Function at 0x140002d24
Capabilities:
Get hostname

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x40
mov eax, dword [rsp + 0x90]
lea r13d, [rdx - 0x137]
mov edi, eax
mov esi, edx
xor esi, 0x1ea4
xor edi, 0x7e3f
mov rbx, r9
mov r14d, edx
lea r15d, [rax - 0x16dd]
add eax, 0xfffff56a
lea ecx, [rsi + 0x16dd]
cmp eax, ecx
jg 0x1400030c4
lea eax, [r13 + 0xf3]
cmp edi, eax
jle 0x140002edd
mov ecx, dword [r9 + 0xbc]
mov eax, dword [r9 + 0xe8]
add eax, dword [r9 + 0x104]
xor eax, 0x1c06b78
imul ecx, eax
mov eax, dword [r9 + 0xc0]
mov dword [r9 + 0xbc], ecx
mov dword [r9 + 0x78], ecx
cmp dword [r9 + 0x94], eax
jne 0x140002ddd
mov rax, qword [section..data]
mov ecx, dword [rax + 0x74]
xor ecx, dword [0x1400150e4]
mov dword [0x14001508c], ecx
jmp 0x140002de5
sub ecx, dword [r9 + 0x1c]
mov dword [r9 + 0x78], ecx
mov eax, dword [r9 + 0x104]
cmp dword [r9 + 0x24], eax
jae 0x140002e02
mov eax, dword [r9 + 0xbc]
mov dword [r9 + 0xb8], eax
jmp 0x140002e1d
mov eax, dword [r9 + 0xc8]
mov ecx, dword [r9 + 0x14]
sub ecx, dword [0x14001504c]
imul eax, ecx
mov dword [r9 + 0xc8], eax
mov rax, qword [section..data]
mov ecx, dword [rax + 0x20]
add dword [r9 + 0xb8], ecx
mov ecx, dword [0x140015024]
sub ecx, dword [r9 + 0xd0]
add ecx, 0xb476a
mov dword [0x14001505c], ecx
cmp dword [r9 + 0xc8], 0x886b
jbe 0x140002e69
mov eax, dword [0x1400150d4]
add eax, 0xfffa5720
xor ecx, eax
mov dword [0x14001505c], ecx
jmp 0x140002e7a
mov eax, dword [r9 + 0xd0]
sub dword [r9 + 0x2c], eax
mov ecx, dword [0x14001505c]
mov eax, 0x11fb93
sub eax, dword [r9 + 0x100]
add ecx, eax
mov dword [0x14001505c], ecx
cmp dword [r9 + 0x104], 0x107b3
jb 0x140002eb0
mov ecx, dword [r9 + 0x7c]
mov eax, 0x12c7b
xor ecx, dword [r9 + 0x48]
sub eax, ecx
add dword [r9 + 0x4c], eax
jmp 0x140002ebf
mov eax, 0xffff9479
sub eax, dword [r9 + 0x14]
add dword [0x140015028], eax
mov eax, dword [0x14001503c]
sub eax, dword [r9 + 0x7c]
mov rcx, qword [section..data]
add eax, 0x16a64e
add dword [rcx + 0x4c], eax
jmp 0x1400030c4
mov ebp, dword [r9 + 0x9c]
mov rax, qword [section..data]
imul ecx, ebp, 0x420c
cmp dword [rax + 0x110], ecx
jae 0x1400030c4
mov eax, dword [r9 + 0x104]
lea ecx, [rsi + 0x42d3]
mov edx, dword [rbx + 0x34]
and ecx, r13d
imul eax, ecx
xor edx, ebp
lea ecx, [rsi - 0x314]
and ecx, 0x3a30
mov dword [r9 + 0x104], eax
mov rax, qword [section..data]
mov r11d, dword [0x140015020]
or r11d, dword [0x140015110]
xor r11d, dword [r9 + 0x7c]
mov r10d, dword [rax + 0xe4]
mov r8d, dword [0x140015068]
mov r9d, dword [0x14001501c]
or r8d, 0x43dc
and r8d, dword [rax + 0xc4]
xor r9d, edi
imul r10d, esi
mov dword [rsp + 0x30], r10d
mov qword [rsp + 0x28], rbx
mov dword [rsp + 0x20], r11d
call fcn.140003658
mov ecx, dword [rbx + 0x110]
mov rax, qword [section..data]
mov r8d, dword [rbx + 0x98]
mov edx, dword [rbx + 0xc4]
imul r8d, dword [rbx + 0x58]
sub edx, r13d
mov r9d, dword [rax + 0xcc]
mov eax, dword [rbx + 0x94]
sub r9d, 0x3761
imul eax, ecx
imul ecx, dword [0x140015028]
or ecx, dword [rbx + 0x38]
mov dword [rsp + 0x28], ecx
mov rcx, rbx
mov dword [rsp + 0x20], eax
call fcn.140001120
mov edx, dword [0x14001508c]
mov ebp, eax
add edx, dword [0x140015058]
cmp edi, edx
jne 0x1400030c4
mov eax, dword [rbx + 0x90]
lea r12, [0x140015010]
mov edx, dword [rbx + 0x48]
lea ecx, [rbp + 0x42d3]
add eax, dword [rbx + 0x58]
mov r8d, r15d
or edx, dword [rbx]
xor eax, 0x383d
sub r8d, dword [rbx + 0x9c]
xor r14d, 0x3833
xor edx, 0x46ae
mov qword [rsp + 0x28], r12
mov r9d, r14d
mov dword [rsp + 0x20], eax
call fcn.1400016a8
sub edi, dword [rbx + 0x100]
mov esi, ebp
imul esi, dword [rbx + 0x7c]
or edi, 0x2bf6
xor edi, 0x7af8
mov r14d, eax
sub edi, 0x1587
or esi, 0x3a30
sub esi, 0x2eb
cmp esi, edi
je 0x14000306f
mov rax, qword [rbx + 0xb0]
mov qword [rbx + 0x80], rax
mov rdx, qword [0x1400150a0]
mov ecx, dword [rbx + 0xd0]
and edx, 0x3c56
imul ecx, dword [rbx + 0x14]
xor rdx, 0x3127
add ecx, dword [rbx + 0x8c]
call qword [sym.imp.KERNEL32.dll_GetComputerNameA]
lea eax, [rbp + 0x341b]
xor esi, 0x7781
sub esi, dword [0x140015118]
sub ebp, r15d
or r14d, r13d
mov dword [rsp + 0x20], eax
mov edx, esi
mov ecx, ebp
mov r9, r12
mov r8d, r14d
call fcn.140003228
lea r11, [rsp + 0x40]
mov rbx, qword [r11 + 0x30]
lea eax, [r15 + 0xe3a]
mov rbp, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret