Function at 0x4032a0
Capabilities:
Act as tcp client
Connect socket
Connect tcp socket
Create tcp socket

Disassembly:
push 0xffffffffffffffff
push 0x419a96
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x260
push ebx
push ebp
push esi
push edi
mov ecx, 0xf
xor eax, eax
lea edi, [esp + 0x31]
mov byte [esp + 0x30], 0
rep stosd dword es:[edi], eax
mov esi, dword [esp + 0x284]
push str._username_
stosw word es:[edi], ax
push esi
stosb byte es:[edi], al
call fcn.00406fa0
mov ebx, dword [esp + 0x288]
add esp, 8
test eax, eax
je 0x403324
push 0x3f
lea eax, [esp + 0x34]
push ebx
push eax
call fcn.00406980
add esp, 0xc
push 4
push str._username_
push esi
call fcn.00406fa0
add esp, 8
add eax, 0xa
lea ecx, [esp + 0x34]
push eax
push ecx
call fcn.00406e70
jmp 0x403352
push 0x42207c
push esi
call fcn.00406fa0
add esp, 8
test eax, eax
je 0x403345
mov ecx, 0x10
xor eax, eax
lea edi, [esp + 0x30]
rep stosd dword es:[edi], eax
jmp 0x403355
push 0x3f
lea edx, [esp + 0x34]
push esi
push edx
call fcn.00406980
add esp, 0xc
mov ecx, 0x3f
xor eax, eax
lea edi, [esp + 0x71]
mov byte [esp + 0x70], 0
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
push 0x424078
lea ecx, [esp + 0x14]
stosb byte es:[edi], al
call fcn.0041563c
lea edi, [esp + 0x30]
or ecx, 0xffffffff
xor eax, eax
mov dword [esp + 0x278], 0
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov dword [esp + 0x1c], 0xff0000
jne 0x4033b8
mov ebp, dword [esp + 0x288]
push ebx
push ebp
lea eax, [esp + 0x78]
push str.__s_:_checking:__s__NULL__..._r_n
push eax
call fcn.00406c3a
add esp, 0x10
jmp 0x4033d8
mov ebp, dword [esp + 0x288]
lea ecx, [esp + 0x30]
push ecx
push ebx
push ebp
lea edx, [esp + 0x7c]
push str.__s_:_checking:__s__s_..._r_n
push edx
call fcn.00406c3a
add esp, 0x14
lea eax, [esp + 0x70]
lea ecx, [esp + 0x10]
push eax
call fcn.0041570b
lea ecx, [esp + 0x1c]
lea edx, [esp + 0x10]
push ecx
push edx
call fcn.00401500
add esp, 8
mov word [esp + 0x20], 2
push ebp
call sub.WS2_32.dll_inet_addr
push 0x8b
mov dword [esp + 0x28], eax
call sub.WS2_32.dll_htons
push 6
push 1
push 2
mov word [esp + 0x2e], ax
call sub.WS2_32.dll_socket
mov esi, eax
test esi, esi
jl 0x4035c3
lea eax, [esp + 0x20]
push 0x10
push eax
push esi
call sub.WS2_32.dll_connect
test eax, eax
jl 0x4035bd
push str.SMBSERVER
push esi
call fcn.00402b30
add esp, 8
test eax, eax
jl 0x4035bd
lea ecx, [esp + 0x30]
push ecx
push ebx
push esi
call fcn.00402fe0
add esp, 0xc
test eax, eax
jne 0x4035bd
mov ecx, 0x3f
lea edi, [esp + 0x171]
mov byte [esp + 0x170], al
push 0x424078
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
lea ecx, [esp + 0x18]
stosb byte es:[edi], al
call fcn.0041563c
lea edi, [esp + 0x30]
or ecx, 0xffffffff
xor eax, eax
mov byte [esp + 0x278], 1
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov dword [esp + 0x18], 0xff
jne 0x4034ce
push ebx
push ebp
lea edx, [esp + 0x178]
push str.__s_:_Found:__s__NULL______r_n
push edx
call fcn.00406c3a
add esp, 0x10
jmp 0x4034ea
lea eax, [esp + 0x30]
lea ecx, [esp + 0x170]
push eax
push ebx
push ebp
push str.__s_:_Found:__s__s_____r_n
push ecx
call fcn.00406c3a
add esp, 0x14
lea edx, [esp + 0x170]
lea ecx, [esp + 0x14]
push edx
call fcn.0041570b
lea eax, [esp + 0x18]
lea ecx, [esp + 0x14]
push eax
push ecx
call fcn.00401500
mov edx, dword [esp + 0x294]
lea eax, [esp + 0x38]
push edx
push eax
push ebx
push ebp
call fcn.00401630
call fcn.00401600
push 0x421ff8
push str.NTscan.txt
call fcn.00406cbd
mov edx, eax
add esp, 0x20
test edx, edx
mov dword [0x4236ac], edx
je 0x403587
lea edi, [esp + 0x30]
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
jne 0x403563
push ebx
push ebp
push str.___15s_:___s__NULL__n
push edx
call fcn.00406e2d
add esp, 0x10
jmp 0x403578
lea ecx, [esp + 0x30]
push ecx
push ebx
push ebp
push str.___15s_:___s__s_n
push edx
call fcn.00406e2d
add esp, 0x14
mov edx, dword [0x4236ac]
push edx
call fcn.004068f5
add esp, 4
push esi
mov byte [0x421de4], 1
call sub.WS2_32.dll_closesocket
lea ecx, [esp + 0x14]
mov byte [esp + 0x278], 0
call fcn.00415612
lea ecx, [esp + 0x10]
mov dword [esp + 0x278], 0xffffffff
call fcn.00415612
mov al, 1
jmp 0x4035d9
push esi
call sub.WS2_32.dll_closesocket
lea ecx, [esp + 0x10]
mov dword [esp + 0x278], 0xffffffff
call fcn.00415612
xor al, al
mov ecx, dword [esp + 0x270]
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x26c
ret