Function at 0x403200
Capabilities:
List domain servers

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x220
mov eax, dword [0x479fcc]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
mov ebx, dword [ebp + 0x10]
push esi
mov esi, dword [ebp + 0xc]
push edi
mov dword [ebp - 0x218], ebx
cmp word [esi], 0x40
jne 0x40333b
lea ebx, [esi + 2]
mov esi, 1
push 0x447f88
push ebx
call fcn.00424a50
mov edi, eax
add esp, 8
test edi, edi
jne 0x403283
push ebx
push 0x447f8c
push 2
call fcn.0041e7a8
add esp, 4
push eax
call fcn.004029e0
add esp, 0xc
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
call fcn.00403660
add esp, 4
mov eax, esi
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004197d1
mov esp, ebp
pop ebp
ret
push edi
lea eax, [ebp - 0x20c]
push 0x208
push eax
call fcn.0042498f
add esp, 0xc
test eax, eax
je 0x40331f
mov bl, byte [ebp + 8]
lea eax, [ebp - 0x20c]
push 0xa
push eax
call fcn.0041b3ea
add esp, 8
test eax, eax
je 0x4032ce
lea eax, [ebp - 0x20c]
push 0xa
push eax
call fcn.0041b3ea
add esp, 8
xor ecx, ecx
mov word [eax], cx
cmp word [ebp - 0x20c], 0
je 0x403306
test bl, bl
je 0x4032f0
lea eax, [ebp - 0x20c]
push eax
push str._s:_n
call fcn.00401870
add esp, 8
lea eax, [ebp - 0x20c]
push eax
call dword [ebp - 0x218]
add esp, 4
neg eax
sbb eax, eax
and esi, eax
push edi
lea eax, [ebp - 0x20c]
push 0x208
push eax
call fcn.0042498f
add esp, 0xc
test eax, eax
jne 0x4032a3
push edi
call fcn.00424b8c
add esp, 4
mov eax, esi
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004197d1
mov esp, ebp
pop ebp
ret
mov ecx, 0x447fb4
mov eax, esi
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x403368
test dx, dx
je 0x403364
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x403368
add eax, 4
add ecx, 4
test dx, dx
jne 0x403342
xor eax, eax
jmp 0x40336d
sbb eax, eax
or eax, 1
test eax, eax
jne 0x403482
push 0x447f24
mov dword [ebp - 0x210], eax
lea ebx, [eax + 1]
mov dword [ebp - 0x214], eax
mov dword [ebp - 0x220], eax
mov dword [ebp - 0x21c], eax
call fcn.004036f0
add esp, 4
lea eax, [ebp - 0x21c]
push eax
push 0
push 3
lea eax, [ebp - 0x220]
push eax
lea eax, [ebp - 0x214]
push eax
push 0xffffffffffffffff
lea eax, [ebp - 0x210]
push eax
push 0x65
push 0
call sub.NETAPI32.dll_NetServerEnum
test eax, eax
je 0x4033ee
cmp eax, 0xea
je 0x4033ee
push eax
push str.A_system_error_has_occurred:__d_n
push 2
call fcn.0041e7a8
add esp, 4
push eax
call fcn.00404440
add esp, 0xc
jmp 0x40345f
mov esi, dword [ebp - 0x210]
test esi, esi
je 0x40346f
xor edi, edi
cmp dword [ebp - 0x214], edi
jbe 0x403465
test esi, esi
je 0x40345f
mov ecx, dword [esi + 4]
lea edx, [ebp - 0x20c]
movzx eax, word [ecx]
lea ecx, [ecx + 2]
mov word [edx], ax
lea edx, [edx + 2]
test ax, ax
jne 0x403413
cmp byte [ebp + 8], al
je 0x40343d
lea eax, [ebp - 0x20c]
push eax
push str._s:_n
call fcn.00401870
add esp, 8
lea eax, [ebp - 0x20c]
push eax
call dword [ebp - 0x218]
add esp, 4
neg eax
sbb eax, eax
inc edi
and ebx, eax
add esi, 0x18
cmp edi, dword [ebp - 0x214]
jb 0x403406
mov esi, dword [ebp - 0x210]
test esi, esi
je 0x40346f
push esi
call sub.NETAPI32.dll_NetApiBufferFree
pop edi
pop esi
mov eax, ebx
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004197d1
mov esp, ebp
pop ebp
ret
push 0x2c
push esi
call fcn.0041b3ea
add esp, 8
test eax, eax
je 0x403513
mov bl, byte [ebp + 8]
mov edi, 1
nop dword [eax]
push 0x2c
push esi
call fcn.0041b3ea
add esp, 8
test eax, eax
je 0x4034bf
push 0x2c
push esi
call fcn.0041b3ea
add esp, 8
xor ecx, ecx
mov word [eax], cx
test bl, bl
je 0x4034d1
push esi
push str._s:_n
call fcn.00401870
add esp, 8
push esi
call dword [ebp - 0x218]
add esp, 4
mov ecx, esi
neg eax
sbb eax, eax
and edi, eax
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4034e6
sub ecx, edx
sar ecx, 1
lea esi, [esi + ecx*2]
add esi, 2
cmp word [esi], ax
jne 0x4034a0
mov eax, edi
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004197d1
mov esp, ebp
pop ebp
ret
push esi
call ebx
mov ecx, dword [ebp - 4]
add esp, 4
xor ecx, ebp
pop edi
pop esi
pop ebx
call fcn.004197d1
mov esp, ebp
pop ebp
ret