Function at 0x10050620
Capabilities:
Get hostname

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x12c
mov eax, dword [ebp + 8]
push ebx
lea edx, [eax + 0x2008]
push esi
mov ecx, eax
push edi
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x28], edx
cmp eax, edx
ja 0x10050ab3
mov edi, dword [ebp + 0x18]
mov esi, dword [ebp + 8]
jmp 0x10050650
mov ebx, dword [ebp - 0x18]
mov edx, dword [ebp - 0x14]
cmp ecx, 0x34e8
ja 0x10050959
je 0x10050ae2
cmp ecx, 0x32fc
ja 0x10050860
je 0x10050710
cmp ecx, 0x789
ja 0x100506ec
je 0x100506e4
mov eax, ecx
sub eax, 0x6e5
je 0x100506b6
sub eax, 0x52
jne case.0x10050983.19644
mov ecx, dword [ebp + 0x10]
mov eax, dword [edi]
push 0x126f
push ebx
push ecx
lea edx, [ebp - 8]
push edx
mov dword [ebp - 8], eax
call fcn.10066470
add esp, 0x10
jmp case.0x10050983.19644
push 4
call fcn.100043c0
add esp, 4
test eax, eax
je 0x100506d8
mov dword [eax], 0
mov dword [ebp - 0x18], eax
mov dword [eax], 0
jmp case.0x10050983.19644
xor eax, eax
mov dword [ebp - 0x18], eax
mov dword [eax], eax
jmp case.0x10050983.19644
mov dword [ebp - 4], ebx
jmp case.0x10050983.19644
cmp ecx, 0x7db
je 0x10050ab3
cmp ecx, 0x32aa
jne case.0x10050983.19644
mov dword [ebp - 0xc], 0
jmp case.0x10050983.19644
test byte [edi + 0x11b0], 4
jne 0x1005072c
push 0
lea eax, [edi + 0x30]
push eax
push 0x4a79
call fcn.10003820
add esp, 0xc
mov esi, dword [edi + 0x48]
lea eax, [edi + 0x48]
cmp esi, eax
jne case.0x10050983.19644
mov edx, 0x6f7
mov dword [ebp - 8], edx
mov eax, edx
sub eax, 0x6f7
je 0x10050777
sub eax, 5
je 0x10050761
sub eax, 5
jne 0x10050849
inc dword [edi + 0xc]
jmp 0x10050849
lea eax, [edi + 0x48]
mov dword [esi + 4], eax
mov ecx, dword [eax]
mov dword [esi], ecx
mov ecx, dword [eax]
mov dword [ecx + 4], esi
mov dword [eax], esi
jmp 0x10050849
mov esi, dword [edi + 0x58]
lea eax, [edi + 0x58]
cmp esi, eax
jne 0x100507fd
mov ecx, dword [ebp + 8]
mov ebx, 0x1a45
lea esp, [esp]
mov eax, ebx
sub eax, 0x1a45
je 0x100507d4
sub eax, 0x39
je 0x100507aa
sub eax, 0x39
jne 0x100507ed
mov ecx, esi
mov dword [ebp + 8], ecx
jmp 0x100507ed
out 0x74, eax
clc
cmp eax, 0x75c98555
pop ss
mov eax, 0x5a24
cmp eax, eax
je 0x10050abd
add eax, 0x57
cmp eax, 0x5a24
jbe 0x100507ba
mov edx, dword [ebp - 0x2c]
add dword [edi + 0x18], edx
mov esi, ecx
jmp 0x100507ed
lea eax, [ebp - 0x2c]
push eax
push 0x7e8f
push edi
push 0
call fcn.10025810
add esp, 0x10
mov dword [ebp + 8], eax
mov ecx, eax
add ebx, 0x39
cmp ebx, 0x1ab7
jbe 0x10050790
mov edx, dword [ebp - 8]
jmp 0x10050849
mov ecx, 0x2d63
mov eax, ecx
sub eax, 0x2d63
je 0x10050822
sub eax, 0x29
jne 0x1005083e
ret
mov eax, dword [esi]
mov ebx, dword [esi + 4]
mov dword [eax + 4], ebx
mov eax, dword [esi + 4]
mov ebx, dword [esi]
mov dword [eax], ebx
mov dword [esi], 0
mov dword [esi + 4], 0
add ecx, 0x29
cmp ecx, 0x2d8c
jbe 0x10050802
add edx, 5
mov dword [ebp - 8], edx
cmp edx, 0x701
jbe 0x10050742
jmp case.0x10050983.19644
cmp ecx, 0x3444
ja 0x1005093f
je 0x100508b6
cmp ecx, 0x334e
je 0x100508ae
cmp ecx, 0x33f2
jne case.0x10050983.19644
mov ecx, dword [ebp + 8]
push 0x5a66
push ecx
push 0
push 0
call fcn.10050520
mov dword [ebp - 0xc], eax
mov eax, dword [edi + 0x18]
add esp, 0x10
test eax, eax
je case.0x10050983.19644
dec eax
mov dword [edi + 0x18], eax
jmp case.0x10050983.19644
mov dword [ebp + 8], esi
jmp case.0x10050983.19644
mov edx, dword [ebp + 8]
cmp dword [edx + 0x18], 0
jne 0x10050916
mov ecx, 0x5171
mov edx, 1
lea esp, [esp]
mov eax, ecx
sub eax, 0x5171
je 0x100508f7
sub eax, 0x53
jne 0x1005090b
lea eax, [edi + 0x50]
mov dword [esi + 4], eax
mov ebx, dword [eax]
mov dword [esi], ebx
mov ebx, dword [eax]
mov dword [ebx + 4], esi
dec dword [edi + 0xc]
add dword [edi + 0x10], edx
mov dword [eax], esi
jmp 0x1005090b
mov eax, dword [esi]
mov ebx, dword [esi + 4]
mov dword [eax + 4], ebx
mov eax, dword [esi + 4]
mov ebx, dword [esi]
mov dword [eax], ebx
mov dword [esi], esi
mov dword [esi + 4], esi
add ecx, 0x53
cmp ecx, 0x51c4
jbe 0x100508d0
test byte [edi + 0x11b0], 4
jne 0x10050932
lea ecx, [edi + 0x30]
push ecx
push 0
push 0x37e1
call fcn.10005970
add esp, 0xc
mov edx, dword [ebp + 8]
mov eax, dword [ebp - 0xc]
mov dword [eax], edx
jmp case.0x10050983.19644
cmp ecx, 0x3496
jne case.0x10050983.19644
adc al, 0x3b
pop esp
insb byte es:[edi], dx
add byte [ebx - 0x16fb0bbb], 0x48
add dword [eax], eax
add byte [ecx + 0x4e03f9], al
add byte [edi], cl
xchg ebx, ecx
add byte [eax], al
add byte [edi], cl
test byte [ebx - 0x73000000], bh
add dword [ebp - 0x4d], 0xf63dffff
add byte [eax], al
add byte [edi], cl
xchg dword [0xf000001], esp
mov dh, 0x88
or al, 0xb
add eax, 0x8d24ff10
jmp dword [ecx*4 + 0x10050af8]
push 0x100
cmp ecx, 0x4e03
ja 0x10050a30
je 0x10050a26
lea eax, [ecx - 0x4cbb]
cmp eax, 0xf6
ja case.0x10050983.19644
movzx ecx, byte [eax + 0x10050b0c]
jmp dword [ecx*4 + 0x10050af8]
push 0x100
lea edx, [ebp - 0x12c]
push edx
call dword [sym.imp.WS2_32.dll_gethostname]
test eax, eax
je case.0x10050983.19644
pop edi
pop esi
or eax, 0xffffffff
pop ebx
mov esp, ebp
pop ebp
ret
in eax, dx
test eax, 0x8bd02fdd
inc edx
or al, 0x85
ror byte [edi], 0x84
add dword cs:[eax], eax
add byte [ebx + 0x3983104d], cl
add bh, al
inc ebp
lock add byte [eax], al
add byte [eax], al
jle case.0x10050983.19644
mov edx, edi
sub edx, eax
mov ecx, dword [eax]
test ecx, ecx
je case.0x10050983.19644
mov ecx, dword [ecx]
mov ebx, dword [ebp + 0x10]
mov dword [edx + eax], ecx
mov ecx, dword [ebp - 0x10]
inc ecx
add eax, 4
mov dword [ebp - 0x10], ecx
cmp ecx, dword [ebx]
jl 0x100509d5
jmp case.0x10050983.19644
or cl, ah
jmp 0xa59239b5
test edx, edx
jne case.0x10050983.19644
pop edi
pop esi
lea eax, [edx - 2]
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp + 0x10]
mov dword [ecx], eax
jmp case.0x10050983.19644
cmp ecx, 0x7e99
ja 0x10050a99
je 0x10050a52
mov eax, ecx
sub eax, 0x4e55
je 0x10050a48
sub eax, 0x52
jmp 0x10050a9f
mov edx, dword [ebp + 0x10]
mov eax, dword [edx]
mov dword [ebp - 4], eax
jmp case.0x10050983.19644
lcall 0x4d8b, 0x168d9cec
or al, 0x8b
adc dword [eax + 1], edi
mov dword [ebp - 0x24], eax
mov dword [ebp - 8], eax
mov eax, dword [ebp + 0x14]
mov ecx, dword [eax]
mov eax, dword [ebp + 0x10]
mov dword [ebp - 4], edx
lea edx, [ebp - 8]
push edx
push 0xf6e
push eax
mov dword [ebp - 0x20], ecx
lea ecx, [ebp - 4]
push ecx
lea edx, [ebp - 0x20]
push edx
lea eax, [ebp - 0x24]
push edi
push eax
call fcn.10004d10
add esp, 0x1c
mov dword [ebp - 4], eax
jmp case.0x10050983.19644
cmp ecx, 0x7eeb
je 0x10050ab3
mov ecx, dword [ebp - 0x1c]
add ecx, 0x52
mov dword [ebp - 0x1c], ecx
cmp ecx, dword [ebp - 0x28]
jbe 0x10050650
mov eax, dword [ebp - 4]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
test byte [edi + 0x11b0], 4
jne 0x10050ad9
add edi, 0x30
push edi
push 0
push 0x37e1
call fcn.10005970
add esp, 0xc
pop edi
pop esi
xor eax, eax
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp - 0xc]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret