Function at 0x180026ed0
Capabilities:
Get hostname

Disassembly:
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rsi
push rdi
sub rsp, 0x418
mov rax, qword [0x1800623f8]
xor rax, rsp
mov qword [rsp + 0x400], rax
xor eax, eax
mov word [rsp + 0x80], ax
lea rax, [rsp + 0x82]
mov rdi, rax
xor eax, eax
mov ecx, 0x206
rep stosb byte [rdi], al
mov dword [rsp + 0x294], 0x104
mov dword [rsp + 0x30], 0
mov dword [rsp + 0x290], 0
mov dword [rsp + 0x2e4], 0
mov dword [rsp + 0x2e0], 0
lea rax, [rsp + 0x298]
lea rcx, [0x18005bec8]
mov rdi, rax
mov rsi, rcx
mov ecx, 0x1f
rep movsb byte [rdi], byte [rsi]
mov dword [rsp + 0x20], 0x23fd
lea r9, [rsp + 0x2bc]
lea r8, [rsp + 0x2c0]
mov edx, 0x1e
lea rcx, [rsp + 0x298]
call fcn.18003bca0
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [rsp + 0x28], eax
mov rax, qword [rsp + 0x440]
mov qword [rsp + 0x20], rax
mov r9, qword [rsp + 0x430]
lea r8, [rsp + 0x2c0]
mov edx, 0x104
mov rcx, qword [rsp + 0x430]
call fcn.180028e70
mov rcx, qword [rsp + 0x430]
call fcn.180029b40
test eax, eax
jne 0x1800272d9
mov dword [rsp + 0x2ec], 3
mov dword [rsp + 0x2f0], 0xa
mov eax, dword [rsp + 0x2f0]
test eax, eax
jle 0x180027066
mov eax, dword [rsp + 0x2f0]
cmp eax, 1
jle 0x180027033
mov eax, dword [rsp + 0x2ec]
and eax, 0x107d
mov dword [rsp + 0x2ec], eax
mov eax, dword [rsp + 0x2f0]
sub eax, 2
mov dword [rsp + 0x2f0], eax
jmp 0x180026ff6
mov eax, dword [rsp + 0x2ec]
cmp eax, 0x80c
jle 0x180027054
mov eax, dword [rsp + 0x2ec]
and eax, 0x85
mov dword [rsp + 0x2ec], eax
mov eax, dword [rsp + 0x2f0]
dec eax
mov dword [rsp + 0x2f0], eax
jmp 0x180026ff6
mov dword [rsp + 0x30c], 5
mov dword [rsp + 0x2f4], 8
mov eax, dword [rsp + 0x2f4]
test eax, eax
jle 0x1800270ec
mov eax, dword [rsp + 0x2f4]
cmp eax, 1
jle 0x1800270b9
mov eax, dword [rsp + 0x30c]
and eax, 0xc22
mov dword [rsp + 0x30c], eax
mov eax, dword [rsp + 0x2f4]
sub eax, 2
mov dword [rsp + 0x2f4], eax
jmp 0x18002707c
mov eax, dword [rsp + 0x30c]
cmp eax, 0x80a
jle 0x1800270da
mov eax, dword [rsp + 0x30c]
and eax, 0x83
mov dword [rsp + 0x30c], eax
mov eax, dword [rsp + 0x2f4]
dec eax
mov dword [rsp + 0x2f4], eax
jmp 0x18002707c
mov dword [rsp + 0x304], 8
mov dword [rsp + 0x314], 0xc
cmp dword [rsp + 0x314], 0
jle 0x180027162
mov eax, dword [rsp + 0x314]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x180027144
mov dword [rsp + 0x304], 4
mov eax, dword [rsp + 0x314]
dec eax
mov dword [rsp + 0x314], eax
jmp 0x180027102
mov dword [rsp + 0x304], 0
mov eax, dword [rsp + 0x314]
sub eax, 2
mov dword [rsp + 0x314], eax
jmp 0x180027102
mov dword [rsp + 0x2fc], 7
mov dword [rsp + 0x310], 0xb
mov eax, dword [rsp + 0x310]
test eax, eax
jle 0x1800271e8
mov eax, dword [rsp + 0x310]
cmp eax, 1
jle 0x1800271b5
mov eax, dword [rsp + 0x2fc]
and eax, 0x66b
mov dword [rsp + 0x2fc], eax
mov eax, dword [rsp + 0x310]
sub eax, 2
mov dword [rsp + 0x310], eax
jmp 0x180027178
mov eax, dword [rsp + 0x2fc]
cmp eax, 0x80d
jle 0x1800271d6
mov eax, dword [rsp + 0x2fc]
and eax, 0x86
mov dword [rsp + 0x2fc], eax
mov eax, dword [rsp + 0x310]
dec eax
mov dword [rsp + 0x310], eax
jmp 0x180027178
mov dword [rsp + 0x2f8], 0
mov dword [rsp + 0x300], 0x14
cmp dword [rsp + 0x300], 0
jle 0x18002725d
mov eax, dword [rsp + 0x300]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x180027240
mov dword [rsp + 0x2f8], 4
mov eax, dword [rsp + 0x300]
dec eax
mov dword [rsp + 0x300], eax
jmp 0x1800271fe
mov dword [rsp + 0x2f8], 0
mov eax, dword [rsp + 0x300]
dec eax
mov dword [rsp + 0x300], eax
jmp 0x1800271fe
mov dword [rsp + 0x2e8], 4
mov dword [rsp + 0x308], 0x11
cmp dword [rsp + 0x308], 0
jle 0x1800272d2
mov eax, dword [rsp + 0x308]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x1800272b5
mov dword [rsp + 0x2e8], 0
mov eax, dword [rsp + 0x308]
dec eax
mov dword [rsp + 0x308], eax
jmp 0x180027273
mov dword [rsp + 0x2e8], 4
mov eax, dword [rsp + 0x308]
dec eax
mov dword [rsp + 0x308], eax
jmp 0x180027273
xor eax, eax
jmp 0x1800277b7
lea rax, [rsp + 0x40]
lea rcx, [0x18005bfd8]
mov rdi, rax
mov rsi, rcx
mov ecx, 0x1f
rep movsb byte [rdi], byte [rsi]
mov dword [rsp + 0x20], 0xd93
lea r9, [rsp + 0x2b8]
lea r8, [rsp + 0x60]
mov edx, 0x1e
lea rcx, [rsp + 0x40]
call fcn.18003bca0
mov r8, qword [rsp + 0x438]
lea rdx, [rsp + 0x60]
mov rcx, qword [rsp + 0x430]
call fcn.18002b620
lea rdx, [rsp + 0x294]
lea rcx, [rsp + 0x80]
call qword [sym.imp.KERNEL32.dll_GetComputerNameW]
test eax, eax
je 0x1800273ad
lea rax, [rsp + 0x320]
lea rcx, [0x18005bee8]
mov rdi, rax
mov rsi, rcx
mov ecx, 0x27
rep movsb byte [rdi], byte [rsi]
mov dword [rsp + 0x20], 0x1810
lea r9, [rsp + 0x318]
lea r8, [rsp + 0x348]
mov edx, 0x26
lea rcx, [rsp + 0x320]
call fcn.18003bca0
lea r8, [rsp + 0x80]
lea rdx, [rsp + 0x348]
mov rcx, qword [rsp + 0x430]
call fcn.18002b620
lea r9, [rsp + 0x2e0]
lea r8, [rsp + 0x2e4]
lea rdx, [rsp + 0x290]
lea rcx, [rsp + 0x30]
call fcn.1800203b0
test eax, eax
je 0x180027492
cmp dword [rsp + 0x2e0], 0
je 0x1800273f2
lea rax, str._Server_
mov qword [rsp + 0x3f8], rax
jmp 0x180027401
lea rax, [0x18005bcb4]
mov qword [rsp + 0x3f8], rax
mov rax, qword [rsp + 0x3f8]
mov qword [rsp + 0x20], rax
mov r9d, dword [rsp + 0x290]
mov r8d, dword [rsp + 0x30]
lea rdx, str.WindowsVersion:__d._d__s_r_n
mov rcx, qword [rsp + 0x430]
call fcn.18002b620
lea rax, [rsp + 0x3a0]
lea rcx, [0x18005c150]
mov rdi, rax
mov rsi, rcx
mov ecx, 0x25
rep movsb byte [rdi], byte [rsi]
mov dword [rsp + 0x20], 0x1a4
lea r9, [rsp + 0x370]
lea r8, [rsp + 0x378]
mov edx, 0x24
lea rcx, [rsp + 0x3a0]
call fcn.18003bca0
mov r8d, dword [rsp + 0x2e4]
lea rdx, [rsp + 0x378]
mov rcx, qword [rsp + 0x430]
call fcn.18002b620
mov rcx, qword [rsp + 0x430]
call fcn.180021180
mov rdx, qword [rsp + 0x438]
mov rcx, qword [rsp + 0x430]
call fcn.180024100
mov rcx, qword [rsp + 0x430]
call fcn.18002d370
test eax, eax
jne 0x180027641
mov dword [rsp + 0x3d0], 2
mov dword [rsp + 0x3c8], 5
mov eax, dword [rsp + 0x3c8]
test eax, eax
jle 0x18002754f
mov eax, dword [rsp + 0x3c8]
cmp eax, 1
jle 0x18002751c
mov eax, dword [rsp + 0x3d0]
and eax, 0x204d
mov dword [rsp + 0x3d0], eax
mov eax, dword [rsp + 0x3c8]
sub eax, 2
mov dword [rsp + 0x3c8], eax
jmp 0x1800274df
mov eax, dword [rsp + 0x3d0]
cmp eax, 0x807
jle 0x18002753d
mov eax, dword [rsp + 0x3d0]
and eax, 0x80
mov dword [rsp + 0x3d0], eax
mov eax, dword [rsp + 0x3c8]
dec eax
mov dword [rsp + 0x3c8], eax
jmp 0x1800274df
mov dword [rsp + 0x3dc], 7
mov dword [rsp + 0x3d8], 0x11
cmp dword [rsp + 0x3d8], 0
jle 0x1800275c4
mov eax, dword [rsp + 0x3d8]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x1800275a7
mov dword [rsp + 0x3dc], 0
mov eax, dword [rsp + 0x3d8]
dec eax
mov dword [rsp + 0x3d8], eax
jmp 0x180027565
mov dword [rsp + 0x3dc], 0
mov eax, dword [rsp + 0x3d8]
dec eax
mov dword [rsp + 0x3d8], eax
jmp 0x180027565
mov dword [rsp + 0x3d4], 7
mov dword [rsp + 0x3cc], 0x14
cmp dword [rsp + 0x3cc], 0
jle 0x18002763a
mov eax, dword [rsp + 0x3cc]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x18002761d
mov dword [rsp + 0x3d4], 0
mov eax, dword [rsp + 0x3cc]
sub eax, 2
mov dword [rsp + 0x3cc], eax
jmp 0x1800275da
mov dword [rsp + 0x3d4], 0
mov eax, dword [rsp + 0x3cc]
dec eax
mov dword [rsp + 0x3cc], eax
jmp 0x1800275da
xor eax, eax
jmp 0x1800277b7
mov dword [rsp + 0x3e8], 0
mov dword [rsp + 0x3ec], 0x14
cmp dword [rsp + 0x3ec], 0
jle 0x1800276b6
mov eax, dword [rsp + 0x3ec]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x180027699
mov dword [rsp + 0x3e8], 4
mov eax, dword [rsp + 0x3ec]
dec eax
mov dword [rsp + 0x3ec], eax
jmp 0x180027657
mov dword [rsp + 0x3e8], 0
mov eax, dword [rsp + 0x3ec]
dec eax
mov dword [rsp + 0x3ec], eax
jmp 0x180027657
mov dword [rsp + 0x3f0], 4
mov dword [rsp + 0x3e0], 0x13
cmp dword [rsp + 0x3e0], 0
jle 0x18002772c
mov eax, dword [rsp + 0x3e0]
cdq
and eax, 1
xor eax, edx
sub eax, edx
cdqe
add rax, 4
cmp rax, 4
jbe 0x18002770e
mov dword [rsp + 0x3f0], 0
mov eax, dword [rsp + 0x3e0]
dec eax
mov dword [rsp + 0x3e0], eax
jmp 0x1800276cc
mov dword [rsp + 0x3f0], 0
mov eax, dword [rsp + 0x3e0]
sub eax, 2
mov dword [rsp + 0x3e0], eax
jmp 0x1800276cc
mov dword [rsp + 0x3e4], 5
mov dword [rsp + 0x3f4], 5
mov eax, dword [rsp + 0x3f4]
test eax, eax
jle 0x1800277b2
mov eax, dword [rsp + 0x3f4]
cmp eax, 1
jle 0x18002777f
mov eax, dword [rsp + 0x3e4]
and eax, 0x9c1
mov dword [rsp + 0x3e4], eax
mov eax, dword [rsp + 0x3f4]
sub eax, 2
mov dword [rsp + 0x3f4], eax
jmp 0x180027742
mov eax, dword [rsp + 0x3e4]
cmp eax, 0x807
jle 0x1800277a0
mov eax, dword [rsp + 0x3e4]
and eax, 0x80
mov dword [rsp + 0x3e4], eax
mov eax, dword [rsp + 0x3f4]
dec eax
mov dword [rsp + 0x3f4], eax
jmp 0x180027742
mov eax, 1
mov rcx, qword [rsp + 0x400]
xor rcx, rsp
call fcn.180049ea0
add rsp, 0x418
pop rdi
pop rsi
ret