Function at 0x41178c
Capabilities:
Get hostname

Disassembly:
push 0x940
mov eax, 0x422126
call fcn.00421242
mov dword [ebp - 0x928], edx
mov esi, ecx
mov dword [ebp - 0x92c], esi
mov eax, dword [ebp + 0x10]
mov ebx, dword [ebp + 0xc]
mov dword [ebp - 0x94c], eax
xor eax, eax
push 0x1fc
push eax
lea eax, [ebp - 0x714]
push eax
call sub.msvcrt.dll_memset
add esp, 0xc
lea eax, [ebp - 0x314]
mov edi, 0x80
xor ecx, ecx
push edi
push ecx
push eax
call sub.msvcrt.dll_memset
add esp, 0xc
lea eax, [ebp - 0x94]
push edi
xor edi, edi
push edi
push eax
call sub.msvcrt.dll_memset
add esp, 0xc
lea eax, [ebp - 0x294]
push 0x1fc
push edi
push eax
call sub.msvcrt.dll_memset
add esp, 0xc
lea eax, [ebp - 0x914]
push 0x1fc
push edi
push eax
call sub.msvcrt.dll_memset
xor ecx, ecx
add esp, 0xc
mov dword [ebp - 0x924], ecx
mov dword [ebp - 0x940], ecx
mov dword [ebp - 0x938], ecx
mov dword [ebp - 4], ecx
mov dword [ebp - 0x930], ecx
mov dword [ebp - 0x920], ecx
mov dword [ebp - 0x934], ecx
mov dword [ebp - 0x918], ecx
mov byte [ebp - 4], 2
mov dword [ebp - 0x93c], ecx
mov byte [ebp - 4], 4
xor eax, eax
inc eax
cmp dword [ebp + 0x14], ecx
jne 0x411878
cmp dword [ebp + 0x18], 2
je 0x411872
cmp dword [ebp + 0x18], 3
jne 0x411878
mov dword [ebp - 0x920], eax
mov eax, dword [esi]
lea edx, [ebp - 0x938]
push edx
push eax
mov ecx, dword [eax]
mov esi, dword [ecx + 0x20]
mov ecx, esi
call dword [0x42c30c]
call esi
mov edi, eax
mov esi, 0xfe
test edi, edi
js 0x4118d7
cmp dword [ebp + 0x18], 2
jne 0x4118c5
push 0x5c
push dword [ebp - 0x938]
call dword [sym.imp.msvcrt.dll_wcsrchr]
pop ecx
pop ecx
test eax, eax
je 0x4118bb
add eax, 2
jmp 0x4118c1
mov eax, dword [ebp - 0x938]
mov edx, eax
jmp 0x4118cb
mov edx, dword [ebp - 0x938]
push esi
lea ecx, [ebp - 0x714]
call fcn.0041bc68
cmp dword [ebp + 0x14], 0
jne 0x4118fb
cmp dword [ebp + 0x18], 2
jne 0x4118fb
xor eax, eax
xor ecx, ecx
mov edx, eax
inc ecx
mov dword [ebp - 0x930], edx
mov dword [ebp - 0x934], ecx
jmp 0x411a01
mov eax, dword [ebp - 0x92c]
lea edx, [ebp - 0x918]
push edx
mov eax, dword [eax]
push eax
mov ecx, dword [eax]
mov esi, dword [ecx + 0x4c]
mov ecx, esi
call dword [0x42c30c]
call esi
mov edi, eax
test edi, edi
js 0x411943
mov eax, dword [ebp - 0x918]
lea edx, [ebp - 0x93c]
push edx
push eax
mov ecx, dword [eax]
mov esi, dword [ecx + 0x2c]
mov ecx, esi
call dword [0x42c30c]
call esi
mov edi, eax
test edi, edi
jns 0x411954
push edi
call dword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_SetLastError]
call fcn.0041afe7
jmp 0x411f20
xor eax, eax
mov dword [ebp - 0x91c], eax
mov byte [ebp - 4], 8
lea edx, [ebp - 0x91c]
mov eax, dword [ebp - 0x918]
push edx
push eax
mov ecx, dword [eax]
mov esi, dword [ecx + 0x24]
mov ecx, esi
call dword [0x42c30c]
call esi
mov edi, eax
test edi, edi
js 0x4119a6
mov eax, dword [ebp - 0x91c]
lea edx, [ebp - 0x934]
push edx
push eax
mov ecx, dword [eax]
mov esi, dword [ecx + 0x1c]
mov ecx, esi
call dword [0x42c30c]
call esi
mov edi, eax
test edi, edi
jns 0x4119c6
push edi
call dword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_SetLastError]
call fcn.0041afe7
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x91c]
call fcn.00403a70
jmp 0x411f20
xor eax, eax
inc eax
cmp dword [ebp - 0x934], eax
jle 0x4119d7
mov dword [ebp - 0x930], eax
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x91c]
call fcn.00403a70
mov ecx, dword [ebp - 0x934]
mov edx, dword [ebp - 0x930]
test ecx, ecx
jne 0x4119fb
xor eax, eax
inc eax
jmp 0x411a01
mov eax, dword [ebp - 0x924]
xor esi, esi
inc esi
mov dword [ebp - 0x948], esi
test eax, eax
jne 0x411a19
movzx eax, si
cmp eax, ecx
jg 0x411f1a
mov eax, dword [ebp + 8]
mov edx, dword [eax]
mov eax, dword [ebp - 0x928]
mov ecx, dword [eax]
call fcn.0041ddf4
xor eax, eax
inc eax
cmp ax, si
je 0x411a3d
cmp dword [ebp + 0x18], 2
je 0x411ed4
cmp dword [ebp + 0x14], 0
jne 0x411a48
cmp dword [ebp + 0x18], eax
jne 0x411a9d
mov eax, dword [ebp - 0x94c]
test eax, eax
je 0x411a77
xor ecx, ecx
cmp word [eax], cx
je 0x411a77
push ecx
push eax
mov ecx, 0x28b
call fcn.00410085
mov edi, dword [ebp - 0x928]
mov edx, dword [ebx]
push eax
mov ecx, dword [edi]
call fcn.0041e34a
jmp 0x411aa3
lea eax, [ebp - 0x940]
mov dword [ebp - 0x940], 0xfe
push eax
lea eax, [ebp - 0x914]
push eax
call dword [sym.imp.api_ms_win_core_kernel32_legacy_l1_1_0.dll_GetComputerNameW]
lea eax, [ebp - 0x914]
jmp 0x411a59
mov edi, dword [ebp - 0x928]
push ecx
lea eax, [ebp - 0x714]
mov ecx, 0x28c
push eax
call fcn.00410085
sub eax, dword [ebp - 0x920]
mov edx, dword [ebx]
mov ecx, dword [edi]
push eax
call fcn.0041e34a
mov esi, dword [ebp - 0x92c]
lea edx, [ebp - 0x314]
xor eax, eax
push eax
lea eax, [ebp - 0x94]
mov ecx, dword [esi]
push eax
call fcn.004133d8
push 0xfe
test eax, eax
jns 0x411b04
mov ecx, 0x1b8
call fcn.0041b2d7
mov edx, eax
lea ecx, [ebp - 0x294]
call fcn.0041bc68
jmp 0x411b40
lea edx, [ebp - 0x94]
lea ecx, [ebp - 0x294]
call fcn.0041bc68
push 0xfe
mov edx, 0x402508
lea ecx, [ebp - 0x294]
call fcn.0041bcc8
push 0xfe
lea edx, [ebp - 0x314]
lea ecx, [ebp - 0x294]
call fcn.0041bcc8
mov eax, dword [esi]
lea edx, [ebp - 0x91c]
push edx
push eax
mov ecx, dword [eax]
mov esi, dword [ecx + 0x28]
mov ecx, esi
call dword [0x42c30c]
call esi
test eax, eax
js 0x411b83
cmp word [ebp - 0x91c], 0
jne 0x411b83
push 0xfe
mov ecx, 0x1b8
call fcn.0041b2d7
mov edx, eax
lea ecx, [ebp - 0x294]
call fcn.0041bc68
push ecx
lea eax, [ebp - 0x294]
mov ecx, 0x28d
push eax
call fcn.00410085
sub eax, dword [ebp - 0x920]
mov edx, dword [ebx]
mov ecx, dword [edi]
push eax
call fcn.0041e34a
mov esi, dword [ebp - 0x92c]
lea edx, [ebp - 0x294]
mov ecx, dword [esi]
call fcn.00412b85
test eax, eax
jns 0x411bd8
push 0xfe
mov ecx, 0x1b8
call fcn.0041b2d7
mov edx, eax
lea ecx, [ebp - 0x294]
call fcn.0041bc68
push ecx
lea eax, [ebp - 0x294]
mov ecx, 0x28e
push eax
call fcn.00410085
sub eax, dword [ebp - 0x920]
mov edx, dword [ebx]
mov ecx, dword [edi]
push eax
call fcn.0041e34a
cmp dword [ebp + 0x14], 0
jne 0x411c0a
cmp dword [ebp + 0x18], 2
je 0x411d88
xor eax, eax
push 0x1fc
push eax
lea eax, [ebp - 0x514]
push eax
call sub.msvcrt.dll_memset
pop ecx
pop ecx
mov ecx, dword [ebp - 0x918]
lea edx, [ebp - 0x294]
call fcn.004132b7
test eax, eax
jns 0x411c51
push 0xfe
mov ecx, 0x197
call fcn.0041b2d7
mov edx, eax
lea ecx, [ebp - 0x294]
call fcn.0041bc68
cmp word [ebp - 0x294], 0
jne 0x411c98
push 0xfe
mov ecx, 0xbf
call fcn.0041b2d7
mov edx, eax
lea ecx, [ebp - 0x294]
call fcn.0041bc68
push 0xfe
mov ecx, 0x182
call fcn.0041b2d7
mov edx, eax
lea ecx, [ebp - 0x514]
call fcn.0041bc68
jmp 0x411d44
xor eax, eax
mov dword [ebp - 0x924], eax
mov byte [ebp - 4], 0xc
