Function at 0x1400961b0
Capabilities:
Get hostname
Hash data with md5

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x928]
mov eax, 0xb88
call fcn.1401ef830
sub rsp, rax
mov rax, qword [0x140310170]
xor rax, rsp
mov qword [rbp + 0x910], rax
movzx eax, byte [r9 + 4]
mov r14, r8
mov qword [rbp - 0x60], rcx
mov rbx, rdx
mov rcx, qword [rbp + 0x990]
and al, 1
mov qword [rbp - 0x20], rcx
xor edi, edi
mov rcx, qword [rbp + 0x998]
xor edx, edx
mov qword [rbp - 0x28], rcx
mov r8d, 0x401
mov ecx, Ordinal_26
mov qword [rbp - 0x70], r9
mov dword [rbp - 0x74], ecx
lea rcx, [rbp + 0x70]
mov qword [rbp - 0x48], rcx
lea rcx, [rbp + 0x500]
mov qword [rbp - 0x38], rdi
mov byte [rbp - 0x78], al
call fcn.14020fde0
lea r12, [0x14027c115]
mov qword [rbp - 0x40], rdi
lea edx, [rdi + 0x5c]
mov qword [rbp - 0x50], r12
mov rcx, rbx
mov qword [rbp - 0x68], rdi
mov r13d, edi
mov r15d, edi
call fcn.14021125c
mov rsi, rax
test rax, rax
jne 0x14009627f
lea edx, [rdi + 0x2f]
mov rcx, rbx
call fcn.14021125c
mov rsi, rax
test rax, rax
jne 0x14009627f
mov rsi, rbx
jmp 0x140096290
mov r15, rsi
mov qword [rbp - 0x50], rbx
sub r15, rbx
mov qword [rbp - 0x68], r15
inc rsi
or rbx, 0xffffffffffffffff
mov qword [rbp - 0x30], rsi
test rsi, rsi
je 0x1400962ad
mov r13, rbx
inc r13
cmp byte [rsi + r13], dil
jne 0x1400962a0
mov qword [rbp - 0x40], r13
mov edx, 0x401
mov byte [rbp + 0x500], dil
lea rcx, [rbp + 0x500]
call qword [sym.imp.WS2_32.dll_gethostname]
mov byte [rbp + 0x900], dil
test eax, eax
jne 0x140096301
lea edx, [rax + 0x2e]
lea rcx, [rbp + 0x500]
call fcn.14021125c
test rax, rax
je 0x1400962e8
mov byte [rax], dil
lea rax, [rbp + 0x500]
mov r12, rbx
inc r12
cmp byte [rax + r12], dil
jne 0x1400962f2
mov qword [rbp - 0x58], r12
jmp 0x140096318
mov rcx, qword [rbp - 0x60]
lea rdx, str.gethostname___failed__continuing_without__n
call fcn.140059720
mov r12, rdi
mov qword [rbp - 0x58], rdi
mov rax, qword [rbp - 0x70]
cmp dword [rax + 0x18], edi
je 0x140096551
mov rcx, qword [rbp - 0x60]
lea rdx, [rbp + 0x90]
mov r8d, 2
call fcn.14006aef0
test eax, eax
jne 0x140096f6b
inc rbx
cmp byte [r14 + rbx], dil
jne 0x140096343
lea rcx, [rbx + rbx]
call qword [fcn.14021a348]
test rax, rax
je 0x140096e3c
mov r9, rax
lea rdx, [rbp + 0x70]
mov r8, rbx
mov rcx, r14
call fcn.1400988d0
test eax, eax
jne 0x140096f6b
lea rax, [r15 + r13]
add rax, rax
mov rcx, rax
mov qword [rbp - 0x48], rax
call qword [fcn.14021a348]
mov r14, rax
test rax, rax
jne 0x14009639d
lea ebx, [rax + 0x1b]
jmp 0x140096f69
mov rbx, rdi
test r13, r13
je 0x1400963bf
movsx ecx, byte [rbx + rsi]
call fcn.1402165c4
mov byte [r14 + rbx*2], al
mov byte [r14 + rbx*2 + 1], dil
inc rbx
cmp rbx, r13
jb 0x1400963a5
lea rdx, [r14 + r13*2]
mov rcx, rdi
test r15, r15
je 0x1400963e5
mov r8, qword [rbp - 0x50]
nop
movzx eax, byte [rcx + r8]
mov byte [rdx + rcx*2], al
mov byte [rdx + rcx*2 + 1], dil
inc rcx
cmp rcx, r15
jb 0x1400963d0
mov esi, reloc.WS2_32.dll_recv
lea rdx, [rbp + 0x70]
mov r8d, esi
call fcn.1400be380
mov qword [rbp - 0x80], rax
mov rbx, rax
test rax, rax
jne 0x140096407
lea ebx, [rsi + 0xb]
jmp 0x140096461
mov rax, qword [rax]
mov rdx, r14
mov r8d, dword [rbp - 0x48]
mov rcx, qword [rbx + 8]
call qword [rax + reloc.WS2_32.dll_htonl]
mov rdx, qword [rbp - 0x80]
lea rcx, [rbp + 0xb8]
mov rbx, qword [rbx]
mov rdx, qword [rdx + 8]
call qword [rbx + reloc.WS2_32.dll_recv]
mov rax, qword [rbp - 0x80]
lea rdx, [rbp + 0xb8]
mov r8d, dword [rbx + 0x20]
mov rcx, qword [rax + 0x10]
call qword [rbx + reloc.WS2_32.dll_htonl]
mov rax, qword [rbp - 0x80]
lea rcx, [rbp + 0xb8]
mov rdx, qword [rax + 0x10]
call qword [rbx + reloc.WS2_32.dll_recv]
mov rcx, qword [rbp - 0x80]
call qword [fcn.1402196e8]
mov ebx, edi
mov rcx, r14
call qword [fcn.1402196e8]
test ebx, ebx
jne 0x140096f69
mov rax, qword [rbp - 0x70]
lea rdx, [rbp + 0xb8]
mov r8d, esi
mov rax, qword [rax + 8]
mov qword [rbp + 0xd0], rax
mov rax, qword [rbp + 0x90]
mov qword [rbp + 0xd8], rax
call fcn.1400be380
mov rdi, rax
test rax, rax
je 0x140096e3c
mov r9, qword [rax]
lea rdx, [rbp + 0xd0]
mov rcx, qword [rax + 8]
mov r8d, esi
call qword [r9 + reloc.WS2_32.dll_htonl]
mov rbx, qword [rdi]
lea rcx, [rbp + 0xe8]
mov rdx, qword [rdi + 8]
call qword [rbx + reloc.WS2_32.dll_recv]
mov r8d, dword [rbx + 0x20]
lea rdx, [rbp + 0xe8]
mov rcx, qword [rdi + 0x10]
call qword [rbx + reloc.WS2_32.dll_htonl]
mov rdx, qword [rdi + 0x10]
lea rcx, [rbp + 0xe8]
call qword [rbx + reloc.WS2_32.dll_recv]
mov rcx, rdi
call qword [fcn.1402196e8]
mov rax, qword [rbp + 0x90]
lea r9, [rbp - 0x38]
movups xmm0, xmmword [rbp + 0xe8]
mov rdi, qword [rbp - 0x70]
lea rdx, [rbp + 0x90]
mov qword [rbp + 0xb0], rax
lea rcx, [rbp + 0xb8]
lea rax, [rbp - 0x74]
mov r8, rdi
mov qword [rsp + 0x20], rax
movups xmmword [rbp + 0xd0], xmm0
call fcn.1400989b0
test eax, eax
jne 0x140096f6b
mov rax, qword [rbp - 0x38]
mov qword [rbp - 0x48], rax
jmp 0x140096b3a
test dword [rax + 4], 0x80000
mov rdi, rax
je 0x1400968d0
mov rcx, qword [rbp - 0x60]
lea rdx, [rbp + 0xe8]
mov r8d, 2
call fcn.14006aef0
test eax, eax
jne 0x140096f6b
mov rax, qword [rbp + 0xe8]
xor ecx, ecx
mov qword [rbp + 0xa8], rcx
xor edx, edx
mov qword [rbp + 0xb0], rcx
mov rcx, qword [rdi + 8]
mov qword [rbp + 0xd0], rcx
lea rcx, [rbp - 0x10]
lea r8d, [rdx + 0x5c]
mov qword [rbp + 0xa0], rax
mov qword [rbp + 0xd8], rax
call fcn.14020fde0
mov eax, dword [rbp]
lea rdx, [rbp + 0xd0]
mov dword [rbp - 0x10], 0x67452301
mov esi, reloc.WS2_32.dll_recv
mov dword [rbp - 0xc], 0xefcdab89
mov dword [rbp - 8], 0x98badcfe
lea ecx, [rax + 0x80]
mov dword [rbp - 4], 0x10325476
mov qword [rbp + 0x90], rdx
cmp ecx, eax
jae 0x1400965fd
inc dword [rbp + 4]
mov dword [rbp], ecx
mov ecx, dword [rbp + 0x48]
test rcx, rcx
je 0x140096694
lea rax, [rcx + 0x10]
cmp rax, 0x40
jae 0x14009662a
movups xmm0, xmmword [rbp + 0xd0]
movups xmmword [rbp + rcx + 8], xmm0
add dword [rbp + 0x48], esi
jmp 0x1400966d1
lea rax, [rbp + 8]
mov edi, 0x40
sub rdi, rcx
lea rdx, [rbp + 0xd0]
mov r8, rdi
add rcx, rax
call fcn.14020f990
mov r8d, 1
lea rdx, [rbp + 8]
lea rcx, [rbp - 0x10]
call fcn.140001300
lea rdx, [rbp + 0xd0]
sub rsi, rdi
add rdx, rdi
xor eax, eax
mov qword [rbp + 0x90], rdx
mov qword [rbp + 8], rax
mov qword [rbp + 0x10], rax
mov qword [rbp + 0x18], rax
mov qword [rbp + 0x20], rax
mov qword [rbp + 0x28], rax
mov qword [rbp + 0x30], rax
mov qword [rbp + 0x38], rax
mov qword [rbp + 0x40], rax
mov dword [rbp + 0x48], eax
mov rdi, rsi
shr rdi, 6
test rdi, rdi
je 0x1400966bd
mov r8, rdi
lea rcx, [rbp - 0x10]
call fcn.140001300
mov rdx, qword [rbp + 0x90]
shl rdi, 6
add rdx, rdi
sub rsi, rdi
test rsi, rsi
je 0x1400966d1
mov r8, rsi
mov dword [rbp + 0x48], esi
lea rcx, [rbp + 8]
call fcn.14020f990
lea rdx, [rbp - 0x10]
lea rcx, [rbp + 0x90]
call fcn.14009c920
inc rbx
cmp byte [r14 + rbx], 0
jne 0x1400966e1
lea rcx, [rbx + rbx]
call qword [fcn.14021a348]
test rax, rax
je 0x140096e3c
mov r9, rax
lea rdx, [rbp + 0xb8]
mov r8, rbx
mov rcx, r14
call fcn.1400988d0
test eax, eax
jne 0x140096f6b
lea rdx, [rbp - 0x10]
lea rcx, [rbp + 0xb8]
call fcn.140098550
movzx eax, byte [rbp + 0x92]
lea rdx, [rbp - 0x10]
movzx edi, byte [rbp + 0x93]
lea rcx, [rbp - 0x80]
movzx ebx, byte [rbp + 0x97]
mov r8d, 1
shl edi, 8
or edi, eax
shl ebx, 8
movzx eax, byte [rbp + 0x91]
shl edi, 8
or edi, eax
movzx eax, byte [rbp + 0x90]
shl edi, 8
or edi, eax
movzx eax, byte [rbp + 0x96]
or ebx, eax
mov dword [rbp - 0x80], edi
movzx eax, byte [rbp + 0x95]
shl ebx, 8
or ebx, eax
movzx eax, byte [rbp + 0x94]
shl ebx, 8
or ebx, eax
mov dword [rbp - 0x7c], ebx
call fcn.14010b9e0
mov ecx, dword [rbp - 0x80]
lea rdx, [rbp - 0x10]
movzx eax, byte [rbp - 0x80]
mov byte [rbp + 0x70], al
mov eax, ecx
shr eax, 8
mov byte [rbp + 0x71], al
mov eax, ecx
shr eax, 0x10
mov byte [rbp + 0x72], al
movzx eax, byte [rbp - 0x7c]
shr ecx, 0x18
mov byte [rbp + 0x74], al
mov byte [rbp + 0x73], cl
mov ecx, dword [rbp - 0x7c]
mov eax, ecx
shr eax, 8
mov byte [rbp + 0x75], al
mov eax, ecx
shr ecx, 0x18
mov byte [rbp + 0x77], cl
lea rcx, [rbp + 0xbf]
shr eax, 0x10
mov byte [rbp + 0x76], al
call fcn.140098550
mov r8d, 1
mov dword [rbp - 0x80], edi
lea rdx, [rbp - 0x10]
mov dword [rbp - 0x7c], ebx
lea rcx, [rbp - 0x80]
call fcn.14010b9e0
mov ecx, dword [rbp - 0x80]
movzx eax, byte [rbp - 0x80]
mov byte [rbp + 0x78], al
mov eax, ecx
shr eax, 8
mov byte [rbp + 0x79], al
mov eax, ecx
shr eax, 0x10
mov byte [rbp + 0x7a], al
movzx eax, byte [rbp - 0x7c]
mov byte [rbp + 0x7c], al
shr ecx, 0x18
mov byte [rbp + 0x7b], cl
mov ecx, dword [rbp - 0x7c]
mov eax, ecx
shr eax, 8
mov byte [rbp + 0x7d], al
mov eax, ecx
shr eax, 0x10
mov byte [rbp + 0x7e], al
shr ecx, 0x18
mov byte [rbp + 0x7f], cl
lea rdx, [rbp - 0x10]
lea rcx, [rbp + 0xc6]
call fcn.140098550
mov r8d, 1
mov dword [rbp - 0x80], edi
lea rdx, [rbp - 0x10]
mov dword [rbp - 0x7c], ebx
lea rcx, [rbp - 0x80]
call fcn.14010b9e0
mov ecx, dword [rbp - 0x80]
movzx eax, byte [rbp - 0x80]
mov rdi, qword [rbp - 0x70]
mov byte [rbp + 0x80], al
mov eax, ecx
shr eax, 8
mov byte [rbp + 0x81], al
mov eax, ecx
shr eax, 0x10
mov byte [rbp + 0x82], al
movzx eax, byte [rbp - 0x7c]
mov byte [rbp + 0x84], al
shr ecx, 0x18
mov byte [rbp + 0x83], cl
mov ecx, dword [rbp - 0x7c]
mov eax, ecx
shr eax, 8
mov byte [rbp + 0x85], al
mov eax, ecx
shr eax, 0x10
shr ecx, 0x18
mov byte [rbp + 0x87], cl
mov byte [rbp + 0x86], al
jmp 0x140096b2c
inc rbx
cmp byte [r14 + rbx], 0
jne 0x1400968d0
lea rcx, [rbx + rbx]
call qword [fcn.14021a348]
test rax, rax
je 0x140096e3c
mov r9, rax
lea rdx, [rbp + 0xb8]
mov r8, rbx
mov rcx, r14
call fcn.1400988d0
test eax, eax
jne 0x140096f6b
lea rdx, [rbp - 0x10]
lea rcx, [rbp + 0xb8]
call fcn.140098550
movzx eax, byte [rdi + 9]
mov r8d, 1
movzx ecx, byte [rdi + 8]
movzx edx, byte [rdi + 0xc]
shl eax, 8
or ecx, eax
movzx eax, byte [rdi + 0xa]
shl eax, 0x10
or ecx, eax
movzx eax, byte [rdi + 0xb]
shl eax, 0x18
or ecx, eax
movzx eax, byte [rdi + 0xd]
mov dword [rbp - 0x80], ecx
movzx ecx, byte [rdi + 0xf]
shl ecx, 8
shl eax, 8
or edx, eax
movzx eax, byte [rdi + 0xe]
or ecx, eax
shl ecx, 0x10
or ecx, edx
lea rdx, [rbp - 0x10]
mov dword [rbp - 0x7c], ecx
lea rcx, [rbp - 0x80]
call fcn.14010b9e0
mov ecx, dword [rbp - 0x80]
lea rdx, [rbp - 0x10]
movzx eax, byte [rbp - 0x80]
mov byte [rbp + 0x70], al
mov eax, ecx
shr eax, 8
mov byte [rbp + 0x71], al
mov eax, ecx
shr eax, 0x10
mov byte [rbp + 0x72], al
movzx eax, byte [rbp - 0x7c]
shr ecx, 0x18
mov byte [rbp + 0x74], al
mov byte [rbp + 0x73], cl
mov ecx, dword [rbp - 0x7c]
mov eax, ecx
shr eax, 8
mov byte [rbp + 0x75], al
mov eax, ecx
shr ecx, 0x18
mov byte [rbp + 0x77], cl
lea rcx, [rbp + 0xbf]
shr eax, 0x10
mov byte [rbp + 0x76], al
call fcn.140098550
mov r9d, 1
lea r8, [rbp - 0x10]
lea rdx, [rbp + 0x78]
lea rcx, [rdi + 8]
call fcn.1400be2b0
lea rdx, [rbp - 0x10]
lea rcx, [rbp + 0xc6]
call fcn.140098550
mov r9d, 1
lea r8, [rbp - 0x10]
lea rdx, [rbp + 0x80]
lea rcx, [rdi + 8]
call fcn.1400be2b0
lea r8, [rbp + 0xb8]
mov rdx, r14
call fcn.140098700
test eax, eax
jne 0x140096f6b
lea rdx, [rbp - 0x10]
lea rcx, [rbp + 0xb8]
call fcn.140098550
movzx eax, byte [rdi + 9]
mov r8d, 1
movzx ecx, byte [rdi + 8]
movzx edx, byte [rdi + 0xc]
shl eax, 8
or ecx, eax
movzx eax, byte [rdi + 0xa]
shl eax, 0x10
or ecx, eax
movzx eax, byte [rdi + 0xb]
shl eax, 0x18
or ecx, eax
movzx eax, byte [rdi + 0xd]
mov dword [rbp - 0x80], ecx
movzx ecx, byte [rdi + 0xf]
shl ecx, 8
shl eax, 8
or edx, eax
movzx eax, byte [rdi + 0xe]
or ecx, eax
shl ecx, 0x10
or ecx, edx
lea rdx, [rbp - 0x10]
mov dword [rbp - 0x7c], ecx
lea rcx, [rbp - 0x80]
call fcn.14010b9e0
mov ecx, dword [rbp - 0x80]
lea rdx, [rbp - 0x10]
movzx eax, byte [rbp - 0x80]
mov byte [rbp + 0xa0], al
mov eax, ecx
shr eax, 8
mov byte [rbp + 0xa1], al
mov eax, ecx
shr eax, 0x10
mov byte [rbp + 0xa2], al
movzx eax, byte [rbp - 0x7c]
shr ecx, 0x18
mov byte [rbp + 0xa4], al
mov byte [rbp + 0xa3], cl
mov ecx, dword [rbp - 0x7c]
mov eax, ecx
shr eax, 8
mov byte [rbp + 0xa5], al
mov eax, ecx
shr ecx, 0x18
mov byte [rbp + 0xa7], cl
lea rcx, [rbp + 0xbf]
shr eax, 0x10
mov byte [rbp + 0xa6], al
call fcn.140098550
mov r9d, 1
lea r8, [rbp - 0x10]
lea rdx, [rbp + 0xa8]
lea rcx, [rdi + 8]
call fcn.1400be2b0
lea rdx, [rbp - 0x10]
lea rcx, [rbp + 0xc6]
call fcn.140098550
mov r9d, 1
lea r8, [rbp - 0x10]
lea rdx, [rbp + 0xb0]
lea rcx, [rdi + 8]
call fcn.1400be2b0
movups xmm0, xmmword [rbp + 0xa0]
movups xmmword [rbp + 0xd0], xmm0
cmp byte [rbp - 0x78], 0
je 0x140096b55
add r15, r15
add r13, r13
add r12, r12
mov qword [rbp - 0x68], r15
mov qword [rbp - 0x58], r12
mov qword [rbp - 0x40], r13
mov r8d, dword [rbp - 0x74]
movzx edx, byte [rdi + 7]
mov dword [rsp + 0x1d0], edx
movzx r9d, byte [rdi + 5]
lea eax, [r8 + 0x58]
lea rsi, [r15 + rax]
mov r14d, eax
lea r10, [rsi + r13]
mov rax, r12
shr rax, 8
movzx r15d, al
mov rax, r13
shr rax, 8
movzx r13d, al
mov rax, qword [rbp - 0x68]
shr rax, 8
movzx ecx, al
mov eax, r8d
movzx r8d, byte [rdi + 6]
mov dword [rsp + 0x1c8], r8d
mov dword [rsp + 0x1c0], r9d
shr eax, 8
mov qword [rbp + 0xe8], rcx
movzx ecx, al
mov rax, r10
shr rax, 8
movzx ebx, al
mov rax, rsi
shr rax, 8
mov dword [rbp - 0x80], ecx
movzx ecx, byte [rdi + 4]
mov dword [rsp + 0x1b8], ecx
movzx edi, al
mov eax, r14d
shr rax, 8
movzx r11d, r10b
movzx r10d, sil
movzx esi, al
movzx eax, r14b
xor r14d, r14d
mov qword [rsp + 0x1b0], r14
mov qword [rsp + 0x1a8], r14
mov qword [rsp + 0x1a0], r14
mov qword [rsp + 0x198], r14
mov qword [rsp + 0x190], r14
mov qword [rsp + 0x188], r14
mov qword [rsp + 0x180], r14
mov qword [rsp + 0x178], r14
mov qword [rsp + 0x170], r14
mov qword [rsp + 0x168], r14
mov qword [rsp + 0x160], rbx
mov qword [rsp + 0x158], r11
mov qword [rsp + 0x150], r15
movzx r12d, r12b
mov qword [rsp + 0x148], r12
mov qword [rsp + 0x140], r15
mov qword [rsp + 0x138], r12
mov qword [rsp + 0x130], r14
mov qword [rsp + 0x128], r14
mov qword [rsp + 0x120], rdi
mov rdi, qword [rbp - 0x40]
mov qword [rsp + 0x118], r10
mov qword [rsp + 0x110], r13
movzx ecx, dil
mov qword [rsp + 0x108], rcx
mov qword [rsp + 0x100], r13
mov qword [rsp + 0xf8], rcx
mov qword [rsp + 0xf0], r14
mov qword [rsp + 0xe8], r14
mov qword [rsp + 0xe0], rsi
mov rsi, qword [rbp - 0x68]
mov qword [rsp + 0xd8], rax
mov rax, qword [rbp + 0xe8]
mov qword [rsp + 0xd0], rax
movzx ecx, sil
mov qword [rsp + 0xc8], rcx
mov qword [rsp + 0xc0], rax
mov qword [rsp + 0xb8], rcx
mov qword [rsp + 0xb0], r14
mov qword [rsp + 0xa8], r14
mov dword [rsp + 0xa0], r14d
mov eax, dword [rbp - 0x80]
lea r8, str.NTLMSSP_c
mov ebx, dword [rbp - 0x74]
xor r9d, r9d
mov dword [rsp + 0x98], 0x58
mov edx, 0x400
mov dword [rsp + 0x90], eax
movzx ecx, bl
mov dword [rsp + 0x88], ecx
mov dword [rsp + 0x80], eax
mov dword [rsp + 0x78], ecx
lea rcx, [rbp + 0x100]
mov qword [rsp + 0x70], r14
mov qword [rsp + 0x68], r14
mov dword [rsp + 0x60], r14d
mov dword [rsp + 0x58], 0x40
