Function at 0x10011ead
Capabilities:
Send data
Send data on socket

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x2b2c
call fcn.10035de0
mov eax, dword [0x100ba410]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
xor ebx, ebx
mov dword [ebp - 0x2b20], ecx
push 0x27ff
lea eax, [ebp - 0x2b07]
mov byte [ebp - 0x2b08], bl
push ebx
push eax
call fcn.10023400
add esp, 0xc
mov dword [ebp - 0x2b14], ebx
mov edi, 0xfe
mov byte [ebp - 0x208], bl
lea eax, [ebp - 0x207]
mov esi, ebx
push edi
push ebx
push eax
call fcn.10023400
add esp, 0xc
mov byte [ebp - 0x108], bl
lea eax, [ebp - 0x107]
push edi
push ebx
push eax
call fcn.10023400
add esp, 0xc
mov dword [ebp - 0x2b18], ebx
lea eax, [ebp - 0x2b18]
push eax
push ebx
push ebx
call dword [sym.imp.NETAPI32.dll_NetUserModalsGet]
test eax, eax
jne 0x10011f77
cmp dword [0x100c1c2c], 6
jl 0x10011f66
mov eax, dword [ebp - 0x2b18]
xor edx, edx
mov ecx, 0x15180
mov eax, dword [eax + 4]
div ecx
push eax
push str.Maximum_password_age__d_:__d_n
call fcn.100144ba
pop ecx
pop ecx
mov eax, dword [ebp - 0x2b18]
mov ecx, dword [eax + 4]
mov dword [ebp - 0x2b1c], ecx
jmp 0x10011f98
cmp dword [0x100c1c2c], 6
jl 0x10011f8b
push str.Could_not_find_MaxPasswordAge
call fcn.100144ba
pop ecx
or dword [ebp - 0x2b1c], 0xffffffff
mov eax, dword [ebp - 0x2b18]
mov ebx, dword [sym.imp.NETAPI32.dll_NetApiBufferFree]
test eax, eax
je 0x10011fa5
push eax
call ebx
and dword [ebp - 0x2b10], 0
lea eax, [ebp - 0x2b10]
push eax
lea eax, [ebp - 0x2b14]
push eax
push 0xffffffffffffffff
push 0x3e8
push esi
push 1
push 0
call dword [sym.imp.NETAPI32.dll_NetQueryDisplayInformation]
cmp dword [ebp - 0x2b14], 0
mov edi, eax
mov dword [ebp - 0x2b28], edi
je 0x1001242e
mov edi, dword [ebp - 0x2b10]
add edi, 0xc
mov esi, dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
lea eax, [ebp - 0x208]
xor ecx, ecx
push ecx
push ecx
push 0xfe
push eax
push 0xffffffffffffffff
push dword [edi - 0xc]
mov dword [ebp - 0x2b0c], ecx
push ecx
push ecx
call esi
xor ecx, ecx
lea eax, [ebp - 0x108]
push ecx
push ecx
push 0xfe
push eax
push 0xffffffffffffffff
push dword [edi - 8]
push ecx
push ecx
call esi
xor esi, esi
mov dword [ebp - 0x2b24], 0x100
push esi
lea eax, [ebp - 0x2b24]
push esi
push eax
lea edx, [ebp - 0x308]
lea ecx, [ebp - 0x208]
call fcn.1000c8f8
add esp, 0xc
lea eax, [ebp - 0x108]
cmp byte [ebp - 0x108], 0
je 0x1001207a
mov cl, byte [eax]
cmp cl, 9
je 0x10012071
cmp cl, 0xa
je 0x10012071
cmp cl, 0xd
jne 0x10012074
mov byte [eax], 0x20
inc eax
cmp byte [eax], 0
jne 0x10012060
lea eax, [ebp - 0x308]
push eax
lea eax, [ebp - 0x108]
push eax
push dword [edi]
lea eax, [ebp - 0x208]
push eax
push str._s_t_S___s__t_s
push 0xffffffffffffffff
lea eax, [ebp - 0x2b08]
push 0x2800
push eax
call fcn.1001f145
add esp, 0x20
lea eax, [ebp - 0x2b0c]
push eax
push 2
push dword [edi - 0xc]
push esi
call dword [sym.imp.NETAPI32.dll_NetUserGetInfo]
test eax, eax
jne 0x100123bd
mov eax, dword [ebp - 0x2b0c]
test eax, eax
je 0x100123bd
test dword [eax + 0x18], 0x100
je 0x100120ff
push 0xffffffffffffffff
push str._tTEMP_DUPLICATE_ACCOUNT
lea eax, [ebp - 0x2b08]
push 0x2800
push eax
call fcn.1001f294
mov eax, dword [ebp - 0x2b0c]
add esp, 0x10
test dword [eax + 0x18], 0x1000
je 0x10012129
push 0xffffffffffffffff
push str._tWORKSTATION_TRUST_ACCOUNT
lea eax, [ebp - 0x2b08]
push 0x2800
push eax
call fcn.1001f294
mov eax, dword [ebp - 0x2b0c]
add esp, 0x10
test dword [eax + 0x18], 0x2000
je 0x10012153
push 0xffffffffffffffff
push str._tSERVER_TRUST_ACCOUNT
lea eax, [ebp - 0x2b08]
push 0x2800
push eax
call fcn.1001f294
mov eax, dword [ebp - 0x2b0c]
add esp, 0x10
test dword [eax + 0x18], 0x800
je 0x1001217d
push 0xffffffffffffffff
push str._tINTERDOMAIN_TRUST_ACCOUNT
lea eax, [ebp - 0x2b08]
push 0x2800
push eax
call fcn.1001f294
mov eax, dword [ebp - 0x2b0c]
add esp, 0x10
test byte [eax + 0x18], 2
je 0x100121a4
push 0xffffffffffffffff
push str._tACCOUNTDISABLE
lea eax, [ebp - 0x2b08]
push 0x2800
push eax
call fcn.1001f294
mov eax, dword [ebp - 0x2b0c]
add esp, 0x10
test byte [eax + 0x18], 0x20
je 0x100121cb
push 0xffffffffffffffff
push str._tPASSWD_NOTREQD
lea eax, [ebp - 0x2b08]
push 0x2800
push eax
call fcn.1001f294
mov eax, dword [ebp - 0x2b0c]
add esp, 0x10
test byte [eax + 0x18], 0x40
je 0x100121f2
push 0xffffffffffffffff
push str._tPASSWD_CANT_CHANGE
lea eax, [ebp - 0x2b08]
push 0x2800
push eax
call fcn.1001f294
mov eax, dword [ebp - 0x2b0c]
add esp, 0x10
test byte [eax + 0x18], 0x10
je 0x10012219
push 0xffffffffffffffff
push str._tLOCKOUT
lea eax, [ebp - 0x2b08]
push 0x2800
push eax
call fcn.1001f294
mov eax, dword [ebp - 0x2b0c]
add esp, 0x10
test dword [eax + 0x18], 0x10000
je 0x10012243
push 0xffffffffffffffff
push str._tDONT_EXPIRE_PASSWD
lea eax, [ebp - 0x2b08]
push 0x2800
push eax
call fcn.1001f294
mov eax, dword [ebp - 0x2b0c]
add esp, 0x10
test byte [eax + 0x18], 0x80
je 0x1001226a
push 0xffffffffffffffff
push str._tENCRYPTED_TEXT_PASSWORD_ALLOWED
lea eax, [ebp - 0x2b08]
push 0x2800
push eax
call fcn.1001f294
mov eax, dword [ebp - 0x2b0c]
add esp, 0x10
test dword [eax + 0x18], 0x100000
je 0x10012294
push 0xffffffffffffffff
push str._tNOT_DELEGATED
lea eax, [ebp - 0x2b08]
push 0x2800
push eax
call fcn.1001f294
mov eax, dword [ebp - 0x2b0c]
add esp, 0x10
test dword [eax + 0x18], 0x40000
je 0x100122be
push 0xffffffffffffffff
push str._tSMARTCARD_REQUIRED
lea eax, [ebp - 0x2b08]
push 0x2800
push eax
call fcn.1001f294
mov eax, dword [ebp - 0x2b0c]
add esp, 0x10
test dword [eax + 0x18], 0x200000
je 0x100122e8
push 0xffffffffffffffff
push str._tUSE_DES_KEY_ONLY
lea eax, [ebp - 0x2b08]
push 0x2800
push eax
call fcn.1001f294
mov eax, dword [ebp - 0x2b0c]
add esp, 0x10
test dword [eax + 0x18], 0x400000
je 0x10012312
push 0xffffffffffffffff
push str._tDONT_REQUIRE_PREAUTH
lea eax, [ebp - 0x2b08]
push 0x2800
push eax
call fcn.1001f294
mov eax, dword [ebp - 0x2b0c]
add esp, 0x10
test dword [eax + 0x18], 0x80000
je 0x1001233c
push 0xffffffffffffffff
push str._tTRUSTED_FOR_DELEGATION
lea eax, [ebp - 0x2b08]
push 0x2800
push eax
call fcn.1001f294
mov eax, dword [ebp - 0x2b0c]
add esp, 0x10
test dword [eax + 0x18], 0x800000
je 0x10012366
push 0xffffffffffffffff
push str._tPASSWORD_EXPIRED
lea eax, [ebp - 0x2b08]
push 0x2800
push eax
call fcn.1001f294
mov eax, dword [ebp - 0x2b0c]
add esp, 0x10
test dword [eax + 0x18], 0x1000000
je 0x10012390
push 0xffffffffffffffff
push str._tTRUSTED_TO_AUTHENTICATE_FOR_DELEGATION
lea eax, [ebp - 0x2b08]
push 0x2800
push eax
call fcn.1001f294
mov eax, dword [ebp - 0x2b0c]
add esp, 0x10
push dword [eax + 0x34]
push dword [eax + 0x3c]
push dword [ebp - 0x2b1c]
push dword [eax + 8]
lea eax, [ebp - 0x2b08]
push eax
push str._s_t_d:_d:_d:_d_n
push 0xffffffffffffffff
push 0x2800
push eax
call fcn.1001f145
add esp, 0x24
jmp 0x100123df
push dword [ebp - 0x2b1c]
lea eax, [ebp - 0x2b08]
push eax
push str._s_t_1:_d:_1:_1_n
push 0xffffffffffffffff
push 0x2800
push eax
call fcn.1001f145
add esp, 0x18
cmp dword [ebp - 0x2b0c], esi
je 0x100123ef
push dword [ebp - 0x2b0c]
call ebx
lea ecx, [ebp - 0x2b08]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100123f8
push esi
sub ecx, edx
lea eax, [ebp - 0x2b08]
push ecx
push eax
push dword [ebp - 0x2b20]
call dword [sym.imp.WS2_32.dll_send]
mov esi, dword [edi + 8]
add edi, 0x18
dec dword [ebp - 0x2b14]
jne 0x10011fea
mov edi, dword [ebp - 0x2b28]
cmp dword [ebp - 0x2b10], 0
je 0x1001243f
push dword [ebp - 0x2b10]
call ebx
cmp edi, 0xea
je 0x10011fa5
push 0
push 1
push 0x1009eb84
push dword [ebp - 0x2b20]
call dword [sym.imp.WS2_32.dll_send]
mov ecx, dword [ebp - 4]
xor eax, eax
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.1001e010
mov esp, ebp
pop ebp
ret