Function at 0x10004c00c
Capabilities:
Connect network resource

Disassembly:
mov r11, rsp
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x120
mov qword [rsp + 0x78], 0xfffffffffffffffe
mov qword [r11 + 0x20], rbx
mov rax, qword [0x100142128]
xor rax, rsp
mov qword [rsp + 0x110], rax
mov r12, r8
mov r13, rdx
mov rbx, rcx
mov qword [r11 - 0x80], rcx
mov r15d, 7
mov qword [rsp + 0x40], r15
xor r14d, r14d
mov qword [rsp + 0x38], r14
mov word [rsp + 0x28], r14w
lea r8d, [r15 + 0xc]
lea rdx, [0x1000051b8]
lea rcx, [rsp + 0x20]
call fcn.10002cf94
nop
lea r8, [rsp + 0x20]
lea edx, [r15 - 3]
lea rcx, [rsp + 0xe0]
call fcn.1000a11f0
nop
lea edi, [r15 + 1]
cmp qword [rsp + 0x40], rdi
jb 0x10004c0ad
mov rcx, qword [rsp + 0x28]
cmp rcx, r14
je 0x10004c0ad
call sub.msvcrt.dll_free
mov qword [rsp + 0x40], r15
mov qword [rsp + 0x38], r14
mov word [rsp + 0x28], r14w
lea rax, [rsp + 0x20]
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x40], r15
mov qword [rsp + 0x38], r14
mov word [rsp + 0x28], r14w
or rbp, 0xffffffffffffffff
mov r9, rbp
xor r8d, r8d
mov rdx, rbx
lea rcx, [rsp + 0x20]
call fcn.10002cd2c
nop
lea rcx, [rsp + 0x20]
call fcn.100062cf4
cmp al, r14b
je 0x10004c174
lea rax, [rsp + 0x20]
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x40], r15
mov qword [rsp + 0x38], r14
mov word [rsp + 0x28], r14w
mov r9, rbp
xor r8d, r8d
mov rdx, rbx
lea rcx, [rsp + 0x20]
call fcn.10002cd2c
nop
lea rdx, [rsp + 0x20]
lea rcx, [rsp + 0x48]
call fcn.100062f0c
nop
mov r9, rbp
xor r8d, r8d
mov rdx, rax
mov rcx, rbx
call fcn.10002cd2c
nop
cmp qword [rsp + 0x68], rdi
jb 0x10004c164
mov rcx, qword [rsp + 0x50]
cmp rcx, r14
je 0x10004c164
call sub.msvcrt.dll_free
mov qword [rsp + 0x68], r15
mov qword [rsp + 0x60], r14
mov word [rsp + 0x50], r14w
cmp qword [rbx + 0x18], r14
je 0x10004c4cb
cmp qword [rbx + 0x20], rdi
jb 0x10004c18d
lea rsi, [rbx + 8]
mov rcx, qword [rsi]
jmp 0x10004c194
lea rsi, [rbx + 8]
mov rcx, rsi
call fcn.100049c18
cmp eax, 1
je 0x10004c4cb
mov r9d, 2
xor r8d, r8d
lea rdx, [0x100004fb0]
mov rcx, rbx
call fcn.1000481a8
cmp rax, r14
je 0x10004c1d0
lea r8, [0x100004fb0]
xor edx, edx
mov rcx, rbx
call fcn.100060108
lea r8, [0x1000051a8]
mov rdx, rbx
lea rcx, [rsp + 0x48]
call fcn.100039e4c
nop
mov qword [rsp + 0xd0], r15
mov qword [rsp + 0xc8], r14
mov word [rsp + 0xb8], r14w
mov r9, rbp
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0xb0]
call fcn.10002cd2c
nop
cmp qword [rsp + 0x68], rdi
jb 0x10004c22b
mov rcx, qword [rsp + 0x50]
cmp rcx, r14
je 0x10004c22b
call sub.msvcrt.dll_free
mov qword [rsp + 0x68], r15
mov qword [rsp + 0x60], r14
mov word [rsp + 0x50], r14w
mov rcx, qword [rsp + 0xc8]
lea rcx, [rcx + rcx + 2]
call qword [sym.imp.msvcrt.dll_malloc]
mov rbp, rax
cmp rax, r14
jne 0x10004c2bf
cmp qword [rsp + 0xd0], rdi
jb 0x10004c272
mov rcx, qword [rsp + 0xb8]
cmp rcx, r14
je 0x10004c272
call sub.msvcrt.dll_free
mov qword [rsp + 0xd0], r15
mov qword [rsp + 0xc8], r14
mov word [rsp + 0xb8], r14w
lea rcx, [rsp + 0xe0]
