Function at 0x100c33d
Capabilities:
Get hostname

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x1c
and dword [ebp - 0x14], 0
push ebx
push esi
mov esi, dword [sym.imp.msvcrt.dll_malloc]
push 0x40
call esi
pop ecx
mov dword [0x1011978], eax
test eax, eax
jne 0x100c372
push 0x64
push 2
call fcn.0100bd21
pop ecx
pop ecx
or eax, 0xffffffff
jmp 0x100c716
push edi
push 2
pop edi
push edi
call fcn.0100c30f
test eax, eax
jne 0x100c390
push 0x17
call fcn.0100c30f
test eax, eax
mov eax, 0x1002a50
jne 0x100c395
mov eax, 0x1002a44
push eax
push dword [0x1011978]
call fcn.0100d27e
test eax, eax
je 0x100c705
mov eax, dword [0x1011978]
mov dword [0x1011974], 1
mov ecx, 0x3500
cmp word [eax], di
jne 0x100c3cd
mov edx, ecx
mov word [eax + 2], dx
mov eax, dword [0x1011978]
cmp word [eax], 0x17
jne 0x100c3d7
mov word [eax + 2], cx
push str.RegistryMachineSystemCurrentControlSetServicesTcpipParameters
lea eax, [ebp - 8]
push eax
call fcn.0100f071
test eax, eax
jge 0x100c400
push 0x65
push edi
call fcn.0100bd21
pop ecx
pop ecx
push 0x57
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x100c712
mov ebx, 0x400
push ebx
call esi
mov esi, eax
pop ecx
mov dword [ebp - 4], esi
test esi, esi
jne 0x100c429
push 0x64
push edi
call fcn.0100bd21
pop ecx
pop ecx
push dword [ebp - 8]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push 8
jmp 0x100c3f5
push ebx
lea eax, [ebp - 0x10]
push eax
push esi
push 0x1002a34
push dword [ebp - 8]
call fcn.0100f0ea
test eax, eax
jl 0x100c465
mov esi, dword [esi]
dec esi
je 0x100c465
dec esi
je 0x100c45c
dec esi
je 0x100c453
dec esi
jne 0x100c465
mov dword [ebp - 0xc], ebx
jmp 0x100c46c
mov dword [ebp - 0xc], 0x800
jmp 0x100c46c
mov dword [ebp - 0xc], 0x1000
jmp 0x100c46c
mov dword [ebp - 0xc], 0x2000
push ebx
lea eax, [ebp - 0x10]
push eax
push dword [ebp - 4]
push 0x1002a2c
push dword [ebp - 8]
call fcn.0100f0ea
mov edi, 0xff
mov esi, 0x10119a2
test eax, eax
jl 0x100c4a0
mov eax, dword [ebp - 4]
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x100c495
sub eax, edx
jne 0x100c4b9
push ebx
lea eax, [ebp - 0x10]
push eax
push dword [ebp - 4]
push 0x1002a20
push dword [ebp - 8]
call fcn.0100f0ea
test eax, eax
jl 0x100c4cf
push edi
push dword [ebp - 4]
push 0x100
push esi
call sub.msvcrt.dll_strncpy_s
add esp, 0x10
and dword [ebp - 0x14], 0
push str.RegistryMachineSoftwarePoliciesMicrosoftWindows_NTDNSClient
lea eax, [ebp - 0x18]
push eax
call fcn.0100f071
test eax, eax
jl 0x100c50f
push ebx
lea eax, [ebp - 0x10]
push eax
push dword [ebp - 4]
push 0x1002a14
push dword [ebp - 0x18]
call fcn.0100f0ea
test eax, eax
jl 0x100c50f
mov ecx, dword [ebp - 4]
lea edx, [ecx + 1]
mov dword [ebp - 0x1c], edx
mov dl, byte [ecx]
inc ecx
test dl, dl
jne 0x100c503
sub ecx, dword [ebp - 0x1c]
jne 0x100c524
push ebx
lea eax, [ebp - 0x10]
push eax
push dword [ebp - 4]
push 0x1002a14
push dword [ebp - 8]
call fcn.0100f0ea
test eax, eax
jl 0x100c5ba
mov eax, dword [ebp - 4]
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x100c532
sub eax, edx
je 0x100c5ba
push edi
push dword [ebp - 4]
push 0x100
push esi
call sub.msvcrt.dll_strncpy_s
add esp, 0x10
xor edi, edi
cmp byte [0x10119a2], 0
mov eax, esi
mov dword [0x1011aa4], esi
mov ecx, 0x1011aa8
je 0x100c5b0
cmp ecx, 0x1011b6c
jae 0x100c5b0
mov dl, byte [eax]
cmp dl, 0x20
je 0x100c58d
cmp dl, 9
je 0x100c58d
cmp dl, 0x2c
je 0x100c58d
test edi, edi
je 0x100c593
mov dword [ecx], eax
add ecx, 4
xor edi, edi
jmp 0x100c593
xor edi, edi
mov byte [eax], 0
inc edi
inc eax
cmp byte [eax], 0
jne 0x100c567
jmp 0x100c5b0
mov dl, byte [eax]
cmp dl, 0x20
je 0x100c653
cmp dl, 9
je 0x100c653
inc eax
cmp byte [eax], 0
jne 0x100c59b
jmp 0x100c653
push ebx
lea eax, [ebp - 0x10]
push eax
push dword [ebp - 4]
push 0x1002a04
push dword [ebp - 8]
call fcn.0100f0ea
test eax, eax
jl 0x100c660
mov eax, dword [ebp - 4]
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x100c5dd
sub eax, edx
je 0x100c660
push edi
push dword [ebp - 4]
push 0x100
push esi
call sub.msvcrt.dll_strncpy_s
add esp, 0x10
xor edi, edi
cmp byte [0x10119a2], 0
mov eax, esi
mov dword [0x1011aa4], esi
mov ecx, 0x1011aa8
je 0x100c64e
cmp ecx, 0x1011b6c
jae 0x100c64e
mov dl, byte [eax]
cmp dl, 0x20
je 0x100c633
cmp dl, 9
je 0x100c633
test edi, edi
je 0x100c639
mov dword [ecx], eax
add ecx, 4
xor edi, edi
jmp 0x100c639
xor edi, edi
mov byte [eax], 0
inc edi
inc eax
cmp byte [eax], 0
jne 0x100c612
jmp 0x100c64e
mov dl, byte [eax]
cmp dl, 0x20
je 0x100c653
cmp dl, 9
je 0x100c653
inc eax
cmp byte [eax], 0
jne 0x100c641
mov byte [eax], 0
and dword [ecx], 0
mov dword [ebp - 0x14], 1
mov eax, dword [ebp - 0xc]
or dword [0x1011970], eax
cmp byte [0x10119a2], 0
jne 0x100c6a2
mov edi, 0x100
push edi
push dword [ebp - 4]
call dword [sym.imp.WSOCK32.dll_gethostname]
test eax, eax
jne 0x100c6a2
push 0x2e
push dword [ebp - 4]
call dword [sym.imp.msvcrt.dll_strchr]
pop ecx
pop ecx
test eax, eax
je 0x100c6a2
inc eax
push eax
push edi
push esi
call sub.msvcrt.dll_strcpy_s
add esp, 0xc
cmp dword [ebp - 0x14], 0
jne 0x100c6f0
mov al, byte [0x10119a2]
mov dword [0x1011aa4], esi
mov edi, 0x1011aa8
mov ecx, esi
xor ebx, ebx
jmp 0x100c6c6
cmp al, 0x2e
jne 0x100c6c3
inc ebx
inc ecx
mov al, byte [ecx]
test al, al
jne 0x100c6be
jmp 0x100c6e8
cmp edi, 0x1011ab0
jae 0x100c6ed
push 0x2e
push esi
call dword [sym.imp.msvcrt.dll_strchr]
inc eax
mov esi, eax
pop ecx
mov dword [edi], esi
add edi, 4
pop ecx
dec ebx
cmp ebx, 2
jge 0x100c6cc
and dword [edi], 0
push dword [ebp - 4]
or dword [0x1011970], 1
call dword [sym.imp.msvcrt.dll_free]
pop ecx
xor eax, eax
jmp 0x100c715
push 0xd5
push edi
call fcn.0100bd21
pop ecx
pop ecx
or eax, 0xffffffff
pop edi
pop esi
pop ebx
leave
ret