Function at 0x180025eb0
Capabilities:
Get hostname

Disassembly:
push rbx
push rbp
push rsi
push rdi
push r12
sub rsp, 0x4a0
mov qword [rsp + 0x80], 0xfffffffffffffffe
mov rax, qword [0x18010e350]
xor rax, rsp
mov qword [rsp + 0x490], rax
mov rbp, r8
mov rsi, rdx
mov rdi, rcx
xor r12d, r12d
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x38], r12
mov qword [rsp + 0x40], r12
mov qword [rsp + 0x48], r12
mov r9b, 1
mov r8d, 0x410
lea rdx, str.D00904B0_A9E9_434a_AD26_BB6BBF49849A
lea rcx, [rsp + 0x50]
call fcn.180024380
nop
lea rcx, [rsp + 0x30]
call fcn.1800082f0
nop
lea rbx, [0x1800d7530]
mov rax, qword [rsp + 0x30]
test rax, rax
cmovne rbx, rax
lea rdx, [0x1800dd748]
mov rcx, rbx
call fcn.18008a390
test rax, rax
je 0x180025f4d
lea rbx, [rax + 2]
test rbx, rbx
jne 0x180025f5c
mov rbx, r12
mov qword [rsp + 0x20], rbx
jmp 0x180025f7d
mov rcx, rbx
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov rbx, rax
mov qword [rsp + 0x20], rax
test rax, rax
jne 0x180025f7d
mov ecx, 0x8007000e
call fcn.1800012c4
nop
mov rcx, qword [rdi]
cmp rcx, rbx
je 0x180025fc1
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
test rbx, rbx
jne 0x180025f95
mov rax, r12
jmp 0x180025fa9
mov rcx, rbx
call qword [sym.imp.OLEAUT32.dll_SysAllocStringByteLen]
mov edx, eax
mov rcx, rbx
call qword [sym.imp.OLEAUT32.dll_DllRegisterServer]
mov qword [rdi], rax
test rbx, rbx
je 0x180025fc1
test rax, rax
jne 0x180025fc1
mov ecx, 0x8007000e
call fcn.1800012c4
nop
mov rcx, rbx
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
cmp qword [rsp + 0x30], 0
je 0x180025fe6
mov rcx, qword [rsp + 0x38]
test rcx, rcx
jne 0x180025ff0
lea rcx, [rsp + 0x30]
call fcn.180006fc4
mov rcx, qword [rsp + 0x38]
test rcx, rcx
je 0x180025fff
test rcx, rcx
jne 0x180026006
mov rbx, r12
mov qword [rsp + 0x20], rbx
jmp 0x180026024
lea rcx, [0x1800d7530]
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov rbx, rax
mov qword [rsp + 0x20], rax
test rax, rax
jne 0x180026024
mov ecx, 0x8007000e
call fcn.1800012c4
nop
mov rcx, qword [rsi]
cmp rcx, rbx
je 0x180026068
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
test rbx, rbx
jne 0x18002603c
mov rax, r12
jmp 0x180026050
mov rcx, rbx
call qword [sym.imp.OLEAUT32.dll_SysAllocStringByteLen]
mov edx, eax
mov rcx, rbx
call qword [sym.imp.OLEAUT32.dll_DllRegisterServer]
mov qword [rsi], rax
test rbx, rbx
je 0x180026068
test rax, rax
jne 0x180026068
mov ecx, 0x8007000e
call fcn.1800012c4
nop
mov rcx, rbx
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov word [rsp + 0x90], 0
xor edx, edx
mov r8d, 0x3fe
lea rcx, [rsp + 0x92]
call fcn.180086e90
mov dword [rsp + 0x28], 0x200
lea r8, [rsp + 0x28]
lea rdx, [rsp + 0x90]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_GetComputerNameExW]
lea rcx, [rsp + 0x90]
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov rbx, rax
mov qword [rsp + 0x20], rax
test rax, rax
jne 0x1800260d6
mov ecx, 0x8007000e
call fcn.1800012c4
nop
mov rcx, qword [rbp]
cmp rcx, rax
je 0x18002610d
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov rcx, rbx
call qword [sym.imp.OLEAUT32.dll_SysAllocStringByteLen]
mov edx, eax
mov rcx, rbx
call qword [sym.imp.OLEAUT32.dll_DllRegisterServer]
mov qword [rbp], rax
test rax, rax
jne 0x18002610d
mov ecx, 0x8007000e
call fcn.1800012c4
nop
mov rcx, rbx
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
nop
cmp qword [rsp + 0x30], 0
je 0x18002613a
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov rcx, rax
mov r8, qword [rsp + 0x30]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov qword [rsp + 0x30], r12
cmp qword [rsp + 0x38], 0
je 0x18002615d
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov rcx, rax
mov r8, qword [rsp + 0x38]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov qword [rsp + 0x38], r12
mov rcx, qword [rsp + 0x40]
test rcx, rcx
je 0x180026172
call qword [sym.imp.KERNEL32.dll_LocalFree]
mov qword [rsp + 0x40], r12
mov rcx, qword [rsp + 0x48]
test rcx, rcx
je 0x180026187
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [rsp + 0x48], r12
lea rcx, [rsp + 0x50]
call fcn.180021010
xor eax, eax
mov rcx, qword [rsp + 0x490]
xor rcx, rsp
call fcn.180086e60
add rsp, 0x4a0
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret