Function at 0x4483a1
Capabilities:
Enumerate network shares

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x20
or dword [ebp - 0x14], 0xffffffff
or dword [ebp - 0x10], 0xffffffff
push ebx
push esi
push edi
mov edi, dword [ebp + 8]
xor ebx, ebx
cmp edi, ebx
mov dword [ebp - 4], 0x4000
jne 0x4483db
push 0x104
push ebx
push 0x5ffa70
mov byte [0x51baaa], bl
call fcn.004ab5d0
add esp, 0xc
lea eax, [ebp - 0x14]
push eax
push edi
call fcn.00419000
test eax, eax
pop ecx
pop ecx
je 0x4483fd
mov eax, edi
neg eax
sbb eax, eax
not eax
and eax, 0x5ffa70
jmp 0x44871f
push dword [ebp - 4]
push 0x40
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
mov esi, eax
cmp esi, ebx
mov dword [ebp - 0x1c], esi
je 0x4483eb
xor edi, edi
jmp 0x448418
mov esi, dword [ebp - 0x1c]
cmp dword [ebp + 0x20], ebx
je 0x448434
cmp dword [ebp + 0x18], ebx
je 0x448429
push str._nStarting_New_Root_2:
jmp 0x44842e
push str._nStarting_New_Root:
call fcn.00448724
pop ecx
push dword [ebp - 4]
push ebx
push esi
call fcn.004ab5d0
add esp, 0xc
lea eax, [ebp - 4]
push eax
push esi
lea eax, [ebp - 0x10]
push eax
push dword [ebp - 0x14]
call sub.MPR.dll_WNetEnumResourceA
cmp eax, ebx
mov dword [ebp - 0x20], eax
jne 0x4486d9
xor edi, edi
cmp dword [ebp - 0x10], ebx
mov dword [ebp - 0xc], ebx
jle 0x448418
add esi, 0x14
cmp edi, ebx
jne 0x4486ea
mov eax, dword [esi]
cmp eax, ebx
je 0x4486c5
cmp dword [ebp + 0x20], ebx
je 0x44849b
test byte [esi - 8], 2
push eax
je 0x44848f
push str._n_tContainer:__s
jmp 0x448494
push str._n_tSearching:__s
call fcn.00448724
pop ecx
pop ecx
cmp dword [ebp + 0x18], ebx
jne 0x448619
test byte [esi - 8], 2
je 0x4486c5
mov edi, dword [esi]
mov ebx, str.TAMS
push ebx
push edi
call fcn.004777c9
test eax, eax
pop ecx
pop ecx
jne 0x4485ce
push ebx
push edi
call fcn.004aa910
test eax, eax
pop ecx
pop ecx
jne 0x4485ce
cmp byte [0x51baaa], al
je 0x4485c1
push str.Solaris
push dword [esi + 4]
call fcn.004777c9
test eax, eax
pop ecx
pop ecx
je 0x4485c1
push dword [esi]
call fcn.0044636f
test eax, eax
pop ecx
je 0x4485c1
push dword [esi]
call fcn.0044636f
xor ebx, ebx
cmp dword [ebp + 0x1c], ebx
pop ecx
mov edi, eax
je 0x44855a
mov dword [ebp - 8], ebx
mov dword [ebp - 0x18], 0xa
call fcn.00416bf0
test eax, eax
je 0x448535
mov dword [ebp - 0x18], 0x11
lea eax, [ebp - 8]
push eax
push ebx
push ebx
push ebx
push 1
mov ecx, edi
call fcn.004409c5
add esp, 0x14
test eax, eax
je 0x44855a
mov eax, dword [ebp - 8]
cmp eax, ebx
jle 0x44855a
cmp eax, dword [ebp - 0x18]
je 0x44855a
xor edi, edi
mov edx, edi
call fcn.00476b3a
test eax, eax
jne 0x4486c5
cmp dword [ebp + 0xc], ebx
je 0x4486c5
push dword [ebp + 0xc]
mov ebx, 0x5ffb78
push edi
push 0x4d09a8
push ebx
call fcn.004ab54e
push dword [ebp + 0x14]
push dword [ebp + 0x10]
push ebx
push str._nAttempting_logon_to:___s____s:_s_...
call fcn.00448724
push dword [ebp + 0x14]
mov ecx, ebx
push dword [ebp + 0x10]
call fcn.00446bfa
add esp, 0x28
test eax, eax
je 0x448692
push 0x4e0a1c
call fcn.00448724
pop ecx
xor edi, edi
jmp 0x4486c5
push dword [ebp + 0x20]
push dword [ebp + 0x1c]
push 0
jmp 0x4486ae
xor edi, edi
cmp dword [ebp + 0x20], edi
je 0x4485e0
push str._n_n_t_t_____________Entering_TAMS_Container______________
call fcn.00448724
pop ecx
cmp byte [0x51baaa], 0
push dword [ebp + 0x20]
lea eax, [esi - 0x14]
push dword [ebp + 0x1c]
push edi
push dword [ebp + 0x14]
push dword [ebp + 0x10]
push dword [ebp + 0xc]
push eax
jne 0x4486bb
mov byte [0x51baaa], 1
call fcn.004483a1
mov byte [0x51baaa], 0
jmp 0x4486c0
push str.Solaris
push dword [esi + 4]
call fcn.004777c9
test eax, eax
pop ecx
pop ecx
je 0x44869f
push dword [esi]
call fcn.0044636f
test eax, eax
pop ecx
je 0x44869f
push dword [esi]
call fcn.0044636f
cmp dword [ebp + 0x1c], ebx
pop ecx
mov edi, eax
je 0x44867f
push 0xa
mov dword [ebp - 8], ebx
pop ebx
call fcn.00416bf0
test eax, eax
je 0x448659
push 0x11
pop ebx
lea eax, [ebp - 8]
push eax
xor eax, eax
push eax
push eax
push eax
push 1
mov ecx, edi
call fcn.004409c5
add esp, 0x14
test eax, eax
je 0x44867f
cmp dword [ebp - 8], 0
jle 0x44867f
cmp dword [ebp - 8], ebx
je 0x44867f
xor edi, edi
mov edx, edi
call fcn.00476b3a
test eax, eax
jne 0x4486c5
cmp dword [ebp + 0xc], eax
jmp 0x44856c
push str.SUCCESS.
call fcn.00448724
pop ecx
jmp 0x4486c5
test byte [esi - 8], 2
je 0x4486c5
push dword [ebp + 0x20]
push dword [ebp + 0x1c]
push dword [ebp + 0x18]
push dword [ebp + 0x14]
lea eax, [esi - 0x14]
push dword [ebp + 0x10]
push dword [ebp + 0xc]
push eax
call fcn.004483a1
add esp, 0x1c
mov edi, eax
inc dword [ebp - 0xc]
mov eax, dword [ebp - 0xc]
add esi, 0x20
xor ebx, ebx
cmp eax, dword [ebp - 0x10]
jl 0x44846a
cmp dword [ebp - 0x20], 0x103
je 0x4486ea
cmp edi, ebx
je 0x448415
push dword [ebp - 0x1c]
call dword [sym.imp.KERNEL32.dll_GlobalFree]
push dword [ebp - 0x14]
call sub.MPR.dll_WNetCloseEnum
cmp dword [ebp + 8], ebx
je 0x448704
mov eax, edi
jmp 0x44871f
mov esi, 0x5ffa70
mov eax, esi
call fcn.00476abd
cmp edi, ebx
je 0x44871d
push edi
push esi
call fcn.004aa9a0
pop ecx
pop ecx
mov eax, esi
pop edi
pop esi
pop ebx
leave
ret