Function at 0x14009f618
Capabilities:
Get hostname

Disassembly:
mov rax, rsp
mov qword [rax + 8], rcx
push rbp
push rdi
push r12
push r14
push r15
lea rbp, [rax - 0x78]
sub rsp, 0x150
mov qword [rbp - 0x28], 0xfffffffffffffffe
mov qword [rax + 0x18], rbx
lea r14, str.base_stor_vssmodulescoord_srchwutils.cxx
mov qword [rsp + 0x30], r14
lea r15, str.CVssHardwareProviderWrapper::GetLocalComputerName
mov qword [rsp + 0x38], r15
lea r12, str.CORHWUTC
mov qword [rsp + 0x40], r12
mov dword [rsp + 0x48], 0x903
mov dword [rsp + 0x4c], 1
mov dword [rsp + 0x50], 0xff
xor edi, edi
mov dword [rbp - 0x30], 0x1000000
lea ebx, [rdi + 0x78]
mov r8d, ebx
xor edx, edx
lea rcx, [rsp + 0x58]
call sub.msvcrt.dll_memset
xor r8d, r8d
lea rdx, [rsp + 0x30]
lea rcx, [rbp - 0x20]
call fcn.1400bec34
nop
mov dword [rbp + 0x80], edi
lea r8, [rbp + 0x80]
xor edx, edx
lea ecx, [rdi + 3]
call qword [sym.imp.api_ms_win_core_sysinfo_l1_1_0.dll_GetComputerNameExW]
nop dword [rax + rax]
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
cmp eax, 0xea
je 0x14009f739
test eax, eax
jle 0x14009f6e4
movzx eax, ax
or eax, 0x80070000
mov dword [rbp - 0x18], eax
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x38], r15
mov qword [rsp + 0x40], r12
mov dword [rsp + 0x48], 0x90e
mov dword [rsp + 0x4c], 1
mov dword [rsp + 0x50], 0xff
mov dword [rbp - 0x30], 0x1000000
mov r8, rbx
xor edx, edx
lea rcx, [rsp + 0x58]
call sub.msvcrt.dll_memset
lea r8, str.GetComputerName
lea rdx, [rsp + 0x30]
lea rcx, [rbp - 0x20]
call fcn.140027ed8
mov ecx, dword [rbp + 0x80]
mov eax, 2
mul rcx
mov rcx, 0xffffffffffffffff
cmovo rax, rcx
lea rdx, [0x1400fb65a]
mov rcx, rax
call fcn.1400169cc
mov rbx, rax
test rax, rax
jne 0x14009f7c3
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x38], r15
mov qword [rsp + 0x40], r12
mov dword [rsp + 0x48], 0x914
mov dword [rsp + 0x4c], 1
mov dword [rsp + 0x50], 0xff
mov dword [rbp - 0x30], 0x1000000
xor edx, edx
lea r8d, [rax + 0x78]
lea rcx, [rsp + 0x58]
call sub.msvcrt.dll_memset
lea r9, str.Cannot_allocate_space_for_computer_name
mov r8d, 0x8007000e
lea rdx, [rsp + 0x30]
lea rcx, [rbp - 0x20]
call fcn.1400c2090
int3
lea r8, [rbp + 0x80]
mov rdx, rbx
mov ecx, 3
call qword [sym.imp.api_ms_win_core_sysinfo_l1_1_0.dll_GetComputerNameExW]
nop dword [rax + rax]
test eax, eax
jne 0x14009f859
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
test eax, eax
jle 0x14009f7fa
movzx eax, ax
or eax, 0x80070000
mov dword [rbp - 0x18], eax
mov rcx, rbx
call fcn.140015ff8
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x38], r15
mov qword [rsp + 0x40], r12
mov dword [rsp + 0x48], 0x91b
mov dword [rsp + 0x4c], 1
mov dword [rsp + 0x50], 0xff
mov dword [rbp - 0x30], 0x1000000
xor edx, edx
lea r8d, [rdx + 0x78]
lea rcx, [rsp + 0x58]
call sub.msvcrt.dll_memset
lea r8, str.GetComputerName
lea rdx, [rsp + 0x30]
lea rcx, [rbp - 0x20]
call fcn.1400c3b7c
int3
mov qword [rsp + 0x20], rbx
lea r9, str.Returning_string:__s
mov r8d, 0xaa
lea rdx, str.RETURN
lea rcx, [rbp - 0x20]
call fcn.14000a350
nop
lea rcx, [rbp - 0x20]
call fcn.140009990
mov rax, rbx
mov rbx, qword [rsp + 0x190]
add rsp, 0x150
pop r15
pop r14
pop r12
pop rdi
pop rbp
ret