword [rsp + 0x38]
test eax, eax
cmovne ebp, r15d
mov dword [rsp + 0x38], ebp
jmp 0x14001f761
mov ebp, dword [rsp + 0x38]
mov edx, edi
mov rcx, rsi
call fcn.14000b1c0
mov r12d, dword [rsp + 0x3c]
mov edi, 5
lea r15d, [rdi + 5]
jmp 0x14001f8fa
mov ebp, r15d
mov dword [rsp + 0x38], r15d
lea r8, [rsp + 0xf8]
mov rdx, qword [rsp + 0x50]
mov rcx, rsi
call fcn.140004a10
test eax, eax
jne 0x14001f8ec
cmp dword [rsi + 0x3b000], eax
je 0x14001f8b9
lea rdx, [0x1400def30]
lea rcx, [rsp + 0x48]
call fcn.140006080
lea r9, [rsp + 0xf8]
mov rbx, qword [rsp + 0x50]
mov r8, rbx
lea rdx, [rsp + 0xd0]
mov rcx, rsi
call fcn.14000aff0
nop
mov rdx, rax
lea rcx, [rsp + 0x48]
call fcn.140007b20
nop
mov rdx, qword [rsp + 0xd0]
add rdx, 0xffffffffffffffe8
mov eax, r14d
lock xadd dword [rdx + 0x10], eax
add eax, 0xffffffff
test eax, eax
jg 0x14001f813
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
lea rdx, [0x1400def30]
lea rcx, [rsp + 0x48]
call fcn.14000d9a0
test al, al
je 0x14001f8b4
lea rdx, [rsp + 0x48]
lea rcx, [rsp + 0xf0]
call fcn.140005690
mov rdx, rax
mov rcx, rsi
call fcn.140014bb0
mov edi, eax
lea rax, [rsp + 0x68]
mov qword [rsp + 0x20], rax
mov r9d, r15d
xor r8d, r8d
lea rdx, [rsp + 0xf8]
mov rcx, rbx
call fcn.140002af0
test eax, eax
je 0x14001f8b4
test edi, edi
je 0x14001f8b4
movsxd rax, dword [rsi + 0x3afd0]
imul rax, rax, 0x12c8
mov dword [rax + rsi + 0x4bc], r15d
lea rdx, [rsp + 0x48]
lea rcx, [rsp + 0xe8]
call fcn.140005690
mov rdx, rax
mov rcx, rsi
call fcn.14001dc20
add dword [rsi + 0x3afd0], 0xffffffff
mov rbx, qword [rsp + 0x30]
jmp 0x14001f8b9
mov rbx, qword [rsp + 0x30]
mov dword [rsi + 0x4bc], r15d
mov r12d, dword [rsp + 0x3c]
mov edi, 5
lea r15d, [rdi + 5]
jmp 0x14001f8fa
mov rsi, qword [rsp + 0x88]
mov ebp, dword [rsp + 0x38]
mov r12d, dword [rsp + 0x3c]
mov edi, 5
lea r15d, [rdi + 5]
jmp 0x14001f8fa
mov r12d, dword [rsp + 0x3c]
mov edi, 5
lea r15d, [rdi + 5]
mov eax, dword [rsp + 0x98]
add eax, 1
mov dword [rsp + 0x98], eax
lea r8, [rsp + 0xf8]
mov edx, eax
mov rcx, qword [rsp + 0x50]
call qword [sym.imp.SETUPAPI.dll_SetupDiEnumDeviceInfo]
test eax, eax
je 0x14001f955
jmp 0x14001ee15
mov ecx, 0x80070057
call fcn.140001610
int3
mov ecx, 0x80070057
call fcn.140001610
int3
mov ecx, 0x80070057
call fcn.140001610
int3
mov ecx, 0x80070057
call fcn.140001610
int3
mov rcx, qword [rsp + 0x50]
call qword [sym.imp.SETUPAPI.dll_SetupDiDestroyDeviceInfoList]
mov eax, dword [0x1401232c8]
cmp eax, 0x5a
cmovl r13d, r15d
add eax, r13d
mov dword [0x1401232c8], eax
movsxd r8, eax
xor r9d, r9d
mov edx, 0x402
mov rcx, qword [rsi + 0x3b060]
call qword [sym.imp.USER32.dll_SendMessageW]
xor edx, edx
mov rcx, rsi
call fcn.140002180
nop
mov rdx, qword [rsp + 0x48]
add rdx, 0xffffffffffffffe8
mov eax, r14d
lock xadd dword [rdx + 0x10], eax
add eax, 0xffffffff
test eax, eax
jg 0x14001f9bb
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x30]
add rdx, 0xffffffffffffffe8
mov eax, r14d
lock xadd dword [rdx + 0x10], eax
add eax, 0xffffffff
test eax, eax
jg 0x14001f9dd
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0xa8]
add rdx, 0xffffffffffffffe8
mov eax, r14d
lock xadd dword [rdx + 0x10], eax
add eax, 0xffffffff
test eax, eax
jg 0x14001fa02
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x78]
add rdx, 0xffffffffffffffe8
mov eax, r14d
