Function at 0x100278f0
Capabilities:
Get common file path
Get hostname

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10038e62
mov eax, dword fs:[0]
push eax
mov eax, 0x6330
call fcn.100333f0
mov eax, dword [0x1004f450]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x633c], 0x10052050
call fcn.10028800
xor ebx, ebx
mov dword [ebp - 4], ebx
mov eax, 7
xor ecx, ecx
mov dword [0x10052050], 0x10049558
mov dword [0x1005218c], eax
mov dword [0x10052188], ebx
mov word [0x10052178], cx
xor edx, edx
mov dword [0x100521a8], eax
mov dword [0x100521a4], ebx
mov word [0x10052194], dx
mov dword [0x100521c4], eax
mov dword [0x100521c0], ebx
mov word [0x100521b0], cx
mov dword [0x100521e0], eax
mov dword [0x100521dc], ebx
mov word [0x100521cc], dx
mov dword [0x100521fc], eax
mov dword [0x100521f8], ebx
mov word [0x100521e8], cx
mov dword [0x10052218], eax
mov dword [0x10052214], ebx
mov word [0x10052204], dx
mov dword [0x10052234], eax
mov dword [0x10052230], ebx
mov word [0x10052220], cx
mov byte [ebp - 4], al
or eax, 0xffffffff
mov esi, 0x10052178
call fcn.10001b50
or eax, 0xffffffff
xor ecx, ecx
mov esi, 0x10052194
call fcn.10001b50
or eax, 0xffffffff
xor ecx, ecx
mov esi, 0x100521b0
call fcn.10001b50
or eax, 0xffffffff
xor ecx, ecx
mov esi, 0x100521cc
call fcn.10001b50
or eax, 0xffffffff
xor ecx, ecx
mov esi, 0x100521e8
call fcn.10001b50
or eax, 0xffffffff
xor ecx, ecx
mov esi, 0x10052204
call fcn.10001b50
or eax, 0xffffffff
xor ecx, ecx
mov esi, 0x10052220
call fcn.10001b50
push 0xffe
lea eax, [ebp - 0x5332]
xor edx, edx
push ebx
push eax
mov word [ebp - 0x5334], dx
call fcn.1002f900
push 0xffe
lea edx, [ebp - 0x2326]
xor ecx, ecx
push ebx
push edx
mov word [ebp - 0x2328], cx
call fcn.1002f900
xor eax, eax
mov word [ebp - 0x1328], ax
push 0xffe
lea ecx, [ebp - 0x1326]
push ebx
push ecx
call fcn.1002f900
push 0xffe
lea eax, [ebp - 0x3326]
xor edx, edx
push ebx
push eax
mov word [ebp - 0x3328], dx
call fcn.1002f900
add esp, 0x30
push 0x800
lea ecx, [ebp - 0x5334]
push ecx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
test eax, eax
je 0x10027dbd
push 0x800
lea edx, [ebp - 0x2328]
push edx
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
test eax, eax
je 0x10027dbd
lea eax, [ebp - 0x1328]
push eax
push 0x800
call dword [sym.imp.KERNEL32.dll_GetTempPathW]
test eax, eax
je 0x10027dbd
mov edx, dword [0x10052048]
push 0x800
lea ecx, [ebp - 0x3328]
push ecx
push edx
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
test eax, eax
je 0x10027dbd
lea eax, [ebp - 0x5334]
lea edx, [eax + 2]
jmp 0x10027b20
mov cx, word [eax]
add eax, 2
cmp cx, bx
jne 0x10027b20
sub eax, edx
sar eax, 1
push eax
lea eax, [ebp - 0x5334]
mov esi, 0x10052178
call fcn.10001a60
lea eax, [ebp - 0x2328]
lea edx, [eax + 2]
lea esp, [esp]
mov cx, word [eax]
add eax, 2
cmp cx, bx
jne 0x10027b50
sub eax, edx
sar eax, 1
push eax
lea eax, [ebp - 0x2328]
mov esi, 0x10052194
call fcn.10001a60
lea eax, [ebp - 0x3328]
lea ecx, [eax + 2]
lea esp, [esp]
mov dx, word [eax]
add eax, 2
cmp dx, bx
jne 0x10027b80
sub eax, ecx
sar eax, 1
push eax
lea eax, [ebp - 0x3328]
mov esi, 0x100521e8
call fcn.10001a60
lea eax, [ebp - 0x1328]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
