Function at 0x1400cabf3
Capabilities:
Get hostname
Get session user name

Disassembly:
jmp 0x140103d30
mov qword [rsp + 8], rcx
push rbp
push rdi
sub rsp, 0x278
lea rbp, [rsp + 0x30]
lea rdi, [rsp + 0x30]
mov ecx, 0x62
mov eax, 0xcccccccc
rep stosd dword [rdi], eax
mov rcx, qword [rsp + 0x298]
lea rcx, [0x14030419b]
call fcn.1400cf004
mov ecx, 0x494
call fcn.1400cdad8
mov qword [rbp + 0x128], rax
mov edx, __WSAFDIsSet
mov rcx, qword [rbp + 0x128]
call fcn.1400ca478
mov qword [rbp + 8], rax
mov edx, 0x100
mov rcx, qword [rbp + 0x128]
call fcn.1400ca478
mov qword [rbp + 0x48], rax
mov edx, 0x100
mov rcx, qword [rbp + 0x128]
call fcn.1400ca478
mov qword [rbp + 0x88], rax
mov edx, 0x100
mov rcx, qword [rbp + 0x128]
call fcn.1400ca478
mov qword [rbp + 0xa8], rax
mov edx, 0x100
mov rcx, qword [rbp + 0x128]
call fcn.1400ca478
mov qword [rbp + 0xc8], rax
mov dword [rbp + 0x104], 0x100
lea rdx, [rbp + 0x104]
mov rcx, qword [rbp + 0xa8]
call qword [sym.imp.ADVAPI32.dll_GetUserNameA]
mov dword [rbp + 0x104], 0x100
lea rdx, [rbp + 0x104]
mov rcx, qword [rbp + 0x88]
call qword [sym.imp.KERNEL32.dll_GetComputerNameA]
mov rcx, qword [rbp + 0xc8]
call fcn.1400ccebc
mov dword [rbp + 0x64], eax
mov r8d, 0x100
mov rdx, qword [rbp + 0xc8]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
test eax, eax
je 0x140103e8c
mov edx, 0x5c
mov rcx, qword [rbp + 0xc8]
call fcn.1400c95f0
mov qword [rbp + 0x148], rax
cmp qword [rbp + 0x148], 0
je 0x140103e8c
mov rax, qword [rbp + 0x148]
inc rax
mov qword [rbp + 0xe8], rax
cmp qword [rbp + 0x148], 0xffffffffffffffff
jne 0x140103e9a
lea rax, [0x1402787fc]
mov qword [rbp + 0xe8], rax
mov rax, qword [rbp + 8]
mov dword [rax], __WSAFDIsSet
mov rcx, qword [rbp + 8]
call qword [sym.imp.KERNEL32.dll_GetVersionExA]
mov rax, qword [rbp + 8]
mov eax, dword [rax + 4]
mov dword [0x1402e1ca8], eax
mov rdx, qword [rbp + 0x260]
movzx ecx, byte [0x1402e1ca8]
call fcn.1400ceeab
mov rdx, qword [rbp + 0x260]
mov rax, qword [rbp + 8]
movzx ecx, byte [rax + 8]
call fcn.1400ceeab
mov rax, qword [rbp + 8]
mov eax, dword [rax + 0xc]
and rax, 0xffff
mov rdx, qword [rbp + 0x260]
movzx ecx, ax
call fcn.1400ceaa5
mov rax, qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rbp + 0x168], rax
mov rdx, qword [rbp + 0x260]
mov ecx, dword [rbp + 0x16c]
call fcn.1400cdf79
mov rdx, qword [rbp + 0x260]
mov ecx, dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
call fcn.1400cdf79
mov rdx, qword [rbp + 0x260]
mov ecx, dword [sym.imp.KERNEL32.dll_GetProcAddress]
call fcn.1400cdf79
mov rdx, qword [rbp + 0x260]
mov ecx, dword [rbp + 0x64]
call fcn.1400cdf79
mov rax, qword [rbp + 0xe8]
mov qword [rsp + 0x28], rax
mov rax, qword [rbp + 0xa8]
mov qword [rsp + 0x20], rax
mov r9, qword [rbp + 0x88]
lea r8, str._s_t_s_t_s
mov edx, 0x100
mov rcx, qword [rbp + 0x48]
call fcn.1400cca7a
mov rcx, qword [rbp + 0x48]
call fcn.1400cbb43
mov dword [rbp + 0x24], eax
cmp dword [rbp + 0x24], 0x3a
jle 0x140103f9e
mov dword [rbp + 0x24], 0x3a
movsxd rax, dword [rbp + 0x24]
mov r8, qword [rbp + 0x48]
mov rdx, qword [rbp + 0x260]
mov rcx, rax
call fcn.1400cd56a
mov rcx, qword [rbp + 0x128]
call fcn.1400ccd4f
lea rcx, [rbp - 0x30]
lea rdx, reloc.WS2_32.dll_accept
call fcn.1400cdefc
lea rsp, [rbp + 0x248]
pop rdi
pop rbp
ret