Function at 0x45faf0
Capabilities:
Enumerate network shares

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x24c
mov eax, dword [0x58cfe0]
xor eax, ebp
mov dword [ebp - 4], eax
mov ecx, dword [ebp + 0xc]
mov eax, dword [ebp + 8]
mov dword [ebp - 0x248], ecx
mov ecx, dword [ebp + 0x10]
mov dword [ebp - 0x244], ecx
test ecx, ecx
je 0x45fdda
cmp dword [ebp + 0x14], 0
jle 0x45fdda
push ebx
push eax
xor edx, edx
lea eax, [ebp - 0x20c]
push 0x54d1c4
push 0x104
push eax
mov word [ecx], dx
xor ebx, ebx
mov dword [ebp - 0x218], edx
mov dword [ebp - 0x210], edx
mov dword [ebp - 0x21c], edx
call fcn.004183f0
add esp, 0x10
lea eax, [ebp - 0x210]
push eax
lea eax, [ebp - 0x218]
push eax
push dword [ebp - 0x218]
lea eax, [ebp - 0x20c]
push ebx
push 2
push eax
push 0x28
call sub.WINSPOOL.DRV_EnumPrintersW
mov eax, dword [ebp - 0x218]
test eax, eax
jne 0x45fb9c
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00507257
mov esp, ebp
pop ebp
ret
push esi
push edi
push eax
call fcn.004e6b5b
add esp, 4
mov edi, eax
lea eax, [ebp - 0x210]
mov dword [ebp - 0x24c], edi
push eax
lea eax, [ebp - 0x218]
push eax
push dword [ebp - 0x218]
lea eax, [ebp - 0x20c]
push edi
push 2
push eax
push 0x28
call sub.WINSPOOL.DRV_EnumPrintersW
xor esi, esi
cmp dword [ebp - 0x210], ebx
jbe 0x45fc05
add edi, 8
push dword [ebp - 0x248]
push dword [edi]
call fcn.0050d5a0
add esp, 8
test eax, eax
je 0x45fcff
inc esi
add edi, 0x54
cmp esi, dword [ebp - 0x210]
jb 0x45fbe1
mov esi, dword [ebp - 0x244]
cmp word [esi], bx
jne 0x45fd98
xorps xmm0, xmm0
mov dword [ebp - 0x220], 0x4000
movups xmmword [ebp - 0x230], xmm0
lea eax, [ebp - 0x20c]
mov dword [ebp - 0x230], 0x546e38
mov dword [ebp - 0x22c], eax
lea eax, [ebp - 0x21c]
push eax
lea eax, [ebp - 0x240]
mov dword [ebp - 0x228], 0x546e38
push eax
push 0
movups xmmword [ebp - 0x240], xmm0
push 0
push 2
mov dword [ebp - 0x240], 2
mov dword [ebp - 0x23c], ebx
mov dword [ebp - 0x238], ebx
mov dword [ebp - 0x234], 2
mov dword [ebp - 0x224], 0x546e38
call sub.MPR.dll_WNetOpenEnumW
test eax, eax
jne 0x45fd98
nop word [eax + eax]
test ebx, ebx
jne 0x45fcbc
push dword [ebp - 0x220]
call fcn.004e6b5b
mov ebx, eax
add esp, 4
test ebx, ebx
je 0x45fd98
lea eax, [ebp - 0x220]
mov dword [ebp - 0x214], 0xffffffff
push eax
push ebx
lea eax, [ebp - 0x214]
push eax
push dword [ebp - 0x21c]
call sub.MPR.dll_WNetEnumResourceW
sub eax, 0
je 0x45fd25
sub eax, 0xea
jne 0x45fd98
push 0x20
push ebx
call fcn.00507268
add esp, 8
xor ebx, ebx
jmp 0x45fca0
mov ecx, dword [ebp - 0x24c]
imul eax, esi, 0x54
mov esi, dword [ebp - 0x244]
push 0
push dword [eax + ecx + 4]
push dword [ebp + 0x14]
push esi
call fcn.004823d0
add esp, 0x10
jmp 0x45fc0b
mov eax, dword [ebp - 0x214]
xor edi, edi
test eax, eax
je 0x45fca0
lea esi, [ebx + 4]
test byte [esi + 8], 2
jne 0x45fd71
test byte [esi], 2
je 0x45fd71
push dword [esi + 0x10]
call fcn.004a6040
add esp, 4
test eax, eax
je 0x45fd6b
cmp word [eax], 0
je 0x45fd6b
push dword [ebp - 0x248]
push eax
call fcn.0050d5a0
add esp, 8
test eax, eax
je 0x45fd7e
mov eax, dword [ebp - 0x214]
inc edi
add esi, 0x20
cmp edi, eax
jb 0x45fd38
jmp 0x45fca0
shl edi, 5
push 0
push dword [edi + ebx + 0x18]
push dword [ebp + 0x14]
push dword [ebp - 0x244]
call fcn.004823d0
add esp, 0x10
push 0x54
push dword [ebp - 0x24c]
call fcn.00507268
push 0x20
push ebx
call fcn.00507268
mov eax, dword [ebp - 0x21c]
add esp, 0x10
pop edi
pop esi
test eax, eax
je 0x45fdc2
push eax
call sub.MPR.dll_WNetCloseEnum
mov eax, dword [ebp - 0x244]
pop ebx
movzx eax, word [eax]
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00507257
mov esp, ebp
pop ebp
ret
mov ecx, dword [ebp - 4]
xor eax, eax
xor ecx, ebp
call fcn.00507257
mov esp, ebp
pop ebp
ret