Function at 0x140179cd0
Capabilities:
Get hostname

Disassembly:
mov rax, rsp
push rdi
sub rsp, 0x460
mov qword [rsp + 0x40], 0xfffffffffffffffe
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rbp
mov qword [rax + 0x20], rsi
mov rax, qword [0x14028b7c8]
xor rax, rsp
mov qword [rsp + 0x450], rax
mov rdi, rcx
mov rbp, qword [0x1402a14e0]
call fcn.1401428e8
mov edx, 0x412
mov rcx, rdi
call fcn.140143198
mov r9d, 1
mov r8, qword [0x1402a1568]
lea edx, [r9 + 0x2f]
mov rcx, qword [rax + 0x40]
call qword [sym.imp.USER32.dll_SendMessageW]
mov edx, 0x411
mov rcx, rdi
call fcn.140143198
mov r9d, 1
mov r8, qword [0x1402a1568]
lea edx, [r9 + 0x2f]
mov rcx, qword [rax + 0x40]
call qword [sym.imp.USER32.dll_SendMessageW]
mov edx, 0x4ec
mov rcx, rdi
call fcn.140143198
mov r9d, 1
mov r8, qword [0x1402a1568]
lea edx, [r9 + 0x2f]
mov rcx, qword [rax + 0x40]
call qword [sym.imp.USER32.dll_SendMessageW]
mov edx, 0x4f1
mov rcx, rdi
call fcn.140143198
mov r9d, 1
mov r8, qword [0x1402a1568]
lea edx, [r9 + 0x2f]
mov rcx, qword [rax + 0x40]
call qword [sym.imp.USER32.dll_SendMessageW]
mov edx, 0x4ef
mov rcx, rdi
call fcn.140143198
mov r9d, 1
mov r8, qword [0x1402a1568]
lea edx, [r9 + 0x2f]
mov rcx, qword [rax + 0x40]
call qword [sym.imp.USER32.dll_SendMessageW]
mov edx, 0x4f2
mov rcx, rdi
call fcn.140143198
mov r9d, 1
mov r8, qword [0x1402a1568]
lea edx, [r9 + 0x2f]
mov rcx, qword [rax + 0x40]
call qword [sym.imp.USER32.dll_SendMessageW]
mov edx, 0x4f3
mov rcx, rdi
call fcn.140143198
mov r9d, 1
mov r8, qword [0x1402a1568]
lea edx, [r9 + 0x2f]
mov rcx, qword [rax + 0x40]
call qword [sym.imp.USER32.dll_SendMessageW]
mov edx, 0x4f4
mov rcx, rdi
call fcn.140143198
mov r9d, 1
mov r8, qword [0x1402a1568]
lea edx, [r9 + 0x2f]
mov rcx, qword [rax + 0x40]
call qword [sym.imp.USER32.dll_SendMessageW]
mov edx, 0x4f0
mov rcx, rdi
call fcn.140143198
mov r9d, 1
mov r8, qword [0x1402a1568]
lea edx, [r9 + 0x2f]
mov rcx, qword [rax + 0x40]
call qword [sym.imp.USER32.dll_SendMessageW]
mov edx, 0x4f6
mov rcx, rdi
call fcn.140143198
mov r9d, 1
mov r8, qword [0x1402a1568]
lea edx, [r9 + 0x2f]
mov rcx, qword [rax + 0x40]
call qword [sym.imp.USER32.dll_SendMessageW]
mov edx, 0x4f5
mov rcx, rdi
call fcn.140143198
mov r9d, 1
mov r8, qword [0x1402a1568]
lea edx, [r9 + 0x2f]
mov rcx, qword [rax + 0x40]
call qword [sym.imp.USER32.dll_SendMessageW]
mov edx, 0x4e8
mov rcx, rdi
call fcn.140143198
mov r9d, 1
mov r8, qword [0x1402a1568]
lea edx, [r9 + 0x2f]
mov rcx, qword [rax + 0x40]
call qword [sym.imp.USER32.dll_SendMessageW]
mov edx, 0x3eb
mov rcx, rdi
call fcn.140143198
mov r9d, 1
mov r8, qword [0x1402a1568]
lea edx, [r9 + 0x2f]
mov rcx, qword [rax + 0x40]
call qword [sym.imp.USER32.dll_SendMessageW]
mov edx, 0x4e7
mov rcx, rdi
call fcn.140143198
mov r9d, 1
mov r8, qword [0x1402a1568]
lea edx, [r9 + 0x2f]
mov rcx, qword [rax + 0x40]
call qword [sym.imp.USER32.dll_SendMessageW]
mov edx, 0x4eb
mov rcx, rdi
call fcn.140143198
mov r9d, 1
mov r8, qword [0x1402a1568]
lea edx, [r9 + 0x2f]
mov rcx, qword [rax + 0x40]
call qword [sym.imp.USER32.dll_SendMessageW]
mov edx, 0x4e9
mov rcx, rdi
