Function at 0x18011e5
Capabilities:
Get hostname

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
mov eax, 0x843c
call fcn.01801bec
mov eax, dword [0x180b044]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
mov esi, dword [ebp + 0xc]
push edi
mov edi, 0x3ffc
xor ebx, ebx
push edi
lea eax, [ebp - 0x8410]
push ebx
push eax
mov dword [ebp - 0x8414], ebx
call sub.msvcrt.dll_memset
push edi
lea eax, [ebp - 0x4410]
push ebx
push eax
mov dword [ebp - 0x4414], ebx
call sub.msvcrt.dll_memset
add esp, 0x18
push ebx
push ebx
xor edi, edi
inc edi
push edi
push ebx
mov dword [ebp - 0x8438], ebx
mov dword [ebp - 0x8430], ebx
mov dword [ebp - 0x8434], ebx
mov dword [ebp - 0x842c], ebx
mov dword [ebp - 0x8428], ebx
mov dword [ebp - 0x8420], ebx
mov dword [ebp - 0x8424], ebx
call dword [sym.imp.KERNEL32.dll_HeapSetInformation]
push ebx
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov dword [0x180b074], eax
cmp eax, ebx
je 0x1804ede
push 0x1801784
push 0x180156c
push 0x2000
push 0x1813ec0
call fcn.01801843
add esp, 0x10
call fcn.01803afb
cmp eax, ebx
jne 0x1804ef7
push 0x1801558
push 0x1803af4
call fcn.01801c9c
call fcn.01803e1a
push edi
push 0x1807c89
call dword [sym.imp.KERNEL32.dll_SetConsoleCtrlHandler]
call fcn.01802293
mov dword [ebp - 0x8418], edi
cmp dword [ebp + 8], edi
jbe 0x180147c
mov dword [ebp - 0x841c], 2
mov edi, dword [ebp - 0x8418]
shl edi, 2
lea ebx, [edi + esi]
push 0x18020f8
push dword [ebx]
call dword [sym.imp.msvcrt.dll__wcsicmp]
pop ecx
pop ecx
test eax, eax
je 0x18050e1
push 0x1801550
push dword [ebx]
call dword [sym.imp.msvcrt.dll__wcsicmp]
pop ecx
pop ecx
test eax, eax
je 0x18050e1
push 0x1801fcc
push dword [ebx]
call dword [sym.imp.msvcrt.dll__wcsicmp]
pop ecx
pop ecx
test eax, eax
je 0x18050e1
push 0x1802100
push dword [ebx]
call dword [sym.imp.msvcrt.dll__wcsicmp]
pop ecx
pop ecx
test eax, eax
je 0x18050e1
push 0x1801548
push dword [ebx]
call dword [sym.imp.msvcrt.dll__wcsicmp]
pop ecx
pop ecx
test eax, eax
je 0x1804efe
push 0x1801540
push dword [ebx]
call dword [sym.imp.msvcrt.dll__wcsicmp]
pop ecx
pop ecx
test eax, eax
je 0x1804f0d
push 0x1801538
push dword [ebx]
call dword [sym.imp.msvcrt.dll__wcsicmp]
pop ecx
pop ecx
test eax, eax
je 0x1804f2b
push 0x1801530
push dword [ebx]
call dword [sym.imp.msvcrt.dll__wcsicmp]
pop ecx
pop ecx
test eax, eax
je 0x1804f54
push 0x1801528
push dword [ebx]
call dword [sym.imp.msvcrt.dll__wcsicmp]
pop ecx
pop ecx
test eax, eax
je 0x1804f7c
push 0x1801520
push dword [ebx]
call dword [sym.imp.msvcrt.dll__wcsicmp]
pop ecx
pop ecx
test eax, eax
je 0x1804fac
push 0x1801518
push dword [ebx]
call dword [sym.imp.msvcrt.dll__wcsicmp]
pop ecx
pop ecx
test eax, eax
je 0x1804fdc
cmp dword [ebp - 0x8438], 0
jne 0x18050a3
mov eax, dword [ebp + 8]
cmp dword [ebp - 0x8418], eax
jae 0x180146f
mov edi, 0x2000
cmp word [ebp - 0x8414], 0
je 0x180142a
push 0x180200c
push edi
lea eax, [ebp - 0x8414]
push eax
call fcn.0180270e
mov eax, dword [ebp - 0x8418]
mov ebx, dword [esi + eax*4]
cmp word [ebx], 0
je 0x18050b7
push 0x20
push ebx
call dword [sym.imp.msvcrt.dll_wcschr]
pop ecx
pop ecx
test eax, eax
jne 0x18050b7
push ebx
push edi
lea eax, [ebp - 0x8414]
push eax
call fcn.0180270e
inc dword [ebp - 0x8418]
mov eax, dword [ebp - 0x8418]
cmp eax, dword [ebp + 8]
jb 0x180140e
cmp dword [ebp - 0x8428], 0
jne 0x1805036
xor ebx, ebx
cmp dword [0x1817ec0], ebx
jne 0x1801498
push ebx
push ebx
push ebx
call fcn.018039d5
mov esi, eax
cmp esi, ebx
jl 0x1805155
cmp dword [ebp - 0x8434], ebx
jne 0x18051a4
xor edi, edi
inc edi
cmp word [ebp - 0x4414], bx
jne 0x18051be
cmp word [ebp - 0x8414], bx
je 0x18051ec
lea eax, [ebp - 0x8430]
push eax
lea eax, [ebp - 0x8414]
push eax
mov dword [0x180b040], ebx
call sym.NETSH.EXE_ProcessCommand
mov esi, eax
call fcn.0180227a
call fcn.018028a9
call fcn.0180158b
call fcn.01801728
mov eax, dword [0x1817ec0]
test eax, eax
jne 0x1805221
xor eax, eax
test esi, esi
setne al
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.01801579
leave
ret 8
push 0x1805248
push 0x1805240
call dword [sym.imp.msvcrt.dll_wprintf]
pop ecx
pop ecx
mov eax, edi
jmp 0x1801504
xor eax, eax
jmp 0x1801504
mov dword [0x1817ee0], 1
jmp 0x1805016
mov eax, dword [ebp - 0x841c]
cmp eax, dword [ebp + 8]
jae 0x18050a3
mov eax, dword [edi + esi + 4]
mov dword [ebp - 0x8434], eax
jmp 0x180500a
mov eax, dword [ebp - 0x841c]
cmp eax, dword [ebp + 8]
jae 0x18050a3
push dword [edi + esi + 4]
lea eax, [ebp - 0x4414]
push 0x2000
push eax
call fcn.01801e5f
jmp 0x180500a
mov eax, dword [ebp - 0x841c]
cmp eax, dword [ebp + 8]
jae 0x18050a3
mov eax, dword [edi + esi + 4]
mov dword [ebp - 0x842c], eax
mov dword [ebp - 0x8438], 1
jmp 0x180500a
mov eax, dword [ebp - 0x841c]
cmp eax, dword [ebp + 8]
jae 0x18050a3
mov edi, dword [edi + esi + 4]
mov eax, edi
lea edx, [eax + 2]
mov cx, word [eax]
inc eax
inc eax
test cx, cx
jne 0x1804f94
sub eax, edx
sar eax, 1
je 0x180500a
mov dword [ebp - 0x8428], edi
jmp 0x180500a
mov eax, dword [ebp - 0x841c]
cmp eax, dword [ebp + 8]
jae 0x18050a3
mov edi, dword [edi + esi + 4]
mov eax, edi
lea edx, [eax + 2]
mov cx, word [eax]
inc eax
inc eax
test cx, cx
jne 0x1804fc4
sub eax, edx
sar eax, 1
je 0x180500a
mov dword [ebp - 0x8420], edi
jmp 0x180500a
mov eax, dword [ebp - 0x841c]
cmp eax, dword [ebp + 8]
jae 0x18050a3
mov edi, dword [edi + esi + 4]
mov eax, edi
lea edx, [eax + 2]
mov cx, word [eax]
inc eax
inc eax
test cx, cx
jne 0x1804ff4
sub eax, edx
sar eax, 1
je 0x180500a
mov dword [ebp - 0x8424], edi
inc dword [ebp - 0x8418]
inc dword [ebp - 0x841c]
inc dword [ebp - 0x8418]
mov eax, dword [ebp - 0x8418]
inc dword [ebp - 0x841c]
cmp eax, dword [ebp + 8]
jae 0x180146f
jmp 0x18012e8
mov esi, dword [ebp - 0x8424]
test esi, esi
je 0x1805126
push 0x1805574
push esi
call dword [sym.imp.msvcrt.dll__wcsicmp]
pop ecx
pop ecx
test eax, eax
jne 0x1805126
push dword [ebp - 0x8428]
and dword [ebp - 0x8424], eax
push 0xa9
push dword [0x180b074]
call sym.NETSH.EXE_PrintMessageFromModule
add esp, 0xc
lea eax, [ebp - 0x8424]
push eax
push 0x104
lea eax, [ebp - 0x20c]
push eax
call fcn.01807a5d
test eax, eax
je 0x1805120
mov esi, 0x3a99
jmp 0x18014dc
push dword [esi]
push 0x6e
push dword [0x180b074]
call sym.NETSH.EXE_PrintMessageFromModule
add esp, 0xc
jmp 0x1805099
push 0x1805594
push edi
lea eax, [ebp - 0x8414]
push eax
call fcn.0180270e
push ebx
push edi
lea eax, [ebp - 0x8414]
push eax
call fcn.0180270e
push 0x1805594
jmp 0x1801451
xor eax, eax
push eax
push eax
push eax
call fcn.018039d5
push dword [esi]
push 0x6e
push dword [0x180b074]
call sym.NETSH.EXE_PrintMessageFromModule
add esp, 0xc
lea eax, [ebp - 0x8430]
push eax
push 0x1801fcc
call sym.NETSH.EXE_ProcessCommand
call fcn.018028a9
call fcn.0180158b
xor eax, eax
inc eax
jmp 0x1801504
lea esi, [ebp - 0x20c]
push esi
push dword [ebp - 0x8420]
push dword [ebp - 0x8428]
call fcn.01807861
mov esi, eax
test esi, esi
je 0x180147c
push esi
push dword [0x180b074]
call sym.NETSH.EXE_PrintMessageFromModule
pop ecx
pop ecx
jmp 0x18014dc
mov eax, dword [0x1817ec0]
cmp eax, ebx
jne 0x1805182
lea eax, [ebp - 0x8420]
push eax
lea eax, [ebp - 0x414]
push eax
mov dword [ebp - 0x8420], 0x104
call dword [sym.imp.KERNEL32.dll_GetComputerNameW]
lea eax, [ebp - 0x414]
push eax
push 0xb4
push dword [0x180b074]
call sym.NETSH.EXE_PrintMessageFromModule
add esp, 0xc
push esi
push ebx
call sym.NETSH.EXE_PrintError
pop ecx
pop ecx
jmp 0x1801498
push dword [ebp - 0x8434]
call fcn.018077cf
mov esi, eax
cmp esi, ebx
je 0x18014a4
jmp 0x18014dc
lea eax, [ebp - 0x8430]
push eax
lea eax, [ebp - 0x4414]
push eax
mov dword [0x1817ee4], edi
call sym.NETSH.EXE_ProcessCommand
mov esi, eax
mov dword [0x1817ee4], ebx
cmp esi, ebx
je 0x18014b4
jmp 0x18014dc
mov dword [0x1817ee4], edi
cmp dword [ebp - 0x842c], ebx
je 0x180520a
push dword [ebp - 0x842c]
call fcn.018077cf
jmp 0x18014da
push edi
push dword [sym.imp.msvcrt.dll__iob]
mov dword [0x180b040], ebx
call fcn.01807652
jmp 0x18014da
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
push eax
call dword [sym.imp.KERNEL32.dll_HeapFree]
and dword [0x1817ec0], 0
jmp 0x18014fd