Function at 0x1400d3340
Capabilities:
Get hostname
Get session user name

Disassembly:
mov r11, rsp
mov qword [r11 + 0x10], rbx
mov qword [r11 + 0x18], rsi
mov qword [r11 + 0x20], rdi
push r13
push r14
push r15
sub rsp, 0x240
mov rax, qword [0x140546618]
xor rax, rsp
mov qword [rsp + 0x230], rax
mov rsi, rcx
mov r13, rcx
mov qword [rsp + 0x38], rcx
mov rdx, qword [rcx + 0x148]
mov rax, qword [rdx + 0x30]
mov rcx, qword [rax + 0x10]
mov rax, qword [rcx + 8]
mov r15d, dword [rax + 0xc]
mov dword [rsp + 0x30], r15d
cmp byte [rdx + 0x2e8], 0
je 0x1400d3992
mov byte [rdx + 0x2e8], 0
mov rdx, qword [r13 + 0x148]
mov rax, qword [rdx + 0x30]
mov rcx, qword [rax + 0x10]
mov rax, qword [rcx + 8]
mov rcx, qword [rax + 0x188]
mov eax, dword [rcx + 0x70]
mov dword [rdx + 0x444], eax
mov dword [rsp + 0x20], 0x10
lea rdx, [rsp + 0x20]
lea rcx, [r11 - 0x48]
call qword [sym.imp.KERNEL32.dll_GetComputerNameW]
lea rdx, [rsp + 0x210]
lea rcx, [rsp + 0x168]
call fcn.140008d60
nop
lea rdx, [rsp + 0x168]
cmp qword [rsp + 0x180], 8
cmovae rdx, qword [rsp + 0x168]
mov rax, qword [rsp + 0x178]
lea rdi, [rdx + rax*2]
lea rbx, [rsp + 0x168]
cmovae rbx, qword [rsp + 0x168]
xor r14d, r14d
mov qword [rsp + 0x138], r14
mov qword [rsp + 0x140], 0xf
mov byte [rsp + 0x128], r14b
mov rdx, rdi
sub rdx, rbx
sar rdx, 1
lea rcx, [rsp + 0x128]
call fcn.140042000
mov r8, rdi
mov rdx, rbx
lea rcx, [rsp + 0x128]
call fcn.140042180
nop
mov rcx, qword [r13 + 0x148]
add rcx, 0x358
lea rax, [rsp + 0x128]
cmp rcx, rax
je 0x1400d34bb
lea rdx, [rsp + 0x128]
cmp qword [rsp + 0x140], 0x10
cmovae rdx, qword [rsp + 0x128]
mov r8, qword [rsp + 0x138]
call fcn.140005ff0
lea rdx, [rsp + 0x20]
lea rcx, [rsp + 0x210]
call qword [sym.imp.ADVAPI32.dll_GetUserNameW]
lea rdx, [rsp + 0x210]
lea rcx, [rsp + 0x148]
call fcn.140008d60
nop
lea rdx, [rsp + 0x148]
cmp qword [rsp + 0x160], 8
cmovae rdx, qword [rsp + 0x148]
mov rax, qword [rsp + 0x158]
lea rdi, [rdx + rax*2]
lea rbx, [rsp + 0x148]
cmovae rbx, qword [rsp + 0x148]
mov qword [rsp + 0x118], r14
mov qword [rsp + 0x120], 0xf
mov byte [rsp + 0x108], 0
mov rdx, rdi
sub rdx, rbx
sar rdx, 1
lea rcx, [rsp + 0x108]
call fcn.140042000
mov r8, rdi
mov rdx, rbx
lea rcx, [rsp + 0x108]
call fcn.140042180
nop
mov rcx, qword [rsi + 0x148]
add rcx, 0x378
lea rax, [rsp + 0x108]
cmp rcx, rax
je 0x1400d35a3
lea rdx, [rsp + 0x108]
cmp qword [rsp + 0x120], 0x10
cmovae rdx, qword [rsp + 0x108]
mov r8, qword [rsp + 0x118]
call fcn.140005ff0
xor ecx, ecx
call fcn.14039b4e0
mov rcx, rax
call fcn.140399768
mov rdx, qword [rsi + 0x148]
mov rax, qword [rdx + 0x30]
mov rcx, qword [rax + 0x10]
mov rax, qword [rcx + 8]
mov rcx, qword [rax + 0x10]
lea rdi, [0x14045aac0]
mov rax, rdi
test rcx, rcx
cmovne rax, rcx
lea rcx, [rdx + 0x318]
mov rbx, 0xffffffffffffffff
mov r8, rbx
nop dword [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x1400d35f0
mov rdx, rax
call fcn.140005ff0
mov rdx, qword [rsi + 0x148]
mov rax, qword [rdx + 0x30]
mov rcx, qword [rax + 0x10]
mov rax, qword [rcx + 8]
mov rcx, qword [rax + 0x20]
mov rax, rdi
test rcx, rcx
cmovne rax, rcx
lea rcx, [rdx + 0x338]
mov r8, rbx
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x1400d3630
mov rdx, rax
call fcn.140005ff0
mov rdx, qword [rsi + 0x148]
mov rax, qword [rdx + 0x30]
mov rcx, qword [rax + 0x10]
mov rax, qword [rcx + 8]
mov rcx, qword [rax + 0x30]
mov rax, rdi
test rcx, rcx
cmovne rax, rcx
lea rcx, [rdx + 0x3f8]
mov r8, rbx
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x1400d3670
mov rdx, rax
call fcn.140005ff0
mov rdx, qword [rsi + 0x148]
mov rax, qword [rdx + 0x30]
mov rcx, qword [rax + 0x10]
mov rax, qword [rcx + 8]
mov rcx, qword [rax + 0x40]
test rcx, rcx
cmovne rdi, rcx
lea rcx, [rdx + 0x418]
inc rbx
cmp byte [rdi + rbx], 0
jne 0x1400d36a7
mov r8, rbx
mov rdx, rdi
call fcn.140005ff0
mov rdx, qword [rsi + 0x148]
add rdx, 0x318
lea rcx, [rsp + 0x88]
call fcn.140018d70
mov rdx, qword [rsi + 0x148]
add rdx, 0x5f8
mov rcx, rax
call fcn.1400d1070
mov rcx, rsi
call fcn.1400d4200
mov rdx, qword [rsi + 0x148]
add rdx, 0x338
lea rcx, [rsp + 0xa8]
call fcn.140018d70
mov rdx, qword [rsi + 0x148]
add rdx, 0x610
mov rcx, rax
call fcn.1400d1070
mov rdx, qword [rsi + 0x148]
add rdx, 0x3f8
lea rcx, [rsp + 0xc8]
call fcn.140018d70
mov rdx, qword [rsi + 0x148]
add rdx, 0x5c8
mov rcx, rax
call fcn.1400d1070
mov rdx, qword [rsi + 0x148]
add rdx, 0x418
lea rcx, [rsp + 0xe8]
call fcn.140018d70
mov rdx, qword [rsi + 0x148]
add rdx, 0x5e0
mov rcx, rax
call fcn.1400d1070
mov rcx, rsi
call fcn.1400d1260
lea rdx, [rsp + 0x188]
mov rcx, rsi
call fcn.1400d1f10
mov rbx, rax
mov rdi, qword [rsi + 0x148]
add rdi, 0x3d8
cmp rdi, rax
je 0x1400d37da
mov rcx, rdi
call fcn.140005f70
movups xmm0, xmmword [rbx]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rdi + 0x10], xmm1
mov qword [rbx + 0x10], r14
mov qword [rbx + 0x18], 0xf
mov byte [rbx], 0
mov rdx, qword [rsp + 0x1a0]
cmp rdx, 0x10
jb 0x1400d381e
inc rdx
mov rcx, qword [rsp + 0x188]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400d3818
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400d3e27
call fcn.14036fd20
nop
mov rdx, qword [rsp + 0x120]
cmp rdx, 0x10
jb 0x1400d3861
inc rdx
mov rcx, qword [rsp + 0x108]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400d385c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400d3e2d
call fcn.14036fd20
mov qword [rsp + 0x118], r14
mov qword [rsp + 0x120], 0xf
mov byte [rsp + 0x108], 0
mov rdx, qword [rsp + 0x160]
cmp rdx, 8
jb 0x1400d38c5
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x148]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400d38c0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400d3e33
call fcn.14036fd20
mov qword [rsp + 0x158], r14
mov qword [rsp + 0x160], 7
mov word [rsp + 0x148], r14w
mov rdx, qword [rsp + 0x140]
cmp rdx, 0x10
jb 0x1400d3925
inc rdx
mov rcx, qword [rsp + 0x128]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400d3920
