Function at 0x14013fb50
Capabilities:
Enumerate network shares

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 8], rcx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x70
mov r12, qword [rsp + 0x60]
lea rdi, [0x1401fd088]
xor esi, esi
mov r14, rdx
mov dword [rsp + 0xc0], esi
mov rax, rcx
mov dword [rsp + 0xc8], esi
mov dword [rsp + 0x44], esi
mov dword [rsp + 0x40], esi
mov rcx, rax
call fcn.140190810
mov rcx, rax
lea r8, [rsp + 0x58]
lea rax, [rsp + 0x40]
mov r9d, 0xffffffff
mov qword [rsp + 0x30], rax
mov edx, 1
lea rax, [rsp + 0x44]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0xc8]
mov qword [rsp + 0x20], rax
call sub.NETAPI32.dll_NetShareEnum
mov dword [rsp + 0x48], eax
mov ebx, eax
test eax, eax
je 0x14013fbe9
cmp eax, 0xea
jne 0x14013fdfb
mov rbp, qword [rsp + 0x58]
mov r13d, 1
cmp dword [rsp + 0xc8], r13d
jb 0x14013fdfb
test r14, r14
je 0x14013fde2
cmp dword [rbp + 8], 0
jne 0x14013fde2
mov rdx, qword [rbp]
lea rcx, [rsp + 0x50]
mov r8d, 0xffffffff
or esi, 1
call fcn.1401877c0
mov rbx, qword [rax]
mov qword [rax], rdi
test sil, 2
je 0x14013fc60
mov eax, dword [r12]
and esi, 0xfffffffd
test eax, eax
je 0x14013fc4f
cmp eax, 0xffffffff
je 0x14013fc60
sub dword [r12], 1
jne 0x14013fc60
mov edx, 2
mov rcx, r12
lea r8d, [rdx + 6]
call fcn.140143660
mov rcx, qword [rsp + 0x50]
and esi, 0xfffffffe
mov eax, dword [rcx]
test eax, eax
je 0x14013fc7f
cmp eax, 0xffffffff
je 0x14013fc8d
sub eax, 1
mov dword [rcx], eax
jne 0x14013fc8d
mov rcx, qword [rsp + 0x50]
mov edx, 2
lea r8d, [rdx + 6]
call fcn.140143660
mov rcx, qword [r14]
cmp dword [rcx], 1
jbe 0x14013fda5
mov dword [rsp + 0xc0], 0x7fffffff
lea rdx, [rsp + 0xc0]
movsxd rax, dword [rcx + 8]
mov r8d, 1
add rcx, 0x10
lea rdi, [rcx + rax*8]
mov rcx, r14
call fcn.1401682d0
mov r9, qword [r14]
mov r15, rax
movsxd rcx, dword [rsp + 0xc0]
add rcx, 2
movsxd rdx, dword [r9 + 8]
add rcx, rdx
lea r8, [r9 + rcx*8]
add r9, 0x10
mov rcx, r14
lea rdx, [r9 + rdx*8]
mov r9, rdi
call fcn.140002e30
mov r10, qword [r14]
movsxd rdx, dword [rsp + 0xc0]
movsxd rcx, dword [r10 + 0xc]
movsxd rax, dword [r10 + 8]
lea r9, [rdi + rdx*8]
add rcx, 2
add rax, rdx
lea r8, [r10 + rcx*8]
add r10, 0x18
mov rcx, r14
lea rdx, [r10 + rax*8]
call fcn.140002e30
mov eax, dword [r15]
test eax, eax
je 0x14013fd3c
cmp eax, 0xffffffff
je 0x14013fd47
sub eax, 1
mov dword [r15], eax
jne 0x14013fd47
mov rdx, r15
mov rcx, r14
call fcn.140001e60
mov rdx, qword [r14]
movsxd rax, dword [rsp + 0xc0]
add rax, 2
movsxd rcx, dword [rdx + 8]
add rcx, rax
lea rax, [rsp + 0x68]
lea rdi, [rdx + rcx*8]
mov rcx, rbx
mov qword [rdi], rbx
cmp rax, rdi
jne 0x14013fd8d
mov r8d, 0x446
lea rdx, str.C:ciqt_main_1660099987651workqtqtbaseincludeQtCore.._.._src_corelib_text_qstring.h
lea rcx, str.other___this
call fcn.140160ea0
mov rcx, qword [rdi]
mov edx, dword [rcx]
lea rdi, [0x1401fd088]
lea eax, [rdx + 1]
cmp eax, 1
jbe 0x14013fdbf
lea eax, [rdx + 1]
mov dword [rcx], eax
jmp 0x14013fdbf
mov ecx, dword [rbx]
lea eax, [rcx + 1]
cmp eax, 1
jbe 0x14013fdb4
lea eax, [rcx + 1]
mov dword [rbx], eax
mov rcx, r14
call fcn.140168240
mov qword [rax], rbx
mov eax, dword [rbx]
test eax, eax
je 0x14013fdd1
cmp eax, 0xffffffff
je 0x14013fde2
sub eax, 1
mov dword [rbx], eax
jne 0x14013fde2
mov edx, 2
mov rcx, rbx
lea r8d, [rdx + 6]
call fcn.140143660
add rbp, 0x18
inc r13d
cmp r13d, dword [rsp + 0xc8]
jbe 0x14013fc02
mov ebx, dword [rsp + 0x48]
mov rcx, qword [rsp + 0x58]
call sub.NETAPI32.dll_NetApiBufferFree
mov rax, qword [rsp + 0xb0]
cmp ebx, 0xea
je 0x14013fb93
test ebx, ebx
mov rbx, qword [rsp + 0xb8]
sete al
add rsp, 0x70
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret