Function at 0x100199e
Capabilities:
Get domain controller name

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x3c
mov eax, dword [0x1003014]
push ebx
push esi
push edi
mov esi, 0x1001294
lea edi, [ebp - 0x20]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
mov dword [ebp - 4], eax
xor eax, eax
lea edi, [ebp - 0x16]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
xor ebx, ebx
stosd dword es:[edi], eax
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x28], ebx
stosd dword es:[edi], eax
call dword [sym.imp.KERNEL32.dll_GetConsoleOutputCP]
cmp eax, ebx
je 0x10019ec
push 0xa
lea ecx, [ebp - 0x1e]
push ecx
push eax
call dword [sym.imp.msvcrt.dll__ultow]
add esp, 0xc
lea eax, [ebp - 0x20]
push eax
push ebx
call dword [sym.imp.msvcrt.dll__wsetlocale]
pop ecx
pop ecx
push ebx
call sub.KERNEL32.dll_SetThreadUILanguage
cmp dword [ebp + 8], 2
jne 0x1001bc5
mov eax, dword [ebp + 0xc]
push 0x100128c
push dword [eax + 4]
call dword [sym.imp.msvcrt.dll__wcsicmp]
test eax, eax
pop ecx
pop ecx
je 0x1001bc5
lea eax, [ebp - 0x24]
push eax
push 0x40000090
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.NETAPI32.dll_DsGetDcNameW]
cmp eax, ebx
je 0x1001a4d
push eax
push 2
push 0xcc
call fcn.010016b8
jmp 0x1001b8e
mov eax, dword [ebp - 0x24]
push dword [eax]
mov edi, dword [sym.imp.msvcrt.dll_wcslen]
call edi
mov esi, eax
inc esi
lea eax, [esi + esi]
push eax
call sub.msvcrt.dll_void____cdecl_operator_new_unsigned_int_
cmp eax, ebx
pop ecx
pop ecx
mov dword [ebp - 0x2c], eax
je 0x1001b8e
mov eax, dword [ebp - 0x24]
mov eax, dword [eax]
add eax, 4
push eax
push esi
mov esi, dword [ebp - 0x2c]
push esi
call fcn.01001636
push esi
call edi
cmp word [esi + eax*2 - 2], 0x2e
pop ecx
jne 0x1001a9b
push esi
call edi
pop ecx
mov word [esi + eax*2 - 2], bx
push 0x185
push esi
mov dword [ebp - 0x3c], 0x1e
mov dword [ebp - 0x38], ebx
call dword [sym.imp.WLDAP32.dll_Ordinal_145]
mov ebx, eax
test ebx, ebx
pop ecx
pop ecx
jne 0x1001acc
push 0xe
push 2
push 0xce
call fcn.010016b8
jmp 0x1001b80
call fcn.01001420
mov esi, dword [sym.imp.WLDAP32.dll_Ordinal_14]
mov edi, eax
and edi, 0x80
test al, 0x40
mov dword [ebp - 0x30], 1
je 0x1001afd
lea eax, [ebp - 0x30]
push eax
push 0x95
push ebx
call esi
add esp, 0xc
test eax, eax
jne 0x1001b14
test edi, edi
je 0x1001b1e
lea eax, [ebp - 0x30]
push eax
push 0x96
push ebx
call esi
add esp, 0xc
test eax, eax
je 0x1001b1e
push eax
push 1
push 0xcf
jmp 0x1001ac2
lea eax, [ebp - 0x3c]
push eax
push ebx
call dword [sym.imp.WLDAP32.dll_Ordinal_88]
test eax, eax
pop ecx
pop ecx
je 0x1001b34
push eax
push 1
jmp 0x1001abd
push 0x486
push 0
push 0
push ebx
call dword [sym.imp.WLDAP32.dll_Ordinal_73]
add esp, 0x10
test eax, eax
je 0x1001b58
push eax
push 1
push 0xd0
jmp 0x1001ac2
lea eax, [ebp - 0x28]
push eax
push ebx
call fcn.010017a1
test eax, eax
jne 0x1001b80
mov eax, dword [ebp + 0xc]
push dword [eax + 4]
push dword [ebp - 0x28]
push ebx
call fcn.0100182e
test eax, eax
jne 0x1001b80
mov dword [ebp - 0x34], 1
test ebx, ebx
je 0x1001b8c
push ebx
call dword [sym.imp.WLDAP32.dll_Ordinal_46]
pop ecx
xor ebx, ebx
cmp dword [ebp - 0x24], ebx
je 0x1001b9b
push dword [ebp - 0x24]
call sub.NETAPI32.dll_NetApiBufferFree
push dword [ebp - 0x28]
call sub.msvcrt.dll_void___cdecl_operator_delete_void__
push dword [ebp - 0x2c]
call sub.msvcrt.dll_void___cdecl_operator_delete_void__
cmp dword [ebp - 0x34], ebx
pop ecx
pop ecx
je 0x1001bb9
push 0xc9
jmp 0x1001bbe
push 0xca
call fcn.01001614
jmp 0x1001bca
call fcn.010016a6
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor eax, eax
pop ebx
call fcn.01001c5f
leave
ret