Function at 0x4b3550
Capabilities:
Connect network resource
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x9c8
mov eax, dword [0x6fb448]
xor eax, ebp
mov dword [ebp - 8], eax
mov dword [ebp - 0x228], 0
mov dword [ebp - 0x784], 0
mov dword [ebp - 0x77c], 0
mov byte [ebp - 0x548], 0
push 0x103
push 0
lea eax, [ebp - 0x547]
push eax
call fcn.005b02a0
add esp, 0xc
mov byte [ebp - 0x898], 0
push 0x103
push 0
lea ecx, [ebp - 0x897]
push ecx
call fcn.005b02a0
add esp, 0xc
mov byte [ebp - 0x778], 0
push 0x103
push 0
lea edx, [ebp - 0x777]
push edx
call fcn.005b02a0
add esp, 0xc
mov byte [ebp - 0x440], 0
push 0x103
push 0
lea eax, [ebp - 0x43f]
push eax
call fcn.005b02a0
add esp, 0xc
mov byte [ebp - 0x650], 0
push 0x103
push 0
lea ecx, [ebp - 0x64f]
push ecx
call fcn.005b02a0
add esp, 0xc
mov byte [ebp - 0x338], 0
push 0x103
push 0
lea edx, [ebp - 0x337]
push edx
call fcn.005b02a0
add esp, 0xc
mov byte [ebp - 0x218], 0
push 0x103
push 0
lea eax, [ebp - 0x217]
push eax
call fcn.005b02a0
add esp, 0xc
mov dword [ebp - 0x21c], 0
mov dword [ebp - 0x78c], 0
mov dword [ebp - 0x670], 0
xor ecx, ecx
mov dword [ebp - 0x66c], ecx
mov dword [ebp - 0x668], ecx
mov dword [ebp - 0x664], ecx
mov dword [ebp - 0x660], ecx
mov dword [ebp - 0x65c], ecx
mov dword [ebp - 0x658], ecx
mov dword [ebp - 0x654], ecx
mov dword [ebp - 0x220], 0
mov dword [ebp - 0x788], 0
mov byte [ebp - 0x110], 0
push 0x103
push 0
lea edx, [ebp - 0x10f]
push edx
call fcn.005b02a0
add esp, 0xc
mov dword [ebp - 0x780], 0
mov dword [ebp - 4], 0
mov dword [ebp - 0x22c], 0
mov dword [ebp - 0x224], 1
mov eax, dword [ebp + 8]
push eax
call fcn.00401389
add esp, 4
test eax, eax
jne 0x4b370c
mov ecx, dword [ebp + 0xc]
push ecx
call fcn.00401389
add esp, 4
test eax, eax
je 0x4b3713
xor eax, eax
jmp 0x4b4351
xor edx, edx
je 0x4b372b
push str.:4:ClearAllTAMSNetConnections___FAILED_because_of_m_control.
call fcn.004018ca
add esp, 4
xor eax, eax
jmp 0x4b4351
push 0x104
mov eax, dword [ebp + 8]
push eax
lea ecx, [ebp - 0x650]
push ecx
call fcn.00402725
add esp, 0xc
lea edx, [ebp - 0x650]
push edx
call fcn.004029be
add esp, 4
push 0x104
lea eax, [ebp - 0x650]
push eax
lea ecx, [ebp - 0x338]
push ecx
call fcn.00402725
add esp, 0xc
lea edx, [ebp - 0x338]
push edx
call fcn.00402608
add esp, 4
lea eax, [ebp - 0x338]
push eax
call fcn.00402324
add esp, 4
test eax, eax
jne 0x4b37aa
push 0x103
lea ecx, [ebp - 0x338]
push ecx
lea edx, [ebp - 0x338]
push edx
call fcn.00402734
add esp, 0xc
push 0x103
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x338]
push ecx
call fcn.004023c4
add esp, 0xc
lea edx, [ebp - 0x228]
push edx
push 0x20019
push 0
push 0x699c44
push closesocket
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x4b3800
mov eax, dword [ebp - 0x228]
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov dword [ebp - 0x77c], 1
jmp 0x4b380a
mov dword [ebp - 0x77c], 0
call fcn.00401127
test eax, eax
je 0x4b38e6
mov ecx, 1
test ecx, ecx
je 0x4b38e6
mov word [ebp - 0x8a8], 0
xor edx, edx
mov dword [ebp - 0x8a6], edx
mov dword [ebp - 0x8a2], edx
mov dword [ebp - 0x89e], edx
mov word [ebp - 0x89a], dx
lea eax, [ebp - 0x8a8]
push eax
call fcn.00401c67
add esp, 4
movzx ecx, word [ebp - 0x8a0]
cmp ecx, 0x16
jge 0x4b386f
movzx edx, word [ebp - 0x8a0]
cmp edx, 7
jg 0x4b3876
xor eax, eax
jmp 0x4b4351
cmp dword [0x8168d4], 3
jle 0x4b3898
call fcn.0040323d
sub eax, dword [0x816998]
cmp eax, 0x5265c00
jae 0x4b3898
xor eax, eax
jmp 0x4b4351
mov eax, 1
test eax, eax
je 0x4b38b4
cmp dword [ebp + 0x14], 0
jne 0x4b38b4
cmp dword [ebp + 0x14], 0
jne 0x4b38b4
xor eax, eax
jmp 0x4b4351
call fcn.0040323d
sub eax, dword [0x816998]
cmp eax, 0x493e0
jae 0x4b38cd
xor eax, eax
jmp 0x4b4351
call fcn.0040323d
mov dword [0x816998], eax
mov ecx, dword [0x8168d4]
add ecx, 1
mov dword [0x8168d4], ecx
call fcn.00402dab
test eax, eax
je 0x4b38ff
mov edx, 1
test edx, edx
je 0x4b38ff
xor eax, eax
jmp 0x4b4351
mov dword [ebp - 0x780], 0
mov dword [ebp - 4], 0
mov dword [ebp - 0x220], 0
mov dword [ebp - 0x22c], 0
cmp dword [ebp - 0x77c], 0
je 0x4b4010
mov dword [ebp - 0x784], 0x41
jmp 0x4b394c
mov eax, dword [ebp - 0x784]
add eax, 1
mov dword [ebp - 0x784], eax
cmp dword [ebp - 0x784], 0x5a
jg 0x4b4010
movsx ecx, byte [ebp - 0x784]
push ecx
push 0x699b84
push 0x104
lea edx, [ebp - 0x548]
push edx
call fcn.00402dc9
add esp, 0x10
lea eax, [ebp - 0x228]
push eax
push 0x20019
push 0
lea ecx, [ebp - 0x548]
push ecx
push closesocket
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
je 0x4b39a0
jmp 0x4b393d
mov dword [ebp - 0x78c], 0x103
push 0x104
push 0
lea edx, [ebp - 0x898]
push edx
call fcn.005b02a0
add esp, 0xc
lea eax, [ebp - 0x78c]
push eax
lea ecx, [ebp - 0x898]
push ecx
lea edx, [ebp - 0x21c]
push edx
push 0
push 0x699c4c
mov eax, dword [ebp - 0x228]
push eax
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
je 0x4b39ff
push 0x699c58
push 0x699c68
call fcn.004018ca
