Function at 0x1000ccdb
Capabilities:
Get hostname

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1f4
mov eax, dword [0x10247460]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 0x10]
push ebx
mov ebx, dword [ebp + 8]
push edi
mov edi, dword [ebp + 0x14]
mov dword [ebp - 0x1f0], ebx
mov dword [ebp - 0x1e8], eax
mov dword [ebp - 0x1f4], edi
test ebx, ebx
je 0x1000cf80
push esi
mov esi, dword [ebp + 0xc]
test esi, esi
jle 0x1000cf7f
lea eax, [esi + esi]
push eax
push 0
push ebx
call fcn.10096fc0
add esp, 0xc
call fcn.1000899a
mov dword [edi], eax
xor eax, eax
cmp word [0x1025ea00], ax
je 0x1000cd8e
lea eax, [esi - 1]
cmp eax, 0x28
jl 0x1000cd4b
push 0x27
pop eax
push eax
mov esi, 0x1025ea00
push esi
push ebx
call fcn.1009755c
movzx eax, word [0x1025e9f8]
mov ecx, dword [ebp - 0x1e8]
mov dword [ecx], eax
push dword [edi]
push eax
push esi
push 0x1025e9a8
push str.GetUserInfo_Self___s____s____d____d_
push str.UserInfo
push 0xffffffffffffffff
push 0x10266f5c
call fcn.10024f90
add esp, 0x2c
jmp 0x1000cf7f
mov edi, 0x1025e9a8
cmp word [0x1025e9a8], ax
jne 0x1000cde4
push 0x50
push eax
push edi
call fcn.10096fc0
xor eax, eax
push 0x4e
push eax
mov word [ebp - 0x54], ax
lea eax, [ebp - 0x52]
push eax
call fcn.10096fc0
add esp, 0x18
push 0x28
pop esi
lea eax, [ebp - 0x1e8]
push eax
lea eax, [ebp - 0x54]
push eax
mov dword [ebp - 0x1e8], esi
call dword [sym.imp.KERNEL32.dll_GetComputerNameW]
push esi
push edi
lea eax, [ebp - 0x54]
push 0xffffffffffffffff
push eax
call fcn.1001bfeb
add esp, 0x10
mov esi, 0x1025ea00
push esi
push edi
push str.GetUserInfo_Self___s____s_
push str.UserInfo
push 0xffffffffffffffff
mov ebx, 0x10266f5c
push ebx
call fcn.10024f90
xor eax, eax
push 0xc6
push eax
mov word [ebp - 0x1e4], ax
lea eax, [ebp - 0x1e2]
push eax
call fcn.10096fc0
xor eax, eax
push 0xc6
push eax
mov word [ebp - 0x11c], ax
lea eax, [ebp - 0x11a]
push eax
call fcn.10096fc0
lea eax, [ebp - 0x1e4]
push 0x64
push eax
call fcn.1000a0ab
add esp, 0x38
test eax, eax
je 0x1000cf7f
push 0x64
lea eax, [ebp - 0x11c]
push eax
lea eax, [ebp - 0x1e4]
push 0xffffffffffffffff
push eax
call fcn.1001bfeb
lea eax, [ebp - 0x11c]
push eax
push str.GetUserInfo_Self_1___s_
push str.UserInfo
push 0xffffffffffffffff
push ebx
call fcn.10024f90
lea eax, [ebp - 0x11c]
push 0x5c
push eax
call fcn.100978f6
add esp, 0x2c
mov dword [ebp - 0x1ec], eax
test eax, eax
je 0x1000cf0a
lea ecx, [ebp - 0x11c]
sub eax, ecx
sar eax, 1
push edi
mov dword [ebp - 0x1e8], eax
call fcn.100975a6
pop ecx
cmp eax, dword [ebp - 0x1e8]
jne 0x1000cf0a
push dword [ebp - 0x1e8]
lea eax, [ebp - 0x11c]
push eax
push edi
call fcn.100982a3
add esp, 0xc
test eax, eax
jne 0x1000cf0a
add dword [ebp - 0x1ec], 2
push dword [ebp - 0x1ec]
call fcn.100975a6
lea edi, [eax + eax]
push edi
push dword [ebp - 0x1ec]
lea eax, [ebp - 0x11c]
push eax
call fcn.10098c50
add esp, 0x10
xor eax, eax
mov word [ebp + edi - 0x11c], ax
push 0x27
lea eax, [ebp - 0x11c]
push eax
push esi
call fcn.1009755c
mov eax, dword [ebp + 0xc]
dec eax
push eax
push esi
push dword [ebp - 0x1f0]
call fcn.1009755c
add esp, 0x18
cmp word [0x1025ea00], 0
je 0x1000cf54
push 0x101e6fb4
push esi
call fcn.100979d0
pop ecx
pop ecx
test eax, eax
jne 0x1000cf4b
inc eax
jmp 0x1000cf4e
push 2
pop eax
mov word [0x1025e9f8], ax
mov eax, dword [ebp - 0x1f4]
push dword [eax]
movzx eax, word [0x1025e9f8]
push eax
push dword [ebp - 0x1f0]
push str.GetUserInfo_Self_1___s____d____d_
push str.UserInfo
push 0xffffffffffffffff
push ebx
call fcn.10024f90
add esp, 0x1c
pop esi
mov ecx, dword [ebp - 4]
pop edi
xor ecx, ebp
pop ebx
call fcn.10096ea4
leave
ret