Function at 0x101182e
Capabilities:
Get hostname

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x31c
mov eax, dword [0x1076530]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
mov edi, dword [ebp + 8]
push 1
push 0x114
push 0x100261c
lea ecx, [ebp - 0x234]
call fcn.01055826
xor esi, esi
push 0xa4
lea eax, [ebp - 0x318]
push esi
push eax
xor ebx, ebx
mov dword [ebp - 0x210], esi
mov dword [ebp - 0x31c], esi
call sub.msvcrt.dll_memset
xor eax, eax
push 0x206
mov word [ebp - 0x20c], ax
lea eax, [ebp - 0x20a]
push esi
push eax
call sub.msvcrt.dll_memset
mov eax, 0x1010420
add esp, 0x18
mov dword [ebp - 0x24c], eax
mov dword [ebp - 0x274], eax
mov dword [ebp - 0x258], eax
mov dword [ebp - 0x268], eax
mov dword [ebp - 0x240], eax
mov dword [ebp - 0x25c], 0x104
mov dword [ebp - 0x248], esi
mov dword [ebp - 0x244], esi
mov dword [ebp - 0x270], esi
mov dword [ebp - 0x26c], esi
mov dword [ebp - 0x254], esi
mov dword [ebp - 0x250], esi
mov dword [ebp - 0x264], esi
mov dword [ebp - 0x260], esi
mov dword [ebp - 0x23c], esi
mov dword [ebp - 0x238], esi
mov eax, 0x123
cmp edi, esi
jne 0x1011928
mov dword [ebp - 0x234], 0x80070057
mov word [ebp - 0x22e], ax
jmp 0x1011ace
mov word [ebp - 0x230], ax
lea eax, [ebp - 0x210]
push eax
push 0x100ec84
push 1
push esi
push 0x100ecb4
mov dword [ebp - 0x234], esi
call dword [sym.imp.ole32.dll_CoCreateInstance]
mov dword [ebp - 0x234], eax
cmp eax, esi
mov eax, 0x129
jl 0x101191c
mov word [ebp - 0x230], ax
mov eax, dword [ebp - 0x210]
mov ecx, dword [eax]
lea edx, [ebp - 0x31c]
push edx
push eax
call dword [ecx + 0xc]
cmp eax, 1
je 0x1011acc
cmp eax, 0x80070002
je 0x1011acc
cmp eax, 0x81000029
je 0x1011acc
cmp eax, 0x8100002d
je 0x1011acc
mov dword [ebp - 0x234], eax
cmp eax, esi
mov eax, 0x138
jl 0x101191c
mov word [ebp - 0x230], ax
lea eax, [ebp - 0x258]
push eax
push dword [ebp - 0x300]
call fcn.01011689
test eax, eax
jge 0x10119e9
mov eax, 0x13e
mov dword [ebp - 0x234], esi
mov word [ebp - 0x230], ax
jmp 0x1011ace
lea eax, [ebp - 0x25c]
push eax
lea eax, [ebp - 0x20c]
push eax
call dword [sym.imp.KERNEL32.dll_GetComputerNameW]
test eax, eax
jne 0x1011a16
call fcn.0105d3b8
mov dword [ebp - 0x234], eax
mov eax, 0x140
jmp 0x101191c
mov edx, dword [ebp - 0x258]
push esi
push esi
push esi
push esi
push esi
push esi
mov eax, 0x140
push esi
mov word [ebp - 0x230], ax
push esi
lea eax, [ebp - 0x20c]
push eax
lea ecx, [ebp - 0x24c]
mov dword [ebp - 0x234], esi
call fcn.01064650
mov dword [ebp - 0x234], eax
cmp eax, esi
mov eax, 0x142
jl 0x101191c
mov edx, edi
lea ecx, [ebp - 0x240]
mov word [ebp - 0x230], ax
call fcn.0106470b
mov dword [ebp - 0x234], eax
cmp eax, esi
mov eax, 0x144
jl 0x101191c
mov word [ebp - 0x230], ax
lea eax, [ebp - 0x240]
push eax
call fcn.01056a10
mov dword [ebp - 0x234], eax
cmp eax, esi
mov eax, 0x146
jl 0x101191c
push dword [ebp - 0x240]
mov word [ebp - 0x230], ax
push dword [ebp - 0x24c]
call dword [sym.imp.msvcrt.dll__wcsicmp]
mov ebx, eax
neg ebx
pop ecx
sbb ebx, ebx
pop ecx
inc ebx
jmp 0x1011ace
xor ebx, ebx
push ebx
call fcn.010114d2
lea eax, [ebp - 0x31c]
push eax
call fcn.01056080
mov edi, dword [ebp - 0x234]
lea ecx, [ebp - 0x240]
call fcn.010635b3
lea ecx, [ebp - 0x268]
call fcn.010635b3
lea ecx, [ebp - 0x258]
call fcn.010635b3
lea ecx, [ebp - 0x274]
call fcn.010635b3
lea ecx, [ebp - 0x24c]
call fcn.010635b3
mov eax, dword [ebp - 0x210]
cmp eax, esi
je 0x1011b2d
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
lea ecx, [ebp - 0x234]
call fcn.01055a3c
mov ecx, dword [ebp - 4]
mov eax, edi
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.01054fa7
leave
ret 4