Function at 0x617130
Capabilities:
Enumerate network shares

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x144
push ebx
push esi
push edi
lea edi, [ebp - 0x144]
mov ecx, 0x51
mov eax, 0xcccccccc
rep stosd dword es:[edi], eax
mov dword [ebp - 8], 0
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x20], 0xffffffff
mov dword [ebp - 0x2c], 0x4000
mov dword [ebp - 0x38], 0xffffffff
mov dword [ebp - 0x44], 0
mov dword [ebp - 0x50], 0
cmp dword [ebp + 8], 0
jne 0x6171a0
mov byte [0x9350db], 0
push 0x104
push 0
push 0x936978
call fcn.00533469
add esp, 0xc
push 0x3a98
lea eax, [ebp - 0x20]
push eax
mov ecx, dword [ebp + 8]
push ecx
push 0
push 1
push 2
call fcn.005357cd
add esp, 0x18
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
je 0x6171dd
cmp dword [ebp + 8], 0
jne 0x6171d6
mov eax, 0x936978
jmp 0x617783
xor eax, eax
jmp 0x617783
mov esi, esp
mov eax, dword [ebp - 0x2c]
push eax
push 0x40
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
cmp esi, esp
call fcn.00535fca
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 0
jne 0x617214
cmp dword [ebp + 8], 0
jne 0x61720d
mov eax, 0x936978
jmp 0x617783
xor eax, eax
jmp 0x617783
mov dword [ebp - 8], 0
cmp dword [ebp + 0x20], 0
je 0x617243
cmp dword [ebp + 0x18], 0
je 0x617236
push str._nStarting_New_Root_2:
call fcn.006179e0
add esp, 4
jmp 0x617243
push str._nStarting_New_Root:
call fcn.006179e0
add esp, 4
mov eax, dword [ebp - 0x2c]
push eax
push 0
mov ecx, dword [ebp - 0x44]
push ecx
call fcn.00533469
add esp, 0xc
lea eax, [ebp - 0x2c]
push eax
mov ecx, dword [ebp - 0x44]
push ecx
lea edx, [ebp - 0x38]
push edx
mov eax, dword [ebp - 0x20]
push eax
call fcn.00534643
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
jne 0x617719
mov dword [ebp - 8], 0
mov dword [ebp - 0x50], 0
jmp 0x617290
mov eax, dword [ebp - 0x50]
add eax, 1
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0x50]
cmp eax, dword [ebp - 0x38]
jge 0x617719
cmp dword [ebp - 8], 0
jne 0x617719
mov eax, dword [ebp - 0x50]
shl eax, 5
mov ecx, dword [ebp - 0x44]
cmp dword [ecx + eax + 0x14], 0
jne 0x6172b8
jmp 0x617287
cmp dword [ebp + 0x20], 0
je 0x617308
mov eax, dword [ebp - 0x50]
shl eax, 5
mov ecx, dword [ebp - 0x44]
mov edx, dword [ecx + eax + 0xc]
and edx, 2
je 0x6172ed
mov eax, dword [ebp - 0x50]
shl eax, 5
mov ecx, dword [ebp - 0x44]
mov edx, dword [ecx + eax + 0x14]
push edx
push str._n_tContainer:__s
call fcn.006179e0
add esp, 8
jmp 0x617308
mov eax, dword [ebp - 0x50]
shl eax, 5
mov ecx, dword [ebp - 0x44]
mov edx, dword [ecx + eax + 0x14]
push edx
push str._n_tSearching:__s
call fcn.006179e0
add esp, 8
cmp dword [ebp + 0x18], 0
jne 0x61759e
mov eax, dword [ebp - 0x50]
shl eax, 5
mov ecx, dword [ebp - 0x44]
mov edx, dword [ecx + eax + 0xc]
and edx, 2
je 0x617599
push str.TAMS
mov eax, dword [ebp - 0x50]
shl eax, 5
mov ecx, dword [ebp - 0x44]
mov edx, dword [ecx + eax + 0x14]
push edx
call fcn.0053446d
add esp, 8
test eax, eax
jne 0x61736a
push str.TAMS
mov eax, dword [ebp - 0x50]
shl eax, 5
mov ecx, dword [ebp - 0x44]
mov edx, dword [ecx + eax + 0x14]
push edx
call fcn.00533658
add esp, 8
test eax, eax
je 0x6173f7
cmp dword [ebp + 0x20], 0
je 0x61737d
push str._n_n_t_t_____________Entering_TAMS_Container______________
call fcn.006179e0
add esp, 4
movsx eax, byte [0x9350db]
test eax, eax
jne 0x6173c5
mov byte [0x9350db], 1
mov eax, dword [ebp + 0x20]
push eax
mov ecx, dword [ebp + 0x1c]
push ecx
mov edx, dword [ebp + 0x18]
push edx
mov eax, dword [ebp + 0x14]
push eax
mov ecx, dword [ebp + 0x10]
push ecx
mov edx, dword [ebp + 0xc]
push edx
mov eax, dword [ebp - 0x50]
shl eax, 5
add eax, dword [ebp - 0x44]
push eax
call fcn.00617130
add esp, 0x1c
mov dword [ebp - 8], eax
mov byte [0x9350db], 0
jmp 0x6173f2
mov eax, dword [ebp + 0x20]
push eax
mov ecx, dword [ebp + 0x1c]
push ecx
mov edx, dword [ebp + 0x18]
push edx
mov eax, dword [ebp + 0x14]
push eax
mov ecx, dword [ebp + 0x10]
push ecx
mov edx, dword [ebp + 0xc]
push edx
mov eax, dword [ebp - 0x50]
shl eax, 5
add eax, dword [ebp - 0x44]
push eax
call fcn.00617130
add esp, 0x1c
mov dword [ebp - 8], eax
jmp 0x617599
movsx eax, byte [0x9350db]
test eax, eax
je 0x61756c
push str.Solaris
mov eax, dword [ebp - 0x50]
shl eax, 5
mov ecx, dword [ebp - 0x44]
mov edx, dword [ecx + eax + 0x18]
push edx
call fcn.0053446d
add esp, 8
test eax, eax
je 0x61753d
mov eax, dword [ebp - 0x50]
shl eax, 5
mov ecx, dword [ebp - 0x44]
mov edx, dword [ecx + eax + 0x14]
push edx
call fcn.00532104
add esp, 4
test eax, eax
je 0x61753d
mov eax, dword [ebp - 0x50]
shl eax, 5
mov ecx, dword [ebp - 0x44]
mov edx, dword [ecx + eax + 0x14]
push edx
call fcn.00532104
add esp, 4
mov dword [ebp - 8], eax
cmp dword [ebp + 0x1c], 0
je 0x6174b5
mov dword [ebp - 0x5c], 0
mov dword [ebp - 0x68], 0xa
call fcn.0053318f
test eax, eax
je 0x617484
mov dword [ebp - 0x68], 0x11
lea eax, [ebp - 0x5c]
push eax
push 0
push 0
push 0
push 1
mov ecx, dword [ebp - 8]
push ecx
call fcn.005335fe
add esp, 0x18
test eax, eax
je 0x6174b5
cmp dword [ebp - 0x5c], 0
jle 0x6174b5
mov eax, dword [ebp - 0x5c]
cmp eax, dword [ebp - 0x68]
je 0x6174b5
mov dword [ebp - 8], 0
mov eax, dword [ebp - 8]
push eax
call fcn.00532325
add esp, 4
test eax, eax
jne 0x61753b
cmp dword [ebp + 0xc], 0
je 0x61753b
mov eax, dword [ebp + 0xc]
push eax
mov ecx, dword [ebp - 8]
push ecx
push 0x7a97c4
push 0x936a80
call fcn.00533cfc
add esp, 0x10
mov eax, dword [ebp + 0x14]
push eax
mov ecx, dword [ebp + 0x10]
push ecx
push 0x936a80
push str._nAttempting_logon_to:___s____s:_s_...
call fcn.006179e0
add esp, 0x10
mov eax, dword [ebp + 0x14]
push eax
mov ecx, dword [ebp + 0x10]
push ecx
push 0x936a80
call fcn.005347e2
add esp, 0xc
test eax, eax
je 0x61752e
push 0x7bf238
call fcn.006179e0
add esp, 4
mov dword [ebp - 8], 0
jmp 0x61753b
push str.SUCCESS.
