Function at 0x140003f58
Capabilities:
Get disk information
Get hostname

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x80]
sub rsp, 0x180
mov rdx, qword [0x1405bd458]
xor esi, esi
mov r14, rcx
test rdx, rdx
je 0x140003f97
call fcn.140009874
jmp 0x1400042c7
lea rcx, [rbp - 0x80]
call fcn.140009398
lea rdx, [rbp + 0xb8]
mov dword [rbp + 0xb8], 0x400
lea rcx, [0x1405bdd00]
call qword [sym.imp.KERNEL32.dll_GetComputerNameA]
lea rdx, [0x1405bdd00]
lea rcx, [rbp - 0x70]
call fcn.14000a1cc
xor eax, eax
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xor ecx, ecx
cpuid
mov dword [rsp + 0x40], eax
lea rax, [rsp + 0x40]
mov dword [rsp + 0x48], ecx
mov ecx, 8
mov dword [rsp + 0x4c], edx
movzx edx, si
mov dword [rsp + 0x44], ebx
add dx, word [rax]
lea rax, [rax + 2]
sub rcx, 1
jne 0x140003ff9
lea rcx, [rbp - 0x70]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_short_int____ptr64]
mov dword [rsp + 0x38], esi
lea r9, [rbp + 0xb8]
mov qword [rsp + 0x30], rsi
lea rcx, [0x140072104]
mov qword [rsp + 0x28], rsi
xor r8d, r8d
xor edx, edx
mov qword [rsp + 0x20], rsi
mov dword [rbp + 0xb8], esi
call qword [sym.imp.KERNEL32.dll_GetVolumeInformationA]
mov edx, dword [rbp + 0xb8]
lea rcx, [rbp - 0x70]
shr edx, 0x10
add dx, word [rbp + 0xb8]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_short_int____ptr64]
lea rdx, [rsp + 0x40]
lea rcx, [rbp - 0x80]
call fcn.1400092f8
mov rdi, qword [rsp + 0x50]
cmp rdi, 0x14
jae 0x1400041b9
movabs rcx, 0x7fffffffffffffff
mov edx, reloc.WLDAP32.dll_Ordinal_22
mov rax, rcx
sub rax, rdi
cmp rax, rdi
jb 0x1400042eb
cmp qword [rsp + 0x58], 0x10
lea r12, [rsp + 0x40]
lea r13, [rsp + 0x40]
mov qword [rsp + 0x60], rsi
cmovae r12, qword [rsp + 0x40]
lea r15, [rdi + rdi]
cmovae r13, qword [rsp + 0x40]
lea ebx, [rdx - 7]
lea rsi, [rsp + 0x60]
cmp r15, rbx
jbe 0x14000413a
mov rbx, r15
or rbx, 0xf
cmp rbx, rcx
jbe 0x1400040e4
mov rbx, rcx
movabs rax, 0x8000000000000027
jmp 0x140004105
cmp rbx, rdx
cmovb rbx, rdx
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x140004124
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x1400042f1
mov rcx, rax
call fcn.140060eac
test rax, rax
je 0x140004278
lea rsi, [rax + 0x27]
and rsi, 0xffffffffffffffe0
mov qword [rsi - 8], rax
jmp 0x140004135
test rcx, rcx
je 0x140004133
call fcn.140060eac
mov rsi, rax
jmp 0x140004135
xor esi, esi
mov qword [rsp + 0x60], rsi
mov r8, rdi
mov qword [rsp + 0x70], r15
mov rdx, r12
mov qword [rsp + 0x78], rbx
mov rcx, rsi
call sub.VCRUNTIME140.dll_memcpy
lea rcx, [rdi + rsi]
mov r8, rdi
mov rdx, r13
call sub.VCRUNTIME140.dll_memcpy
lea rdx, [rsp + 0x60]
mov byte [rsi + r15], 0
lea rcx, [rsp + 0x40]
call fcn.1400097b4
mov rdx, qword [rsp + 0x78]
cmp rdx, 0x10
jb 0x1400041b2
mov rcx, qword [rsp + 0x60]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400041ad
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004278
call fcn.140061138
xor esi, esi
jmp 0x14000406a
jbe 0x140004237
cmp qword [rsp + 0x58], 0x10
lea rdx, [rsp + 0x40]
mov r8d, reloc.WS2_32.dll_sendto
mov qword [rsp + 0x60], rsi
cmovae rdx, qword [rsp + 0x40]
lea rcx, [rsp + 0x60]
mov qword [rsp + 0x70], rsi
mov qword [rsp + 0x78], reloc.WS2_32.dll_ntohs
call fcn.140009e28
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x40]
call fcn.1400097b4
mov rdx, qword [rsp + 0x78]
cmp rdx, 0x10
jb 0x140004237
mov rcx, qword [rsp + 0x60]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004232
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004278
call fcn.140061138
lea rdx, [rsp + 0x40]
mov rcx, r14
call fcn.140003df8
mov rdx, qword [rsp + 0x58]
cmp rdx, 0x10
jb 0x140004284
mov rcx, qword [rsp + 0x40]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000427f
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000427f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140061138
mov rax, qword [rbp - 0x80]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_stringstream_char__struct_std::char_traits_char___class_std::allocator_char__.0
mov qword [rbp + rcx - 0x80], rax
mov rax, qword [rbp - 0x80]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x98]
mov dword [rsp + rcx + 0x7c], edx
lea rcx, [rbp - 0x68]
call fcn.14000923c
lea rcx, [rbp - 0x60]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_iostream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rbp + 0x18]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea r11, [rsp + 0x180]
mov rax, r14
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.140002ae0
int3
call fcn.140002a40
int3