Function at 0x100001d7c
Capabilities:
Get hostname
Resolve function by parsing pe exports

Disassembly:
mov r11, rsp
mov qword [r11 + 8], rbx
mov qword [r11 + 0x10], rbp
mov qword [r11 + 0x18], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0xe0
mov rax, qword [0x100004160]
xor rax, rsp
mov qword [rsp + 0xd8], rax
lea rdx, [rsp + 0x28]
lea rcx, [r11 - 0x40]
mov dword [rsp + 0x28], 0x10
call qword [sym.imp.KERNEL32.dll_GetComputerNameA]
mov ebp, 5
mov dword [rsp + 0x68], 0xd
lea ecx, [rbp + 0x28]
lea eax, [rbp + 0x3a]
lea edx, [rbp + 0xc]
lea r8d, [rbp + 3]
mov dword [rsp + 0x5c], ecx
mov dword [rsp + 0x74], ecx
lea ecx, [rbp + 0x61]
lea r9d, [rbp + 0x16]
lea esi, [rbp - 3]
mov dword [rsp + 0x64], eax
mov dword [rsp + 0x20], eax
lea eax, [rbp + 0x13]
mov dword [rsp + 0x90], ecx
mov dword [rsp + 0xa0], ecx
mov dword [rsp + 0xb0], ecx
mov dword [rsp + 0x60], edx
mov dword [rsp + 0x50], edx
mov dword [rsp + 0x4c], r8d
mov dword [rsp + 0xb8], r8d
lea edi, [rbp + 0x46]
lea rcx, [rsp + 0x58]
lea edx, [rbp + 4]
mov r8d, edi
mov dword [rsp + 0x58], ebp
mov dword [rsp + 0x6c], 0x29
mov dword [rsp + 0x70], r9d
mov dword [rsp + 0x78], 3
mov dword [rsp + 0x24], 0x31
mov dword [rsp + 0x40], 0xe
mov dword [rsp + 0x44], 7
mov dword [rsp + 0x48], esi
mov dword [rsp + 0x30], 6
mov dword [rsp + 0x34], 0xa
mov dword [rsp + 0x38], esi
mov dword [rsp + 0x3c], ebp
mov dword [rsp + 0x80], esi
mov dword [rsp + 0x84], 0x20
mov dword [rsp + 0x88], 0x2a
mov dword [rsp + 0x8c], 0x39
mov dword [rsp + 0x94], eax
mov dword [rsp + 0x98], 0x32
mov dword [rsp + 0x9c], 0x38
mov dword [rsp + 0xa4], eax
mov dword [rsp + 0xa8], 0x22
mov dword [rsp + 0xac], 0x26
mov dword [rsp + 0xb4], r9d
call fcn.1000020a0
lea rcx, [rsp + 0x20]
mov r8d, edi
mov edx, esi
mov rbx, rax
mov qword [rsp + 0xc0], rax
call fcn.1000020a0
lea rcx, [rsp + 0x40]
mov r8d, edi
mov edx, ebp
mov r13, rax
call fcn.1000020a0
lea edx, [rbp - 1]
lea rcx, [rsp + 0x30]
mov r8d, edi
mov r14, rax
call fcn.1000020a0
lea edx, [rbp + 0xa]
lea rcx, [rsp + 0x80]
mov r8d, edi
mov r15, rax
call fcn.1000020a0
lea rcx, [rsp + 0xc8]
mov r9, rbx
mov r10, rax
mov qword [rsp + 0x20], rax
sub r9, rcx
movzx r8d, byte [rcx]
movzx edx, byte [rcx + r9]
sub r8d, edx
jne 0x100001f6f
inc rcx
test edx, edx
jne 0x100001f5a
test r8d, r8d
lea rax, [rsp + 0xc8]
mov r8, r13
setne r12b
sub r8, rax
movzx edx, byte [rax]
movzx ecx, byte [rax + r8]
sub edx, ecx
jne 0x100001f97
inc rax
test ecx, ecx
jne 0x100001f84
test edx, edx
lea rax, [rsp + 0xc8]
mov r8, r14
setne bpl
sub r8, rax
movzx edx, byte [rax]
movzx ecx, byte [rax + r8]
sub edx, ecx
jne 0x100001fbe
inc rax
test ecx, ecx
jne 0x100001fab
test edx, edx
lea rax, [rsp + 0xc8]
mov r8, r15
setne sil
sub r8, rax
movzx edx, byte [rax]
movzx ecx, byte [rax + r8]
sub edx, ecx
jne 0x100001fe5
inc rax
test ecx, ecx
jne 0x100001fd2
test edx, edx
lea rax, [rsp + 0xc8]
mov rdx, r10
setne dil
sub rdx, rax
movzx r8d, byte [rax]
movzx ecx, byte [rax + rdx]
sub r8d, ecx
jne 0x10000200d
inc rax
test ecx, ecx
jne 0x100001ff9
mov rcx, qword [rsp + 0xc0]
test r8d, r8d
setne bl
call qword [sym.imp.msvcrt.dll_free]
mov rcx, r13
call qword [sym.imp.msvcrt.dll_free]
mov rcx, r14
call qword [sym.imp.msvcrt.dll_free]
mov rcx, r15
call qword [sym.imp.msvcrt.dll_free]
mov rcx, qword [rsp + 0x20]
call qword [sym.imp.msvcrt.dll_free]
test r12b, r12b
je 0x100002063
test bpl, bpl
je 0x100002063
test sil, sil
je 0x100002063
test dil, dil
je 0x100002063
test bl, bl
je 0x100002063
xor eax, eax
jmp 0x100002068
mov eax, 1
mov rcx, qword [rsp + 0xd8]
xor rcx, rsp
call fcn.1000025e0
lea r11, [rsp + 0xe0]
mov rbx, qword [r11 + 0x30]
mov rbp, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret