Function at 0x140002cec
Capabilities:
Get hostname

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x40
mov eax, dword [rsp + 0x90]
lea r13d, [rdx - 0x3a30]
mov edi, eax
mov esi, edx
xor esi, 0x7c9e
xor edi, 0x904
mov rbx, r9
mov ebp, edx
lea r15d, [rax - 0x3552]
add eax, 0xffffffbc
lea ecx, [rsi - 0xfd6]
cmp eax, ecx
jg 0x140003086
lea eax, [r13 + 0x341b]
cmp edi, eax
jle 0x140002ea2
mov ecx, dword [r9 + 0xbc]
mov eax, dword [r9 + 0xe8]
add eax, dword [r9 + 0x104]
xor eax, 0x1c06b78
imul ecx, eax
mov eax, dword [r9 + 0xc0]
mov dword [r9 + 0xbc], ecx
mov dword [r9 + 0x78], ecx
cmp dword [r9 + 0x94], eax
jne 0x140002da2
mov rax, qword [section..data]
mov ecx, dword [rax + 0x74]
xor ecx, dword [0x1400150e4]
mov dword [0x14001508c], ecx
jmp 0x140002daa
sub ecx, dword [r9 + 0x1c]
mov dword [r9 + 0x78], ecx
mov eax, dword [r9 + 0x104]
cmp dword [r9 + 0x24], eax
jae 0x140002dc7
mov eax, dword [r9 + 0xbc]
mov dword [r9 + 0xb8], eax
jmp 0x140002de2
mov eax, dword [r9 + 0xc8]
mov ecx, dword [r9 + 0x14]
sub ecx, dword [0x14001504c]
imul eax, ecx
mov dword [r9 + 0xc8], eax
mov rax, qword [section..data]
mov ecx, dword [rax + 0x20]
add dword [r9 + 0xb8], ecx
mov ecx, dword [0x140015024]
sub ecx, dword [r9 + 0xd0]
add ecx, 0xb476a
mov dword [0x14001505c], ecx
cmp dword [r9 + 0xc8], 0x886b
jbe 0x140002e2e
mov eax, dword [0x1400150d4]
add eax, 0xfffa5720
xor ecx, eax
mov dword [0x14001505c], ecx
jmp 0x140002e3f
mov eax, dword [r9 + 0xd0]
sub dword [r9 + 0x2c], eax
mov ecx, dword [0x14001505c]
mov eax, 0x11fb93
sub eax, dword [r9 + 0x100]
add ecx, eax
mov dword [0x14001505c], ecx
cmp dword [r9 + 0x104], 0x107b3
jb 0x140002e75
mov ecx, dword [r9 + 0x7c]
mov eax, 0x12c7b
xor ecx, dword [r9 + 0x48]
sub eax, ecx
add dword [r9 + 0x4c], eax
jmp 0x140002e84
mov eax, 0xffff9479
sub eax, dword [r9 + 0x14]
add dword [0x140015028], eax
mov eax, dword [0x14001503c]
sub eax, dword [r9 + 0x7c]
mov rcx, qword [section..data]
add eax, 0x16a64e
add dword [rcx + 0x4c], eax
jmp 0x140003086
mov r14d, dword [r9 + 0x9c]
mov rax, qword [section..data]
imul ecx, r14d, 0x3127
cmp dword [rax + 0x110], ecx
jae 0x140003086
mov eax, dword [r9 + 0x104]
lea ecx, [rsi + 0x3eec]
mov edx, dword [rbx + 0x34]
and ecx, r13d
imul eax, ecx
xor edx, r14d
lea ecx, [rsi - 0x3df4]
and ecx, 0x43dc
mov dword [r9 + 0x104], eax
mov rax, qword [section..data]
mov r11d, dword [0x140015020]
or r11d, dword [0x140015110]
xor r11d, dword [r9 + 0x7c]
mov r10d, dword [rax + 0xe4]
mov r8d, dword [0x140015068]
mov r9d, dword [0x14001501c]
or r8d, 0x46ae
and r8d, dword [rax + 0xc4]
xor r9d, edi
imul r10d, esi
mov dword [rsp + 0x30], r10d
mov qword [rsp + 0x28], rbx
mov dword [rsp + 0x20], r11d
call fcn.140003620
mov ecx, dword [rbx + 0x110]
mov rax, qword [section..data]
mov r8d, dword [rbx + 0x98]
mov edx, dword [rbx + 0xc4]
imul r8d, dword [rbx + 0x58]
sub edx, r13d
mov r9d, dword [rax + 0xcc]
mov eax, dword [rbx + 0x94]
sub r9d, 0x3eec
imul eax, ecx
imul ecx, dword [0x140015028]
or ecx, dword [rbx + 0x38]
mov dword [rsp + 0x28], ecx
mov rcx, rbx
mov dword [rsp + 0x20], eax
call fcn.140001128
mov edx, dword [0x14001508c]
mov r14d, eax
add edx, dword [0x140015058]
cmp edi, edx
jne 0x140003086
mov eax, dword [rbx + 0x90]
lea rcx, [0x140015010]
mov edx, dword [rbx + 0x48]
lea r12d, [r14 + 0x350e]
add eax, dword [rbx + 0x58]
mov r8d, r15d
or edx, dword [rbx]
xor eax, 0x3761
sub r8d, dword [rbx + 0x9c]
xor ebp, 0x34d5
mov qword [rsp + 0x28], rcx
xor edx, 0x3eec
mov r9d, ebp
mov dword [rsp + 0x20], eax
mov ecx, r12d
call fcn.1400016a4
sub edi, dword [rbx + 0x100]
mov esi, r14d
imul esi, dword [rbx + 0x7c]
or edi, 0x341b
mov ecx, 0x3eec
xor edi, 0x7572
mov ebp, eax
or esi, 0x43dc
sub esi, ecx
cmp esi, edi
jge 0x140003035
mov rax, qword [rbx + 0xb0]
mov qword [rbx + 0x80], rax
mov rdx, qword [0x1400150a0]
and edx, 0x36d8
xor rdx, rcx
mov ecx, dword [rbx + 0xd0]
imul ecx, dword [rbx + 0x14]
add ecx, dword [rbx + 0x8c]
call qword [sym.imp.KERNEL32.dll_GetComputerNameA]
xor esi, 0x3761
mov dword [rsp + 0x20], r12d
sub esi, dword [0x140015118]
lea r9, [0x140015010]
or ebp, r13d
sub r14d, r15d
mov edx, esi
mov r8d, ebp
mov ecx, r14d
call fcn.1400031f0
lea r11, [rsp + 0x40]
mov rbx, qword [r11 + 0x30]
lea eax, [r15 + 0x42d3]
mov rbp, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret