Function at 0x1800133c8
Capabilities:
Accept command line arguments
Get common file path
Get hostname
Get session user name

Disassembly:
mov qword [rsp + 0x20], rbx
push rbp
push rsi
push rdi
push r14
push r15
lea rbp, [rsp - 0x6c0]
sub rsp, 0x7c0
mov rax, qword [0x18004a010]
xor rax, rsp
mov qword [rbp + 0x6b0], rax
mov rdi, rcx
mov byte [rdx + 0x24], 0x20
mov rcx, rdx
mov dword [rdx + 0x20], 2
mov rsi, r8
mov rbx, rdx
call fcn.18002092c
lea rdx, [rbp - 0x70]
mov rcx, rdi
call fcn.1800122cc
lea rax, [0x1800427a0]
xor r15d, r15d
cmp qword [rdi + 0x18], r15
lea r9, str.snapshot
lea r8, str._r_n_This__s_was_automatically_generated_r_n_by_BugTrap_for_Win64_x64_on__s_r_n
mov edx, 0x100
cmovne r9, rax
lea rcx, [rbp + 0x4b0]
lea rax, [rbp - 0x70]
mov qword [rsp + 0x20], rax
call fcn.180003f3c
mov rcx, rbx
call fcn.180020978
test eax, eax
je 0x1800134bf
mov eax, dword [rbx]
dec eax
cmp eax, 1
ja 0x1800134bf
mov rcx, rbx
mov dword [rbx + 0x28], r15d
call fcn.180020bd0
test eax, eax
je 0x1800134bf
mov rcx, qword [rbx + 0x38]
lea r8d, [r15 + 4]
lea rdx, [0x180044454]
mov rax, qword [rcx]
call qword [rax + 0x18]
cmp rax, 4
jne 0x1800134bf
lea rdx, [rbp + 0x4b0]
lea rcx, [rbx + 0x30]
call fcn.18001cc98
test al, al
je 0x1800134bf
mov rcx, qword [rbx + 0x38]
lea r8d, [r15 + 3]
lea rdx, [0x18004445c]
mov rax, qword [rcx]
call qword [rax + 0x18]
lea rdx, str.report
mov rcx, rbx
call fcn.1800209ac
cmp dword [rbx], 3
jne 0x180013576
mov rcx, qword [rbx + 0x38]
mov dl, 0x20
mov rax, qword [rcx]
call qword [rax + 0x10]
test al, al
je 0x180013576
lea rdx, str.version
lea rcx, [rbx + 0x30]
call fcn.18001cc98
test al, al
je 0x180013576
mov rcx, qword [rbx + 0x38]
lea rdx, [0x180044450]
mov r8d, 2
mov rax, qword [rcx]
call qword [rax + 0x18]
cmp rax, 2
jne 0x180013576
mov rcx, rbx
mov dword [rbx], 4
call fcn.180020978
test eax, eax
je 0x180013576
cmp dword [rbx], 2
jne 0x180013547
xor r8d, r8d
lea rdx, [0x180042888]
mov rcx, rbx
call fcn.1800207a4
jmp 0x180013557
cmp dword [rbx], 4
jne 0x180013554
mov r8d, 1
jmp 0x180013536
mov eax, r15d
test eax, eax
je 0x180013576
cmp dword [rbx], 4
jne 0x180013576
mov rcx, qword [rbx + 0x38]
mov dl, 0x22
mov rax, qword [rcx]
call qword [rax + 0x10]
test al, al
je 0x180013576
mov dword [rbx], 3
lea r8, str.Win64_x64
mov rcx, rbx
lea rdx, str.platform
call fcn.180020c9c
lea r8, [0x180176fe0]
mov rcx, rbx
lea rdx, str.application
call fcn.180020c9c
lea r8, [0x180176dd0]
mov rcx, rbx
lea rdx, str.version
call fcn.180020c9c
lea rdx, [rsp + 0x30]
mov dword [rsp + 0x30], setsockopt
lea rcx, [rsp + 0x68]
call qword [sym.imp.KERNEL32.dll_GetComputerNameW]
test eax, eax
jne 0x1800135da
mov word [rsp + 0x68], r15w
lea r8, [rsp + 0x68]
mov rcx, rbx
lea rdx, str.computer
call fcn.180020c9c
mov rcx, rbx
call fcn.180012194
lea rdx, [rsp + 0x30]
mov dword [rsp + 0x30], 0x101
lea rcx, [rbp + 0x90]
call qword [sym.imp.ADVAPI32.dll_GetUserNameW]
test eax, eax
jne 0x18001361c
mov word [rbp + 0x90], r15w
lea r8, [rbp + 0x90]
mov rcx, rbx
lea rdx, str.user
call fcn.180020c9c
lea rcx, [rdi + 0x20]
lea rdx, [rsp + 0x38]
call qword [sym.imp.KERNEL32.dll_SystemTimeToFileTime]
mov rcx, qword [rsp + 0x38]
lea rdx, [rbp + 0x10]
mov r9d, 0xa
lea r8d, [r9 + 0x36]
call fcn.1800261b4
lea r8, [rbp + 0x10]
mov rcx, rbx
lea rdx, str.timestamp
call fcn.180020c9c
mov rdx, rbx
mov rcx, rdi
call fcn.180012b9c
mov r8, qword [0x180174e68]
lea rdx, str.usermsg
add r8, 0x10
mov rcx, rbx
call fcn.180020c9c
lea rdx, [rsp + 0x40]
mov word [rsp + 0x40], r15w
mov rcx, rdi
mov qword [rsp + 0x60], r15
call fcn.18000fc3c
lea rdx, str.syserror
mov rcx, rbx
call fcn.1800209ac
lea r8, [rsp + 0x40]
mov rcx, rbx
lea rdx, str.code
call fcn.180020c9c
mov rax, qword [rsp + 0x60]
lea r8, [0x180041418]
test rax, rax
lea rdx, str.description
mov rcx, rbx
cmovne r8, rax
call fcn.180020c9c
mov rcx, rbx
call fcn.180020a74
mov rcx, qword [rsp + 0x60]
test rcx, rcx
je 0x180013706
call qword [sym.imp.KERNEL32.dll_LocalFree]
mov rdx, rbx
mov rcx, rdi
call fcn.180012fac
cmp qword [rdi + 0x18], r15
je 0x180013722
mov rdx, rbx
mov rcx, rdi
call fcn.180012d90
mov rdx, rbx
call fcn.180013060
mov rdx, rbx
call fcn.1800131b0
mov rdx, rbx
call fcn.18001325c
lea rdx, str.threads
mov rcx, rbx
call fcn.1800209ac
cmp qword [rdi + 0x18], r15
je 0x180013772
call qword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
lea rcx, str.interrupted
xor r9d, r9d
mov qword [rsp + 0x20], rcx
mov r8d, eax
mov rcx, rdi
mov rdx, rbx
call fcn.180011a98
test rsi, rsi
je 0x180013785
mov r8, rsi
mov rdx, rbx
mov rcx, rdi
call fcn.180011dcc
mov rcx, rbx
call fcn.180020a74
call qword [sym.imp.KERNEL32.dll_GetCommandLineW]
lea rdx, str.cmdline
mov rcx, rbx
mov r8, rax
call fcn.180020c9c
lea rdx, [rbp + 0x2a0]
mov ecx, 0x104
call qword [sym.imp.KERNEL32.dll_GetCurrentDirectoryW]
test eax, eax
jne 0x1800137c3
mov word [rbp + 0x2a0], r15w
lea r8, [rbp + 0x2a0]
mov rcx, rbx
lea rdx, str.curdir
call fcn.180020c9c
mov rcx, rbx
call fcn.180011220
test rsi, rsi
je 0x1800137f1
mov r8, rsi
mov rdx, rbx
call fcn.1800117c0
mov rcx, rbx
call fcn.180020a74
mov rcx, rbx
call fcn.180020c4c
mov rcx, qword [rbp + 0x6b0]
xor rcx, rsp
call fcn.180021cb0
mov rbx, qword [rsp + 0x808]
add rsp, 0x7c0
pop r15
pop r14
pop rdi
pop rsi
pop rbp
ret