Function at 0x5bd660
Capabilities:
Get hostname

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x24c
mov esi, dword [ebp + 8]
mov eax, dword [ebp + 0xc]
mov ecx, dword [0x646040]
xor ecx, ebp
mov dword [ebp - 0x10], ecx
xor ecx, ecx
dec ecx
mov dword [esi], ecx
mov dword [esi + 4], ecx
mov dword [esi + 8], ecx
cmp byte [eax + 0xb], 0
js 0x5bd791
mov ecx, dword [eax + 8]
mov dword [esi + 8], ecx
movsd xmm0, qword [eax]
movsd qword [esi], xmm0
movsx eax, byte [esi + 0xb]
test eax, eax
mov ecx, dword [esi + 4]
mov edx, eax
cmovs edx, ecx
test edx, edx
je 0x5bde6d
cmp edx, 1
je 0x5bd74c
mov edx, eax
test al, al
jns 0x5bd6c7
mov esi, dword [esi]
cmp word [esi], 0x22
mov esi, dword [ebp + 8]
jne 0x5bd6e6
mov ecx, esi
call fcn.005b1f70
cmp word [eax], 0x22
je 0x5bd70e
mov dl, byte [esi + 0xb]
mov ecx, dword [esi + 4]
movzx eax, dl
test dl, dl
cmovs eax, ecx
test eax, eax
je 0x5be2bf
mov eax, esi
test dl, dl
jns 0x5bd6fb
mov eax, dword [esi]
cmp word [eax], 0x27
jne 0x5bd74c
mov ecx, esi
call fcn.005b1f70
cmp word [eax], 0x27
jne 0x5bd74c
movsx ecx, byte [esi + 0xb]
mov eax, ecx
test ecx, ecx
jns 0x5bd71b
mov eax, dword [esi + 4]
test eax, eax
je 0x5be2c9
lea ebx, [eax - 1]
mov edx, esi
test cl, cl
jns 0x5bd72e
mov edx, dword [esi]
js 0x5bde97
and bl, 0x7f
mov byte [esi + 0xb], bl
mov word [edx + eax*2 - 2], 0
mov ecx, esi
push 1
push 0
call fcn.0050b1d0
push str.shell32.dll
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov edi, eax
xor eax, eax
dec eax
mov dword [ebp - 0x240], eax
test edi, edi
je 0x5bd778
push 0x6314e6
push edi
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0x240], eax
lea eax, [ebp - 0x218]
mov dword [ebp - 0x24c], eax
xor ebx, ebx
mov dword [ebp - 0x258], edi
jmp 0x5bd9ee
mov ecx, esi
push dword [eax + 4]
push dword [eax]
call fcn.005421d0
jmp 0x5bd6a0
mov byte [ebp - 0x234], cl
test cl, cl
lea ecx, [ebp - 0x224]
cmovs ecx, edx
cmp word [ecx + edi*2 - 2], 0x5c
je 0x5bd7cc
mov ebx, dword [ebp - 0x22c]
mov cl, byte [ebp - 0x234]
jmp 0x5bd950
mov dword [ebp - 0x248], ecx
mov ebx, dword [ebp + 8]
movsx ecx, byte [ebx + 0xb]
mov ebx, ecx
mov dword [ebp - 0x244], ecx
test ecx, ecx
jns 0x5bd7eb
mov ebx, dword [ebp + 8]
mov ebx, dword [ebx + 4]
mov dword [ebp - 0x238], ebx
mov ebx, dword [ebp - 0x230]
mov ecx, dword [ebp - 0x22c]
add ebx, ecx
mov dword [ebp - 0x23c], ebx
cmp dword [ebp - 0x238], ebx
ja 0x5bd818
mov cl, byte [ebp - 0x234]
jmp 0x5bd94a
mov dword [ebp - 0x254], esi
mov ebx, dword [ebp + 8]
cmp byte [ebp - 0x244], 0
mov cl, byte [ebp - 0x234]
jns 0x5bd832
mov ebx, dword [ebx]
mov dword [ebp - 0x238], ebx
mov ebx, dword [ebp - 0x23c]
mov esi, dword [ebp - 0x238]
cmp word [esi + ebx*2], 0x5c
je 0x5bd85c
mov ebx, dword [ebp - 0x22c]
mov esi, dword [ebp - 0x254]
jmp 0x5bd950
lea eax, [edi - 1]
test cl, cl
mov ebx, dword [ebp - 0x22c]
js 0x5bd873
and al, 0x7f
mov byte [ebp - 0x219], al
jmp 0x5bd879
mov dword [ebp - 0x220], eax
mov eax, dword [ebp - 0x248]
mov word [eax + edi*2 - 2], 0
mov cl, byte [ebp - 0x219]
mov edx, dword [ebp - 0x224]
mov esi, dword [ebp - 0x220]
movzx eax, cl
jmp 0x5bd950
mov dword [ebp - 0x230], 0
push dword [ebp - 0x22c]
call fcn.00565872
add esp, 4
mov dword [ebp - 0x22c], eax
push 0x208
push 0xff
lea edi, [ebp - 0x218]
push edi
call fcn.00568ad0
add esp, 0xc
mov esi, dword [ebx*8 + 0x631504]
mov ecx, dword [ebp - 0x240]
call dword [0x6401dc]
xor eax, eax
push eax
push esi
push edi
push eax
call ecx
test eax, eax
lea ecx, [ebp - 0x224]
jne 0x5bd905
mov word [ebp - 0x218], 0
xor eax, eax
dec eax
mov dword [ebp - 0x224], eax
mov dword [ebp - 0x220], eax
mov dword [ebp - 0x21c], eax
lea eax, [ebp - 0x218]
push eax
call fcn.00556510
movsx eax, byte [ebp - 0x219]
mov ecx, eax
test eax, eax
mov edx, dword [ebp - 0x224]
mov esi, dword [ebp - 0x220]
mov edi, eax
cmovs edi, esi
test edi, edi
jne 0x5bd7a2
mov ebx, dword [ebp - 0x22c]
test cl, cl
cmovs eax, esi
lea ecx, [ebp - 0x224]
cmovns edx, ecx
mov esi, dword [ebp + 8]
mov ecx, esi
push eax
push edx
push ebx
push dword [ebp - 0x230]
call fcn.005b2d80
cmp byte [ebp - 0x219], 0
jns 0x5bd9de
push dword [ebp - 0x224]
call fcn.00564050
add esp, 4
jmp 0x5bd9de
mov edx, edi
add edx, ebx
je 0x5bd9de
mov word [ebp - 0x23c], cx
mov dword [ebp - 0x230], edx
xor edx, edx
mov ecx, dword [ebp - 0x230]
movzx esi, word [ecx + edx*2]
mov ecx, dword [ebp - 0x22c]
cmp si, word [ecx + edx*2]
jne 0x5bda84
inc edx
cmp eax, edx
jne 0x5bd99f
mov ecx, dword [ebp - 0x230]
cmp ecx, dword [ebp - 0x244]
mov esi, dword [ebp + 8]
je 0x5bd9de
sub ecx, dword [ebp - 0x234]
cmp ecx, 0xfffffffe
jne 0x5bde84
mov ebx, dword [ebp - 0x250]
inc ebx
cmp ebx, 7
je 0x5bdaad
mov eax, dword [ebx*8 + 0x631500]
test eax, eax
je 0x5bde9f
mov dword [ebp - 0x22c], eax
push eax
call fcn.00565872
add esp, 4
movsx edx, byte [esi + 0xb]
mov dword [ebp - 0x234], esi
test edx, edx
jns 0x5bda22
mov ecx, dword [esi]
mov dword [ebp - 0x234], ecx
test eax, eax
mov dword [ebp - 0x250], ebx
je 0x5bd8a0
test dl, dl
jns 0x5bda37
mov edx, dword [esi + 4]
cmp edx, eax
jl 0x5bd9de
mov edi, dword [ebp - 0x234]
lea ecx, [edi + edx*2]
mov dword [ebp - 0x244], ecx
mov ecx, dword [ebp - 0x22c]
movzx ecx, word [ecx]
lea ebx, [edi + edx*2]
add ebx, 0xfffffffe
mov dword [ebp - 0x238], ebx
mov ebx, edx
sub ebx, eax
inc ebx
je 0x5bd9de
inc edx
xor ebx, ebx
cmp word [edi + ebx], cx
je 0x5bd98a
add ebx, 2
dec edx
cmp eax, edx
jne 0x5bda6d
jmp 0x5bd9de
mov edx, dword [ebp - 0x238]
sub edx, edi
add edi, ebx
add edi, 2
sub edx, ebx
sar edx, 1
cmp edx, eax
