Function at 0x111aa7e0
Capabilities:
Get hostname

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x111eb0dc
mov eax, dword fs:[0]
push eax
sub esp, 0x14c
mov eax, dword [0x11279148]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, edx
mov ebx, ecx
push esi
push ebx
push str.DoPublishTutor__p___u__n
mov dword [ebp - 0x98], ebx
call fcn.111bd7b0
add esp, 0xc
cmp dword [0x1127acfc], 0
je 0x111aa85e
lea eax, [ebp - 0xa8]
push eax
push 0
push 0x4a
mov dword [ebp - 0xa8], 0x68e
mov dword [ebp - 0xa4], esi
mov dword [ebp - 0xa0], ebx
call fcn.111c4630
add esp, 0xc
jmp 0x111aadc9
mov eax, 0x11247f3c
mov ecx, 0x100
mov dword [ebp - 0xb0], eax
mov dword [ebp - 0x9c], eax
lea edi, [ebx + esi*2]
cmp word [ebx], cx
jae 0x111aadc9
mov eax, ebx
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x111aa885
sub eax, edx
sar eax, 1
lea ecx, [ebx + eax*2 + 2]
mov eax, ecx
mov dword [ebp - 0xb4], ecx
lea esi, [eax + 2]
mov dx, word [eax]
add eax, 2
test dx, dx
jne 0x111aa8a3
sub eax, esi
sar eax, 1
lea ecx, [ecx + eax*2 + 2]
mov eax, ecx
mov dword [ebp - 0xb8], ecx
lea esi, [eax + 2]
mov dx, word [eax]
add eax, 2
test dx, dx
jne 0x111aa8c1
sub eax, esi
sar eax, 1
lea ecx, [ecx + eax*2 + 2]
mov eax, ecx
mov dword [ebp - 0x94], ecx
lea esi, [eax + 2]
nop
mov dx, word [eax]
add eax, 2
test dx, dx
jne 0x111aa8e0
sub eax, esi
sar eax, 1
lea ecx, [ecx + eax*2 + 2]
cmp ecx, edi
jae 0x111aa91f
mov eax, ecx
mov dword [ebp - 0xb0], ecx
lea esi, [eax + 2]
mov dx, word [eax]
add eax, 2
test dx, dx
jne 0x111aa902
sub eax, esi
sar eax, 1
lea eax, [ecx + eax*2 + 2]
cmp eax, edi
jae 0x111aa91f
mov dword [ebp - 0x9c], eax
lea ecx, [ebp - 0xc8]
call fcn.1113dd30
mov ecx, dword [0x1127aa68]
mov edx, dword [ecx]
mov edx, dword [edx + 8]
push 0
lea eax, [ebp - 0xc8]
push eax
push str.protocols
push str.Client
mov dword [ebp - 4], 0
call edx
mov eax, dword [ebp - 0xc8]
mov edx, dword [eax]
lea ecx, [ebp - 0xc8]
call edx
test al, al
jne 0x111aa97c
push 0x266
push str.e:_nsmsrc_nsm14101410fctl32NSMString.h
push str.IsA__
call fcn.11067750
add esp, 0xc
mov esi, dword [ebp - 0xbc]
cmp word [esi], 0
je 0x111aa9d6
mov ebx, dword [sym.imp.MSVCR100.dll__wtoi]
mov edi, dword [sym.imp.MSVCR100.dll_isdigit]
push esi
call ebx
add esp, 4
cmp eax, 3
je 0x111aabe2
movzx eax, word [esi]
push eax
call edi
add esp, 4
test eax, eax
je 0x111aa9c1
movzx ecx, word [esi + 2]
add esi, 2
push ecx
call edi
add esp, 4
test eax, eax
jne 0x111aa9b0
cmp word [esi], 0
je 0x111aa9d0
add esi, 2
cmp word [esi], 0
jne 0x111aa994
mov ebx, dword [ebp - 0x98]
mov ecx, dword [0x1127aa68]
push 0
push 0
push str.UseNCS
push str.TCPIP
call fcn.110bbc00
test eax, eax
jne 0x111aabe8
lea ecx, [ebp - 0xd8]
call fcn.1113dd30
lea ecx, [ebp - 0xac]
mov byte [ebp - 4], 1
call fcn.1113dd30
mov ecx, dword [0x1127aa68]
mov edx, dword [ecx]
mov edx, dword [edx + 8]
push 0
lea eax, [ebp - 0xd8]
push eax
push 0x11206314
push 0x11218828
mov byte [ebp - 4], 2
call edx
mov ecx, dword [0x1127aa68]
mov eax, dword [ecx]
mov eax, dword [eax + 8]
push 0
lea edx, [ebp - 0xac]
push edx
push str.GSKU
push 0x11218828
call eax
mov edx, dword [ebp - 0xac]
mov eax, dword [edx]
lea ecx, [ebp - 0xac]
call eax
test al, al
jne 0x111aaa80
push 0x263
push str.e:_nsmsrc_nsm14101410fctl32NSMString.h
push str.IsA__
call fcn.11067750
add esp, 0xc
cmp dword [ebp - 0xa4], 0
jne 0x111aaaa9
mov ecx, dword [0x1127aa68]
mov edx, dword [ecx]
mov edx, dword [edx + 8]
push 0
lea eax, [ebp - 0xac]
push eax
push 0x1120cffc
push 0x11218828
call edx
mov eax, dword [ebp - 0xd8]
mov edx, dword [eax]
lea ecx, [ebp - 0xd8]
call edx
test al, al
jne 0x111aaad4
push 0x266
push str.e:_nsmsrc_nsm14101410fctl32NSMString.h
push str.IsA__
call fcn.11067750
add esp, 0xc
mov edi, dword [ebp - 0xb0]
cmp edi, dword [ebp - 0xcc]
jne 0x111aab1d
mov eax, dword [ebp - 0xac]
mov edx, dword [eax]
lea ecx, [ebp - 0xac]
call edx
test al, al
jne 0x111aab0d
push 0x266
push str.e:_nsmsrc_nsm14101410fctl32NSMString.h
push str.IsA__
call fcn.11067750
add esp, 0xc
mov esi, dword [ebp - 0x9c]
cmp esi, dword [ebp - 0xa0]
je 0x111aab4c
jmp 0x111aab23
mov esi, dword [ebp - 0x9c]
mov ecx, dword [0x1127ab0c]
push 0
push 0
push 3
call fcn.110d4440
push 3
push 0
push str.UseNCS
push str.TCPIP
mov ecx, 0x1127aa10
call fcn.11065190
cmp word [edi], 0
je 0x111aabc2
cmp word [esi], 0
je 0x111aabc2
push str.publish
push ebx
call dword [sym.imp.MSVCR100.dll__wcsicmp]
add esp, 8
test eax, eax
jne 0x111aabc2
push 3
push edi
push 0x11206314
push 0x11218828
mov ecx, 0x1127aa10
call fcn.110651d0
push 3
push esi
push str.GSKU
push 0x11218828
mov ecx, 0x1127aa10
call fcn.110651d0
push 3
push 1
push str.UseNCS
push str.TCPIP
mov ecx, 0x1127aa10
call fcn.11065190
mov ecx, dword [0x1127ab0c]
push 0
push 1
push 3
call fcn.110d4440
lea ecx, [ebp - 0xac]
mov byte [ebp - 4], 1
call fcn.1113cd80
lea ecx, [ebp - 0xd8]
mov byte [ebp - 4], 0
call fcn.1113cd80
jmp 0x111aabe8
mov ebx, dword [ebp - 0x98]
mov esi, dword [sym.imp.MSVCR100.dll__wcsicmp]
push str.publish
push ebx
call esi
add esp, 8
test eax, eax
jne 0x111aacf9
mov esi, dword [ebp - 0xb8]
push eax
push esi
push str.ChannelSpec
push str.Tutor
mov ecx, 0x1127aa10
call fcn.110651d0
lea ecx, [ebp - 0x158]
call fcn.11062d90
mov eax, dword [ebp - 0x94]
push eax
lea ecx, [ebp - 0x150]
mov byte [ebp - 4], 3
mov dword [ebp - 0x158], 0x200
mov dword [ebp - 0x154], 0xe00
call fcn.1113dbf0
mov ecx, dword [ebp - 0xb4]
push ecx
lea ecx, [ebp - 0x140]
call fcn.1113dbf0
push esi
lea ecx, [ebp - 0x120]
call fcn.1113dbf0
cmp dword [0x1127ad10], 0
je 0x111aacd2
mov ecx, dword [0x1127aa68]
push 0
push 0
push 0x1120b310
push str.TCPIP
mov byte [ebp - 0x10f], 1
call fcn.110bbc00
lea edx, [ebp - 0x94]
mov word [ebp - 0xfc], ax
push edx
lea eax, [ebp - 0x90]
push eax
push 5
mov dword [ebp - 0x94], 0x40
call dword [sym.imp.KERNEL32.dll_GetComputerNameExW]
lea ecx, [ebp - 0x90]
push ecx
lea ecx, [ebp - 0x10c]
call fcn.1113dbf0
mov ecx, dword [0x1127ab0c]
push 0
lea edx, [ebp - 0x158]
push edx
push 0xffffffffffffffff
call fcn.110c6a20
lea ecx, [ebp - 0x158]
mov byte [ebp - 4], 0
call fcn.11063430
jmp 0x111aad22
push str.revoke
push ebx
call esi
add esp, 8
test eax, eax
jne 0x111aada9
push eax
push eax
push str.ChannelSpec
push str.Tutor
mov ecx, 0x1127aa10
call fcn.110651d0
mov ecx, dword [0x1127ab0c]
mov eax, dword [ecx]
mov edx, dword [eax + 4]
call edx
movzx ecx, byte [eax]
xor dl, dl
xor bl, bl
test ecx, ecx
je 0x111aadb7
mov edi, edi
inc eax
cmp ecx, 2
jne 0x111aad4a
mov dl, 1
jmp 0x111aad51
cmp ecx, 3
jne 0x111aad51
mov bl, 1
movzx ecx, byte [eax]
test ecx, ecx
jne 0x111aad40
test dl, dl
je 0x111aadb7
test bl, bl
je 0x111aadb7
push ecx
push ecx
mov ecx, dword [0x1127aa68]
push str.UseNCS
push str.TCPIP
call fcn.110bbc00
test eax, eax
je 0x111aadb7
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0xb8]
mov edx, dword [ebp - 0xb4]
push eax
push ecx
mov ecx, dword [0x1127ab0c]
push edx
push str.Tutor
push 0x1123b498
push 3
call fcn.110c5a30
jmp 0x111aadb7
push ebx
push str.WARN:_DoPublishTutor___UNKNOWN_mode___s__n
call fcn.111bd7b0
add esp, 8
lea ecx, [ebp - 0xc8]
mov dword [ebp - 4], 0xffffffff
call fcn.1113cd80
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.111d9022
mov esp, ebp
pop ebp
ret