Function at 0x46a2d6
Capabilities:
Connect network resource
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x9ac
mov eax, dword [0x4e22e4]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 8]
push ebx
push esi
mov dword [ebp - 0x968], eax
mov eax, dword [ebp + 0xc]
push edi
mov dword [ebp - 0x96c], eax
mov eax, dword [ebp + 0x10]
xor ebx, ebx
mov esi, 0x103
push esi
mov dword [ebp - 0x97c], eax
lea eax, [ebp - 0x637]
push ebx
push eax
mov dword [ebp - 0x970], ebx
mov byte [ebp - 0x638], bl
call fcn.00401f80
add esp, 0xc
push esi
lea eax, [ebp - 0x217]
push ebx
push eax
mov byte [ebp - 0x218], bl
call fcn.00401f80
add esp, 0xc
push esi
lea eax, [ebp - 0x52f]
push ebx
push eax
mov byte [ebp - 0x530], bl
call fcn.00401f80
add esp, 0xc
push esi
lea eax, [ebp - 0x73f]
push ebx
push eax
mov byte [ebp - 0x740], bl
call fcn.00401f80
add esp, 0xc
push esi
lea eax, [ebp - 0x31f]
push ebx
push eax
mov byte [ebp - 0x320], bl
call fcn.00401f80
add esp, 0xc
push esi
lea eax, [ebp - 0x427]
push ebx
push eax
mov byte [ebp - 0x428], bl
call fcn.00401f80
add esp, 0xc
push esi
lea eax, [ebp - 0x94f]
push ebx
push eax
mov byte [ebp - 0x950], bl
call fcn.00401f80
add esp, 0xc
push 7
pop ecx
xor eax, eax
lea edi, [ebp - 0x9a8]
push esi
mov dword [ebp - 0x9ac], ebx
rep stosd dword es:[edi], eax
mov byte [ebp - 0x110], al
lea eax, [ebp - 0x10f]
push ebx
push eax
mov dword [ebp - 0x988], ebx
mov dword [ebp - 0x978], ebx
call fcn.00401f80
mov edx, dword [ebp - 0x968]
add esp, 0xc
call fcn.00439e45
test eax, eax
jne 0x46ab73
mov edx, dword [ebp - 0x96c]
call fcn.00439e45
test eax, eax
jne 0x46ab73
push dword [ebp - 0x968]
lea ebx, [esi + 1]
mov ecx, ebx
lea eax, [ebp - 0x320]
call fcn.00438c78
pop ecx
mov ecx, eax
call fcn.00439cb9
mov eax, ecx
push eax
mov ecx, ebx
lea eax, [ebp - 0x428]
call fcn.00438c78
pop ecx
mov esi, eax
call fcn.00438af2
mov ecx, esi
call fcn.00467066
test eax, eax
jne 0x46a463
mov eax, esi
push 0x103
push eax
push eax
call fcn.0046791d
add esp, 0xc
lea eax, [ebp - 0x428]
push eax
lea ecx, [ebp - 0x950]
call fcn.004676fb
pop ecx
lea eax, [ebp - 0x970]
push eax
push 0x20019
xor esi, esi
push esi
push str.Network
push closesocket
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x46a4a6
push dword [ebp - 0x970]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
inc esi
call fcn.004957af
test eax, eax
je 0x46a536
xor eax, eax
mov word [ebp - 0x960], ax
lea edi, [ebp - 0x95e]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosw word es:[edi], ax
lea eax, [ebp - 0x960]
push eax
call fcn.0041b326
mov eax, dword [ebp - 0x958]
add eax, 0xfffffff8
pop ecx
cmp ax, 0xd
ja 0x46ab73
cmp dword [0x5dd854], 3
jle 0x46a506
call fcn.0041a958
sub eax, dword [0x5dd918]
cmp eax, 0x5265c00
jb 0x46ab73
cmp dword [ebp + 0x14], 0
je 0x46ab73
call fcn.0041a958
sub eax, dword [0x5dd918]
cmp eax, 0x493e0
jb 0x46ab73
call fcn.0041a958
inc dword [0x5dd854]
mov dword [0x5dd918], eax
call fcn.00494c40
test eax, eax
jne 0x46ab73
xor edi, edi
mov dword [ebp - 0x974], edi
mov dword [ebp - 0x984], edi
mov dword [ebp - 0x98c], edi
cmp esi, edi
je 0x46a9c5
mov dword [ebp - 0x964], 0x41
movsx eax, byte [ebp - 0x964]
push eax
push str.Network_c
mov dword [ebp - 0x980], eax
lea eax, [ebp - 0x638]
push ebx
push eax
call fcn.004394bf
add esp, 0x10
lea eax, [ebp - 0x970]
push eax
push 0x20019
push edi
lea eax, [ebp - 0x638]
push eax
push closesocket
