Function at 0x100c33d
Capabilities:
Get hostname

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x1c
and dword [ebp - 0x14], 0
push esi
mov esi, dword [sym.imp.msvcrt.dll_malloc]
push edi
push 0x40
call esi
pop ecx
mov dword [0x1011978], eax
test eax, eax
jne 0x100c372
push 0x64
push 2
call fcn.0100bd21
pop ecx
pop ecx
or eax, 0xffffffff
jmp 0x100c707
push ebx
push 2
pop ebx
push ebx
call fcn.0100c30f
test eax, eax
jne 0x100c390
push 0x17
call fcn.0100c30f
test eax, eax
mov eax, 0x1002a50
jne 0x100c395
mov eax, 0x1002a44
push eax
push dword [0x1011978]
call fcn.0100d26a
test eax, eax
je 0x100c6f6
mov eax, dword [0x1011978]
mov dword [0x1011974], 1
mov ecx, 0x3500
cmp word [eax], bx
jne 0x100c3cd
mov edx, ecx
mov word [eax + 2], dx
mov eax, dword [0x1011978]
cmp word [eax], 0x17
jne 0x100c3d7
mov word [eax + 2], cx
push str.RegistryMachineSystemCurrentControlSetServicesTcpipParameters
lea eax, [ebp - 8]
push eax
call fcn.0100f05d
test eax, eax
jge 0x100c400
push 0x65
push ebx
call fcn.0100bd21
pop ecx
pop ecx
push 0x57
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x100c703
mov edi, 0x3200
push edi
call esi
mov esi, eax
pop ecx
mov dword [ebp - 4], esi
test esi, esi
jne 0x100c429
push 0x64
push ebx
call fcn.0100bd21
pop ecx
pop ecx
push dword [ebp - 8]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push 8
jmp 0x100c3f5
push edi
lea eax, [ebp - 0x10]
push eax
push esi
push 0x1002a34
push dword [ebp - 8]
call fcn.0100f0d6
test eax, eax
jl 0x100c469
mov esi, dword [esi]
dec esi
je 0x100c469
dec esi
je 0x100c460
dec esi
je 0x100c457
dec esi
jne 0x100c469
mov dword [ebp - 0xc], 0x400
jmp 0x100c470
mov dword [ebp - 0xc], 0x800
jmp 0x100c470
mov dword [ebp - 0xc], 0x1000
jmp 0x100c470
mov dword [ebp - 0xc], 0x2000
push edi
lea eax, [ebp - 0x10]
push eax
push dword [ebp - 4]
push 0x1002a2c
push dword [ebp - 8]
call fcn.0100f0d6
mov ebx, 0x31ff
mov esi, 0x10119a2
test eax, eax
jl 0x100c4a4
mov eax, dword [ebp - 4]
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x100c499
sub eax, edx
jne 0x100c4bd
push edi
lea eax, [ebp - 0x10]
push eax
push dword [ebp - 4]
push 0x1002a20
push dword [ebp - 8]
call fcn.0100f0d6
test eax, eax
jl 0x100c4cf
push ebx
push dword [ebp - 4]
push edi
push esi
call sub.msvcrt.dll_strncpy_s
add esp, 0x10
and dword [ebp - 0x14], 0
push str.RegistryMachineSoftwarePoliciesMicrosoftWindows_NTDNSClient
lea eax, [ebp - 0x18]
push eax
call fcn.0100f05d
test eax, eax
jl 0x100c50f
push edi
lea eax, [ebp - 0x10]
push eax
push dword [ebp - 4]
push 0x1002a14
push dword [ebp - 0x18]
call fcn.0100f0d6
test eax, eax
jl 0x100c50f
mov ecx, dword [ebp - 4]
lea edx, [ecx + 1]
mov dword [ebp - 0x1c], edx
mov dl, byte [ecx]
inc ecx
test dl, dl
jne 0x100c503
sub ecx, dword [ebp - 0x1c]
jne 0x100c524
push edi
lea eax, [ebp - 0x10]
push eax
push dword [ebp - 4]
push 0x1002a14
push dword [ebp - 8]
call fcn.0100f0d6
test eax, eax
jl 0x100c5b5
mov eax, dword [ebp - 4]
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x100c532
sub eax, edx
je 0x100c5b5
push ebx
push dword [ebp - 4]
push edi
push esi
call sub.msvcrt.dll_strncpy_s
xor ebx, ebx
add esp, 0x10
mov eax, esi
mov dword [0x1014ba4], esi
mov ecx, 0x1014ba8
cmp byte [0x10119a2], bl
je 0x100c5ab
cmp ecx, 0x1014c6c
jae 0x100c5ab
mov dl, byte [eax]
cmp dl, 0x20
je 0x100c588
cmp dl, 9
je 0x100c588
cmp dl, 0x2c
je 0x100c588
test ebx, ebx
je 0x100c58e
mov dword [ecx], eax
add ecx, 4
xor ebx, ebx
jmp 0x100c58e
xor ebx, ebx
mov byte [eax], 0
inc ebx
inc eax
cmp byte [eax], 0
jne 0x100c562
jmp 0x100c5ab
mov dl, byte [eax]
cmp dl, 0x20
je 0x100c649
cmp dl, 9
je 0x100c649
inc eax
cmp byte [eax], 0
jne 0x100c596
jmp 0x100c649
push edi
lea eax, [ebp - 0x10]
push eax
push dword [ebp - 4]
push 0x1002a04
push dword [ebp - 8]
call fcn.0100f0d6
test eax, eax
jl 0x100c656
mov eax, dword [ebp - 4]
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x100c5d8
sub eax, edx
je 0x100c656
push ebx
push dword [ebp - 4]
push edi
push esi
call sub.msvcrt.dll_strncpy_s
xor ebx, ebx
add esp, 0x10
mov eax, esi
mov dword [0x1014ba4], esi
mov ecx, 0x1014ba8
cmp byte [0x10119a2], bl
je 0x100c644
cmp ecx, 0x1014c6c
jae 0x100c644
mov dl, byte [eax]
cmp dl, 0x20
je 0x100c629
cmp dl, 9
je 0x100c629
test ebx, ebx
je 0x100c62f
mov dword [ecx], eax
add ecx, 4
xor ebx, ebx
jmp 0x100c62f
xor ebx, ebx
mov byte [eax], 0
inc ebx
inc eax
cmp byte [eax], 0
jne 0x100c608
jmp 0x100c644
mov dl, byte [eax]
cmp dl, 0x20
je 0x100c649
cmp dl, 9
je 0x100c649
inc eax
cmp byte [eax], 0
jne 0x100c637
mov byte [eax], 0
and dword [ecx], 0
mov dword [ebp - 0x14], 1
mov eax, dword [ebp - 0xc]
or dword [0x1011970], eax
cmp byte [0x10119a2], 0
jne 0x100c693
push edi
push dword [ebp - 4]
call dword [sym.imp.WSOCK32.dll_gethostname]
test eax, eax
jne 0x100c693
push 0x2e
push dword [ebp - 4]
call dword [sym.imp.msvcrt.dll_strchr]
pop ecx
pop ecx
test eax, eax
je 0x100c693
inc eax
push eax
push edi
push esi
call sub.msvcrt.dll_strcpy_s
add esp, 0xc
cmp dword [ebp - 0x14], 0
jne 0x100c6e1
mov al, byte [0x10119a2]
mov dword [0x1014ba4], esi
mov edi, 0x1014ba8
mov ecx, esi
xor ebx, ebx
jmp 0x100c6b7
cmp al, 0x2e
jne 0x100c6b4
inc ebx
inc ecx
mov al, byte [ecx]
test al, al
jne 0x100c6af
jmp 0x100c6d9
cmp edi, 0x1014bb0
jae 0x100c6de
push 0x2e
push esi
call dword [sym.imp.msvcrt.dll_strchr]
inc eax
mov esi, eax
pop ecx
mov dword [edi], esi
add edi, 4
pop ecx
dec ebx
cmp ebx, 2
jge 0x100c6bd
and dword [edi], 0
push dword [ebp - 4]
or dword [0x1011970], 1
call dword [sym.imp.msvcrt.dll_free]
pop ecx
xor eax, eax
jmp 0x100c706
push 0xd5
push ebx
call fcn.0100bd21
pop ecx
pop ecx
or eax, 0xffffffff
pop ebx
pop edi
pop esi
leave
ret