Function at 0x140116de0
Capabilities:
Get hostname

Disassembly:
push rbp
push rsi
push rdi
sub rsp, 0x30
mov qword [rsp + 0x20], 0xfffffffffffffffe
mov qword [rsp + 0x60], rbx
mov rsi, rcx
mov rax, qword [rcx + 0x10]
mov rdi, qword [rax]
mov rax, qword [rdi + 8]
mov rdx, qword [rax + 0x10]
mov rbp, qword [rdx + 8]
xor edx, edx
mov r8d, 0x80
lea rcx, [rdi + 0x30]
call fcn.1400eaf90
lea rcx, [rdi + 0x30]
cmp qword [rbp + 0x80], 0
jbe 0x140116e3c
mov r8d, 0x7f
mov rdx, qword [rbp + 0x78]
call fcn.1400f1ae0
jmp 0x140116e47
mov edx, 0x7f
call qword [sym.imp.WS2_32.dll_gethostname]
mov ecx, 0x30
call fcn.1400cc054
mov rbx, rax
mov qword [rsp + 0x58], rax
mov rcx, qword [rdi + 8]
lea rax, vtable.xmrig::Httpd.0
mov qword [rbx], rax
lea rax, vtable.xmrig::Httpd.1.0
mov qword [rbx + 8], rax
mov qword [rbx + 0x10], rcx
xor ebp, ebp
mov qword [rbx + 0x18], rbp
mov qword [rbx + 0x20], rbp
mov word [rbx + 0x28], bp
mov qword [rsp + 0x50], rbx
mov rcx, qword [rcx + 0x10]
add rcx, 0x10
mov rdx, qword [rcx + 8]
cmp qword [rcx + 0x10], rdx
je 0x140116ea5
mov qword [rdx], rbx
add qword [rcx + 8], 8
jmp 0x140116eb0
lea r8, [rsp + 0x50]
call fcn.140005cd0
nop
mov qword [rdi + 0xb8], rbx
mov rcx, rbx
call fcn.14012d1e0
mov rax, qword [rsi + 0x10]
mov rcx, qword [rax + 8]
cmp byte [rcx + 8], 0
je 0x140116ef8
mov rax, qword [rcx + 0xc0]
cmp byte [rax + 0x8a], 0
jne 0x140116ef2
cmp byte [rax + 0x101], 0
jne 0x140116ef2
cmp byte [rcx + 0xc], 0
jne 0x140116ef2
cmp byte [rax + 0xa], 0
je 0x140116ef8
mov rax, qword [rcx]
call qword [rax + 0x18]
mov rax, qword [rsi + 0x10]
mov rcx, qword [rax + 8]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
test al, al
je 0x14011705b
mov ecx, 0x30
call fcn.1400cc054
mov rdi, rax
mov qword [rsp + 0x50], rax
mov rcx, qword [rsi + 0x10]
mov rcx, qword [rcx + 8]
mov rdx, qword [rcx]
call qword [rdx + 0x20]
mov rbx, rax
lea rax, vtable.xmrig::Watcher.0
mov qword [rdi], rax
mov qword [rdi + 8], rsi
mov qword [rdi + 0x10], rbp
mov rcx, qword [rbx + 8]
mov qword [rdi + 0x18], rcx
cmp qword [rbx], 0
je 0x140116f70
inc rcx
call fcn.1400cc690
mov qword [rdi + 0x10], rax
mov r8, qword [rdi + 0x18]
inc r8
mov rdx, qword [rbx]
mov rcx, rax
call fcn.1400eab30
nop
mov ecx, select
call fcn.1400cc054
mov rbx, rax
mov qword [rsp + 0x58], rax
mov qword [rax], rdi
mov qword [rax + 8], rbp
mov rcx, rax
call fcn.140128600
nop
mov qword [rdi + 0x20], rbx
mov ecx, 0x110
call fcn.1400cc054
mov qword [rdi + 0x28], rax
mov qword [rax], rdi
mov r8, qword [0x140257088]
test r8, r8
jne 0x140116fcf
call fcn.1400aa890
test eax, eax
je 0x140116fc1
mov r8, rbp
jmp 0x140116fcf
lea r8, [0x140257090]
mov qword [0x140257088], r8
mov rdx, qword [rdi + 0x28]
mov qword [rdx + 8], r8
mov dword [rdx + 0x10], 3
mov dword [rdx + 0x58], 8
lea rcx, [rdx + 0x20]
lea rax, [r8 + 0x10]
mov qword [rcx], rax
mov rax, qword [r8 + 0x18]
mov qword [rdx + 0x28], rax
mov qword [rax], rcx
mov qword [r8 + 0x18], rcx
mov dword [rdx + 0x30], 0xffffffff
mov qword [rdx + 0xd8], 0xffffffffffffffff
mov qword [rdx + 0x108], rbp
mov dword [rdx + 0xe0], ebp
mov qword [rdx + 0xf0], rbp
mov qword [rdx + 0xf8], rbp
mov qword [rdx + 0x100], rbp
mov dword [rdx + 0x70], ntohs
mov qword [rdx + 0xa8], rbp
mov qword [rdx + 0x68], rdx
mov r8, qword [rdi + 0x10]
mov rcx, qword [rdi + 0x28]
call fcn.1400a5030
nop
mov rax, qword [rsi + 0x10]
mov qword [rax + 0x28], rdi
mov rbx, qword [rsp + 0x60]
add rsp, 0x30
pop rdi
pop rsi
pop rbp
ret