mov esi, dword [ebp + 8]
movzx ecx, word [ebp - 0x23c]
jge 0x5bda5f
jmp 0x5bd9de
xor eax, eax
dec eax
jmp 0x5bdace
push str.advapi32.dll
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
test eax, eax
mov dword [ebp - 0x250], eax
je 0x5bdaa8
push 0x63153a
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
movsx ecx, byte [esi + 0xb]
test ecx, ecx
mov ebx, dword [esi]
mov edx, dword [esi + 4]
mov edi, esi
mov dword [ebp - 0x234], ebx
cmovs edi, ebx
mov esi, ecx
mov dword [ebp - 0x230], edx
cmovs esi, edx
mov edx, ecx
cmp esi, 0xc
jl 0x5bdc11
mov dword [ebp - 0x23c], eax
mov byte [ebp - 0x22c], dl
lea eax, [edi + esi*2]
mov dword [ebp - 0x244], eax
lea eax, [edi + esi*2]
add eax, 0xfffffffe
mov dword [ebp - 0x238], eax
mov edx, edi
mov eax, dword [ebp - 0x234]
add esi, 0xfffffff5
xor ebx, ebx
cmp word [edx + ebx], 0x24
je 0x5bdb40
add ebx, 2
dec esi
jne 0x5bdb28
mov dl, byte [ebp - 0x22c]
jmp 0x5bdc17
mov esi, edx
add esi, ebx
je 0x5bdb35
cmp word [edx + ebx + 2], 0x7b
jne 0x5bdb6a
cmp word [edx + ebx + 4], 0x75
jne 0x5bdb6a
cmp word [edx + ebx + 6], 0x73
jne 0x5bdb6a
cmp word [edx + ebx + 8], 0x65
je 0x5bdeae
mov esi, dword [ebp - 0x238]
sub esi, edx
add edx, ebx
add edx, 2
sub esi, ebx
sar esi, 1
cmp esi, 0xc
jge 0x5bdb23
jmp 0x5bdb35
mov esi, ebx
add esi, edx
je 0x5bdca6
cmp word [ebx + edx + 2], 0x7b
jne 0x5bdbb0
cmp word [ebx + edx + 4], 0x64
jne 0x5bdbb0
cmp word [ebx + edx + 6], 0x6f
jne 0x5bdbb0
cmp word [ebx + edx + 8], 0x6d
je 0x5be187
mov ecx, edi
sub ecx, ebx
add ebx, edx
add ebx, 2
sub ecx, edx
sar ecx, 1
cmp ecx, 0xe
jge 0x5bdc90
jmp 0x5bdca6
mov edi, esi
add edi, edx
je 0x5bdc64
cmp word [esi + edx + 2], 0x7b
jne 0x5bdbf9
cmp word [esi + edx + 4], 0x6d
jne 0x5bdbf9
cmp word [esi + edx + 6], 0x61
jne 0x5bdbf9
cmp word [esi + edx + 8], 0x63
je 0x5bdf78
mov edi, dword [ebp - 0x234]
sub edi, esi
add esi, edx
add esi, 2
sub edi, edx
sar edi, 1
cmp edi, 0xf
jge 0x5bdc4e
jmp 0x5bdc64
mov eax, dword [ebp - 0x234]
mov byte [ebp - 0x22c], dl
test dl, dl
mov edx, dword [ebp + 8]
mov ebx, edx
cmovs ebx, eax
mov edi, ecx
mov esi, dword [ebp - 0x230]
cmovs edi, esi
cmp edi, 0xf
jl 0x5bdc6d
lea edx, [ebx + edi*2]
mov dword [ebp - 0x238], edx
lea edx, [ebx + edi*2]
add edx, 0xfffffffe
mov dword [ebp - 0x234], edx
mov esi, ebx
add edi, 0xfffffff2
xor edx, edx
cmp word [esi + edx], 0x24
je 0x5bdbcb
add edx, 2
dec edi
jne 0x5bdc53
mov edx, dword [ebp + 8]
mov esi, dword [ebp - 0x230]
cmp byte [ebp - 0x22c], 0
cmovns eax, edx
cmovs ecx, esi
cmp ecx, 0xe
jl 0x5bdca6
lea edx, [eax + ecx*2]
mov dword [ebp - 0x22c], edx
lea edi, [eax + ecx*2]
add edi, 0xfffffffe
mov ebx, eax
add ecx, 0xfffffff3
xor edx, edx
cmp word [ebx + edx], 0x24
je 0x5bdb82
add edx, 2
dec ecx
jne 0x5bdc95
push str.wtsapi32.dll
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov esi, eax
xor edi, edi
dec edi
mov eax, edi
test esi, esi
je 0x5bdcc8
push 0x631564
push esi
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0x244], eax
mov dword [ebp - 0x234], esi
push str.wtsapi32.dll
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov esi, eax
test eax, eax
mov ebx, dword [ebp + 8]
je 0x5bdcf6
push 0x63159c
push esi
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov edi, eax
mov dword [ebp - 0x23c], edi
mov dword [ebp - 0x238], esi
movsx ecx, byte [ebx + 0xb]
test ecx, ecx
mov eax, dword [ebx]
mov edx, dword [ebx + 4]
mov dword [ebp - 0x22c], eax
cmovs ebx, eax
mov esi, ecx
cmovs esi, edx
mov byte [ebp - 0x230], cl
cmp esi, 0xe
jl 0x5bddea
mov dword [ebp - 0x240], edx
lea eax, [ebx + esi*2]
mov dword [ebp - 0x248], eax
lea eax, [ebx + esi*2]
add eax, 0xfffffffe
mov dword [ebp - 0x24c], eax
mov edi, ebx
mov eax, dword [ebp - 0x22c]
add esi, 0xfffffff3
xor edx, edx
cmp word [edi + edx], 0x24
je 0x5bdd6a
add edx, 2
dec esi
jne 0x5bdd52
mov edx, dword [ebp - 0x240]
jmp 0x5bddf0
mov esi, edi
add esi, edx
je 0x5bdd5f
cmp word [edi + edx + 2], 0x7b
jne 0x5bdd94
cmp word [edi + edx + 4], 0x63
jne 0x5bdd94
cmp word [edi + edx + 6], 0x6c
jne 0x5bdd94
cmp word [edi + edx + 8], 0x69
je 0x5bdf07
mov esi, dword [ebp - 0x24c]
sub esi, edi
add edi, edx
add edi, 2
sub esi, edx
sar esi, 1
cmp esi, 0xe
jge 0x5bdd4d
jmp 0x5bdd5f
mov esi, ebx
add esi, edx
je 0x5bde26
cmp word [ebx + edx + 2], 0x7b
jne 0x5bddd6
cmp word [ebx + edx + 4], 0x73
jne 0x5bddd6
cmp word [ebx + edx + 6], 0x65
jne 0x5bddd6
cmp word [ebx + edx + 8], 0x73
je 0x5be04f
mov ecx, edi
sub ecx, ebx
add ebx, edx
add ebx, 2
sub ecx, edx
sar ecx, 1
cmp ecx, 0xf
jge 0x5bde14
jmp 0x5bde26
mov eax, dword [ebp - 0x22c]
cmp byte [ebp - 0x230], 0
cmovns eax, dword [ebp + 8]
cmovs ecx, edx
cmp ecx, 0xf
jl 0x5bde26
lea edx, [eax + ecx*2]
mov dword [ebp - 0x22c], edx
lea edi, [eax + ecx*2]
add edi, 0xfffffffe
mov ebx, eax
add ecx, 0xfffffff2
xor edx, edx
cmp word [ebx + edx], 0x24
je 0x5bddac
add edx, 2
dec ecx
jne 0x5bde19
mov eax, dword [ebp - 0x238]
test eax, eax
je 0x5bde37
push eax
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
mov eax, dword [ebp - 0x234]
test eax, eax
mov edi, dword [ebp - 0x258]
je 0x5bde4e
push eax
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
mov eax, dword [ebp - 0x250]
test eax, eax
mov esi, dword [ebp + 8]
je 0x5bde62
push eax
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
test edi, edi
je 0x5bde6d
push edi
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00567335
mov eax, esi
add esp, 0x24c
pop esi
pop edi
pop ebx
pop ebp
ret
sar ecx, 1
mov dword [ebp - 0x230], ecx
mov ebx, dword [ebp - 0x250]
jmp 0x5bd8aa
mov dword [esi + 4], ebx
jmp 0x5bd73a
push 0x6289b0
push 0x624e92
call fcn.005912b0
cmp word [edx + ebx + 0xa], 0x72
jne 0x5bdb6a
cmp word [edx + ebx + 0xc], 0x5f
jne 0x5bdb6a
cmp word [edx + ebx + 0xe], 0x6e
jne 0x5bdb6a
cmp word [edx + ebx + 0x10], 0x61
jne 0x5bdb6a
cmp word [edx + ebx + 0x12], 0x6d
jne 0x5bdb6a
cmp word [edx + ebx + 0x14], 0x65
jne 0x5bdb6a
cmp word [edx + ebx + 0x16], 0x7d
jne 0x5bdb6a
jmp 0x5be2de
cmp word [edi + edx + 0xa], 0x65
jne 0x5bdd94
cmp word [edi + edx + 0xc], 0x6e
jne 0x5bdd94
cmp word [edi + edx + 0xe], 0x74
jne 0x5bdd94
cmp word [edi + edx + 0x10], 0x5f
jne 0x5bdd94
cmp word [edi + edx + 0x12], 0x6e
jne 0x5bdd94
cmp word [edi + edx + 0x14], 0x61
jne 0x5bdd94
cmp word [edi + edx + 0x16], 0x6d
jne 0x5bdd94
cmp word [edi + edx + 0x18], 0x65
jne 0x5bdd94
cmp word [edi + edx + 0x1a], 0x7d
jne 0x5bdd94
jmp 0x5be3f1
cmp word [esi + edx + 0xa], 0x68
jne 0x5bdbf9
cmp word [esi + edx + 0xc], 0x69
jne 0x5bdbf9
cmp word [esi + edx + 0xe], 0x6e
jne 0x5bdbf9
cmp word [esi + edx + 0x10], 0x65
jne 0x5bdbf9
cmp word [esi + edx + 0x12], 0x5f
jne 0x5bdbf9
cmp word [esi + edx + 0x14], 0x6e
jne 0x5bdbf9
cmp word [esi + edx + 0x16], 0x61
jne 0x5bdbf9
cmp word [esi + edx + 0x18], 0x6d
jne 0x5bdbf9
cmp word [esi + edx + 0x1a], 0x65
jne 0x5bdbf9
cmp word [esi + edx + 0x1c], 0x7d
jne 0x5bdbf9
cmp edi, dword [ebp - 0x238]
je 0x5bdc64
sub edi, ebx
cmp edi, 0xfffffffe
mov edx, dword [ebp + 8]
mov esi, dword [ebp - 0x230]
je 0x5bdc6d
xor eax, eax
mov dword [ebp - 0x224], eax
lea ecx, [ebp - 0x224]
push ecx
push eax
push 5
call dword [sym.imp.KERNEL32.dll_GetComputerNameExW]
mov eax, dword [ebp - 0x224]
test eax, eax
jne 0x5be4cc
mov edx, dword [ebp + 8]
mov cl, byte [edx + 0xb]
mov eax, dword [edx]
mov esi, dword [edx + 4]
mov byte [ebp - 0x22c], cl
movzx ecx, cl
jmp 0x5bdc6d
cmp word [ebx + edx + 0xa], 0x73
jne 0x5bddd6
cmp word [ebx + edx + 0xc], 0x69
jne 0x5bddd6
cmp word [ebx + edx + 0xe], 0x6f
jne 0x5bddd6
cmp word [ebx + edx + 0x10], 0x6e
jne 0x5bddd6
cmp word [ebx + edx + 0x12], 0x5f
jne 0x5bddd6
cmp word [ebx + edx + 0x14], 0x6e
jne 0x5bddd6
cmp word [ebx + edx + 0x16], 0x61
jne 0x5bddd6
cmp word [ebx + edx + 0x18], 0x6d
jne 0x5bddd6
cmp word [ebx + edx + 0x1a], 0x65
jne 0x5bddd6
cmp word [ebx + edx + 0x1c], 0x7d
jne 0x5bddd6
cmp esi, dword [ebp - 0x22c]
je 0x5bde26
sub esi, eax
cmp esi, 0xfffffffe
je 0x5bde26
xor edi, edi
mov dword [ebp - 0x224], edi
lea ebx, [ebp - 0x228]
mov dword [ebx], edi
mov ecx, dword [ebp - 0x244]
call dword [0x6401dc]
push ebx
lea eax, [ebp - 0x224]
push eax
push 6
push 0xffffffffffffffff
push edi
call ecx
test eax, eax
je 0x5bde26
sar esi, 1
xor eax, eax
dec eax
lea edi, [ebp - 0x218]
mov dword [edi], eax
mov dword [edi + 4], eax
mov dword [edi + 8], eax
mov ecx, edi
push dword [ebp - 0x224]
call fcn.00556510
movsx eax, byte [edi + 0xb]
test eax, eax
jns 0x5be145
mov eax, dword [ebp - 0x214]
mov edi, dword [ebp - 0x218]
mov ecx, dword [ebp + 8]
push eax
push edi
push 0xf
push esi
call fcn.005b2d80
mov esi, dword [ebp - 0x224]
mov ecx, dword [ebp - 0x23c]
call dword [0x6401dc]
push esi
call ecx
cmp byte [ebp - 0x20d], 0
jns 0x5bde26
push dword [ebp - 0x218]
call fcn.00564050
add esp, 4
jmp 0x5bde26
cmp word [ebx + edx + 0xa], 0x61
jne 0x5bdbb0
cmp word [ebx + edx + 0xc], 0x69
jne 0x5bdbb0
cmp word [ebx + edx + 0xe], 0x6e
jne 0x5bdbb0
cmp word [ebx + edx + 0x10], 0x5f
jne 0x5bdbb0
cmp word [ebx + edx + 0x12], 0x6e
jne 0x5bdbb0
cmp word [ebx + edx + 0x14], 0x61
jne 0x5bdbb0
cmp word [ebx + edx + 0x16], 0x6d
jne 0x5bdbb0
cmp word [ebx + edx + 0x18], 0x65
jne 0x5bdbb0
cmp word [ebx + edx + 0x1a], 0x7d
jne 0x5bdbb0
cmp esi, dword [ebp - 0x22c]
je 0x5bdca6
sub esi, eax
cmp esi, 0xfffffffe
je 0x5bdca6
xor eax, eax
mov dword [ebp - 0x224], eax
lea ecx, [ebp - 0x224]
push ecx
push eax
push 6
call dword [sym.imp.KERNEL32.dll_GetComputerNameExW]
mov eax, dword [ebp - 0x224]
test eax, eax
je 0x5bdca6
sar esi, 1
lea ecx, [eax + eax]
xor edx, edx
dec edx
test eax, eax
cmovs ecx, edx
push ecx
call fcn.00565a15
add esp, 4
mov edi, eax
lea eax, [ebp - 0x224]
push eax
push edi
push 6
call dword [sym.imp.KERNEL32.dll_GetComputerNameExW]
lea ebx, [ebp - 0x218]
xor eax, eax
dec eax
mov dword [ebx], eax
mov dword [ebx + 4], eax
mov dword [ebx + 8], eax
mov ecx, ebx
push edi
call fcn.00556510
movsx eax, byte [ebx + 0xb]
test eax, eax
jns 0x5be285
mov eax, dword [ebp - 0x214]
mov ebx, dword [ebp - 0x218]
mov ecx, dword [ebp + 8]
push eax
push ebx
push 0xe
push esi
call fcn.005b2d80
cmp byte [ebp - 0x20d], 0
jns 0x5be2a9
push dword [ebp - 0x218]
call fcn.00564050
add esp, 4
test edi, edi
je 0x5bdca6
push edi
call fcn.0056586d
add esp, 4
jmp 0x5bdca6
push str....._third_partylibc_srcinclude_string:1349:_assertion__empty___failed:_string::front__:_string_is_empty_n
jmp 0x5bdea4
push str....._third_partylibc_srcinclude_string:3179:_assertion__empty___failed:_string::pop_back__:_string_is_already_empty_n
jmp 0x5bdea4
mov dl, byte [ebp - 0x22c]
jmp 0x5bdc11
cmp esi, dword [ebp - 0x244]
je 0x5be2d3
sub esi, edi
cmp esi, 0xfffffffe
mov dl, byte [ebp - 0x22c]
mov eax, dword [ebp - 0x234]
je 0x5bdc17
xor edi, edi
mov dword [ebp - 0x224], edi
mov ecx, dword [ebp - 0x23c]
call dword [0x6401dc]
lea eax, [ebp - 0x224]
push eax
push edi
call ecx
mov eax, dword [ebp - 0x224]
test eax, eax
jne 0x5be33e
mov ecx, dword [ebp + 8]
mov dl, byte [ecx + 0xb]
mov eax, dword [ecx]
mov ecx, dword [ecx + 4]
mov dword [ebp - 0x230], ecx
movzx ecx, dl
jmp 0x5bdc17
sar esi, 1
lea ecx, [eax + eax]
xor edi, edi
dec edi
test eax, eax
cmovs ecx, edi
push ecx
call fcn.00565a15
add esp, 4
mov ebx, eax
mov ecx, dword [ebp - 0x23c]
call dword [0x6401dc]
lea eax, [ebp - 0x224]
push eax
push ebx
call ecx
mov dword [ebp - 0x218], edi
mov dword [ebp - 0x214], edi
mov dword [ebp - 0x210], edi
lea ecx, [ebp - 0x218]
push ebx
call fcn.00556510
movsx eax, byte [ebp - 0x20d]
test eax, eax
jns 0x5be3a7
mov eax, dword [ebp - 0x214]
mov ecx, dword [ebp - 0x218]
mov dword [ebp - 0x24c], ecx
mov ecx, dword [ebp + 8]
push eax
push dword [ebp - 0x24c]
push 0xc
push esi
call fcn.005b2d80
cmp byte [ebp - 0x20d], 0
jns 0x5be3d0
push dword [ebp - 0x218]
call fcn.00564050
add esp, 4
test ebx, ebx
je 0x5be325
push ebx
call fcn.0056586d
add esp, 4
jmp 0x5be325
mov edx, dword [ebp - 0x240]
jmp 0x5bddea
cmp esi, dword [ebp - 0x248]
je 0x5be3e6
sub esi, ebx
cmp esi, 0xfffffffe
mov edx, dword [ebp - 0x240]
mov eax, dword [ebp - 0x22c]
je 0x5bddf0
xor edi, edi
mov dword [ebp - 0x224], edi
lea ebx, [ebp - 0x228]
mov dword [ebx], edi
mov ecx, dword [ebp - 0x244]
call dword [0x6401dc]
push ebx
lea eax, [ebp - 0x224]
push eax
push 0xa
push 0xffffffffffffffff
push edi
call ecx
test eax, eax
jne 0x5be45a
mov ecx, dword [ebp + 8]
mov al, byte [ecx + 0xb]
mov esi, dword [ecx]
mov edx, dword [ecx + 4]
mov byte [ebp - 0x230], al
movzx ecx, al
mov eax, esi
jmp 0x5bddf0
sar esi, 1
xor eax, eax
dec eax
lea edi, [ebp - 0x218]
mov dword [edi], eax
mov dword [edi + 4], eax
mov dword [edi + 8], eax
mov ecx, edi
push dword [ebp - 0x224]
call fcn.00556510
movsx eax, byte [edi + 0xb]
test eax, eax
jns 0x5be48e
mov eax, dword [ebp - 0x214]
mov edi, dword [ebp - 0x218]
mov ecx, dword [ebp + 8]
push eax
push edi
push 0xe
push esi
call fcn.005b2d80
mov esi, dword [ebp - 0x224]
mov ecx, dword [ebp - 0x23c]
call dword [0x6401dc]
push esi
call ecx
cmp byte [ebp - 0x20d], 0
jns 0x5be43f
push dword [ebp - 0x218]
call fcn.00564050
add esp, 4
jmp 0x5be43f
sar edi, 1
lea ecx, [eax + eax]
xor edx, edx
dec edx
test eax, eax
cmovs ecx, edx
push ecx
call fcn.00565a15
add esp, 4
mov esi, eax
lea eax, [ebp - 0x224]
push eax
push esi
push 5
call dword [sym.imp.KERNEL32.dll_GetComputerNameExW]
lea ebx, [ebp - 0x218]
xor eax, eax
dec eax
mov dword [ebx], eax
mov dword [ebx + 4], eax
mov dword [ebx + 8], eax
mov ecx, ebx
mov dword [ebp - 0x22c], esi
push esi
call fcn.00556510
movsx eax, byte [ebx + 0xb]
test eax, eax
jns 0x5be527
mov eax, dword [ebp - 0x214]
mov ebx, dword [ebp - 0x218]
mov ecx, dword [ebp + 8]
push eax
push ebx
push 0xf
push edi
call fcn.005b2d80
cmp byte [ebp - 0x20d], 0
jns 0x5be54b
push dword [ebp - 0x218]
call fcn.00564050
add esp, 4
cmp dword [ebp - 0x22c], 0
je 0x5be036
push dword [ebp - 0x22c]
call fcn.0056586d
add esp, 4
jmp 0x5be036