lea edx, [ebp - 0x924]
mov dword [ebp - 0x944], eax
mov eax, dword [ebp - 0x918]
push edx
push eax
mov ecx, dword [eax]
mov esi, dword [ecx + 0x3c]
mov ecx, esi
call dword [0x42c30c]
call esi
test eax, eax
js 0x411d13
mov eax, dword [ebp - 0x924]
lea edx, [ebp - 0x944]
push edx
push eax
mov ecx, dword [eax]
mov esi, dword [ecx + 0x34]
mov ecx, esi
call dword [0x42c30c]
call esi
test eax, eax
js 0x411d13
cmp dword [ebp - 0x944], 3
push 0xfe
jne 0x411d0c
mov ecx, 0x181
call fcn.0041b2d7
lea ecx, [ebp - 0x514]
jmp 0x411d28
mov ecx, 0x183
jmp 0x411cff
push 0xfe
mov ecx, 0x1b8
call fcn.0041b2d7
lea ecx, [ebp - 0x294]
mov edx, eax
call fcn.0041bc68
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x924]
call fcn.00403a70
mov esi, dword [ebp - 0x92c]
push ecx
lea eax, [ebp - 0x514]
mov ecx, 0x28f
push eax
call fcn.00410085
sub eax, dword [ebp - 0x920]
mov edx, dword [ebx]
mov ecx, dword [edi]
push eax
call fcn.0041e34a
cmp dword [ebp + 0x14], 0
je 0x411d88
push ecx
lea eax, [ebp - 0x294]
mov ecx, 0x29e
push eax
call fcn.00410085
mov edx, dword [ebx]
mov ecx, dword [edi]
push eax
call fcn.0041e34a
mov ecx, dword [esi]
lea edx, [ebp - 0x314]
xor eax, eax
inc eax
push eax
lea eax, [ebp - 0x94]
push eax
call fcn.004133d8
test eax, eax
jns 0x411dc7
push 0xfe
mov ecx, 0x1b8
call fcn.0041b2d7
mov edx, eax
lea ecx, [ebp - 0x294]
call fcn.0041bc68
xor esi, esi
jmp 0x411eaa
xor eax, eax
xor esi, esi
push esi
inc eax
mov ecx, 0x1a2
push eax
call fcn.0041b2d7
mov edx, eax
lea ecx, [ebp - 0x94]
call fcn.0041bd0c
test eax, eax
je 0x411e94
xor eax, eax
mov ecx, 0x1a3
push esi
inc eax
push eax
call fcn.0041b2d7
mov edx, eax
lea ecx, [ebp - 0x94]
call fcn.0041bd0c
test eax, eax
je 0x411e94
xor eax, eax
mov ecx, 0x1a4
push esi
inc eax
push eax
call fcn.0041b2d7
mov edx, eax
lea ecx, [ebp - 0x94]
call fcn.0041bd0c
test eax, eax
je 0x411e94
xor eax, eax
mov ecx, 0x1a5
push esi
inc eax
push eax
call fcn.0041b2d7
mov edx, eax
lea ecx, [ebp - 0x94]
call fcn.0041bd0c
test eax, eax
je 0x411e94
push 0xfe
lea edx, [ebp - 0x94]
lea ecx, [ebp - 0x294]
call fcn.0041bc68
push 0xfe
mov edx, 0x402508
lea ecx, [ebp - 0x294]
call fcn.0041bcc8
push 0xfe
lea edx, [ebp - 0x314]
lea ecx, [ebp - 0x294]
call fcn.0041bcc8
jmp 0x411eaa
push 0xfe
lea edx, [ebp - 0x94]
lea ecx, [ebp - 0x294]
call fcn.0041bc68
push ecx
lea eax, [ebp - 0x294]
mov ecx, 0x290
push eax
call fcn.00410085
sub eax, dword [ebp - 0x920]
mov edx, dword [ebx]
mov ecx, dword [edi]
push eax
call fcn.0041e34a
mov edi, esi
mov esi, dword [ebp - 0x948]
cmp dword [ebp + 0x14], 0
je 0x411f00
mov ecx, dword [ebp - 0x92c]
lea eax, [ebp - 0x93c]
push esi
push dword [ebp + 0x18]
lea edx, [ebp - 0x918]
push dword [ebx]
push dword [ebp - 0x928]
push eax
call fcn.00411f68
mov edi, eax
mov edx, dword [ebp - 0x930]
test edx, edx
je 0x411f0c
inc dword [ebx]
mov ecx, dword [ebp - 0x934]
xor eax, eax
inc esi
jmp 0x411a04
test edx, edx
jne 0x411f20
inc dword [ebx]
mov byte [ebp - 4], 2
mov eax, dword [ebp - 0x93c]
test eax, eax
je 0x411f3e
mov ecx, dword [eax]
push eax
mov esi, dword [ecx + 8]
mov ecx, esi
call dword [0x42c30c]
call esi
xor eax, eax
mov byte [ebp - 4], al
lea ecx, [ebp - 0x918]
call fcn.00403a70
or dword [ebp - 4], 0xffffffff
push dword [ebp - 0x938]
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov eax, edi
call fcn.00421200
ret 0x14