Function at 0x1003e590
Capabilities:
Create process on windows
Delete file

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1a8
mov eax, dword [0x10086ba0]
xor eax, ebp
mov dword [ebp - 8], eax
lea eax, [ebp - 0xd0]
mov dword [ebp - 0xe8], eax
mov ecx, dword [ebp + 8]
push ecx
call fcn.1003dea0
add esp, 4
mov dword [ebp - 0xe8], eax
push 0x64
push 0
lea edx, [ebp - 0x150]
push edx
call fcn.100139b0
add esp, 0xc
mov eax, dword [ebp + 0xc]
push eax
mov ecx, dword [ebp - 0xe8]
push ecx
push str.cscript_ICSEnable.vbs___s____s_
lea edx, [ebp - 0x150]
push edx
call fcn.10016875
add esp, 0x10
push 0x10073520
push 0x10073524
call fcn.10015838
add esp, 8
mov dword [ebp - 0xd4], eax
push str._VBScript_source_code_n
mov eax, dword [ebp - 0xd4]
push eax
call fcn.10017bb8
add esp, 8
push str.OPTION_EXPLICIT_n
mov ecx, dword [ebp - 0xd4]
push ecx
call fcn.10017bb8
add esp, 8
push 0x10073560
mov edx, dword [ebp - 0xd4]
push edx
call fcn.10017bb8
add esp, 8
push str.DIM_ICSSC_DEFAULT__CONNECTION_PUBLIC__CONNECTION_PRIVATE__CONNECTION_ALL_n
mov eax, dword [ebp - 0xd4]
push eax
call fcn.10017bb8
add esp, 8
push str.DIM_NetSharingManager_n
mov ecx, dword [ebp - 0xd4]
push ecx
call fcn.10017bb8
add esp, 8
push str.DIM_PublicConnection__PrivateConnection_n
mov edx, dword [ebp - 0xd4]
push edx
call fcn.10017bb8
add esp, 8
push str.DIM_EveryConnectionCollection_n
mov eax, dword [ebp - 0xd4]
push eax
call fcn.10017bb8
add esp, 8
push 0x10073618
mov ecx, dword [ebp - 0xd4]
push ecx
call fcn.10017bb8
add esp, 8
push str.DIM_objArgs_n
mov edx, dword [ebp - 0xd4]
push edx
call fcn.10017bb8
add esp, 8
push str.DIM_priv_con__publ_con_n
mov eax, dword [ebp - 0xd4]
push eax
call fcn.10017bb8
add esp, 8
push 0x10073644
mov ecx, dword [ebp - 0xd4]
push ecx
call fcn.10017bb8
add esp, 8
push str.ICSSC_DEFAULT__________0_n
mov edx, dword [ebp - 0xd4]
push edx
call fcn.10017bb8
add esp, 8
push str.CONNECTION_PUBLIC______0_n
mov eax, dword [ebp - 0xd4]
push eax
call fcn.10017bb8
add esp, 8
push str.CONNECTION_PRIVATE_____1_n
mov ecx, dword [ebp - 0xd4]
push ecx
call fcn.10017bb8
add esp, 8
push str.CONNECTION_ALL_________2_n
mov edx, dword [ebp - 0xd4]
push edx
call fcn.10017bb8
add esp, 8
push 0x100736b8
mov eax, dword [ebp - 0xd4]
push eax
call fcn.10017bb8
add esp, 8
push str.Main____n
mov ecx, dword [ebp - 0xd4]
push ecx
call fcn.10017bb8
add esp, 8
push 0x100736c8
mov edx, dword [ebp - 0xd4]
push edx
call fcn.10017bb8
add esp, 8
push str.sub_Main____n
mov eax, dword [ebp - 0xd4]
push eax
call fcn.10017bb8
add esp, 8
push str.____Set_objArgs__WScript.Arguments_n
mov ecx, dword [ebp - 0xd4]
push ecx
call fcn.10017bb8
add esp, 8
push 0x10073704
mov edx, dword [ebp - 0xd4]
push edx
call fcn.10017bb8
add esp, 8
push str.____if_objArgs.Count__2_then_n
mov eax, dword [ebp - 0xd4]
push eax
call fcn.10017bb8
add esp, 8
push str.________priv_con__objArgs_0__n
mov ecx, dword [ebp - 0xd4]
push ecx
call fcn.10017bb8
add esp, 8
