Function at 0x100005198
Capabilities:
Get hostname

Disassembly:
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
mov eax, 0x1330
call fcn.100010660
sub rsp, rax
mov qword [rsp + 0xb8], 0xfffffffffffffffe
mov qword [rsp + 0x1378], rbx
mov rax, qword [0x100013110]
xor rax, rsp
mov qword [rsp + 0x1320], rax
mov edi, r9d
mov dword [rsp + 0x60], r9d
mov r15, r8
mov dword [rsp + 0x80], edx
mov qword [rsp + 0x88], rcx
lea rdx, [0x10000161c]
lea rcx, [rsp + 0x50]
call sub.framedynos.dll_public:_void___cdecl_CHString::constructor_unsigned_short_int_const____ptr64____ptr64
nop
xor ebx, ebx
mov dword [rsp + 0x68], ebx
mov dword [rsp + 0x94], ebx
mov dword [rsp + 0x90], ebx
mov dword [rsp + 0x84], ebx
lea ebp, [rbx + 2]
mov qword [rsp + 0x58], rbx
mov r14d, 0x202
mov rcx, r14
call fcn.10000ff8a
mov rsi, rax
mov r12d, ebx
mov ecx, 0x7d2
call fcn.10000ff8a
mov r13, rax
cmp rax, rbx
jne 0x1000052a1
lea ecx, [rbx + 8]
call qword [sym.imp.KERNEL32.dll_SetLastError]
mov ecx, 0x9c
call fcn.100008cb8
mov rdx, rax
mov rcx, qword [sym.imp.msvcrt.dll__iob]
add rcx, 0x60
call fcn.10000a170
mov rcx, qword [sym.imp.msvcrt.dll__iob]
add rcx, 0x60
call fcn.100008a54
cmp rsi, rbx
je 0x100005290
mov rcx, rsi
call fcn.10000ff7e
nop
lea rcx, [rsp + 0x50]
call sub.framedynos.dll_public:_void___cdecl_CHString::destructor_void____ptr64
xor eax, eax
jmp 0x100005d14
mov rcx, r14
call fcn.10000ff8a
mov r14, rax
cmp rax, rbx
jne 0x100005310
mov ecx, 8
call qword [sym.imp.KERNEL32.dll_SetLastError]
mov ecx, 0x9c
call fcn.100008cb8
mov rdx, rax
mov rcx, qword [sym.imp.msvcrt.dll__iob]
add rcx, 0x60
call fcn.10000a170
mov rcx, qword [sym.imp.msvcrt.dll__iob]
add rcx, 0x60
call fcn.100008a54
cmp rsi, rbx
je 0x1000052f6
mov rcx, rsi
call fcn.10000ff7e
mov rcx, r13
call fcn.10000ff7e
nop
lea rcx, [rsp + 0x50]
call sub.framedynos.dll_public:_void___cdecl_CHString::destructor_void____ptr64
xor eax, eax
jmp 0x100005d14
mov eax, edi
neg eax
sbb edi, edi
and edi, 0xfffff000
add edi, 0x1010
mov dword [rsp + 0xc0], ebx
mov ebx, 0x1fc
mov r8, rbx
xor edx, edx
lea rcx, [rsp + 0xc4]
call sub.msvcrt.dll_memset
mov dword [rsp + 0x2c0], 0xf
mov dword [rsp + 0x2c4], edi
and dword [rsp + 0x2c8], r12d
xor edx, edx
lea r8d, [rdx + 0x7e]
lea rcx, [rsp + 0x2cc]
call sub.msvcrt.dll_memset
xor eax, eax
mov qword [rsp + 0x350], rax
mov qword [rsp + 0x358], rax
mov dword [rsp + 0x360], eax
mov r8, rbx
xor edx, edx
lea rcx, [rsp + 0x364]
call sub.msvcrt.dll_memset
mov dword [rsp + 0x560], 8
mov ebx, 0x10
mov dword [rsp + 0x564], ebx
and dword [rsp + 0x568], r12d
xor edx, edx
lea r8d, [rbx + 0x6e]
lea rcx, [rsp + 0x56c]
call sub.msvcrt.dll_memset
xor eax, eax
mov qword [rsp + 0x5f0], rax
mov qword [rsp + 0x5f8], rax
mov dword [rsp + 0x600], eax
xor edx, edx
mov r8d, 0x1fc
lea rcx, [rsp + 0x604]
