Function at 0x100165d60
Capabilities:
Get hostname

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
mov qword [rsp + 0x20], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x3a0
mov rax, qword [0x10022f440]
xor rax, rsp
mov qword [rsp + 0x390], rax
mov ebx, edx
mov rbp, rcx
mov qword [rsp + 0x70], rcx
lea rdx, [rsp + 0x30]
lea rcx, [rsp + 0x80]
xor r13d, r13d
mov r15d, r13d
mov dword [rsp + 0x30], 0x80
call qword [sym.imp.KERNEL32.dll_GetComputerNameW]
mov rax, qword [rbp + 0x110]
lea rsi, [rax + 0x128]
mov qword [rsp + 0x40], rsi
test rax, rax
je 0x100165ddf
mov qword [rsp + 0x50], rax
cmp dword [rbp], r13d
je 0x100165de4
mov qword [rsp + 0x50], r13
test rax, rax
je 0x100165df5
cmp dword [rbp], r13d
jne 0x100165df5
add rax, 0x10
jmp 0x100165df8
mov rax, r13
lea rdi, [rsp + 0x180]
lea rcx, [0x100242300]
lea r14, [rax + 0x10c]
sub rdi, rax
mov qword [rsp + 0x38], rax
mov dword [rax + 4], ebx
sub rdi, 8
mov r12d, r13d
mov dword [rsp + 0x20], r13d
mov qword [rsp + 0x60], r13
mov qword [rsp + 0x58], rcx
mov qword [rsp + 0x68], r14
mov qword [rsp + 0x48], rdi
mov r9, r13
mov qword [rsp + 0x28], r13
lea r10, [0x100000000]
nop dword [rax + rax]
mov rcx, qword [r9 + r10 + 0x2422f8]
lea rdx, [rsp + 0x180]
mov r8d, 0x20a
call fcn.100166140
test eax, eax
je 0x100166098
mov r9, qword [rsp + 0x28]
mov dword [rsi + 0xc], r12d
mov dword [rsi + 0x14], r12d
lea r10, [0x100000000]
xor r8d, r8d
mov ebp, 0x40
mov r12d, dword [r9 + r10 + 0x2422f4]
mov r13d, r8d
lea rbx, [rsi + 0x40]
sub r12d, dword [r9 + r10 + 0x2422f0]
inc r12d
mov dword [rsp + 0x24], r12d
je 0x100165f78
mov rax, qword [rsp + 0x60]
mov r14d, r12d
mov r12, qword [rsp + 0x38]
mov rdi, rax
add rax, r14
lea rcx, [0x10024231c]
shl rdi, 5
mov qword [rsp + 0x60], rax
add rdi, rcx
xor esi, esi
nop dword [rax]
mov r8, qword [rdi - 0xc]
mov r9d, 0x7f
lea rcx, [rbx + 0x28]
lea edx, [r9 + 1]
call qword [sym.imp.MSVCR100.dll_wcsncpy_s]
mov dword [rbx], 0x28
mov dword [rbx + 4], r15d
mov dword [rbx + 0xc], r15d
mov dword [rbx + 8], esi
mov dword [rbx + 0x10], esi
mov eax, dword [rdi]
add r13d, 8
mov dword [rbx + 0x18], eax
mov eax, dword [rdi - 4]
mov dword [rbx + 0x1c], eax
mov eax, dword [rdi + 8]
mov dword [rbx + 0x20], eax
mov eax, dword [rdi + 4]
mov dword [rbx + 0x24], r13d
mov dword [rbx + 0x14], eax
mov ecx, dword [rdi + 0xc]
mov dword [rbx + 0x128], ecx
mov eax, dword [r12 + 4]
and eax, ecx
cmp eax, ecx
jne 0x100165f42
add ebp, 0x28
inc r15d
add rdi, 0x20
add rbx, 0x130
dec r14
jne 0x100165ee0
mov rsi, qword [rsp + 0x40]
mov r12d, dword [rsp + 0x24]
mov rdi, qword [rsp + 0x48]
mov r14, qword [rsp + 0x68]
mov r9, qword [rsp + 0x28]
xor r8d, r8d
lea r10, [0x100000000]
mov r13, qword [rsp + 0x58]
mov dword [rsi], ebp
mov dword [rsi + 4], ebp
mov dword [rsi + 8], 0x40
mov dword [rsi + 0x10], r8d
mov qword [rsi + 0x18], 0
mov dword [rsi + 0x20], r12d
mov eax, dword [r13]
mov dword [rsi + 0x2c], r8d
mov dword [rsi + 0x28], eax
cmp dword [r13], 0xffffffff
jne 0x100165fba
lea eax, [r12*8 + 0xf]
add eax, ebp
and eax, 0xfffffff8
mov dword [rsi], eax
mov edx, 0x80
lea rax, [r14 - 0x104]
nop word [rax + rax]
lea rcx, [rdx + 0x7fffff7e]
test rcx, rcx
je 0x100165ff3
movzx ecx, word [rdi + rax]
test cx, cx
je 0x100165ff3
mov word [rax], cx
add rax, 2
dec rdx
jne 0x100165fd0
jmp 0x100165ff8
test rdx, rdx
jne 0x100165ffc
sub rax, 2
mov rbp, qword [rsp + 0x70]
mov r12d, dword [rsp + 0x20]
mov word [rax], r8w
mov eax, esi
inc r12d
add r14, 0x110
sub eax, dword [rbp + 0x110]
add r9, 8
add r13, 4
mov dword [r14 - 0x114], eax
sub esi, dword [rbp + 0x110]
sub rdi, 0x110
add esi, 0x40
mov qword [r14 - 0x10c], 0xffffffffffffffff
mov qword [rsp + 0x68], r14
mov dword [r14 - 0x110], esi
mov qword [rsp + 0x40], rbx
mov dword [rsp + 0x20], r12d
mov rsi, rbx
mov qword [rsp + 0x28], r9
mov qword [rsp + 0x58], r13
mov qword [rsp + 0x48], rdi
cmp r12d, 1
jb 0x100165e50
mov rax, qword [rsp + 0x38]
mov dword [rax], 1
mov rax, qword [rsp + 0x50]
sub ebx, dword [rbp + 0x110]
mov dword [rax + 0xc], ebx
mov eax, 1
jmp 0x1001660b0
lea r8, [0x100046260]
mov edx, 1
mov ecx, 0x3e9
call fcn.100165b00
xor eax, eax
mov rcx, qword [rsp + 0x390]
xor rcx, rsp
call fcn.10005f420
lea r11, [rsp + 0x3a0]
mov rbx, qword [r11 + 0x38]
mov rbp, qword [r11 + 0x40]
mov rsi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret