Function at 0x140028e20
Capabilities:
Get hostname
Initialize winsock library

Disassembly:
push rdi
sub rsp, 0x300
mov qword [rsp + 0xc0], 0xfffffffffffffffe
mov qword [rsp + 0x310], rbx
mov rax, qword [0x140087990]
xor rax, rsp
mov qword [rsp + 0x2f0], rax
cmp byte [0x14008acd7], 0
jne 0x140029164
mov byte [0x14008acd7], 1
xor ebx, ebx
mov qword [0x14008acc0], rbx
mov byte [rsp + 0x270], bl
xor edx, edx
lea r8d, [rbx + 0x7f]
lea rcx, [rsp + 0x271]
call fcn.1400491c0
mov ecx, 0x202
lea rdx, [rsp + 0xd0]
call sub.WS2_32.dll_WSAStartup
mov edx, 0x80
lea rcx, [rsp + 0x270]
call sub.WS2_32.dll_gethostname
call sub.WS2_32.dll_WSACleanup
mov qword [rsp + 0x68], send
mov qword [rsp + 0x60], rbx
mov byte [rsp + 0x50], bl
xor eax, eax
or rcx, 0xffffffffffffffff
lea rdi, [rsp + 0x270]
repne scasb al, byte [rdi]
not rcx
lea r8, [rcx - 1]
lea rdx, [rsp + 0x270]
lea rcx, [rsp + 0x48]
call fcn.14003afb0
nop
or r9, 0xffffffffffffffff
xor r8d, r8d
lea rdx, [rsp + 0x48]
lea rcx, [0x140089120]
call fcn.140039420
nop
cmp qword [rsp + 0x68], 0x10
jb 0x140028f16
mov rcx, qword [rsp + 0x50]
call fcn.140044814
lea rcx, [0x140074ba4]
call fcn.140048250
mov rdx, rax
mov qword [rsp + 0x68], send
mov qword [rsp + 0x60], rbx
mov byte [rsp + 0x50], 0
xor eax, eax
or rcx, 0xffffffffffffffff
mov rdi, rdx
repne scasb al, byte [rdi]
not rcx
lea r8, [rcx - 1]
lea rcx, [rsp + 0x48]
call fcn.14003afb0
nop
lea r8, [0x140073f8c]
lea rdx, [rsp + 0x48]
lea rcx, [rsp + 0x20]
call fcn.14003d950
nop
lea r8, str.ds_arj
mov rdx, rax
lea rcx, [rsp + 0x70]
call fcn.14003d950
nop
lea r8, [0x140073f8c]
mov rdx, rax
lea rcx, [rsp + 0x98]
call fcn.14003d950
nop
or r9, 0xffffffffffffffff
xor r8d, r8d
mov rdx, rax
lea rcx, [0x140089170]
call fcn.140039420
nop
cmp qword [rsp + 0xb8], 0x10
jb 0x140028fc8
mov rcx, qword [rsp + 0xa0]
call fcn.140044814
mov qword [rsp + 0xb8], send
mov qword [rsp + 0xb0], rbx
mov byte [rsp + 0xa0], 0
cmp qword [rsp + 0x90], 0x10
jb 0x140028ff9
mov rcx, qword [rsp + 0x78]
call fcn.140044814
mov qword [rsp + 0x90], send
mov qword [rsp + 0x88], rbx
mov byte [rsp + 0x78], 0
cmp qword [rsp + 0x40], 0x10
jb 0x140029024
mov rcx, qword [rsp + 0x28]
call fcn.140044814
mov qword [rsp + 0x40], send
mov qword [rsp + 0x38], rbx
mov byte [rsp + 0x28], 0
cmp qword [rsp + 0x68], 0x10
jb 0x140029049
mov rcx, qword [rsp + 0x50]
call fcn.140044814
lea rdi, [0x140089178]
mov rcx, rdi
cmp qword [0x140089190], 0x10
cmovae rcx, qword [0x140089178]
call fcn.140046450
lea rcx, [rsp + 0x20]
call fcn.14000e540
nop
or r9, 0xffffffffffffffff
xor r8d, r8d
mov rdx, rax
lea rcx, [0x140089170]
call fcn.14003ae70
nop
cmp qword [rsp + 0x40], 0x10
jb 0x14002909c
mov rcx, qword [rsp + 0x28]
call fcn.140044814
cmp qword [0x140089190], 0x10
cmovae rdi, qword [0x140089178]
mov rcx, rdi
call fcn.140046450
lea r8, str.pwrlg4.tmp
lea rdx, [0x140089170]
lea rcx, [rsp + 0x20]
call fcn.14003d950
nop
or r9, 0xffffffffffffffff
xor r8d, r8d
mov rdx, rax
lea rcx, [0x1400891e8]
call fcn.140039420
nop
cmp qword [rsp + 0x40], 0x10
jb 0x1400290f6
mov rcx, qword [rsp + 0x28]
call fcn.140044814
lea rax, [0x1400891f0]
cmp qword [0x140089208], 0x10
cmovae rax, qword [0x1400891f0]
mov qword [0x14008ac80], rax
mov qword [0x14008ac70], rbx
lea r8, str._flg4.tmp
lea rdx, [0x140089170]
lea rcx, [rsp + 0x20]
call fcn.14003d950
nop
or r9, 0xffffffffffffffff
xor r8d, r8d
mov rdx, rax
lea rcx, [0x140089210]
call fcn.140039420
nop
cmp qword [rsp + 0x40], 0x10
jb 0x14002915d
mov rcx, qword [rsp + 0x28]
call fcn.140044814
mov qword [0x14008ac50], rbx
mov rcx, qword [rsp + 0x2f0]
xor rcx, rsp
call fcn.140044830
mov rbx, qword [rsp + 0x310]
add rsp, 0x300
pop rdi
ret