push 0x103
lea ecx, [ebp - 0x223]
push ebx
push ecx
lea esi, [ebp + eax*2 - 0x132a]
mov byte [ebp - 0x224], bl
call fcn.1002f900
push 0x103
lea edx, [ebp - 0x11f]
push ebx
push edx
mov byte [ebp - 0x120], bl
call fcn.1002f900
mov edi, dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
add esp, 0x18
lea eax, [ebp - 0x6338]
push eax
push 0x10042440
push 0x104
lea ecx, [ebp - 0x224]
push ecx
push 0xffffffffffffffff
lea edx, [ebp - 0x1328]
push edx
push ebx
push ebx
mov dword [ebp - 0x6338], ebx
call edi
lea eax, [ebp - 0x6338]
push eax
push 0x10042440
push 0x104
lea ecx, [ebp - 0x120]
push ecx
push 0xffffffffffffffff
push esi
push ebx
push ebx
call edi
lea edx, [ebp - 0x120]
push edx
lea eax, [ebp - 0x224]
push eax
call fcn.1002b2ea
add esp, 8
cmp word [esi], 0x5c
jne 0x10027c5d
cmp eax, 0xffffffff
je 0x10027c5d
xor ecx, ecx
mov word [esi], cx
push 0x100521cc
lea eax, [ebp - 0x1328]
call fcn.10001720
push ebx
push ebx
push ebx
push ebx
push 0x800
lea edx, [ebp - 0x6334]
push edx
push 5
lea eax, [ebp - 0x1c]
push eax
lea ecx, [ebp - 0x3328]
push ecx
call fcn.10029441
lea edx, [ebp - 0x6334]
push edx
lea eax, [ebp - 0x1c]
push eax
lea ecx, [ebp - 0x4334]
push str._s_s
push ecx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x34
lea edx, [ebp - 0x4334]
push edx
call dword [sym.imp.KERNEL32.dll_lstrlenW]
push 0x103
mov esi, eax
lea eax, [ebp - 0x11f]
push ebx
push eax
mov byte [ebp - 0x120], bl
call fcn.1002f900
push 0x103
lea ecx, [ebp - 0x223]
push ebx
push ecx
mov byte [ebp - 0x224], bl
call fcn.1002f900
add esp, 0x18
lea edx, [ebp - 0x6338]
push edx
push 0x10042440
push 0x104
lea eax, [ebp - 0x120]
push eax
push 0xffffffffffffffff
lea ecx, [ebp - 0x1328]
push ecx
push ebx
push ebx
mov dword [ebp - 0x6338], ebx
call edi
lea edx, [ebp - 0x6338]
push edx
push 0x10042440
push 0x104
lea eax, [ebp - 0x224]
push eax
push 0xffffffffffffffff
lea ecx, [ebp + esi*2 - 0x132a]
push ecx
push ebx
push ebx
call edi
lea edx, [ebp - 0x224]
push edx
lea eax, [ebp - 0x120]
push eax
call fcn.1002b2ea
lea ecx, [ebp + esi*2 - 0x4336]
add esp, 8
cmp word [ecx], 0x5c
jne 0x10027d6f
cmp eax, 0xffffffff
je 0x10027d6f
xor edx, edx
mov word [ecx], dx
push 0x10052204
lea eax, [ebp - 0x4334]
call fcn.10001720
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push 5
lea eax, [ebp - 0x1c]
push eax
lea ecx, [ebp - 0x2328]
push ecx
call fcn.10029441
lea eax, [ebp - 0x1c]
add esp, 0x24
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
cmp cx, bx
jne 0x10027da0
sub eax, edx
sar eax, 1
push eax
lea eax, [ebp - 0x1c]
mov esi, 0x100521b0
call fcn.10001a60
push 0x206
lea eax, [ebp - 0x326]
xor edx, edx
push ebx
push eax
mov word [ebp - 0x328], dx
call fcn.1002f900
add esp, 0xc
lea ecx, [ebp - 0x6338]
push ecx
lea edx, [ebp - 0x328]
push edx
mov dword [ebp - 0x6338], 0x104
call dword [sym.imp.KERNEL32.dll_GetComputerNameW]
test eax, eax
je 0x10027e26
lea eax, [ebp - 0x328]
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
cmp cx, bx
jne 0x10027e06
sub eax, edx
sar eax, 1
push eax
lea eax, [ebp - 0x328]
mov esi, 0x10052220
call fcn.10001a60
mov eax, 0x10052050
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.10028eba
mov esp, ebp
pop ebp
ret