Function at 0x1800484e4
Capabilities:
Get hostname

Disassembly:
mov qword [rsp + 0x18], rbx
push rsi
push rdi
push r12
push r14
push r15
sub rsp, 0x70
xor esi, esi
mov r12d, r9d
mov qword [rsp + 0x58], rsi
mov r14, r8
mov dword [rsp + 0x48], esi
mov r15, rdx
mov rdi, rcx
call fcn.18000653c
mov ebx, eax
test eax, eax
jne 0x180048882
mov dword [rsp + 0x30], esi
xor r9d, r9d
mov word [rsp + 0x28], si
xor r8d, r8d
xor edx, edx
mov qword [rsp + 0x20], rsi
mov rcx, r15
mov qword [rsp + 0xa8], r13
call fcn.18000bfb0
mov r13, rax
test rax, rax
jne 0x180048553
mov eax, 0x1068
jmp 0x18004887a
mov rax, qword [rax + 0x10]
cmp dword [rax + 0x20], 1
jne 0x180048578
mov r9, qword [rsp + 0xc0]
mov r8d, r12d
mov rdx, r14
mov rcx, r13
call fcn.18004ec40
jmp 0x18004887a
mov rax, qword [rsp + 0xc0]
mov qword [rsp + 0xa0], rbp
mov dword [rax], esi
test r14, r14
je 0x1800485a2
test r12d, r12d
je 0x1800485ad
lea eax, [r12 - 1]
mov byte [r14], sil
mov byte [rax + r14], sil
jmp 0x1800485ad
test r12d, r12d
mov eax, 0x57
cmovne ebx, eax
or rsi, 0xffffffffffffffff
test rdi, rdi
je 0x1800485c7
mov rax, rsi
inc rax
cmp word [rdi + rax*2], 0
jne 0x1800485b9
inc eax
jmp 0x1800485cc
mov eax, 0x105
mov ecx, eax
add rcx, rcx
mov dword [rsp + 0x44], eax
call fcn.18000618c
mov qword [rsp + 0x60], rax
mov rbp, rax
test rax, rax
jne 0x1800485ef
lea ebx, [rax + 0xe]
jmp 0x180048868
mov rcx, rbp
test rdi, rdi
jne 0x180048604
lea rdx, [rsp + 0x44]
call qword [sym.imp.KERNEL32.dll_GetComputerNameW]
jmp 0x180048623
cmp word [rdi], 0
jne 0x180048617
lea rdx, [rsp + 0x44]
call qword [sym.imp.KERNEL32.dll_GetComputerNameW]
jmp 0x180048623
mov edx, dword [rsp + 0x44]
mov r8, rdi
call fcn.18000e694
cmp word [rbp + rsi*2 + 2], 0
lea rsi, [rsi + 1]
jne 0x180048623
lea r9d, [rsi*2 + 2]
test ebx, ebx
jne 0x180048868
lea rax, [rsp + 0x48]
mov dword [rsp + 0x48], 0x2000
mov qword [rsp + 0x28], rax
mov r8, rbp
lea rax, [rsp + 0x58]
mov rcx, r15
mov qword [rsp + 0x20], rax
call fcn.180048300
mov ebx, eax
test eax, eax
jne 0x180048868
mov r9, qword [rsp + 0x58]
lea ecx, [rax + 8]
xor r10d, r10d
mov esi, r10d
mov dword [rsp + 0x4c], r10d
mov edi, r10d
mov r8d, r10d
cmp dword [r9], r10d
jbe 0x1800487a2
mov edx, edi
cmp ecx, dword [rsp + 0x48]
jae 0x18004879f
mov r15d, ecx
add r15, r9
mov eax, dword [r15]
add ecx, eax
cmp dword [r15 + 0xc], 0
mov dword [rsp + 0x40], ecx
jne 0x18004877f
test byte [r13 + 0x58], 2
mov ecx, dword [r15 + 0x18]
mov dword [rsp + 0x50], 0x20
jne 0x1800486e6
lea eax, [rcx + 1]
test eax, 0xfffffffe
jne 0x18004879a
inc edi
cmp ecx, 0xffffffff
cmovne edi, edx
jmp 0x18004877b
cmp ecx, 0xffffffff
je 0x18004879a
test ecx, ecx
je 0x18004877b
cmp eax, 0x20
jbe 0x18004877b
mov ebp, dword [rsp + 0x50]
mov r9d, dword [r15 + 0x1c]
mov rcx, r13
mov eax, ebp
add rax, r15
mov qword [rsp + 0x50], rax
mov r8d, dword [rax + 4]
lea rdx, [rax + 8]
call fcn.180047464
mov rdx, qword [rsp + 0x50]
test rax, rax
je 0x180048765
inc edi
test byte [r13 + 0x58], 2
je 0x180048765
mov ecx, dword [rdx]
lea eax, [rcx + rsi]
test r14, r14
je 0x18004875e
cmp esi, eax
ja 0x18004875e
cmp ecx, eax
ja 0x18004875e
cmp eax, r12d
ja 0x18004875e
mov r8d, ecx
mov ecx, esi
add rcx, r14
call sub.msvcrt.dll_memcpy
mov rdx, qword [rsp + 0x50]
mov ecx, dword [rdx]
jmp 0x180048763
mov ebx, 8
add esi, ecx
add ebp, dword [rdx]
cmp ebp, dword [r15]
jb 0x180048700
mov rbp, qword [rsp + 0x60]
mov r8d, dword [rsp + 0x4c]
mov r9, qword [rsp + 0x58]
mov ecx, dword [rsp + 0x40]
test ebx, 0xfffffff7
jne 0x18004879f
inc r8d
mov dword [rsp + 0x4c], r8d
cmp r8d, dword [r9]
jb 0x180048692
jmp 0x18004879f
mov ebx, 0x1073
xor r10d, r10d
cmp dword [r13 + 0x58], 6
jne 0x18004882d
test edi, edi
je 0x18004882d
inc edi
lea r8d, [rsi + 0x18]
test r14, r14
je 0x180048825
cmp esi, r8d
jae 0x180048825
cmp r8d, 0x18
jb 0x180048825
cmp r8d, r12d
ja 0x180048825
mov eax, esi
lea rcx, [r14 + 8]
add rcx, rax
lea r9, str._Total
mov edx, 7
sub r9, rcx
mov qword [rax + r14], 0x18
lea rax, [rdx + 0x7ffffff7]
test rax, rax
je 0x18004880f
movzx eax, word [r9 + rcx]
test ax, ax
je 0x18004880f
mov word [rcx], ax
add rcx, 2
sub rdx, 1
jne 0x1800487ec
mov r9, qword [rsp + 0x58]
lea rax, [rcx - 2]
test rdx, rdx
cmovne rax, rcx
mov word [rax], r10w
jmp 0x18004882a
mov ebx, 8
mov esi, r8d
test ebx, 0xfffffff7
jne 0x180048860
mov eax, dword [r13 + 0x58]
test eax, eax
je 0x1800488b1
cmp eax, 2
je 0x180048897
cmp eax, 4
je 0x180048851
cmp eax, 6
je 0x180048897
cmp eax, 0xc
jne 0x1800488b6
test edi, edi
je 0x1800488c1
mov rax, qword [rsp + 0xc0]
mov dword [rax], r10d
mov rcx, r9
call fcn.18000940c
mov rcx, rbp
call fcn.18000940c
mov rbp, qword [rsp + 0xa0]
mov eax, ebx
mov r13, qword [rsp + 0xa8]
mov rbx, qword [rsp + 0xb0]
add rsp, 0x70
pop r15
pop r14
pop r12
pop rdi
pop rsi
ret
mov eax, ebx
test edi, edi
mov ebx, 0x1069
cmove eax, ebx
mov ebx, eax
mov rax, qword [rsp + 0xc0]
mov dword [rax], esi
jmp 0x180048860
cmp edi, 1
jbe 0x1800488bd
mov ebx, 0x1073
jmp 0x180048860
test edi, edi
jne 0x180048855
mov ebx, 0x1069
jmp 0x180048860