Function at 0x140004a60
Capabilities:
Get hostname

Disassembly:
mov rax, rsp
mov qword [rax + 0x18], rbx
push rsi
push rdi
push r12
sub rsp, 0x910
mov rsi, rcx
lea rdx, [rax + 8]
mov edi, 0x104
add rcx, 0x80c
mov dword [rax + 8], edi
call qword [sym.imp.KERNEL32.dll_GetComputerNameA]
lea r11, [rsp + 0x938]
mov r12, 0xffffffff80000002
lea rdx, str.Software
mov rcx, r12
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], r11
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x140004aff
lea rcx, [rsp + 0x51]
mov r8, rdi
xor edx, edx
mov byte [rsp + 0x50], al
call sub.msvcrt.dll_memset
lea rcx, [rsp + 0x50]
call fcn.1400087f0
mov rdx, qword [rsp + 0x938]
lea r8, [rsp + 0x50]
mov rcx, rsi
call fcn.140003e48
mov rcx, qword [rsp + 0x938]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
and dword [rsp + 0x930], 0
lea rcx, str.kernel32
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
lea rdx, str.IsWow64Process
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
je 0x140004b3f
lea rdx, [rsp + 0x930]
mov rcx, rbx
call rax
cmp dword [rsp + 0x930], 0
je 0x140004bb3
lea rax, [rsp + 0x938]
lea rdx, str.Software
mov r9d, 0x20119
xor r8d, r8d
mov rcx, r12
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x140004bb3
lea rcx, [rsp + 0x51]
mov r8, rdi
xor edx, edx
mov byte [rsp + 0x50], al
call sub.msvcrt.dll_memset
lea rcx, [rsp + 0x50]
call fcn.1400087f0
mov rdx, qword [rsp + 0x938]
lea r8, [rsp + 0x50]
mov rcx, rsi
call fcn.140003e48
mov rcx, qword [rsp + 0x938]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
and qword [rsp + 0x30], 0
and qword [rsp + 0x38], 0
and qword [rsp + 0x40], 0
lea rcx, [rsp + 0x511]
xor edx, edx
mov r8d, 0x3ff
mov byte [rsp + 0x510], 0
call sub.msvcrt.dll_memset
lea rcx, [rsp + 0x30]
call fcn.140008174
mov r11, qword [rsp + 0x40]
test r11, r11
je 0x140004c13
lea r8, [rsp + 0x510]
mov r9d, 0x400
mov edx, 0x4d44534d
mov ecx, 0x41435049
call r11
jmp 0x140004c15
xor eax, eax
cmp eax, 0x38
jbe 0x140004e1a
mov al, byte [rsp + 0x548]
cmp al, 0x61
jb 0x140004c2d
cmp al, 0x7a
jbe 0x140004c45
cmp al, 0x41
jb 0x140004c35
cmp al, 0x5a
jbe 0x140004c45
cmp al, 0x30
jb 0x140004e1a
cmp al, 0x39
ja 0x140004e1a
lea rcx, [rsp + 0x160]
call fcn.140002278
lea rdx, [rsp + 0x548]
lea rcx, [rsp + 0x272]
mov r8d, 0x80
call fcn.140008530
cmp dword [0x140018ec8], 0
jne 0x140004c93
lea rcx, [0x140018ea0]
mov edx, 0x8000
mov r9d, 0x1000
mov r8d, 0x100
call fcn.1400094bc
mov edx, dword [0x140018ec0]
xor eax, eax
mov r12d, 0x7d1
test edx, edx
jle 0x140004cbc
mov rcx, qword [0x140018eb0]
cmp dword [rcx], r12d
je 0x140004d0a
add eax, 1
add rcx, 4
cmp eax, edx
jl 0x140004cac
xor ebx, ebx
test rbx, rbx
jne 0x140004de9
cmp byte [0x140018b00], bl
je 0x140004d20
lea rdx, str.strings
lea rcx, [0x140018c10]
call fcn.140012ab4
mov rdx, qword [0x140018ea8]
mov ecx, r12d
call fcn.140009b54
test eax, eax
je 0x140004d2c
mov rcx, qword [0x140018ea8]
call sub.msvcrt.dll_strlen
test eax, eax
mov rdi, rax
jne 0x140004d54
jmp 0x140004d2c
movsxd rcx, eax
mov rax, qword [0x140018eb8]
mov ebx, dword [rax + rcx*4]
add rbx, qword [0x140018ea0]
jmp 0x140004cbe
mov rax, qword [0x140018af0]
test rax, rax
jne 0x140004d34
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov r9d, dword [0x140018ed0]
mov r8, qword [0x140018ea8]
mov edx, r12d
add r9d, 0xffffffff
mov rcx, rax
call qword [sym.imp.USER32.dll_LoadStringA]
mov edi, eax
test edi, edi
jle 0x140004de2
movsxd rcx, dword [0x140018ec4]
lea eax, [rcx + rdi + 2]
cmp eax, dword [0x140018ec8]
jge 0x140004de2
mov eax, dword [0x140018ecc]
cmp dword [0x140018ec0], eax
jge 0x140004de2
mov rdx, qword [0x140018ea8]
mov rbx, rcx
lea eax, [rdi + 1]
add rbx, qword [0x140018ea0]
movsxd r8, eax
mov rcx, rbx
call sub.msvcrt.dll_memcpy
mov eax, dword [0x140018ec4]
movsxd r11, dword [0x140018ec0]
mov rcx, qword [0x140018eb8]
mov dword [rcx + r11*4], eax
movsxd rcx, dword [0x140018ec0]
mov rax, qword [0x140018eb0]
mov dword [rax + rcx*4], r12d
mov eax, dword [0x140018ec4]
add dword [0x140018ec0], 1
test rbx, rbx
lea ecx, [rax + rdi + 1]
mov dword [0x140018ec4], ecx
jne 0x140004de9
lea rbx, [0x140014821]
lea rcx, [rsp + 0x170]
mov r8d, 0x80
mov rdx, rbx
call fcn.140008530
lea rdx, [rsp + 0x160]
mov rcx, rsi
mov dword [rsp + 0x50c], 1
call fcn.14000b250
mov rbx, qword [rsp + 0x940]
add rsp, 0x910
pop r12
pop rdi
pop rsi
ret