Function at 0x40abb0
Capabilities:
Connect network resource

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x40c430
push 0x40b530
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x1f8
push ebx
push esi
push edi
mov dword [ebp - 0x18], esp
mov ecx, dword [0x40e034]
lea edx, [ecx + 0xc5]
mov eax, dword [0x40e040]
and edx, eax
mov esi, dword [0x40e024]
add esi, edx
mov dword [0x40e024], esi
mov edi, 0xd3ac6
sub edi, eax
mov eax, dword [0x40e008]
xor edx, edx
div edi
mov ebx, eax
mov eax, dword [0x40e01c]
lea edx, [eax + ebx]
mov edi, dword [0x40e030]
lea edx, [edi + edx + 0x299]
mov dword [0x40e030], edx
mov dword [ebp - 0x40], 0x55
mov edi, dword [0x40e03c]
mov edx, edi
sar edx, cl
or edx, dword [0x40e028]
sub eax, edx
mov dword [0x40e01c], eax
mov dword [ebp - 0x68], 0x296
mov dword [ebp - 0x38], 0x2b
mov dword [ebp - 0x2c], 0x166
mov eax, dword [0x40e00c]
mov edx, dword [0x40e038]
mov ecx, edx
sar eax, cl
or eax, 0x1a0
sub dword [0x40e030], eax
mov dword [ebp - 0x70], 0x89
mov ecx, dword [0x40e010]
add ecx, 0x322
mov eax, 0x366
sar eax, cl
lea ecx, [ebx + ebx*4]
lea ecx, [ebx + ecx*2]
shl ecx, 6
and ecx, edx
add ecx, 0x69398
xor edx, edx
div ecx
mov dword [0x40e010], eax
mov dword [ebp - 0x4c], 0x12f
lea eax, [edi + edi*4]
lea eax, [eax + eax*4]
lea eax, [eax + eax*4]
shl eax, 3
mov dword [0x40e040], eax
mov dword [ebp - 0x50], 0xd9
mov edx, dword [0x40e034]
lea ecx, [edx + 0xb2f48]
mov eax, dword [0x40e014]
xor edx, edx
div ecx
mov edx, esi
mov ecx, dword [0x40e040]
shl edx, cl
shl edx, 0xa4
and eax, edx
mov dword [0x40e014], eax
mov dword [ebp - 0x24], 0x396
mov dword [ebp - 0x3c], 0x100
mov edx, 0x32
mov ecx, dword [0x40e020]
shl edx, cl
or edx, 0x19a
mov eax, dword [0x40e010]
mov ecx, dword [0x40e030]
shl eax, cl
xor edx, eax
mov dword [0x40e004], edx
mov ecx, dword [0x40e014]
add ecx, 0xfffffdaf
shl esi, cl
xor esi, dword [0x40e02c]
mov eax, ebx
shl eax, 4
sub eax, ebx
neg eax
lea eax, [eax + eax*8]
and esi, eax
and esi, 0x360
mov dword [0x40e02c], esi
mov ecx, dword [0x40e028]
shl ecx, 0x58
xor ecx, edx
and dword [0x40e034], ecx
mov dword [ebp - 0x5c], 0x2fe
mov eax, esi
or eax, 0x29e
lea ecx, [eax + ebx*2]
sub ecx, dword [0x40e028]
add ecx, dword [0x40e038]
mov dword [0x40e008], ecx
mov ecx, esi
or ecx, edi
mov eax, dword [0x40e00c]
and eax, ecx
lea ecx, [eax + 0x29]
or ecx, edi
sub edi, ecx
mov dword [0x40e03c], edi
mov ebx, 0x119
mov dword [ebp - 0x48], ebx
and edx, dword [0x40e030]
or eax, edx
mov dword [0x40e00c], eax
mov dword [ebp - 0x54], 0x2bc
xor esi, 0x39c
and dword [0x40e010], esi
mov dword [ebp - 0x78], 0x168
mov dword [ebp - 0x6c], 0xf6
xor edi, edi
mov dword [ebp - 0x28], edi
mov dword [ebp - 0x34], 0x3f7
mov dword [ebp - 0x1c], 0x2c7
mov esi, 0x216
mov dword [ebp - 0x20], esi
mov dword [ebp - 0x64], 0x29a
mov dword [ebp - 0x58], 0xb
mov dword [ebp - 4], edi
mov dword [ebp - 0x6c], edi
mov dword [ebp - 0x54], 0x2fc
mov dword [ebp - 0x7c], str.tnytwglqgyfyyvxcu
push 0x4d7
push str.tnytwglqgyfyyvxcu
push 0x5c1
call dword [sym.imp.ADVAPI32.dll_RegRestoreKeyA]
mov dword [ebp - 0x58], 0xfffcfe13
mov dword [ebp - 0x58], 3
mov dword [ebp - 0x80], 0xd35
lea edx, [ebp - 0xe0]
push edx
lea eax, [ebp - 0xd0]
push eax
lea ecx, [ebp - 0xa8]
push ecx
lea edx, [ebp - 0x80]
push edx
push 0x20
push 0xd3c
call sub.pdh.dll_PdhFormatFromRawValue
mov dword [ebp - 0x38], edi
mov dword [ebp - 0x64], 0x58158
mov dword [ebp - 0xe4], 0x6ac
push 0x6ac
push 0xb56
push edi
push 0x3a4
lea eax, [ebp - 0x110]
push eax
push 0x3dc
call dword [sym.imp.GDI32.dll_CreateDIBSection]
mov dword [ebp - 0x38], edi
mov dword [ebp - 0x64], 0x1ef
mov dword [ebp - 0x134], 4
push 4
push 0x66
push 0x6e
lea ecx, [ebp - 0x130]
push ecx
call sub.MPR.dll_WNetAddConnection2A
mov dword [ebp - 0x40], edi
mov dword [ebp - 0x24], edi
mov dword [ebp - 0x138], 0x195
mov dword [ebp - 0x14c], 0x670
lea edx, [ebp - 0x148]
push edx
push 0x670
push 0x195
push 0xf27
call dword [sym.imp.USER32.dll_GetMenuItemRect]
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x68]
jmp 0x40af8f
mov ecx, dword [ebp - 0x40]
lea ecx, [ecx + ecx*4]
lea edx, [ecx + ecx*8]
shl edx, 3
mov ecx, 0x13c
sub ecx, edx
mov dword [ebp - 0x30], ecx
mov dword [ebp - 0x44], 0xa0000000
mov edx, dword [ebp - 0x3c]
or edx, 0x1d7
mov ecx, dword [ebp - 0x40]
or ecx, edx
mov dword [ebp - 0x40], ecx
mov edx, ecx
and edx, 0xd9
mov ecx, dword [ebp - 0x38]
add ecx, edx
mov dword [ebp - 0x38], ecx
mov dword [ebp - 0x74], 0x20f
and ecx, 0x35c
and dword [ebp - 0x70], ecx
mov dword [0x600460], 0
cmp dword [0x600460], 0xc
jge 0x40b3ff
mov edx, eax
mov ecx, dword [ebp - 0x54]
shl edx, cl
shl edx, 0x47
xor dword [ebp - 0x38], edx
mov ecx, ebx
xor ecx, dword [ebp - 0x78]
xor dword [ebp - 0x70], ecx
mov edx, 0x4f7
sub edx, eax
mov dword [ebp - 0x60], edx
mov eax, dword [ebp - 0x44]
xor eax, dword [ebp - 0x4c]
or eax, 0x2e4
sub dword [ebp - 0x30], eax
mov dword [ebp - 4], 1
mov ecx, edi
shr ecx, 0x68
sub edx, ecx
mov dword [ebp - 0x60], edx
mov eax, 0x241
sub eax, dword [ebp - 0x74]
add dword [ebp - 0x38], eax
mov ecx, dword [ebp - 0x54]
sub ecx, dword [ebp - 0x30]
and ecx, edx
add dword [ebp - 0x2c], ecx
mov edx, dword [ebp - 0x5c]
and edx, esi
xor edx, 0x278
sub dword [ebp - 0x44], edx
mov ecx, dword [ebp - 0x3c]
or ecx, 0x2e2
add ecx, 0xce8b0
mov eax, dword [ebp - 0x78]
xor edx, edx
div ecx
mov dword [ebp - 0x78], eax
xor eax, 0x1b0
or dword [ebp - 0x40], eax
mov ecx, dword [ebp - 0x60]
and ecx, 0x3ca
add ecx, 0x16b48
mov eax, dword [ebp - 0x3c]
xor edx, edx
div ecx
mov dword [ebp - 0x3c], eax
mov edx, dword [ebp - 0x5c]
and edx, dword [ebp - 0x58]
xor esi, edx
mov dword [ebp - 0x20], esi
mov ecx, 0xfffffd32
sub ecx, dword [ebp - 0x4c]
add dword [ebp - 0x30], ecx
mov edx, eax
sub edx, dword [ebp - 0x1c]
and dword [ebp - 0x64], edx
mov ecx, dword [ebp - 0x38]
add ecx, 0xffffff5b
and ecx, 0x229
xor dword [ebp - 0x34], ecx
mov edx, dword [ebp - 0x60]
or edx, 0x77a0
mov dword [ebp - 0x78], edx
mov ecx, dword [ebp - 0x4c]
add ecx, 0x153
sar ebx, cl
or dword [ebp - 0x54], ebx
mov ebx, dword [ebp - 0x44]
lea ecx, [ebx + ebx*4]
lea ecx, [ecx + ecx*8]
shl ecx, 4
add ecx, dword [ebp - 0x68]
add ecx, ebx
mov dword [ebp - 0x68], ecx
mov ecx, dword [ebp - 0x50]
or ecx, dword [ebp - 0x58]
add esi, ecx
mov dword [ebp - 0x20], esi
mov ecx, dword [ebp - 0x54]
mov ebx, dword [ebp - 0x5c]
add ecx, ebx
or dword [ebp - 0x74], ecx
mov ebx, dword [ebp - 0x28]
imul ebx, dword [ebp - 0x68]
or ebx, 0x189
mov dword [ebp - 0x48], ebx
mov dword [ebp - 0x78], edx
lea ecx, [esi + esi*2]
shl ecx, 3
sub ecx, esi
lea edx, [ecx + ecx*8]
shl edx, 2
sub edx, esi
and dword [ebp - 0x6c], edx
mov ecx, dword [ebp - 0x2c]
xor ecx, 0x2b3
add ecx, 0x96640
xor edx, edx
div ecx
mov dword [ebp - 0x3c], eax
mov edx, 0x143
sub edx, dword [ebp - 0x2c]
xor edx, dword [ebp - 0x44]
xor edx, dword [ebp - 0x5c]
mov dword [ebp - 0x44], edx
mov eax, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x1c]
add eax, ecx
mov ecx, dword [ebp - 0x6c]
shr eax, cl
xor dword [ebp - 0x38], eax
mov dword [ebp - 0x150], str.tnytwglqgyfyyvxcu
push 0x4d7
push str.tnytwglqgyfyyvxcu
push 0x5c1
call dword [sym.imp.ADVAPI32.dll_RegRestoreKeyA]
mov edx, dword [ebp - 0x5c]
mov eax, dword [ebp - 0x3c]
add edx, eax
xor dword [ebp - 0x1c], edx
sub ebx, 0x3bf
mov dword [ebp - 0x48], ebx
mov dword [ebp - 0x154], 0xd35
lea ecx, [ebp - 0x1b4]
push ecx
lea edx, [ebp - 0x1a4]
push edx
lea eax, [ebp - 0x17c]
push eax
lea ecx, [ebp - 0x154]
push ecx
push 0x20
push 0xd3c
call sub.pdh.dll_PdhFormatFromRawValue
mov edx, dword [ebp - 0x34]
or edx, dword [ebp - 0x68]
sub dword [ebp - 0x6c], edx
mov edx, dword [ebp - 0x60]
lea eax, [edx + edx*4]
lea ecx, [eax + eax*8]
shl ecx, 3
sub ecx, edx
shl ecx, 1
mov eax, 0x24e
shl eax, cl
xor dword [ebp - 0x58], eax
mov dword [ebp - 0x1b8], 0x6ac
push 0x6ac
push 0xb56
push 0
push 0x3a4
lea ecx, [ebp - 0x1e4]
push ecx
push 0x3dc
call dword [sym.imp.GDI32.dll_CreateDIBSection]
mov edx, esi
and edx, dword [ebp - 0x28]
and edx, 0x3a5
sub dword [ebp - 0x54], edx
mov eax, ebx
mov ecx, ebx
shl eax, cl
and dword [ebp - 0x54], eax
mov dword [ebp - 0x208], 4
push 4
push 0x66
push 0x6e
lea ecx, [ebp - 0x204]
push ecx
call sub.MPR.dll_WNetAddConnection2A
sub edi, dword [ebp - 0x50]
add edi, dword [ebp - 0x30]
mov dword [ebp - 0x60], edi
mov edx, dword [ebp - 0x54]
imul edx, esi
sub dword [ebp - 0x34], edx
mov eax, dword [ebp - 0x4c]
xor eax, 0x2b6
or eax, dword [ebp - 0x1c]
mov dword [ebp - 0x24], eax
lea ecx, [ebx + 0x1ea]
mov edx, 0x370
sar edx, cl
xor dword [ebp - 0x6c], edx
mov ecx, dword [ebp - 0x68]
shr ecx, 0x8d
xor ebx, ecx
mov dword [ebp - 0x48], ebx
lea ecx, [edi + edi*2]
lea edx, [ecx + ecx*8]
shl edx, 1
sub edx, edi
shl edx, 1
mov ecx, edx
sub ecx, dword [ebp - 0x78]
add ecx, 0x318f8
xor edx, edx
div ecx
mov edi, eax
mov dword [ebp - 0x24], edi
and dword [ebp - 0x5c], 0xe7
and dword [ebp - 0x58], 0x7e638
mov edx, edi
and edx, dword [ebp - 0x4c]
xor edx, dword [ebp - 0x44]
sub edi, edx
mov dword [ebp - 0x24], edi
mov dword [ebp - 0x50], 0x273
mov eax, edi
imul eax, dword [ebp - 0x70]
xor eax, 0x2a6
and ebx, eax
mov dword [ebp - 0x48], ebx
lea ecx, [esi + esi*4]
shl ecx, 3
sub ecx, esi
shl ecx, 4
add ecx, 0x127
xor dword [ebp - 0x74], ecx
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x38]
jmp 0x40b396
mov ecx, dword [ebp - 0x3c]
imul ecx, dword [ebp - 0x40]
xor ecx, 0x13b
sub dword [ebp - 0x58], ecx
mov edx, ebx
imul edx, dword [ebp - 0x60]
and edx, dword [ebp - 0x70]
and dword [ebp - 0x50], edx
mov ecx, dword [ebp - 0x34]
add ecx, eax
mov edx, 0xa0
shl edx, cl
and dword [ebp - 0x3c], edx
mov ecx, dword [ebp - 0x60]
imul ecx, ecx
mov dword [ebp - 0x2c], ecx
mov ecx, dword [ebp - 0x4c]
mov edx, dword [ebp - 0x1c]
lea ecx, [ecx + edx + 0x5a6b3]
xor edx, edx
div ecx
mov dword [ebp - 0x38], eax
mov edx, ebx
xor edx, 0x64
or dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x5c]
add eax, 0xffffffcd
xor esi, eax
mov dword [ebp - 0x20], esi
inc dword [0x600460]
mov eax, dword [ebp - 0x68]
jmp 0x40afe7
call fcn.00403280
mov ecx, dword [ebp - 0x10]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret