Function at 0x2d82f435
Capabilities:
Get hostname

Disassembly:
push 0x238
mov eax, 0x2d8ddd25
call fcn.2d805c11
mov eax, dword [ebp + 8]
mov edi, dword [ebp + 0xc]
mov dword [ebp - 0x1b4], eax
mov dword [ebp - 0x1b0], edi
test eax, eax
je 0x2d82faad
push eax
call fcn.2d8c1619
push 0x44
mov esi, eax
xor ebx, ebx
lea eax, [ebp - 0x200]
push ebx
push eax
call sub.VCRUNTIME140.dll_memset
lea eax, [ebp - 0x200]
push eax
push esi
call fcn.2d8c3208
add esp, 0x18
test eax, eax
jne 0x2d82faad
lea eax, [ebp - 0x1a1]
mov esi, 0x2d8f40a0
push eax
push esi
lea ecx, [ebp - 0x140]
call fcn.2d80602c
xor eax, eax
mov dword [ebp - 4], ebx
inc eax
cmp dword [ebp - 0x1f8], ebx
je 0x2d82f586
cmp dword [ebp - 0x1fc], ebx
jle 0x2d82f586
lea eax, [ebp - 0x1a1]
push eax
push dword [ebp - 0x1f8]
lea ecx, [ebp - 0x158]
call fcn.2d80602c
push dword [ebp - 0x1fc]
xor eax, eax
mov dword [ebp - 0x118], ebx
inc eax
mov dword [ebp - 0x114], 0xf
mov byte [ebp - 4], al
lea ecx, [ebp - 0x128]
push ebx
lea eax, [ebp - 0x158]
mov byte [ebp - 0x128], bl
push eax
call fcn.2d8c3208
cmp dword [ebp - 0x114], 0x10
lea ecx, [ebp - 0x1a1]
lea eax, [ebp - 0x128]
mov byte [ebp - 4], 2
cmovae eax, dword [ebp - 0x128]
push ecx
push eax
lea ecx, [ebp - 0x170]
call fcn.2d80602c
lea eax, [ebp - 0x170]
mov byte [ebp - 4], 3
push eax
lea ecx, [ebp - 0x140]
call fcn.2d8c3208
lea ecx, [ebp - 0x170]
mov byte [ebp - 4], 4
call fcn.2d80665e
lea ecx, [ebp - 0x128]
mov byte [ebp - 4], 5
call fcn.2d80665e
lea ecx, [ebp - 0x158]
mov byte [ebp - 4], 6
call fcn.2d80665e
xor eax, eax
mov byte [ebp - 4], bl
inc eax
mov ecx, dword [ebp - 0x200]
test ecx, ecx
je 0x2d82fa3b
jle 0x2d82f5a4
cmp ecx, 2
jle 0x2d82f5d5
cmp ecx, 4
je 0x2d82fa8d
cmp dword [ebp - 0x12c], 0x10
lea eax, [ebp - 0x140]
push str.javascript
cmovae eax, dword [ebp - 0x140]
push eax
call fcn.2d8c3208
pop ecx
pop ecx
test eax, eax
je 0x2d82fa90
xor eax, eax
inc eax
jmp 0x2d82fa93
lea eax, [ebp - 0x1a1]
push eax
push esi
lea ecx, [ebp - 0x1a0]
call fcn.2d80602c
cmp dword [ebp - 0x1e0], 0
mov byte [ebp - 4], 0xc
je 0x2d82f6c3
cmp dword [ebp - 0x1e4], 0
jle 0x2d82f6c3
lea eax, [ebp - 0x1a1]
push eax
push dword [ebp - 0x1e0]
lea ecx, [ebp - 0x170]
call fcn.2d80602c
push dword [ebp - 0x1e4]
lea eax, [ebp - 0x170]
mov byte [ebp - 4], 0xd
push ebx
push eax
lea ecx, [ebp - 0x128]
mov dword [ebp - 0x118], ebx
mov dword [ebp - 0x114], 0xf
mov byte [ebp - 0x128], bl
call fcn.2d8c3208
cmp dword [ebp - 0x114], 0x10
lea ecx, [ebp - 0x1a1]
lea eax, [ebp - 0x128]
mov byte [ebp - 4], 0xe
cmovae eax, dword [ebp - 0x128]
push ecx
push eax
lea ecx, [ebp - 0x158]
call fcn.2d80602c
lea eax, [ebp - 0x158]
mov byte [ebp - 4], 0xf
push eax
lea ecx, [ebp - 0x1a0]
call fcn.2d8c3208
lea ecx, [ebp - 0x158]
mov byte [ebp - 4], 0x10
call fcn.2d80665e
lea ecx, [ebp - 0x128]
mov byte [ebp - 4], 0x11
call fcn.2d80665e
lea ecx, [ebp - 0x170]
mov byte [ebp - 4], 0x12
call fcn.2d80665e
mov byte [ebp - 4], 0xc
mov eax, dword [0x2d95f818]
push edi
mov esi, dword [eax + 0x13c]
mov ecx, esi
call dword [0x2d8f1340]
call esi
pop ecx
mov ecx, dword [0x2d95f7c4]
mov edi, eax
push edi
mov esi, dword [ecx + 0x98]
mov ecx, esi
call dword [0x2d8f1340]
call esi
pop ecx
mov ecx, dword [0x2d95f7c4]
mov ebx, eax
push edi
mov esi, dword [ecx + 0x94]
mov ecx, esi
call dword [0x2d8f1340]
call esi
pop ecx
lea ecx, [ebp - 0x1ac]
mov esi, eax
call fcn.2d8b8d5c
push esi
push ebx
lea ecx, [ebp - 0x1bc]
mov byte [ebp - 4], 0x13
call fcn.2d8b36b4
lea eax, [ebp - 0x1ac]
mov byte [ebp - 4], 0x14
push eax
lea eax, [ebp - 0x1bc]
push eax
call fcn.2d8b2d1b
pop ecx
pop ecx
test al, al
je 0x2d82fa12
lea ecx, [ebp - 0x1ac]
call fcn.2d8c3208
push 0x44
mov esi, eax
xor ebx, ebx
lea eax, [ebp - 0x244]
push ebx
push eax
call sub.VCRUNTIME140.dll_memset
lea eax, [ebp - 0x244]
push eax
push esi
call fcn.2d8c3208
add esp, 0x14
test eax, eax
jne 0x2d82fa14
lea eax, [ebp - 0x1a1]
push eax
push 0x2d8f40a0
lea ecx, [ebp - 0x188]
call fcn.2d80602c
mov byte [ebp - 4], 0x19
cmp dword [ebp - 0x244], ebx
je 0x2d82f9f6
cmp dword [ebp - 0x244], 4
je 0x2d82f885
cmp dword [ebp - 0x224], ebx
je 0x2d82f8e5
cmp dword [ebp - 0x228], ebx
jle 0x2d82f8e5
lea eax, [ebp - 0x1a1]
push eax
push dword [ebp - 0x224]
lea ecx, [ebp - 0x170]
call fcn.2d80602c
push dword [ebp - 0x228]
lea eax, [ebp - 0x170]
mov byte [ebp - 4], 0x1f
push ebx
push eax
lea ecx, [ebp - 0x128]
mov dword [ebp - 0x118], ebx
mov dword [ebp - 0x114], 0xf
mov byte [ebp - 0x128], bl
call fcn.2d8c3208
cmp dword [ebp - 0x114], 0x10
lea ecx, [ebp - 0x1a1]
lea eax, [ebp - 0x128]
mov byte [ebp - 4], 0x20
cmovae eax, dword [ebp - 0x128]
push ecx
push eax
lea ecx, [ebp - 0x158]
call fcn.2d80602c
lea eax, [ebp - 0x158]
mov byte [ebp - 4], 0x21
push eax
lea ecx, [ebp - 0x188]
call fcn.2d8c3208
lea ecx, [ebp - 0x158]
mov byte [ebp - 4], 0x22
call fcn.2d80665e
lea ecx, [ebp - 0x128]
mov byte [ebp - 4], 0x23
call fcn.2d80665e
mov byte [ebp - 4], 0x24
lea ecx, [ebp - 0x170]
jmp 0x2d82f8dc
lea eax, [ebp - 0x1a8]
mov dword [ebp - 0x1a8], 0x100
push eax
lea eax, [ebp - 0x110]
push eax
