Function at 0x1400c48d0
Capabilities:
Get hostname

Disassembly:
mov r11, rsp
push rsi
push rdi
push r12
push r14
push r15
sub rsp, 0x660
mov qword [r11 - 0x5b8], 0xfffffffffffffffe
mov qword [r11 + 0x20], rbx
mov rax, qword [0x14030bc70]
xor rax, rsp
mov qword [rsp + 0x650], rax
mov esi, r8d
mov r14, rdx
mov r15, rcx
mov qword [rsp + 0x70], rdx
mov dword [rsp + 0x58], reloc.WS2_32.dll_recv
lea rdx, [rsp + 0x58]
lea rcx, [r11 - 0x58]
call qword [sym.imp.KERNEL32.dll_GetComputerNameW]
test eax, eax
jne 0x1400c493b
mov rcx, r14
call fcn.140018ea0
xor al, al
jmp 0x1400c500e
or r8d, 0xffffffff
lea rdx, str._UserService_ClientPushUsers_device
lea rcx, [rsp + 0x38]
call fcn.140018930
nop
or r8d, 0xffffffff
lea rdx, [rsp + 0x630]
lea rcx, [rsp + 0x50]
call fcn.140018990
nop
mov rcx, rax
call fcn.140018bf0
mov rdx, rax
lea rcx, [rsp + 0x38]
call fcn.140018a60
nop
lea rcx, [rsp + 0x50]
call fcn.140018ea0
mov rcx, r14
call fcn.140018bf0
mov rbx, rax
mov rcx, r14
call fcn.140018bf0
mov rdi, rax
mov rdx, qword [rbx]
mov rcx, rbx
call qword [rdx + 0x68]
mov ebx, eax
mov rdx, qword [rdi]
mov rcx, rdi
call qword [rdx + 0x58]
xor r12d, r12d
mov qword [rsp + 0x100], r12
mov qword [rsp + 0x108], r12
mov qword [rsp + 0x108], reloc.WSOCK32.dll_ntohs
mov qword [rsp + 0x100], r12
mov byte [rsp + 0xf0], r12b
mov r8d, ebx
mov rdx, rax
lea rcx, [rsp + 0xf0]
call fcn.140009d60
nop
lea r9, [0x140288390]
xor edx, edx
lea r8d, [r12 + 2]
lea rcx, [rsp + 0xf0]
call fcn.1400c5d20
test eax, eax
jne 0x1400c4a28
xor edx, edx
lea r8d, [r12 + 2]
lea rcx, [rsp + 0xf0]
call fcn.14000a8a0
movzx r8d, si
lea rdx, [rsp + 0xf0]
lea rcx, [rsp + 0x3b0]
call fcn.14012a7a0
nop
mov dl, 1
lea rcx, [rsp + 0x3b0]
call fcn.14012a680
lea rcx, [rsp + 0x38]
call fcn.140018bf0
mov rbx, rax
lea rcx, [rsp + 0x38]
call fcn.140018bf0
mov rdi, rax
mov rdx, qword [rbx]
mov rcx, rbx
call qword [rdx + 0x68]
mov ebx, eax
mov rdx, qword [rdi]
mov rcx, rdi
call qword [rdx + 0x58]
mov qword [rsp + 0x140], r12
mov qword [rsp + 0x148], r12
mov qword [rsp + 0x148], reloc.WSOCK32.dll_ntohs
mov qword [rsp + 0x140], r12
mov byte [rsp + 0x130], 0
mov r8d, ebx
mov rdx, rax
lea rcx, [rsp + 0x130]
call fcn.140009d60
nop
lea r9, [0x140314650]
lea r8, [rsp + 0x130]
lea rdx, [0x140314790]
lea rcx, [rsp + 0x320]
call fcn.14012c590
nop
lea rcx, [rsp + 0x130]
call fcn.1400091f0
mov qword [rsp + 0x160], r12
mov qword [rsp + 0x168], r12
mov qword [rsp + 0x168], reloc.WSOCK32.dll_ntohs
mov qword [rsp + 0x160], r12
mov byte [rsp + 0x150], 0
mov r8d, reloc.WS2_32.dll_recv
lea rdx, str.application_json
lea rcx, [rsp + 0x150]
call fcn.140009d60
nop
lea rdx, [rsp + 0x150]
lea rcx, [rsp + 0x320]
call fcn.14012c470
nop
lea rcx, [rsp + 0x150]
call fcn.1400091f0
lea rdx, [rsp + 0x320]
lea rcx, [rsp + 0x3b0]
call fcn.14012b810
lea rcx, [rsp + 0x210]
call fcn.14012d070
nop
lea rdx, [rsp + 0x210]
lea rcx, [rsp + 0x3b0]
call fcn.14012b380
mov rdx, rax
cmp dword [rsp + 0x258], 0xc8
je 0x1400c4bf4
lea rcx, [rsp + 0x210]
call fcn.14012d0f0
nop
lea rcx, [rsp + 0x320]
call fcn.14012c650
nop
lea rcx, [rsp + 0x3b0]
call fcn.14012a9e0
nop
lea rcx, [rsp + 0xf0]
call fcn.1400091f0
nop
lea rcx, [rsp + 0x38]
call fcn.140018ea0
nop
mov rcx, r14
call fcn.140018ea0
xor al, al
jmp 0x1400c500e
mov qword [rsp + 0x80], r12
mov word [rsp + 0x88], 1
mov rax, qword [rax]
movsxd rcx, dword [rax + 4]
mov rax, qword [rcx + rdx + 0x48]
mov qword [rsp + 0x90], rax
test rax, rax
sete byte [rsp + 0x98]
mov qword [rsp + 0x120], r12
mov qword [rsp + 0x128], r12
mov qword [rsp + 0x128], reloc.WSOCK32.dll_ntohs
mov qword [rsp + 0x120], r12
mov byte [rsp + 0x110], 0
movaps xmm0, xmmword [rsp + 0x80]
movdqa xmmword [rsp + 0xe0], xmm0
movaps xmm1, xmmword [rsp + 0x90]
movdqa xmmword [rsp + 0xa0], xmm1
movzx r9d, byte [rsp + 0x30]
lea r8, [rsp + 0xe0]
lea rdx, [rsp + 0xa0]
lea rcx, [rsp + 0x110]
call fcn.14004e120
nop
lea rcx, [rsp + 0x68]
call fcn.140012030
nop
lea r8, [rsp + 0x110]
lea rdx, [rsp + 0x2d0]
lea rcx, [rsp + 0x68]
call fcn.140012150
nop
mov qword [rsp + 0x180], r12
mov qword [rsp + 0x188], r12
mov qword [rsp + 0x188], reloc.WSOCK32.dll_ntohs
mov qword [rsp + 0x180], r12
mov byte [rsp + 0x170], 0
mov r8d, 6
lea rdx, str.result
lea rcx, [rsp + 0x170]
call fcn.140009d60
nop
lea rdx, [rsp + 0x170]
lea rcx, [rsp + 0x2d0]
call fcn.1400080a0
mov rdx, rax
lea rcx, [rsp + 0x1b0]
call fcn.1400c7da0
nop
lea rcx, [rsp + 0x170]
call fcn.1400091f0
lea rcx, [rsp + 0x1b0]
call fcn.1400c8070
test eax, eax
je 0x1400c4dd3
lea rcx, [rsp + 0x1b0]
call fcn.1400c7df0
nop
lea rcx, [rsp + 0x2d0]
call fcn.140007a20
nop
lea rcx, [rsp + 0x68]
call fcn.140012080
nop
lea rcx, [rsp + 0x110]
call fcn.1400091f0
nop
lea rcx, [rsp + 0x210]
call fcn.14012d0f0
nop
lea rcx, [rsp + 0x320]
call fcn.14012c650
nop
lea rcx, [rsp + 0x3b0]
call fcn.14012a9e0
nop
lea rcx, [rsp + 0xf0]
call fcn.1400091f0
nop
lea rcx, [rsp + 0x38]
call fcn.140018ea0
nop
mov rcx, r14
call fcn.140018ea0
xor al, al
jmp 0x1400c500e
lea rcx, [rsp + 0x1b0]
call fcn.14001da60
mov ecx, dword [rax]
mov dword [rsp + 0x280], ecx
lea rdx, [rax + 8]
lea rcx, [rsp + 0x288]
call fcn.1400083c0
nop
mov qword [rsp + 0x40], r12
mov qword [rsp + 0x48], r12
lea rcx, [rsp + 0x40]
call fcn.1400c5a90
mov qword [rsp + 0x40], rax
lea rdx, [rsp + 0xb0]
lea rcx, [rsp + 0x280]
call fcn.140007e80
nop
movzx ebx, byte [rsp + 0x30]
nop
lea rcx, [rsp + 0xb0]
call fcn.140012eb0
test al, al
jne 0x1400c4ef3
mov qword [rsp + 0x1a0], r12
mov qword [rsp + 0x1a8], r12
mov qword [rsp + 0x1a8], reloc.WSOCK32.dll_ntohs
mov qword [rsp + 0x1a0], r12
mov byte [rsp + 0x190], al
mov r8d, 0xa
lea rdx, str.CNE_UserID
lea rcx, [rsp + 0x190]
call fcn.140009d60
nop
lea rcx, [rsp + 0xb0]
call fcn.140013040
mov rcx, rax
lea rdx, [rsp + 0x190]
call fcn.140008210
mov rcx, rax
call fcn.140007ab0
mov edi, eax
lea rcx, [rsp + 0x190]
call fcn.1400091f0
mov dword [rsp + 0x50], edi
mov byte [rsp + 0x20], bl
lea r9, [rsp + 0x50]
xor r8d, r8d
lea rdx, [rsp + 0xa0]
lea rcx, [rsp + 0x40]
call fcn.1400c4050
lea rcx, [rsp + 0xb0]
call fcn.1400130c0
jmp 0x1400c4e30
lea rcx, [rsp + 0xb0]
call fcn.1400099b0
lea rdx, [rsp + 0x40]
mov rcx, r15
call fcn.1400c4530
nop
mov rdi, qword [rsp + 0x40]
mov rbx, qword [rdi]
mov qword [rsp + 0x60], rbx
mov rsi, qword [rdi + 8]
mov rbx, rsi
cmp byte [rbx + 0x19], 0
jne 0x1400c4f4b
mov rdx, qword [rbx + 0x10]
lea rcx, [rsp + 0x40]
call fcn.1400c5c00
mov rbx, qword [rbx]
mov rcx, rsi
call fcn.1400dbae0
mov rsi, rbx
mov rdi, qword [rsp + 0x40]
jmp 0x1400c4f22
mov qword [rdi + 8], rdi
mov rax, qword [rsp + 0x40]
mov qword [rax], rax
mov rax, qword [rsp + 0x40]
mov qword [rax + 0x10], rax
mov qword [rsp + 0x48], r12
mov rcx, qword [rsp + 0x40]
call fcn.1400dbae0
nop
lea rcx, [rsp + 0x280]
call fcn.140007a20
nop
lea rcx, [rsp + 0x1b0]
call fcn.1400c7df0
nop
lea rcx, [rsp + 0x2d0]
call fcn.140007a20
nop
lea rcx, [rsp + 0x68]
call fcn.140012080
nop
lea rcx, [rsp + 0x110]
call fcn.1400091f0
nop
lea rcx, [rsp + 0x210]
call fcn.14012d0f0
nop
lea rcx, [rsp + 0x320]
call fcn.14012c650
nop
lea rcx, [rsp + 0x3b0]
call fcn.14012a9e0
nop
lea rcx, [rsp + 0xf0]
call fcn.1400091f0
nop
lea rcx, [rsp + 0x38]
call fcn.140018ea0
nop
mov rcx, r14
call fcn.140018ea0
mov al, 1
jmp 0x1400c500e
mov rcx, qword [rsp + 0x650]
xor rcx, rsp
call fcn.140113910
mov rbx, qword [rsp + 0x6a8]
add rsp, 0x660
pop r15
pop r14
pop r12
pop rdi
pop rsi
ret