Function at 0x442540
Capabilities:
Get hostname

Disassembly:
push rdi
push rsi
push rbx
sub rsp, 0x100
lea rsi, [rcx + 8]
mov qword [rcx + 8], 0
mov qword [rcx + 0x10], 0
lea rdx, [rsp + 0x24]
lea rcx, [rsp + 0x28]
mov dword [rsp + 0x24], 0
mov byte [rsi + 0x10], 0
call fcn.0046b7e0
test eax, eax
js 0x4424b6
mov edx, dword [rsp + 0x24]
mov rcx, qword [rsp + 0x28]
test edx, edx
jle 0x4424b0
mov r9, qword [rcx + 0x10]
movabs rax, 0xffffffffffff
movabs r8, 0x200000000
and r9, rax
cmp r9, r8
je 0x4424c1
lea ebx, [rdx - 1]
lea r10, [rbx + rbx*4 + 5]
mov ebx, 0x50
shl r10, 4
mov rdi, r10
sub rdi, rbx
shr rdi, 4
lea r9, [rdi + rdi*4]
and r9d, 7
je 0x4423f5
mov r11, qword [rcx + 0x60]
mov edi, 0xa0
and r11, rax
cmp r11, r8
je 0x4424c3
cmp r9, 1
mov ebx, 0xa0
je 0x4423f5
cmp r9, 2
je 0x4423dd
cmp r9, 3
je 0x4423c5
cmp r9, 4
je 0x4423ad
cmp r9, 5
je 0x442395
cmp r9, 6
je 0x44237d
mov r9, qword [rcx + rdi + 0x10]
lea r11, [rdi + 0x50]
and r9, rax
cmp r9, r8
je 0x4424c3
mov rbx, r11
mov r11, qword [rcx + rbx + 0x10]
lea rdi, [rbx + 0x50]
and r11, rax
cmp r11, r8
je 0x4424c3
mov rbx, rdi
mov r9, qword [rcx + rbx + 0x10]
lea rdi, [rbx + 0x50]
and r9, rax
cmp r9, r8
je 0x4424c3
mov rbx, rdi
mov rdi, qword [rcx + rbx + 0x10]
lea r11, [rbx + 0x50]
and rdi, rax
cmp rdi, r8
je 0x4424c3
mov rbx, r11
mov r9, qword [rcx + rbx + 0x10]
lea r11, [rbx + 0x50]
and r9, rax
cmp r9, r8
je 0x4424c3
mov rbx, r11
mov r11, qword [rcx + rbx + 0x10]
lea rdi, [rbx + 0x50]
and r11, rax
cmp r11, r8
je 0x4424c3
mov rbx, rdi
cmp rbx, r10
je 0x4424b0
mov rdi, qword [rcx + rbx + 0x10]
lea r9, [rbx + 0x50]
and rdi, rax
cmp rdi, r8
je 0x4424c3
mov r11, qword [rcx + r9 + 0x10]
mov rbx, r9
and r11, rax
cmp r11, r8
je 0x4424c3
add rbx, 0x50
mov rdi, qword [rcx + rbx + 0x10]
and rdi, rax
cmp rdi, r8
je 0x4424c3
lea rbx, [r9 + 0xa0]
mov r11, qword [rcx + rbx + 0x10]
and r11, rax
cmp r11, r8
je 0x4424c3
lea rbx, [r9 + 0xf0]
mov rdi, qword [rcx + rbx + 0x10]
and rdi, rax
cmp rdi, r8
je 0x4424c3
lea rbx, [r9 + 0x140]
mov r11, qword [rcx + rbx + 0x10]
and r11, rax
cmp r11, r8
je 0x4424c3
lea rbx, [r9 + 0x190]
mov rdi, qword [rcx + rbx + 0x10]
and rdi, rax
cmp rdi, r8
je 0x4424c3
lea rbx, [r9 + 0x1e0]
mov r11, qword [rcx + rbx + 0x10]
and r11, rax
cmp r11, r8
je 0x4424c3
lea rbx, [r9 + 0x230]
cmp rbx, r10
jne 0x4423fe
call fcn.0046bdd0
nop
add rsp, 0x100
pop rbx
pop rsi
pop rdi
ret
xor ebx, ebx
mov ecx, 9
call fcn.004c0ce0
add rbx, qword [rsp + 0x28]
mov qword [rax], 0
mov rdi, rax
mov byte [rax + 8], 0
mov r9d, 0xc8
mov edx, dword [rbx + 8]
mov dword [rax], edx
movzx ecx, word [rbx + 0xc]
lea rbx, [rsp + 0x30]
mov edx, 9
mov r8, rbx
mov word [rax + 4], cx
mov eax, 0x7063
mov rcx, rdi
mov word [rdi + 6], ax
mov byte [rdi + 8], 0x75
call fcn.00432060
mov r8, rsi
mov edx, 8
mov rcx, rbx
call fcn.004175b0
mov rcx, rdi
call fcn.004c0cb0
mov edx, dword [rsp + 0x24]
mov rcx, qword [rsp + 0x28]
call fcn.0046bdd0
jmp 0x4424b6
push r15
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x28
lea rax, [0x004d3ff0]
mov rbx, rcx
lea rcx, [rcx + 0xd0]
mov rbp, rdx
mov qword [rcx - 0xd0], rax
call fcn.004073f0
mov rcx, rbp
mov qword [rbx + 0x270], rbp
call fcn.00409b00
mov rdx, qword [rax + 0x90]
movabs rcx, 0xfffffffffffffff
lea esi, [rdx + rdx*2]
mov dword [rbx + 0xc8], edx
movsxd rdi, esi
lea r12, [rdi*8]
cmp rdi, rcx
mov rcx, 0xffffffffffffffff
cmovbe rcx, r12
call fcn.004c0ce0
mov r8, rdi
mov r9, rax
sub r8, 1
js 0x4425e2
sub rdi, 2
mov r8d, 8
mov rcx, r9
cmp rdi, 0xffffffffffffffff
cmovge r8, r12
xor edx, edx
call sub.msvcrt.dll_memset
mov r9, rax
lea r13, [rbx + 0x19]
lea r15, [rbx + 0x21]
xor r14d, r14d
mov rax, r14
mov qword [rbx + 0xa0], r9
mov qword [rbx + 0xb0], 0
and r15, 0xfffffffffffffff8
mov rsi, r13
mov qword [rbx + 0xb8], 0
sub rsi, r15
mov rdi, r15
mov qword [rbx + 0xc0], 0
sub esi, 0xffffff80
mov qword [rbx + 0x19], 0
mov qword [rbx + 0x91], 0
shr esi, 3
mov rcx, rsi
rep stosq qword [rdi], rax
mov rcx, rbp
mov rdi, r15
call fcn.00409b00
mov rdx, qword [rax + 0x20]
mov rcx, rsi
mov rax, r14
mov qword [rbx + 0x19], 0
mov qword [rbx + 0x91], 0
rep stosq qword [rdi], rax
test rdx, rdx
je 0x442679
cmp byte [rdx], 0
jne 0x4426a0
mov edx, 0x7f
mov rcx, r13
call qword [sym.imp.WS2_32.dll_gethostname]
mov rcx, rbx
add rsp, 0x28
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
jmp 0x442280
mov r8d, 0x7f
mov rcx, r13
call sub.msvcrt.dll_strncpy
jmp 0x442687