Function at 0x4a7018
Capabilities:
Enumerate network shares

Disassembly:
push 0x64
mov eax, 0x5254e5
call fcn.004d8abf
mov dword [ebp - 0x20], edx
mov ebx, ecx
mov dword [ebp - 0x2c], ebx
mov eax, dword [ebp + 0xc]
xor esi, esi
cmp dword [eax + 4], 0xa
jbe 0x4a705a
push 0x54b1
push 0x80004005
push ecx
mov ecx, esp
push str.Depth_exceeded
call fcn.00406fea
mov ecx, ebx
call fcn.00406620
jmp 0x4a72ec
mov dword [ebp - 0x10], esi
lea eax, [ebp - 0x10]
mov dword [ebp - 4], esi
push eax
push dword [ebp + 8]
push esi
push esi
push 2
call dword [sym.imp.MPR.dll_WNetOpenEnumW]
test eax, eax
je 0x4a70a7
movzx ecx, ax
or ecx, 0x80070000
test eax, eax
push 0x54bf
cmovle ecx, eax
mov eax, 0x80004005
test ecx, ecx
cmovs eax, ecx
push eax
push ecx
mov ecx, esp
call fcn.0040687a
mov ecx, ebx
call fcn.00406620
jmp 0x4a72dd
push ecx
push 0x4000
lea ecx, [ebp - 0x40]
call fcn.004ae76d
mov byte [ebp - 4], 1
jmp 0x4a7200
cmp dword [ebp - 0x14], 0
mov edi, esi
mov dword [ebp - 0x24], edi
jbe 0x4a7200
mov esi, dword [ebp - 0x40]
add esi, 0x14
push 0x53d648
push dword [esi]
call fcn.004e370b
pop ecx
pop ecx
test eax, eax
je 0x4a71ee
lea ecx, [ebp - 0x70]
call fcn.00498f79
mov eax, dword [ebp + 0xc]
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 2
cmp ecx, eax
je 0x4a7109
mov eax, dword [eax]
push eax
push dword [eax]
call fcn.004bf5e7
push dword [esi]
lea ecx, [ebp - 0x1c]
call fcn.00406fea
lea eax, [ebp - 0x1c]
mov byte [ebp - 4], 3
push eax
lea ecx, [ebp - 0x70]
call fcn.004ad9ab
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x1c]
lea ecx, [ecx - 0x10]
call fcn.00407189
cmp dword [esi - 0xc], 2
lea edi, [esi - 8]
sete byte [ebp - 0x68]
cmp dword [esi - 0xc], 1
sete byte [ebp - 0x67]
cmp dword [esi - 0xc], 3
jne 0x4a7154
test byte [edi], 2
je 0x4a71d4
mov edx, dword [ebp - 0x20]
lea eax, [ebp - 0x70]
push eax
lea ecx, [ebp - 0x4c]
call fcn.004a68c7
pop ecx
mov byte [ebp - 4], 4
cmp dword [ebp - 0x4c], 0
jl 0x4a7242
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x44]
lea ecx, [ecx - 0x10]
call fcn.00407189
test byte [edi], 2
je 0x4a71d4
mov edx, dword [ebp - 0x20]
lea eax, [ebp - 0x70]
push eax
lea eax, [esi - 0x14]
push eax
lea ecx, [ebp - 0x58]
call fcn.004a7018
pop ecx
pop ecx
mov byte [ebp - 4], 6
cmp dword [ebp - 0x58], 0
jge 0x4a71c9
sub esp, 0xc
lea eax, [ebp - 0x58]
mov ecx, esp
push eax
call fcn.0040121b
lea ecx, [ebp - 0x28]
call fcn.0043aca5
mov ecx, dword [ebp - 0x28]
add esp, 0xc
lea ecx, [ecx - 0x10]
call fcn.00407189
mov ecx, dword [ebp - 0x50]
lea ecx, [ecx - 0x10]
call fcn.00407189
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0x5c]
lea ecx, [ecx - 0x10]
call fcn.00407189
lea ecx, [ebp - 0x70]
call fcn.004ad994
mov edi, dword [ebp - 0x24]
inc edi
add esi, 0x20
mov dword [ebp - 0x24], edi
cmp edi, dword [ebp - 0x14]
jb 0x4a70d3
xor esi, esi
mov eax, dword [ebp - 0x3c]
sub eax, dword [ebp - 0x40]
or dword [ebp - 0x14], 0xffffffff
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x18]
push eax
push dword [ebp - 0x40]
lea eax, [ebp - 0x14]
push eax
push dword [ebp - 0x10]
call dword [sym.imp.MPR.dll_WNetEnumResourceW]
test eax, eax
je 0x4a70be
cmp eax, 0x103
jne 0x4a72a8
lea ecx, [ebx + 8]
mov dword [ebx], esi
mov dword [ebx + 4], esi
call fcn.0040687a
jmp 0x4a72d5
cmp dword [ebp - 0x48], 0
mov eax, 0x5511
mov edi, dword [ebp - 0x44]
cmovne eax, dword [ebp - 0x48]
push eax
push dword [ebp - 0x4c]
push ecx
mov esi, esp
lea ecx, [edi - 0x10]
mov dword [ebp + 0xc], esi
call fcn.004070e7
add eax, 0x10
lea ecx, [ebp - 0x58]
mov dword [esi], eax
call fcn.00406620
lea eax, [ebp - 0x58]
mov byte [ebp - 4], 5
push eax
mov ecx, ebx
call fcn.0040121b
mov ecx, dword [ebp - 0x50]
lea ecx, [ecx - 0x10]
call fcn.00407189
lea ecx, [edi - 0x10]
call fcn.00407189
mov ecx, dword [ebp - 0x5c]
lea ecx, [ecx - 0x10]
call fcn.00407189
lea ecx, [ebp - 0x70]
call fcn.004ad994
jmp 0x4a72d5
movzx ecx, ax
or ecx, 0x80070000
test eax, eax
push 0x5534
cmovle ecx, eax
mov eax, 0x80004005
test ecx, ecx
cmovs eax, ecx
push eax
push ecx
mov ecx, esp
call fcn.0040687a
mov ecx, ebx
call fcn.00406620
lea ecx, [ebp - 0x40]
call fcn.00409384
cmp dword [ebp - 0x10], 0
je 0x4a72ec
push dword [ebp - 0x10]
call dword [sym.imp.MPR.dll_WNetCloseEnum]
mov eax, ebx
call fcn.004d8a8d
ret