Function at 0x2d827e24
Capabilities:
Get hostname

Disassembly:
push 0x27c
mov eax, 0x2d8c14ac
call fcn.2d80509d
mov ebx, dword [ebp + 8]
mov edi, dword [ebp + 0xc]
mov dword [ebp - 0x1f4], edi
test ebx, ebx
jne 0x2d827e4a
xor eax, eax
jmp 0x2d8283dc
push ebx
call fcn.2d8a9785
push 0x44
mov esi, eax
lea eax, [ebp - 0x244]
push 0
push eax
call sub.MSVCR120.dll_memset
lea eax, [ebp - 0x244]
push eax
push esi
call fcn.2d8a52c0
add esp, 0x18
test eax, eax
jne 0x2d827e43
lea eax, [ebp - 0x1e9]
push eax
push 0x2d8d5870
lea ecx, [ebp - 0x128]
call fcn.2d8a52c0
xor esi, esi
mov dword [ebp - 4], esi
cmp dword [ebp - 0x23c], esi
je 0x2d827f50
cmp dword [ebp - 0x240], esi
jle 0x2d827f50
lea eax, [ebp - 0x1e9]
push eax
push dword [ebp - 0x23c]
lea ecx, [ebp - 0x140]
call fcn.2d8a52c0
push dword [ebp - 0x240]
lea eax, [ebp - 0x188]
mov byte [ebp - 4], 1
push esi
push eax
lea ecx, [ebp - 0x140]
call fcn.2d8a52c0
cmp dword [eax + 0x14], 0x10
mov byte [ebp - 4], 2
jb 0x2d827eeb
mov eax, dword [eax]
lea ecx, [ebp - 0x1e9]
push ecx
push eax
lea ecx, [ebp - 0x1a0]
call fcn.2d8a52c0
push 0xffffffffffffffff
push esi
lea eax, [ebp - 0x1a0]
mov byte [ebp - 4], 3
push eax
lea ecx, [ebp - 0x128]
call fcn.2d8a52c0
push esi
push 1
lea ecx, [ebp - 0x1a0]
mov byte [ebp - 4], 2
call fcn.2d8a52c0
push esi
push 1
lea ecx, [ebp - 0x188]
mov byte [ebp - 4], 1
call fcn.2d8a52c0
push 0
push 1
lea ecx, [ebp - 0x140]
mov byte [ebp - 4], 0
call fcn.2d8a52c0
xor esi, esi
mov eax, dword [ebp - 0x244]
test eax, eax
je 0x2d828369
jle 0x2d82833b
cmp eax, 2
jle 0x2d827f7a
cmp eax, 4
jne 0x2d82833b
xor eax, eax
inc eax
jmp 0x2d8283bd
lea eax, [ebp - 0x1e9]
push eax
push 0x2d8d5870
lea ecx, [ebp - 0x170]
call fcn.2d8a52c0
cmp dword [ebp - 0x224], 0
mov byte [ebp - 4], 4
je 0x2d828052
cmp dword [ebp - 0x228], 0
jle 0x2d828052
lea eax, [ebp - 0x1e9]
push eax
push dword [ebp - 0x224]
lea ecx, [ebp - 0x140]
call fcn.2d8a52c0
push dword [ebp - 0x228]
lea eax, [ebp - 0x188]
mov byte [ebp - 4], 5
push esi
push eax
lea ecx, [ebp - 0x140]
call fcn.2d8a52c0
cmp dword [eax + 0x14], 0x10
mov byte [ebp - 4], 6
jb 0x2d827ff0
mov eax, dword [eax]
lea ecx, [ebp - 0x1e9]
push ecx
push eax
lea ecx, [ebp - 0x1e8]
call fcn.2d8a52c0
push 0xffffffffffffffff
push esi
lea eax, [ebp - 0x1e8]
mov byte [ebp - 4], 7
push eax
lea ecx, [ebp - 0x170]
call fcn.2d8a52c0
push esi
push 1
lea ecx, [ebp - 0x1e8]
mov byte [ebp - 4], 6
call fcn.2d8a52c0
push esi
push 1
lea ecx, [ebp - 0x188]
mov byte [ebp - 4], 5
call fcn.2d8a52c0
push esi
push 1
lea ecx, [ebp - 0x140]
mov byte [ebp - 4], 4
call fcn.2d8a52c0
mov eax, dword [0x2d940758]
push edi
call dword [eax + 0x13c]
mov ecx, dword [0x2d940728]
mov esi, eax
push esi
call dword [ecx + 0x98]
mov ecx, dword [0x2d940728]
mov edi, eax
push esi
call dword [ecx + 0x94]
add esp, 0xc
lea ecx, [ebp - 0x1f0]
mov esi, eax
call fcn.2d8a18ac
push esi
push edi
lea ecx, [ebp - 0x200]
mov byte [ebp - 4], 8
call fcn.2d89d52d
lea eax, [ebp - 0x1f0]
mov byte [ebp - 4], 9
push eax
lea eax, [ebp - 0x200]
push eax
call fcn.2d89cd52
pop ecx
pop ecx
test al, al
je 0x2d828307
lea ecx, [ebp - 0x1f0]
call fcn.2d8a52c0
push 0x44
mov esi, eax
xor edi, edi
lea eax, [ebp - 0x288]
push edi
push eax
call sub.MSVCR120.dll_memset
lea eax, [ebp - 0x288]
push eax
push esi
call fcn.2d8a52c0
add esp, 0x14
test eax, eax
jne 0x2d828307
lea eax, [ebp - 0x1e9]
push eax
push 0x2d8d5870
lea ecx, [ebp - 0x158]
call fcn.2d8a52c0
mov byte [ebp - 4], 0xa
cmp dword [ebp - 0x288], edi
je 0x2d8282e7
cmp dword [ebp - 0x288], 4
je 0x2d8281d9
cmp dword [ebp - 0x268], edi
je 0x2d82823b
cmp dword [ebp - 0x26c], edi
jle 0x2d82823b
lea eax, [ebp - 0x1e9]
push eax
push dword [ebp - 0x268]
lea ecx, [ebp - 0x140]
call fcn.2d8a52c0
push dword [ebp - 0x26c]
lea eax, [ebp - 0x188]
mov byte [ebp - 4], 0xc
push edi
push eax
lea ecx, [ebp - 0x140]
call fcn.2d8a52c0
cmp dword [eax + 0x14], 0x10
mov byte [ebp - 4], 0xd
jb 0x2d828181
mov eax, dword [eax]
lea ecx, [ebp - 0x1e9]
push ecx
push eax
lea ecx, [ebp - 0x1b8]
call fcn.2d8a52c0
push 0xffffffffffffffff
push edi
lea eax, [ebp - 0x1b8]
mov byte [ebp - 4], 0xe
push eax
lea ecx, [ebp - 0x158]
call fcn.2d8a52c0
push edi
push 1
lea ecx, [ebp - 0x1b8]
mov byte [ebp - 4], 0xd
call fcn.2d8a52c0
push edi
push 1
lea ecx, [ebp - 0x188]
mov byte [ebp - 4], 0xc
call fcn.2d8a52c0
lea ecx, [ebp - 0x140]
jmp 0x2d82822f
lea eax, [ebp - 0x1f8]
mov dword [ebp - 0x1f8], pe_nt_image_headers32
push eax
lea eax, [ebp - 0x110]
push eax
call dword [sym.imp.kernel32.dll_GetComputerNameA]
lea eax, [ebp - 0x1e9]
push eax
lea eax, [ebp - 0x110]
push eax
lea ecx, [ebp - 0x1d0]
call fcn.2d8a52c0
push 0xffffffffffffffff
push edi
lea eax, [ebp - 0x1d0]
mov byte [ebp - 4], 0xb
push eax
lea ecx, [ebp - 0x158]
call fcn.2d8a52c0
lea ecx, [ebp - 0x1d0]
push edi
push 1
mov byte [ebp - 4], 0xa
call fcn.2d8a52c0
cmp dword [ebp - 0x15c], 0x10
lea ecx, [ebp - 0x170]
lea eax, [ebp - 0x158]
cmovae ecx, dword [ebp - 0x170]
cmp dword [ebp - 0x144], 0x10
push ecx
cmovae eax, dword [ebp - 0x158]
push eax
call fcn.2d8a52c0
pop ecx
pop ecx
test eax, eax
jne 0x2d828273
inc eax
jmp 0x2d8282e9
cmp dword [ebp - 0x1f4], 0
jne 0x2d828281
xor eax, eax
inc eax
jmp 0x2d8282ec
mov eax, dword [0x2d940730]
call dword [eax + 0xa4]
mov edi, eax
test edi, edi
je 0x2d8282ef
mov esi, dword [0x2d940730]
push ebx
call dword [esi + 0x94]
push eax
push 0x2d8d6538
push edi
call dword [esi + 0x11c]
mov eax, dword [0x2d940730]
push 0
push str.PhonehomeCheck
push edi
call dword [eax + 0xc8]
mov eax, dword [0x2d940430]
push edi
push 1
push dword [ebp - 0x1f4]
call dword [eax + 0x958]
movzx esi, ax
mov eax, dword [0x2d940730]
push edi
call dword [eax + 0xac]
add esp, 0x2c
jmp 0x2d8282f2
mov eax, edi
movzx eax, ax
movzx eax, ax
movzx esi, ax
push 0
push 1
lea ecx, [ebp - 0x158]
mov byte [ebp - 4], 9
call fcn.2d8a52c0
jmp 0x2d828309
xor esi, esi
lea ecx, [ebp - 0x200]
mov byte [ebp - 4], 8
call fcn.2d89d571
lea ecx, [ebp - 0x1f0]
call fcn.2d81b787
push 0
push 1
lea ecx, [ebp - 0x170]
mov byte [ebp - 4], 0
call fcn.2d8a52c0
jmp 0x2d8283c6
cmp dword [ebp - 0x114], 0x10
lea eax, [ebp - 0x128]
push str.javascript
cmovae eax, dword [ebp - 0x128]
push eax
call fcn.2d8a52c0
pop ecx
pop ecx
test eax, eax
jne 0x2d828364
mov eax, esi
jmp 0x2d8283c0
xor eax, eax
inc eax
jmp 0x2d8283c3
cmp dword [ebp - 0x114], 0x10
lea eax, [ebp - 0x128]
push 0x2d8d81fc
cmovae eax, dword [ebp - 0x128]
push eax
call fcn.2d8a52c0
pop ecx
pop ecx
test eax, eax
je 0x2d8283b7
cmp dword [ebp - 0x114], 0x10
lea eax, [ebp - 0x128]
push 0x2d8d8204
cmovae eax, dword [ebp - 0x128]
push eax
call fcn.2d8a52c0
pop ecx
pop ecx
test eax, eax
je 0x2d8283b7
mov eax, esi
jmp 0x2d8283ba
xor eax, eax
inc eax
movzx eax, ax
movzx eax, ax
movzx eax, ax
movzx esi, ax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x128]
push 0
push 1
call fcn.2d8a52c0
mov ax, si
call fcn.2d806a85
ret