Function at 0x1400285a0
Capabilities:
Get hostname
Initialize winsock library

Disassembly:
mov rax, rsp
push rdi
push r14
push r15
sub rsp, 0x310
mov qword [rsp + 0xd8], 0xfffffffffffffffe
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rbp
mov qword [rax + 0x18], rsi
mov rax, qword [0x140087990]
xor rax, rsp
mov qword [rsp + 0x300], rax
cmp byte [0x14008acd7], 0
jne 0x140028de8
mov byte [0x14008acd7], 1
xor r14d, r14d
mov qword [0x14008acc0], r14
lea rcx, [0x140089470]
cmp qword [reloc.OLEAUT32.dll_VariantInit], 8
cmovae rcx, qword [0x140089470]
mov esi, 3
mov rdi, rsi
mov r8, qword [0x140089480]
cmp r8, rsi
cmovb rdi, r8
lea rbx, [0x140074d80]
mov rdx, rbx
lea ebp, [rsi - 2]
or r15, 0xffffffffffffffff
test rdi, rdi
je 0x140028662
nop word [rax + rax]
movzx eax, word [rdx]
cmp word [rcx], ax
jne 0x140028657
add rcx, 2
add rdx, 2
sub rdi, rbp
jne 0x140028640
jmp 0x140028662
mov edi, ebp
cmp word [rcx], ax
cmovb edi, r15d
jmp 0x140028665
mov edi, r14d
movsxd rax, edi
test edi, edi
jne 0x14002867a
cmp r8, rsi
jb 0x14002867e
mov eax, r14d
cmp r8, rsi
setne al
test eax, eax
je 0x140028683
call fcn.14000d070
mov byte [rsp + 0x280], r14b
xor edx, edx
lea r8d, [rdx + 0x7f]
lea rcx, [rsp + 0x281]
call fcn.1400491c0
mov ecx, 0x202
lea rdx, [rsp + 0xe0]
call sub.WS2_32.dll_WSAStartup
mov edx, 0x80
lea rcx, [rsp + 0x280]
call sub.WS2_32.dll_gethostname
call sub.WS2_32.dll_WSACleanup
mov qword [rsp + 0x80], send
mov qword [rsp + 0x78], r14
mov byte [rsp + 0x68], r14b
xor eax, eax
mov rcx, r15
lea rdi, [rsp + 0x280]
repne scasb al, byte [rdi]
not rcx
lea r8, [rcx - 1]
lea rdx, [rsp + 0x280]
lea rcx, [rsp + 0x60]
call fcn.14003afb0
nop
mov r9, r15
xor r8d, r8d
lea rdx, [rsp + 0x60]
lea rcx, [0x140089120]
call fcn.140039420
nop
cmp qword [rsp + 0x80], 0x10
jb 0x140028733
mov rcx, qword [rsp + 0x68]
call fcn.140044814
lea rcx, [0x140074ba4]
call fcn.140048250
mov rdx, rax
mov qword [rsp + 0x80], send
mov qword [rsp + 0x78], r14
mov byte [rsp + 0x68], 0
xor eax, eax
mov rcx, r15
mov rdi, rdx
repne scasb al, byte [rdi]
not rcx
lea r8, [rcx - 1]
lea rcx, [rsp + 0x60]
call fcn.14003afb0
nop
lea r8, [0x140073f8c]
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x38]
call fcn.14003d950
nop
lea r8, str.ds_arj
mov rdx, rax
lea rcx, [rsp + 0xb0]
call fcn.14003d950
nop
lea r8, [0x140073f8c]
mov rdx, rax
lea rcx, [rsp + 0x88]
call fcn.14003d950
nop
mov r9, r15
xor r8d, r8d
mov rdx, rax
lea rcx, [0x140089170]
call fcn.140039420
nop
cmp qword [rsp + 0xa8], 0x10
jb 0x1400287e9
mov rcx, qword [rsp + 0x90]
call fcn.140044814
mov qword [rsp + 0xa8], send
mov qword [rsp + 0xa0], r14
mov byte [rsp + 0x90], 0
cmp qword [rsp + 0xd0], 0x10
jb 0x14002881d
mov rcx, qword [rsp + 0xb8]
call fcn.140044814
mov qword [rsp + 0xd0], send
mov qword [rsp + 0xc8], r14
mov byte [rsp + 0xb8], 0
cmp qword [rsp + 0x58], 0x10
jb 0x14002884b
mov rcx, qword [rsp + 0x40]
call fcn.140044814
mov qword [rsp + 0x58], send
mov qword [rsp + 0x50], r14
mov byte [rsp + 0x40], 0
cmp qword [rsp + 0x80], 0x10
jb 0x140028873
mov rcx, qword [rsp + 0x68]
call fcn.140044814
lea rdi, [0x140089178]
mov rcx, rdi
cmp qword [0x140089190], 0x10
cmovae rcx, qword [0x140089178]
call fcn.140046450
lea rcx, [rsp + 0x38]
call fcn.14000e540
nop
mov r9, r15
xor r8d, r8d
mov rdx, rax
lea rcx, [0x140089170]
call fcn.14003ae70
nop
cmp qword [rsp + 0x58], 0x10
jb 0x1400288c5
mov rcx, qword [rsp + 0x40]
call fcn.140044814
cmp qword [0x140089190], 0x10
cmovae rdi, qword [0x140089178]
mov rcx, rdi
call fcn.140046450
lea r8, str.pwrlg4.tmp
lea rdx, [0x140089170]
lea rcx, [rsp + 0x38]
call fcn.14003d950
nop
mov r9, r15
xor r8d, r8d
mov rdx, rax
lea rcx, [0x1400891e8]
call fcn.140039420
nop
cmp qword [rsp + 0x58], 0x10
jb 0x14002891e
mov rcx, qword [rsp + 0x40]
call fcn.140044814
lea rax, [0x1400891f0]
cmp qword [0x140089208], 0x10
cmovae rax, qword [0x1400891f0]
mov qword [0x14008ac80], rax
mov qword [0x14008ac70], r14
lea r8, str._flg4.tmp
lea rdx, [0x140089170]
lea rcx, [rsp + 0x38]
call fcn.14003d950
nop
mov r9, r15
xor r8d, r8d
mov rdx, rax
lea rcx, [0x140089210]
call fcn.140039420
nop
cmp qword [rsp + 0x58], 0x10
jb 0x140028984
mov rcx, qword [rsp + 0x40]
call fcn.140044814
mov qword [0x14008ac50], r14
mov qword [0x14008ac68], r14
mov dword [rsp + 0x30], 0xa
lea rdi, [0x140089498]
mov rcx, rdi
cmp qword [reloc.OLEAUT32.dll_VariantInit], 8
cmovae rcx, qword [0x140089498]
mov r8, rsi
mov r10, qword [0x1400894a8]
cmp r10, rsi
cmovb r8, r10
mov rdx, rbx
test r8, r8
je 0x1400289f4
nop dword [rax]
movzx eax, word [rdx]
cmp word [rcx], ax
jne 0x1400289e8
add rcx, 2
add rdx, 2
sub r8, 1
jne 0x1400289d0
jmp 0x1400289f4
mov r8d, ebp
cmp word [rcx], ax
cmovb r8d, r15d
jmp 0x1400289f7
mov r8d, r14d
movsxd rax, r8d
test r8d, r8d
jne 0x140028a0f
cmp r10, 3
jb 0x140028a13
mov eax, r14d
cmp r10, 3
setne al
test eax, eax
je 0x140028a46
lea rax, [rsp + 0x34]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], r14d
lea r9, [rsp + 0x30]
lea r8, [0x140027d00]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov qword [0x14008aca0], rax
mov r10, qword [0x1400894a8]
mov dword [rsp + 0x30], 0xa
lea rcx, [0x1400894c0]
cmp qword [reloc.OLEAUT32.dll_VariantInit], 8
cmovae rcx, qword [0x1400894c0]
mov r8, rsi
mov r9, qword [0x1400894d0]
cmp r9, rsi
cmovb r8, r9
mov rdx, rbx
test r8, r8
je 0x140028aa4
nop
movzx eax, word [rdx]
cmp word [rcx], ax
jne 0x140028a98
add rcx, 2
add rdx, 2
sub r8, 1
jne 0x140028a80
jmp 0x140028aa4
mov r8d, ebp
cmp word [rcx], ax
cmovb r8d, r15d
jmp 0x140028aa7
mov r8d, r14d
movsxd rax, r8d
test r8d, r8d
jne 0x140028abf
cmp r9, 3
jb 0x140028ac3
mov eax, r14d
cmp r9, 3
setne al
test eax, eax
je 0x140028aef
lea rax, [rsp + 0x34]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], r14d
lea r9, [rsp + 0x30]
lea r8, [0x140026d00]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov r10, qword [0x1400894a8]
mov dword [rsp + 0x30], 0xa
lea rcx, [0x140089538]
cmp qword [reloc.OLEAUT32.dll_VariantInit], 8
cmovae rcx, qword [0x140089538]
mov r8, rsi
mov r9, qword [0x140089548]
cmp r9, rsi
cmovb r8, r9
mov rdx, rbx
test r8, r8
je 0x140028b4b
movzx eax, word [rdx]
cmp word [rcx], ax
jne 0x140028b3f
add rcx, 2
add rdx, 2
sub r8, 1
jne 0x140028b27
jmp 0x140028b4b
mov r8d, ebp
cmp word [rcx], ax
cmovb r8d, r15d
jmp 0x140028b4e
mov r8d, r14d
movsxd rax, r8d
test r8d, r8d
jne 0x140028b66
cmp r9, 3
jb 0x140028b6a
mov eax, r14d
cmp r9, 3
setne al
test eax, eax
je 0x140028b96
lea rax, [rsp + 0x34]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], r14d
lea r9, [rsp + 0x30]
lea r8, [0x1400263a0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov r10, qword [0x1400894a8]
mov dword [rsp + 0x30], 0xa
lea rcx, [0x140089510]
mov rdx, rcx
cmp qword [reloc.OLEAUT32.dll_VariantInit], 8
cmovae rdx, qword [0x140089510]
mov r9, rsi
mov r11, qword [0x140089520]
cmp r11, rsi
cmovb r9, r11
mov r8, rbx
test r9, r9
je 0x140028bf6
movzx eax, word [r8]
cmp word [rdx], ax
jne 0x140028bea
add rdx, 2
add r8, 2
sub r9, 1
jne 0x140028bd1
jmp 0x140028bf6
mov r9d, ebp
cmp word [rdx], ax
cmovb r9d, r15d
jmp 0x140028bf9
mov r9d, r14d
movsxd rax, r9d
test r9d, r9d
jne 0x140028c11
cmp r11, 3
jb 0x140028c19
mov eax, r14d
cmp r11, 3
setne al
test eax, eax
je 0x140028cb1
cmp qword [reloc.OLEAUT32.dll_VariantInit], 8
cmovae rcx, qword [0x140089510]
mov r8d, 2
cmp r11, r8
cmovb r8, r11
lea rdx, [0x140074da4]
test r8, r8
je 0x140028c66
movzx eax, word [rdx]
cmp word [rcx], ax
jne 0x140028c5a
add rcx, 2
add rdx, 2
sub r8, 1
jne 0x140028c42
jmp 0x140028c66
mov r8d, ebp
cmp word [rcx], ax
cmovb r8d, r15d
jmp 0x140028c69
mov r8d, r14d
movsxd rax, r8d
test r8d, r8d
jne 0x140028c81
cmp r11, 2
jb 0x140028cb1
mov eax, r14d
cmp r11, 2
setne al
test eax, eax
jne 0x140028cb1
lea rax, [rsp + 0x34]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], r14d
lea r9, [rsp + 0x30]
lea r8, [0x140022550]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov r10, qword [0x1400894a8]
mov dword [rsp + 0x30], 0xa
lea rcx, [0x1400894e8]
cmp qword [reloc.OLEAUT32.dll_VariantInit], 8
cmovae rcx, qword [0x1400894e8]
mov r8, rsi
mov r9, qword [0x1400894f8]
cmp r9, rsi
cmovb r8, r9
mov rdx, rbx
test r8, r8
je 0x140028d14
nop dword [rax]
movzx eax, word [rdx]
cmp word [rcx], ax
jne 0x140028d08
add rcx, 2
add rdx, 2
sub r8, 1
jne 0x140028cf0
jmp 0x140028d14
mov r8d, ebp
cmp word [rcx], ax
cmovb r8d, r15d
jmp 0x140028d17
mov r8d, r14d
movsxd rax, r8d
test r8d, r8d
jne 0x140028d2f
cmp r9, 3
jb 0x140028d33
mov eax, r14d
cmp r9, 3
setne al
test eax, eax
je 0x140028d5f
lea rax, [rsp + 0x34]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], r14d
lea r9, [rsp + 0x30]
lea r8, [0x140022c60]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov r10, qword [0x1400894a8]
mov dword [rsp + 0x30], 0xa
cmp qword [reloc.OLEAUT32.dll_VariantInit], 8
cmovae rdi, qword [0x140089498]
cmp r10, 3
cmovb rsi, r10
test rsi, rsi
je 0x140028da5
movzx eax, word [rbx]
cmp word [rdi], ax
jne 0x140028d9c
add rdi, 2
add rbx, 2
sub rsi, 1
jne 0x140028d84
jmp 0x140028da5
cmp word [rdi], ax
cmovb ebp, r15d
jmp 0x140028da8
mov ebp, r14d
movsxd rax, ebp
test ebp, ebp
jne 0x140028dbf
cmp r10, 3
jb 0x140028dc3
mov eax, r14d
cmp r10, 3
setne al
test eax, eax
je 0x140028de8
lea rax, [rsp + 0x34]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], r14d
lea r9, [rsp + 0x30]
lea r8, [0x140025d60]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov rcx, qword [rsp + 0x300]
xor rcx, rsp
call fcn.140044830
lea r11, [rsp + 0x310]
mov rbx, qword [r11 + 0x20]
mov rbp, qword [r11 + 0x28]
mov rsi, qword [r11 + 0x30]
mov rsp, r11
pop r15
pop r14
pop rdi
ret