Function at 0x468d00
Capabilities:
Get hostname

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
mov eax, dword [0x63e758]
xor eax, ebp
mov dword [ebp - 4], eax
push esi
push 0xb660
push 1
call fcn.00580d1f
mov esi, eax
add esp, 8
test esi, esi
jne 0x468d35
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.005802ce
mov esp, ebp
pop ebp
ret
push ebx
push edi
mov edi, dword [ebp + 8]
push 0xc
and edi, 1
mov dword [esi + 0x1680], 0
push 0x20
mov dword [esi + 0x4278], 0xff
mov dword [esi + 0x480], 1
mov dword [esi + 0x80], edi
mov dword [esi + 0xc8], 1
mov dword [esi + 0xd0], 0x64
mov dword [esi + 0x408], 0x400
mov dword [esi + 0x410], 0x300
mov dword [esi + 0x3000], 0
mov dword [esi + 0x3008], 0
mov dword [esi + 0x3018], 1
mov dword [esi + 0x3020], 1
mov dword [esi + 0x400], 0x8000b
mov dword [esi + 0x418], 0x10
mov dword [esi + 0x2218], 0
mov dword [esi + 0x2208], 1
mov dword [esi + 0x2200], 1
mov dword [esi + 0x2210], 1
mov dword [esi + 0x2240], 1
mov dword [esi + 0x2248], 0
mov dword [esi + 0x2400], 0
mov dword [esi + 0x2408], 0xff
mov dword [esi + 0x428], 0xa28
mov dword [esi + 0x5208], 4
mov dword [esi + 0x5210], 0
mov dword [esi + 0x5218], 0xc
mov dword [esi + 0x5200], 0
mov dword [esi + 0x600], 0
mov dword [esi + 0x4828], 1
mov dword [esi + 0x98], 0xd3d
mov dword [esi + 0x3e08], 0x1bb
mov dword [esi + 0x4a00], 1
mov dword [esi + 0x3060], 1
mov dword [esi + 0xc30], 0xffffffff
mov dword [esi + 0xc38], 0xffffffff
mov dword [esi + 0x3208], 1
mov dword [esi + 0x3228], 0
mov dword [esi + 0x1e00], 0
mov dword [esi + 0x1e08], 1
mov dword [esi + 0x1e40], 0
mov dword [esi + 0x1e10], 0
mov dword [esi + 0x1e18], 1
mov dword [esi + 0x1e20], 1
mov dword [esi + 0x1e28], 0
mov dword [esi + 0x420], 6
mov dword [esi + 0x608], 0
mov dword [esi + 0x618], 0
mov dword [esi + 0x2280], 0
mov dword [esi + 0x1608], 1
mov dword [esi + 0x1628], 1
mov dword [esi + 0x5400], 2
mov dword [esi + 0x1688], 3
mov dword [esi + 0x2220], 1
mov dword [esi + 0x3218], 0
mov dword [esi + 0x3220], 0
mov dword [esi + 0x2258], 0
mov dword [esi + 0x2260], 2
mov dword [esi + 0x800], 0
mov dword [esi + 0x808], 0x20
call fcn.00580d1f
add esp, 8
mov dword [esi + 0x810], eax
test eax, eax
je 0x469628
push 0x2c
push 0x20
mov dword [esi + 0x468], 0
mov dword [esi + 0xc00], 0
mov dword [esi + 0xc08], 0x20
call fcn.00580d1f
add esp, 8
mov dword [esi + 0xc10], eax
test eax, eax
je 0x469628
push 4
push 0x10
mov dword [esi + 0xc58], 0
mov dword [esi + 0xc60], 0
call fcn.00580d1f
add esp, 8
mov dword [esi + 0xc48], eax
test eax, eax
je 0x469628
push esi
call fcn.0046a3b0
add esp, 4
test eax, eax
je 0x469628
push 0x20
push 1
call fcn.00580d1f
add esp, 8
mov dword [esi + 0x4600], eax
test eax, eax
je 0x469628
push 0x20
push 1
call fcn.00580d1f
add esp, 8
mov dword [esi + 0x438], eax
test eax, eax
je 0x469628
push 0x20
push 1
call fcn.00580d1f
add esp, 8
mov dword [esi + 0x430], eax
test eax, eax
je 0x469628
push 0x1f
push eax
call dword [sym.imp.WS2_32.dll_gethostname]
mov eax, dword [esi + 0x430]
push 0x30
mov byte [eax + 0x1f], 0
mov dword [esi + 0x5000], 1
mov dword [esi + 0x6a00], 1
mov dword [esi + 0x5008], 0x14
mov dword [esi + 0x5c00], 1
mov dword [esi + 0x7e00], 0
mov dword [esi + 0x4a18], 1
mov dword [esi + 0x4a10], 0
mov dword [esi + 0x4a08], 0
mov dword [esi + 0x6e08], 1
mov dword [esi + 0x6e10], 1
mov dword [esi + 0x4e18], 1
mov dword [esi + 0x4e28], 5
call fcn.0058023c
add esp, 4
mov dword [esi + 0x4e30], eax
test eax, eax
je 0x469628
mov dword [eax], 0x258
mov eax, dword [esi + 0x4e30]
push 0x28
mov dword [eax + 4], 0
mov eax, dword [esi + 0x4e30]
mov dword [eax + 8], 0x258
mov eax, dword [esi + 0x4e30]
mov dword [eax + 0xc], 0
mov eax, dword [esi + 0x4e30]
mov dword [eax + 0x10], 0x800
mov eax, dword [esi + 0x4e30]
mov dword [eax + 0x14], 0
mov eax, dword [esi + 0x4e30]
mov dword [eax + 0x18], 0x1000
mov eax, dword [esi + 0x4e30]
mov dword [eax + 0x1c], 0
mov eax, dword [esi + 0x4e30]
mov dword [eax + 0x20], 0x800
mov eax, dword [esi + 0x4e30]
mov dword [eax + 0x24], 0
mov dword [esi + 0x4838], 1
mov dword [esi + 0x4810], 1
mov dword [esi + 0x4818], 1
mov dword [esi + 0x5600], 0
call fcn.0058023c
mov ebx, eax
add esp, 4
mov dword [esi + 0x5608], ebx
test ebx, ebx
je 0x469628
push 4
call fcn.0058023c
add esp, 4
mov dword [esi + 0x5610], eax
test eax, eax
je 0x469628
mov edx, 0xfe
mov ecx, 4
mov word [ebx], dx
mov ebx, 0xfe
mov eax, dword [esi + 0x5608]
push str.C:WindowsSystem32mstscax.dll
mov word [eax + 2], cx
mov eax, dword [esi + 0x5608]
mov word [eax + 4], dx
mov eax, dword [esi + 0x5608]
mov word [eax + 6], cx
mov ecx, 8
mov eax, dword [esi + 0x5608]
mov word [eax + 8], dx
mov eax, dword [esi + 0x5608]
mov word [eax + 0xa], cx
mov eax, dword [esi + 0x5608]
mov word [eax + 0xc], dx
mov eax, dword [esi + 0x5608]
mov word [eax + 0xe], cx
mov ecx, 0x10
mov eax, dword [esi + 0x5608]
mov word [eax + 0x10], dx
mov eax, dword [esi + 0x5608]
mov word [eax + 0x12], cx
mov ecx, 0x20
mov eax, dword [esi + 0x5608]
mov word [eax + 0x14], dx
mov eax, dword [esi + 0x5608]
mov word [eax + 0x16], cx
mov ecx, 0x80
mov eax, dword [esi + 0x5608]
mov word [eax + 0x18], dx
mov edx, 0x40
mov eax, dword [esi + 0x5608]
mov word [eax + 0x1a], dx
mov eax, dword [esi + 0x5608]
mov word [eax + 0x1c], bx
mov eax, dword [esi + 0x5608]
mov word [eax + 0x1e], cx
mov ecx, 0x100
mov eax, dword [esi + 0x5608]
mov word [eax + 0x20], bx
mov eax, dword [esi + 0x5608]
mov word [eax + 0x22], cx
mov eax, dword [esi + 0x5608]
mov word [eax + 0x24], dx
mov eax, dword [esi + 0x5608]
mov word [eax + 0x26], cx
mov eax, dword [esi + 0x5610]
mov word [eax], cx
mov eax, dword [esi + 0x5610]
mov word [eax + 2], cx
mov dword [esi + 0x5800], 0
mov dword [esi + 0x5808], 0x1e00
mov dword [esi + 0x5810], 0x7d0
mov dword [esi + 0x7c08], 0xa00
mov dword [esi + 0x7c10], ecx
call fcn.00580c20
add esp, 4
mov dword [esi + 0x1810], eax
test eax, eax
je 0x469628
mov dword [esi + 0x4268], 3
xor ecx, ecx
mov dword [esi + 0x4250], 3
test edi, edi
mov dword [esi + 0x4258], 0xc
mov eax, 0xffff
mov dword [esi + 0x5a08], 0x640
cmovne eax, ecx
mov dword [esi + 0x6800], eax
mov dword [esi + 0x3e38], ecx
mov dword [esi + 0x3e48], ecx
mov dword [esi + 0x3e50], 1
mov dword [esi + 0x3e58], 1
mov dword [esi + 0x3e60], 1
mov dword [esi + 0x5230], 1
mov dword [esi + 0x4820], 1
mov dword [esi + 0x4830], 1
mov dword [esi + 0x7410], 2
mov dword [esi + 0x3028], 1
mov dword [esi + 0x7418], 3
mov dword [esi + 0x7420], 1
mov dword [esi + 0x7428], 1
mov dword [esi + 0x1a00], ecx
mov dword [esi + 0x1a08], 0x14
mov dword [esi + 0x7800], 1
mov dword [esi + 0x7808], ecx
mov dword [esi + 0x7810], ecx
mov dword [esi + 0x7818], ecx
mov dword [esi + 0x7820], ecx
push 0x1c
mov dword [esi + 0x7828], ecx
push 1
mov dword [esi + 0x7830], ecx
call fcn.00580d1f
add esp, 8
mov dword [esi + 0x1a10], eax
test eax, eax
je 0x469628
push 0x1c
push 1
call fcn.00580d1f
add esp, 8
mov dword [esi + 0x1a18], eax
test eax, eax
je 0x469628
push 0xac
push 1
call fcn.00580d1f
add esp, 8
mov dword [esi + 0x1c00], eax
test eax, eax
je 0x469628
push 0x40
push 1
mov dword [esi + 0x8210], 0x10
call fcn.00580d1f
add esp, 8
mov dword [esi + 0x8218], eax
test eax, eax
je 0x469628
push 0x40
push 1
mov dword [esi + 0x9a08], 0x10
call fcn.00580d1f
add esp, 8
mov dword [esi + 0x9a10], eax
test eax, eax
je 0x469628
push 0x40
push 1
mov dword [esi + 0x9e08], 0x10
call fcn.00580d1f
add esp, 8
mov dword [esi + 0x9e10], eax
test eax, eax
je 0x469628
cmp dword [esi + 0x80], 0
jne 0x4695a4
push 1
mov dword [esi + 0x9600], 1
call fcn.00437c20
add esp, 4
mov dword [esi + 0x3800], eax
test eax, eax
je 0x469628
push str.FreeRDP
push str.FreeRDP
call fcn.00582079
add esp, 8
test eax, eax
je 0x469550
push str.FreeRDP
push 4
call fcn.00437c80
mov edi, eax
add esp, 8
test edi, edi
je 0x469545
push str.FreeRDP
push edi
call fcn.00437b30
add esp, 8
mov dword [esi + 0x3808], eax
push edi
call fcn.00580204
add esp, 4
jmp 0x46958e
xorps xmm0, xmm0
xor edi, edi
movq qword [ebp - 0xc], xmm0
lea ebx, [ebx]
movsx eax, byte [edi + str.FreeRDP]
push eax
call fcn.005875f9
mov byte [ebp + edi - 0xc], al
add esp, 4
inc edi
cmp edi, 8
jb 0x469560
lea eax, [ebp - 0xc]
push eax
push 4
call fcn.00437c80
add esp, 8
mov dword [esi + 0x3808], eax
cmp dword [esi + 0x3808], 0
je 0x469628
cmp dword [esi + 0x80], 0
je 0x4695ac
push esi
call fcn.0046a440
jmp 0x4695b2
push esi
call fcn.00469880
add esp, 4
push 0x16cc
push 1
call fcn.00580d1f
add esp, 8
mov dword [esi + 0xb648], eax
test eax, eax
je 0x469628
push str._.config_freerdp_action.sh
call fcn.00580c20
mov dword [esi + 0xb650], eax
push 0x20
mov dword [esi + 0x2810], 0
push 1
mov dword [esi + 0x2288], 1
call fcn.00580d1f
add esp, 0xc
mov dword [esi + 0x4c00], eax
test eax, eax
je 0x469628
push esi
call fcn.00469730
add esp, 4
test eax, eax
je 0x469628
pop edi
pop ebx
mov eax, esi
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.005802ce
mov esp, ebp
pop ebp
ret
push dword [esi + 0x3800]
call fcn.00580204
push dword [esi + 0x3808]
call fcn.00580204
push dword [esi + 0x9e10]
call fcn.00580204
push dword [esi + 0x9a10]
call fcn.00580204
push dword [esi + 0x8218]
call fcn.00580204
push dword [esi + 0x1c00]
call fcn.00580204
push dword [esi + 0x1a18]
call fcn.00580204
push dword [esi + 0x1a10]
call fcn.00580204
push dword [esi + 0x1810]
call fcn.00580204
push dword [esi + 0x5610]
call fcn.00580204
push dword [esi + 0x5608]
call fcn.00580204
push dword [esi + 0x4e30]
call fcn.00580204
push dword [esi + 0x438]
call fcn.00580204
push dword [esi + 0x430]
call fcn.00580204
push dword [esi + 0x4c00]
call fcn.00580204
push dword [esi + 0x4600]
call fcn.00580204
add esp, 0x40
push dword [esi + 0x3400]
call fcn.00580204
push dword [esi + 0xc48]
call fcn.00580204
push dword [esi + 0xc10]
call fcn.00580204
push dword [esi + 0x810]
call fcn.00580204
push esi
call fcn.00580204
mov ecx, dword [ebp - 4]
add esp, 0x14
xor ecx, ebp
xor eax, eax
pop edi
pop ebx
pop esi
call fcn.005802ce
mov esp, ebp
pop ebp
ret