Function at 0x101938b
Capabilities:
Get hostname

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x868
mov eax, dword [0x101f128]
push ebx
mov dword [ebp - 4], eax
mov eax, dword [ebp + 8]
push edi
xor ebx, ebx
push 0x2000
mov dword [ebp - 0x860], eax
mov dword [ebp - 0x864], ebx
call sub.msvcrt.dll_malloc
mov edi, eax
cmp edi, ebx
pop ecx
mov dword [ebp - 0x85c], edi
jne 0x10193da
push 0x1005d50
call fcn.01019d81
pop ecx
xor eax, eax
jmp 0x10197b2
push esi
push 0x1005d24
mov word [edi], bx
call fcn.01019d4d
test byte [ebp + 0x10], 2
pop ecx
je 0x1019409
push 6
pop esi
cmp dword [ebp + 0x10], esi
je 0x1019409
push dword [ebp + 0x10]
push 0x1005c70
call fcn.01019d67
pop ecx
pop ecx
mov dword [ebp + 0x10], esi
cmp dword [0x101fae8], ebx
je 0x10195d4
mov eax, dword [0x101fb08]
cmp eax, ebx
je 0x10195d4
cmp dword [0x101faf4], ebx
je 0x101956d
xor ecx, ecx
cmp dword [ecx*4 + 0x101fbc0], ebx
jne 0x1019447
inc ecx
cmp ecx, 0x100
jb 0x1019430
jmp 0x10195d4
push 1
lea edx, [ebp - 0x18]
lea esi, [ecx*4 + 0x101fbc0]
mov ebx, dword [esi]
push edx
mov dword [ebp - 0x18], 0x14
mov ecx, dword [eax]
push eax
call dword [ecx + 0x14]
and dword [ebp - 0x854], 0
cmp dword [ebx], 0
jle 0x10195d4
lea eax, [ebx + 4]
mov dword [ebp - 0x858], eax
xor eax, eax
push 0
push 0
lea edi, [ebp - 0x84c]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
lea edx, [ebp - 0x868]
push edx
stosd dword es:[edi], eax
lea edx, [ebp - 0x850]
push edx
lea edx, [ebp - 0x84c]
push edx
mov edx, dword [ebp - 0x858]
stosd dword es:[edi], eax
mov eax, dword [0x101fb08]
mov dword [ebp - 0x850], 0x10
push dword [edx]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x1c]
mov edi, eax
test edi, edi
jne 0x101952f
cmp dword [ebp - 0x850], eax
je 0x101952f
push dword [ebp - 0x84a]
call dword [sym.imp.WS2_32.dll_ntohs]
movzx eax, ax
push eax
movzx eax, byte [ebp - 0x845]
push eax
movzx eax, byte [ebp - 0x846]
push eax
movzx eax, byte [ebp - 0x847]
push eax
movzx eax, byte [ebp - 0x848]
push eax
lea eax, [ebp - 0x64]
push 0x1005c4c
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
lea eax, [ebp - 0x64]
push eax
push dword [ebp - 0x85c]
call sub.ntdll.dll_wcscat
lea eax, [ebp - 0x64]
push eax
push dword [esi]
push 0x1005c08
call fcn.01019d33
add esp, 0x30
jmp 0x101954a
push dword [ebp - 0x850]
push dword [esi]
push 0x10052e8
call fcn.01019d67
add esp, 0xc
push edi
call fcn.01018067
inc dword [ebp - 0x854]
mov eax, dword [ebp - 0x854]
add dword [ebp - 0x858], 4
cmp eax, dword [ebx]
jl 0x101947c
mov edi, dword [ebp - 0x85c]
jmp 0x10195d4
mov eax, dword [0x101fb58]
cmp eax, ebx
je 0x10195d4
mov dword [ebp - 0x864], 1
mov ebx, dword [eax + 0x14]
mov esi, dword [eax]
movzx eax, word [eax + 0x18]
push eax
mov dword [ebp - 0x854], ebx
call dword [sym.imp.WS2_32.dll_ntohs]
movzx eax, ax
push eax
movzx eax, byte [ebp - 0x851]
push eax
movzx eax, byte [ebp - 0x852]
push eax
movzx eax, bh
push eax
movzx eax, bl
push eax
lea eax, [ebp - 0x64]
push 0x1005c4c
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
lea eax, [ebp - 0x64]
push eax
push edi
call sub.ntdll.dll_wcscat
add esp, 0x24
test esi, esi
mov eax, esi
jne 0x1019580
push edi
call sub.msvcrt.dll_wcslen
pop ecx
push dword [0x101fb74]
mov ecx, 0x1000
sub ecx, eax
lea ebx, [edi + eax*2]
push ecx
push ebx
mov dword [ebp - 0x858], eax
call fcn.01019e54
test byte [ebp + 0x10], 1
je 0x10196a4
mov esi, dword [sym.imp.KERNEL32.dll_GetComputerNameExW]
and dword [ebp - 0x850], 0
lea eax, [ebp - 0x850]
push eax
push 0
push 7
call esi
inc dword [ebp - 0x850]
mov eax, dword [ebp - 0x850]
add eax, eax
push eax
call sub.msvcrt.dll_malloc
test eax, eax
pop ecx
mov dword [ebp - 0x854], eax
je 0x10196a4
and word [eax], 0
lea ecx, [ebp - 0x850]
push ecx
push eax
push 7
call esi
test eax, eax
je 0x1019698
mov eax, dword [ebp - 0x850]
mov ecx, dword [ebp - 0x858]
add eax, ecx
cmp eax, 0xffc
jae 0x1019672
push dword [ebp - 0x854]
push edi
call sub.ntdll.dll_wcscat
pop ecx
pop ecx
mov eax, dword [0x101fb74]
test eax, eax
je 0x1019698
push eax
lea eax, [ebp - 0x24]
push 0x1005a70
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
lea eax, [ebp - 0x24]
push eax
push edi
call sub.ntdll.dll_wcscat
add esp, 0x14
push dword [ebp - 0x854]
call sub.msvcrt.dll_free
pop ecx
test byte [ebp + 0x10], 4
jne 0x1019732
xor esi, esi
cmp dword [ebp - 0x864], esi
je 0x1019732
push edi
push 0x1005bd0
call fcn.01019d33
xor edx, edx
mov dx, word [ebx]
test dx, dx
pop ecx
pop ecx
je 0x10196ed
lea ecx, [ebp - 0x6c]
mov eax, ebx
sub ecx, ebx
cmp dx, 0x3b
je 0x10196ed
mov word [ecx + eax], dx
inc esi
inc eax
inc eax
xor edx, edx
mov dx, word [eax]
test dx, dx
jne 0x10196d6
lea eax, [esi + esi]
and word [ebp + eax - 0x6c], 0
lea eax, [eax + ebx + 2]
push eax
push ebx
call sub.ntdll.dll_wcscpy
lea eax, [ebp - 0x6c]
push eax
push edi
push 0x1005ba8
call fcn.01019d33
push 0x1005b14
push edi
call sub.ntdll.dll_wcscat
lea eax, [ebp - 0x6c]
push eax
push edi
call sub.ntdll.dll_wcscat
push 0x1005b94
call fcn.01019d33
add esp, 0x28
test byte [ebp + 0x10], 2
je 0x101976f
and word [ebp - 0x83c], 0
lea eax, [ebp - 0x83c]
push eax
push edi
call fcn.010192de
lea eax, [ebp - 0x83c]
push eax
push edi
push 0x1005b6c
call fcn.01019d33
lea eax, [ebp - 0x83c]
push eax
push edi
call sub.ntdll.dll_wcscpy
add esp, 0x14
push edi
call sub.msvcrt.dll_wcslen
mov ebx, eax
inc ebx
cmp dword [ebp - 0x860], 0
pop ecx
je 0x101979a
cmp dword [ebp + 0xc], ebx
jl 0x101979a
mov esi, edi
mov edi, dword [ebp - 0x860]
mov ecx, ebx
rep movsw word es:[edi], word [esi]
mov edi, dword [ebp - 0x85c]
push edi
push ebx
push 0x1005b18
call fcn.01019d4d
push edi
call sub.msvcrt.dll_free
add esp, 0x10
mov eax, ebx
pop esi
mov ecx, dword [ebp - 4]
pop edi
pop ebx
call fcn.0101793c
leave
ret 0xc