Function at 0x14001e550
Capabilities:
Enumerate files on windows

Disassembly:
push rdi
push r12
push r13
push r14
push r15
mov eax, 0x1790
call fcn.1400dbd60
sub rsp, rax
mov qword [rsp + 0xe0], 0xfffffffffffffffe
mov qword [rsp + 0x17c8], rbx
mov qword [rsp + 0x17d0], rbp
mov qword [rsp + 0x17d8], rsi
mov rax, qword [0x1401216d8]
xor rax, rsp
mov qword [rsp + 0x1780], rax
mov rsi, rcx
mov qword [rsp + 0x88], rcx
call fcn.14004b0d0
mov rdx, rax
xor r13d, r13d
mov ecx, r13d
test rax, rax
setne cl
test ecx, ecx
jne 0x14001e5cb
mov ecx, 0x80004005
call fcn.140001610
int3
mov rax, qword [rax]
mov rcx, rdx
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetElement]
add rax, 0x18
mov qword [rsp + 0xa0], rax
lea rdx, [0x1400e1128]
test rdx, 0xffffffffffff0000
jne 0x14001e614
movzx edi, dx
mov ecx, edi
call fcn.14004aef8
test rax, rax
je 0x14001e622
mov r8d, edi
mov rdx, rax
lea rcx, [rsp + 0xa0]
call fcn.140005b70
jmp 0x14001e622
lea rcx, [rsp + 0xa0]
call fcn.140005ff0
nop
call fcn.14004b0d0
mov rdx, rax
mov ecx, r13d
test rax, rax
setne cl
test ecx, ecx
jne 0x14001e642
mov ecx, 0x80004005
call fcn.140001610
int3
mov rax, qword [rax]
mov rcx, rdx
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetElement]
add rax, 0x18
mov qword [rsp + 0x90], rax
lea rdx, [0x1400e1110]
test rdx, 0xffffffffffff0000
jne 0x14001e68b
movzx edi, dx
mov ecx, edi
call fcn.14004aef8
test rax, rax
je 0x14001e699
mov r8d, edi
mov rdx, rax
lea rcx, [rsp + 0x90]
call fcn.140005b70
jmp 0x14001e699
lea rcx, [rsp + 0x90]
call fcn.140005ff0
nop
call fcn.14004b0d0
mov rdx, rax
mov ecx, r13d
test rax, rax
setne cl
test ecx, ecx
jne 0x14001e6b9
mov ecx, 0x80004005
call fcn.140001610
int3
mov rax, qword [rax]
mov rcx, rdx
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetElement]
add rax, 0x18
mov qword [rsp + 0x80], rax
lea rdx, [0x1400e10f8]
test rdx, 0xffffffffffff0000
jne 0x14001e702
movzx edi, dx
mov ecx, edi
call fcn.14004aef8
test rax, rax
je 0x14001e710
mov r8d, edi
mov rdx, rax
lea rcx, [rsp + 0x80]
call fcn.140005b70
jmp 0x14001e710
lea rcx, [rsp + 0x80]
call fcn.140005ff0
nop
call fcn.14004b0d0
mov rdx, rax
mov ecx, r13d
test rax, rax
setne cl
test ecx, ecx
jne 0x14001e730
mov ecx, 0x80004005
call fcn.140001610
int3
mov rax, qword [rax]
mov rcx, rdx
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetElement]
add rax, 0x18
mov qword [rsp + 0x70], rax
lea rdx, [0x1400e10e0]
test rdx, 0xffffffffffff0000
jne 0x14001e773
movzx edi, dx
mov ecx, edi
call fcn.14004aef8
test rax, rax
je 0x14001e77e
mov r8d, edi
mov rdx, rax
lea rcx, [rsp + 0x70]
call fcn.140005b70
jmp 0x14001e77e
lea rcx, [rsp + 0x70]
call fcn.140005ff0
nop
call fcn.14004b0d0
mov rdx, rax
mov ecx, r13d
test rax, rax
setne cl
test ecx, ecx
jne 0x14001e79e
mov ecx, 0x80004005
call fcn.140001610
int3
mov rax, qword [rax]
mov rcx, rdx
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetElement]
add rax, 0x18
mov qword [rsp + 0x60], rax
lea rdx, [0x1400e10c8]
test rdx, 0xffffffffffff0000
jne 0x14001e7e1
movzx edi, dx
mov ecx, edi
call fcn.14004aef8
