Function at 0x10195fb
Capabilities:
Get hostname

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x868
mov eax, dword [0x1020128]
push ebx
mov dword [ebp - 4], eax
mov eax, dword [ebp + 8]
push edi
xor ebx, ebx
push 0x2000
mov dword [ebp - 0x860], eax
mov dword [ebp - 0x864], ebx
call sub.msvcrt.dll_malloc
mov edi, eax
cmp edi, ebx
pop ecx
mov dword [ebp - 0x85c], edi
jne 0x101964a
push 0x1005d88
call fcn.01019ff1
pop ecx
xor eax, eax
jmp 0x1019a22
push esi
push 0x1005d5c
mov word [edi], bx
call fcn.01019fbd
test byte [ebp + 0x10], 2
pop ecx
je 0x1019679
push 6
pop esi
cmp dword [ebp + 0x10], esi
je 0x1019679
push dword [ebp + 0x10]
push 0x1005ca8
call fcn.01019fd7
pop ecx
pop ecx
mov dword [ebp + 0x10], esi
cmp dword [0x1020af0], ebx
je 0x1019844
mov eax, dword [0x1020b10]
cmp eax, ebx
je 0x1019844
cmp dword [0x1020afc], ebx
je 0x10197dd
xor ecx, ecx
cmp dword [ecx*4 + 0x1020be0], ebx
jne 0x10196b7
inc ecx
cmp ecx, 0x100
jb 0x10196a0
jmp 0x1019844
push 1
lea edx, [ebp - 0x18]
lea esi, [ecx*4 + 0x1020be0]
mov ebx, dword [esi]
push edx
mov dword [ebp - 0x18], 0x14
mov ecx, dword [eax]
push eax
call dword [ecx + 0x14]
and dword [ebp - 0x854], 0
cmp dword [ebx], 0
jle 0x1019844
lea eax, [ebx + 4]
mov dword [ebp - 0x858], eax
xor eax, eax
push 0
push 0
lea edi, [ebp - 0x84c]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
lea edx, [ebp - 0x868]
push edx
stosd dword es:[edi], eax
lea edx, [ebp - 0x850]
push edx
lea edx, [ebp - 0x84c]
push edx
mov edx, dword [ebp - 0x858]
stosd dword es:[edi], eax
mov eax, dword [0x1020b10]
mov dword [ebp - 0x850], 0x10
push dword [edx]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x1c]
mov edi, eax
test edi, edi
jne 0x101979f
cmp dword [ebp - 0x850], eax
je 0x101979f
push dword [ebp - 0x84a]
call dword [sym.imp.WS2_32.dll_ntohs]
movzx eax, ax
push eax
movzx eax, byte [ebp - 0x845]
push eax
movzx eax, byte [ebp - 0x846]
push eax
movzx eax, byte [ebp - 0x847]
push eax
movzx eax, byte [ebp - 0x848]
push eax
lea eax, [ebp - 0x64]
push 0x1005c84
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
lea eax, [ebp - 0x64]
push eax
push dword [ebp - 0x85c]
call sub.ntdll.dll_wcscat
lea eax, [ebp - 0x64]
push eax
push dword [esi]
push 0x1005c40
call fcn.01019fa3
add esp, 0x30
jmp 0x10197ba
push dword [ebp - 0x850]
push dword [esi]
push 0x1005320
call fcn.01019fd7
add esp, 0xc
push edi
call fcn.010182d7
inc dword [ebp - 0x854]
mov eax, dword [ebp - 0x854]
add dword [ebp - 0x858], 4
cmp eax, dword [ebx]
jl 0x10196ec
mov edi, dword [ebp - 0x85c]
jmp 0x1019844
mov eax, dword [0x1020b78]
cmp eax, ebx
je 0x1019844
mov dword [ebp - 0x864], 1
mov ebx, dword [eax + 0x14]
mov esi, dword [eax]
movzx eax, word [eax + 0x18]
push eax
mov dword [ebp - 0x854], ebx
call dword [sym.imp.WS2_32.dll_ntohs]
movzx eax, ax
push eax
movzx eax, byte [ebp - 0x851]
push eax
movzx eax, byte [ebp - 0x852]
push eax
movzx eax, bh
push eax
movzx eax, bl
push eax
lea eax, [ebp - 0x64]
push 0x1005c84
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
lea eax, [ebp - 0x64]
push eax
push edi
call sub.ntdll.dll_wcscat
add esp, 0x24
test esi, esi
mov eax, esi
jne 0x10197f0
push edi
call sub.msvcrt.dll_wcslen
pop ecx
push dword [0x1020b94]
mov ecx, 0x1000
sub ecx, eax
lea ebx, [edi + eax*2]
push ecx
push ebx
mov dword [ebp - 0x858], eax
call fcn.0101a0c4
test byte [ebp + 0x10], 1
je 0x1019914
mov esi, dword [sym.imp.KERNEL32.dll_GetComputerNameExW]
and dword [ebp - 0x850], 0
lea eax, [ebp - 0x850]
push eax
push 0
push 7
call esi
inc dword [ebp - 0x850]
mov eax, dword [ebp - 0x850]
add eax, eax
push eax
call sub.msvcrt.dll_malloc
test eax, eax
pop ecx
mov dword [ebp - 0x854], eax
je 0x1019914
and word [eax], 0
lea ecx, [ebp - 0x850]
push ecx
push eax
push 7
call esi
test eax, eax
je 0x1019908
mov eax, dword [ebp - 0x850]
mov ecx, dword [ebp - 0x858]
add eax, ecx
cmp eax, 0xffc
jae 0x10198e2
push dword [ebp - 0x854]
push edi
call sub.ntdll.dll_wcscat
pop ecx
pop ecx
mov eax, dword [0x1020b94]
test eax, eax
je 0x1019908
push eax
lea eax, [ebp - 0x24]
push 0x1005aa8
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
lea eax, [ebp - 0x24]
push eax
push edi
call sub.ntdll.dll_wcscat
add esp, 0x14
push dword [ebp - 0x854]
call sub.msvcrt.dll_free
pop ecx
test byte [ebp + 0x10], 4
jne 0x10199a2
xor esi, esi
cmp dword [ebp - 0x864], esi
je 0x10199a2
push edi
push 0x1005c08
call fcn.01019fa3
xor edx, edx
mov dx, word [ebx]
test dx, dx
pop ecx
pop ecx
je 0x101995d
lea ecx, [ebp - 0x6c]
mov eax, ebx
sub ecx, ebx
cmp dx, 0x3b
je 0x101995d
mov word [ecx + eax], dx
inc esi
inc eax
inc eax
xor edx, edx
mov dx, word [eax]
test dx, dx
jne 0x1019946
lea eax, [esi + esi]
and word [ebp + eax - 0x6c], 0
lea eax, [eax + ebx + 2]
push eax
push ebx
call sub.ntdll.dll_wcscpy
lea eax, [ebp - 0x6c]
push eax
push edi
push 0x1005be0
call fcn.01019fa3
push 0x1005b4c
push edi
call sub.ntdll.dll_wcscat
lea eax, [ebp - 0x6c]
push eax
push edi
call sub.ntdll.dll_wcscat
push 0x1005bcc
call fcn.01019fa3
add esp, 0x28
test byte [ebp + 0x10], 2
je 0x10199df
and word [ebp - 0x83c], 0
lea eax, [ebp - 0x83c]
push eax
push edi
call fcn.0101954e
lea eax, [ebp - 0x83c]
push eax
push edi
push 0x1005ba4
call fcn.01019fa3
lea eax, [ebp - 0x83c]
push eax
push edi
call sub.ntdll.dll_wcscpy
add esp, 0x14
push edi
call sub.msvcrt.dll_wcslen
mov ebx, eax
inc ebx
cmp dword [ebp - 0x860], 0
pop ecx
je 0x1019a0a
cmp dword [ebp + 0xc], ebx
jl 0x1019a0a
mov esi, edi
mov edi, dword [ebp - 0x860]
mov ecx, ebx
rep movsw word es:[edi], word [esi]
mov edi, dword [ebp - 0x85c]
push edi
push ebx
push 0x1005b50
call fcn.01019fbd
push edi
call sub.msvcrt.dll_free
add esp, 0x10
mov eax, ebx
pop esi
mov ecx, dword [ebp - 4]
pop edi
pop ebx
call fcn.01017bb1
leave
ret 0xc