Function at 0x1009882
Capabilities:
Enumerate network shares

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x1c
push ebx
push dword [0x1020964]
mov byte [ebp - 2], 1
call fcn.0100a9cd
xor ebx, ebx
push ebx
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 8]
push eax
push 0xffffffffffffffff
lea eax, [ebp - 0x10]
push eax
push 2
push ebx
call sub.srvcli.dll_NetShareEnum
cmp eax, ebx
je 0x10098bd
push eax
call fcn.0100295a
cmp dword [ebp - 8], ebx
jne 0x10098c7
call fcn.01010959
push 0x1008ecd
push 0x20
push dword [ebp - 8]
push dword [ebp - 0x10]
call dword [sym.imp.msvcrt.dll_qsort]
add esp, 0x10
lea eax, [ebp - 0x1c]
push eax
push 0x1020430
push 0x1c
call fcn.01010adf
call fcn.010108a7
push 0x127a
call fcn.010108f6
call fcn.01010842
mov dword [ebp - 0xc], ebx
cmp dword [ebp - 8], ebx
jbe 0x1009ace
push esi
mov esi, dword [ebp - 0x10]
push edi
add esi, 0x18
push dword [esi - 0x18]
call fcn.010104fb
cmp eax, 0xc
ja 0x100993f
push ebx
push dword [esi - 0x18]
push 0xc
call fcn.010108bb
push eax
push 0x1009b34
call fcn.01010562
mov edi, 0x1003748
jmp 0x1009963
push dword [esi - 0x18]
mov edi, 0x1003748
push edi
call fcn.01010562
pop ecx
pop ecx
call fcn.010108a7
push 0x1003764
push 0x1009b1c
call fcn.01010562
and dword [esi - 0x14], 0x3fffffff
cmp dword [esi - 0x14], 1
pop ecx
pop ecx
jne 0x10099aa
push dword [esi - 0x18]
call fcn.0100981f
push ebx
push 0x101c340
push 0xffffffffffffffea
call fcn.010108bb
push eax
push 0x1009b10
call fcn.01010562
pop ecx
pop ecx
push ebx
push dword [0x1020434]
push 8
call fcn.010108bb
push eax
push 0x1009b10
jmp 0x10099e1
push dword [esi]
call fcn.010104fb
cmp eax, 0x1f
ja 0x10099c8
push ebx
push dword [esi]
push 0xffffffffffffffe1
call fcn.010108bb
push eax
push 0x1009b34
jmp 0x10099e1
push dword [esi]
push edi
call fcn.01010562
pop ecx
pop ecx
call fcn.010108a7
push 0x1003764
push 0x1009af8
call fcn.01010562
mov eax, dword [esi - 0x10]
pop ecx
pop ecx
mov byte [ebp - 1], bl
cmp eax, ebx
je 0x1009a0d
cmp word [eax], bx
je 0x1009a0d
push ebx
push eax
push 0xffffffffffffffde
call fcn.010108bb
push eax
push edi
call fcn.01010562
pop ecx
pop ecx
mov byte [ebp - 1], 1
cmp byte [ebp - 2], bl
je 0x1009ab2
lea eax, [ebp - 0x14]
push eax
push 0x3ed
push dword [esi - 0x18]
push ebx
call sub.srvcli.dll_NetShareGetInfo
test eax, eax
jne 0x1009ab2
mov eax, dword [ebp - 0x14]
mov eax, dword [eax]
and eax, 0x2030
cmp eax, 0x10
je 0x1009a68
cmp eax, 0x20
je 0x1009a60
cmp eax, 0x30
je 0x1009a58
cmp eax, 0x2000
jne 0x1009aa8
mov edi, dword [0x10204cc]
jmp 0x1009a6e
mov edi, dword [0x10204d4]
jmp 0x1009a6e
mov edi, dword [0x10204c4]
jmp 0x1009a6e
mov edi, dword [0x10204bc]
cmp edi, ebx
je 0x1009aa8
cmp byte [ebp - 1], 1
jne 0x1009a9b
call fcn.010108a7
push edi
push ebx
push 0x1003764
push 0x2d
call fcn.010108bb
push eax
push 0x1009ae8
call fcn.01010562
add esp, 0xc
jmp 0x1009aa8
push edi
push 0x1009ae0
call fcn.01010562
pop ecx
pop ecx
push dword [ebp - 0x14]
call sub.netutils.dll_NetApiBufferFree
jmp 0x1009ab5
mov byte [ebp - 2], bl
call fcn.010108a7
inc dword [ebp - 0xc]
mov eax, dword [ebp - 0xc]
add esi, 0x20
cmp eax, dword [ebp - 8]
jb 0x1009915
pop edi
pop esi
call fcn.010108de
push dword [ebp - 0x10]
call sub.netutils.dll_NetApiBufferFree
pop ebx
leave
ret