call sub.msvcrt.dll_memset
mov dword [rsp + 0x800], 0x14
mov dword [rsp + 0x804], ebx
xor ebx, ebx
mov dword [rsp + 0x808], ebx
xor edx, edx
lea r8d, [rbx + 0x7e]
lea rcx, [rsp + 0x80c]
call sub.msvcrt.dll_memset
mov qword [rsp + 0x890], rbx
mov qword [rsp + 0x898], rbx
mov dword [rsp + 0x8a0], ebx
xor edx, edx
mov r8d, 0x1fc
lea rcx, [rsp + 0x8a4]
call sub.msvcrt.dll_memset
mov ebx, 0xa
mov dword [rsp + 0xaa0], ebx
mov dword [rsp + 0xaa4], 0x10
and dword [rsp + 0xaa8], r12d
xor edx, edx
lea r8d, [rbx + 0x74]
lea rcx, [rsp + 0xaac]
call sub.msvcrt.dll_memset
xor eax, eax
mov qword [rsp + 0xb30], rax
mov qword [rsp + 0xb38], rax
mov dword [rsp + 0xb40], eax
xor edx, edx
mov r8d, 0x1fc
lea rcx, [rsp + 0xb44]
call sub.msvcrt.dll_memset
mov dword [rsp + 0xd40], ebx
mov dword [rsp + 0xd44], edi
and dword [rsp + 0xd48], r12d
mov ebx, 0x7e
mov r8, rbx
xor edx, edx
lea rcx, [rsp + 0xd4c]
call sub.msvcrt.dll_memset
xor eax, eax
mov qword [rsp + 0xdd0], rax
mov qword [rsp + 0xdd8], rax
mov dword [rsp + 0xde0], eax
xor edx, edx
mov r8d, 0x1fc
lea rcx, [rsp + 0xde4]
call sub.msvcrt.dll_memset
mov dword [rsp + 0xfe0], 0xf
mov dword [rsp + 0xfe4], edi
xor edi, edi
mov dword [rsp + 0xfe8], edi
mov r8, rbx
xor edx, edx
lea rcx, [rsp + 0xfec]
call sub.msvcrt.dll_memset
mov qword [rsp + 0x1070], rdi
mov qword [rsp + 0x1078], rdi
mov dword [rsp + 0x1080], edi
xor edx, edx
mov r8d, 0x1fc
lea rcx, [rsp + 0x1084]
call sub.msvcrt.dll_memset
mov dword [rsp + 0x1280], 0x24
mov dword [rsp + 0x1284], 0x80010
mov dword [rsp + 0x1288], edi
mov r8, rbx
xor edx, edx
lea rcx, [rsp + 0x128c]
call sub.msvcrt.dll_memset
mov qword [rsp + 0x1310], rdi
mov qword [rsp + 0x1318], rdi
call fcn.10000dec0
mov rbx, rax
mov qword [rsp + 0x78], rax
cmp rsi, rdi
je 0x100005c9e
cmp rax, rdi
je 0x100005c9e
mov rdi, r13
xor eax, eax
mov edx, 0x200
mov rcx, rdx
rep stosb byte [rdi], al
mov rdi, rsi
mov rcx, rdx
rep stosb byte [rdi], al
lea ecx, [rax + 0x44]
call fcn.100008cb8
mov rdx, rax
mov edi, 0x100
mov r8d, edi
lea rcx, [rsp + 0xc0]
call fcn.100009ec8
mov ecx, 0x45
call fcn.100008cb8
mov rdx, rax
mov r8d, edi
lea rcx, [rsp + 0x360]
call fcn.100009ec8
mov ecx, 0x47
call fcn.100008cb8
mov rdx, rax
mov r8d, edi
lea rcx, [rsp + 0x600]
call fcn.100009ec8
mov ecx, 0x48
call fcn.100008cb8
mov rdx, rax
mov r8d, edi
lea rcx, [rsp + 0x8a0]
call fcn.100009ec8
mov ecx, 0x49
call fcn.100008cb8
mov rdx, rax
mov r8d, edi
lea rcx, [rsp + 0xb40]
call fcn.100009ec8
mov ecx, 0x4a
call fcn.100008cb8
mov rdx, rax
mov r8d, edi
lea rcx, [rsp + 0xde0]
call fcn.100009ec8
mov ecx, 0x4b
call fcn.100008cb8
mov rdx, rax
mov r8d, edi
lea rcx, [rsp + 0x1080]
call fcn.100009ec8
mov edi, 1
test r15, r15
je 0x1000056fb
mov ecx, 0x96
call fcn.100008cb8
mov rdx, rax
xor r9d, r9d
mov r8d, edi
mov rcx, r15
call fcn.10000a08c
