Function at 0x100835b
Capabilities:
Get hostname
Open clipboard

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x240
mov eax, dword [0x10133a4]
push ebx
push esi
mov esi, dword [ebp + 8]
mov dword [ebp - 4], eax
mov eax, dword [0x1013b7c]
push edi
xor edi, edi
mov dword [ebp - 0x22c], esi
xor ebx, ebx
mov dword [ebp - 0x238], edi
mov dword [ebp - 0x23c], eax
call dword [sym.imp.USER32.dll_CountClipboardFormats]
test eax, eax
jne 0x10083a9
push 0x1001e48
call fcn.0100eda2
pop ecx
jmp 0x1008b0a
mov eax, dword [0x10134fc]
cmp eax, edi
je 0x1008ada
push eax
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x1008ada
cmp dword [0x10134f4], edi
je 0x1008b0a
mov eax, dword [0x10134fc]
cmp eax, edi
je 0x10083ec
push edi
push eax
call dword [sym.imp.USER32.dll_GetWindowLongA]
mov esi, eax
mov dword [ebp - 0x234], esi
jmp 0x10083f4
mov dword [ebp - 0x234], edi
mov esi, edi
cmp dword [ebp + 0x18], edi
push edi
push edi
je 0x1008556
mov eax, dword [0x10134f4]
push 0x18b
push dword [eax + 0x14]
call dword [sym.imp.USER32.dll_SendMessageA]
cmp eax, 0x7f
jl 0x1008433
push 0x30
push 0x2f
push 0x34
push dword [ebp - 0x22c]
push dword [0x1013b74]
call fcn.0100ac39
jmp 0x1008b0a
lea eax, [ebp - 0x224]
push eax
push 0x100cc38
push dword [ebp - 0x22c]
mov byte [ebp - 0x21c], 0
push 0x12c
push dword [0x1013b74]
mov dword [ebp - 0x224], edi
mov dword [ebp - 0x220], edi
mov dword [0x10134ec], edi
call dword [sym.imp.USER32.dll_DialogBoxParamA]
mov ebx, eax
push ebx
push 0x1001e2c
call fcn.0100eda2
pop ecx
pop ecx
push dword [0x1013ba4]
mov dword [0x10134ec], edi
call dword [sym.imp.USER32.dll_UpdateWindow]
cmp ebx, edi
je 0x1008b0a
cmp byte [ebp - 0x21c], 0
je 0x1008b0a
cmp dword [ebp - 0x224], edi
mov eax, dword [0x1013b7c]
mov dword [ebp - 0x23c], eax
je 0x100852b
lea eax, [ebp - 0x21c]
push eax
push 0xffffffffffffffff
push 0x18f
push dword [esi + 0x14]
call dword [sym.imp.USER32.dll_SendMessageA]
cmp eax, 0xffffffff
je 0x1008b0a
lea ecx, [ebp - 0x228]
push ecx
push eax
push 0x189
push dword [esi + 0x14]
call dword [sym.imp.USER32.dll_SendMessageA]
mov ecx, dword [ebp - 0x228]
lea eax, [ebp - 0x21c]
sub eax, ecx
mov dl, byte [ecx]
mov byte [eax + ecx], dl
inc ecx
test dl, dl
jne 0x10084fc
push dword [ebp - 0x228]
call fcn.0100aa98
cmp dword [ebp + 0x18], edi
mov dword [ebp - 0x220], eax
mov dword [ebp - 0x224], 1
jne 0x100852b
mov dword [0x1013b7c], eax
push 0x800
push 0x42
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
push eax
call dword [sym.imp.KERNEL32.dll_GlobalLock]
mov ebx, eax
cmp ebx, edi
jne 0x1008560
push 0x10
push 0x16
push 0x1a
push dword [ebp - 0x22c]
jmp 0x1008ae1
push 0x188
jmp 0x10084c6
push 0x7f02
push edi
call dword [sym.imp.USER32.dll_LoadCursorA]
push eax
call dword [sym.imp.USER32.dll_SetCursor]
mov dword [ebp - 0x238], eax
lea eax, [ebp - 0x240]
push eax
lea eax, [ebp - 0x16]
push eax
mov byte [ebp - 0x18], 0x5c
mov byte [ebp - 0x17], 0x5c
mov dword [ebp - 0x240], 0x10
call dword [sym.imp.KERNEL32.dll_GetComputerNameA]
cmp dword [ebp - 0x224], edi
lea esi, [ebx + 0x30]
je 0x10085dd
cmp dword [ebp - 0x220], edi
je 0x10085dd
lea eax, [ebp - 0x228]
push eax
lea eax, [ebp - 0x230]
push eax
push 0x800
push ebx
push 2
lea eax, [ebp - 0x21c]
push eax
lea eax, [ebp - 0x18]
push eax
mov dword [ebp - 0x228], edi
call sub.NDdeApi.dll_Ordinal_503
jmp 0x10085ff
xor eax, eax
inc eax
mov dword [ebx], eax
mov dword [ebx + 0x10], edi
mov dword [ebx + 0x14], eax
mov dword [ebx + 0x18], edi
mov dword [ebx + 0x20], edi
mov dword [ebx + 0x24], edi
mov dword [ebx + 0x1c], 7
mov dword [ebx + 8], 4
