Function at 0x1064c1a
Capabilities:
Get hostname

Disassembly:
mov eax, 0x1099a75
call fcn.01077478
sub esp, 0x80
mov eax, dword [0x10a64dc]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp + 0xc]
push ebx
mov dword [ebp - 0x88], eax
mov eax, dword [0x10a6184]
push esi
mov ebx, 0x10a6184
cmp eax, ebx
push edi
mov edi, dword [ebp + 8]
je 0x1064c72
test byte [eax + 0x1c], 1
je 0x1064c72
cmp byte [eax + 0x19], 5
jb 0x1064c72
push dword [edi]
push 0x1007490
push 0xb6
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.01009add
and dword [ebp - 0x78], 0
mov esi, 0x10a8b2c
push esi
lea ecx, [ebp - 0x74]
call fcn.01020db5
and dword [ebp - 4], 0
push esi
lea ecx, [ebp - 0x84]
call fcn.01020db5
push esi
lea ecx, [ebp - 0x80]
call fcn.01020db5
lea ecx, [ebp - 0x70]
call fcn.01060cb6
mov eax, dword [edi]
lea ecx, [ebp - 0x7c]
push ecx
xor esi, esi
push eax
mov byte [ebp - 4], 3
mov dword [ebp - 0x7c], esi
call dword [sym.imp.ADVAPI32.dll_ConvertStringSidToSidW]
cmp eax, 1
jne 0x1064dd5
push dword [ebp - 0x7c]
lea ecx, [ebp - 0x70]
call fcn.01060c0f
push dword [ebp - 0x7c]
call dword [sym.imp.KERNEL32.dll_LocalFree]
lea ecx, [ebp - 0x70]
call fcn.0106440b
push eax
lea ecx, [ebp - 0x74]
call fcn.0100a804
mov eax, dword [0x10a6184]
cmp eax, ebx
je 0x1064d1b
test byte [eax + 0x1c], 2
je 0x1064d1b
cmp byte [eax + 0x19], 5
jb 0x1064d1b
push dword [ebp - 0x74]
push 0x1007490
push 0xb7
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.01009add
mov eax, dword [0x10a6184]
mov ecx, dword [ebp - 0x74]
cmp dword [ecx - 0xc], esi
jne 0x1064ded
mov ecx, dword [ebp - 0x24]
cmp ecx, 6
je 0x1064de1
cmp ecx, 8
je 0x1064de1
cmp ecx, 9
je 0x1064de1
cmp ecx, 3
je 0x1064de1
cmp ecx, 7
je 0x1064de1
lea ecx, [ebp - 0x70]
call fcn.01063465
push eax
lea ecx, [ebp - 0x74]
call fcn.0100a804
mov eax, dword [0x10a6184]
cmp eax, ebx
je 0x1064d95
test byte [eax + 0x1c], 2
je 0x1064d95
cmp byte [eax + 0x19], 5
jb 0x1064d95
push dword [ebp - 0x74]
push 0x1007490
push 0xb8
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.01009add
mov eax, dword [ebp - 0x74]
cmp dword [eax - 0xc], esi
jne 0x1064e01
push edi
lea ecx, [ebp - 0x74]
call fcn.0100a6f4
mov eax, dword [0x10a6184]
cmp eax, ebx
je 0x1064e01
test byte [eax + 0x1c], 2
je 0x1064e01
cmp byte [eax + 0x19], 5
jb 0x1064e01
push dword [ebp - 0x74]
push 0x1007490
push 0xb9
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.01009add
jmp 0x1064e01
mov dword [ebp - 0x78], 0x80070057
jmp 0x1064f3f
mov dword [ebp - 0x78], 0x80070523
jmp 0x1064f44
lea ecx, [ebp - 0x70]
call fcn.01064428
push eax
lea ecx, [ebp - 0x84]
call fcn.0100a804
push 0x10
pop eax
lea ecx, [ebp - 0x7c]
push ecx
push eax
lea ecx, [ebp - 0x80]
mov dword [ebp - 0x7c], eax
call fcn.0100a6ca
push eax
call dword [sym.imp.KERNEL32.dll_GetComputerNameW]
cmp eax, esi
lea ecx, [ebp - 0x80]
je 0x1064e5c
push 0xffffffffffffffff
call fcn.0100a2eb
mov eax, dword [0x10a6184]
cmp eax, ebx
je 0x1064eb8
test byte [eax + 0x1c], 2
je 0x1064eb8
cmp byte [eax + 0x19], 5
jb 0x1064eb8
push dword [ebp - 0x80]
push 0x1007490
push 0xba
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.01009add
jmp 0x1064eb8
push esi
call fcn.01009eb8
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
push esi
call fcn.01009676
test eax, eax
mov dword [ebp - 0x78], eax
jl 0x1064e7e
mov dword [ebp - 0x78], 0x80004005
mov eax, dword [0x10a6184]
cmp eax, ebx
je 0x1064eae
test byte [eax + 0x1c], 2
je 0x1064eae
cmp byte [eax + 0x19], 2
jb 0x1064eae
push esi
push 0x1007490
push 0xbb
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.01009b3f
mov eax, dword [0x10a6184]
cmp dword [ebp - 0x78], 0
jl 0x1064f44
mov eax, dword [ebp - 0x84]
cmp dword [eax - 0xc], 0
je 0x1064f30
push 0xffffffffffffffff
push dword [ebp - 0x80]
push 0xffffffffffffffff
push eax
push 1
push 0x7f
call dword [sym.imp.KERNEL32.dll_CompareStringW]
cmp eax, 2
je 0x1064f30
push 0x10057dc
lea eax, [ebp - 0x74]
push eax
lea eax, [ebp - 0x8c]
push eax
call fcn.01011657
lea ecx, [ebp - 0x84]
push ecx
push eax
lea eax, [ebp - 0x7c]
push eax
mov byte [ebp - 4], 4
call fcn.0101adf7
mov ecx, dword [ebp - 0x88]
push eax
mov byte [ebp - 4], 5
call fcn.0100a82a
mov ecx, dword [ebp - 0x7c]
add ecx, 0xfffffff0
call fcn.01009cd1
mov ecx, dword [ebp - 0x8c]
add ecx, 0xfffffff0
call fcn.01009cd1
jmp 0x1064f3f
mov ecx, dword [ebp - 0x88]
lea eax, [ebp - 0x74]
push eax
call fcn.0100a6f4
mov eax, dword [0x10a6184]
pop edi
pop esi
cmp eax, ebx
pop ebx
je 0x1064f87
test byte [eax + 0x1c], 1
je 0x1064f87
movzx ecx, byte [eax + 0x19]
xor edx, edx
cmp dword [ebp - 0x78], edx
setl dl
dec edx
and edx, 3
inc edx
inc edx
cmp ecx, edx
jl 0x1064f87
mov ecx, dword [ebp - 0x88]
push dword [ecx]
push dword [ebp - 0x78]
push 0x1007490
push 0xbc
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.0102b959
lea ecx, [ebp - 0x70]
call fcn.01010e04
mov ecx, dword [ebp - 0x80]
add ecx, 0xfffffff0
call fcn.01009cd1
mov ecx, dword [ebp - 0x84]
add ecx, 0xfffffff0
call fcn.01009cd1
mov ecx, dword [ebp - 0x74]
add ecx, 0xfffffff0
call fcn.01009cd1
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x78]
mov dword fs:[0], ecx
mov ecx, dword [ebp - 0x10]
call fcn.01076f63
leave
ret 8