Function at 0x14000533c
Capabilities:
Enumerate network shares

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 8], rcx
push rbp
push rsi
push rdi
sub rsp, 0x60
cmp dword [0x140018ec8], 0
mov rbp, rdx
jne 0x140005376
lea rcx, [0x140018ea0]
mov edx, 0x8000
mov r9d, 0x1000
mov r8d, 0x100
call fcn.1400094bc
mov edx, dword [0x140018ec0]
xor eax, eax
test edx, edx
jle 0x140005399
mov rcx, qword [0x140018eb0]
cmp dword [rcx], 0xa
je 0x1400053ee
add eax, 1
add rcx, 4
cmp eax, edx
jl 0x140005389
xor ebx, ebx
test rbx, rbx
lea rsi, [0x140014821]
jne 0x1400054ce
cmp byte [0x140018b00], bl
je 0x140005404
lea rdx, str.strings
lea rcx, [0x140018c10]
call fcn.140012ab4
mov rdx, qword [0x140018ea8]
lea ecx, [rbx + 0xa]
call fcn.140009b54
test eax, eax
je 0x140005410
mov rcx, qword [0x140018ea8]
call sub.msvcrt.dll_strlen
test eax, eax
mov rdi, rax
jne 0x14000543a
jmp 0x140005410
movsxd rcx, eax
mov rax, qword [0x140018eb8]
mov ebx, dword [rax + rcx*4]
add rbx, qword [0x140018ea0]
jmp 0x14000539b
mov rax, qword [0x140018af0]
test rax, rax
jne 0x140005418
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov r9d, dword [0x140018ed0]
mov r8, qword [0x140018ea8]
mov edx, 0xa
add r9d, 0xffffffff
mov rcx, rax
call qword [sym.imp.USER32.dll_LoadStringA]
mov edi, eax
test edi, edi
jle 0x1400054cb
movsxd rcx, dword [0x140018ec4]
lea eax, [rcx + rdi + 2]
cmp eax, dword [0x140018ec8]
jge 0x1400054cb
mov eax, dword [0x140018ecc]
cmp dword [0x140018ec0], eax
jge 0x1400054cb
mov rdx, qword [0x140018ea8]
mov rbx, rcx
lea eax, [rdi + 1]
add rbx, qword [0x140018ea0]
movsxd r8, eax
mov rcx, rbx
call sub.msvcrt.dll_memcpy
mov eax, dword [0x140018ec4]
movsxd r11, dword [0x140018ec0]
mov rcx, qword [0x140018eb8]
mov dword [rcx + r11*4], eax
movsxd rcx, dword [0x140018ec0]
mov rax, qword [0x140018eb0]
mov dword [rax + rcx*4], 0xa
mov eax, dword [0x140018ec4]
add dword [0x140018ec0], 1
test rbx, rbx
lea ecx, [rax + rdi + 1]
mov dword [0x140018ec4], ecx
jne 0x1400054ce
mov rbx, rsi
mov rcx, qword [rsp + 0x80]
mov r9, rbx
xor r8d, r8d
mov rcx, qword [rcx + 0x920]
mov edx, 0x401
call qword [sym.imp.USER32.dll_SendMessageA]
xor edx, edx
lea r11, [rsp + 0x38]
lea ecx, [rdx + 2]
mov r9, rbp
xor r8d, r8d
mov qword [rsp + 0x20], r11
call sub.MPR.dll_WNetOpenEnumA
test eax, eax
jne 0x1400057a2
or dword [rsp + 0x98], 0xffffffff
cmp dword [0x140018ec8], eax
mov dword [rsp + 0x30], 1
jne 0x140005545
lea rcx, [0x140018ea0]
mov edx, 0x8000
mov r9d, 0x1000
mov r8d, 0x100
call fcn.1400094bc
mov edx, dword [0x140018ec0]
xor eax, eax
test edx, edx
lea ebp, [rax + 0xa]
jle 0x14000556a
mov rcx, qword [0x140018eb0]
cmp dword [rcx], ebp
je 0x1400055b7
add eax, 1
add rcx, 4
cmp eax, edx
jl 0x14000555b
xor ebx, ebx
test rbx, rbx
jne 0x140005690
cmp byte [0x140018b00], bl
je 0x1400055cd
lea rdx, str.strings
lea rcx, [0x140018c10]
call fcn.140012ab4
mov rdx, qword [0x140018ea8]
mov ecx, ebp
call fcn.140009b54
test eax, eax
je 0x1400055d9
mov rcx, qword [0x140018ea8]
call sub.msvcrt.dll_strlen
test eax, eax
mov rdi, rax
jne 0x140005600
jmp 0x1400055d9
movsxd rcx, eax
mov rax, qword [0x140018eb8]
mov ebx, dword [rax + rcx*4]
add rbx, qword [0x140018ea0]
jmp 0x14000556c
mov rax, qword [0x140018af0]
test rax, rax
jne 0x1400055e1
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov r9d, dword [0x140018ed0]
mov r8, qword [0x140018ea8]
mov edx, ebp
add r9d, 0xffffffff
mov rcx, rax
call qword [sym.imp.USER32.dll_LoadStringA]
mov edi, eax
test edi, edi
jle 0x14000568d
movsxd rcx, dword [0x140018ec4]
lea eax, [rcx + rdi + 2]
cmp eax, dword [0x140018ec8]
jge 0x14000568d
mov eax, dword [0x140018ecc]
cmp dword [0x140018ec0], eax
jge 0x14000568d
mov rdx, qword [0x140018ea8]
mov rbx, rcx
lea eax, [rdi + 1]
add rbx, qword [0x140018ea0]
movsxd r8, eax
mov rcx, rbx
call sub.msvcrt.dll_memcpy
mov eax, dword [0x140018ec4]
movsxd r11, dword [0x140018ec0]
mov rcx, qword [0x140018eb8]
mov dword [rcx + r11*4], eax
movsxd rcx, dword [0x140018ec0]
mov rax, qword [0x140018eb0]
mov dword [rax + rcx*4], ebp
mov eax, dword [0x140018ec4]
add dword [0x140018ec0], 1
test rbx, rbx
lea ecx, [rax + rdi + 1]
mov dword [0x140018ec4], ecx
jne 0x140005690
mov rbx, rsi
mov rbp, qword [rsp + 0x80]
mov r9, rbx
xor r8d, r8d
mov rcx, qword [rbp + 0x920]
mov edx, 0x401
call qword [sym.imp.USER32.dll_SendMessageA]
mov rcx, qword [rsp + 0x38]
lea r9, [rsp + 0x30]
lea r8, [rsp + 0x90]
lea rdx, [rsp + 0x98]
call sub.MPR.dll_WNetEnumResourceA
mov edx, dword [rsp + 0x30]
cmp edx, 1
jbe 0x140005798
and dword [rsp + 0x50], 0
and qword [rsp + 0x40], 0
and dword [rsp + 0x48], 0
and dword [rsp + 0x4c], 0
add edx, 0x1000
lea rcx, [rsp + 0x40]
mov dword [rsp + 0x54], 0x100
mov dword [rsp + 0x30], edx
call fcn.140008f48
mov rbx, qword [rsp + 0x40]
or dword [rsp + 0x98], 0xffffffff
mov rcx, qword [rsp + 0x38]
test rbx, rbx
mov r8, rsi
lea r9, [rsp + 0x30]
lea rdx, [rsp + 0x98]
cmovne r8, rbx
call sub.MPR.dll_WNetEnumResourceA
test eax, eax
jne 0x14000578e
test rbx, rbx
cmovne rsi, rbx
xor edi, edi
cmp dword [rsp + 0x98], edi
jbe 0x14000578e
lea rbx, [rsi + 0x18]
lea rdx, [rbx - 0x18]
test rdx, rdx
je 0x14000577e
cmp dword [rbx - 0x10], 1
jne 0x140005776
mov rdx, qword [rbx]
test rdx, rdx
je 0x14000577e
mov rcx, rbp
call fcn.140004f4c
jmp 0x14000577e
mov rcx, rbp
call fcn.14000533c
add edi, 1
add rbx, 0x30
cmp edi, dword [rsp + 0x98]
jb 0x140005755
lea rcx, [rsp + 0x40]
call fcn.140008f88
mov rcx, qword [rsp + 0x38]
call sub.MPR.dll_WNetCloseEnum
xor eax, eax
mov rbx, qword [rsp + 0x88]
add rsp, 0x60
pop rdi
pop rsi
pop rbp
ret