mov dword [ebx + 4], esi
lea eax, [ebp - 0x21b]
push eax
mov byte [esi], 0x24
mov eax, dword [ebx + 4]
inc eax
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
push dword [ebx + 4]
mov edi, dword [sym.imp.KERNEL32.dll_lstrlenA]
call edi
push dword [ebp - 0x22c]
lea esi, [esi + eax + 1]
mov dword [ebx + 0xc], esi
mov byte [ebp - 0x118], 0
call dword [sym.imp.USER32.dll_OpenClipboard]
test eax, eax
je 0x10087aa
push dword [0x1014180]
push 0
call fcn.0100d0dc
test eax, eax
je 0x10086ef
push eax
call dword [sym.imp.KERNEL32.dll_GlobalLock]
test eax, eax
mov dword [ebp - 0x230], eax
je 0x10086ef
push 0x1001e1c
call fcn.0100eda2
pop ecx
push dword [ebp - 0x230]
push esi
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
push esi
call edi
mov ecx, dword [ebp - 0x230]
add esi, eax
mov dword [ebp - 0x228], eax
lea eax, [eax + ecx + 1]
mov byte [esi], 0x7c
push eax
inc esi
push esi
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
push esi
call edi
mov ecx, dword [ebp - 0x228]
lea eax, [ecx + eax + 2]
push esi
mov dword [ebp - 0x228], eax
call edi
mov ecx, dword [ebp - 0x230]
lea esi, [esi + eax + 1]
mov eax, dword [ebp - 0x228]
add eax, ecx
push eax
lea eax, [ebp - 0x118]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
push dword [ebp - 0x230]
call dword [sym.imp.KERNEL32.dll_GlobalUnlock]
or dword [ebx + 8], 1
jmp 0x10086f3
mov byte [esi], 0
inc esi
push dword [0x1013b00]
push 0
call fcn.0100d0dc
test eax, eax
je 0x100879e
push eax
call dword [sym.imp.KERNEL32.dll_GlobalLock]
test eax, eax
mov dword [ebp - 0x230], eax
je 0x100879e
push 0x1001e08
call fcn.0100eda2
pop ecx
push dword [ebp - 0x230]
push esi
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
push esi
call edi
mov ecx, dword [ebp - 0x230]
add esi, eax
mov dword [ebp - 0x228], eax
lea eax, [eax + ecx + 1]
mov byte [esi], 0x7c
push eax
inc esi
push esi
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
push esi
call edi
mov ecx, dword [ebp - 0x228]
lea eax, [ecx + eax + 2]
push esi
mov dword [ebp - 0x228], eax
call edi
mov ecx, dword [ebp - 0x230]
lea esi, [esi + eax + 1]
mov eax, dword [ebp - 0x228]
add eax, ecx
push eax
lea eax, [ebp - 0x118]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
push dword [ebp - 0x230]
call dword [sym.imp.KERNEL32.dll_GlobalUnlock]
or dword [ebx + 8], 2
jmp 0x10087a2
mov byte [esi], 0
inc esi
call dword [sym.imp.USER32.dll_CloseClipboard]
jmp 0x10087b2
mov byte [esi], 0
inc esi
mov byte [esi], 0
inc esi
push 0x1001e00
push esi
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
push 0x1001dfc
push esi
call dword [sym.imp.KERNEL32.dll_lstrcatA]
push esi
call edi
add esi, eax
cmp dword [ebp - 0x220], 0
sete al
dec al
and al, 0xfa
add al, 0x2a
mov byte [esi], al
lea eax, [ebp - 0x21b]
push eax
lea eax, [esi + 1]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
push esi
call edi
lea esi, [esi + eax + 1]
mov byte [esi], 0
lea eax, [ebp - 0x118]
inc esi
push eax
mov dword [ebx + 0x2c], esi
call edi
test eax, eax
je 0x100882b
lea eax, [ebp - 0x118]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
push esi
call edi
lea esi, [esi + eax + 1]
mov dword [ebx + 0x28], 1
jmp 0x1008833
and dword [ebx + 0x28], 0
mov byte [esi], 0
inc esi
xor eax, eax
mov byte [esi], 0
cmp dword [ebp - 0x224], eax
jne 0x10089c4
push 0x30
push ebx
push eax
push 2
lea eax, [ebp - 0x18]
push eax
call sub.NDdeApi.dll_Ordinal_500
mov esi, eax
push esi
push 0x1001de4
call fcn.0100eda2
test esi, esi
pop ecx
pop ecx
je 0x10088b3
cmp esi, 0xf
je 0x10088b3
cmp esi, 1
jne 0x100888e
push 0x10
push 0x16
push 0x35
push dword [ebp - 0x22c]
