Function at 0x1003d7b
Capabilities:
Enumerate network shares

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x2f0
or dword [ebp - 0x24], 0xffffffff
and byte [ebp - 2], 0
push ebx
push esi
push edi
xor esi, esi
lea eax, [ebp - 0x40]
push eax
push 0x10092c0
push 0xb
mov dword [ebp - 0x34], esi
mov dword [ebp - 0x2c], esi
mov dword [ebp - 0x38], esi
mov dword [ebp - 0x28], esi
mov byte [ebp - 1], 1
mov dword [ebp - 0x20], esi
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x1c], esi
mov dword [ebp - 0x14], esi
call fcn.01004d2a
cmp dword [0x100b3c0], esi
mov edi, 0x80000000
je 0x1003e81
and dword [ebp - 0xc], 0
mov eax, 0x100b3c0
mov esi, eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0xc], 0
jbe 0x1003dec
push 0xdb6
call fcn.01004bff
push dword [esi]
call fcn.01005b90
push 0x1009450
push dword [esi]
mov ebx, eax
call dword [sym.imp.msvcrt.dll_wcscmp]
test eax, eax
pop ecx
pop ecx
jne 0x1003e16
test ebx, ebx
jne 0x1003e11
mov dword [ebp - 0x24], edi
jmp 0x1003e5a
mov dword [ebp - 0x38], ebx
jmp 0x1003e5a
push str._NETWORK
push dword [esi]
call dword [sym.imp.msvcrt.dll_wcscmp]
test eax, eax
pop ecx
pop ecx
jne 0x1003e37
test ebx, ebx
je 0x1003e5a
cmp word [ebx], ax
je 0x1003e5a
mov dword [ebp - 0x28], ebx
jmp 0x1003e5a
push str._CACHE
push dword [esi]
call dword [sym.imp.msvcrt.dll_wcscmp]
test eax, eax
pop ecx
pop ecx
jne 0x1003e50
mov byte [ebp - 2], 1
jmp 0x1003e5a
push 0xdad
call fcn.01004bff
mov esi, dword [ebp - 0x3c]
add dword [ebp - 0xc], 4
add esi, 4
cmp dword [esi], 0
mov dword [ebp - 0x3c], esi
jne 0x1003ddc
cmp dword [ebp - 0x28], 0
je 0x1003e81
push dword [ebp + 8]
push dword [ebp - 0x28]
call fcn.01003b5b
xor ebx, ebx
cmp dword [ebp + 8], ebx
jne 0x1003f89
push dword [ebp - 0x38]
mov esi, dword [ebp - 0x24]
push esi
lea eax, [ebp - 8]
push eax
lea eax, [ebp - 0x10]
push eax
xor eax, eax
cmp esi, edi
setne al
add eax, 0x64
push eax
push ebx
call fcn.01006e81
cmp eax, 0xea
jne 0x1003ebc
mov dword [ebp - 0x2c], 1
jmp 0x1003ec6
cmp eax, ebx
je 0x1003ec6
push eax
call fcn.01004bff
cmp dword [ebp - 8], ebx
jne 0x1003ed0
call fcn.01004bed
xor eax, eax
cmp esi, edi
setne al
push 0x100374b
push 0x14
pop ebx
dec eax
and eax, 0xfffffff0
add eax, ebx
push eax
push dword [ebp - 8]
push dword [ebp - 0x10]
call dword [sym.imp.msvcrt.dll_qsort]
add esp, 0x10
cmp esi, edi
jne 0x1003f00
push 0x1260
jmp 0x1003f05
push 0x125c
call fcn.01004ba6
call fcn.01004b3d
cmp esi, edi
jne 0x1003f44
mov edi, dword [ebp - 0x10]
xor esi, esi
cmp dword [ebp - 8], esi
jbe 0x1003f7c
push 0
push dword [edi]
push ebx
call fcn.010048b1
push eax
push 0x10014d8
call fcn.01004883
pop ecx
pop ecx
call fcn.01004b84
inc esi
add edi, 4
cmp esi, dword [ebp - 8]
jb 0x1003f1d
jmp 0x1003f7c
mov esi, dword [ebp - 0x10]
xor edi, edi
cmp dword [ebp - 8], edi
jbe 0x1003f7c
push 0
push dword [esi]
push ebx
call fcn.010048b1
push eax
push 0x10014c8
call fcn.01004883
pop ecx
pop ecx
push dword [esi + 0x10]
push 0xffffffffffffffc8
call fcn.01006cbe
call fcn.01004b84
inc edi
add esi, ebx
cmp edi, dword [ebp - 8]
jb 0x1003f4e
push dword [ebp - 0x10]
call fcn.0100778c
jmp 0x1004389
cmp byte [ebp - 2], 1
jne 0x1003fad
push ebx
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 8]
push eax
push 0xffffffffffffffff
lea eax, [ebp - 0x10]
push eax
push 0x1f5
push dword [ebp + 8]
call sub.NETAPI32.dll_NetShareEnum
jmp 0x1003fb0
mov eax, dword [ebp + 8]
cmp byte [ebp - 2], 0
je 0x1003fbf
cmp eax, ebx
je 0x1003fdc
cmp eax, 0x35
je 0x1003fdc
push ebx
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 8]
push eax
push 0xffffffffffffffff
lea eax, [ebp - 0x10]
push eax
push 1
push dword [ebp + 8]
call sub.NETAPI32.dll_NetShareEnum
and byte [ebp - 1], 0
cmp eax, 0xea
jne 0x1003fec
mov dword [ebp - 0x2c], 1
jmp 0x1003ff6
cmp eax, ebx
je 0x1003ff6
push eax
call fcn.01004bff
cmp dword [ebp - 8], ebx
jne 0x1004000
call fcn.01004bed
and dword [ebp - 0xc], 0
cmp dword [ebp - 8], 0
mov esi, dword [ebp - 0x10]
mov ebx, dword [sym.imp.msvcrt.dll_wcscat]
jbe 0x1004153
push 0x24
push dword [esi]
call dword [sym.imp.msvcrt.dll_wcsrchr]
test eax, eax
pop ecx
pop ecx
je 0x1004032
cmp word [eax + 2], 0
je 0x1004130
push dword [esi]
call fcn.0100482d
cmp eax, dword [ebp - 0x20]
jle 0x1004041
mov dword [ebp - 0x20], eax
mov eax, dword [esi + 4]
and eax, 0x7fffffff
sub eax, 0
je 0x1004077
dec eax
je 0x100406f
dec eax
je 0x1004067
dec eax
je 0x100405f
push dword [0x10092f4]
jmp 0x100407d
push dword [0x10092ec]
jmp 0x100407d
push dword [0x10092dc]
jmp 0x100407d
push dword [0x10092e4]
jmp 0x100407d
push dword [0x10092d4]
call fcn.0100482d
mov edi, eax
cmp edi, dword [ebp - 0x18]
jle 0x100408c
mov dword [ebp - 0x18], edi
push dword [ebp + 8]
lea eax, [ebp - 0x2f0]
push eax
call dword [sym.imp.msvcrt.dll_wcscpy]
lea eax, [ebp - 0x2f0]
push 0x10014c4
push eax
call ebx
push dword [esi]
lea eax, [ebp - 0x2f0]
push eax
call ebx
add esp, 0x18
push 0x100d360
lea eax, [ebp - 0x2f0]
push eax
call fcn.0100377b
test eax, eax
jne 0x10040e1
push 0x100d360
call fcn.0100482d
mov edi, eax
cmp edi, dword [ebp - 0x1c]
jle 0x10040e1
mov dword [ebp - 0x1c], edi
cmp byte [ebp - 1], 1
jne 0x100411e
mov eax, dword [esi + 0xc]
and eax, 0x30
je 0x1004116
cmp eax, 0x10
je 0x100410e
cmp eax, 0x20
je 0x1004106
cmp eax, 0x30
jne 0x1004128
push dword [0x1009314]
jmp 0x1004121
push dword [0x100930c]
jmp 0x1004121
push dword [0x1009304]
jmp 0x1004121
push dword [0x10092fc]
jmp 0x1004121
push dword [esi + 8]
call fcn.0100482d
mov edi, eax
cmp edi, dword [ebp - 0x14]
jle 0x1004130
mov dword [ebp - 0x14], edi
inc dword [ebp - 0xc]
cmp byte [ebp - 1], 0
je 0x100413e
add esi, 0x10
jmp 0x1004141
add esi, 0xc
mov eax, dword [ebp - 0xc]
cmp eax, dword [ebp - 8]
jb 0x1004017
cmp dword [ebp - 0x20], 0
jne 0x1004158
call fcn.01004bed
xor eax, eax
cmp byte [ebp - 1], al
push 0x100374b
setne al
lea eax, [eax*4 + 0xc]
push eax
push dword [ebp - 8]
push dword [ebp - 0x10]
call dword [sym.imp.msvcrt.dll_qsort]
add esp, 0x10
push dword [ebp + 8]
push 0x1119
call fcn.01004bd0
lea eax, [ebp - 0x30]
push eax
push 1
push dword [ebp + 8]
call fcn.010073d4
test eax, eax
je 0x10041a2
call fcn.01004b84
jmp 0x10041bc
mov eax, dword [ebp - 0x30]
push dword [eax + 0x10]
push 0x10014b0
call fcn.01004883
pop ecx
pop ecx
push dword [ebp - 0x30]
call fcn.0100778c
push 2
pop esi
push esi
push 0x1288
push dword [ebp - 0x20]
call fcn.01006d2f
push esi
push 0x1289
push dword [ebp - 0x18]
mov edi, eax
call fcn.01006d2f
push esi
push 0x128a
push dword [ebp - 0x1c]
mov dword [ebp - 0x18], eax
call fcn.01006d2f
push esi
push 0x128b
push dword [ebp - 0x14]
mov dword [ebp - 0x1c], eax
call fcn.01006d2f
mov dword [ebp - 0x14], eax
call fcn.01004b84
or eax, 0xffffffff
cmp edi, eax
je 0x100421d
cmp dword [ebp - 0x18], eax
je 0x100421d
cmp dword [ebp - 0x1c], eax
je 0x100421d
cmp dword [ebp - 0x14], eax
jne 0x1004224
push 0x57
call fcn.01004bff
call fcn.01004b84
call fcn.01004b3d
and dword [ebp - 0xc], 0
cmp dword [ebp - 8], 0
mov esi, dword [ebp - 0x10]
jbe 0x1004369
push 0x24
push dword [esi]
call dword [sym.imp.msvcrt.dll_wcsrchr]
test eax, eax
pop ecx
pop ecx
je 0x100425a
cmp word [eax + 2], 0
je 0x100434c
push dword [esi]
push edi
call fcn.01006cbe
mov eax, dword [esi + 4]
and eax, 0x7fffffff
sub eax, 0
je 0x1004294
dec eax
je 0x100428d
dec eax
je 0x1004286
dec eax
je 0x100427f
mov eax, dword [0x10092f4]
jmp 0x1004299
mov eax, dword [0x10092ec]
jmp 0x1004299
mov eax, dword [0x10092dc]
jmp 0x1004299
mov eax, dword [0x10092e4]
jmp 0x1004299
mov eax, dword [0x10092d4]
push eax
push dword [ebp - 0x18]
call fcn.01006cbe
push dword [ebp + 8]
lea eax, [ebp - 0x2f0]
push eax
call dword [sym.imp.msvcrt.dll_wcscpy]
lea eax, [ebp - 0x2f0]
push 0x10014c4
push eax
call ebx
push dword [esi]
lea eax, [ebp - 0x2f0]
push eax
call ebx
add esp, 0x18
push 0x100d360
lea eax, [ebp - 0x2f0]
push eax
call fcn.0100377b
test eax, eax
je 0x10042ec
mov dword [ebp - 0x34], 1
jmp 0x10042f9
push 0x100d360
push dword [ebp - 0x1c]
call fcn.01006cbe
cmp byte [ebp - 1], 1
jne 0x100433c
mov eax, dword [esi + 0xc]
and eax, 0x30
je 0x100432b
cmp eax, 0x10
je 0x1004324
cmp eax, 0x20
je 0x100431d
cmp eax, 0x30
jne 0x1004334
mov eax, dword [0x1009314]
jmp 0x1004330
mov eax, dword [0x100930c]
jmp 0x1004330
mov eax, dword [0x1009304]
jmp 0x1004330
mov eax, dword [0x10092fc]
test eax, eax
jne 0x1004339
mov eax, 0x1001274
push eax
jmp 0x100433f
push dword [esi + 8]
push dword [ebp - 0x14]
call fcn.01006cbe
call fcn.01004b84
inc dword [ebp - 0xc]
cmp byte [ebp - 1], 0
je 0x100435a
add esi, 0x10
jmp 0x100435d
add esi, 0xc
mov eax, dword [ebp - 0xc]
cmp eax, dword [ebp - 8]
jb 0x100423f
push dword [ebp - 0x10]
call fcn.0100778c
cmp word [ebp - 0x34], 0
je 0x1004389
push 0xdb0
call fcn.01004ba6
push 1
call fcn.01004793
cmp word [ebp - 0x2c], 0
pop edi
pop esi
pop ebx
je 0x100439f
push 0xdb9
call fcn.01004ba6
jmp 0x10043a4
call fcn.01004b93
leave
ret 4