Function at 0x18018d120
Capabilities:
Enumerate network shares

Disassembly:
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
mov rbp, rsp
sub rsp, 0x70
mov qword [rbp - 8], 0xfffffffffffffffe
mov qword [rsp + 0xb0], rbx
mov r14, rdx
mov r12, rcx
xor ebx, ebx
mov dword [rbp + 0x50], ebx
mov dword [rbp + 0x58], ebx
mov dword [rbp - 0x2c], ebx
mov dword [rbp - 0x30], ebx
lea r13, sym.Qt5Core.dll_struct_QArrayData_const__const_const_QArrayData::shared_null
nop
mov rcx, r12
call sym.Qt5Core.dll_public:_unsigned_short_int_const____ptr64___cdecl_QString::utf16_void_const___ptr64
mov rcx, rax
lea rax, [rbp - 0x30]
mov qword [rsp + 0x30], rax
lea rax, [rbp - 0x2c]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x58]
mov qword [rsp + 0x20], rax
mov r9d, 0xffffffff
lea r8, [rbp - 0x10]
mov edx, 1
call sub.NETAPI32.dll_NetShareEnum
mov r15d, eax
test eax, eax
je 0x18018d1ac
cmp eax, 0xea
jne 0x18018d2c0
mov rdi, qword [rbp - 0x10]
mov esi, 1
cmp dword [rbp + 0x58], esi
jb 0x18018d2c0
nop
test r14, r14
je 0x18018d2b1
cmp dword [rdi + 8], 0
jne 0x18018d2b1
mov r8d, 0xffffffff
mov rdx, qword [rdi]
lea rcx, [rbp - 0x20]
call sym.Qt5Core.dll_public:_static_class_QString___cdecl_QString::fromUtf16_unsigned_short_int_const____ptr64__int_
nop
mov rcx, qword [rax]
mov qword [rbp - 0x28], rcx
mov qword [rax], r13
or ebx, 5
test bl, 2
je 0x18018d234
and ebx, 0xfffffffd
mov dword [rbp + 0x50], ebx
mov rax, qword [rbp - 0x18]
mov ecx, dword [rax]
test ecx, ecx
je 0x18018d21f
cmp ecx, 0xffffffff
je 0x18018d231
mov ecx, 0xffffffff
mov rax, qword [rbp - 0x18]
lock xadd dword [rax], ecx
cmp ecx, 1
jne 0x18018d231
mov edx, 2
lea r8d, [rdx + 6]
mov rcx, qword [rbp - 0x18]
call sym.Qt5Core.dll_public:_static_void___cdecl_QArrayData::deallocate_struct_QArrayData____ptr64__unsigned_long_long_unsigned___int64___unsigned_long_long_unsigned___int64__
mov ebx, dword [rbp + 0x50]
and ebx, 0xfffffffe
mov dword [rbp + 0x50], ebx
mov rax, qword [rbp - 0x20]
mov eax, dword [rax]
test eax, eax
je 0x18018d25b
cmp eax, 0xffffffff
je 0x18018d26e
mov ecx, 0xffffffff
mov rax, qword [rbp - 0x20]
lock xadd dword [rax], ecx
cmp ecx, 1
jne 0x18018d26e
mov edx, 2
lea r8d, [rdx + 6]
mov rcx, qword [rbp - 0x20]
call sym.Qt5Core.dll_public:_static_void___cdecl_QArrayData::deallocate_struct_QArrayData____ptr64__unsigned_long_long_unsigned___int64___unsigned_long_long_unsigned___int64__
nop
lea rdx, [rbp - 0x28]
mov rcx, r14
call fcn.180022940
nop
mov rax, qword [rbp - 0x28]
mov ecx, dword [rax]
test ecx, ecx
je 0x18018d29c
cmp ecx, 0xffffffff
je 0x18018d2ae
mov ecx, 0xffffffff
mov rax, qword [rbp - 0x28]
lock xadd dword [rax], ecx
cmp ecx, 1
jne 0x18018d2ae
mov edx, 2
lea r8d, [rdx + 6]
mov rcx, qword [rbp - 0x28]
call sym.Qt5Core.dll_public:_static_void___cdecl_QArrayData::deallocate_struct_QArrayData____ptr64__unsigned_long_long_unsigned___int64___unsigned_long_long_unsigned___int64__
mov ebx, dword [rbp + 0x50]
add rdi, 0x18
inc esi
cmp esi, dword [rbp + 0x58]
jbe 0x18018d1c0
mov rcx, qword [rbp - 0x10]
call sub.NETAPI32.dll_NetApiBufferFree
cmp r15d, 0xea
je 0x18018d160
test r15d, r15d
sete al
mov rbx, qword [rsp + 0xb0]
add rsp, 0x70
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret