Function at 0x10013a64
Capabilities:
Get hostname

Disassembly:
push 0x284
mov eax, 0x10029163
call fcn.1002850f
mov ebx, ecx
mov dword [ebp - 0x278], ebx
mov eax, dword [ebp + 0xc]
neg ecx
mov edi, dword [ebp + 0x10]
mov esi, dword [ebp + 0x18]
sbb ecx, ecx
mov dword [ebp - 0x288], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x280], eax
lea eax, [ebx + 8]
and ecx, eax
mov dword [ebp - 0x284], edi
push ecx
lea ecx, [ebp - 0x28c]
call fcn.1000e1c1
xor eax, eax
mov ecx, ebx
mov dword [ebp - 4], eax
call fcn.10017a16
test edi, edi
jne 0x10013ac8
mov ebx, 0x80070057
jmp 0x10013f41
mov dword [ebp - 0x258], 1
test esi, esi
je 0x10013b7a
cmp word [esi], 0xa
je 0x10013b7a
xor eax, eax
lea edi, [ebp - 0x268]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
xor eax, eax
mov word [ebp - 0x268], ax
push esi
lea eax, [ebp - 0x268]
mov byte [ebp - 4], 2
push eax
call dword [sym.imp.OLEAUT32.dll_VariantChangeType]
mov ebx, eax
test ebx, ebx
js 0x10013b3f
push 3
xor esi, esi
lea eax, [ebp - 0x268]
push esi
push eax
push eax
call dword [sym.imp.OLEAUT32.dll_VariantTimeToDosDateTime]
mov ebx, eax
test ebx, ebx
js 0x10013b3f
mov eax, dword [ebp - 0x260]
sub eax, 1
je 0x10013b5b
sub eax, 1
je 0x10013b4f
mov ebx, 0x80070057
lea ecx, [ebp - 0x268]
call fcn.10014740
jmp 0x10013f41
mov dword [ebp - 0x258], 2
jmp 0x10013b64
xor ebx, ebx
inc ebx
mov dword [ebp - 0x258], ebx
xor eax, eax
lea ecx, [ebp - 0x268]
mov byte [ebp - 4], al
call fcn.10014740
mov ebx, dword [ebp - 0x278]
mov eax, dword [ebx + 0x90]
lea edi, [ebp - 0x240]
fldz
mov ebx, 0x8011042c
mov dword [ebp - 0x26c], eax
xor eax, eax
push 9
pop ecx
rep stosd dword es:[edi], eax
mov edi, dword [ebp - 0x26c]
mov esi, eax
mov dword [ebp - 0x244], eax
mov dword [ebp - 0x248], eax
mov dword [ebp - 0x274], esi
fstp dword [ebp - 0x270]
test edi, edi
je 0x10013c52
lea eax, [ebp - 0x27c]
mov dword [ebp - 0x27c], 0x104
push eax
lea eax, [ebp - 0x21c]
push eax
call dword [sym.imp.KERNEL32.dll_GetComputerNameW]
test eax, eax
jne 0x10013c02
call dword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
mov edi, eax
test edi, edi
jle 0x10013ec9
movzx edi, di
or edi, 0x80070000
jmp 0x10013ec9
lea eax, [ebp - 0x21c]
push eax
push edi
call dword [sym.imp.msvcrt.dll__wcsicmp]
pop ecx
pop ecx
test eax, eax
je 0x10013c50
mov ecx, edi
xor esi, esi
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
cmp ax, si
jne 0x10013c1d
sub ecx, edx
sar ecx, 1
je 0x10013c50
xor eax, eax
mov dword [ebp - 0x264], edi
mov dword [ebp - 0x260], eax
mov dword [ebp - 0x268], eax
mov dword [ebp - 0x25c], eax
lea eax, [ebp - 0x268]
jmp 0x10013c52
mov eax, esi
lea ecx, [ebp - 0x240]
mov dword [ebp - 0x240], 0x100062bc
push ecx
push 3
push eax
push 0x14
xor eax, eax
mov dword [ebp - 0x234], 0x1000634c
push eax
push 0x1000660c
mov dword [ebp - 0x228], 0x1000641c
call dword [sym.imp.api_ms_win_core_com_l1_1_0.dll_CoCreateInstanceEx]
mov edi, eax
test edi, edi
js 0x10013e19
cmp dword [ebp - 0x238], 0
jne 0x10013e17
lea eax, [ebp - 0x244]
push eax
push 0x10005b3c
call dword [sym.imp.api_ms_win_core_com_l1_1_0.dll_CoGetObjectContext]
test eax, eax
js 0x10013daf
mov eax, dword [ebp - 0x244]
push eax
mov ecx, dword [eax]
mov esi, dword [ecx + 0x20]
mov ecx, esi
call dword [0x10030308]
call esi
mov edi, eax
mov eax, dword [ebp - 0x244]
push eax
mov ecx, dword [eax]
mov esi, dword [ecx + 8]
mov ecx, esi
call dword [0x10030308]
call esi
xor ecx, ecx
mov dword [ebp - 0x244], ecx
test edi, edi
je 0x10013daf
lea eax, [ebp - 0x248]
push eax
push 0x10006068
push 3
push ecx
push 0x10006058
call dword [sym.imp.api_ms_win_core_com_l1_1_0.dll_CoCreateInstance]
mov edi, eax
test edi, edi
js 0x10013e19
mov ecx, dword [ebp - 0x248]
mov eax, dword [ecx]
mov esi, dword [eax + 0xc]
lea eax, [ebp - 0x254]
push eax
lea eax, [ebp - 0x250]
push eax
mov eax, dword [ebp - 0x26c]
push eax
push ecx
mov ecx, esi
call dword [0x10030308]
call esi
mov edi, eax
test edi, edi
js 0x10013e19
push ecx
push ecx
push dword [ebp - 0x250]
lea ecx, [ebp - 0x240]
sub esp, 0xc
push dword [ebp - 0x254]
call fcn.100253a6
mov edi, eax
test edi, edi
js 0x10013e19
mov ecx, dword [ebp - 0x23c]
fld dword [0x10009374]
mov eax, dword [ecx]
mov esi, dword [eax + 0x1c]
lea eax, [ebp - 0x270]
push eax
xor eax, eax
push eax
push ecx
push ecx
fstp dword [esp + 4]
fld dword [0x1000936c]
fstp dword [esp]
push ecx
mov ecx, esi
call dword [0x10030308]
call esi
jmp 0x10013dd0
lea eax, [ebp - 0x254]
push eax
lea eax, [ebp - 0x250]
push eax
push ecx
lea eax, [ebp - 0x270]
push eax
lea ecx, [ebp - 0x240]
call fcn.100253ce
mov edi, eax
test edi, edi
js 0x10013e19
mov edi, dword [ebp - 0x22c]
test edi, edi
js 0x10013e19
push 0x40
push 0xffffffffffffffff
push dword [ebp - 0x250]
xor eax, eax
push 6
push 0xffffffffffffffff
push eax
push dword [ebp - 0x254]
push dword [ebp - 0x230]
call dword [sym.imp.api_ms_win_core_com_l1_1_0.dll_CoSetProxyBlanket]
mov edi, eax
test edi, edi
js 0x10013e19
mov eax, dword [ebp - 0x230]
mov dword [ebp - 0x274], eax
jmp 0x10013e3b
mov edi, ebx
mov ecx, dword [ebp - 0x230]
test ecx, ecx
je 0x10013e3b
mov eax, dword [ecx]
push ecx
mov esi, dword [eax + 8]
mov ecx, esi
call dword [0x10030308]
call esi
xor eax, eax
mov dword [ebp - 0x230], eax
mov ecx, dword [ebp - 0x23c]
test ecx, ecx
je 0x10013e5d
mov eax, dword [ecx]
push ecx
mov esi, dword [eax + 8]
mov ecx, esi
call dword [0x10030308]
call esi
xor eax, eax
mov dword [ebp - 0x23c], eax
mov ecx, dword [ebp - 0x224]
test ecx, ecx
je 0x10013e7f
mov eax, dword [ecx]
push ecx
mov esi, dword [eax + 8]
mov ecx, esi
call dword [0x10030308]
call esi
xor eax, eax
mov dword [ebp - 0x224], eax
mov ecx, dword [ebp - 0x244]
test ecx, ecx
je 0x10013ea1
mov eax, dword [ecx]
push ecx
mov esi, dword [eax + 8]
mov ecx, esi
call dword [0x10030308]
call esi
xor eax, eax
mov dword [ebp - 0x244], eax
mov ecx, dword [ebp - 0x248]
test ecx, ecx
je 0x10013ec3
mov eax, dword [ecx]
push ecx
mov esi, dword [eax + 8]
mov ecx, esi
call dword [0x10030308]
call esi
xor eax, eax
mov dword [ebp - 0x248], eax
mov esi, dword [ebp - 0x274]
cmp edi, 0x80004002
je 0x10013f41
test edi, edi
jns 0x10013eee
push 0xeee
push edi
mov edx, 0x10005b00
mov ecx, 0x10005664
call int.1002475d
mov ebx, edi
jmp 0x10013f41
push dword [ebp - 0x258]
mov ecx, dword [ebp - 0x278]
push dword [ebp - 0x280]
push dword [ebp - 0x284]
push dword [ebp - 0x288]
push dword [ebp + 8]
push esi
call fcn.10013f70
mov ecx, esi
mov edi, eax
call fcn.10023a6c
test edi, edi
js 0x10013f24
mov edi, eax
test esi, esi
je 0x10013f38
mov eax, dword [esi]
push esi
mov esi, dword [eax + 8]
mov ecx, esi
call dword [0x10030308]
call esi
mov ecx, edi
call fcn.10017a55
mov ebx, eax
or dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x28c]
test ecx, ecx
je 0x10013f60
add ecx, 4
mov dword [ebp - 4], 8
push ecx
call dword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_LeaveCriticalSection]
mov eax, ebx
call fcn.100284c1
ret 0x14