Function at 0x4ed370
Capabilities:
Enumerate network shares

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x4c
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x1c], 0
lea ecx, [ebp - 0x1c]
push ecx
push eax
push 0x13
push 0
push 1
call sub.mpr.dll_WNetOpenEnumW
test eax, eax
mov dword [ebp - 0x50], eax
je 0x4ed3da
lea eax, [ebp - 0x50]
mov dword [ebp - 0x34], 0x56ab64
mov dword [ebp - 0x30], 2
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x44], eax
lea eax, [ebp - 0x44]
mov dword [ebp - 0x40], 0x41b090
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x20], 1
lea eax, [ebp - 0x34]
push eax
call fcn.004c4f80
add esp, 4
jmp 0x4ed6ae
mov eax, dword [0x56bbf8]
mov dword [ebp - 0x48], 0xffffffff
mov dword [ebp - 0x54], 0x4000
mov eax, dword [eax]
test eax, eax
jne 0x4ed408
call sub.kernel32.dll_GetProcessHeap
test eax, eax
je 0x4ed6e5
mov ecx, dword [0x56bbf8]
mov dword [ecx], eax
push 0x4000
push 8
push eax
call sub.kernel32.dll_HeapAlloc
test eax, eax
je 0x4ed6e5
mov edi, dword [ebp + 8]
mov ebx, eax
mov dword [ebp - 0x10], eax
nop word cs:[eax + eax]
nop
lea eax, [ebp - 0x54]
push eax
push ebx
lea eax, [ebp - 0x48]
push eax
push dword [ebp - 0x1c]
call sub.mpr.dll_WNetEnumResourceW
test eax, eax
mov dword [ebp - 0x58], eax
jne 0x4ed655
mov eax, dword [ebp - 0x48]
test eax, eax
mov dword [ebp - 0x4c], eax
je 0x4ed430
xor esi, esi
jmp 0x4ed470
push eax
push edi
call fcn.004ed370
add esp, 8
inc esi
cmp esi, dword [ebp - 0x4c]
je 0x4ed430
cmp esi, 0x200
je 0x4ed6b6
mov ecx, esi
shl ecx, 5
lea eax, [ebx + ecx]
mov ecx, dword [ebx + ecx + 0xc]
test cl, 2
jne 0x4ed460
test cl, 1
je 0x4ed46a
mov eax, dword [eax + 0x14]
test eax, eax
je 0x4ed547
mov ecx, 0xffffffff
nop word cs:[eax + eax]
nop dword [eax]
cmp word [eax + ecx*2 + 2], 0
lea ecx, [ecx + 1]
jne 0x4ed4b0
push ecx
push eax
lea eax, [ebp - 0x44]
push eax
call fcn.004c5b70
add esp, 0xc
mov ecx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x44]
test ecx, ecx
mov dword [ebp - 0x18], eax
je 0x4ed560
mov dword [ebp - 0x14], ecx
add ecx, eax
jmp 0x4ed4f6
add eax, 2
cmp ebx, ecx
cmovne ebx, eax
nop dword [eax]
cmp ebx, ecx
mov eax, ebx
je 0x4ed569
movzx edx, byte [eax]
lea ebx, [eax + 1]
test dl, dl
jns 0x4ed4f0
cmp dl, 0xe0
jb 0x4ed4e1
cmp dl, 0xed
jne 0x4ed526
cmp ebx, ecx
je 0x4ed569
lea edx, [eax + 2]
cmp edx, ecx
je 0x4ed569
cmp byte [eax + 1], 0x9f
ja 0x4ed618
add eax, 3
mov ebx, eax
jmp 0x4ed4f0
add eax, 2
cmp ebx, ecx
cmove eax, ebx
xor ebx, ebx
cmp eax, ecx
setne bl
add ebx, eax
cmp dl, 0xf0
jb 0x4ed4f0
xor eax, eax
cmp ebx, ecx
setne al
add ebx, eax
jmp 0x4ed4f0
xorps xmm0, xmm0
mov dword [ebp - 0x44], 1
mov dword [ebp - 0x18], 1
movlps qword [ebp - 0x40], xmm0
mov byte [ebp - 0x38], 1
mov edi, 1
xor ebx, ebx
jmp 0x4ed5ad
mov ecx, dword [ebp - 0x14]
test ecx, ecx
js 0x4ed6de
mov eax, dword [0x56bbf8]
mov eax, dword [eax]
test eax, eax
jne 0x4ed597
call sub.kernel32.dll_GetProcessHeap
test eax, eax
je 0x4ed6cf
mov ecx, dword [0x56bbf8]
mov dword [ecx], eax
mov ecx, dword [ebp - 0x14]
push ecx
push 0
push eax
call sub.kernel32.dll_HeapAlloc
test eax, eax
je 0x4ed6cf
mov ebx, dword [ebp - 0x14]
mov edi, eax
push ebx
push dword [ebp - 0x18]
push edi
call sub.msvcrt.dll_memcpy
add esp, 0xc
mov dword [ebp - 0x34], edi
mov edi, dword [ebp + 8]
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x2c], ebx
mov edx, dword [edi + 8]
cmp edx, dword [edi + 4]
jne 0x4ed5d8
mov ecx, edi
call fcn.004ec600
mov edx, dword [edi + 8]
mov eax, dword [edi]
mov edi, dword [ebp - 0x2c]
lea ecx, [edx + edx*2]
mov ebx, dword [ebp - 0x10]
inc edx
mov dword [eax + ecx*4 + 8], edi
mov edi, dword [ebp + 8]
movsd xmm0, qword [ebp - 0x34]
movsd qword [eax + ecx*4], xmm0
mov dword [edi + 8], edx
cmp dword [ebp - 0x40], 0
je 0x4ed46a
push dword [ebp - 0x18]
push 0
mov eax, dword [0x56bbf8]
push dword [eax]
call sub.kernel32.dll_HeapFree
jmp 0x4ed46a
mov dword [ebp - 0x34], str.Cannot_convert_OsString_to_String_n
mov dword [ebp - 0x30], 1
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x24], 0x56aacc
mov dword [ebp - 0x20], 0
lea eax, [ebp - 0x34]
push eax
call fcn.004c4f80
add esp, 4
mov ebx, dword [ebp - 0x10]
cmp dword [ebp - 0x40], 0
jne 0x4ed602
jmp 0x4ed46a
cmp eax, 0x103
je 0x4ed697
lea eax, [ebp - 0x58]
mov dword [ebp - 0x34], 0x56ab98
mov dword [ebp - 0x30], 2
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x44], eax
lea eax, [ebp - 0x44]
mov dword [ebp - 0x40], 0x41b090
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x20], 1
lea eax, [ebp - 0x34]
push eax
call fcn.004c4f80
add esp, 4
push dword [ebp - 0x1c]
call sub.mpr.dll_WNetCloseEnum
push ebx
push 0
mov eax, dword [0x56bbf8]
push dword [eax]
call sub.kernel32.dll_HeapFree
add esp, 0x4c
pop esi
pop edi
pop ebx
pop ebp
ret
push 0x56aba8
push 0x4000
push 0x4020
call fcn.00417f20
add esp, 0xc
jmp 0x4ed6e3
push 1
push dword [ebp - 0x14]
call fcn.004085f0
add esp, 8
jmp 0x4ed6e3
call fcn.004085b0
ud2
push 1
push 0x4000
call fcn.004085f0
add esp, 8
ud2