Function at 0x140098d14
Capabilities:
Unmount volume via ioctl

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x658]
sub rsp, 0x758
mov qword [rbp + 0x290], 0xfffffffffffffffe
mov rax, qword [section..data]
xor rax, rsp
mov qword [rbp + 0x640], rax
mov qword [rbp + 0x1a0], r9
mov qword [rbp + 0x1a8], r8
mov rdi, rdx
mov qword [rbp - 0x78], rdx
mov qword [rbp + 0x138], rcx
mov rax, qword [rbp + 0x6c8]
mov qword [rbp + 0x198], rax
mov rax, qword [rbp + 0x6e0]
mov qword [rbp + 0x110], rax
lea rsi, str.base_stor_vssmodulescoord_srchwdelete.cxx
mov qword [rbp + 0x380], rsi
lea r14, str.CVssHardwareProviderWrapper::ProcessDeletedVolume
mov qword [rbp + 0x388], r14
lea r15, str.CORHDELC
mov qword [rbp + 0x390], r15
mov dword [rbp + 0x398], 0x211
mov dword [rbp + 0x39c], 6
mov dword [rbp + 0x3a0], 0xff
xor r12d, r12d
mov dword [rbp + 0x420], 0x1000000
lea r13d, [r12 + 1]
xor edx, edx
lea r8d, [r12 + 0x78]
lea rcx, [rbp + 0x3a8]
call sub.msvcrt.dll_memset
xor r8d, r8d
lea rdx, [rbp + 0x380]
lea rcx, [rbp + 0xa0]
call fcn.140010990
nop
mov qword [rbp - 0x50], r12
mov rax, qword [rdi]
mov rbx, qword [rax + 0x80]
mov rcx, rbx
call qword [fcn.140031010]
lea rdx, [rbp - 0x50]
mov rcx, rdi
call rbx
mov dword [rbp + 0xa8], eax
mov qword [rbp + 0x380], rsi
mov qword [rbp + 0x388], r14
mov qword [rbp + 0x390], r15
mov dword [rbp + 0x398], 0x215
mov dword [rbp + 0x39c], r13d
mov dword [rbp + 0x3a0], 0xff
mov dword [rbp + 0x420], 0x1000000
xor edx, edx
lea r8d, [r12 + 0x78]
lea rcx, [rbp + 0x3a8]
call sub.msvcrt.dll_memset
lea r8, str.IVssSnapshotDescription::GetDeviceName
lea rdx, [rbp + 0x380]
lea rcx, [rbp + 0xa0]
call fcn.140010880
mov rax, qword [rdi]
mov rbx, qword [rax + 0x60]
mov rcx, rbx
call qword [fcn.140031010]
lea rdx, [rbp - 0x7d]
mov rcx, rdi
call rbx
mov dword [rbp + 0xa8], eax
mov qword [rbp + 0x380], rsi
mov qword [rbp + 0x388], r14
mov qword [rbp + 0x390], r15
mov dword [rbp + 0x398], 0x219
mov dword [rbp + 0x39c], r13d
mov dword [rbp + 0x3a0], 0xff
mov dword [rbp + 0x420], 0x1000000
xor edx, edx
lea r8d, [r12 + 0x78]
lea rcx, [rbp + 0x3a8]
call sub.msvcrt.dll_memset
lea r8, str.IVssSnapshotDescription::IsDynamicVolume
lea rdx, [rbp + 0x380]
lea rcx, [rbp + 0xa0]
call fcn.140010880
mov rax, qword [rdi]
mov rbx, qword [rax + 0x40]
mov rcx, rbx
call qword [fcn.140031010]
lea rdx, [rbp + 0x160]
mov rcx, rdi
call rbx
mov dword [rbp + 0xa8], eax
mov qword [rbp + 0x380], rsi
mov qword [rbp + 0x388], r14
mov qword [rbp + 0x390], r15
mov dword [rbp + 0x398], 0x21d
mov dword [rbp + 0x39c], r13d
mov dword [rbp + 0x3a0], 0xff
mov dword [rbp + 0x420], 0x1000000
xor edx, edx
lea r8d, [r12 + 0x78]
lea rcx, [rbp + 0x3a8]
call sub.msvcrt.dll_memset
lea r8, str.IVssSnapshotDescription::GetAttributes
lea rdx, [rbp + 0x380]
lea rcx, [rbp + 0xa0]
call fcn.140010880
mov rax, qword [rdi]
mov rbx, qword [rax + 0x18]
mov rcx, rbx
call qword [fcn.140031010]
lea rdx, [rbp + 0x340]
mov rcx, rdi
call rbx
mov dword [rbp + 0xa8], eax
mov qword [rbp + 0x380], rsi
mov qword [rbp + 0x388], r14
mov qword [rbp + 0x390], r15
mov dword [rbp + 0x398], 0x221
mov dword [rbp + 0x39c], r13d
mov dword [rbp + 0x3a0], 0xff
mov dword [rbp + 0x420], 0x1000000
xor edx, edx
lea r8d, [r12 + 0x78]
lea rcx, [rbp + 0x3a8]
call sub.msvcrt.dll_memset
lea r8, str.IVssSnapshotDescription::GetSnapshotId
lea rdx, [rbp + 0x380]
lea rcx, [rbp + 0xa0]
call fcn.140010880
mov eax, dword [rbp + 0x160]
and eax, r13d
mov dword [rbp - 0x10], eax
mov r14, qword [rbp - 0x50]
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x178], xmm0
mov qword [rbp + 0x188], r12
mov qword [rbp + 0x190], r12
lea rdi, str.Mask_Flag_given
lea rax, str.No_Mask_Flag
mov esi, dword [rbp + 0x6d8]
test esi, esi
cmove rdi, rax
lea rbx, str.Breaking
lea rax, str.Deleting
mov r15d, dword [rbp + 0x6d0]
test r15d, r15d
cmovne rbx, rax
lea rax, str.base_stor_vssmodulescoord_srchwdelete.cxx
mov qword [rbp + 0x380], rax
lea rax, str.CVssHardwareProviderWrapper::ProcessDeletedVolume
mov qword [rbp + 0x388], rax
lea rax, str.CORHDELC
mov qword [rbp + 0x390], rax
mov dword [rbp + 0x398], 0x22d
mov dword [rbp + 0x39c], 6
mov dword [rbp + 0x3a0], 0xff
mov dword [rbp + 0x420], 0x1000000
xor edx, edx
lea r8d, [r12 + 0x78]
lea rcx, [rbp + 0x3a8]
call sub.msvcrt.dll_memset
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], r14
mov r9, rbx
lea r8, str._s_snapshot__s___s
lea rdx, [rbp + 0x380]
lea rcx, [rbp + 0xa0]
call fcn.140010920
test r15d, r15d
jne 0x1400991cc
lea rcx, [rbp + 0x178]
call fcn.1400b6f70
mov r8b, byte [rbp - 0x7d]
mov rdx, r14
lea rcx, [rbp + 0x178]
call fcn.1400b7f20
test al, al
jne 0x1400991cc
lea rax, str.base_stor_vssmodulescoord_srchwdelete.cxx
mov qword [rbp + 0x380], rax
lea rax, str.CVssHardwareProviderWrapper::ProcessDeletedVolume
mov qword [rbp + 0x388], rax
lea rax, str.CORHDELC
mov qword [rbp + 0x390], rax
mov dword [rbp + 0x398], 0x23a
mov dword [rbp + 0x39c], 6
mov dword [rbp + 0x3a0], 0xff
mov dword [rbp + 0x420], 0x1000000
xor edx, edx
lea r8d, [r12 + 0x78]
lea rcx, [rbp + 0x3a8]
call sub.msvcrt.dll_memset
lea r8, str.It_is_not_safe_to_revert_signature_on_one_of_the_disks_of_this_volume
lea rdx, [rbp + 0x380]
lea rcx, [rbp + 0xa0]
call fcn.140010920
jmp 0x14009a8b1
test esi, esi
je 0x14009923c
lea rax, str.base_stor_vssmodulescoord_srchwdelete.cxx
mov qword [rbp + 0x380], rax
lea rax, str.CVssHardwareProviderWrapper::ProcessDeletedVolume
mov qword [rbp + 0x388], rax
lea rax, str.CORHDELC
mov qword [rbp + 0x390], rax
mov dword [rbp + 0x398], 0x240
mov dword [rbp + 0x39c], r13d
mov dword [rbp + 0x3a0], 0xff
mov dword [rbp + 0x420], 0x1000000
xor edx, edx
lea r8d, [rdx + 0x78]
lea rcx, [rbp + 0x3a8]
call sub.msvcrt.dll_memset
mov r8d, 0x1780
jmp 0x140099316
cmp r15d, r13d
jne 0x1400992aa
lea rax, str.base_stor_vssmodulescoord_srchwdelete.cxx
mov qword [rbp + 0x380], rax
lea rax, str.CVssHardwareProviderWrapper::ProcessDeletedVolume
mov qword [rbp + 0x388], rax
lea rax, str.CORHDELC
mov qword [rbp + 0x390], rax
mov dword [rbp + 0x398], 0x242
mov dword [rbp + 0x39c], r13d
mov dword [rbp + 0x3a0], 0xff
mov dword [rbp + 0x420], 0x1000000
xor edx, edx
lea r8d, [rdx + 0x78]
lea rcx, [rbp + 0x3a8]
call sub.msvcrt.dll_memset
mov r8d, 0x1782
jmp 0x140099316
test r15d, r15d
jne 0x140099329
lea rax, str.base_stor_vssmodulescoord_srchwdelete.cxx
mov qword [rbp + 0x380], rax
lea rax, str.CVssHardwareProviderWrapper::ProcessDeletedVolume
mov qword [rbp + 0x388], rax
lea rax, str.CORHDELC
mov qword [rbp + 0x390], rax
mov dword [rbp + 0x398], 0x244
mov dword [rbp + 0x39c], r13d
mov dword [rbp + 0x3a0], 0xff
mov dword [rbp + 0x420], 0x1000000
xor edx, edx
lea r8d, [r15 + 0x78]
lea rcx, [rbp + 0x3a8]
call sub.msvcrt.dll_memset
mov r8d, 0x1781
lea rdx, [rbp + 0x380]
lea rcx, [rbp + 0xa0]
call fcn.14000f880
lea rax, str.base_stor_vssmodulescoord_srchwdelete.cxx
mov qword [rbp + 0x380], rax
lea rax, str.CVssHardwareProviderWrapper::ProcessDeletedVolume
mov qword [rbp + 0x388], rax
lea rax, str.CORHDELC
mov qword [rbp + 0x390], rax
mov dword [rbp + 0x398], 0x246
mov dword [rbp + 0x39c], r13d
mov dword [rbp + 0x3a0], 0xff
mov dword [rbp + 0x420], 0x1000000
xor edx, edx
lea r8d, [rdx + 0x78]
lea rcx, [rbp + 0x3a8]
call sub.msvcrt.dll_memset
mov r9, r14
mov r8d, 0x1392
lea rdx, [rbp + 0x380]
lea rcx, [rbp + 0xa0]
call fcn.14000fa60
lea rax, str.base_stor_vssmodulescoord_srchwdelete.cxx
mov qword [rbp + 0x380], rax
lea rax, str.CVssHardwareProviderWrapper::ProcessDeletedVolume
mov qword [rbp + 0x388], rax
lea rax, str.CORHDELC
mov qword [rbp + 0x390], rax
mov dword [rbp + 0x398], 0x247
mov dword [rbp + 0x39c], r13d
mov dword [rbp + 0x3a0], 0xff
mov dword [rbp + 0x420], 0x1000000
xor edx, edx
lea r8d, [rdx + 0x78]
lea rcx, [rbp + 0x3a8]
call sub.msvcrt.dll_memset
movzx eax, byte [rbp + 0x34f]
movzx ecx, byte [rbp + 0x34e]
movzx edx, byte [rbp + 0x34d]
movzx r8d, byte [rbp + 0x34c]
movzx r9d, byte [rbp + 0x34b]
movzx r10d, byte [rbp + 0x34a]
movzx r11d, byte [rbp + 0x349]
movzx ebx, byte [rbp + 0x348]
movzx edi, word [rbp + 0x346]
movzx esi, word [rbp + 0x344]
mov dword [rsp + 0x70], eax
mov dword [rsp + 0x68], ecx
mov dword [rsp + 0x60], edx
mov dword [rsp + 0x58], r8d
mov dword [rsp + 0x50], r9d
mov dword [rsp + 0x48], r10d
mov dword [rsp + 0x40], r11d
mov dword [rsp + 0x38], ebx
mov dword [rsp + 0x30], edi
mov dword [rsp + 0x28], esi
mov eax, dword [rbp + 0x340]
mov dword [rsp + 0x20], eax
lea r9, [0x1400f3540]
mov r8d, 0x1396
lea rdx, [rbp + 0x380]
lea rcx, [rbp + 0xa0]
call fcn.14000fbc0
lea rsi, str.base_stor_vssmodulescoord_srchwdelete.cxx
mov qword [rbp + 0x380], rsi
lea rbx, str.CVssHardwareProviderWrapper::ProcessDeletedVolume
mov qword [rbp + 0x388], rbx
lea rax, str.CORHDELC
mov qword [rbp + 0x390], rax
mov dword [rbp + 0x398], 0x249
mov dword [rbp + 0x39c], 6
mov dword [rbp + 0x3a0], 0xff
mov dword [rbp + 0x420], 0x1000000
xor edx, edx
lea r8d, [rdx + 0x78]
lea rcx, [rbp + 0x3a8]
call sub.msvcrt.dll_memset
lea r8, str.Attempting_to_dismount_delete_the_volume_device_and_then_revert_disk_signature
lea rdx, [rbp + 0x380]
lea rcx, [rbp + 0xa0]
call fcn.140010920
cmp r15d, r13d
sete dil
mov byte [rbp - 0x80], dil
or qword [rbp - 0x28], 0xffffffffffffffff
lea rax, [0x1400fd200]
mov qword [rbp - 0x30], rax
mov qword [rbp - 0x18], r12
lea rax, [0x1400f1e90]
mov qword [rbp - 0x20], rax
mov byte [rbp - 0x7f], r12b
lea rax, [rbp + 0x350]
mov qword [rsp + 0x20], rax
lea r9, [rbp - 0x20]
lea r8, [rbp - 0x30]
mov rdx, r14
call fcn.140093888
test al, al
jne 0x14009962f
lea rax, [rbp + 0x350]
mov qword [rsp + 0x20], rax
lea r9, [rbp - 0x20]
lea r8, [rbp - 0x30]
mov rdx, r14
call fcn.140093390
test al, al
jne 0x14009962f
mov qword [rbp + 0x380], rsi
mov qword [rbp + 0x388], rbx
lea rax, str.CORHDELC
mov qword [rbp + 0x390], rax
mov dword [rbp + 0x398], 0x266
mov dword [rbp + 0x39c], r13d
mov dword [rbp + 0x3a0], 0xff
mov dword [rbp + 0x420], 0x1000000
xor edx, edx
lea r8d, [rdx + 0x78]
lea rcx, [rbp + 0x3a8]
call sub.msvcrt.dll_memset
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_1.dll_GetLastError]
mov r8d, eax
lea rdx, [rbp - 8]
lea rcx, [rbp + 0x380]
call fcn.14002234c
mov r9d, 2
mov r8, rax
mov edx, 0x3029
lea rcx, [rbp + 0xa0]
call fcn.140010bcc
lea rcx, [rbp + 0x380]
call fcn.140019ca4
jmp 0x140099633
mov byte [rbp - 0x7f], r13b
mov dword [rbp - 0xc], r12d
mov r13, r12
mov qword [rbp - 0x38], r12
mov qword [rbp + 0x1b0], r12
mov word [rbp + 0x1d8], r12w
mov qword [rbp + 0x1dc], r12
mov qword [rbp + 0x1e8], r12
mov qword [rbp + 0x1f0], r12
mov dword [rbp + 0x1f8], r12d
mov qword [rbp + 0x200], r12
mov word [rbp + 0x208], r12w
mov qword [rbp + 0x218], r12
lea rax, [0x1400f1e90]
mov qword [rbp + 0x210], rax
xor edx, edx
lea r8d, [rdx + 0x20]
lea rcx, [rbp + 0x1b8]
call sub.msvcrt.dll_memset
nop
mov dword [rsp + 0x40], 0x80
mov dword [rsp + 0x38], 3
mov dword [rsp + 0x30], 0xc0000000
mov dword [rsp + 0x28], r12d
mov byte [rsp + 0x20], r12b
xor r9d, r9d
mov r8, r14
lea rdx, [rbp + 0xa0]
lea rcx, [rbp + 0x1b0]
call fcn.1400228b0
mov ebx, eax
mov dword [rbp + 0xa8], eax
test eax, eax
jns 0x1400997f8
mov qword [rbp + 0x380], rsi
mov dword [rbp + 0x39c], 1
mov dword [rbp + 0x3a0], 0xff
mov dword [rbp + 0x420], 0x1000000
xor edx, edx
lea r8d, [rdx + 0x78]
lea rcx, [rbp + 0x3a8]
cmp eax, 0x80042308
lea rax, str.CVssHardwareProviderWrapper::ProcessDeletedVolume
mov qword [rbp + 0x388], rax
lea rax, str.CORHDELC
mov qword [rbp + 0x390], rax
jne 0x14009978d
mov dword [rbp + 0x398], 0x287
call sub.msvcrt.dll_memset
mov r8, r14
lea rdx, [rbp - 8]
lea rcx, [rbp + 0x380]
call fcn.140022250
mov r9d, 2
mov r8, rax
mov edx, 0x302a
lea rcx, [rbp + 0xa0]
call fcn.140010bcc
lea rcx, [rbp + 0x380]
call fcn.140019ca4
jmp 0x14009a890
test dil, dil
je 0x1400997c7
mov dword [rbp + 0x398], 0x28d
call sub.msvcrt.dll_memset
mov dword [rsp + 0x20], ebx
mov r9, r14
lea r8, str.Failed_to_open_the_volume:__s__0_08lx_
lea rdx, [rbp + 0x380]
lea rcx, [rbp + 0xa0]
call fcn.1400ce0a0
jmp 0x14009a890
mov dword [rbp + 0x398], 0x291
call sub.msvcrt.dll_memset
mov dword [rsp + 0x20], ebx
mov r9, r14
lea r8, str.Failed_to_open_the_volume:__s__0_08lx_
lea rdx, [rbp + 0x380]
lea rcx, [rbp + 0xa0]
call fcn.1400d020c
int3
mov qword [rsp + 0x30], r12
mov byte [rsp + 0x28], r12b
mov dword [rsp + 0x20], r12d
xor r9d, r9d
mov r8d, 0x560000
lea rdx, [rbp + 0xa0]
lea rcx, [rbp + 0x1b0]
call fcn.1400225d8
mov ebx, eax
mov dword [rbp + 0xa8], eax
test eax, eax
jns 0x1400998ae
mov qword [rbp + 0x380], rsi
lea rax, str.CVssHardwareProviderWrapper::ProcessDeletedVolume
mov qword [rbp + 0x388], rax
lea rax, str.CORHDELC
mov qword [rbp + 0x390], rax
mov dword [rbp + 0x398], 0x29c
mov dword [rbp + 0x39c], 1
mov dword [rbp + 0x3a0], 0xff
mov dword [rbp + 0x420], 0x1000000
xor edx, edx
lea r8d, [rdx + 0x78]
lea rcx, [rbp + 0x3a8]
call sub.msvcrt.dll_memset
mov dword [rsp + 0x20], ebx
mov r9, r14
lea r8, str.Failed_to_get_the_volume_extents:__s__0_08lx_
lea rdx, [rbp + 0x380]
lea rcx, [rbp + 0xa0]
call fcn.1400d020c
int3
mov rax, qword [rbp + 0x200]
mov qword [rbp + 0x200], r12
mov qword [rbp + 0x1f0], r12
mov dword [rbp + 0x1f8], r12d
mov qword [rbp - 0x40], rax
mov ecx, dword [rax]
mov dword [rbp - 0x70], ecx
lea r12, [rax + 8]
mov qword [rbp - 0x68], r12
xor edi, edi
test r15d, r15d
jne 0x1400998fd
lea r9, [rbp - 0xc]
lea r8, [rbp - 0x38]
mov edx, dword [r12]
call fcn.1400b671c
mov r13, qword [rbp - 0x38]
test al, al
mov al, 1
jne 0x140099900
mov al, dil
mov byte [rbp - 0x7e], al
mov qword [rbp + 0x158], r13
lea rcx, [0x1400f2cd8]
mov qword [rbp + 0x150], rcx
mov r15, rdi
mov qword [rbp - 0x48], rdi
mov qword [rbp - 0x38], rdi
mov rsi, rdi
mov qword [rbp + 0x168], rdi
mov qword [rbp + 0x170], rdi
mov qword [rbp + 0x148], rdi
lea rcx, [0x1400f23f8]
mov qword [rbp + 0x140], rcx
mov qword [rbp + 0x130], rdi
lea rcx, [0x1400f2350]
mov qword [rbp + 0x128], rcx
cmp dword [rbp - 0x10], edi
je 0x1400999b8
test al, al
je 0x1400999b8
lea rax, [rbp - 0x48]
mov qword [rsp + 0x20], rax
lea r9, [rbp - 0x38]
lea r8, [rbp + 0x168]
mov rdx, r14
call fcn.140091374
lea rcx, [rbp + 0x140]
call fcn.14005ab48
mov rax, qword [rbp - 0x38]
mov qword [rbp + 0x148], rax
lea rcx, [rbp + 0x128]
call fcn.14001e0e8
mov r15, qword [rbp - 0x48]
mov qword [rbp + 0x130], r15
mov rsi, qword [rbp + 0x168]
mov dword [rbp + 0x1dc], edi
mov dword [rbp + 0x1f0], edi
mov qword [rsp + 0x30], rdi
mov byte [rsp + 0x28], dil
mov dword [rsp + 0x20], edi
xor r9d, r9d
mov r8d, 0x90018
lea rdx, [rbp + 0xa0]
lea rcx, [rbp + 0x1b0]
call fcn.1400225d8
mov ebx, eax
mov dword [rbp + 0xa8], eax
test eax, eax
jns 0x140099a7f
lea rax, str.base_stor_vssmodulescoord_srchwdelete.cxx
mov qword [rbp + 0x380], rax
lea rax, str.CVssHardwareProviderWrapper::ProcessDeletedVolume
mov qword [rbp + 0x388], rax
lea rax, str.CORHDELC
mov qword [rbp + 0x390], rax
mov dword [rbp + 0x398], 0x2cc
mov dword [rbp + 0x39c], 1
mov dword [rbp + 0x3a0], 0xff
mov dword [rbp + 0x420], 0x1000000
xor edx, edx
lea r8d, [rdx + 0x78]
lea rcx, [rbp + 0x3a8]
call sub.msvcrt.dll_memset
mov r9d, ebx
lea r8, str.Failed_to_lock_the_volume__0x_08lx_.
lea rdx, [rbp + 0x380]
lea rcx, [rbp + 0xa0]
call fcn.140010920
mov dword [rbp + 0x1dc], edi
mov dword [rbp + 0x1f0], edi
mov qword [rsp + 0x30], rdi
mov byte [rsp + 0x28], dil
mov dword [rsp + 0x20], edi
xor r9d, r9d
mov r8d, 0x90020
lea rdx, [rbp + 0xa0]
lea rcx, [rbp + 0x1b0]
call fcn.1400225d8
mov edi, eax
mov dword [rbp + 0xa8], eax
xor edx, edx
test eax, eax
jns 0x140099c04
mov cl, byte [rbp - 0x80]
neg cl
sbb ebx, ebx
neg ebx
inc ebx
lea rax, str.base_stor_vssmodulescoord_srchwdelete.cxx
mov qword [rbp + 0x380], rax
lea rax, str.CVssHardwareProviderWrapper::ProcessDeletedVolume
mov qword [rbp + 0x388], rax
lea rax, str.CORHDELC
mov qword [rbp + 0x390], rax
mov dword [rbp + 0x398], 0x2d6
mov dword [rbp + 0x39c], 1
mov dword [rbp + 0x3a0], 0xff
mov dword [rbp + 0x420], 0x1000000
lea r8d, [rdx + 0x78]
lea rcx, [rbp + 0x3a8]
call sub.msvcrt.dll_memset
mov r8d, edi
lea rdx, [rbp - 8]
lea rcx, [rbp + 0x380]
call fcn.1400ccd58
movzx r9d, bx
mov r8, rax
mov edx, 0x302b
lea rcx, [rbp + 0xa0]
call fcn.140010bcc
lea rcx, [rbp + 0x380]
call fcn.140019ca4
mov dil, byte [rbp - 0x80]
xor edx, edx
test dil, dil
jne 0x140099c08
lea rax, str.base_stor_vssmodulescoord_srchwdelete.cxx
mov qword [rbp + 0x380], rax
lea rax, str.CVssHardwareProviderWrapper::ProcessDeletedVolume
mov qword [rbp + 0x388], rax
lea rax, str.CORHDELC
mov qword [rbp + 0x390], rax
mov dword [rbp + 0x398], 0x2d9
mov dword [rbp + 0x39c], 1
mov dword [rbp + 0x3a0], 0xff
mov dword [rbp + 0x420], 0x1000000
lea r8d, [rdx + 0x78]
lea rcx, [rbp + 0x3a8]
call sub.msvcrt.dll_memset
mov eax, dword [rbp + 0xa8]
mov dword [rsp + 0x20], eax
mov r9, r14
lea r8, str.Failed_to_to_dismount_the_volume:__s__0_08lx_
lea rdx, [rbp + 0x380]
lea rcx, [rbp + 0xa0]
call fcn.1400d020c
int3
mov dil, byte [rbp - 0x80]
mov dword [rbp + 0x1dc], edx
mov dword [rbp + 0x1f0], edx
mov qword [rsp + 0x30], rdx
mov byte [rsp + 0x28], dl
mov dword [rsp + 0x20], edx
xor r9d, r9d
mov r8d, 0x56c00c
lea rdx, [rbp + 0xa0]
lea rcx, [rbp + 0x1b0]
call fcn.1400225d8
mov ebx, eax
mov dword [rbp + 0xa8], eax
test eax, eax
jns 0x140099cce
lea rax, str.base_stor_vssmodulescoord_srchwdelete.cxx
mov qword [rbp + 0x380], rax
lea rax, str.CVssHardwareProviderWrapper::ProcessDeletedVolume
mov qword [rbp + 0x388], rax
lea rax, str.CORHDELC
mov qword [rbp + 0x390], rax
mov dword [rbp + 0x398], 0x2e4
mov dword [rbp + 0x39c], 1
mov dword [rbp + 0x3a0], 0xff
mov dword [rbp + 0x420], 0x1000000
xor edx, edx
lea r8d, [rdx + 0x78]
lea rcx, [rbp + 0x3a8]
call sub.msvcrt.dll_memset
mov r9d, ebx
lea r8, str.Failed_to_take_the_volume_offline__0x_08lx_.
lea rdx, [rbp + 0x380]
lea rcx, [rbp + 0xa0]
call fcn.140010920
lea rcx, [rbp + 0x1b0]
call fcn.140022878
cmp dword [rbp + 0x6d0], 1
je 0x140099cee
xor ecx, ecx
cmp byte [rbp - 0x7e], cl
je 0x140099e5e
lea rax, str.base_stor_vssmodulescoord_srchwdelete.cxx
mov qword [rbp + 0x380], rax
lea rax, str.CVssHardwareProviderWrapper::ProcessDeletedVolume
mov qword [rbp + 0x388], rax
lea rax, str.CORHDELC
mov qword [rbp + 0x390], rax
mov dword [rbp + 0x398], 0x2fb
mov dword [rbp + 0x39c], 1
mov dword [rbp + 0x3a0], 0xff
mov dword [rbp + 0x420], 0x1000000
xor edx, edx
lea r8d, [rdx + 0x78]
lea rcx, [rbp + 0x3a8]
call sub.msvcrt.dll_memset
mov r9, r14
lea r8, str.Removing_mount_points_from_volume_device__s
lea rdx, [rbp + 0x380]
lea rcx, [rbp + 0xa0]
call fcn.140010920
mov rbx, r15
xor ecx, ecx
test r15, r15
je 0x140099e5e
lea rdi, str.base_stor_vssmodulescoord_srchwdelete.cxx
lea rsi, str.CVssHardwareProviderWrapper::ProcessDeletedVolume
lea r12, str.CORHDELC
or rax, 0xffffffffffffffff
inc rax
cmp word [rbx + rax*2], cx
jne 0x140099d96
test rax, rax
je 0x140099e4f
mov rcx, rbx
call qword [sym.imp.api_ms_win_core_file_l1_2_1.dll_DeleteVolumeMountPointW]
xor ecx, ecx
test eax, eax
jne 0x140099e34
mov qword [rbp + 0x380], rdi
mov qword [rbp + 0x388], rsi
mov qword [rbp + 0x390], r12
mov dword [rbp + 0x398], 0x302
mov dword [rbp + 0x39c], 1
mov dword [rbp + 0x3a0], 0xff
mov dword [rbp + 0x420], 0x1000000
xor edx, edx
lea r8d, [rcx + 0x78]
lea rcx, [rbp + 0x3a8]
call sub.msvcrt.dll_memset
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_1.dll_GetLastError]
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], r14
mov r9, rbx
lea r8, str.Fail_to_delete_mount_point__s_for_volume__s__winerror__d
lea rdx, [rbp + 0x380]
lea rcx, [rbp + 0xa0]
call fcn.140010920
xor ecx, ecx
or rax, 0xffffffffffffffff
inc rax
cmp word [rbx + rax*2], cx
jne 0x140099e38
lea rbx, [rbx + rax*2]
add rbx, 2
jne 0x140099d92
mov rsi, qword [rbp + 0x168]
mov r12, qword [rbp - 0x68]
mov dil, byte [rbp - 0x80]
lea rax, str.base_stor_vssmodulescoord_srchwdelete.cxx
mov qword [rbp + 0x380], rax
lea rax, str.CVssHardwareProviderWrapper::ProcessDeletedVolume
mov qword [rbp + 0x388], rax
lea rax, str.CORHDELC
mov qword [rbp + 0x390], rax
mov dword [rbp + 0x398], 0x30b
mov dword [rbp + 0x39c], 1
mov dword [rbp + 0x3a0], 0xff
mov dword [rbp + 0x420], 0x1000000
xor edx, edx
lea r8d, [rdx + 0x78]
lea rcx, [rbp + 0x3a8]
call sub.msvcrt.dll_memset
mov r9, qword [rbp - 0x18]
lea r8, str.Uninstalling_volume_device:__s
lea rdx, [rbp + 0x380]
lea rcx, [rbp + 0xa0]
call fcn.140010920
cmp byte [rbp - 0x7f], 0
je 0x140099eff
lea r8, [rbp + 0x350]
mov rdx, qword [rbp - 0x28]
call fcn.14009c3e4
lea rcx, [rbp - 0x30]
call fcn.140091348
cmp byte [rbp - 0x7d], 0
je 0x14009a06c
xor r13d, r13d
mov qword [rbp - 0x68], r13
mov qword [rbp - 0x60], r13
mov r15d, dword [rbp + 0x6d8]
mov dword [rbp - 0x58], r15d
mov ebx, r13d
mov r14d, dword [rbp - 0x70]
test r14d, r14d
je 0x140099f5b
mov rdi, r12
lea rdx, [rbp - 0x68]
mov ecx, dword [rdi]
call fcn.1400aec84
test al, al
jne 0x140099f50
mov eax, ebx
lea rcx, [rax + rax*2]
lea rdx, [r12 + rcx*8]
lea rcx, [rbp - 0x68]
call fcn.14008ee9c
inc ebx
add rdi, 0x18
cmp ebx, r14d
jb 0x140099f2e
lea rdx, [rbp - 0x68]
mov rdi, qword [rbp + 0x138]
mov rcx, rdi
call fcn.140090dd0
mov ebx, r13d
mov eax, dword [rbp - 0x60]
test eax, eax
jle 0x140099fca
mov r14d, dword [rbp + 0x6c0]
mov dil, byte [rbp - 0x80]
mov r12, qword [rbp + 0x1a8]
mov r13, qword [rbp + 0x1a0]
mov edx, ebx
lea rcx, [rbp - 0x68]
call fcn.14008eb1c
mov byte [rsp + 0x28], dil
mov dword [rsp + 0x20], r14d
mov r9, r13
mov r8, r12
mov edx, dword [rax]
call fcn.140094aa0
test al, al
je 0x14009a01d
inc ebx
mov eax, dword [rbp - 0x60]
cmp ebx, eax
jl 0x140099f91
mov rdi, qword [rbp + 0x138]
xor r13d, r13d
mov rcx, qword [rbp + 0x198]
mov byte [rcx], 1
test r15d, r15d
je 0x14009a052
mov ebx, r13d
test eax, eax
jle 0x14009a01d
mov rdi, qword [rbp + 0x110]
mov edx, ebx
lea rcx, [rbp - 0x68]
call fcn.14008eb1c
mov rdx, rdi
mov ecx, dword [rax]
call fcn.1400aec84
test al, al
jne 0x14009a016
mov edx, ebx
lea rcx, [rbp - 0x68]
call fcn.14008eb1c
mov rdx, rax
mov rcx, rdi
call fcn.14008ee9c
inc ebx
cmp ebx, dword [rbp - 0x60]
jl 0x140099fe7
lea rcx, [rbp - 0x68]
call fcn.14008eaa4
nop
lea rcx, [rbp + 0x128]
call fcn.14000384c
nop
lea rcx, [rbp + 0x140]
call fcn.14005ab18
nop
test rsi, rsi
je 0x14009a879
mov rcx, rsi
jmp 0x14009a872
lea rdx, [rbp - 0x68]
mov rcx, rdi
call fcn.140096ab4
lea rdx, [rbp - 0x68]
mov rcx, rdi
call fcn.14009c50c
jmp 0x14009a01d
mov ebx, dword [r12]
mov dword [rbp - 0x70], ebx
mov byte [rsp + 0x28], dil
mov eax, dword [rbp + 0x6c0]
mov dword [rsp + 0x20], eax
mov r9, qword [rbp + 0x1a0]
mov r8, qword [rbp + 0x1a8]
mov edx, ebx
call fcn.140094aa0
xor edi, edi
test al, al
jne 0x14009a127
lea rax, str.base_stor_vssmodulescoord_srchwdelete.cxx
mov qword [rbp + 0x380], rax
lea rax, str.CVssHardwareProviderWrapper::ProcessDeletedVolume
mov qword [rbp + 0x388], rax
lea rax, str.CORHDELC
mov qword [rbp + 0x390], rax
mov dword [rbp + 0x398], 0x368
mov dword [rbp + 0x39c], 1
mov dword [rbp + 0x3a0], 0xff
mov dword [rbp + 0x420], 0x1000000
xor edx, edx
lea r8d, [rdi + 0x78]
lea rcx, [rbp + 0x3a8]
call sub.msvcrt.dll_memset
mov r9d, ebx
lea r8, str.Disk__d_still_has_snapshots_on_it
lea rdx, [rbp + 0x380]
lea rcx, [rbp + 0xa0]
call fcn.140010920
jmp 0x14009a027
cmp dword [rbp + 0x6d0], 1
jne 0x14009a185
mov qword [rbp + 0x110], rdi
mov qword [rbp + 0x118], rdi
lea rdx, [rbp - 0x70]
lea rcx, [rbp + 0x110]
call fcn.14008ee9c
mov r15d, dword [rbp + 0x6d8]
mov dword [rbp + 0x120], r15d
lea rdx, [rbp + 0x110]
mov rcx, qword [rbp + 0x138]
call fcn.14009c50c
mov rcx, qword [rbp + 0x198]
mov byte [rcx], 1
lea rcx, [rbp + 0x110]
jmp 0x14009a021
mov dword [rbp - 0x70], edi
lea rdx, [0x14015a53c]
mov ecx, 0x28
call fcn.1400307f4
mov rdi, rax
test rax, rax
jne 0x14009a22a
lea rax, str.base_stor_vssmodulescoord_srchwdelete.cxx
mov qword [rbp + 0x380], rax
lea rax, str.CVssHardwareProviderWrapper::ProcessDeletedVolume
mov qword [rbp + 0x388], rax
lea rax, str.CORHDELC
mov qword [rbp + 0x390], rax
mov dword [rbp + 0x398], 0x38b
mov dword [rbp + 0x39c], 1
mov dword [rbp + 0x3a0], 0xff
mov dword [rbp + 0x420], 0x1000000
xor edx, edx
lea r8d, [rdi + 0x78]
lea rcx, [rbp + 0x3a8]
call sub.msvcrt.dll_memset
lea r9, str.cant_allocate_VSS_VOLUME_DISK_ID_MAPPING
mov r8d, 0x8007000e
lea rdx, [rbp + 0x380]
lea rcx, [rbp + 0xa0]
call fcn.1400ce7c0
int3
xor edx, edx
lea r8d, [rdx + 0x28]
mov rcx, rax
call sub.msvcrt.dll_memset
mov qword [rdi + 0x10], r12
mov qword [rdi], r13
mov eax, dword [rbp - 0xc]
mov dword [rdi + 8], eax
xor r12d, r12d
mov qword [rbp + 0x118], r12
lea rax, [0x1400f2350]
mov qword [rbp + 0x110], rax
mov qword [rbp - 0x60], rdi
lea rax, [0x1400fd208]
mov qword [rbp - 0x68], rax
lea rax, [rbp - 0x70]
mov qword [rsp + 0x20], rax
mov r9, rdi
mov r8d, ebx
mov rcx, qword [rbp + 0x138]
call fcn.14009a9c0
test al, al
jne 0x14009a441
mov word [rbp + 0x380], r12w
xor edx, edx
lea r8d, [r12 + 0x7e]
lea rcx, [rbp + 0x382]
call sub.msvcrt.dll_memset
mov dword [rsp + 0x20], 0x40
lea r9, [rbp + 0x380]
mov r8d, ebx
lea rdx, [rbp + 0xa0]
call fcn.1400ad430
mov dword [rbp + 0x14], 6
mov dword [rbp + 0x98], 0x1000000
xor edx, edx
lea rcx, [rbp + 0x20]
cmp dword [rbp - 0x70], r12d
je 0x14009a3b1
lea rbx, str.base_stor_vssmodulescoord_srchwdelete.cxx
mov qword [rbp - 8], rbx
lea rdi, str.CVssHardwareProviderWrapper::ProcessDeletedVolume
mov qword [rbp], rdi
lea rsi, str.CORHDELC
mov qword [rbp + 8], rsi
mov dword [rbp + 0x10], 0x3a6
mov r15d, 0xff
mov dword [rbp + 0x18], r15d
lea r13d, [r12 + 0x78]
mov r8d, r13d
call sub.msvcrt.dll_memset
mov r8, r14
lea rdx, [rbp + 0x298]
lea rcx, [rbp - 8]
call fcn.140022250
lea r9d, [r12 + 1]
mov r8, rax
mov edx, 0x303e
lea rcx, [rbp + 0xa0]
call fcn.140010bcc
lea rcx, [rbp - 8]
call fcn.140019ca4
mov qword [rbp - 8], rbx
mov qword [rbp], rdi
mov qword [rbp + 8], rsi
mov dword [rbp + 0x10], 0x3a7
mov dword [rbp + 0x14], 6
mov dword [rbp + 0x18], r15d
mov dword [rbp + 0x98], 0x1000000
mov r8d, r13d
xor edx, edx
lea rcx, [rbp + 0x20]
call sub.msvcrt.dll_memset
lea r9, str.Fail_to_get_all_volume_arrivals_for_reinstalled_disks_on_Break
mov r8d, 0x80042302
lea rdx, [rbp - 8]
lea rcx, [rbp + 0xa0]
call fcn.1400ce7c0
int3
lea rax, str.base_stor_vssmodulescoord_srchwdelete.cxx
mov qword [rbp - 8], rax
lea rax, str.CVssHardwareProviderWrapper::ProcessDeletedVolume
mov qword [rbp], rax
lea rax, str.CORHDELC
mov qword [rbp + 8], rax
mov dword [rbp + 0x10], 0x3aa
mov dword [rbp + 0x18], 0xff
mov r8d, 0x78
call sub.msvcrt.dll_memset
lea r8, [rbp + 0x380]
lea rdx, [rbp + 0x298]
lea rcx, [rbp - 8]
call fcn.140022250
mov r9d, 1
mov r8, rax
mov edx, 0x3040
lea rcx, [rbp + 0xa0]
call fcn.140010bcc
lea rcx, [rbp - 8]
call fcn.140019ca4
nop
lea rcx, [rbp - 0x68]
call fcn.14009ce74
nop
lea rcx, [rbp + 0x110]
call fcn.14000384c
jmp 0x14009a027
mov rbx, qword [rdi + 0x18]
lea rcx, [rbp + 0x110]
call fcn.14001e0e8
mov qword [rbp + 0x118], rbx
mov rsi, qword [rbp - 0x78]
mov rax, qword [rsi]
mov rbx, qword [rax + 0x88]
mov rcx, rbx
call qword [fcn.140031010]
mov rdx, qword [rdi + 0x18]
mov rcx, rsi
call rbx
mov dword [rbp + 0xa8], eax
lea r13, str.base_stor_vssmodulescoord_srchwdelete.cxx
mov qword [rbp - 8], r13
lea rax, str.CVssHardwareProviderWrapper::ProcessDeletedVolume
mov qword [rbp], rax
lea rax, str.CORHDELC
mov qword [rbp + 8], rax
mov dword [rbp + 0x10], 0x3b3
mov esi, 1
mov dword [rbp + 0x14], esi
mov dword [rbp + 0x18], 0xff
mov dword [rbp + 0x98], 0x1000000
xor edx, edx
lea r8d, [rsi + 0x77]
lea rcx, [rbp + 0x20]
call sub.msvcrt.dll_memset
lea r8, str.IVssSnapshotSetDescription::SetDeviceName
lea rdx, [rbp - 8]
lea rcx, [rbp + 0xa0]
call fcn.140010880
mov qword [rbp + 0x220], r12
mov word [rbp + 0x248], r12w
mov qword [rbp + 0x24c], r12
mov qword [rbp + 0x258], r12
mov qword [rbp + 0x260], r12
mov dword [rbp + 0x268], r12d
mov qword [rbp + 0x270], r12
mov word [rbp + 0x278], r12w
mov qword [rbp + 0x288], r12
lea rax, [0x1400f1e90]
mov qword [rbp + 0x280], rax
xor edx, edx
lea r8d, [rsi + 0x1f]
lea rcx, [rbp + 0x228]
call sub.msvcrt.dll_memset
nop
mov dword [rsp + 0x40], 0x80
mov dword [rsp + 0x38], 3
mov dword [rsp + 0x30], 0xc0000000
mov dword [rsp + 0x28], r12d
mov byte [rsp + 0x20], r12b
xor r9d, r9d
mov r8, qword [rdi + 0x18]
lea rdx, [rbp + 0xa0]
lea rcx, [rbp + 0x220]
call fcn.1400228b0
mov ebx, eax
mov dword [rbp + 0xa8], eax
test eax, eax
jns 0x14009a5f7
mov qword [rbp - 8], r13
lea rax, str.CVssHardwareProviderWrapper::ProcessDeletedVolume
mov qword [rbp], rax
lea rax, str.CORHDELC
mov qword [rbp + 8], rax
mov dword [rbp + 0x10], 0x3bc
mov dword [rbp + 0x14], esi
mov dword [rbp + 0x18], 0xff
mov dword [rbp + 0x98], 0x1000000
xor edx, edx
lea r8d, [rsi + 0x77]
lea rcx, [rbp + 0x20]
call sub.msvcrt.dll_memset
mov dword [rsp + 0x20], ebx
mov r9, qword [rdi + 0x18]
lea r8, str.CreateFile__s__failed:__0x_08lx_
lea rdx, [rbp - 8]
lea rcx, [rbp + 0xa0]
call fcn.140010920
jmp 0x14009a6a4
mov qword [rsp + 0x30], r12
mov byte [rsp + 0x28], r12b
mov dword [rsp + 0x20], r12d
xor r9d, r9d
mov r8d, 0x56c008
lea rdx, [rbp + 0xa0]
lea rcx, [rbp + 0x220]
call fcn.1400225d8
mov ebx, eax
mov dword [rbp + 0xa8], eax
test eax, eax
jns 0x14009a698
mov qword [rbp - 8], r13
lea rax, str.CVssHardwareProviderWrapper::ProcessDeletedVolume
mov qword [rbp], rax
lea rax, str.CORHDELC
mov qword [rbp + 8], rax
mov dword [rbp + 0x10], 0x3c4
mov dword [rbp + 0x14], esi
mov dword [rbp + 0x18], 0xff
mov dword [rbp + 0x98], 0x1000000
xor edx, edx
lea r8d, [rdx + 0x78]
lea rcx, [rbp + 0x20]
call sub.msvcrt.dll_memset
mov dword [rsp + 0x20], ebx
mov r9, qword [rdi + 0x18]
lea r8, str.DeviceIoControl__s__IOCTL_VOLUME_ONLINE__fails:__0x_08lx_
lea rdx, [rbp - 8]
lea rcx, [rbp + 0xa0]
call fcn.140010920
mov dword [rbp + 0xa8], r12d
lea rcx, [rbp + 0x220]
call fcn.140022878
mov word [rbp + 0x430], r12w
xor edx, edx
mov r8d, 0x206
lea rcx, [rbp + 0x432]
call sub.msvcrt.dll_memset
mov r9d, 0x104
lea r8, [rbp + 0x430]
mov rdx, qword [rdi + 0x18]
call fcn.140092f84
lea rbx, str.CVssHardwareProviderWrapper::ProcessDeletedVolume
test al, al
jne 0x14009a73d
mov qword [rbp - 8], r13
mov qword [rbp], rbx
lea rax, str.CORHDELC
mov qword [rbp + 8], rax
mov dword [rbp + 0x10], 0x3d0
mov dword [rbp + 0x14], 6
mov dword [rbp + 0x18], 0xff
mov dword [rbp + 0x98], 0x1000000
xor edx, edx
lea r8d, [rdx + 0x78]
lea rcx, [rbp + 0x20]
call sub.msvcrt.dll_memset
mov r9, qword [rdi + 0x18]
lea r8, str.GetDosDevice__s__fails
lea rdx, [rbp - 8]
lea rcx, [rbp + 0xa0]
call fcn.140010920
lea r8, [rbp + 0x430]
mov rdx, r14
cmp dword [rbp - 0x10], r12d
je 0x14009a7a4
call fcn.14009bcc4
test al, al
jne 0x14009a814
mov qword [rbp - 8], r13
mov qword [rbp], rbx
lea rax, str.CORHDELC
mov qword [rbp + 8], rax
mov dword [rbp + 0x10], 0x3d6
mov dword [rbp + 0x14], 6
mov dword [rbp + 0x18], 0xff
mov dword [rbp + 0x98], 0x1000000
xor edx, edx
lea r8d, [rdx + 0x78]
lea rcx, [rbp + 0x20]
call sub.msvcrt.dll_memset
lea r8, str.SetDosDevice__s___s__failed
jmp 0x14009a7f5
call fcn.140091bc8
test al, al
jne 0x14009a814
mov qword [rbp - 8], r13
mov qword [rbp], rbx
lea rax, str.CORHDELC
mov qword [rbp + 8], rax
mov dword [rbp + 0x10], 0x3de
mov dword [rbp + 0x14], 6
mov dword [rbp + 0x18], 0xff
mov dword [rbp + 0x98], 0x1000000
xor edx, edx
lea r8d, [rdx + 0x78]
lea rcx, [rbp + 0x20]
call sub.msvcrt.dll_memset
lea r8, str.CreateSymbolicLink__s__s__failed
lea rax, [rbp + 0x430]
mov qword [rsp + 0x20], rax
mov r9, r14
lea rdx, [rbp - 8]
lea rcx, [rbp + 0xa0]
call fcn.140010920
mov r9, r15
lea r8, [rbp + 0x168]
mov rdx, qword [rdi + 0x18]
call fcn.14009b068
nop
lea rcx, [rbp + 0x220]
call fcn.1400224e0
nop
lea rcx, [rbp - 0x68]
call fcn.14009ce74
nop
lea rcx, [rbp + 0x110]
call fcn.14000384c
nop
lea rcx, [rbp + 0x128]
call fcn.14000384c
nop
lea rcx, [rbp + 0x140]
call fcn.14005ab18
nop
mov rcx, qword [rbp + 0x168]
test rcx, rcx
je 0x14009a879
call qword [sym.imp.msvcrt.dll_free]
nop
lea rcx, [rbp + 0x150]
call fcn.14002fbfc
nop
lea rcx, [rbp - 0x40]
call fcn.14002fffc
nop
lea rcx, [rbp + 0x1b0]
call fcn.1400224e0
nop
lea rcx, [rbp - 0x20]
call fcn.140008650
nop
lea rcx, [rbp - 0x30]
call fcn.14008ea74
nop
lea rcx, [rbp + 0x178]
call fcn.1400b4828
nop
mov rcx, qword [rbp - 0x50]
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
nop
lea rcx, [rbp + 0xa0]
call fcn.140010ab0
mov rcx, qword [rbp + 0x640]
xor rcx, rsp
call fcn.1400305f0
add rsp, 0x758
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret