Function at 0x1400365dc
Capabilities:
Get hostname

Disassembly:
push r15
push r14
push r13
push r12
push rbp
sub rsp, 0x350
mov r15, r9
mov r14, r8
mov r13, rcx
mov ebp, dword [rsp + 0x3a0]
mov r12d, dword [rsp + 0x3b0]
mov rcx, r13
mov rax, qword [0x140079508]
mov qword [rsp + 0x348], rax
call fcn.140023d20
test rax, rax
jne 0x140036643
mov rcx, qword [rsp + 0x348]
call fcn.14005fbf0
mov eax, 0x59
add rsp, 0x350
pop rbp
pop r12
pop r13
pop r14
pop r15
ret
mov edx, 0x1000000
mov rcx, rax
lea r8, str._gslcopc_OpenLdapConnection__n
xor r9d, r9d
call fcn.14001f070
test r15, r15
je 0x140036968
xor ecx, ecx
mov rdx, r15
xor r8d, r8d
call fcn.1400095aa
test eax, eax
jne 0x1400368ce
lea rax, [rsp + 0x130]
mov dword [rsp + 0x30], ebp
mov qword [rsp + 0x340], rbx
mov qword [rsp + 0x330], rsi
mov qword [rsp + 0x338], rdi
xor ecx, ecx
mov rdx, r15
mov r8d, 0x20
call fcn.14000a3ec
mov rsi, rax
test rsi, rsi
je 0x14003671f
lea rdx, [rsp + 0x130]
mov rbx, rsi
sub rbx, r15
xor ecx, ecx
mov r8, r15
mov r9, rbx
call fcn.14000a1e4
mov byte [rsp + rbx + 0x130], 0
lea r15, [rsp + 0x130]
xor ecx, ecx
mov rdx, rsi
mov r8d, 0x20
call fcn.1400095aa
test eax, eax
je 0x140036721
xor ecx, ecx
mov rdx, rsi
mov r8d, 1
call fcn.140008ba6
movsxd rax, eax
add rsi, rax
xor ecx, ecx
mov rdx, rsi
mov r8d, 0x20
call fcn.1400095aa
test eax, eax
jne 0x1400366f3
jmp 0x140036721
xor esi, esi
xor ecx, ecx
mov rdx, r15
call fcn.1400081f4
mov ebx, eax
xor ecx, ecx
mov rdx, r15
mov r8d, 0x5d
call fcn.14000a3ec
mov rdi, rax
test rdi, rdi
je 0x1400368ee
lea rax, [rsp + 0x130]
cmp r15, rax
je 0x14003677e
lea rdx, [rsp + 0x130]
xor ecx, ecx
mov r8, r15
call fcn.14000a580
lea rax, [rsp + 0x130]
sub rdi, r15
lea r15, [rsp + 0x130]
add rdi, rax
xor ecx, ecx
mov rdx, r15
mov r8d, 0x5b
call fcn.1400095aa
test eax, eax
je 0x1400369cb
mov byte [r15], 0
xor ecx, ecx
mov rdx, r15
mov r8d, 1
call fcn.140008ba6
mov byte [rdi], 0
movsxd rax, eax
add r15, rax
xor ecx, ecx
mov rdx, r15
call fcn.1400081f4
mov ebp, eax
xor ecx, ecx
mov rdx, rdi
mov r8d, 1
call fcn.140008ba6
movsxd rax, eax
add rdi, rax
xor ecx, ecx
mov rdx, rdi
mov r8d, 0x3a
call fcn.1400095aa
test eax, eax
je 0x140036812
mov byte [rdi], 0
xor ecx, ecx
mov rdx, rdi
mov r8d, 1
call fcn.140008ba6
movsxd rax, eax
add rdi, rax
xor ecx, ecx
mov rdx, rdi
call fcn.140008d44
movsx rax, ax
jmp 0x140036840
xor ecx, ecx
lea rdx, [0x140068cd8]
call fcn.1400081f4
mov edi, eax
xor ecx, ecx
lea rdx, [0x140068978]
call fcn.1400081f4
add ebp, edi
add ebp, eax
cmp ebx, ebp
jne 0x140036a06
mov eax, dword [rsp + 0x30]
mov dword [rsp + 0x20], eax
mov dword [rsp + 0x28], r12d
mov rcx, r13
mov rdx, r14
mov r8, r15
xor r9d, r9d
call fcn.14004cc62
mov ebp, eax
cmp ebp, 0xffffffff
jne 0x1400368b6
mov r15, rsi
test rsi, rsi
je 0x14003687e
xor ecx, ecx
mov rdx, rsi
xor r8d, r8d
call fcn.1400095aa
test eax, eax
je 0x14003669c
mov rbx, qword [rsp + 0x340]
mov rsi, qword [rsp + 0x330]
mov rdi, qword [rsp + 0x338]
mov rcx, qword [rsp + 0x348]
call fcn.14005fbf0
mov eax, ebp
add rsp, 0x350
pop rbp
pop r12
pop r13
pop r14
pop r15
ret
mov rbx, qword [rsp + 0x340]
mov rsi, qword [rsp + 0x330]
mov rdi, qword [rsp + 0x338]
mov rcx, qword [rsp + 0x348]
call fcn.14005fbf0
xor eax, eax
add rsp, 0x350
pop rbp
pop r12
pop r13
pop r14
pop r15
ret
xor ecx, ecx
mov rdx, r15
mov r8d, 0x3a
call fcn.14000a3ec
mov rbx, rax
test rbx, rbx
je 0x14003683c
lea rax, [rsp + 0x130]
cmp r15, rax
je 0x14003693f
lea rdx, [rsp + 0x130]
xor ecx, ecx
mov r8, r15
call fcn.14000a580
lea rax, [rsp + 0x130]
sub rbx, r15
lea r15, [rsp + 0x130]
add rbx, rax
mov byte [rbx], 0
xor ecx, ecx
mov rdx, rbx
mov r8d, 1
call fcn.140008ba6
movsxd rdx, eax
add rdx, rbx
xor ecx, ecx
call fcn.140008d44
movsx rax, ax
jmp 0x140036840
lea rcx, [rsp + 0x30]
mov edx, pe_nt_image_headers64
call qword [sym.imp.WS2_32.dll_gethostname]
test eax, eax
je 0x14003699f
mov rcx, qword [rsp + 0x348]
call fcn.14005fbf0
mov eax, 0xffffffff
add rsp, 0x350
pop rbp
pop r12
pop r13
pop r14
pop r15
ret
mov dword [rsp + 0x20], ebp
mov dword [rsp + 0x28], r12d
mov rcx, r13
mov rdx, r14
lea r8, [rsp + 0x30]
xor r9d, r9d
call fcn.14004cc62
mov ebp, eax
cmp ebp, 0xffffffff
je 0x140036896
jmp 0x1400368ce
mov rbx, qword [rsp + 0x340]
mov rsi, qword [rsp + 0x330]
mov rdi, qword [rsp + 0x338]
mov rcx, qword [rsp + 0x348]
call fcn.14005fbf0
mov eax, 0xffffffff
add rsp, 0x350
pop rbp
pop r12
pop r13
pop r14
pop r15
ret
mov rbx, qword [rsp + 0x340]
mov rsi, qword [rsp + 0x330]
mov rdi, qword [rsp + 0x338]
mov rcx, qword [rsp + 0x348]
call fcn.14005fbf0
mov eax, 0xffffffff
add rsp, 0x350
pop rbp
pop r12
pop r13
pop r14
pop r15
ret