Function at 0x140004c00
Capabilities:
Enumerate network shares

Disassembly:
push rbp
push rsi
push r12
push r14
push r15
mov rbp, rsp
sub rsp, 0x70
mov rax, qword [0x140020008]
xor rax, rsp
mov qword [rbp - 8], rax
xor r12d, r12d
mov r14, rdx
mov r15, rcx
mov qword [rbp - 0x20], r12
mov dword [rbp - 0x18], r12d
mov dword [rbp - 0x10], r12d
lea esi, [r12 + 1]
mov dword [rbp - 0x14], r12d
nop dword [rax]
lea rax, [rbp - 0x14]
mov r9d, 0xffffffff
mov qword [rsp + 0x30], rax
lea r8, [rbp - 0x20]
lea rax, [rbp - 0x10]
mov edx, esi
mov qword [rsp + 0x28], rax
mov rcx, r15
lea rax, [rbp - 0x18]
mov qword [rsp + 0x20], rax
call qword [sym.imp.NETAPI32.dll_NetShareEnum]
test eax, eax
je 0x140004c80
cmp eax, 0xea
je 0x140004c40
jmp 0x140004e5b
mov qword [rsp + 0xb8], rdi
mov rdi, qword [rbp - 0x20]
cmp dword [rbp - 0x18], esi
jb 0x140004e4a
mov qword [rsp + 0xb0], rbx
nop dword [rax]
mov eax, dword [rdi + 8]
test eax, 0x3fffffff
jne 0x140004e2f
cmp eax, 0xc0000000
je 0x140004e2f
mov ecx, 0x7d10
call fcn.14000a6f0
mov rbx, rax
test rax, rax
je 0x140004e2f
xor edx, edx
mov r8d, 0x7d10
mov rcx, rax
call fcn.140007670
mov byte [rbp - 0x28], r12b
mov byte [rbp - 0x27], 0x1a
mov byte [rbp - 0x26], 0x2c
mov byte [rbp - 0x25], 0x1a
mov byte [rbp - 0x24], 0x2c
mov byte [rbp - 0x23], 0x2c
mov byte [rbp - 0x22], 0x2c
movzx eax, byte [rbp - 0x27]
movzx eax, byte [rbp - 0x28]
test al, al
jne 0x140004d65
mov r9, r12
nop word [rax + rax]
movzx ecx, byte [rbp + r9 - 0x27]
mov eax, 0x81020409
sub ecx, 0x2c
lea r8d, [rcx + rcx*8]
imul r8d
add edx, r8d
sar edx, 6
mov eax, edx
shr eax, 0x1f
add edx, eax
imul eax, edx, 0x7f
sub r8d, eax
mov eax, 0x81020409
add r8d, 0x7f
imul r8d
add edx, r8d
sar edx, 6
mov eax, edx
shr eax, 0x1f
add edx, eax
imul eax, edx, 0x7f
sub r8d, eax
mov byte [rbp + r9 - 0x27], r8b
inc r9
cmp r9, 6
jb 0x140004d10
lea rdx, [rbp - 0x27]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_lstrcpyW]
mov rdx, r15
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_lstrcatW]
mov byte [rbp - 0x30], r12b
mov byte [rbp - 0x2f], 0x57
mov byte [rbp - 0x2e], 0x35
mov byte [rbp - 0x2d], 0x35
mov byte [rbp - 0x2c], 0x35
movzx eax, byte [rbp - 0x2f]
movzx eax, byte [rbp - 0x30]
test al, al
jne 0x140004df6
mov r9, r12
movzx ecx, byte [rbp + r9 - 0x2f]
mov eax, 0x81020409
sub ecx, 0x35
imul r8d, ecx, 0x37
imul r8d
add edx, r8d
sar edx, 6
mov eax, edx
shr eax, 0x1f
add edx, eax
imul eax, edx, 0x7f
sub r8d, eax
mov eax, 0x81020409
add r8d, 0x7f
imul r8d
add edx, r8d
sar edx, 6
mov eax, edx
shr eax, 0x1f
add edx, eax
imul eax, edx, 0x7f
sub r8d, eax
mov byte [rbp + r9 - 0x2f], r8b
inc r9
cmp r9, 4
jb 0x140004da1
lea rdx, [rbp - 0x2f]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_lstrcatW]
mov rdx, qword [rdi]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_lstrcatW]
lea rcx, [rbx + 0x7d00]
mov qword [rcx], r12
mov rax, qword [r14 + 8]
mov qword [rbx + 0x7d08], rax
mov rax, qword [r14 + 8]
mov qword [rax], rbx
mov qword [r14 + 8], rcx
add rdi, 0x18
inc esi
cmp esi, dword [rbp - 0x18]
jbe 0x140004ca0
mov rbx, qword [rsp + 0xb0]
mov rdi, qword [rbp - 0x20]
mov rcx, rdi
call qword [sym.imp.NETAPI32.dll_NetApiBufferFree]
mov rdi, qword [rsp + 0xb8]
mov rcx, qword [rbp - 8]
xor rcx, rsp
call fcn.140006290
add rsp, 0x70
pop r15
pop r14
pop r12
pop rsi
pop rbp
ret