call fcn.006179e0
add esp, 4
jmp 0x61756a
mov eax, dword [ebp + 0x20]
push eax
mov ecx, dword [ebp + 0x1c]
push ecx
mov edx, dword [ebp + 0x18]
push edx
mov eax, dword [ebp + 0x14]
push eax
mov ecx, dword [ebp + 0x10]
push ecx
mov edx, dword [ebp + 0xc]
push edx
mov eax, dword [ebp - 0x50]
shl eax, 5
add eax, dword [ebp - 0x44]
push eax
call fcn.00617130
add esp, 0x1c
mov dword [ebp - 8], eax
jmp 0x617599
mov eax, dword [ebp + 0x20]
push eax
mov ecx, dword [ebp + 0x1c]
push ecx
mov edx, dword [ebp + 0x18]
push edx
mov eax, dword [ebp + 0x14]
push eax
mov ecx, dword [ebp + 0x10]
push ecx
mov edx, dword [ebp + 0xc]
push edx
mov eax, dword [ebp - 0x50]
shl eax, 5
add eax, dword [ebp - 0x44]
push eax
call fcn.00617130
add esp, 0x1c
mov dword [ebp - 8], eax
jmp 0x617714
push str.Solaris
mov eax, dword [ebp - 0x50]
shl eax, 5
mov ecx, dword [ebp - 0x44]
mov edx, dword [ecx + eax + 0x18]
push edx
call fcn.0053446d
add esp, 8
test eax, eax
je 0x6176d5
mov eax, dword [ebp - 0x50]
shl eax, 5
mov ecx, dword [ebp - 0x44]
mov edx, dword [ecx + eax + 0x14]
push edx
call fcn.00532104
add esp, 4
test eax, eax
je 0x6176d5
mov eax, dword [ebp - 0x50]
shl eax, 5
mov ecx, dword [ebp - 0x44]
mov edx, dword [ecx + eax + 0x14]
push edx
call fcn.00532104
add esp, 4
mov dword [ebp - 8], eax
cmp dword [ebp + 0x1c], 0
je 0x61764d
mov dword [ebp - 0x74], 0
mov dword [ebp - 0x80], 0xa
call fcn.0053318f
test eax, eax
je 0x61761c
mov dword [ebp - 0x80], 0x11
lea eax, [ebp - 0x74]
push eax
push 0
push 0
push 0
push 1
mov ecx, dword [ebp - 8]
push ecx
call fcn.005335fe
add esp, 0x18
test eax, eax
je 0x61764d
cmp dword [ebp - 0x74], 0
jle 0x61764d
mov eax, dword [ebp - 0x74]
cmp eax, dword [ebp - 0x80]
je 0x61764d
mov dword [ebp - 8], 0
mov eax, dword [ebp - 8]
push eax
call fcn.00532325
add esp, 4
test eax, eax
jne 0x6176d3
cmp dword [ebp + 0xc], 0
je 0x6176d3
mov eax, dword [ebp + 0xc]
push eax
mov ecx, dword [ebp - 8]
push ecx
push 0x7a97c4
push 0x936a80
call fcn.00533cfc
add esp, 0x10
mov eax, dword [ebp + 0x14]
push eax
mov ecx, dword [ebp + 0x10]
push ecx
push 0x936a80
push str._nAttempting_logon_to:___s____s:_s_...
call fcn.006179e0
add esp, 0x10
mov eax, dword [ebp + 0x14]
push eax
mov ecx, dword [ebp + 0x10]
push ecx
push 0x936a80
call fcn.005347e2
add esp, 0xc
test eax, eax
je 0x6176c6
push 0x7bf238
call fcn.006179e0
add esp, 4
mov dword [ebp - 8], 0
jmp 0x6176d3
push str.SUCCESS.
call fcn.006179e0
add esp, 4
jmp 0x617714
mov eax, dword [ebp - 0x50]
shl eax, 5
mov ecx, dword [ebp - 0x44]
mov edx, dword [ecx + eax + 0xc]
and edx, 2
je 0x617714
mov eax, dword [ebp + 0x20]
push eax
mov ecx, dword [ebp + 0x1c]
push ecx
mov edx, dword [ebp + 0x18]
push edx
mov eax, dword [ebp + 0x14]
push eax
mov ecx, dword [ebp + 0x10]
push ecx
mov edx, dword [ebp + 0xc]
push edx
mov eax, dword [ebp - 0x50]
shl eax, 5
add eax, dword [ebp - 0x44]
push eax
call fcn.00617130
add esp, 0x1c
mov dword [ebp - 8], eax
jmp 0x617287
cmp dword [ebp - 0x14], 0x103
je 0x61772c
cmp dword [ebp - 8], 0
je 0x61721b
mov esi, esp
mov eax, dword [ebp - 0x44]
push eax
call dword [sym.imp.KERNEL32.dll_GlobalFree]
cmp esi, esp
call fcn.00535fca
mov dword [ebp - 0x44], 0
mov eax, dword [ebp - 0x20]
push eax
call fcn.0053200f
cmp dword [ebp + 8], 0
je 0x61775a
mov eax, dword [ebp - 8]
jmp 0x617783
push 0x936978
call fcn.005340b7
add esp, 4
cmp dword [ebp - 8], 0
je 0x61777e
mov eax, dword [ebp - 8]
push eax
push 0x936978
call fcn.00533662
add esp, 8
mov eax, 0x936978
push edx
mov ecx, ebp
push eax
lea edx, [0x6177a8]
call fcn.0053491d
pop eax
pop edx
pop edi
pop esi
pop ebx
add esp, 0x144
cmp ebp, esp
call fcn.00535fca
mov esp, ebp
pop ebp
ret