Function at 0x11100490
Capabilities:
Connect network resource
Read file on windows
Set file attributes
Write file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x470
mov eax, dword [0x111ec774]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
mov esi, ecx
mov ecx, dword [0x111ee100]
mov ebx, edx
push edi
mov edi, dword [ebp + 0x10]
mov dword [ebp - 0x44c], ebx
test ecx, ecx
je 0x111004e0
test byte [ebp + 8], 4
jne 0x111004e0
cmp dword [ebp + 0xc], 0
push 0
push 0
je 0x111004f3
push 0x1119a65c
push 0x111a0f40
call fcn.1105e820
test eax, eax
jne 0x11100506
pop edi
pop esi
xor eax, eax
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.11162bb7
mov esp, ebp
pop ebp
ret
push 0x111b5018
push 0x111a0f40
call fcn.1105e820
test eax, eax
je 0x111004e0
push edi
push ebx
push esi
call fcn.110f91b0
mov ecx, dword [0x111ee100]
add esp, 0xc
xor ebx, ebx
push ebx
push 1
push 0x1119c3e0
push 0x111a0f40
mov dword [ebp - 0x43c], eax
call fcn.1105e820
or dword [0x111f16bc], eax
mov ecx, dword [0x111ee100]
push ebx
push 0x100
lea edx, [ebp - 0x234]
push edx
mov dword [ebp - 0x440], ebx
mov eax, dword [ecx]
mov eax, dword [eax + 4]
push 0x111b500c
push 0x111a0f40
call eax
push 0x20
lea ecx, [ebp - 0x34]
push ecx
push 0x111b5000
push ebx
push ebx
push 0x400
call dword [sym.imp.KeRneL32.DLl_GetDateFormatA]
push 0x10
lea edx, [ebp - 0x14]
push edx
push ebx
push ebx
push ebx
push 0x400
call dword [sym.imp.KeRneL32.DLl_GetTimeFormatA]
mov eax, dword [0x111ee308]
cmp byte [eax + 0x30], bl
je 0x111005b6
push ebx
push 0x111b4ff0
mov byte [eax + 0x30], bl
call fcn.111681a3
mov ecx, dword [0x111ee308]
add esp, 8
test eax, eax
sete al
mov byte [ecx + 0x31], al
mov ecx, dword [0x111ee100]
mov edx, dword [ecx]
mov edx, dword [edx + 4]
push ebx
push 0x100
lea eax, [ebp - 0x134]
push eax
push 0x1119c3fc
push 0x111a0f40
call edx
cmp byte [ebp - 0x134], bl
jne 0x11100610
mov eax, dword [0x1119c3ec]
mov ecx, dword [0x1119c3f0]
mov edx, dword [0x1119c3f4]
mov dword [ebp - 0x134], eax
mov al, byte [0x1119c3f8]
mov dword [ebp - 0x130], ecx
mov dword [ebp - 0x12c], edx
mov byte [ebp - 0x128], al
lea ecx, [ebp - 0x134]
call fcn.110f9750
mov esi, eax
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x11100620
sub eax, edx
cmp eax, 0x100
jb 0x11100647
push 0x4c3
push 0x111b3958
push 0x111b4fcc
call fcn.11029a70
add esp, 0xc
lea edx, [ebp - 0x134]
mov eax, esi
sub edx, esi
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
test cl, cl
jne 0x11100651
push esi
call fcn.11162777
lea ecx, [ebp - 0x134]
push 1
push ecx
call fcn.11145990
add esp, 0xc
mov esi, eax
mov dword [ebp - 0x444], esi
mov dword [ebp - 0x448], ebx
cmp dword [ebp - 0x440], ebx
jne 0x11100790
cmp byte [ebp - 0x234], bl
je 0x111007c5
cmp byte [esi], 0x5c
jne 0x11100796
cmp byte [esi + 1], 0x5c
jne 0x11100796
lea edx, [ebp - 0x234]
push 0x2f
push edx
call fcn.11081d30
add esp, 8
cmp eax, ebx
je 0x111006e1
push 0x100
lea ecx, [ebp - 0x438]
mov byte [eax], bl
push ecx
inc eax
push eax
push ebx
call fcn.110ee9a0
add esp, 0x10
lea edi, [ebp - 0x438]
jmp 0x111006e6
mov edi, 0x11195264
lea edx, [ebp - 0x338]
mov eax, esi
sub edx, esi
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
test cl, cl
jne 0x111006f0
lea edx, [ebp - 0x338]
push 0x5c
push edx
call fcn.11081e00
add esp, 8
cmp eax, ebx
je 0x11100711
mov byte [eax], bl
push ebx
lea ecx, [ebp - 0x234]
push ecx
push edi
lea edx, [ebp - 0x470]
lea eax, [ebp - 0x338]
mov esi, 1
push edx
mov dword [ebp - 0x470], 2
mov dword [ebp - 0x46c], esi
mov dword [ebp - 0x468], ebx
mov dword [ebp - 0x464], ebx
mov dword [ebp - 0x460], ebx
mov dword [ebp - 0x45c], eax
mov dword [ebp - 0x458], ebx
mov dword [ebp - 0x454], ebx
call sub.mPr.dLL_WNetAddConnection2A
test eax, eax
jne 0x1110076f
mov dword [ebp - 0x448], esi
mov ecx, 0x100
lea eax, [ebp - 0x438]
lea ebx, [ebx]
mov byte [eax], bl
add eax, esi
sub ecx, esi
jne 0x11100780
cmp dword [ebp - 0x448], ebx
jne 0x111007c5
mov esi, dword [ebp - 0x444]
cmp byte [ebp - 0x234], bl
je 0x111007c5
mov ecx, dword [0x111ee308]
mov eax, dword [ecx]
mov eax, dword [eax + 0xb0]
lea edx, [ebp - 0x440]
push edx
lea edx, [ebp - 0x234]
push edx
mov edx, dword [ebp + 8]
or edx, 4
push edx
call eax
jmp 0x111007cb
mov esi, dword [ebp - 0x444]
mov eax, 0x111a2fa8
cmp dword [0x111f16bc], ebx
jne 0x111007dd
mov eax, 0x111993f0
push eax
push esi
call fcn.11164ead
mov ebx, eax
add esp, 8
test ebx, ebx
jne 0x111008a2
mov ecx, dword [0x111ee100]
mov edx, dword [ecx]
mov edx, dword [edx + 4]
push eax
push 0x100
lea eax, [ebp - 0x134]
push eax
push 0x111b4fc0
push 0x111a0f40
call edx
lea ecx, [ebp - 0x134]
call fcn.110f9750
mov edi, eax
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x11100825
sub eax, edx
cmp eax, 0x100
jb 0x1110084c
push 0x503
push 0x111b3958
push 0x111b4fcc
call fcn.11029a70
add esp, 0xc
lea edx, [ebp - 0x134]
mov eax, edi
sub edx, edi
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
test cl, cl
jne 0x11100856
push edi
call fcn.11162777
push esi
call fcn.11162777
lea eax, [ebp - 0x134]
push 1
push eax
call fcn.11145990
add esp, 0x10
cmp dword [0x111f16bc], 0
mov dword [ebp - 0x444], eax
mov ecx, 0x111a2fa8
jne 0x11100896
mov ecx, 0x111993f0
push ecx
push eax
call fcn.11164ead
add esp, 8
mov ebx, eax
xor ecx, ecx
test ebx, ebx
setne cl
mov dword [ebp - 0x450], ecx
test ebx, ebx
jne 0x1110093a
mov ecx, dword [0x111ee100]
push ebx
push ebx
push 0x111b4fa8
push 0x111a0f40
call fcn.1105e820
test eax, eax
je 0x111008dc
mov dword [0x111ee1b4], 1
push 0x111a2fa8
push 0x111b4ff0
call fcn.11164ead
