Function at 0x46f689
Capabilities:
Connect network resource
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x9b4
mov eax, dword [0x5c4e68]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 8]
push ebx
push esi
mov dword [ebp - 0x958], eax
mov eax, dword [ebp + 0xc]
push edi
mov dword [ebp - 0x95c], eax
mov eax, dword [ebp + 0x10]
xor ebx, ebx
mov esi, 0x103
push esi
mov dword [ebp - 0x968], eax
lea eax, [ebp - 0x637]
push ebx
push eax
mov dword [ebp - 0x960], ebx
mov byte [ebp - 0x638], bl
call fcn.005117f0
add esp, 0xc
push esi
lea eax, [ebp - 0x217]
push ebx
push eax
mov byte [ebp - 0x218], bl
call fcn.005117f0
add esp, 0xc
push esi
lea eax, [ebp - 0x427]
push ebx
push eax
mov byte [ebp - 0x428], bl
call fcn.005117f0
add esp, 0xc
push esi
lea eax, [ebp - 0x73f]
push ebx
push eax
mov byte [ebp - 0x740], bl
call fcn.005117f0
add esp, 0xc
push esi
lea eax, [ebp - 0x31f]
push ebx
push eax
mov byte [ebp - 0x320], bl
call fcn.005117f0
add esp, 0xc
push esi
lea eax, [ebp - 0x52f]
push ebx
push eax
mov byte [ebp - 0x530], bl
call fcn.005117f0
add esp, 0xc
push esi
lea eax, [ebp - 0x94f]
push ebx
push eax
mov byte [ebp - 0x950], bl
call fcn.005117f0
add esp, 0xc
push 7
pop ecx
xor eax, eax
lea edi, [ebp - 0x990]
push esi
mov dword [ebp - 0x994], ebx
rep stosd dword es:[edi], eax
mov byte [ebp - 0x110], al
lea eax, [ebp - 0x10f]
push ebx
push eax
mov dword [ebp - 0x99c], ebx
mov dword [ebp - 0x970], ebx
call fcn.005117f0
mov edx, dword [ebp - 0x958]
add esp, 0xc
call fcn.004c3b34
test eax, eax
jne 0x46f7d0
mov edx, dword [ebp - 0x95c]
call fcn.004c3b34
test eax, eax
jne 0x46f7d0
call fcn.0048a53c
test eax, eax
je 0x46f7e1
push str.:4:ClearAllTAMSNetConnections___FAILED_because_of_m_control.
call fcn.00426c01
pop ecx
xor eax, eax
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.0051291c
leave
ret
push dword [ebp - 0x958]
mov ebx, 0x104
mov ecx, ebx
lea eax, [ebp - 0x320]
call fcn.004c3b66
pop ecx
mov ecx, eax
call fcn.004c3eec
mov eax, ecx
push eax
mov ecx, ebx
lea eax, [ebp - 0x530]
call fcn.004c3b66
pop ecx
mov esi, eax
call fcn.004c3e68
mov ecx, esi
call fcn.004673ed
test eax, eax
jne 0x46f835
mov eax, esi
push 0x103
push eax
push eax
call fcn.00467d56
add esp, 0xc
push 0x103
lea edx, [ebp - 0x950]
lea ecx, [ebp - 0x530]
call fcn.0046805b
pop ecx
lea eax, [ebp - 0x960]
push eax
push 0x20019
xor edi, edi
push edi
push str.Network
push closesocket
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x46f880
push dword [ebp - 0x960]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
xor esi, esi
inc esi
jmp 0x46f882
xor esi, esi
call fcn.00415e85
test eax, eax
je 0x46f927
call fcn.0048a53c
test eax, eax
jne 0x46f927
mov word [ebp - 0x9b4], di
lea edi, [ebp - 0x9b2]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosw word es:[edi], ax
lea eax, [ebp - 0x9b4]
push eax
call fcn.004f2780
mov eax, dword [ebp - 0x9ac]
add eax, 0xfffffff8
cmp ax, 0xd
pop ecx
ja 0x46f7d0
cmp dword [0x6c3bfc], 3
jle 0x46f8ed
call fcn.004f16be
sub eax, dword [0x6c3cc0]
cmp eax, 0x5265c00
jb 0x46f7d0
call fcn.0043989a
test eax, eax
jne 0x46f8ff
cmp dword [ebp + 0x14], eax
je 0x46f7d0
call fcn.004f16be
sub eax, dword [0x6c3cc0]
cmp eax, 0x493e0
jb 0x46f7d0
call fcn.004f16be
inc dword [0x6c3bfc]
mov dword [0x6c3cc0], eax
xor edi, edi
call fcn.00415e5b
test eax, eax
je 0x46f93d
call fcn.0043989a
test eax, eax
je 0x46f7d0
test esi, esi
mov dword [ebp - 0x964], edi
mov dword [ebp - 0x974], edi
mov dword [ebp - 0x998], edi
mov edi, str..Network.c
je 0x46ff01
mov dword [ebp - 0x954], 0x41
movsx eax, byte [ebp - 0x954]
push eax
push str.Network_c
mov dword [ebp - 0x96c], eax
lea eax, [ebp - 0x638]
push ebx
push eax
call fcn.004c53b7
add esp, 0x10
lea eax, [ebp - 0x960]
push eax
push 0x20019
xor esi, esi
push esi
lea eax, [ebp - 0x638]
push eax
push closesocket
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x46fee5
push ebx
lea eax, [ebp - 0x218]
push esi
push eax
mov dword [ebp - 0x970], 0x103
call fcn.005117f0
add esp, 0xc
lea eax, [ebp - 0x970]
push eax
lea eax, [ebp - 0x218]
push eax
lea eax, [ebp - 0x99c]
push eax
push esi
push str.RemotePath
push dword [ebp - 0x960]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
je 0x46fa09
push str._GetLastError_
push str.:3:ClearAllTAMSNetConnections___encountered_a_problem:_RegQueryValueEx__RemotePath___FAILED:__s
call fcn.00426c01
pop ecx
pop ecx
lea edx, [ebp - 0x218]
call fcn.004c470f
mov esi, edx
call fcn.004c47b0
mov eax, esi
push str.tamspos
push eax
call fcn.004c48c1
test eax, eax
pop ecx
pop ecx
jne 0x46fa41
mov eax, esi
push 0x570cf0
push eax
call fcn.004c48c1
test eax, eax
pop ecx
pop ecx
je 0x46fa4b
mov dword [ebp - 0x974], 1
push ebx
lea eax, [ebp - 0x428]
push 0
push eax
mov dword [ebp - 0x970], 0x103
call fcn.005117f0
add esp, 0xc
lea eax, [ebp - 0x970]
push eax
lea eax, [ebp - 0x428]
push eax
lea eax, [ebp - 0x99c]
push eax
push 0
push str.UserName
push dword [ebp - 0x960]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
je 0x46faa4
push str._GetLastError_
push str.:3:ClearAllTAMSNetConnections___encountered_a_problem:_RegQueryValueEx__UserName___FAILED:__s
call fcn.00426c01
pop ecx
pop ecx
lea edx, [ebp - 0x428]
call fcn.004c470f
mov esi, edx
call fcn.004c47b0
cmp dword [ebp + 0x14], 0
je 0x46fad3
lea eax, [ebp - 0x218]
push eax
mov eax, esi
push eax
push str.:1:ClearAllTAMSNetConnections___Credential_Conflict_Log:__s___s
call fcn.00426c01
add esp, 0xc
push dword [ebp - 0x960]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
and dword [ebp - 0x960], 0
lea eax, [ebp - 0x218]
push eax
mov ecx, ebx
lea eax, [ebp - 0x740]
call fcn.004c3b66
pop ecx
mov ecx, eax
call fcn.004c3eec
lea eax, [ebp - 0x320]
push eax
mov eax, ecx
push eax
call fcn.00512a33
test eax, eax
pop ecx
pop ecx
je 0x46fb4d
lea eax, [ebp - 0x530]
push eax
lea eax, [ebp - 0x740]
push eax
call fcn.00512a33
test eax, eax
pop ecx
pop ecx
je 0x46fb4d
lea eax, [ebp - 0x950]
push eax
lea eax, [ebp - 0x740]
push eax
call fcn.00512a33
test eax, eax
pop ecx
pop ecx
jne 0x46fee5
push dword [ebp - 0x95c]
inc dword [ebp - 0x964]
lea eax, [ebp - 0x428]
push eax
call fcn.00512a33
test eax, eax
pop ecx
pop ecx
je 0x46fee5
lea esi, [ebp - 0x428]
call fcn.004c3e68
push dword [ebp - 0x95c]
mov eax, esi
push eax
call fcn.00512a33
test eax, eax
pop ecx
pop ecx
je 0x46fee5
push dword [ebp - 0x96c]
lea eax, [ebp - 0x638]
push 0x570da8
push ebx
push eax
call fcn.004c53b7
add esp, 0x10
push 0x2d98
push edi
xor esi, esi
inc esi
push esi
lea eax, [ebp - 0x320]
push eax
call fcn.0047017a
push 0x2d99
push edi
push esi
lea eax, [ebp - 0x218]
push eax
call fcn.0047017a
push 0x2d9a
push edi
push esi
lea eax, [ebp - 0x638]
push eax
call fcn.0047017a
test eax, eax
lea eax, [ebp - 0x428]
je 0x46fc0f
push str._GetLastError_
push eax
lea eax, [ebp - 0x638]
push eax
push str.:3:ClearAllTAMSNetConnections___encountered_a_problem:_WNetCancelConnection2___s____User:__s__FAILED:__s
call fcn.00426c01
add esp, 0x10
jmp 0x46fc24
push eax
lea eax, [ebp - 0x638]
push eax
push str.:3:ClearAllTAMSNetConnections___has_delete_the_mapped_drive___s___User:__s_
call fcn.00426c01
add esp, 0xc
push 0x2d9e
push edi
push esi
lea eax, [ebp - 0x320]
push eax
call fcn.0047017a
push 0x2d9f
push edi
push esi
lea eax, [ebp - 0x218]
push eax
call fcn.0047017a
push 0x2da0
push edi
push esi
push dword [ebp - 0x958]
call fcn.0047017a
push 0x5c7330
push 0x570e6c
lea eax, [ebp - 0x110]
push ebx
push eax
call fcn.004c53b7
push str._tmp
push dword [ebp - 0x958]
call fcn.004c48c1
add esp, 0x18
test eax, eax
jne 0x46fca2
lea eax, [ebp - 0x110]
push eax
push dword [ebp - 0x958]
call fcn.004c48c1
test eax, eax
pop ecx
pop ecx
je 0x46fd09
lea eax, [ebp - 0x320]
push eax
mov ecx, ebx
lea eax, [ebp - 0x110]
call fcn.004c3b66
pop ecx
mov ecx, str.tamspos
mov ebx, eax
call fcn.004c42f0
push 0x2daa
push edi
push 1
mov eax, ebx
push eax
call fcn.0047017a
lea eax, [ebp - 0x320]
push eax
mov ecx, 0x104
mov eax, ebx
call fcn.004c3b66
pop ecx
mov ecx, str.client
call fcn.004c42f0
push 0x2dae
push edi
push 1
mov eax, ebx
push eax
call fcn.0047017a
xor esi, esi
mov ebx, 0x104
inc esi
push 0x20
lea eax, [ebp - 0x994]
push 0
push eax
call fcn.005117f0
and dword [ebp - 0x978], 0
add esp, 0xc
push 0x81
push dword [ebp - 0x95c]
lea eax, [ebp - 0x638]
push dword [ebp - 0x968]
mov dword [ebp - 0x984], eax
lea eax, [ebp - 0x218]
mov dword [ebp - 0x980], eax
lea eax, [ebp - 0x994]
push eax
mov dword [ebp - 0x990], esi
call sub.MPR.dll_WNetAddConnection2A
test eax, eax
je 0x46fed3
mov edx, dword [ebp - 0x980]
call fcn.004c3b34
test eax, eax
jne 0x46fe45
push 0x570cf0
push dword [ebp - 0x980]
call fcn.004c48c1
test eax, eax
pop ecx
pop ecx
je 0x46fe45
push 0x103
lea eax, [ebp - 0x847]
push 0
push eax
mov byte [ebp - 0x848], 0
call fcn.005117f0
add esp, 0xc
push dword [ebp - 0x980]
mov ecx, ebx
lea eax, [ebp - 0x848]
call fcn.004c3b66
pop ecx
push 0
push str._tamspos
push 0x570cf0
push ebx
push eax
call fcn.004c5572
add esp, 0x14
push 0x81
push dword [ebp - 0x95c]
lea eax, [ebp - 0x848]
push dword [ebp - 0x968]
mov dword [ebp - 0x980], eax
lea eax, [ebp - 0x994]
push eax
call sub.MPR.dll_WNetAddConnection2A
test eax, eax
je 0x46feb9
push str._GetLastError_
push dword [ebp - 0x980]
xor ecx, ecx
call fcn.00471469
push eax
push ecx
mov ecx, dword [ebp - 0x980]
call fcn.00471469
pop ecx
push eax
push str.:3:ClearAllTAMSNetConnections___FAILED_to_map_alternate:__CurUser:_s__s_:___s_:__s
call fcn.00426c01
lea eax, [ebp - 0x218]
add esp, 0x14
mov dword [ebp - 0x980], eax
mov ecx, dword [ebp - 0x980]
push str._GetLastError_
push dword [ebp - 0x968]
push dword [ebp - 0x95c]
push dword [ebp - 0x984]
push ecx
push ecx
call fcn.00471469
pop ecx
mov ecx, dword [ebp - 0x984]
push eax
call fcn.00471469
push eax
push str.:3:ClearAllTAMSNetConnections___could_not_reestablish_the_mapped_drive__CurUser:_s__s_:_WNetAddConnection2A___s_____s_____s_____s___FAILED:__s
call fcn.00426c01
push dword [ebp - 0x968]
lea eax, [ebp - 0x994]
push dword [ebp - 0x95c]
push eax
push dword [ebp - 0x954]
call fcn.00470425
add esp, 0x30
test eax, eax
jne 0x46fedf
push dword [ebp - 0x954]
push str.:6:ClearAllTAMSNetConnections___FAILED_to_add_drive__c_to_the_lost_net_drive_register_
call fcn.004265da
pop ecx
jmp 0x46fede
push dword [ebp - 0x980]
mov ecx, ebx
lea eax, [ebp - 0x218]
call fcn.004c3b66
pop ecx
mov dword [ebp - 0x980], eax
push dword [ebp - 0x954]
call fcn.004705d4
pop ecx
mov dword [ebp - 0x998], esi
inc dword [ebp - 0x954]
cmp dword [ebp - 0x954], 0x5a
jle 0x46f966
cmp dword [ebp - 0x964], 0
jg 0x46ff0a
call fcn.00415e85
test eax, eax
je 0x46ff14
cmp dword [ebp + 0x14], 0
je 0x470165
mov eax, 0x21e88e
push 1
push 0
mov esi, eax
mov dword [ebp - 0x954], eax
mov dword [ebp - 0x964], eax
call fcn.004705e6
pop ecx
pop ecx
push 0x2df5
push edi
mov dword [ebp - 0x9a4], eax
push 1
lea eax, [ebp - 0x320]
push eax
call fcn.0047017a
push 0x2df6
push edi
push 1
push dword [ebp - 0x958]
mov dword [ebp - 0x96c], eax
call fcn.0047017a
cmp dword [ebp + 0x14], 0
mov dword [ebp - 0x9a0], eax
je 0x4700ed
