Function at 0x43b130
Capabilities:
Connect network resource

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff0
sub esp, 0x320
mov eax, dword [ebp + 0xc]
mov ecx, dword [0x540010]
xor ecx, ebp
mov dword [esp + 0x318], ecx
xor ecx, ecx
dec ecx
mov dword [esp + 0x58], ecx
mov dword [esp + 0x5c], ecx
mov dword [esp + 0x60], ecx
cmp byte [eax + 0xb], 0
js 0x43b19b
mov ecx, dword [eax + 8]
mov dword [esp + 0x60], ecx
movq xmm0, qword [eax]
movq qword [esp + 0x58], xmm0
movzx ecx, byte [esp + 0x63]
mov esi, ecx
test cl, cl
jns 0x43b186
mov esi, dword [esp + 0x5c]
mov eax, dword [ebp + 8]
test esi, esi
je 0x43b326
test cl, cl
js 0x43b1ab
lea edx, [esp + 0x58]
jmp 0x43b1af
lea ecx, [esp + 0x58]
push dword [eax + 4]
push dword [eax]
call fcn.00478a70
jmp 0x43b177
mov edx, dword [esp + 0x58]
test esi, esi
js 0x43c9de
test edx, edx
je 0x43c9d7
lea edi, [esp + 0xa0]
mov ecx, edi
push esi
push edx
call fcn.00493e00
push edi
call fcn.0047e270
add esp, 4
mov ebx, eax
mov ecx, edi
call fcn.00493ef0
test bl, bl
jne 0x43b874
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x34
jg 0x43b3c9
cmp eax, 3
je 0x43b3d9
cmp eax, 5
je 0x43b3d9
call dword [sym.imp.KERNEL32.dll_GetLastError]
lea edi, [esp + 0x2c0]
push eax
push edi
call fcn.0050e3e0
add esp, 8
lea esi, [esp + 0xa0]
mov ecx, esi
push edi
push 0x149
push 0x5249e8
push 1
call fcn.00455540
lea edi, [esp + 0xa8]
lea ecx, [esp + 0xdc]
push 0x524a41
push str.MSI_file
call fcn.004147c0
cmp byte [esp + 0x63], 0
js 0x43b266
lea eax, [esp + 0x58]
jmp 0x43b26a
mov eax, dword [esp + 0x58]
mov ecx, edi
push eax
call fcn.0041ef60
lea ecx, [eax + 0x34]
push 0x524a7a
push str._does_not_exist:_assuming_no_override_for_brand_package.
call fcn.004147c0
mov ecx, esi
call fcn.00455590
cmp byte [esp + 0x2cb], 0
jns 0x43b321
push dword [esp + 0x2c0]
call fcn.004dfb35
add esp, 4
jmp 0x43b321
lea esi, [esp + 0xa0]
mov ecx, esi
push 0x162
push str.GetPartnerPackageOverrideGUIDMarker
push 0
call fcn.00455190
lea ecx, [esp + 0xdc]
push 0x524c13
push str.Failed_to_decode_guid_string:_assuming_no_override_for_brand_package.
jmp 0x43b315
lea esi, [esp + 0xa0]
mov ecx, esi
push 0x15b
push str.GetPartnerPackageOverrideGUIDMarker
push 0
call fcn.00455190
lea edi, [esp + 0xdc]
mov ecx, edi
push 0x5242c9
push str.partner_package_guid
call fcn.004147c0
mov ecx, edi
push 0x524a37
push 0x524a00
call fcn.004147c0
mov ecx, esi
call fcn.004553c0
mov esi, dword [ebp + 8]
jmp 0x43b374
mov ebx, eax
lea esi, [esp + 0xa0]
mov ecx, esi
push 0x139
push 0x5249e8
push 0
call fcn.00455190
lea edi, [esp + 0xdc]
mov ecx, edi
push 0x5242b4
push str.msi_database
call fcn.004147c0
mov ecx, edi
push 0x524a37
push 0x524a00
call fcn.004147c0
mov ecx, esi
mov esi, ebx
call fcn.004553c0
mov dword [esi], 0
cmp byte [esp + 0x63], 0
jns 0x43b38d
push dword [esp + 0x58]
call fcn.004dfb35
add esp, 4
mov ecx, dword [esp + 0x318]
xor ecx, ebp
call fcn.004e0685
mov eax, esi
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
mov eax, dword [esp + 0x90]
mov dword [esp + 0x94], edi
push eax
call fcn.004dfb35
add esp, 4
mov edi, dword [esp + 0xc]
jmp 0x43b4f5
xor edi, edi
jmp 0x43b423
cmp eax, 0x35
je 0x43b3d9
cmp eax, 0x52e
jne 0x43b20a
xor edi, edi
mov dword [esp + 0x78], edi
pxor xmm0, xmm0
movq qword [esp + 0x70], xmm0
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call fcn.0047cae0
add esp, 4
mov dword [esp + 0xc], eax
push eax
push edi
push 0x410
call dword [sym.imp.KERNEL32.dll_OpenProcess]
test eax, eax
je 0x43b42a
mov ebx, eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
cmp ebx, 0xffffffff
je 0x43b3c5
call fcn.00492150
mov edi, ebx
push esi
call dword [sym.imp.KERNEL32.dll_SetLastError]
lea eax, [edi + 1]
mov dword [esp + 0x10], eax
cmp eax, 1
ja 0x43be47
call dword [sym.imp.KERNEL32.dll_GetLastError]
lea esi, [esp + 0x2b0]
push eax
push esi
call fcn.0050e3e0
add esp, 8
lea ecx, [esp + 0xa0]
push esi
push 0xf8
push str.FindMsiDatabaseLocalCopy
push 1
call fcn.00455540
lea ebx, [esp + 0xdc]
mov ecx, ebx
push 0x524acc
push str.Failed_to_open_parent_process_id
call fcn.004147c0
lea esi, [esp + 0x2c0]
push dword [esp + 0xc]
push esi
call fcn.004dcea0
add esp, 8
movzx eax, byte [esi + 0xb]
test al, al
jns 0x43b4ac
mov eax, dword [esp + 0x2c4]
mov esi, dword [esp + 0x2c0]
mov ecx, ebx
push eax
push esi
call fcn.00478310
cmp byte [esp + 0x2cb], 0
jns 0x43b4ce
push dword [esp + 0x2c0]
call fcn.004dfb35
add esp, 4
lea ecx, [esp + 0xa0]
call fcn.00455590
cmp byte [esp + 0x2bb], 0
jns 0x43b4f3
push dword [esp + 0x2b0]
call fcn.004dfb35
add esp, 4
xor ebx, ebx
cmp dword [esp + 0x10], 2
jb 0x43b50a
call fcn.00492150
push edi
call fcn.0047b600
add esp, 4
test bl, bl
je 0x43b55d
lea edi, [esp + 0x70]
movzx eax, byte [edi + 0xb]
test al, al
cmovs eax, dword [edi + 4]
mov edx, dword [edi]
cmovns edx, edi
test eax, eax
js 0x43c9de
je 0x43b533
test edx, edx
je 0x43c9d7
lea esi, [esp + 0xa0]
mov ecx, esi
push eax
push edx
call fcn.00493e00
push esi
call fcn.0047e270
add esp, 4
mov ebx, eax
mov ecx, esi
call fcn.00493ef0
test bl, bl
jne 0x43b66e
xor eax, eax
dec eax
mov dword [esp + 0x90], eax
mov dword [esp + 0x94], eax
mov dword [esp + 0x98], eax
lea ebx, [esp + 0x58]
movzx eax, byte [ebx + 0xb]
test al, al
cmovs eax, dword [ebx + 4]
mov edx, dword [ebx]
cmovns edx, ebx
test eax, eax
js 0x43c9de
je 0x43b59a
test edx, edx
je 0x43c9d7
lea esi, [esp + 0x2c0]
mov ecx, esi
push eax
push edx
call fcn.00493e00
mov ecx, esi
lea eax, [esp + 0xa0]
push eax
call fcn.00494560
cmp byte [esp + 0xab], 0
js 0x43b624
mov eax, dword [esp + 0xa8]
mov dword [esp + 0x98], eax
movq xmm0, qword [esp + 0xa0]
movq qword [esp + 0x90], xmm0
lea ecx, [esp + 0xa0]
call fcn.00493ef0
lea esi, [esp + 0x2c0]
mov ecx, esi
call fcn.00493ef0
pxor xmm0, xmm0
movdqa xmmword [esi + 0x10], xmm0
movdqa xmmword [esi], xmm0
cmp byte [esp + 0x9b], 0
js 0x43b734
lea eax, [esp + 0x90]
jmp 0x43b73b
lea ecx, [esp + 0x90]
push dword [esp + 0xa4]
push dword [esp + 0xa4]
call fcn.00478a70
jmp 0x43b5e3
test al, al
cmovs eax, dword [esp + 0x74]
mov edx, dword [esp + 0x70]
cmovns edx, edi
lea ecx, [esp + 0x58]
push eax
push edx
call fcn.00478f70
jmp 0x43b692
lea ecx, [esp + 0x58]
push dword [esp + 0x74]
push dword [esp + 0x74]
call fcn.00479040
jmp 0x43b692
cmp byte [esp + 0x63], 0
movzx eax, byte [esp + 0x7b]
js 0x43b640
test al, al
js 0x43b65b
mov eax, dword [esp + 0x78]
mov dword [esp + 0x60], eax
movq xmm0, qword [esp + 0x70]
movq qword [esp + 0x58], xmm0
lea esi, [esp + 0xa0]
mov ecx, esi
push 0x151
push 0x5249e8
push 0
call fcn.00455190
lea ebx, [esp + 0xa8]
lea ecx, [esp + 0xdc]
push 0x524a91
push str.Found_msi_local_copy:
call fcn.004147c0
mov ecx, ebx
push edi
call fcn.00414700
mov ecx, esi
call fcn.004553c0
mov bl, 1
mov esi, dword [ebp + 8]
jmp 0x43b859
lea esi, [esp + 0xa0]
mov ecx, esi
push 0x131
push str.ConnectInteractiveToFileIfLogonFailure
push 0
call fcn.00455190
lea edi, [esp + 0xa8]
lea ecx, [esp + 0xdc]
push 0x524ba9
push str.Successfully_connected_to
call fcn.004147c0
mov ecx, edi
push ebx
call fcn.00414700
mov ecx, esi
call fcn.004553c0
mov esi, dword [ebp + 8]
mov bl, byte [esp + 0xc]
jmp 0x43b840
mov eax, dword [esp + 0x90]
mov dword [esp + 0x2d4], eax
mov eax, 0x52335a
push 8
push eax
push eax
push esi
call sub.MPR.dll_WNetAddConnection2W
test eax, eax
sete byte [esp + 0xc]
je 0x43b6e2
mov edi, eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
lea esi, [esp + 0x80]
push eax
push esi
call fcn.0050e3e0
add esp, 8
lea ecx, [esp + 0xa0]
push esi
push 0x12e
push str.ConnectInteractiveToFileIfLogonFailure
push 1
call fcn.00455540
lea esi, [esp + 0xdc]
mov ecx, esi
push 0x524b77
push str.Failed_WNetAddConnection2_with_error
call fcn.004147c0
lea ebx, [esp + 0x2b0]
push edi
push ebx
call fcn.004dcea0
add esp, 8
movzx eax, byte [ebx + 0xb]
test al, al
jns 0x43b7cb
mov eax, dword [esp + 0x2b4]
mov ebx, dword [esp + 0x2b0]
lea edi, [esp + 0xa8]
mov ecx, esi
push eax
push ebx
call fcn.00478310
cmp byte [esp + 0x2bb], 0
jns 0x43b7f4
push dword [esp + 0x2b0]
call fcn.004dfb35
add esp, 4
mov ecx, esi
push 0x524b8e
push str._during_connection_to
call fcn.004147c0
lea eax, [esp + 0x90]
mov ecx, edi
push eax
call fcn.00414700
lea ecx, [esp + 0xa0]
call fcn.00455590
cmp byte [esp + 0x8b], 0
mov bl, byte [esp + 0xc]
jns 0x43b83d
push dword [esp + 0x80]
call fcn.004dfb35
add esp, 4
mov esi, dword [ebp + 8]
cmp byte [esp + 0x9b], 0
jns 0x43b859
push dword [esp + 0x90]
call fcn.004dfb35
add esp, 4
cmp byte [esp + 0x7b], 0
jns 0x43b86c
push dword [esp + 0x70]
call fcn.004dfb35
add esp, 4
test bl, bl
je 0x43b374
mov eax, dword [ebp + 0x10]
pcmpeqd xmm0, xmm0
movdqa xmmword [esp + 0x90], xmm0
movzx ecx, byte [eax + 0xb]
mov edx, ecx
test cl, cl
jns 0x43b891
mov edx, dword [eax + 4]
test edx, edx
je 0x43b2d7
test cl, cl
jns 0x43b89f
mov eax, dword [eax]
lea ecx, [esp + 0x90]
push ecx
push eax
call dword [sym.imp.ole32.dll_CLSIDFromString]
test eax, eax
js 0x43b2aa
xor eax, eax
lea esi, [esp + 0xa0]
mov ecx, esi
push 0x497
push str.ExtractPartnerPackageOverridePackage
push eax
call fcn.00455190
lea edi, [esp + 0xa8]
lea ecx, [esp + 0xdc]
push 0x5245b3
push str.Reading__msi
call fcn.004147c0
lea ebx, [esp + 0x58]
mov ecx, edi
push ebx
call fcn.00414700
mov ecx, esi
call fcn.004553c0
cmp byte [ebx + 0xb], 0
jns 0x43b90b
mov ebx, dword [esp + 0x58]
sub esp, 0x1c
xor eax, eax
mov dword [esp + 0x18], eax
movdqa xmm0, xmmword [0x524290]
movdqu xmmword [esp + 4], xmm0
mov dword [esp], ebx
mov dword [esp + 0x14], 0x80
call dword [sym.imp.KERNEL32.dll_CreateFileW]
invalid