Function at 0x14000d6a0
Capabilities:
Get hostname
Get session user name
Send data
Send data on socket

Disassembly:
mov qword [rsp + 0x20], rbx
push rbp
push rsi
push rdi
push r12
push r15
lea rbp, [rsp - 0x190]
sub rsp, 0x290
mov rax, qword [0x14006d018]
xor rax, rsp
mov qword [rbp + 0x180], rax
mov r15, rcx
mov ecx, 0x104
call fcn.14001a3b4
mov ecx, 1
mov rdi, rax
call qword [sym.imp.WS2_32.dll_htonl]
mov r12, 0xffffffffffffffff
mov dword [rsp + 0x40], eax
mov rdx, r12
lea r8, [0x1400723b0]
nop dword [rax]
inc rdx
cmp byte [r8 + rdx], 0
jne 0x14000d700
xor esi, esi
test edx, edx
je 0x14000d754
movzx eax, byte [0x1400723b0]
xor byte [rsp + 0x40], al
mov eax, esi
cmp edx, 1
setne al
mov ecx, eax
movzx eax, byte [rcx + r8]
xor byte [rsp + 0x41], al
mov eax, esi
inc ecx
cmp ecx, edx
cmovne eax, ecx
mov ecx, eax
movzx eax, byte [rax + r8]
xor byte [rsp + 0x42], al
mov eax, esi
inc ecx
cmp ecx, edx
cmovne eax, ecx
movzx eax, byte [rax + r8]
xor byte [rsp + 0x43], al
mov qword [rsp + 0x2c8], r13
mov ebx, esi
mov qword [rsp + 0x2d0], r14
nop word [rax + rax]
mov rcx, qword [r15 + 0x80090]
lea rdx, [rsp + 0x40]
mov r8d, 4
mov eax, ebx
sub r8d, ebx
add rdx, rax
xor r9d, r9d
call qword [sym.imp.WS2_32.dll_send]
cmp eax, 0xffffffff
je 0x14000ddef
add ebx, eax
cmp ebx, 4
jb 0x14000d770
xor edx, edx
mov r8d, 0x104
mov rcx, rdi
call fcn.1400385a0
mov rcx, rdi
call fcn.140001070
mov r14, r12
nop
inc r14
cmp byte [rdi + r14], sil
jne 0x14000d7c0
lea r13d, [r14 + 4]
mov ecx, r13d
call fcn.14001a3b4
mov r8d, r13d
xor edx, edx
mov rcx, rax
mov qword [rsp + 0x48], rax
call fcn.1400385a0
mov r9, qword [rsp + 0x48]
mov r8, rdi
mov edx, r14d
call fcn.14000d580
mov ebx, esi
test r13d, r13d
je 0x14000d82d
nop
mov rcx, qword [r15 + 0x80090]
mov r8d, r13d
mov edx, ebx
sub r8d, ebx
add rdx, qword [rsp + 0x48]
xor r9d, r9d
call qword [sym.imp.WS2_32.dll_send]
cmp eax, 0xffffffff
je 0x14000de2f
add ebx, eax
cmp ebx, r13d
jb 0x14000d800
mov rcx, qword [rsp + 0x48]
call fcn.14001a344
xor edx, edx
mov r8d, 0x104
mov rcx, rdi
call fcn.1400385a0
mov ecx, esi
lea r8, [0x14006dc60]
cmp byte [0x14006dc60], cl
je 0x14000d86b
mov rax, r8
nop dword [rax + rax]
inc ecx
lea rax, [rax + 1]
cmp byte [rax], sil
jne 0x14000d860
inc ecx
movsxd rdx, ecx
add rdx, r8
cmp byte [rdx], sil
je 0x14000d88b
nop dword [rax + rax]
inc ecx
lea rdx, [rdx + 1]
cmp byte [rdx], sil
jne 0x14000d880
inc ecx
movsxd rdx, ecx
add rdx, r8
cmp byte [rdx], sil
je 0x14000d8ab
nop dword [rax + rax]
inc ecx
lea rdx, [rdx + 1]
cmp byte [rdx], sil
jne 0x14000d8a0
inc ecx
movsxd rcx, ecx
add rcx, r8
call fcn.14003f7e4
xor ecx, ecx
mov dword [rsp + 0x48], ecx
mov word [rsp + 0x4c], cx
cmp eax, 0xffff
jge 0x14000d8e1
lea edx, [rcx + 6]
mov r9d, eax
lea rcx, [rsp + 0x48]
lea r8, [0x140061ca4]
call fcn.14000a8a0
lea rcx, [rsp + 0x48]
mov rax, r12
nop dword [rax]
inc rax
cmp byte [rcx + rax], sil
jne 0x14000d8f0
movsxd r8, eax
lea rdx, [rsp + 0x48]
mov rcx, rdi
call fcn.140038190
mov r14, r12
nop dword [rax]
inc r14
cmp byte [rdi + r14], sil
jne 0x14000d910
lea r13d, [r14 + 4]
mov ecx, r13d
call fcn.14001a3b4
mov r8d, r13d
xor edx, edx
mov rcx, rax
mov qword [rsp + 0x48], rax
call fcn.1400385a0
mov r9, qword [rsp + 0x48]
mov r8, rdi
mov edx, r14d
call fcn.14000d580
mov ebx, esi
test r13d, r13d
je 0x14000d97d
nop
mov rcx, qword [r15 + 0x80090]
mov r8d, r13d
mov edx, ebx
sub r8d, ebx
add rdx, qword [rsp + 0x48]
xor r9d, r9d
call qword [sym.imp.WS2_32.dll_send]
cmp eax, 0xffffffff
je 0x14000de2f
add ebx, eax
cmp ebx, r13d
jb 0x14000d950
mov rcx, qword [rsp + 0x48]
call fcn.14001a344
xor edx, edx
mov r8d, 0x104
mov rcx, rdi
call fcn.1400385a0
mov edx, 0x104
mov rcx, rdi
call fcn.140001410
mov r14, r12
inc r14
cmp byte [rdi + r14], sil
jne 0x14000d9a7
lea r13d, [r14 + 4]
mov ecx, r13d
call fcn.14001a3b4
mov r8d, r13d
xor edx, edx
mov rcx, rax
mov qword [rsp + 0x48], rax
call fcn.1400385a0
mov r9, qword [rsp + 0x48]
mov r8, rdi
mov edx, r14d
call fcn.14000d580
mov ebx, esi
test r13d, r13d
je 0x14000da1d
nop word [rax + rax]
mov rcx, qword [r15 + 0x80090]
mov r8d, r13d
mov edx, ebx
sub r8d, ebx
add rdx, qword [rsp + 0x48]
xor r9d, r9d
call qword [sym.imp.WS2_32.dll_send]
cmp eax, 0xffffffff
je 0x14000de2f
add ebx, eax
cmp ebx, r13d
jb 0x14000d9f0
mov rcx, qword [rsp + 0x48]
call fcn.14001a344
xor edx, edx
mov r8d, 0x104
mov rcx, rdi
call fcn.1400385a0
lea r8, [0x14006dc60]
mov edx, 0x104
mov rcx, rdi
call fcn.14003dd20
mov r14, r12
nop
inc r14
cmp byte [rdi + r14], sil
jne 0x14000da50
lea r13d, [r14 + 4]
mov ecx, r13d
call fcn.14001a3b4
mov r8d, r13d
xor edx, edx
mov rcx, rax
mov qword [rsp + 0x48], rax
call fcn.1400385a0
mov r9, qword [rsp + 0x48]
mov r8, rdi
mov edx, r14d
call fcn.14000d580
mov ebx, esi
test r13d, r13d
je 0x14000dabd
nop
mov rcx, qword [r15 + 0x80090]
mov r8d, r13d
mov edx, ebx
sub r8d, ebx
add rdx, qword [rsp + 0x48]
xor r9d, r9d
call qword [sym.imp.WS2_32.dll_send]
cmp eax, 0xffffffff
je 0x14000de2f
add ebx, eax
cmp ebx, r13d
jb 0x14000da90
mov rcx, qword [rsp + 0x48]
call fcn.14001a344
xor edx, edx
mov r8d, 0x104
mov rcx, rdi
call fcn.1400385a0
lea rdx, [rsp + 0x48]
mov dword [rsp + 0x48], 0x101
lea rcx, [rsp + 0x70]
call qword [sym.imp.ADVAPI32.dll_GetUserNameW]
test eax, eax
je 0x14000db43
mov qword [rsp + 0x38], rsi
lea r8, [rsp + 0x70]
mov qword [rsp + 0x30], rsi
mov r9d, r12d
mov dword [rsp + 0x28], esi
xor edx, edx
mov ecx, 0xfde9
mov qword [rsp + 0x20], rsi
call qword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov qword [rsp + 0x38], rsi
lea r8, [rsp + 0x70]
mov qword [rsp + 0x30], rsi
mov r9d, r12d
mov dword [rsp + 0x28], eax
xor edx, edx
mov ecx, 0xfde9
mov qword [rsp + 0x20], rdi
call qword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov r14, r12
inc r14
cmp byte [rdi + r14], sil
jne 0x14000db46
lea r13d, [r14 + 4]
mov ecx, r13d
call fcn.14001a3b4
mov r8d, r13d
xor edx, edx
mov rcx, rax
mov qword [rsp + 0x48], rax
call fcn.1400385a0
mov r9, qword [rsp + 0x48]
mov r8, rdi
mov edx, r14d
call fcn.14000d580
mov ebx, esi
test r13d, r13d
je 0x14000dbbd
nop dword [rax]
nop dword [rax + rax]
mov rcx, qword [r15 + 0x80090]
mov r8d, r13d
mov edx, ebx
sub r8d, ebx
add rdx, qword [rsp + 0x48]
xor r9d, r9d
call qword [sym.imp.WS2_32.dll_send]
cmp eax, 0xffffffff
je 0x14000de2f
add ebx, eax
cmp ebx, r13d
jb 0x14000db90
mov rcx, qword [rsp + 0x48]
call fcn.14001a344
xor edx, edx
mov r8d, 0x104
mov rcx, rdi
call fcn.1400385a0
mov rcx, rdi
call fcn.140009730
mov r14, r12
inc r14
cmp byte [rdi + r14], sil
jne 0x14000dbe2
lea r13d, [r14 + 4]
mov ecx, r13d
call fcn.14001a3b4
mov r8d, r13d
xor edx, edx
mov rcx, rax
mov qword [rsp + 0x48], rax
call fcn.1400385a0
mov r9, qword [rsp + 0x48]
mov r8, rdi
mov edx, r14d
call fcn.14000d580
mov ebx, esi
test r13d, r13d
je 0x14000dc4d
mov rcx, qword [r15 + 0x80090]
mov r8d, r13d
mov edx, ebx
sub r8d, ebx
add rdx, qword [rsp + 0x48]
xor r9d, r9d
call qword [sym.imp.WS2_32.dll_send]
cmp eax, 0xffffffff
je 0x14000de2f
add ebx, eax
cmp ebx, r13d
jb 0x14000dc20
mov rcx, qword [rsp + 0x48]
call fcn.14001a344
xor edx, edx
mov r8d, 0x104
mov rcx, rdi
call fcn.1400385a0
xor eax, eax
mov dword [rsp + 0x50], 0x20
xorps xmm0, xmm0
mov qword [rsp + 0x64], rax
lea rdx, [rsp + 0x48]
mov dword [rsp + 0x6c], eax
lea rcx, [rsp + 0x50]
mov dword [rsp + 0x48], reloc.WS2_32.dll_recv
movups xmmword [rsp + 0x54], xmm0
call qword [sym.imp.KERNEL32.dll_GetComputerNameW]
test eax, eax
je 0x14000dcee
mov qword [rsp + 0x38], rsi
lea r8, [rsp + 0x50]
mov qword [rsp + 0x30], rsi
mov r9d, r12d
mov dword [rsp + 0x28], esi
xor edx, edx
mov ecx, 0xfde9
mov qword [rsp + 0x20], rsi
call qword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov qword [rsp + 0x38], rsi
lea r8, [rsp + 0x50]
mov qword [rsp + 0x30], rsi
mov r9d, r12d
mov dword [rsp + 0x28], eax
xor edx, edx
mov ecx, 0xfde9
mov qword [rsp + 0x20], rdi
call qword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov r14, r12
inc r14
cmp byte [rdi + r14], sil
jne 0x14000dcf1
lea r13d, [r14 + 4]
mov ecx, r13d
call fcn.14001a3b4
mov r8d, r13d
xor edx, edx
mov rcx, rax
mov qword [rsp + 0x48], rax
call fcn.1400385a0
mov r9, qword [rsp + 0x48]
mov r8, rdi
mov edx, r14d
call fcn.14000d580
mov ebx, esi
test r13d, r13d
je 0x14000dd5d
nop
mov rcx, qword [r15 + 0x80090]
mov r8d, r13d
mov edx, ebx
sub r8d, ebx
add rdx, qword [rsp + 0x48]
xor r9d, r9d
call qword [sym.imp.WS2_32.dll_send]
cmp eax, 0xffffffff
je 0x14000de2f
add ebx, eax
cmp ebx, r13d
jb 0x14000dd30
mov rcx, qword [rsp + 0x48]
call fcn.14001a344
xor edx, edx
mov r8d, 0x104
mov rcx, rdi
call fcn.1400385a0
mov rcx, rdi
call fcn.14000a2c0
nop
inc r12
cmp byte [rdi + r12], sil
jne 0x14000dd80
lea r14d, [r12 + 4]
mov ecx, r14d
call fcn.14001a3b4
mov r8d, r14d
xor edx, edx
mov rcx, rax
mov r13, rax
call fcn.1400385a0
mov r9, r13
mov r8, rdi
mov edx, r12d
call fcn.14000d580
test r14d, r14d
je 0x14000dde7
nop dword [rax]
mov rcx, qword [r15 + 0x80090]
mov r8d, r14d
mov edx, esi
sub r8d, esi
add rdx, r13
xor r9d, r9d
call qword [sym.imp.WS2_32.dll_send]
cmp eax, 0xffffffff
je 0x14000de2f
add esi, eax
cmp esi, r14d
jb 0x14000ddc0
mov rcx, r13
call fcn.14001a344
mov rcx, rdi
call fcn.14001a344
mov al, 1
mov r14, qword [rsp + 0x2d0]
mov r13, qword [rsp + 0x2c8]
mov rcx, qword [rbp + 0x180]
xor rcx, rsp
call fcn.14001a320
mov rbx, qword [rsp + 0x2d8]
add rsp, 0x290
pop r15
pop r12
pop rdi
pop rsi
pop rbp
ret
xor al, al
jmp 0x14000ddf9