test rax, rax
je 0x14001e7ec
mov r8d, edi
mov rdx, rax
lea rcx, [rsp + 0x60]
call fcn.140005b70
jmp 0x14001e7ec
lea rcx, [rsp + 0x60]
call fcn.140005ff0
nop
call fcn.14004b0d0
mov rdx, rax
mov ecx, r13d
test rax, rax
setne cl
test ecx, ecx
jne 0x14001e80c
mov ecx, 0x80004005
call fcn.140001610
int3
mov rax, qword [rax]
mov rcx, rdx
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetElement]
add rax, 0x18
mov qword [rsp + 0x58], rax
lea rdx, [0x1400e10b0]
test rdx, 0xffffffffffff0000
jne 0x14001e84f
movzx edi, dx
mov ecx, edi
call fcn.14004aef8
test rax, rax
je 0x14001e85a
mov r8d, edi
mov rdx, rax
lea rcx, [rsp + 0x58]
call fcn.140005b70
jmp 0x14001e85a
lea rcx, [rsp + 0x58]
call fcn.140005ff0
nop
call fcn.14004b0d0
mov rdx, rax
mov ecx, r13d
test rax, rax
setne cl
test ecx, ecx
jne 0x14001e87a
mov ecx, 0x80004005
call fcn.140001610
int3
mov rax, qword [rax]
mov rcx, rdx
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetElement]
add rax, 0x18
mov qword [rsp + 0x78], rax
lea rdx, [0x1400e1098]
test rdx, 0xffffffffffff0000
jne 0x14001e8bd
movzx edi, dx
mov ecx, edi
call fcn.14004aef8
test rax, rax
je 0x14001e8c8
mov r8d, edi
mov rdx, rax
lea rcx, [rsp + 0x78]
call fcn.140005b70
jmp 0x14001e8c8
lea rcx, [rsp + 0x78]
call fcn.140005ff0
nop
mov word [rsp + 0x580], 0
xor edx, edx
mov r8d, 0x3fe
lea rcx, [rsp + 0x582]
call fcn.140091a50
mov word [rsp + 0x1380], 0
xor edx, edx
mov r8d, 0x3fe
lea rcx, [rsp + 0x1382]
call fcn.140091a50
call fcn.14004b0d0
mov rdx, rax
mov ecx, r13d
test rax, rax
setne cl
test ecx, ecx
jne 0x14001e926
mov ecx, 0x80004005
call fcn.140001610
int3
mov rax, qword [rax]
mov rcx, rdx
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetElement]
add rax, 0x18
mov qword [rsp + 0xa8], rax
lea rbx, [0x1400deee8]
mov rdi, rbx
shr rdi, 0x10
jne 0x14001e976
movzx ebx, bx
mov ecx, ebx
call fcn.14004aef8
test rax, rax
je 0x14001e988
mov r8d, ebx
mov rdx, rax
lea rcx, [rsp + 0xa8]
call fcn.140005b70
lea rbx, [0x1400deee8]
jmp 0x14001e98f
mov rdx, rbx
lea rcx, [rsp + 0xa8]
call fcn.140005ff0
jmp 0x14001e98f
lea rbx, [0x1400deee8]
mov dword [rsp + 0x68], r13d
mov ebp, r13d
mov dword [rsp + 0x38], r13d
mov r12d, r13d
call fcn.14004b0d0
mov rdx, rax
mov ecx, r13d
test rax, rax
setne cl
test ecx, ecx
jne 0x14001e9bf
mov ecx, 0x80004005
call fcn.140001610
int3
mov rax, qword [rax]
mov rcx, rdx
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetElement]
add rax, 0x18
mov qword [rsp + 0x30], rax
call fcn.14004b0d0
mov r11, rax
mov ecx, r13d
test rax, rax
setne cl
test ecx, ecx
jne 0x14001e9f1
mov ecx, 0x80004005
call fcn.140001610
int3
mov rax, qword [rax]
mov rcx, r11
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetElement]
add rax, 0x18
mov qword [rsp + 0x48], rax
test rdi, rdi
jne 0x14001ea29
movzx edi, bx
mov ecx, edi
call fcn.14004aef8
test rax, rax
je 0x14001ea37
mov r8d, edi
mov rdx, rax
lea rcx, [rsp + 0x48]
call fcn.140005b70
jmp 0x14001ea37
mov rdx, rbx
lea rcx, [rsp + 0x48]
call fcn.140005ff0
nop
lea rdx, [rsp + 0xc8]
mov rcx, rsi
call fcn.140010970
nop
lea r8, [0x1400df4f0]
