Function at 0x14015fbe0
Capabilities:
Get hostname

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rdi
push rbp
lea rbp, [rsp - 0x57]
sub rsp, 0xe0
mov rax, qword [0x1403f04b0]
xor rax, rsp
mov qword [rbp + 0x47], rax
mov rbx, rcx
mov dword [rbp - 0x55], reloc.OLEAUT32.dll_SafeArrayGetDim
lea rcx, [rbp + 0x27]
lea rdx, [rbp - 0x55]
call qword [sym.imp.api_ms_win_core_kernel32_legacy_l1_1_0.dll_GetComputerNameW]
test eax, eax
jne 0x14015fd0a
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
mov dword [rbp - 0x59], eax
call fcn.140048a14
mov rcx, qword [rax + 8]
cmp dword [rcx], 3
jbe 0x14015fc85
and dword [rbp + 0x13], 0
lea rax, str.Failed_to_read_machine_sid___couldnt_retrieve_computer_name
and dword [rbp + 0x23], 0
mov edx, 4
mov qword [rbp + 7], rax
lea rax, [rbp - 0x59]
mov qword [rbp + 0x17], rax
mov dword [rbp + 0xf], 0x7a
mov dword [rbp + 0x1f], edx
lea rax, [rbp - 0x19]
xor r9d, r9d
mov qword [rsp + 0x28], rax
xor r8d, r8d
mov dword [rsp + 0x20], edx
lea rdx, [0x14034ea58]
call fcn.140001078
mov eax, dword [rbp - 0x59]
lea rdx, [rbp - 0x19]
movzx ecx, ax
xorps xmm0, xmm0
or ecx, 0x80070000
test eax, eax
movdqu xmmword [rbp - 0x19], xmm0
cmovle ecx, eax
and qword [rbp - 9], 0
mov dword [rbp - 1], ecx
lea rcx, [rbx + 0x128]
call fcn.140092a1c
mov rcx, qword [rbp - 0x19]
mov eax, dword [rbp - 1]
mov dword [rbx + 0x140], eax
test rcx, rcx
je 0x14015fcfc
mov rax, qword [rbp - 9]
mov ebx, 0x1000
sub rax, rcx
cmp rax, rbx
jb 0x14015fcf7
test cl, 0x1f
jne 0x14015fd03
mov rax, qword [rcx - 8]
cmp rax, rcx
jae 0x14015fd03
sub rcx, rax
sub rcx, 8
cmp rcx, 0x1f
ja 0x14015fd03
mov rcx, rax
call fcn.14027abd8
xor al, al
jmp 0x14015fe22
call qword [sym.imp.api_ms_win_crt_private_l1_1_0.dll__o__invalid_parameter_noinfo_noreturn]
int3
lea rdx, [rbp + 0x27]
lea rcx, [rbp - 0x39]
call fcn.140048750
mov r8d, 1
lea rdx, [0x1402df848]
lea rcx, [rbp - 0x39]
call fcn.140054efc
and qword [rbp - 0x51], 0
lea rdx, [rbp - 0x39]
and qword [rbp - 0x49], 0
lea r8, [rbp - 0x51]
and qword [rbp - 0x41], 0
lea rcx, [rbp + 0x27]
cmp qword [rbp - 0x21], 8
cmovae rdx, qword [rbp - 0x39]
call fcn.1401dbe38
lea rdx, [rbp - 0x51]
mov edi, eax
lea rcx, [rbp - 0x19]
call fcn.14006088c
lea rdx, [rbp - 0x19]
mov dword [rbp - 1], edi
lea rcx, [rbx + 0x128]
call fcn.140092a1c
mov ecx, dword [rbp - 1]
mov dword [rbx + 0x140], ecx
mov ebx, 0x1000
mov rcx, qword [rbp - 0x19]
test rcx, rcx
je 0x14015fdcb
mov rax, qword [rbp - 9]
sub rax, rcx
cmp rax, rbx
jb 0x14015fdc6
test cl, 0x1f
jne 0x14015fe43
mov rax, qword [rcx - 8]
cmp rax, rcx
jae 0x14015fe43
sub rcx, rax
sub rcx, 8
cmp rcx, 0x1f
ja 0x14015fe43
mov rcx, rax
call fcn.14027abd8
mov rcx, qword [rbp - 0x51]
test edi, edi
setns dil
test rcx, rcx
je 0x14015fe16
mov rax, qword [rbp - 0x41]
sub rax, rcx
cmp rax, rbx
jb 0x14015fe04
test cl, 0x1f
jne 0x14015fe4a
mov rax, qword [rcx - 8]
cmp rax, rcx
jae 0x14015fe4a
sub rcx, rax
sub rcx, 8
cmp rcx, 0x1f
ja 0x14015fe4a
mov rcx, rax
call fcn.14027abd8
and qword [rbp - 0x41], 0
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x51], xmm0
lea rcx, [rbp - 0x39]
call fcn.1400492c0
mov al, dil
mov rcx, qword [rbp + 0x47]
xor rcx, rsp
call fcn.14027a710
lea r11, [rsp + 0xe0]
mov rbx, qword [r11 + 0x18]
mov rdi, qword [r11 + 0x20]
mov rsp, r11
pop rbp
ret
call qword [sym.imp.api_ms_win_crt_private_l1_1_0.dll__o__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_private_l1_1_0.dll__o__invalid_parameter_noinfo_noreturn]
int3