Function at 0x401000
Capabilities:
Connect network resource

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x17c
mov eax, dword [0x427164]
xor eax, ebp
mov dword [ebp - 4], eax
mov dword [ebp - 0x138], 0
mov dword [ebp - 0x15c], 1
mov dword [ebp - 0x158], 0xffffffff
mov dword [ebp - 0x148], 0
mov dword [ebp - 0x154], 0
mov dword [ebp - 0x150], 0
mov dword [ebp - 0x14c], 0
push 0x4270d4
lea eax, [ebp - 0x68]
push eax
call fcn.0040e220
add esp, 8
push 0x61
mov ecx, dword [ebp + 8]
push ecx
lea edx, [ebp - 0x68]
push edx
call fcn.0040e4c0
add esp, 0xc
mov eax, 1
imul ecx, eax, 0x63
mov dword [ebp - 0x144], ecx
cmp dword [ebp - 0x144], 0x64
jae 0x401095
jmp 0x40109a
call fcn.00401784
mov edx, dword [ebp - 0x144]
mov byte [ebp + edx - 0x68], 0
lea eax, [ebp - 0x68]
push eax
call fcn.0040e430
add esp, 4
add eax, 1
push eax
lea ecx, [ebp - 0x68]
push ecx
lea edx, [ebp - 0x130]
push edx
call fcn.0040eb0d
add esp, 0xc
cmp dword [ebp + 0xc], 0
je 0x401121
cmp dword [ebp + 0x10], 0
je 0x401121
mov dword [ebp - 0x178], 1
mov dword [ebp - 0x16c], 0
mov dword [ebp - 0x160], 0
lea eax, [ebp - 0x68]
mov dword [ebp - 0x168], eax
push 1
push 0
mov ecx, dword [ebp - 0x168]
push ecx
call sub.MPR.dll_WNetCancelConnection2A
push 0
mov edx, dword [ebp + 0xc]
push edx
mov eax, dword [ebp + 0x10]
push eax
lea ecx, [ebp - 0x17c]
push ecx
call sub.MPR.dll_WNetAddConnection2A
lea edx, [ebp - 0x150]
push edx
lea eax, [ebp - 0x154]
push eax
lea ecx, [ebp - 0x148]
push ecx
mov edx, dword [ebp - 0x158]
push edx
lea eax, [ebp - 0x138]
push eax
mov ecx, dword [ebp - 0x15c]
push ecx
lea edx, [ebp - 0x130]
push edx
call sub.NETAPI32.dll_NetWkstaUserEnum
mov dword [ebp - 0x13c], eax
cmp dword [ebp - 0x13c], 0
je 0x401176
cmp dword [ebp - 0x13c], 0xea
jne 0x40126c
mov eax, dword [ebp - 0x138]
mov dword [ebp - 0x134], eax
cmp dword [ebp - 0x134], 0
je 0x40126a
mov dword [ebp - 0x140], 0
jmp 0x4011aa
mov ecx, dword [ebp - 0x140]
add ecx, 1
mov dword [ebp - 0x140], ecx
mov edx, dword [ebp - 0x140]
cmp edx, dword [ebp - 0x148]
jae 0x40126a
cmp dword [ebp - 0x134], 0
jne 0x4011dc
push 0x8a
push str.find_token.c
push str.pTmpBuf___NULL
call fcn.0040e192
add esp, 0xc
cmp dword [ebp - 0x134], 0
jne 0x4011ff
push str.An_access_violation_has_occurred_n
push 2
call fcn.00404708
add esp, 4
push eax
call fcn.00401550
add esp, 8
jmp 0x40126a
push 0x24
mov ecx, dword [ebp - 0x134]
mov edx, dword [ecx]
push edx
call fcn.00402265
add esp, 8
test eax, eax
jne 0x401247
mov eax, dword [ebp + 8]
push eax
push 0x427138
call fcn.00401590
add esp, 8
mov ecx, dword [ebp - 0x134]
mov edx, dword [ecx]
push edx
mov eax, dword [ebp - 0x134]
mov ecx, dword [eax + 4]
push ecx
push str._t_t_s_s_n
call fcn.00401610
add esp, 0xc
mov edx, dword [ebp - 0x134]
add edx, 0x10
mov dword [ebp - 0x134], edx
mov eax, dword [ebp - 0x14c]
add eax, 1
mov dword [ebp - 0x14c], eax
jmp 0x40119b
jmp 0x40128f
mov ecx, dword [ebp - 0x13c]
push ecx
mov edx, dword [ebp + 8]
push edx
push str._s_t_tError:__d_n
push 2
call fcn.00404708
add esp, 4
push eax
call fcn.00401550
add esp, 0x10
cmp dword [ebp - 0x13c], 0xea
je 0x401121
cmp dword [ebp - 0x138], 0
je 0x4012be
mov eax, dword [ebp - 0x138]
push eax
call sub.NETAPI32.dll_NetApiBufferFree
mov dword [ebp - 0x138], 0
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0040185f
mov esp, ebp
pop ebp
ret