Function at 0x21037e92
Capabilities:
Enumerate network shares

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x170
mov dword [ebp - 4], 0
mov dword [ebp - 0x118], 0
mov dword [ebp - 0x110], 0
mov dword [ebp - 0x10c], 0
mov dword [ebp - 0x114], 0
mov eax, dword [ebp + 0x10]
mov byte [eax], 0
mov ecx, dword [ebp + 8]
push ecx
push 0x210846b8
lea edx, [ebp - 0x108]
push edx
call fcn.2105374f
add esp, 0xc
lea eax, [ebp - 0x118]
push eax
lea ecx, [ebp - 4]
push ecx
mov edx, dword [ebp - 4]
push edx
push 0
push 2
lea eax, [ebp - 0x108]
push eax
push 0x28
call fcn.2103f7cb
cmp dword [ebp - 4], 0
jne 0x21037f16
xor eax, eax
jmp 0x210382ca
mov ecx, dword [ebp - 4]
push ecx
call fcn.210636c3
add esp, 4
mov dword [ebp - 0x158], eax
mov edx, dword [ebp - 0x158]
mov dword [ebp - 0x110], edx
lea eax, [ebp - 0x118]
push eax
lea ecx, [ebp - 4]
push ecx
mov edx, dword [ebp - 4]
push edx
mov eax, dword [ebp - 0x110]
push eax
push 2
lea ecx, [ebp - 0x108]
push ecx
push 0x28
call fcn.2103f7cb
mov dword [ebp - 0x11c], 0
jmp 0x21037f75
mov edx, dword [ebp - 0x11c]
add edx, 1
mov dword [ebp - 0x11c], edx
mov eax, dword [ebp - 0x11c]
cmp eax, dword [ebp - 0x118]
jae 0x21037fcc
mov ecx, dword [ebp + 0xc]
push ecx
mov edx, dword [ebp - 0x11c]
imul edx, edx, 0x54
mov eax, dword [ebp - 0x110]
mov ecx, dword [eax + edx + 8]
push ecx
call fcn.21053d90
add esp, 8
test eax, eax
jne 0x21037fca
mov edx, dword [ebp - 0x11c]
imul edx, edx, 0x54
mov eax, dword [ebp - 0x110]
mov ecx, dword [eax + edx + 4]
push ecx
mov edx, dword [ebp + 0x14]
push edx
mov eax, dword [ebp + 0x10]
push eax
call fcn.21003071
jmp 0x21037fcc
jmp 0x21037f66
mov ecx, dword [ebp + 0x10]
movsx edx, byte [ecx]
test edx, edx
jne 0x21038271
mov dword [ebp - 0x144], 0x4000
push 0x20
push 0
lea eax, [ebp - 0x13c]
push eax
call fcn.21053be0
add esp, 0xc
mov dword [ebp - 0x13c], 2
mov dword [ebp - 0x138], 0
mov dword [ebp - 0x134], 0
mov dword [ebp - 0x130], 2
mov dword [ebp - 0x12c], 0x2108b530
lea ecx, [ebp - 0x108]
mov dword [ebp - 0x128], ecx
mov dword [ebp - 0x124], 0x2108b534
mov dword [ebp - 0x120], 0x2108b538
lea edx, [ebp - 0x10c]
push edx
lea eax, [ebp - 0x13c]
push eax
push 0
push 0
push 2
call sub.MPR.dll_WNetOpenEnumA
mov dword [ebp - 0x150], eax
cmp dword [ebp - 0x150], 0
je 0x21038076
jmp 0x210382c8
mov dword [ebp - 0x14c], 1
cmp dword [ebp - 0x14c], 0
je 0x21038271
cmp dword [ebp - 0x114], 0
jne 0x210380c5
mov ecx, dword [ebp - 0x144]
push ecx
call fcn.210636c3
add esp, 4
mov dword [ebp - 0x15c], eax
mov edx, dword [ebp - 0x15c]
mov dword [ebp - 0x114], edx
cmp dword [ebp - 0x114], 0
jne 0x210380c5
jmp 0x210382c6
mov dword [ebp - 0x140], 0xffffffff
lea eax, [ebp - 0x144]
push eax
mov ecx, dword [ebp - 0x114]
push ecx
lea edx, [ebp - 0x140]
push edx
mov eax, dword [ebp - 0x10c]
push eax
call sub.MPR.dll_WNetEnumResourceA
mov dword [ebp - 0x150], eax
mov ecx, dword [ebp - 0x150]
mov dword [ebp - 0x16c], ecx
cmp dword [ebp - 0x16c], 0
je 0x21038130
cmp dword [ebp - 0x16c], 0xea
je 0x21038237
cmp dword [ebp - 0x16c], 0x103
je 0x2103825e
jmp 0x2103826a
mov dword [ebp - 0x148], 0
jmp 0x2103814b
mov edx, dword [ebp - 0x148]
add edx, 1
mov dword [ebp - 0x148], edx
mov eax, dword [ebp - 0x148]
cmp eax, dword [ebp - 0x140]
jae 0x21038235
mov ecx, dword [ebp - 0x148]
shl ecx, 5
mov edx, dword [ebp - 0x114]
mov eax, dword [edx + ecx + 0xc]
and eax, 2
test eax, eax
je 0x21038179
jmp 0x2103813c
mov ecx, dword [ebp - 0x148]
shl ecx, 5
mov edx, dword [ebp - 0x114]
mov eax, dword [edx + ecx + 4]
and eax, 2
test eax, eax
jne 0x21038195
jmp 0x2103813c
mov ecx, dword [ebp - 0x148]
shl ecx, 5
mov edx, dword [ebp - 0x114]
mov eax, dword [edx + ecx + 0x14]
push eax
call fcn.2104b6c4
mov dword [ebp - 0x154], eax
cmp dword [ebp - 0x154], 0
je 0x210381d6
mov ecx, dword [ebp - 0x154]
movsx edx, byte [ecx]
test edx, edx
je 0x210381d6
mov dword [ebp - 0x170], 0
jmp 0x210381e0
mov dword [ebp - 0x170], 1
cmp dword [ebp - 0x170], 0
je 0x210381ee
jmp 0x2103813c
mov eax, dword [ebp + 0xc]
push eax
mov ecx, dword [ebp - 0x154]
push ecx
call fcn.21053d90
add esp, 8
test eax, eax
je 0x2103820a
jmp 0x2103813c
mov edx, dword [ebp - 0x148]
shl edx, 5
mov eax, dword [ebp - 0x114]
mov ecx, dword [eax + edx + 0x18]
push ecx
mov edx, dword [ebp + 0x14]
push edx
mov eax, dword [ebp + 0x10]
push eax
call fcn.21003071
mov dword [ebp - 0x14c], 0
jmp 0x2103826c
mov ecx, dword [ebp - 0x114]
mov dword [ebp - 0x160], ecx
mov edx, dword [ebp - 0x160]
push edx
call fcn.210636ec
add esp, 4
mov dword [ebp - 0x114], 0
jmp 0x2103826c
mov dword [ebp - 0x14c], 0
jmp 0x2103826c
jmp 0x210382c4
jmp 0x21038080
mov eax, dword [ebp - 0x110]
mov dword [ebp - 0x164], eax
mov ecx, dword [ebp - 0x164]
push ecx
call fcn.210636ec
add esp, 4
mov edx, dword [ebp - 0x114]
mov dword [ebp - 0x168], edx
mov eax, dword [ebp - 0x168]
push eax
call fcn.210636ec
add esp, 4
cmp dword [ebp - 0x10c], 0
je 0x210382bc
mov ecx, dword [ebp - 0x10c]
push ecx
call sub.MPR.dll_WNetCloseEnum
mov edx, dword [ebp + 0x10]
movsx eax, byte [edx]
jmp 0x210382ca
jmp 0x21038271
jmp 0x21038271
jmp 0x21038271
mov esp, ebp
pop ebp
ret 0x10