Function at 0x140034a5c
Capabilities:
Get hostname

Disassembly:
mov rax, rsp
push rbp
push r14
push r15
lea rbp, [rax - 0x5f]
sub rsp, 0xb0
mov qword [rbp - 9], 0xfffffffffffffffe
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
mov rax, qword [0x14006dfb8]
xor rax, rsp
mov qword [rbp + 0x3f], rax
mov r14, rcx
lea rcx, [rbp - 0x21]
call fcn.140015e88
nop
mov rbx, qword [rbp - 0x21]
mov rdi, qword [rbp - 0x19]
jmp 0x140034b06
mov rdx, r14
lea rcx, [rbx + 8]
call fcn.14003488c
cmp word [rbx], 0x17
jne 0x140034b02
lea r8, [rbx + 8]
lea rdx, [0x140053044]
lea rcx, [rbp + 0x1f]
call fcn.140010cb0
nop
lea r8, [0x140053040]
mov rdx, rax
lea rcx, [rbp - 1]
call fcn.14000d8c8
nop
lea rcx, [rbp + 0x1f]
call fcn.1400183f8
mov rdx, r14
lea rcx, [rbp - 1]
call fcn.14003488c
nop
lea rcx, [rbp - 1]
call fcn.1400183f8
add rbx, 0x28
cmp rbx, rdi
jne 0x140034aa8
mov edx, 0x10
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
mov eax, dword [rdx + rcx]
cmp dword [0x1400709d0], eax
jg 0x140034c94
and dword [rbp - 0x39], 0
mov rbx, qword [0x1400709b8]
mov rdi, qword [0x1400709c0]
jmp 0x140034c25
mov r15d, dword [rbx]
xorps xmm0, xmm0
movdqu xmmword [rbp - 1], xmm0
and qword [rbp + 0xf], 0
and dword [rbp - 0x39], 0
lea r8, [rbp - 0x39]
xor edx, edx
mov ecx, r15d
call qword [sym.imp.KERNEL32.dll_GetComputerNameExW]
nop dword [rax + rax]
mov eax, dword [rbp - 0x39]
test eax, eax
je 0x140034c18
mov edx, eax
lea r8, [rbp - 0x35]
lea rcx, [rbp - 1]
call fcn.140018d74
lea r8, [rbp - 0x39]
mov rsi, qword [rbp - 1]
mov rdx, rsi
mov ecx, r15d
call qword [sym.imp.KERNEL32.dll_GetComputerNameExW]
nop dword [rax + rax]
test eax, eax
je 0x140034bcf
mov eax, dword [rbp - 0x39]
lea r8, [rsi + rax*2]
mov rdx, rsi
lea rcx, [rbp + 0x1f]
call fcn.140027fc0
nop
mov rdx, r14
lea rcx, [rbp + 0x1f]
call fcn.14003488c
nop
lea rcx, [rbp + 0x1f]
call fcn.1400183f8
jmp 0x140034c18
call fcn.140016c38
mov rsi, rax
cmp dword [rax], 2
jbe 0x140034c18
lea rax, str.Failed_to_retrieve_PC_name
mov qword [rbp - 0x29], rax
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
mov dword [rbp - 0x31], eax
lea rax, [rbp - 0x29]
mov qword [rsp + 0x28], rax
lea rax, [rbp - 0x31]
mov qword [rsp + 0x20], rax
lea rdx, [0x14005d74c]
mov rcx, rsi
call fcn.140001e60
nop
lea rcx, [rbp - 1]
call fcn.14001843c
add rbx, 4
cmp rbx, rdi
jne 0x140034b42
mov rcx, qword [rbp - 0x21]
test rcx, rcx
je 0x140034c6a
mov rdx, qword [rbp - 0x19]
call fcn.140018284
mov rax, qword [rbp - 0x11]
mov rcx, qword [rbp - 0x21]
sub rax, rcx
sar rax, 3
movabs rdx, 0xcccccccccccccccd
imul rax, rdx
lea rdx, [rax + rax*4]
shl rdx, 3
call fcn.14000e340
mov rcx, qword [rbp + 0x3f]
xor rcx, rsp
call fcn.14001ae20
lea r11, [rsp + 0xb0]
mov rbx, qword [r11 + 0x28]
mov rsi, qword [r11 + 0x30]
mov rdi, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop rbp
ret
lea rcx, [0x1400709d0]
call fcn.14001c120
cmp dword [0x1400709d0], 0xffffffff
jne 0x140034b2b
and dword [rbp - 1], 0
mov dword [rbp + 3], 1
mov edx, 3
mov dword [rbp + 7], edx
lea rax, [rbp + 0xb]
mov qword [rbp - 0x31], rax
lea rax, [rbp - 1]
mov qword [rbp - 0x29], rax
lea r9, [rbp - 0x31]
lea r8, [rbp - 0x29]
call fcn.140033e70
lea rcx, [0x1400463d0]
call fcn.14001b250
nop
lea rcx, [0x1400709d0]
call fcn.14001c0b8
jmp 0x140034b2b