Function at 0x140014820
Capabilities:
Connect network resource
Enumerate disk volumes
Get disk information

Disassembly:
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x930
mov r15, rdx
movsxd rdi, ecx
xor r12d, r12d
mov r14d, r12d
mov dword [rsp + 0x978], r12d
mov rdx, qword [rdx]
xorps xmm0, xmm0
movups xmmword [rsp + 0x280], xmm0
mov qword [rsp + 0x290], r12
mov qword [rsp + 0x298], r12
mov r8, 0xffffffffffffffff
nop dword [rax]
inc r8
cmp word [rdx + r8*2], r12w
jne 0x140014870
lea rcx, [rsp + 0x280]
call fcn.140001c20
lea rdx, [rsp + 0x280]
lea rcx, [rsp + 0x3e0]
call fcn.140016fb0
mov rbx, rax
lea r9, [0x140051b38]
cmp r9, rax
je 0x140014934
mov rdx, qword [0x140051b50]
cmp rdx, 7
jbe 0x1400148f5
mov rcx, qword [0x140051b38]
lea rdx, [rdx*2 + 2]
cmp rdx, 0x1000
jb 0x1400148f0
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x1400162bf
mov rcx, r8
call fcn.140019450
mov qword [0x140051b48], r12
mov qword [0x140051b50], 7
mov word [0x140051b38], r12w
movups xmm0, xmmword [rbx]
movups xmmword [0x140051b38], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [0x140051b48], xmm1
mov qword [rbx + 0x10], r12
mov qword [rbx + 0x18], 7
mov word [rbx], r12w
mov rdx, qword [rsp + 0x3f8]
cmp rdx, 7
jbe 0x14001497c
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x3e0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140014977
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400162bf
call fcn.140019450
xor bl, bl
mov byte [rsp + 0x978], bl
mov byte [rsp + 0x980], bl
xorps xmm0, xmm0
movups xmmword [rsp + 0xb8], xmm0
mov qword [rsp + 0xc8], r12
mov qword [rsp + 0xd0], 0xf
mov byte [rsp + 0xb8], bl
mov byte [rsp + 0x988], bl
movups xmmword [rsp + 0xd8], xmm0
mov qword [rsp + 0xe8], r12
mov qword [rsp + 0xf0], 7
mov word [rsp + 0xd8], r12w
mov rsi, r12
test rdi, rdi
jle 0x140014ffd
lea r13, str._network
mov rdx, qword [r15 + rsi*8]
xorps xmm0, xmm0
movups xmmword [rsp + 0x118], xmm0
mov qword [rsp + 0x128], r12
mov qword [rsp + 0x130], r12
mov r8, 0xffffffffffffffff
nop word [rax + rax]
inc r8
cmp word [rdx + r8*2], 0
jne 0x140014a20
lea rcx, [rsp + 0x118]
call fcn.140001c20
nop
lea r8, [rsp + 0x118]
mov r10, qword [rsp + 0x130]
cmp r10, 7
seta bl
mov r9, qword [rsp + 0x118]
cmova r8, r9
mov r11, qword [rsp + 0x128]
cmp r11, 8
jne 0x140014aa2
mov rdx, r11
mov rcx, r13
test r11, r11
je 0x140014a94
sub r8, r13
nop dword [rax + rax]
movzx eax, word [r8 + rcx]
cmp ax, word [rcx]
jne 0x140014aa2
add rcx, 2
sub rdx, 1
jne 0x140014a80
mov bl, 1
mov byte [rsp + 0x978], bl
jmp 0x140014fb6
lea r8, [rsp + 0x118]
test bl, bl
cmovne r8, r9
cmp r11, 8
jb 0x140014d96
mov edx, 8
lea rax, str._shares
mov rcx, rax
sub r8, rax
nop dword [rax]
movzx eax, word [rcx + r8]
cmp ax, word [rcx]
jne 0x140014d96
add rcx, 2
sub rdx, 1
jne 0x140014ad0
mov byte [rsp + 0x980], 1
xorps xmm0, xmm0
movups xmmword [rsp + 0x220], xmm0
mov qword [rsp + 0x230], r12
mov qword [rsp + 0x238], r12
lea rax, [r11 - 8]
mov r8, 0xffffffffffffffff
cmp rax, r8
cmovb r8, rax
lea rdx, [rsp + 0x118]
test bl, bl
cmovne rdx, r9
add rdx, 0x10
lea rcx, [rsp + 0x220]
call fcn.140001c20
bts r14d, 8
lea rdx, [rsp + 0x220]
lea rcx, [rsp + 0x2a0]
call fcn.140017840
mov rbx, rax
lea rax, [rsp + 0xb8]
cmp rax, rbx
je 0x140014bef
mov rdx, qword [rsp + 0xd0]
cmp rdx, 0xf
jbe 0x140014bad
inc rdx
mov rcx, qword [rsp + 0xb8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140014ba8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400162d0
call fcn.140019450
mov qword [rsp + 0xc8], r12
mov qword [rsp + 0xd0], 0xf
mov byte [rsp + 0xb8], 0
movups xmm0, xmmword [rbx]
movups xmmword [rsp + 0xb8], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rsp + 0xc8], xmm1
mov qword [rbx + 0x10], r12
mov qword [rbx + 0x18], 0xf
mov byte [rbx], 0
mov rdx, qword [rsp + 0x2b8]
cmp rdx, 0xf
jbe 0x140014c32
inc rdx
mov rcx, qword [rsp + 0x2a0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140014c2d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400162d0
call fcn.140019450
mov qword [rsp + 0x2b0], r12
mov qword [rsp + 0x2b8], 0xf
mov byte [rsp + 0x2a0], 0
mov rdx, qword [rsp + 0x238]
cmp rdx, 7
jbe 0x140014c96
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x220]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140014c91
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400162d6
call fcn.140019450
lea rcx, [rsp + 0xb8]
cmp qword [rsp + 0xd0], 0xf
seta r10b
mov r9, qword [rsp + 0xb8]
cmova rcx, r9
mov rax, qword [rsp + 0xc8]
test rax, rax
je 0x140014f9e
cmp byte [rax + rcx - 1], 0x22
jne 0x140014f9e
lea r8, [rax - 1]
xorps xmm0, xmm0
movups xmmword [rsp + 0x1b8], xmm0
mov qword [rsp + 0x1c8], r12
mov qword [rsp + 0x1d0], r12
cmp rax, r8
cmovb r8, rax
lea rdx, [rsp + 0xb8]
test r10b, r10b
cmovne rdx, r9
lea rcx, [rsp + 0x1b8]
call fcn.140001a70
bts r14d, 0xa
mov rdx, qword [rsp + 0xd0]
cmp rdx, 0xf
jbe 0x140014d5d
inc rdx
mov rcx, qword [rsp + 0xb8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140014d58
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400162dc
call fcn.140019450
movups xmm0, xmmword [rsp + 0x1b8]
movups xmmword [rsp + 0xb8], xmm0
movups xmm1, xmmword [rsp + 0x1c8]
movups xmmword [rsp + 0xc8], xmm1
mov qword [rsp + 0x1d0], 0xf
mov byte [rsp + 0x1b8], 0
jmp 0x140014f9e
lea r8, [rsp + 0x118]
test bl, bl
cmovne r8, r9
cmp r11, 6
jb 0x140014fae
mov edx, 6
lea rax, str._path
mov rcx, rax
sub r8, rax
movzx eax, word [rcx + r8]
cmp ax, word [rcx]
jne 0x140014fae
add rcx, 2
sub rdx, 1
jne 0x140014dc0
mov byte [rsp + 0x988], 1
xorps xmm0, xmm0
movups xmmword [rsp + 0x2c0], xmm0
mov qword [rsp + 0x2d0], r12
mov qword [rsp + 0x2d8], r12
lea rax, [r11 - 6]
mov r8, 0xffffffffffffffff
cmp rax, r8
cmovb r8, rax
lea rdx, [rsp + 0x118]
test bl, bl
cmovne rdx, r9
add rdx, 0xc
lea rcx, [rsp + 0x2c0]
call fcn.140001c20
bts r14d, 9
mov rdx, qword [rsp + 0xf0]
cmp rdx, 7
jbe 0x140014e79
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0xd8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140014e74
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400162dc
call fcn.140019450
movups xmm1, xmmword [rsp + 0x2c0]
movups xmmword [rsp + 0xd8], xmm1
movups xmm2, xmmword [rsp + 0x2d0]
movups xmmword [rsp + 0xe8], xmm2
lea rcx, [rsp + 0xd8]
movdqa xmm0, xmm2
psrldq xmm0, 8
movq rax, xmm0
cmp rax, 7
seta r10b
movq r9, xmm1
cmova rcx, r9
movq rax, xmm2
test rax, rax
je 0x140014f9e
cmp word [rcx + rax*2 - 2], 0x22
jne 0x140014f9e
lea r8, [rax - 1]
xorps xmm0, xmm0
movups xmmword [rsp + 0x1d8], xmm0
mov qword [rsp + 0x1e8], r12
mov qword [rsp + 0x1f0], r12
cmp rax, r8
cmovb r8, rax
lea rdx, [rsp + 0xd8]
test r10b, r10b
cmovne rdx, r9
lea rcx, [rsp + 0x1d8]
call fcn.140001c20
bts r14d, 0xb
mov rdx, qword [rsp + 0xf0]
cmp rdx, 7
jbe 0x140014f69
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0xd8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140014f64
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400162dc
call fcn.140019450
movups xmm0, xmmword [rsp + 0x1d8]
movups xmmword [rsp + 0xd8], xmm0
movups xmm1, xmmword [rsp + 0x1e8]
movups xmmword [rsp + 0xe8], xmm1
mov qword [rsp + 0x1f0], 7
mov word [rsp + 0x1d8], r12w
mov r10, qword [rsp + 0x130]
mov r9, qword [rsp + 0x118]
movzx ebx, byte [rsp + 0x978]
cmp r10, 7
jbe 0x140014ff1
lea rdx, [r10*2 + 2]
mov rax, r9
cmp rdx, 0x1000
jb 0x140014fe9
add rdx, 0x27
mov r9, qword [r9 - 8]
sub rax, r9
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400162e2
mov rcx, r9
call fcn.140019450
inc rsi
cmp rsi, rdi
jl 0x1400149f1
xorps xmm0, xmm0
movups xmmword [rsp + 0x170], xmm0
mov ecx, 0x20
call fcn.140019458
mov dword [rax], 1
mov dword [rax + 4], 2
xor ecx, ecx
mov qword [rax + 8], rcx
mov qword [rax + 0x10], r12
mov dword [rax + 0x18], r12d
mov qword [rsp + 0x180], rax
mov ecx, 8
call fcn.140019458
lea rcx, [0x140013430]
mov qword [rax], rcx
mov qword [rsp + 0x368], rax
lea rcx, [rsp + 0x178]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], r12d
mov r9, rax
lea r8, [0x140016ed0]
xor edx, edx
xor ecx, ecx
call fcn.14002b9c4
mov qword [rsp + 0x170], rax
test rax, rax
je 0x14001641a
cmp dword [rsp + 0x178], 0
je 0x1400162c5
movups xmm0, xmmword [rsp + 0x170]
movaps xmmword [rsp + 0x3c0], xmm0
lea rcx, [rsp + 0x3c0]
call fcn.1400191e0
test eax, eax
jne 0x1400162e8
xorps xmm0, xmm0
movups xmmword [rsp + 0x4f0], xmm0
movups xmmword [rsp + 0x170], xmm0
mov rcx, qword [rsp + 0x180]
test rcx, rcx
je 0x140015102
mov eax, 0xfffffffe
lock xadd dword [rcx + 4], eax
and eax, 0xfffffffe
cmp eax, 2
jne 0x140015102
mov eax, 0xffffffff
lock xadd dword [rcx], eax
cmp eax, 1
jne 0x140015102
lea edx, [rax + 0x1f]
call fcn.140019450
cmp dword [rsp + 0x178], 0
jne 0x1400162f3
call fcn.1400031c0
test al, al
je 0x1400161be
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], r12
test bl, bl
jne 0x14001521d
mov edx, 0x104
lea rcx, [rsp + 0x510]
call qword [sym.imp.KERNEL32.dll_FindFirstVolumeW]
mov rdi, rax
cmp rax, 0xffffffffffffffff
je 0x14001521d
nop dword [rax]
nop word [rax + rax]
lea rax, [rsp + 0x510]
mov rcx, 0xffffffffffffffff
nop
inc rcx
cmp word [rax + rcx*2], 0
jne 0x140015170
dec rcx
cmp word [rsp + 0x510], 0x5c
jne 0x140015214
cmp word [rsp + 0x512], 0x5c
jne 0x140015214
cmp word [rsp + 0x514], 0x3f
jne 0x140015214
cmp word [rsp + 0x516], 0x5c
jne 0x140015214
lea rbx, [rsp + 0x510]
lea rbx, [rbx + rcx*2]
cmp word [rbx], 0x5c
jne 0x140015214
mov word [rbx], r12w
mov r8d, 0x104
lea rdx, [rsp + 0x720]
lea rcx, [rsp + 0x518]
call qword [sym.imp.KERNEL32.dll_QueryDosDeviceW]
mov word [rbx], 0x5c
test eax, eax
je 0x140015214
lea rcx, [rsp + 0x510]
call fcn.140011b40
mov r8d, 0x104
lea rdx, [rsp + 0x510]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_FindNextVolumeW]
test eax, eax
jne 0x140015160
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_FindVolumeClose]
mov dword [0x140051ae0], 1
mov eax, 1
lea r13, [0x1400133b0]
movabs r15, 0x7ffffffffffffffe
mov r14, qword [rsp + 0x48]
movzx edi, byte [rsp + 0x978]
lea rbx, [0x140049870]
cmp eax, 3
jge 0x1400160d9
cmp byte [rsp + 0x980], 0
jne 0x140015a17
test dil, dil
jne 0x1400157cf
cmp byte [rsp + 0x988], dil
jne 0x14001561e
lea rcx, [rsp + 0x188]
call fcn.140017400
nop
mov rcx, qword [rsp + 0x188]
mov rdi, rcx
mov rsi, qword [rsp + 0x190]
cmp rdi, rsi
je 0x140015485
xorps xmm0, xmm0
movups xmmword [rsp + 0x88], xmm0
mov ecx, 0x20
call fcn.140019458
mov dword [rax], 1
mov dword [rax + 4], 2
xor ecx, ecx
mov qword [rax + 8], rcx
mov qword [rax + 0x10], r12
mov dword [rax + 0x18], r12d
mov qword [rsp + 0x98], rax
mov ecx, 0x28
call fcn.140019458
mov rbx, rax
mov qword [rsp + 0x370], rax
mov rdx, rdi
mov rcx, rax
call fcn.140001e70
mov qword [rbx + 0x20], r13
mov qword [rsp + 0x378], rbx
lea rax, [rsp + 0x90]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], r12d
mov r9, rbx
lea r8, [0x140016f00]
xor edx, edx
xor ecx, ecx
call fcn.14002b9c4
mov qword [rsp + 0x88], rax
test rax, rax
je 0x14001631e
cmp r14, qword [rsp + 0x50]
je 0x140015390
xorps xmm0, xmm0
movups xmmword [rsp + 0x4d0], xmm0
movups xmm1, xmmword [rsp + 0x88]
movups xmmword [rsp + 0x4c0], xmm1
movups xmmword [rsp + 0x88], xmm0
movups xmmword [r14], xmm1
mov rax, qword [rsp + 0x98]
mov qword [rsp + 0x98], r12
mov qword [r14 + 0x10], rax
add r14, 0x18
mov qword [rsp + 0x48], r14
jmp 0x1400153aa
lea r8, [rsp + 0x88]
mov rdx, r14
lea rcx, [rsp + 0x40]
call fcn.1400169d0
mov r14, qword [rsp + 0x48]
mov eax, dword [rsp + 0x90]
test eax, eax
je 0x14001542b
mov rcx, qword [rsp + 0x98]
test rcx, rcx
je 0x1400153ce
call fcn.140012110
mov eax, dword [rsp + 0x90]
test eax, eax
je 0x1400162f9
call sub.KERNEL32.dll_GetCurrentThreadId
cmp dword [rsp + 0x90], eax
je 0x140016302
movups xmm0, xmmword [rsp + 0x88]
movaps xmmword [rsp + 0x3d0], xmm0
xor edx, edx
lea rcx, [rsp + 0x3d0]
call fcn.140019204
test eax, eax
jne 0x14001630d
xorps xmm0, xmm0
movups xmmword [rsp + 0x4e0], xmm0
movups xmmword [rsp + 0x88], xmm0
psrldq xmm0, 8
movd eax, xmm0
mov rcx, qword [rsp + 0x98]
test rcx, rcx
je 0x14001546c
mov eax, 0xfffffffe
lock xadd dword [rcx + 4], eax
and eax, 0xfffffffe
cmp eax, 2
jne 0x140015460
mov eax, 0xffffffff
lock xadd dword [rcx], eax
cmp eax, 1
jne 0x140015460
lea edx, [rax + 0x1f]
call fcn.140019450
mov eax, dword [rsp + 0x90]
mov r14, qword [rsp + 0x48]
test eax, eax
jne 0x140016318
add rdi, 0x20
mov rcx, qword [rsp + 0x188]
jmp 0x1400152a0
test rcx, rcx
je 0x1400154d8
mov rdx, qword [rsp + 0x190]
call fcn.140001fb0
mov rdx, qword [rsp + 0x198]
mov rcx, qword [rsp + 0x188]
sub rdx, rcx
and rdx, 0xffffffffffffffe0
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400154d3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140016331
call fcn.140019450
mov ebx, r12d
mov qword [rsp + 0x168], r12
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
lea r8, [rsp + 0x168]
mov edx, 8
call qword [sym.imp.ADVAPI32.dll_OpenProcessToken]
test eax, eax
je 0x140015545
mov dword [rsp + 0x158], 4
lea rax, [rsp + 0x158]
mov qword [rsp + 0x20], rax
mov r9d, 4
lea r8, [rsp + 0x15c]
lea edx, [r9 + 0x10]
mov rcx, qword [rsp + 0x168]
call qword [sym.imp.ADVAPI32.dll_GetTokenInformation]
test eax, eax
cmovne ebx, dword [rsp + 0x15c]
mov rcx, qword [rsp + 0x168]
test rcx, rcx
je 0x140015558
call qword [sym.imp.KERNEL32.dll_CloseHandle]
test ebx, ebx
je 0x1400157cf
cmp dword [0x140051ae0], 1
jne 0x1400155cb
mov rcx, qword [0x140051b48]
mov rax, r15
sub rax, rcx
cmp rax, 9
jb 0x140016337
lea r9, [0x140051b38]
cmp qword [0x140051b50], 7
cmova r9, qword [0x140051b38]
mov qword [rsp + 0x30], 9
lea rdx, str.__network
mov qword [rsp + 0x28], rdx
mov qword [rsp + 0x20], rcx
lea rcx, [rsp + 0x400]
call fcn.140005650
lea rcx, [rsp + 0x400]
call fcn.140018470
movzx edi, byte [rsp + 0x978]
lea rcx, str.____Wait_tasks..._n
call fcn.140001b80
mov rbx, qword [rsp + 0x40]
cmp rbx, r14
je 0x14001560b
nop dword [rax]
mov rcx, rbx
call fcn.1400122c0
add rbx, 0x18
cmp rbx, r14
jne 0x1400155f0
mov r14, qword [rsp + 0x40]
mov qword [rsp + 0x48], r14
mov eax, dword [0x140051ae0]
inc eax
mov dword [0x140051ae0], eax
jmp 0x14001524a
xorps xmm0, xmm0
movups xmmword [rsp + 0x70], xmm0
mov ecx, 0x20
call fcn.140019458
mov dword [rax], 1
mov dword [rax + 4], 2
xor ecx, ecx
mov qword [rax + 8], rcx
mov qword [rax + 0x10], r12
mov dword [rax + 0x18], r12d
mov qword [rsp + 0x80], rax
mov ecx, 0x28
call fcn.140019458
mov rbx, rax
mov qword [rsp + 0x380], rax
lea rdx, [rsp + 0xd8]
mov rcx, rax
call fcn.140001e70
mov qword [rbx + 0x20], r13
mov qword [rsp + 0x388], rbx
lea rax, [rsp + 0x78]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], r12d
mov r9, rbx
lea r8, [0x140016f00]
xor edx, edx
xor ecx, ecx
call fcn.14002b9c4
mov qword [rsp + 0x70], rax
test rax, rax
je 0x140016362
cmp r14, qword [rsp + 0x50]
je 0x1400156fb
xorps xmm0, xmm0
movups xmmword [rsp + 0x4b0], xmm0
movups xmm1, xmmword [rsp + 0x70]
movups xmmword [rsp + 0x4a0], xmm1
movups xmmword [rsp + 0x70], xmm0
movups xmmword [r14], xmm1
mov rax, qword [rsp + 0x80]
mov qword [rsp + 0x80], r12
mov qword [r14 + 0x10], rax
add r14, 0x18
mov qword [rsp + 0x48], r14
jmp 0x140015712
lea r8, [rsp + 0x70]
mov rdx, r14
lea rcx, [rsp + 0x40]
call fcn.1400169d0
mov r14, qword [rsp + 0x48]
mov eax, dword [rsp + 0x78]
test eax, eax
je 0x140015784
mov rcx, qword [rsp + 0x80]
test rcx, rcx
je 0x140015730
call fcn.140012110
mov eax, dword [rsp + 0x78]
test eax, eax
je 0x14001633d
call sub.KERNEL32.dll_GetCurrentThreadId
cmp dword [rsp + 0x78], eax
je 0x140016346
movups xmm0, xmmword [rsp + 0x70]
movaps xmmword [rsp + 0x330], xmm0
xor edx, edx
lea rcx, [rsp + 0x330]
call fcn.140019204
test eax, eax
jne 0x140016351
xorps xmm0, xmm0
movups xmmword [rsp + 0x480], xmm0
movups xmmword [rsp + 0x70], xmm0
psrldq xmm0, 8
movd eax, xmm0
mov rcx, qword [rsp + 0x80]
test rcx, rcx
je 0x1400157c2
mov eax, 0xfffffffe
lock xadd dword [rcx + 4], eax
and eax, 0xfffffffe
cmp eax, 2
jne 0x1400157b9
mov eax, 0xffffffff
lock xadd dword [rcx], eax
cmp eax, 1
jne 0x1400157b9
lea edx, [rax + 0x1f]
call fcn.140019450
mov eax, dword [rsp + 0x78]
mov r14, qword [rsp + 0x48]
test eax, eax
jne 0x14001635c
jmp 0x1400155d3
lea rcx, [rsp + 0x1a0]
call fcn.140017610
nop
mov rcx, qword [rsp + 0x1a0]
mov rdi, rcx
mov rsi, qword [rsp + 0x1a8]
cmp rdi, rsi
je 0x1400159bb
mov rdx, rdi
cmp qword [rdi + 0x18], 7
jbe 0x140015806
mov rdx, qword [rdi]
lea rcx, str.___Found_remote_drive:__s_n
call fcn.140001b80
xorps xmm0, xmm0
movups xmmword [rsp + 0x58], xmm0
mov ecx, 0x20
call fcn.140019458
mov dword [rax], 1
mov dword [rax + 4], 2
xor ecx, ecx
mov qword [rax + 8], rcx
mov qword [rax + 0x10], r12
mov dword [rax + 0x18], r12d
mov qword [rsp + 0x68], rax
mov ecx, 0x28
call fcn.140019458
mov rbx, rax
mov qword [rsp + 0x390], rax
mov rdx, rdi
mov rcx, rax
call fcn.140001e70
mov qword [rbx + 0x20], r13
mov qword [rsp + 0x398], rbx
lea rax, [rsp + 0x60]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], r12d
mov r9, rbx
lea r8, [0x140016f00]
xor edx, edx
xor ecx, ecx
call fcn.14002b9c4
mov qword [rsp + 0x58], rax
test rax, rax
je 0x140016397
cmp r14, qword [rsp + 0x50]
je 0x1400158e1
xorps xmm0, xmm0
movups xmmword [rsp + 0x470], xmm0
movups xmm1, xmmword [rsp + 0x58]
movups xmmword [rsp + 0x460], xmm1
movups xmmword [rsp + 0x58], xmm0
movups xmmword [r14], xmm1
mov rax, qword [rsp + 0x68]
mov qword [rsp + 0x68], r12
mov qword [r14 + 0x10], rax
add r14, 0x18
mov qword [rsp + 0x48], r14
jmp 0x1400158f8
lea r8, [rsp + 0x58]
mov rdx, r14
lea rcx, [rsp + 0x40]
call fcn.1400169d0
mov r14, qword [rsp + 0x48]
mov eax, dword [rsp + 0x60]
test eax, eax
je 0x140015967
mov rcx, qword [rsp + 0x68]
test rcx, rcx
je 0x140015913
call fcn.140012110
mov eax, dword [rsp + 0x60]
test eax, eax
je 0x140016372
call sub.KERNEL32.dll_GetCurrentThreadId
cmp dword [rsp + 0x60], eax
je 0x14001637b
movups xmm0, xmmword [rsp + 0x58]
movaps xmmword [rsp + 0x340], xmm0
xor edx, edx
lea rcx, [rsp + 0x340]
call fcn.140019204
test eax, eax
jne 0x140016386
xorps xmm0, xmm0
movups xmmword [rsp + 0x450], xmm0
movups xmmword [rsp + 0x58], xmm0
psrldq xmm0, 8
movd eax, xmm0
mov rcx, qword [rsp + 0x68]
test rcx, rcx
je 0x1400159a2
mov eax, 0xfffffffe
lock xadd dword [rcx + 4], eax
and eax, 0xfffffffe
cmp eax, 2
jne 0x140015999
mov eax, 0xffffffff
lock xadd dword [rcx], eax
cmp eax, 1
jne 0x140015999
lea edx, [rax + 0x1f]
call fcn.140019450
mov eax, dword [rsp + 0x60]
mov r14, qword [rsp + 0x48]
test eax, eax
jne 0x140016391
add rdi, 0x20
mov rcx, qword [rsp + 0x1a0]
jmp 0x1400157f0
test rcx, rcx
je 0x1400155cb
mov rdx, qword [rsp + 0x1a8]
call fcn.140001fb0
mov rdx, qword [rsp + 0x1b0]
mov rcx, qword [rsp + 0x1a0]
sub rdx, rcx
and rdx, 0xffffffffffffffe0
mov rax, rcx
cmp rdx, 0x1000
jb 0x140015a0d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400163a7
call fcn.140019450
jmp 0x1400155cb
mov qword [rsp + 0x1f8], 0
mov qword [rsp + 0x200], 0
mov qword [rsp + 0x208], 0
lea rdx, [rsp + 0xb8]
lea rcx, [rsp + 0x1f8]
call fcn.140001570
mov esi, dword [rsp + 0x204]
nop word [rax + rax]
cmp esi, dword [rsp + 0x208]
jae 0x1400155cb
mov dword [rsp + 0x160], esi
lea rdx, [rsp + 0x260]
lea rcx, [rsp + 0x160]
call fcn.140011a20
nop
mov rdx, rax
lea rcx, [rsp + 0x2e0]
call fcn.140017a40
nop
mov r8, rax
lea rdx, [0x140049aa0]
lea rcx, [rsp + 0xf8]
call fcn.140016500
nop
mov rdx, qword [rsp + 0x2f8]
cmp rdx, 7
jbe 0x140015afb
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x2e0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140015af6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400163ad
call fcn.140019450
mov qword [rsp + 0x2f0], r12
mov qword [rsp + 0x2f8], 7
mov word [rsp + 0x2e0], r12w
mov rdx, qword [rsp + 0x278]
cmp rdx, 0xf
jbe 0x140015b5b
inc rdx
mov rcx, qword [rsp + 0x260]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140015b56
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400163b3
call fcn.140019450
mov qword [rsp + 0x270], r12
mov qword [rsp + 0x278], 0xf
mov byte [rsp + 0x260], 0
lea rdx, [rsp + 0xf8]
cmp qword [rsp + 0x110], 7
cmova rdx, qword [rsp + 0xf8]
lea rcx, str.____Try_add_connection:__s_n
call fcn.140001b80
mov qword [rsp + 0x300], 0
mov qword [rsp + 0x308], r12
mov qword [rsp + 0x320], r12
mov qword [rsp + 0x310], r12
lea rax, [rsp + 0xf8]
cmp qword [rsp + 0x110], 7
cmova rax, qword [rsp + 0xf8]
mov qword [rsp + 0x318], rax
mov qword [rsp + 0x328], r12
mov r9d, 4
xor r8d, r8d
xor edx, edx
lea rcx, [rsp + 0x300]
call qword [sym.imp.MPR.dll_WNetAddConnection2W]
lea rdx, [rsp + 0xf8]
test eax, eax
jne 0x140016076
cmp qword [rsp + 0x110], 7
cmova rdx, qword [rsp + 0xf8]
lea rcx, str.___Found_share:__s_n
call fcn.140001b80
mov rax, r15
mov rcx, qword [rsp + 0x108]
sub rax, rcx
cmp rax, 1
jb 0x1400163b9
lea r9, [rsp + 0xf8]
cmp qword [rsp + 0x110], 7
cmova r9, qword [rsp + 0xf8]
mov qword [rsp + 0x30], 1
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x20], rcx
lea rcx, [rsp + 0x240]
call fcn.140005650
nop
mov edi, r12d
nop dword [rax + rax]
cmp edi, 0x1a
jae 0x140015fe2
xorps xmm0, xmm0
movups xmmword [rsp + 0x138], xmm0
mov qword [rsp + 0x148], r12
mov qword [rsp + 0x150], r12
mov r8d, 2
lea rdx, [0x140049b0c]
lea rcx, [rsp + 0x138]
call fcn.140001c20
nop
lea rax, [rsp + 0x138]
cmp qword [rsp + 0x150], 7
cmova rax, qword [rsp + 0x138]
add word [rax], di
mov rax, r15
mov rcx, qword [rsp + 0x250]
sub rax, rcx
mov rdx, qword [rsp + 0x148]
cmp rax, rdx
jb 0x1400163bf
lea r9, [rsp + 0x240]
cmp qword [rsp + 0x258], 7
cmova r9, qword [rsp + 0x240]
lea rax, [rsp + 0x138]
cmp qword [rsp + 0x150], 7
cmova rax, qword [rsp + 0x138]
mov qword [rsp + 0x30], rdx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
lea rcx, [rsp + 0x420]
call fcn.140005650
mov rdx, qword [rsp + 0x150]
cmp rdx, 7
jbe 0x140015da3
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x138]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140015d9e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400163c4
call fcn.140019450
movups xmm0, xmmword [rsp + 0x420]
movups xmmword [rsp + 0x138], xmm0
movups xmm1, xmmword [rsp + 0x430]
movups xmmword [rsp + 0x148], xmm1
xorps xmm0, xmm0
movups xmmword [rsp + 0xa0], xmm0
mov ecx, 0x20
call fcn.140019458
mov dword [rax], 1
mov dword [rax + 4], 2
xor ecx, ecx
mov qword [rax + 8], rcx
mov qword [rax + 0x10], r12
mov dword [rax + 0x18], r12d
mov qword [rsp + 0xb0], rax
mov ecx, 0x28
call fcn.140019458
mov rbx, rax
mov qword [rsp + 0x3a0], rax
lea rdx, [rsp + 0x138]
mov rcx, rax
call fcn.140001e70
mov qword [rbx + 0x20], r13
mov qword [rsp + 0x3a8], rbx
lea rax, [rsp + 0xa8]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], r12d
mov r9, rbx
lea r8, [0x140016f00]
xor edx, edx
xor ecx, ecx
call fcn.14002b9c4
mov qword [rsp + 0xa0], rax
test rax, rax
je 0x1400163f5
cmp r14, qword [rsp + 0x50]
je 0x140015eaf
xorps xmm0, xmm0
movups xmmword [rsp + 0x490], xmm0
movups xmm1, xmmword [rsp + 0xa0]
movups xmmword [rsp + 0x500], xmm1
movups xmmword [rsp + 0xa0], xmm0
movups xmmword [r14], xmm1
mov rax, qword [rsp + 0xb0]
mov qword [rsp + 0xb0], r12
mov qword [r14 + 0x10], rax
add r14, 0x18
mov qword [rsp + 0x48], r14
jmp 0x140015ec9
lea r8, [rsp + 0xa0]
mov rdx, r14
lea rcx, [rsp + 0x40]
call fcn.1400169d0
mov r14, qword [rsp + 0x48]
mov eax, dword [rsp + 0xa8]
test eax, eax
je 0x140015f4a
mov rcx, qword [rsp + 0xb0]
test rcx, rcx
je 0x140015eed
call fcn.140012110
mov eax, dword [rsp + 0xa8]
test eax, eax
je 0x1400163ca
call sub.KERNEL32.dll_GetCurrentThreadId
cmp dword [rsp + 0xa8], eax
je 0x1400163d3
movups xmm0, xmmword [rsp + 0xa0]
movaps xmmword [rsp + 0x350], xmm0
xor edx, edx
lea rcx, [rsp + 0x350]
call fcn.140019204
test eax, eax
jne 0x1400163de
xorps xmm0, xmm0
movups xmmword [rsp + 0x440], xmm0
movups xmmword [rsp + 0xa0], xmm0
psrldq xmm0, 8
movd eax, xmm0
mov rcx, qword [rsp + 0xb0]
test rcx, rcx
je 0x140015f8b
mov eax, 0xfffffffe
lock xadd dword [rcx + 4], eax
and eax, 0xfffffffe
cmp eax, 2
jne 0x140015f7f
mov eax, 0xffffffff
lock xadd dword [rcx], eax
cmp eax, 1
jne 0x140015f7f
lea edx, [rax + 0x1f]
call fcn.140019450
mov eax, dword [rsp + 0xa8]
mov r14, qword [rsp + 0x48]
test eax, eax
jne 0x1400163e9
mov rdx, qword [rsp + 0x150]
cmp rdx, 7
jbe 0x140015fdb
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x138]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140015fd6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400163ef
call fcn.140019450
inc edi
jmp 0x140015c90
mov rdx, qword [rsp + 0x258]
cmp rdx, 7
jbe 0x14001602a
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x240]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140016025
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140016408
call fcn.140019450
lea rbx, [0x140049870]
mov rdx, qword [rsp + 0x110]
cmp rdx, 7
jbe 0x14001609e
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0xf8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140016099
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001640e
jmp 0x140016099
cmp qword [rsp + 0x110], 7
cmova rdx, qword [rsp + 0xf8]
mov r8d, eax
lea rcx, str.____Share:__s__ret:_0x_X_n
call fcn.140001b80
jmp 0x140016031
call fcn.140019450
inc esi
jmp 0x140015a60
test dil, dil
jne 0x14001613f
mov rdi, qword [0x140051b28]
mov rbx, qword [0x140051b20]
cmp rbx, rdi
je 0x14001613f
mov rcx, rbx
cmp qword [rbx + 0x18], 7
jbe 0x1400160fe
mov rcx, qword [rbx]
call qword [sym.imp.KERNEL32.dll_DeleteVolumeMountPointW]
mov rcx, qword [rbx + 0x18]
mov rdx, rbx
test eax, eax
je 0x140016121
cmp rcx, 7
jbe 0x140016118
mov rdx, qword [rbx]
lea rcx, str.___Unmounted:__s_n
jmp 0x140016131
cmp rcx, 7
jbe 0x14001612a
mov rdx, qword [rbx]
lea rcx, str.____Fail_to_unmount:__s_n
call fcn.140001b80
add rbx, 0x20
cmp rbx, rdi
jne 0x1400160f1
mov rbx, qword [rsp + 0x40]
test rbx, rbx
je 0x1400161be
cmp rbx, r14
je 0x140016161
nop
mov rcx, rbx
call fcn.1400122c0
add rbx, 0x18
cmp rbx, r14
jne 0x140016150
mov rcx, qword [rsp + 0x50]
mov rbx, qword [rsp + 0x40]
sub rcx, rbx
movabs rax, 0x2aaaaaaaaaaaaaab
imul rcx
sar rdx, 2
mov rax, rdx
shr rax, 0x3f
add rdx, rax
lea rdx, [rdx + rdx*2]
shl rdx, 3
mov rax, rbx
cmp rdx, 0x1000
jb 0x1400161b6
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140016414
mov rcx, rbx
call fcn.140019450
lea rcx, str.____Context_shutdown..._n
call fcn.140001b80
mov byte [0x1400577f8], 1
mov rcx, qword [0x1400577f0]
test rcx, rcx
je 0x1400161e4
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
jmp 0x1400161e9
lea rcx, str.pause
call fcn.14002baac
lea rcx, str.pause
call fcn.14002baac
nop
mov rdx, qword [rsp + 0xf0]
cmp rdx, 7
jbe 0x14001624a
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0xd8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140016245
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001642d
call fcn.140019450
mov qword [rsp + 0xe8], r12
mov qword [rsp + 0xf0], 7
mov word [rsp + 0xd8], r12w
mov rdx, qword [rsp + 0xd0]
cmp rdx, 0xf
jbe 0x1400162aa
inc rdx
mov rcx, qword [rsp + 0xb8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400162a5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140016433
call fcn.140019450
xor eax, eax
add rsp, 0x930
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
ret
call fcn.14002a6d4
nop
mov ecx, 1
call fcn.1400190ec
nop
call fcn.14002a6d4
nop
call fcn.14002a6d4
int3
call fcn.14002a6d4
nop
call fcn.14002a6d4
nop
mov ecx, 1
call fcn.1400190ec
nop
call fcn.14002bbf4
nop
lea ecx, [rax + 1]
call fcn.1400190ec
int3
mov ecx, 5
call fcn.1400190ec
int3
mov ecx, 2
call fcn.1400190ec
nop
call fcn.14002bbf4
nop
mov dword [rsp + 0x90], r12d
mov ecx, 6
call fcn.1400190ec
nop
call fcn.14002a6d4
int3
call fcn.1400014c0
nop
lea ecx, [rax + 1]
call fcn.1400190ec
int3
mov ecx, 5
call fcn.1400190ec
int3
mov ecx, 2
call fcn.1400190ec
nop
call fcn.14002bbf4
nop
mov dword [rsp + 0x78], r12d
mov ecx, 6
call fcn.1400190ec
nop
lea ecx, [rax + 1]
call fcn.1400190ec
int3
mov ecx, 5
call fcn.1400190ec
int3
mov ecx, 2
call fcn.1400190ec
nop
call fcn.14002bbf4
nop
mov dword [rsp + 0x60], r12d
mov ecx, 6
call fcn.1400190ec
nop
call fcn.14002a6d4
nop
call fcn.14002a6d4
nop
call fcn.14002a6d4
int3
call fcn.1400014c0
nop
call fcn.1400014c0
call fcn.14002a6d4
nop
lea ecx, [rax + 1]
call fcn.1400190ec
int3
mov ecx, 5
call fcn.1400190ec
int3
mov ecx, 2
call fcn.1400190ec
nop
call fcn.14002bbf4
nop
call fcn.14002a6d4
nop
mov dword [rsp + 0xa8], r12d
mov ecx, 6
call fcn.1400190ec
nop
call fcn.14002a6d4
nop
call fcn.14002a6d4
nop
call fcn.14002a6d4
nop
mov dword [rsp + 0x178], r12d
mov ecx, 6
call fcn.1400190ec
nop
call fcn.14002a6d4
nop
call fcn.14002a6d4
int3