Function at 0x1400b8a84
Capabilities:
Get hostname

Disassembly:
mov qword [rsp + 8], rcx
push rbp
push rbx
push rsi
push rdi
push r12
push r14
push r15
lea rbp, [rsp - 0x100]
sub rsp, 0x200
mov qword [rbp - 0x28], 0xfffffffffffffffe
lea r14, str.base_stor_vssmodulescoord_srchwutils.cxx
mov qword [rsp + 0x30], r14
lea r15, str.CVssHardwareProviderWrapper::GetLocalComputerName
mov qword [rsp + 0x38], r15
lea r12, str.CORHWUTC
mov qword [rsp + 0x40], r12
mov dword [rsp + 0x48], 0x903
mov dword [rsp + 0x4c], 1
mov dword [rsp + 0x50], 0xff
xor esi, esi
mov dword [rbp - 0x30], 0x1000000
xor edx, edx
lea r8d, [rsi + 0x78]
lea rcx, [rsp + 0x58]
call sub.msvcrt.dll_memset
xor r8d, r8d
lea rdx, [rsp + 0x30]
lea rcx, [rbp - 0x20]
call fcn.14001cce0
nop
mov dword [rbp + 0x140], esi
lea r8, [rbp + 0x140]
xor edx, edx
lea ecx, [rsi + 3]
call qword [sym.imp.api_ms_win_core_sysinfo_l1_1_0.dll_GetComputerNameExW]
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
mov ebx, eax
cmp eax, 0xea
je 0x1400b8bef
test eax, eax
jle 0x1400b8b49
movzx ebx, ax
or ebx, 0x80070000
mov dword [rbp - 0x18], ebx
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x38], r15
mov qword [rsp + 0x40], r12
mov dword [rsp + 0x48], 0x90e
mov dword [rsp + 0x4c], 1
mov dword [rsp + 0x50], 0xff
mov dword [rbp - 0x30], 0x1000000
xor edx, edx
lea r8d, [rdx + 0x78]
lea rcx, [rsp + 0x58]
call sub.msvcrt.dll_memset
lea rax, [rsp + 0x30]
mov qword [rbp + 0x148], rax
mov eax, ebx
shr eax, 0x1f
test al, al
je 0x1400b8bc4
lea rdx, [rsp + 0x30]
lea rcx, [rbp + 0x50]
call fcn.14000aeb0
lea r9, str.GetComputerName
mov r8d, ebx
mov rdx, rax
lea rcx, [rbp - 0x20]
call fcn.1400dc9fc
nop
cmp byte [rbp - 0x2d], 0
je 0x1400b8bef
lea rbx, [rsp + 0x58]
mov edi, 0xf
mov rcx, qword [rbx]
test rcx, rcx
je 0x1400b8be5
call qword [sym.imp.api_ms_win_core_com_l1_1_0.dll_CoTaskMemFree]
mov qword [rbx], rsi
add rbx, 8
sub rdi, 1
jne 0x1400b8bd4
mov ecx, dword [rbp + 0x140]
mov eax, 2
mul rcx
mov rcx, 0xffffffffffffffff
cmovo rax, rcx
lea rdx, [0x140102ed8]
mov rcx, rax
call fcn.140032688
mov rbx, rax
test rax, rax
jne 0x1400b8c79
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x38], r15
mov qword [rsp + 0x40], r12
mov dword [rsp + 0x48], 0x914
mov dword [rsp + 0x4c], 1
mov dword [rsp + 0x50], 0xff
mov dword [rbp - 0x30], 0x1000000
xor edx, edx
lea r8d, [rax + 0x78]
lea rcx, [rsp + 0x58]
call sub.msvcrt.dll_memset
lea r9, str.Cannot_allocate_space_for_computer_name
mov r8d, 0x8007000e
lea rdx, [rsp + 0x30]
lea rcx, [rbp - 0x20]
call fcn.1400dc25c
int3
lea r8, [rbp + 0x140]
mov rdx, rbx
mov ecx, 3
call qword [sym.imp.api_ms_win_core_sysinfo_l1_1_0.dll_GetComputerNameExW]
test eax, eax
jne 0x1400b8d03
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
test eax, eax
jle 0x1400b8ca4
movzx eax, ax
or eax, 0x80070000
mov dword [rbp - 0x18], eax
mov rcx, rbx
call fcn.140031d4c
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x38], r15
mov qword [rsp + 0x40], r12
mov dword [rsp + 0x48], 0x91b
mov dword [rsp + 0x4c], 1
mov dword [rsp + 0x50], 0xff
mov dword [rbp - 0x30], 0x1000000
xor edx, edx
lea r8d, [rdx + 0x78]
lea rcx, [rsp + 0x58]
call sub.msvcrt.dll_memset
lea r8, str.GetComputerName
lea rdx, [rsp + 0x30]
lea rcx, [rbp - 0x20]
call fcn.1400ddc40
int3
mov qword [rsp + 0x20], rbx
lea r9, str.Returning_string:__s
mov r8d, 0xaa
lea rdx, str.RETURN
lea rcx, [rbp - 0x20]
call fcn.14001d380
nop
lea rcx, [rbp - 0x20]
call fcn.14001ce00
mov rax, rbx
add rsp, 0x200
pop r15
pop r14
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret