Function at 0x431370
Capabilities:
Get hostname

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff0
sub esp, 0xd8
mov eax, dword [0x5400e4]
xor eax, esp
mov dword [esp + 0xd4], eax
mov eax, dword [ebp + 8]
mov dword [esp + 0xc], eax
mov eax, dword [ebp + 0xc]
push esi
mov dword [esp + 8], eax
mov eax, dword [ebp + 0x10]
push edi
mov dword [esp + 0x1c], edx
mov dword [esp + 0xb0], ecx
mov dword [esp + 0x10], eax
call fcn.00409f90
mov ecx, eax
test ecx, ecx
je 0x4319f9
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
mov dword [esp + 0xa8], 0x10
mov ecx, 1
sub ecx, dword [eax + 0xc]
lea edi, [eax + 0x10]
mov eax, dword [edi - 8]
sub eax, 0x10
mov dword [esp + 0xb8], edi
or ecx, eax
jge 0x4313fe
push 0x10
lea ecx, [esp + 0xbc]
call fcn.00420a10
mov edi, dword [esp + 0xb8]
cmp dword [edi - 8], 0x10
jl 0x431a03
xor eax, eax
mov dword [edi - 0xc], 0x10
mov word [edi + 0x20], ax
lea eax, [esp + 0xa8]
push eax
push edi
call dword [sym.imp.KERNEL32.dll_GetComputerNameW]
mov esi, dword [edi - 0xc]
test esi, esi
js 0x431a03
mov eax, dword [edi - 8]
mov ecx, 1
sub ecx, dword [edi - 4]
sub eax, esi
or ecx, eax
jge 0x431454
push esi
lea ecx, [esp + 0xbc]
call fcn.00420a10
mov edi, dword [esp + 0xb8]
lea eax, [esi + 1]
push eax
push edi
call fcn.004bb7ee
add esp, 8
cmp esi, dword [edi - 8]
jg 0x431a03
mov ecx, dword [esp + 0xb0]
xor eax, eax
mov dword [edi - 0xc], esi
mov word [edi + esi*2], ax
mov eax, dword [esp + 0x10]
mov dword [eax], 0
mov ecx, dword [ecx]
sub ecx, 0x10
call fcn.00420890
mov ecx, dword [eax + 4]
mov dword [esp + 0xb4], ecx
lea esi, [eax + 0x10]
mov dword [esp + 0x18], esi
mov dword [esp + 0xac], esi
test ecx, ecx
js 0x431a0d
mov eax, dword [esi - 8]
mov edx, 1
sub edx, dword [esi - 4]
sub eax, ecx
or edx, eax
jge 0x4314de
push ecx
lea ecx, [esp + 0xb0]
call fcn.00420a10
mov esi, dword [esp + 0xac]
mov ecx, dword [esp + 0xb4]
mov dword [esp + 0x18], esi
lea eax, [ecx + 1]
push eax
push esi
call fcn.004bb7ee
mov eax, dword [esp + 0xbc]
add esp, 8
cmp eax, dword [esi - 8]
jg 0x431a03
xor ecx, ecx
mov dword [esi - 0xc], eax
mov word [esi + eax*2], cx
mov dword [esp + 0xbc], ecx
lea ecx, [esp + 0xbc]
push 0x4fbf1c
call fcn.00420240
cmp dword [esi - 0xc], 0
jl 0x43186a
push str.PIPE:
push esi
call fcn.004b0df1
add esp, 8
test eax, eax
je 0x43186a
sub eax, esi
sar eax, 1
jne 0x43186a
push ecx
mov ecx, dword [esp + 0xb4]
lea eax, [esp + 0xb8]
xorps xmm0, xmm0
mov dword [esp + 0xb8], 0
movaps xmmword [esp + 0xc4], xmm0
push eax
mov dword [esp + 0xc8], 0
mov dword [esp + 0xcc], 0
mov dword [esp + 0xd0], 0
mov dword [esp + 0xd4], 0
call fcn.00432b50
push 0x4ff04c
lea ecx, [esp + 0xb4]
call fcn.00420240
lea eax, [esp + 0xc0]
push eax
lea edx, [esp + 0xb4]
lea ecx, [esp + 0xb8]
call fcn.00426980
mov edx, dword [esp + 0xb4]
add esp, 4
add edx, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4315eb
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, dword [esp + 0xc4]
cmp eax, 2
jae 0x431604
mov dword [esp + 0x10], 0
jmp 0x43183a
test eax, eax
je 0x431a17
push dword [esp + 0xc0]
mov ecx, dword [esp + 0x10]
call fcn.00420660
cmp dword [esp + 0xc4], 1
jbe 0x431a21
mov eax, dword [esp + 0xc0]
lea ecx, [esp + 0xbc]
add eax, 4
push eax
call fcn.00420660
call fcn.00409f90
mov ecx, eax
test ecx, ecx
je 0x431a2b
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0xb0], eax
mov eax, dword [esp + 0xc]
mov ecx, dword [eax]
sub ecx, 0x10
call fcn.00420890
add eax, 0x10
lea ecx, [esp + 0xac]
mov dword [esp + 0xac], eax
call fcn.00432b80
mov edx, str.LOCALHOST
lea ecx, [esp + 0xac]
call fcn.00432ab0
test al, al
jne 0x4316ed
mov edx, 0x4fa770
lea ecx, [esp + 0xac]
call fcn.00432ab0
test al, al
jne 0x4316ed
mov edx, str.127.0.0.1
lea ecx, [esp + 0xac]
call fcn.00432ab0
test al, al
jne 0x4316ed
lea edx, [esp + 0xb8]
lea ecx, [esp + 0xac]
call fcn.00432b00
test al, al
jne 0x4316ed
push dword [esp + 0xc]
lea ecx, [esp + 0xb4]
call fcn.00420660
jmp 0x43170a
push 1
push 0x4fc0b0
lea ecx, [esp + 0xb8]
call fcn.00420900
mov eax, dword [esp + 0x10]
mov dword [eax], 1
mov edx, dword [esp + 0xac]
or eax, 0xffffffff
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x431729
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push dword [esp + 0xbc]
push dword [esp + 0xb4]
push str._spipe_s
push dword [esp + 0x28]
call fcn.0042f180
mov ecx, dword [esp + 0x24]
add esp, 0x10
push 1
push 0x5002c8
call fcn.004278f0
mov ecx, dword [esp + 0xc4]
mov eax, 2
mov dword [esp + 0xc], eax
cmp ecx, eax
jbe 0x431813
cmp eax, 2
je 0x431790
mov ecx, dword [esp + 0x14]
push 1
push 0x5002c8
call fcn.00432be0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0xc4]
cmp eax, ecx
jae 0x431a03
mov ecx, dword [esp + 0xc0]
push 3
mov eax, dword [ecx + eax*4]
lea ecx, [esp + 0x28]
mov dword [esp + 0x24], ecx
lea ecx, [esp + 0x24]
push eax
call fcn.004206d0
mov edx, dword [esp + 0x20]
test edx, edx
jne 0x4317c2
xor ecx, ecx
jmp 0x4317db
mov ecx, edx
lea eax, [ecx + 1]
mov dword [esp + 0x18], eax
nop dword [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4317d0
sub ecx, dword [esp + 0x18]
push ecx
mov ecx, dword [esp + 0x18]
push edx
call fcn.00432be0
mov eax, dword [esp + 0x20]
lea ecx, [esp + 0x24]
cmp eax, ecx
je 0x4317fb
push eax
call fcn.004b7ed7
add esp, 4
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0xc4]
inc eax
mov dword [esp + 0xc], eax
cmp eax, ecx
jb 0x431770
mov edx, dword [esp + 0xb0]
or eax, 0xffffffff
mov dword [esp + 0x10], 1
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x43183a
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [esp + 0xb4]
or eax, 0xffffffff
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x431859
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea ecx, [esp + 0xc0]
call fcn.00427be0
jmp 0x431993
push dword [esp + 0xb0]
mov ecx, dword [esp + 0x10]
call fcn.00420660
call fcn.00409f90
mov ecx, eax
test ecx, ecx
je 0x431a35
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0xb4], eax
mov eax, str.LOCALHOST
nop
mov cx, word [esi]
cmp cx, word [eax]
jne 0x4318c6
test cx, cx
je 0x4318c2
mov cx, word [esi + 2]
cmp cx, word [eax + 2]
jne 0x4318c6
add esi, 4
add eax, 4
test cx, cx
jne 0x4318a0
xor eax, eax
jmp 0x4318cb
sbb eax, eax
or eax, 1
test eax, eax
je 0x431922
mov edx, 0x4fa770
lea ecx, [esp + 0xac]
call fcn.00432ab0
test al, al
jne 0x431922
mov edx, str.127.0.0.1
lea ecx, [esp + 0xac]
call fcn.00432ab0
test al, al
jne 0x431922
lea edx, [esp + 0xb8]
lea ecx, [esp + 0xac]
call fcn.00432b00
test al, al
jne 0x431922
push dword [esp + 0xc]
lea ecx, [esp + 0xb8]
call fcn.00420660
jmp 0x43193f
push 1
push 0x4fc0b0
lea ecx, [esp + 0xbc]
call fcn.00420900
mov eax, dword [esp + 0x10]
mov dword [eax], 1
push dword [esp + 0xbc]
mov esi, dword [esp + 0xb8]
push esi
push str._spipe_s
push dword [esp + 0x28]
call fcn.0042f180
mov ecx, dword [esp + 0x24]
add esp, 0x10
push 1
push 0x5002c8
call fcn.004278f0
add esi, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x431987
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov esi, dword [esp + 0x18]
mov dword [esp + 0x10], 1
mov edx, dword [esp + 0xbc]
or eax, 0xffffffff
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4319b2
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea edx, [esi - 0x10]
or esi, 0xffffffff
mov eax, esi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4319cc
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
add edi, 0xfffffff0
lock xadd dword [edi + 0xc], esi
dec esi
test esi, esi
jg 0x4319e1
mov ecx, dword [edi]
push edi
mov edx, dword [ecx]
call dword [edx + 4]
mov ecx, dword [esp + 0xdc]
mov eax, dword [esp + 0x10]
pop edi
pop esi
xor ecx, esp
call fcn.004981af
mov esp, ebp
pop ebp
ret
push 0x80004005
call fcn.0041f520
push 0x80070057
call fcn.0041f520
push 0x80070057
call fcn.0041f520
push 0x80070057
call fcn.0041f520
push 0x80070057
call fcn.0041f520
push 0x80004005
call fcn.0041f520
push 0x80004005
call fcn.0041f520
int3