Function at 0x46e4c1
Capabilities:
Connect network resource
Query or enumerate registry value

Disassembly:
jmp 0x46e4c1
push ebp
lea ebp, [esp - 0x910]
sub esp, 0x990
mov eax, dword [0x6294a0]
xor eax, ebp
mov dword [ebp + 0x90c], eax
mov eax, dword [ebp + 0x918]
push ebx
push esi
mov dword [ebp - 0x20], eax
mov eax, dword [ebp + 0x91c]
push edi
mov dword [ebp - 0x24], eax
mov eax, dword [ebp + 0x920]
xor ebx, ebx
mov esi, 0x103
push esi
mov dword [ebp - 0x30], eax
lea eax, [ebp + 0x2f5]
push ebx
push eax
mov dword [ebp - 0x2c], ebx
mov byte [ebp + 0x2f4], bl
call fcn.00508d00
push esi
lea eax, [ebp + 0x705]
push ebx
push eax
mov byte [ebp + 0x704], bl
call fcn.00508d00
push esi
lea eax, [ebp + 0x4fd]
push ebx
push eax
mov byte [ebp + 0x4fc], bl
call fcn.00508d00
push esi
lea eax, [ebp + 0x1f1]
push ebx
push eax
mov byte [ebp + 0x1f0], bl
call fcn.00508d00
push esi
lea eax, [ebp + 0x601]
push ebx
push eax
mov byte [ebp + 0x600], bl
call fcn.00508d00
push esi
lea eax, [ebp + 0x3f9]
push ebx
push eax
mov byte [ebp + 0x3f8], bl
call fcn.00508d00
add esp, 0x48
push esi
lea eax, [ebp - 0x17]
push ebx
push eax
mov byte [ebp - 0x18], bl
call fcn.00508d00
push 7
pop ecx
xor eax, eax
lea edi, [ebp - 0x58]
push esi
mov dword [ebp - 0x5c], ebx
rep stosd dword es:[edi], eax
mov byte [ebp + 0x808], al
lea eax, [ebp + 0x809]
push ebx
push eax
mov dword [ebp - 0x6c], ebx
mov dword [ebp - 0x34], ebx
call fcn.00508d00
push dword [ebp - 0x20]
call fcn.004010dc
add esp, 0x1c
test eax, eax
jne 0x46eead
push dword [ebp - 0x24]
call fcn.004010dc
test eax, eax
pop ecx
jne 0x46eead
lea ebx, [esi + 1]
push ebx
push dword [ebp - 0x20]
lea eax, [ebp + 0x600]
push eax
call fcn.00402abd
lea eax, [ebp + 0x600]
push eax
call fcn.00401a5a
push ebx
lea eax, [ebp + 0x600]
push eax
lea eax, [ebp + 0x3f8]
push eax
call fcn.00402abd
lea eax, [ebp + 0x3f8]
push eax
call fcn.00402a1d
lea eax, [ebp + 0x3f8]
push eax
call fcn.0040321a
add esp, 0x24
test eax, eax
jne 0x46e63b
lea eax, [ebp + 0x3f8]
push esi
push eax
push eax
call fcn.00401901
add esp, 0xc
push esi
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp + 0x3f8]
push eax
call fcn.0040206d
add esp, 0xc
lea eax, [ebp - 0x2c]
push eax
push 0x20019
xor esi, esi
push esi
push str.Network
push closesocket
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x46e681
push dword [ebp - 0x2c]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov dword [ebp - 0x1c], 1
jmp 0x46e684
mov dword [ebp - 0x1c], esi
call fcn.0040215d
test eax, eax
je 0x46e706
xor eax, eax
mov word [ebp - 0x80], si
lea edi, [ebp - 0x7e]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosw word es:[edi], ax
lea eax, [ebp - 0x80]
push eax
call fcn.00401550
mov eax, dword [ebp - 0x78]
add eax, 0xfffffff8
cmp ax, 0xd
pop ecx
ja 0x46eead
cmp dword [0x7449b8], 3
jle 0x46e6d4
call fcn.00401e97
sub eax, dword [0x7449bc]
cmp eax, 0x5265c00
jb 0x46eead
cmp dword [ebp + 0x924], esi
je 0x46eead
call fcn.00401e97
sub eax, dword [0x7449bc]
cmp eax, 0x493e0
jb 0x46eead
call fcn.00401e97
inc dword [0x7449b8]
mov dword [0x7449bc], eax
call fcn.00402db0
test eax, eax
jne 0x46eead
cmp dword [ebp - 0x1c], eax
mov dword [ebp - 0x28], esi
mov dword [ebp - 0x3c], esi
mov dword [ebp - 0x60], esi
mov esi, str..Network.c
je 0x46ec7e
mov dword [ebp - 0x1c], 0x41
movsx eax, byte [ebp - 0x1c]
push eax
push str.Network_c
mov dword [ebp - 0x38], eax
lea eax, [ebp + 0x2f4]
push ebx
push eax
call fcn.00402dbf
add esp, 0x10
lea eax, [ebp - 0x2c]
push eax
push 0x20019
xor edi, edi
push edi
lea eax, [ebp + 0x2f4]
push eax
push closesocket
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x46ec6b
push ebx
lea eax, [ebp + 0x704]
push edi
push eax
mov dword [ebp - 0x34], 0x103
call fcn.00508d00
add esp, 0xc
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp + 0x704]
push eax
lea eax, [ebp - 0x6c]
push eax
push edi
push str.RemotePath
push dword [ebp - 0x2c]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
je 0x46e7bf
push str._GetLastError_
push str.:3:ClearAllTAMSNetConnections___encountered_a_problem:_RegQueryValueEx__RemotePath___FAILED:__s
call fcn.00401375
pop ecx
pop ecx
lea eax, [ebp + 0x704]
push eax
call fcn.00401de3
lea eax, [ebp + 0x704]
push eax
call fcn.00401d0c
lea eax, [ebp + 0x704]
push str.tamspos
push eax
call fcn.004020db
add esp, 0x10
test eax, eax
je 0x46e7f7
xor edi, edi
inc edi
mov dword [ebp - 0x3c], edi
jmp 0x46e814
lea eax, [ebp + 0x704]
push 0x5b4f40
push eax
call fcn.004020db
xor edi, edi
pop ecx
inc edi
test eax, eax
pop ecx
je 0x46e814
mov dword [ebp - 0x3c], edi
push ebx
lea eax, [ebp + 0x4fc]
push 0
push eax
mov dword [ebp - 0x34], 0x103
call fcn.00508d00
add esp, 0xc
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp + 0x4fc]
push eax
lea eax, [ebp - 0x6c]
push eax
push 0
push str.UserName
push dword [ebp - 0x2c]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
je 0x46e861
push str._GetLastError_
push str.:3:ClearAllTAMSNetConnections___encountered_a_problem:_RegQueryValueEx__UserName___FAILED:__s
call fcn.00401375
pop ecx
pop ecx
lea eax, [ebp + 0x4fc]
push eax
call fcn.00401de3
lea eax, [ebp + 0x4fc]
push eax
call fcn.00401d0c
cmp dword [ebp + 0x924], 0
pop ecx
pop ecx
je 0x46e89f
lea eax, [ebp + 0x704]
push eax
lea eax, [ebp + 0x4fc]
push eax
push str.:1:ClearAllTAMSNetConnections___Credential_Conflict_Log:__s___s
call fcn.00401375
add esp, 0xc
push dword [ebp - 0x2c]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
and dword [ebp - 0x2c], 0
push ebx
lea eax, [ebp + 0x704]
push eax
lea eax, [ebp + 0x1f0]
push eax
call fcn.00402abd
lea eax, [ebp + 0x1f0]
push eax
call fcn.00401a5a
lea eax, [ebp + 0x600]
push eax
lea eax, [ebp + 0x1f0]
push eax
call fcn.0050da80
add esp, 0x18
test eax, eax
je 0x46e919
lea eax, [ebp + 0x3f8]
push eax
lea eax, [ebp + 0x1f0]
push eax
call fcn.0050da80
test eax, eax
pop ecx
pop ecx
je 0x46e919
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp + 0x1f0]
push eax
call fcn.0050da80
test eax, eax
pop ecx
pop ecx
jne 0x46ec6b
push dword [ebp - 0x24]
inc dword [ebp - 0x28]
lea eax, [ebp + 0x4fc]
push eax
call fcn.0050da80
test eax, eax
pop ecx
pop ecx
je 0x46ec6b
lea eax, [ebp + 0x4fc]
push eax
call fcn.00402a1d
push dword [ebp - 0x24]
lea eax, [ebp + 0x4fc]
push eax
call fcn.0050da80
add esp, 0xc
test eax, eax
je 0x46ec6b
push dword [ebp - 0x38]
lea eax, [ebp + 0x2f4]
push 0x5b5e80
push ebx
push eax
call fcn.00402dbf
add esp, 0x10
push 0x2da8
push esi
push edi
push edi
lea eax, [ebp + 0x600]
push eax
call fcn.00402342
push 0x2da9
push esi
push edi
push edi
lea eax, [ebp + 0x704]
push eax
call fcn.00402342
push 0x2daa
push esi
push edi
push edi
lea eax, [ebp + 0x2f4]
push eax
call fcn.00402342
test eax, eax
lea eax, [ebp + 0x4fc]
je 0x46e9d5
push str._GetLastError_
push eax
lea eax, [ebp + 0x2f4]
push eax
push str.:3:ClearAllTAMSNetConnections___encountered_a_problem:_WNetCancelConnection2___s____User:__s__FAILED:__s
call fcn.00401375
add esp, 0x10
jmp 0x46e9ea
push eax
lea eax, [ebp + 0x2f4]
push eax
push str.:3:ClearAllTAMSNetConnections___has_delete_the_mapped_drive___s___User:__s_
call fcn.00401375
add esp, 0xc
push 0x2dae
push esi
push edi
push edi
lea eax, [ebp + 0x600]
push eax
call fcn.00402342
push 0x2daf
push esi
push edi
push edi
lea eax, [ebp + 0x704]
push eax
call fcn.00402342
push 0x2db0
push esi
push edi
push edi
push dword [ebp - 0x20]
call fcn.00402342
push 0x628e68
push 0x5b5d9c
lea eax, [ebp + 0x808]
push ebx
push eax
call fcn.00402dbf
push str._tmp
push dword [ebp - 0x20]
call fcn.004020db
add esp, 0x18
test eax, eax
jne 0x46ea62
lea eax, [ebp + 0x808]
push eax
push dword [ebp - 0x20]
call fcn.004020db
test eax, eax
pop ecx
pop ecx
je 0x46eada
push ebx
lea eax, [ebp + 0x600]
push eax
lea eax, [ebp + 0x808]
push eax
call fcn.00402abd
lea eax, [ebp + 0x808]
push str.tamspos
push eax
call fcn.0040310c
add esp, 0x14
push 0x2dba
push esi
push edi
push edi
lea eax, [ebp + 0x808]
push eax
call fcn.00402342
push ebx
lea eax, [ebp + 0x600]
push eax
lea eax, [ebp + 0x808]
push eax
call fcn.00402abd
lea eax, [ebp + 0x808]
push str.client
push eax
call fcn.0040310c
add esp, 0x14
push 0x2dbe
push esi
push edi
push edi
lea eax, [ebp + 0x808]
push eax
call fcn.00402342
push 0x20
lea eax, [ebp - 0x5c]
push 0
push eax
call fcn.00508d00
and dword [ebp - 0x40], 0
add esp, 0xc
push 0x81
push dword [ebp - 0x24]
lea eax, [ebp + 0x2f4]
push dword [ebp - 0x30]
mov dword [ebp - 0x4c], eax
lea eax, [ebp + 0x704]
mov dword [ebp - 0x48], eax
lea eax, [ebp - 0x5c]
push eax
mov dword [ebp - 0x58], edi
call sub.MPR.dll_WNetAddConnection2A
test eax, eax
je 0x46ec58
push dword [ebp - 0x48]
call fcn.004010dc
test eax, eax
pop ecx
jne 0x46ebe3
push 0x5b4f40
push dword [ebp - 0x48]
call fcn.004020db
test eax, eax
pop ecx
pop ecx
je 0x46ebe3
push 0x103
lea eax, [ebp + 0xed]
push 0
push eax
mov byte [ebp + 0xec], 0
call fcn.00508d00
push ebx
push dword [ebp - 0x48]
lea eax, [ebp + 0xec]
push eax
call fcn.00402abd
push 0
push str._tamspos
push 0x5b4f40
lea eax, [ebp + 0xec]
push ebx
push eax
call fcn.0040167c
add esp, 0x2c
push 0x81
push dword [ebp - 0x24]
lea eax, [ebp + 0xec]
push dword [ebp - 0x30]
mov dword [ebp - 0x48], eax
lea eax, [ebp - 0x5c]
push eax
call sub.MPR.dll_WNetAddConnection2A
test eax, eax
je 0x46ec3c
push str._GetLastError_
push dword [ebp - 0x48]
push 0
call fcn.0040319d
pop ecx
push eax
push dword [ebp - 0x48]
call fcn.0040319d
pop ecx
push eax
push str.:3:ClearAllTAMSNetConnections___FAILED_to_map_alternate:__CurUser:_s__s_:___s_:__s
call fcn.00401375
lea eax, [ebp + 0x704]
add esp, 0x14
mov dword [ebp - 0x48], eax
push str._GetLastError_
push dword [ebp - 0x30]
push dword [ebp - 0x24]
push dword [ebp - 0x4c]
push dword [ebp - 0x48]
push dword [ebp - 0x48]
call fcn.0040319d
pop ecx
push eax
push dword [ebp - 0x4c]
call fcn.0040319d
pop ecx
push eax
push str.:3:ClearAllTAMSNetConnections___could_not_reestablish_the_mapped_drive__CurUser:_s__s_:_WNetAddConnection2A___s_____s_____s_____s___FAILED:__s
call fcn.00401375
push dword [ebp - 0x30]
lea eax, [ebp - 0x5c]
push dword [ebp - 0x24]
push eax
push dword [ebp - 0x1c]
call fcn.0046cba4
add esp, 0x30
test eax, eax
jne 0x46ec68
push dword [ebp - 0x1c]
push str.:6:ClearAllTAMSNetConnections___FAILED_to_add_drive__c_to_the_lost_net_drive_register_
call fcn.004020c2
pop ecx
pop ecx
jmp 0x46ec68
push ebx
push dword [ebp - 0x48]
lea eax, [ebp + 0x704]
push eax
call fcn.00402abd
lea eax, [ebp + 0x704]
add esp, 0xc
mov dword [ebp - 0x48], eax
xor eax, eax
push eax
push eax
push eax
push dword [ebp - 0x1c]
call fcn.0046cba4
add esp, 0x10
mov dword [ebp - 0x60], edi
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0x5a
jle 0x46e731
cmp dword [ebp - 0x28], 0
jg 0x46ec87
call fcn.0040215d
test eax, eax
je 0x46ec94
cmp dword [ebp + 0x924], 0
je 0x46eea0
xor edi, edi
mov eax, 0x21e88e
inc edi
push edi
push 0
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x64], eax
call fcn.004015dc
pop ecx
pop ecx
push 0x2e05
push esi
push edi
mov dword [ebp - 0x70], eax
push edi
lea eax, [ebp + 0x600]
push eax
call fcn.00402342
push 0x2e06
push esi
push edi
push edi
push dword [ebp - 0x20]
mov dword [ebp - 0x38], eax
call fcn.00402342
cmp dword [ebp + 0x924], 0
mov dword [ebp - 0x68], eax
je 0x46ee41
call fcn.0040215d
test eax, eax
jne 0x46ee41
cmp dword [ebp - 0x3c], eax
jne 0x46ee41
push 0x628e68
push 0x5b5d9c
lea eax, [ebp + 0x808]
push ebx
push eax
call fcn.00402dbf
push str._tmp
push dword [ebp - 0x20]
call fcn.004020db
add esp, 0x18
test eax, eax
jne 0x46ed43
lea eax, [ebp + 0x808]
push eax
push dword [ebp - 0x20]
call fcn.004020db
test eax, eax
pop ecx
pop ecx
je 0x46ee41
push ebx
lea eax, [ebp + 0x600]
push eax
lea eax, [ebp + 0x808]
push eax
call fcn.00402abd
lea eax, [ebp + 0x808]
push str.client
push eax
call fcn.0040310c
add esp, 0x14
push 0x2e16
push esi
push edi
push edi
lea eax, [ebp + 0x808]
push eax
call fcn.00402342
mov dword [ebp - 0x1c], eax
push ebx
lea eax, [ebp + 0x600]
push eax
lea eax, [ebp + 0x808]
push eax
call fcn.00402abd
lea eax, [ebp + 0x808]
push str.tamspos
push eax
call fcn.0040310c
add esp, 0x14
push 0x2e22
push esi
push edi
push edi
lea eax, [ebp + 0x808]
push eax
call fcn.00402342
xor esi, esi
cmp eax, esi
mov dword [ebp - 0x28], eax
je 0x46edcc
cmp dword [ebp - 0x1c], esi
jne 0x46ee41
push esi
push dword [ebp - 0x1c]
push eax
push str.:8:ClearAllTAMSNetConnections___has_cleared_a_tamspos___d__d__d__connection_that_is_NOT_a_mapped_drive__This_should_never_happen.
call fcn.00401375
push 0x20
lea eax, [ebp - 0x5c]
push esi
push eax
call fcn.00508d00
add esp, 0x1c
push edi
push dword [ebp - 0x24]
lea eax, [ebp + 0x808]
push dword [ebp - 0x30]
mov dword [ebp - 0x48], eax
lea eax, [ebp - 0x5c]
push eax
mov dword [ebp - 0x58], edi
mov dword [ebp - 0x4c], esi
mov dword [ebp - 0x40], esi
call sub.MPR.dll_WNetAddConnection2A
cmp eax, esi
mov dword [ebp - 0x64], eax
je 0x46ee41
push str._GetLastError_
push eax
push dword [ebp - 0x48]
call fcn.0040319d
pop ecx
push eax
push dword [ebp - 0x4c]
call fcn.0040319d
pop ecx
push eax
lea eax, [ebp + 0x808]
push eax
push str.:9:ClearAllTAMSNetConnections___FAILED_to_restore_the__s_connection:__CurUser:_s__s_:_Error__u:__s
call fcn.004020c2
add esp, 0x18
xor eax, eax
cmp dword [ebp - 0x38], eax
je 0x46ee5b
cmp dword [ebp - 0x68], eax
je 0x46ee5b
cmp dword [ebp - 0x28], eax
je 0x46ee5b
cmp dword [ebp - 0x1c], eax
je 0x46ee5b
xor esi, esi
jmp 0x46ee5d
mov esi, edi
cmp dword [ebp - 0x70], eax
jle 0x46ee7b
push 2
push eax
call fcn.004015dc
test eax, eax
pop ecx
pop ecx
jne 0x46ee7b
push str.:7:RestoreLostNetworkDrives_0__succeeded_after_ClearAllTAMSNetConnections__
call fcn.00401375
pop ecx
test esi, esi
je 0x46eea3
push dword [ebp - 0x64]
push dword [ebp - 0x1c]
push dword [ebp - 0x28]
push dword [ebp - 0x68]
push dword [ebp - 0x38]
push dword [ebp - 0x20]
push str.:2:ClearAllTAMSNetConnections___has_terminated_the_connection___s_:_This_should_not_happen_regularly_:_Connections_terminated:__u___u___u___u__u.
call fcn.00401375
add esp, 0x1c
jmp 0x46eea9
xor edi, edi
inc edi
cmp dword [ebp - 0x60], 0
je 0x46eead
mov eax, edi
jmp 0x46eeaf
xor eax, eax
mov ecx, dword [ebp + 0x90c]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.00508cf0
add ebp, 0x910
leave
ret