Function at 0x1002b430
Capabilities:
Get hostname

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x38
mov eax, dword [0x100ae134]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
mov ebx, dword [ebp + 0x10]
push esi
push edi
test ebx, ebx
je 0x1002b452
mov dword [ebx], 0
cmp dword [0x100af334], 0
mov dword [ebp - 0x18], 0
jne 0x1002b5fd
mov esi, dword [0x100af328]
mov dword [ebp - 8], esi
test esi, esi
je 0x1002b490
lea eax, [ebp - 8]
push eax
call dword [sym.imp.MSDART.DLL_UMSEnterCSWraper]
mov eax, dword [0x100af334]
add esp, 4
mov esi, dword [ebp - 8]
test eax, eax
jne 0x1002b54c
mov ecx, 0x10004630
mov edx, 0x10004580
mov edi, 0xc
nop
mov eax, dword [ecx]
cmp eax, dword [edx]
jne 0x1002b4cb
add ecx, 4
add edx, 4
sub edi, 4
jae 0x1002b4a0
lea eax, [ebp - 0x14]
push eax
push 0x10004630
push 0
push 1
push 0x10004f30
call dword [sym.imp.ole32.dll_CoGetClassObject]
jmp 0x1002b4e3
lea eax, [ebp - 0x14]
push eax
push 0x10004630
push 1
push 0
push 0x10004f30
call dword [sym.imp.ole32.dll_CoCreateInstance]
mov edi, eax
test edi, edi
jns 0x1002b53d
test byte [0x100af360], 2
je 0x1002b506
push 0x1e2
mov edx, 0x10004da0
mov ecx, edi
call fcn.10036de6
add esp, 4
test esi, esi
je 0x1002b517
dec dword [esi + 0x1c]
lea eax, [esi + 4]
push eax
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
test byte [0x100af360], 2
je 0x1002b684
push 0x210
mov edx, 0x10004df0
mov ecx, edi
call fcn.10036de6
add esp, 4
jmp 0x1002b684
mov eax, dword [ebp - 0x14]
mov ecx, 0x100af334
xchg dword [ecx], eax
mov eax, dword [0x100af334]
test esi, esi
je 0x1002b562
dec dword [esi + 0x1c]
lea eax, [esi + 4]
push eax
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov eax, dword [0x100af334]
xor ecx, ecx
mov dword [ebp - 0x38], 1
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x24], ecx
mov dword [ebp - 0xc], ecx
lea ecx, [ebp - 0xc]
mov dword [ebp - 0x30], 0x13
mov dword [ebp - 0x28], 0x200
mov esi, dword [eax]
push ecx
push 0x10004640
push eax
mov esi, dword [esi]
mov ecx, esi
mov dword [ebp - 0x18], 1
call dword [0x100b05a4]
call esi
mov edi, eax
test edi, edi
jns 0x1002b5cd
test byte [0x100af360], 2
je 0x1002b684
push 0x21d
mov edx, 0x10004df0
mov ecx, edi
call fcn.10036de6
add esp, 4
jmp 0x1002b684
mov eax, dword [ebp - 0xc]
test eax, eax
je 0x1002b5fd
mov esi, dword [eax]
lea ecx, [ebp - 0x38]
push ecx
push 1
push eax
mov esi, dword [esi + 0x10]
mov ecx, esi
call dword [0x100b05a4]
call esi
mov eax, dword [ebp - 0xc]
push eax
mov ecx, dword [eax]
mov esi, dword [ecx + 8]
mov ecx, esi
call dword [0x100b05a4]
call esi
cmp dword [0x100af350], 0
jne 0x1002b74c
mov esi, dword [0x100af328]
mov dword [ebp - 0x10], esi
test esi, esi
je 0x1002b634
lea eax, [ebp - 0x10]
push eax
call dword [sym.imp.MSDART.DLL_UMSEnterCSWraper]
mov esi, dword [ebp - 0x10]
add esp, 4
cmp dword [0x100af350], 0
jne 0x1002b73b
lea eax, [ebp - 0x20]
push eax
push 0x10004580
push 0
push 1
push 0x10004f20
call dword [sym.imp.ole32.dll_CoGetClassObject]
mov edi, eax
test edi, edi
jns 0x1002b6e6
test byte [0x100af360], 2
je 0x1002b673
push 0x23e
mov edx, 0x10004df0
mov ecx, edi
call fcn.10036de6
add esp, 4
test esi, esi
je 0x1002b684
dec dword [esi + 0x1c]
lea eax, [esi + 4]
push eax
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
test edi, edi
jns 0x1002b74c
test byte [0x100af360], 2
je 0x1002b6a9
push 0x25f
mov edx, 0x10004df0
mov ecx, edi
call fcn.10036de6
add esp, 4
cmp dword [ebp - 0x18], 0
je 0x1002b6b4
call fcn.10069ba6
test byte [0x100af360], 2
je 0x1002b6d1
push 0x12f
mov edx, 0x1001c9b4
mov ecx, edi
call fcn.10036de6
add esp, 4
mov eax, edi
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100365c0
mov esp, ebp
pop ebp
ret 0xc
cmp dword [0x100af358], 0
jne 0x1002b6fe
call fcn.1003487b
mov dword [0x100af358], 1
cmp dword [0x100af354], 0
jne 0x1002b731
lea eax, [ebp - 0x1c]
mov dword [ebp - 0x1c], 0x81
push eax
push 0x100aefb0
call dword [sym.imp.KERNEL32.dll_GetComputerNameW]
test eax, eax
jne 0x1002b727
mov word [0x100aefb0], ax
mov dword [0x100af354], 1
mov eax, dword [ebp - 0x20]
mov ecx, 0x100af350
xchg dword [ecx], eax
test esi, esi
je 0x1002b74c
dec dword [esi + 0x1c]
lea eax, [esi + 4]
push eax
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov ecx, dword [ebp + 8]
mov esi, 0x10004660
mov edx, ecx
mov edi, 0xc
jmp 0x1002b760
mov eax, dword [edx]
cmp eax, dword [esi]
jne 0x1002b7e2
add edx, 4
add esi, 4
sub edi, 4
jae 0x1002b760
push 0x14
push 0
push dword [0x100af320]
call dword [sym.imp.MSDART.DLL_MpHeapAlloc]
mov esi, eax
add esp, 0xc
test esi, esi
je 0x1002b7ab
push 0x100af37c
push 0x100af380
mov ecx, esi
call dword [sym.imp.MSDATL3.dll_public:_void___thiscall_CClassFactory::constructor_long_int___long_int__]
mov dword [esi], fcn.1002dcc0
mov dword [esi + 0x10], 0x10001b18
jmp 0x1002b7ad
xor esi, esi
cmp dword [0x100ae148], 0
jne 0x1002b88a
mov eax, 1
mov ecx, 0x100ae148
xchg dword [ecx], eax
test eax, eax
jne 0x1002b88a
push 1
push dword [0x100ae144]
push eax
call dword [sym.imp.ntdll.dll_WinSqmSetDWORD]
jmp 0x1002b88a
mov edx, ecx
mov esi, 0x10004650
mov edi, 0xc
mov edi, edi
mov eax, dword [edx]
cmp eax, dword [esi]
jne 0x1002b834
add edx, 4
add esi, 4
sub edi, 4
jae 0x1002b7f0
push 0x10
push 0
push dword [0x100af320]
call dword [sym.imp.MSDART.DLL_MpHeapAlloc]
mov esi, eax
add esp, 0xc
test esi, esi
je 0x1002b888
push 0x100af37c
push 0x100af380
mov ecx, esi
call dword [sym.imp.MSDATL3.dll_public:_void___thiscall_CClassFactory::constructor_long_int___long_int__]
mov dword [esi], 0x10001af0
jmp 0x1002b88a
mov edx, 0x1000a258
mov esi, 0xc
mov edi, edi
mov eax, dword [ecx]
cmp eax, dword [edx]
jne 0x1002b916
add ecx, 4
add edx, 4
sub esi, 4
jae 0x1002b840
push 0x10
push 0
push dword [0x100af320]
call dword [sym.imp.MSDART.DLL_MpHeapAlloc]
mov esi, eax
add esp, 0xc
test esi, esi
je 0x1002b888
push 0x100af37c
push 0x100af380
mov ecx, esi
call dword [sym.imp.MSDATL3.dll_public:_void___thiscall_CClassFactory::constructor_long_int___long_int__]
mov dword [esi], 0x10001b04
jmp 0x1002b88a
xor esi, esi
test esi, esi
jne 0x1002b8a6
pop edi
pop esi
mov eax, 0x8007000e
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100365c0
mov esp, ebp
pop ebp
ret 0xc
mov eax, dword [esi]
push ebx
push dword [ebp + 0xc]
mov edi, dword [eax]
push esi
cmp edi, fcn.1002dcc0
jne 0x1002b8be
call fcn.1002dcc0
jmp 0x1002b8c8
mov ecx, edi
call dword [0x100b05a4]
call edi
mov edi, eax
test edi, edi
jns 0x1002b6d1
test byte [0x100af360], 2
je 0x1002b8ef
push 0x14e
mov edx, 0x1001c9b4
mov ecx, edi
call fcn.10036de6
add esp, 4
mov ecx, esi
call dword [sym.imp.MSDATL3.dll_public:_void___thiscall_CClassFactory::destructor_void_]
push esi
call dword [sym.imp.MSDART.DLL_mpFree]
add esp, 4
mov eax, edi
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100365c0
mov esp, ebp
pop ebp
ret 0xc
mov ecx, dword [ebp - 4]
mov eax, 0x80040111
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.100365c0
mov esp, ebp
pop ebp
ret 0xc