Function at 0x1617fe9d6a0
Capabilities:
Get hostname
Get session user name
Send data
Send data on socket

Disassembly:
mov qword [rsp + 0x20], rbx
push rbp
push rsi
push rdi
push r12
push r15
lea rbp, [rsp - 0x190]
sub rsp, 0x290
mov rax, qword [0x1617fefd018]
xor rax, rsp
mov qword [rbp + 0x180], rax
mov r15, rcx
mov ecx, 0x104
call fcn.1617feaa3b4
mov ecx, 1
mov rdi, rax
call qword [sym.imp.WS2_32.dll_htonl]
mov r12, 0xffffffffffffffff
mov dword [rsp + 0x40], eax
mov rdx, r12
lea r8, [0x1617ff023b0]
nop dword [rax]
inc rdx
cmp byte [r8 + rdx], 0
jne 0x1617fe9d700
xor esi, esi
test edx, edx
je 0x1617fe9d754
movzx eax, byte [0x1617ff023b0]
xor byte [rsp + 0x40], al
mov eax, esi
cmp edx, 1
setne al
mov ecx, eax
movzx eax, byte [rcx + r8]
xor byte [rsp + 0x41], al
mov eax, esi
inc ecx
cmp ecx, edx
cmovne eax, ecx
mov ecx, eax
movzx eax, byte [rax + r8]
xor byte [rsp + 0x42], al
mov eax, esi
inc ecx
cmp ecx, edx
cmovne eax, ecx
movzx eax, byte [rax + r8]
xor byte [rsp + 0x43], al
mov qword [rsp + 0x2c8], r13
mov ebx, esi
mov qword [rsp + 0x2d0], r14
nop word [rax + rax]
mov rcx, qword [r15 + 0x80090]
lea rdx, [rsp + 0x40]
mov r8d, 4
mov eax, ebx
sub r8d, ebx
add rdx, rax
xor r9d, r9d
call qword [sym.imp.WS2_32.dll_send]
cmp eax, 0xffffffff
je 0x1617fe9ddef
add ebx, eax
cmp ebx, 4
jb 0x1617fe9d770
xor edx, edx
mov r8d, 0x104
mov rcx, rdi
call fcn.1617fec85a0
mov rcx, rdi
call fcn.1617fe91070
mov r14, r12
nop
inc r14
cmp byte [rdi + r14], sil
jne 0x1617fe9d7c0
lea r13d, [r14 + 4]
mov ecx, r13d
call fcn.1617feaa3b4
mov r8d, r13d
xor edx, edx
mov rcx, rax
mov qword [rsp + 0x48], rax
call fcn.1617fec85a0
mov r9, qword [rsp + 0x48]
mov r8, rdi
mov edx, r14d
call fcn.1617fe9d580
mov ebx, esi
test r13d, r13d
je 0x1617fe9d82d
nop
mov rcx, qword [r15 + 0x80090]
mov r8d, r13d
mov edx, ebx
sub r8d, ebx
add rdx, qword [rsp + 0x48]
xor r9d, r9d
call qword [sym.imp.WS2_32.dll_send]
cmp eax, 0xffffffff
je 0x1617fe9de2f
add ebx, eax
cmp ebx, r13d
jb 0x1617fe9d800
mov rcx, qword [rsp + 0x48]
call fcn.1617feaa344
xor edx, edx
mov r8d, 0x104
mov rcx, rdi
call fcn.1617fec85a0
mov ecx, esi
lea r8, [0x1617fefdc60]
cmp byte [0x1617fefdc60], cl
je 0x1617fe9d86b
mov rax, r8
nop dword [rax + rax]
inc ecx
lea rax, [rax + 1]
cmp byte [rax], sil
jne 0x1617fe9d860
inc ecx
movsxd rdx, ecx
add rdx, r8
cmp byte [rdx], sil
je 0x1617fe9d88b
nop dword [rax + rax]
inc ecx
lea rdx, [rdx + 1]
cmp byte [rdx], sil
jne 0x1617fe9d880
inc ecx
movsxd rdx, ecx
add rdx, r8
cmp byte [rdx], sil
je 0x1617fe9d8ab
nop dword [rax + rax]
inc ecx
lea rdx, [rdx + 1]
cmp byte [rdx], sil
jne 0x1617fe9d8a0
inc ecx
movsxd rcx, ecx
add rcx, r8
call fcn.1617fecf7e4
xor ecx, ecx
mov dword [rsp + 0x48], ecx
mov word [rsp + 0x4c], cx
cmp eax, 0xffff
jge 0x1617fe9d8e1
lea edx, [rcx + 6]
mov r9d, eax
lea rcx, [rsp + 0x48]
lea r8, [0x1617fef1ca4]
call fcn.1617fe9a8a0
lea rcx, [rsp + 0x48]
mov rax, r12
nop dword [rax]
inc rax
cmp byte [rcx + rax], sil
jne 0x1617fe9d8f0
movsxd r8, eax
lea rdx, [rsp + 0x48]
mov rcx, rdi
call fcn.1617fec8190
mov r14, r12
nop dword [rax]
inc r14
cmp byte [rdi + r14], sil
jne 0x1617fe9d910
lea r13d, [r14 + 4]
mov ecx, r13d
call fcn.1617feaa3b4
mov r8d, r13d
xor edx, edx
mov rcx, rax
mov qword [rsp + 0x48], rax
call fcn.1617fec85a0
mov r9, qword [rsp + 0x48]
mov r8, rdi
mov edx, r14d
call fcn.1617fe9d580
mov ebx, esi
test r13d, r13d
je 0x1617fe9d97d
nop
mov rcx, qword [r15 + 0x80090]
mov r8d, r13d
mov edx, ebx
sub r8d, ebx
add rdx, qword [rsp + 0x48]
xor r9d, r9d
call qword [sym.imp.WS2_32.dll_send]
cmp eax, 0xffffffff
je 0x1617fe9de2f
add ebx, eax
cmp ebx, r13d
jb 0x1617fe9d950
mov rcx, qword [rsp + 0x48]
call fcn.1617feaa344
xor edx, edx
mov r8d, 0x104
mov rcx, rdi
call fcn.1617fec85a0
mov edx, 0x104
mov rcx, rdi
call fcn.1617fe91410
mov r14, r12
inc r14
cmp byte [rdi + r14], sil
jne 0x1617fe9d9a7
lea r13d, [r14 + 4]
mov ecx, r13d
call fcn.1617feaa3b4
mov r8d, r13d
xor edx, edx
mov rcx, rax
mov qword [rsp + 0x48], rax
call fcn.1617fec85a0
mov r9, qword [rsp + 0x48]
mov r8, rdi
mov edx, r14d
call fcn.1617fe9d580
mov ebx, esi
test r13d, r13d
je 0x1617fe9da1d
nop word [rax + rax]
mov rcx, qword [r15 + 0x80090]
mov r8d, r13d
mov edx, ebx
sub r8d, ebx
add rdx, qword [rsp + 0x48]
xor r9d, r9d
call qword [sym.imp.WS2_32.dll_send]
cmp eax, 0xffffffff
je 0x1617fe9de2f
add ebx, eax
cmp ebx, r13d
jb 0x1617fe9d9f0
mov rcx, qword [rsp + 0x48]
call fcn.1617feaa344
xor edx, edx
mov r8d, 0x104
mov rcx, rdi
call fcn.1617fec85a0
lea r8, [0x1617fefdc60]
mov edx, 0x104
mov rcx, rdi
call fcn.1617fecdd20
mov r14, r12
nop
inc r14
cmp byte [rdi + r14], sil
jne 0x1617fe9da50
lea r13d, [r14 + 4]
mov ecx, r13d
call fcn.1617feaa3b4
mov r8d, r13d
xor edx, edx
mov rcx, rax
mov qword [rsp + 0x48], rax
call fcn.1617fec85a0
mov r9, qword [rsp + 0x48]
mov r8, rdi
mov edx, r14d
call fcn.1617fe9d580
mov ebx, esi
test r13d, r13d
je 0x1617fe9dabd
nop
mov rcx, qword [r15 + 0x80090]
mov r8d, r13d
mov edx, ebx
sub r8d, ebx
add rdx, qword [rsp + 0x48]
xor r9d, r9d
call qword [sym.imp.WS2_32.dll_send]
cmp eax, 0xffffffff
je 0x1617fe9de2f
add ebx, eax
cmp ebx, r13d
jb 0x1617fe9da90
mov rcx, qword [rsp + 0x48]
call fcn.1617feaa344
xor edx, edx
mov r8d, 0x104
mov rcx, rdi
call fcn.1617fec85a0
lea rdx, [rsp + 0x48]
mov dword [rsp + 0x48], 0x101
lea rcx, [rsp + 0x70]
call qword [sym.imp.ADVAPI32.dll_GetUserNameW]
test eax, eax
je 0x1617fe9db43
mov qword [rsp + 0x38], rsi
lea r8, [rsp + 0x70]
mov qword [rsp + 0x30], rsi
mov r9d, r12d
mov dword [rsp + 0x28], esi
xor edx, edx
mov ecx, 0xfde9
mov qword [rsp + 0x20], rsi
call qword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov qword [rsp + 0x38], rsi
lea r8, [rsp + 0x70]
mov qword [rsp + 0x30], rsi
mov r9d, r12d
mov dword [rsp + 0x28], eax
xor edx, edx
mov ecx, 0xfde9
mov qword [rsp + 0x20], rdi
call qword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov r14, r12
inc r14
cmp byte [rdi + r14], sil
jne 0x1617fe9db46
lea r13d, [r14 + 4]
mov ecx, r13d
call fcn.1617feaa3b4
mov r8d, r13d
xor edx, edx
mov rcx, rax
mov qword [rsp + 0x48], rax
call fcn.1617fec85a0
mov r9, qword [rsp + 0x48]
mov r8, rdi
mov edx, r14d
call fcn.1617fe9d580
mov ebx, esi
test r13d, r13d
je 0x1617fe9dbbd
nop dword [rax]
nop dword [rax + rax]
mov rcx, qword [r15 + 0x80090]
mov r8d, r13d
mov edx, ebx
sub r8d, ebx
add rdx, qword [rsp + 0x48]
xor r9d, r9d
call qword [sym.imp.WS2_32.dll_send]
cmp eax, 0xffffffff
je 0x1617fe9de2f
add ebx, eax
cmp ebx, r13d
jb 0x1617fe9db90
mov rcx, qword [rsp + 0x48]
call fcn.1617feaa344
xor edx, edx
mov r8d, 0x104
mov rcx, rdi
call fcn.1617fec85a0
mov rcx, rdi
call fcn.1617fe99730
mov r14, r12
inc r14
cmp byte [rdi + r14], sil
jne 0x1617fe9dbe2
lea r13d, [r14 + 4]
mov ecx, r13d
call fcn.1617feaa3b4
mov r8d, r13d
xor edx, edx
mov rcx, rax
mov qword [rsp + 0x48], rax
call fcn.1617fec85a0
mov r9, qword [rsp + 0x48]
mov r8, rdi
mov edx, r14d
call fcn.1617fe9d580
mov ebx, esi
test r13d, r13d
je 0x1617fe9dc4d
mov rcx, qword [r15 + 0x80090]
mov r8d, r13d
mov edx, ebx
sub r8d, ebx
add rdx, qword [rsp + 0x48]
xor r9d, r9d
call qword [sym.imp.WS2_32.dll_send]
cmp eax, 0xffffffff
je 0x1617fe9de2f
add ebx, eax
cmp ebx, r13d
jb 0x1617fe9dc20
mov rcx, qword [rsp + 0x48]
call fcn.1617feaa344
xor edx, edx
mov r8d, 0x104
mov rcx, rdi
call fcn.1617fec85a0
xor eax, eax
mov dword [rsp + 0x50], 0x20
xorps xmm0, xmm0
mov qword [rsp + 0x64], rax
lea rdx, [rsp + 0x48]
mov dword [rsp + 0x6c], eax
lea rcx, [rsp + 0x50]
mov dword [rsp + 0x48], 0x10
movups xmmword [rsp + 0x54], xmm0
call qword [sym.imp.KERNEL32.dll_GetComputerNameW]
test eax, eax
je 0x1617fe9dcee
mov qword [rsp + 0x38], rsi
lea r8, [rsp + 0x50]
mov qword [rsp + 0x30], rsi
mov r9d, r12d
mov dword [rsp + 0x28], esi
xor edx, edx
mov ecx, 0xfde9
mov qword [rsp + 0x20], rsi
call qword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov qword [rsp + 0x38], rsi
lea r8, [rsp + 0x50]
mov qword [rsp + 0x30], rsi
mov r9d, r12d
mov dword [rsp + 0x28], eax
xor edx, edx
mov ecx, 0xfde9
mov qword [rsp + 0x20], rdi
call qword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov r14, r12
inc r14
cmp byte [rdi + r14], sil
jne 0x1617fe9dcf1
lea r13d, [r14 + 4]
mov ecx, r13d
call fcn.1617feaa3b4
mov r8d, r13d
xor edx, edx
mov rcx, rax
mov qword [rsp + 0x48], rax
call fcn.1617fec85a0
mov r9, qword [rsp + 0x48]
mov r8, rdi
mov edx, r14d
call fcn.1617fe9d580
mov ebx, esi
test r13d, r13d
je 0x1617fe9dd5d
nop
mov rcx, qword [r15 + 0x80090]
mov r8d, r13d
mov edx, ebx
sub r8d, ebx
add rdx, qword [rsp + 0x48]
xor r9d, r9d
call qword [sym.imp.WS2_32.dll_send]
cmp eax, 0xffffffff
je 0x1617fe9de2f
add ebx, eax
cmp ebx, r13d
jb 0x1617fe9dd30
mov rcx, qword [rsp + 0x48]
call fcn.1617feaa344
xor edx, edx
mov r8d, 0x104
mov rcx, rdi
call fcn.1617fec85a0
mov rcx, rdi
call fcn.1617fe9a2c0
nop
inc r12
cmp byte [rdi + r12], sil
jne 0x1617fe9dd80
lea r14d, [r12 + 4]
mov ecx, r14d
call fcn.1617feaa3b4
mov r8d, r14d
xor edx, edx
mov rcx, rax
mov r13, rax
call fcn.1617fec85a0
mov r9, r13
mov r8, rdi
mov edx, r12d
call fcn.1617fe9d580
test r14d, r14d
je 0x1617fe9dde7
nop dword [rax]
mov rcx, qword [r15 + 0x80090]
mov r8d, r14d
mov edx, esi
sub r8d, esi
add rdx, r13
xor r9d, r9d
call qword [sym.imp.WS2_32.dll_send]
cmp eax, 0xffffffff
je 0x1617fe9de2f
add esi, eax
cmp esi, r14d
jb 0x1617fe9ddc0
mov rcx, r13
call fcn.1617feaa344
mov rcx, rdi
call fcn.1617feaa344
mov al, 1
mov r14, qword [rsp + 0x2d0]
mov r13, qword [rsp + 0x2c8]
mov rcx, qword [rbp + 0x180]
xor rcx, rsp
call fcn.1617feaa320
mov rbx, qword [rsp + 0x2d8]
add rsp, 0x290
pop r15
pop r12
pop rdi
pop rsi
pop rbp
ret
xor al, al
jmp 0x1617fe9ddf9