call fcn.1000a1360
nop
cmp qword [rbx + 0x20], rdi
jb 0x10004c2ac
mov rcx, qword [rsi]
cmp rcx, r14
je 0x10004c2ac
call sub.msvcrt.dll_free
mov qword [rbx + 0x20], r15
mov qword [rbx + 0x18], r14
mov word [rsi], r14w
mov eax, edi
jmp 0x10004c4fc
mov r8, qword [rsp + 0xc8]
lea r8, [r8 + r8 + 2]
xor edx, edx
mov rcx, rax
call sub.msvcrt.dll_memset
lea r11, [rsp + 0xb8]
cmp qword [rsp + 0xd0], rdi
cmovae r11, qword [rsp + 0xb8]
mov rdx, qword [rsp + 0xc8]
inc rdx
mov edi, r14d
cmp rdx, r14
je 0x10004c30b
cmp rdx, 0x7fffffff
jbe 0x10004c310
mov edi, 0x80070057
cmp edi, r14d
jl 0x10004c459
mov rcx, rbp
mov edi, r14d
cmp rdx, r14
je 0x10004c356
mov r8d, 0x7ffffffe
sub r8, rdx
sub r11, rbp
lea rax, [rdx + r8]
cmp rax, r14
je 0x10004c351
movzx eax, word [rcx + r11]
cmp ax, r14w
je 0x10004c351
mov word [rcx], ax
add rcx, 2
sub rdx, 1
jne 0x10004c330
cmp rdx, r14
jne 0x10004c35f
sub rcx, 2
mov edi, 0x8007007a
mov word [rcx], r14w
cmp edi, r14d
jl 0x10004c459
xor edx, edx
lea r8d, [rdx + 0x30]
lea rcx, [rsp + 0x80]
call sub.msvcrt.dll_memset
mov dword [rsp + 0x84], r14d
mov qword [rsp + 0x98], rbp
cmp r13, r14
je 0x10004c3a9
xor eax, eax
or rcx, 0xffffffffffffffff
mov rdi, r13
repne scasw ax, word [rdi]
not rcx
cmp rcx, 1
jne 0x10004c3ac
mov r13, r14
cmp r12, r14
je 0x10004c3c6
xor eax, eax
or rcx, 0xffffffffffffffff
mov rdi, r12
repne scasw ax, word [rdi]
not rcx
cmp rcx, 1
jne 0x10004c3c9
mov r12, r14
mov r9d, 1
mov r8, r13
mov rdx, r12
lea rcx, [rsp + 0x80]
call sub.MPR.dll_WNetAddConnection2W
mov edi, eax
mov rcx, rbp
call qword [sym.imp.msvcrt.dll_free]
nop
cmp qword [rsp + 0xd0], 8
jb 0x10004c40b
mov rcx, qword [rsp + 0xb8]
cmp rcx, r14
je 0x10004c40b
call sub.msvcrt.dll_free
mov qword [rsp + 0xd0], r15
mov qword [rsp + 0xc8], r14
mov word [rsp + 0xb8], r14w
lea rcx, [rsp + 0xe0]
call fcn.1000a1360
nop
cmp qword [rbx + 0x20], 8
jb 0x10004c446
mov rcx, qword [rsi]
cmp rcx, r14
je 0x10004c446
call sub.msvcrt.dll_free
mov qword [rbx + 0x20], r15
mov qword [rbx + 0x18], r14
mov word [rsi], r14w
mov eax, edi
jmp 0x10004c4fc
mov rcx, rbp
call qword [sym.imp.msvcrt.dll_free]
nop
cmp qword [rsp + 0xd0], 8
jb 0x10004c480
mov rcx, qword [rsp + 0xb8]
cmp rcx, r14
je 0x10004c480
call sub.msvcrt.dll_free
mov qword [rsp + 0xd0], r15
mov qword [rsp + 0xc8], r14
mov word [rsp + 0xb8], r14w
lea rcx, [rsp + 0xe0]
call fcn.1000a1360
nop
cmp qword [rbx + 0x20], 8
jb 0x10004c4bb
mov rcx, qword [rsi]
cmp rcx, r14
je 0x10004c4bb
call sub.msvcrt.dll_free
mov qword [rbx + 0x20], r15
mov qword [rbx + 0x18], r14
mov word [rsi], r14w
mov eax, edi
jmp 0x10004c4fc
lea rcx, [rsp + 0xe0]
call fcn.1000a1360
nop
cmp qword [rbx + 0x20], rdi
jb 0x10004c4ed
mov rcx, qword [rbx + 8]
cmp rcx, r14
je 0x10004c4ed
call sub.msvcrt.dll_free
mov qword [rbx + 0x20], r15
mov qword [rbx + 0x18], r14
mov word [rbx + 8], r14w
xor eax, eax
mov rcx, qword [rsp + 0x110]
xor rcx, rsp
call fcn.1000c8b30
mov rbx, qword [rsp + 0x178]
add rsp, 0x120
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret