Function at 0x452e09
Capabilities:
Get hostname

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x630
mov eax, dword [0x46700c]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 8]
push esi
push edi
mov esi, ecx
xor edi, edi
mov dword [ebp - reloc.ADVAPI32.dll_TraceMessage], eax
mov dword [ebp - reloc.ADVAPI32.dll_TraceMessage], edi
test esi, esi
je 0x45301b
test eax, eax
je 0x45301b
push ebx
lea eax, reloc.ADVAPI32.dll_TraceMessage
push eax
push esi
call dword [sym.imp.ADVAPI32.dll_ConvertStringSidToSidW]
test eax, eax
je 0x452ffc
mov eax, 0x104
mov dword [ebp - reloc.ADVAPI32.dll_TraceMessage], eax
mov dword [ebp - reloc.ADVAPI32.dll_TraceMessage], eax
lea eax, reloc.ADVAPI32.dll_TraceMessage
push eax
lea eax, reloc.ADVAPI32.dll_TraceMessage
push eax
lea eax, reloc.ADVAPI32.dll_TraceMessage
push eax
lea eax, reloc.ADVAPI32.dll_TraceMessage
push eax
lea eax, reloc.ADVAPI32.dll_TraceMessage
push eax
push dword [ebp - 0x620]
push edi
call dword [sym.imp.ADVAPI32.dll_LookupAccountSidW]
test eax, eax
je 0x452f32
mov ebx, 0x401424
lea ecx, reloc.ADVAPI32.dll_TraceMessage
mov eax, ebx
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x452ed6
test dx, dx
je 0x452ed2
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x452ed6
add eax, 4
add ecx, 4
test dx, dx
jne 0x452eb0
mov eax, edi
jmp 0x452edb
sbb eax, eax
sbb eax, reloc.ADVAPI32.dll_TraceMessage
test eax, eax
jne 0x452f10
mov eax, dword [ebp - reloc.ADVAPI32.dll_TraceMessage]
cmp eax, 6
je 0x452f5c
cmp eax, 8
je 0x452f5c
cmp eax, 9
je 0x452f5c
cmp eax, 3
je 0x452f5c
cmp eax, 7
je 0x452f5c
mov edx, esi
mov eax, 0x208
lea esi, reloc.ADVAPI32.dll_TraceMessage
call fcn.0042c8be
lea eax, reloc.ADVAPI32.dll_TraceMessage
push eax
lea eax, reloc.ADVAPI32.dll_TraceMessage
push eax
mov dword [ebp - reloc.ADVAPI32.dll_TraceMessage], 0x104
call dword [sym.imp.KERNEL32.dll_GetComputerNameW]
test eax, eax
jne 0x452f66
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
test edi, edi
jle 0x452f4c
and edi, 0xffff
or edi, 0x80070000
test edi, edi
js 0x453001
mov edi, 0x80004005
jmp 0x453001
mov edi, 0x80070523
jmp 0x453001
lea eax, reloc.ADVAPI32.dll_TraceMessage
mov cx, word [ebx]
cmp cx, word [eax]
jne 0x452f92
test cx, cx
je 0x452f8e
mov cx, word [ebx + 2]
cmp cx, word [eax + 2]
jne 0x452f92
add ebx, 4
add eax, 4
test cx, cx
jne 0x452f6c
mov eax, edi
jmp 0x452f97
sbb eax, eax
sbb eax, reloc.ADVAPI32.dll_TraceMessage
test eax, eax
je 0x452fe4
push 0xffffffffffffffff
lea eax, reloc.ADVAPI32.dll_TraceMessage
push eax
push 0xffffffffffffffff
lea eax, reloc.ADVAPI32.dll_TraceMessage
push eax
push 1
push 0x7f
call dword [sym.imp.KERNEL32.dll_CompareStringW]
cmp eax, 2
je 0x452fe4
mov ecx, dword [ebp - reloc.ADVAPI32.dll_TraceMessage]
lea eax, reloc.ADVAPI32.dll_TraceMessage
push eax
lea eax, reloc.ADVAPI32.dll_TraceMessage
push eax
push 0x401c94
mov eax, 0x208
call fcn.0042c99c
add esp, 0xc
jmp 0x453001
mov esi, dword [ebp - reloc.ADVAPI32.dll_TraceMessage]
lea edx, reloc.ADVAPI32.dll_TraceMessage
mov eax, 0x208
call fcn.0042c8be
jmp 0x453001
mov edi, 0x80070057
cmp dword [ebp - reloc.ADVAPI32.dll_TraceMessage], 0
pop ebx
je 0x453017
push dword [ebp - 0x620]
call dword [sym.imp.KERNEL32.dll_LocalFree]
mov eax, edi
jmp 0x453020
mov eax, 0x80070057
mov ecx, dword [ebp - 4]
pop edi
xor ecx, ebp
pop esi
call fcn.004655f1
leave
ret 4