Function at 0x1400a5d80
Capabilities:
Get hostname

Disassembly:
push rbx
push rbp
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x70
mov rax, qword [0x1401620c0]
xor rax, rsp
mov qword [rsp + 0x68], rax
mov rbp, rdx
mov rbx, rcx
xor r14d, r14d
lea r13, [0x140000000]
movabs r15, 0x746c7561666564
mov qword [rsp + 0xc0], rsi
lea rdx, [0x1400e4ec8]
lea rcx, [rbx + 0x1470]
mov dword [rbx + 0x1494], r14d
call fcn.14002d430
test rbp, rbp
mov eax, dword [r13 + 0x1097b8]
mov rcx, qword [rbx + 0x1498]
mov dword [rcx], eax
movzx eax, word [r13 + 0x1097bc]
mov word [rcx + 4], ax
je 0x1400a5e32
cmp byte [rbp], r14b
je 0x1400a5e32
mov rdi, qword [rbx + 0x1498]
xor eax, eax
or rcx, 0xffffffffffffffff
repne scasb al, byte [rdi]
xor ecx, ecx
nop
nop
nop
nop
movzx eax, byte [rcx + rbp]
add rcx, 1
test al, al
mov byte [rdi + rcx - 2], al
jne 0x1400a5e20
jmp 0x1400a5ea2
xor eax, eax
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x48]
mov dword [rsp + 0x40], SafeArrayUnaccessData
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x50], rax
call qword [sym.imp.KERNEL32.dll_GetComputerNameA]
xor eax, eax
or rcx, 0xffffffffffffffff
lea rdi, [rsp + 0x48]
lea rdx, [rsp + 0x48]
repne scasb al, byte [rdi]
mov rax, qword [rsp + 0x48]
not rcx
cmp rcx, 1
mov rcx, qword [rbx + 0x1498]
cmove rax, r15
add rcx, 5
mov qword [rsp + 0x48], rax
nop
nop
movzx eax, byte [rdx]
add rcx, 1
add rdx, 1
test al, al
mov byte [rcx - 1], al
jne 0x1400a5e90
mov rdi, qword [rbx + 0x1498]
or rcx, 0xffffffffffffffff
xor eax, eax
repne scasb al, byte [rdi]
movzx eax, word [0x1400e7464]
or rcx, 0xffffffffffffffff
mov word [rdi - 1], ax
movzx eax, byte [0x1400e7466]
mov byte [rdi + 1], al
mov rdx, qword [rbx + 0x1498]
xor eax, eax
mov rdi, rdx
repne scasb al, byte [rdi]
not rcx
lea r8, [rcx - 1]
mov rcx, rbx
call fcn.1400a5120
test eax, eax
jne 0x1400a5f50
lea edx, [rax + 2]
mov rcx, rbx
call fcn.1400a54f0
test eax, eax
mov esi, eax
je 0x1400a5f62
mov rax, qword [rbx + 0x1498]
or rcx, 0xffffffffffffffff
mov byte [rax], 0x48
mov rax, qword [rbx + 0x1498]
mov byte [rax + 1], 0x45
mov rdx, qword [rbx + 0x1498]
xor eax, eax
mov rdi, rdx
repne scasb al, byte [rdi]
not rcx
lea r8, [rcx - 1]
mov rcx, rbx
call fcn.1400a5120
test eax, eax
jne 0x1400a5f49
lea edx, [rax + 2]
mov rcx, rbx
call fcn.1400a54f0
test eax, eax
mov esi, eax
je 0x1400a5f62
jmp 0x1400a5f55
mov esi, 6
jmp 0x1400a5f55
mov esi, 6
cmp qword [rbx + 0x14a8], r14
jne 0x1400a610c
cmp dword [rbx + 0x14b0], r14d
je 0x1400a6142
mov rcx, rbx
call fcn.1400afec0
test eax, eax
jne 0x1400a6142
mov rcx, qword [rbx + 0x1470]
lea rdx, str.250_STARTTLS
call fcn.1400b3b50
test rax, rax
je 0x1400a6097
mov rax, qword [r13 + 0x109798]
mov rcx, qword [rbx + 0x1498]
mov qword [rcx], rax
movzx eax, word [r13 + 0x1097a0]
mov word [rcx + 8], ax
movzx eax, byte [r13 + 0x1097a2]
mov byte [rcx + 0xa], al
mov rdx, qword [rbx + 0x1498]
or rcx, 0xffffffffffffffff
mov rdi, rdx
xor eax, eax
repne scasb al, byte [rdi]
not rcx
lea r8, [rcx - 1]
mov rcx, rbx
call fcn.1400a5120
test eax, eax
jne 0x1400a6092
lea edx, [rax + 0xb]
mov rcx, rbx
call fcn.1400a54f0
test eax, eax
mov esi, eax
jne 0x1400a6097
xor edx, edx
mov rcx, rbx
call fcn.1400affa0
test eax, eax
je 0x1400a5dc1
lea rdx, str._SECURITY_STATUS__0x_X_
lea rcx, [rsp + 0x48]
mov r8d, eax
mov esi, 6
call fcn.1400c2cf0
lea rdx, str.554_TLS_Handshake_Failed.
lea rcx, [rbx + 0x1470]
mov dword [rbx + 0x1494], 0x22a
call fcn.14002d430
lea rdx, [rsp + 0x48]
lea rcx, [rbx + 0x1470]
call fcn.14002d580
cmp dword [rbx + 0x1468], r14d
je 0x1400a6097
mov rcx, qword [rbx + 0x14a8]
test rcx, rcx
je 0x1400a6097
mov rax, qword [rbx + 0x1470]
mov rdi, qword [rcx]
lea r9, str.TLS:__s
xor r8d, r8d
mov edx, 0x1000001
mov qword [rsp + 0x20], rax
call qword [rdi + reloc.OLEAUT32.dll_VariantClear]
jmp 0x1400a6097
mov esi, 6
cmp dword [rbx + 0x14b0], 2
jne 0x1400a6142
mov rcx, rbx
call fcn.1400afec0
test eax, eax
jne 0x1400a6142
lea rdx, str.554_TLS_required_by_client.
lea rcx, [rbx + 0x1470]
lea esi, [rax + 6]
mov dword [rbx + 0x1494], 0x22a
call fcn.14002d430
cmp dword [rbx + 0x1468], r14d
je 0x1400a6142
mov rcx, qword [rbx + 0x14a8]
test rcx, rcx
je 0x1400a6142
mov rax, qword [rbx + 0x1470]
mov rdi, qword [rcx]
lea r9, str.TLS:__s
xor r8d, r8d
mov edx, 0x1000001
mov qword [rsp + 0x20], rax
call qword [rdi + reloc.OLEAUT32.dll_VariantClear]
jmp 0x1400a6142
mov eax, dword [rbx + 0x1494]
mov rcx, qword [rbx + 0x14a8]
lea r9, str.SMTP::Helo___Error__d__Response__s_ReplyCode__d
mov rdi, qword [rcx]
mov dword [rsp + 0x30], eax
mov rax, qword [rbx + 0x1470]
mov qword [rsp + 0x28], rax
xor r8d, r8d
mov edx, 0x1000001
mov dword [rsp + 0x20], esi
call qword [rdi + reloc.OLEAUT32.dll_VariantClear]
mov eax, esi
mov rsi, qword [rsp + 0xc0]
mov rcx, qword [rsp + 0x68]
xor rcx, rsp
call fcn.1400c2a20
add rsp, 0x70
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rbp
pop rbx
ret