Function at 0x401000
Capabilities:
Get hostname

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x1a20
call fcn.00401570
mov eax, dword [0x41d010]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
mov ebx, dword [ebp + 8]
mov ecx, 0x41f136
push esi
push edi
mov edi, dword [ebp + 0x10]
call fcn.00401527
xor esi, esi
call sub.extsetup.dll_IsElevated
test eax, eax
jne 0x4010e9
call sub.extsetup.dll__IsUACEnabled_0
test eax, eax
je 0x4010e9
push 0x104
lea eax, [ebp - 0x108]
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
lea eax, [ebp - 0x108]
push eax
lea eax, [ebp - 0x20c]
push eax
call sub.extsetup.dll_GetUNCPath
test eax, eax
je 0x401087
xor ecx, ecx
mov al, byte [ebp + ecx - 0x20c]
lea ecx, [ecx + 1]
mov byte [ebp + ecx - 0x109], al
test al, al
jne 0x401072
push edi
lea eax, [ebp - 0x108]
push eax
lea eax, [ebp - 0xa0c]
push str.__s___s
push eax
call fcn.004014b0
add esp, 0x10
lea eax, [ebp - 0xa0c]
push 2
push eax
push str.Dateien_m
call sub.extsetup.dll_RunAsAdmin
test eax, eax
jne 0x4010d3
call dword [sym.imp.KERNEL32.dll_GetLastError]
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00401559
mov esp, ebp
pop ebp
ret 0x10
pop edi
pop esi
or eax, 0xffffffff
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00401559
mov esp, ebp
pop ebp
ret 0x10
push edi
push 1
call sub.extsetup.dll_GetParameter
mov ecx, eax
lea edx, [ebp - 0xa0c]
sub edx, ecx
nop dword [eax + eax]
mov al, byte [ecx]
lea ecx, [ecx + 1]
mov byte [edx + ecx - 1], al
test al, al
jne 0x401100
push 0
lea eax, [ebp - 0xa0c]
push eax
push 0x2c
push 1
lea eax, [ebp - 0x108]
push eax
call sub.extsetup.dll_GetSubStringDelimited
push 0
lea eax, [ebp - 0xa0c]
push eax
push 0x2c
push 2
lea eax, [ebp - 0xe0c]
push eax
call sub.extsetup.dll_GetSubStringDelimited
cmp byte [ebp - 0xe0c], 0
jne 0x401173
lea eax, [ebp - 0x108]
push eax
lea eax, [ebp - 0xe0c]
push eax
call sub.extsetup.dll_Basename
lea eax, [ebp - 0xe0c]
push 0x2e
push eax
call fcn.00402100
add esp, 8
test eax, eax
je 0x401173
mov byte [eax], 0
lea ecx, [ebp - 0xa0c]
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x401180
sub ecx, edx
add ecx, edi
mov al, byte [ecx]
test al, al
je 0x4011ac
cmp al, 0x20
je 0x4011a4
mov al, byte [ecx + 1]
inc ecx
test al, al
jne 0x401191
jmp 0x4011ac
cmp al, 0x20
jne 0x4011ac
mov al, byte [ecx + 1]
inc ecx
test al, al
jne 0x4011a0
lea edx, [ebp - 0x1a0c]
sub edx, ecx
mov al, byte [ecx]
lea ecx, [ecx + 1]
mov byte [edx + ecx - 1], al
test al, al
jne 0x4011b4
mov byte [ebp - 0x60c], al
cmp byte [ebp - 0x108], al
jne 0x4011e8
lea eax, [ebp - 0x60c]
push str.Mit_TRunDll_kann_eine_DLL_als_Anwendungsprogramm_mit_Administratorrechten_ausgef
push eax
call fcn.004014b0
add esp, 8
jmp 0x401459
lea eax, [ebp - 0x108]
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov ebx, eax
mov dword [ebp - 0x1a1c], ebx
test ebx, ebx
je 0x401435
lea ecx, [ebp - 0x108]
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x401210
mov edi, dword [sym.imp.KERNEL32.dll_GetProcAddress]
lea esi, [ebp - 0x108]
sub ecx, edx
cmp ecx, 0x19
jb 0x401243
add esi, ecx
push str.AccCtrlServiceAdapter.dll
lea eax, [esi - 0x19]
push eax
call fcn.004079f7
add esp, 8
test eax, eax
je 0x401267
jmp 0x40124e
add esi, ecx
cmp ecx, 0xd
jb 0x4013bc
lea eax, [esi - 0xd]
push str.TSetupSys.dll
push eax
call fcn.004079f7
add esp, 8
test eax, eax
jne 0x4013bc
lea eax, [ebp - 0x1a18]
mov dword [ebp - 0x1a10], 0x400
push eax
call fcn.00406549
mov dword [ebp - 0x1a18], eax
lea eax, [ebp - 0x1a18]
push eax
mov dword [ebp - 0x1a14], edx
call fcn.00406522
add esp, 8
mov esi, eax
lea eax, [ebp - 0x1a10]
push eax
lea eax, [ebp - 0x160c]
push eax
call dword [sym.imp.KERNEL32.dll_GetComputerNameA]
lea eax, [ebp - 0x160c]
push eax
push dword [esi + 0xc]
mov eax, dword [esi + 0x10]
inc eax
push eax
mov eax, dword [esi + 0x14]
add eax, 0x76c
push eax
lea eax, [ebp - 0x120c]
push str._04d_02d_02d__s
push eax
call fcn.004014b0
add esp, 0x18
push str.GetLibraryID
push ebx
call edi
mov dword [ebp - 0x1a20], eax
test eax, eax
je 0x40138c
mov ah, byte [ebp - 0x120c]
xor edi, edi
mov ecx, 5
test ah, ah
je 0x401367
mov esi, dword [section..data]
cmp dword [0x41daa8], edi
jne 0x401334
cmp esi, 0x5f5e0ff
jae 0x40132a
dec ecx
add esi, ecx
mov ecx, esi
cmp ecx, 0x5f5e0ff
jb 0x401317
mov dword [section..data], esi
mov dword [0x41daa8], 1
lea ebx, [ebp - 0x120c]
nop word [eax + eax]
movzx eax, ah
lea ebx, [ebx + 1]
imul eax, esi
mov ecx, edi
and ecx, 0x1f
mov edx, edi
add ecx, 5
shr edx, cl
add edi, eax
mov al, byte [ebx]
add edi, edx
mov ah, al
test al, al
jne 0x401340
mov ebx, dword [ebp - 0x1a1c]
lea eax, [ebp - 0x120c]
push eax
call dword [ebp - 0x1a20]
mov ecx, eax
mov eax, 0xabcc772f
mul edi
shr edx, 0x1a
imul eax, edx, 0x5f5e0ff
sub edi, eax
cmp ecx, edi
je 0x4013b6
lea eax, [ebp - 0x108]
push eax
lea eax, [ebp - 0x60c]
push str.Die_Library___s__ist_nicht_f
push eax
call fcn.004014b0
add esp, 0xc
or esi, 0xffffffff
push ebx
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
jmp 0x401459
mov edi, dword [sym.imp.KERNEL32.dll_GetProcAddress]
push 0x104
lea eax, [ebp - 0x108]
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
lea eax, [ebp - 0xe0c]
push eax
push ebx
call edi
mov esi, eax
test esi, esi
je 0x401407
push 0
call dword [sym.imp.KERNEL32.dll_SetLastError]
push dword [ebp + 0x14]
lea eax, [ebp - 0x1a0c]
push eax
push ebx
push 0
call esi
call dword [sym.imp.KERNEL32.dll_GetLastError]
push ebx
mov esi, eax
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
jmp 0x401459
lea eax, [ebp - 0x108]
push eax
lea eax, [ebp - 0xe0c]
push eax
lea eax, [ebp - 0x60c]
push str.Das_Symbol___s__ist_in___s__nicht_definiert._n_nPr
push eax
call fcn.004014b0
add esp, 0x10
or esi, 0xffffffff
push ebx
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
jmp 0x401459
lea eax, [ebp - 0x108]
push eax
call sub.extsetup.dll_GetSysErrorText
push eax
lea eax, [ebp - 0x60c]
push str.Fehler__s_beim_Laden_der_DLL___s_.
push eax
call fcn.004014b0
add esp, 0x10
or esi, 0xffffffff
cmp byte [ebp - 0x60c], 0
je 0x40147e
test esi, esi
mov ecx, 0x10
mov eax, 0x40
cmovne eax, ecx
push eax
lea eax, [ebp - 0x60c]
push eax
call sub.extsetup.dll_MessageLog
mov ecx, dword [ebp - 4]
mov eax, esi
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.00401559
mov esp, ebp
pop ebp
ret 0x10