Function at 0x41ccec
Capabilities:
Get hostname

Disassembly:
push 0x264
mov eax, 0x446e92
call fcn.0042bf10
mov edi, dword [ebp + 8]
push 7
pop eax
xor esi, esi
xor ecx, ecx
mov dword [ebp - 0x26c], edi
mov dword [ebp - 0x1a8], eax
mov dword [ebp - 0x1ac], esi
mov word [ebp - 0x1bc], cx
mov dword [ebp - 4], esi
mov dword [ebp - 0x218], eax
mov dword [ebp - 0x21c], esi
mov word [ebp - 0x22c], cx
mov dword [ebp - 0x234], eax
xor eax, eax
mov dword [ebp - 0x238], esi
mov word [ebp - 0x248], ax
lea eax, [ebp - 0x270]
push eax
lea eax, [ebp - 0x1a0]
push eax
mov byte [ebp - 4], 2
mov dword [ebp - 0x270], 0xc8
call dword [sym.imp.KERNEL32.dll_GetComputerNameW]
test eax, eax
je 0x41ca49
lea eax, [ebp - 0x1a0]
push eax
call fcn.0042c321
pop ecx
push eax
lea eax, [ebp - 0x1a0]
push eax
lea ecx, [ebp - 0x248]
call fcn.00408e20
lea eax, [ebp - 0x1a0]
push eax
call fcn.0042c321
pop ecx
push eax
lea eax, [ebp - 0x1a0]
push eax
lea ecx, [ebp - 0x1bc]
call fcn.00408e20
test byte [ebp + 0xc], 4
je 0x41ca60
lea eax, [ebp - 0x22c]
push eax
push edi
call fcn.0041c414
pop ecx
pop ecx
jmp 0x41ca9c
mov ebx, dword [ebp - 0x1ac]
cmp ebx, 8
jbe 0x41ca6e
push 8
pop ebx
cmp ebx, esi
je 0x41ca9c
push ebx
mov ecx, edi
call fcn.0040d9a0
cmp dword [ebp - 0x1a8], 8
mov ecx, dword [ebp - 0x1bc]
jae 0x41ca8f
lea ecx, [ebp - 0x1bc]
mov eax, dword [edi]
push ebx
push ecx
push eax
call fcn.0042b4c0
add esp, 0xc
mov ebx, dword [edi + 4]
sub ebx, dword [edi]
cmp ebx, 8
jae 0x41cae8
push 0xc
push 8
mov ecx, edi
call fcn.00413b40
push 8
pop eax
sub eax, ebx
cmp eax, dword [ebp - 0x1ac]
jbe 0x41cac4
mov eax, dword [ebp - 0x1ac]
cmp dword [ebp - 0x1a8], 8
mov edx, dword [ebp - 0x1bc]
jae 0x41cad9
lea edx, [ebp - 0x1bc]
mov ecx, dword [edi]
push eax
push edx
add ecx, ebx
push ecx
call fcn.0042b4c0
add esp, 0xc
push 7
pop edi
xor eax, eax
mov dword [ebp - 0x1fc], edi
mov dword [ebp - 0x200], esi
mov word [ebp - 0x210], ax
mov dword [ebp - 0x1c4], edi
mov dword [ebp - 0x1c8], esi
mov word [ebp - 0x1d8], ax
xor ebx, ebx
inc ebx
mov byte [ebp - 4], 4
test byte [ebp + 0xc], bl
je 0x41cb5a
lea eax, [ebp - 0x1f4]
push eax
call fcn.0041c616
pop ecx
push eax
lea ecx, [ebp - 0x210]
mov byte [ebp - 4], 5
call fcn.00408da0
push esi
push ebx
lea ecx, [ebp - 0x1f4]
mov byte [ebp - 4], 4
call fcn.00409e40
lea eax, [ebp - 0x210]
push eax
call fcn.004155c0
pop ecx
test byte [ebp + 0xc], 2
je 0x41cb8e
lea eax, [ebp - 0x1f4]
push eax
call fcn.0041d44a
pop ecx
push eax
lea ecx, [ebp - 0x1d8]
mov byte [ebp - 4], 6
call fcn.00408da0
push esi
push ebx
lea ecx, [ebp - 0x1f4]
mov byte [ebp - 4], 4
call fcn.00409e40
push 0xffffffffffffffff
push esi
lea eax, [ebp - 0x22c]
push eax
lea ecx, [ebp - 0x1d8]
call fcn.00405750
push 0xffffffffffffffff
push esi
lea eax, [ebp - 0x210]
push eax
lea ecx, [ebp - 0x1d8]
call fcn.00405750
push 0xffffffffffffffff
push esi
lea eax, [ebp - 0x248]
push eax
lea ecx, [ebp - 0x1d8]
call fcn.00405750
cmp dword [ebp - 0x1c8], 0x10
jae 0x41cc2c
push 0x61
xor eax, eax
push 0x10
mov word [ebp - 0x1f4], ax
pop eax
sub eax, dword [ebp - 0x1c8]
lea ecx, [ebp - 0x1f4]
push eax
mov dword [ebp - 0x1e0], edi
mov dword [ebp - 0x1e4], esi
call fcn.0041c3c5
push 0xffffffffffffffff
push esi
lea eax, [ebp - 0x1f4]
push eax
lea ecx, [ebp - 0x1d8]
mov byte [ebp - 4], 7
call fcn.00405750
push esi
push ebx
lea ecx, [ebp - 0x1f4]
mov byte [ebp - 4], 4
call fcn.00409e40
lea ecx, [ebp - 0x268]
call fcn.00421d22
lea eax, [ebp - 0x1d8]
push eax
lea eax, [ebp - 0x1f4]
push eax
mov byte [ebp - 4], 8
call fcn.00408ac0
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
mov byte [ebp - 4], 9
jb 0x41cc5e
mov edi, dword [eax]
jmp 0x41cc60
mov edi, eax
push edi
call fcn.0042c6b0
pop ecx
push eax
push edi
lea ecx, [ebp - 0x264]
call fcn.00409830
push esi
push ebx
lea ecx, [ebp - 0x1f4]
mov byte [ebp - 4], 8
call fcn.004097e0
push dword [ebp - 0x26c]
lea ecx, [ebp - 0x268]
call fcn.00421b3c
lea ecx, [ebp - 0x268]
mov byte [ebp - 4], 4
call fcn.004219d9
push esi
push ebx
lea ecx, [ebp - 0x1d8]
call fcn.00409e40
push esi
push ebx
lea ecx, [ebp - 0x210]
call fcn.00409e40
push esi
push ebx
lea ecx, [ebp - 0x248]
call fcn.00409e40
push esi
push ebx
lea ecx, [ebp - 0x22c]
call fcn.00409e40
push esi
push ebx
lea ecx, [ebp - 0x1bc]
call fcn.00409e40
call fcn.0042bf93
ret
push ebp
mov ebp, esp
cmp dword [ebp + 0xc], 0xffffffff
je 0x41cd01
cmp dword [ebp + 0xc], 7
je 0x41cd01
pop ebp
jmp 0x41c986
push dword [ebp + 8]
call fcn.0041c6d1
pop ecx
pop ebp
ret