Function at 0x10122e9
Capabilities:
Get hostname
Initialize winsock library
Terminate process

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x1a4
mov eax, dword [0x1049108]
xor eax, ebp
mov dword [ebp - 4], eax
and dword [ebp - 0x19c], 0
cmp dword [0x10493e4], 0
push ebx
push esi
push edi
mov edi, dword [ebp + 8]
mov dword [ebp - 0x1a4], edi
mov ebx, 0x80010000
je 0x1012372
mov al, byte [0x10493e8]
cmp al, 4
jb 0x1012573
mov eax, dword [0x10493d0]
mov ecx, dword [0x10493d4]
and eax, 1
and ecx, ebx
or eax, ecx
je 0x1012372
mov eax, dword [0x10493d8]
mov esi, dword [0x10493dc]
mov ecx, eax
mov edx, esi
and ecx, 1
and edx, ebx
cmp ecx, eax
jne 0x1012372
cmp edx, esi
jne 0x1012372
push 0x1012588
push dword [0x104939c]
push dword [0x1049398]
call fcn.0101213f
mov eax, dword [edi + 4]
mov dword [0x10491c0], eax
mov eax, dword [edi]
mov dword [0x1049178], eax
call fcn.010155d9
push 0x190
lea eax, [ebp - 0x194]
push 0
push eax
call sub.msvcrt.dll_memset
add esp, 0xc
lea eax, [ebp - 0x194]
push eax
push 0x202
call dword [sym.imp.WS2_32.dll_WSAStartup]
mov esi, 0x101552c
mov edi, 0x1049104
test eax, eax
jne 0x10136fc
mov dword [0x104917c], 1
call sym.spoolsv.exe_PrvSplIsUpgrade
push 0x5c
pop eax
mov word [0x1049792], ax
mov word [0x1049790], ax
lea eax, [ebp - 0x1a0]
push eax
push 0x1049794
mov dword [ebp - 0x1a0], 0x10
call dword [sym.imp.KERNEL32.dll_GetComputerNameW]
test eax, eax
je 0x1013728
call fcn.01015559
push eax
call fcn.01014fd9
mov dword [ebp - 0x198], eax
test eax, eax
jl 0x101376a
push 0x104927c
push 0x1049278
call sym.spoolsv.exe_PrvBuildOtherNamesFromMachineName
test eax, eax
je 0x10137a2
push 0x5c
pop eax
mov word [0x1049b18], ax
mov word [0x1049b1a], ax
mov eax, dword [0x1049278]
push dword [eax + 4]
push 0x102
push 0x1049b1c
call fcn.0100bc94
call fcn.01015360
mov dword [ebp - 0x198], eax
test eax, eax
jl 0x10137d8
call fcn.010153e4
mov dword [ebp - 0x198], eax
test eax, eax
jl 0x1013813
call fcn.010151f5
test eax, eax
jne 0x101249c
push 1
call fcn.01014e51
mov dword [ebp - 0x198], eax
test eax, eax
jl 0x101384e
lea eax, [ebp - 0x19c]
push eax
push 0
push 0x1014efc
call fcn.01011eff
mov dword [0x10491bc], eax
test eax, eax
je 0x101388e
push dword [eax + 8]
call fcn.01013393
test eax, eax
je 0x10138c4
call fcn.01012fc2
push dword [0x1049280]
call fcn.01010bf6
xor edi, edi
inc edi
mov dword [0x1049174], edi
call fcn.01013be9
call fcn.01013ae1
call fcn.01013997
call fcn.010143d9
call fcn.01014864
call fcn.01014981
call fcn.01014429
push dword [ebp - 0x1a4]
call sym.spoolsv.exe_PrvDllFreeSplMem
cmp dword [0x10493e4], 0
je 0x1012569
mov al, byte [0x10493e8]
cmp al, 4
jb 0x1012580
mov eax, dword [0x10493d0]
mov ecx, dword [0x10493d4]
and eax, edi
and ecx, ebx
or eax, ecx
je 0x1012569
mov eax, dword [0x10493d8]
mov esi, dword [0x10493dc]
mov ecx, eax
mov edx, esi
and ecx, edi
and edx, ebx
cmp ecx, eax
jne 0x1012569
cmp edx, esi
jne 0x1012569
push 0x1012598
push dword [0x104939c]
push dword [0x1049398]
call fcn.0101213f
call fcn.01013a9f
jmp 0x10138e4
test al, al
je 0x101232c
jmp 0x1012372
test al, al
jne 0x1012569
jmp 0x1012525
mov ecx, dword [0x1049104]
cmp ecx, edi
je 0x10123ca
test byte [ecx + 0x1c], 1
je 0x10123ca
push eax
push esi
push 0xa
push dword [ecx + 0x14]
push dword [ecx + 0x10]
call fcn.010245cc
jmp 0x10123ca
mov eax, dword [0x1049104]
cmp eax, edi
mov edi, dword [sym.imp.KERNEL32.dll_GetLastError]
je 0x1013753
test byte [eax + 0x1c], 1
je 0x1013753
call edi
push eax
mov eax, dword [0x1049104]
push esi
push 0xb
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.010245cc
push 0
call edi
push eax
push 0x10138f8
call fcn.01032636
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
mov eax, dword [0x1049104]
cmp eax, edi
je 0x101378d
test byte [eax + 0x1c], 1
je 0x101378d
push dword [ebp - 0x198]
push esi
push 0xc
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.010245cc
push 0
push dword [ebp - 0x198]
call fcn.01024799
push eax
push 0x1020588
jmp 0x101375d
mov eax, dword [0x1049104]
cmp eax, edi
je 0x10137cb
test byte [eax + 0x1c], 1
je 0x10137cb
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
mov eax, dword [0x1049104]
push esi
push 0xd
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.010245cc
xor eax, eax
mov word [0x1049b18], ax
jmp 0x1012458
mov eax, dword [0x1049104]
cmp eax, edi
je 0x10137fb
test byte [eax + 0x1c], 1
je 0x10137fb
push dword [ebp - 0x198]
push esi
push 0xe
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.010245cc
push 0
push dword [ebp - 0x198]
call fcn.01024799
push eax
push 0x1013918
jmp 0x101375d
mov eax, dword [0x1049104]
cmp eax, edi
je 0x1013836
test byte [eax + 0x1c], 1
je 0x1013836
push dword [ebp - 0x198]
push esi
push 0xf
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.010245cc
push 0
push dword [ebp - 0x198]
call fcn.01024799
push eax
push 0x1013928
jmp 0x101375d
mov eax, dword [0x1049104]
cmp eax, edi
je 0x1013871
test byte [eax + 0x1c], 1
je 0x1013871
push dword [ebp - 0x198]
push esi
push 0x10
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.010245cc
push 0
push dword [ebp - 0x198]
call fcn.01024799
push eax
push 0x1013938
call fcn.01032636
jmp 0x101249c
mov eax, dword [0x1049104]
cmp eax, edi
je 0x10138b1
test byte [eax + 0x1c], 1
je 0x10138b1
push dword [ebp - 0x19c]
push esi
push 0x11
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.010245cc
push 0
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push 0x1013908
jmp 0x101375d
mov eax, dword [0x1049104]
cmp eax, edi
je 0x10138b1
test byte [eax + 0x1c], 1
je 0x10138b1
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
mov eax, dword [0x1049104]
push esi
push 0x12
jmp 0x10138a6
mov ecx, dword [ebp - 4]
mov eax, edi
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.01003279
leave
ret 4