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400d3e39
call fcn.14036fd20
mov qword [rsp + 0x138], r14
mov qword [rsp + 0x140], 0xf
mov byte [rsp + 0x128], 0
mov rdx, qword [rsp + 0x180]
cmp rdx, 8
jb 0x1400d3989
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x168]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400d3984
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400d3e3f
call fcn.14036fd20
mov rdx, qword [rsi + 0x148]
jmp 0x1400d3995
xor r14d, r14d
mov rax, qword [rdx + 0x30]
mov rcx, qword [rax + 0x10]
mov rax, qword [rcx + 8]
mov edi, r14d
cmp dword [rax + 8], 0x64
cmovbe edi, dword [rax + 8]
mov dword [rsp + 0x28], edi
mov rax, qword [rdx + 0x5d0]
sub rax, qword [rdx + 0x5c8]
sar rax, 5
add rdx, 0x5e0
test rax, rax
jne 0x1400d39e2
mov rax, qword [rdx + 8]
sub rax, qword [rdx]
sar rax, 5
test rax, rax
je 0x1400d3ac3
lea rax, [rsp + 0x58]
mov qword [rsp + 0x48], rax
lea rcx, [rsp + 0x58]
call fcn.1400d81b0
mov rbx, rax
mov rdx, qword [rsi + 0x148]
add rdx, 0x5c8
lea rcx, [rsp + 0x70]
call fcn.1400d81b0
nop
mov r8, rbx
mov rdx, rax
call fcn.1400d0b80
test al, al
je 0x1400d3ac3
mov rax, qword [rsi + 0x148]
mov byte [rax + 0x2ea], 1
mov rax, qword [rsi + 0x148]
cmp byte [rax + 0x23], 0
je 0x1400d3ab4
mov byte [rax + 0x23], 0
mov rax, qword [rsi + 0x148]
lea rcx, str._s_e_1_33mpausede_0m__press_e_45_1m_r_e_0m_to_resume
lea rdx, str._s_e_1_33mpausede_0m
cmp byte [rax + 0x21], 0
cmove rdx, rcx
lea r8, str.e_45_1me_1_37m_miner___e_0m
mov ecx, 6
call fcn.140027890
mov rax, qword [rsi + 0x148]
cmp byte [rax + 0x20], 0
je 0x1400d3ab4
mov eax, 1
xchg byte [0x1405472d1], al
lea rcx, [0x1405472e8]
lea rax, [0x140547300]
nop dword [rax + rax]
lock inc qword [rcx]
add rcx, 8
cmp rcx, rax
jne 0x1400d3aa0
mov rax, qword [rsi + 0x148]
mov dword [rax + 0x440], 4
jmp 0x1400d3b7a
mov rax, qword [rsi + 0x148]
mov byte [rax + 0x2ea], 0
mov rax, qword [rsi + 0x148]
cmp byte [rax + 0x2e9], 0
je 0x1400d3ae7
test edi, edi
jg 0x1400d3af0
jmp 0x1400d3b5d
cmp dword [rax + 0x444], 0
jbe 0x1400d3b5d
cmp byte [rax + 0x23], 1
je 0x1400d3b5d
lea r8, str.e_45_1me_1_37m_miner___e_0m
mov ecx, 6
cmp byte [rax + 0x21], 0
je 0x1400d3b16
lea rdx, str._s_e_1_33mcant_resume_while_on_battery_powere_0m
call fcn.140027890
jmp 0x1400d3b5d
mov byte [rax + 0x23], 1
lea rdx, str._s_e_1_32mresumede_0m
call fcn.140027890
mov rax, qword [rsi + 0x148]
cmp byte [rax + 0x20], 0
je 0x1400d3b5d
mov eax, r14d
xchg byte [0x1405472d1], al
lea rcx, [0x1405472e8]
lea rax, [0x140547300]
nop word [rax + rax]
lock inc qword [rcx]
add rcx, 8
cmp rcx, rax
jne 0x1400d3b50
mov rcx, qword [rsi + 0x148]
mov eax, r14d
cmp byte [rcx + 0x2e9], 0
setne al
add eax, 2
mov dword [rcx + 0x440], eax
mov ecx, 0x80000041
call qword [sym.imp.KERNEL32.dll_SetThreadExecutionState]
nop
jmp 0x1400d3b9c
test r15d, r15d
jle 0x1400d3db5
mov rax, qword [rsi + 0x148]
mov rcx, qword [rax + 0x30]
mov rax, qword [rcx + 0x10]
mov rcx, qword [rax + 8]
mov rax, qword [rcx + 0x188]
mov ebx, dword [rax + 0x70]
imul eax, r15d, 0xea60
movsxd rcx, eax
call fcn.1400be9e0
test al, al
sete cl
mov rax, qword [rsi + 0x148]
mov byte [rax + 0x2e9], cl
test edi, edi
jne 0x1400d3c17
mov rax, qword [rsi + 0x148]
cmp byte [rax + 0x2ea], dil
jne 0x1400d3c04
cmp byte [rax + 0x2e9], dil
je 0x1400d3c0d
xor edx, edx
jmp 0x1400d3c0f
cmp byte [rax + 0x2e9], 0
jne 0x1400d3c17
mov dl, 1
mov rcx, rsi
call fcn.1400d0650
mov rax, qword [rsi + 0x148]
cmp dword [rax + 0x444], 0
jne 0x1400d3c50
cmp byte [rax + 0x2ea], 0
jne 0x1400d3c3d
cmp byte [rax + 0x2e9], 0
je 0x1400d3c46
mov dl, 1
jmp 0x1400d3c48
cmp byte [rax + 0x2e9], 0
jne 0x1400d3c50
xor edx, edx
mov rcx, rsi
call fcn.1400d0650
mov r8, qword [rsi + 0x148]
cmp byte [r8 + 0x2e9], 0
je 0x1400d3c6a
cmp ebx, edi
jne 0x1400d3c77
jmp 0x1400d3db5
cmp ebx, dword [r8 + 0x444]
je 0x1400d3db5
mov rax, qword [r8 + 0x30]
mov rax, qword [rax + 0x10]
mov rcx, qword [rax + 8]
cmp ebx, edi
je 0x1400d3ca4
mov rax, qword [rcx + 0x188]
mov dword [rax + 0x70], edi
mov rax, qword [r13 + 0x148]
mov dword [rax + 0x440], 3
jmp 0x1400d3cc6
mov rdx, qword [rcx + 0x188]
mov eax, dword [r8 + 0x444]
mov dword [rdx + 0x70], eax
mov rax, qword [rsi + 0x148]
mov dword [rax + 0x440], 2
mov rax, qword [rsi + 0x148]
cmp byte [rax + 0x2e9], 0
je 0x1400d3cdf
test edi, edi
jg 0x1400d3cec
jmp 0x1400d3db5
cmp dword [rax + 0x444], 0
jbe 0x1400d3db5
mov rax, qword [rax + 0x30]
mov rcx, qword [rax + 0x10]
mov rax, qword [rcx + 8]
mov rcx, qword [rax + 0x188]
add rcx, 8
call fcn.1400beb10
lea rcx, [rsp + 0x1b0]
call fcn.1400248b0
nop
mov rax, qword [rsi + 0x148]
mov rcx, qword [rax + 0x30]
mov rax, qword [rcx + 0x10]
mov rcx, qword [rax + 8]
mov rax, qword [rcx]
lea rdx, [rsp + 0x1b0]
call qword [rax + 0x28]
mov rcx, qword [rsi + 0x148]
lea rdx, [rsp + 0x1b0]
mov rcx, qword [rcx + 0x30]
call fcn.140028b50
mov rax, qword [rsi + 0x148]
cmp byte [rax + 0x2ea], 0
jne 0x1400d3d6a
mov dl, 1
mov rcx, rsi
call fcn.1400d0650
nop
cmp qword [rsp + 0x1c8], 0
je 0x1400d3d89
xorps xmm0, xmm0
movups xmmword [rsp + 0x1b0], xmm0
mov word [rsp + 0x1be], r14w
lea rcx, [rsp + 0x1b0]
call fcn.140024d10
mov rcx, qword [rsp + 0x1e0]
call fcn.140397d50
mov edx, 1
mov rcx, qword [rsp + 0x1d8]
call fcn.14036fd20
xor ecx, ecx
call fcn.14039b4e0
mov rdx, qword [rsi + 0x148]
mov rdx, qword [rdx + 0x2f0]
mov rcx, rax
call fcn.14039b41c
comisd xmm0, xmmword [0x140504d20]
jb 0x1400d3df9
xor ecx, ecx
call fcn.14039b4e0
mov rdx, qword [rsi + 0x148]
mov qword [rdx + 0x2f0], rax
mov rcx, rsi
call fcn.1400d5ba0
mov rcx, qword [rsp + 0x230]
xor rcx, rsp
call fcn.14036fcc0
lea r11, [rsp + 0x240]
mov rbx, qword [r11 + 0x28]
mov rsi, qword [r11 + 0x30]
mov rdi, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop r13
ret
call fcn.1403933ec
nop
call fcn.1403933ec
nop
call fcn.1403933ec
nop
call fcn.1403933ec
nop
call fcn.1403933ec
int3