push dword [0x1013b74]
call fcn.0100ac39
xor edi, edi
jmp 0x1008aec
push esi
push 0x1001dd4
call fcn.0100eda2
pop ecx
pop ecx
push 0x10
push 0x16
push esi
push dword [ebp - 0x22c]
push dword [0x1013b74]
call fcn.0100ac91
jmp 0x1008887
push 0x40000000
push dword [ebx + 4]
lea eax, [ebp - 0x18]
push eax
call sub.NDdeApi.dll_Ordinal_512
test eax, eax
je 0x10088de
push 0x10
push 0x16
push eax
push dword [ebp - 0x22c]
push dword [0x1013b74]
call fcn.0100ac91
push 0
push dword [ebp - 0x22c]
call fcn.0100aae1
lea eax, [ebp - 0x21c]
push eax
push 0x1001dcc
mov esi, 0x1013860
push esi
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcatA]
push dword [0x10134fc]
call fcn.0100c65b
mov eax, dword [ebp - 0x234]
push 0
push 0xea60
push 0x4050
push 1
push 0
push dword [eax]
push esi
call edi
inc eax
push eax
push esi
call fcn.0100bb50
test eax, eax
jne 0x10089e8
push 0x10
push 0x16
push dword [ebp - 0x22c]
push dword [0x1013b74]
call fcn.0100b2f8
cmp dword [ebp - 0x224], 0
jne 0x10089e8
lea eax, [ebp - 0x21c]
push eax
push 0x1001b58
push 0x1001b50
push esi
call dword [sym.imp.USER32.dll_wsprintfA]
mov eax, dword [ebp - 0x234]
add esp, 0x10
push 0
push 0x5dc0
push 0x4050
push 1
push 0
push dword [eax]
push esi
call edi
inc eax
push eax
push esi
call fcn.0100bb50
push 0x20000000
push dword [ebx + 4]
lea eax, [ebp - 0x18]
push eax
call sub.NDdeApi.dll_Ordinal_512
push 0
push dword [ebx + 4]
lea eax, [ebp - 0x18]
push eax
call sub.NDdeApi.dll_Ordinal_501
jmp 0x1008887
push eax
push 0x30
push ebx
push 2
push dword [ebx + 4]
lea eax, [ebp - 0x18]
push eax
call sub.NDdeApi.dll_Ordinal_504
test eax, eax
je 0x10088de
push 0x10
push 0x16
push eax
jmp 0x10088a0
mov esi, dword [ebp - 0x234]
mov edi, dword [sym.imp.USER32.dll_SendMessageA]
push 0
push 0
push 0xb
push dword [esi + 0x14]
call edi
cmp dword [ebp - 0x224], 0
jne 0x1008a57
push 0x110
push 0x42
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
push eax
call dword [sym.imp.KERNEL32.dll_GlobalLock]
test eax, eax
mov dword [ebp - 0x234], eax
je 0x1008a57
and dword [eax + 0x10c], 0
lea ecx, [ebp - 0x21c]
push ecx
push eax
mov dword [eax + 0x108], 1
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
push dword [ebp - 0x234]
push 0
push 0x180
push dword [esi + 0x14]
call edi
mov eax, dword [0x1013b7c]
cmp eax, dword [ebp - 0x220]
je 0x1008ab0
lea eax, [ebp - 0x21c]
push eax
push 0xffffffffffffffff
push 0x18f
push dword [esi + 0x14]
call edi
cmp eax, 0xffffffff
je 0x1008ab0
cmp dword [0x1013b7c], 0
je 0x1008aaa
lea ecx, [ebp - 0x234]
push ecx
push eax
push 0x189
push dword [esi + 0x14]
call edi
push dword [ebp - 0x234]
push dword [ebp - 0x22c]
call fcn.0100e17a
jmp 0x1008ab0
push eax
call fcn.01007f29
push 0
push 1
push 0xb
push dword [esi + 0x14]
call edi
push dword [esi]
push dword [0x10134fc]
call fcn.0100c30c
push 0
push 0
push dword [esi + 0x14]
call dword [sym.imp.USER32.dll_InvalidateRect]
jmp 0x1008887
push 0x10
push 0x16
push 0x37
push esi
push dword [0x1013b74]
call fcn.0100ac39
cmp ebx, edi
je 0x1008b0a
mov esi, dword [sym.imp.KERNEL32.dll_GlobalHandle]
push ebx
call esi
push eax
call dword [sym.imp.KERNEL32.dll_GlobalUnlock]
push ebx
call esi
push eax
call dword [sym.imp.KERNEL32.dll_GlobalFree]
push dword [0x1013ba4]
call dword [sym.imp.USER32.dll_GetMenu]
push eax
call fcn.0100e6e1
cmp dword [ebp - 0x238], edi
pop edi
pop esi
pop ebx
je 0x1008b33
push dword [ebp - 0x238]
call dword [sym.imp.USER32.dll_SetCursor]
mov eax, dword [ebp - 0x23c]
mov ecx, dword [ebp - 4]
mov dword [0x1013b7c], eax
xor eax, eax
call fcn.0100ec8a
leave
ret 0x14