Function at 0x1000c0a3
Capabilities:
Get hostname

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1f4
mov eax, dword [0x10239420]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 0x10]
push ebx
mov ebx, dword [ebp + 8]
push edi
mov edi, dword [ebp + 0x14]
mov dword [ebp - 0x1f0], ebx
mov dword [ebp - 0x1e8], eax
mov dword [ebp - 0x1f4], edi
test ebx, ebx
je 0x1000c348
push esi
mov esi, dword [ebp + 0xc]
test esi, esi
jle 0x1000c347
lea eax, [esi + esi]
push eax
push 0
push ebx
call fcn.10093270
add esp, 0xc
call fcn.10007d4b
mov dword [edi], eax
xor eax, eax
cmp word [0x102507d8], ax
je 0x1000c156
lea eax, [esi - 1]
cmp eax, 0x28
jl 0x1000c113
push 0x27
pop eax
push eax
mov esi, 0x102507d8
push esi
push ebx
call fcn.1009380c
movzx eax, word [0x102507d0]
mov ecx, dword [ebp - 0x1e8]
mov dword [ecx], eax
push dword [edi]
push eax
push esi
push 0x10250780
push str.GetUserInfo_Self___s____s____d____d_
push str.UserInfo
push 0xffffffffffffffff
push 0x10258cdc
call fcn.10023e40
add esp, 0x2c
jmp 0x1000c347
mov edi, 0x10250780
cmp word [0x10250780], ax
jne 0x1000c1ac
push 0x50
push eax
push edi
call fcn.10093270
xor eax, eax
push 0x4e
push eax
mov word [ebp - 0x54], ax
lea eax, [ebp - 0x52]
push eax
call fcn.10093270
add esp, 0x18
push 0x28
pop esi
lea eax, [ebp - 0x1e8]
push eax
lea eax, [ebp - 0x54]
push eax
mov dword [ebp - 0x1e8], esi
call dword [sym.imp.KERNEL32.dll_GetComputerNameW]
push esi
push edi
lea eax, [ebp - 0x54]
push 0xffffffffffffffff
push eax
call fcn.1001ae86
add esp, 0x10
mov esi, 0x102507d8
push esi
push edi
push str.GetUserInfo_Self___s____s_
push str.UserInfo
push 0xffffffffffffffff
mov ebx, 0x10258cdc
push ebx
call fcn.10023e40
xor eax, eax
push 0xc6
push eax
mov word [ebp - 0x1e4], ax
lea eax, [ebp - 0x1e2]
push eax
call fcn.10093270
xor eax, eax
push 0xc6
push eax
mov word [ebp - 0x11c], ax
lea eax, [ebp - 0x11a]
push eax
call fcn.10093270
lea eax, [ebp - 0x1e4]
push 0x64
push eax
call fcn.1000945c
add esp, 0x38
test eax, eax
je 0x1000c347
push 0x64
lea eax, [ebp - 0x11c]
push eax
lea eax, [ebp - 0x1e4]
push 0xffffffffffffffff
push eax
call fcn.1001ae86
lea eax, [ebp - 0x11c]
push eax
push str.GetUserInfo_Self_1___s_
push str.UserInfo
push 0xffffffffffffffff
push ebx
call fcn.10023e40
lea eax, [ebp - 0x11c]
push 0x5c
push eax
call fcn.10093870
add esp, 0x2c
mov dword [ebp - 0x1ec], eax
test eax, eax
je 0x1000c2d2
lea ecx, [ebp - 0x11c]
sub eax, ecx
sar eax, 1
push edi
mov dword [ebp - 0x1e8], eax
call fcn.10093856
pop ecx
cmp eax, dword [ebp - 0x1e8]
jne 0x1000c2d2
push dword [ebp - 0x1e8]
lea eax, [ebp - 0x11c]
push eax
push edi
call fcn.10094463
add esp, 0xc
test eax, eax
jne 0x1000c2d2
add dword [ebp - 0x1ec], 2
push dword [ebp - 0x1ec]
call fcn.10093856
lea edi, [eax + eax]
push edi
push dword [ebp - 0x1ec]
lea eax, [ebp - 0x11c]
push eax
call fcn.10094e10
add esp, 0x10
xor eax, eax
mov word [ebp + edi - 0x11c], ax
push 0x27
lea eax, [ebp - 0x11c]
push eax
push esi
call fcn.1009380c
mov eax, dword [ebp + 0xc]
dec eax
push eax
push esi
push dword [ebp - 0x1f0]
call fcn.1009380c
add esp, 0x18
cmp word [0x102507d8], 0
je 0x1000c31c
push 0x101dad04
push esi
call fcn.10093b90
pop ecx
pop ecx
test eax, eax
jne 0x1000c313
inc eax
jmp 0x1000c316
push 2
pop eax
mov word [0x102507d0], ax
mov eax, dword [ebp - 0x1f4]
push dword [eax]
movzx eax, word [0x102507d0]
push eax
push dword [ebp - 0x1f0]
push str.GetUserInfo_Self_1___s____d____d_
push str.UserInfo
push 0xffffffffffffffff
push ebx
call fcn.10023e40
add esp, 0x1c
pop esi
mov ecx, dword [ebp - 4]
pop edi
xor ecx, ebp
pop ebx
call fcn.1009314a
leave
ret