Function at 0x1000c0de
Capabilities:
Get hostname

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1f4
mov eax, dword [0x1023d420]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 0x10]
push ebx
mov ebx, dword [ebp + 8]
push edi
mov edi, dword [ebp + 0x14]
mov dword [ebp - 0x1f0], ebx
mov dword [ebp - 0x1e8], eax
mov dword [ebp - 0x1f4], edi
test ebx, ebx
je 0x1000c383
push esi
mov esi, dword [ebp + 0xc]
test esi, esi
jle 0x1000c382
lea eax, [esi + esi]
push eax
push 0
push ebx
call fcn.100947e0
add esp, 0xc
call fcn.10007d86
mov dword [edi], eax
xor eax, eax
cmp word [0x10254898], ax
je 0x1000c191
lea eax, [esi - 1]
cmp eax, 0x28
jl 0x1000c14e
push 0x27
pop eax
push eax
mov esi, 0x10254898
push esi
push ebx
call fcn.10094d7c
movzx eax, word [0x10254890]
mov ecx, dword [ebp - 0x1e8]
mov dword [ecx], eax
push dword [edi]
push eax
push esi
push 0x10254840
push str.GetUserInfo_Self___s____s____d____d_
push str.UserInfo
push 0xffffffffffffffff
push 0x1025cd9c
call fcn.10023e79
add esp, 0x2c
jmp 0x1000c382
mov edi, 0x10254840
cmp word [0x10254840], ax
jne 0x1000c1e7
push 0x50
push eax
push edi
call fcn.100947e0
xor eax, eax
push 0x4e
push eax
mov word [ebp - 0x54], ax
lea eax, [ebp - 0x52]
push eax
call fcn.100947e0
add esp, 0x18
push 0x28
pop esi
lea eax, [ebp - 0x1e8]
push eax
lea eax, [ebp - 0x54]
push eax
mov dword [ebp - 0x1e8], esi
call dword [sym.imp.KERNEL32.dll_GetComputerNameW]
push esi
push edi
lea eax, [ebp - 0x54]
push 0xffffffffffffffff
push eax
call fcn.1001aec0
add esp, 0x10
mov esi, 0x10254898
push esi
push edi
push str.GetUserInfo_Self___s____s_
push str.UserInfo
push 0xffffffffffffffff
mov ebx, 0x1025cd9c
push ebx
call fcn.10023e79
xor eax, eax
push 0xc6
push eax
mov word [ebp - 0x1e4], ax
lea eax, [ebp - 0x1e2]
push eax
call fcn.100947e0
xor eax, eax
push 0xc6
push eax
mov word [ebp - 0x11c], ax
lea eax, [ebp - 0x11a]
push eax
call fcn.100947e0
lea eax, [ebp - 0x1e4]
push 0x64
push eax
call fcn.10009497
add esp, 0x38
test eax, eax
je 0x1000c382
push 0x64
lea eax, [ebp - 0x11c]
push eax
lea eax, [ebp - 0x1e4]
push 0xffffffffffffffff
push eax
call fcn.1001aec0
lea eax, [ebp - 0x11c]
push eax
push str.GetUserInfo_Self_1___s_
push str.UserInfo
push 0xffffffffffffffff
push ebx
call fcn.10023e79
lea eax, [ebp - 0x11c]
push 0x5c
push eax
call fcn.10094de0
add esp, 0x2c
mov dword [ebp - 0x1ec], eax
test eax, eax
je 0x1000c30d
lea ecx, [ebp - 0x11c]
sub eax, ecx
sar eax, 1
push edi
mov dword [ebp - 0x1e8], eax
call fcn.10094dc6
pop ecx
cmp eax, dword [ebp - 0x1e8]
jne 0x1000c30d
push dword [ebp - 0x1e8]
lea eax, [ebp - 0x11c]
push eax
push edi
call fcn.100959d3
add esp, 0xc
test eax, eax
jne 0x1000c30d
add dword [ebp - 0x1ec], 2
push dword [ebp - 0x1ec]
call fcn.10094dc6
lea edi, [eax + eax]
push edi
push dword [ebp - 0x1ec]
lea eax, [ebp - 0x11c]
push eax
call fcn.10096380
add esp, 0x10
xor eax, eax
mov word [ebp + edi - 0x11c], ax
push 0x27
lea eax, [ebp - 0x11c]
push eax
push esi
call fcn.10094d7c
mov eax, dword [ebp + 0xc]
dec eax
push eax
push esi
push dword [ebp - 0x1f0]
call fcn.10094d7c
add esp, 0x18
cmp word [0x10254898], 0
je 0x1000c357
push 0x101ddd04
push esi
call fcn.10095100
pop ecx
pop ecx
test eax, eax
jne 0x1000c34e
inc eax
jmp 0x1000c351
push 2
pop eax
mov word [0x10254890], ax
mov eax, dword [ebp - 0x1f4]
push dword [eax]
movzx eax, word [0x10254890]
push eax
push dword [ebp - 0x1f0]
push str.GetUserInfo_Self_1___s____d____d_
push str.UserInfo
push 0xffffffffffffffff
push ebx
call fcn.10023e79
add esp, 0x1c
pop esi
mov ecx, dword [ebp - 4]
pop edi
xor ecx, ebp
pop ebx
call fcn.100946c1
leave
ret