Function at 0x100f063
Capabilities:
Get hostname

Disassembly:
push 0x934
mov eax, 0x1020641
call fcn.01017758
mov eax, dword [ebp + 8]
mov edi, dword [ebp + 0xc]
mov esi, dword [ebp + 0x14]
mov dword [ebp - 0x914], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x93c], eax
mov eax, dword [ebp + 0x18]
xor ebx, ebx
push 0x1f8
mov dword [ebp - 0x940], eax
lea eax, [ebp - 0x700]
push ebx
push eax
mov dword [ebp - 0x704], ebx
call sub.msvcrt.dll_memset
push 0x7c
lea eax, [ebp - 0x10c]
push ebx
push eax
mov dword [ebp - 0x110], ebx
call sub.msvcrt.dll_memset
push 0x7c
lea eax, [ebp - 0x8c]
push ebx
push eax
mov dword [ebp - 0x90], ebx
call sub.msvcrt.dll_memset
push 0x1f8
lea eax, [ebp - 0x308]
push ebx
push eax
mov dword [ebp - 0x30c], ebx
call sub.msvcrt.dll_memset
push 0x1f8
lea eax, [ebp - 0x8fc]
push ebx
push eax
mov dword [ebp - 0x900], ebx
call sub.msvcrt.dll_memset
add esp, 0x3c
mov dword [ebp - 0x930], ebx
mov dword [ebp - 0x934], ebx
mov dword [ebp - 0x910], ebx
mov dword [ebp - 4], ebx
mov dword [ebp - 0x924], ebx
mov dword [ebp - 0x91c], ebx
mov dword [ebp - 0x920], ebx
mov dword [ebp - 0x90c], ebx
mov byte [ebp - 4], 2
mov dword [ebp - 0x918], ebx
mov byte [ebp - 4], 4
cmp dword [ebp + 0x1c], ebx
jne 0x100f160
cmp dword [ebp + 0x20], 2
je 0x100f156
cmp dword [ebp + 0x20], 3
jne 0x100f160
mov dword [ebp - 0x91c], 1
mov eax, dword [ebp - 0x914]
mov eax, dword [eax]
mov ecx, dword [eax]
lea edx, [ebp - 0x910]
push edx
push eax
call dword [ecx + 0x20]
cmp eax, ebx
mov dword [ebp - 0x908], eax
jl 0x100f1c2
cmp dword [ebp + 0x20], 2
jne 0x100f1ab
push 0x5c
push dword [ebp - 0x910]
call dword [sym.imp.msvcrt.dll_wcsrchr]
pop ecx
pop ecx
cmp eax, ebx
je 0x100f19d
inc eax
inc eax
jmp 0x100f1a3
mov eax, dword [ebp - 0x910]
push 0xfe
push eax
jmp 0x100f1b6
push 0xfe
push dword [ebp - 0x910]
lea eax, [ebp - 0x704]
push eax
call fcn.01018bdf
cmp dword [ebp + 0x1c], ebx
jne 0x100f1e2
cmp dword [ebp + 0x20], 2
jne 0x100f1e2
mov dword [ebp - 0x924], ebx
mov dword [ebp - 0x920], 1
jmp 0x100f2c5
mov eax, dword [ebp - 0x914]
mov eax, dword [eax]
mov ecx, dword [eax]
lea edx, [ebp - 0x90c]
push edx
push eax
call dword [ecx + 0x4c]
cmp eax, ebx
mov dword [ebp - 0x908], eax
jge 0x100f212
push eax
call dword [sym.imp.API_MS_Win_Core_ErrorHandling_L1_1_0.dll_SetLastError]
call fcn.01018081
jmp 0x100f7d6
mov eax, dword [ebp - 0x90c]
mov ecx, dword [eax]
lea edx, [ebp - 0x918]
push edx
push eax
call dword [ecx + 0x2c]
cmp eax, ebx
mov dword [ebp - 0x908], eax
jl 0x100f201
mov dword [ebp - 0x904], ebx
mov byte [ebp - 4], 6
mov eax, dword [ebp - 0x90c]
mov ecx, dword [eax]
lea edx, [ebp - 0x904]
push edx
push eax
call dword [ecx + 0x24]
cmp eax, ebx
mov dword [ebp - 0x908], eax
jge 0x100f276
push eax
call dword [sym.imp.API_MS_Win_Core_ErrorHandling_L1_1_0.dll_SetLastError]
call fcn.01018081
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x904]
call fcn.0100637a
jmp 0x100f7d6
mov eax, dword [ebp - 0x904]
mov ecx, dword [eax]
lea edx, [ebp - 0x920]
push edx
push eax
call dword [ecx + 0x1c]
cmp eax, ebx
mov dword [ebp - 0x908], eax
jl 0x100f256
xor eax, eax
inc eax
cmp dword [ebp - 0x920], eax
jle 0x100f2a4
mov dword [ebp - 0x924], eax
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x904]
call fcn.0100637a
cmp dword [ebp - 0x920], ebx
jne 0x100f2c5
mov dword [ebp - 0x930], 1
mov dword [ebp - 0x904], 1
cmp dword [ebp - 0x930], ebx
jne 0x100f2ea
movzx eax, word [ebp - 0x904]
cmp eax, dword [ebp - 0x920]
jg 0x100f7cc
mov eax, dword [ebp - 0x93c]
push dword [eax]
push dword [edi]
call fcn.0101b7bb
xor eax, eax
inc eax
cmp ax, word [ebp - 0x904]
je 0x100f30f
cmp dword [ebp + 0x20], 2
je 0x100f781
cmp dword [ebp + 0x1c], ebx
jne 0x100f31a
cmp dword [ebp + 0x20], 1
jne 0x100f363
mov eax, dword [ebp - 0x940]
cmp eax, ebx
je 0x100f329
cmp word [eax], bx
jne 0x100f34d
lea eax, [ebp - 0x934]
push eax
lea eax, [ebp - 0x900]
push eax
mov dword [ebp - 0x934], 0xfe
call dword [sym.imp.KERNEL32.dll_GetComputerNameW]
lea eax, [ebp - 0x900]
push ebx
push eax
push 0x28b
call fcn.0100e181
push eax
push dword [esi]
push dword [edi]
call fcn.0101bd65
push ebx
lea eax, [ebp - 0x704]
push eax
push 0x28c
call fcn.0100e181
sub eax, dword [ebp - 0x91c]
push eax
push dword [esi]
push dword [edi]
call fcn.0101bd65
push dword [ebp - 0x904]
mov eax, dword [ebp - 0x914]
mov eax, dword [eax]
push ebx
lea ecx, [ebp - 0x90]
push ecx
lea ecx, [ebp - 0x110]
push ecx
push eax
call fcn.01010b47
push 0xfe
test eax, eax
jge 0x100f3ca
push 0x1b8
call fcn.01019fbd
push eax
lea eax, [ebp - 0x30c]
push eax
call fcn.01018bdf
jmp 0x100f40b
lea eax, [ebp - 0x90]
push eax
lea eax, [ebp - 0x30c]
push eax
call fcn.01018bdf
push 0xfe
push 0x10016cc
lea eax, [ebp - 0x30c]
push eax
call fcn.01018c22
push 0xfe
lea eax, [ebp - 0x110]
push eax
lea eax, [ebp - 0x30c]
push eax
call fcn.01018c22
mov eax, dword [ebp - 0x914]
mov eax, dword [eax]
mov ecx, dword [eax]
lea edx, [ebp - 0x92c]
push edx
push eax
call dword [ecx + 0x28]
test eax, eax
jl 0x100f449
cmp word [ebp - 0x92c], bx
jne 0x100f449
push 0xfe
push 0x194
call fcn.01019fbd
push eax
lea eax, [ebp - 0x30c]
push eax
call fcn.01018bdf
push ebx
lea eax, [ebp - 0x30c]
push eax
push 0x28d
call fcn.0100e181
sub eax, dword [ebp - 0x91c]
push eax
push dword [esi]
push dword [edi]
call fcn.0101bd65
mov eax, dword [ebp - 0x914]
mov eax, dword [eax]
lea ecx, [ebp - 0x30c]
push ecx
push eax
call fcn.010108e6
test eax, eax
jge 0x100f4a0
push 0xfe
push 0x1b8
call fcn.01019fbd
push eax
lea eax, [ebp - 0x30c]
push eax
call fcn.01018bdf
push ebx
lea eax, [ebp - 0x30c]
push eax
push 0x28e
call fcn.0100e181
sub eax, dword [ebp - 0x91c]
push eax
push dword [esi]
push dword [edi]
call fcn.0101bd65
cmp dword [ebp + 0x1c], ebx
jne 0x100f4d1
cmp dword [ebp + 0x20], 2
je 0x100f63d
push 0x1f8
lea eax, [ebp - 0x504]
push ebx
push eax
mov dword [ebp - 0x508], ebx
call sub.msvcrt.dll_memset
add esp, 0xc
push 0xfe
lea eax, [ebp - 0x30c]
push eax
push dword [ebp - 0x90c]
call fcn.01010f4c
cmp eax, ebx
jge 0x100f523
push 0xfe
push 0x197
call fcn.01019fbd
push eax
lea eax, [ebp - 0x30c]
push eax
call fcn.01018bdf
cmp word [ebp - 0x30c], bx
jne 0x100f569
push 0xfe
push 0xbf
call fcn.01019fbd
push eax
lea eax, [ebp - 0x30c]
push eax
call fcn.01018bdf
push 0xfe
push 0x182
call fcn.01019fbd
push eax
lea eax, [ebp - 0x508]
push eax
call fcn.01018bdf
jmp 0x100f5fa
mov dword [ebp - 0x928], ebx
mov byte [ebp - 4], 8
mov eax, dword [ebp - 0x90c]
lea edx, [ebp - 0x928]
push edx
mov dword [ebp - 0x938], ebx
mov ecx, dword [eax]
push eax
call dword [ecx + 0x3c]
cmp eax, ebx
jl 0x100f5a7
mov eax, dword [ebp - 0x928]
mov ecx, dword [eax]
lea edx, [ebp - 0x938]
push edx
push eax
call dword [ecx + 0x34]
cmp eax, ebx
jge 0x100f5bf
push 0xfe
push 0x1b8
call fcn.01019fbd
push eax
lea eax, [ebp - 0x30c]
jmp 0x100f5e5
cmp dword [ebp - 0x938], 3
push 0xfe
jne 0x100f5d4
push 0x181
jmp 0x100f5d9
push 0x183
call fcn.01019fbd
push eax
lea eax, [ebp - 0x508]
push eax
call fcn.01018bdf
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x928]
call fcn.0100637a
push ebx
lea eax, [ebp - 0x508]
push eax
push 0x28f
call fcn.0100e181
sub eax, dword [ebp - 0x91c]
push eax
push dword [esi]
push dword [edi]
call fcn.0101bd65
cmp dword [ebp + 0x1c], ebx
je 0x100f63d
push ebx
lea eax, [ebp - 0x30c]
push eax
push 0x29e
call fcn.0100e181
push eax
push dword [esi]
push dword [edi]
call fcn.0101bd65
push dword [ebp - 0x904]
mov eax, dword [ebp - 0x914]
mov eax, dword [eax]
push 1
lea ecx, [ebp - 0x90]
push ecx
lea ecx, [ebp - 0x110]
push ecx
push eax
call fcn.01010b47
test eax, eax
jge 0x100f679
push 0xfe
push 0x1b8
call fcn.01019fbd
jmp 0x100f74c
push ebx
push 1
push 0x1a2
call fcn.01019fbd
push eax
lea eax, [ebp - 0x90]
push eax
call fcn.010182d1
test eax, eax
je 0x100f741
push ebx
push 1
push 0x1a3
call fcn.01019fbd
push eax
lea eax, [ebp - 0x90]
push eax
call fcn.010182d1
test eax, eax
je 0x100f741
push ebx
push 1
push 0x1a4
call fcn.01019fbd
push eax
lea eax, [ebp - 0x90]
push eax
call fcn.010182d1
test eax, eax
je 0x100f741
push ebx
push 1
push 0x1a5
call fcn.01019fbd
push eax
lea eax, [ebp - 0x90]
push eax
call fcn.010182d1
test eax, eax
je 0x100f741
push 0xfe
lea eax, [ebp - 0x90]
push eax
lea eax, [ebp - 0x30c]
push eax
call fcn.01018bdf
push 0xfe
push 0x10016cc
lea eax, [ebp - 0x30c]
push eax
call fcn.01018c22
push 0xfe
lea eax, [ebp - 0x110]
push eax
lea eax, [ebp - 0x30c]
push eax
call fcn.01018c22
jmp 0x100f759
push 0xfe
lea eax, [ebp - 0x90]
push eax
lea eax, [ebp - 0x30c]
push eax
call fcn.01018bdf
push ebx
lea eax, [ebp - 0x30c]
push eax
push 0x290
call fcn.0100e181
sub eax, dword [ebp - 0x91c]
push eax
push dword [esi]
push dword [edi]
call fcn.0101bd65
mov dword [ebp - 0x908], ebx
cmp dword [ebp + 0x1c], ebx
je 0x100f7b1
push dword [ebp - 0x904]
lea eax, [ebp - 0x918]
push dword [ebp + 0x20]
push dword [esi]
push edi
push eax
lea eax, [ebp - 0x90c]
push eax
push dword [ebp - 0x914]
call fcn.0100e94f
mov dword [ebp - 0x908], eax
cmp dword [ebp - 0x924], ebx
je 0x100f7bb
inc dword [esi]
inc dword [ebp - 0x904]
mov dword [ebp - 0x930], ebx
jmp 0x100f2cf
cmp dword [ebp - 0x924], ebx
jne 0x100f7d6
inc dword [esi]
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x918]
call fcn.0100637a
mov byte [ebp - 4], bl
lea ecx, [ebp - 0x90c]
call fcn.0100637a
or dword [ebp - 4], 0xffffffff
push dword [ebp - 0x910]
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov eax, dword [ebp - 0x908]
call fcn.010177ac
ret 0x1c