Function at 0x1400d08b0
Capabilities:
Get hostname

Disassembly:
push rbp
mov rbp, rsp
push r15
push r14
push r13
push r12
push rdi
push rsi
push rbx
mov rbx, rcx
and rsp, 0xfffffffffffffff0
sub rsp, 0xa0
lea rsi, [rsp + 0x60]
mov dword [rsp + 0x5c], 0x10
lea rdx, [rsp + 0x5c]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetComputerNameW]
test eax, eax
jne 0x1400d0918
lea rax, [rbx + 0x10]
mov qword [rbx + 8], 0
mov qword [rbx], rax
mov byte [rbx + 0x10], 0
lea rsp, [rbp - 0x38]
mov rax, rbx
pop rbx
pop rsi
pop rdi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret
mov rcx, rsi
call sub.msvcrt.dll_wcslen
mov r8, rsi
xor edx, edx
mov ecx, 0xfde9
mov qword [rsp + 0x38], 0
mov rdi, qword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov r9d, eax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0
mov qword [rsp + 0x20], 0
call rdi
mov dword [rsp + 0x5c], eax
test eax, eax
je 0x1400d08ec
lea r13, [rsp + 0x90]
lea r12d, [rax + 1]
mov qword [rsp + 0x88], 0
mov qword [rsp + 0x80], r13
mov byte [rsp + 0x90], 0
cmp r12, 0xf
ja 0x1400d0a88
test r12, r12
jne 0x1400d0b8d
mov rax, r13
mov qword [rsp + 0x88], r12
mov rcx, rsi
mov byte [rax + r12], 0
mov r12, qword [rsp + 0x80]
mov r14d, dword [rsp + 0x5c]
call sub.msvcrt.dll_wcslen
mov r8, rsi
mov qword [rsp + 0x20], r12
xor edx, edx
mov r9d, eax
mov ecx, 0xfde9
mov qword [rsp + 0x38], 0
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], r14d
call rdi
mov r12, qword [rsp + 0x80]
mov rcx, r12
call sub.msvcrt.dll_strlen
mov rdi, qword [rsp + 0x88]
mov rsi, rax
cmp rdi, rax
jb 0x1400d0af0
cmp rax, rdi
jae 0x1400d0a58
mov qword [rsp + 0x88], rax
mov byte [r12 + rax], 0
mov r12, qword [rsp + 0x80]
mov rdi, qword [rsp + 0x88]
lea rcx, [rbx + 0x10]
mov qword [rbx], rcx
cmp r12, r13
jne 0x1400d0a6c
mov r8, rdi
add r8, 1
jne 0x1400d0b80
mov rdi, 0xffffffffffffffff
jmp 0x1400d0a7b
lea rcx, [rbx + 0x10]
lea r8, [rdi + 1]
mov qword [rbx], rcx
cmp r12, r13
je 0x1400d0b80
mov rax, qword [rsp + 0x90]
mov qword [rbx], r12
mov qword [rbx + 0x10], rax
mov qword [rbx + 8], rdi
jmp 0x1400d08ff
cmp r12, 0x1d
jbe 0x1400d0b70
lea rcx, [r12 + 1]
mov r15, r12
call fcn.1400aeae0
mov rcx, qword [rsp + 0x80]
mov r14, rax
cmp rcx, r13
je 0x1400d0ac0
mov rax, qword [rsp + 0x90]
lea rdx, [rax + 1]
call fcn.1400f5f50
mov qword [rsp + 0x80], r14
mov qword [rsp + 0x90], r15
mov r8, r12
xor edx, edx
mov rcx, r14
call sub.msvcrt.dll_memset
mov rax, qword [rsp + 0x80]
jmp 0x1400d099f
mov r14, rax
movabs rax, 0x7fffffffffffffff
sub r14, rdi
sub rax, rdi
cmp rax, r14
jb 0x1400d0c58
cmp r12, r13
je 0x1400d0b95
mov rax, qword [rsp + 0x90]
cmp rax, rsi
jb 0x1400d0c20
lea rcx, [r12 + rdi]
cmp r14, 1
je 0x1400d0c18
mov r8, r14
xor edx, edx
call sub.msvcrt.dll_memset
mov rax, qword [rsp + 0x80]
mov qword [rsp + 0x88], rsi
mov byte [rax + rsi], 0
mov r12, qword [rsp + 0x80]
mov rdi, qword [rsp + 0x88]
jmp 0x1400d0a32
mov r15d, 0x1e
mov ecx, 0x1f
jmp 0x1400d0a9a
mov rdx, r13
call sub.msvcrt.dll_memcpy
jmp 0x1400d0a7b
mov r14, r13
jmp 0x1400d0ad0
cmp rsi, 0xf
jbe 0x1400d0b26
cmp rsi, 0x1d
ja 0x1400d0c42
mov r15d, 0x1e
mov ecx, 0x1f
call fcn.1400aeae0
mov r9, qword [rsp + 0x80]
mov r12, rax
test rdi, rdi
je 0x1400d0be7
cmp rdi, 1
je 0x1400d0c4e
mov rdx, r9
mov r8, rdi
mov rcx, rax
mov qword [rsp + 0x48], r9
call sub.msvcrt.dll_memcpy
mov r9, qword [rsp + 0x48]
cmp r9, r13
je 0x1400d0c00
mov rax, qword [rsp + 0x90]
mov rcx, r9
lea rdx, [rax + 1]
call fcn.1400f5f50
mov qword [rsp + 0x80], r12
mov qword [rsp + 0x90], r15
jmp 0x1400d0b26
mov byte [rcx], 0
jmp 0x1400d0b3e
lea r15, [rax + rax]
cmp rsi, r15
jae 0x1400d0c42
test r15, r15
jns 0x1400d0c33
call fcn.140004240
mov rcx, r15
add rcx, 1
jns 0x1400d0bb0
jmp 0x1400d0c2e
lea rcx, [rsi + 1]
mov r15, rsi
jmp 0x1400d0bb0
movzx eax, byte [r9]
mov byte [r12], al
jmp 0x1400d0be7
lea rcx, [0x14016d9a0]
call fcn.140054600
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
sub rsp, 0x48
mov r8, rdx
test rdx, rdx
jne 0x1400d0c8e
lea rcx, [r8 + r8*2]
shl rcx, 4
call fcn.1400d0c89
xor edx, edx
or rax, 0xffffffffffffffff
div r8
cmp rax, 0x30
jae 0x1400d0c7c
xor r8d, r8d
lea rdx, [rsp + 0x58]
lea rcx, [rsp + 0x20]
mov qword [rsp + 0x58], r8
call fcn.1400d0cb4