Function at 0x14016b4f0
Capabilities:
Get hostname

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rdi
push rbp
lea rbp, [rsp - 0x57]
sub rsp, 0xe0
mov rax, qword [0x14044e770]
xor rax, rsp
mov qword [rbp + 0x47], rax
mov rbx, rcx
mov dword [rbp - 0x55], reloc.OLEAUT32.dll_SafeArrayGetDim
lea rcx, [rbp + 0x27]
lea rdx, [rbp - 0x55]
call qword [sym.imp.KERNEL32.dll_GetComputerNameW]
test eax, eax
jne 0x14016b61d
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
mov dword [rbp - 0x59], eax
call fcn.14004acb4
mov rcx, qword [rax + 8]
cmp dword [rcx], 3
jbe 0x14016b595
and dword [rbp + 0x13], 0
lea rax, str.Failed_to_read_machine_sid___couldnt_retrieve_computer_name
and dword [rbp + 0x23], 0
mov edx, 4
mov qword [rbp + 7], rax
lea rax, [rbp - 0x59]
mov qword [rbp + 0x17], rax
mov dword [rbp + 0xf], 0x7a
mov dword [rbp + 0x1f], edx
lea rax, [rbp - 0x19]
xor r9d, r9d
mov qword [rsp + 0x28], rax
xor r8d, r8d
mov dword [rsp + 0x20], edx
lea rdx, [0x14039754c]
call fcn.140001158
mov eax, dword [rbp - 0x59]
lea rdx, [rbp - 0x19]
movzx ecx, ax
xorps xmm0, xmm0
or ecx, 0x80070000
test eax, eax
movdqu xmmword [rbp - 0x19], xmm0
cmovle ecx, eax
and qword [rbp - 9], 0
mov dword [rbp - 1], ecx
lea rcx, [rbx + 0x128]
call fcn.140092780
mov rdx, qword [rbp - 0x19]
mov eax, dword [rbp - 1]
mov dword [rbx + 0x140], eax
test rdx, rdx
je 0x14016b616
mov rax, qword [rbp - 9]
mov ebx, 0x1000
sub rax, rdx
mov rcx, rdx
cmp rax, rbx
jb 0x14016b60e
test cl, 0x1f
jne 0x14016b607
mov rdx, qword [rdx - 8]
cmp rdx, rcx
jae 0x14016b607
sub rcx, rdx
sub rcx, 8
cmp rcx, 0x1f
jbe 0x14016b60e
call qword [sym.imp.api_ms_win_crt_private_l1_1_0.dll__o__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rdx
call fcn.1402aed28
xor al, al
jmp 0x14016b73d
lea rdx, [rbp + 0x27]
lea rcx, [rbp - 0x39]
call fcn.14004a9e4
mov r8d, 1
lea rdx, [0x140323984]
lea rcx, [rbp - 0x39]
call fcn.14005b1c8
and qword [rbp - 0x51], 0
lea rdx, [rbp - 0x39]
and qword [rbp - 0x49], 0
lea r8, [rbp - 0x51]
and qword [rbp - 0x41], 0
lea rcx, [rbp + 0x27]
cmp qword [rbp - 0x21], 8
cmovae rdx, qword [rbp - 0x39]
call fcn.1401f358c
lea rdx, [rbp - 0x51]
mov edi, eax
lea rcx, [rbp - 0x19]
call fcn.140061d10
lea rdx, [rbp - 0x19]
mov dword [rbp - 1], edi
lea rcx, [rbx + 0x128]
call fcn.140092780
mov rdx, qword [rbp - 0x19]
mov ecx, dword [rbp - 1]
mov dword [rbx + 0x140], ecx
mov ebx, 0x1000
test rdx, rdx
je 0x14016b6dc
mov rax, qword [rbp - 9]
mov rcx, rdx
sub rax, rdx
cmp rax, rbx
jb 0x14016b6d4
test cl, 0x1f
jne 0x14016b6cd
mov rdx, qword [rdx - 8]
cmp rdx, rcx
jae 0x14016b6cd
sub rcx, rdx
sub rcx, 8
cmp rcx, 0x1f
jbe 0x14016b6d4
call qword [sym.imp.api_ms_win_crt_private_l1_1_0.dll__o__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rdx
call fcn.1402aed28
mov rdx, qword [rbp - 0x51]
test edi, edi
setns dil
test rdx, rdx
je 0x14016b731
mov rax, qword [rbp - 0x41]
mov rcx, rdx
sub rax, rdx
cmp rax, rbx
jb 0x14016b71c
test cl, 0x1f
jne 0x14016b715
mov rdx, qword [rdx - 8]
cmp rdx, rcx
jae 0x14016b715
sub rcx, rdx
sub rcx, 8
cmp rcx, 0x1f
jbe 0x14016b71c
call qword [sym.imp.api_ms_win_crt_private_l1_1_0.dll__o__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rdx
call fcn.1402aed28
and qword [rbp - 0x41], 0
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x51], xmm0
lea rcx, [rbp - 0x39]
call fcn.14004b500
mov al, dil
mov rcx, qword [rbp + 0x47]
xor rcx, rsp
call fcn.1402ae860
lea r11, [rsp + 0xe0]
mov rbx, qword [r11 + 0x18]
mov rdi, qword [r11 + 0x20]
mov rsp, r11
pop rbp
ret