Function at 0x401640
Capabilities:
Enumerate network shares

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x230
push ebx
push esi
push edi
or dword [ebp - 8], 0xffffffff
sub ebx, ebx
mov dword [ebp - 4], 0
lea edi, [ebp - 0x218]
mov esi, 0x40c2f4
nop
nop
push 4
pop ecx
rep movsb byte es:[edi], byte [esi]
lea eax, [ebp - 0x107]
push eax
call fcn.00401530
pop ecx
mov dword [ebp - 0x210], 0x400
mov eax, dword [ebp - 0x210]
push eax
call fcn.00403dc0
pop ecx
mov dword [ebp - 4], eax
mov dword [ebp - 0x22c], eax
push eax
pop edx
mov ecx, dword [ebp - 0x210]
xor eax, eax
push edi
push edx
pop edi
rep stosb byte es:[edi], al
pop edi
mov eax, edx
mov eax, dword [ebp - 0x22c]
test eax, eax
jne 0x4016bc
or eax, 0xffffffff
jmp 0x40195f
lea eax, [ebp - 0x214]
push eax
mov eax, dword [ebp + 8]
push eax
push 0
push 0
push 2
call sub.MPR.dll_WNetOpenEnumA
mov dword [ebp - 0x10c], eax
lea eax, [ebp - 0x210]
push eax
mov eax, dword [ebp - 4]
push eax
lea eax, [ebp - 8]
push eax
mov eax, dword [ebp - 0x214]
push eax
call sub.MPR.dll_WNetEnumResourceA
mov dword [ebp - 0x10c], eax
cmp eax, 0xea
jne 0x401716
mov eax, dword [ebp - 0x210]
push eax
mov eax, dword [ebp - 4]
push eax
call fcn.004041b0
add esp, 8
mov dword [ebp - 4], eax
cmp dword [ebp - 0x10c], 0
je 0x40173c
push str.Error:
call fcn.004021e0
pop ecx
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
call fcn.004022e0
pop ecx
jmp 0x401947
xor ebx, ebx
jmp 0x40191a
push ebx
pop eax
shl eax, 5
mov edx, dword [ebp - 4]
mov ecx, dword [edx + eax + 0x14]
lea edx, [ebp - 0x107]
xor eax, eax
mov al, byte [edx]
mov ah, byte [ecx]
sub ah, al
jne 0x40176b
test al, al
je 0x401770
add edx, 1
add ecx, 1
jmp 0x401757
sbb eax, eax
sbb eax, 0xffffffff
or eax, eax
jne 0x401780
add ebx, 1
cmp ebx, dword [ebp - 8]
jae 0x401923
mov eax, ebx
shl eax, 5
mov edx, dword [ebp - 4]
mov eax, dword [edx + eax + 8]
mov dword [ebp - 0x230], eax
cmp eax, 2
je 0x4017a5
cmp eax, 3
je 0x4018c6
jmp 0x401900
lea ecx, [ebp - 0x20b]
mov eax, ebx
shl eax, 5
mov edx, dword [ebp - 4]
mov edx, dword [edx + eax + 0x14]
push ecx
sub ecx, edx
mov al, byte [edx]
mov byte [ecx + edx], al
add edx, 1
test al, al
jne 0x4017ba
pop eax
lea eax, [ebp - 0x20b]
push eax
call fcn.00401d40
pop ecx
lea eax, [ebp - 0x20b]
push eax
call fcn.004032f0
pop ecx
cmp eax, 0xffffffff
je 0x401900
mov eax, ebx
shl eax, 5
mov edx, dword [ebp - 4]
mov eax, dword [edx + eax + 0x14]
push eax
call fcn.00402c20
pop ecx
or eax, eax
jne 0x401823
push 0
push 0
push ebx
pop eax
shl eax, 5
mov edx, dword [ebp - 4]
mov eax, dword [edx + eax + 0x14]
push eax
mov eax, dword [ebp + 0xc]
push eax
call fcn.00401590
add esp, 0x10
jmp 0x401900
lea eax, [ebp - 0x225]
push eax
mov eax, dword [ebp - 0x218]
push eax
push ebx
pop eax
shl eax, 5
mov edx, dword [ebp - 4]
mov eax, dword [edx + eax + 0x14]
push eax
call fcn.00402b20
add esp, 0xc
test eax, eax
jne 0x401876
lea eax, [ebp - 0x225]
push eax
mov eax, dword [ebp - 0x218]
push eax
mov eax, ebx
shl eax, 5
mov edx, dword [ebp - 4]
mov eax, dword [edx + eax + 0x14]
push eax
mov eax, dword [ebp + 0xc]
push eax
call fcn.00401590
add esp, 0x10
jmp 0x401900
lea eax, [ebp - 0x225]
push eax
mov eax, dword [ebp - 0x218]
push eax
push ebx
pop eax
shl eax, 5
mov edx, dword [ebp - 4]
mov eax, dword [edx + eax + 0x14]
push eax
call fcn.00402a20
add esp, 0xc
or eax, eax
jne 0x401900
lea eax, [ebp - 0x225]
push eax
mov eax, dword [ebp - 0x218]
push eax
push ebx
pop eax
shl eax, 5
mov edx, dword [ebp - 4]
mov eax, dword [edx + eax + 0x14]
push eax
mov eax, dword [ebp + 0xc]
push eax
call fcn.00401590
add esp, 0x10
jmp 0x401900
push ebx
pop eax
shl eax, 5
mov edx, dword [ebp - 4]
cmp dword [edx + eax + 4], 1
jne 0x401900
lea eax, [ebp - 0x225]
push eax
mov eax, dword [ebp - 0x218]
push eax
push ebx
pop eax
shl eax, 5
mov edx, dword [ebp - 4]
mov eax, dword [edx + eax + 0x14]
push eax
mov eax, dword [ebp + 0xc]
push eax
call fcn.004013b0
add esp, 0x10
or eax, eax
jne 0x401900
mov eax, dword [ebp + 0xc]
push eax
push ebx
pop eax
shl eax, 5
mov edx, dword [ebp - 4]
add eax, edx
push eax
call fcn.00401640
add esp, 8
add ebx, 1
cmp ebx, dword [ebp - 8]
jb 0x401743
mov eax, dword [sym.imp.KERNEL32.dll_GetLastError]
or eax, eax
jne 0x401942
push 0
push 0
push ebx
pop eax
shl eax, 5
mov edx, dword [ebp - 4]
mov eax, dword [edx + eax + 0x14]
push eax
call sub.MPR.dll_WNetCancelConnection2A
jmp 0x4016d8
mov eax, dword [ebp - 0x214]
push eax
call sub.MPR.dll_WNetCloseEnum
mov eax, dword [ebp - 4]
push eax
call fcn.00404670
pop ecx
sub eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret