Function at 0x140003b60
Capabilities:
Get disk information
Get hostname

Disassembly:
mov qword [rsp + 8], rcx
push rbp
push r12
lea rbp, [rsp - 0xa8]
sub rsp, 0x1a8
mov rdx, qword [0x140606f70]
mov r12, rcx
test rdx, rdx
je 0x140003b99
call fcn.140009580
mov rax, r12
add rsp, 0x1a8
pop r12
pop rbp
ret
mov qword [rsp + 0x1d0], rbx
lea rcx, [rbp - 0x80]
mov qword [rsp + 0x1a0], rsi
mov qword [rsp + 0x188], r14
mov qword [rsp + 0x180], r15
call fcn.140009000
lea rdx, [rbp + 0xc8]
mov dword [rbp + 0xc8], 0x400
lea rcx, [0x140607860]
call qword [sym.imp.KERNEL32.dll_GetComputerNameA]
lea rdx, [0x140607860]
lea rcx, [rbp - 0x70]
call fcn.14000c6f0
xor ecx, ecx
xor eax, eax
cpuid
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x40], xmm0
mov dword [rsp + 0x4c], edx
movzx edx, word [rsp + 0x4e]
add dx, word [rsp + 0x4c]
mov dword [rsp + 0x48], ecx
add dx, word [rsp + 0x4a]
add dx, cx
mov dword [rsp + 0x40], eax
mov dword [rsp + 0x44], ebx
lea rcx, [rbp - 0x70]
add dx, word [rsp + 0x46]
add dx, bx
add dx, word [rsp + 0x42]
add dx, ax
call fcn.1400091a0
xor ebx, ebx
lea r9, [rbp + 0xc8]
mov dword [rsp + 0x38], ebx
lea rcx, [0x1400b674c]
mov qword [rsp + 0x30], rbx
xor r8d, r8d
mov qword [rsp + 0x28], rbx
xor edx, edx
mov qword [rsp + 0x20], rbx
mov dword [rbp + 0xc8], ebx
call qword [sym.imp.KERNEL32.dll_GetVolumeInformationA]
mov eax, dword [rbp + 0xc8]
lea rcx, [rbp - 0x70]
mov edx, eax
shr edx, 0x10
add dx, ax
call fcn.1400091a0
mov rcx, qword [rbp + 8]
xor eax, eax
mov qword [rsp + 0x50], rax
mov r15d, reloc.WS2_32.dll_ntohs
mov eax, ecx
mov qword [rsp + 0x60], rbx
and al, 0x22
mov qword [rsp + 0x70], rbx
mov qword [rsp + 0x78], r15
xorps xmm0, xmm0
mov r14d, ebx
mov esi, ebx
movups xmmword [rsp + 0x40], xmm0
cmp al, 2
je 0x140003cdb
mov rax, qword [rbp - 0x28]
mov r8, qword [rax]
test r8, r8
je 0x140003cdb
cmp r8, qword [rbp]
mov rax, qword [rbp - 0x48]
cmovb r8, qword [rbp]
mov rdx, qword [rax]
sub r8, rdx
jmp 0x140003d0c
test cl, 4
jne 0x140003d02
mov rax, qword [rbp - 0x30]
mov rcx, qword [rax]
test rcx, rcx
je 0x140003d02
mov rax, qword [rbp - 0x50]
mov rdx, qword [rax]
mov rax, qword [rbp - 0x18]
movsxd r8, dword [rax]
sub r8, rdx
add r8, rcx
jmp 0x140003d0c
mov r8, qword [rsp + 0x48]
mov rdx, qword [rsp + 0x40]
mov qword [rsp + 0x198], rdi
mov qword [rsp + 0x190], r13
test rdx, rdx
je 0x140003d44
lea rcx, [rsp + 0x60]
call fcn.14000ab70
mov rsi, qword [rsp + 0x70]
cmp rsi, 0x14
jae 0x140003eaa
mov r14, qword [rsp + 0x60]
mov r15, qword [rsp + 0x78]
movabs rcx, 0x7fffffffffffffff
mov r8d, reloc.WLDAP32.dll_Ordinal_22
mov rax, rcx
movabs rdx, 0x8000000000000027
sub rax, rsi
cmp rax, rsi
jb 0x140003fd8
cmp r15, 0x10
mov qword [rsp + 0x40], rbx
lea r13, [rsp + 0x60]
mov ebx, reloc.WS2_32.dll_ntohs
lea rax, [rsp + 0x60]
cmovae r13, r14
cmovae rax, r14
lea r12, [rsi + rsi]
mov qword [rbp + 0xc8], rax
lea rdi, [rsp + 0x40]
cmp r12, rbx
jbe 0x140003e0d
mov rbx, r12
or rbx, 0xf
cmp rbx, rcx
jbe 0x140003db6
mov rbx, rcx
mov rax, rdx
jmp 0x140003dd8
cmp rbx, 0x16
cmovb rbx, r8
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x140003df7
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140003fde
mov rcx, rax
call fcn.1400667c4
test rax, rax
je 0x140003fd2
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x140003e08
test rcx, rcx
je 0x140003e06
call fcn.1400667c4
mov rdi, rax
jmp 0x140003e08
xor edi, edi
mov qword [rsp + 0x40], rdi
mov r8, rsi
mov qword [rsp + 0x50], r12
mov rdx, r13
mov qword [rsp + 0x58], rbx
mov rcx, rdi
call fcn.140068630
mov rdx, qword [rbp + 0xc8]
lea rcx, [rsi + rdi]
mov r8, rsi
call fcn.140068630
mov byte [rdi + r12], 0
cmp r15, 0x10
jb 0x140003e74
lea rdx, [r15 + 1]
mov rax, r14
cmp rdx, 0x1000
jb 0x140003e6c
mov r14, qword [r14 - 8]
add rdx, 0x27
sub rax, r14
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003fd2
mov rcx, r14
call fcn.140066554
movups xmm1, xmmword [rsp + 0x50]
movups xmm0, xmmword [rsp + 0x40]
movq rsi, xmm1
movups xmmword [rsp + 0x70], xmm1
mov qword [rsp + 0x70], rsi
movups xmmword [rsp + 0x60], xmm0
cmp rsi, 0x14
jae 0x140003e9f
xor ebx, ebx
jmp 0x140003d3a
mov r12, qword [rbp + 0xc0]
cmp rsi, 0x14
jbe 0x140003f45
mov rsi, qword [rsp + 0x78]
lea r14, [rsp + 0x60]
mov rbx, qword [rsp + 0x60]
mov edi, Ordinal_33
lea ecx, [rdi + 1]
cmp rsi, 0x10
jb 0x140003ed0
mov r14, rbx
call fcn.1400667c4
mov qword [rsp + 0x50], reloc.WS2_32.dll_sendto
mov qword [rsp + 0x58], rdi
mov qword [rsp + 0x40], rax
movups xmm0, xmmword [r14]
movups xmmword [rax], xmm0
mov ecx, dword [r14 + 0x10]
mov dword [rax + 0x10], ecx
mov byte [rax + 0x14], 0
cmp rsi, 0x10
jb 0x140003f31
lea rdx, [rsi + 1]
mov rax, rbx
cmp rdx, 0x1000
jb 0x140003f29
mov rbx, qword [rbx - 8]
add rdx, 0x27
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003fd2
mov rcx, rbx
call fcn.140066554
movups xmm0, xmmword [rsp + 0x40]
movups xmm1, xmmword [rsp + 0x50]
movups xmmword [rsp + 0x60], xmm0
movups xmmword [rsp + 0x70], xmm1
lea rdx, [rsp + 0x60]
mov rcx, r12
call fcn.140003870
mov rdx, qword [rsp + 0x78]
cmp rdx, 0x10
jb 0x140003f8b
mov rcx, qword [rsp + 0x60]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003f86
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003fd2
call fcn.140066554
lea rcx, [rbp - 0x80]
call fcn.140003a60
mov r13, qword [rsp + 0x190]
mov rax, r12
mov rdi, qword [rsp + 0x198]
mov r14, qword [rsp + 0x188]
mov rsi, qword [rsp + 0x1a0]
mov rbx, qword [rsp + 0x1d0]
mov r15, qword [rsp + 0x180]
add rsp, 0x1a8
pop r12
pop rbp
ret
call fcn.140072d5c
int3
call fcn.1400014d0
int3
call fcn.140001430
int3