add esp, 8
lea ecx, [ebp - 0x898]
push ecx
call fcn.00403076
add esp, 4
lea edx, [ebp - 0x898]
push edx
call fcn.00402ec8
add esp, 4
push 0x699cc8
lea eax, [ebp - 0x898]
push eax
call fcn.00401041
add esp, 8
test eax, eax
je 0x4b3a3e
mov dword [ebp - 4], 1
jmp 0x4b3a67
push 0x699cd0
lea ecx, [ebp - 0x898]
push ecx
call fcn.00401041
add esp, 8
test eax, eax
je 0x4b3a67
mov dword [ebp - 4], 1
mov dword [ebp - 0x22c], 1
mov dword [ebp - 0x78c], 0x103
push 0x104
push 0
lea edx, [ebp - 0x778]
push edx
call fcn.005b02a0
add esp, 0xc
lea eax, [ebp - 0x78c]
push eax
lea ecx, [ebp - 0x778]
push ecx
lea edx, [ebp - 0x21c]
push edx
push 0
push 0x699cd8
mov eax, dword [ebp - 0x228]
push eax
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
je 0x4b3ac6
push 0x699ce4
push 0x699cf8
call fcn.004018ca
add esp, 8
lea ecx, [ebp - 0x778]
push ecx
call fcn.00403076
add esp, 4
lea edx, [ebp - 0x778]
push edx
call fcn.00402ec8
add esp, 4
cmp dword [ebp + 0x14], 0
je 0x4b3b05
lea eax, [ebp - 0x898]
push eax
lea ecx, [ebp - 0x778]
push ecx
push str.:1:ClearAllTAMSNetConnections___Credential_Conflict_Log:__s___s
call fcn.004018ca
add esp, 0xc
mov edx, dword [ebp - 0x228]
push edx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov dword [ebp - 0x228], 0
push 0x104
lea eax, [ebp - 0x898]
push eax
lea ecx, [ebp - 0x440]
push ecx
call fcn.00402725
add esp, 0xc
lea edx, [ebp - 0x440]
push edx
call fcn.004029be
add esp, 4
lea eax, [ebp - 0x650]
push eax
lea ecx, [ebp - 0x440]
push ecx
call fcn.005b0660
add esp, 8
test eax, eax
je 0x4b3b99
lea edx, [ebp - 0x338]
push edx
lea eax, [ebp - 0x440]
push eax
call fcn.005b0660
add esp, 8
test eax, eax
je 0x4b3b99
lea ecx, [ebp - 0x218]
push ecx
lea edx, [ebp - 0x440]
push edx
call fcn.005b0660
add esp, 8
test eax, eax
je 0x4b3b99
jmp 0x4b393d
mov eax, dword [ebp - 0x780]
add eax, 1
mov dword [ebp - 0x780], eax
mov ecx, dword [ebp + 0xc]
push ecx
lea edx, [ebp - 0x778]
push edx
call fcn.005b0660
add esp, 8
test eax, eax
jne 0x4b3bc4
jmp 0x4b393d
lea eax, [ebp - 0x778]
push eax
call fcn.00402608
add esp, 4
mov ecx, dword [ebp + 0xc]
push ecx
lea edx, [ebp - 0x778]
push edx
call fcn.005b0660
add esp, 8
test eax, eax
jne 0x4b3bef
jmp 0x4b393d
movsx eax, byte [ebp - 0x784]
push eax
push 0x699d98
push 0x104
lea ecx, [ebp - 0x548]
push ecx
call fcn.00402dc9
add esp, 0x10
push 0x2da8
push 0x699d9c
push 1
push 1
lea edx, [ebp - 0x650]
push edx
call fcn.004014a6
push 0x2da9
push 0x699da8
push 1
push 1
lea eax, [ebp - 0x898]
push eax
call fcn.004014a6
push 0x2daa
push 0x699db4
push 1
push 1
lea ecx, [ebp - 0x548]
push ecx
call fcn.004014a6
test eax, eax
je 0x4b3c84
push 0x699dc0
lea edx, [ebp - 0x778]
push edx
lea eax, [ebp - 0x548]
push eax
push str.:3:ClearAllTAMSNetConnections___encountered_a_problem:_WNetCancelConnection2___s____User:__s__FAILED:__s
call fcn.004018ca
add esp, 0x10
jmp 0x4b3c9f
lea ecx, [ebp - 0x778]
push ecx
lea edx, [ebp - 0x548]
push edx
push str.:3:ClearAllTAMSNetConnections___has_delete_the_mapped_drive___s___User:__s_
call fcn.004018ca
add esp, 0xc
push 0x2dae
push 0x699e8c
push 1
push 1
lea eax, [ebp - 0x650]
push eax
call fcn.004014a6
push 0x2daf
push 0x699e98
push 1
push 1
lea ecx, [ebp - 0x898]
push ecx
call fcn.004014a6
push 0x2db0
push 0x699ea4
push 1
push 1
mov edx, dword [ebp + 8]
push edx
call fcn.004014a6
push 0x693ab0
push 0x699eb0
push 0x104
lea eax, [ebp - 0x110]
push eax
call fcn.00402dc9
add esp, 0x10
push 0x699eb4
mov ecx, dword [ebp + 8]
push ecx
call fcn.00401041
add esp, 8
test eax, eax
jne 0x4b3d38
lea edx, [ebp - 0x110]
push edx
mov eax, dword [ebp + 8]
push eax
call fcn.00401041
add esp, 8
test eax, eax
je 0x4b3dca
push 0x104
lea ecx, [ebp - 0x650]
push ecx
lea edx, [ebp - 0x110]
push edx
call fcn.00402725
add esp, 0xc
push 0x699ebc
lea eax, [ebp - 0x110]
push eax
call fcn.00401ec4
add esp, 8
push 0x2dba
push 0x699ec4
push 1
push 1
lea ecx, [ebp - 0x110]
push ecx
call fcn.004014a6
push 0x104
lea edx, [ebp - 0x650]
push edx
lea eax, [ebp - 0x110]
push eax
call fcn.00402725
add esp, 0xc
push 0x699ed0
lea ecx, [ebp - 0x110]
push ecx
call fcn.00401ec4
add esp, 8
push 0x2dbe
push 0x699ed8
push 1
push 1
lea edx, [ebp - 0x110]
push edx
call fcn.004014a6
push 0x20
push 0
lea eax, [ebp - 0x670]
push eax
call fcn.005b02a0
add esp, 0xc
mov dword [ebp - 0x66c], 1
lea ecx, [ebp - 0x548]
mov dword [ebp - 0x660], ecx
lea edx, [ebp - 0x898]
mov dword [ebp - 0x65c], edx
mov dword [ebp - 0x654], 0
mov dword [ebp - 0x224], 1
push 0x81
mov eax, dword [ebp + 0xc]
push eax
mov ecx, dword [ebp + 0x10]
push ecx
lea edx, [ebp - 0x670]
push edx
call sub.MPR.dll_WNetAddConnection2A
test eax, eax
je 0x4b3f65
mov dword [ebp - 0x224], 0
mov eax, dword [ebp - 0x65c]
push eax
call fcn.00401389
add esp, 4
test eax, eax
jne 0x4b3f65
push 0x699ee4
mov ecx, dword [ebp - 0x65c]
push ecx
call fcn.00401041
add esp, 8
test eax, eax
je 0x4b3f65
mov byte [ebp - 0x9b0], 0
push 0x103
push 0
lea edx, [ebp - 0x9af]
push edx
call fcn.005b02a0
add esp, 0xc
push 0x104
mov eax, dword [ebp - 0x65c]
push eax
lea ecx, [ebp - 0x9b0]
push ecx
call fcn.00402725
add esp, 0xc
push 0
push 0x699eec
push 0x699ef8
push 0x104
lea edx, [ebp - 0x9b0]
push edx
call fcn.00402004
add esp, 0x14
lea eax, [ebp - 0x9b0]
mov dword [ebp - 0x65c], eax
push 0x81
mov ecx, dword [ebp + 0xc]
push ecx
mov edx, dword [ebp + 0x10]
push edx
lea eax, [ebp - 0x670]
push eax
call sub.MPR.dll_WNetAddConnection2A
test eax, eax
je 0x4b3f34
push 0x699f00
mov ecx, dword [ebp - 0x65c]
push ecx
push 0
call fcn.0040214e
add esp, 4
push eax
mov edx, dword [ebp - 0x65c]
push edx
call fcn.0040214e
add esp, 4
push eax
push str.:3:ClearAllTAMSNetConnections___FAILED_to_map_alternate:__CurUser:_s__s_:___s_:__s
call fcn.004018ca
add esp, 0x14
lea eax, [ebp - 0x898]
mov dword [ebp - 0x65c], eax
jmp 0x4b3f65
mov dword [ebp - 0x224], 1
push 0x104
mov ecx, dword [ebp - 0x65c]
push ecx
lea edx, [ebp - 0x898]
push edx
call fcn.00402725
add esp, 0xc
lea eax, [ebp - 0x898]
mov dword [ebp - 0x65c], eax
cmp dword [ebp - 0x224], 0
jne 0x4b3ff2
push 0x699f64
mov ecx, dword [ebp + 0x10]
push ecx
mov edx, dword [ebp + 0xc]
push edx
mov eax, dword [ebp - 0x660]
push eax
mov ecx, dword [ebp - 0x65c]
push ecx
mov edx, dword [ebp - 0x65c]
push edx
call fcn.0040214e
add esp, 4
push eax
mov eax, dword [ebp - 0x660]
push eax
call fcn.0040214e
add esp, 4
push eax
push str.:3:ClearAllTAMSNetConnections___could_not_reestablish_the_mapped_drive__CurUser:_s__s_:_WNetAddConnection2A___s_____s_____s_____s___FAILED:__s
call fcn.004018ca
add esp, 0x20
mov ecx, dword [ebp + 0x10]
push ecx
mov edx, dword [ebp + 0xc]
push edx
lea eax, [ebp - 0x670]
push eax
mov cl, byte [ebp - 0x784]
push ecx
call fcn.004b43c0
add esp, 0x10
test eax, eax
jne 0x4b3ff0
mov edx, dword [ebp - 0x784]
push edx
push str.:6:ClearAllTAMSNetConnections___FAILED_to_add_drive__c_to_the_lost_net_drive_register_
call fcn.00401014
add esp, 8
jmp 0x4b4001
mov al, byte [ebp - 0x784]
push eax
call fcn.004b4ac0
add esp, 4
mov dword [ebp - 0x220], 1
jmp 0x4b393d
cmp dword [ebp - 0x780], 0
jg 0x4b4022
call fcn.00401127
test eax, eax
je 0x4b402c
cmp dword [ebp + 0x14], 0
je 0x4b4336
mov dword [ebp - 0x9c0], 0
mov dword [ebp - 0x9b4], 0x21e88e
mov dword [ebp - 0x9bc], 0x21e88e
mov dword [ebp - 0x9c8], 0x21e88e
mov dword [ebp - 0x9b8], 0x21e88e
mov dword [ebp - 0x9c4], 0x21e88e
push 1
push 0
call fcn.00401d75
add esp, 8
mov dword [ebp - 0x9c0], eax
push 0x2e05
push 0x69a060
push 1
push 1
lea ecx, [ebp - 0x650]
push ecx
call fcn.004014a6
mov dword [ebp - 0x9b4], eax
push 0x2e06
push 0x69a06c
push 1
push 1
mov edx, dword [ebp + 8]
push edx
call fcn.004014a6
mov dword [ebp - 0x9bc], eax
cmp dword [ebp + 0x14], 0
je 0x4b4299
call fcn.00401127
test eax, eax
jne 0x4b4299
cmp dword [ebp - 4], 0
jne 0x4b4299
push 0x693ab0
push 0x69a078
push 0x104
lea eax, [ebp - 0x110]
push eax
call fcn.00402dc9
add esp, 0x10
push str._tmp
mov ecx, dword [ebp + 8]
push ecx
call fcn.00401041
add esp, 8
test eax, eax
jne 0x4b4126
lea edx, [ebp - 0x110]
push edx
mov eax, dword [ebp + 8]
push eax
call fcn.00401041
add esp, 8
test eax, eax
je 0x4b4299
push 0x104
lea ecx, [ebp - 0x650]
push ecx
lea edx, [ebp - 0x110]
push edx
call fcn.00402725
add esp, 0xc
push 0x69a084
lea eax, [ebp - 0x110]
push eax
call fcn.00401ec4
add esp, 8
push 0x2e16
push 0x69a08c
push 1
push 1
lea ecx, [ebp - 0x110]
push ecx
call fcn.004014a6
mov dword [ebp - 0x9b8], eax
push 0x104
lea edx, [ebp - 0x650]
push edx
lea eax, [ebp - 0x110]
push eax
call fcn.00402725
add esp, 0xc
push str.tamspos
lea ecx, [ebp - 0x110]
push ecx
call fcn.00401ec4
add esp, 8
push 0x2e22
push 0x69a0a0
push 1
push 1
lea edx, [ebp - 0x110]
push edx
call fcn.004014a6
mov dword [ebp - 0x9c8], eax
cmp dword [ebp - 0x9c8], 0
je 0x4b41da
cmp dword [ebp - 0x9b8], 0
jne 0x4b4299
push 0
mov eax, dword [ebp - 0x9b8]
push eax
mov ecx, dword [ebp - 0x9c8]
push ecx
push str.:8:ClearAllTAMSNetConnections___has_cleared_a_tamspos___d__d__d__connection_that_is_NOT_a_mapped_drive__This_should_never_happen.
