Function at 0x108726d
Capabilities:
Get domain information

Disassembly:
push 0x3c
mov eax, 0x10c21f9
call fcn.01077ea8
mov eax, dword [ebp + 0xc]
xor ebx, ebx
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x48], ebx
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 0x44], ebx
call fcn.010b3c97
mov dword [ebp - 4], ebx
lea eax, [ebp - 0x24]
push eax
xor edi, edi
inc edi
push edi
push ebx
mov byte [ebp - 0x18], bl
mov byte [ebp - 0x17], bl
mov byte [ebp - 0x16], bl
mov byte [ebp - 0x15], bl
mov byte [ebp - 0x14], bl
mov byte [ebp - 0x13], 5
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x34], ebx
call sub.NETAPI32.dll_DsRoleGetPrimaryDomainInformation
cmp eax, ebx
je 0x10872e5
jle 0x10872d8
and eax, 0xffff
or eax, 0x80070000
mov esi, eax
push esi
push 0xbf400ca
jmp 0x108746f
mov eax, dword [ebp - 0x24]
mov ecx, dword [eax]
cmp ecx, ebx
je 0x1087464
cmp ecx, 2
je 0x1087464
lea ecx, [ebp - 0x34]
push ecx
push ebx
lea ecx, [ebp - 0x1c]
push ecx
push 0x48
push dword [eax + 0x10]
call fcn.010a7eee
mov esi, eax
cmp esi, ebx
je 0x108731f
push esi
push 0xc0700ca
jmp 0x108746f
push 0x101acd8
lea ecx, [ebp - 0x2c]
call fcn.010b3bee
push dword [ebp - 0x34]
lea ecx, [ebp - 0x2c]
call fcn.010b3cd5
mov esi, dword [sym.imp.ADVAPI32.dll_AllocateAndInitializeSid]
lea eax, [ebp - 0x30]
push eax
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push 0x220
push 0x20
push 2
lea eax, [ebp - 0x18]
push eax
call esi
test eax, eax
jne 0x108736c
call fcn.01091f43
mov esi, eax
push esi
push 0xc1700ca
jmp 0x108746f
lea eax, [ebp - 0x38]
push eax
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push 0x12
push edi
lea eax, [ebp - 0x18]
push eax
call esi
test eax, eax
jne 0x1087396
call fcn.01091f43
mov esi, eax
push esi
push 0xc2300ca
jmp 0x108746f
push edi
push 0x101aca4
call fcn.010a7263
mov esi, eax
cmp esi, ebx
je 0x10873b2
push esi
push 0xc2700ca
jmp 0x108746f
push dword [ebp - 0x30]
lea eax, [ebp - 0x2c]
push eax
push dword [ebp - 0x1c]
mov dword [ebp - 0x48], edi
call fcn.01086e43
mov esi, eax
cmp esi, ebx
je 0x10873d5
push esi
push 0xc2d00ca
jmp 0x108746f
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x2c]
push eax
push dword [ebp - 0x1c]
mov dword [ebp - 0x44], edi
call fcn.01086ae2
mov esi, eax
cmp esi, ebx
je 0x10873f6
push esi
push 0xc3200ca
jmp 0x108746f
lea eax, [ebp - 0x3c]
push eax
push dword [ebp - 0x40]
push dword [ebp - 0x20]
call fcn.01087110
mov esi, eax
cmp esi, ebx
je 0x1087413
push esi
push 0xc3800ca
jmp 0x108746f
cmp dword [ebp + 8], ebx
je 0x108743e
cmp dword [ebp - 0x3c], ebx
jne 0x1087474
push edi
push dword [ebp - 0x20]
lea eax, [ebp - 0x2c]
push dword [ebp - 0x40]
push eax
push dword [ebp - 0x1c]
call fcn.01086f9f
mov esi, eax
cmp esi, ebx
je 0x1087474
push esi
push 0xc4000ca
jmp 0x108746f
cmp dword [ebp - 0x3c], ebx
je 0x1087474
push ebx
push dword [ebp - 0x20]
lea eax, [ebp - 0x2c]
push dword [ebp - 0x40]
push eax
push dword [ebp - 0x1c]
call fcn.01086f9f
mov esi, eax
cmp esi, ebx
je 0x1087474
push esi
push 0xc4900ca
jmp 0x108746f
mov esi, 0x8000ffff
push esi
push 0xbfb00ca
call fcn.0108c55a
cmp dword [ebp - 0x24], ebx
je 0x1087481
push dword [ebp - 0x24]
call sub.NETAPI32.dll_DsRoleFreeMemory
lea eax, [ebp - 0x20]
push eax
call fcn.0109c93f
cmp dword [ebp - 0x44], ebx
je 0x10874a9
push dword [ebp - 0x38]
lea eax, [ebp - 0x2c]
push eax
push dword [ebp - 0x1c]
call fcn.01086e43
push eax
push 0xc5900ca
call fcn.0108c55a
push dword [ebp - 0x30]
mov edi, dword [sym.imp.KERNEL32.dll_LocalFree]
call edi
push dword [ebp - 0x38]
call edi
cmp dword [ebp - 0x48], ebx
je 0x10874c9
push ebx
push 0x101aca4
call fcn.010a7263
push dword [ebp - 0x34]
push ebx
push dword [ebp - 0x1c]
call fcn.010a73b4
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2c]
call fcn.010b3b20
mov eax, esi
call fcn.01077f3a
ret 8