Function at 0x18000c86c
Capabilities:
Link many functions at runtime

Disassembly:
push rbx
sub rsp, 0x20
lea rcx, str.ntdsapi.dll
call fcn.18000bef8
mov qword [0x180027cd0], rax
test rax, rax
je 0x18000ca96
mov rdx, qword [str.DsMakeSpnA]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x180027ce0], rax
test rax, rax
je 0x18000ca96
mov rdx, qword [str.DsBindA]
mov rcx, qword [0x180027cd0]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x180027ce8], rax
test rax, rax
je 0x18000ca96
mov rdx, qword [str.DsUnBindA]
mov rcx, qword [0x180027cd0]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x180027cf0], rax
test rax, rax
je 0x18000ca96
mov rdx, qword [str.DsGetSpnA]
mov rcx, qword [0x180027cd0]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x180027cf8], rax
test rax, rax
je 0x18000ca96
mov rdx, qword [str.DsFreeSpnArrayA]
mov rcx, qword [0x180027cd0]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x180027d00], rax
test rax, rax
je 0x18000ca96
mov rdx, qword [str.DsWriteAccountSpnA]
mov rcx, qword [0x180027cd0]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x180027d08], rax
test rax, rax
je 0x18000ca96
mov rdx, qword [str.DsFreeNameResultA]
mov rcx, qword [0x180027cd0]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x180027d10], rax
test rax, rax
je 0x18000ca96
mov rdx, qword [str.DsCrackNamesA]
mov rcx, qword [0x180027cd0]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x180027d18], rax
test rax, rax
je 0x18000ca96
lea rcx, str.netapi32.dll
call fcn.18000bef8
mov qword [0x180027cc0], rax
test rax, rax
je 0x18000ca96
mov rdx, qword [str.DsGetDcNameA]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x180027d20], rax
test rax, rax
je 0x18000ca96
mov rcx, qword [0x180027cc0]
lea rdx, str.NetApiBufferFree
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x180027d28], rax
test rax, rax
je 0x18000ca96
lea rcx, str.kernel32.dll
call fcn.18000bef8
mov qword [0x180027c18], rax
test rax, rax
je 0x18000ca96
mov rdx, qword [0x18001bc48]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x180027d30], rax
test rax, rax
je 0x18000ca96
lea rcx, str.secur32.dll
call fcn.18000bef8
mov qword [0x180027cc8], rax
test rax, rax
je 0x18000ca96
mov rdx, qword [str.GetComputerObjectNameA]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x180027d38], rax
test rax, rax
je 0x18000ca96
mov rdx, qword [str.GetUserNameExA]
mov rcx, qword [0x180027cc8]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x180027d40], rax
test rax, rax
je 0x18000ca96
xor eax, eax
jmp 0x18000cb08
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rcx, qword [0x180027cd0]
mov ebx, eax
test rcx, rcx
je 0x18000cab8
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
and qword [0x180027cd0], 0
mov rcx, qword [0x180027cc0]
test rcx, rcx
je 0x18000cad2
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
and qword [0x180027cc0], 0
mov rcx, qword [0x180027c18]
test rcx, rcx
je 0x18000caec
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
and qword [0x180027c18], 0
mov rcx, qword [0x180027cc8]
test rcx, rcx
je 0x18000cb06
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
and qword [0x180027cc8], 0
mov eax, ebx
add rsp, 0x20
pop rbx
ret