call fcn.00415e85
test eax, eax
jne 0x4700ed
cmp dword [ebp - 0x974], eax
jne 0x4700ed
push 0x5c7330
push 0x570e6c
lea eax, [ebp - 0x110]
push ebx
push eax
call fcn.004c53b7
push str._tmp
push dword [ebp - 0x958]
call fcn.004c48c1
add esp, 0x18
test eax, eax
jne 0x46ffd8
lea eax, [ebp - 0x110]
push eax
push dword [ebp - 0x958]
call fcn.004c48c1
test eax, eax
pop ecx
pop ecx
je 0x4700ed
lea eax, [ebp - 0x320]
push eax
mov ecx, ebx
lea eax, [ebp - 0x110]
call fcn.004c3b66
pop ecx
mov ecx, str.client
mov ebx, eax
call fcn.004c42f0
push 0x2e06
push edi
push 1
mov eax, ebx
push eax
call fcn.0047017a
mov dword [ebp - 0x954], eax
lea eax, [ebp - 0x320]
push eax
mov ecx, 0x104
mov eax, ebx
call fcn.004c3b66
pop ecx
mov ecx, str.tamspos
call fcn.004c42f0
push 0x2e12
push edi
push 1
mov eax, ebx
push eax
call fcn.0047017a
mov esi, eax
xor edi, edi
cmp esi, edi
je 0x470051
cmp dword [ebp - 0x954], edi
jne 0x4700ed
push edi
push dword [ebp - 0x954]
push esi
push str.:8:ClearAllTAMSNetConnections___has_cleared_a_tamspos___d__d__d__connection_that_is_NOT_a_mapped_drive__This_should_never_happen.
call fcn.00426c01
push 0x20
lea eax, [ebp - 0x994]
push edi
push eax
call fcn.005117f0
add esp, 0x1c
xor eax, eax
inc eax
push eax
push dword [ebp - 0x95c]
mov dword [ebp - 0x990], eax
push dword [ebp - 0x968]
lea eax, [ebp - 0x994]
lea ecx, [ebp - 0x110]
push eax
mov dword [ebp - 0x984], edi
mov dword [ebp - 0x980], ecx
mov dword [ebp - 0x978], edi
call sub.MPR.dll_WNetAddConnection2A
cmp eax, edi
mov dword [ebp - 0x964], eax
je 0x4700ed
mov ecx, dword [ebp - 0x980]
push str._GetLastError_
push eax
call fcn.00471469
push eax
push ecx
mov ecx, dword [ebp - 0x984]
call fcn.00471469
pop ecx
push eax
lea eax, [ebp - 0x110]
push eax
push str.:9:ClearAllTAMSNetConnections___FAILED_to_restore_the__s_connection:__CurUser:_s__s_:_Error__u:__s
call fcn.004265da
add esp, 0x18
xor eax, eax
cmp dword [ebp - 0x96c], eax
je 0x47010f
cmp dword [ebp - 0x9a0], eax
je 0x47010f
cmp esi, eax
je 0x47010f
cmp dword [ebp - 0x954], eax
je 0x47010f
xor edi, edi
jmp 0x470112
xor edi, edi
inc edi
cmp dword [ebp - 0x9a4], eax
jle 0x470133
push 2
push eax
call fcn.004705e6
test eax, eax
pop ecx
pop ecx
jne 0x470133
push str.:7:RestoreLostNetworkDrives_0__succeeded_after_ClearAllTAMSNetConnections__
call fcn.00426c01
pop ecx
test edi, edi
je 0x470165
push dword [ebp - 0x964]
push dword [ebp - 0x954]
push esi
push dword [ebp - 0x9a0]
push dword [ebp - 0x96c]
push dword [ebp - 0x958]
push str.:2:ClearAllTAMSNetConnections___has_terminated_the_connection___s_:_This_should_not_happen_regularly_:_Connections_terminated:__u___u___u___u__u.
call fcn.00426c01
add esp, 0x1c
jmp 0x470172
cmp dword [ebp - 0x998], 0
je 0x46f7d0
xor eax, eax
inc eax
jmp 0x46f7d2