Function at 0x10030d0
Capabilities:
Connect network resource

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x4c
push ebx
xor ebx, ebx
push esi
push edi
mov edi, dword [ebp + 8]
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x10], ebx
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 4], ebx
mov dword [ebp - 0x20], ebx
mov dword [ebp - 8], edi
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0xc], ebx
call fcn.01002d6a
mov esi, 0x100c0d8
cmp dword [ebp + 0xc], ebx
je 0x1003144
mov eax, dword [ebp + 0xc]
cmp word [eax], 0x5c
jne 0x100311a
cmp word [eax + 2], 0x5c
jne 0x100311a
add eax, 4
push 0x104
push eax
push 0x105
push esi
call sub.msvcrt.dll_wcsncpy_s
add esp, 0x10
push 0x5c
push esi
call dword [sym.imp.msvcrt.dll_wcschr]
pop ecx
pop ecx
cmp eax, ebx
je 0x100314c
xor ecx, ecx
mov word [eax], cx
jmp 0x100314c
xor eax, eax
mov word [0x100c0d8], ax
push ebx
push 0x202
push 0x100be28
call fcn.010018d5
cmp edi, ebx
je 0x1003189
push edi
call fcn.01005f63
test eax, eax
je 0x1003171
mov dword [ebp - 0x28], 1
push ebx
push edi
call fcn.01002ae7
mov dword [ebp - 8], eax
cmp eax, ebx
jne 0x1003189
push 0xf50
call fcn.0100544f
push 2
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x48], ebx
pop edi
cmp dword [ebp - 8], ebx
je 0x10031f0
push ebx
lea eax, [ebp - 0x14]
push eax
push dword [ebp - 8]
call sub.netutils.dll_NetpwPathType
mov esi, 0xe84
test eax, eax
je 0x10031b9
push esi
call fcn.0100544f
cmp dword [ebp - 0x14], 0x4000
jne 0x10031cb
mov dword [ebp - 0x48], 1
jmp 0x10031e8
cmp dword [ebp - 0x14], 0x4010
je 0x10031dd
cmp dword [ebp - 0x14], 0x4020
jne 0x10031e2
mov dword [ebp - 0x48], edi
jmp 0x10031e8
push esi
call fcn.0100544f
mov eax, dword [ebp - 8]
mov dword [ebp - 0x3c], eax
jmp 0x10031fa
mov dword [ebp - 0x48], ebx
mov dword [ebp - 0x3c], 0x10012b4
mov eax, dword [ebp + 0xc]
cmp eax, ebx
je 0x1003204
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x18], ebx
cmp dword [0x100b3e0], ebx
je 0x10033b1
mov edi, dword [sym.imp.msvcrt.dll_wcsncmp]
mov esi, 0x100b3e0
mov eax, str._PERSISTENT
lea edx, [eax + 2]
mov cx, word [eax]
inc eax
inc eax
cmp cx, bx
jne 0x1003226
sub eax, edx
sar eax, 1
push eax
push str._PERSISTENT
push dword [esi]
call edi
add esp, 0xc
test eax, eax
jne 0x1003290
push dword [esi]
mov dword [ebp - 0x24], 1
call fcn.0100680b
mov ebx, eax
test ebx, ebx
jne 0x1003263
push 0xdb1
call fcn.0100544f
lea eax, [ebp - 0x2c]
push eax
push ebx
call fcn.01006751
test eax, eax
je 0x100327d
push dword [esi]
push 0xf70
call fcn.0100530f
xor eax, eax
cmp dword [ebp - 0x2c], 1
sete al
xor ebx, ebx
mov dword [ebp - 0x10], eax
jmp 0x1003396
mov eax, str._USER
lea edx, [eax + 2]
mov cx, word [eax]
inc eax
inc eax
cmp cx, bx
jne 0x1003298
sub eax, edx
sar eax, 1
push eax
push str._USER
push dword [esi]
call edi
add esp, 0xc
test eax, eax
jne 0x10032d6
push dword [esi]
call fcn.0100680b
mov esi, eax
cmp esi, ebx
jne 0x10032ce
push 0xdb1
call fcn.0100544f
mov dword [ebp - 4], esi
jmp 0x1003396
mov esi, dword [esi]
mov ecx, str._SMARTCARD
mov eax, esi
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x1003305
cmp dx, bx
je 0x1003301
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x1003305
add eax, 4
add ecx, 4
cmp dx, bx
jne 0x10032df
xor eax, eax
jmp 0x100330a
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
jne 0x1003317
mov dword [ebp - 0x1c], 1
jmp 0x1003396
mov ecx, str._SAVECRED
mov eax, esi
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x1003344
cmp dx, bx
je 0x1003340
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x1003344
add eax, 4
add ecx, 4
cmp dx, bx
jne 0x100331e
xor eax, eax
jmp 0x1003349
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
jne 0x1003356
mov dword [ebp - 0xc], 1
jmp 0x1003396
mov ecx, str._DELETE
mov eax, esi
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x1003383
cmp dx, bx
je 0x100337f
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x1003383
add eax, 4
add ecx, 4
cmp dx, bx
jne 0x100335d
xor eax, eax
jmp 0x1003388
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
jne 0x1003396
push 0xdb6
call fcn.0100544f
inc dword [ebp - 0x18]
movzx esi, word [ebp - 0x18]
lea esi, [esi*4 + 0x100b3e0]
cmp dword [esi], ebx
jne 0x100321e
cmp dword [ebp - 0x24], ebx
jne 0x10033ba
lea eax, [ebp - 0x10]
push eax
call fcn.01002baf
cmp dword [ebp - 4], ebx
je 0x10033ce
cmp dword [ebp - 0xc], ebx
je 0x10033ce
push 0xdb6
call fcn.0100544f
cmp dword [ebp - 0x1c], ebx
je 0x10034c3
cmp dword [ebp - 0xc], ebx
je 0x10033e6
push 0xdb6
call fcn.0100544f
cmp dword [ebp - 4], 0
mov ebx, 0x201
mov esi, 0x100ba20
je 0x100340a
push ebx
push dword [ebp - 4]
push 0x202
push esi
call sub.msvcrt.dll_wcsncpy_s
add esp, 0x10
jmp 0x1003412
xor eax, eax
mov word [0x100ba20], ax
mov eax, dword [ebp + 0x10]
mov edi, 0x100
test eax, eax
je 0x1003483
mov ecx, 0x100149c
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x1003449
test dx, dx
je 0x1003445
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x1003449
add eax, 4
add ecx, 4
test dx, dx
jne 0x1003423
xor eax, eax
jmp 0x100344e
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x1003483
push dword [ebp + 0x10]
call fcn.01006319
movzx eax, ax
test ax, ax
je 0x100346b
movzx eax, ax
push eax
call fcn.0100544f
push edi
push dword [ebp + 0x10]
push 0x101
push 0x100be28
call sub.msvcrt.dll_wcsncpy_s
add esp, 0x10
jmp 0x100348b
xor eax, eax
mov word [0x100be28], ax
push 0x102
xor eax, eax
push eax
push edi
push 0x100be28
push ebx
push esi
push eax
push eax
push 0x100c0d8
call dword [sym.imp.credui.dll_CredUICmdLinePromptForCredentialsW]
test eax, eax
je 0x10034b2
push eax
call fcn.0100544f
mov dword [ebp - 4], esi
mov dword [ebp - 0x20], 0x100be28
xor ebx, ebx
jmp 0x1003556
mov edi, dword [ebp + 0x10]
cmp edi, ebx
je 0x1003556
cmp dword [ebp - 0xc], ebx
je 0x10034dd
push 0xdb6
call fcn.0100544f
mov ecx, 0x100149c
mov eax, edi
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x100350a
cmp dx, bx
je 0x1003506
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x100350a
add eax, 4
add ecx, 4
cmp dx, bx
jne 0x10034e4
xor eax, eax
jmp 0x100350f
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
jne 0x100353c
mov eax, dword [ebp + 0xc]
push ebx
push 1
push 0x1105
push ebx
mov esi, 0x100be28
push 0x100
mov edi, esi
push esi
mov dword [ebp + 0x10], edi
mov dword [0x100b9e0], eax
call fcn.0100549f
push esi
jmp 0x100353d
push edi
call fcn.01006319
movzx eax, ax
cmp ax, bx
je 0x1003553
movzx eax, ax
push eax
call fcn.0100544f
mov dword [ebp - 0x20], edi
mov edi, dword [ebp - 8]
xor esi, esi
cmp dword [ebp - 0x10], ebx
je 0x100356e
push dword [ebp + 0xc]
push edi
call fcn.01002919
test eax, eax
je 0x100356e
inc esi
cmp dword [ebp + 0x10], ebx
jne 0x1003589
cmp dword [ebp - 0x1c], ebx
jne 0x1003589
or esi, 0x808
cmp dword [ebp - 0xc], ebx
je 0x1003589
or esi, 0x1000
push esi
push dword [ebp - 4]
lea eax, [ebp - 0x4c]
push dword [ebp - 0x20]
push eax
call sub.MPR.dll_WNetAddConnection2W
mov esi, eax
sub eax, ebx
je 0x1003624
sub eax, 5
je 0x10035bc
sub eax, 0x3e
je 0x1003606
sub eax, 0x12
je 0x10035c2
dec eax
je 0x10035bc
sub eax, 0x4d8
jne 0x100361c
push esi
call fcn.010027ac
push dword [ebp + 8]
call fcn.01005eda
test eax, eax
jne 0x10035d5
push 0x55
call fcn.0100544f
push edi
mov eax, 0xffff
add word [edi], ax
push 0x100149c
call fcn.01002ae7
mov edi, eax
cmp edi, ebx
jne 0x10035f8
push 0xf50
call fcn.0100544f
mov dword [ebp - 0x3c], edi
cmp esi, 0x55
je 0x1003559
jmp 0x1003679
push dword [ebp + 0xc]
call fcn.0100275e
test eax, eax
je 0x100361c
push 0xe9f
call fcn.0100544f
push esi
call fcn.010027ac
jmp 0x10035fb
cmp dword [ebp - 0x24], ebx
je 0x100363b
push dword [ebp - 0x10]
call fcn.01002c50
cmp eax, ebx
je 0x100363b
push eax
call fcn.0100544f
cmp dword [ebp + 0x18], ebx
je 0x100366b
push dword [ebp + 8]
call fcn.01005eda
test eax, eax
je 0x1003666
mov eax, dword [ebp + 0xc]
push 2
push 0xf4f
mov dword [0x100b9e0], edi
mov dword [0x100b9e4], eax
call fcn.010053f3
call fcn.010053bd
cmp dword [ebp - 0x28], ebx
je 0x1003679
movzx eax, word [edi]
push eax
call fcn.01001c3f
pop edi
pop esi
pop ebx
leave
ret 0x14