Function at 0x103ad630
Capabilities:
Get hostname

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1042771c
mov eax, dword fs:[0]
push eax
push ebx
mov eax, 0x2c60
call fcn.103b73e0
mov eax, dword [0x104c5878]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, ecx
cmp dword [0x104ccd04], 0
je 0x103ada76
cmp dword [0x104ccc8c], 0
je 0x103ada76
mov dword [ebp - 0x2c34], 0
mov dword [ebp - 0x2c30], 0
mov dword [ebp - 0x2c2c], 0
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x2c28]
call fcn.1036e4c0
mov byte [ebp - 4], 1
push ecx
push str.iTunes_11.0.5__Windows__Microsoft_Windows_7_x64_Ultimate_Edition_Service_Pack_1__Build_7601___AppleWebKit_536.30.1
lea ecx, [ebp - 0x2c10]
call fcn.10359540
push str.http:__itunes.apple.com_cn_app__id_u_mt8
push str.Referer
lea ecx, [ebp - 0x2c28]
call fcn.1035c220
push str.en_us_q0.50__en_q0.25
push str.Accept_Language
lea ecx, [ebp - 0x2c28]
call fcn.1035c220
push str.28800
push str.X_Apple_Tz
lea ecx, [ebp - 0x2c28]
call fcn.1035c220
push dword [esi + 0x3c]
lea ecx, [ebp - 0x2c28]
push str.X_Apple_Store_Front
call fcn.1035c220
push str.application_x_apple_plist
push str.Content_Type
lea ecx, [ebp - 0x2c28]
call fcn.1035c220
push dword [esi + 0xc]
lea ecx, [ebp - 0x2c28]
push str.X_Token
call fcn.1035c220
push dword [esi + 0x18]
lea ecx, [ebp - 0x2c28]
push str.X_Dsid
call fcn.1035c220
push dword [esi + 0x4c]
lea ecx, [ebp - 0x2c28]
push str.Cookie
call fcn.1035c220
movups xmm0, xmmword [str.https:__buy.itunes.apple.com_WebObjects_MZFinance.woa_wa_authorizeMachine]
mov ax, word [0x1047b2d8]
push 0x7b6
movups xmmword [ebp - 0xa18], xmm0
mov word [ebp - 0x9d0], ax
lea eax, [ebp - 0x9ce]
movups xmm0, xmmword [0x1047b2a0]
push 0
push eax
movups xmmword [ebp - 0xa08], xmm0
movups xmm0, xmmword [0x1047b2b0]
movups xmmword [ebp - 0x9f8], xmm0
movups xmm0, xmmword [0x1047b2c0]
movups xmmword [ebp - 0x9e8], xmm0
movq xmm0, qword [0x1047b2d0]
movq qword [ebp - 0x9d8], xmm0
call fcn.103ce630
add esp, 0xc
lea eax, [ebp - 0x2c50]
push eax
push str._llu
push dword [esi + 0x18]
call fcn.10355d30
add esp, 0xc
lea ecx, [ebp - 0x2a18]
push dword [ebp - 0x2c4c]
push dword [ebp - 0x2c50]
call fcn.103aabb0
add esp, 8
mov dword [ebp - 0x2c44], 0x200
lea eax, [ebp - 0x2c44]
push eax
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.KERNEL32.dll_GetComputerNameA]
lea ecx, [esi + 0x30]
test ecx, ecx
je 0x103ad843
mov eax, dword [ecx]
test eax, eax
je 0x103ad843
cmp dword [ecx + 4], 2
jae 0x103ad848
mov eax, 0x104571a6
lea ecx, [ebp - 0x218]
push ecx
lea ecx, [ebp - 0x2a18]
push ecx
push eax
lea eax, [ebp - 0x1a18]
push str.__xml_version_1.0__encoding_UTF_8____plist_version_1.0___dict__t_key_guid__key__t_string__s__string__t_key_kbsync__key__t_data__t_s_t__data__t_key_machineName__key__t_string__s__string__t_key_needDiv__key__t_string_1__string___dict___plist_
push eax
call fcn.1032e600
add esp, 0x14
mov dword [ebp - 0x2c40], 0
xor edi, edi
mov dword [ebp - 0x2c3c], 0
lea esi, [ebp - 0x1a18]
mov dword [ebp - 0x2c40], edi
mov dword [ebp - 0x2c38], 0
lea ecx, [esi + 1]
mov dword [ebp - 0x2c3c], edi
mov al, byte [esi]
inc esi
test al, al
jne 0x103ad8a0
sub esi, ecx
lea ecx, [esi + 1]
cmp ecx, 2
jb 0x103ad908
test ecx, ecx
mov eax, ecx
mov edx, 1
lea ecx, [ebp - 0x2c40]
cmove eax, edx
push eax
call fcn.10353240
test al, al
je 0x103ad902
mov eax, dword [ebp - 0x2c3c]
test eax, eax
je 0x103ad8da
dec eax
jmp 0x103ad8dc
xor eax, eax
mov edi, dword [ebp - 0x2c40]
push eax
lea eax, [ebp - 0x1a18]
push eax
push edi
call fcn.103ce0b0
xor ecx, ecx
lea eax, [esi + 1]
add esp, 0xc
test eax, eax
cmove esi, ecx
mov byte [esi + edi], cl
jmp 0x103ad908
mov edi, dword [ebp - 0x2c40]
mov byte [ebp - 4], 2
mov eax, dword [ebp - 0x2c3c]
test eax, eax
je 0x103ad919
dec eax
jmp 0x103ad91b
xor eax, eax
sub esp, 8
push eax
push edi
push ecx
lea eax, [ebp - 0xa18]
push eax
lea ecx, [ebp - 0x2c28]
call fcn.1035c920
test al, al
je 0x103ad9ee
cmp dword [ebp - 0x2a84], 0xc8
jne 0x103ad9ee
lea eax, [ebp - 0x2c58]
push eax
lea ecx, [ebp - 0x2c28]
call fcn.1036e550
mov esi, dword [ebp - 0x2c54]
test esi, esi
je 0x103ad96c
lea eax, [esi - 1]
jmp 0x103ad96e
xor eax, eax
lea ecx, [ebp - 0x2c34]
push ecx
push eax
call fcn.1031c570
test esi, esi
je 0x103ad982
dec esi
jmp 0x103ad984
xor esi, esi
push esi
push dword [ebp - 0x2c58]
push dword [ebp - 0x2c34]
call fcn.103ce0b0
add esp, 0xc
mov byte [ebp - 4], 1
mov ecx, edi
call fcn.10367720
mov ecx, dword [ebp - 0x2c30]
mov eax, dword [ebp - 0x2c34]
sub ecx, eax
push ecx
push eax
lea ecx, [ebp - 0x2c6c]
mov dword [ebp - 0x2c40], 0
call fcn.1036a690
mov byte [ebp - 4], 3
xor esi, esi
cmp dword [ebp - 0x2c6c], esi
mov eax, 3
cmove esi, eax
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x2c6c]
call fcn.1036a5c0
jmp 0x103ada08
mov byte [ebp - 4], 1
mov ecx, edi
call fcn.10367720
mov dword [ebp - 0x2c40], 0
mov esi, 2
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x2c28]
call fcn.1036f560
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x2c34]
test ecx, ecx
je 0x103ada72
mov edx, dword [ebp - 0x2c2c]
mov eax, ecx
sub edx, ecx
cmp edx, 0x1000
jb 0x103ada4a
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x103ada99
push edx
push ecx
call fcn.103b6ca6
add esp, 8
mov dword [ebp - 0x2c34], 0
mov dword [ebp - 0x2c30], 0
mov dword [ebp - 0x2c2c], 0
mov eax, esi
jmp 0x103ada7b
mov eax, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.103b6385
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
call fcn.103d6311
int3