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x46a9a8
push ebx
lea eax, [ebp - 0x218]
push edi
push eax
mov dword [ebp - 0x978], 0x103
call fcn.00401f80
add esp, 0xc
lea eax, [ebp - 0x978]
push eax
lea eax, [ebp - 0x218]
push eax
lea eax, [ebp - 0x988]
push eax
push edi
mov edi, dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
push str.RemotePath
push dword [ebp - 0x970]
call edi
lea edx, [ebp - 0x218]
call fcn.004399f2
mov esi, edx
call fcn.00439946
mov eax, esi
push str.tamspos
push eax
call fcn.004397d9
pop ecx
pop ecx
test eax, eax
jne 0x46a62f
mov eax, esi
push 0x4c3590
push eax
call fcn.004397d9
pop ecx
pop ecx
test eax, eax
je 0x46a639
mov dword [ebp - 0x984], 1
push ebx
lea eax, [ebp - 0x530]
push 0
push eax
mov dword [ebp - 0x978], 0x103
call fcn.00401f80
add esp, 0xc
lea eax, [ebp - 0x978]
push eax
lea eax, [ebp - 0x530]
push eax
lea eax, [ebp - 0x988]
push eax
push 0
push str.UserName
push dword [ebp - 0x970]
call edi
lea edx, [ebp - 0x530]
call fcn.004399f2
mov esi, edx
call fcn.00439946
push dword [ebp - 0x970]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
and dword [ebp - 0x970], 0
lea eax, [ebp - 0x218]
push eax
mov ecx, ebx
lea eax, [ebp - 0x740]
call fcn.00438c78
pop ecx
mov ecx, eax
call fcn.00439cb9
lea eax, [ebp - 0x320]
push eax
mov eax, ecx
push eax
call fcn.00401811
pop ecx
pop ecx
test eax, eax
je 0x46a705
lea eax, [ebp - 0x428]
push eax
lea eax, [ebp - 0x740]
push eax
call fcn.00401811
pop ecx
pop ecx
test eax, eax
je 0x46a705
lea eax, [ebp - 0x950]
push eax
lea eax, [ebp - 0x740]
push eax
call fcn.00401811
pop ecx
pop ecx
test eax, eax
jne 0x46a9a8
push dword [ebp - 0x96c]
inc dword [ebp - 0x974]
lea eax, [ebp - 0x530]
push eax
call fcn.00401811
pop ecx
pop ecx
test eax, eax
je 0x46a9a8
lea esi, [ebp - 0x530]
call fcn.00438af2
push dword [ebp - 0x96c]
mov eax, esi
push eax
call fcn.00401811
pop ecx
pop ecx
test eax, eax
je 0x46a9a8
push dword [ebp - 0x980]
lea eax, [ebp - 0x638]
push 0x4c35a4
push ebx
push eax
call fcn.004394bf
add esp, 0x10
xor esi, esi
inc esi
push esi
lea eax, [ebp - 0x320]
push eax
call fcn.00465f51
push esi
lea eax, [ebp - 0x218]
push eax
call fcn.00465f51
push esi
lea eax, [ebp - 0x638]
push eax
call fcn.00465f51
push esi
lea eax, [ebp - 0x320]
push eax
call fcn.00465f51
push esi
lea eax, [ebp - 0x218]
push eax
call fcn.00465f51
push esi
push dword [ebp - 0x968]
call fcn.00465f51
push 0x4e3550
push 0x4c35a8
lea eax, [ebp - 0x110]
push ebx
push eax
call fcn.004394bf
push str._tmp
push dword [ebp - 0x968]
call fcn.004397d9
add esp, 0x18
test eax, eax
jne 0x46a7fb
lea eax, [ebp - 0x110]
push eax
push dword [ebp - 0x968]
call fcn.004397d9
pop ecx
pop ecx
test eax, eax
je 0x46a856
lea eax, [ebp - 0x320]
push eax
mov ecx, ebx
lea eax, [ebp - 0x110]
call fcn.00438c78
pop ecx
mov ecx, str.tamspos
mov ebx, eax
call fcn.0043af29
push 1
mov eax, ebx
push eax
call fcn.00465f51
lea eax, [ebp - 0x320]
push eax
mov ecx, 0x104
mov eax, ebx
call fcn.00438c78
pop ecx
mov ecx, str.client
call fcn.0043af29
push 1
mov eax, ebx
push eax
call fcn.00465f51
xor esi, esi
mov ebx, 0x104
inc esi
push 0x20
xor edi, edi
lea eax, [ebp - 0x9ac]
push edi
push eax
call fcn.00401f80
add esp, 0xc
push 0x81
push dword [ebp - 0x96c]
lea eax, [ebp - 0x638]
push dword [ebp - 0x97c]
mov dword [ebp - 0x99c], eax
lea eax, [ebp - 0x218]
mov dword [ebp - 0x998], eax
lea eax, [ebp - 0x9ac]
push eax
mov dword [ebp - 0x9a8], esi
mov dword [ebp - 0x990], edi
call dword [sym.imp.MPR.dll_WNetAddConnection2A]
test eax, eax
je 0x46a997
mov edx, dword [ebp - 0x998]
call fcn.00439e45
test eax, eax
jne 0x46a95c
push 0x4c3590
push dword [ebp - 0x998]
call fcn.004397d9
pop ecx
pop ecx
test eax, eax
je 0x46a95c
push 0x103
lea eax, [ebp - 0x847]
push edi
push eax
mov byte [ebp - 0x848], 0
call fcn.00401f80
add esp, 0xc
push dword [ebp - 0x998]
mov ecx, ebx
lea eax, [ebp - 0x848]
call fcn.00438c78
pop ecx
push edi
push str._tamspos
push 0x4c3590
push ebx
push eax
call fcn.0043a723
add esp, 0x14
push 0x81
push dword [ebp - 0x96c]
lea eax, [ebp - 0x848]
push dword [ebp - 0x97c]
mov dword [ebp - 0x998], eax
lea eax, [ebp - 0x9ac]
push eax
call dword [sym.imp.MPR.dll_WNetAddConnection2A]
test eax, eax
lea eax, [ebp - 0x218]
je 0x46a97d
mov dword [ebp - 0x998], eax
push dword [ebp - 0x97c]
mov cl, byte [ebp - 0x964]
push dword [ebp - 0x96c]
lea edx, [ebp - 0x9ac]
call fcn.00469668
pop ecx
pop ecx
jmp 0x46a9a2
push dword [ebp - 0x998]
mov ecx, ebx
call fcn.00438c78
lea eax, [ebp - 0x218]
pop ecx
mov dword [ebp - 0x998], eax
mov cl, byte [ebp - 0x964]
call fcn.0046a2c6
mov dword [ebp - 0x98c], esi
inc dword [ebp - 0x964]
xor edi, edi
cmp dword [ebp - 0x964], 0x5a
jle 0x46a569
cmp dword [ebp - 0x974], edi
jg 0x46a9ce
call fcn.004957af
test eax, eax
je 0x46a9d7
cmp dword [ebp + 0x14], edi
je 0x46ab65
mov eax, 0x21e88e
push 1
mov esi, eax
mov edi, eax
call fcn.004693e4
pop ecx
mov dword [ebp - 0x964], eax
push 1
lea eax, [ebp - 0x320]
push eax
call fcn.00465f51
push 1
push dword [ebp - 0x968]
mov dword [ebp - 0x980], eax
call fcn.00465f51
cmp dword [ebp + 0x14], 0
mov dword [ebp - 0x974], eax
je 0x46ab30
call fcn.004957af
test eax, eax
jne 0x46ab30
cmp dword [ebp - 0x984], eax
jne 0x46ab30
push 0x4e3550
push 0x4c35a8
lea eax, [ebp - 0x110]
push ebx
push eax
call fcn.004394bf
push str._tmp
push dword [ebp - 0x968]
call fcn.004397d9
add esp, 0x18
test eax, eax
jne 0x46aa82
lea eax, [ebp - 0x110]
push eax
push dword [ebp - 0x968]
call fcn.004397d9
pop ecx
pop ecx
test eax, eax
je 0x46ab30
lea eax, [ebp - 0x320]
push eax
mov ecx, ebx
lea eax, [ebp - 0x110]
call fcn.00438c78
pop ecx
mov ecx, str.client
mov ebx, eax
call fcn.0043af29
push 1
mov eax, ebx
push eax
call fcn.00465f51
mov edi, eax
lea eax, [ebp - 0x320]
push eax
mov ecx, 0x104
mov eax, ebx
call fcn.00438c78
pop ecx
mov ecx, str.tamspos
call fcn.0043af29
push 1
mov eax, ebx
push eax
call fcn.00465f51
mov esi, eax
test esi, esi
je 0x46aae1
test edi, edi
jne 0x46ab30
push 0x20
xor ebx, ebx
lea eax, [ebp - 0x9ac]
push ebx
push eax
call fcn.00401f80
add esp, 0xc
xor eax, eax
inc eax
push eax
push dword [ebp - 0x96c]
mov dword [ebp - 0x9a8], eax
push dword [ebp - 0x97c]
lea eax, [ebp - 0x9ac]
lea ecx, [ebp - 0x110]
push eax
mov dword [ebp - 0x99c], ebx
mov dword [ebp - 0x998], ecx
mov dword [ebp - 0x990], ebx
call dword [sym.imp.MPR.dll_WNetAddConnection2A]
xor eax, eax
cmp dword [ebp - 0x980], eax
je 0x46ab4e
cmp dword [ebp - 0x974], eax
je 0x46ab4e
cmp esi, eax
je 0x46ab4e
cmp edi, eax
je 0x46ab4e
xor esi, esi
jmp 0x46ab51
xor esi, esi
inc esi
cmp dword [ebp - 0x964], eax
jle 0x46ab61
push 2
call fcn.004693e4
pop ecx
test esi, esi
jne 0x46ab6e
cmp dword [ebp - 0x98c], 0
je 0x46ab73
xor eax, eax
inc eax
jmp 0x46ab75
xor eax, eax
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.00401317
leave
ret