mov rdx, rax
lea rcx, [rsp + 0xd8]
call fcn.140006760
mov r8, qword [rax]
mov edx, 0x200
lea rcx, [rsp + 0xd80]
call fcn.1400921b0
mov rdx, qword [rsp + 0xd8]
add rdx, 0xffffffffffffffe8
or r14, 0xffffffffffffffff
mov eax, r14d
lock xadd dword [rdx + 0x10], eax
add eax, r14d
test eax, eax
jg 0x14001ea9d
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0xc8]
add rdx, 0xffffffffffffffe8
mov eax, r14d
lock xadd dword [rdx + 0x10], eax
add eax, 0xffffffff
test eax, eax
jg 0x14001eac1
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
xor edx, edx
mov r8d, 0x250
lea rcx, [rsp + 0x120]
call fcn.140091a50
lea r8, [rsp + 0xd80]
mov edx, 0x200
lea rcx, [rsp + 0x580]
call fcn.1400921b0
mov r8, qword [0x140123328]
mov edx, 0x200
lea rcx, [rsp + 0x580]
call fcn.140092260
lea r8, [0x1400e1318]
mov edx, 0x200
lea rcx, [rsp + 0x580]
call fcn.140092260
lea rdx, [rsp + 0x120]
lea rcx, [rsp + 0x580]
call qword [sym.imp.KERNEL32.dll_FindFirstFileW]
cmp rax, 0xffffffffffffffff
je 0x14001f88f
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_FindClose]
mov r9d, 6
xor r8d, r8d
lea rdx, str.HDAUDIO
xor ecx, ecx
call qword [sym.imp.SETUPAPI.dll_SetupDiGetClassDevsW]
mov qword [rsp + 0x50], rax
mov dword [rsp + 0xf8], SafeArrayDestroyData
mov dword [rsp + 0x98], r13d
lea r8, [rsp + 0xf8]
xor edx, edx
mov rcx, rax
call qword [sym.imp.SETUPAPI.dll_SetupDiEnumDeviceInfo]
mov r15d, 0xa
test eax, eax
je 0x14001f6e5
lea edi, [r15 - 5]
mov rbx, qword [rsp + 0x30]
mov qword [rsp + 0x20], r13
mov r9d, 0x100
lea r8, [rsp + 0x980]
lea rdx, [rsp + 0xf8]
mov rcx, qword [rsp + 0x50]
call qword [sym.imp.SETUPAPI.dll_SetupDiGetDeviceInstanceIdW]
mov edx, r13d
mov eax, dword [0x1401232c8]
cmp eax, 0x5a
cmovl edx, edi
add eax, edx
mov dword [0x1401232c8], eax
movsxd r8, eax
xor r9d, r9d
mov edx, 0x402
mov rcx, qword [rsi + 0x3b060]
call qword [sym.imp.USER32.dll_SendMessageW]
xor edx, edx
mov rcx, rsi
call fcn.140002180
mov rdx, qword [rsp + 0xa0]
lea rcx, [rsp + 0x980]
call fcn.140090770
test rax, rax
jne 0x14001ecb6
mov rdx, qword [rsp + 0x90]
lea rcx, [rsp + 0x980]
call fcn.140090770
test rax, rax
jne 0x14001ecb6
mov rdx, qword [rsp + 0x80]
lea rcx, [rsp + 0x980]
call fcn.140090770
test rax, rax
jne 0x14001ecb6
mov rdx, qword [rsp + 0x70]
lea rcx, [rsp + 0x980]
call fcn.140090770
test rax, rax
jne 0x14001ecb6
mov rdx, qword [rsp + 0x60]
lea rcx, [rsp + 0x980]
call fcn.140090770
test rax, rax
jne 0x14001ecb6
mov rdx, qword [rsp + 0x58]
lea rcx, [rsp + 0x980]
call fcn.140090770
test rax, rax
jne 0x14001ecb6
mov rdx, qword [rsp + 0x78]
lea rcx, [rsp + 0x980]
call fcn.140090770
test rax, rax
je 0x14001f68a
lea r8, [rsp + 0x980]
mov edx, 0x100
lea rcx, [rsp + 0xb80]
call fcn.1400921b0
lea r8, [rsp + 0x980]
mov edx, 0x100
lea rcx, [rsp + 0x1180]
call fcn.1400921b0
mov word [rsp + 0x11f4], 0
add r12d, 1
mov dword [rsp + 0x3c], r12d
mov edi, r13d
mov dword [rsp + 0x40], r13d
mov eax, r13d
mov ecx, dword [0x1401232c8]
cmp ecx, 0x5a
cmovl eax, r15d
add ecx, eax
mov dword [0x1401232c8], ecx
movsxd r8, ecx
xor r9d, r9d
mov edx, 0x402