mov qword [rsp + 0x50], r14
mov dword [rsp + 0x48], Ordinal_30
mov qword [rsp + 0x40], r14
mov dword [rsp + 0x38], Ordinal_30
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x28], r14
mov qword [rsp + 0x20], r14
call fcn.14006ab70
movsxd r15, eax
cmp r15, 0x3e8
jae 0x140096de6
movups xmm0, xmmword [rbp + 0xd0]
movsd xmm1, qword [rbp + 0xb0]
movups xmmword [rbp + r15 + 0x100], xmm0
movsd qword [rbp + r15 + 0x110], xmm1
add r15, 0x18
mov eax, 0x400
sub eax, ebx
cmp r15, rax
jae 0x140096e0b
mov rdx, qword [rbp - 0x48]
lea rcx, [rbp + 0x100]
add rcx, r15
mov r8, rbx
call fcn.14020f990
add r15, rbx
mov rcx, qword [rbp - 0x38]
call qword [fcn.1402196e8]
mov rbx, qword [rbp - 0x58]
lea r12, [r15 + rsi]
lea rax, [r12 + rdi]
add rax, rbx
cmp rax, 0x400
jb 0x140096e46
mov rcx, qword [rbp - 0x60]
lea rdx, str.user__domain__host_name_too_big
call fcn.140059810
mov eax, reloc.WLDAP32.dll_Ordinal_27
jmp 0x140096f6b
movzx r13d, byte [rbp - 0x78]
test r13b, r13b
je 0x140096e8a
lea rdx, [rbp + 0x100]
mov rcx, r14
add rdx, r15
shr rsi, 1
je 0x140096ea0
mov rbx, qword [rbp - 0x50]
nop word [rax + rax]
movzx eax, byte [rcx + rbx]
mov byte [rdx + rcx*2], al
mov byte [rdx + rcx*2 + 1], r14b
inc rcx
cmp rcx, rsi
jb 0x140096e70
mov rbx, qword [rbp - 0x58]
jmp 0x140096ea0
mov rdx, qword [rbp - 0x50]
lea rcx, [rbp + 0x100]
add rcx, r15
mov r8, rsi
call fcn.14020f990
test r13b, r13b
je 0x140096ed7
lea r8, [rbp + 0x100]
mov r9, rdi
add r8, r12
mov rcx, r14
shr r9, 1
je 0x140096eed
mov rdx, qword [rbp - 0x30]
nop
movzx eax, byte [rcx + rdx]
mov byte [r8 + rcx*2], al
mov byte [r8 + rcx*2 + 1], r14b
inc rcx
cmp rcx, r9
jb 0x140096ec0
jmp 0x140096eed
mov rdx, qword [rbp - 0x30]
lea rcx, [rbp + 0x100]
add rcx, r12
mov r8, rdi
call fcn.14020f990
add r12, rdi
lea rcx, [rbp + 0x100]
add rcx, r12
test r13b, r13b
je 0x140096f2d
mov rdx, rbx
shr rdx, 1
je 0x140096f3c
nop word [rax + rax]
movzx eax, byte [rbp + r14 + 0x500]
mov byte [rcx + r14*2], al
mov byte [rcx + r14*2 + 1], 0
inc r14
cmp r14, rdx
jb 0x140096f10
jmp 0x140096f3c
mov r8, rbx
lea rdx, [rbp + 0x500]
call fcn.14020f990
mov rax, qword [rbp - 0x28]
lea r9, [r12 + rbx]
mov qword [rsp + 0x28], rax
lea r8, [rbp + 0x100]
mov rax, qword [rbp - 0x20]
mov qword [rsp + 0x20], rax
call fcn.1400936e0
mov rcx, qword [rbp - 0x70]
mov ebx, eax
call fcn.140096f90
mov eax, ebx
mov rcx, qword [rbp + 0x910]
xor rcx, rsp
call fcn.1401ef4e0
add rsp, 0xb88
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret