Function at 0x1401e8db0
Capabilities:
Get hostname

Disassembly:
mov rax, rsp
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0xd8]
sub rsp, 0x1b0
mov qword [rbp + 0x60], 0xfffffffffffffffe
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
mov rax, qword [0x140415a10]
xor rax, rsp
mov qword [rbp + 0xa8], rax
mov qword [rbp - 0x30], rdx
mov qword [rbp - 0x58], rcx
mov dword [rbp - 0x70], 0x10
lea rdx, [rbp - 0x70]
lea rcx, [rbp + 0x88]
call qword [sym.imp.KERNEL32.dll_GetComputerNameW]
lea rax, vtable.Core::Array_class_Core::String_.0
mov qword [rbp - 0x50], rax
xor esi, esi
mov dword [rbp - 0x48], esi
mov qword [rbp - 0x40], rsi
mov eax, dword [0x140429a00]
test al, 1
jne 0x1401e8e5b
or eax, 1
mov dword [0x140429a00], eax
lea rax, vtable.Core::Win32::RegistryKey.0
mov qword [0x1404299e0], rax
mov qword [0x1404299e8], 0xffffffff80000003
lea rcx, [0x1402fed90]
call fcn.1402b8a74
lea rdx, [rbp - 0x50]
lea rcx, [0x1404299e0]
call fcn.1400ea910
xor al, al
mov byte [rsp + 0x30], al
mov r15d, esi
mov r13, qword [rbp - 0x40]
mov edi, dword [rbp - 0x48]
test edi, edi
js 0x1401e95ca
mov r12, rsi
lea r14, [0x140346ce0]
nop dword [rax]
mov qword [rsp + 0x50], 0
mov edx, 0x3c
lea rcx, [rsp + 0x48]
call fcn.1401fcb40
mov eax, dword [rsp + 0x50]
inc eax
movsxd rdx, eax
mov r9d, 0x3c
lea r8, str.SoftwareMicrosoftWindowsCurrentVersionInternet_Settings
mov rcx, qword [rsp + 0x48]
call fcn.1402ba94c
mov edx, 0x3c
lea rcx, [rsp + 0x48]
call fcn.1401fde50
nop
mov qword [rsp + 0x38], r14
mov qword [rsp + 0x40], 0
lea rcx, [rsp + 0x48]
test r12, r12
jne 0x1401e8ef9
lea r8, [0x140345fb8]
jmp 0x1401e8f15
mov r8, r12
add r8, r8
mov r8, qword [r13 + r8*8 - 0x10]
call fcn.1401fda10
lea r8, str.HKU_
lea rcx, [rsp + 0x48]
call fcn.1401fda10
xor r8d, r8d
xor edx, edx
lea rcx, [rsp + 0x48]
call fcn.1400eb0d0
mov rbx, rax
test rax, rax
je 0x1401e8f53
lea r8, [rsp + 0x38]
lea rdx, str.ProxyServer
mov rcx, rax
call fcn.1400d8ae0
mov r8, qword [rbx]
mov edx, 1
mov rcx, rbx
call qword [r8]
cmp dword [rsp + 0x44], 0
jle 0x1401e9598
mov qword [rsp + 0x68], r14
mov qword [rsp + 0x70], 0
mov qword [rsp + 0x58], r14
mov qword [rsp + 0x60], 0
xor r8d, r8d
lea rdx, [0x140365a18]
lea rcx, [rsp + 0x38]
call fcn.1401fd520
test eax, eax
js 0x1401e905f
lea r8d, [rax + 5]
lea rdx, [rbp + 0x40]
lea rcx, [rsp + 0x38]
call fcn.1401feab0
mov rbx, rax
mov edx, dword [rax + 0xc]
lea rcx, [rsp + 0x38]
call fcn.1401fcb40
movsxd r9, dword [rbx + 0xc]
mov ecx, dword [rsp + 0x40]
inc ecx
movsxd rdx, ecx
mov r8, qword [rbx]
mov rcx, qword [rsp + 0x38]
call fcn.1402ba94c
mov edx, dword [rbx + 0xc]
lea rcx, [rsp + 0x38]
call fcn.1401fde50
nop
cmp dword [rbp + 0x48], 0
jle 0x1401e8fef
mov rcx, qword [rbp + 0x40]
call fcn.1402b7350
lea rdx, [0x140365a14]
lea rcx, [rsp + 0x38]
call fcn.1401fd2e0
test eax, eax
jle 0x1401e905f
mov r9d, eax
xor r8d, r8d
lea rdx, [rbp + 0x50]
lea rcx, [rsp + 0x38]
call fcn.1401fed70
mov rbx, rax
mov edx, dword [rax + 0xc]
lea rcx, [rsp + 0x38]
call fcn.1401fcb40
movsxd r9, dword [rbx + 0xc]
mov ecx, dword [rsp + 0x40]
inc ecx
movsxd rdx, ecx
mov r8, qword [rbx]
mov rcx, qword [rsp + 0x38]
call fcn.1402ba94c
mov edx, dword [rbx + 0xc]
lea rcx, [rsp + 0x38]
call fcn.1401fde50
nop
cmp dword [rbp + 0x58], 0
jle 0x1401e905f
mov rcx, qword [rbp + 0x50]
call fcn.1402b7350
mov edx, 0x3a
mov rcx, qword [rsp + 0x38]
call fcn.1402ba4e4
mov rdi, rax
test rax, rax
je 0x1401e9572
sub rdi, qword [rsp + 0x38]
sar rdi, 1
test edi, edi
js 0x1401e9572
mov r9d, edi
xor r8d, r8d
lea rdx, [rbp]
lea rcx, [rsp + 0x38]
call fcn.1401fed70
mov rbx, rax
mov edx, dword [rax + 0xc]
lea rcx, [rsp + 0x68]
call fcn.1401fcb40
movsxd r9, dword [rbx + 0xc]
mov ecx, dword [rsp + 0x70]
inc ecx
movsxd rdx, ecx
mov r8, qword [rbx]
mov rcx, qword [rsp + 0x68]
call fcn.1402ba94c
mov edx, dword [rbx + 0xc]
lea rcx, [rsp + 0x68]
call fcn.1401fde50
nop
cmp dword [rbp + 8], 0
jle 0x1401e90e5
mov rcx, qword [rbp]
call fcn.1402b7350
lea r8d, [rdi + 1]
lea rdx, [rbp + 0x30]
lea rcx, [rsp + 0x38]
call fcn.1401feab0
mov rbx, rax
mov edx, dword [rax + 0xc]
lea rcx, [rsp + 0x58]
call fcn.1401fcb40
movsxd r9, dword [rbx + 0xc]
mov ecx, dword [rsp + 0x60]
inc ecx
movsxd rdx, ecx
mov r8, qword [rbx]
mov rcx, qword [rsp + 0x58]
call fcn.1402ba94c
mov edx, dword [rbx + 0xc]
lea rcx, [rsp + 0x58]
call fcn.1401fde50
nop
cmp dword [rbp + 0x38], 0
jle 0x1401e913e
mov rcx, qword [rbp + 0x30]
call fcn.1402b7350
cmp dword [rsp + 0x64], 0
je 0x1401e9572
mov rbx, qword [rsp + 0x58]
mov r8d, 0xa
lea rdx, [rbp - 0x38]
mov rcx, rbx
call fcn.1402ba758
mov esi, eax
mov rdx, qword [rbp - 0x38]
sub rdx, rbx
sar rdx, 1
movsxd rcx, dword [rsp + 0x64]
cmp rdx, rcx
jne 0x1401e9570
lea ecx, [rax - 0x7fffffff]
test ecx, 0xfffffffe
je 0x1401e9570
cmp eax, 0xffff
jg 0x1401e9570
mov r8d, 1
lea rdx, str.127.0.0.1
lea rcx, [rsp + 0x68]
call fcn.1401fce20
test al, al
jne 0x1401e91e6
xor r8d, r8d
lea rdx, [0x140365a00]
lea rcx, [rsp + 0x68]
call fcn.1401fce20
test al, al
jne 0x1401e91e6
xor r8d, r8d
lea rdx, [rbp + 0x88]
lea rcx, [rsp + 0x68]
call fcn.1401fce20
test al, al
je 0x1401e9570
xor r14b, r14b
mov rax, qword [rbp - 0x58]
mov rax, qword [rax + 8]
cmp dword [rax + 0x100], 0xffffffff
jne 0x1401e9204
mov dword [rax + 0x100], 0
cmp dword [rax + 0x100], 0
jne 0x1401e92e6
mov ecx, 0x18
call fcn.1402b6dbc
mov rbx, rax
test rax, rax
je 0x1401e923f
lea rax, vtable.Core::Collections::Generic::LinkedList_class_HitmanPro35::File____ptr64_::Enumerator_class_HitmanPro35::File____ptr64_.0
mov qword [rbx], rax
mov rax, qword [rbp - 0x30]
mov qword [rbx + 8], rax
mov qword [rbx + 0x10], 0
jmp 0x1401e9241
xor ebx, ebx
lea rax, vtable.Core::SharedPtr_class_Core::Collections::Generic::IEnumerator_class_HitmanPro35::File____ptr64__.0
mov qword [rbp - 0x18], rax
mov qword [rbp - 0x10], rbx
xor edi, edi
mov qword [rbp - 8], rdi
test rbx, rbx
je 0x1401e9283
lea ecx, [rdi + 4]
call fcn.1402b6dbc
mov rdi, rax
test rax, rax
je 0x1401e9277
mov dword [rax], 0
mov qword [rbp - 8], rax
jmp 0x1401e927d
xor edi, edi
mov qword [rbp - 8], rdi
mov dword [rdi], 1
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
test al, al
je 0x1401e92b9
nop
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x10]
movzx edx, si
mov rcx, qword [rax]
call fcn.1401e7940
test al, al
jne 0x1401e92b6
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
test al, al
jne 0x1401e9290
jmp 0x1401e92b9
mov r14b, 1
test rdi, rdi
je 0x1401e92dd
mov eax, dword [rdi]
test eax, eax
jle 0x1401e92c8
dec eax
mov dword [rdi], eax
cmp dword [rdi], 0
jne 0x1401e92dd
mov rcx, rbx
call fcn.1402150f0
mov rcx, rdi
call fcn.1402150f0
test r14b, r14b
je 0x1401e9569
xor esi, esi
mov r8d, esi
test r15d, r15d
sete r8b
lea rdx, str.Policies_DisableProxy_Title_d
lea rcx, [rbp + 0x10]
call fcn.1401fcfe0
nop
mov rdx, rax
lea rcx, [rbp - 0x68]
call fcn.1400f4800
nop
cmp dword [rbp + 0x18], esi
jle 0x1401e931e
mov rcx, qword [rbp + 0x10]
call fcn.1402b7350
mov qword [rbp - 0x78], rsi
mov edx, 0x21
lea rcx, [rbp - 0x80]
call fcn.1401fcb40
mov eax, dword [rbp - 0x78]
inc eax
movsxd rdx, eax
mov r9d, 0x21
lea r8, str.Policies_DisableProxy_Description
mov rcx, qword [rbp - 0x80]
call fcn.1402ba94c
mov edx, 0x21
lea rcx, [rbp - 0x80]
call fcn.1401fde50
nop
lea rdx, [rbp - 0x80]
lea rcx, [rbp - 0x28]
call fcn.1400f4800
nop
cmp dword [rbp - 0x78], 0
jle 0x1401e937a
mov rcx, qword [rbp - 0x80]
call fcn.1402b7350
mov ecx, 0x78
call fcn.1402b6dbc
mov rbx, rax
mov qword [rsp + 0x78], rax
test rax, rax
je 0x1401e9441
lea rdx, [rsp + 0x48]
mov rcx, rax
call fcn.1400d8f40
nop
lea rax, vtable.HitmanPro35::RepairProxySettings.0
mov qword [rbx], rax
mov qword [rbx + 0x60], rsi
mov edx, dword [rbp - 0x5c]
test edx, edx
jne 0x1401e93c5
lea r14, [0x140346ce0]
mov qword [rbx + 0x58], r14
jmp 0x1401e93ee
lea rcx, [rbx + 0x58]
call fcn.1401fcb40
movsxd r9, dword [rbp - 0x5c]
mov eax, dword [rbx + 0x60]
inc eax
movsxd rdx, eax
mov r8, qword [rbp - 0x68]
mov rcx, qword [rbx + 0x58]
call fcn.1402ba94c
lea r14, [0x140346ce0]
mov edx, dword [rbp - 0x5c]