mov rcx, qword [rsi + 0x3b060]
call qword [sym.imp.USER32.dll_SendMessageW]
xor edx, edx
mov rcx, rsi
call fcn.140002180
mov word [rsp + 0xbe2], di
xor edx, edx
mov r8d, 0x250
lea rcx, [rsp + 0x120]
call fcn.140091a50
lea r8, [rsp + 0xd80]
mov edx, 0x200
lea rcx, [rsp + 0x580]
call fcn.1400921b0
mov r8, qword [0x140123328]
mov edx, 0x200
lea rcx, [rsp + 0x580]
call fcn.140092260
lea r8, [0x1400e1318]
mov edx, 0x200
lea rcx, [rsp + 0x580]
call fcn.140092260
lea rdx, [rsp + 0x120]
lea rcx, [rsp + 0x580]
call qword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov r15, rax
cmp rax, 0xffffffffffffffff
je 0x14001f0a5
nop
nop
lea r8, [rsp + 0xd80]
mov edx, 0x200
lea rcx, [rsp + 0x580]
call fcn.1400921b0
lea r8, [rsp + 0x14c]
mov edx, 0x200
lea rcx, [rsp + 0x580]
call fcn.140092260
xor r9d, r9d
xor edx, edx
lea r8d, [r9 + 2]
lea rcx, [rsp + 0x580]
call qword [sym.imp.SETUPAPI.dll_SetupOpenInfFileW]
mov r12, rax
cmp rax, 0xffffffffffffffff
je 0x14001f088
lea r9, [rsp + 0xb0]
xor r8d, r8d
lea rdx, str.Manufacturer
mov rcx, rax
call qword [sym.imp.SETUPAPI.dll_SetupFindFirstLineW]
test eax, eax
je 0x14001f07f
mov qword [rsp + 0x20], r13
mov r9d, 0x104
lea r8, [rsp + 0x370]
mov edx, 1
lea rcx, [rsp + 0xb0]
call qword [sym.imp.SETUPAPI.dll_SetupGetStringFieldW]
test eax, eax
je 0x14001f07f
lea rax, [rsp + 0xb0]
mov qword [rsp + 0x20], rax
xor r9d, r9d
lea r8, [rsp + 0x370]
mov rdx, r12
mov rcx, rsi
call fcn.140003650
test eax, eax
jne 0x14001eeae
mov rcx, r12
call qword [sym.imp.SETUPAPI.dll_SetupCloseInfFile]
jmp 0x14001f08c
lea r9, [rsp + 0xb0]
xor r8d, r8d
lea rdx, [rsp + 0x370]
mov rcx, r12
call qword [sym.imp.SETUPAPI.dll_SetupFindFirstLineW]
test eax, eax
je 0x14001f07f
mov qword [rsp + 0x20], r13
mov r9d, 0x104
lea r8, [rsp + 0x370]
mov edx, 2
lea rcx, [rsp + 0xb0]
call qword [sym.imp.SETUPAPI.dll_SetupGetStringFieldW]
test eax, eax
je 0x14001f027
xor eax, eax
mov rcx, r14
lea rdi, [rsp + 0x370]
repne scasw ax, word [rdi]
not rcx
sub rcx, 1
mov rdi, rcx
test ecx, ecx
jne 0x14001ef77
lea rdx, [rbx - 0x18]
mov rdi, qword [rdx]
cmp dword [rdx + 8], eax
je 0x14001f001
cmp dword [rdx + 0x10], eax
jge 0x14001ef48
cmp dword [rbx - 0xc], eax
jl 0x14001f6b9
mov dword [rbx - 0x10], r13d
mov word [rbx], ax
jmp 0x14001f001
mov eax, r14d
lock xadd dword [rdx + 0x10], eax
add eax, 0xffffffff
test eax, eax
jg 0x14001ef60
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetElement]
lea rbx, [rax + 0x18]
mov qword [rsp + 0x30], rbx
jmp 0x14001f001
mov esi, dword [rbx - 0x10]
lea rbp, [rsp + 0x370]
sub rbp, rbx
sar rbp, 1
mov ecx, 1
sub ecx, dword [rbx - 8]
mov eax, dword [rbx - 0xc]
sub eax, edi
or eax, ecx
jge 0x14001efaa
mov edx, edi
lea rcx, [rsp + 0x30]
call fcn.140004650
mov rbx, qword [rsp + 0x30]
cmp rbp, rsi
ja 0x14001efca
movsxd rax, edi
lea rsi, [rax + rax]
lea r8, [rbx + rbp*2]
mov r9, rsi
mov rdx, rsi
mov rcx, rbx
call fcn.1400908b0
jmp 0x14001efe7
movsxd rax, edi
lea rsi, [rax + rax]
mov r9, rsi
lea r8, [rsp + 0x370]
mov rdx, rsi
mov rcx, rbx
call fcn.1400907e0
test edi, edi
js 0x14001f6c4
cmp edi, dword [rbx - 0xc]
jg 0x14001f6c4
mov dword [rbx - 0x10], edi
mov word [rsi + rbx], 0
cmp dword [rbx - 0x10], 0
jl 0x14001f027
lea rdx, [rsp + 0xb80]
mov rcx, rbx
call fcn.140090770
test rax, rax
je 0x14001f027
sub rax, rbx
sar rax, 1
cmp eax, 0xffffffff
jne 0x14001f046
lea rdx, [rsp + 0xb0]
lea rcx, [rsp + 0xb0]
call qword [sym.imp.SETUPAPI.dll_SetupFindNextLine]
test eax, eax
je 0x14001f073
jmp 0x14001eed2
lea r8, [rsp + 0x580]
mov edx, 0x200
lea rcx, [rsp + 0x1380]
call fcn.1400921b0
mov edi, 1
mov dword [rsp + 0x40], edi
mov rsi, qword [rsp + 0x88]
jmp 0x14001f07f
mov edi, dword [rsp + 0x40]
mov rsi, qword [rsp + 0x88]
mov rcx, r12
call qword [sym.imp.SETUPAPI.dll_SetupCloseInfFile]
test edi, edi
jne 0x14001f0a5
lea rdx, [rsp + 0x120]
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x14001edd0
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_FindClose]
test edi, edi
jne 0x14001f44d
mov word [rsp + 0xbc2], di
xor edx, edx
mov r8d, 0x250
lea rcx, [rsp + 0x120]
call fcn.140091a50
lea r8, [rsp + 0xd80]
mov edx, 0x200
lea rcx, [rsp + 0x580]
call fcn.1400921b0
mov r8, qword [0x140123328]
mov edx, 0x200
lea rcx, [rsp + 0x580]
call fcn.140092260
lea r8, [0x1400e1318]
mov edx, 0x200
lea rcx, [rsp + 0x580]
call fcn.140092260
lea rdx, [rsp + 0x120]
lea rcx, [rsp + 0x580]
call qword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov r15, rax
cmp rax, 0xffffffffffffffff
je 0x14001f434
lea r8, [rsp + 0xd80]
mov edx, 0x200
lea rcx, [rsp + 0x580]
call fcn.1400921b0
lea r8, [rsp + 0x14c]
mov edx, 0x200
lea rcx, [rsp + 0x580]
call fcn.140092260
xor r9d, r9d
xor edx, edx
lea r8d, [r9 + 2]
lea rcx, [rsp + 0x580]
call qword [sym.imp.SETUPAPI.dll_SetupOpenInfFileW]
mov r12, rax
cmp rax, 0xffffffffffffffff
je 0x14001f40f
lea r9, [rsp + 0xb0]
xor r8d, r8d
lea rdx, str.Manufacturer
mov rcx, rax
call qword [sym.imp.SETUPAPI.dll_SetupFindFirstLineW]
test eax, eax
je 0x14001f406
mov qword [rsp + 0x20], r13
mov r9d, 0x104
lea r8, [rsp + 0x370]
mov edx, 1
lea rcx, [rsp + 0xb0]
call qword [sym.imp.SETUPAPI.dll_SetupGetStringFieldW]
test eax, eax
je 0x14001f406
lea rax, [rsp + 0xb0]
mov qword [rsp + 0x20], rax
xor r9d, r9d
lea r8, [rsp + 0x370]
mov rdx, r12
mov rcx, rsi
call fcn.140003650
test eax, eax
jne 0x14001f220
mov rcx, r12
call qword [sym.imp.SETUPAPI.dll_SetupCloseInfFile]
jmp 0x14001f41b
lea r9, [rsp + 0xb0]
xor r8d, r8d
lea rdx, [rsp + 0x370]
mov rcx, r12
call qword [sym.imp.SETUPAPI.dll_SetupFindFirstLineW]
test eax, eax
je 0x14001f406
mov qword [rsp + 0x20], r13
mov r9d, 0x104
lea r8, [rsp + 0x370]
mov edx, 2
lea rcx, [rsp + 0xb0]
call qword [sym.imp.SETUPAPI.dll_SetupGetStringFieldW]
test eax, eax
je 0x14001f3be
xor eax, eax
mov rcx, r14
lea rdi, [rsp + 0x370]
repne scasw ax, word [rdi]
not rcx
sub rcx, 1
mov rdi, rcx
test ecx, ecx
jne 0x14001f2e9
lea rdx, [rbx - 0x18]
mov rdi, qword [rdx]
cmp dword [rdx + 8], eax
je 0x14001f373
cmp dword [rdx + 0x10], eax
jge 0x14001f2ba
cmp dword [rbx - 0xc], eax
jl 0x14001f6cf
mov dword [rbx - 0x10], r13d
mov word [rbx], ax
jmp 0x14001f373
mov eax, r14d
