Function at 0x140013450
Capabilities:
Get hostname
Initialize winsock library
Terminate process

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
mov qword [rsp + 0x20], rdi
push r13
push r14
push r15
sub rsp, 0x1e0
mov rax, qword [0x1400a9008]
xor rax, rsp
mov qword [rsp + 0x1d0], rax
xor r14d, r14d
mov rdi, rcx
test byte [0x1400ab340], 1
mov dword [rsp + 0x20], r14d
jne 0x14002e48c
mov rax, qword [rdi + 8]
mov qword [0x1400aae80], rax
mov rax, qword [rdi]
mov qword [0x1400aae38], rax
call fcn.14001b8e4
xor edx, edx
lea rcx, [rsp + 0x30]
mov r8d, 0x198
call sub.msvcrt.dll_memset
mov ecx, 0x202
lea rdx, [rsp + 0x30]
call qword [sym.imp.WS2_32.dll_WSAStartup]
lea r15, [0x140075f40]
lea rbp, [0x1400a92b0]
test eax, eax
jne 0x14002e49e
mov dword [0x1400aae2c], 1
call sym.spoolsv.exe_PrvSplIsUpgrade
lea rdx, [rsp + 0x24]
mov dword [0x1400aaa58], 0x5c005c
lea rcx, [0x1400aaa5c]
mov dword [rsp + 0x24], 0x10
call qword [sym.imp.KERNEL32.dll_GetComputerNameW]
test eax, eax
je 0x14002e4d2
call fcn.140010280
mov ecx, eax
call fcn.140010310
mov ebx, eax
test eax, eax
js 0x14002e525
lea rdx, [0x1400aae34]
lea rcx, [0x1400aae40]
call sym.spoolsv.exe_PrvBuildOtherNamesFromMachineName
test eax, eax
je 0x14002e56c
mov r8, qword [0x1400aae40]
lea rcx, [0x1400aaa84]
mov dword [0x1400aaa80], 0x5c005c
mov edx, 0x102
mov r8, qword [r8 + 8]
call fcn.14000ff60
call fcn.14001b384
mov ebx, eax
test eax, eax
js 0x14002e5ac
call fcn.1400104e8
mov ebx, eax
test eax, eax
js 0x14002e5f3
lea r8, [rsp + 0x20]
xor edx, edx
lea rcx, [0x140073350]
call fcn.1400107d0
mov qword [0x1400aad38], rax
test rax, rax
je 0x14002e63a
mov rcx, qword [rax + 0x10]
mov edx, 0x190
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x1400aac88], rax
test rax, rax
je 0x14002e682
call fcn.14001064c
mov rcx, qword [0x1400aa9f8]
call fcn.140016bbc
mov dword [0x1400aae30], 1
call fcn.14001b69c
call fcn.14001b6f0
call fcn.140010bf4
call fcn.140010cf8
call fcn.140010d44
call fcn.140014210
call fcn.14001369c
mov rcx, rdi
call sym.spoolsv.exe_PrvDllFreeSplMem
test byte [0x1400ab340], 1
jne 0x14002e6d5
call fcn.14001363c
int3
lea rdx, [0x140092ea8]
call fcn.14003d310
nop
jmp 0x140013496
mov rcx, qword [0x1400a92b0]
cmp rcx, rbp
je 0x1400134f2
test byte [rcx + 0x1c], 0x20
je 0x1400134f2
mov rcx, qword [rcx + 0x10]
mov edx, 0xa
mov r9d, eax
mov r8, r15
call fcn.14003d1e0
nop
jmp 0x1400134f2
mov rax, qword [0x1400a92b0]
cmp rax, rbp
je 0x14002e505
test byte [rax + 0x1c], 0x20
je 0x14002e505
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_1.dll_GetLastError]
mov rcx, qword [0x1400a92b0]
mov edx, 0xb
mov r9d, eax
mov r8, r15
mov rcx, qword [rcx + 0x10]
call fcn.14003d1e0
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_1.dll_GetLastError]
xor r8d, r8d
lea rcx, [0x140092ec8]
mov edx, eax
call fcn.140053ce8
xor ecx, ecx
call qword [sym.imp.api_ms_win_core_processthreads_l1_1_2.dll_ExitProcess]
mov rcx, qword [0x1400a92b0]
cmp rcx, rbp
je 0x14002e54b
test byte [rcx + 0x1c], 0x20
je 0x14002e54b
mov rcx, qword [rcx + 0x10]
mov edx, 0xc
mov r9d, eax
mov r8, r15
call fcn.14003d1e0
mov ecx, ebx
call fcn.14003d428
mov edx, eax
lea rcx, [0x140092e88]
xor r8d, r8d
call fcn.140053ce8
xor ecx, ecx
call qword [sym.imp.api_ms_win_core_processthreads_l1_1_2.dll_ExitProcess]
mov rax, qword [0x1400a92b0]
cmp rax, rbp
je 0x14002e59f
test byte [rax + 0x1c], 0x20
je 0x14002e59f
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_1.dll_GetLastError]
mov rcx, qword [0x1400a92b0]
mov edx, 0xd
mov r9d, eax
mov r8, r15
mov rcx, qword [rcx + 0x10]
call fcn.14003d1e0
mov word [0x1400aaa80], r14w
jmp 0x14001357a
mov rcx, qword [0x1400a92b0]
cmp rcx, rbp
je 0x14002e5d2
test byte [rcx + 0x1c], 0x20
je 0x14002e5d2
mov rcx, qword [rcx + 0x10]
mov edx, 0xe
mov r9d, eax
mov r8, r15
call fcn.14003d1e0
mov ecx, ebx
call fcn.14003d428
mov edx, eax
lea rcx, [0x140092dd8]
xor r8d, r8d
call fcn.140053ce8
xor ecx, ecx
call qword [sym.imp.api_ms_win_core_processthreads_l1_1_2.dll_ExitProcess]
mov rcx, qword [0x1400a92b0]
cmp rcx, rbp
je 0x14002e619
test byte [rcx + 0x1c], 0x20
je 0x14002e619
mov rcx, qword [rcx + 0x10]
mov edx, 0xf
mov r9d, eax
mov r8, r15
call fcn.14003d1e0
mov ecx, ebx
call fcn.14003d428
mov edx, eax
lea rcx, [0x140092d68]
xor r8d, r8d
call fcn.140053ce8
xor ecx, ecx
call qword [sym.imp.api_ms_win_core_processthreads_l1_1_2.dll_ExitProcess]
mov rcx, qword [0x1400a92b0]
cmp rcx, rbp
je 0x14002e662
test byte [rcx + 0x1c], 0x20
je 0x14002e662
mov r9d, dword [rsp + 0x20]
mov edx, 0x10
mov rcx, qword [rcx + 0x10]
mov r8, r15
call fcn.14003d1e0
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_1.dll_GetLastError]
xor r8d, r8d
lea rcx, [0x140092e48]
mov edx, eax
call fcn.140053ce8
xor ecx, ecx
call qword [sym.imp.api_ms_win_core_processthreads_l1_1_2.dll_ExitProcess]
mov rax, qword [0x1400a92b0]
cmp rax, rbp
je 0x14002e6b5
test byte [rax + 0x1c], 0x20
je 0x14002e6b5
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_1.dll_GetLastError]
mov rcx, qword [0x1400a92b0]
mov edx, 0x11
mov r9d, eax
mov r8, r15
mov rcx, qword [rcx + 0x10]
call fcn.14003d1e0
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_1.dll_GetLastError]
xor r8d, r8d
lea rcx, [0x140092e48]
mov edx, eax
call fcn.140053ce8
xor ecx, ecx
call qword [sym.imp.api_ms_win_core_processthreads_l1_1_2.dll_ExitProcess]
lea rdx, [0x140092e18]
call fcn.14003d310
nop
jmp 0x14001362d