Function at 0x1806177
Capabilities:
Get hostname

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
mov eax, 0x8438
call fcn.01808950
mov eax, dword [0x18122c8]
push ebx
xor ebx, ebx
push esi
mov esi, dword [ebp + 0xc]
push edi
mov edx, 0xfff
mov dword [ebp - 4], eax
xor eax, eax
mov ecx, edx
mov dword [ebp - 0x8414], ebx
lea edi, [ebp - 0x8410]
rep stosd dword es:[edi], eax
mov ecx, edx
mov dword [ebp - 0x4414], ebx
lea edi, [ebp - 0x4410]
push ebx
rep stosd dword es:[edi], eax
mov dword [ebp - 0x8428], ebx
mov dword [ebp - 0x8434], ebx
mov dword [ebp - 0x8438], ebx
mov dword [ebp - 0x8430], ebx
mov dword [ebp - 0x8424], ebx
mov dword [ebp - 0x842c], ebx
mov dword [ebp - 0x8420], ebx
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
cmp eax, ebx
mov dword [0x1813978], eax
jne 0x180620e
push 0x1801634
push 0x180162c
call dword [sym.imp.msvcrt.dll_wprintf]
pop ecx
pop ecx
jmp 0x1806659
push 0x1801380
push 0x1801624
push 0x1813980
call dword [sym.imp.msvcrt.dll_swprintf]
add esp, 0xc
call fcn.01801e88
cmp eax, ebx
je 0x1806236
xor eax, eax
jmp 0x18067ab
push 0x1801610
push 0x180160c
call fcn.018045a3
push 2
pop ebx
push ebx
push 0
push 0x18015fc
call dword [sym.imp.KERNEL32.dll_LoadLibraryExA]
test eax, eax
mov dword [0x181230c], eax
je 0x1806659
call fcn.01804886
xor edi, edi
inc edi
push edi
push 0x1806ea4
call dword [sym.imp.KERNEL32.dll_SetConsoleCtrlHandler]
call fcn.01806141
cmp dword [ebp + 8], edi
mov dword [ebp - 0x8418], edi
jbe 0x1806664
mov dword [ebp - 0x841c], ebx
mov ebx, dword [ebp - 0x8418]
shl ebx, 2
lea edi, [ebx + esi]
push 0x180151c
push dword [edi]
call dword [sym.imp.msvcrt.dll__wcsicmp]
test eax, eax
pop ecx
pop ecx
je 0x1806616
push 0x18015f4
push dword [edi]
call dword [sym.imp.msvcrt.dll__wcsicmp]
test eax, eax
pop ecx
pop ecx
je 0x1806616
push 0x180125c
push dword [edi]
call dword [sym.imp.msvcrt.dll__wcsicmp]
test eax, eax
pop ecx
pop ecx
je 0x1806616
push 0x1801524
push dword [edi]
call dword [sym.imp.msvcrt.dll__wcsicmp]
test eax, eax
pop ecx
pop ecx
je 0x1806616
push 0x18015ec
push dword [edi]
call dword [sym.imp.msvcrt.dll__wcsicmp]
test eax, eax
pop ecx
pop ecx
jne 0x180631b
mov dword [0x18122fc], 1
jmp 0x180648a
push 0x18015e4
push dword [edi]
call dword [sym.imp.msvcrt.dll__wcsicmp]
test eax, eax
pop ecx
pop ecx
jne 0x180634c
mov eax, dword [ebp - 0x841c]
cmp eax, dword [ebp + 8]
jae 0x18065fa
mov eax, dword [ebx + esi + 4]
mov dword [ebp - 0x8438], eax
jmp 0x180647e
push 0x18015dc
push dword [edi]
call dword [sym.imp.msvcrt.dll__wcsicmp]
test eax, eax
pop ecx
pop ecx
jne 0x1806386
mov eax, dword [ebp - 0x841c]
cmp eax, dword [ebp + 8]
jae 0x18065fa
push dword [ebx + esi + 4]
lea eax, [ebp - 0x4414]
push eax
call dword [sym.imp.msvcrt.dll_wcscpy]
pop ecx
pop ecx
jmp 0x180647e
push 0x18015d4
push dword [edi]
call dword [sym.imp.msvcrt.dll__wcsicmp]
test eax, eax
pop ecx
pop ecx
jne 0x18063c1
mov eax, dword [ebp - 0x841c]
cmp eax, dword [ebp + 8]
jae 0x18065fa
mov eax, dword [ebx + esi + 4]
mov dword [ebp - 0x8430], eax
mov dword [ebp - 0x8428], 1
jmp 0x180647e
push 0x18015cc
push dword [edi]
call dword [sym.imp.msvcrt.dll__wcsicmp]
test eax, eax
pop ecx
pop ecx
jne 0x1806402
mov eax, dword [ebp - 0x841c]
cmp eax, dword [ebp + 8]
jae 0x18065fa
lea ebx, [ebx + esi + 4]
push dword [ebx]
call dword [sym.imp.msvcrt.dll_wcslen]
test eax, eax
pop ecx
je 0x180647e
mov eax, dword [ebx]
mov dword [ebp - 0x8424], eax
jmp 0x180647e
push 0x18015c4
push dword [edi]
call dword [sym.imp.msvcrt.dll__wcsicmp]
test eax, eax
pop ecx
pop ecx
jne 0x180643f
mov eax, dword [ebp - 0x841c]
cmp eax, dword [ebp + 8]
jae 0x18065fa
lea ebx, [ebx + esi + 4]
push dword [ebx]
call dword [sym.imp.msvcrt.dll_wcslen]
test eax, eax
pop ecx
je 0x180647e
mov eax, dword [ebx]
mov dword [ebp - 0x842c], eax
jmp 0x180647e
push 0x18015bc
push dword [edi]
call dword [sym.imp.msvcrt.dll__wcsicmp]
test eax, eax
pop ecx
pop ecx
jne 0x1806551
mov eax, dword [ebp - 0x841c]
cmp eax, dword [ebp + 8]
jae 0x18065fa
lea ebx, [ebx + esi + 4]
push dword [ebx]
call dword [sym.imp.msvcrt.dll_wcslen]
test eax, eax
pop ecx
je 0x180647e
mov eax, dword [ebx]
mov dword [ebp - 0x8420], eax
inc dword [ebp - 0x8418]
inc dword [ebp - 0x841c]
inc dword [ebp - 0x8418]
mov eax, dword [ebp - 0x8418]
inc dword [ebp - 0x841c]
cmp eax, dword [ebp + 8]
jb 0x1806291
cmp dword [ebp - 0x8424], 0
je 0x1806661
cmp dword [ebp - 0x8420], 0
je 0x180651d
push 0x1801258
push dword [ebp - 0x8420]
call dword [sym.imp.msvcrt.dll__wcsicmp]
test eax, eax
pop ecx
pop ecx
jne 0x180651d
push dword [ebp - 0x8424]
and dword [ebp - 0x8428], eax
push 0xa9
push dword [0x1813978]
call sym.NETSH.EXE_PrintMessageFromModule
add esp, 0xc
lea eax, [ebp - 0x8428]
push eax
push 0x104
lea eax, [ebp - 0x414]
push eax
call fcn.01806aaa
test eax, eax
jne 0x180660c
lea eax, [ebp - 0x414]
mov dword [ebp - 0x8420], eax
push dword [ebp - 0x8420]
push dword [ebp - 0x842c]
push dword [ebp - 0x8424]
call fcn.01805f6a
mov esi, eax
test esi, esi
je 0x1806661
push esi
push dword [0x1813978]
call sym.NETSH.EXE_PrintMessageFromModule
pop ecx
pop ecx
jmp 0x1806764
cmp dword [ebp - 0x8428], 0
jne 0x18065fa
mov ebx, dword [ebp - 0x8418]
cmp ebx, dword [ebp + 8]
jae 0x18064a5
mov edi, dword [sym.imp.msvcrt.dll_wcscat]
jmp 0x180657b
mov ebx, dword [ebp - 0x8418]
cmp word [ebp - 0x8414], 0
je 0x1806595
lea eax, [ebp - 0x8414]
push 0x18012f0
push eax
call edi
pop ecx
pop ecx
mov ebx, dword [esi + ebx*4]
cmp word [ebx], 0
je 0x18065bb
push 0x20
push ebx