lock xadd dword [rdx + 0x10], eax
add eax, 0xffffffff
test eax, eax
jg 0x14001f2d2
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetElement]
lea rbx, [rax + 0x18]
mov qword [rsp + 0x30], rbx
jmp 0x14001f373
mov esi, dword [rbx - 0x10]
lea rbp, [rsp + 0x370]
sub rbp, rbx
sar rbp, 1
mov ecx, 1
sub ecx, dword [rbx - 8]
mov eax, dword [rbx - 0xc]
sub eax, edi
or eax, ecx
jge 0x14001f31c
mov edx, edi
lea rcx, [rsp + 0x30]
call fcn.140004650
mov rbx, qword [rsp + 0x30]
cmp rbp, rsi
ja 0x14001f33c
movsxd rax, edi
lea rsi, [rax + rax]
lea r8, [rbx + rbp*2]
mov r9, rsi
mov rdx, rsi
mov rcx, rbx
call fcn.1400908b0
jmp 0x14001f359
movsxd rax, edi
lea rsi, [rax + rax]
mov r9, rsi
lea r8, [rsp + 0x370]
mov rdx, rsi
mov rcx, rbx
call fcn.1400907e0
test edi, edi
js 0x14001f6da
cmp edi, dword [rbx - 0xc]
jg 0x14001f6da
mov dword [rbx - 0x10], edi
mov word [rsi + rbx], 0
cmp dword [rbx - 0x10], 0
jl 0x14001f3be
lea rdx, [rsp + 0xb80]
mov rcx, rbx
call fcn.140090770
test rax, rax
je 0x14001f3be
sub rax, rbx
sar rax, 1
cmp eax, 0xffffffff
je 0x14001f3be
cmp dword [rbx - 0x10], 0
jl 0x14001f3dd
lea rdx, [0x1400e0680]
mov rcx, rbx
call fcn.140090770
test rax, rax
je 0x14001f3dd
sub rax, rbx
sar rax, 1
cmp eax, 0xffffffff
je 0x14001f3dd
lea rdx, [rsp + 0xb0]
lea rcx, [rsp + 0xb0]
call qword [sym.imp.SETUPAPI.dll_SetupFindNextLine]
test eax, eax
je 0x14001f402
jmp 0x14001f244
lea r8, [rsp + 0x580]
mov edx, 0x200
lea rcx, [rsp + 0x1380]
call fcn.1400921b0
mov edi, 1
mov dword [rsp + 0x40], edi
jmp 0x14001f406
mov edi, dword [rsp + 0x40]
mov rcx, r12
call qword [sym.imp.SETUPAPI.dll_SetupCloseInfFile]
test edi, edi
jne 0x14001f434
mov rsi, qword [rsp + 0x88]
lea rdx, [rsp + 0x120]
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x14001f142
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_FindClose]
test edi, edi
je 0x14001f660
mov rsi, qword [rsp + 0x88]
mov eax, r13d
mov ecx, dword [0x1401232c8]
cmp ecx, 0x5a
mov edx, 0xa
cmovl eax, edx
add ecx, eax
mov dword [0x1401232c8], ecx
movsxd r8, ecx
xor r9d, r9d
mov edx, 0x402
mov rcx, qword [rsi + 0x3b060]
call qword [sym.imp.USER32.dll_SendMessageW]
xor edx, edx
mov rcx, rsi
call fcn.140002180
lea rdx, [rsp + 0x68]
mov qword [rsp + 0x20], rdx
mov r15d, 1
mov r9d, r15d
lea r8, [rsp + 0x1380]
lea rdx, [rsp + 0x1180]
xor ecx, ecx
call sub.newdev.dll_UpdateDriverForPlugAndPlayDevicesW
test eax, eax
jne 0x14001f50e
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
cmp eax, 0x5b4
jne 0x14001f4ed
lea r8, [rsp + 0xf8]
mov rdx, qword [rsp + 0x50]
mov rcx, rsi
call fcn.140004a10
mov ebp, dword [rsp + 0x38]
test eax, eax
cmovne ebp, r15d
mov dword [rsp + 0x38], ebp
jmp 0x14001f4f1
mov ebp, dword [rsp + 0x38]
mov edx, edi
mov rcx, rsi
call fcn.14000b130
mov r12d, dword [rsp + 0x3c]
mov edi, 5
lea r15d, [rdi + 5]
jmp 0x14001f68a
mov ebp, r15d
mov dword [rsp + 0x38], r15d
lea r8, [rsp + 0xf8]
mov rdx, qword [rsp + 0x50]
mov rcx, rsi
call fcn.140004a10
test eax, eax
jne 0x14001f67c
cmp dword [rsi + 0x3b000], eax
je 0x14001f649
lea rdx, [0x1400deee8]
lea rcx, [rsp + 0x48]
call fcn.140005ff0
lea r9, [rsp + 0xf8]
mov rbx, qword [rsp + 0x50]
mov r8, rbx
lea rdx, [rsp + 0xd0]
mov rcx, rsi
call fcn.14000af60
nop
mov rdx, rax
lea rcx, [rsp + 0x48]
call fcn.140007a90
nop
mov rdx, qword [rsp + 0xd0]
add rdx, 0xffffffffffffffe8
mov eax, r14d
lock xadd dword [rdx + 0x10], eax
add eax, 0xffffffff
test eax, eax
jg 0x14001f5a3
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
lea rdx, [0x1400deee8]
lea rcx, [rsp + 0x48]
call fcn.14000d910
test al, al
je 0x14001f644
lea rdx, [rsp + 0x48]
lea rcx, [rsp + 0xf0]
call fcn.140005600
mov rdx, rax
mov rcx, rsi
call fcn.140014b20
mov edi, eax
lea rax, [rsp + 0x68]
mov qword [rsp + 0x20], rax
mov r9d, r15d
xor r8d, r8d
lea rdx, [rsp + 0xf8]
mov rcx, rbx
call fcn.140002af0
test eax, eax
je 0x14001f644
test edi, edi
je 0x14001f644
movsxd rax, dword [rsi + 0x3afd0]
imul rax, rax, 0x12c8
mov dword [rax + rsi + 0x4bc], r15d
lea rdx, [rsp + 0x48]
lea rcx, [rsp + 0xe8]
call fcn.140005600
mov rdx, rax
mov rcx, rsi
call fcn.14001d9b0
add dword [rsi + 0x3afd0], 0xffffffff
mov rbx, qword [rsp + 0x30]
jmp 0x14001f649
mov rbx, qword [rsp + 0x30]
mov dword [rsi + 0x4bc], r15d
mov r12d, dword [rsp + 0x3c]
mov edi, 5
lea r15d, [rdi + 5]
jmp 0x14001f68a
mov rsi, qword [rsp + 0x88]
mov ebp, dword [rsp + 0x38]
mov r12d, dword [rsp + 0x3c]
mov edi, 5
lea r15d, [rdi + 5]
jmp 0x14001f68a
mov r12d, dword [rsp + 0x3c]
mov edi, 5
lea r15d, [rdi + 5]
mov eax, dword [rsp + 0x98]
add eax, 1
mov dword [rsp + 0x98], eax
lea r8, [rsp + 0xf8]
mov edx, eax
mov rcx, qword [rsp + 0x50]
call qword [sym.imp.SETUPAPI.dll_SetupDiEnumDeviceInfo]
test eax, eax
je 0x14001f6e5
jmp 0x14001eba5
mov ecx, 0x80070057
call fcn.140001610
int3
mov ecx, 0x80070057
call fcn.140001610
int3
mov ecx, 0x80070057
call fcn.140001610
int3
mov ecx, 0x80070057
call fcn.140001610
int3
mov rcx, qword [rsp + 0x50]
call qword [sym.imp.SETUPAPI.dll_SetupDiDestroyDeviceInfoList]
mov eax, dword [0x1401232c8]
cmp eax, 0x5a
cmovl r13d, r15d
add eax, r13d
mov dword [0x1401232c8], eax
movsxd r8, eax
xor r9d, r9d
mov edx, 0x402
mov rcx, qword [rsi + 0x3b060]
call qword [sym.imp.USER32.dll_SendMessageW]
xor edx, edx
mov rcx, rsi
call fcn.140002180
nop
mov rdx, qword [rsp + 0x48]
add rdx, 0xffffffffffffffe8
mov eax, r14d
lock xadd dword [rdx + 0x10], eax
add eax, 0xffffffff
test eax, eax
jg 0x14001f74b
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x30]
add rdx, 0xffffffffffffffe8
mov eax, r14d
lock xadd dword [rdx + 0x10], eax
add eax, 0xffffffff
test eax, eax
jg 0x14001f76d
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0xa8]
add rdx, 0xffffffffffffffe8
mov eax, r14d
lock xadd dword [rdx + 0x10], eax
add eax, 0xffffffff
test eax, eax
jg 0x14001f792
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x78]
add rdx, 0xffffffffffffffe8
mov eax, r14d
lock xadd dword [rdx + 0x10], eax
add eax, 0xffffffff
test eax, eax
jg 0x14001f7b4
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x58]
add rdx, 0xffffffffffffffe8
mov eax, r14d
lock xadd dword [rdx + 0x10], eax
add eax, 0xffffffff
test eax, eax
jg 0x14001f7d6
