Function at 0x14002ea00
Capabilities:
Get hostname

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 8], rcx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
mov rbp, rsp
sub rsp, 0x80
movaps xmmword [rsp + 0x70], xmm6
mov rdi, rcx
xor r12d, r12d
mov dword [rbp - 0x60], r12d
xorps xmm0, xmm0
movups xmmword [rcx], xmm0
mov qword [rcx + 0x10], r12
mov qword [rcx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rcx], r12b
mov dword [rbp - 0x60], 1
mov dword [rbp + 0x48], r12d
lea r8, [rbp + 0x48]
xor edx, edx
mov ecx, 3
call qword [sym.imp.KERNEL32.dll_GetComputerNameExA]
mov eax, dword [rbp + 0x48]
test eax, eax
je 0x14002ed3b
mov ebx, eax
xorps xmm0, xmm0
movups xmmword [rbp - 0x58], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x48], xmm1
mov r13d, reloc.WLDAP32.dll_Ordinal_22
cmp rax, 0xf
ja 0x14002eaa8
mov qword [rbp - 0x48], rax
mov qword [rbp - 0x40], reloc.WS2_32.dll_ntohs
mov r8d, eax
xor edx, edx
lea rcx, [rbp - 0x58]
call sub.VCRUNTIME140.dll_memset
mov byte [rbp + rbx - 0x58], r12b
jmp 0x14002eb14
mov r14, rbx
or r14, 0xf
cmp r14, r13
cmovb r14, r13
lea rcx, [r14 + 1]
cmp rcx, 0x1000
jb 0x14002eaef
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14002ed6a
mov rcx, rax
call fcn.1400ac698
test rax, rax
je 0x14002ed2f
lea rsi, [rax + 0x27]
and rsi, 0xffffffffffffffe0
mov qword [rsi - 8], rax
jmp 0x14002eaf7
call fcn.1400ac698
mov rsi, rax
mov qword [rbp - 0x58], rsi
mov qword [rbp - 0x48], rbx
mov qword [rbp - 0x40], r14
mov r8, rbx
xor edx, edx
mov rcx, rsi
call sub.VCRUNTIME140.dll_memset
mov byte [rsi + rbx], 0
lea rdx, [rbp - 0x58]
cmp qword [rbp - 0x40], 0xf
cmova rdx, qword [rbp - 0x58]
lea r8, [rbp + 0x48]
mov ecx, 3
call qword [sym.imp.KERNEL32.dll_GetComputerNameExA]
test eax, eax
je 0x14002ecfc
lea rcx, [rbp - 0x58]
cmp qword [rbp - 0x40], 0xf
cmova rcx, qword [rbp - 0x58]
mov rsi, qword [rbp - 0x48]
add rsi, rcx
lea r15, [rbp - 0x58]
cmp qword [rbp - 0x40], 0xf
cmova r15, qword [rbp - 0x58]
xorps xmm0, xmm0
movups xmmword [rbp - 0x38], xmm0
cmp r15, rsi
jne 0x14002eb87
movdqa xmm6, xmmword [0x1400c9bb0]
mov byte [rbp - 0x38], 0
movdqa xmm0, xmm6
psrldq xmm0, 8
movq rbx, xmm0
jmp 0x14002ec62
sub rsi, r15
movabs rbx, 0x7fffffffffffffff
cmp rsi, rbx
ja 0x14002ed5e
cmp rsi, 0xf
ja 0x14002ebcc
mov qword [rbp - 0x28], rsi
mov qword [rbp - 0x20], reloc.WS2_32.dll_ntohs
mov r8, rsi
mov rdx, r15
lea rcx, [rbp - 0x38]
call sub.VCRUNTIME140.dll_memcpy
mov byte [rbp + rsi - 0x38], 0
mov rbx, qword [rbp - 0x20]
jmp 0x14002ec5d
mov rax, rsi
or rax, 0xf
cmp rax, rbx
jbe 0x14002ec05
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.1400ac698
test rax, rax
je 0x14002ecef
lea r14, [rax + 0x27]
and r14, 0xffffffffffffffe0
mov qword [r14 - 8], rax
jmp 0x14002ec3e
mov rbx, rax
cmp rax, 0x16
cmovb rbx, r13
lea rcx, [rbx + 1]
test rcx, rcx
jne 0x14002ec1e
mov r14, r12
jmp 0x14002ec3e
cmp rcx, 0x1000
jb 0x14002ec36
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14002ed64
jmp 0x14002ebe6
call fcn.1400ac698
mov r14, rax
mov qword [rbp - 0x38], r14
mov qword [rbp - 0x28], rsi
mov qword [rbp - 0x20], rbx
mov r8, rsi
mov rdx, r15
mov rcx, r14
call sub.VCRUNTIME140.dll_memcpy
mov byte [r14 + rsi], 0
movdqu xmm6, xmmword [rbp - 0x28]
lea rax, [rbp - 0x38]
cmp rdi, rax
je 0x14002ecc0
mov rdx, qword [rdi + 0x18]
cmp rdx, 0xf
jbe 0x14002eca1
mov rcx, qword [rdi]
inc rdx
cmp rdx, 0x1000
jb 0x14002ec9c
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14002ecef
mov rcx, r8
call fcn.1400ac500
mov qword [rdi + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rdi], 0
movups xmm0, xmmword [rbp - 0x38]
movups xmmword [rdi], xmm0
movups xmmword [rdi + 0x10], xmm6
mov ebx, reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x38], 0
cmp rbx, 0xf
jbe 0x14002ecfc
lea rdx, [rbx + 1]
mov rcx, qword [rbp - 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002ecf6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14002ecf6
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400ac500
nop
mov r8, qword [rbp - 0x40]
cmp r8, 0xf
jbe 0x14002ed3b
lea rdx, [r8 + 1]
mov rcx, qword [rbp - 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002ed36
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14002ed36
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400ac500
mov rax, rdi
mov rbx, qword [rsp + 0xd0]
movaps xmm6, xmmword [rsp + 0x70]
add rsp, 0x80
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.14002e8c0
int3
call fcn.14002c510
nop
call fcn.14002c510
int3