call dword [sym.imp.msvcrt.dll_wcschr]
test eax, eax
pop ecx
pop ecx
jne 0x18065bb
lea eax, [ebp - 0x8414]
push ebx
push eax
call edi
pop ecx
pop ecx
jmp 0x18065e4
lea eax, [ebp - 0x8414]
push 0x180152c
push eax
call edi
lea eax, [ebp - 0x8414]
push ebx
push eax
call edi
lea eax, [ebp - 0x8414]
push 0x180152c
push eax
call edi
add esp, 0x18
inc dword [ebp - 0x8418]
mov eax, dword [ebp - 0x8418]
cmp eax, dword [ebp + 8]
jb 0x1806575
jmp 0x18064a5
push dword [esi]
push 0x6e
push dword [0x1813978]
call sym.NETSH.EXE_PrintMessageFromModule
add esp, 0xc
mov esi, 0x3a99
jmp 0x1806764
xor eax, eax
push eax
push eax
push eax
call fcn.01808634
push dword [esi]
push 0x6e
push dword [0x1813978]
call sym.NETSH.EXE_PrintMessageFromModule
add esp, 0xc
lea eax, [ebp - 0x8434]
push eax
push 0x180125c
call sym.NETSH.EXE_ProcessCommand
call fcn.01803169
call fcn.018031b5
push dword [0x181230c]
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
xor eax, eax
inc eax
jmp 0x18067ab
xor edi, edi
inc edi
xor ebx, ebx
cmp dword [0x18122f4], ebx
jne 0x18066c6
push ebx
push ebx
push ebx
call fcn.01808634
mov esi, eax
cmp esi, ebx
jge 0x18066c6
mov eax, dword [0x18122f4]
cmp eax, ebx
jne 0x18066a9
lea eax, [ebp - 0x842c]
push eax
lea eax, [ebp - 0x20c]
push eax
mov dword [ebp - 0x842c], 0x104
call dword [sym.imp.KERNEL32.dll_GetComputerNameW]
lea eax, [ebp - 0x20c]
push eax
push 0xb4
push dword [0x1813978]
call sym.NETSH.EXE_PrintMessageFromModule
add esp, 0xc
push esi
push ebx
call sym.NETSH.EXE_PrintError
pop ecx
pop ecx
cmp dword [ebp - 0x8438], ebx
je 0x18066e3
push dword [ebp - 0x8438]
call fcn.01805e93
mov esi, eax
cmp esi, ebx
jne 0x1806764
cmp word [ebp - 0x4414], bx
je 0x1806711
lea eax, [ebp - 0x8434]
push eax
lea eax, [ebp - 0x4414]
push eax
mov dword [0x1812300], edi
call sym.NETSH.EXE_ProcessCommand
mov esi, eax
cmp esi, ebx
mov dword [0x1812300], ebx
jne 0x1806764
cmp word [ebp - 0x8414], bx
je 0x1806735
lea eax, [ebp - 0x8434]
push eax
lea eax, [ebp - 0x8414]
push eax
mov dword [0x1812008], ebx
call sym.NETSH.EXE_ProcessCommand
jmp 0x1806762
cmp dword [ebp - 0x8430], ebx
mov dword [0x1812300], edi
je 0x1806750
push dword [ebp - 0x8430]
call fcn.01805e93
jmp 0x1806762
push edi
push dword [sym.imp.msvcrt.dll__iob]
mov dword [0x1812008], ebx
call fcn.01805d44
mov esi, eax
call fcn.01805f20
call fcn.01803169
call fcn.018031b5
call fcn.01801e27
push dword [0x181230c]
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
mov eax, dword [0x18122f4]
test eax, eax
je 0x18067a4
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
push eax
call dword [sym.imp.KERNEL32.dll_HeapFree]
and dword [0x18122f4], 0
xor eax, eax
test esi, esi
setne al
mov ecx, dword [ebp - 4]
pop edi
pop esi
pop ebx
call fcn.018086c6
leave
ret 8