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x60]
add rdx, 0xffffffffffffffe8
mov eax, r14d
lock xadd dword [rdx + 0x10], eax
add eax, 0xffffffff
test eax, eax
jg 0x14001f7f8
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x70]
add rdx, 0xffffffffffffffe8
mov eax, r14d
lock xadd dword [rdx + 0x10], eax
add eax, 0xffffffff
test eax, eax
jg 0x14001f81a
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x80]
add rdx, 0xffffffffffffffe8
mov eax, r14d
lock xadd dword [rdx + 0x10], eax
add eax, 0xffffffff
test eax, eax
jg 0x14001f83f
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x90]
add rdx, 0xffffffffffffffe8
mov eax, r14d
lock xadd dword [rdx + 0x10], eax
add eax, 0xffffffff
test eax, eax
jg 0x14001f864
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0xa0]
add rdx, 0xffffffffffffffe8
lock xadd dword [rdx + 0x10], r14d
add r14d, 0xffffffff
test r14d, r14d
jg 0x14001f888
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov eax, ebp
jmp 0x14001f9f0
mov rdx, qword [rsp + 0x48]
add rdx, 0xffffffffffffffe8
mov eax, r14d
lock xadd dword [rdx + 0x10], eax
add eax, 0xffffffff
test eax, eax
jg 0x14001f8b1
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x30]
add rdx, 0xffffffffffffffe8
mov eax, r14d
lock xadd dword [rdx + 0x10], eax
add eax, 0xffffffff
test eax, eax
jg 0x14001f8d3
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0xa8]
add rdx, 0xffffffffffffffe8
mov eax, r14d
lock xadd dword [rdx + 0x10], eax
add eax, 0xffffffff
test eax, eax
jg 0x14001f8f8
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x78]
add rdx, 0xffffffffffffffe8
mov eax, r14d
lock xadd dword [rdx + 0x10], eax
add eax, 0xffffffff
test eax, eax
jg 0x14001f91a
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x58]
add rdx, 0xffffffffffffffe8
mov eax, r14d
lock xadd dword [rdx + 0x10], eax
add eax, 0xffffffff
test eax, eax
jg 0x14001f93c
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x60]
add rdx, 0xffffffffffffffe8
mov eax, r14d
lock xadd dword [rdx + 0x10], eax
add eax, 0xffffffff
test eax, eax
jg 0x14001f95e
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x70]
add rdx, 0xffffffffffffffe8
mov eax, r14d
lock xadd dword [rdx + 0x10], eax
add eax, 0xffffffff
test eax, eax
jg 0x14001f980
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x80]
add rdx, 0xffffffffffffffe8
mov eax, r14d
lock xadd dword [rdx + 0x10], eax
add eax, 0xffffffff
test eax, eax
jg 0x14001f9a5
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x90]
add rdx, 0xffffffffffffffe8
mov eax, r14d
lock xadd dword [rdx + 0x10], eax
add eax, 0xffffffff
test eax, eax
jg 0x14001f9ca
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0xa0]
add rdx, 0xffffffffffffffe8
lock xadd dword [rdx + 0x10], r14d
add r14d, 0xffffffff
test r14d, r14d
jg 0x14001f9ee
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
xor eax, eax
mov rcx, qword [rsp + 0x1780]
xor rcx, rsp
call fcn.140090480
lea r11, [rsp + 0x1790]
mov rbx, qword [r11 + 0x38]
mov rbp, qword [r11 + 0x40]
mov rsi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret