Function at 0x140048b30
Capabilities:
Get hostname

Disassembly:
mov rax, rsp
push rdi
push r14
push r15
sub rsp, 0xa0
mov qword [rax - 0x70], 0xfffffffffffffffe
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rbp
mov qword [rax + 0x20], rsi
mov rax, qword [0x140088008]
xor rax, rsp
mov qword [rsp + 0x90], rax
mov rdi, rcx
add rcx, 0x28
mov r8d, 1
call fcn.14000dd70
lea rcx, [rdi + 0x130]
mov r8d, 2
call fcn.14000dd70
lea rcx, [rdi + 0x238]
mov r8d, reloc.WS2_32.dll_ntohs
call fcn.14000dd70
mov rax, qword [rdi + 0x20]
mov rbx, qword [rax + 0x50]
cmp rbx, 0xffffffffffffffff
je 0x140048bbf
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
mov rdx, rbx
call qword [sym.imp.KERNEL32.dll_SetProcessAffinityMask]
mov rax, qword [rdi + 0x20]
cmp byte [rax], 0
je 0x140048bf6
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
test rax, rax
je 0x140048bdc
xor edx, edx
mov rcx, rax
call qword [sym.imp.USER32.dll_ShowWindow]
jmp 0x140048bf6
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
call qword [sym.imp.KERNEL32.dll_FreeConsole]
mov rax, qword [rdi + 0x20]
mov ecx, dword [rax + 0x2c]
mov esi, dword [rax + 0x28]
lea eax, [rcx - 1]
cmp eax, 3
ja 0x140048f30
mov eax, 3
or r15, 0xffffffffffffffff
cmp esi, 1
cmovne eax, r15d
add eax, ecx
cdqe
lea rcx, [0x140079810]
mov rcx, qword [rcx + rax*8]
mov qword [0x1400963f0], rcx
test rcx, rcx
je 0x140048f30
lea edx, [r15 + 0x11]
mov ecx, 0x1b0
call fcn.140033780
mov rbx, rax
lea edx, [r15 + 0x11]
mov ecx, 0x400000
call fcn.140033780
mov qword [rbx + 0x1a0], rax
mov r9, rbx
lea r8, [rsp + 0x50]
lea edx, [r15 + 0x4d]
lea rcx, [0x140079630]
call qword [0x1400963f0]
mov rcx, qword [rbx + 0x1a0]
call fcn.140033764
mov rcx, rbx
call fcn.140033764
mov rax, qword [0x140096158]
mov ecx, 0x40
mov r8d, 0x20
cmp byte [rax + 2], 0
cmovne r8d, ecx
lea rax, [0x1400796d0]
lea rdx, [0x14007a850]
cmp esi, 1
cmove rdx, rax
lea rcx, [rsp + 0x50]
call fcn.14002c2f0
test eax, eax
jne 0x140048f30
mov rax, qword [rdi + 0x20]
movzx r9d, byte [rax + 4]
movzx r8d, byte [rax + 2]
mov edx, dword [rax + 0x4c]
mov ecx, dword [rax + 0x28]
call fcn.140054f20
mov rax, qword [rdi + 0x20]
cmp byte [rax + 3], 0
je 0x140048d01
mov rcx, rdi
call fcn.1400488b0
xor eax, eax
jmp 0x140048f35
lea rcx, [0x140096100]
call qword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
mov ecx, 0x268
call fcn.140028e14
mov rsi, rax
mov qword [rsp + 0x40], rax
lea rbx, [rax + 0xc8]
lea rcx, [rbx + 0x100]
xor edx, edx
lea r8d, [rdx + 0x50]
call fcn.14002c100
xor r14d, r14d
mov dword [rbx + 0x150], r14d
mov qword [rbx + 0x158], r14
mov qword [rbx + 0x160], r14
mov qword [rbx + 0x168], r14
mov qword [rbx + 0x170], r14
mov byte [rbx + 0x178], r14b
mov qword [rbx + 0x180], r14
mov qword [rbx + 0x188], r14
mov qword [rbx + 0x190], r14
xor edx, edx
mov r8d, 0x100
mov rcx, rbx
call fcn.14002c100
nop
mov rax, qword [0x140096158]
mov ecx, dword [rax + 0x4c]
mov dword [rsi + 0xc0], ecx
lea eax, [rcx + rcx*2]
movsxd rcx, eax
mov eax, 8
mul rcx
mov rbp, rax
cmovo rbp, r15
mov rcx, rbp
call fcn.14002910c
mov rbx, rax
test rax, rax
je 0x140048dd0
mov r8, rbp
xor edx, edx
mov rcx, rax
call fcn.14002c100
jmp 0x140048dd3
mov rbx, r14
mov qword [rsi + 0x98], rbx
xor eax, eax
mov qword [rsi + 0xa8], rax
mov qword [rsi + 0xb0], rax
mov qword [rsi + 0xb8], rax
xor edx, edx
mov r8d, 0x80
lea rcx, [rsi + 0x11]
call fcn.14002c100
mov rax, qword [0x140096158]
mov rdx, qword [rax + 0x10]
lea rcx, [rsi + 0x11]
test rdx, rdx
je 0x140048e23
mov r8d, 0x7f
call fcn.14002e080
jmp 0x140048e2e
mov edx, 0x7f
call qword [sym.imp.WS2_32.dll_gethostname]
mov rcx, rsi
call fcn.140047a90
nop
mov qword [0x140096128], rsi
mov ecx, 0x18
call fcn.140028e14
mov rbx, rax
mov qword [rsp + 0x40], rax
mov rax, qword [rdi + 0x20]
mov ecx, dword [rax + 0x30]
mov rax, qword [rax + 8]
mov qword [rbx], rax
mov dword [rbx + 8], ecx
mov qword [rbx + 0x10], r14
mov qword [rdi + 0x10], rbx
mov eax, dword [rbx + 8]
test eax, eax
je 0x140048e9c
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x28], rbx
lea rdx, [0x140062a10]
mov qword [rsp + 0x20], rdx
xor r9d, r9d
xor r8d, r8d
movzx edx, ax
lea ecx, [r9 + 8]
call fcn.140020dd0
mov qword [rbx + 0x10], rax
mov rcx, qword [rdi + 0x20]
mov edx, dword [rcx + 0x40]
mov rcx, qword [rcx + 0x50]
call fcn.140054730
mov rax, qword [rdi + 0x18]
mov rcx, qword [rax + 0x20]
mov rax, qword [rcx]
call qword [rax + 0x18]
lea rsi, [0x140096510]
mov rcx, qword [0x1400964e0]
test rcx, rcx
jne 0x140048ee5
call fcn.14000e800
test eax, eax
je 0x140048edb
mov rcx, r14
jmp 0x140048ee5
mov qword [0x1400964e0], rsi
mov rcx, rsi
call fcn.14000f260
mov ebx, eax
mov rcx, qword [0x1400964e0]
test rcx, rcx
jne 0x140048f1f
call fcn.14000e800
test eax, eax
je 0x140048f15
mov rcx, r14
call fcn.14000d1e0
mov rcx, rdi
call fcn.1400488b0
mov eax, ebx
jmp 0x140048f35
mov qword [0x1400964e0], rsi
mov rcx, rsi
call fcn.14000d1e0
mov rcx, rdi
call fcn.1400488b0
mov eax, ebx
jmp 0x140048f35
mov eax, 1
mov rcx, qword [rsp + 0x90]
xor rcx, rsp
call fcn.140028de0
lea r11, [rsp + 0xa0]
mov rbx, qword [r11 + 0x28]
mov rbp, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop rdi
ret