Function at 0x7dde77d5
Capabilities:
Get hostname

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x10
push ebx
mov ebx, dword [ebp + 8]
push esi
push edi
xor esi, esi
push esi
push ebx
xor edi, edi
mov dword [ebp - 0xc], esi
mov dword [ebp - 0x10], esi
call fcn.7dde70b4
push 1
push ebx
mov dword [ebp - 4], eax
call fcn.7dde70b4
mov dword [ebp - 8], eax
cmp ebx, esi
je 0x7dde7849
cmp dword [ebp + 0xc], esi
jne 0x7dde7849
push ebx
call fcn.7dde71df
test eax, eax
jne 0x7dde7853
mov edi, dword [sym.imp.ntdll.dll_RtlFreeHeap]
cmp dword [ebp - 4], esi
je 0x7dde7832
push dword [ebp - 4]
mov eax, dword fs:[0x18]
mov eax, dword [eax + 0x30]
push esi
push dword [eax + 0x18]
call edi
cmp dword [ebp - 8], esi
je 0x7dde7849
push dword [ebp - 8]
mov eax, dword fs:[0x18]
mov eax, dword [eax + 0x30]
push esi
push dword [eax + 0x18]
call edi
push 0x57
pop eax
pop edi
pop esi
pop ebx
leave
ret 8
lea eax, [ebp - 0xc]
push eax
push esi
push 4
call fcn.7dd9c733
mov ebx, dword [sym.imp.ntdll.dll_RtlAllocateHeap]
test eax, eax
jne 0x7dde78df
call fcn.7dd711c7
mov edi, eax
cmp edi, 0xea
jne 0x7dde78df
call sub.KERNELBASE.dll_KernelBaseGetGlobalData
mov ecx, dword fs:[0x18]
mov edx, dword [ebp - 0xc]
mov eax, dword [eax + 0x2c]
add edx, edx
push edx
push eax
mov eax, dword [ecx + 0x30]
push dword [eax + 0x18]
call ebx
mov edi, eax
mov dword [ebp + 0xc], edi
cmp edi, esi
jne 0x7dde78a4
push 8
pop edi
jmp 0x7dde78df
lea eax, [ebp - 0xc]
push eax
push edi
push 4
call fcn.7dd9c733
test eax, eax
je 0x7dde78be
push edi
call fcn.7dde716a
test eax, eax
jne 0x7dde78c7
call fcn.7dd711c7
mov edi, eax
jmp 0x7dde78c9
xor edi, edi
push dword [ebp + 0xc]
mov eax, dword fs:[0x18]
mov eax, dword [eax + 0x30]
push esi
push dword [eax + 0x18]
call dword [sym.imp.ntdll.dll_RtlFreeHeap]
push 4
call fcn.7dde6d25
mov dword [ebp + 0xc], eax
cmp eax, esi
je 0x7dde7918
push eax
call fcn.7dde716a
test eax, eax
jne 0x7dde7900
call fcn.7dd711c7
mov edi, eax
jmp 0x7dde7902
xor edi, edi
push dword [ebp + 0xc]
mov eax, dword fs:[0x18]
mov eax, dword [eax + 0x30]
push esi
push dword [eax + 0x18]
call dword [sym.imp.ntdll.dll_RtlFreeHeap]
cmp edi, esi
jne 0x7dde7a1f
lea eax, [ebp - 0x10]
push eax
push esi
push 7
call fcn.7dd9c733
test eax, eax
jne 0x7dde79a8
call fcn.7dd711c7
mov edi, eax
cmp edi, 0xea
jne 0x7dde79a4
call sub.KERNELBASE.dll_KernelBaseGetGlobalData
mov ecx, dword fs:[0x18]
mov edx, dword [ebp - 0x10]
mov eax, dword [eax + 0x2c]
add edx, edx
push edx
push eax
mov eax, dword [ecx + 0x30]
push dword [eax + 0x18]
call ebx
mov ebx, eax
cmp ebx, esi
jne 0x7dde796b
push 8
pop edi
jmp 0x7dde7a1f
lea eax, [ebp - 0x10]
push eax
push ebx
push 7
call fcn.7dd9c733
test eax, eax
je 0x7dde7985
push ebx
call fcn.7dde71ae
test eax, eax
jne 0x7dde798e
call fcn.7dd711c7
mov edi, eax
jmp 0x7dde7990
xor edi, edi
mov eax, dword fs:[0x18]
mov eax, dword [eax + 0x30]
push ebx
push esi
push dword [eax + 0x18]
call dword [sym.imp.ntdll.dll_RtlFreeHeap]
cmp edi, esi
jne 0x7dde7a1f
push 7
call fcn.7dde6d25
mov ebx, eax
cmp ebx, esi
je 0x7dde79e2
push ebx
call fcn.7dde71ae
test eax, eax
jne 0x7dde79c8
call fcn.7dd711c7
mov edi, eax
jmp 0x7dde79ca
xor edi, edi
mov eax, dword fs:[0x18]
mov eax, dword [eax + 0x30]
push ebx
push esi
push dword [eax + 0x18]
call dword [sym.imp.ntdll.dll_RtlFreeHeap]
cmp edi, esi
jne 0x7dde7a1f
push dword [ebp - 4]
push 5
call sym.KERNEL32.dll_SetComputerNameExW
test eax, eax
jne 0x7dde79fb
call fcn.7dd711c7
mov edi, eax
cmp edi, esi
jne 0x7dde7a1f
push dword [ebp - 8]
push 6
call sym.KERNEL32.dll_SetComputerNameExW
test eax, eax
jne 0x7dde7a14
call fcn.7dd711c7
mov edi, eax
cmp edi, esi
jne 0x7dde7a1f
push esi
push dword [ebp + 8]
call sym.KERNEL32.dll_RemoveLocalAlternateComputerNameW
mov edi, eax
cmp dword [ebp - 4], esi
je 0x7dde7a3a
push dword [ebp - 4]
mov eax, dword fs:[0x18]
mov eax, dword [eax + 0x30]
push esi
push dword [eax + 0x18]
call dword [sym.imp.ntdll.dll_RtlFreeHeap]
cmp dword [ebp - 8], esi
je 0x7dde7a55
push dword [ebp - 8]
mov eax, dword fs:[0x18]
mov eax, dword [eax + 0x30]
push esi
push dword [eax + 0x18]
call dword [sym.imp.ntdll.dll_RtlFreeHeap]
mov eax, edi
jmp 0x7dde784c