Function at 0x10813e2
Capabilities:
Get hostname

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x208
mov eax, dword [0x10de03c]
mov dword [ebp - 4], eax
movzx eax, byte [ebp + 8]
mov dword [0x10e6c08], eax
movzx eax, byte [ebp + 0x10]
mov dword [0x10e6c0c], eax
mov eax, dword [0x10de044]
cmp eax, 0xffffffff
mov dword [ebp - 0x208], 0xff
jne 0x10815e1
and dword [0x10e6bac], 0
push ebx
push esi
mov esi, dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
push edi
push 0x10e6b84
call esi
push 0x10e6bec
call esi
xor eax, eax
mov ebx, 0x10e6b40
mov edi, ebx
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
xor eax, eax
mov edi, 0x10e6b6c
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
xor eax, eax
mov edi, 0x10e6bd4
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
xor eax, eax
mov edi, 0x10e6b54
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
xor eax, eax
mov edi, 0x10e6af0
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
xor eax, eax
mov edi, 0x10e6b10
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
xor eax, eax
mov edi, 0x10e6bc4
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
xor eax, eax
mov edi, 0x10e6bb4
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
xor eax, eax
mov edi, 0x10e6b9c
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
xor eax, eax
mov edi, 0x10e6b30
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
lea eax, [ebp - 0x208]
push eax
lea eax, [ebp - 0x204]
push eax
call dword [sym.imp.KERNEL32.dll_GetComputerNameW]
xor edi, edi
push edi
mov esi, 0x1010318
push esi
lea eax, [ebp - 0x204]
push eax
call fcn.0107d959
cmp eax, 0xffffffff
mov dword [0x10de044], eax
je 0x10815de
cmp byte [ebp + 0xc], 0
jne 0x10814fe
push 0x10de048
push eax
call sub.NTMSAPI.dll_BeginNtmsDeviceChangeDetection
mov eax, dword [0x10de044]
push esi
mov ecx, eax
call fcn.0107eeaa
cmp eax, edi
mov dword [0x10e6bac], eax
je 0x1081522
cmp byte [ebp + 8], 0
je 0x108151a
call fcn.0107bc42
or eax, 0xffffffff
jmp 0x10815de
call fcn.01078c11
mov edx, dword [0x10de044]
push esi
mov ecx, ebx
call fcn.0107b20d
call fcn.01078c20
mov ecx, dword [0x10de044]
call fcn.0107a11b
cmp byte [ebp + 8], 0
je 0x1081556
push dword [0x10de044]
call fcn.0107bdc9
cmp dword [0x10e6c0c], edi
je 0x1081569
mov ecx, dword [0x10de044]
call fcn.0107a38a
call fcn.01078a36
call fcn.01077cb4
jmp 0x1081588
mov edx, dword [0x10de044]
mov ecx, esi
call fcn.0107eaac
push esi
call fcn.01077cca
mov esi, eax
cmp esi, edi
jne 0x1081575
call fcn.0107dfeb
call fcn.0107e0ae
call fcn.0107e171
call fcn.0107f017
cmp byte [ebp + 0xc], 0
jne 0x10815ad
call fcn.010813a4
call fcn.01078acf
mov esi, 0x100205c
push esi
push 1
push 1
push edi
push dword [0x10de044]
call sub.NTMSAPI.dll_SetNtmsUIOptionsW
push esi
push 1
push 2
push edi
push dword [0x10de044]
call sub.NTMSAPI.dll_SetNtmsUIOptionsW
mov eax, dword [0x10de044]
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
call fcn.01075aef
leave
ret 0xc