Function at 0x416a00
Capabilities:
Create thread
Enumerate network shares
Terminate thread

Disassembly:
push rbp
sub rsp, 0x90
mov rbp, rsp
mov qword [rbp + 0x30], 0
mov qword [rbp + 0x48], 0
mov qword [rbp + 0x40], 0
mov qword [rbp + 0x38], rbp
mov qword [rbp + 0xa0], rcx
nop
lea rcx, [0x00434830]
call fcn.00409180
mov rax, qword [rbp + 0x88]
mov qword [0x00434840], rax
xor ecx, ecx
xor edx, edx
lea r8, [0x004169c0]
mov r9, qword [rbp + 0xa0]
mov dword [rsp + 0x20], 0
lea rax, [rbp + 0x68]
mov qword [rsp + 0x28], rax
call sub.kernel32.dll_CreateThread
mov qword [rbp + 0x70], rax
mov rcx, qword [rbp + 0x70]
mov edx, 0x5dc
call sub.kernel32.dll_WaitForSingleObject
cmp eax, 0x102
jne 0x416aa4
mov rcx, qword [rbp + 0x70]
lea rdx, [rbp + 0x64]
call sub.kernel32.dll_GetExitCodeThread
mov rcx, qword [rbp + 0x70]
mov edx, dword [rbp + 0x64]
call sub.kernel32.dll_TerminateThread
mov rcx, qword [rbp + 0x70]
call sub.kernel32.dll_CloseHandle
mov rax, qword [0x00434840]
mov qword [rbp + 0x88], rax
mov eax, dword [0x00434848]
mov dword [rbp + 0x54], eax
cmp dword [rbp + 0x54], 0
jne 0x416ca4
mov dword [0x00434838], 0x4000
mov ecx, dword [0x00434838]
call fcn.00404cd0
mov qword [rbp + 0x80], rax
nop
mov dword [rbp + 0x60], 1
mov eax, dword [rbp + 0x60]
mov dword [0x0043483c], eax
mov rax, qword [rbp + 0x88]
mov qword [0x00434840], rax
mov eax, dword [rbp + 0x54]
mov dword [0x00434848], eax
xor ecx, ecx
xor edx, edx
lea r8, [0x00416970]
mov r9, qword [rbp + 0x80]
mov dword [rsp + 0x20], 0
lea rax, [rbp + 0x6c]
mov qword [rsp + 0x28], rax
call sub.kernel32.dll_CreateThread
mov qword [rbp + 0x78], rax
mov rcx, qword [rbp + 0x78]
mov edx, 0x5dc
call sub.kernel32.dll_WaitForSingleObject
cmp eax, 0x102
jne 0x416b6d
mov rcx, qword [rbp + 0x78]
lea rdx, [rbp + 0x64]
call sub.kernel32.dll_GetExitCodeThread
mov rcx, qword [rbp + 0x78]
mov edx, dword [rbp + 0x64]
call sub.kernel32.dll_TerminateThread
mov rcx, qword [rbp + 0x78]
call sub.kernel32.dll_CloseHandle
mov rax, qword [0x00434840]
mov qword [rbp + 0x88], rax
mov eax, dword [0x00434848]
mov dword [rbp + 0x54], eax
mov eax, dword [0x0043483c]
mov dword [rbp + 0x60], eax
cmp dword [rbp + 0x54], 0xea
jne 0x416be5
mov dword [rbp + 0x60], 0xffffffff
mov rcx, qword [rbp + 0x80]
call fcn.00404d00
mov ecx, dword [0x00434838]
call fcn.00404cd0
mov qword [rbp + 0x80], rax
mov rcx, qword [rbp + 0x88]
lea rdx, [rbp + 0x60]
mov r8, qword [rbp + 0x80]
lea r9, [0x00434838]
call sub.mpr.dll_WNetEnumResourceW
mov dword [rbp + 0x54], eax
cmp dword [rbp + 0x54], 0x103
je 0x416c89
cmp dword [rbp + 0x54], 0
jne 0x416c89
mov rax, qword [rbp + 0x80]
mov qword [rbp + 0x58], rax
cmp dword [rbp + 0x60], 0
jbe 0x416c83
mov rax, qword [rbp + 0x58]
cmp qword [rax + 0x18], 0
je 0x416c5f
lea rcx, [0x00434830]
mov rax, qword [rbp + 0x58]
mov rdx, qword [rax + 0x18]
call fcn.0040a570
lea rcx, [rbp + 0x30]
mov edx, 3
lea r8, [0x00416d38]
mov r9, qword [0x00434830]
lea rax, [0x00416d48]
mov qword [rsp + 0x20], rax
call fcn.0040aa20
mov rcx, qword [rbp + 0x30]
call fcn.004168f0
jmp 0x416c6b
lea rcx, [0x00434830]
call fcn.00409180
mov rcx, qword [rbp + 0x58]
call fcn.00416a00
add qword [rbp + 0x58], 0x30
sub dword [rbp + 0x60], 1
cmp dword [rbp + 0x60], 0
ja 0x416c0d
nop
jmp 0x416aeb
nop
nop
mov rcx, qword [rbp + 0x88]
call sub.mpr.dll_WNetCloseEnum
mov rcx, qword [rbp + 0x80]
call fcn.00404d00
nop
lea rcx, [rbp + 0x30]
call fcn.00409180
lea rcx, [rbp + 0x40]
mov edx, 2
call fcn.00409260
lea rsp, [rbp + 0x90]
pop rbp
ret