Function at 0x42c124
Capabilities:
Get hostname

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x548
mov eax, dword [0x49f2a0]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
mov ebx, dword [ebp + 8]
push esi
push edi
xor edi, edi
push 0x4c3
lea eax, [ebp - 0x53c]
push edi
push eax
mov dword [ebp - 0x540], edi
call fcn.00450230
add esp, 0xc
cmp dword [ebx + 0x198], 0xffffffff
jne 0x42c2e4
push edi
lea eax, [ebp - 0x544]
push eax
mov esi, 0x4c7
push esi
lea eax, [ebp - 0x540]
push eax
push edi
push edi
push 0x86293bb8
push dword [0x4cce9c]
call dword [sym.imp.___total_physical_size__lu_MB_DeviceIoControl]
test eax, eax
je 0x42c2e4
cmp dword [ebp - 0x544], esi
jne 0x42c2d2
mov esi, 0x4cd988
mov eax, esi
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x42c1ad
sub eax, edx
lea ecx, [eax + 1]
mov eax, 0x400
mov dword [ebp - 0x47d], ecx
cmp ecx, eax
jb 0x42c1ce
mov dword [ebp - 0x47d], eax
push dword [ebp - 0x47d]
lea eax, [ebp - 0x479]
push esi
push eax
call fcn.00451390
mov ebx, dword [sym.imp.___total_physical_size__lu_MB_GetLocalTime]
add esp, 0xc
cmp dword [ebp - 0x47d], 0x3e2
jae 0x42c264
lea eax, [ebp - 0x78]
push eax
call ebx
movzx eax, word [ebp - 0x78]
push eax
movzx eax, word [ebp - 0x76]
push eax
movzx eax, word [ebp - 0x72]
push eax
lea eax, [ebp - 0x68]
push str._Modified_at__2d._02d._4d
push eax
call fcn.00450c76
lea eax, [ebp - 0x68]
add esp, 0x14
mov edx, eax
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x42c221
lea edi, [ebp - 0x479]
sub eax, edx
dec edi
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x42c231
mov ecx, eax
shr ecx, 2
mov esi, edx
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
lea eax, [ebp - 0x479]
rep movsb byte es:[edi], byte [esi]
lea ecx, [eax + 1]
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x42c252
sub eax, ecx
inc eax
mov dword [ebp - 0x47d], eax
xor edi, edi
cmp dword [0x4cd314], edi
mov ecx, dword [0x4cdfa8]
sete al
dec al
and al, 0x24
add al, 0x20
mov byte [ebp - 0x491], al
call fcn.00446358
cmp eax, 1
lea eax, [ebp - 0x4f1]
push eax
jne 0x42c29d
mov ecx, dword [0x4cdfa8]
call fcn.004452cb
jmp 0x42c29f
call ebx
cmp dword [0x4cd314], edi
jne 0x42c2b3
lea eax, [ebp - 0x4f1]
push eax
call fcn.0041753b
mov eax, dword [ebp - 0x47d]
add eax, 0xc7
push eax
lea eax, [ebp - 0x540]
push eax
call fcn.0041fb78
push edi
push edi
jmp 0x42c4d1
push dword [ebp - 0x544]
push str.ignore_inconsistent_return_from_IOCTL_SNAPSHOD_GET_VOLUMEINFO:__u
call fcn.0041c7ee
pop ecx
pop ecx
cmp dword [0x4cd314], edi
mov dword [ebp - 0x548], 0x10
sete al
dec al
and al, 0x24
add al, 0x20
mov byte [ebp - 0x491], al
mov eax, dword [ebx]
mov dword [ebp - 0x540], eax
lea eax, [ebp - 0x548]
push eax
lea eax, [ebp - 0x53c]
push eax
call dword [sym.imp.___total_physical_size__lu_MB_GetComputerNameA]
push 8
pop ecx
lea esi, [ebx + 0xc]
lea edi, [ebp - 0x4b1]
rep movsd dword es:[edi], dword [esi]
push 8
pop ecx
lea esi, [ebx + 0x1bc]
lea edi, [ebp - 0x4dc]
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
mov eax, dword [ebx + 0x20c]
mov ecx, dword [0x4cdfa8]
mov byte [ebp - 0x4ba], 0
mov byte [ebp - 0x4dd], 1
lea esi, [ebx + 0x1bc]
lea edi, [ebp - 0x528]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
mov dword [ebp - 0x518], eax
mov eax, dword [ebx + 0x210]
mov byte [ebp - 0x519], 0
mov dword [ebp - 0x514], eax
call fcn.00446358
cmp eax, 1
lea eax, [ebp - 0x4f1]
push eax
jne 0x42c3a3
mov ecx, dword [0x4cdfa8]
call fcn.004452cb
jmp 0x42c3a9
call dword [sym.imp.___total_physical_size__lu_MB_GetLocalTime]
cmp dword [0x4cd314], 0
jne 0x42c3be
lea eax, [ebp - 0x4f1]
push eax
call fcn.0041753b
mov al, byte [ebx + 0x198]
mov byte [ebp - 0x50d], al
mov al, byte [ebx + 0x19c]
mov byte [ebp - 0x50c], al
mov al, byte [ebx + 0x1b0]
mov byte [ebp - 0x50b], al
mov al, byte [ebx + 0x1b4]
mov byte [ebp - 0x50a], al
mov ax, word [ebx + 0x3ac]
mov word [ebp - 0x510], ax
mov al, byte [ebx + 0x3b0]
mov byte [ebp - 0x50e], al
mov eax, dword [ebx + 0x220]
mov dword [ebp - 0x509], eax
mov eax, dword [ebx + 0x22c]
mov dword [ebp - 0x505], eax
mov eax, dword [ebx + 0x224]
mov dword [ebp - 0x501], eax
mov eax, dword [ebx + 0x228]
mov dword [ebp - 0x4fd], eax
mov eax, dword [ebx + 0x230]
mov dword [ebp - 0x4f9], eax
mov eax, dword [ebx + 0x234]
mov esi, 0x4cd988
mov dword [ebp - 0x4f5], eax
mov eax, esi
lea edi, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x42c45a
sub eax, edi
lea ecx, [eax + 1]
mov eax, 0x400
mov dword [ebp - 0x47d], ecx
cmp ecx, eax
jb 0x42c47b
mov dword [ebp - 0x47d], eax
push dword [ebp - 0x47d]
lea eax, [ebp - 0x479]
push esi
push eax
call fcn.00451390
mov eax, dword [ebx + 0x3a0]
mov dword [ebp - 0x4e1], eax
mov eax, dword [ebx + 0x3d8]
mov dword [ebp - 0x4b9], eax
mov eax, dword [ebx + 0x3dc]
mov dword [ebp - 0x4b5], eax
mov eax, dword [ebp - 0x47d]
add esp, 0xc
add eax, 0xc7
push eax
lea eax, [ebp - 0x540]
push eax
call fcn.0041fb78
push 0
push 0
mov eax, dword [ebp - 0x47d]
add eax, 0xc7
push eax
lea eax, [ebp - 0x540]
push eax
push 0x30564e53
call fcn.00424375
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.00450b32
leave
ret 4