Function at 0x1006534
Capabilities:
Get hostname
Set registry value

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
mov eax, 0x1a48
call fcn.01006f00
mov eax, dword [0x1009f7c]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 8]
push esi
mov esi, dword [ebp + 0x10]
mov dword [ebp - 0x1a44], eax
mov eax, dword [ebp + 0x14]
push edi
xor edi, edi
mov dword [ebp - 0x1a40], eax
lea eax, [ebp - 0x1a24]
push esi
push eax
mov dword [ebp - 0x1a34], esi
mov dword [ebp - 0x1a48], edi
mov dword [ebp - 0x1a38], edi
mov dword [ebp - 0x1a28], edi
mov dword [ebp - 0x1a30], edi
mov dword [ebp - 0x1a3c], edi
mov dword [ebp - 0x1a2c], edi
call fcn.010046dd
cmp eax, edi
pop ecx
pop ecx
jne 0x1006ab4
cmp dword [ebp + 0xc], 1
push ebx
push 3
pop ebx
mov dword [0x100a0c0], ebx
mov dword [0x100a0d8], ebx
mov dword [0x100a0f0], ebx
mov dword [0x100a108], ebx
mov dword [0x100a120], ebx
mov dword [0x100a138], ebx
jne 0x1006695
mov edi, dword [sym.imp.MSVCR80.dll__itow]
lea eax, [ebp - 0x11b4]
mov dword [0x100a0c8], eax
lea eax, [ebp - 0x1164]
mov dword [0x100a0e0], eax
lea eax, [ebp - 0x1114]
mov dword [0x100a0f8], eax
lea eax, [ebp - 0x1a20]
mov dword [0x100a110], eax
lea eax, [ebp - 0x1918]
mov dword [0x100a128], eax
push 0xa
lea eax, [ebp - 0x1c]
push eax
push dword [ebp - 0x1810]
call edi
add esp, 0xc
push 0xa
lea eax, [ebp - 0x1c]
push eax
add esi, 0xe88
push esi
call dword [sym.imp.KERNEL32.dll_lstrcpynW]
push 0xa
lea eax, [ebp - 0x1c]
push eax
push dword [ebp - 0x180c]
call edi
add esp, 0xc
push 0x1001674
push 0xa
push esi
call fcn.01002c26
lea eax, [ebp - 0x1c]
push eax
push 0xa
push esi
call fcn.01002c26
push dword [ebp - 0x1a34]
mov dword [0x100a140], esi
push 1
call fcn.01003dbd
pop ecx
xor esi, esi
pop ecx
xor eax, eax
movzx ecx, word [eax + 0x10025ec]
mov word [ebp + eax - 0x680], cx
inc eax
inc eax
cmp cx, si
jne 0x100667d
jmp 0x10066fd
lea eax, [esi + 0xc30]
push esi
push 9
mov dword [0x100a0c8], 0x10025a0
mov dword [0x100a0e0], 0x1002550
mov dword [0x100a0f8], eax
mov dword [0x100a110], 0x1002524
mov dword [0x100a128], 0x100250c
mov dword [0x100a140], 0x1002500
call fcn.01003dbd
lea edi, [ebp - 0x680]
pop ecx
dec edi
pop ecx
dec edi
mov ax, word [edi + 2]
inc edi
inc edi
test ax, ax
jne 0x10066e4
push 5
pop ecx
mov esi, 0x10024e8
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
xor esi, esi
call fcn.01004002
cmp eax, 1
jne 0x1006741
mov edi, 0x105
lea eax, [ebp - 0x480]
push edi
push eax
call fcn.0100517c
cmp eax, esi
pop ecx
pop ecx
jne 0x1006ab3
lea eax, [ebp - 0x480]
push edi
push eax
call fcn.010050d5
test eax, eax
pop ecx
pop ecx
jne 0x1006741
call dword [sym.imp.KERNEL32.dll_GetLastError]
jmp 0x1006ab3
lea eax, [ebp - 0x480]
mov dword [0x1009fa8], eax
lea eax, [ebp - 0x680]
push 0x206
mov dword [0x100a2a8], eax
lea eax, [ebp - 0x272]
push esi
push eax
mov dword [0x1009fa0], ebx
mov dword [0x100a2a0], ebx
mov word [ebp - 0x274], si
call sub.MSVCR80.dll_memset
add esp, 0xc
lea eax, [ebp - 0x1a48]
push eax
lea eax, [ebp - 0x274]
mov edi, 0x104
push eax
mov dword [ebp - 0x1a48], edi
call dword [sym.imp.KERNEL32.dll_GetComputerNameW]
test eax, eax
jne 0x10067b7
push edi
lea eax, [ebp - 0x480]
push eax
lea eax, [ebp - 0x274]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpynW]
mov eax, dword [ebp - 0x1a34]
add eax, 0x820
mov edx, 0x10019f8
mov ecx, eax
mov di, word [ecx]
cmp di, word [edx]
jne 0x10067ef
cmp di, si
je 0x10067eb
mov di, word [ecx + 2]
cmp di, word [edx + 2]
jne 0x10067ef
add ecx, 4
add edx, 4
cmp di, si
jne 0x10067c9
xor ecx, ecx
jmp 0x10067f4
sbb ecx, ecx
sbb ecx, 0xffffffff
cmp ecx, esi
je 0x1006843
lea edi, [ebp - 0x274]
dec edi
dec edi
mov cx, word [edi + 2]
inc edi
inc edi
cmp cx, si
jne 0x1006800
mov esi, 0x1001334
movsd dword es:[edi], dword [esi]
mov edx, eax
mov cx, word [eax]
inc eax
inc eax
test cx, cx
jne 0x1006813
sub eax, edx
lea edi, [ebp - 0x274]
dec edi
dec edi
mov cx, word [edi + 2]
inc edi
inc edi
test cx, cx
jne 0x1006827
mov ecx, eax
shr ecx, 2
mov esi, edx
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, ebx
rep movsb byte es:[edi], byte [esi]
xor esi, esi
cmp dword [ebp + 0xc], 1
lea eax, [ebp - 0x274]
mov dword [0x100a408], ebx
mov dword [0x100a1f8], ebx
mov ebx, dword [ebp - 0x1a34]
mov dword [0x100a410], eax
mov dword [0x100a200], 0x10024e4
jne 0x100687f
lea eax, [ebp - 0x1a24]
push eax
push ebx
call fcn.01003b8c
pop ecx
pop ecx
lea eax, [ebp - 0xa94]
push 0x105
push eax
call fcn.01005703
cmp eax, esi
pop ecx
pop ecx
jne 0x1006ab3
xor eax, eax
movzx ecx, word [eax + 0x1001924]
mov word [ebp + eax - 0x888], cx
inc eax
inc eax
cmp cx, si
jne 0x100689c
lea eax, [ebp - 0xa94]
push eax
push 0x104
lea eax, [ebp - 0x888]
push eax
call fcn.01002c26
lea eax, [ebp - 0x1a28]
push eax
push 0x10028f8
lea eax, [ebp - 0x888]
push eax
call dword [0x100a608]
mov edi, eax
cmp edi, esi
jl 0x10069cf
cmp dword [ebp + 0xc], 1
mov eax, dword [ebp - 0x1a28]
mov ecx, dword [eax]
lea edx, [ebp - 0x1a38]
push edx
lea edx, [ebx + 0x410]
jne 0x1006911
push 0x1f
push 0x1009848
jmp 0x1006918
push 0x12
push 0x1009e10
push edx
push eax
call dword [ecx + 0x18]
mov edi, eax
cmp edi, esi
jge 0x1006956
and eax, 0xffff
cmp eax, 0x1392
jne 0x10069cf
mov eax, dword [ebp - 0x1a28]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
push ebx
push dword [ebp + 0xc]
push dword [ebp - 0x1a44]
call fcn.01006204
add esp, 0xc
jmp 0x1006ab3
mov eax, dword [ebp - 0x1a38]
mov ecx, dword [eax]
lea edx, [ebp - 0x1a30]
push edx
push 0x1002918
push eax
call dword [ecx]
mov edi, eax
cmp edi, esi
jl 0x10069cf
push esi
push 1
push dword [ebp - 0x1a40]
push esi
push esi
push esi
push esi
push 0x10040000
push dword [ebp - 0x1a30]
call fcn.010051ea
mov edi, eax
add esp, 0x24
cmp edi, esi
jne 0x10069cf
mov eax, dword [ebp - 0x1a30]
mov ecx, dword [eax]
lea edx, [ebp - 0x1a3c]
push edx
push eax
call dword [ecx + 0x24]
mov edi, eax
cmp edi, esi
jne 0x10069cf
mov eax, dword [ebp - 0x1a3c]
cmp eax, esi
je 0x10069e3
lea edx, [ebp - 0x6c]
sub edx, eax
movzx ecx, word [eax]
mov word [edx + eax], cx
inc eax
inc eax
cmp cx, si
jne 0x10069c1
cmp dword [ebp - 0x1a3c], esi
je 0x10069e3
push dword [ebp - 0x1a3c]
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov eax, dword [ebp - 0x1a30]
cmp eax, esi
je 0x10069f3
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x1a38]
cmp eax, esi
je 0x1006a03
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x1a28]
cmp eax, esi
je 0x1006a13
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
cmp edi, esi
jne 0x1006ab1
push ebx
push 1
mov dword [ebp - 0x1a2c], esi
call fcn.01003a5f
pop ecx
pop ecx
lea eax, [ebp - 0x1a2c]
push eax
push 2
push esi
lea eax, [ebx + 0x618]
push eax
push dword [ebp - 0x1a44]
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
mov edi, eax
cmp edi, esi
jne 0x1006a9d
lea eax, [ebp - 0x6c]
lea edx, [eax + 2]
mov cx, word [eax]
inc eax
inc eax
cmp cx, si
jne 0x1006a54
sub eax, edx
sar eax, 1
add eax, eax
push eax
lea eax, [ebp - 0x6c]
push eax
push 1
push esi
push 0x100190c
push dword [ebp - 0x1a2c]
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov edi, eax
cmp edi, esi
jne 0x1006a9d
mov eax, dword [ebp - 0x1a40]
cmp eax, esi
jne 0x1006a92
mov eax, str.LocalSystem
push ebx
push eax
call fcn.010040f6
pop ecx
pop ecx
mov edi, eax
cmp dword [ebp - 0x1a2c], esi
je 0x1006ab1
push dword [ebp - 0x1a2c]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov eax, edi
pop ebx
mov ecx, dword [ebp - 4]
pop edi
xor ecx, ebp
pop esi
call fcn.01006b3a
leave
ret