Function at 0x4065c0
Capabilities:
Get hostname

Disassembly:
sub esp, 0x424
mov eax, dword [section..data]
xor eax, esp
mov dword [esp + 0x420], eax
mov eax, dword [esp + 0x428]
push ebx
push ebp
push esi
push edi
mov edi, dword [sym.imp.MSVCR100.dll_wcschr]
push 0x3a
push eax
call edi
mov esi, eax
xor eax, eax
push 0x208
push eax
mov word [esp + 0x28], ax
lea eax, [esp + 0x2a]
xor ebp, ebp
mov ebx, 1
push eax
mov dword [esp + 0x28], ebp
mov dword [esp + 0x24], ebx
call sub.MSVCR100.dll_memset
add esp, 0x14
test esi, esi
je 0x406626
lea eax, [esi + 2]
push 0x3a
push eax
call edi
add esp, 8
mov esi, eax
push 0xb3c
call dword [sym.imp.MSVCR100.dll_void____cdecl_operator_new_unsigned_int_]
add esp, 4
mov dword [0x437494], eax
test eax, eax
jne 0x406653
mov edi, str.Unable_to_allocate_brick_info
call fcn.00406520
mov edi, dword [sym.imp.MSVCR100.dll_wcschr]
xor ebx, ebx
mov dword [esp + 0x10], ebx
test esi, esi
je 0x406827
jmp 0x406660
cmp ebx, 1
jne 0x406827
add esi, 2
push 0x5c
push esi
call edi
mov ebx, eax
xor eax, eax
add esp, 8
mov word [esp + 0x18], ax
test ebx, ebx
je 0x4066f4
mov edi, ebx
sub edi, esi
sar edi, 1
cmp edi, 0x7ffffffe
jbe 0x4066a0
mov ebp, 0x80070057
mov word [esp + 0x18], ax
mov esi, ebx
jmp 0x406734
lea ecx, [esp + 0x18]
mov eax, ecx
xor ebp, ebp
add edi, 0xfffffefb
mov edx, 0x105
sub esi, eax
lea eax, [edi + edx]
test eax, eax
je 0x4066df
movzx eax, word [esi + ecx]
test ax, ax
je 0x4066df
mov word [ecx], ax
add ecx, 2
dec edx
jne 0x4066b5
sub ecx, 2
xor eax, eax
mov ebp, 0x8007007a
mov word [ecx], ax
mov esi, ebx
jmp 0x406734
test edx, edx
jne 0x4066eb
sub ecx, 2
mov ebp, 0x8007007a
xor eax, eax
mov word [ecx], ax
mov esi, ebx
jmp 0x406734
lea ecx, [esp + 0x18]
mov eax, ecx
xor ebp, ebp
mov edx, 0x105
sub esi, eax
lea eax, [edx + 0x7ffffef9]
test eax, eax
je 0x406721
movzx eax, word [esi + ecx]
test ax, ax
je 0x406721
mov word [ecx], ax
add ecx, 2
dec edx
jne 0x406703
jmp 0x406725
test edx, edx
jne 0x40672d
sub ecx, 2
mov ebp, 0x8007007a
xor eax, eax
mov word [ecx], ax
xor esi, esi
test ebp, ebp
jne 0x40683e
mov ebp, dword [esp + 0x14]
cmp ebp, 5
ja case.default.0x406749
jmp dword [ebp*4 + 0x4068d0]
push 0x437274
lea eax, [esp + 0x1c]
push eax
call dword [sym.imp.RPCRT4.dll_UuidFromStringW]
test eax, eax
je case.default.0x406749
mov edi, str.Transaction_guid_format_is_incorrect
call fcn.00406520
xor ebx, ebx
mov dword [esp + 0x10], ebx
jmp 0x406814
mov ecx, 0x437288
lea edi, [esp + 0x18]
xor ebx, ebx
mov edx, 0x105
sub edi, ecx
nop
lea eax, [edx + 0x7ffffef9]
test eax, eax
je 0x4067ae
movzx eax, word [edi + ecx]
test ax, ax
je 0x4067ae
mov word [ecx], ax
add ecx, 2
dec edx
jne 0x406790
jmp 0x4067b2
test edx, edx
jne 0x4067ba
sub ecx, 2
mov ebx, 0x8007007a
xor eax, eax
mov word [ecx], ax
test ebx, ebx
je case.default.0x406749
mov edi, str.Originator_format_is_incorrect
call fcn.00406520
xor ebx, ebx
mov dword [esp + 0x10], ebx
jmp 0x406814
push 0x419ef8
push 0x410544
jmp 0x406802
push 0x437284
push 0x410544
jmp 0x406802
mov eax, dword [0x437494]
add eax, 4
push eax
jmp 0x4067fd
push 0x43726c
push 0x41054c
lea eax, [esp + 0x20]
push eax
call dword [sym.imp.MSVCR100.dll_swscanf_s]
add esp, 0xc
mov ebx, dword [esp + 0x10]
mov edi, dword [sym.imp.MSVCR100.dll_wcschr]
inc ebp
mov dword [esp + 0x14], ebp
test esi, esi
jne 0x406660
test ebx, ebx
je 0x40684a
cmp ebp, 6
je 0x40684a
mov edi, str.Wrong_number_of_parameters_in_remote_dump_invokation
call fcn.00406520
xor eax, eax
jmp 0x4068b2
mov edi, str.Argument_for_remote_dump_invoke_is_incorrect
call fcn.00406520
xor ebx, ebx
push 0x20a
lea eax, [esp + 0x228]
push 0
push eax
call sub.MSVCR100.dll_memset
add esp, 0xc
lea eax, [esp + 0x14]
push eax
lea eax, [esp + 0x228]
push eax
mov dword [esp + 0x1c], 0x104
call dword [sym.imp.KERNEL32.dll_GetComputerNameW]
test eax, eax
je 0x4068a6
lea eax, [esp + 0x224]
push eax
push 0x437288
push str._s__s_
mov eax, 0x105
mov edi, 0x41988c
call fcn.00401210
add esp, 0xc
jmp 0x4068b0
mov edi, str.Cant_get_ComputerName
call fcn.00406520
mov eax, ebx
mov ecx, dword [esp + 0x430]
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.0040bb9d
add esp, 0x424
ret 4