Function at 0x4029a0
Capabilities:
List domain servers

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x220
mov eax, dword [0x43a128]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
mov ebx, dword [ebp + 0x10]
push esi
mov esi, dword [ebp + 0xc]
push edi
mov dword [ebp - 0x218], ebx
cmp word [esi], 0x40
jne 0x402adb
lea ebx, [esi + 2]
mov esi, 1
push 0x42de98
push ebx
call fcn.00410e2a
mov edi, eax
add esp, 8
test edi, edi
jne 0x402a23
push ebx
push 0x42de9c
push 2
call fcn.0040af7e
add esp, 4
push eax
call fcn.00402180
add esp, 0xc
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
call fcn.00402e00
add esp, 4
mov eax, esi
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0040760d
mov esp, ebp
pop ebp
ret
push edi
lea eax, [ebp - 0x20c]
push 0x208
push eax
call fcn.00410d69
add esp, 0xc
test eax, eax
je 0x402abf
mov bl, byte [ebp + 8]
lea eax, [ebp - 0x20c]
push 0xa
push eax
call fcn.00408954
add esp, 8
test eax, eax
je 0x402a6e
lea eax, [ebp - 0x20c]
push 0xa
push eax
call fcn.00408954
add esp, 8
xor ecx, ecx
mov word [eax], cx
cmp word [ebp - 0x20c], 0
je 0x402aa6
test bl, bl
je 0x402a90
lea eax, [ebp - 0x20c]
push eax
push str._s:_n
call fcn.00401da0
add esp, 8
lea eax, [ebp - 0x20c]
push eax
call dword [ebp - 0x218]
add esp, 4
neg eax
sbb eax, eax
and esi, eax
push edi
lea eax, [ebp - 0x20c]
push 0x208
push eax
call fcn.00410d69
add esp, 0xc
test eax, eax
jne 0x402a43
push edi
call fcn.00410f66
add esp, 4
mov eax, esi
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0040760d
mov esp, ebp
pop ebp
ret
mov ecx, 0x42dec4
mov eax, esi
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x402b08
test dx, dx
je 0x402b04
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x402b08
add eax, 4
add ecx, 4
test dx, dx
jne 0x402ae2
xor eax, eax
jmp 0x402b0d
sbb eax, eax
or eax, 1
test eax, eax
jne 0x402c22
push 0x42de34
mov dword [ebp - 0x210], eax
lea ebx, [eax + 1]
mov dword [ebp - 0x214], eax
mov dword [ebp - 0x220], eax
mov dword [ebp - 0x21c], eax
call fcn.00402e90
add esp, 4
lea eax, [ebp - 0x21c]
push eax
push 0
push 3
lea eax, [ebp - 0x220]
push eax
lea eax, [ebp - 0x214]
push eax
push 0xffffffffffffffff
lea eax, [ebp - 0x210]
push eax
push 0x65
push 0
call sub.NETAPI32.dll_NetServerEnum
test eax, eax
je 0x402b8e
cmp eax, 0xea
je 0x402b8e
push eax
push str.A_system_error_has_occurred:__d_n
push 2
call fcn.0040af7e
add esp, 4
push eax
call fcn.00403ba0
add esp, 0xc
jmp 0x402bff
mov esi, dword [ebp - 0x210]
test esi, esi
je 0x402c0f
xor edi, edi
cmp dword [ebp - 0x214], edi
jbe 0x402c05
test esi, esi
je 0x402bff
mov ecx, dword [esi + 4]
lea edx, [ebp - 0x20c]
movzx eax, word [ecx]
lea ecx, [ecx + 2]
mov word [edx], ax
lea edx, [edx + 2]
test ax, ax
jne 0x402bb3
cmp byte [ebp + 8], al
je 0x402bdd
lea eax, [ebp - 0x20c]
push eax
push str._s:_n
call fcn.00401da0
add esp, 8
lea eax, [ebp - 0x20c]
push eax
call dword [ebp - 0x218]
add esp, 4
neg eax
sbb eax, eax
inc edi
and ebx, eax
add esi, 0x18
cmp edi, dword [ebp - 0x214]
jb 0x402ba6
mov esi, dword [ebp - 0x210]
test esi, esi
je 0x402c0f
push esi
call sub.NETAPI32.dll_NetApiBufferFree
pop edi
pop esi
mov eax, ebx
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0040760d
mov esp, ebp
pop ebp
ret
push 0x2c
push esi
call fcn.00408954
add esp, 8
test eax, eax
je 0x402cb3
mov bl, byte [ebp + 8]
mov edi, 1
nop dword [eax]
push 0x2c
push esi
call fcn.00408954
add esp, 8
test eax, eax
je 0x402c5f
push 0x2c
push esi
call fcn.00408954
add esp, 8
xor ecx, ecx
mov word [eax], cx
test bl, bl
je 0x402c71
push esi
push str._s:_n
call fcn.00401da0
add esp, 8
push esi
call dword [ebp - 0x218]
add esp, 4
mov ecx, esi
neg eax
sbb eax, eax
and edi, eax
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x402c86
sub ecx, edx
sar ecx, 1
lea esi, [esi + ecx*2]
add esi, 2
cmp word [esi], ax
jne 0x402c40
mov eax, edi
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0040760d
mov esp, ebp
pop ebp
ret
push esi
call ebx
mov ecx, dword [ebp - 4]
add esp, 4
xor ecx, ebp
pop edi
pop esi
pop ebx
call fcn.0040760d
mov esp, ebp
pop ebp
ret