Function at 0x140006560
Capabilities:
Get disk information
Get hostname

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
push rbp
push rdi
push r14
lea rbp, [rsp - 0x1e0]
sub rsp, 0x2e0
mov rax, qword [0x140117740]
xor rax, rsp
mov qword [rbp + 0x1d0], rax
mov rsi, rcx
mov qword [rsp + 0x68], rcx
lea rcx, [rbp - 0x50]
xor edx, edx
mov r8d, 0x105
xor edi, edi
call fcn.1400dec70
xor edx, edx
lea rcx, [rbp + 0xc0]
mov r8d, 0x105
call fcn.1400dec70
mov dword [rsp + 0x54], edi
lea r9, [rsp + 0x54]
mov dword [rsp + 0x58], edi
lea rdx, [rbp - 0x50]
mov dword [rsp + 0x5c], edi
movabs rcx, 0x474e1cf927b273cc
mov dword [rsp + 0x38], 0x105
movabs rax, 0xa6f6897833ff11c4
mov qword [rsp + 0x68], rax
mov r8d, 0x105
mov rax, qword [rsp + 0x68]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x68], rcx
mov rax, qword [rsp + 0x68]
mov qword [rsp + 0x48], rax
movabs rax, 0xa6f6897833a32b87
mov qword [rsp + 0x68], rax
mov rax, qword [rsp + 0x68]
mov qword [rbp - 0x80], rax
mov qword [rsp + 0x68], rcx
lea rcx, [rsp + 0x40]
mov rax, qword [rsp + 0x68]
movdqa xmm0, xmmword [rsp + 0x40]
mov qword [rbp - 0x78], rax
lea rax, [rbp + 0xc0]
xorps xmm0, xmmword [rbp - 0x80]
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x5c]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x58]
mov qword [rsp + 0x20], rax
movdqa xmmword [rsp + 0x40], xmm0
call qword [sym.imp.KERNEL32.dll_GetVolumeInformationA]
lea r14, [0x140173ef0]
test eax, eax
je 0x1400066c3
mov ecx, edi
movzx eax, byte [rcx + r14]
mov byte [rbp + rcx - 0x50], al
inc rcx
cmp rcx, 8
jb 0x140006680
mov eax, dword [rsp + 0x54]
mov rcx, rdi
mov dword [0x1401740fc], eax
nop
movzx eax, byte [rcx + r14 + 0x105]
mov byte [rbp + rcx + 0xc0], al
inc rcx
cmp rcx, 8
jb 0x1400066a0
mov eax, dword [rsp + 0x58]
mov dword [0x140174100], eax
lea rdx, [rsp + 0x60]
mov dword [rsp + 0x60], reloc.WS2_32.dll_recv
lea rcx, [rbp - 0x70]
call qword [sym.imp.KERNEL32.dll_GetComputerNameA]
test eax, eax
je 0x140006710
mov rcx, rdi
nop dword [rax]
nop word [rax + rax]
movzx eax, byte [rcx + r14 + 0x218]
mov byte [rbp + rcx - 0x70], al
inc rcx
cmp rcx, 8
jb 0x1400066f0
nop word [rax + rax]
xorps xmm0, xmm0
xor eax, eax
movdqu xmmword [rsp + 0x68], xmm0
xor ecx, ecx
cmp dword [reloc.WS2_32.dll_accept], 2
cpuid
mov dword [rsp + 0x68], eax
mov dword [rsp + 0x6c], ebx
mov dword [rsp + 0x70], ecx
mov dword [rsp + 0x74], edx
movdqu xmm0, xmmword [rsp + 0x68]
movups xmm1, xmm0
psrldq xmm0, 8
paddw xmm1, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 4
paddw xmm1, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 2
paddw xmm1, xmm0
movd r8d, xmm1
mov word [0x14017411c], r8w
jl 0x14000679b
pmovsxdq xmm2, qword [0x140174120]
pmovsxdq xmm3, qword [0x140174128]
paddq xmm3, xmm2
movdqa xmm0, xmm3
psrldq xmm0, 8
paddq xmm3, xmm0
movq rdi, xmm3
jmp 0x1400067d9
mov rdx, rdi
mov rbx, rdi
mov rcx, rdi
movsxd rax, dword [r14 + rcx*4 + 0x230]
add rdx, rax
movsxd rax, dword [r14 + rcx*4 + 0x234]
add rbx, rax
add rcx, 2
cmp rcx, 3
jb 0x1400067a4
cmp rcx, 4
jae 0x1400067d2
movsxd rdi, dword [r14 + rcx*4 + 0x230]
lea rax, [rbx + rdx]
add rdi, rax
mov eax, dword [reloc.WS2_32.dll_recv]
lea r9, [rbp - 0x5b]
add eax, dword [0x1401740fc]
movzx ecx, r8w
add rax, rdi
add rcx, rax
movabs r8, 0xcccccccccccccccd
nop dword [rax]
dec r9
mov rax, r8
mul rcx
shr rdx, 3
movzx eax, dl
shl al, 2
lea ebx, [rax + rdx]
add bl, bl
sub cl, bl
add cl, 0x30
mov byte [r9], cl
mov rcx, rdx
test rdx, rdx
jne 0x140006800
lea r8, [rbp - 0x5b]
mov rdx, r9
mov rcx, rsi
call fcn.140006870
mov rax, rsi
mov rcx, qword [rbp + 0x1d0]
xor rcx, rsp
call fcn.1400ace10
lea r11, [rsp + 0x2e0]
mov rbx, qword [r11 + 0x28]
mov rsi, qword [r11 + 0x30]
mov rsp, r11
pop r14
pop rdi
pop rbp
ret