Function at 0x14002d4d4
Capabilities:
Get hostname

Disassembly:
mov rax, rsp
push rbp
push r14
push r15
lea rbp, [rax - 0x5f]
sub rsp, 0xb0
mov qword [rbp - 9], 0xfffffffffffffffe
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
mov rax, qword [0x14006cfc0]
xor rax, rsp
mov qword [rbp + 0x3f], rax
mov r14, rcx
lea rcx, [rbp - 0x21]
call fcn.140010e38
nop
mov rbx, qword [rbp - 0x21]
mov rdi, qword [rbp - 0x19]
jmp 0x14002d57e
mov rdx, r14
lea rcx, [rbx + 8]
call fcn.14002d304
cmp word [rbx], 0x17
jne 0x14002d57a
lea r8, [rbx + 8]
lea rdx, [0x140052174]
lea rcx, [rbp + 0x1f]
call fcn.14000c880
nop
lea r8, [0x140052170]
mov rdx, rax
lea rcx, [rbp - 1]
call fcn.14000b938
nop
lea rcx, [rbp + 0x1f]
call fcn.140013e34
mov rdx, r14
lea rcx, [rbp - 1]
call fcn.14002d304
nop
lea rcx, [rbp - 1]
call fcn.140013e34
add rbx, 0x28
cmp rbx, rdi
jne 0x14002d520
mov ecx, 0x10
mov rax, qword gs:[0x58]
mov rax, qword [rax]
mov eax, dword [rcx + rax]
cmp dword [0x14006ecc8], eax
jg 0x14002d70c
and dword [rbp - 0x39], 0
mov rbx, qword [0x14006ecb0]
mov rdi, qword [0x14006ecb8]
jmp 0x14002d69d
mov r15d, dword [rbx]
xorps xmm0, xmm0
movdqu xmmword [rbp - 1], xmm0
and qword [rbp + 0xf], 0
and dword [rbp - 0x39], 0
lea r8, [rbp - 0x39]
xor edx, edx
mov ecx, r15d
call qword [sym.imp.KERNEL32.dll_GetComputerNameExW]
nop dword [rax + rax]
mov eax, dword [rbp - 0x39]
test eax, eax
je 0x14002d690
mov edx, eax
lea r8, [rbp - 0x35]
lea rcx, [rbp - 1]
call fcn.14001471c
lea r8, [rbp - 0x39]
mov rsi, qword [rbp - 1]
mov rdx, rsi
mov ecx, r15d
call qword [sym.imp.KERNEL32.dll_GetComputerNameExW]
nop dword [rax + rax]
test eax, eax
je 0x14002d647
mov eax, dword [rbp - 0x39]
lea r8, [rsi + rax*2]
mov rdx, rsi
lea rcx, [rbp + 0x1f]
call fcn.14002c9c0
nop
mov rdx, r14
lea rcx, [rbp + 0x1f]
call fcn.14002d304
nop
lea rcx, [rbp + 0x1f]
call fcn.140013e34
jmp 0x14002d690
call fcn.14001279c
mov rsi, rax
cmp dword [rax], 2
jbe 0x14002d690
lea rax, str.Failed_to_retrieve_PC_name
mov qword [rbp - 0x29], rax
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
mov dword [rbp - 0x31], eax
lea rax, [rbp - 0x29]
mov qword [rsp + 0x28], rax
lea rax, [rbp - 0x31]
mov qword [rsp + 0x20], rax
lea rdx, [0x14005cf99]
mov rcx, rsi
call fcn.140001ef0
nop
lea rcx, [rbp - 1]
call fcn.140013e88
add rbx, 4
cmp rbx, rdi
jne 0x14002d5ba
mov rcx, qword [rbp - 0x21]
test rcx, rcx
je 0x14002d6e2
mov rdx, qword [rbp - 0x19]
call fcn.140013cc0
mov rax, qword [rbp - 0x11]
mov rcx, qword [rbp - 0x21]
sub rax, rcx
sar rax, 3
movabs rdx, 0xcccccccccccccccd
imul rax, rdx
lea rdx, [rax + rax*4]
shl rdx, 3
call fcn.140008710
mov rcx, qword [rbp + 0x3f]
xor rcx, rsp
call fcn.1400165f0
lea r11, [rsp + 0xb0]
mov rbx, qword [r11 + 0x28]
mov rsi, qword [r11 + 0x30]
mov rdi, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop rbp
ret
lea rcx, [0x14006ecc8]
call fcn.1400178b0
cmp dword [0x14006ecc8], 0xffffffff
jne 0x14002d5a3
and dword [rbp - 1], 0
mov dword [rbp + 3], 1
mov edx, 3
mov dword [rbp + 7], edx
lea rax, [rbp + 0xb]
mov qword [rbp - 0x31], rax
lea rax, [rbp - 1]
mov qword [rbp - 0x29], rax
lea r9, [rbp - 0x31]
lea r8, [rbp - 0x29]
call fcn.14002ca08
lea rcx, [0x140046330]
call fcn.140016870
nop
lea rcx, [0x14006ecc8]
call fcn.140017848
jmp 0x14002d5a3