Function at 0x1805ea3
Capabilities:
Get hostname

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
mov eax, 0x8228
call fcn.018089e0
mov eax, dword [0x18122e8]
push ebx
xor ebx, ebx
push esi
mov esi, dword [ebp + 0xc]
push edi
mov edx, 0xfff
mov dword [ebp - 4], eax
xor eax, eax
mov ecx, edx
mov dword [ebp - 0x820c], ebx
lea edi, [ebp - 0x8208]
rep stosd dword es:[edi], eax
mov ecx, edx
mov dword [ebp - 0x420c], ebx
lea edi, [ebp - 0x4208]
push ebx
rep stosd dword es:[edi], eax
mov dword [ebp - 0x821c], ebx
mov dword [ebp - 0x8220], ebx
mov dword [ebp - 0x8224], ebx
mov dword [ebp - 0x8228], ebx
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
cmp eax, ebx
mov dword [0x1813678], eax
jne 0x1805f28
push 0x1801578
push 0x1801570
call dword [sym.imp.msvcrt.dll_wprintf]
pop ecx
pop ecx
jmp 0x1806331
push 0x1801360
push 0x1801568
push 0x1813680
call dword [sym.imp.msvcrt.dll_swprintf]
add esp, 0xc
call fcn.01801c71
cmp eax, ebx
mov dword [ebp - 0x8218], eax
je 0x1805f56
xor eax, eax
jmp 0x18063a1
push 0x1801554
push 0x1801550
call fcn.0180447a
call fcn.01804723
xor edi, edi
inc edi
push edi
push 0x18069c1
call dword [sym.imp.KERNEL32.dll_SetConsoleCtrlHandler]
cmp dword [ebp + 8], edi
mov dword [ebp - 0x8210], edi
jbe 0x1806136
mov dword [ebp - 0x8214], 2
mov ebx, dword [ebp - 0x8210]
shl ebx, 2
lea edi, [ebx + esi]
push 0x18014c4
push dword [edi]
call dword [sym.imp.msvcrt.dll__wcsicmp]
test eax, eax
pop ecx
pop ecx
je 0x1806304
push 0x1801548
push dword [edi]
call dword [sym.imp.msvcrt.dll__wcsicmp]
test eax, eax
pop ecx
pop ecx
je 0x1806304
push 0x180124c
push dword [edi]
call dword [sym.imp.msvcrt.dll__wcsicmp]
test eax, eax
pop ecx
pop ecx
je 0x1806304
push 0x18014cc
push dword [edi]
call dword [sym.imp.msvcrt.dll__wcsicmp]
test eax, eax
pop ecx
pop ecx
je 0x1806304
push 0x1801540
push dword [edi]
call dword [sym.imp.msvcrt.dll__wcsicmp]
test eax, eax
pop ecx
pop ecx
jne 0x180601c
mov dword [0x1812318], 1
jmp 0x1806119
push 0x1801538
push dword [edi]
call dword [sym.imp.msvcrt.dll__wcsicmp]
test eax, eax
pop ecx
pop ecx
jne 0x180604d
mov eax, dword [ebp - 0x8214]
cmp eax, dword [ebp + 8]
jae 0x18062e3
mov eax, dword [ebx + esi + 4]
mov dword [ebp - 0x8224], eax
jmp 0x180610d
push 0x1801530
push dword [edi]
call dword [sym.imp.msvcrt.dll__wcsicmp]
test eax, eax
pop ecx
pop ecx
jne 0x1806087
mov eax, dword [ebp - 0x8214]
cmp eax, dword [ebp + 8]
jae 0x18062e3
push dword [ebx + esi + 4]
lea eax, [ebp - 0x420c]
push eax
call dword [sym.imp.msvcrt.dll_wcscpy]
pop ecx
pop ecx
jmp 0x180610d
push 0x1801528
push dword [edi]
call dword [sym.imp.msvcrt.dll__wcsicmp]
test eax, eax
pop ecx
pop ecx
jne 0x18060bf
mov eax, dword [ebp - 0x8214]
cmp eax, dword [ebp + 8]
jae 0x18062e3
mov eax, dword [ebx + esi + 4]
mov dword [ebp - 0x8228], eax
mov dword [ebp - 0x821c], 1
jmp 0x180610d
push 0x1801520
push dword [edi]
call dword [sym.imp.msvcrt.dll__wcsicmp]
test eax, eax
pop ecx
pop ecx
jne 0x180623a
mov eax, dword [ebp - 0x8214]
cmp eax, dword [ebp + 8]
jae 0x18062e3
lea ebx, [ebx + esi + 4]
push dword [ebx]
call dword [sym.imp.msvcrt.dll_wcslen]
test eax, eax
pop ecx
je 0x180610d
push dword [ebx]
call fcn.01805db8
mov edi, eax
test edi, edi
mov dword [ebp - 0x8218], edi
jne 0x1806225
inc dword [ebp - 0x8210]
inc dword [ebp - 0x8214]
inc dword [ebp - 0x8210]
mov eax, dword [ebp - 0x8210]
inc dword [ebp - 0x8214]
cmp eax, dword [ebp + 8]
jb 0x1805f92
xor ebx, ebx
cmp dword [0x1812314], ebx
jne 0x1806194
push ebx
call fcn.018081b3
mov esi, eax
cmp esi, ebx
jge 0x1806194
mov eax, dword [0x1812314]
cmp eax, ebx
jne 0x1806177
lea eax, [ebp - 0x821c]
push eax
lea eax, [ebp - 0x20c]
push eax
mov dword [ebp - 0x821c], 0x104
call dword [sym.imp.KERNEL32.dll_GetComputerNameW]
lea eax, [ebp - 0x20c]
push eax
push 0xb4
push dword [0x1813678]
call sym.NETSH.EXE_PrintMessageFromModule
add esp, 0xc
push esi
push ebx
call sym.NETSH.EXE_PrintError
pop ecx
pop ecx
cmp dword [ebp - 0x8218], ebx
jne 0x1806369
cmp dword [ebp - 0x8224], ebx
je 0x18061c1
push dword [ebp - 0x8224]
call fcn.01805d2b
cmp eax, ebx
mov dword [ebp - 0x8218], eax
jne 0x1806369
xor esi, esi
inc esi
cmp word [ebp - 0x420c], bx
je 0x18061fa
lea eax, [ebp - 0x8220]
push eax
lea eax, [ebp - 0x420c]
push eax
mov dword [0x181231c], esi
call fcn.018054c6
cmp eax, ebx
mov dword [ebp - 0x8218], eax
mov dword [0x181231c], ebx
jne 0x1806369
cmp word [ebp - 0x820c], bx
je 0x1806336
lea eax, [ebp - 0x8220]
push eax
lea eax, [ebp - 0x820c]
push eax
mov dword [0x1812028], ebx
call fcn.018054c6
jmp 0x1806363
push edi
push dword [0x1813678]
call sym.NETSH.EXE_PrintMessageFromModule
pop ecx
pop ecx
mov eax, edi
jmp 0x18063a1
cmp dword [ebp - 0x821c], 0
jne 0x18062e3
mov ebx, dword [ebp - 0x8210]
cmp ebx, dword [ebp + 8]
jae 0x1806134
mov edi, dword [sym.imp.msvcrt.dll_wcscat]
jmp 0x1806264
mov ebx, dword [ebp - 0x8210]
cmp word [ebp - 0x820c], 0
je 0x180627e
lea eax, [ebp - 0x820c]
push 0x18012cc
push eax
call edi
pop ecx
pop ecx
mov ebx, dword [esi + ebx*4]
cmp word [ebx], 0
je 0x18062a4
push 0x20
push ebx
call dword [sym.imp.msvcrt.dll_wcschr]
test eax, eax
pop ecx
pop ecx
jne 0x18062a4
lea eax, [ebp - 0x820c]
push ebx
push eax
call edi
pop ecx
pop ecx
jmp 0x18062cd
lea eax, [ebp - 0x820c]
push 0x18014d4
push eax
call edi
lea eax, [ebp - 0x820c]
push ebx
push eax
call edi
lea eax, [ebp - 0x820c]
push 0x18014d4
push eax
call edi
add esp, 0x18
inc dword [ebp - 0x8210]
mov eax, dword [ebp - 0x8210]
cmp eax, dword [ebp + 8]
jb 0x180625e
jmp 0x1806134
push dword [esi]
push 0x6e
push dword [0x1813678]
call sym.NETSH.EXE_PrintMessageFromModule
add esp, 0xc
mov dword [ebp - 0x8218], 0x3a99
jmp 0x1806134
push dword [esi]
push 0x6e
push dword [0x1813678]
call sym.NETSH.EXE_PrintMessageFromModule
add esp, 0xc
lea eax, [ebp - 0x8220]
push eax
push 0x180124c
call fcn.018054c6
call fcn.0180303a
call fcn.01803086
xor eax, eax
inc eax
jmp 0x18063a1
cmp dword [ebp - 0x8228], ebx
mov dword [0x181231c], esi
je 0x1806351
push dword [ebp - 0x8228]
call fcn.01805d2b
jmp 0x1806363
push esi
push dword [sym.imp.msvcrt.dll__iob]
mov dword [0x1812028], ebx
call fcn.01805bdc
mov dword [ebp - 0x8218], eax
call fcn.0180303a
call fcn.01803086
call fcn.01801c10
mov eax, dword [0x1812314]
cmp eax, ebx
je 0x1806396
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
push eax
call dword [sym.imp.KERNEL32.dll_HeapFree]
mov dword [0x1812314], ebx
xor eax, eax
cmp dword [ebp - 0x8218], ebx
setne al
mov ecx, dword [ebp - 4]
pop edi
pop esi
pop ebx
call fcn.01808747
leave
ret 8