Function at 0x140046970
Capabilities:
Enumerate network shares

Disassembly:
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x48]
sub rsp, 0x148
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x78], xmm0
xor eax, eax
mov qword [rbp - 0x78], rax
mov r14, qword [r8]
mov qword [rbp - 0x50], r14
mov r15, qword [r8 + 8]
mov qword [rbp - 8], r15
mov r12, qword [rbp - 0x80]
cmp r14, r15
je 0x140046ffd
xor r15d, r15d
mov dword [rbp + 0xa0], r15d
mov dword [rsp + 0x60], r15d
mov dword [rbp + 0xa8], r15d
mov qword [rsp + 0x70], r15
movabs rdx, 0x7fffffffffffffff
movabs rcx, 0x7ffffffffffffffe
mov qword [rsp + 0x50], r15
mov qword [rsp + 0x58], r15
mov rdi, qword [r14 + 0x10]
mov rsi, r14
cmp qword [r14 + 0x18], 8
jb 0x140046a07
mov rsi, qword [r14]
cmp rdi, 8
jae 0x140046a1c
movups xmm0, xmmword [rsi]
movups xmmword [rsp + 0x40], xmm0
mov ebx, 7
jmp 0x140046a99
mov rbx, rdi
or rbx, 7
cmp rbx, rcx
cmova rbx, rcx
lea rcx, [rbx + 1]
cmp rcx, rdx
ja 0x14004702e
add rcx, rcx
cmp rcx, 0x1000
jb 0x140046a72
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14004702e
mov rcx, rax
call fcn.140071a78
mov rcx, rax
test rax, rax
je 0x140047028
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x140046a81
test rcx, rcx
je 0x140046a7e
call fcn.140071a78
jmp 0x140046a81
mov rax, r15
mov qword [rsp + 0x40], rax
lea r8, [rdi*2 + 2]
mov rdx, rsi
mov rcx, rax
call fcn.140073d70
mov qword [rsp + 0x58], rbx
mov qword [rsp + 0x50], rdi
nop dword [rax]
nop word [rax + rax]
lea rcx, [rsp + 0x40]
cmp rbx, 8
cmovae rcx, qword [rsp + 0x40]
lea rax, [rbp + 0xa8]
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x60]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0xa0]
mov qword [rsp + 0x20], rax
mov r9d, 0xffffffff
lea r8, [rsp + 0x70]
mov edx, 1
call qword [sym.imp.NETAPI32.dll_NetShareEnum]
mov dword [rsp + 0x64], eax
test eax, eax
je 0x140046b0a
cmp eax, 0xea
jne 0x140046fa2
mov rcx, qword [rsp + 0x70]
mov qword [rsp + 0x68], rcx
mov edi, 1
mov dword [rbp + 0x90], edi
cmp dword [rbp + 0xa0], edi
jb 0x140046f88
nop dword [rax + rax]
mov rdx, qword [rcx]
mov qword [rbp - 0x60], r15
mov qword [rbp - 0x58], 7
mov word [rbp - 0x70], r15w
mov r8, 0xffffffffffffffff
nop dword [rax + rax]
inc r8
cmp word [rdx + r8*2], 0
jne 0x140046b50
lea rcx, [rbp - 0x70]
call fcn.140037b30
lea r11, [rbp - 0x70]
mov r13, qword [rbp - 0x70]
cmp qword [rbp - 0x58], 8
cmovae r11, r13
mov rax, qword [rbp - 0x60]
cmp rax, 1
jb 0x140046c11
lea rbx, [r11 + rax*2]
mov rax, r11
lea rsi, [0x1400d65c4]
mov rcx, rbx
sub rcx, rax
sar rcx, 1
mov rdx, r15
je 0x140046bbb
cmp word [rax], 0x24
je 0x140046bb8
cmp rcx, 1
je 0x140046bbb
dec rcx
add rax, 2
cmp word [rax], 0x24
jne 0x140046ba5
mov rdx, rax
mov rax, rdx
test rdx, rdx
je 0x140046c11
mov r9d, 1
mov rcx, rsi
movzx edx, word [rdx]
mov r8d, 0x24
cmp dx, r8w
jb 0x140046c03
mov r10, rax
sub r10, rsi
cmp dx, r8w
ja 0x140046c03
cmp r9, 1
je 0x140046c09
dec r9
add rcx, 2
movzx edx, word [r10 + rcx]
movzx r8d, word [rcx]
cmp dx, r8w
jae 0x140046be5
add rax, 2
jmp 0x140046b91
sub rax, r11
sar rax, 1
jmp 0x140046c18
mov rax, 0xffffffffffffffff
cmp rax, 0xffffffffffffffff
jne 0x140046f1d
mov rsi, qword [rsp + 0x50]
movabs rcx, 0x7ffffffffffffffe
mov rax, rcx
sub rax, rsi
cmp rax, 2
jb 0x140047040
lea r15, [rsp + 0x40]
cmp qword [rsp + 0x58], 8
cmovae r15, qword [rsp + 0x40]
xor eax, eax
mov qword [rbp - 0x18], rax
mov qword [rbp - 0x10], rax
lea r14, [rsi + 2]
mov ebx, 7
lea rdi, [rbp - 0x28]
cmp r14, rbx
jbe 0x140046cf4
mov rbx, r14
or rbx, 7
cmp rbx, rcx
jbe 0x140046c87
mov rbx, rcx
lea rcx, [rax - 2]
jmp 0x140046cb7
cmp rbx, 0xa
mov ecx, 0xa
cmovb rbx, rcx
lea rcx, [rbx + 1]
movabs rdx, 0x7fffffffffffffff
cmp rcx, rdx
ja 0x140047034
add rcx, rcx
cmp rcx, 0x1000
jb 0x140046ce3
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140047034
mov rcx, rax
call fcn.140071a78
test rax, rax
je 0x14004703a
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x140046cf0
test rcx, rcx
je 0x140046ced
call fcn.140071a78
mov rdi, rax
mov qword [rbp - 0x28], rdi
mov qword [rbp - 0x18], r14
mov qword [rbp - 0x10], rbx
mov dword [rdi], 0x5c005c
lea r8, [rsi + rsi]
lea rcx, [rdi + 4]
mov rdx, r15
call fcn.140073d70
xor r15d, r15d
mov word [rdi + r14*2], r15w
lea r8d, [r15 + 1]
lea rdx, [0x1400d56d8]
lea rcx, [rbp - 0x28]
call fcn.140038d10
mov qword [rbp - 0x38], r15
mov qword [rbp - 0x30], r15
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x48], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x38], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 7
mov word [rax], r15w
lea rdx, [rbp - 0x70]
cmp qword [rbp - 0x58], 8
cmovae rdx, r13
mov r8, qword [rbp - 0x60]
lea rcx, [rbp - 0x48]
call fcn.140038d10
movups xmm0, xmmword [rax]
movups xmmword [rbp], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x10], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 7
mov word [rax], r15w
lea r8d, [r15 + 1]
lea rdx, [0x1400d56d8]
lea rcx, [rbp]
call fcn.140038d10
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x20], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x30], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 7
mov word [rax], r15w
cmp r12, qword [rbp - 0x78]
je 0x140046ddc
movups xmmword [r12], xmm0
movups xmmword [r12 + 0x10], xmm1
add r12, 0x20
mov qword [rbp - 0x80], r12
jmp 0x140046e31
lea r8, [rbp + 0x20]
mov rdx, r12
lea rcx, [rsp + 0x78]
call fcn.14003c020
mov rdx, qword [rbp + 0x38]
cmp rdx, 8
jb 0x140046e2d
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140046e28
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004703a
call fcn.140071ab4
mov r12, qword [rbp - 0x80]
mov rdx, qword [rbp + 0x18]
cmp rdx, 8
jb 0x140046e71
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140046e6c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004703a
call fcn.140071ab4
mov qword [rbp + 0x10], r15
mov qword [rbp + 0x18], 7
mov word [rbp], r15w
mov rdx, qword [rbp - 0x30]
cmp rdx, 8
jb 0x140046ec2
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140046ebd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004703a
call fcn.140071ab4
mov qword [rbp - 0x38], r15
mov qword [rbp - 0x30], 7
mov word [rbp - 0x48], r15w
mov rdx, qword [rbp - 0x10]
cmp rdx, 8
jb 0x140046f13
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140046f0e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004703a
call fcn.140071ab4
mov edi, dword [rbp + 0x90]
mov r13, qword [rbp - 0x70]
mov rcx, qword [rsp + 0x68]
add rcx, 0x18
mov qword [rsp + 0x68], rcx
mov rax, qword [rbp - 0x58]
cmp rax, 8
jb 0x140046f6f
lea rdx, [rax*2 + 2]
mov rax, r13
cmp rdx, 0x1000
jb 0x140046f62
add rdx, 0x27
mov r13, qword [r13 - 8]
sub rax, r13
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140047028
mov rcx, r13
call fcn.140071ab4
mov rcx, qword [rsp + 0x68]
inc edi
mov dword [rbp + 0x90], edi
cmp edi, dword [rbp + 0xa0]
jbe 0x140046b30
mov rcx, qword [rsp + 0x70]
call qword [sym.imp.NETAPI32.dll_NetApiBufferFree]
cmp dword [rsp + 0x64], 0xea
jne 0x140046fa2
mov rbx, qword [rsp + 0x58]
jmp 0x140046ab0
mov rdx, qword [rsp + 0x58]
cmp rdx, 8
jb 0x140046fe0
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140046fdb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140047028
call fcn.140071ab4
mov r14, qword [rbp - 0x50]
add r14, 0x20
mov qword [rbp - 0x50], r14
cmp r14, qword [rbp - 8]
jne 0x1400469d8
mov rdx, qword [rbp + 0x98]
mov rax, qword [rsp + 0x78]
mov qword [rdx], rax
mov qword [rdx + 8], r12
mov rax, qword [rbp - 0x78]
mov qword [rdx + 0x10], rax
mov rax, rdx
add rsp, 0x148
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
call fcn.140077e4c
int3
call fcn.140036c60
int3
call fcn.140036c60
int3
call fcn.140077e4c
int3
call fcn.140036d00
int3