Function at 0x1000aa8f
Capabilities:
Get hostname

Disassembly:
push ebp
lea ebp, [esp - 0x4b4]
sub esp, 0x534
mov eax, dword [0x1001e248]
push ebx
push esi
push edi
mov edi, dword [ebp + 0x4bc]
xor eax, ebp
mov dword [ebp + 0x4b0], eax
mov dword [ebp - 0x6c], ecx
mov dword [ebp - 0x58], edi
call dword [0x1001e040]
mov dword [ebp - 0x54], eax
lea eax, [ebp - 0x80]
push eax
lea eax, [ebp + 0x3b0]
xor ebx, ebx
push eax
mov byte [ebp + 0x3b0], bl
mov dword [ebp - 0x80], 0x100
call dword [sym.imp.KERNEL32.dll_GetComputerNameA]
lea eax, [ebp + 0x3b0]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov esi, eax
inc esi
lea eax, [esi + esi]
add eax, 3
and eax, 0xfffffffc
call fcn.10018600
mov eax, esp
push dword [ebp - 0x54]
lea ecx, [ebp + 0x3b0]
push esi
push ecx
push eax
call fcn.100012dc
mov dword [ebp - 0x70], eax
mov eax, dword [ebp - 0x6c]
test byte [eax + 0x53], 0x20
je 0x1000ae16
mov eax, dword [eax + 0x54]
mov eax, dword [eax]
push ebx
push dword [ebp - 0x70]
push eax
call fcn.10009179
test eax, eax
je 0x1000b2eb
cmp edi, ebx
mov esi, dword [sym.imp.KERNEL32.dll_lstrlenW]
jne 0x1000ab48
xor eax, eax
jmp 0x1000ab6c
push edi
call esi
lea eax, [eax + eax + 2]
mov dword [ebp - 0x5c], eax
add eax, 3
and eax, 0xfffffffc
call fcn.10018600
mov eax, esp
push dword [ebp - 0x54]
push dword [ebp - 0x5c]
push edi
push eax
call fcn.10001313
push 7
push str.ms_its:
push 7
push eax
push 1
mov edi, 0x400
push edi
call dword [sym.imp.KERNEL32.dll_CompareStringA]
cmp eax, 2
jne 0x1000abc6
push 0x1001b13c
push ebx
push dword [ebp - 0x58]
call dword [sym.imp.SHLWAPI.dll_StrRStrIW]
cmp eax, ebx
je 0x1000b2eb
sub eax, dword [ebp - 0x58]
mov ecx, dword [ebp - 0x6c]
mov ecx, dword [ecx + 0x54]
mov ecx, dword [ecx + 0xc]
sar eax, 1
push eax
push dword [ebp - 0x58]
push ecx
call dword [sym.imp.SHLWAPI.dll_StrCmpNIW]
test eax, eax
jne 0x1000b2eb
jmp 0x1000b313
cmp dword [ebp - 0x58], ebx
jne 0x1000abcf
xor eax, eax
jmp 0x1000abf4
push dword [ebp - 0x58]
call esi
lea esi, [eax + eax + 2]
mov eax, esi
add eax, 3
and eax, 0xfffffffc
call fcn.10018600
mov eax, esp
push dword [ebp - 0x54]
push esi
push dword [ebp - 0x58]
push eax
call fcn.10001313
push 8
push 0x1001ac0c
push 8
push eax
push 1
push edi
call dword [sym.imp.KERNEL32.dll_CompareStringA]
cmp eax, 2
jne 0x1000adde
lea eax, [ebp - 0x64]
push eax
push 0x1001a480
push 0x17
push ebx
push 0x1001a32c
mov dword [ebp - 0x64], ebx
mov dword [ebp - 0x68], ebx
mov dword [ebp - 0x60], ebx
mov dword [ebp - 0x54], ebx
call dword [sym.imp.ole32.dll_CoCreateInstance]
mov edi, eax
cmp edi, ebx
jl 0x1000ac6f
mov eax, dword [ebp - 0x64]
mov ecx, dword [eax]
lea edx, [ebp - 0x68]
push edx
push 0x1001a490
push 0x1001abfc
push eax
call dword [ecx + 0xc]
mov edi, eax
cmp edi, ebx
jl 0x1000ac6f
mov eax, dword [ebp - 0x68]
mov ecx, dword [eax]
lea edx, [ebp - 0x60]
push edx
push 0x1001a450
push ebx
push eax
call dword [ecx + 0xc]
mov edi, eax
cmp edi, ebx
jge 0x1000acc5
push edi
call fcn.100023b5
push ebx
mov esi, eax
mov eax, 0x1001be90
push eax
push ebx
push ebx
push esi
push eax
call fcn.10002591
push esi
call dword [sym.imp.KERNEL32.dll_LocalFree]
push dword [ebp - 0x54]
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov eax, dword [ebp - 0x60]
cmp eax, ebx
je 0x1000aca4
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x68]
cmp eax, ebx
je 0x1000acb1
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x64]
cmp eax, ebx
je 0x1000acbe
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, edi
jmp 0x1000b2ee
push dword [ebp - 0x58]
mov esi, dword [ebp - 0x60]
lea ecx, [ebp - 0x74]
call fcn.1000153a
mov eax, dword [eax]
mov ecx, dword [esi]
lea edx, [ebp - 0x54]
push edx
push eax
push 0x1001a35c
push esi
call dword [ecx + 0x10]
push dword [ebp - 0x74]
mov esi, dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov dword [ebp - 0x70], eax
call esi
cmp dword [ebp - 0x70], ebx
jge 0x1000ad4d
push dword [ebp - 0x70]
call fcn.100023b5
push ebx
mov edi, eax
mov eax, 0x1001be90
push eax
push ebx
push ebx
push edi
push eax
call fcn.10002591
push edi
call dword [sym.imp.KERNEL32.dll_LocalFree]
push dword [ebp - 0x54]
call esi
mov eax, dword [ebp - 0x60]
cmp eax, ebx
je 0x1000ad2b
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x68]
cmp eax, ebx
je 0x1000ad38
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x64]
cmp eax, ebx
je 0x1000ad45
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x70]
jmp 0x1000b2ee
cmp dword [ebp - 0x54], ebx
jne 0x1000ad56
xor eax, eax
jmp 0x1000ad5f
push dword [ebp - 0x54]
call dword [sym.imp.OLEAUT32.dll_VariantInit]
mov ecx, dword [ebp - 0x6c]
mov ecx, dword [ecx + 0x54]
mov ecx, dword [ecx + 0xc]
push eax
push dword [ebp - 0x54]
push ecx
call dword [sym.imp.SHLWAPI.dll_StrCmpNIW]
test eax, eax
push dword [ebp - 0x54]
jne 0x1000adac
call esi
mov eax, dword [ebp - 0x60]
cmp eax, ebx
je 0x1000ad89
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x68]
cmp eax, ebx
je 0x1000ad96
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x64]
cmp eax, ebx
je 0x1000b313
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
jmp 0x1000b313
call esi
mov eax, dword [ebp - 0x60]
cmp eax, ebx
je 0x1000adbb
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x68]
cmp eax, ebx
je 0x1000adc8
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x64]
cmp eax, ebx
je 0x1000b2eb
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
jmp 0x1000b2eb
mov esi, dword [ebp - 0x6c]
mov eax, dword [esi + 0x54]
mov eax, dword [eax + 0xc]
push ebx
push dword [ebp - 0x58]
push eax
call fcn.10009179
test eax, eax
jne 0x1000b313
mov eax, dword [esi + 0x54]
mov eax, dword [eax + 0x18]
push ebx
push dword [ebp - 0x58]
push eax
call fcn.10009179
test eax, eax
je 0x1000b2eb
jmp 0x1000b313
cmp edi, ebx
mov esi, dword [sym.imp.KERNEL32.dll_lstrlenW]
jne 0x1000ae24
xor eax, eax
jmp 0x1000ae48
push edi
call esi
lea eax, [eax + eax + 2]
mov dword [ebp - 0x5c], eax
add eax, 3
and eax, 0xfffffffc
call fcn.10018600
mov eax, esp
push dword [ebp - 0x54]
push dword [ebp - 0x5c]
push edi
push eax
call fcn.10001313
push 8
push 0x1001ac0c
push 8
push eax
push 1
mov edi, 0x400
push edi
call dword [sym.imp.KERNEL32.dll_CompareStringA]
cmp eax, 2
jne 0x1000ae6f
mov dword [ebp + 0x4c0], 1
mov eax, dword [ebp - 0x6c]
test byte [eax + 0x53], 8
je 0x1000b059
test byte [ebp + 0x4c0], 1
je 0x1000aed9
mov eax, dword [ebp - 0x70]
cmp word [eax], bx
je 0x1000aed9
mov eax, dword [ebp - 0x6c]
mov eax, dword [eax + 0x54]
mov eax, dword [eax]
cmp eax, ebx
mov dword [ebp - 0x5c], eax
jne 0x1000aea0
xor eax, eax
jmp 0x1000aec3
push eax
call esi
lea edi, [eax + eax + 2]
mov eax, edi
add eax, 3
and eax, 0xfffffffc
call fcn.10018600
mov eax, esp
push dword [ebp - 0x54]
push edi
push dword [ebp - 0x5c]
push eax
call fcn.10001313
lea ecx, [ebp + 0x3b0]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x1000b313
cmp dword [ebp + 0x4c0], 2
jne 0x1000b2eb
push ebx
lea ecx, [ebp - 0x74]
push ecx
mov eax, 0x200
push eax
mov dword [ebp - 0x74], eax
lea eax, [ebp - 0x50]
push eax
push ebx
push 0xf
push dword [ebp - 0x58]
mov word [ebp - 0x50], bx
call sub.urlmon.dll_CoInternetParseUrl
mov eax, dword [ebp - 0x70]
cmp word [eax], bx
je 0x1000afd7
mov eax, dword [ebp - 0x6c]
mov eax, dword [eax + 0x54]
mov eax, dword [eax]
cmp eax, ebx
mov dword [ebp - 0x5c], eax
jne 0x1000af26
xor eax, eax
jmp 0x1000af4b
push dword [ebp - 0x5c]
call esi
lea edi, [eax + eax + 2]
mov eax, edi
add eax, 3
and eax, 0xfffffffc
call fcn.10018600
mov eax, esp
push dword [ebp - 0x54]
push edi
push dword [ebp - 0x5c]
push eax
call fcn.10001313
lea ecx, [ebp + 0x3b0]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
jne 0x1000afd7
cmp word [ebp - 0x50], bx
je 0x1000b2eb
lea eax, [ebp - 0x50]
push eax
call esi
lea edi, [eax + eax + 2]
mov eax, edi
add eax, 3
and eax, 0xfffffffc
call fcn.10018600
mov eax, esp
push dword [ebp - 0x54]
lea ecx, [ebp - 0x50]
push edi
push ecx
push eax
call fcn.10001313
mov dword [ebp - 0x78], eax
mov eax, dword [ebp - 0x6c]
mov eax, dword [eax + 0x54]
mov edi, dword [eax]
cmp edi, ebx
jne 0x1000afa1
xor eax, eax
jmp 0x1000afc5
push edi
call esi
lea eax, [eax + eax + 2]
mov dword [ebp - 0x5c], eax
add eax, 3
and eax, 0xfffffffc
call fcn.10018600
mov eax, esp
push dword [ebp - 0x54]
push dword [ebp - 0x5c]
push edi
push eax
call fcn.10001313
push dword [ebp - 0x78]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x1000b313
cmp word [ebp - 0x50], bx
je 0x1000b2eb
mov eax, dword [ebp - 0x6c]
cmp dword [eax + 0x58], 2
jne 0x1000b2eb
lea eax, [ebp - 0x50]
push eax
call esi
lea edi, [eax + eax + 2]
mov eax, edi
add eax, 3
and eax, 0xfffffffc
call fcn.10018600
mov eax, esp
push dword [ebp - 0x54]
lea ecx, [ebp - 0x50]
push edi
push ecx
push eax
call fcn.10001313
mov dword [ebp - 0x78], eax
mov eax, dword [ebp - 0x6c]
mov eax, dword [eax + 0x54]
mov edi, dword [eax + 0xc]
cmp edi, ebx
jne 0x1000b029
xor eax, eax
jmp 0x1000b04a
push edi
call esi
lea esi, [eax + eax + 2]
mov eax, esi
add eax, 3
and eax, 0xfffffffc
call fcn.10018600
mov eax, esp
push dword [ebp - 0x54]
push esi
push edi
push eax
call fcn.10001313
push dword [ebp - 0x78]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
jmp 0x1000abb9
mov eax, dword [ebp - 0x58]
push str.mc_zapf:__
lea ecx, [ebp - 0x5c]
mov word [ebp - 0x50], bx
mov dword [ebp - 0x78], 0x200
mov dword [ebp - 0x74], eax
call fcn.10001d63
cmp dword [ebp - 0x58], ebx
jne 0x1000b080
xor eax, eax
jmp 0x1000b0a5
push dword [ebp - 0x58]
call esi
lea esi, [eax + eax + 2]
mov eax, esi
add eax, 3
and eax, 0xfffffffc
call fcn.10018600
mov eax, esp
push dword [ebp - 0x54]
push esi
push dword [ebp - 0x58]
push eax
call fcn.10001313
push 8
push 0x1001ac0c
push 8
push eax
push 1
push edi
call dword [sym.imp.KERNEL32.dll_CompareStringA]
cmp eax, 2
mov esi, dword [sym.imp.OLEAUT32.dll_SysStringLen]
jne 0x1000b24b
lea eax, [ebp - 0x54]
push eax
push 0x1001a480
push 0x17
push ebx
push 0x1001a32c
mov dword [ebp - 0x54], ebx
mov dword [ebp - 0x60], ebx
mov dword [ebp - 0x68], ebx
mov dword [ebp - 0x64], ebx
call dword [sym.imp.ole32.dll_CoCreateInstance]
mov edi, eax
cmp edi, ebx
jge 0x1000b14f
push edi
call fcn.100023b5
push ebx
mov esi, eax
mov eax, 0x1001be90
push eax
push ebx
push ebx
push esi
push eax
call fcn.10002591
push esi
call dword [sym.imp.KERNEL32.dll_LocalFree]
push dword [ebp - 0x64]
mov esi, dword [sym.imp.OLEAUT32.dll_SysStringLen]
call esi
mov eax, dword [ebp - 0x68]
cmp eax, ebx
je 0x1000b127
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x60]
cmp eax, ebx
je 0x1000b134
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x54]
cmp eax, ebx
je 0x1000b141
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov ebx, edi
push dword [ebp - 0x5c]
call esi
mov eax, ebx
jmp 0x1000b2ee
mov eax, dword [ebp - 0x54]
mov ecx, dword [eax]
lea edx, [ebp - 0x60]
push edx
push 0x1001a490
push 0x1001abfc
push eax
call dword [ecx + 0xc]
mov edi, eax
cmp edi, ebx
jl 0x1000b0f0
mov eax, dword [ebp - 0x60]
mov ecx, dword [eax]
lea edx, [ebp - 0x68]
push edx
push 0x1001a450
push ebx
push eax
call dword [ecx + 0xc]
mov edi, eax
cmp edi, ebx
jl 0x1000b0f0
push dword [ebp - 0x58]
mov edi, dword [ebp - 0x68]
lea ecx, [ebp - 0x74]
call fcn.1000153a
mov eax, dword [eax]
mov ecx, dword [edi]
lea edx, [ebp - 0x64]
push edx
push eax
push 0x1001a35c
push edi
call dword [ecx + 0x10]
push dword [ebp - 0x74]
mov dword [ebp - 0x58], eax
call esi
cmp dword [ebp - 0x58], ebx
jge 0x1000b20b
push dword [ebp - 0x58]
call fcn.100023b5
push ebx
mov edi, eax
mov eax, 0x1001be90
push eax
push ebx
push ebx
push edi
push eax
call fcn.10002591
push edi
call dword [sym.imp.KERNEL32.dll_LocalFree]
push dword [ebp - 0x64]
call esi
mov eax, dword [ebp - 0x68]
cmp eax, ebx
je 0x1000b1e9
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x60]
cmp eax, ebx
je 0x1000b1f6
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x54]
cmp eax, ebx
je 0x1000b203
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov ebx, dword [ebp - 0x58]
jmp 0x1000b143
lea eax, [ebp - 0x64]
push eax
lea ecx, [ebp - 0x5c]
call fcn.10001658
mov eax, dword [ebp - 0x5c]
push dword [ebp - 0x64]
mov dword [ebp - 0x74], eax
call esi
mov eax, dword [ebp - 0x68]
cmp eax, ebx
je 0x1000b22f
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x60]
cmp eax, ebx
je 0x1000b23c
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x54]
cmp eax, ebx
je 0x1000b262
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
jmp 0x1000b262
push ebx
lea eax, [ebp - 0x78]
push eax
push dword [ebp - 0x78]
lea eax, [ebp - 0x50]
push eax
push ebx
push 0xf
push dword [ebp - 0x58]
call sub.urlmon.dll_CoInternetParseUrl
mov eax, dword [ebp - 0x6c]
cmp dword [eax + 0x58], ebx
mov dword [ebp - 0x7c], ebx
jle 0x1000b2e6
mov dword [ebp - 0x58], ebx
mov eax, dword [ebp - 0x6c]
mov edi, dword [eax + 0x54]
add edi, dword [ebp - 0x58]
mov eax, dword [ebp + 0x4c0]
test dword [edi + 4], eax
je 0x1000b2d4
test al, 1
je 0x1000b2a4
mov eax, dword [ebp - 0x70]
cmp word [eax], bx
je 0x1000b2a4
mov eax, dword [edi]
push ebx
push dword [ebp - 0x70]
push eax
call fcn.10009179
test eax, eax
jne 0x1000b143
cmp word [ebp - 0x50], bx
je 0x1000b2bb
mov eax, dword [edi]
push ebx
lea ecx, [ebp - 0x50]
push ecx
push eax
call fcn.10009179
test eax, eax
jne 0x1000b30e
mov ecx, dword [edi + 8]
mov eax, dword [edi]
shl ecx, 0x1f
sar ecx, 0x1f
push ecx
push dword [ebp - 0x74]
push eax
call fcn.10009179
test eax, eax
jne 0x1000b30e
inc dword [ebp - 0x7c]
mov eax, dword [ebp - 0x6c]
mov ecx, dword [ebp - 0x7c]
add dword [ebp - 0x58], 0xc
cmp ecx, dword [eax + 0x58]
jl 0x1000b270
push dword [ebp - 0x5c]
call esi
xor eax, eax
inc eax
lea esp, [ebp - 0x8c]
pop edi
pop esi
pop ebx
mov ecx, dword [ebp + 0x4b0]
xor ecx, ebp
call fcn.10018081
add ebp, 0x4b4
leave
ret 8
push dword [ebp - 0x5c]
call esi
xor eax, eax
jmp 0x1000b2ee