Function at 0x100022d60
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push rbp
mov rbp, rsp
lea rsp, [rsp - 0x250]
mov qword [rbp - 0x218], rbx
mov qword [rbp - 0x210], rdi
mov qword [rbp - 0x208], rsi
mov qword [rbp - 0x200], r12
mov qword [rbp - 8], rcx
mov ebx, edx
mov rsi, r8
mov rcx, qword [rbp - 8]
call fcn.100006570
mov qword [rbp - 0x20], 0
mov qword [rbp - 0xf8], 0
mov qword [rbp - 0xf0], 0
mov qword [rbp - 0xe8], 0
nop
mov dword [rbp - 0xc], 0x55555555
mov dword [rbp - 0x10], 0x55555555
mov dword [rbp - 0x14], 0x55555555
movabs r12, 0x5555555555555555
movabs rdi, 0x5555555555555555
mov dword [rbp - 0x30], 0x55555555
mov dword [rbp - 0x2c], 0x55555555
lea rcx, [rbp - 0xd8]
mov r8d, 0x55
mov edx, 0xa8
call fcn.1000029a0
mov dword [rbp - 0xdc], 0x55555555
mov word [rbp - 0xe0], 0x5555
mov eax, dword [global_defaultisExport]
mov rdx, qword [global_defaultticketname]
mov edx, dword [global_defaultkk]
mov eax, ebx
lea rcx, [rbp - 0xd8]
xor r8d, r8d
mov edx, 0xa8
call fcn.1000022d0
mov rdx, qword [rbp - 8]
lea rcx, [rbp - 0xe8]
call fcn.100008190
mov rax, qword [rbp - 0xe8]
test rax, rax
jne 0x100022e71
lea rax, [0x1000644a0]
mov r12, rax
cmp qword [rbp - 8], 0
je 0x1000230b6
mov rcx, r12
call fcn.100002e60
add rax, 1
shl rax, 1
mov word [rbp - 0xe0], ax
lea rcx, [rbp - 0xf0]
call fcn.100006520
movzx ebx, word [rbp - 0xe0]
mov r8d, 0x55
mov edx, 0x100
lea rcx, [rbp - 0x1f8]
call fcn.1000029a0
mov r9d, 0xff
lea r8, [rbp - 0x1f8]
mov rdx, 0xffffffffffffffff
movsxd rcx, ebx
call fcn.100003850
xor r8d, r8d
lea rdx, [rbp - 0x1f8]
lea rcx, [rbp - 0xf8]
call fcn.100006f20
xor r8b, r8b
xor edx, edx
lea rcx, [rbp - 0xf8]
call fcn.100007e00
mov r8, qword [rbp - 0xf8]
xor r9d, r9d
lea rdx, str.dwTarget:
lea rcx, [rbp - 0xf0]
call fcn.1000066c0
mov rcx, qword [rbp - 0xf0]
xor edx, edx
call dbg.LOG
movzx eax, word [rbp - 0xe0]
add eax, 0x40
mov dword [rbp - 0xdc], eax
lea rcx, [rbp - 0xf8]
call fcn.100006520
mov ebx, dword [rbp - 0xdc]
mov r8d, 0x55
mov edx, 0x100
lea rcx, [rbp - 0x1f8]
call fcn.1000029a0
mov r9d, 0xff
lea r8, [rbp - 0x1f8]
mov rdx, 0xffffffffffffffff
mov rcx, rbx
call fcn.1000038e0
xor r8d, r8d
lea rdx, [rbp - 0x1f8]
lea rcx, [rbp - 0xf0]
call fcn.100006f20
xor r8b, r8b
xor edx, edx
lea rcx, [rbp - 0xf0]
call fcn.100007e00
mov r8, qword [rbp - 0xf0]
xor r9d, r9d
lea rdx, str.szData:
lea rcx, [rbp - 0xf8]
call fcn.1000066c0
mov rcx, qword [rbp - 0xf8]
xor edx, edx
call dbg.LOG
mov ecx, dword [rbp - 0xdc]
call fcn.10000d100
mov rdi, rax
test rax, rax
je 0x1000230c4
test rsi, rsi
je 0x100023000
mov rax, rsi
sar rax, 0x20
mov dword [rdi + 8], eax
mov dword [rdi + 4], esi
nop dword [rax]
mov byte [rdi], 8
mov dword [rdi + 0x24], 0
mov dword [rdi + 0x28], 0
movzx eax, word [rbp - 0xe0]
sub eax, 2
mov word [rdi + 0x10], ax
mov ax, word [rbp - 0xe0]
mov word [rdi + 0x12], ax
lea rax, [rdi + 0x40]
mov qword [rdi + 0x18], rax
movzx r8d, word [rdi + 0x12]
mov rcx, qword [rdi + 0x18]
mov rdx, r12
call fcn.10002ea00
lea rax, [rbp - 0x14]
mov qword [rsp + 0x20], rax
lea r9, [rbp - 0xdc]
lea r8, [rbp - 0x30]
mov edx, dword [rbp - 0xdc]
mov rcx, rdi
call dbg.LSACALLKERBEROSPACKAGE
mov dword [rbp - 0x10], eax
mov rax, qword [rbp - 0x30]
mov r8d, dword [rax + 0x4c]
mov rax, qword [rbp - 0x30]
mov rdx, qword [rax + 0x50]
lea rcx, [rbp - 0x20]
call dbg.BYTETOHEXASTRING
call fcn.100010410
mov rbx, rax
mov r8, qword [rbp - 0x20]
mov rdx, rbx
xor ecx, ecx
call fcn.100010760
call fcn.10000c640
mov rcx, rbx
call fcn.100010590
call fcn.10000c640
mov rcx, rdi
call fcn.10000d0e0
nop dword [rax]
jmp 0x1000230c4
xor edx, edx
lea rcx, str.At_least__msdsspn_argument_is_required__eg:__msdsspn:cifs_DC1__n
call dbg.LOG
mov dword [rbp - 0xc], 0
nop
mov rcx, rbp
call dbg.fin$0000005E
mov eax, dword [rbp - 0xc]
mov rbx, qword [rbp - 0x218]
mov rdi, qword [rbp - 0x210]
mov rsi, qword [rbp - 0x208]
mov r12, qword [rbp - 0x200]
lea rsp, [rbp]
pop rbp
ret