test eax, eax
jne 0x1000056d6
mov ebp, edi
jmp 0x1000056fb
mov ecx, 0x97
call fcn.100008cb8
mov rdx, rax
xor r9d, r9d
mov r8d, edi
mov rcx, r15
call fcn.10000a08c
test eax, eax
mov eax, 3
cmove ebp, eax
mov rdi, qword [rsp + 0x88]
test rdi, rdi
je 0x10000576f
mov rcx, rdi
call fcn.10000af54
cmp eax, 1
je 0x10000576f
mov r8d, 0x100
mov rdx, rdi
mov rcx, r13
call fcn.100009ec8
mov rcx, r13
call fcn.100005d48
test eax, eax
jne 0x1000057de
mov rcx, r13
call fcn.10000ff7e
mov rcx, rsi
call fcn.10000ff7e
cmp dword [rbx], 9
jne 0x100005755
lea rcx, [rsp + 0x78]
call fcn.10000df60
mov rcx, r14
call fcn.10000ff7e
nop
lea rcx, [rsp + 0x50]
call sub.framedynos.dll_public:_void___cdecl_CHString::destructor_void____ptr64
xor eax, eax
jmp 0x100005d14
mov dword [rsp + 0x64], 0x3e9
lea rdx, [rsp + 0x64]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_GetComputerNameW]
lea r9, [0x10000161c]
mov r15d, dword [rsp + 0x60]
mov r8d, r15d
mov edx, dword [rsp + 0x80]
mov ecx, ebp
call fcn.100006098
mov ecx, 0xb8
call fcn.100008cb8
mov rdx, rax
mov rcx, qword [sym.imp.msvcrt.dll__iob]
add rcx, 0x30
call fcn.10000a170
mov ecx, 0xbe
call fcn.100008cb8
mov rdx, rax
mov rcx, qword [sym.imp.msvcrt.dll__iob]
add rcx, 0x30
call fcn.10000a170
jmp 0x1000057e3
mov r15d, dword [rsp + 0x60]
mov ecx, 0x4c
call fcn.100008cb8
mov rdx, rax
mov r8d, 0x100
mov rcx, rsi
call fcn.100009ec8
movsxd rax, r15d
mov qword [rsp + 0xa8], rax
lea rax, [rsp + 0x90]
mov qword [rsp + 0x40], rax
lea rax, [rsp + 0x94]
mov qword [rsp + 0x38], rax
lea rax, [rsp + 0x68]
mov qword [rsp + 0x30], rax
or dword [rsp + 0x28], 0xffffffff
lea rax, [rsp + 0x58]
mov qword [rsp + 0x20], rax
mov r9d, 3
xor r8d, r8d
xor edx, edx
mov rcx, rdi
call sub.NETAPI32.dll_NetFileEnum
mov r15d, eax
mov dword [rsp + 0x64], eax
cmp eax, 5
je 0x100005c43
mov rax, qword [rsp + 0x58]
mov qword [rsp + 0xa0], rax
test r15d, r15d
je 0x10000587e
cmp r15d, 0xea
jne 0x100005b5e
xor edi, edi
mov dword [rsp + 0x60], edi
cmp dword [rsp + 0x68], edi
jbe 0x100005b56
mov dword [rsp + 0x84], 1
mov r15, qword [rsp + 0xa8]
xor edx, edx
mov rcx, rbx
call fcn.10000e21c
xor r9d, r9d
mov r8, r13
mov edx, r12d
mov rcx, rbx
call fcn.10000e320
mov rdx, qword [rsp + 0x58]
mov r9d, dword [rdx]
lea r8, [0x100001738]
mov edx, 0xff
mov rcx, r14
call fcn.1000082b0
xor r9d, r9d
mov r8, r14
mov edx, r12d
mov rcx, rbx
call fcn.10000e320
mov rdx, qword [rsp + 0x58]
mov rcx, qword [rdx + 0x18]
test rcx, rcx
je 0x10000591a
call qword [sym.imp.KERNEL32.dll_lstrlenW]
test eax, eax
je 0x10000591a
xor r9d, r9d
mov r8, qword [rsp + 0x58]
mov r8, qword [r8 + 0x18]
mov edx, r12d
mov rcx, rbx
call fcn.10000e320
jmp 0x100005935
mov ecx, 0xa7
call fcn.100008cb8
mov r8, rax
xor r9d, r9d
mov edx, r12d
mov rcx, rbx
call fcn.10000e320
xor r9d, r9d
mov r8, rsi
mov edx, r12d
mov rcx, rbx
call fcn.10000e320
mov rdx, qword [rsp + 0x58]
mov r9d, dword [rdx + 8]
lea r8, [0x100001740]
mov edx, 0xff
mov rcx, r14
call fcn.1000082b0
xor r9d, r9d
mov r8, r14
mov edx, r12d
mov rcx, rbx
call fcn.10000e320
mov rdx, qword [rsp + 0x58]
mov eax, dword [rdx + 4]
mov ecx, eax
and ecx, 1
je 0x1000059a4
test al, 2
je 0x1000059a4
mov ecx, 0x50
call fcn.100008cb8
mov r8, rax
xor r9d, r9d
mov edx, r12d
mov rcx, rbx
call fcn.10000e320
jmp 0x100005a01
test al, 2
je 0x1000059c5
mov ecx, 0x4f
call fcn.100008cb8
mov r8, rax
xor r9d, r9d
mov edx, r12d
mov rcx, rbx
call fcn.10000e320
jmp 0x100005a01
test ecx, ecx
je 0x1000059e6
mov ecx, 0x4e
call fcn.100008cb8
mov r8, rax
xor r9d, r9d
mov edx, r12d
mov rcx, rbx
call fcn.10000e320
jmp 0x100005a01
mov ecx, 0x99
call fcn.100008cb8
mov r8, rax
xor r9d, r9d
mov edx, r12d
mov rcx, rbx
call fcn.10000e320
mov rdx, qword [rsp + 0x58]
mov rdx, qword [rdx + 0x10]
lea rcx, [rsp + 0x50]
call sub.framedynos.dll_public:_class_CHString_const____ptr64___cdecl_CHString::operator_unsigned_short_int_const____ptr64____ptr64
test r15, r15
jne 0x100005b08
lea rcx, [rsp + 0x50]
call sub.framedynos.dll_protected:_struct_CHStringData____ptr64___cdecl_CHString::GetData_void_const___ptr64
cmp dword [rax + 4], 0x1f
jle 0x100005b13
cmp ebp, 2
jne 0x100005b13
lea r8d, [r15 + 0x1f]
lea rdx, [rsp + 0x70]
lea rcx, [rsp + 0x50]
call sub.framedynos.dll_public:_class_CHString___cdecl_CHString::Right_int____ptr64
nop
lea rcx, [rsp + 0x70]
call sub.framedynos.dll_protected:_struct_CHStringData____ptr64___cdecl_CHString::GetData_void_const___ptr64
mov edi, dword [rax + 4]
lea rdx, [0x10000158c]
lea rcx, [rsp + 0x70]
call sub.framedynos.dll_public:_int___cdecl_CHString::Find_unsigned_short_int_const____ptr64_const___ptr64
mov r8d, eax
mov r9d, edi
lea rdx, [rsp + 0x98]
lea rcx, [rsp + 0x70]
call sub.framedynos.dll_public:_class_CHString___cdecl_CHString::Mid_int__int____ptr64
nop
mov rdx, rax
lea rcx, [rsp + 0x70]
call sub.framedynos.dll_public:_class_CHString_const____ptr64___cdecl_CHString::operator_class_CHString_const____ptr64____ptr64
nop
lea rcx, [rsp + 0x98]
call sub.framedynos.dll_public:_void___cdecl_CHString::destructor_void____ptr64
lea r9d, [r15 + 3]
xor r8d, r8d
lea rdx, [rsp + 0xb0]
lea rcx, [rsp + 0x50]
call sub.framedynos.dll_public:_class_CHString___cdecl_CHString::Mid_int__int____ptr64
nop
mov rcx, qword [rsp + 0x70]
mov qword [rsp + 0x20], rcx
lea r9, [0x100001748]
mov r8, qword [rax]
lea rdx, [0x100001750]
lea rcx, [rsp + 0x50]
call sub.framedynos.dll_public:_void___cdecl_CHString::Format_unsigned_short_int_const____ptr64____ptr64
nop
lea rcx, [rsp + 0xb0]
call sub.framedynos.dll_public:_void___cdecl_CHString::destructor_void____ptr64
mov dword [rsp + 0x1280], 0x25
lea rcx, [rsp + 0x70]
call sub.framedynos.dll_public:_void___cdecl_CHString::destructor_void____ptr64
mov edi, dword [rsp + 0x60]
jmp 0x100005b13
mov dword [rsp + 0x1280], 0x50
xor r9d, r9d
mov r8, qword [rsp + 0x50]
mov edx, r12d
mov rcx, rbx
call fcn.10000e320
inc r12d
inc edi
mov dword [rsp + 0x60], edi
add qword [rsp + 0x58], 0x20
cmp edi, dword [rsp + 0x68]
jb 0x1000058a1
mov r15d, dword [rsp + 0x64]
mov rdi, qword [rsp + 0x88]
mov rax, qword [rsp + 0xa0]
jmp 0x100005b5e
mov rdi, qword [rsp + 0x88]
test rax, rax
je 0x100005b71
mov rcx, rax
call sub.NETAPI32.dll_NetApiBufferFree
and qword [rsp + 0x58], 0
cmp r15d, 0xea
je 0x100005809
mov eax, dword [rsp + 0x84]
test eax, eax
jne 0x100005ba6
lea ecx, [rax + 0x51]
call fcn.100008cb8
mov rdx, rax
mov rcx, qword [sym.imp.msvcrt.dll__iob]
add rcx, 0x30
call fcn.10000a170
jmp 0x100005c02
mov eax, 3
cmp ebp, eax
je 0x100005bc6
mov rcx, qword [sym.imp.msvcrt.dll__iob]
add rcx, 0x30
lea rdx, [0x100001760]
call fcn.10000a170
cmp dword [rsp + 0x80], 1
jne 0x100005bd4
bts ebp, 0xc
mov r9, rbx
mov r8d, ebp
lea rdx, [rsp + 0xc0]
mov ecx, 7
call fcn.10000fb58
cmp dword [rbx], 9
jne 0x100005bfb
lea rcx, [rsp + 0x78]
call fcn.10000df60
xor ebx, ebx
mov qword [rsp + 0x78], rbx
mov rcx, r13
call fcn.10000ff7e
mov rcx, rsi
call fcn.10000ff7e
test rbx, rbx
je 0x100005c26
cmp dword [rbx], 9
jne 0x100005c26
lea rcx, [rsp + 0x78]
call fcn.10000df60
mov rcx, r14
call fcn.10000ff7e
nop
lea rcx, [rsp + 0x50]
call sub.framedynos.dll_public:_void___cdecl_CHString::destructor_void____ptr64
mov eax, 1
jmp 0x100005d14
mov ecx, 0x80070005
call qword [sym.imp.KERNEL32.dll_SetLastError]
call fcn.1000088e8
mov rcx, qword [sym.imp.msvcrt.dll__iob]
add rcx, 0x60
mov edx, 0x20001
call fcn.100008a98
mov rcx, r13
call fcn.10000ff7e
mov rcx, rsi
call fcn.10000ff7e
cmp dword [rbx], 9
jne 0x100005c87
lea rcx, [rsp + 0x78]
call fcn.10000df60
mov rcx, r14
call fcn.10000ff7e
nop
lea rcx, [rsp + 0x50]
call sub.framedynos.dll_public:_void___cdecl_CHString::destructor_void____ptr64
xor eax, eax
jmp 0x100005d14
mov ecx, 8
call qword [sym.imp.KERNEL32.dll_SetLastError]
mov ecx, 0x9c
call fcn.100008cb8
mov rdx, rax
mov rcx, qword [sym.imp.msvcrt.dll__iob]
add rcx, 0x60
call fcn.10000a170
mov rcx, qword [sym.imp.msvcrt.dll__iob]
add rcx, 0x60
call fcn.100008a54
mov rcx, r13
call fcn.10000ff7e
cmp rsi, rdi
je 0x100005ceb
mov rcx, rsi
call fcn.10000ff7e
cmp rbx, rdi
je 0x100005cff
cmp dword [rbx], 9
jne 0x100005cff
lea rcx, [rsp + 0x78]
call fcn.10000df60
mov rcx, r14
call fcn.10000ff7e
nop
lea rcx, [rsp + 0x50]
call sub.framedynos.dll_public:_void___cdecl_CHString::destructor_void____ptr64
xor eax, eax
mov rcx, qword [rsp + 0x1320]
xor rcx, rsp
call fcn.10000ff20
mov rbx, qword [rsp + 0x1378]
add rsp, 0x1330
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret