Function at 0x428fde
Capabilities:
Connect network resource
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x988
mov eax, dword [0x4cc8c0]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 0x10]
push ebx
mov ebx, dword [ebp + 8]
push esi
mov esi, dword [ebp + 0xc]
push edi
xor edi, edi
mov dword [ebp - 0x97c], eax
push 0x104
lea eax, [ebp - 0x61c]
mov dword [ebp - 0x988], ebx
push edi
push eax
mov dword [ebp - 0x954], esi
mov dword [ebp - 0x940], edi
call fcn.00466ad0
push 0x104
lea eax, [ebp - 0x20c]
push edi
push eax
call fcn.00466ad0
push 0x104
lea eax, [ebp - 0x414]
push edi
push eax
call fcn.00466ad0
push 0x104
lea eax, [ebp - 0x720]
push edi
push eax
call fcn.00466ad0
push 0x104
lea eax, [ebp - 0x310]
push edi
push eax
call fcn.00466ad0
push 0x104
lea eax, [ebp - 0x518]
push edi
push eax
call fcn.00466ad0
add esp, 0x48
lea eax, [ebp - 0x928]
push 0x104
push edi
push eax
call fcn.00466ad0
push 8
mov dword [ebp - 0x978], edi
xor eax, eax
mov dword [ebp - 0x94c], edi
lea edi, [ebp - 0x974]
pop ecx
rep stosd dword es:[edi], eax
mov edi, 0x104
push edi
push eax
lea eax, [ebp - 0x108]
push eax
call fcn.00466ad0
push ebx
call fcn.00451684
add esp, 0x1c
test eax, eax
jne 0x429af8
push esi
call fcn.00451684
pop ecx
test eax, eax
jne 0x429af8
push edi
lea eax, [ebp - 0x310]
push ebx
push eax
call fcn.00452b01
lea eax, [ebp - 0x310]
push eax
call fcn.00451e39
push edi
lea eax, [ebp - 0x310]
push eax
lea eax, [ebp - 0x518]
push eax
call fcn.00452b01
lea eax, [ebp - 0x518]
push eax
call fcn.00451e92
lea eax, [ebp - 0x518]
push eax
call fcn.0042cb8b
add esp, 0x24
lea esi, [edi - 1]
test eax, eax
jne 0x429145
lea eax, [ebp - 0x518]
push esi
push eax
push eax
call fcn.0042fd34
add esp, 0xc
push esi
lea eax, [ebp - 0x928]
push eax
lea eax, [ebp - 0x518]
push eax
call fcn.00430042
add esp, 0xc
lea eax, [ebp - 0x940]
push eax
push 0x20019
push 0
push str.Network
push closesocket
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
xor esi, esi
inc esi
test eax, eax
jne 0x42918f
push dword [ebp - 0x940]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x429191
xor esi, esi
call fcn.00406b44
test eax, eax
je 0x429215
xor eax, eax
lea edi, [ebp - 0x938]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
lea eax, [ebp - 0x938]
push eax
call fcn.0045f0ad
mov eax, dword [ebp - 0x930]
add eax, 0xfffffff8
pop ecx
cmp ax, 0xd
ja 0x429af8
cmp dword [0x5b6a20], 3
jle 0x4291e5
call fcn.004609ba
sub eax, dword [0x5b6a24]
cmp eax, 0x5265c00
jb 0x429af8
cmp dword [ebp + 0x14], 0
je 0x429af8
call fcn.004609ba
sub eax, dword [0x5b6a24]
cmp eax, 0x493e0
jb 0x429af8
call fcn.004609ba
inc dword [0x5b6a20]
mov dword [0x5b6a24], eax
xor eax, eax
xor edi, edi
and dword [ebp - 0x950], eax
mov dword [ebp - 0x944], eax
mov dword [ebp - 0x948], edi
test esi, esi
je 0x4297ef
push 0x41
pop eax
mov dword [ebp - 0x93c], eax
movsx esi, al
push esi
push str.Network_c
mov dword [ebp - 0x948], eax
lea eax, [ebp - 0x61c]
push 0x104
push eax
call fcn.0045285b
add esp, 0x10
lea eax, [ebp - 0x940]
push eax
push 0x20019
push 0
lea eax, [ebp - 0x61c]
push eax
push closesocket
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x4297c9
push 0x104
push eax
lea eax, [ebp - 0x20c]
mov dword [ebp - 0x94c], 0x103
push eax
call fcn.00466ad0
add esp, 0xc
lea eax, [ebp - 0x94c]
push eax
lea eax, [ebp - 0x20c]
push eax
lea eax, [ebp - 0x978]
push eax
push 0
push str.RemotePath
push dword [ebp - 0x940]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
je 0x4292e3
push str._GetLastError_
push str.:3:ClearAllTAMSNetConnections___encountered_a_problem:_RegQueryValueEx__RemotePath___FAILED:__s
call fcn.0040d9e1
pop ecx
pop ecx
lea eax, [ebp - 0x20c]
push eax
call fcn.0045201f
lea eax, [ebp - 0x20c]
push eax
call fcn.00451f5e
lea eax, [ebp - 0x20c]
push str.tamspos
push eax
call fcn.004529d5
add esp, 0x10
test eax, eax
je 0x42931e
xor eax, eax
inc eax
mov dword [ebp - 0x950], eax
jmp 0x429345
lea eax, [ebp - 0x20c]
push 0x49fe60
push eax
call fcn.004529d5
pop ecx
pop ecx
mov ecx, dword [ebp - 0x950]
test eax, eax
push 1
pop eax
cmovne ecx, eax
mov dword [ebp - 0x950], ecx
push 0x104
lea eax, [ebp - 0x414]
mov dword [ebp - 0x94c], 0x103
push 0
push eax
call fcn.00466ad0
add esp, 0xc
lea eax, [ebp - 0x94c]
push eax
lea eax, [ebp - 0x414]
push eax
lea eax, [ebp - 0x978]
push eax
push 0
push str.UserName
push dword [ebp - 0x940]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
je 0x4293a2
push str._GetLastError_
push str.:3:ClearAllTAMSNetConnections___encountered_a_problem:_RegQueryValueEx__UserName___FAILED:__s
call fcn.0040d9e1
pop ecx
pop ecx
lea eax, [ebp - 0x414]
push eax
call fcn.0045201f
lea eax, [ebp - 0x414]
push eax
call fcn.00451f5e
cmp dword [ebp + 0x14], 0
pop ecx
pop ecx
je 0x4293dd
lea eax, [ebp - 0x20c]
push eax
lea eax, [ebp - 0x414]
push eax
push str.:1:ClearAllTAMSNetConnections___Credential_Conflict_Log:__s___s
call fcn.0040d9e1
add esp, 0xc
push dword [ebp - 0x940]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
and dword [ebp - 0x940], 0
lea eax, [ebp - 0x20c]
push 0x104
push eax
lea eax, [ebp - 0x720]
push eax
call fcn.00452b01
lea eax, [ebp - 0x720]
push eax
call fcn.00451e39
lea eax, [ebp - 0x310]
push eax
lea eax, [ebp - 0x720]
push eax
call fcn.00470487
add esp, 0x18
test eax, eax
je 0x429464
lea eax, [ebp - 0x518]
push eax
lea eax, [ebp - 0x720]
push eax
call fcn.00470487
pop ecx
pop ecx
test eax, eax
je 0x429464
lea eax, [ebp - 0x928]
push eax
lea eax, [ebp - 0x720]
push eax
call fcn.00470487
pop ecx
pop ecx
test eax, eax
jne 0x4297c9
push dword [ebp - 0x954]
inc dword [ebp - 0x944]
lea eax, [ebp - 0x414]
push eax
call fcn.00470487
pop ecx
pop ecx
test eax, eax
je 0x4297c9
lea eax, [ebp - 0x414]
push eax
call fcn.00451e92
push dword [ebp - 0x954]
lea eax, [ebp - 0x414]
push eax
call fcn.00470487
add esp, 0xc
test eax, eax
je 0x4297c9
push esi
push 0x49ff18
mov edi, 0x104
lea eax, [ebp - 0x61c]
push edi
push eax
call fcn.0045285b
add esp, 0x10
lea eax, [ebp - 0x310]
xor esi, esi
inc esi
push 0x2dad
push str.C:UsersOfficeDocumentsVisual_StudioPAULANetwork.c
push esi
push esi
push eax
call fcn.004331d9
push 0x2dae
push str.C:UsersOfficeDocumentsVisual_StudioPAULANetwork.c
push esi
push esi
lea eax, [ebp - 0x20c]
push eax
call fcn.004331d9
push 0x2daf
push str.C:UsersOfficeDocumentsVisual_StudioPAULANetwork.c
push esi
push esi
lea eax, [ebp - 0x61c]
push eax
call fcn.004331d9
test eax, eax
lea eax, [ebp - 0x414]
je 0x42953b
push str._GetLastError_
push eax
lea eax, [ebp - 0x61c]
push eax
push str.:3:ClearAllTAMSNetConnections___encountered_a_problem:_WNetCancelConnection2___s____User:__s__FAILED:__s
call fcn.0040d9e1
add esp, 0x10
jmp 0x429550
push eax
lea eax, [ebp - 0x61c]
push eax
push str.:3:ClearAllTAMSNetConnections___has_delete_the_mapped_drive___s___User:__s_
call fcn.0040d9e1
add esp, 0xc
push 0x2db3
push str.C:UsersOfficeDocumentsVisual_StudioPAULANetwork.c
push esi
push esi
lea eax, [ebp - 0x310]
push eax
call fcn.004331d9
push 0x2db4
push str.C:UsersOfficeDocumentsVisual_StudioPAULANetwork.c
push esi
push esi
lea eax, [ebp - 0x20c]
push eax
call fcn.004331d9
push 0x2db5
push str.C:UsersOfficeDocumentsVisual_StudioPAULANetwork.c
push esi
push esi
push ebx
call fcn.004331d9
push 0x4cc388
push 0x49ffdc
lea eax, [ebp - 0x108]
push edi
push eax
call fcn.0045285b
push str._tmp
push ebx
call fcn.004529d5
add esp, 0x18
test eax, eax
jne 0x4295d2
lea eax, [ebp - 0x108]
push eax
push ebx
call fcn.004529d5
pop ecx
pop ecx
test eax, eax
je 0x429652
push edi
lea eax, [ebp - 0x310]
push eax
lea eax, [ebp - 0x108]
push eax
call fcn.00452b01
lea eax, [ebp - 0x108]
push str.tamspos
push eax
call fcn.004501bc
add esp, 0x14
lea eax, [ebp - 0x108]
push 0x2dbf
push str.C:UsersOfficeDocumentsVisual_StudioPAULANetwork.c
push esi
push esi
push eax
call fcn.004331d9
push edi
lea eax, [ebp - 0x310]
push eax
lea eax, [ebp - 0x108]
push eax
call fcn.00452b01
lea eax, [ebp - 0x108]
push str.client
push eax
call fcn.004501bc
add esp, 0x14
lea eax, [ebp - 0x108]
push 0x2dc3
push str.C:UsersOfficeDocumentsVisual_StudioPAULANetwork.c
push esi
push esi
push eax
call fcn.004331d9
push 0x20
lea eax, [ebp - 0x974]
push 0
push eax
call fcn.00466ad0
mov edi, dword [ebp - 0x97c]
lea eax, [ebp - 0x61c]
and dword [ebp - 0x958], 0
add esp, 0xc
mov dword [ebp - 0x964], eax
lea eax, [ebp - 0x20c]
mov dword [ebp - 0x970], esi
mov esi, dword [ebp - 0x954]
push 0x81
push esi
mov dword [ebp - 0x960], eax
lea eax, [ebp - 0x974]
push edi
push eax
call sub.MPR.dll_WNetAddConnection2A
test eax, eax
je 0x4297b1
push dword [ebp - 0x960]
call fcn.00451684
pop ecx
test eax, eax
jne 0x429a76
push 0x49fe60
push dword [ebp - 0x960]
call fcn.004529d5
pop ecx
pop ecx
test eax, eax
je 0x429a76
push 0x104
lea eax, [ebp - 0x824]
push 0
push eax
call fcn.00466ad0
push 0x104
push dword [ebp - 0x960]
lea eax, [ebp - 0x824]
push eax
call fcn.00452b01
push 0
push str._tamspos
push 0x49fe60
lea eax, [ebp - 0x824]
push 0x104
push eax
call fcn.004520e7
add esp, 0x2c
lea eax, [ebp - 0x824]
mov dword [ebp - 0x960], eax
lea eax, [ebp - 0x974]
push 0x81
push esi
push edi
push eax
call sub.MPR.dll_WNetAddConnection2A
test eax, eax
je 0x42978b
push str._GetLastError_
push dword [ebp - 0x960]
push 0
call fcn.0042c219
pop ecx
push eax
push dword [ebp - 0x960]
call fcn.0042c219
pop ecx
push eax
push str.:3:ClearAllTAMSNetConnections___FAILED_to_map_alternate:__CurUser:_s__s_:___s_:__s
call fcn.0040d9e1
lea eax, [ebp - 0x20c]
add esp, 0x14
mov dword [ebp - 0x960], eax
jmp 0x429a7c
push 0x104
push dword [ebp - 0x960]
lea eax, [ebp - 0x20c]
push eax
call fcn.00452b01
lea eax, [ebp - 0x20c]
add esp, 0xc
mov dword [ebp - 0x960], eax
xor eax, eax
push eax
push eax
push eax
push dword [ebp - 0x948]
call fcn.0042fb58
add esp, 0x10
xor eax, eax
lea edi, [eax + 1]
mov eax, dword [ebp - 0x93c]
inc eax
mov dword [ebp - 0x93c], eax
cmp eax, 0x5a
jle 0x42923c
mov eax, dword [ebp - 0x944]
mov dword [ebp - 0x948], edi
test eax, eax
jg 0x4297f8
call fcn.00406b44
test eax, eax
je 0x429802
cmp dword [ebp + 0x14], 0
je 0x429aea
xor eax, eax
mov dword [ebp - 0x948], edi
inc eax
mov esi, 0x21e88e
push eax
push 0
mov edi, esi
mov dword [ebp - 0x980], esi
call fcn.0043023f
pop ecx
pop ecx
mov dword [ebp - 0x984], eax
xor eax, eax
push 0x2e0a
push str.C:UsersOfficeDocumentsVisual_StudioPAULANetwork.c
inc eax
push eax
push eax
lea eax, [ebp - 0x310]
push eax
call fcn.004331d9
push 0x2e0b
mov dword [ebp - 0x944], eax
xor eax, eax
push str.C:UsersOfficeDocumentsVisual_StudioPAULANetwork.c
inc eax
push eax
push eax
push ebx
call fcn.004331d9
cmp dword [ebp + 0x14], 0
mov ecx, eax
mov dword [ebp - 0x93c], ecx
je 0x429a06
call fcn.00406b44
test eax, eax
jne 0x429a00
cmp dword [ebp - 0x950], eax
jne 0x429a00
push 0x4cc388
push 0x49ffdc
lea eax, [ebp - 0x108]
push 0x104
push eax
call fcn.0045285b
push str._tmp
push ebx
call fcn.004529d5
add esp, 0x18
test eax, eax
jne 0x4298cd
lea eax, [ebp - 0x108]
push eax
push ebx
call fcn.004529d5
pop ecx
pop ecx
test eax, eax
je 0x429a00
mov esi, 0x104
lea eax, [ebp - 0x310]
push esi
push eax
lea eax, [ebp - 0x108]
push eax
call fcn.00452b01
lea eax, [ebp - 0x108]
push str.client
push eax
call fcn.004501bc
add esp, 0x14
lea eax, [ebp - 0x108]
xor ebx, ebx
inc ebx
push 0x2e1b
push str.C:UsersOfficeDocumentsVisual_StudioPAULANetwork.c
push ebx
push ebx
push eax
call fcn.004331d9
mov edi, eax
lea eax, [ebp - 0x310]
push esi
push eax
lea eax, [ebp - 0x108]
push eax
call fcn.00452b01
lea eax, [ebp - 0x108]
push str.tamspos
push eax
call fcn.004501bc
add esp, 0x14
lea eax, [ebp - 0x108]
push 0x2e27
push str.C:UsersOfficeDocumentsVisual_StudioPAULANetwork.c
push ebx
push ebx
push eax
call fcn.004331d9
mov esi, eax
test esi, esi
je 0x429965
test edi, edi
jne 0x429adf
xor ebx, ebx
push ebx
push edi
push esi
push str.:8:ClearAllTAMSNetConnections___has_cleared_a_tamspos___d__d__d__connection_that_is_NOT_a_mapped_drive__This_should_never_happen.
call fcn.0040d9e1
push 0x20
lea eax, [ebp - 0x974]
push ebx
push eax
call fcn.00466ad0
add esp, 0x1c
mov dword [ebp - 0x964], ebx
xor ecx, ecx
mov dword [ebp - 0x958], ebx
inc ecx
lea eax, [ebp - 0x108]
mov dword [ebp - 0x960], eax
lea eax, [ebp - 0x974]
push ecx
push dword [ebp - 0x954]
mov dword [ebp - 0x970], ecx
push dword [ebp - 0x97c]
push eax
call sub.MPR.dll_WNetAddConnection2A
mov ebx, eax
mov dword [ebp - 0x980], ebx
test ebx, ebx
je 0x429a00
push str._GetLastError_
push ebx
push dword [ebp - 0x960]
call fcn.0042c219
pop ecx
push eax
push dword [ebp - 0x964]
call fcn.0042c219
pop ecx
push eax
lea eax, [ebp - 0x108]
push eax
push str.:9:ClearAllTAMSNetConnections___FAILED_to_restore_the__s_connection:__CurUser:_s__s_:_Error__u:__s
call fcn.0040d511
add esp, 0x18
mov ecx, dword [ebp - 0x93c]
xor ebx, ebx
inc ebx
mov eax, dword [ebp - 0x944]
test eax, eax
je 0x429a21
test ecx, ecx
je 0x429a21
test esi, esi
je 0x429a21
test edi, edi
je 0x429a21
xor ebx, ebx
cmp dword [ebp - 0x984], 0
jle 0x429a4a
push 2
push 0
call fcn.0043023f
pop ecx
pop ecx
test eax, eax
jne 0x429a44
push str.:7:RestoreLostNetworkDrives_0__succeeded_after_ClearAllTAMSNetConnections__
call fcn.0040d9e1
pop ecx
mov eax, dword [ebp - 0x944]
test ebx, ebx
je 0x429aea
push dword [ebp - 0x980]
push edi
push esi
push dword [ebp - 0x93c]
push eax
push dword [ebp - 0x988]
push str.:2:ClearAllTAMSNetConnections___has_terminated_the_connection___s_:_This_should_not_happen_regularly_:_Connections_terminated:__u___u___u___u__u.
call fcn.0040d9e1
add esp, 0x1c
jmp 0x429af3
mov eax, dword [ebp - 0x960]
push str._GetLastError_
push edi
push esi
push dword [ebp - 0x964]
push eax
push eax
call fcn.0042c219
pop ecx
push eax
push dword [ebp - 0x964]
call fcn.0042c219
pop ecx
push eax
push str.:3:ClearAllTAMSNetConnections___could_not_reestablish_the_mapped_drive__CurUser:_s__s_:_WNetAddConnection2A___s_____s_____s_____s___FAILED:__s
call fcn.0040d9e1
push edi
push esi
lea eax, [ebp - 0x974]
push eax
push dword [ebp - 0x948]
call fcn.0042fb58
add esp, 0x30
test eax, eax
jne 0x4297c4
push dword [ebp - 0x93c]
push str.:6:ClearAllTAMSNetConnections___FAILED_to_add_drive__c_to_the_lost_net_drive_register_
call fcn.0040d511
pop ecx
pop ecx
jmp 0x4297c4
mov ecx, dword [ebp - 0x93c]
jmp 0x429a09
cmp dword [ebp - 0x948], 0
je 0x429af8
xor eax, eax
inc eax
jmp 0x429afa
xor eax, eax
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.004654a8
leave
ret