Function at 0x4912d0
Capabilities:
Get hostname

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x534
mov eax, dword [0x5552b0]
xor eax, ebp
mov dword [ebp - 8], eax
cmp dword [0x56e248], 0
mov eax, dword [ebp + 8]
push ebx
push esi
mov dword [ebp - 0x530], eax
jne 0x491374
mov eax, dword [0x566278]
test eax, eax
je 0x491374
cmp dword [eax + 0x2c], 0
jle 0x491374
push 0x565dd8
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov ecx, dword [0x566278]
mov esi, dword [ecx + 0x20]
mov edx, dword [esi + 0x14]
push 0x56e24c
add edx, esi
push 0xa0
push esi
mov dword [esi + 0x20], edx
call dword [0x566344]
mov eax, dword [0x56e24c]
add esp, 0xc
test eax, eax
je 0x491369
cmp dword [0x56e248], 0
jne 0x491369
push eax
push 0x56e248
call dword [0x566370]
mov eax, dword [0x56e248]
push eax
push 0xa0
push esi
call dword [0x566348]
add esp, 0x14
push 0x565dd8
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
xor eax, eax
lea edx, [ebp - 0x52c]
mov dword [ebp - 0x26], eax
mov dword [ebp - 0x22], eax
mov dword [ebp - 0x1e], eax
mov dword [ebp - 0x1a], eax
mov dword [ebp - 0x16], eax
mov dword [ebp - 0x12], eax
mov dword [ebp - 0xe], eax
mov word [ebp - 0xa], ax
push edx
lea eax, [ebp - 0x28]
xor ecx, ecx
push eax
mov word [ebp - 0x28], cx
mov dword [ebp - 0x52c], 0x10
call dword [sym.imp.KERNEL32.dll_GetComputerNameW]
test eax, eax
jne 0x49140f
call dword [sym.imp.KERNEL32.dll_GetLastError]
xor ecx, ecx
push 0xa
lea edx, [ebp - 0x48]
push edx
push eax
mov word [ebp - 0x48], cx
mov dword [ebp - 0x46], ecx
mov dword [ebp - 0x42], ecx
mov dword [ebp - 0x3e], ecx
mov dword [ebp - 0x3a], ecx
mov dword [ebp - 0x36], ecx
mov dword [ebp - 0x32], ecx
mov dword [ebp - 0x2e], ecx
mov word [ebp - 0x2a], cx
call fcn.004e534f
add esp, 0xc
push str.fnInitReportAlert
lea edx, [ebp - 0x48]
mov ecx, str.GetComputerName
call fcn.004a3f00
add esp, 4
xor eax, eax
pop esi
pop ebx
mov ecx, dword [ebp - 8]
xor ecx, ebp
call fcn.004e4746
mov esp, ebp
pop ebp
ret
xor eax, eax
push 0x3e
push eax
lea ecx, [ebp - 0x8a]
push ecx
mov word [ebp - 0x8c], ax
call fcn.004e8ba0
add esp, 0xc
lea esi, [ebp - 0x528]
lea ebx, [ebp - 0x8c]
mov dword [ebp - 0x528], 0x20
call fcn.004a5b30
xor edx, edx
push 0x1fe
push edx
lea eax, [ebp - 0x512]
push eax
mov word [ebp - 0x514], dx
call fcn.004e8ba0
add esp, 0xc
push 0x100
lea ebx, [ebp - 0x514]
call fcn.004b4e50
xor eax, eax
add esp, 4
lea edx, [ebp - 0x524]
xor ecx, ecx
push edx
mov word [ebp - 0x524], cx
mov dword [ebp - 0x522], eax
mov dword [ebp - 0x51e], eax
mov dword [ebp - 0x51a], eax
mov word [ebp - 0x516], ax
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
xor eax, eax
push 0x7e
push eax
lea ecx, [ebp - 0x10a]
push ecx
mov word [ebp - 0x10c], ax
call fcn.004e8ba0
add esp, 0xc
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
movzx edx, word [ebp - 0x516]
movzx ecx, word [ebp - 0x51a]
mov ebx, dword [sym.imp.USER32.dll_wsprintfW]
push eax
movzx eax, word [ebp - 0x518]
push edx
movzx edx, word [ebp - 0x51c]
push eax
movzx eax, word [ebp - 0x51e]
push ecx
movzx ecx, word [ebp - 0x522]
push edx
movzx edx, word [ebp - 0x524]
push eax
push ecx
push edx
lea eax, [ebp - 0x10c]
push str._04u__02u__02u__02u__02u__02u__03u__u
push eax
call ebx
xor ecx, ecx
push 0x206
push ecx
lea edx, [ebp - 0x312]
push edx
mov word [ebp - 0x314], cx
call fcn.004e8ba0
mov esi, dword [ebp - 0x530]
add esp, 0x34
lea eax, [ebp - 0x10c]
push eax
lea ecx, [ebp - 0x28]
push ecx
push esi
lea edx, [ebp - 0x314]
push str._s__s__s.alt
push edx
call ebx
add esp, 0x14
lea eax, [ebp - 0x314]
push eax
push 0x28
push edi
call dword [0x56633c]
add esp, 0xc
push 0x30
push edi
call dword [0x56636c]
push str.Identify
push edi
call dword [0x566340]
push esi
push edi
call dword [0x566340]
push 0x51ca0c
push edi
call dword [0x566340]
push str.PCName
push edi
call dword [0x566340]
lea ecx, [ebp - 0x28]
push ecx
push edi
call dword [0x566340]
push 0x51ca0c
push edi
call dword [0x566340]
push str.UserName
push edi
call dword [0x566340]
add esp, 0x40
lea edx, [ebp - 0x8c]
push edx
push edi
call dword [0x566340]
push 0x51ca0c
push edi
call dword [0x566340]
push 0x520c38
push edi
call dword [0x566340]
lea eax, [ebp - 0x514]
push eax
push edi
call dword [0x566340]
push 0x51ca0c
push edi
call dword [0x566340]
push 0x520c40
push edi
call dword [0x566340]
mov eax, dword [0x56e248]
add esp, 0x30
test eax, eax
je 0x491627
push eax
push edi
call dword [0x566340]
add esp, 8
push 0x51ca0c
push edi
call dword [0x566340]
push str.Datetime
push edi
call dword [0x566340]
lea ecx, [ebp - 0x10c]
push ecx
push edi
call dword [0x566340]
push 0x51ca0c
push edi
call dword [0x566340]
mov ecx, dword [ebp - 8]
add esp, 0x20
pop esi
xor ecx, ebp
mov eax, 1
pop ebx
call fcn.004e4746
mov esp, ebp
pop ebp
ret