Function at 0x1000c0de
Capabilities:
Get hostname

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1f4
mov eax, dword [0x1023f420]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 0x10]
push ebx
mov ebx, dword [ebp + 8]
push edi
mov edi, dword [ebp + 0x14]
mov dword [ebp - 0x1f0], ebx
mov dword [ebp - 0x1e8], eax
mov dword [ebp - 0x1f4], edi
test ebx, ebx
je 0x1000c383
push esi
mov esi, dword [ebp + 0xc]
test esi, esi
jle 0x1000c382
lea eax, [esi + esi]
push eax
push 0
push ebx
call fcn.10094bd0
add esp, 0xc
call fcn.10007d86
mov dword [edi], eax
xor eax, eax
cmp word [0x102568d8], ax
je 0x1000c191
lea eax, [esi - 1]
cmp eax, 0x28
jl 0x1000c14e
push 0x27
pop eax
push eax
mov esi, 0x102568d8
push esi
push ebx
call fcn.1009516c
movzx eax, word [0x102568d0]
mov ecx, dword [ebp - 0x1e8]
mov dword [ecx], eax
push dword [edi]
push eax
push esi
push 0x10256880
push str.GetUserInfo_Self___s____s____d____d_
push str.UserInfo
push 0xffffffffffffffff
push 0x1025eddc
call fcn.10023e87
add esp, 0x2c
jmp 0x1000c382
mov edi, 0x10256880
cmp word [0x10256880], ax
jne 0x1000c1e7
push 0x50
push eax
push edi
call fcn.10094bd0
xor eax, eax
push 0x4e
push eax
mov word [ebp - 0x54], ax
lea eax, [ebp - 0x52]
push eax
call fcn.10094bd0
add esp, 0x18
push 0x28
pop esi
lea eax, [ebp - 0x1e8]
push eax
lea eax, [ebp - 0x54]
push eax
mov dword [ebp - 0x1e8], esi
call dword [sym.imp.KERNEL32.dll_GetComputerNameW]
push esi
push edi
lea eax, [ebp - 0x54]
push 0xffffffffffffffff
push eax
call fcn.1001aece
add esp, 0x10
mov esi, 0x102568d8
push esi
push edi
push str.GetUserInfo_Self___s____s_
push str.UserInfo
push 0xffffffffffffffff
mov ebx, 0x1025eddc
push ebx
call fcn.10023e87
xor eax, eax
push 0xc6
push eax
mov word [ebp - 0x1e4], ax
lea eax, [ebp - 0x1e2]
push eax
call fcn.10094bd0
xor eax, eax
push 0xc6
push eax
mov word [ebp - 0x11c], ax
lea eax, [ebp - 0x11a]
push eax
call fcn.10094bd0
lea eax, [ebp - 0x1e4]
push 0x64
push eax
call fcn.10009497
add esp, 0x38
test eax, eax
je 0x1000c382
push 0x64
lea eax, [ebp - 0x11c]
push eax
lea eax, [ebp - 0x1e4]
push 0xffffffffffffffff
push eax
call fcn.1001aece
lea eax, [ebp - 0x11c]
push eax
push str.GetUserInfo_Self_1___s_
push str.UserInfo
push 0xffffffffffffffff
push ebx
call fcn.10023e87
lea eax, [ebp - 0x11c]
push 0x5c
push eax
call fcn.100951d0
add esp, 0x2c
mov dword [ebp - 0x1ec], eax
test eax, eax
je 0x1000c30d
lea ecx, [ebp - 0x11c]
sub eax, ecx
sar eax, 1
push edi
mov dword [ebp - 0x1e8], eax
call fcn.100951b6
pop ecx
cmp eax, dword [ebp - 0x1e8]
jne 0x1000c30d
push dword [ebp - 0x1e8]
lea eax, [ebp - 0x11c]
push eax
push edi
call fcn.10095dc3
add esp, 0xc
test eax, eax
jne 0x1000c30d
add dword [ebp - 0x1ec], 2
push dword [ebp - 0x1ec]
call fcn.100951b6
lea edi, [eax + eax]
push edi
push dword [ebp - 0x1ec]
lea eax, [ebp - 0x11c]
push eax
call fcn.10096770
add esp, 0x10
xor eax, eax
mov word [ebp + edi - 0x11c], ax
push 0x27
lea eax, [ebp - 0x11c]
push eax
push esi
call fcn.1009516c
mov eax, dword [ebp + 0xc]
dec eax
push eax
push esi
push dword [ebp - 0x1f0]
call fcn.1009516c
add esp, 0x18
cmp word [0x102568d8], 0
je 0x1000c357
push 0x101dfd04
push esi
call fcn.100954f0
pop ecx
pop ecx
test eax, eax
jne 0x1000c34e
inc eax
jmp 0x1000c351
push 2
pop eax
mov word [0x102568d0], ax
mov eax, dword [ebp - 0x1f4]
push dword [eax]
movzx eax, word [0x102568d0]
push eax
push dword [ebp - 0x1f0]
push str.GetUserInfo_Self_1___s____d____d_
push str.UserInfo
push 0xffffffffffffffff
push ebx
call fcn.10023e87
add esp, 0x1c
pop esi
mov ecx, dword [ebp - 4]
pop edi
xor ecx, ebp
pop ebx
call fcn.10094ab7
leave
ret