push str.________publ_con__objArgs_1__n
mov edx, dword [ebp - 0xd4]
push edx
call fcn.10017bb8
add esp, 8
push 0x10073768
mov eax, dword [ebp - 0xd4]
push eax
call fcn.10017bb8
add esp, 8
push 0x1007376c
mov ecx, dword [ebp - 0xd4]
push ecx
call fcn.10017bb8
add esp, 8
push 0x10073794
mov edx, dword [ebp - 0xd4]
push edx
call fcn.10017bb8
add esp, 8
push 0x100737b8
mov eax, dword [ebp - 0xd4]
push eax
call fcn.10017bb8
add esp, 8
push str.____________FirewallTestByName_priv_con_publ_con_n
mov ecx, dword [ebp - 0xd4]
push ecx
call fcn.10017bb8
add esp, 8
push 0x100737f0
mov edx, dword [ebp - 0xd4]
push edx
call fcn.10017bb8
add esp, 8
push 0x10073800
mov eax, dword [ebp - 0xd4]
push eax
call fcn.10017bb8
add esp, 8
push str.________DIM_szMsg_n
mov ecx, dword [ebp - 0xd4]
push ecx
call fcn.10017bb8
add esp, 8
push 0x10073820
mov edx, dword [ebp - 0xd4]
push edx
call fcn.10017bb8
add esp, 8
push str.________if_Initialize____TRUE_then__n
mov eax, dword [ebp - 0xd4]
push eax
call fcn.10017bb8
add esp, 8
push str.____________GetConnectionObjects___n
mov ecx, dword [ebp - 0xd4]
push ecx
call fcn.10017bb8
add esp, 8
push 0x10073870
mov edx, dword [ebp - 0xd4]
push edx
call fcn.10017bb8
add esp, 8
push str.____________FirewallTestByName__list___list__n
mov eax, dword [ebp - 0xd4]
push eax
call fcn.10017bb8
add esp, 8
push 0x100738a4
mov ecx, dword [ebp - 0xd4]
push ecx
call fcn.10017bb8
add esp, 8
push 0x100738b4
mov edx, dword [ebp - 0xd4]
push edx
call fcn.10017bb8
add esp, 8
push str.________szMsg___To_share_your_internet_connection__please_provide_the_name_of_the_private_and_public_connections_as_the_argument.___vbCRLF__vbCRLF____n
mov eax, dword [ebp - 0xd4]
push eax
call fcn.10017bb8
add esp, 8
push str._________________Usage:___vbCRLF____n
mov ecx, dword [ebp - 0xd4]
push ecx
call fcn.10017bb8
add esp, 8
push str.___________________________WScript.scriptname_______chr_34____Private_Connection_Name___chr_34________chr_34____Public_Connection_Name___chr_34___n
mov edx, dword [ebp - 0xd4]
push edx
call fcn.10017bb8
add esp, 8
push str.________WScript.Echo__szMsg__vbCRLF__vbCRLF___n
mov eax, dword [ebp - 0xd4]
push eax
call fcn.10017bb8
add esp, 8
push 0x10073a50
mov ecx, dword [ebp - 0xd4]
push ecx
call fcn.10017bb8
add esp, 8
push 0x10073a5c
mov edx, dword [ebp - 0xd4]
push edx
call fcn.10017bb8
add esp, 8
push 0x10073a60
mov eax, dword [ebp - 0xd4]
push eax
call fcn.10017bb8
add esp, 8
push 0x10073a6c
mov ecx, dword [ebp - 0xd4]
push ecx
call fcn.10017bb8
add esp, 8
push str.sub_FirewallTestByName_con1_con2__n
mov edx, dword [ebp - 0xd4]
push edx
call fcn.10017bb8
add esp, 8
push str.on_error_resume_next_n
mov eax, dword [ebp - 0xd4]
push eax
call fcn.10017bb8
add esp, 8
push 0x10073aac
mov ecx, dword [ebp - 0xd4]
push ecx
call fcn.10017bb8
add esp, 8
push str.____DIM_EveryConnection_n
mov edx, dword [ebp - 0xd4]
push edx
call fcn.10017bb8
add esp, 8
push str.____DIM_objNCProps_n
mov eax, dword [ebp - 0xd4]
push eax
