Function at 0x6861a610
Capabilities:
Get hostname
Get session user name

Disassembly:
push rbx
sub rsp, 0x250
lea rcx, str.TMPDIR
call sym.libglib_2.0_0.dll_g_getenv_utf8
mov rcx, rax
call sym.libglib_2.0_0.dll_g_strdup
test rax, rax
mov qword [0x686cd600], rax
je 0x6861a641
cmp byte [rax], 0
jne 0x6861a894
lea rcx, [0x686b3e05]
call sym.libglib_2.0_0.dll_g_getenv_utf8
mov rcx, rax
call sym.libglib_2.0_0.dll_g_strdup
test rax, rax
mov qword [0x686cd600], rax
je 0x6861a66a
cmp byte [rax], 0
jne 0x6861a894
lea rcx, str.TEMP
call sym.libglib_2.0_0.dll_g_getenv_utf8
mov rcx, rax
call sym.libglib_2.0_0.dll_g_strdup
test rax, rax
mov qword [0x686cd600], rax
je 0x6861a883
cmp byte [rax], 0
je 0x6861a883
lea rcx, str.HOME
call sym.libglib_2.0_0.dll_g_getenv_utf8
mov rcx, rax
call sym.libglib_2.0_0.dll_g_strdup
test rax, rax
mov qword [0x686cd608], rax
je 0x6861a6de
mov rcx, rax
call sym.libglib_2.0_0.dll_g_path_is_absolute
test eax, eax
jne 0x6861a8a5
mov rcx, qword [0x686cd608]
call sym.libglib_2.0_0.dll_g_free
mov qword [0x686cd608], 0
lea rcx, str.USERPROFILE
call sym.libglib_2.0_0.dll_g_getenv_utf8
test rax, rax
je 0x6861a9b3
lea rcx, str.USERPROFILE
call sym.libglib_2.0_0.dll_g_getenv_utf8
mov rcx, rax
call sym.libglib_2.0_0.dll_g_strdup
mov qword [0x686cd608], rax
test rax, rax
jne 0x6861a735
mov ecx, 0x28
call fcn.68619e40
test rax, rax
mov qword [0x686cd608], rax
jne 0x6861a735
call fcn.6861a570
mov qword [0x686cd608], rax
lea rbx, [rsp + 0x40]
mov dword [rsp + 0x38], 0x101
lea rdx, [rsp + 0x38]
mov rcx, rbx
call qword [sym.imp.ADVAPI32.dll_GetUserNameW]
test eax, eax
jne 0x6861a904
cmp qword [0x686cd5f0], 0
je 0x6861a93b
cmp qword [0x686cd610], 0
je 0x6861a99b
lea rdx, [rsp + 0x3c]
mov rcx, rbx
mov dword [rsp + 0x3c], 0x64
call qword [sym.imp.KERNEL32.dll_GetComputerNameA]
lea rcx, str.localhost
test eax, eax
cmovne rcx, rbx
call sym.libglib_2.0_0.dll_g_strdup
mov rcx, qword [0x686cd600]
xor r9d, r9d
xor r8d, r8d
mov rdx, 0xffffffffffffffff
mov qword [rsp + 0x20], 0
mov qword [0x686cd618], rax
call sym.libglib_2.0_0.dll_g_locale_from_utf8
mov rcx, qword [0x686cd5f0]
xor r9d, r9d
xor r8d, r8d
mov rdx, 0xffffffffffffffff
mov qword [rsp + 0x20], 0
mov qword [0x686cd620], rax
call sym.libglib_2.0_0.dll_g_locale_from_utf8
mov rcx, qword [0x686cd610]
xor r9d, r9d
xor r8d, r8d
mov qword [rsp + 0x20], 0
mov rdx, 0xffffffffffffffff
mov qword [0x686cd628], rax
call sym.libglib_2.0_0.dll_g_locale_from_utf8
cmp qword [0x686cd620], 0
mov qword [0x686cd630], rax
je 0x6861a983
cmp qword [0x686cd628], 0
je 0x6861a96b
cmp qword [0x686cd630], 0
je 0x6861a953
mov rcx, qword [0x686cd608]
test rcx, rcx
je 0x6861a8f0
mov qword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
mov rdx, 0xffffffffffffffff
call sym.libglib_2.0_0.dll_g_locale_from_utf8
mov qword [0x686cd638], rax
add rsp, 0x250
pop rbx
ret
call fcn.6861a570
mov qword [0x686cd600], rax
jmp 0x6861a697
mov rax, qword [0x686cd600]
cmp byte [rax], 0
je 0x6861a883
jmp 0x6861a697
mov rcx, qword [0x686cd608]
mov edx, 4
call sym.libglib_2.0_0.dll_g_file_test_utf8
test eax, eax
je 0x6861a6c7
mov rbx, qword [0x686cd608]
test rbx, rbx
jne 0x6861a8d3
jmp 0x6861a6de
mov byte [rax], 0x5c
mov edx, 0x2f
mov rcx, rbx
call sub.msvcrt.dll_strchr
test rax, rax
jne 0x6861a8d0
jmp 0x6861a735
mov qword [0x686cd638], 0
add rsp, 0x250
pop rbx
ret
xor r9d, r9d
xor r8d, r8d
mov edx, 0xffffffff
mov rcx, rbx
mov qword [rsp + 0x20], 0
call sym.libglib_2.0_0.dll_g_utf16_to_utf8
mov rcx, rax
mov qword [0x686cd5f0], rax
call sym.libglib_2.0_0.dll_g_strdup
mov qword [0x686cd610], rax
jmp 0x6861a758
lea rcx, str.somebody
call sym.libglib_2.0_0.dll_g_strdup
mov qword [0x686cd5f0], rax
jmp 0x6861a766
lea rcx, str.Unknown
call sym.libglib_2.0_0.dll_g_strdup
mov qword [0x686cd630], rax
jmp 0x6861a848
lea rcx, str.somebody
call sym.libglib_2.0_0.dll_g_strdup
mov qword [0x686cd628], rax
jmp 0x6861a83a
lea rcx, [0x686b3e30]
call sym.libglib_2.0_0.dll_g_strdup
mov qword [0x686cd620], rax
jmp 0x6861a82c
lea rcx, str.Unknown
call sym.libglib_2.0_0.dll_g_strdup
mov qword [0x686cd610], rax
jmp 0x6861a774
mov rax, qword [0x686cd608]
jmp 0x6861a70e