Function at 0x51dee0
Capabilities:
Contain obfuscated stackstrings
Get hostname
Get user security identifier

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x597b72
mov eax, dword fs:[0]
push eax
mov eax, 0x1794
call fcn.00556da0
mov eax, dword [0x612678]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, dword [ebp + 8]
lea eax, [ebp - 0x1798]
push eax
xorps xmm0, xmm0
mov dword [ebp - 0x1770], esi
lea eax, [ebp - 0x30]
mov dword [ebp - 0x1798], 0x20
push eax
movups xmmword [ebp - 0x30], xmm0
movups xmmword [ebp - 0x20], xmm0
call dword [sym.imp.KERNEL32.dll_GetComputerNameW]
test eax, eax
jne 0x51e127
call dword [sym.imp.KERNEL32.dll_GetLastError]
sub esp, 0x68
mov dword [ebp - 0x175c], eax
mov dword [ebp - 0x1764], esp
sub esp, 0x10
mov ecx, esp
mov dword [ebp - 0x1778], esp
push str.Amazon::SystemInfo::getMachineSID
call dword [sym.imp.QtCore4.dll_public:_void___thiscall_QVariant::constructor_char_const__]
mov edi, dword [sym.imp.QtCore4.dll_private:_static_struct_QString::Data____cdecl_QString::fromAscii_helper_char_const___int_]
push ecx
mov dword [ebp - 0x1774], esp
mov esi, esp
push 0xffffffffffffffff
push 0x59e6a0
mov dword [ebp - 4], 0
call edi
add esp, 8
mov dword [esi], eax
push 0x1ff
push ecx
mov dword [ebp - 0x177c], esp
mov esi, esp
push 0xffffffffffffffff
push str.SystemInfoWin
mov byte [ebp - 4], 1
call edi
add esp, 8
mov dword [esi], eax
lea eax, [ebp - 0x1760]
mov byte [ebp - 4], 2
push 4
push eax
call fcn.0051d650
sub esp, 0xc
mov byte [ebp - 4], 3
mov ecx, esp
mov dword [ebp - 0x1780], esp
push eax
call dword [sym.imp.QtCore4.dll_public:_void___thiscall_QVariant::constructor_class_QString_const__]
push ecx
mov dword [ebp - 0x1784], esp
mov esi, esp
push 0xffffffffffffffff
push str.error
mov byte [ebp - 4], 4
call edi
mov dword [esi], eax
sub esp, 8
mov byte [ebp - 4], 5
mov ecx, esp
mov dword [ebp - 0x1788], esp
push dword [ebp - 0x175c]
call dword [sym.imp.QtCore4.dll_public:_void___thiscall_QVariant::constructor_unsigned_int_]
push ecx
mov dword [ebp - 0x178c], esp
mov esi, esp
push 0xffffffffffffffff
push str.errorCode
mov byte [ebp - 4], 6
call edi
mov dword [esi], eax
add esp, 4
mov byte [ebp - 4], 7
mov dword [ebp - 0x1768], esp
mov esi, esp
push 0xffffffffffffffff
push str.getComputerNameFailed
call edi
add esp, 8
mov dword [esi], eax
mov byte [ebp - 4], 8
push 0
lea ecx, [ebp - 0x14e0]
call fcn.005130e0
mov byte [ebp - 4], 9
mov ecx, eax
mov byte [ebp - 4], 0xa
call fcn.005158f0
mov ecx, eax
mov byte [ebp - 4], 0xb
call fcn.00515040
mov ecx, eax
mov byte [ebp - 4], 0xc
call fcn.00515040
mov ecx, eax
call fcn.00515020
mov ecx, eax
mov byte [ebp - 4], 0xe
call fcn.00515840
mov ecx, eax
call fcn.00515030
mov ecx, eax
mov byte [ebp - 4], 0x10
call fcn.00515040
mov ecx, dword [ebp - 0x1764]
push eax
call fcn.00429600
lea ecx, [ebp - 0x15e8]
call fcn.00429560
lea ecx, [ebp - 0x15e8]
call fcn.00516570
lea ecx, [ebp - 0x14e0]
call fcn.005133a0
lea ecx, [ebp - 0x1760]
mov dword [ebp - 4], 0xffffffff
call dword [sym.imp.QtCore4.dll_public:_void___thiscall_QString::destructor_void_]
mov eax, dword [ebp - 0x175c]
mov esi, dword [ebp - 0x1770]
lea edx, [eax + str.Error_retrieving_computer_name:]
mov ecx, edx
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0xf
mov byte [esi], 0
lea edi, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x51e110
sub ecx, edi
push ecx
push edx
mov ecx, esi
call fcn.004243e0
jmp 0x51e893
push 0x800
lea eax, [ebp - 0xc30]
mov dword [ebp - 0x176c], 0
push 0
push eax
call fcn.0055cad0
mov edi, dword [sym.imp.ADVAPI32.dll_LookupAccountNameW]
lea eax, [ebp - 0x179c]
add esp, 0xc
mov dword [ebp - 0x1790], 0x400
push eax
lea eax, [ebp - 0x1790]
push eax
lea eax, [ebp - 0xc30]
push eax
lea eax, [ebp - 0x176c]
push eax
push 0
lea eax, [ebp - 0x30]
push eax
push 0
call edi
cmp dword [ebp - 0x176c], 0
ja 0x51e367
call dword [sym.imp.KERNEL32.dll_GetLastError]
sub esp, 0x68
mov dword [ebp - 0x175c], eax
mov dword [ebp - 0x1760], esp
sub esp, 0x10
mov ecx, esp
mov dword [ebp - 0x1768], esp
push str.Amazon::SystemInfo::getMachineSID
call dword [sym.imp.QtCore4.dll_public:_void___thiscall_QVariant::constructor_char_const__]
mov edi, dword [sym.imp.QtCore4.dll_private:_static_struct_QString::Data____cdecl_QString::fromAscii_helper_char_const___int_]
push ecx
mov dword [ebp - 0x178c], esp
mov esi, esp
push 0xffffffffffffffff
push 0x59e6a0
mov dword [ebp - 4], 0x11
call edi
add esp, 8
mov dword [esi], eax
push 0x20e
push ecx
mov dword [ebp - 0x1788], esp
mov esi, esp
push 0xffffffffffffffff
push str.SystemInfoWin
mov byte [ebp - 4], 0x12
call edi
add esp, 8
mov dword [esi], eax
lea eax, [ebp - 0x1764]
mov byte [ebp - 4], 0x13
push 4
push eax
call fcn.0051d650
sub esp, 0xc
mov byte [ebp - 4], 0x14
mov ecx, esp
mov dword [ebp - 0x1784], esp
push eax
call dword [sym.imp.QtCore4.dll_public:_void___thiscall_QVariant::constructor_class_QString_const__]
push ecx
mov dword [ebp - 0x1780], esp
mov esi, esp
push 0xffffffffffffffff
push str.error
mov byte [ebp - 4], 0x15
call edi
mov dword [esi], eax
sub esp, 8
mov byte [ebp - 4], 0x16
mov ecx, esp
mov dword [ebp - 0x177c], esp
push dword [ebp - 0x175c]
call dword [sym.imp.QtCore4.dll_public:_void___thiscall_QVariant::constructor_unsigned_int_]
push ecx
mov dword [ebp - 0x1778], esp
mov esi, esp
push 0xffffffffffffffff
push str.errorCode
mov byte [ebp - 4], 0x17
call edi
mov dword [esi], eax
add esp, 4
mov byte [ebp - 4], 0x18
mov dword [ebp - 0x1774], esp
mov esi, esp
push 0xffffffffffffffff
push str.getAccountNameSizeFailed
call edi
add esp, 8
mov dword [esi], eax
mov byte [ebp - 4], 0x19
push 0
lea ecx, [ebp - 0x14e0]
call fcn.005130e0
mov byte [ebp - 4], 0x1a
mov ecx, eax
mov byte [ebp - 4], 0x1b
call fcn.005158f0
mov ecx, eax
mov byte [ebp - 4], 0x1c
call fcn.00515040
mov ecx, eax
mov byte [ebp - 4], 0x1d
call fcn.00515040
mov ecx, eax
call fcn.00515020
mov ecx, eax
mov byte [ebp - 4], 0x1f
call fcn.00515840
mov ecx, eax
call fcn.00515030
mov ecx, eax
mov byte [ebp - 4], 0x21
call fcn.00515040
mov ecx, dword [ebp - 0x1760]
push eax
call fcn.00429600
lea ecx, [ebp - 0x15e8]
call fcn.00429560
lea ecx, [ebp - 0x15e8]
call fcn.00516570
lea ecx, [ebp - 0x14e0]
call fcn.005133a0
lea ecx, [ebp - 0x1764]
mov dword [ebp - 4], 0xffffffff
call dword [sym.imp.QtCore4.dll_public:_void___thiscall_QString::destructor_void_]
mov eax, dword [ebp - 0x175c]
mov esi, dword [ebp - 0x1770]
lea edx, [eax + str.Error_retrieving_SID_size:]
mov ecx, edx
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0xf
mov byte [esi], 0
lea edi, [ecx + 1]
nop dword [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x51e350
sub ecx, edi
push ecx
push edx
mov ecx, esi
call fcn.004243e0
jmp 0x51e893
lea eax, [ebp - 0x1448]
mov dword [ebp - 0x1450], 0
push 2
push eax
push eax
call fcn.0051f2b0
mov eax, dword [sym.imp.KERNEL32.dll_GlobalFree]
add esp, 0xc
test eax, eax
je 0x51e3a2
mov dword [ebp - 0x1448], eax
mov eax, 0x5d738c
or eax, 1
mov dword [ebp - 0x1450], eax
jmp 0x51e3ac
mov dword [ebp - 0x1450], 0
lea eax, [ebp - 0x1450]
mov dword [ebp - 4], 0x22
push eax
push dword [ebp - 0x176c]
push 0x40
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
push eax
lea ecx, [ebp - 0x1478]
call fcn.0051a0a0
mov eax, dword [ebp - 0x1450]
mov byte [ebp - 4], 0x25
test eax, eax
je 0x51e408
test al, 1
jne 0x51e3fe
and eax, 0xfffffffe
mov eax, dword [eax]
test eax, eax
je 0x51e3fe
lea ecx, [ebp - 0x1448]
push 2
push ecx
push ecx
call eax
add esp, 0xc
mov dword [ebp - 0x1450], 0
lea eax, [ebp - 0x179c]
mov byte [ebp - 4], 0x24
push eax
lea eax, [ebp - 0x1790]
push eax
lea eax, [ebp - 0xc30]
push eax
lea eax, [ebp - 0x176c]
push eax
push dword [ebp - 0x1478]
lea eax, [ebp - 0x30]
push eax
push 0
call edi
test eax, eax
jne 0x51e610
call dword [sym.imp.KERNEL32.dll_GetLastError]
sub esp, 0x68
mov dword [ebp - 0x175c], eax
mov dword [ebp - 0x1760], esp
sub esp, 0x10
mov ecx, esp
mov dword [ebp - 0x1768], esp
push str.Amazon::SystemInfo::getMachineSID
call dword [sym.imp.QtCore4.dll_public:_void___thiscall_QVariant::constructor_char_const__]
mov edi, dword [sym.imp.QtCore4.dll_private:_static_struct_QString::Data____cdecl_QString::fromAscii_helper_char_const___int_]
push ecx
mov dword [ebp - 0x178c], esp
mov esi, esp
push 0xffffffffffffffff
push 0x59e6a0
mov byte [ebp - 4], 0x26
call edi
add esp, 8
mov dword [esi], eax
push 0x21b
push ecx
mov dword [ebp - 0x1788], esp
mov esi, esp
push 0xffffffffffffffff
push str.SystemInfoWin
mov byte [ebp - 4], 0x27
call edi
add esp, 8
mov dword [esi], eax
lea eax, [ebp - 0x1764]
mov byte [ebp - 4], 0x28
push 4
push eax
call fcn.0051d650
sub esp, 0xc
mov byte [ebp - 4], 0x29
mov ecx, esp
mov dword [ebp - 0x1784], esp
push eax
call dword [sym.imp.QtCore4.dll_public:_void___thiscall_QVariant::constructor_class_QString_const__]
push ecx
mov dword [ebp - 0x1780], esp
mov esi, esp
push 0xffffffffffffffff
push str.error
mov byte [ebp - 4], 0x2a
call edi
mov dword [esi], eax
sub esp, 8
mov byte [ebp - 4], 0x2b
mov ecx, esp
mov dword [ebp - 0x177c], esp
push dword [ebp - 0x175c]
call dword [sym.imp.QtCore4.dll_public:_void___thiscall_QVariant::constructor_unsigned_int_]
push ecx
mov dword [ebp - 0x1778], esp
mov esi, esp
push 0xffffffffffffffff
push str.errorCode
mov byte [ebp - 4], 0x2c
call edi
mov dword [esi], eax
add esp, 4
mov byte [ebp - 4], 0x2d
mov dword [ebp - 0x1774], esp
mov esi, esp
push 0xffffffffffffffff
push str.getAccountNameFailed
call edi
add esp, 8
mov dword [esi], eax
mov byte [ebp - 4], 0x2e
push 0
lea ecx, [ebp - 0x14e0]
call fcn.005130e0
mov byte [ebp - 4], 0x2f
mov ecx, eax
mov byte [ebp - 4], 0x30
call fcn.005158f0
mov ecx, eax
mov byte [ebp - 4], 0x31
call fcn.00515040
mov ecx, eax
mov byte [ebp - 4], 0x32
call fcn.00515040
mov ecx, eax
call fcn.00515020
mov ecx, eax
mov byte [ebp - 4], 0x34
call fcn.00515840
mov ecx, eax
call fcn.00515030
mov ecx, eax
mov byte [ebp - 4], 0x36
call fcn.00515040
mov ecx, dword [ebp - 0x1760]
push eax
call fcn.00429600
lea ecx, [ebp - 0x15e8]
call fcn.00429560
lea ecx, [ebp - 0x15e8]
call fcn.00516570
lea ecx, [ebp - 0x14e0]
call fcn.005133a0
lea ecx, [ebp - 0x1764]
mov byte [ebp - 4], 0x24
call dword [sym.imp.QtCore4.dll_public:_void___thiscall_QString::destructor_void_]
mov eax, dword [ebp - 0x175c]
mov esi, dword [ebp - 0x1770]
lea edx, [eax + str.Error_retrieving_SID:]
mov ecx, edx
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0xf
mov byte [esi], 0
lea edi, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x51e600
sub ecx, edi
push ecx
push edx
jmp 0x51e881
push 0x800
lea eax, [ebp - 0x1430]
push 0
push eax
call fcn.0055cad0
add esp, 0xc
lea eax, [ebp - 0x1430]
mov dword [ebp - 0x1794], eax
lea eax, [ebp - 0x1794]
push eax
push dword [ebp - 0x1478]
call sub.ADVAPI32.dll_ConvertSidToStringSidW
test eax, eax
jne 0x51e80d
call dword [sym.imp.KERNEL32.dll_GetLastError]
sub esp, 0x68
mov dword [ebp - 0x175c], eax
mov dword [ebp - 0x1760], esp
sub esp, 0x10
mov ecx, esp
mov dword [ebp - 0x1768], esp
push str.Amazon::SystemInfo::getMachineSID
call dword [sym.imp.QtCore4.dll_public:_void___thiscall_QVariant::constructor_char_const__]
mov edi, dword [sym.imp.QtCore4.dll_private:_static_struct_QString::Data____cdecl_QString::fromAscii_helper_char_const___int_]
push ecx
mov dword [ebp - 0x178c], esp
mov esi, esp
push 0xffffffffffffffff
push 0x59e6a0
mov byte [ebp - 4], 0x37
call edi
add esp, 8
mov dword [esi], eax
push 0x229
push ecx
mov dword [ebp - 0x1788], esp
mov esi, esp
push 0xffffffffffffffff
push str.SystemInfoWin
mov byte [ebp - 4], 0x38
call edi
add esp, 8
mov dword [esi], eax
lea eax, [ebp - 0x1774]
mov byte [ebp - 4], 0x39
push 4
push eax
call fcn.0051d650
sub esp, 0xc
mov byte [ebp - 4], 0x3a
mov ecx, esp
mov dword [ebp - 0x1784], esp
push eax
call dword [sym.imp.QtCore4.dll_public:_void___thiscall_QVariant::constructor_class_QString_const__]
push ecx
mov dword [ebp - 0x1780], esp
mov esi, esp
push 0xffffffffffffffff
push str.error
mov byte [ebp - 4], 0x3b
call edi
mov dword [esi], eax
sub esp, 8
mov byte [ebp - 4], 0x3c
mov ecx, esp
mov dword [ebp - 0x177c], esp
push dword [ebp - 0x175c]
call dword [sym.imp.QtCore4.dll_public:_void___thiscall_QVariant::constructor_unsigned_int_]
push ecx
mov dword [ebp - 0x1778], esp
mov esi, esp
push 0xffffffffffffffff
push str.errorCode
mov byte [ebp - 4], 0x3d
call edi
mov dword [esi], eax
add esp, 4
mov byte [ebp - 4], 0x3e
mov dword [ebp - 0x1764], esp
mov esi, esp
push 0xffffffffffffffff
push str.convertAccountNameSidToStringFailed
call edi
add esp, 8
mov dword [esi], eax
mov byte [ebp - 4], 0x3f
push 0
lea ecx, [ebp - 0x1650]
call fcn.005130e0
mov byte [ebp - 4], 0x40
mov ecx, eax
mov byte [ebp - 4], 0x41
call fcn.005158f0
mov ecx, eax
mov byte [ebp - 4], 0x42
call fcn.00515040
mov ecx, eax
mov byte [ebp - 4], 0x43
call fcn.00515040
mov ecx, eax
call fcn.00515020
mov ecx, eax
mov byte [ebp - 4], 0x45
call fcn.00515840
mov ecx, eax
call fcn.00515030
mov ecx, eax
mov byte [ebp - 4], 0x47
call fcn.00515040
mov ecx, dword [ebp - 0x1760]
push eax
call fcn.00429600
lea ecx, [ebp - 0x1758]
call fcn.00429560
lea ecx, [ebp - 0x1758]
call fcn.00516570
lea ecx, [ebp - 0x1650]
call fcn.005133a0
lea ecx, [ebp - 0x1774]
mov byte [ebp - 4], 0x24
call dword [sym.imp.QtCore4.dll_public:_void___thiscall_QString::destructor_void_]
mov ecx, dword [ebp - 0x175c]
lea eax, [ecx + str.Error_converting_SID_to_string:]
mov ecx, dword [ebp - 0x1770]
push eax
call fcn.00428460
lea ecx, [ebp - 0x1478]
call fcn.0051a110
mov eax, dword [ebp - 0x1770]
jmp 0x51e895
push 0x400
lea eax, [ebp - 0x430]
push 0
push eax
call fcn.0055cad0
push 0x400
push dword [ebp - 0x1794]
lea eax, [ebp - 0x430]
mov dword [ebp - 0x17a0], 0
push 0x400
push eax
lea eax, [ebp - 0x17a0]
push eax
call fcn.00574ce5
lea ecx, [ebp - 0x430]
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0xf
lea edx, [ecx + 1]
add esp, 0x20
mov byte [esi], 0
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x51e870
sub ecx, edx
lea eax, [ebp - 0x430]
push ecx
push eax
mov ecx, esi
call fcn.004243e0
lea ecx, [ebp - 0x1478]
call fcn.0051a110
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00556510
mov esp, ebp
pop ebp
ret