Function at 0x180011834
Capabilities:
Get hostname
Get session user name
Query environment variable

Disassembly:
jmp 0x18001e160
push rbp
push rdi
sub rsp, 0x958
lea rbp, [rsp + 0x30]
lea rdi, [rsp + 0x30]
mov ecx, 0x18a
mov eax, 0xcccccccc
rep stosd dword [rdi], eax
mov rax, qword [0x180034040]
xor rax, rbp
mov qword [rbp + 0x918], rax
lea rcx, [0x18003e107]
call fcn.1800119ba
mov dword [rbp + 0x34], 0x10
lea rdx, [rbp + 0x34]
lea rcx, [rbp + 8]
call qword [sym.imp.KERNEL32.dll_GetComputerNameA]
test eax, eax
jne 0x18001e1e3
lea rdx, str.Error_getting_computer_name.
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.18001112c
lea rdx, [0x180011069]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov eax, 1
jmp 0x18001e5e7
mov dword [rbp + 0x74], 4
lea rdx, [rbp + 0x74]
xor ecx, ecx
call qword [sym.imp.IPHLPAPI.DLL_GetAdaptersInfo]
cmp eax, 0x6f
jne 0x18001e270
mov eax, dword [rbp + 0x74]
mov ecx, eax
call qword [sym.imp.ucrtbased.dll_malloc]
mov qword [rbp + 0x98], rax
lea rdx, [rbp + 0x74]
mov rcx, qword [rbp + 0x98]
call qword [sym.imp.IPHLPAPI.DLL_GetAdaptersInfo]
test eax, eax
jne 0x18001e241
mov rax, qword [rbp + 0x98]
mov eax, dword [rax + 0x1c0]
mov dword [rbp + 0x54], eax
mov rcx, qword [rbp + 0x98]
call qword [sym.imp.ucrtbased.dll_free]
jmp 0x18001e26e
lea rdx, str.Error_getting_IP_address.
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.18001112c
lea rdx, [0x180011069]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov eax, 1
jmp 0x18001e5e7
jmp 0x18001e29d
lea rdx, str.Error_getting_IP_address.
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.18001112c
lea rdx, [0x180011069]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov eax, 1
jmp 0x18001e5e7
mov r8d, 0x94
xor edx, edx
lea rcx, [rbp + 0xc0]
call fcn.180011785
mov dword [rbp + 0xc0], 0x94
lea rcx, [rbp + 0xc0]
call qword [sym.imp.KERNEL32.dll_GetVersionExA]
test eax, eax
jne 0x18001e2f9
lea rdx, str.Error_getting_operating_system_version.
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.18001112c
lea rdx, [0x180011069]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov eax, 1
jmp 0x18001e5e7
mov dword [rbp + 0x2a4], 0x101
lea rdx, [rbp + 0x2a4]
lea rcx, [rbp + 0x180]
call qword [sym.imp.ADVAPI32.dll_GetUserNameA]
test eax, eax
jne 0x18001e348
lea rdx, str.Error_getting_user_name.
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.18001112c
lea rdx, [0x180011069]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov eax, 1
jmp 0x18001e5e7
mov eax, dword [rbp + 0x54]
mov dword [rbp + 0x2c4], eax
mov ecx, dword [rbp + 0x2c4]
call fcn.180011541
mov qword [rbp + 0x2e8], rax
lea rcx, [0x180034800]
call fcn.1800110ff
mov r8d, 0x104
lea rdx, [rbp + 0x310]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetEnvironmentVariableA]
lea rcx, [rbp + 0x438]
call fcn.1800119a6
nop
lea rdx, [rbp + 0x310]
lea rcx, [rbp + 0x438]
call fcn.18001105a
lea rdx, str.TestLog_
lea rcx, [rbp + 0x438]
call fcn.1800110cd
lea rdx, [rbp + 8]
lea rcx, [rbp + 0x438]
call fcn.1800110cd
lea rdx, str..txt
lea rcx, [rbp + 0x438]
call fcn.1800110cd
lea rcx, [rbp + 0x438]
call fcn.1800110ff
mov qword [rbp + 0x478], rax
mov rdx, qword [rbp + 0x478]
lea rcx, [rbp + 0x498]
call fcn.18001146a
nop
mov edx, 0x108
lea rcx, [rbp + 0x4e0]
call fcn.1800113e3
mov dword [rsp + 0x20], 1
mov r9d, 0x40
mov r8d, 2
lea rdx, [rbp + 0x498]
lea rcx, [rbp + 0x4e0]
call fcn.1800119f1
nop
lea rcx, [rbp + 0x4e0]
call fcn.1800116e5
movzx eax, al
test eax, eax
je 0x18001e566
lea rdx, str.Computer_Name:
lea rcx, [rbp + 0x4e0]
call fcn.18001112c
lea rdx, [rbp + 8]
mov rcx, rax
call fcn.18001112c
lea rdx, [0x180011069]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str.IP_Address:
lea rcx, [rbp + 0x4e0]
call fcn.18001112c
mov rdx, qword [rbp + 0x2e8]
mov rcx, rax
call fcn.18001112c
lea rdx, [0x180011069]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str.User_Name:
lea rcx, [rbp + 0x4e0]
call fcn.18001112c
lea rdx, [rbp + 0x180]
mov rcx, rax
call fcn.18001112c
lea rdx, [0x180011069]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str.Operating_System_Version:
lea rcx, [rbp + 0x4e0]
call fcn.18001112c
mov edx, dword [rbp + 0xc4]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int____ptr64]
lea rdx, [0x18002e9ac]
mov rcx, rax
call fcn.18001112c
mov edx, dword [rbp + 0xc8]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int____ptr64]
lea rdx, [0x180011069]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rbp + 0x4e0]
call fcn.18001152d
lea rdx, str.Computer_information_written_to_computer_info.txt
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.18001112c
lea rdx, [0x180011069]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
jmp 0x18001e5c1
lea rdx, str.Error_opening_the_file.
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.18001112c
lea rdx, [0x180011069]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov dword [rbp + 0x904], 1
lea rcx, [rbp + 0x4e0]
call fcn.180011280
nop
lea rcx, [rbp + 0x498]
call fcn.1800111db
nop
lea rcx, [rbp + 0x438]
call fcn.1800111db
mov eax, dword [rbp + 0x904]
jmp 0x18001e5e7
lea rcx, [rbp + 0x4e0]
call fcn.180011280
nop
lea rcx, [rbp + 0x498]
call fcn.1800111db
nop
lea rcx, [rbp + 0x438]
call fcn.1800111db
mov rdi, rax
lea rcx, [rbp - 0x30]
lea rdx, [0x18002d7c0]
call fcn.18001182f
mov rax, rdi
mov rcx, qword [rbp + 0x918]
xor rcx, rbp
call fcn.1800114c4
lea rsp, [rbp + 0x928]
pop rdi
pop rbp
ret