Function at 0x4bc43d
Capabilities:
Get domain controller name

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x50
push ebx
push esi
push edi
xor eax, eax
mov dword [ebp - 0x2c], ecx
push 7
pop ecx
mov ebx, eax
mov dword [ebp - 0x20], eax
lea edi, [ebp - 0x50]
mov dword [ebp - 4], eax
rep stosd dword es:[edi], eax
mov edi, dword [ebp + 0xc]
mov ecx, edi
mov dword [ebp - 0xc], eax
mov dword [ebp - 8], eax
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x1c]
push eax
mov dword [ebp - 0x28], edx
mov dword [ebp - 0x14], ebx
call fcn.004eb5a9
mov esi, eax
test esi, esi
je 0x4bc494
push esi
push 0x11500c9
call dword [sym.imp.certcli.dll_Ordinal_357]
jmp 0x4bc6bb
mov edx, dword [ebp + 0x10]
test edx, edx
jne 0x4bc4c8
lea eax, [ebp - 0x14]
mov ecx, edi
push eax
lea edx, [ebp + 0x14]
call fcn.004bc39e
mov esi, eax
test esi, esi
je 0x4bc4c3
push esi
push 0x11f00c9
call dword [sym.imp.certcli.dll_Ordinal_357]
mov ebx, dword [ebp - 0x14]
jmp 0x4bc6a1
mov ebx, dword [ebp - 0x14]
mov edx, ebx
lea eax, [ebp - 0x50]
mov ecx, edi
push eax
sub esp, 0xc
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x34]
push eax
call fcn.004bc2b1
mov esi, eax
test esi, esi
je 0x4bc4ef
push esi
push 0x12e00c9
jmp 0x4bc69b
lea eax, [ebp - 4]
push eax
push 0x40ec84
push ecx
mov ecx, edi
call fcn.004eae9a
mov esi, eax
test esi, esi
je 0x4bc51c
push esi
push 0x13700c9
push 0x40ec84
call dword [sym.imp.certcli.dll_Ordinal_359]
jmp 0x4bc6a1
lea eax, [ebp - 0x24]
xor edx, edx
push eax
push 0x4141b8
xor eax, eax
mov ecx, edi
push eax
call fcn.004eaf0b
mov esi, eax
test esi, esi
je 0x4bc544
push esi
push 0x14100c9
push 0x4141b8
jmp 0x4bc511
lea eax, [ebp - 0x14]
xor edx, edx
push eax
push 0x4276ac
xor eax, eax
mov ecx, edi
push eax
call fcn.004eaf0b
mov esi, eax
test esi, esi
je 0x4bc56c
push esi
push 0x14b00c9
push 0x4276ac
jmp 0x4bc511
lea eax, [ebp - 0xc]
push eax
push 0x4276b8
push ecx
mov ecx, edi
call fcn.004eae9a
mov esi, eax
test esi, esi
je 0x4bc590
push esi
push 0x15500c9
push 0x4276b8
jmp 0x4bc511
mov edx, dword [ebp - 0xc]
lea eax, [ebp - 8]
push eax
push dword [ebp + 0x14]
mov ecx, 0x4276d4
push dword [ebp - 0x1c]
push edi
call fcn.004ec471
mov esi, eax
cmp esi, 0x80070002
je 0x4bc5c1
test esi, esi
je 0x4bc5c1
push esi
push 0x16000c9
jmp 0x4bc69b
cmp dword [ebp + 0x18], 0
jne 0x4bc65d
cmp dword [ebp - 0x14], 0
je 0x4bc65d
lea eax, [ebp - 0x10]
push eax
push 0x40001000
xor eax, eax
push eax
push eax
push eax
push eax
call dword [sym.imp.NETAPI32.dll_DsGetDcNameW]
mov esi, eax
test esi, esi
je 0x4bc606
jle 0x4bc5fb
movzx esi, si
or esi, 0x80070000
push esi
push 0x17300c9
jmp 0x4bc69b
mov eax, dword [ebp - 0x10]
test eax, eax
je 0x4bc650
mov edx, dword [eax]
test edx, edx
je 0x4bc650
mov ecx, edx
lea esi, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
cmp ax, word [ebp - 0x20]
jne 0x4bc618
sub ecx, esi
sar ecx, 1
cmp ecx, 2
jbe 0x4bc650
xor eax, eax
lea ecx, [edx + 4]
push eax
push eax
lea eax, [ebp - 0x18]
mov edx, 0xc8
push eax
call fcn.004e6cb7
mov esi, eax
test esi, esi
je 0x4bc65d
push esi
push 0x18300c9
jmp 0x4bc69b
mov esi, 0x8000ffff
push esi
push 0x17a00c9
jmp 0x4bc69b
push dword [ebp - 0x18]
mov edx, dword [ebp - 0x28]
lea eax, [ebp - 0x50]
push dword [ebp - 8]
push dword [ebp + 0x20]
push dword [ebp + 0x1c]
push dword [ebp - 0xc]
push dword [ebp + 0x18]
push dword [ebp - 0x14]
push dword [ebp + 0x14]
push dword [ebp - 0x1c]
push dword [ebp - 0x24]
push eax
push dword [ebp - 4]
push edi
push ecx
mov ecx, dword [ebp - 0x2c]
call fcn.004c2938
mov esi, eax
test esi, esi
je 0x4bc6a1
push esi
push 0x19700c9
call dword [sym.imp.certcli.dll_Ordinal_357]
test ebx, ebx
je 0x4bc6ac
push ebx
call dword [sym.imp.KERNEL32.dll_LocalFree]
cmp dword [ebp - 4], 0
je 0x4bc6bb
push dword [ebp - 4]
call dword [sym.imp.KERNEL32.dll_LocalFree]
cmp dword [ebp - 8], 0
je 0x4bc6ca
push dword [ebp - 8]
call dword [sym.imp.KERNEL32.dll_LocalFree]
mov eax, dword [ebp - 0xc]
test eax, eax
je 0x4bc6d8
push eax
call dword [sym.imp.KERNEL32.dll_LocalFree]
cmp dword [ebp - 0x10], 0
je 0x4bc6e7
push dword [ebp - 0x10]
call dword [sym.imp.NETAPI32.dll_NetApiBufferFree]
mov ecx, dword [ebp - 0x18]
xor ebx, ebx
push ebx
xor edx, edx
call fcn.004e6d5b
lea ecx, [ebp - 0x50]
call fcn.004bc281
push ebx
push ebx
push ebx
push 1
push 0xe8
push esi
mov edx, 0x1b0
mov ecx, 0xc9
call fcn.004e9b0c
pop edi
mov eax, esi
pop esi
pop ebx
leave
ret 0x1c