Function at 0x140003908
Capabilities:
Get disk information
Get hostname

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x80]
sub rsp, 0x180
mov rdx, qword [0x14007c158]
xor esi, esi
mov r14, rcx
test rdx, rdx
je 0x140003947
call fcn.1400095b8
jmp 0x140003c77
lea rcx, [rbp - 0x80]
call fcn.140009174
lea rdx, [rbp + 0xb8]
mov dword [rbp + 0xb8], 0x400
lea rcx, [0x14007ca00]
call qword [sym.imp.KERNEL32.dll_GetComputerNameA]
lea rdx, [0x14007ca00]
lea rcx, [rbp - 0x70]
call fcn.140009cdc
xor eax, eax
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xor ecx, ecx
cpuid
mov dword [rsp + 0x40], eax
lea rax, [rsp + 0x40]
mov dword [rsp + 0x48], ecx
mov ecx, 8
mov dword [rsp + 0x4c], edx
movzx edx, si
mov dword [rsp + 0x44], ebx
add dx, word [rax]
lea rax, [rax + 2]
sub rcx, 1
jne 0x1400039a9
lea rcx, [rbp - 0x70]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_short_int____ptr64]
mov dword [rsp + 0x38], esi
lea r9, [rbp + 0xb8]
mov qword [rsp + 0x30], rsi
lea rcx, [0x1400710cc]
mov qword [rsp + 0x28], rsi
xor r8d, r8d
xor edx, edx
mov qword [rsp + 0x20], rsi
mov dword [rbp + 0xb8], esi
call qword [sym.imp.KERNEL32.dll_GetVolumeInformationA]
mov edx, dword [rbp + 0xb8]
lea rcx, [rbp - 0x70]
shr edx, 0x10
add dx, word [rbp + 0xb8]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_short_int____ptr64]
lea rdx, [rsp + 0x40]
lea rcx, [rbp - 0x80]
call fcn.1400090d4
mov rdi, qword [rsp + 0x50]
cmp rdi, 0x14
jae 0x140003b69
movabs rcx, 0x7fffffffffffffff
mov edx, reloc.WLDAP32.dll_Ordinal_22
mov rax, rcx
sub rax, rdi
cmp rax, rdi
jb 0x140003c9b
cmp qword [rsp + 0x58], 0x10
lea r12, [rsp + 0x40]
lea r13, [rsp + 0x40]
mov qword [rsp + 0x60], rsi
cmovae r12, qword [rsp + 0x40]
lea r15, [rdi + rdi]
cmovae r13, qword [rsp + 0x40]
lea ebx, [rdx - 7]
lea rsi, [rsp + 0x60]
cmp r15, rbx
jbe 0x140003aea
mov rbx, r15
or rbx, 0xf
cmp rbx, rcx
jbe 0x140003a94
mov rbx, rcx
movabs rax, 0x8000000000000027
jmp 0x140003ab5
cmp rbx, rdx
cmovb rbx, rdx
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x140003ad4
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140003ca1
mov rcx, rax
call fcn.14006063c
test rax, rax
je 0x140003c28
lea rsi, [rax + 0x27]
and rsi, 0xffffffffffffffe0
mov qword [rsi - 8], rax
jmp 0x140003ae5
test rcx, rcx
je 0x140003ae3
call fcn.14006063c
mov rsi, rax
jmp 0x140003ae5
xor esi, esi
mov qword [rsp + 0x60], rsi
mov r8, rdi
mov qword [rsp + 0x70], r15
mov rdx, r12
mov qword [rsp + 0x78], rbx
mov rcx, rsi
call sub.VCRUNTIME140.dll_memcpy
lea rcx, [rdi + rsi]
mov r8, rdi
mov rdx, r13
call sub.VCRUNTIME140.dll_memcpy
lea rdx, [rsp + 0x60]
mov byte [rsi + r15], 0
lea rcx, [rsp + 0x40]
call fcn.1400094e0
mov rdx, qword [rsp + 0x78]
cmp rdx, 0x10
jb 0x140003b62
mov rcx, qword [rsp + 0x60]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003b5d
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003c28
call fcn.1400608c8
xor esi, esi
jmp 0x140003a1a
jbe 0x140003be7
cmp qword [rsp + 0x58], 0x10
lea rdx, [rsp + 0x40]
mov r8d, reloc.WS2_32.dll_sendto
mov qword [rsp + 0x60], rsi
cmovae rdx, qword [rsp + 0x40]
lea rcx, [rsp + 0x60]
mov qword [rsp + 0x70], rsi
mov qword [rsp + 0x78], reloc.WS2_32.dll_ntohs
call fcn.140009b14
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x40]
call fcn.1400094e0
mov rdx, qword [rsp + 0x78]
cmp rdx, 0x10
jb 0x140003be7
mov rcx, qword [rsp + 0x60]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003be2
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003c28
call fcn.1400608c8
lea rdx, [rsp + 0x40]
mov rcx, r14
call fcn.1400037a0
mov rdx, qword [rsp + 0x58]
cmp rdx, 0x10
jb 0x140003c34
mov rcx, qword [rsp + 0x40]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003c2f
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140003c2f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400608c8
mov rax, qword [rbp - 0x80]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_stringstream_char__struct_std::char_traits_char___class_std::allocator_char__.0
mov qword [rbp + rcx - 0x80], rax
mov rax, qword [rbp - 0x80]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x98]
mov dword [rsp + rcx + 0x7c], edx
lea rcx, [rbp - 0x68]
call fcn.140009018
lea rcx, [rbp - 0x60]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_iostream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rbp + 0x18]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea r11, [rsp + 0x180]
mov rax, r14
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.140002b34
int3
call fcn.140002a94
int3