Function at 0x4034a0
Capabilities:
List domain servers

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x220
mov eax, dword [0x46a124]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
mov ebx, dword [ebp + 0x10]
push esi
mov esi, dword [ebp + 0xc]
push edi
mov dword [ebp - 0x218], ebx
cmp word [esi], 0x40
jne 0x4035db
lea ebx, [esi + 2]
mov esi, 1
push 0x45bf94
push ebx
call fcn.004268e7
mov edi, eax
add esp, 8
test edi, edi
jne 0x403523
push ebx
push 0x45bf98
push 2
call fcn.00413ed7
add esp, 4
push eax
call fcn.00402680
add esp, 0xc
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
call fcn.004040a0
add esp, 4
mov eax, esi
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004093c1
mov esp, ebp
pop ebp
ret
push edi
lea eax, [ebp - 0x20c]
push 0x208
push eax
call fcn.00426672
add esp, 0xc
test eax, eax
je 0x4035bf
mov bl, byte [ebp + 8]
lea eax, [ebp - 0x20c]
push 0xa
push eax
call fcn.0040aa74
add esp, 8
test eax, eax
je 0x40356e
lea eax, [ebp - 0x20c]
push 0xa
push eax
call fcn.0040aa74
add esp, 8
xor ecx, ecx
mov word [eax], cx
cmp word [ebp - 0x20c], 0
je 0x4035a6
test bl, bl
je 0x403590
lea eax, [ebp - 0x20c]
push eax
push 0x45bf60
call fcn.00402130
add esp, 8
lea eax, [ebp - 0x20c]
push eax
call dword [ebp - 0x218]
add esp, 4
neg eax
sbb eax, eax
and esi, eax
push edi
lea eax, [ebp - 0x20c]
push 0x208
push eax
call fcn.00426672
add esp, 0xc
test eax, eax
jne 0x403543
push edi
call fcn.00426a24
add esp, 4
mov eax, esi
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004093c1
mov esp, ebp
pop ebp
ret
mov ecx, 0x45bfc0
mov eax, esi
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x403608
test dx, dx
je 0x403604
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x403608
add eax, 4
add ecx, 4
test dx, dx
jne 0x4035e2
xor eax, eax
jmp 0x40360d
sbb eax, eax
or eax, 1
test eax, eax
jne 0x403722
push 0x45bf30
mov dword [ebp - 0x210], eax
lea ebx, [eax + 1]
mov dword [ebp - 0x214], eax
mov dword [ebp - 0x220], eax
mov dword [ebp - 0x21c], eax
call fcn.00404170
add esp, 4
lea eax, [ebp - 0x21c]
push eax
push 0
push 3
lea eax, [ebp - 0x220]
push eax
lea eax, [ebp - 0x214]
push eax
push 0xffffffffffffffff
lea eax, [ebp - 0x210]
push eax
push 0x65
push 0
call sub.NETAPI32.dll_NetServerEnum
test eax, eax
je 0x40368e
cmp eax, 0xea
je 0x40368e
push eax
push 0x45bf70
push 2
call fcn.00413ed7
add esp, 4
push eax
call fcn.00405060
add esp, 0xc
jmp 0x4036ff
mov esi, dword [ebp - 0x210]
test esi, esi
je 0x40370f
xor edi, edi
cmp dword [ebp - 0x214], edi
jbe 0x403705
test esi, esi
je 0x4036ff
mov ecx, dword [esi + 4]
lea edx, [ebp - 0x20c]
movzx eax, word [ecx]
lea ecx, [ecx + 2]
mov word [edx], ax
lea edx, [edx + 2]
test ax, ax
jne 0x4036b3
cmp byte [ebp + 8], al
je 0x4036dd
lea eax, [ebp - 0x20c]
push eax
push 0x45bf60
call fcn.00402130
add esp, 8
lea eax, [ebp - 0x20c]
push eax
call dword [ebp - 0x218]
add esp, 4
neg eax
sbb eax, eax
inc edi
and ebx, eax
add esi, 0x18
cmp edi, dword [ebp - 0x214]
jb 0x4036a6
mov esi, dword [ebp - 0x210]
test esi, esi
je 0x40370f
push esi
call sub.NETAPI32.dll_NetApiBufferFree
pop edi
pop esi
mov eax, ebx
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004093c1
mov esp, ebp
pop ebp
ret
push 0x2c
push esi
call fcn.0040aa74
add esp, 8
test eax, eax
je 0x4037b3
mov bl, byte [ebp + 8]
mov edi, 1
nop dword [eax]
push 0x2c
push esi
call fcn.0040aa74
add esp, 8
test eax, eax
je 0x40375f
push 0x2c
push esi
call fcn.0040aa74
add esp, 8
xor ecx, ecx
mov word [eax], cx
test bl, bl
je 0x403771
push esi
push 0x45bf60
call fcn.00402130
add esp, 8
push esi
call dword [ebp - 0x218]
add esp, 4
mov ecx, esi
neg eax
sbb eax, eax
and edi, eax
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x403786
sub ecx, edx
sar ecx, 1
lea esi, [esi + ecx*2]
add esi, 2
cmp word [esi], ax
jne 0x403740
mov eax, edi
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004093c1
mov esp, ebp
pop ebp
ret
push esi
call ebx
mov ecx, dword [ebp - 4]
add esp, 4
xor ecx, ebp
pop edi
pop esi
pop ebx
call fcn.004093c1
mov esp, ebp
pop ebp
ret