Function at 0x1401a0b90
Capabilities:
Get hostname

Disassembly:
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x570]
sub rsp, 0x670
mov qword [rbp + 0x60], 0xfffffffffffffffe
mov qword [rsp + 0x6b8], rbx
mov r14, rdx
mov r15, rcx
xor r13d, r13d
mov r12d, r13d
mov qword [rbp + 0x5c0], r13
mov dword [rbp + 0x5b0], r13d
xor edx, edx
mov r8d, 0x100
lea rcx, [rbp + 0x70]
call fcn.140249b10
mov dword [r15 + 0x74], 8
lea rax, vtable.CSABInternet.0
mov qword [rbp - 0x60], rax
lea rax, vtable.CSABByteString.0
mov qword [rbp - 0x40], rax
xorps xmm0, xmm0
movdqa xmmword [rbp - 0x30], xmm0
mov qword [rbp - 0x38], r13
lea ecx, [r13 + 1]
call fcn.140247068
mov rbx, rax
mov rdx, qword [rbp - 0x38]
test rdx, rdx
je 0x1401a0c41
mov r8, qword [rbp - 0x28]
inc r8
mov rcx, rax
call fcn.1402496a0
lea edx, [r13 + 1]
mov rcx, qword [rbp - 0x38]
call fcn.140247060
mov qword [rbp - 0x38], rbx
mov qword [rbp - 0x30], 1
xor r8d, r8d
xor edx, edx
lea rcx, [rbp - 0x40]
call fcn.14000af20
nop
mov dword [rbp - 0x20], r13d
mov qword [rbp - 0x48], r13
mov ecx, SafeArrayGetDim
call fcn.140247068
mov qword [rbp - 0x58], rax
lea r8, str.SABACTIVATION
mov edx, SafeArrayGetDim
mov rcx, rax
call fcn.140253604
mov dword [rbp - 0x50], 1
lea rax, vtable.CSABInternet_TryAll.0
mov qword [rbp - 0x60], rax
mov qword [rbp - 0x18], r13
xorps xmm0, xmm0
movdqa xmmword [rbp - 0x10], xmm0
mov qword [rbp], r13
mov dword [rbp + 8], r13d
lea r9, str._application.php
lea r8, str.www.superantispyware.com
mov edx, 1
lea rcx, [rbp + 0x10]
call fcn.1400093a0
nop
lea rcx, [rbp + 0x10]
call fcn.140198e50
mov r9d, 1
lea r8, str.VALIDATE
lea rdx, str.request
lea rcx, [rbp + 0x10]
call fcn.140009cd0
lea r8, [r15 + 0x30]
cmp byte [r8], 0
jne 0x1401a0d50
mov r9d, dword [r15 + 0x2c]
mov eax, 0x6b5fca6b
mul r9d
mov r8d, edx
shr r8d, 0x16
imul eax, r8d, 0x989680
mov ecx, r9d
sub ecx, eax
mov eax, 0xd1b71759
mul ecx
shr edx, 0xd
imul eax, r8d, 0x3e8
add eax, edx
imul ecx, eax, 0x2710
sub r9d, ecx
mov dword [rsp + 0x20], r9d
mov r9d, edx
lea rdx, str._03d__03d__04d
lea rcx, [rbp + 0x70]
call fcn.140006bc0
lea r8, [rbp + 0x70]
mov r9d, 1
lea rdx, [0x1402b4b74]
lea rcx, [rbp + 0x10]
call fcn.140009cd0
mov r9d, 1
mov r8, qword [r15 + 0x18]
lea rdx, str.hardwareid
lea rcx, [rbp + 0x10]
call fcn.140009cd0
mov r9d, 1
mov r8, qword [r15 + 0x48]
lea rdx, str.version
lea rcx, [rbp + 0x10]
call fcn.140009cd0
mov r8d, dword [r15 + 0x58]
lea rdx, str.core
lea rcx, [rbp + 0x10]
call fcn.140009ea0
mov dword [rbp + 0x5b0], 0x100
lea rdx, [rbp + 0x5b0]
lea rcx, [rbp + 0x70]
call qword [sym.imp.KERNEL32.dll_GetComputerNameA]
test eax, eax
je 0x1401a0e42
lea rdi, [rbp + 0x370]
lea rcx, [rbp + 0x70]
mov rax, 0xffffffffffffffff
nop
inc rax
cmp byte [rcx + rax], 0
jne 0x1401a0de0
test eax, eax
je 0x1401a0e25
lea rbx, [rbp + 0x70]
mov esi, eax
nop dword [rax]
nop word [rax + rax]
movsx r8d, byte [rbx]
add r8d, 2
lea rdx, [0x14028a478]
mov rcx, rdi
call fcn.140006bc0
add rdi, 2
lea rbx, [rbx + 1]
sub rsi, 1
jne 0x1401a0e00
mov r9d, 1
lea r8, [rbp + 0x370]
lea rdx, [0x1402c4274]
lea rcx, [rbp + 0x10]
call fcn.140009cd0
lea rax, vtable.CSABByteString.0
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x60], r13
mov qword [rsp + 0x68], r13
mov qword [rsp + 0x58], r13
mov ecx, 1
call fcn.140247068
mov rbx, rax
mov rdx, qword [rsp + 0x58]
test rdx, rdx
je 0x1401a0e93
mov r8, qword [rsp + 0x68]
inc r8
mov rcx, rax
call fcn.1402496a0
mov edx, 1
mov rcx, qword [rsp + 0x58]
call fcn.140247060
mov qword [rsp + 0x58], rbx
mov qword [rsp + 0x60], 1
xor r8d, r8d
xor edx, edx
lea rcx, [rsp + 0x50]
call fcn.14000af20
nop
lea rcx, [rbp + 0x10]
call fcn.14000af10
test eax, eax
jne 0x1401a0ecf
xor r8d, r8d
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0x10]
call fcn.14000ab00
mov rdi, r13
cmp qword [rsp + 0x68], r13
cmovne rdi, qword [rsp + 0x58]
lea rcx, [rbp + 0x10]
call fcn.14000ad30
mov rbx, rax
lea rcx, [rbp + 0x10]
call fcn.14000ad40
mov rdx, rax
mov dword [rsp + 0x40], 1
mov qword [rsp + 0x38], rdi
lea rax, [rbp + 0x5b0]
mov qword [rsp + 0x30], rax
lea rax, [rbp + 0x5c0]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0x20
mov r9, rbx
xor r8d, r8d
lea rcx, [rbp - 0x60]
call fcn.1400e6ad0
test eax, eax
je 0x1401a1104
cmp qword [rbp + 0x5c0], 0
je 0x1401a1104
lea rsi, vtable.CSABString.0
mov qword [rbp - 0x78], rsi
mov dword [rbp - 0x68], r13d
mov ecx, reloc.OLEAUT32.dll_SafeArrayGetDim
call fcn.140247068
mov qword [rbp - 0x70], rax
xor ecx, ecx
mov qword [rax], rcx
mov qword [rax + 8], rcx
mov dword [rbp - 0x64], 1
mov r8d, dword [rbp + 0x5b0]
mov rdx, qword [rbp + 0x5c0]
lea rcx, [rbp - 0x78]
call fcn.140005600
mov rdi, qword [rbp - 0x70]
mov rcx, rdi
call fcn.1402520ac
mov dword [r15 + 0x74], eax
mov r12d, 1
add eax, 0xfffffffa
cmp eax, r12d
ja 0x1401a10e3
lea rdx, [0x140286114]
mov rcx, qword [rbp + 0x5c0]
call fcn.140248db4
mov rbx, rax
test rax, rax
je 0x1401a10e3
add rbx, 2
mov qword [rsp + 0x70], rsi
mov dword [rbp - 0x80], r13d
lea ecx, [r12 + 0xf]
call fcn.140247068
mov qword [rsp + 0x78], rax
xor ecx, ecx
mov qword [rax], rcx
mov qword [rax + 8], rcx
mov dword [rbp - 0x7c], r12d
mov r8d, dword [rbp + 0x5c0]
sub r8d, ebx
add r8d, dword [rbp + 0x5b0]
mov rdx, rbx
lea rcx, [rsp + 0x70]
call fcn.140005600
mov rbx, qword [rsp + 0x78]
test r14, r14
je 0x1401a10d0
xor eax, eax
mov qword [r14], rax
mov qword [r14 + 8], rax
lea rdx, str.LIFETIME
mov rcx, rbx
call qword [sym.imp.SHLWAPI.dll_StrStrIA]
test rax, rax
je 0x1401a1052
mov eax, 0xffff
mov dword [r14], 0xffffffff
mov word [r14 + 6], ax
jmp 0x1401a10d0
xor edx, edx
mov r8d, 0x100
lea rcx, [rbp + 0x170]
call fcn.140249b10
xor edx, edx
mov r8d, 0x100
lea rcx, [rbp + 0x270]
call fcn.140249b10
movzx eax, byte [rbx]
mov byte [rbp + 0x170], al
movzx eax, byte [rbx + 1]
mov byte [rbp + 0x171], al
movzx eax, byte [rbx + 3]
mov byte [rbp + 0x270], al
movzx eax, byte [rbx + 4]
mov byte [rbp + 0x271], al
lea rcx, [rbp + 0x170]
call fcn.1402520ac
mov word [r14 + 2], ax
lea rcx, [rbp + 0x270]
call fcn.1402520ac
mov word [r14 + 6], ax
lea rcx, [rbx + 6]
call fcn.1402520ac
mov word [r14], ax
cmp dword [rbp - 0x7c], 1
jne 0x1401a10e3
test rbx, rbx
je 0x1401a10e3
mov rcx, rbx
call fcn.140247060
mov rcx, qword [rbp + 0x5c0]
call fcn.140247060
nop
cmp dword [rbp - 0x64], 1
jne 0x1401a1104
test rdi, rdi
je 0x1401a1104
mov rcx, rdi
call fcn.140247060
nop
lea rax, vtable.CSABByteString.0
mov qword [rsp + 0x50], rax
mov edx, 1
mov rcx, qword [rsp + 0x58]
call fcn.140247060
nop
lea rcx, [rbp + 0x10]
call fcn.140009b50
nop
lea rcx, [rbp - 0x60]
call fcn.1400e3a90
mov eax, r12d
mov rbx, qword [rsp + 0x6b8]
add rsp, 0x670
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret