Function at 0x1075f93
Capabilities:
Enumerate network shares
Get disk information

Disassembly:
push 0xca8
mov eax, 0x10d0937
call fcn.01098a33
mov eax, dword [ebp + 8]
push 0
sub esp, 0x58
mov ecx, esp
mov dword [ebp - 0xc6c], esp
push 0xff
push 1
mov dword [ebp - 0xc48], eax
mov eax, dword [ebp + 0xc]
push 0x3f4
mov dword [ebp - 0xc70], eax
mov eax, dword [ebp + 0x10]
mov ebx, 0x101a9c0
push ebx
mov edi, 0x1019334
mov dword [ebp - 0xc74], eax
mov eax, dword [ebp + 0x14]
push edi
mov esi, 0x10192c8
push esi
mov dword [ebp - 0xc50], eax
call fcn.0109958e
lea ecx, [ebp - 0xcb4]
call fcn.0109aa5f
xor eax, eax
push 0x206
push eax
mov dword [ebp - 4], eax
mov dword [ebp - 0xc54], eax
lea eax, [ebp - 0x216]
xor ecx, ecx
push eax
mov word [ebp - 0x218], cx
call sub.msvcrt.dll_memset
and dword [ebp - 0xc58], 0
add esp, 0xc
mov dword [ebp - 0xc5c], 0x100599c
push dword [ebp - 0xc48]
lea eax, [ebp - 0x218]
push 0x104
push eax
mov byte [ebp - 4], 1
call fcn.010474dc
push 0x101a970
sub esp, 0x58
mov ecx, esp
mov dword [ebp - 0xc4c], esp
push 0xff
push 1
push 0x3ff
push ebx
push edi
push esi
mov dword [ebp - 0xcac], eax
call fcn.0109958e
lea eax, [ebp - 0xcb4]
push eax
call fcn.010468d9
mov eax, dword [ebp - 0xc48]
add esp, 0x60
lea ecx, [eax + 2]
mov dx, word [eax]
inc eax
inc eax
test dx, dx
jne 0x1076098
sub eax, ecx
mov ecx, dword [ebp - 0xc48]
sar eax, 1
cmp word [ecx + eax*2 - 2], 0x5c
je 0x1076103
push 0x100163c
push 0x104
lea eax, [ebp - 0x218]
push eax
call fcn.01047565
push 0x101a920
sub esp, 0x58
mov ecx, esp
mov dword [ebp - 0xc4c], esp
push 0xff
push 1
push 0x406
push ebx
push edi
push esi
mov dword [ebp - 0xcac], eax
call fcn.0109958e
lea eax, [ebp - 0xcb4]
push eax
call fcn.010468d9
add esp, 0x60
lea eax, [ebp - 0xc54]
push eax
push 0
push 0
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.KERNEL32.dll_GetVolumePathNamesForVolumeNameW]
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xea
je 0x107617c
call dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jle 0x107613c
and eax, 0xffff
or eax, 0x80070000
push eax
lea eax, [ebp - 0x218]
push eax
push 0x101a8b0
sub esp, 0x58
mov ecx, esp
mov dword [ebp - 0xc4c], esp
push 0xff
push 6
push 0x40e
push ebx
push edi
push esi
call fcn.0109958e
lea eax, [ebp - 0xcb4]
push eax
call fcn.0109a735
add esp, 0x68
jmp 0x1076572
mov eax, dword [ebp - 0xc54]
lea eax, [eax + eax + 2]
push eax
lea ecx, [ebp - 0xc5c]
call fcn.0104a2be
lea eax, [ebp - 0xc54]
push eax
push dword [ebp - 0xc54]
lea eax, [ebp - 0x218]
push dword [ebp - 0xc58]
push eax
call dword [sym.imp.KERNEL32.dll_GetVolumePathNamesForVolumeNameW]
test eax, eax
jne 0x107621b
call dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jle 0x10761ca
and eax, 0xffff
or eax, 0x80070000
push eax
lea eax, [ebp - 0x218]
push eax
push 0x101a8b0
sub esp, 0x58
mov ecx, esp
mov dword [ebp - 0xc4c], esp
push 0xff
push 6
push 0x41b
push ebx
push edi
push esi
call fcn.0109958e
lea eax, [ebp - 0xcb4]
push eax
call fcn.0109a735
add esp, 0x68
lea ecx, [ebp - 0xc5c]
call fcn.0109fd60
mov eax, dword [ebp - 0xc50]
and dword [eax], 0
jmp 0x1076230
mov eax, dword [ebp - 0xc58]
mov ecx, dword [ebp - 0xc50]
and dword [ebp - 0xc58], 0
mov dword [ecx], eax
xor eax, eax
push 0x206
push eax
mov dword [ebp - 0xc60], eax
mov dword [ebp - 0xc6c], eax
lea eax, [ebp - 0x41e]
xor ecx, ecx
push eax
mov word [ebp - 0x420], cx
call sub.msvcrt.dll_memset
xor eax, eax
push 0x206
push eax
mov word [ebp - 0x628], ax
lea eax, [ebp - 0x626]
push eax
call sub.msvcrt.dll_memset
xor eax, eax
push 0x206
push eax
mov word [ebp - 0xa38], ax
lea eax, [ebp - 0xa36]
push eax
call sub.msvcrt.dll_memset
xor eax, eax
push 0x206
push eax
mov word [ebp - 0x830], ax
lea eax, [ebp - 0x82e]
push eax
call sub.msvcrt.dll_memset
add esp, 0x30
push 0x104
lea eax, [ebp - 0x830]
push eax
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.KERNEL32.dll_GetVolumeNameForVolumeMountPointW]
test eax, eax
jne 0x1076316
lea eax, [ebp - 0x218]
push eax
push 0x101a860
call dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jle 0x10762ea
and eax, 0xffff
or eax, 0x80070000
push eax
sub esp, 0x58
mov ecx, esp
mov dword [ebp - 0xc4c], esp
push 0xff
push 6
push 0x431
push ebx
push edi
push esi
call fcn.0109958e
lea eax, [ebp - 0xcb4]
push eax
call fcn.0109c5e0
and dword [ebp - 0xc64], 0
mov dword [ebp - 0xc68], 0x101a1a4
lea ecx, [ebp - 0xc68]
mov byte [ebp - 4], 2
call fcn.01073e1f
push 0
lea eax, [ebp - 0xc6c]
push eax
lea eax, [ebp - 0xc60]
push eax
push 0xffffffffffffffff
lea eax, [ebp - 0xc64]
push eax
push 0x1f6
push 0
call sub.NETAPI32.dll_NetShareEnum
test eax, eax
je 0x1076398
push eax
push 0x101a824
sub esp, 0x58
mov ecx, esp
mov dword [ebp - 0xc4c], esp
push 0xff
push 6
push 0x442
push ebx
push edi
push esi
call fcn.0109958e
lea eax, [ebp - 0xcb4]
push eax
call fcn.0109a735
add esp, 0x64
jmp 0x1076552
and dword [ebp - 0xc50], 0
cmp dword [ebp - 0xc60], 0
jbe 0x1076552
mov eax, dword [ebp - 0xc64]
add eax, 0x18
mov dword [ebp - 0xc48], eax
cmp dword [eax - 0x14], 0
jne 0x107652b
push 0x104
lea ecx, [ebp - 0x420]
push ecx
push dword [eax]
call dword [sym.imp.KERNEL32.dll_GetVolumePathNameW]
test eax, eax
jne 0x1076432
call dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jle 0x10763f1
and eax, 0xffff
or eax, 0x80070000
push eax
mov eax, dword [ebp - 0xc48]
push dword [eax]
push 0x101a7d0
sub esp, 0x58
mov ecx, esp
mov dword [ebp - 0xc4c], esp
push 0xff
push 6
push 0x44d
push ebx
push edi
push esi
call fcn.0109958e
lea eax, [ebp - 0xcb4]
push eax
call fcn.0109a735
add esp, 0x68
jmp 0x107652b
push 0x104
lea eax, [ebp - 0x628]
push eax
lea eax, [ebp - 0x420]
push eax
call dword [sym.imp.KERNEL32.dll_GetVolumeNameForVolumeMountPointW]
test eax, eax
jne 0x1076489
call dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jle 0x1076463
and eax, 0xffff
or eax, 0x80070000
push eax
lea eax, [ebp - 0x420]
push eax
push 0x101a760
sub esp, 0x58
mov ecx, esp
mov dword [ebp - 0xc4c], esp
push 0xff
push 6
push 0x459
jmp 0x1076416
push 0x104
lea eax, [ebp - 0xa38]
push eax
lea eax, [ebp - 0x628]
push eax
call dword [sym.imp.KERNEL32.dll_GetVolumeNameForVolumeMountPointW]
test eax, eax
jne 0x10764e3
call dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jle 0x10764ba
and eax, 0xffff
or eax, 0x80070000
push eax
lea eax, [ebp - 0x628]
push eax
push 0x101a6f0
sub esp, 0x58
mov ecx, esp
mov dword [ebp - 0xc4c], esp
push 0xff
push 6
push 0x45d
jmp 0x1076416
lea eax, [ebp - 0x830]
push eax
lea eax, [ebp - 0xa38]
push eax
call dword [sym.imp.msvcrt.dll__wcsicmp]
pop ecx
pop ecx
test eax, eax
jne 0x107652b
lea eax, [ebp - 0x420]
push eax
mov eax, dword [ebp - 0xc48]
add eax, 0xffffffe8
push eax
lea ecx, [ebp - 0xc44]
call fcn.01074482
mov ecx, dword [ebp - 0xc70]
lea eax, [ebp - 0xc44]
push eax
call fcn.01075f64
inc dword [ebp - 0xc50]
mov eax, dword [ebp - 0xc48]
mov ecx, dword [ebp - 0xc50]
add eax, 0x28
mov dword [ebp - 0xc48], eax
cmp ecx, dword [ebp - 0xc60]
jb 0x10763bb
mov eax, dword [ebp - 0xc64]
mov ecx, dword [ebp - 0xc74]
and dword [ebp - 0xc64], 0
mov dword [ecx], eax
lea ecx, [ebp - 0xc68]
call fcn.0107537f
lea ecx, [ebp - 0xc5c]
call fcn.0104a1a3
lea ecx, [ebp - 0xcb4]
call fcn.0109ab18
call fcn.01098ac5
ret 0x10