Function at 0x4e35d0
Capabilities:
Enumerate network shares

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x655e63
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x24
mov ecx, dword [ebp + 0xc]
lea eax, [ebp - 0x28]
push eax
push ecx
push 0
push 0
push 2
mov dword [ebp - 0x14], 0x4000
mov dword [ebp - 0x18], 0xffffffff
call sub.MPR.dll_WNetOpenEnumW
test eax, eax
jne 0x4e3833
mov edx, dword [ebp - 0x14]
push ebx
push esi
push edi
push edx
push 0x40
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
mov ebx, dword [ebp + 8]
mov edi, eax
mov dword [ebp - 0x2c], edi
jmp 0x4e3630
mov eax, dword [ebp - 0x14]
push eax
push 0
push edi
call fcn.006100a0
mov eax, dword [ebp - 0x28]
add esp, 0xc
lea ecx, [ebp - 0x14]
push ecx
push edi
lea edx, [ebp - 0x18]
push edx
push eax
call sub.MPR.dll_WNetEnumResourceW
test eax, eax
jne 0x4e3820
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x18], eax
jbe 0x4e3630
lea esi, [edi + 0x14]
mov dword [ebp - 0x24], esi
jmp 0x4e3670
cmp dword [esi - 0xc], 1
jne 0x4e37ee
mov edi, dword [esi]
push 0xc
call fcn.00611c8b
mov esi, eax
add esp, 4
mov dword [ebp - 0x30], esi
xor eax, eax
mov dword [ebp - 4], eax
cmp esi, eax
je 0x4e36b9
push edi
mov dword [esi + 4], eax
mov dword [esi + 8], 1
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov dword [esi], eax
test eax, eax
jne 0x4e36bb
test edi, edi
je 0x4e36bb
push 0x8007000e
call fcn.0060f000
xor esi, esi
mov dword [ebp - 0x1c], esi
mov dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x10], esi
test esi, esi
je 0x4e36af
mov dword [ebp - 4], 1
mov eax, dword [ebx + 4]
lea ecx, [ebp - 0x10]
cmp ecx, eax
jae 0x4e3746
mov edx, dword [ebx]
cmp edx, ecx
ja 0x4e3746
mov edi, ecx
mov ecx, dword [ebx + 8]
sub edi, edx
sar edi, 2
cmp eax, ecx
jne 0x4e3731
sub eax, edx
sar eax, 2
cmp eax, 0x3ffffffe
ja 0x4e3816
sub ecx, edx
inc eax
sar ecx, 2
cmp eax, ecx
jbe 0x4e3731
mov edx, ecx
shr edx, 1
mov esi, 0x3fffffff
sub esi, edx
cmp esi, ecx
jae 0x4e371e
xor ecx, ecx
jmp 0x4e3720
add ecx, edx
cmp ecx, eax
jae 0x4e3726
mov ecx, eax
push ecx
mov ecx, ebx
call fcn.004e34c0
mov esi, dword [ebp - 0x1c]
mov edx, dword [ebx]
mov ecx, dword [ebx + 4]
lea eax, [edx + edi*4]
push eax
push ecx
lea edx, [ebx + 0xc]
push edx
call fcn.004dd920
jmp 0x4e379d
mov ecx, dword [ebx + 8]
cmp eax, ecx
jne 0x4e378c
mov edx, dword [ebx]
sub eax, edx
sar eax, 2
cmp eax, 0x3ffffffe
ja 0x4e3816
sub ecx, edx
inc eax
sar ecx, 2
cmp eax, ecx
jbe 0x4e378c
mov edx, ecx
shr edx, 1
mov edi, 0x3fffffff
sub edi, edx
cmp edi, ecx
jae 0x4e377c
xor ecx, ecx
jmp 0x4e377e
add ecx, edx
cmp ecx, eax
jae 0x4e3784
mov ecx, eax
push ecx
mov ecx, ebx
call fcn.004e34c0
mov ecx, dword [ebx + 4]
lea eax, [ebp - 0x10]
push eax
push ecx
lea edx, [ebx + 0xc]
push edx
call fcn.004ddd40
add dword [ebx + 4], 4
add esp, 0xc
mov dword [ebp - 4], 0xffffffff
lea eax, [esi + 8]
push eax
call dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
test eax, eax
jne 0x4e37df
mov eax, dword [esi]
test eax, eax
je 0x4e37c6
push eax
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov eax, dword [esi + 4]
test eax, eax
je 0x4e37d6
push eax
call fcn.00611a0b
add esp, 4
push esi
call fcn.0060faf6
add esp, 4
mov edi, dword [ebp - 0x2c]
mov esi, dword [ebp - 0x24]
mov dword [ebp - 0x10], 0
jmp 0x4e37fb
lea ecx, [esi - 0x14]
push ecx
push ebx
call fcn.004e35d0
add esp, 8
mov eax, dword [ebp - 0x20]
inc eax
add esi, 0x20
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x24], esi
cmp eax, dword [ebp - 0x18]
jb 0x4e3670
jmp 0x4e3630
push str.vector_T__too_long
call fcn.005fb5fb
push edi
call dword [sym.imp.KERNEL32.dll_GlobalFree]
mov edx, dword [ebp - 0x28]
push edx
call sub.MPR.dll_WNetCloseEnum
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret