Function at 0x10840f9
Capabilities:
Get domain information

Disassembly:
push 0x3c
mov eax, 0x10bf08e
call fcn.01074cb8
mov eax, dword [ebp + 0xc]
xor ebx, ebx
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x48], ebx
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 0x44], ebx
call fcn.010b0b00
mov dword [ebp - 4], ebx
lea eax, [ebp - 0x24]
push eax
xor edi, edi
inc edi
push edi
push ebx
mov byte [ebp - 0x18], bl
mov byte [ebp - 0x17], bl
mov byte [ebp - 0x16], bl
mov byte [ebp - 0x15], bl
mov byte [ebp - 0x14], bl
mov byte [ebp - 0x13], 5
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x34], ebx
call sub.NETAPI32.dll_DsRoleGetPrimaryDomainInformation
cmp eax, ebx
je 0x1084171
jle 0x1084164
and eax, 0xffff
or eax, 0x80070000
mov esi, eax
push esi
push 0xbf400ca
jmp 0x10842fb
mov eax, dword [ebp - 0x24]
mov ecx, dword [eax]
cmp ecx, ebx
je 0x10842f0
cmp ecx, 2
je 0x10842f0
lea ecx, [ebp - 0x34]
push ecx
push ebx
lea ecx, [ebp - 0x1c]
push ecx
push 0x48
push dword [eax + 0x10]
call fcn.010a4d59
mov esi, eax
cmp esi, ebx
je 0x10841ab
push esi
push 0xc0700ca
jmp 0x10842fb
push 0x101a5c0
lea ecx, [ebp - 0x2c]
call fcn.010b0a57
push dword [ebp - 0x34]
lea ecx, [ebp - 0x2c]
call fcn.010b0b3e
mov esi, dword [sym.imp.ADVAPI32.dll_AllocateAndInitializeSid]
lea eax, [ebp - 0x30]
push eax
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push 0x220
push 0x20
push 2
lea eax, [ebp - 0x18]
push eax
call esi
test eax, eax
jne 0x10841f8
call fcn.0108edc3
mov esi, eax
push esi
push 0xc1700ca
jmp 0x10842fb
lea eax, [ebp - 0x38]
push eax
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push 0x12
push edi
lea eax, [ebp - 0x18]
push eax
call esi
test eax, eax
jne 0x1084222
call fcn.0108edc3
mov esi, eax
push esi
push 0xc2300ca
jmp 0x10842fb
push edi
push 0x101a58c
call fcn.010a40b6
mov esi, eax
cmp esi, ebx
je 0x108423e
push esi
push 0xc2700ca
jmp 0x10842fb
push dword [ebp - 0x30]
lea eax, [ebp - 0x2c]
push eax
push dword [ebp - 0x1c]
mov dword [ebp - 0x48], edi
call fcn.01083ca8
mov esi, eax
cmp esi, ebx
je 0x1084261
push esi
push 0xc2d00ca
jmp 0x10842fb
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x2c]
push eax
push dword [ebp - 0x1c]
mov dword [ebp - 0x44], edi
call fcn.01083947
mov esi, eax
cmp esi, ebx
je 0x1084282
push esi
push 0xc3200ca
jmp 0x10842fb
lea eax, [ebp - 0x3c]
push eax
push dword [ebp - 0x40]
push dword [ebp - 0x20]
call fcn.01083f9c
mov esi, eax
cmp esi, ebx
je 0x108429f
push esi
push 0xc3800ca
jmp 0x10842fb
cmp dword [ebp + 8], ebx
je 0x10842ca
cmp dword [ebp - 0x3c], ebx
jne 0x1084300
push edi
push dword [ebp - 0x20]
lea eax, [ebp - 0x2c]
push dword [ebp - 0x40]
push eax
push dword [ebp - 0x1c]
call fcn.01083e04
mov esi, eax
cmp esi, ebx
je 0x1084300
push esi
push 0xc4000ca
jmp 0x10842fb
cmp dword [ebp - 0x3c], ebx
je 0x1084300
push ebx
push dword [ebp - 0x20]
lea eax, [ebp - 0x2c]
push dword [ebp - 0x40]
push eax
push dword [ebp - 0x1c]
call fcn.01083e04
mov esi, eax
cmp esi, ebx
je 0x1084300
push esi
push 0xc4900ca
jmp 0x10842fb
mov esi, 0x8000ffff
push esi
push 0xbfb00ca
call fcn.010893e6
cmp dword [ebp - 0x24], ebx
je 0x108430d
push dword [ebp - 0x24]
call sub.NETAPI32.dll_DsRoleFreeMemory
lea eax, [ebp - 0x20]
push eax
call fcn.01083f75
cmp dword [ebp - 0x44], ebx
je 0x1084335
push dword [ebp - 0x38]
lea eax, [ebp - 0x2c]
push eax
push dword [ebp - 0x1c]
call fcn.01083ca8
push eax
push 0xc5900ca
call fcn.010893e6
push dword [ebp - 0x30]
mov edi, dword [sym.imp.KERNEL32.dll_LocalFree]
call edi
push dword [ebp - 0x38]
call edi
cmp dword [ebp - 0x48], ebx
je 0x1084355
push ebx
push 0x101a58c
call fcn.010a40b6
push dword [ebp - 0x34]
push ebx
push dword [ebp - 0x1c]
call fcn.010a4207
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2c]
call fcn.010b0989
mov eax, esi
call fcn.01074d4a
ret 8