Function at 0x140004ea0
Capabilities:
Get hostname

Disassembly:
mov qword [rsp + 8], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x20
xor dil, dil
xor ebx, ebx
mov ebp, 1
mov r14, rdx
mov r13d, ecx
lea r8, [0x14002fa20]
mov byte [rsp + 0x70], dil
mov word [0x140030e40], bx
cmp ecx, ebp
jle 0x140005139
lea r12d, [rbx + 2]
lea rsi, [rdx + 8]
lea r15, [rdx + 0x10]
nop dword [rax + rax]
mov rcx, qword [rsi]
movzx edx, word [rcx]
lea eax, [rdx - 0x2d]
test eax, 0xfffffffd
je 0x140004f85
cmp edx, 0x5c
jne 0x140004f3c
cmp word [rcx + 2], dx
jne 0x140004f3c
test dil, dil
jne 0x1400051b6
add rcx, 4
mov rdx, r8
nop
movzx eax, word [rcx]
lea rdx, [rdx + 2]
lea rcx, [rcx + 2]
mov word [rdx - 2], ax
test ax, ax
jne 0x140004f20
mov dil, 1
jmp 0x140005123
cmp edx, 0x40
jne 0x140004f6c
mov rdx, r8
nop dword [rax]
nop dword [rax + rax]
movzx eax, word [rcx]
lea rdx, [rdx + 2]
lea rcx, [rcx + 2]
mov word [rdx - 2], ax
test ax, ax
jne 0x140004f50
mov dil, 1
jmp 0x140005123
cmp qword [0x14002fa18], rbx
jne 0x1400051b6
mov qword [0x14002fa18], rcx
jmp 0x140005123
movzx ecx, word [rcx + 2]
call fcn.14000a410
add eax, 0xffffffbd
cmp eax, 0x12
ja case.0x140004fae.69
lea r9, [0x140000000]
cdqe
mov ecx, dword [r9 + rax*4 + 0x51c0]
add rcx, r9
jmp rcx
mov byte [0x140030c28], 1
jmp 0x14000511c
mov byte [0x14002fa17], 1
jmp 0x14000511c
mov byte [0x140030c29], 1
jmp 0x14000511c
mov byte [0x140030c2a], 1
jmp 0x14000511c
cmp byte [0x140030c2a], bl
je 0x1400051b6
cmp r12d, r13d
jge 0x1400051b6
cmp byte [rsp + 0x70], bl
jne 0x1400051b6
mov rcx, qword [r15]
lea rdx, [0x140025cd4]
call fcn.140007808
test eax, eax
jne 0x140005020
mov eax, 9
mov word [0x14002e190], ax
jmp 0x14000502d
mov rax, qword [r15]
movzx ecx, word [rax]
mov word [0x14002e190], cx
inc ebp
inc r12d
add r15, 8
add rsi, 8
mov byte [rsp + 0x70], 1
jmp 0x14000511c
cmp r12d, r13d
je 0x1400051b6
cmp byte [0x14002fa14], bl
jne 0x1400051b6
mov rcx, qword [r15]
lea rdx, [0x140030c30]
nop dword [rax]
nop word [rax + rax]
movzx eax, word [rcx]
lea rdx, [rdx + 2]
lea rcx, [rcx + 2]
mov word [rdx - 2], ax
test ax, ax
jne 0x140005070
inc ebp
inc r12d
add r15, 8
add rsi, 8
mov byte [0x14002fa14], 1
jmp 0x14000511c
cmp r12d, r13d
je 0x1400051b6
cmp byte [0x14002fa15], bl
jne 0x1400051b6
mov rcx, qword [r15]
lea rdx, [0x140030e40]
nop dword [rax]
movzx eax, word [rcx]
lea rdx, [rdx + 2]
lea rcx, [rcx + 2]
mov word [rdx - 2], ax
test ax, ax
jne 0x1400050c0
inc ebp
inc r12d
add r15, 8
add rsi, 8
mov byte [0x14002fa15], 1
jmp 0x14000511c
mov rcx, qword [rsi]
lea rdx, str.accepteula
add rcx, 2
call fcn.140007808
test eax, eax
je 0x14000511c
mov rcx, qword [rsi]
lea rdx, str.nobanner
add rcx, 2
call fcn.140007808
test eax, eax
jne 0x1400051b6
lea r8, [0x14002fa20]
inc ebp
inc r12d
add r15, 8
add rsi, 8
cmp ebp, r13d
jl 0x140004ef0
lea rsi, [0x140030a20]
lea rdx, [rsp + 0x78]
mov dword [rsp + 0x78], 0x104
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetComputerNameW]
test dil, dil
jne 0x140005182
lea rcx, [0x14002fa20]
nop dword [rax]
nop word [rax + rax]
movzx eax, word [rbx + rsi]
lea rbx, [rbx + 2]
mov word [rbx + rcx - 2], ax
test ax, ax
jne 0x140005170
movzx eax, byte [0x14002fa14]
test al, al
je 0x140005192
test dil, dil
je 0x1400051b6
cmp byte [0x14002fa15], 0
je 0x14000519f
test al, al
je 0x1400051b6
mov al, 1
mov rbx, qword [rsp + 0x60]
add rsp, 0x20
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
mov rcx, qword [r14]
call fcn.140007020
jmp 0x1400051a1