mov esi, eax
add esp, 8
test esi, esi
je 0x11100a76
push esi
call fcn.1116a147
push eax
call fcn.1116a051
mov ecx, dword [ebp - 0x43c]
mov edi, eax
mov eax, dword [ebp - 0x44c]
add esp, 8
lea edx, [ebp - 0x14]
test eax, eax
je 0x11100a3c
push eax
push ecx
push edx
lea eax, [ebp - 0x34]
push eax
push 0x111b4f94
push esi
call fcn.111672eb
add esp, 0x18
jmp 0x11100a50
mov edx, dword [0x111ee308]
cmp byte [edx + 0x31], 0
je 0x111009e7
push 0x111a1444
push 0x111b4ff0
call fcn.11164ead
mov edi, eax
add esp, 8
test edi, edi
je 0x111009e7
push 0x2000
call fcn.11163a11
mov esi, eax
add esp, 4
test esi, esi
je 0x111009cb
push edi
call fcn.111682f5
add esp, 4
test eax, eax
jne 0x111009c2
push 0x2000
push 0
push esi
call fcn.11162be0
push edi
push 0x2000
push 1
push esi
call fcn.11166a2f
add esp, 0x1c
test eax, eax
je 0x111009b5
push ebx
push eax
push 1
push esi
call fcn.1116579a
add esp, 0x10
push edi
call fcn.111682f5
add esp, 4
test eax, eax
je 0x11100986
push esi
call fcn.11163aa5
add esp, 4
push edi
call fcn.11164c77
push 0x111b4ff0
call fcn.111655e0
mov eax, dword [0x111ee308]
add esp, 8
mov byte [eax + 0x31], 0
mov eax, dword [ebp - 0x44c]
mov ecx, dword [ebp - 0x43c]
lea edx, [ebp - 0x14]
test eax, eax
je 0x11100a1d
push eax
push ecx
push edx
lea eax, [ebp - 0x34]
push eax
push 0x111b4f94
push ebx
call fcn.111672eb
add esp, 0x18
push ebx
call fcn.11164c77
add esp, 4
jmp 0x11100ab3
push ecx
push edx
lea eax, [ebp - 0x34]
push eax
push 0x111b4f84
push ebx
call fcn.111672eb
add esp, 0x14
push ebx
call fcn.11164c77
add esp, 4
jmp 0x11100ab3
push ecx
push edx
lea eax, [ebp - 0x34]
push eax
push 0x111b4f84
push esi
call fcn.111672eb
add esp, 0x14
push esi
call fcn.11164c77
mov ecx, dword [0x111ee308]
add esp, 4
mov byte [ecx + 0x31], 1
test edi, edi
jne 0x11100ab3
push 2
push 0x111b4ff0
call dword [sym.imp.KeRneL32.DLl_SetFileAttributesA]
jmp 0x11100ab3
cmp dword [0x111f179c], 0
jne 0x11100ab3
cmp dword [0x111ee108], 0
je 0x11100ab3
mov edx, dword [ebp + 8]
mov eax, dword [0x111ee308]
push 0x111b4ff0
push 1
push 0xc00033f8
or edx, 4
push edx
push eax
mov dword [0x111f179c], 1
call fcn.110ffd70
add esp, 0x14
cmp dword [ebp - 0x448], 0
je 0x11100acc
push 0
push 0
lea ecx, [ebp - 0x338]
push ecx
call sub.mPr.dLL_WNetCancelConnection2A
cmp dword [ebp - 0x440], 0
je 0x11100af2
mov ecx, dword [0x111ee308]
mov edx, dword [ecx]
mov edx, dword [edx + 0xb0]
lea eax, [ebp - 0x440]
push eax
mov eax, dword [ebp + 8]
push 0
push eax
call edx
mov eax, dword [ebp - 0x444]
push eax
call fcn.11162777
mov ecx, dword [ebp - 0x43c]
push ecx
call fcn.11162777
mov ecx, dword [ebp - 4]
mov eax, dword [ebp - 0x450]
add esp, 8
pop edi
pop esi
xor ecx, ebp
mov dword [0x111f16bc], 1
pop ebx
call fcn.11162bb7
mov esp, ebp
pop ebp
ret