Function at 0x1400c6754
Capabilities:
Get hostname
Get session user name
Query environment variable

Disassembly:
jmp 0x1400e88a0
push rbp
push rdi
sub rsp, 0x958
lea rbp, [rsp + 0x30]
lea rdi, [rsp + 0x30]
mov ecx, 0x18a
mov eax, 0xcccccccc
rep stosd dword [rdi], eax
mov rax, qword [0x1402ad140]
xor rax, rbp
mov qword [rbp + 0x918], rax
lea rcx, [0x1402ca107]
call fcn.1400c75eb
mov dword [rbp + 0x34], 0x10
lea rdx, [rbp + 0x34]
lea rcx, [rbp + 8]
call qword [sym.imp.KERNEL32.dll_GetComputerNameA]
test eax, eax
jne 0x1400e8922
lea rdx, str.Error_getting_computer_name.
lea rcx, [0x1402b01f0]
call fcn.1400c296a
lea rdx, [0x1400c2361]
mov rcx, rax
call fcn.1400c4bed
mov eax, 1
jmp 0x1400e8d18
mov dword [rbp + 0x74], 4
lea rdx, [rbp + 0x74]
xor ecx, ecx
call qword [sym.imp.IPHLPAPI.DLL_GetAdaptersInfo]
cmp eax, 0x6f
jne 0x1400e89ac
mov eax, dword [rbp + 0x74]
mov ecx, eax
call fcn.1400c52ff
mov qword [rbp + 0x98], rax
lea rdx, [rbp + 0x74]
mov rcx, qword [rbp + 0x98]
call qword [sym.imp.IPHLPAPI.DLL_GetAdaptersInfo]
test eax, eax
jne 0x1400e897e
mov rax, qword [rbp + 0x98]
mov eax, dword [rax + 0x1c0]
mov dword [rbp + 0x54], eax
mov rcx, qword [rbp + 0x98]
call fcn.1400c3e87
jmp 0x1400e89aa
lea rdx, str.Error_getting_IP_address.
lea rcx, [0x1402b01f0]
call fcn.1400c296a
lea rdx, [0x1400c2361]
mov rcx, rax
call fcn.1400c4bed
mov eax, 1
jmp 0x1400e8d18
jmp 0x1400e89d8
lea rdx, str.Error_getting_IP_address.
lea rcx, [0x1402b01f0]
call fcn.1400c296a
lea rdx, [0x1400c2361]
mov rcx, rax
call fcn.1400c4bed
mov eax, 1
jmp 0x1400e8d18
mov r8d, 0x94
xor edx, edx
lea rcx, [rbp + 0xc0]
call fcn.1400c6029
mov dword [rbp + 0xc0], 0x94
lea rcx, [rbp + 0xc0]
call qword [sym.imp.KERNEL32.dll_GetVersionExA]
test eax, eax
jne 0x1400e8a33
lea rdx, str.Error_getting_operating_system_version.
lea rcx, [0x1402b01f0]
call fcn.1400c296a
lea rdx, [0x1400c2361]
mov rcx, rax
call fcn.1400c4bed
mov eax, 1
jmp 0x1400e8d18
mov dword [rbp + 0x2a4], 0x101
lea rdx, [rbp + 0x2a4]
lea rcx, [rbp + 0x180]
call qword [sym.imp.ADVAPI32.dll_GetUserNameA]
test eax, eax
jne 0x1400e8a81
lea rdx, str.Error_getting_user_name.
lea rcx, [0x1402b01f0]
call fcn.1400c296a
lea rdx, [0x1400c2361]
mov rcx, rax
call fcn.1400c4bed
mov eax, 1
jmp 0x1400e8d18
mov eax, dword [rbp + 0x54]
mov dword [rbp + 0x2c4], eax
mov ecx, dword [rbp + 0x2c4]
call fcn.1400c4c88
mov qword [rbp + 0x2e8], rax
lea rcx, [0x1402afaf0]
call fcn.1400c27f8
mov r8d, 0x104
lea rdx, [rbp + 0x310]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetEnvironmentVariableA]
lea rcx, [rbp + 0x438]
call fcn.1400c7582
nop
lea rdx, [rbp + 0x310]
lea rcx, [rbp + 0x438]
call fcn.1400c2334
lea rdx, str.TestLog_
lea rcx, [rbp + 0x438]
call fcn.1400c26bd
lea rdx, [rbp + 8]
lea rcx, [rbp + 0x438]
call fcn.1400c26bd
lea rdx, str..txt
lea rcx, [rbp + 0x438]
call fcn.1400c26bd
lea rcx, [rbp + 0x438]
call fcn.1400c27f8
mov qword [rbp + 0x478], rax
mov rdx, qword [rbp + 0x478]
lea rcx, [rbp + 0x498]
call fcn.1400c472e
nop
mov edx, pe_nt_image_headers64
lea rcx, [rbp + 0x4e0]
call fcn.1400c4233
mov dword [rsp + 0x20], 1
mov r9d, 0x40
mov r8d, 2
lea rdx, [rbp + 0x498]
lea rcx, [rbp + 0x4e0]
call fcn.1400c77a3
nop
lea rcx, [rbp + 0x4e0]
call fcn.1400c5aac
movzx eax, al
test eax, eax
je 0x1400e8c98
lea rdx, str.Computer_Name:
lea rcx, [rbp + 0x4e0]
call fcn.1400c296a
lea rdx, [rbp + 8]
mov rcx, rax
call fcn.1400c296a
lea rdx, [0x1400c2361]
mov rcx, rax
call fcn.1400c4bed
lea rdx, str.IP_Address:
lea rcx, [rbp + 0x4e0]
call fcn.1400c296a
mov rdx, qword [rbp + 0x2e8]
mov rcx, rax
call fcn.1400c296a
lea rdx, [0x1400c2361]
mov rcx, rax
call fcn.1400c4bed
lea rdx, str.User_Name:
lea rcx, [rbp + 0x4e0]
call fcn.1400c296a
lea rdx, [rbp + 0x180]
mov rcx, rax
call fcn.1400c296a
lea rdx, [0x1400c2361]
mov rcx, rax
call fcn.1400c4bed
lea rdx, str.Operating_System_Version:
lea rcx, [rbp + 0x4e0]
call fcn.1400c296a
mov edx, dword [rbp + 0xc4]
mov rcx, rax
call fcn.1400c3f95
lea rdx, [0x140260d0c]
mov rcx, rax
call fcn.1400c296a
mov edx, dword [rbp + 0xc8]
mov rcx, rax
call fcn.1400c3f95
lea rdx, [0x1400c2361]
mov rcx, rax
call fcn.1400c4bed
lea rcx, [rbp + 0x4e0]
call fcn.1400c4c2e
lea rdx, str.Computer_information_written_to_computer_info.txt
lea rcx, [0x1402b00a0]
call fcn.1400c296a
lea rdx, [0x1400c2361]
mov rcx, rax
call fcn.1400c4bed
jmp 0x1400e8cf2
lea rdx, str.Error_opening_the_file.
lea rcx, [0x1402b01f0]
call fcn.1400c296a
lea rdx, [0x1400c2361]
mov rcx, rax
call fcn.1400c4bed
mov dword [rbp + 0x904], 1
lea rcx, [rbp + 0x4e0]
call fcn.1400c3545
nop
lea rcx, [rbp + 0x498]
call fcn.1400c3009
nop
lea rcx, [rbp + 0x438]
call fcn.1400c3009
mov eax, dword [rbp + 0x904]
jmp 0x1400e8d18
lea rcx, [rbp + 0x4e0]
call fcn.1400c3545
nop
lea rcx, [rbp + 0x498]
call fcn.1400c3009
nop
lea rcx, [rbp + 0x438]
call fcn.1400c3009
mov rdi, rax
lea rcx, [rbp - 0x30]
lea rdx, [0x14025e930]
call fcn.1400c6713
mov rax, rdi
mov rcx, qword [rbp + 0x918]
xor rcx, rbp
call fcn.1400c498b
lea rsp, [rbp + 0x928]
pop rdi
pop rbp
ret