Function at 0x4918fb
Capabilities:
Get hostname

Disassembly:
push 0x24
mov eax, 0x4aedeb
call fcn.004a956e
mov edi, ecx
mov dword [ebp - 0x2c], edi
mov eax, dword [0x4b70c8]
cmp eax, 0x4b70c8
je 0x491938
test byte [eax + 0x1c], 1
je 0x491938
cmp byte [eax + 0x19], 5
jb 0x491938
push edi
push dword [eax + 0x14]
mov edx, 0x41008c
push dword [eax + 0x10]
push 0xd
pop ecx
call fcn.0041610f
lea esi, [edi + 0x28]
xor ebx, ebx
cmp dword [esi], ebx
je 0x491948
mov ecx, esi
call fcn.00482cd5
mov dword [ebp - 0x18], ebx
lea eax, [ebp - 0x18]
mov dword [ebp - 4], ebx
push eax
push 0x41007c
push 0x17
push ebx
push 0x41006c
call dword [sym.imp.ole32.dll_CoCreateInstance]
mov ebx, eax
test ebx, ebx
jns 0x4919b3
mov edx, dword [0x4b70c8]
cmp edx, 0x4b70c8
je 0x49199f
test byte [edx + 0x1c], 2
je 0x49199f
cmp byte [edx + 0x19], 2
jb 0x49199f
push ebx
push dword [edx + 0x14]
push dword [edx + 0x10]
mov edx, 0x41008c
push 0xe
pop ecx
call fcn.0041610f
mov edx, dword [0x4b70c8]
or dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x18]
test eax, eax
je 0x491c29
jmp 0x491c13
push dword [ebp - 0x18]
mov ecx, esi
push 0x41007c
call fcn.0049d9cf
mov ebx, eax
test ebx, ebx
js 0x491c08
mov eax, dword [0x4b70c8]
cmp eax, 0x4b70c8
je 0x4919f7
test byte [eax + 0x1c], 2
je 0x4919f7
cmp byte [eax + 0x19], 5
jb 0x4919f7
push dword [eax + 0x14]
mov edx, 0x41008c
push dword [eax + 0x10]
push 0xf
pop ecx
call fcn.00416054
mov ecx, edi
call fcn.00491ce9
mov ebx, eax
mov dword [ebp - 0x1c], ebx
test ebx, ebx
js 0x491c08
push 0x4b8970
lea ecx, [ebp - 0x14]
call fcn.00417475
push 0x10
pop edi
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x14]
push edi
mov dword [ebp - 0x24], edi
call fcn.00417332
push edi
lea ecx, [ebp - 0x14]
mov esi, eax
call fcn.0041735f
lea eax, [ebp - 0x24]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_GetComputerNameW]
test eax, eax
je 0x491a8b
mov ecx, dword [ebp - 0x14]
call fcn.00417403
push eax
lea ecx, [ebp - 0x14]
call fcn.0041735f
mov eax, dword [0x4b70c8]
mov ebx, 0x4b70c8
cmp eax, ebx
je 0x491aed
test byte [eax + 0x1c], 2
je 0x491aed
cmp byte [eax + 0x19], 5
jb 0x491aed
push dword [ebp - 0x14]
mov edx, 0x41008c
mov ecx, edi
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.00416072
jmp 0x491aed
push 0
lea ecx, [ebp - 0x14]
call fcn.0041735f
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, eax
test ecx, ecx
jg 0x491aa8
mov ebx, ecx
mov dword [ebp - 0x1c], ecx
jmp 0x491ab4
movzx ebx, cx
or ebx, 0x80070000
mov dword [ebp - 0x1c], ebx
test ebx, ebx
js 0x491abf
mov dword [ebp - 0x1c], 0x80004005
mov eax, dword [0x4b70c8]
mov ebx, 0x4b70c8
cmp eax, ebx
je 0x491aed
test byte [eax + 0x1c], 2
je 0x491aed
cmp byte [eax + 0x19], 2
jb 0x491aed
push ecx
push dword [eax + 0x14]
mov edx, 0x41008c
push dword [eax + 0x10]
push 0x11
pop ecx
call fcn.0041610f
lea ecx, [ebp - 0x14]
call fcn.00435b1a
push 0x4b8970
lea ecx, [ebp - 0x10]
call fcn.00417475
mov edi, 0x105
mov byte [ebp - 4], 2
push edi
lea ecx, [ebp - 0x10]
call fcn.00417332
push edi
lea ecx, [ebp - 0x10]
mov esi, eax
call fcn.0041735f
push edi
push esi
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
mov esi, dword [ebp - 0x10]
test eax, eax
je 0x491b81
mov ecx, esi
call fcn.00417403
push eax
lea ecx, [ebp - 0x10]
call fcn.0041735f
push 0x5c
lea ecx, [ebp - 0x10]
call fcn.00416928
cmp eax, 0xffffffff
je 0x491b81
mov ecx, dword [esi - 0xc]
sub ecx, eax
lea eax, [ebp - 0x28]
dec ecx
push ecx
push eax
lea ecx, [ebp - 0x10]
call fcn.00456f06
push eax
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 3
call fcn.0041715f
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x28]
lea ecx, [ecx - 0x10]
call fcn.004174b0
mov esi, dword [ebp - 0x10]
push 0x4b8970
lea ecx, [ebp - 0x20]
call fcn.00417475
mov byte [ebp - 4], 4
lea eax, [ebp - 0x20]
push dword [ebp - 0x14]
push esi
push 0x410030
push eax
call fcn.0041a5a1
add esp, 0x10
mov eax, dword [0x4b70c8]
mov edi, dword [ebp - 0x20]
cmp eax, ebx
je 0x491bd3
test byte [eax + 0x1c], 2
je 0x491bd3
cmp byte [eax + 0x19], 5
jb 0x491bd3
push edi
push dword [eax + 0x14]
mov edx, 0x41008c
push dword [eax + 0x10]
push 0x12
pop ecx
call fcn.00416072
mov ebx, dword [ebp - 0x2c]
push edi
lea ecx, [ebx + 0x54]
call fcn.0043ba00
cmp dword [ebx + 0x54], 0
mov ebx, 0x8007000e
je 0x491bed
mov ebx, dword [ebp - 0x1c]
lea ecx, [edi - 0x10]
call fcn.004174b0
lea ecx, [esi - 0x10]
call fcn.004174b0
mov ecx, dword [ebp - 0x14]
lea ecx, [ecx - 0x10]
call fcn.004174b0
or dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x18]
test eax, eax
je 0x491c23
mov ecx, dword [eax]
push eax
mov esi, dword [ecx + 8]
mov ecx, esi
call dword [0x4bb544]
call esi
mov edx, dword [0x4b70c8]
cmp edx, 0x4b70c8
je 0x491c5e
test byte [edx + 0x1c], 1
je 0x491c5e
movzx eax, byte [edx + 0x19]
mov ecx, ebx
sar ecx, 0x1f
and ecx, 0xfffffffd
add ecx, 5
cmp eax, ecx
jl 0x491c5e
push ebx
push dword [edx + 0x14]
push dword [edx + 0x10]
mov edx, 0x41008c
push 0x13
pop ecx
call fcn.0041610f
mov eax, ebx
call fcn.004a953c
ret