Function at 0x1400da700
Capabilities:
Get hostname

Disassembly:
sub rsp, 0x4d8
mov qword [rsp + 0x4d0], rcx
mov qword [rsp + 0x4c8], rdx
mov qword [rsp + 0x4c0], r8
lea rax, [rsp + 0xb0]
mov qword [rsp + 0x4b8], rax
mov rcx, qword [rsp + 0x4b8]
xor edx, edx
mov r8d, 0x400
call sub.msvcrt.dll_memset
mov rax, qword [rsp + 0x4b8]
mov rcx, qword [0x140112434]
mov qword [rax], rcx
mov rax, qword [rsp + 0x4b8]
mov byte [rax + 8], 2
lea rcx, [rsp + 0x30]
mov edx, pe_nt_image_headers64
call qword [sym.imp.WS2_32.dll_gethostname]
mov byte [rsp + 0x3f], 0
lea rcx, [rsp + 0x30]
call sub.msvcrt.dll_strlen
shl eax, 1
mov dword [rsp + 0x2c], eax
mov eax, dword [rsp + 0x2c]
mov cl, al
mov rax, qword [rsp + 0x4b8]
mov byte [rax + 0xc], cl
mov eax, dword [rsp + 0x2c]
mov cl, al
mov rax, qword [rsp + 0x4b8]
mov byte [rax + 0xe], cl
mov rax, qword [rsp + 0x4b8]
add rax, 0x30
mov rcx, qword [rsp + 0x4b8]
sub rax, rcx
mov cl, al
mov rax, qword [rsp + 0x4b8]
mov byte [rax + 0x10], cl
mov rax, qword [rsp + 0x4b8]
mov byte [rax + 0x14], 3
mov rax, qword [rsp + 0x4b8]
mov byte [rax + 0x15], 0x82
mov rax, qword [rsp + 0x4b8]
mov byte [rax + 0x16], 0x81
mov rax, qword [rsp + 0x4b8]
mov byte [rax + 0x17], 0xa0
lea rcx, [rsp + 0x30]
mov rdx, qword [rsp + 0x4b8]
add rdx, 0x30
mov r8d, 0x40
call fcn.1400da010
mov rcx, qword [rsp + 0x4c8]
call fcn.1400daa70
mov rax, qword [rsp + 0x4c8]
mov rcx, qword [rsp + 0x4d0]
mov ecx, dword [rcx + 0x194]
mov dword [rax + 4], ecx
mov rax, qword [rsp + 0x4d0]
movzx edx, word [rax + 0x192]
mov rax, qword [rsp + 0x4c8]
movsx ecx, byte [rax + 1]
xor ecx, edx
mov byte [rax + 1], cl
mov dword [rsp + 0x28], 0
mov eax, dword [0x1401124fc]
add eax, dword [0x140112500]
xor eax, 0x89814ffd
add eax, 0x98570d7e
or eax, 0xd850e1fe
cmp eax, 0x44ae5daa
jbe 0x1400daa08
mov eax, dword [0x140112504]
add eax, dword [0x140112508]
imul eax, eax, 0x39412a2f
and eax, 0x109b1021
or eax, 0xa90c2d93
cmp dword [rsp + 0x28], 8
setl cl
mov byte [rsp + 0x27], cl
cmp eax, 0x8cebca1c
jb 0x1400da88d
mov al, byte [rsp + 0x27]
test al, 1
jne 0x1400da8d1
jmp 0x1400da95e
mov rcx, qword [rsp + 0x4c8]
mov edx, 8
call fcn.14006b990
mov r8d, eax
mov rax, qword [rsp + 0x4c8]
movsxd rcx, dword [rsp + 0x28]
movsx edx, byte [rax + rcx]
xor edx, r8d
mov byte [rax + rcx], dl
mov eax, dword [0x14011250c]
add eax, dword [0x140112510]
sub eax, 0xee6a6063
imul eax, eax, 0x9d5c10b6
and eax, 0x73671717
cmp eax, 0xd6068818
ja 0x1400daa0d
mov eax, dword [0x140112514]
add eax, dword [0x140112518]
sub eax, 0xc95cd6b9
mov ecx, 0x23282bab
xor edx, edx
div ecx
and eax, 0xb67de30a
mov ecx, dword [rsp + 0x28]
add ecx, 1
mov dword [rsp + 0x28], ecx
cmp eax, 0x2c7f70e7
jae 0x1400da924
jmp 0x1400da867
mov eax, dword [0x14011251c]
xor edx, edx
div dword [0x140112520]
add eax, 0x63e140d6
and eax, 0x8837cdeb
xor eax, 0x1b9334bc
cmp eax, 0xce88a6fa
ja 0x1400daa1d
mov eax, dword [0x140112524]
imul eax, dword [0x140112528]
add eax, 0x6439a141
add eax, 0x9158b252
and eax, 0x3c8778a8
mov dword [rsp + 0x20], eax
mov rax, qword [rsp + 0x4b8]
mov rcx, qword [rsp + 0x4c8]
mov rcx, qword [rcx]
mov qword [rax + 0x18], rcx
lea rcx, [rsp + 0xb0]
mov rdx, qword [rsp + 0x4c0]
mov rax, qword [rsp + 0x4b8]
add rax, 0x30
mov r8, qword [rsp + 0x4b8]
sub rax, r8
mov r8d, eax
add r8d, dword [rsp + 0x2c]
call fcn.1400ccf90
mov eax, dword [rsp + 0x20]
cmp eax, 0x13580699
jb 0x1400daa1d
add rsp, 0x4d8
ret
jmp 0x1400da88d
mov eax, dword [rsp + 0x28]
add eax, 1
mov dword [rsp + 0x28], eax
jmp 0x1400da924
mov rax, qword [rsp + 0x4b8]
mov rcx, qword [rsp + 0x4c8]
mov rcx, qword [rcx]
mov qword [rax + 0x18], rcx
lea rcx, [rsp + 0xb0]
mov rdx, qword [rsp + 0x4c0]
mov rax, qword [rsp + 0x4b8]
add rax, 0x30
mov r8, qword [rsp + 0x4b8]
sub rax, r8
mov r8d, eax
mov eax, dword [rsp + 0x2c]
add r8d, eax
call fcn.1400ccf90
jmp 0x1400da986