Function at 0x140049a70
Capabilities:
Get hostname

Disassembly:
mov qword [rsp + 8], rcx
push rdi
sub rsp, 0x630
mov rax, qword [0x1400ced18]
xor rax, rsp
mov qword [rsp + 0x620], rax
lea rcx, [0x1400d0bf0]
call fcn.140048b40
mov word [rsp + 0x50], ax
mov rax, qword [rsp + 0x640]
cmp dword [rax + 0x10], 0
jne 0x140049ac9
xor r9d, r9d
mov r8w, 0xef26
mov dx, 1
mov rcx, qword [rsp + 0x640]
call fcn.14004a5c0
jmp 0x140049af6
lea rax, [0x1400d0bf0]
mov eax, dword [rax + 0xcc]
mov dword [rsp + 0x60], eax
mov r9d, dword [rsp + 0x60]
movzx r8d, word [rsp + 0x50]
mov dx, 1
mov rcx, qword [rsp + 0x640]
call fcn.14004a5c0
mov rax, qword [rsp + 0x640]
cmp dword [rax + 0x10], 0
je 0x140049b0d
movzx eax, word [rsp + 0x50]
test eax, eax
je 0x140049b14
xor eax, eax
jmp 0x140049fee
cmp dword [0x1400d0be0], 1
jne 0x140049b43
lea r8, str.WebexrptJMF
mov rax, qword [rsp + 0x640]
mov rdx, qword [rax + 8]
lea rcx, [0x1400d0bf0]
call fcn.140046f90
mov word [rsp + 0x50], ax
jmp 0x140049b67
lea r8, str.Webexrpt
mov rax, qword [rsp + 0x640]
mov rdx, qword [rax + 8]
lea rcx, [0x1400d0bf0]
call fcn.140046f90
mov word [rsp + 0x50], ax
mov rax, qword [rsp + 0x640]
cmp dword [rax + 0x10], 0
jne 0x140049b90
xor r9d, r9d
mov r8w, 0xef26
mov dx, 2
mov rcx, qword [rsp + 0x640]
call fcn.14004a5c0
jmp 0x140049bbd
lea rax, [0x1400d0bf0]
mov eax, dword [rax + 0xcc]
mov dword [rsp + 0x64], eax
mov r9d, dword [rsp + 0x64]
movzx r8d, word [rsp + 0x50]
mov dx, 2
mov rcx, qword [rsp + 0x640]
call fcn.14004a5c0
mov rax, qword [rsp + 0x640]
cmp dword [rax + 0x10], 0
je 0x140049bd4
movzx eax, word [rsp + 0x50]
test eax, eax
je 0x140049bdb
xor eax, eax
jmp 0x140049fee
cmp dword [0x1400d0be0], 1
jne 0x140049c8e
xor r9d, r9d
xor r8d, r8d
mov dx, 3
mov rcx, qword [rsp + 0x640]
call fcn.14004a5c0
mov rax, qword [rsp + 0x640]
mov rdx, qword [rax + 8]
lea rcx, [0x1400d0bf0]
call fcn.14004baf0
mov word [rsp + 0x54], ax
mov rax, qword [rsp + 0x640]
cmp dword [rax + 0x10], 0
jne 0x140049c4c
xor r9d, r9d
mov r8w, 0xef26
mov dx, 3
mov rcx, qword [rsp + 0x640]
call fcn.14004a5c0
xor eax, eax
jmp 0x140049fee
movzx eax, word [rsp + 0x54]
test eax, eax
je 0x140049c89
lea rax, [0x1400d0bf0]
mov eax, dword [rax + 0xcc]
mov dword [rsp + 0x68], eax
mov r9d, dword [rsp + 0x68]
movzx r8d, word [rsp + 0x54]
mov dx, 3
mov rcx, qword [rsp + 0x640]
call fcn.14004a5c0
xor eax, eax
jmp 0x140049fee
jmp 0x140049fbb
lea rax, [rsp + 0xa0]
mov rdi, rax
xor eax, eax
mov ecx, 0x100
rep stosb byte [rdi], al
lea rax, [rsp + 0x420]
mov rdi, rax
xor eax, eax
mov ecx, 0x200
rep stosb byte [rdi], al
mov dword [rsp + 0x6c], 0x80
lea rdx, [rsp + 0x6c]
lea rcx, [rsp + 0xa0]
call qword [sym.imp.KERNEL32.dll_GetComputerNameW]
test eax, eax
jne 0x140049d0d
mov eax, 2
imul rax, rax, 0
mov qword [rsp + 0x80], rax
cmp qword [rsp + 0x80], 0x100
jae 0x140049cf6
jmp 0x140049cfb
call fcn.1400826cc
xor eax, eax
mov rcx, qword [rsp + 0x80]
mov word [rsp + rcx + 0xa0], ax
lea rcx, [rsp + 0xa0]
call fcn.14004ba90
lea rax, [rsp + 0x220]
mov rdi, rax
xor eax, eax
mov ecx, 0x100
rep stosb byte [rdi], al
mov qword [rsp + 0x38], 0
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x100
lea rax, [rsp + 0x220]
mov qword [rsp + 0x20], rax
mov r9d, 0xffffffff
lea r8, [rsp + 0xa0]
xor edx, edx
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
test eax, eax
jg 0x140049daa
mov eax, 1
imul rax, rax, 0
mov qword [rsp + 0x88], rax
cmp qword [rsp + 0x88], 0x100
jae 0x140049d95
jmp 0x140049d9a
call fcn.1400826cc
mov rax, qword [rsp + 0x88]
mov byte [rsp + rax + 0x220], 0
lea rax, [rsp + 0x320]
mov rdi, rax
xor eax, eax
mov ecx, 0x100
rep stosb byte [rdi], al
mov r8d, 0x100
lea rdx, [rsp + 0x320]
lea rcx, [rsp + 0x220]
call fcn.14004b410
mov dword [rsp + 0x28], 0x100
lea rax, [rsp + 0x420]
mov qword [rsp + 0x20], rax
mov r9d, 0xffffffff
lea r8, [rsp + 0x320]
xor edx, edx
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov r8d, 0x10
xor edx, edx
lea rcx, [rsp + 0x90]
call sub.VCRUNTIME140.dll_memset
lea rcx, [rsp + 0x90]
call qword [sym.imp.KERNEL32.dll_GetSystemTime]
movzx eax, word [rsp + 0x9c]
movzx ecx, word [rsp + 0x9a]
movzx edx, word [rsp + 0x98]
movzx edi, word [rsp + 0x90]
movzx r8d, word [rsp + 0x96]
movzx r9d, word [rsp + 0x92]
mov dword [rsp + 0x40], eax
mov dword [rsp + 0x38], ecx
mov dword [rsp + 0x30], edx
mov dword [rsp + 0x28], edi
mov dword [rsp + 0x20], r8d
lea r8, str._02hu:_02hu:_04hu__02hu:_02hu:_02hu
mov edx, 0x40
lea rcx, [rsp + 0x1a0]
call fcn.14004c660
xor r9d, r9d
xor r8d, r8d
mov dx, 3
mov rcx, qword [rsp + 0x640]
call fcn.14004a5c0
lea rcx, [0x1400d0bf0]
call fcn.140048750
mov qword [rsp + 0x78], rax
mov qword [rsp + 0x58], 0
jmp 0x140049ecc
mov rax, qword [rsp + 0x58]
inc rax
mov qword [rsp + 0x58], rax
mov rax, qword [rsp + 0x78]
cmp qword [rsp + 0x58], rax
jae 0x140049fbb
mov rax, qword [rsp + 0x78]
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x58]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x1a0]
lea r8, [rsp + 0x420]
mov rax, qword [rsp + 0x640]
mov rdx, qword [rax + 8]
lea rcx, [0x1400d0bf0]
call fcn.14004a690
mov word [rsp + 0x50], ax
mov rax, qword [rsp + 0x640]
cmp dword [rax + 0x10], 0
jne 0x140049f4d
xor r9d, r9d
mov r8w, 0xef26
mov dx, 3
mov rcx, qword [rsp + 0x640]
call fcn.14004a5c0
xor eax, eax
jmp 0x140049fee
movzx eax, word [rsp + 0x50]
test eax, eax
je 0x140049f89
lea rax, [0x1400d0bf0]
mov eax, dword [rax + 0xcc]
mov dword [rsp + 0x70], eax
mov r9d, dword [rsp + 0x70]
movzx r8d, word [rsp + 0x50]
mov dx, 3
mov rcx, qword [rsp + 0x640]
call fcn.14004a5c0
xor eax, eax
jmp 0x140049fee
mov rax, qword [rsp + 0x58]
inc rax
imul rax, rax, 0x64
xor edx, edx
div qword [rsp + 0x78]
movzx eax, ax
mov r9d, eax
xor r8d, r8d
mov dx, 3
mov rcx, qword [rsp + 0x640]
call fcn.14004a5c0
jmp 0x140049ebf
mov r9d, 0x64
xor r8d, r8d
mov dx, 3
mov rcx, qword [rsp + 0x640]
call fcn.14004a5c0
xor r9d, r9d
xor r8d, r8d
mov dx, 4
mov rcx, qword [rsp + 0x640]
call fcn.14004a5c0
xor eax, eax
mov rcx, qword [rsp + 0x620]
xor rcx, rsp
call fcn.140082550
add rsp, 0x630
pop rdi
ret