call fcn.140143198
mov r9d, 1
mov r8, qword [0x1402a1568]
lea edx, [r9 + 0x2f]
mov rcx, qword [rax + 0x40]
call qword [sym.imp.USER32.dll_SendMessageW]
mov edx, 0x4ea
mov rcx, rdi
call fcn.140143198
mov r9d, 1
mov r8, qword [0x1402a1568]
lea edx, [r9 + 0x2f]
mov rcx, qword [rax + 0x40]
call qword [sym.imp.USER32.dll_SendMessageW]
mov edx, 0x4ed
mov rcx, rdi
call fcn.140143198
mov r9d, 1
mov r8, qword [0x1402a1568]
lea edx, [r9 + 0x2f]
mov rcx, qword [rax + 0x40]
call qword [sym.imp.USER32.dll_SendMessageW]
mov edx, 0x410
mov rcx, rdi
call fcn.140143198
mov r9d, 1
mov r8, qword [0x1402a1568]
lea edx, [r9 + 0x2f]
mov rcx, qword [rax + 0x40]
call qword [sym.imp.USER32.dll_SendMessageW]
mov edx, 0x4df
mov rcx, rdi
call fcn.140143198
mov r9d, 1
mov r8, qword [0x1402a1568]
lea edx, [r9 + 0x2f]
mov rcx, qword [rax + 0x40]
call qword [sym.imp.USER32.dll_SendMessageW]
mov edx, 0x4e0
mov rcx, rdi
call fcn.140143198
mov r9d, 1
mov r8, qword [0x1402a1568]
lea edx, [r9 + 0x2f]
mov rcx, qword [rax + 0x40]
call qword [sym.imp.USER32.dll_SendMessageW]
lea rdx, str.https:__valid.x86.fr_statistics.php
lea rcx, [rsp + 0x28]
call fcn.140001470
mov rbx, rax
mov qword [rsp + 0x20], rax
lea rcx, [rdi + 0x280]
mov rdx, rax
call fcn.1400010f0
nop
mov rdx, qword [rbx]
sub rdx, 0x18
or esi, 0xffffffff
mov eax, esi
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x14017a0a2
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
lea rdx, str.https:__valid.x86.fr_records.php
lea rcx, [rsp + 0x30]
call fcn.140001470
mov rbx, rax
mov qword [rsp + 0x38], rax
lea rcx, [rdi + 0x1b0]
mov rdx, rax
call fcn.1400010f0
nop
mov rdx, qword [rbx]
sub rdx, 0x18
lock xadd dword [rdx + 0x10], esi
dec esi
test esi, esi
jg 0x14017a0e6
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
cmp word [rbp + 0x608], 0
je 0x14017a10e
mov edx, 0x4e9
mov rcx, rdi
call fcn.140143198
mov rcx, rax
lea rdx, [rbp + 0x608]
call fcn.140143374
jmp 0x14017a144
mov dword [rsp + 0x20], 0x200
lea rdx, [rsp + 0x20]
lea rcx, [rsp + 0x50]
call qword [sym.imp.KERNEL32.dll_GetComputerNameW]
test eax, eax
je 0x14017a144
mov edx, 0x4e9
mov rcx, rdi
call fcn.140143198
mov rcx, rax
lea rdx, [rsp + 0x50]
call fcn.140143374
cmp word [rbp + 8], 0
je 0x14017a164
mov edx, 0x4ea
mov rcx, rdi
call fcn.140143198
mov rcx, rax
lea rdx, [rbp + 8]
call fcn.140143374
xor r8d, r8d
cmp dword [rbp + 0xa60], r8d
sete r8b
xor r9d, r9d
mov edx, 0xf1
mov rcx, qword [rdi + 0x2c8]
call qword [sym.imp.USER32.dll_SendMessageW]
movsxd r8, dword [0x1402a19b8]
xor r9d, r9d
mov edx, 0xf1
mov rcx, qword [rdi + 0x370]
call qword [sym.imp.USER32.dll_SendMessageW]
mov r11, qword [0x1402a14e0]
cmp dword [r11 + 0xa68], 0
je 0x14017a1e9
mov edx, 0x4e8
mov rcx, rdi
call fcn.140143198
mov rcx, rax
xor edx, edx
call fcn.1401434bc
mov edx, 0x3eb
mov rcx, rdi
call fcn.140143198
mov rcx, rax
xor edx, edx
call fcn.1401434bc
mov eax, 1
jmp 0x14017a1ee
mov eax, 1
mov rcx, qword [rsp + 0x450]
xor rcx, rsp
call fcn.140156fd0
lea r11, [rsp + 0x460]
mov rbx, qword [r11 + 0x18]
mov rbp, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rsp, r11
pop rdi
ret