Function at 0x14008be90
Capabilities:
Get hostname

Disassembly:
mov qword [rsp + 0x20], rbx
push rbp
push rsi
push rdi
push r14
push r15
lea rbp, [rsp - 0x37]
sub rsp, 0xf0
mov rax, qword [0x140153558]
xor rax, rsp
mov qword [rbp + 0x2f], rax
mov rax, qword [0x140168d48]
mov r15, rdx
mov qword [rbp + 7], rdx
test rax, rax
jne 0x14008bee6
lea rcx, str.Rpcrt4.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov qword [0x140168d48], rax
test rax, rax
je 0x14008bf84
lea rdx, str.UuidCreate
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
je 0x14008bf84
lea rcx, [rbp + 0xf]
call rax
test eax, eax
je 0x14008bf17
cmp eax, 0x720
je 0x14008bf17
cmp eax, 0x6cb
jne 0x14008bf84
movzx edx, byte [rbp + 0x1d]
mov rcx, r15
movzx r8d, byte [rbp + 0x1c]
movzx eax, byte [rbp + 0x1e]
movzx r10d, byte [rbp + 0x1b]
movzx r11d, byte [rbp + 0x1a]
movzx ebx, byte [rbp + 0x19]
movzx edi, byte [rbp + 0x18]
movzx esi, byte [rbp + 0x17]
movzx r14d, word [rbp + 0x15]
movzx r9d, word [rbp + 0x13]
mov dword [rsp + 0x60], eax
mov dword [rsp + 0x58], edx
lea rdx, str._08lX__04X__04X__02X_02X__02X_02X_02X_02X_02X_02X
mov dword [rsp + 0x50], r8d
mov r8d, dword [rbp + 0xf]
mov dword [rsp + 0x48], r10d
mov dword [rsp + 0x40], r11d
mov dword [rsp + 0x38], ebx
mov dword [rsp + 0x30], edi
mov dword [rsp + 0x28], esi
mov dword [rsp + 0x20], r14d
call fcn.14000a080
jmp 0x14008c0ba
mov qword [rsp + 0x120], r12
xor ecx, ecx
mov qword [rsp + 0x130], r13
call qword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__time64]
mov rcx, rax
mov qword [rbp - 1], rax
mov qword [rbp - 0x29], rax
sar rax, 8
mov qword [rbp - 9], rax
mov rax, rcx
sar rax, 0x10
mov qword [rbp - 0x11], rax
mov rax, rcx
sar rax, 0x18
mov qword [rbp - 0x19], rax
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
lea rdx, [rbp - 0x21]
mov dword [rbp - 0x21], select
lea rcx, [rbp + 0x1f]
mov r12d, eax
call qword [sym.imp.KERNEL32.dll_GetComputerNameA]
movzx r13d, byte [rbp + 0x22]
lea rax, [rbp - 0x29]
movzx edx, byte [rbp - 0x19]
lea rcx, [rbp - 0x29]
movzx r10d, byte [rbp - 0x11]
movzx r9d, byte [rbp - 9]
movzx r8d, byte [rbp - 1]
mov dword [rsp + 0x88], r13d
shr rax, 8
movzx esi, al
lea rax, [rbp - 0x29]
movzx edi, al
mov eax, r12d
sar eax, 0x18
movzx ebx, al
mov eax, r12d
shr rcx, 0x18
movzx r15d, cl
lea rcx, [rbp - 0x29]
sar eax, 0x10
movzx r11d, al
mov eax, r12d
shr rcx, 0x10
movzx r14d, cl
sar eax, 8
movzx ecx, al
movzx eax, r12b
movzx r12d, byte [rbp + 0x21]
mov dword [rsp + 0x80], r12d
movzx r12d, byte [rbp + 0x20]
mov dword [rsp + 0x78], r12d
movzx r12d, byte [rbp + 0x1f]
mov dword [rsp + 0x70], r12d
mov dword [rsp + 0x68], r15d
mov dword [rsp + 0x60], r14d
mov dword [rsp + 0x58], esi
mov dword [rsp + 0x50], edi
mov dword [rsp + 0x48], ebx
mov dword [rsp + 0x40], r11d
mov dword [rsp + 0x38], ecx
mov rcx, qword [rbp + 7]
mov dword [rsp + 0x30], eax
mov dword [rsp + 0x28], edx
lea rdx, str._02X_02X_02X_02X__02X_02X__02X_02X__02X_02X__02X_02X_02X_02X_02X_02X
mov dword [rsp + 0x20], r10d
call fcn.14000a080
mov r13, qword [rsp + 0x130]
mov r12, qword [rsp + 0x120]
mov rcx, qword [rbp + 0x2f]
xor rcx, rsp
call fcn.1400fbfe0
mov rbx, qword [rsp + 0x138]
add rsp, 0xf0
pop r15
pop r14
pop rdi
pop rsi
pop rbp
ret