Function at 0x14001a460
Capabilities:
Get disk information
Get hostname

Disassembly:
mov eax, 0x21c8
call fcn.140042f20
sub rsp, rax
mov rax, qword [0x1400a2078]
xor rax, rsp
mov qword [rsp + 0x21a0], rax
call fcn.140019390
test eax, eax
jne 0x14001a78a
mov qword [rsp + 0x21d0], rbx
lea rcx, [rsp + 0x20a0]
mov edx, 0x100
mov qword [rsp + 0x21b8], r14
lea rbx, [rsp + 0x20a0]
call qword [sym.imp.WS2_32.dll_gethostname]
test eax, eax
jne 0x14001a4f2
cmp byte [rsp + 0x20a0], al
je 0x14001a4f2
inc rbx
cmp byte [rbx], 0
jne 0x14001a4c4
lea rax, [rsp + 0x20a0]
cmp rax, rbx
jae 0x14001a4f2
xor r8d, r8d
lea rcx, [rsp + 0x20a0]
mov rdx, rbx
call fcn.140019620
add dword [0x1400aa944], eax
lea rcx, str.iphlpapi.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov r14, rax
test rax, rax
je 0x14001a7a1
mov qword [rsp + 0x21b0], r15
lea rdx, str.GetAdaptersAddresses
mov rcx, rax
mov qword [rsp + 0x40], 0x2000
xor r15d, r15d
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rbx, rax
test rax, rax
je 0x14001a7b8
lea rax, [rsp + 0x40]
mov qword [rsp + 0x21e0], rsi
lea r9, [rsp + 0x60]
mov qword [rsp + 0x20], rax
xor r8d, r8d
lea edx, [r15 + 0xe]
xor ecx, ecx
lea rsi, [rsp + 0x60]
call rbx
test eax, eax
je 0x14001a5c5
cmp eax, 0xe8
je 0x14001a6a2
cmp eax, 0x32
je 0x14001a6a2
cmp eax, 0x6f
jne 0x14001a771
mov rcx, qword [rsp + 0x40]
add rcx, 0x20
mov qword [rsp + 0x40], rcx
call fcn.140022f80
mov r15, rax
xor r8d, r8d
mov rsi, rax
mov r9, r15
lea rax, [rsp + 0x40]
xor ecx, ecx
mov qword [rsp + 0x20], rax
lea edx, [r8 + 0xe]
call rbx
test eax, eax
jne 0x14001a771
test r15, r15
je 0x14001a6a2
mov qword [rsp + 0x21d8], rbp
mov qword [rsp + 0x21c0], rdi
mov eax, dword [rsi + 0x64]
cmp eax, 6
je 0x14001a5e6
cmp eax, 0x47
jne 0x14001a678
movzx r9d, byte [rsi + 0x50]
lea rbx, [rsi + 0x50]
lea r8, str._02X
mov edx, 0x40
lea rcx, [rsp + 0x2060]
call fcn.140027a40
mov ebp, dword [rsi + 0x58]
lea rdi, [rsp + 0x2060]
add rbp, rbx
movsxd rcx, eax
add rdi, rcx
inc rbx
cmp rbx, rbp
jae 0x14001a65c
nop dword [rax]
nop dword [rax + rax]
movzx r9d, byte [rbx]
lea rdx, [rsp + 0x20a0]
sub rdx, rdi
lea r8, str.__02X
mov rcx, rdi
call fcn.140027a40
movsxd rcx, eax
inc rbx
add rdi, rcx
cmp rbx, rbp
jb 0x14001a630
mov r8d, 1
lea rcx, [rsp + 0x2060]
mov rdx, rdi
call fcn.140019620
add dword [0x1400aa968], eax
mov rsi, qword [rsi + 8]
test rsi, rsi
jne 0x14001a5d5
mov rdi, qword [rsp + 0x21c0]
mov rbp, qword [rsp + 0x21d8]
test r15, r15
je 0x14001a6a2
mov rcx, r15
call fcn.1400543f0
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov dword [rsp + 0x38], 0
lea rax, [rsp + 0x4c]
mov qword [rsp + 0x30], 0
lea r9, [rsp + 0x48]
mov qword [rsp + 0x28], rax
lea rcx, [0x140092780]
lea rax, [rsp + 0x50]
xor r8d, r8d
xor edx, edx
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_GetVolumeInformationA]
test eax, eax
je 0x14001a739
mov r9d, dword [rsp + 0x48]
lea r8, str._04X__04X
movzx eax, r9w
lea rcx, [rsp + 0x20a0]
shr r9d, 0x10
mov edx, 0x100
mov dword [rsp + 0x20], eax
call fcn.140027a40
movsxd rcx, eax
lea rdx, [rsp + 0x20a0]
add rdx, rcx
xor r8d, r8d
lea rcx, [rsp + 0x20a0]
call fcn.140019620
add dword [0x1400aa974], eax
mov rsi, qword [rsp + 0x21e0]
mov r15, qword [rsp + 0x21b0]
mov rbx, qword [rsp + 0x21d0]
mov r14, qword [rsp + 0x21b8]
mov rcx, qword [rsp + 0x21a0]
xor rcx, rsp
call fcn.140042470
add rsp, 0x21c8
ret
mov edx, eax
lea rcx, str.Surprise_return__d_from_GetProcAddress_n
call fcn.1400275f0
mov ecx, 1
call fcn.14002e560
int3
lea rcx, str.WSAStartup_failed._n
call fcn.1400275f0
mov ecx, 1
call fcn.14002e560
int3
lea rcx, str.LoadLibrary__iphlpapi.dll___failed._n
call fcn.1400275f0
mov ecx, 1
call fcn.14002e560
int3
lea rcx, str.GetProcAddress_h___GetAdaptersAddresses___failed._n
call fcn.1400275f0
mov ecx, 1
call fcn.14002e560
int3