Function at 0x14000260c
Capabilities:
Get hostname

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
mov qword [rax + 0x20], r12
push rbp
push r14
push r15
lea rbp, [rax - 0x21a8]
mov eax, 0x2290
call fcn.140257aa0
sub rsp, rax
mov rax, qword [0x1403eab08]
xor rax, rsp
mov qword [rbp + 0x2180], rax
lea rcx, [0x1403f3f1c]
call fcn.1402823bc
xor r14d, r14d
lea r15, [0x1402e0da8]
mov r12d, 1
test rax, rax
je 0x140002738
lea rdx, [0x1403f3f1c]
lea rcx, [rbp + 0x180]
call fcn.140281940
xor r8d, r8d
lea rcx, [rbp + 0x180]
mov rdx, r15
call fcn.140282734
mov rbx, rax
mov edi, r14d
test rax, rax
je 0x140002725
mov edx, 0x2e
mov rcx, rbx
call fcn.14025a480
mov rsi, rax
test rax, rax
je 0x140002707
mov r8, rax
lea rcx, [rsp + 0x28]
sub r8, rbx
mov rdx, rbx
sar r8, 1
call fcn.1402826ec
lea rdx, [rsi + 2]
lea rcx, [rsp + 0x38]
call fcn.140281940
lea rcx, [rsp + 0x28]
call fcn.1402853fc
mov ecx, eax
call fcn.140002bb0
test eax, eax
je 0x140002707
lea rcx, [rsp + 0x38]
call fcn.1402853fc
mov ecx, eax
call fcn.140002c28
test eax, eax
cmovne edi, r12d
xor r8d, r8d
lea rcx, [rbp + 0x180]
mov rdx, r15
call fcn.140282734
mov rbx, rax
test rax, rax
jne 0x1400026a2
test edi, edi
jne 0x140002738
lea rcx, str.This_operating_system_version_is_not_authorized_to_run_this_application
call fcn.140268420
xor eax, eax
jmp 0x140002976
lea rcx, [0x1403f4124]
call fcn.1402823bc
mov esi, 0x104
test rax, rax
je 0x1400027e0
lea rdx, [0x1403f4124]
lea rcx, [rsp + 0x70]
call fcn.140281940
xor r8d, r8d
lea rcx, [rsp + 0x70]
mov rdx, r15
call fcn.140282734
lea r8, [rsp + 0x20]
mov dword [rsp + 0x20], esi
lea rdx, [rbp + 0x180]
xor ecx, ecx
mov rbx, rax
call sub.MPR.dll_WNetGetUserW
test eax, eax
je 0x1400027a4
lea rdx, str.Default
lea rcx, [rbp + 0x180]
call fcn.140281940
test rbx, rbx
je 0x1400027d4
lea rdx, [rbp + 0x180]
mov rcx, rbx
call fcn.140281908
test eax, eax
je 0x1400027e0
xor r8d, r8d
lea rcx, [rsp + 0x70]
mov rdx, r15
call fcn.140282734
mov rbx, rax
test rax, rax
jne 0x1400027a9
lea rcx, str.The_current_user_is_not_authorized_to_run_this_application.
jmp 0x14000272c
lea rcx, [0x1403f432c]
call fcn.1402823bc
test rax, rax
je 0x140002867
lea rdx, [0x1403f432c]
lea rcx, [rsp + 0x70]
call fcn.140281940
xor r8d, r8d
lea rcx, [rsp + 0x70]
mov rdx, r15
call fcn.140282734
lea rdx, [rsp + 0x20]
mov dword [rsp + 0x20], esi
lea rcx, [rbp + 0x180]
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_GetComputerNameW]
test rbx, rbx
je 0x14000285b
lea rdx, [rbp + 0x180]
mov rcx, rbx
call fcn.140281908
test eax, eax
je 0x140002867
xor r8d, r8d
lea rcx, [rsp + 0x70]
mov rdx, r15
call fcn.140282734
mov rbx, rax
test rax, rax
jne 0x140002830
lea rcx, str.This_computer_is_not_authorized_to_run_this_application
jmp 0x14000272c
lea rcx, [0x1403f4534]
call fcn.1402823bc
test rax, rax
je 0x140002900
lea rdx, [0x1403f4534]
lea rcx, [rsp + 0x70]
call fcn.140281940
lea rcx, [rbp + 0x180]
call fcn.1400037cc
jmp 0x1400028e3
lea rdi, [rsp + 0x48]
jmp 0x1400028c1
movzx ecx, ax
call fcn.14028104c
test eax, eax
je 0x1400028bd
movzx ecx, word [rbx]
call fcn.1402811ec
mov word [rdi], ax
add rdi, 2
add rbx, 2
movzx eax, word [rbx]
test ax, ax
jne 0x1400028a2
lea rdx, [rsp + 0x48]
mov word [rdi], r14w
lea rcx, [rbp + 0x180]
call fcn.14025a5a8
test rax, rax
jne 0x140002900
xor r8d, r8d
lea rcx, [rsp + 0x70]
mov rdx, r15
call fcn.140282734
mov rbx, rax
test rax, rax
jne 0x14000289b
jmp 0x14000285b
lea rcx, [0x1403f473c]
call fcn.1402823bc
test rax, rax
je 0x140002973
lea rdx, [0x1403f473c]
lea rcx, [rsp + 0x70]
call fcn.140281940
lea r8, [rsp + 0x20]
mov dword [rsp + 0x20], esi
lea rdx, [rbp + 0x180]
mov ecx, 2
call qword [sym.imp.KERNEL32.dll_GetComputerNameExW]
jmp 0x140002952
lea rdx, [rbp + 0x180]
mov rcx, rax
call fcn.140281908
test eax, eax
je 0x140002973
xor r8d, r8d
lea rcx, [rsp + 0x70]
mov rdx, r15
call fcn.140282734
test rax, rax
jne 0x14000293f
lea rcx, str.This_computer_is_not_authorized_to_run_this_application.
jmp 0x14000272c
mov eax, r12d
mov rcx, qword [rbp + 0x2180]
xor rcx, rsp
call fcn.140257b10
lea r11, [rsp + 0x2290]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov r12, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop rbp
ret