call fcn.10017bb8
add esp, 8
push str.____DIM_szMsg_n
mov ecx, dword [ebp - 0xd4]
push ecx
call fcn.10017bb8
add esp, 8
push str.____DIM_bFound1_bFound2_n
mov edx, dword [ebp - 0xd4]
push edx
call fcn.10017bb8
add esp, 8
push 0x10073b18
mov eax, dword [ebp - 0xd4]
push eax
call fcn.10017bb8
add esp, 8
push str.____WScript.echo_vbCRLF__vbCRLF__n
mov ecx, dword [ebp - 0xd4]
push ecx
call fcn.10017bb8
add esp, 8
push str.____bFound1__false_n
mov edx, dword [ebp - 0xd4]
push edx
call fcn.10017bb8
add esp, 8
push str.____bFound2__false_n
mov eax, dword [ebp - 0xd4]
push eax
call fcn.10017bb8
add esp, 8
push str.____for_each_Item_in_EveryConnectionCollection_n
mov ecx, dword [ebp - 0xd4]
push ecx
call fcn.10017bb8
add esp, 8
push str.________set_EveryConnection__NetSharingManager.INetSharingConfigurationForINetConnection_Item__n
mov edx, dword [ebp - 0xd4]
push edx
call fcn.10017bb8
add esp, 8
push str.________set_objNCProps__NetSharingManager.NetConnectionProps_Item__n
mov eax, dword [ebp - 0xd4]
push eax
call fcn.10017bb8
add esp, 8
push str.________szMsg___Name:__________objNCProps.Name__vbCRLF____n
mov ecx, dword [ebp - 0xd4]
push ecx
call fcn.10017bb8
add esp, 8
push str._________________Guid:__________objNCProps.Guid__vbCRLF____n
mov edx, dword [ebp - 0xd4]
push edx
call fcn.10017bb8
add esp, 8
push str._________________DeviceName:____objNCProps.DeviceName__vbCRLF____n
mov eax, dword [ebp - 0xd4]
push eax
call fcn.10017bb8
add esp, 8
push str._________________Status:________objNCProps.Status__vbCRLF____n
mov ecx, dword [ebp - 0xd4]
push ecx
call fcn.10017bb8
add esp, 8
push str._________________MediaType:_____objNCProps.MediaType_n
mov edx, dword [ebp - 0xd4]
push edx
call fcn.10017bb8
add esp, 8
push str.________if_EveryConnection.SharingEnabled_then_n
mov eax, dword [ebp - 0xd4]
push eax
call fcn.10017bb8
add esp, 8
push str.____________szMsg__szMsg__vbCRLF____n
mov ecx, dword [ebp - 0xd4]
push ecx
call fcn.10017bb8
add esp, 8
push str._____________________SharingEnabled___vbCRLF____n
mov edx, dword [ebp - 0xd4]
push edx
call fcn.10017bb8
add esp, 8
push str._____________________SharingType:____ConvertConnectionTypeToString_EveryConnection.SharingConnectionType__n
mov eax, dword [ebp - 0xd4]
push eax
call fcn.10017bb8
add esp, 8
push 0x10073e8c
mov ecx, dword [ebp - 0xd4]
push ecx
call fcn.10017bb8
add esp, 8
push 0x10073e9c
mov edx, dword [ebp - 0xd4]
push edx
call fcn.10017bb8
add esp, 8
push str.________if_objNCProps.Name__con1_then_n
mov eax, dword [ebp - 0xd4]
push eax
call fcn.10017bb8
add esp, 8
push str.____________bFound1__true_n
mov ecx, dword [ebp - 0xd4]
push ecx
call fcn.10017bb8
add esp, 8
push 0x10073ee4
mov edx, dword [ebp - 0xd4]
push edx
call fcn.10017bb8
add esp, 8
push str.________________szMsg__szMsg__vbCRLF___Not_Shared..._Enabling_private_connection_share...__n
mov eax, dword [ebp - 0xd4]
push eax
call fcn.10017bb8
add esp, 8
push 0x10073f80
mov ecx, dword [ebp - 0xd4]
push ecx
call fcn.10017bb8
add esp, 8
push str.________________EveryConnection.EnableSharing_CONNECTION_PRIVATE_n
mov edx, dword [ebp - 0xd4]
push edx
call fcn.10017bb8
add esp, 8
push 0x10073fec
mov eax, dword [ebp - 0xd4]
push eax
call fcn.10017bb8
add esp, 8
push 0x10074010
mov ecx, dword [ebp - 0xd4]
push ecx
call fcn.10017bb8
add esp, 8
push 0x10074024
mov edx, dword [ebp - 0xd4]
push edx
call fcn.10017bb8
add esp, 8
push 0x10074034
mov eax, dword [ebp - 0xd4]
push eax
call fcn.10017bb8
add esp, 8
push str.________if_objNCProps.Name__con2_then_n
mov ecx, dword [ebp - 0xd4]
push ecx
call fcn.10017bb8
add esp, 8
push str.____________bFound2__true_n
mov edx, dword [ebp - 0xd4]
push edx
call fcn.10017bb8
add esp, 8
push str.____________if_EveryConnection.SharingEnabled__False_then_n
mov eax, dword [ebp - 0xd4]
push eax
call fcn.10017bb8
add esp, 8
push str.________________szMsg__szMsg__vbCRLF___Not_Shared..._Enabling_public_connection_share...__n
mov ecx, dword [ebp - 0xd4]
push ecx
call fcn.10017bb8
add esp, 8
push str.________________WScript.Echo_szMsg__n
mov edx, dword [ebp - 0xd4]
push edx
call fcn.10017bb8
add esp, 8
push str.________________EveryConnection.EnableSharing_CONNECTION_PUBLIC_n
mov eax, dword [ebp - 0xd4]
push eax
call fcn.10017bb8
add esp, 8
push str.________________szMsg____Shared___n
mov ecx, dword [ebp - 0xd4]
push ecx
call fcn.10017bb8
add esp, 8
push str.____________end_if_n
mov edx, dword [ebp - 0xd4]
push edx
call fcn.10017bb8
add esp, 8
push str.________end_if__n
mov eax, dword [ebp - 0xd4]
push eax
call fcn.10017bb8
add esp, 8
push str.________WScript.Echo_szMsg__vbCRLF__vbCRLF__n
mov ecx, dword [ebp - 0xd4]
push ecx
call fcn.10017bb8
add esp, 8
push str.____next_n
mov edx, dword [ebp - 0xd4]
push edx
call fcn.10017bb8
add esp, 8
push 0x1007420c
mov eax, dword [ebp - 0xd4]
push eax
call fcn.10017bb8
add esp, 8
push str.____if__con1_____list____then_n
mov ecx, dword [ebp - 0xd4]
push ecx
call fcn.10017bb8
add esp, 8
push str.________if__bFound1__false___then_n
mov edx, dword [ebp - 0xd4]
push edx
call fcn.10017bb8
add esp, 8
push str.____________WScript.Echo___Connection____chr_34___con1__chr_34_____was_not_found____n
mov eax, dword [ebp - 0xd4]
push eax
call fcn.10017bb8
add esp, 8
push 0x100742d4
mov ecx, dword [ebp - 0xd4]
push ecx
call fcn.10017bb8
add esp, 8
push str.________if__bFound2__false___then_n
mov edx, dword [ebp - 0xd4]
push edx
call fcn.10017bb8
add esp, 8
push str.____________WScript.Echo___Connection____chr_34___con2__chr_34_____was_not_found____n
mov eax, dword [ebp - 0xd4]
push eax
call fcn.10017bb8
add esp, 8
push 0x1007434c
mov ecx, dword [ebp - 0xd4]
push ecx
call fcn.10017bb8
add esp, 8
push 0x100742e4
mov edx, dword [ebp - 0xd4]
push edx
call fcn.10017bb8
add esp, 8
push 0x1007435c
mov eax, dword [ebp - 0xd4]
push eax
call fcn.10017bb8
add esp, 8
push str.end_sub_n
mov ecx, dword [ebp - 0xd4]
push ecx
call fcn.10017bb8
add esp, 8
push 0x1007436c
mov edx, dword [ebp - 0xd4]
push edx
call fcn.10017bb8
add esp, 8
push str.function_Initialize___n
mov eax, dword [ebp - 0xd4]
push eax
call fcn.10017bb8
add esp, 8
push 0x10074388
mov ecx, dword [ebp - 0xd4]
push ecx
call fcn.10017bb8
add esp, 8
push str.____bReturn__FALSE_n
mov edx, dword [ebp - 0xd4]
push edx
call fcn.10017bb8
add esp, 8
push 0x100743b4
mov eax, dword [ebp - 0xd4]
push eax
call fcn.10017bb8
add esp, 8
push str.____set_NetSharingManager__Wscript.CreateObject__HNetCfg.HNetShare.1___n
mov ecx, dword [ebp - 0xd4]
push ecx
call fcn.10017bb8
add esp, 8
push str.____if__IsObject_NetSharingManager____FALSE_then_n
mov edx, dword [ebp - 0xd4]
push edx
call fcn.10017bb8
add esp, 8
push str.________Wscript.Echo__Unable_to_get_the_HNetCfg.HnetShare.1_object___n
mov eax, dword [ebp - 0xd4]
push eax
call fcn.10017bb8
add esp, 8
push 0x10074480
mov ecx, dword [ebp - 0xd4]
push ecx
call fcn.10017bb8
add esp, 8
push str.________if__IsNull_NetSharingManager.SharingInstalled___TRUE__then_n
mov edx, dword [ebp - 0xd4]
push edx
call fcn.10017bb8
add esp, 8
push str.____________Wscript.Echo__Sharing_isnt_available_on_this_platform.___n
mov eax, dword [ebp - 0xd4]
push eax
call fcn.10017bb8
add esp, 8
push 0x10074520
mov ecx, dword [ebp - 0xd4]
push ecx
call fcn.10017bb8
add esp, 8
push str.____________bReturn__TRUE_n
mov edx, dword [ebp - 0xd4]
push edx
call fcn.10017bb8
add esp, 8
push 0x1007454c
mov eax, dword [ebp - 0xd4]
push eax
call fcn.10017bb8
add esp, 8
push 0x1007455c
mov ecx, dword [ebp - 0xd4]
push ecx
call fcn.10017bb8
add esp, 8
push str.____Initialize__bReturn_n
mov edx, dword [ebp - 0xd4]
push edx
call fcn.10017bb8
add esp, 8
push 0x10074584
mov eax, dword [ebp - 0xd4]
push eax
call fcn.10017bb8
add esp, 8
push 0x10074594
mov ecx, dword [ebp - 0xd4]
push ecx
call fcn.10017bb8
add esp, 8
push str.function_GetConnectionObjects___n
mov edx, dword [ebp - 0xd4]
push edx
call fcn.10017bb8
add esp, 8
push 0x100745bc
mov eax, dword [ebp - 0xd4]
push eax
call fcn.10017bb8
add esp, 8
push 0x100745d0
mov ecx, dword [ebp - 0xd4]
push ecx
call fcn.10017bb8
add esp, 8
push 0x100745e0
mov edx, dword [ebp - 0xd4]
push edx
call fcn.10017bb8
add esp, 8
push 0x100745e4
mov eax, dword [ebp - 0xd4]
push eax
call fcn.10017bb8
add esp, 8
push 0x100745f8
mov ecx, dword [ebp - 0xd4]
push ecx
call fcn.10017bb8
add esp, 8
push str.____if_GetConnection_CONNECTION_PUBLIC___FALSE_then_n
mov edx, dword [ebp - 0xd4]
push edx
call fcn.10017bb8
add esp, 8
push 0x10074634
mov eax, dword [ebp - 0xd4]
push eax
call fcn.10017bb8
add esp, 8
push 0x10074650
mov ecx, dword [ebp - 0xd4]
push ecx
call fcn.10017bb8
add esp, 8
push 0x1007465c
mov edx, dword [ebp - 0xd4]
push edx
call fcn.10017bb8
add esp, 8
push str.____if_GetConnection_CONNECTION_PRIVATE___FALSE_then_n
mov eax, dword [ebp - 0xd4]
push eax
call fcn.10017bb8
add esp, 8
push 0x10074698
mov ecx, dword [ebp - 0xd4]
push ecx
call fcn.10017bb8
add esp, 8
push 0x100746b4
mov edx, dword [ebp - 0xd4]
push edx
call fcn.10017bb8
add esp, 8
push 0x100746c0
mov eax, dword [ebp - 0xd4]
push eax
call fcn.10017bb8
add esp, 8
push str.____if_GetConnection_CONNECTION_ALL___FALSE_then_n
mov ecx, dword [ebp - 0xd4]
push ecx
call fcn.10017bb8
add esp, 8
push 0x100746f8
mov edx, dword [ebp - 0xd4]
push edx
call fcn.10017bb8
add esp, 8
push 0x10074714
mov eax, dword [ebp - 0xd4]
push eax
call fcn.10017bb8
add esp, 8
push 0x10074720
mov ecx, dword [ebp - 0xd4]
push ecx
call fcn.10017bb8
add esp, 8
push str.____GetConnectionObjects__bReturn__n
mov edx, dword [ebp - 0xd4]
push edx
call fcn.10017bb8
add esp, 8
push 0x1007474c
mov eax, dword [ebp - 0xd4]
push eax
call fcn.10017bb8
add esp, 8
push 0x10074750
mov ecx, dword [ebp - 0xd4]
push ecx
call fcn.10017bb8
add esp, 8
push str.function_GetConnection_CONNECTION_TYPE__n
mov edx, dword [ebp - 0xd4]
push edx
call fcn.10017bb8
add esp, 8
push str.____DIM_bReturn_n
mov eax, dword [ebp - 0xd4]
push eax
call fcn.10017bb8
add esp, 8
push str.____DIM_Connection_n
mov ecx, dword [ebp - 0xd4]
push ecx
call fcn.10017bb8
add esp, 8
push str.____DIM_Item_n
mov edx, dword [ebp - 0xd4]
push edx
call fcn.10017bb8
add esp, 8
push str.____bReturn__TRUE_n
mov eax, dword [ebp - 0xd4]
push eax
call fcn.10017bb8
add esp, 8
push 0x100747d8
mov ecx, dword [ebp - 0xd4]
push ecx
call fcn.10017bb8
add esp, 8
push str.____if__CONNECTION_PUBLIC__CONNECTION_TYPE__then_n
mov edx, dword [ebp - 0xd4]
push edx
call fcn.10017bb8
add esp, 8
push str.________set_Connection__NetSharingManager.EnumPublicConnections_ICSSC_DEFAULT__n
mov eax, dword [ebp - 0xd4]
push eax
call fcn.10017bb8
add esp, 8
push 0x10074868
mov ecx, dword [ebp - 0xd4]
push ecx
call fcn.10017bb8
add esp, 8
push 0x100748ac
mov edx, dword [ebp - 0xd4]
push edx
call fcn.10017bb8
add esp, 8
push str.________________set_PublicConnection__NetSharingManager.INetSharingConfigurationForINetConnection_Item__n
mov eax, dword [ebp - 0xd4]
push eax
call fcn.10017bb8
add esp, 8
push 0x10074944
mov ecx, dword [ebp - 0xd4]
push ecx
call fcn.10017bb8
add esp, 8
push 0x10074958
mov edx, dword [ebp - 0xd4]
push edx
call fcn.10017bb8
add esp, 8
push 0x10074968
mov eax, dword [ebp - 0xd4]
push eax
call fcn.10017bb8
add esp, 8
push 0x10074988
mov ecx, dword [ebp - 0xd4]
push ecx
call fcn.10017bb8
add esp, 8
push str.____elseif__CONNECTION_PRIVATE__CONNECTION_TYPE__then_n
mov edx, dword [ebp - 0xd4]
push edx
call fcn.10017bb8
add esp, 8
push str.________set_Connection__NetSharingManager.EnumPrivateConnections_ICSSC_DEFAULT__n
mov eax, dword [ebp - 0xd4]
push eax
call fcn.10017bb8
add esp, 8
push str.________if__Connection.Count___0__and__Connection.Count___2__then_n
mov ecx, dword [ebp - 0xd4]
push ecx
call fcn.10017bb8
add esp, 8
push str.____________for_each_Item_in_Connection_n
mov edx, dword [ebp - 0xd4]
push edx
call fcn.10017bb8
add esp, 8
push str.________________set_PrivateConnection__NetSharingManager.INetSharingConfigurationForINetConnection_Item__n
mov eax, dword [ebp - 0xd4]
push eax
call fcn.10017bb8
add esp, 8
push str.____________next_n
mov ecx, dword [ebp - 0xd4]
push ecx
call fcn.10017bb8
add esp, 8
push 0x10074b18
mov edx, dword [ebp - 0xd4]
push edx
call fcn.10017bb8
add esp, 8
push 0x10074b28
mov eax, dword [ebp - 0xd4]
push eax
call fcn.10017bb8
add esp, 8
push 0x10074b48
mov ecx, dword [ebp - 0xd4]
push ecx
call fcn.10017bb8
add esp, 8
push str.____elseif__CONNECTION_ALL__CONNECTION_TYPE__then_n
mov edx, dword [ebp - 0xd4]
push edx
call fcn.10017bb8
add esp, 8
push str.________set_Connection__NetSharingManager.EnumEveryConnection_n
mov eax, dword [ebp - 0xd4]
push eax
call fcn.10017bb8
add esp, 8
push str.________if__Connection.Count___0__then_n
mov ecx, dword [ebp - 0xd4]
push ecx
call fcn.10017bb8
add esp, 8
push str.____________set_EveryConnectionCollection__Connection_n
mov edx, dword [ebp - 0xd4]
push edx
call fcn.10017bb8
add esp, 8
push str.________else_n
mov eax, dword [ebp - 0xd4]
push eax
call fcn.10017bb8
add esp, 8
push 0x10074c48
mov ecx, dword [ebp - 0xd4]
push ecx
call fcn.10017bb8
add esp, 8
push 0x10074c68
mov edx, dword [ebp - 0xd4]
push edx
call fcn.10017bb8
add esp, 8
push 0x10074b8c
mov eax, dword [ebp - 0xd4]
push eax
call fcn.10017bb8
add esp, 8
push str.________bReturn__FALSE_n
mov ecx, dword [ebp - 0xd4]
push ecx
call fcn.10017bb8
add esp, 8
push 0x10074c94
mov edx, dword [ebp - 0xd4]
push edx
call fcn.10017bb8
add esp, 8
push 0x10074ca0
mov eax, dword [ebp - 0xd4]
push eax
call fcn.10017bb8
add esp, 8
push str.____if__TRUE__bReturn___then_n
mov ecx, dword [ebp - 0xd4]
push ecx
call fcn.10017bb8
add esp, 8
push 0x10074cc4
mov edx, dword [ebp - 0xd4]
push edx
call fcn.10017bb8
add esp, 8
push str.________if__Connection.Count__0__then_n
mov eax, dword [ebp - 0xd4]
push eax
call fcn.10017bb8
add esp, 8
push str.____________Wscript.Echo__No____CStr_ConvertConnectionTypeToString_CONNECTION_TYPE______connections_exist__Connection.Count_gave_us_0____n
mov ecx, dword [ebp - 0xd4]
push ecx
call fcn.10017bb8
add esp, 8
push str.____________bReturn__FALSE_n
mov edx, dword [ebp - 0xd4]
push edx
call fcn.10017bb8
add esp, 8
push str.________valid_to_have_more_than_1_connection_returned_from_EnumEveryConnection_n
mov eax, dword [ebp - 0xd4]
push eax
call fcn.10017bb8
add esp, 8
push str.________elseif__Connection.Count___1__and__CONNECTION_ALL____CONNECTION_TYPE__then_n
mov ecx, dword [ebp - 0xd4]
push ecx
call fcn.10017bb8
add esp, 8
push str.____________Wscript.Echo__ERROR:_There_was_more_than_one____ConvertConnectionTypeToString_CONNECTION_TYPE_____connection_____CStr_Connection.Count________n
mov edx, dword [ebp - 0xd4]
push edx
call fcn.10017bb8
add esp, 8
push str.____________bReturn__FALSE__n
mov eax, dword [ebp - 0xd4]
push eax
call fcn.10017bb8
add esp, 8
push str.________end_if_n
mov ecx, dword [ebp - 0xd4]
push ecx
call fcn.10017bb8
add esp, 8
push 0x10074e4c
mov edx, dword [ebp - 0xd4]
push edx
call fcn.10017bb8
add esp, 8
push str.____Wscript.Echo_CStr_Connection.Count_____objects_for_connection_type____ConvertConnectionTypeToString_CONNECTION_TYPE___n
mov eax, dword [ebp - 0xd4]
push eax
call fcn.10017bb8
add esp, 8
push 0x10074fa8
mov ecx, dword [ebp - 0xd4]
push ecx
call fcn.10017bb8
add esp, 8
push str.____GetConnection__bReturn_n
mov edx, dword [ebp - 0xd4]
push edx
call fcn.10017bb8
add esp, 8
push 0x10074fcc
mov eax, dword [ebp - 0xd4]
push eax
call fcn.10017bb8
add esp, 8
push 0x10074fdc
mov ecx, dword [ebp - 0xd4]
push ecx
call fcn.10017bb8
add esp, 8
push str.function_ConvertConnectionTypeToString_ConnectionID__n
mov edx, dword [ebp - 0xd4]
push edx
call fcn.10017bb8
add esp, 8
push str.____DIM_ConnectionString_n
mov eax, dword [ebp - 0xd4]
push eax
call fcn.10017bb8
add esp, 8
push 0x10075034
mov ecx, dword [ebp - 0xd4]
push ecx
call fcn.10017bb8
add esp, 8
push str.____if__ConnectionID__CONNECTION_PUBLIC__then_n
mov edx, dword [ebp - 0xd4]
push edx
call fcn.10017bb8
add esp, 8
push str.________ConnectionString___public__n
mov eax, dword [ebp - 0xd4]
push eax
call fcn.10017bb8
add esp, 8
push str.____elseif__ConnectionID__CONNECTION_PRIVATE__then_n
mov ecx, dword [ebp - 0xd4]
push ecx
call fcn.10017bb8
add esp, 8
push str.________ConnectionString___private__n
mov edx, dword [ebp - 0xd4]
push edx
call fcn.10017bb8
add esp, 8
push str.____elseif__ConnectionID__CONNECTION_ALL__then_n
mov eax, dword [ebp - 0xd4]
push eax
call fcn.10017bb8
add esp, 8
push str.________ConnectionString___all__n
mov ecx, dword [ebp - 0xd4]
push ecx
call fcn.10017bb8
add esp, 8
push str.____else_n
mov edx, dword [ebp - 0xd4]
push edx
call fcn.10017bb8
add esp, 8
push str.________ConnectionString___Unknown:____CStr_ConnectionID__n
mov eax, dword [ebp - 0xd4]
push eax
call fcn.10017bb8
add esp, 8
push str.____end_if_n
mov ecx, dword [ebp - 0xd4]
push ecx
call fcn.10017bb8
add esp, 8
push str.____ConvertConnectionTypeToString__ConnectionString_n
mov edx, dword [ebp - 0xd4]
push edx
call fcn.10017bb8
add esp, 8
push str.end_function_n
mov eax, dword [ebp - 0xd4]
push eax
call fcn.10017bb8
add esp, 8
mov ecx, dword [ebp - 0xd4]
push ecx
call fcn.10015a42
add esp, 4
push 0x44
push 0
lea edx, [ebp - 0x1a8]
push edx
call fcn.100139b0
add esp, 0xc
push 0x10
push 0
lea eax, [ebp - 0xe4]
push eax
call fcn.100139b0
add esp, 0xc
mov dword [ebp - 0x1a8], 0x44
mov dword [ebp - 0x17c], 1
xor ecx, ecx
mov word [ebp - 0x178], cx
lea edx, [ebp - 0xe4]
push edx
lea eax, [ebp - 0x1a8]
push eax
push 0
push 0
push 0x4000000
push 0
push 0
push 0
lea ecx, [ebp - 0x150]
push ecx
push 0
call dword [sym.imp.KERNEL32.dll_CreateProcessA]
test eax, eax
jne 0x1003f6d1
jmp 0x1003f6eb
push 0xffffffffffffffff
mov edx, dword [ebp - 0xe4]
push edx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
push str.ICSEnable.vbs
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
mov ecx, dword [ebp - 8]
xor ecx, ebp
call fcn.1001362b
mov esp, ebp
pop ebp
ret