Function at 0x100efde
Capabilities:
Get hostname

Disassembly:
push 0x934
mov eax, 0x1020371
call fcn.01017678
mov eax, dword [ebp + 8]
mov edi, dword [ebp + 0xc]
mov esi, dword [ebp + 0x14]
mov dword [ebp - 0x914], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x93c], eax
mov eax, dword [ebp + 0x18]
xor ebx, ebx
push 0x1f8
mov dword [ebp - 0x940], eax
lea eax, [ebp - 0x700]
push ebx
push eax
mov dword [ebp - 0x704], ebx
call sub.msvcrt.dll_memset
push 0x7c
lea eax, [ebp - 0x10c]
push ebx
push eax
mov dword [ebp - 0x110], ebx
call sub.msvcrt.dll_memset
push 0x7c
lea eax, [ebp - 0x8c]
push ebx
push eax
mov dword [ebp - 0x90], ebx
call sub.msvcrt.dll_memset
push 0x1f8
lea eax, [ebp - 0x308]
push ebx
push eax
mov dword [ebp - 0x30c], ebx
call sub.msvcrt.dll_memset
push 0x1f8
lea eax, [ebp - 0x8fc]
push ebx
push eax
mov dword [ebp - 0x900], ebx
call sub.msvcrt.dll_memset
add esp, 0x3c
mov dword [ebp - 0x930], ebx
mov dword [ebp - 0x934], ebx
mov dword [ebp - 0x910], ebx
mov dword [ebp - 4], ebx
mov dword [ebp - 0x924], ebx
mov dword [ebp - 0x91c], ebx
mov dword [ebp - 0x920], ebx
mov dword [ebp - 0x90c], ebx
mov byte [ebp - 4], 2
mov dword [ebp - 0x918], ebx
mov byte [ebp - 4], 4
cmp dword [ebp + 0x1c], ebx
jne 0x100f0db
cmp dword [ebp + 0x20], 2
je 0x100f0d1
cmp dword [ebp + 0x20], 3
jne 0x100f0db
mov dword [ebp - 0x91c], 1
mov eax, dword [ebp - 0x914]
mov eax, dword [eax]
mov ecx, dword [eax]
lea edx, [ebp - 0x910]
push edx
push eax
call dword [ecx + 0x20]
cmp eax, ebx
mov dword [ebp - 0x908], eax
jl 0x100f13d
cmp dword [ebp + 0x20], 2
jne 0x100f126
push 0x5c
push dword [ebp - 0x910]
call dword [sym.imp.msvcrt.dll_wcsrchr]
pop ecx
pop ecx
cmp eax, ebx
je 0x100f118
inc eax
inc eax
jmp 0x100f11e
mov eax, dword [ebp - 0x910]
push 0xfe
push eax
jmp 0x100f131
push 0xfe
push dword [ebp - 0x910]
lea eax, [ebp - 0x704]
push eax
call fcn.01018bde
cmp dword [ebp + 0x1c], ebx
jne 0x100f15d
cmp dword [ebp + 0x20], 2
jne 0x100f15d
mov dword [ebp - 0x924], ebx
mov dword [ebp - 0x920], 1
jmp 0x100f240
mov eax, dword [ebp - 0x914]
mov eax, dword [eax]
mov ecx, dword [eax]
lea edx, [ebp - 0x90c]
push edx
push eax
call dword [ecx + 0x4c]
cmp eax, ebx
mov dword [ebp - 0x908], eax
jge 0x100f18d
push eax
call dword [sym.imp.API_MS_Win_Core_ErrorHandling_L1_1_0.dll_SetLastError]
call fcn.01017fa1
jmp 0x100f751
mov eax, dword [ebp - 0x90c]
mov ecx, dword [eax]
lea edx, [ebp - 0x918]
push edx
push eax
call dword [ecx + 0x2c]
cmp eax, ebx
mov dword [ebp - 0x908], eax
jl 0x100f17c
mov dword [ebp - 0x904], ebx
mov byte [ebp - 4], 6
mov eax, dword [ebp - 0x90c]
mov ecx, dword [eax]
lea edx, [ebp - 0x904]
push edx
push eax
call dword [ecx + 0x24]
cmp eax, ebx
mov dword [ebp - 0x908], eax
jge 0x100f1f1
push eax
call dword [sym.imp.API_MS_Win_Core_ErrorHandling_L1_1_0.dll_SetLastError]
call fcn.01017fa1
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x904]
call fcn.0100629d
jmp 0x100f751
mov eax, dword [ebp - 0x904]
mov ecx, dword [eax]
lea edx, [ebp - 0x920]
push edx
push eax
call dword [ecx + 0x1c]
cmp eax, ebx
mov dword [ebp - 0x908], eax
jl 0x100f1d1
xor eax, eax
inc eax
cmp dword [ebp - 0x920], eax
jle 0x100f21f
mov dword [ebp - 0x924], eax
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x904]
call fcn.0100629d
cmp dword [ebp - 0x920], ebx
jne 0x100f240
mov dword [ebp - 0x930], 1
mov dword [ebp - 0x904], 1
cmp dword [ebp - 0x930], ebx
jne 0x100f265
movzx eax, word [ebp - 0x904]
cmp eax, dword [ebp - 0x920]
jg 0x100f747
mov eax, dword [ebp - 0x93c]
push dword [eax]
push dword [edi]
call fcn.0101b7ba
xor eax, eax
inc eax
cmp ax, word [ebp - 0x904]
je 0x100f28a
cmp dword [ebp + 0x20], 2
je 0x100f6fc
cmp dword [ebp + 0x1c], ebx
jne 0x100f295
cmp dword [ebp + 0x20], 1
jne 0x100f2de
mov eax, dword [ebp - 0x940]
cmp eax, ebx
je 0x100f2a4
cmp word [eax], bx
jne 0x100f2c8
lea eax, [ebp - 0x934]
push eax
lea eax, [ebp - 0x900]
push eax
mov dword [ebp - 0x934], 0xfe
call dword [sym.imp.KERNEL32.dll_GetComputerNameW]
lea eax, [ebp - 0x900]
push ebx
push eax
push 0x28b
call fcn.0100e0fc
push eax
push dword [esi]
push dword [edi]
call fcn.0101bd64
push ebx
lea eax, [ebp - 0x704]
push eax
push 0x28c
call fcn.0100e0fc
sub eax, dword [ebp - 0x91c]
push eax
push dword [esi]
push dword [edi]
call fcn.0101bd64
push dword [ebp - 0x904]
mov eax, dword [ebp - 0x914]
mov eax, dword [eax]
push ebx
lea ecx, [ebp - 0x90]
push ecx
lea ecx, [ebp - 0x110]
push ecx
push eax
call fcn.01010ac2
push 0xfe
test eax, eax
jge 0x100f345
push 0x1b8
call fcn.01019fbc
push eax
lea eax, [ebp - 0x30c]
push eax
call fcn.01018bde
jmp 0x100f386
lea eax, [ebp - 0x90]
push eax
lea eax, [ebp - 0x30c]
push eax
call fcn.01018bde
push 0xfe
push 0x10016bc
lea eax, [ebp - 0x30c]
push eax
call fcn.01018c21
push 0xfe
lea eax, [ebp - 0x110]
push eax
lea eax, [ebp - 0x30c]
push eax
call fcn.01018c21
mov eax, dword [ebp - 0x914]
mov eax, dword [eax]
mov ecx, dword [eax]
lea edx, [ebp - 0x92c]
push edx
push eax
call dword [ecx + 0x28]
test eax, eax
jl 0x100f3c4
cmp word [ebp - 0x92c], bx
jne 0x100f3c4
push 0xfe
push 0x194
call fcn.01019fbc
push eax
lea eax, [ebp - 0x30c]
push eax
call fcn.01018bde
push ebx
lea eax, [ebp - 0x30c]
push eax
push 0x28d
call fcn.0100e0fc
sub eax, dword [ebp - 0x91c]
push eax
push dword [esi]
push dword [edi]
call fcn.0101bd64
mov eax, dword [ebp - 0x914]
mov eax, dword [eax]
lea ecx, [ebp - 0x30c]
push ecx
push eax
call fcn.01010861
test eax, eax
jge 0x100f41b
push 0xfe
push 0x1b8
call fcn.01019fbc
push eax
lea eax, [ebp - 0x30c]
push eax
call fcn.01018bde
push ebx
lea eax, [ebp - 0x30c]
push eax
push 0x28e
call fcn.0100e0fc
sub eax, dword [ebp - 0x91c]
push eax
push dword [esi]
push dword [edi]
call fcn.0101bd64
cmp dword [ebp + 0x1c], ebx
jne 0x100f44c
cmp dword [ebp + 0x20], 2
je 0x100f5b8
push 0x1f8
lea eax, [ebp - 0x504]
push ebx
push eax
mov dword [ebp - 0x508], ebx
call sub.msvcrt.dll_memset
add esp, 0xc
push 0xfe
lea eax, [ebp - 0x30c]
push eax
push dword [ebp - 0x90c]
call fcn.01010ec7
cmp eax, ebx
jge 0x100f49e
push 0xfe
push 0x197
call fcn.01019fbc
push eax
lea eax, [ebp - 0x30c]
push eax
call fcn.01018bde
cmp word [ebp - 0x30c], bx
jne 0x100f4e4
push 0xfe
push 0xbf
call fcn.01019fbc
push eax
lea eax, [ebp - 0x30c]
push eax
call fcn.01018bde
push 0xfe
push 0x182
call fcn.01019fbc
push eax
lea eax, [ebp - 0x508]
push eax
call fcn.01018bde
jmp 0x100f575
mov dword [ebp - 0x928], ebx
mov byte [ebp - 4], 8
mov eax, dword [ebp - 0x90c]
lea edx, [ebp - 0x928]
push edx
mov dword [ebp - 0x938], ebx
mov ecx, dword [eax]
push eax
call dword [ecx + 0x3c]
cmp eax, ebx
jl 0x100f522
mov eax, dword [ebp - 0x928]
mov ecx, dword [eax]
lea edx, [ebp - 0x938]
push edx
push eax
call dword [ecx + 0x34]
cmp eax, ebx
jge 0x100f53a
push 0xfe
push 0x1b8
call fcn.01019fbc
push eax
lea eax, [ebp - 0x30c]
jmp 0x100f560
cmp dword [ebp - 0x938], 3
push 0xfe
jne 0x100f54f
push 0x181
jmp 0x100f554
push 0x183
call fcn.01019fbc
push eax
lea eax, [ebp - 0x508]
push eax
call fcn.01018bde
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x928]
call fcn.0100629d
push ebx
lea eax, [ebp - 0x508]
push eax
push 0x28f
call fcn.0100e0fc
sub eax, dword [ebp - 0x91c]
push eax
push dword [esi]
push dword [edi]
call fcn.0101bd64
cmp dword [ebp + 0x1c], ebx
je 0x100f5b8
push ebx
lea eax, [ebp - 0x30c]
push eax
push 0x29e
call fcn.0100e0fc
push eax
push dword [esi]
push dword [edi]
call fcn.0101bd64
push dword [ebp - 0x904]
mov eax, dword [ebp - 0x914]
mov eax, dword [eax]
push 1
lea ecx, [ebp - 0x90]
push ecx
lea ecx, [ebp - 0x110]
push ecx
push eax
call fcn.01010ac2
test eax, eax
jge 0x100f5f4
push 0xfe
push 0x1b8
call fcn.01019fbc
jmp 0x100f6c7
push ebx
push 1
push 0x1a2
call fcn.01019fbc
push eax
lea eax, [ebp - 0x90]
push eax
call fcn.010181f1
test eax, eax
je 0x100f6bc
push ebx
push 1
push 0x1a3
call fcn.01019fbc
push eax
lea eax, [ebp - 0x90]
push eax
call fcn.010181f1
test eax, eax
je 0x100f6bc
push ebx
push 1
push 0x1a4
call fcn.01019fbc
push eax
lea eax, [ebp - 0x90]
push eax
call fcn.010181f1
test eax, eax
je 0x100f6bc
push ebx
push 1
push 0x1a5
call fcn.01019fbc
push eax
lea eax, [ebp - 0x90]
push eax
call fcn.010181f1
test eax, eax
je 0x100f6bc
push 0xfe
lea eax, [ebp - 0x90]
push eax
lea eax, [ebp - 0x30c]
push eax
call fcn.01018bde
push 0xfe
push 0x10016bc
lea eax, [ebp - 0x30c]
push eax
call fcn.01018c21
push 0xfe
lea eax, [ebp - 0x110]
push eax
lea eax, [ebp - 0x30c]
push eax
call fcn.01018c21
jmp 0x100f6d4
push 0xfe
lea eax, [ebp - 0x90]
push eax
lea eax, [ebp - 0x30c]
push eax
call fcn.01018bde
push ebx
lea eax, [ebp - 0x30c]
push eax
push 0x290
call fcn.0100e0fc
sub eax, dword [ebp - 0x91c]
push eax
push dword [esi]
push dword [edi]
call fcn.0101bd64
mov dword [ebp - 0x908], ebx
cmp dword [ebp + 0x1c], ebx
je 0x100f72c
push dword [ebp - 0x904]
lea eax, [ebp - 0x918]
push dword [ebp + 0x20]
push dword [esi]
push edi
push eax
lea eax, [ebp - 0x90c]
push eax
push dword [ebp - 0x914]
call fcn.0100e8ca
mov dword [ebp - 0x908], eax
cmp dword [ebp - 0x924], ebx
je 0x100f736
inc dword [esi]
inc dword [ebp - 0x904]
mov dword [ebp - 0x930], ebx
jmp 0x100f24a
cmp dword [ebp - 0x924], ebx
jne 0x100f751
inc dword [esi]
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x918]
call fcn.0100629d
mov byte [ebp - 4], bl
lea ecx, [ebp - 0x90c]
call fcn.0100629d
or dword [ebp - 4], 0xffffffff
push dword [ebp - 0x910]
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov eax, dword [ebp - 0x908]
call fcn.010176cc
ret 0x1c