call fcn.004018ca
add esp, 0x10
push 0x20
push 0
lea edx, [ebp - 0x670]
push edx
call fcn.005b02a0
add esp, 0xc
mov dword [ebp - 0x66c], 1
mov dword [ebp - 0x660], 0
lea eax, [ebp - 0x110]
mov dword [ebp - 0x65c], eax
mov dword [ebp - 0x654], 0
push 1
mov ecx, dword [ebp + 0xc]
push ecx
mov edx, dword [ebp + 0x10]
push edx
lea eax, [ebp - 0x670]
push eax
call sub.MPR.dll_WNetAddConnection2A
mov dword [ebp - 0x9c4], eax
cmp dword [ebp - 0x9c4], 0
je 0x4b4299
push 0x69a13c
mov ecx, dword [ebp - 0x9c4]
push ecx
mov edx, dword [ebp - 0x65c]
push edx
call fcn.0040214e
add esp, 4
push eax
mov eax, dword [ebp - 0x660]
push eax
call fcn.0040214e
add esp, 4
push eax
lea ecx, [ebp - 0x110]
push ecx
push str.:9:ClearAllTAMSNetConnections___FAILED_to_restore_the__s_connection:__CurUser:_s__s_:_Error__u:__s
call fcn.00401014
add esp, 0x18
cmp dword [ebp - 0x9b4], 0
je 0x4b42bd
cmp dword [ebp - 0x9bc], 0
je 0x4b42bd
cmp dword [ebp - 0x9c8], 0
je 0x4b42bd
cmp dword [ebp - 0x9b8], 0
jne 0x4b42c9
mov dword [ebp - 0x788], 1
jmp 0x4b42d3
mov dword [ebp - 0x788], 0
cmp dword [ebp - 0x9c0], 0
jle 0x4b42f9
push 2
push 0
call fcn.00401d75
add esp, 8
test eax, eax
jne 0x4b42f9
push str.:7:RestoreLostNetworkDrives_0__succeeded_after_ClearAllTAMSNetConnections__
call fcn.004018ca
add esp, 4
cmp dword [ebp - 0x788], 0
je 0x4b4336
mov edx, dword [ebp - 0x9c4]
push edx
mov eax, dword [ebp - 0x9b8]
push eax
mov ecx, dword [ebp - 0x9c8]
push ecx
mov edx, dword [ebp - 0x9bc]
push edx
mov eax, dword [ebp - 0x9b4]
push eax
mov ecx, dword [ebp + 8]
push ecx
push str.:2:ClearAllTAMSNetConnections___has_terminated_the_connection___s_:_This_should_not_happen_regularly_:_Connections_terminated:__u___u___u___u__u.
call fcn.004018ca
add esp, 0x1c
cmp dword [ebp - 0x788], 0
jne 0x4b4348
cmp dword [ebp - 0x220], 0
je 0x4b434f
mov eax, 1
jmp 0x4b4351
xor eax, eax
mov ecx, dword [ebp - 8]
xor ecx, ebp
call fcn.005b0290
mov esp, ebp
pop ebp
ret