lea rcx, [rbx + 0x58]
call fcn.1401fde50
nop
mov qword [rbx + 0x70], rsi
mov edx, dword [rsp + 0x44]
test edx, edx
jne 0x1401e940d
mov qword [rbx + 0x68], r14
jmp 0x1401e9431
lea rcx, [rbx + 0x68]
call fcn.1401fcb40
movsxd r9, dword [rsp + 0x44]
mov eax, dword [rbx + 0x70]
inc eax
movsxd rdx, eax
mov r8, qword [rsp + 0x38]
mov rcx, qword [rbx + 0x68]
call fcn.1402ba94c
mov edx, dword [rsp + 0x44]
lea rcx, [rbx + 0x68]
call fcn.1401fde50
nop
jmp 0x1401e9444
mov rbx, rsi
mov rdx, qword [rbp - 0x28]
mov rcx, rbx
call fcn.1401683e0
lea rdx, [rbx + 8]
mov r14, qword [rbp - 0x58]
mov rcx, qword [r14 + 8]
call fcn.140110c70
movzx esi, al
test al, al
sete dl
mov rcx, rbx
call fcn.1400d7a00
mov rdx, rbx
mov rcx, qword [r14 + 8]
call fcn.1400f8580
mov rcx, rbx
call fcn.1400d95a0
mov rdi, rax
mov rcx, rax
call fcn.1400e3810
mov dword [rsp + 0x78], 7
movzx edx, byte [0x140429189]
mov byte [rsp + 0x20], dl
lea r9, [rsp + 0x78]
lea rdx, [rbp + 0x68]
lea rcx, [rdi + 0x18]
call fcn.1400e3a70
mov dword [rsp + 0x78], 8
movzx edx, byte [0x140429189]
mov byte [rsp + 0x20], dl
lea r9, [rsp + 0x78]
lea rdx, [rbp + 0x78]
lea rcx, [rdi + 0x18]
call fcn.1400e3a70
xor edx, edx
test sil, sil
setne dl
add edx, 7
mov rcx, rdi
call fcn.1400e3730
cmp byte [rdi + 0xa], 1
je 0x1401e9522
mov byte [rdi + 0xa], 1
cmp byte [rdi + 8], 0
je 0x1401e9522
mov rax, qword [rdi]
mov rdx, qword [0x140428b78]
mov qword [rbp + 0x20], rax
mov dword [rbp + 0x28], 1
lea rcx, [rdx + 0x388]
lea r8, [rbp + 0x20]
call fcn.1401188e0
test sil, sil
jne 0x1401e953f
cmp byte [rsp + 0x30], sil
jne 0x1401e953f
mov al, 1
mov byte [rsp + 0x30], al
movzx edx, al
mov rcx, rdi
call fcn.1400e36f0
mov dl, 1
mov rcx, rdi
call fcn.1400e37a0
nop
cmp dword [rbp - 0x20], 0
jle 0x1401e955a
mov rcx, qword [rbp - 0x28]
call fcn.1402b7350
nop
cmp dword [rbp - 0x60], 0
jle 0x1401e9569
mov rcx, qword [rbp - 0x68]
call fcn.1402b7350
lea r14, [0x140346ce0]
xor esi, esi
cmp dword [rsp + 0x60], 0
jle 0x1401e9584
mov rcx, qword [rsp + 0x58]
call fcn.1402b7350
nop
cmp dword [rsp + 0x70], 0
jle 0x1401e9595
mov rcx, qword [rsp + 0x68]
call fcn.1402b7350
mov edi, dword [rbp - 0x48]
cmp dword [rsp + 0x40], 0
jle 0x1401e95aa
mov rcx, qword [rsp + 0x38]
call fcn.1402b7350
nop
cmp dword [rsp + 0x50], 0
jle 0x1401e95bb
mov rcx, qword [rsp + 0x48]
call fcn.1402b7350
inc r15d
inc r12
cmp r15d, edi
jle 0x1401e8e90
test r13, r13
je 0x1401e95f0
lea r9, [fcn.140005eb0]
mov r8d, dword [r13 - 8]
mov edx, 0x10
mov rcx, r13
call fcn.1402b7cf4
lea rcx, [r13 - 8]
call fcn.1402b712c
mov al, 1
mov rcx, qword [rbp + 0xa8]
xor rcx, rsp
call fcn.1402b6d40
lea r11, [rsp + 0x1b0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret