Function at 0x140001450
Capabilities:
Accept command line arguments
Get common file path
Get hostname

Disassembly:
push rbp
sub rsp, 0x490
lea rbp, [rsp + 0x80]
movaps xmmword [rbp + 0x400], xmm6
mov dword [rbp + 0x420], ecx
mov qword [rbp + 0x428], rdx
call fcn.140001af0
mov rax, qword [sym.imp.KERNEL32.dll_GetTickCount64]
call rax
mov qword [rbp + 0x3f8], rax
lea rax, str.timeout_1___nul
mov qword [rbp + 0x3f0], rax
mov rax, qword [rbp + 0x3f0]
lea rdx, [0x14000a010]
mov rcx, rax
mov rax, qword [sym.imp.msvcrt.dll__popen]
call rax
mov qword [rbp + 0x3e8], rax
cmp qword [rbp + 0x3e8], 0
sete al
test al, al
je 0x1400014f9
lea rax, str.popen_failed
mov rcx, rax
call sub.msvcrt.dll_perror
mov ecx, 1
call sub.msvcrt.dll_exit
lea rax, [rbp + 0x2b0]
mov rdx, rax
lea rax, str.___s
mov rcx, rax
call fcn.140008180
mov rdx, qword [rbp + 0x3e8]
lea rax, [rbp + 0x2b0]
mov r8, rdx
mov edx, 0x100
mov rcx, rax
call sub.msvcrt.dll_fgets
test rax, rax
setne al
test al, al
jne 0x1400014e0
mov rax, qword [rbp + 0x3e8]
mov rcx, rax
mov rax, qword [sym.imp.msvcrt.dll__pclose]
call rax
mov rax, qword [sym.imp.KERNEL32.dll_GetCommandLineW]
call rax
mov qword [rbp + 0x3e0], rax
mov rax, qword [rbp + 0x3e0]
movzx eax, word [rax]
cmp ax, 0x57
jne 0x140001565
lea rax, [0x14000a025]
mov rcx, rax
call fcn.140008180
jmp 0x1400015a0
mov rax, qword [rbp + 0x3e0]
add rax, 6
movzx eax, word [rax]
cmp ax, 0x4b
jne 0x1400015a0
lea rax, str.checking..._n
mov rcx, rax
call fcn.140008180
lea rax, [rbp + 0xa0]
mov rdx, rax
mov ecx, 0x100
mov rax, qword [sym.imp.KERNEL32.dll_GetCurrentDirectoryW]
call rax
mov rax, qword [sym.imp.KERNEL32.dll_GetTickCount64]
call rax
mov qword [rbp + 0x3d8], rax
mov rax, qword [rbp + 0x3d8]
sub rax, qword [rbp + 0x3f8]
cmp rax, 0x7530
jbe 0x140001753
call sub.msvcrt.dll_getchar
mov dword [rbp + 0x3c0], eax
mov eax, dword [rbp + 0x3c0]
mov ecx, eax
call fcn.1400081e0
movq rax, xmm0
mov qword [rbp + 0x3b8], rax
movsd xmm0, qword [rbp + 0x3b8]
mov rax, qword [rbp + 0x3b8]
movapd xmm1, xmm0
mov rdx, rax
lea rax, [0x14000a035]
mov rcx, rax
call fcn.140008180
mov rax, qword [rbp + 0x3b8]
movq xmm0, rax
call sub.msvcrt.dll_acos
movq rax, xmm0
mov rdx, rax
movq xmm0, rdx
movapd xmm1, xmm0
mov rdx, rax
lea rax, [0x14000a035]
mov rcx, rax
call fcn.140008180
movsd xmm0, qword [rbp + 0x3b8]
movapd xmm6, xmm0
mulsd xmm6, xmm0
mov rax, qword [rbp + 0x3b8]
movq xmm0, rax
call sub.msvcrt.dll_atan
mulsd xmm6, xmm0
mov rax, qword [rbp + 0x3b8]
movq xmm0, rax
call sub.msvcrt.dll_acos
mulsd xmm0, xmm6
movq rax, xmm0
mov rdx, rax
movq xmm0, rdx
movapd xmm1, xmm0
mov rdx, rax
lea rax, [0x14000a035]
mov rcx, rax
call fcn.140008180
mov rax, qword [sym.imp.KERNEL32.dll_GetTickCount64]
call rax
cmp rax, 0x69
seta al
test al, al
je 0x1400016c2
mov eax, 1
jmp 0x140001a2a
lea rax, str.starting
mov rcx, rax
call fcn.140008180
lea rax, str.exit
mov rcx, rax
call fcn.140008180
mov dword [rbp + 0x2ac], 0x100
lea rdx, [rbp + 0x2ac]
lea rax, [rbp + 0xa0]
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetComputerNameW]
call rax
mov eax, dword [rbp + 0x2ac]
test eax, eax
je 0x140001a25
lea rax, [rbp + 0xa0]
mov rdx, rax
lea rax, str._ls_n
mov rcx, rax
call fcn.140008180
lea rax, str.done__n
mov rcx, rax
call fcn.140008180
lea rax, str.exit...
mov rcx, rax
call fcn.140008180
mov eax, 0
jmp 0x140001a2a
lea rax, str.starting
mov rcx, rax
call fcn.140008180
lea rax, str.exit
mov rcx, rax
call fcn.140008180
lea rax, [rbp - 0x60]
mov r8d, 0x100
mov edx, 0x41
mov rcx, rax
call sub.msvcrt.dll_memset
mov byte [rbp - 0x60], 0
lea rax, [rbp - 0x60]
mov rcx, rax
call sub.msvcrt.dll_strlen
mov rdx, rax
lea rax, [rbp - 0x60]
add rax, rdx
mov word [rax], 0x656b
mov byte [rax + 2], 0
lea rax, [rbp - 0x60]
mov rcx, rax
call sub.msvcrt.dll_strlen
mov rdx, rax
lea rax, [rbp - 0x60]
add rax, rdx
mov word [rax], 0x72
lea rax, [rbp - 0x60]
mov rcx, rax
call sub.msvcrt.dll_strlen
mov rdx, rax
lea rax, [rbp - 0x60]
add rax, rdx
mov dword [rax], 0x6c6562
lea rax, [rbp - 0x60]
mov rcx, rax
call sub.msvcrt.dll_strlen
mov rdx, rax
lea rax, [rbp - 0x60]
add rax, rdx
mov word [rax], 0x33
lea rax, [rbp - 0x60]
mov rcx, rax
call sub.msvcrt.dll_strlen
mov rdx, rax
lea rax, [rbp - 0x60]
add rax, rdx
mov word [rax], 0x32
lea rax, [rbp - 0x60]
mov rcx, rax
call sub.msvcrt.dll_strlen
mov rdx, rax
lea rax, [rbp - 0x60]
add rax, rdx
mov word [rax], 0x6b2e
mov byte [rax + 2], 0
lea rax, [rbp - 0x60]
mov rcx, rax
call sub.msvcrt.dll_strlen
mov rdx, rax
lea rax, [rbp - 0x60]
add rax, rdx
mov word [rax], 0x6c6c
mov byte [rax + 2], 0
mov byte [rbp - 0x5d], 0x6e
mov byte [rbp - 0x57], 0x64
lea rax, [rbp - 0x60]
mov rdx, rax
lea rax, [0x14000a05b]
mov rcx, rax
call fcn.140008180
lea rax, [rbp - 0x60]
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
call rax
mov qword [rbp + 0x3d0], rax
mov dword [rbp + 0x2a8], 0x100
lea rdx, [rbp + 0x2a8]
lea rax, [rbp + 0xa0]
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetComputerNameW]
call rax
mov eax, dword [rbp + 0x2a8]
test eax, eax
je 0x1400018e1
lea rax, [rbp + 0xa0]
mov rdx, rax
lea rax, str._ls_n
mov rcx, rax
call fcn.140008180
lea rax, str.done__n
mov rcx, rax
call fcn.140008180
mov rax, qword [sym.imp.KERNEL32.dll_GetTickCount]
call rax
xor eax, 0x12345
mov ecx, eax
call sub.msvcrt.dll_srand
lea rax, [rbp - 0x60]
mov r8d, 0x100
mov edx, 0
mov rcx, rax
call sub.msvcrt.dll_memset
lea rax, [rbp - 0x60]
mov rcx, rax
call sub.msvcrt.dll_strlen
mov rdx, rax
lea rax, [rbp - 0x60]
add rax, rdx
movabs rdx, 0x6578626c6c616853
mov qword [rax], rdx
movabs rdx, 0x6c656b75636578
mov qword [rax + 6], rdx
mov byte [rbp - 0x5e], 0x65
mov byte [rbp - 0x5b], 0x45
mov byte [rbp - 0x56], 0x74
lea rax, [rbp - 0x60]
mov rcx, rax
call sub.msvcrt.dll_strlen
sub rax, 1
mov byte [rbp + rax - 0x60], 0x57
lea rax, [rbp - 0x60]
mov rcx, qword [rbp + 0x3d0]
mov rdx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetProcAddress]
call rax
mov qword [rbp + 0x3c8], rax
mov rax, qword [rbp + 0x3c8]
mov rdx, rax
lea rax, str._lld_n
mov rcx, rax
call fcn.140008180
call sub.msvcrt.dll_rand
mov dword [rbp + 0x3c4], eax
mov edx, dword [rbp + 0x3c4]
movsxd rax, edx
imul rax, rax, 0x51eb851f
shr rax, 0x20
sar eax, 5
mov ecx, edx
sar ecx, 0x1f
sub eax, ecx
imul ecx, eax, 0x64
mov eax, edx
sub eax, ecx
cmp eax, 4
jne 0x140001a16
lea rax, str.get_ticket__n
mov rcx, rax
call fcn.140008180
lea rax, [rbp + 0xa0]
mov rdx, rax
mov ecx, 0x100
mov rax, qword [sym.imp.KERNEL32.dll_GetDllDirectoryW]
call rax
lea rax, str.done_n
mov rcx, rax
call fcn.140008180
lea rax, str.C:WindowsSystem32_
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_SetDllDirectoryW]
call rax
jmp 0x140001a25
lea rax, [0x14000a0a2]
mov rcx, rax
call fcn.140008180
mov eax, 0
movaps xmm6, xmmword [rbp + 0x400]
add rsp, 0x490
pop rbp
ret