lock xadd dword [rdx + 0x10], eax
add eax, 0xffffffff
test eax, eax
jg 0x14001fa24
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x58]
add rdx, 0xffffffffffffffe8
mov eax, r14d
lock xadd dword [rdx + 0x10], eax
add eax, 0xffffffff
test eax, eax
jg 0x14001fa46
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x60]
add rdx, 0xffffffffffffffe8
mov eax, r14d
lock xadd dword [rdx + 0x10], eax
add eax, 0xffffffff
test eax, eax
jg 0x14001fa68
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x70]
add rdx, 0xffffffffffffffe8
mov eax, r14d
lock xadd dword [rdx + 0x10], eax
add eax, 0xffffffff
test eax, eax
jg 0x14001fa8a
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x80]
add rdx, 0xffffffffffffffe8
mov eax, r14d
lock xadd dword [rdx + 0x10], eax
add eax, 0xffffffff
test eax, eax
jg 0x14001faaf
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x90]
add rdx, 0xffffffffffffffe8
mov eax, r14d
lock xadd dword [rdx + 0x10], eax
add eax, 0xffffffff
test eax, eax
jg 0x14001fad4
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0xa0]
add rdx, 0xffffffffffffffe8
lock xadd dword [rdx + 0x10], r14d
add r14d, 0xffffffff
test r14d, r14d
jg 0x14001faf8
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov eax, ebp
jmp 0x14001fc60
mov rdx, qword [rsp + 0x48]
add rdx, 0xffffffffffffffe8
mov eax, r14d
lock xadd dword [rdx + 0x10], eax
add eax, 0xffffffff
test eax, eax
jg 0x14001fb21
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x30]
add rdx, 0xffffffffffffffe8
mov eax, r14d
lock xadd dword [rdx + 0x10], eax
add eax, 0xffffffff
test eax, eax
jg 0x14001fb43
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0xa8]
add rdx, 0xffffffffffffffe8
mov eax, r14d
lock xadd dword [rdx + 0x10], eax
add eax, 0xffffffff
test eax, eax
jg 0x14001fb68
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x78]
add rdx, 0xffffffffffffffe8
mov eax, r14d
lock xadd dword [rdx + 0x10], eax
add eax, 0xffffffff
test eax, eax
jg 0x14001fb8a
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x58]
add rdx, 0xffffffffffffffe8
mov eax, r14d
lock xadd dword [rdx + 0x10], eax
add eax, 0xffffffff
test eax, eax
jg 0x14001fbac
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x60]
add rdx, 0xffffffffffffffe8
mov eax, r14d
lock xadd dword [rdx + 0x10], eax
add eax, 0xffffffff
test eax, eax
jg 0x14001fbce
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x70]
add rdx, 0xffffffffffffffe8
mov eax, r14d
lock xadd dword [rdx + 0x10], eax
add eax, 0xffffffff
test eax, eax
jg 0x14001fbf0
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x80]
add rdx, 0xffffffffffffffe8
mov eax, r14d
lock xadd dword [rdx + 0x10], eax
add eax, 0xffffffff
test eax, eax
jg 0x14001fc15
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x90]
add rdx, 0xffffffffffffffe8
mov eax, r14d
lock xadd dword [rdx + 0x10], eax
add eax, 0xffffffff
test eax, eax
jg 0x14001fc3a
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0xa0]
add rdx, 0xffffffffffffffe8
lock xadd dword [rdx + 0x10], r14d
add r14d, 0xffffffff
test r14d, r14d
jg 0x14001fc5e
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
xor eax, eax
mov rcx, qword [rsp + 0x1780]
xor rcx, rsp
call fcn.140090720
lea r11, [rsp + 0x1790]
mov rbx, qword [r11 + 0x38]
mov rbp, qword [r11 + 0x40]
mov rsi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret