Function at 0x140263510
Capabilities:
Enumerate network shares
Resolve function by parsing pe exports

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0xb8
movaps xmmword [rsp + 0xa0], xmm6
mov rdi, rdx
mov rsi, rcx
xorps xmm6, xmm6
movups xmmword [rcx + 8], xmm6
mov dword [rsp + 0x5c], 0xffffffff
mov dword [rsp + 0x6c], 0x4000
mov ecx, 0xc0000
call fcn.140308730
mov r12, rax
lea rax, [rsi + 8]
mov qword [rsp + 0x90], rax
mov qword [rsp + 0x70], r12
lea rbx, [rsp + 0x5c]
lea rbp, [rsp + 0x6c]
xor r15d, r15d
nop word cs:[rax + rax]
nop dword [rax]
mov rcx, rdi
mov rdx, rbx
mov r8, r12
mov r9, rbp
call sub.MPR.dll_WNetEnumResourceW
test eax, eax
jne 0x140263e5a
cmp dword [rsp + 0x5c], 0
jle 0x140263580
mov qword [rsp + 0x60], r15
mov qword [rsp + 0x88], rdi
mov qword [rsp + 0x28], rsi
xor ecx, ecx
nop word cs:[rax + rax]
nop
mov qword [rsp + 0x98], rcx
lea rbx, [rcx + rcx*2]
shl rbx, 4
mov r13, qword [r12 + rbx + 0x18]
mov ecx, 0x90
call fcn.14030dfa0
mov rbp, rax
movups xmmword [rax + 0x80], xmm6
movups xmmword [rax + 0x70], xmm6
movups xmmword [rax + 0x60], xmm6
movups xmmword [rax + 0x50], xmm6
movups xmmword [rax + 0x40], xmm6
movups xmmword [rax + 0x30], xmm6
movups xmmword [rax + 0x20], xmm6
movups xmmword [rax + 0x10], xmm6
movups xmmword [rax], xmm6
mov rdx, qword [rsp + 0x28]
mov eax, dword [rdx + 0x14]
mov r14, qword [rdx + 8]
mov rcx, qword [rsp + 0x60]
cmp ecx, eax
jge 0x140263640
movsxd rax, ecx
add ecx, 1
mov dword [rdx + 0x10], ecx
mov qword [r14 + rax*8], rbp
mov eax, ecx
mov qword [rsp + 0x60], rax
jmp 0x1402637df
cmp eax, 0x7fffffff
jne 0x140263654
cmp byte [0x1405df380], 0
je 0x140263e8e
mov r15d, eax
sar r15d, 1
add r15d, eax
cmp eax, 0x55555554
mov ecx, 0x7fffffff
cmovge r15d, ecx
add eax, 1
cmp eax, r15d
cmovg r15d, eax
movsxd rsi, r15d
shl rsi, 3
mov qword [rsp + 0x30], rsi
test r14b, 0x10
je 0x1402636c0
mov rcx, r14
lea rdx, [rsp + 0x30]
call fcn.140309a70
test al, al
je 0x1402636c0
mov rax, qword [rsp + 0x90]
mov qword [rax], 0
mov r9b, 1
xor edx, edx
mov rdi, r14
jmp 0x1402636e2
test r15d, r15d
je 0x1402636da
lea rcx, [rsp + 0x30]
call fcn.140308c80
mov rdi, rax
xor r9d, r9d
mov rdx, r14
jmp 0x1402636e2
xor r9d, r9d
mov rdx, r14
xor edi, edi
mov rax, qword [rsp + 0x30]
sub rax, rsi
shr rax, 3
add eax, r15d
cmp r15d, 0x7fffffff
cmove eax, r15d
mov rcx, qword [rsp + 0x28]
mov dword [rcx + 0x14], eax
test rdx, rdx
je 0x1402637b0
test rdi, rdi
je 0x1402637b0
mov rax, qword [rsp + 0x60]
movsxd r8, eax
cmp eax, 2
ja 0x14026373a
test r8, r8
je 0x1402637b0
cmp r8, 1
jne 0x140263770
mov rax, qword [rdx]
mov qword [rdi], rax
jmp 0x1402637b0
movups xmm0, xmmword [rdx + r8*8 - 0x10]
movups xmmword [rdi + r8*8 - 0x10], xmm0
cmp eax, 8
jb 0x14026375f
shl r8, 3
mov rcx, rdi
mov rsi, r9
call fcn.140252bb0
mov r9, rsi
jmp 0x1402637b0
test r8b, 4
jne 0x140263780
mov rax, rdi
test r8b, 2
jne 0x14026379c
jmp 0x1402637b0
mov rax, qword [rdx]
mov qword [rdi], rax
mov rax, qword [rdx + 8]
mov qword [rdi + 8], rax
jmp 0x1402637b0
movups xmm0, xmmword [rdx]
movups xmmword [rdi], xmm0
movups xmm0, xmmword [rdx + 0x10]
movups xmmword [rdi + 0x10], xmm0
lea rax, [rdi + 0x20]
add rdx, 0x20
test r8b, 2
je 0x1402637b0
movups xmm0, xmmword [rdx]
movups xmmword [rax], xmm0
nop word cs:[rax + rax]
nop dword [rax]
mov rcx, qword [rsp + 0x28]
mov qword [rcx + 8], rdi
movsxd rax, dword [rcx + 0x10]
lea edx, [rax + 1]
mov qword [rsp + 0x60], rdx
mov dword [rcx + 0x10], edx
mov qword [rdi + rax*8], rbp
test r14, r14
sete al
or r9b, al
jne 0x1402637df
mov rcx, r14
call fcn.140309590
movups xmm0, xmmword [r12 + rbx]
movups xmm1, xmmword [r12 + rbx + 0x10]
movups xmm2, xmmword [r12 + rbx + 0x20]
movups xmmword [rbp + 0x20], xmm2
movups xmmword [rbp + 0x10], xmm1
movups xmmword [rbp], xmm0
mov rdx, qword [rbp + 0x10]
lea rsi, [rsp + 0x30]
mov rcx, rsi
call fcn.140264080
mov rcx, qword [rbp + 0x30]
test rcx, rcx
lea r14, [rsp + 0x40]
lea r15, [rsp + 0x78]
movabs rbx, 0x200000000801
je 0x14026382f
call fcn.140309590
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x30], rax
mov eax, dword [rsp + 0x38]
mov dword [rbp + 0x38], eax
mov eax, dword [rsp + 0x3c]
mov dword [rbp + 0x3c], eax
mov rdx, qword [rbp + 0x18]
mov rcx, rsi
call fcn.140264080
mov rcx, qword [rbp + 0x40]
test rcx, rcx
je 0x140263860
call fcn.140309590
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x40], rax
mov eax, dword [rsp + 0x38]
mov dword [rbp + 0x48], eax
mov eax, dword [rsp + 0x3c]
mov dword [rbp + 0x4c], eax
mov rdx, qword [rbp + 0x20]
mov rcx, rsi
call fcn.140264080
mov rcx, qword [rbp + 0x50]
test rcx, rcx
je 0x140263891
call fcn.140309590
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x50], rax
mov eax, dword [rsp + 0x38]
mov dword [rbp + 0x58], eax
mov eax, dword [rsp + 0x3c]
mov dword [rbp + 0x5c], eax
mov rdx, qword [rbp + 0x28]
mov rcx, rsi
call fcn.140264080
mov rcx, qword [rbp + 0x60]
test rcx, rcx
je 0x1402638c2
call fcn.140309590
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x60], rax
mov ecx, dword [rsp + 0x38]
mov dword [rbp + 0x68], ecx
mov ecx, dword [rsp + 0x3c]
mov dword [rbp + 0x6c], ecx
cmp qword [rbp + 0x10], 0
je 0x1402638e8
mov rcx, qword [rbp + 0x30]
mov qword [rbp + 0x10], rcx
cmp qword [rbp + 0x18], 0
je 0x1402638f7
mov rcx, qword [rbp + 0x40]
mov qword [rbp + 0x18], rcx
cmp qword [rbp + 0x20], 0
je 0x140263906
mov rcx, qword [rbp + 0x50]
mov qword [rbp + 0x20], rcx
cmp qword [rbp + 0x28], 0
je 0x140263911
mov qword [rbp + 0x28], rax
test r13, r13
je 0x1402639e9
movzx eax, word [r13]
cmp ax, 0x5c
jne 0x1402639a0
cmp word [r13 + 2], 0x5c
jne 0x1402639a0
xor r8d, r8d
cmp word [r13 + r8 + 2], 0
lea r8, [r8 + 2]
jne 0x140263930
shr r8, 1
mov rcx, r15
mov rdx, r13
call fcn.1402580e0
cmp byte [rsp + 0x86], 0
mov rdi, r15
je 0x14026395d
mov rdi, qword [rsp + 0x78]
mov rax, rdi
jmp 0x140263978
test cl, cl
je 0x140263b33
movzx ecx, byte [rax]
add rax, 1
lea edx, [rcx - 0x2f]
cmp dl, 0x2d
ja 0x140263970
movzx edx, dl
bt rbx, rdx
jae 0x140263970
mov rdi, rax
jmp 0x140263978
mov r8, r13
test ax, ax
je 0x1402639be
mov rax, r13
nop dword [rax + rax]
lea r8, [rax + 2]
cmp word [rax + 2], 0
mov rax, r8
jne 0x1402639b0
sub r8, r13
shr r8, 1
mov rcx, rsi
mov rdx, r13
call fcn.1402580e0
lea rdi, [rbp + 0x70]
cmp byte [rbp + 0x7e], 0
je 0x1402639e1
mov rcx, rdi
call fcn.14030abf0
movaps xmm0, xmmword [rsp + 0x30]
movups xmmword [rdi], xmm0
mov rdx, qword [rbp + 0x20]
test rdx, rdx
mov r15, qword [rsp + 0x60]
je 0x140263bc0
cmp word [rdx], 0
je 0x140263bc0
cmp byte [rbp + 0x7e], 0
je 0x140263ae7
mov eax, dword [rbp + 0x78]
lea rdi, [rbp + 0x70]
test eax, eax
je 0x140263af7
movaps xmmword [rsp + 0x30], xmm6
xor r8d, r8d
nop word cs:[rax + rax]
cmp word [rdx + r8*2], 0
lea r8, [r8 + 1]
jne 0x140263a30
add r8d, 0xffffffff
mov rcx, r14
call fcn.1402580e0
cmp byte [rsp + 0x4e], 0
mov rdx, qword [rsp + 0x40]
cmove rdx, r14
movsx r8d, byte [rsp + 0x4f]
cmovne r8d, dword [rsp + 0x48]
mov rcx, rsi
call fcn.14030ec10
mov rcx, rsi
lea rdx, [0x1403d4936]
mov r8d, 2
call fcn.14030ec10
cmp byte [rbp + 0x7e], 0
mov rdx, qword [rbp + 0x70]
cmove rdx, rdi
movsx r8d, byte [rbp + 0x7f]
cmovne r8d, dword [rbp + 0x78]
mov rcx, rsi
call fcn.14030ec10
mov rcx, rsi
lea rdx, [0x1403d4939]
mov r8d, 1
call fcn.14030ec10
cmp byte [rsp + 0x3e], 0
mov al, byte [rbp + 0x7e]
je 0x140263b8c
test al, al
je 0x140263acc
mov rcx, rdi
call fcn.14030abf0
mov rcx, rdi
mov rdx, rsi
call fcn.14030aaa0
cmp byte [rsp + 0x4e], 0
jne 0x140263ba7
jmp 0x140263baf
movsx eax, byte [rbp + 0x7f]
lea rdi, [rbp + 0x70]
test eax, eax
jne 0x140263a1e
xor r8d, r8d
nop word [rax + rax]
cmp word [rdx + r8 + 2], 0
lea r8, [r8 + 2]
jne 0x140263b00
shr r8, 1
