Function at 0x100020e0
Capabilities:
Contain obfuscated stackstrings
Get hostname
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x278
mov al, 0x31
push ebx
mov byte [esp + 0x3c], al
mov byte [esp + 0x42], al
mov byte [esp + 0x44], al
mov byte [esp + 0x46], al
mov byte [esp + 0x4c], al
mov byte [esp + 0x52], al
mov byte [esp + 0x5c], al
mov byte [esp + 0x62], al
mov byte [esp + 0x65], al
push ebp
mov cl, 0x30
xor eax, eax
push esi
push edi
mov byte [esp + 0x49], cl
mov dl, 0x2e
mov bl, 0x32
mov byte [esp + 0x51], cl
xor ebp, ebp
mov byte [esp + 0x59], cl
mov byte [esp + 0x69], cl
mov dword [esp + 0x73], eax
mov ecx, 0x34
lea edi, [esp + 0x78]
mov byte [esp + 0x4a], dl
mov byte [esp + 0x4b], 0x35
mov byte [esp + 0x4c], bl
mov byte [esp + 0x4d], dl
mov byte [esp + 0x4f], dl
mov byte [esp + 0x53], 0
mov dword [esp + 0x54], ebp
mov byte [esp + 0x5a], dl
mov byte [esp + 0x5b], 0x35
mov byte [esp + 0x5c], bl
mov byte [esp + 0x5d], dl
mov byte [esp + 0x5f], dl
mov byte [esp + 0x60], bl
mov byte [esp + 0x61], 0x34
mov byte [esp + 0x62], 0x38
mov byte [esp + 0x63], 0
mov dword [esp + 0x64], ebp
mov byte [esp + 0x6a], dl
mov byte [esp + 0x6b], 0x35
mov byte [esp + 0x6c], bl
mov byte [esp + 0x6d], dl
mov byte [esp + 0x6f], dl
mov byte [esp + 0x70], 0x36
mov byte [esp + 0x72], 0
mov byte [esp + 0x77], al
mov byte [esp + 0x148], al
rep stosd dword es:[edi], eax
mov ecx, 0xf
lea edi, [esp + 0x149]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov ecx, 0x3f
xor eax, eax
lea edi, [esp + 0x189]
mov byte [esp + 0x188], 0
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov al, 0x25
mov cl, 0x73
mov dword [esp + 0x34], ebp
mov dword [esp + 0x38], ebp
mov dword [esp + 0x40], 6
mov dword [esp + 0x44], 0x40
mov byte [esp + 0x10], al
mov byte [esp + 0x11], cl
mov byte [esp + 0x12], 0x20
mov byte [esp + 0x13], 0x28
mov byte [esp + 0x14], al
mov byte [esp + 0x15], cl
mov byte [esp + 0x16], 0x2f
mov byte [esp + 0x17], al
mov byte [esp + 0x18], dl
mov byte [esp + 0x19], bl
mov cl, 0x58
mov byte [esp + 0x1c], dl
mov byte [esp + 0x1a], cl
mov byte [esp + 0x1e], cl
mov byte [esp + 0x22], cl
mov byte [esp + 0x27], cl
mov byte [esp + 0x2b], cl
mov byte [esp + 0x2f], cl
mov byte [esp + 0x20], dl
mov byte [esp + 0x25], dl
mov byte [esp + 0x29], dl
mov byte [esp + 0x2d], dl
lea ecx, [esp + 0x44]
lea edx, [esp + 0x148]
push ecx
push edx
mov byte [esp + 0x23], al
mov byte [esp + 0x25], bl
mov byte [esp + 0x27], al
mov byte [esp + 0x29], bl
mov byte [esp + 0x2b], 0x2d
mov byte [esp + 0x2c], al
mov byte [esp + 0x2e], bl
mov byte [esp + 0x30], al
mov byte [esp + 0x32], bl
mov byte [esp + 0x34], al
mov byte [esp + 0x36], bl
mov byte [esp + 0x38], 0x29
mov byte [esp + 0x39], 0
call dword [sym.imp.KERNEL32.dll_GetComputerNameA]
lea esi, [esp + 0x48]
mov edi, 3
push esi
call fcn.100014b0
add esp, 4
lea ecx, [esp + 0x40]
lea edx, [esp + 0x34]
mov dword [esp + 0x40], 6
push ecx
push edx
push ebp
push eax
call sub.iphlpapi.dll_SendARP
test eax, eax
jne 0x10002344
mov eax, dword [esp + 0x39]
mov ecx, dword [esp + 0x38]
mov edx, dword [esp + 0x37]
and eax, 0xff
and ecx, 0xff
push eax
mov eax, dword [esp + 0x3a]
and edx, 0xff
push ecx
mov ecx, dword [esp + 0x3d]
push edx
mov edx, dword [esp + 0x40]
and eax, 0xff
and ecx, 0xff
push eax
and edx, 0xff
push ecx
push edx
lea eax, [esp + 0x160]
push esi
lea ecx, [esp + 0x2c]
push eax
lea edx, [esp + 0x1a8]
push ecx
push edx
call fcn.10002bea
lea eax, [esp + 0x1b0]
push eax
push str._s._r_n
call fcn.10002ba9
lea ecx, [esp + 0x1b8]
push ecx
call fcn.10001960
add esp, 0x34
add esi, 0x10
dec edi
jne 0x100022a1
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0x278
ret