Function at 0x442e90
Capabilities:
Get hostname

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x56c8eb
mov eax, dword fs:[0]
push eax
sub esp, 0x794
mov eax, dword [0x676300]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [ebp + 8]
mov edx, dword [ebp + 0x10]
mov esi, dword [ebp + 0x1c]
mov dword [ebp - 0x778], ecx
mov ecx, dword [ebp + 0xc]
mov dword [ebp - 0x794], ecx
lea ecx, [ebp - 0x770]
mov dword [ebp - 0x798], eax
mov dword [ebp - 0x790], edx
mov dword [ebp - 0x7a0], esi
call fcn.00431170
lea ecx, [ebp - 0x770]
mov dword [ebp - 4], 0
call fcn.00430f50
push 0x5d
lea eax, [ebp - 0x648]
push 0
push eax
call fcn.00534b40
add esp, 0xc
lea ecx, [ebp - 0x648]
push ecx
lea ecx, [ebp - 0x770]
call fcn.004310d0
lea ecx, [ebp - 0x770]
call fcn.00430e30
mov edi, dword [esi]
mov esi, dword [esi + 4]
mov dword [ebp - 0x78c], edi
cmp edi, esi
je 0x443308
add edi, 0x8c
mov dword [ebp - 0x77c], edi
jmp 0x442f66
mov edi, dword [ebp - 0x77c]
push 0xd7
lea edx, [ebp - 0x5e8]
push 0
push edx
call fcn.00534b40
push 0x14
lea eax, [ebp - 0x648]
push eax
lea ecx, [ebp - 0x5e8]
push ecx
call fcn.00537970
push 0xc
lea edx, [ebp - 0x622]
push edx
lea eax, [ebp - 0x5d3]
push eax
call fcn.00537970
push 0x10
lea ecx, [ebp - 0x633]
push ecx
lea edx, [ebp - 0x5c6]
push edx
call fcn.00537970
push 0x1f
lea eax, [ebp - 0x5b5]
push edi
push eax
call fcn.00537970
mov ecx, dword [ebp - 0x794]
push 0x13
push ecx
lea edx, [ebp - 0x55f]
push edx
call fcn.00537970
mov eax, dword [ebp - 0x798]
add esp, 0x48
push 0x1f
push eax
lea ecx, [ebp - 0x535]
push ecx
call fcn.00537970
mov edx, dword [ebp - 0x790]
push 0x13
push edx
lea eax, [ebp - 0x549]
push eax
call fcn.00537970
mov ecx, dword [ebp + 0x14]
mov ebx, dword [sym.imp.WS2_32.dll_htons]
add esp, 0x18
push ecx
call ebx
mov word [ebp - 0x54b], ax
call fcn.004345d0
mov esi, dword [sym.imp.WS2_32.dll_htonl]
push eax
call esi
push 0x384
mov dword [ebp - 0x591], eax
call esi
mov edx, dword [ebp + 0x18]
push edx
mov dword [ebp - 0x595], eax
call esi
mov dword [ebp - 0x58b], eax
movsx ax, byte [edi + 0x20]
movzx eax, ax
push eax
call ebx
mov ecx, dword [0x67eb8c]
mov word [ebp - 0x58d], ax
mov edx, dword [ecx]
mov eax, dword [edx + 0x10]
mov dword [ebp - 0x774], 0
call eax
test eax, eax
je 0x44308e
mov edx, dword [eax]
mov edx, dword [edx + 0x38]
lea ecx, [ebp - 0x774]
push ecx
push 0x57bd70
mov ecx, eax
call edx
mov ecx, dword [ebp - 0x774]
mov eax, dword [ecx]
mov edx, dword [eax]
call edx
test al, al
lea eax, [ebp - 0x57f]
je 0x4430c2
mov ecx, dword [ebp + 0x18]
push 0x14
push eax
push ecx
call dword [sym.imp.WS2_32.dll_inet_ntoa]
mov ecx, dword [ebp - 0x778]
push eax
add ecx, 0x34
call fcn.00432260
jmp 0x4430da
lea edx, [ebp - 0x774]
push edx
push eax
mov dword [ebp - 0x774], 0x14
call dword [sym.imp.KERNEL32.dll_GetComputerNameA]
push 0xff
lea ecx, [ebp - 0x10f]
push 0
push ecx
mov byte [ebp - 0x110], 0
call fcn.00534b40
mov edx, dword [ebp - 0x798]
mov eax, dword [ebp + 0x14]
mov ecx, dword [ebp - 0x794]
push edx
mov edx, dword [ebp - 0x790]
push eax
push ecx
push edx
push str.KEYWORD1:_s_r_nKEYWORD2:_s_r_nKEYWORD3:_d_r_nKEYWORD4:_s_r_n
lea eax, [ebp - 0x110]
push 0x100
push eax
call fcn.00538635
lea eax, [ebp - 0x110]
add esp, 0x28
lea ecx, [eax + 1]
nop
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x443130
sub eax, ecx
mov ebx, eax
push ebx
call esi
mov ecx, dword [ebp - 0x58b]
push ecx
mov dword [ebp - 0x515], eax
call esi
push eax
call dword [sym.imp.WS2_32.dll_inet_ntoa]
mov ecx, dword [0x67eb8c]
mov edx, dword [ecx]
mov esi, eax
mov eax, dword [edx + 0x10]
mov dword [ebp - 0x774], 0
call eax
test eax, eax
je 0x443186
mov edx, dword [eax]
mov edx, dword [edx + 0x38]
lea ecx, [ebp - 0x774]
push ecx
push 0x57bd70
mov ecx, eax
call edx
mov ecx, dword [ebp - 0x774]
mov eax, dword [ecx]
mov edx, dword [eax]
call edx
push 1
push esi
test al, al
je 0x4431b5
mov eax, dword [edi + 0x21]
mov ecx, dword [ebp - 0x778]
mov ecx, dword [ecx + 0x80]
push eax
push edi
add edi, 0x29
push edi
call fcn.00446ee0
jmp 0x4431cf
mov edx, dword [edi + 0x21]
mov eax, dword [ebp - 0x778]
mov ecx, dword [eax + 0x80]
push edx
push edi
add edi, 0x29
push edi
call fcn.004468a0
push 0x400
lea ecx, [ebp - 0x510]
push 0
push ecx
call fcn.00534b40
xor eax, eax
mov dword [ebp - 0x788], eax
mov dword [ebp - 0x784], eax
mov dword [ebp - 0x780], eax
lea eax, [ebx + 0xd7]
movzx eax, ax
lea edx, [ebx + 0xe3]
mov dword [ebp - 0x79c], edx
mov dx, ax
shl eax, 8
sar dx, 8
add dx, ax
mov ecx, 0x1f0c
mov word [ebp - 0x788], cx
mov word [ebp - 0x785], dx
mov byte [ebp - 0x786], 0x10
mov ecx, dword [ebp - 0x788]
mov dword [ebp - 0x510], ecx
xor eax, eax
mov dword [ebp - 0x508], eax
mov word [ebp - 0x783], 0x1001
mov byte [ebp - 0x781], 0
mov edx, dword [ebp - 0x784]
mov dword [ebp - 0x50c], edx
mov ecx, 0x35
lea esi, [ebp - 0x5e8]
lea edi, [ebp - 0x504]
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
push ebx
lea eax, [ebp - 0x110]
push eax
lea ecx, [ebp - 0x42d]
push ecx
movsb byte es:[edi], byte [esi]
call fcn.00534c80
mov esi, dword [ebp - 0x778]
add esp, 0x18
mov ecx, esi
call fcn.00442ac0
mov edx, dword [ebp - 0x79c]
mov ecx, dword [esi + 8]
push 0
push edx
push 0xc1f
lea eax, [ebp - 0x510]
push eax
push 0xc
push ecx
call fcn.00446510
mov eax, dword [esi + 8]
add esp, 0x18
test eax, eax
je 0x4432d6
push eax
call fcn.00437d20
add esp, 4
mov dword [esi + 8], 0
push 1
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [ebp - 0x78c]
mov edx, dword [ebp - 0x7a0]
add dword [ebp - 0x77c], 0xf1
add eax, 0xf1
mov dword [ebp - 0x78c], eax
cmp eax, dword [edx + 4]
jne 0x442f60
lea ecx, [ebp - 0x770]
mov dword [ebp - 4], 0xffffffff
call fcn.004311b0
mov eax, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00534bba
mov esp, ebp
pop ebp
ret 0x18