mov rcx, rsi
call fcn.1402580e0
cmp byte [rbp + 0x7e], 0
je 0x140263b26
mov rcx, rdi
call fcn.14030abf0
movaps xmm0, xmmword [rsp + 0x30]
movups xmmword [rdi], xmm0
jmp 0x140263bc0
test rdi, rdi
je 0x140263c3f
mov rcx, rdi
call sub.msvcrt.dll_strlen
movaps xmmword [rsp + 0x40], xmm6
cmp eax, 0xe
jg 0x140263c50
mov byte [rsp + 0x4f], al
movsxd r8, eax
cmp eax, 4
ja 0x140263d3b
cmp eax, 1
ja 0x140263d8f
test eax, eax
je 0x140263c5e
mov al, byte [rdi]
mov byte [rsp + 0x40], al
cmp byte [rsp + 0x4e], 0
mov rdi, r14
jne 0x140263c68
jmp 0x140263c6d
test al, al
je 0x140263b98
mov rcx, rdi
call fcn.14030abf0
movaps xmm0, xmmword [rsp + 0x30]
movups xmmword [rdi], xmm0
cmp byte [rsp + 0x4e], 0
je 0x140263baf
mov rcx, r14
call fcn.14030abf0
cmp byte [rsp + 0x3e], 0
je 0x140263bc0
mov rcx, rsi
call fcn.14030abf0
nop
test byte [rbp + 0xc], 2
jne 0x140263c1b
mov rdx, qword [rbp + 0x18]
test rdx, rdx
je 0x140263bf0
mov r8d, 0xffffffff
mov rax, rdx
nop dword [rax + rax]
add r8d, 1
cmp word [rax], 0
lea rax, [rax + 2]
jne 0x140263be0
jmp 0x140263bf3
xor r8d, r8d
mov rcx, rsi
call fcn.1402580e0
mov rdi, rbp
sub rdi, 0xffffffffffffff80
cmp byte [rbp + 0x8e], 0
je 0x140263c13
mov rcx, rdi
call fcn.14030abf0
movaps xmm0, xmmword [rsp + 0x30]
movups xmmword [rdi], xmm0
mov rcx, qword [rsp + 0x98]
add rcx, 1
movsxd rax, dword [rsp + 0x5c]
cmp rcx, rax
jge 0x140263e39
mov r12, qword [rsp + 0x70]
jmp 0x1402635c0
movaps xmmword [rsp + 0x40], xmm6
cmp byte [rsp + 0x4e], 0
mov rdi, r14
jne 0x140263c68
jmp 0x140263c6d
mov rcx, r14
mov rdx, rdi
mov r8d, eax
call fcn.14030b0a0
cmp byte [rsp + 0x4e], 0
mov rdi, r14
je 0x140263c6d
mov rdi, qword [rsp + 0x40]
mov bl, byte [rdi]
test bl, bl
je 0x140263ca0
lea rax, [rdi + 1]
mov ecx, ebx
nop dword [rax]
movzx ecx, cl
lea rdx, [0x140488b40]
movzx ecx, byte [rcx + rdx]
not cl
test cl, 5
je 0x140263cf7
movzx ecx, byte [rax]
add rax, 1
test cl, cl
jne 0x140263c80
mov rcx, rsi
mov rdx, rdi
xor r8d, r8d
call fcn.14031ba10
lea rdi, [rbp + 0x70]
cmp byte [rbp + 0x7e], 0
je 0x140263cc0
mov rcx, rdi
call fcn.14030abf0
movaps xmm0, xmmword [rsp + 0x30]
movups xmmword [rdi], xmm0
movaps xmmword [rsp + 0x30], xmm6
cmp byte [rsp + 0x4e], 0
je 0x140263cdc
mov rcx, r14
call fcn.14030abf0
cmp byte [rsp + 0x86], 0
je 0x1402639e9
mov rcx, r15
call fcn.14030abf0
jmp 0x1402639e9
mov rcx, rdi
call sub.msvcrt.dll_strlen
movaps xmmword [rsp + 0x30], xmm6
cmp eax, 0xe
jg 0x140263d28
mov byte [rsp + 0x3f], al
movsxd r8, eax
cmp eax, 4
ja 0x140263d6c
cmp eax, 1
ja 0x140263dd4
test eax, eax
je 0x140263cae
mov byte [rsp + 0x30], bl
jmp 0x140263cae
mov rcx, rsi
mov rdx, rdi
mov r8d, eax
call fcn.14030b0a0
jmp 0x140263cae
cmp eax, 0x10
ja 0x140263db6
cmp eax, 8
ja 0x140263dfd
mov eax, dword [rdi]
mov dword [rsp + 0x40], eax
mov eax, dword [rdi + r8 - 4]
mov dword [rsp + r8 + 0x3c], eax
cmp byte [rsp + 0x4e], 0
mov rdi, r14
jne 0x140263c68
jmp 0x140263c6d
cmp eax, 0x10
ja 0x140263ded
cmp eax, 8
ja 0x140263e22
mov eax, dword [rdi]
mov dword [rsp + 0x30], eax
mov eax, dword [rdi + r8 - 4]
mov dword [rsp + r8 + 0x2c], eax
jmp 0x140263cae
movzx eax, word [rdi]
mov word [rsp + 0x40], ax
movzx eax, word [rdi + r8 - 2]
mov word [rsp + r8 + 0x3e], ax
cmp byte [rsp + 0x4e], 0
mov rdi, r14
jne 0x140263c68
jmp 0x140263c6d
mov rcx, r14
mov rdx, rdi
call fcn.140252bb0
cmp byte [rsp + 0x4e], 0
mov rdi, r14
je 0x140263c6d
jmp 0x140263c68
movzx eax, word [rdi]
mov word [rsp + 0x30], ax
movzx eax, word [rdi + r8 - 2]
mov word [rsp + r8 + 0x2e], ax
jmp 0x140263cae
mov rcx, rsi
mov rdx, rdi
call fcn.140252bb0
jmp 0x140263cae
mov rax, qword [rdi]
mov qword [rsp + 0x40], rax
mov rax, qword [rdi + r8 - 8]
mov qword [rsp + r8 + 0x38], rax
cmp byte [rsp + 0x4e], 0
mov rdi, r14
jne 0x140263c68
jmp 0x140263c6d
mov rax, qword [rdi]
mov qword [rsp + 0x30], rax
mov rax, qword [rdi + r8 - 8]
mov qword [rsp + r8 + 0x28], rax
jmp 0x140263cae
mov r12, qword [rsp + 0x70]
mov rsi, qword [rsp + 0x28]
mov rdi, qword [rsp + 0x88]
lea rbx, [rsp + 0x5c]
lea rbp, [rsp + 0x6c]
jmp 0x140263580
mov rcx, rdi
call sub.MPR.dll_WNetCloseEnum
test r12, r12
je 0x140263e6f
mov rcx, r12
call fcn.140309590
mov rax, rsi
movaps xmm6, xmmword [rsp + 0xa0]
add rsp, 0xb8
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
mov byte [0x1405df380], 1
mov rcx, qword [0x1405deec8]
test rcx, rcx
jne 0x140263eb0
call fcn.140272bd0
mov rcx, rax
mov qword [0x1405deec8], rax
lea rdx, str._PANIC:
call fcn.1402ea200
lea rdx, [0x1403d9988]
mov rcx, rax
call fcn.1402ea200
lea rdx, [0x1403d50f3]
mov rcx, rax
call fcn.1402ea200
mov rcx, rax
xor edx, edx
call fcn.14016bf50
lea rcx, str.Fatal_error
lea rdx, [0x1403d9988]
call fcn.14027a110
call qword [sym.imp.KERNEL32.DLL_DebugBreak]
call sub.msvcrt.dll_abort
mov rcx, rax
call fcn.140001880
jmp 0x140263f33
mov rdi, rax
lea rcx, [rsp + 0x30]
call fcn.140001760
jmp 0x140263f45
lea rcx, [rsp + 0x40]
call fcn.140001760
lea rcx, [rsp + 0x78]
jmp 0x140263fb3
call fcn.140001760
jmp 0x140263fbd
mov rsi, qword [rsp + 0x28]
lea rcx, [rsp + 0x70]
call fcn.1402ea080
mov rcx, rsi
call fcn.1400e9500
mov rcx, rdi
call fcn.140363f60
int3