call dword [sym.imp.kernel32.dll_GetComputerNameA]
lea eax, [ebp - 0x1a1]
push eax
lea eax, [ebp - 0x110]
push eax
lea ecx, [ebp - 0x158]
call fcn.2d80602c
lea eax, [ebp - 0x158]
mov byte [ebp - 4], 0x1d
push eax
lea ecx, [ebp - 0x188]
call fcn.2d8c3208
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0x158]
call fcn.2d80665e
mov byte [ebp - 4], 0x19
cmp dword [ebp - 0x18c], 0x10
lea ecx, [ebp - 0x1a0]
lea eax, [ebp - 0x188]
cmovae ecx, dword [ebp - 0x1a0]
cmp dword [ebp - 0x174], 0x10
push ecx
cmovae eax, dword [ebp - 0x188]
push eax
call fcn.2d8c3208
pop ecx
pop ecx
test eax, eax
jne 0x2d82f920
inc eax
jmp 0x2d82f9f8
cmp dword [ebp - 0x1b0], 0
jne 0x2d82f931
xor eax, eax
inc eax
jmp 0x2d82f9fb
mov eax, dword [0x2d95f7f8]
mov esi, dword [eax + 0xa4]
mov ecx, esi
call dword [0x2d8f1340]
call esi
mov dword [ebp - 0x1a8], eax
test eax, eax
je 0x2d82f9fe
mov edi, dword [0x2d95f7f8]
push dword [ebp - 0x1b4]
mov esi, dword [edi + 0x94]
mov ecx, esi
call dword [0x2d8f1340]
call esi
mov esi, dword [edi + 0x11c]
pop ecx
push eax
push 0x2d8f4d80
push dword [ebp - 0x1a8]
mov ecx, esi
call dword [0x2d8f1340]
call esi
mov eax, dword [0x2d95f7f8]
add esp, 0xc
mov esi, dword [eax + 0xc8]
mov ecx, esi
push ebx
mov ebx, dword [ebp - 0x1a8]
push str.PhonehomeCheck
push ebx
call dword [0x2d8f1340]
call esi
add esp, 0xc
xor eax, eax
inc eax
push ebx
push eax
mov eax, dword [0x2d95f534]
push dword [ebp - 0x1b0]
mov esi, dword [eax + 0x958]
mov ecx, esi
call dword [0x2d8f1340]
call esi
movzx edi, ax
add esp, 0xc
mov eax, dword [0x2d95f7f8]
push ebx
mov esi, dword [eax + 0xac]
mov ecx, esi
call dword [0x2d8f1340]
call esi
pop ecx
mov ebx, edi
jmp 0x2d82fa01
mov eax, ebx
movzx eax, ax
movzx ebx, ax
movzx ebx, bx
lea ecx, [ebp - 0x188]
mov byte [ebp - 4], 0x2e
call fcn.2d80665e
jmp 0x2d82fa14
xor ebx, ebx
lea ecx, [ebp - 0x1bc]
call fcn.2d8c3208
lea ecx, [ebp - 0x1ac]
call fcn.2d81665a
lea ecx, [ebp - 0x1a0]
mov byte [ebp - 4], 0x2f
call fcn.2d80665e
jmp 0x2d82fa96
cmp dword [ebp - 0x12c], 0x10
lea eax, [ebp - 0x140]
push 0x2d8f6a44
cmovae eax, dword [ebp - 0x140]
push eax
call fcn.2d8c3208
pop ecx
pop ecx
test eax, eax
je 0x2d82fa85
cmp dword [ebp - 0x12c], 0x10
lea eax, [ebp - 0x140]
push 0x2d8f6a4c
cmovae eax, dword [ebp - 0x140]
push eax
call fcn.2d8c3208
pop ecx
pop ecx
test eax, eax
jne 0x2d82fa8a
xor eax, eax
lea ebx, [eax + 1]
movzx eax, bx
movzx ebx, ax
movzx eax, bx
movzx ebx, ax
lea ecx, [ebp - 0x140]
mov dword [ebp - 4], 0x30
call fcn.2d80665e
mov ax, bx
jmp 0x2d82faaf
xor eax, eax
call fcn.2d8074bc
ret