Function at 0x1075d57
Capabilities:
Enumerate network shares
Get disk information

Disassembly:
push 0xca8
mov eax, 0x10d06c8
call fcn.0109883f
mov eax, dword [ebp + 8]
push 0
sub esp, 0x58
mov ecx, esp
mov dword [ebp - 0xc6c], esp
push 0xff
push 1
mov dword [ebp - 0xc48], eax
mov eax, dword [ebp + 0xc]
push 0x3f4
mov dword [ebp - 0xc70], eax
mov eax, dword [ebp + 0x10]
mov ebx, 0x101a890
push ebx
mov edi, 0x1019204
mov dword [ebp - 0xc74], eax
mov eax, dword [ebp + 0x14]
push edi
mov esi, 0x1019198
push esi
mov dword [ebp - 0xc50], eax
call fcn.01099386
lea ecx, [ebp - 0xcb4]
call fcn.0109a83a
xor eax, eax
push 0x206
push eax
mov dword [ebp - 4], eax
mov dword [ebp - 0xc54], eax
lea eax, [ebp - 0x216]
xor ecx, ecx
push eax
mov word [ebp - 0x218], cx
call sub.msvcrt.dll_memset
and dword [ebp - 0xc58], 0
add esp, 0xc
mov dword [ebp - 0xc5c], 0x1005a68
push dword [ebp - 0xc48]
lea eax, [ebp - 0x218]
push 0x104
push eax
mov byte [ebp - 4], 1
call fcn.010474b6
push 0x101a840
sub esp, 0x58
mov ecx, esp
mov dword [ebp - 0xc4c], esp
push 0xff
push 1
push 0x3ff
push ebx
push edi
push esi
mov dword [ebp - 0xcac], eax
call fcn.01099386
lea eax, [ebp - 0xcb4]
push eax
call fcn.01046812
mov eax, dword [ebp - 0xc48]
add esp, 0x60
lea ecx, [eax + 2]
mov dx, word [eax]
inc eax
inc eax
test dx, dx
jne 0x1075e5c
sub eax, ecx
mov ecx, dword [ebp - 0xc48]
sar eax, 1
cmp word [ecx + eax*2 - 2], 0x5c
je 0x1075ec7
push 0x100163c
push 0x104
lea eax, [ebp - 0x218]
push eax
call fcn.0104753f
push 0x101a7f0
sub esp, 0x58
mov ecx, esp
mov dword [ebp - 0xc4c], esp
push 0xff
push 1
push 0x406
push ebx
push edi
push esi
mov dword [ebp - 0xcac], eax
call fcn.01099386
lea eax, [ebp - 0xcb4]
push eax
call fcn.01046812
add esp, 0x60
lea eax, [ebp - 0xc54]
push eax
push 0
push 0
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.KERNEL32.dll_GetVolumePathNamesForVolumeNameW]
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xea
je 0x1075f40
call dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jle 0x1075f00
and eax, 0xffff
or eax, 0x80070000
push eax
lea eax, [ebp - 0x218]
push eax
push 0x101a780
sub esp, 0x58
mov ecx, esp
mov dword [ebp - 0xc4c], esp
push 0xff
push 6
push 0x40e
push ebx
push edi
push esi
call fcn.01099386
lea eax, [ebp - 0xcb4]
push eax
call fcn.0109a510
add esp, 0x68
jmp 0x1076336
mov eax, dword [ebp - 0xc54]
lea eax, [eax + eax + 2]
push eax
lea ecx, [ebp - 0xc5c]
call fcn.0104a2b5
lea eax, [ebp - 0xc54]
push eax
push dword [ebp - 0xc54]
lea eax, [ebp - 0x218]
push dword [ebp - 0xc58]
push eax
call dword [sym.imp.KERNEL32.dll_GetVolumePathNamesForVolumeNameW]
test eax, eax
jne 0x1075fdf
call dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jle 0x1075f8e
and eax, 0xffff
or eax, 0x80070000
push eax
lea eax, [ebp - 0x218]
push eax
push 0x101a780
sub esp, 0x58
mov ecx, esp
mov dword [ebp - 0xc4c], esp
push 0xff
push 6
push 0x41b
push ebx
push edi
push esi
call fcn.01099386
lea eax, [ebp - 0xcb4]
push eax
call fcn.0109a510
add esp, 0x68
lea ecx, [ebp - 0xc5c]
call fcn.01047304
mov eax, dword [ebp - 0xc50]
and dword [eax], 0
jmp 0x1075ff4
mov eax, dword [ebp - 0xc58]
mov ecx, dword [ebp - 0xc50]
and dword [ebp - 0xc58], 0
mov dword [ecx], eax
xor eax, eax
push 0x206
push eax
mov dword [ebp - 0xc60], eax
mov dword [ebp - 0xc6c], eax
lea eax, [ebp - 0x41e]
xor ecx, ecx
push eax
mov word [ebp - 0x420], cx
call sub.msvcrt.dll_memset
xor eax, eax
push 0x206
push eax
mov word [ebp - 0x628], ax
lea eax, [ebp - 0x626]
push eax
call sub.msvcrt.dll_memset
xor eax, eax
push 0x206
push eax
mov word [ebp - 0xa38], ax
lea eax, [ebp - 0xa36]
push eax
call sub.msvcrt.dll_memset
xor eax, eax
push 0x206
push eax
mov word [ebp - 0x830], ax
lea eax, [ebp - 0x82e]
push eax
call sub.msvcrt.dll_memset
add esp, 0x30
push 0x104
lea eax, [ebp - 0x830]
push eax
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.KERNEL32.dll_GetVolumeNameForVolumeMountPointW]
test eax, eax
jne 0x10760da
lea eax, [ebp - 0x218]
push eax
push 0x101a730
call dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jle 0x10760ae
and eax, 0xffff
or eax, 0x80070000
push eax
sub esp, 0x58
mov ecx, esp
mov dword [ebp - 0xc4c], esp
push 0xff
push 6
push 0x431
push ebx
push edi
push esi
call fcn.01099386
lea eax, [ebp - 0xcb4]
push eax
call fcn.0109c3bb
and dword [ebp - 0xc64], 0
mov dword [ebp - 0xc68], 0x101a070
lea ecx, [ebp - 0xc68]
mov byte [ebp - 4], 2
call fcn.01073b9b
push 0
lea eax, [ebp - 0xc6c]
push eax
lea eax, [ebp - 0xc60]
push eax
push 0xffffffffffffffff
lea eax, [ebp - 0xc64]
push eax
push 0x1f6
push 0
call sub.NETAPI32.dll_NetShareEnum
test eax, eax
je 0x107615c
push eax
push 0x101a6f4
sub esp, 0x58
mov ecx, esp
mov dword [ebp - 0xc4c], esp
push 0xff
push 6
push 0x442
push ebx
push edi
push esi
call fcn.01099386
lea eax, [ebp - 0xcb4]
push eax
call fcn.0109a510
add esp, 0x64
jmp 0x1076316
and dword [ebp - 0xc50], 0
cmp dword [ebp - 0xc60], 0
jbe 0x1076316
mov eax, dword [ebp - 0xc64]
add eax, 0x18
mov dword [ebp - 0xc48], eax
cmp dword [eax - 0x14], 0
jne 0x10762ef
push 0x104
lea ecx, [ebp - 0x420]
push ecx
push dword [eax]
call dword [sym.imp.KERNEL32.dll_GetVolumePathNameW]
test eax, eax
jne 0x10761f6
call dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jle 0x10761b5
and eax, 0xffff
or eax, 0x80070000
push eax
mov eax, dword [ebp - 0xc48]
push dword [eax]
push 0x101a6a0
sub esp, 0x58
mov ecx, esp
mov dword [ebp - 0xc4c], esp
push 0xff
push 6
push 0x44d
push ebx
push edi
push esi
call fcn.01099386
lea eax, [ebp - 0xcb4]
push eax
call fcn.0109a510
add esp, 0x68
jmp 0x10762ef
push 0x104
lea eax, [ebp - 0x628]
push eax
lea eax, [ebp - 0x420]
push eax
call dword [sym.imp.KERNEL32.dll_GetVolumeNameForVolumeMountPointW]
test eax, eax
jne 0x107624d
call dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jle 0x1076227
and eax, 0xffff
or eax, 0x80070000
push eax
lea eax, [ebp - 0x420]
push eax
push 0x101a630
sub esp, 0x58
mov ecx, esp
mov dword [ebp - 0xc4c], esp
push 0xff
push 6
push 0x459
jmp 0x10761da
push 0x104
lea eax, [ebp - 0xa38]
push eax
lea eax, [ebp - 0x628]
push eax
call dword [sym.imp.KERNEL32.dll_GetVolumeNameForVolumeMountPointW]
test eax, eax
jne 0x10762a7
call dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jle 0x107627e
and eax, 0xffff
or eax, 0x80070000
push eax
lea eax, [ebp - 0x628]
push eax
push 0x101a5c0
sub esp, 0x58
mov ecx, esp
mov dword [ebp - 0xc4c], esp
push 0xff
push 6
push 0x45d
jmp 0x10761da
lea eax, [ebp - 0x830]
push eax
lea eax, [ebp - 0xa38]
push eax
call dword [sym.imp.msvcrt.dll__wcsicmp]
pop ecx
pop ecx
test eax, eax
jne 0x10762ef
lea eax, [ebp - 0x420]
push eax
mov eax, dword [ebp - 0xc48]
add eax, 0xffffffe8
push eax
lea ecx, [ebp - 0xc44]
call fcn.010741fe
mov ecx, dword [ebp - 0xc70]
lea eax, [ebp - 0xc44]
push eax
call fcn.01075d28
inc dword [ebp - 0xc50]
mov eax, dword [ebp - 0xc48]
mov ecx, dword [ebp - 0xc50]
add eax, 0x28
mov dword [ebp - 0xc48], eax
cmp ecx, dword [ebp - 0xc60]
jb 0x107617f
mov eax, dword [ebp - 0xc64]
mov ecx, dword [ebp - 0xc74]
and dword [ebp - 0xc64], 0
mov dword [ecx], eax
lea ecx, [ebp - 0xc68]
call fcn.010750da
lea ecx, [ebp - 0xc5c]
call fcn.0104a17d
lea ecx, [ebp - 0xcb4]
call fcn.0109a8f3
call fcn.010988d1
ret 0x10