Function at 0x100de13
Capabilities:
Get hostname

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x340
mov eax, dword [0x10133a4]
push esi
mov esi, dword [sym.imp.USER32.dll_SendMessageA]
push edi
push 0
push 0
mov dword [ebp - 4], eax
mov eax, dword [0x10134f4]
push 0x188
push dword [eax + 0x14]
call esi
mov edi, eax
cmp edi, 0xffffffff
mov dword [ebp - 0x300], edi
jne 0x100de5a
push 0x1002f08
call fcn.0100eda2
jmp 0x100de82
lea eax, [ebp - 0x308]
push eax
mov eax, dword [0x10134f4]
push edi
push 0x189
push dword [eax + 0x14]
call esi
cmp eax, 0xffffffff
jne 0x100de88
push edi
push 0x1002ef0
call fcn.0100eda2
pop ecx
pop ecx
jmp 0x100e167
mov eax, dword [0x10134f4]
mov edi, dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
push ebx
xor ebx, ebx
inc ebx
test byte [eax + 0x1c], bl
je 0x100dece
lea eax, [ebp - 0x310]
push eax
lea eax, [ebp - 0x2f0]
push eax
mov word [ebp - 0x2f2], 0x5c
mov word [ebp - 0x2f4], 0x5c
mov dword [ebp - 0x310], 0x10
call dword [sym.imp.KERNEL32.dll_GetComputerNameW]
jmp 0x100dee3
push 0x10
lea ecx, [ebp - 0x2f4]
push ecx
push 0xffffffffffffffff
add eax, 0x20
push eax
push 0
push 0
call edi
lea eax, [ebp - 0x308]
push eax
push dword [ebp - 0x300]
mov eax, dword [0x10134f4]
push 0x189
push dword [eax + 0x14]
call esi
lea eax, [ebp - 0x2f4]
push eax
push dword [ebp - 0x308]
push 0x1002ecc
call fcn.0100eda2
add esp, 0xc
push 0x64
lea eax, [ebp - 0x2d0]
push eax
push 0xffffffffffffffff
push dword [ebp - 0x308]
xor esi, esi
push ebx
push esi
call edi
push 0x63
lea eax, [ebp - 0xcc]
push eax
push 0x36
push dword [0x1013b74]
mov word [ebp - 0x2d0], 0x24
mov dword [ebp - 0x2f8], ebx
call dword [sym.imp.USER32.dll_LoadStringW]
lea eax, [ebp - 0x2d0]
push eax
lea eax, [ebp - 0x2f4]
push eax
push 0x1002eac
mov dword [ebp - 0x2fc], esi
call fcn.0100eda2
add esp, 0xc
lea eax, [ebp - 0x2fc]
push eax
push esi
push esi
push ebx
lea eax, [ebp - 0x2d0]
push eax
lea eax, [ebp - 0x2f4]
push eax
call sub.NDdeApi.dll_Ordinal_609
mov eax, 0xffff
cmp dword [ebp - 0x2fc], eax
jae 0x100dfa7
mov eax, dword [ebp - 0x2fc]
push eax
push 0x40
call dword [sym.imp.KERNEL32.dll_LocalAlloc]
cmp eax, esi
mov dword [ebp - 0x304], eax
jne 0x100dfcc
push dword [ebp - 0x2fc]
push 0x1002e80
call fcn.0100eda2
pop ecx
pop ecx
lea eax, [ebp - 0x2d0]
push eax
lea eax, [ebp - 0x2f4]
push eax
push 0x1002e60
call fcn.0100eda2
add esp, 0xc
lea eax, [ebp - 0x2fc]
push eax
push dword [ebp - 0x2fc]
lea eax, [ebp - 0x2d0]
push dword [ebp - 0x304]
push ebx
push eax
lea eax, [ebp - 0x2f4]
push eax
call sub.NDdeApi.dll_Ordinal_609
mov edi, eax
cmp edi, esi
jne 0x100e077
lea eax, [ebp - 0x318]
push eax
lea eax, [ebp - 0x31c]
push eax
lea eax, [ebp - 0x320]
push eax
lea eax, [ebp - 0x2d0]
push eax
lea eax, [ebp - 0x2f4]
push eax
call sub.NDdeApi.dll_Ordinal_611
push dword [ebp - 0x304]
lea eax, [ebp - 0x2d0]
push ebx
push eax
lea eax, [ebp - 0x2f4]
push eax
call sub.NDdeApi.dll_Ordinal_610
mov edi, eax
test edi, edi
jne 0x100e08d
push dword [ebp - 0x320]
lea eax, [ebp - 0x2d0]
push eax
lea eax, [ebp - 0x2f4]
push eax
call sub.NDdeApi.dll_Ordinal_612
jmp 0x100e086
push edi
push 0x1002e40
call fcn.0100eda2
pop ecx
pop ecx
mov esi, ebx
and dword [ebp - 0x300], 0
push 0x1002c88
mov dword [ebp - 0x340], 0x1002e28
mov dword [ebp - 0x33c], 0x2743
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
test eax, eax
mov dword [ebp - 0x30c], eax
je 0x100e13b
push 0x1002e14
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x100e122
push 0
lea ecx, [ebp - 0x340]
push ecx
lea ecx, [ebp - 0x314]
push ecx
push dword [ebp - 0x300]
lea ecx, [ebp - 0x2f8]
push esi
neg esi
sbb esi, esi
not esi
and esi, dword [ebp - 0x304]
push esi
push ecx
push 0x100d612
push ebx
lea ecx, [ebp - 0x2ce]
push ecx
lea ecx, [ebp - 0xcc]
push ecx
lea ecx, [ebp - 0x2f4]
push ecx
push dword [0x1013b74]
push dword [0x1013ba4]
call eax
mov edi, eax
jmp 0x100e12d
push 0x1002dfc
call fcn.0100eda2
pop ecx
push dword [ebp - 0x30c]
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
jmp 0x100e146
push 0x1002de8
call fcn.0100eda2
pop ecx
push dword [ebp - 0x314]
push edi
push 0x1002dbc
call fcn.0100eda2
add esp, 0xc
push dword [ebp - 0x304]
call dword [sym.imp.KERNEL32.dll_LocalFree]
pop ebx
mov ecx, dword [ebp - 4]
pop edi
xor eax, eax
pop esi
call fcn.0100ec8a
leave
ret