Function at 0x401af0
Capabilities:
Get hostname

Disassembly:
push rdi
push rsi
push rbx
sub rsp, 0x100
mov qword [rcx], 0
mov qword [rcx + 8], 0
mov rsi, rcx
mov byte [rcx + 0x10], 0
lea rdx, [rsp + 0x24]
lea rcx, [rsp + 0x28]
mov dword [rsp + 0x24], 0
call fcn.004606f0
test eax, eax
js 0x401a66
mov edx, dword [rsp + 0x24]
mov rcx, qword [rsp + 0x28]
test edx, edx
jle 0x401a60
mov r9, qword [rcx + 0x10]
movabs rax, 0xffffffffffff
movabs r8, 0x200000000
and r9, rax
cmp r9, r8
je 0x401a71
lea ebx, [rdx - 1]
lea r10, [rbx + rbx*4 + 5]
mov ebx, 0x50
shl r10, 4
mov rdi, r10
sub rdi, rbx
shr rdi, 4
lea r9, [rdi + rdi*4]
and r9d, 7
je 0x4019a3
mov r11, qword [rcx + 0x60]
mov edi, 0xa0
and r11, rax
cmp r11, r8
je 0x401a73
cmp r9, 1
mov ebx, 0xa0
je 0x4019a3
cmp r9, 2
je 0x40198b
cmp r9, 3
je 0x401973
cmp r9, 4
je 0x40195b
cmp r9, 5
je 0x401943
cmp r9, 6
je 0x40192b
mov r9, qword [rcx + rdi + 0x10]
lea r11, [rdi + 0x50]
and r9, rax
cmp r9, r8
je 0x401a73
mov rbx, r11
mov r11, qword [rcx + rbx + 0x10]
lea rdi, [rbx + 0x50]
and r11, rax
cmp r11, r8
je 0x401a73
mov rbx, rdi
mov r9, qword [rcx + rbx + 0x10]
lea rdi, [rbx + 0x50]
and r9, rax
cmp r9, r8
je 0x401a73
mov rbx, rdi
mov rdi, qword [rcx + rbx + 0x10]
lea r11, [rbx + 0x50]
and rdi, rax
cmp rdi, r8
je 0x401a73
mov rbx, r11
mov r9, qword [rcx + rbx + 0x10]
lea r11, [rbx + 0x50]
and r9, rax
cmp r9, r8
je 0x401a73
mov rbx, r11
mov r11, qword [rcx + rbx + 0x10]
lea rdi, [rbx + 0x50]
and r11, rax
cmp r11, r8
je 0x401a73
mov rbx, rdi
cmp rbx, r10
je 0x401a60
mov rdi, qword [rcx + rbx + 0x10]
lea r9, [rbx + 0x50]
and rdi, rax
cmp rdi, r8
je 0x401a73
mov r11, qword [rcx + r9 + 0x10]
mov rbx, r9
and r11, rax
cmp r11, r8
je 0x401a73
add rbx, 0x50
mov rdi, qword [rcx + rbx + 0x10]
and rdi, rax
cmp rdi, r8
je 0x401a73
lea rbx, [r9 + 0xa0]
mov r11, qword [rcx + rbx + 0x10]
and r11, rax
cmp r11, r8
je 0x401a73
lea rbx, [r9 + 0xf0]
mov rdi, qword [rcx + rbx + 0x10]
and rdi, rax
cmp rdi, r8
je 0x401a73
lea rbx, [r9 + 0x140]
mov r11, qword [rcx + rbx + 0x10]
and r11, rax
cmp r11, r8
je 0x401a73
lea rbx, [r9 + 0x190]
mov rdi, qword [rcx + rbx + 0x10]
and rdi, rax
cmp rdi, r8
je 0x401a73
lea rbx, [r9 + 0x1e0]
mov r11, qword [rcx + rbx + 0x10]
and r11, rax
cmp r11, r8
je 0x401a73
lea rbx, [r9 + 0x230]
cmp rbx, r10
jne 0x4019ac
nop
call fcn.00460ce0
nop
add rsp, 0x100
pop rbx
pop rsi
pop rdi
ret
xor ebx, ebx
mov ecx, 9
call fcn.004a93f0
add rbx, qword [rsp + 0x28]
mov qword [rax], 0
mov rdi, rax
mov byte [rax + 8], 0
mov r9d, 0xc8
mov edx, dword [rbx + 8]
mov dword [rax], edx
movzx ecx, word [rbx + 0xc]
lea rbx, [rsp + 0x30]
mov edx, 9
mov r8, rbx
mov word [rax + 4], cx
mov eax, 0x7063
mov rcx, rdi
mov word [rdi + 6], ax
mov byte [rdi + 8], 0x75
call fcn.0041c5b0
mov r8, rsi
mov edx, 8
mov rcx, rbx
call fcn.00411ef0
mov rcx, rdi
call fcn.004a93c0
mov edx, dword [rsp + 0x24]
mov rcx, qword [rsp + 0x28]
call fcn.00460ce0
jmp 0x401a66
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x28
mov rbx, rcx
lea rcx, [rcx + 0xc8]
call fcn.004073b0
mov rsi, qword [0x004ba370]
movabs rcx, 0xfffffffffffffff
mov rax, qword [rsi]
mov edx, dword [rax + 0x4c]
lea edi, [rdx + rdx*2]
mov dword [rbx + 0xc0], edx
movsxd rdi, edi
lea rbp, [rdi*8]
cmp rdi, rcx
mov rcx, 0xffffffffffffffff
cmovbe rcx, rbp
call fcn.004a93f0
mov r8, rdi
mov r9, rax
sub r8, 1
js 0x401b70
sub rdi, 2
mov r8d, 8
mov rcx, r9
cmp rdi, 0xffffffffffffffff
cmovge r8, rbp
xor edx, edx
call sub.msvcrt.dll_memset
mov r9, rax
lea r10, [rbx + 0x11]
lea rdi, [rbx + 0x19]
xor eax, eax
mov qword [rbx + 0x11], 0
mov qword [rbx + 0x89], 0
and rdi, 0xfffffffffffffff8
mov rcx, r10
mov qword [rbx + 0x98], r9
sub rcx, rdi
mov qword [rbx + 0xa8], 0
mov qword [rbx + 0xb0], 0
sub ecx, 0xffffff80
mov qword [rbx + 0xb8], 0
shr ecx, 3
rep stosq qword [rdi], rax
mov r11, qword [rsi]
mov rdx, qword [r11 + 0x10]
test rdx, rdx
je 0x401bf2
mov rcx, r10
mov r8d, 0x7f
call sub.msvcrt.dll_strncpy
mov rcx, rbx
add rsp, 0x28
pop rbx
pop rsi
pop rdi
pop rbp
jmp 0x401830
mov rcx, r10
mov edx, 0x7f
call qword [sym.imp.WS2_32.dll_gethostname]
mov rcx, rbx
add rsp, 0x28
pop rbx
pop rsi
pop rdi
pop rbp
jmp 0x401830