Function at 0x42ffec
Capabilities:
Get hostname

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0xe70
mov eax, dword [0x485118]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0xe60], eax
mov eax, dword [ebp + 0x14]
push ebx
mov dword [ebp - 0xe6c], eax
mov eax, dword [ebp + 0x28]
push esi
push edi
mov dword [ebp - 0xe64], eax
mov eax, dword [ebp + 0x2c]
xor ebx, ebx
push 0x20a
mov dword [ebp - 0xe68], eax
lea eax, [ebp - 0xe50]
push ebx
push eax
mov dword [ebp - 0xe5c], ebx
call sub.msvcrt.dll_memset
mov ecx, dword [ebp + 0xc]
lea eax, [ebp - 0x42c]
add esp, 0xc
sub eax, ecx
movzx edx, word [ecx]
mov word [eax + ecx], dx
inc ecx
inc ecx
cmp dx, bx
jne 0x430050
lea eax, [ebp - 0x42c]
lea edx, [eax + 2]
mov cx, word [eax]
inc eax
inc eax
cmp cx, bx
jne 0x430067
sub eax, edx
sar eax, 1
mov dword [ebp - 0xe54], eax
je 0x43008d
lea eax, [ebp + eax*2 - 0x42e]
cmp word [eax], 0x5c
jne 0x43008d
mov word [eax], bx
cmp dword [ebp + 0x24], ebx
jne 0x43035b
lea eax, [ebp - 0xe54]
push eax
lea eax, [ebp - 0xe50]
push eax
lea eax, [ebp - 0x42c]
push eax
mov dword [ebp - 0xe54], 0x105
call sub.MPR.dll_WNetGetUserW
xor ecx, ecx
movzx edx, word [ebp + ecx - 0xe50]
mov word [ebp + ecx - 0x224], dx
inc ecx
inc ecx
cmp dx, bx
jne 0x4300bc
lea ecx, [ebp - 0x224]
lea esi, [ecx + 2]
mov dx, word [ecx]
inc ecx
inc ecx
cmp dx, bx
jne 0x4300dc
sub ecx, esi
sar ecx, 1
mov dword [ebp - 0xe54], ecx
je 0x430112
lea ecx, [ebp + ecx*2 - 0x226]
cmp word [ecx], 0x20
jne 0x430112
dec dword [ebp - 0xe54]
mov word [ecx], bx
dec ecx
dec ecx
cmp dword [ebp - 0xe54], ebx
ja 0x4300f9
cmp eax, ebx
jne 0x43035b
lea eax, [ebp - 0xe70]
push eax
lea eax, [ebp - 0x24]
push eax
mov dword [ebp - 0xe70], 0x10
call dword [sym.imp.KERNEL32.dll_GetComputerNameW]
push 2
xor eax, eax
pop edi
movzx ecx, word [ebp + eax - 0x24]
mov word [ebp + eax - 0x82c], cx
add eax, edi
cmp cx, bx
jne 0x43013a
lea eax, [ebp - 0x82c]
lea edx, [eax + 2]
mov cx, word [eax]
add eax, edi
cmp cx, bx
jne 0x430157
sub eax, edx
sar eax, 1
mov dword [ebp - 0xe54], eax
je 0x43018d
lea eax, [ebp + eax*2 - 0x82e]
cmp word [eax], 0x20
jne 0x43018d
dec dword [ebp - 0xe54]
mov word [eax], bx
sub eax, edi
cmp dword [ebp - 0xe54], ebx
ja 0x430174
mov esi, dword [ebp - 0xe60]
cmp esi, ebx
je 0x4301c9
mov eax, esi
lea edx, [eax + 2]
mov cx, word [eax]
add eax, edi
cmp cx, bx
jne 0x43019c
sub eax, edx
sar eax, 1
je 0x4301c9
lea edx, [ebp - 0x62c]
mov eax, esi
sub edx, esi
movzx ecx, word [eax]
mov word [edx + eax], cx
add eax, edi
cmp cx, bx
jne 0x4301b6
jmp 0x430275
lea eax, [ebp - 0x224]
lea edx, [eax + 2]
mov cx, word [eax]
add eax, edi
cmp cx, bx
jne 0x4301d2
sub eax, edx
sar eax, 1
jne 0x4301ea
xor eax, eax
inc eax
jmp 0x4303f1
push 0x20a
lea eax, [ebp - 0xc44]
push ebx
push eax
call sub.msvcrt.dll_memset
add esp, 0xc
lea eax, [ebp - 0xe54]
push eax
lea eax, [ebp - 0xc44]
push eax
push ebx
mov dword [ebp - 0xe54], 0x105
call sub.MPR.dll_WNetGetUserW
xor eax, eax
movzx ecx, word [ebp + eax - 0xc44]
mov word [ebp + eax - 0x62c], cx
add eax, edi
cmp cx, bx
jne 0x43021f
lea eax, [ebp - 0x62c]
lea edx, [eax + 2]
mov cx, word [eax]
add eax, edi
cmp cx, bx
jne 0x43023f
sub eax, edx
sar eax, 1
mov dword [ebp - 0xe54], eax
je 0x430275
lea eax, [ebp + eax*2 - 0x62e]
cmp word [eax], 0x20
jne 0x430275
dec dword [ebp - 0xe54]
mov word [eax], bx
sub eax, edi
cmp dword [ebp - 0xe54], ebx
ja 0x43025c
xor eax, eax
movzx ecx, word [ebp + eax - 0x82c]
mov word [ebp + eax - 0xa38], cx
add eax, edi
cmp cx, bx
jne 0x430277
lea edi, [ebp - 0xa38]
dec edi
dec edi
mov ax, word [edi + 2]
inc edi
inc edi
cmp ax, bx
jne 0x430296
mov esi, 0x4018d8
lea eax, [ebp - 0x62c]
movsd dword es:[edi], dword [esi]
mov edx, eax
mov cx, word [eax]
inc eax
inc eax
cmp cx, bx
jne 0x4302af
sub eax, edx
lea edi, [ebp - 0xa38]
dec edi
dec edi
mov cx, word [edi + 2]
inc edi
inc edi
cmp cx, bx
jne 0x4302c3
mov ecx, eax
shr ecx, 2
mov esi, edx
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
push 4
lea ecx, [ebp - 0x62c]
lea eax, [ebp - 0x224]
pop esi
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x430311
cmp dx, bx
je 0x43030d
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x430311
add eax, esi
add ecx, esi
cmp dx, bx
jne 0x4302ed
xor eax, eax
jmp 0x430316
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
je 0x4301e2
lea ecx, [ebp - 0xa38]
lea eax, [ebp - 0x224]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x43034e
cmp dx, bx
je 0x43034a
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x43034e
add eax, esi
add ecx, esi
cmp dx, bx
jne 0x43032a
xor eax, eax
jmp 0x430353
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
je 0x4301e2
cmp dword [ebp + 8], ebx
je 0x430385
push dword [ebp - 0xe68]
lea eax, [ebp - 0x42c]
push dword [ebp - 0xe64]
push dword [ebp + 0x18]
push ebx
push ebx
push ebx
push ebx
push eax
call fcn.0042fe7b
mov dword [ebp - 0xe5c], eax
mov esi, dword [ebp - 0xe68]
mov eax, dword [esi]
lea edx, [eax + 2]
mov cx, word [eax]
inc eax
inc eax
cmp cx, bx
jne 0x430390
sub eax, edx
sar eax, 1
je 0x4303eb
mov eax, dword [ebp - 0xe60]
lea edx, [eax + 2]
mov cx, word [eax]
inc eax
inc eax
cmp cx, bx
jne 0x4303a9
sub eax, edx
sar eax, 1
jne 0x4303bf
xor ecx, ecx
xor eax, eax
jmp 0x4303cb
mov eax, dword [ebp - 0xe6c]
mov ecx, dword [ebp - 0xe60]
push esi
push dword [ebp - 0xe64]
push dword [ebp + 0x18]
push ebx
push ebx
push ecx
push eax
lea eax, [ebp - 0x42c]
push eax
call fcn.0042fe7b
mov dword [ebp - 0xe5c], eax
mov eax, dword [ebp - 0xe5c]
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.004347dd
leave
ret 0x28