Function at 0x75992c95
Capabilities:
Get domain controller name

Disassembly:
cmp dword [eax + 0x1c], edi
je 0x7599398e
mov ebx, dword [eax + 0x1c]
lea ecx, [ebp - 0x1c]
push ecx
push ebx
push dword [eax]
call fcn.75992d81
lea eax, [ebp - 0x20]
push eax
mov eax, dword [ebp - 0xc]
push edi
push dword [ebp - 0x1c]
push edi
push ebx
push dword [eax]
call dword [sym.imp.NTDSAPI.dll_DsBindWithSpnExW]
mov esi, eax
mov dword [ebp + 0x20], esi
cmp dword [ebp - 0x1c], edi
je 0x75992aeb
push dword [ebp - 0x1c]
call dword [sym.imp.KERNEL32.dll_LocalFree]
cmp esi, edi
jne 0x75993951
xor esi, esi
mov dword [ebp - 4], edi
mov dword [ebp + 8], esi
cmp dword [ebp + 0x18], edi
jbe 0x75992be9
cmp dword [ebp - 4], edi
jl 0x75992bf0
lea eax, [ebp - 0x10]
push eax
lea eax, [ebp + 0xc]
push eax
mov eax, dword [ebp + 0x14]
push 1
mov ebx, esi
shl ebx, 2
push dword [ebx + eax]
push dword [ebp + 0x10]
push edi
push dword [ebp - 0x20]
call dword [sym.imp.NTDSAPI.dll_DsCrackNamesW]
mov dword [ebp + 0x20], eax
cmp eax, edi
jne 0x75993fbe
mov edx, dword [ebp - 0x10]
cmp dword [edx], 1
mov dword [ebp - 0x14], edi
jb 0x759939bd
cmp esi, edi
jne 0x75992b59
mov eax, dword [edx + 4]
cmp dword [eax], 5
je 0x75994011
mov eax, dword [edx + 4]
mov ecx, dword [eax]
cmp ecx, 7
jae 0x7599399f
mov ecx, dword [ecx*4 + 0x759953b4]
mov dword [ebp - 4], ecx
cmp ecx, edi
jne 0x75993fa6
mov eax, dword [eax + 8]
cmp eax, edi
je 0x759939b5
lea edx, [eax + 2]
mov cx, word [eax]
inc eax
inc eax
cmp cx, di
jne 0x75992b87
sub eax, edx
sar eax, 1
lea esi, [eax + eax + 2]
push esi
push 0x40
call dword [sym.imp.KERNEL32.dll_LocalAlloc]
mov ecx, dword [ebp + 0x1c]
mov edx, dword [ecx]
mov dword [ebx + edx], eax
mov eax, dword [ecx]
add eax, ebx
cmp dword [eax], edi
je 0x759939a9
mov ecx, dword [ebp - 0x10]
mov ecx, dword [ecx + 4]
push esi
push dword [ecx + 8]
push dword [eax]
call sub.ntdll.dll_memcpy
add esp, 0xc
mov edx, dword [ebp - 0x10]
push edx
call dword [sym.imp.NTDSAPI.dll_DsFreeNameResultW]
mov esi, dword [ebp + 8]
inc esi
mov dword [ebp + 8], esi
cmp esi, dword [ebp + 0x18]
jb 0x75992b04
cmp dword [ebp - 4], edi
jl 0x75992bf0
mov dword [ebp - 0x18], 1
mov esi, dword [ebp + 0x1c]
cmp dword [ebp - 0x20], edi
je 0x75992c02
lea eax, [ebp - 0x20]
push eax
call dword [sym.imp.NTDSAPI.dll_DsUnBindW]
cmp dword [ebp - 8], edi
jne 0x75993fd1
cmp dword [ebp - 0xc], edi
je 0x75992c18
push dword [ebp - 0xc]
call sub.netutils.dll_NetApiBufferFree
cmp dword [ebp - 0x18], edi
je 0x75993873
setne al
pop ebx
pop edi
pop esi
leave
ret 0x20
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x28
push esi
push edi
xor edi, edi
push 0x75992c7c
push 0x75992c64
mov dword [ebp - 0xc], edi
mov dword [ebp - 0x20], edi
mov dword [ebp - 4], 0xc00000da
mov dword [ebp - 0x18], edi
mov dword [ebp - 0x14], 1
mov dword [ebp - 0x24], edi
mov dword [ebp - 8], edi
mov dword [ebp - 0x1c], edi
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp + 0x18]
shl eax, 2
push eax
push 0x40
call dword [sym.imp.KERNEL32.dll_LocalAlloc]
mov ecx, dword [ebp + 0x1c]
mov dword [ecx], eax
cmp eax, edi
je 0x75993eaa
push ebx
mov ebx, dword [sym.imp.ntdll.dll_wcschr]
cmp dword [ebp + 8], edi
je 0x75993ec9
cmp dword [ebp + 0x20], edi
jne 0x75993f1c
mov eax, dword [ebp + 8]
cmp eax, edi
je 0x75993f7a
lea ecx, [ebp - 0xc]
push ecx
push 0x40010010
push edi
push edi
push eax
push edi
call dword [sym.imp.logoncli.dll_DsGetDcNameW]
mov esi, dword [sym.imp.KERNEL32.dll_SetLastError]
mov dword [ebp + 0x20], eax
cmp eax, edi
jne 0x759938cd
mov eax, dword [ebp - 0xc]
mov ecx, dword [eax]
cmp word [ecx], 0x5c
jne 0x75992aab
add ecx, 2
mov dword [eax], ecx
jmp 0x75992d3f
mov esi, dword [ebp + 0x1c]
push dword [esi]
call dword [sym.imp.KERNEL32.dll_LocalFree]
lea eax, [ebp - 0x24]
push eax
mov eax, dword [ebp - 0x10]
push edi
push esi
push dword [ebp + 0x18]
mov dword [esi], edi
push dword [ebp + 0x14]
mov eax, dword [eax + 4]
push dword [ebp + 0x10]
push dword [ebp + 0xc]
push dword [eax + 4]
call fcn.75992c95
movzx eax, al
mov dword [ebp - 0x18], eax
cmp eax, edi
jne 0x7599405a
mov eax, dword fs:[0x18]
mov eax, dword [eax + 0xbf4]
mov dword [ebp - 0x14], edi
mov dword [ebp - 4], eax
push dword [ebp - 0x10]
call dword [sym.imp.NTDSAPI.dll_DsFreeNameResultW]
jmp 0x75992bf3