Function at 0x13151201
Capabilities:
Get disk information
Get hostname
Initialize winsock library

Disassembly:
push ebp
lea ebp, [esp - 0x428]
sub esp, 0x4a8
mov eax, dword [0x13183360]
xor eax, ebp
mov dword [ebp + 0x424], eax
mov eax, dword [ebp + 0x430]
fld dword [0x131601dc]
push ebx
fstp dword [ebp - 0xc]
push esi
fld dword [0x131601d8]
push edi
fstp dword [ebp - 8]
fld dword [0x131601d4]
push 0x64
pop ecx
fstp dword [ebp - 4]
fldz
push 0x3d
pop edx
fst dword [ebp]
push 0x25
mov dword [ebp + 4], eax
mov eax, dword [ebp + 0x434]
mov dword [ebp + 8], eax
pop eax
push 0x73
pop edi
push 0x26
pop esi
push 0x69
pop ebx
mov dword [ebp - 0x64], ebx
mov dword [ebp - 0x24], ebx
xor ebx, ebx
mov dword [ebp - 0x68], esi
mov dword [ebp - 0x44], esi
mov dword [ebp - 0x2c], esi
mov dword [ebp - 0x80], 0x6d
mov dword [ebp - 0x7c], 0x6f
mov dword [ebp - 0x78], ecx
mov dword [ebp - 0x74], edx
mov dword [ebp - 0x70], eax
mov dword [ebp - 0x6c], edi
mov dword [ebp - 0x60], ecx
mov dword [ebp - 0x5c], edx
mov dword [ebp - 0x58], eax
mov dword [ebp - 0x54], edi
mov dword [ebp - 0x50], 0x5f
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x48], ecx
mov dword [ebp - 0x40], 0x75
mov dword [ebp - 0x3c], 0x70
mov dword [ebp - 0x38], edx
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x30], ecx
mov dword [ebp - 0x28], 0x6d
mov dword [ebp - 0x20], ecx
mov dword [ebp - 0x1c], edx
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x14], edi
mov dword [ebp - 0x10], ebx
mov dword [ebp + 0xc], ebx
xor esi, esi
lea ecx, [ebp + esi*4 - 0xc]
fcom dword [ecx]
fnstsw ax
test ah, 0x44
jnp 0x13151304
fld dword [ecx]
call fcn.13155f10
mov byte [ebp + esi + 0x1a4], al
mov byte [ebp + esi + 0x1a5], bl
inc esi
cmp esi, 0xfffff
jl 0x131512d9
push ebx
fstp st(0)
push ebx
push ebx
push ebx
lea eax, [ebp + 0xc]
push eax
push ebx
push ebx
lea eax, [ebp + 0x1a4]
push eax
call dword [sym.imp.KERNEL32.DLL_GetVolumeInformationA]
xor eax, eax
lea esi, [ebp + eax*4 - 0x80]
cmp dword [esi], ebx
je 0x1315133f
mov cl, byte [esi]
mov byte [ebp + eax + 0x1a4], cl
mov byte [ebp + eax + 0x1a5], bl
inc eax
cmp eax, 0xfffff
jl 0x1315131f
lea eax, [ebp + 0x14]
push eax
push 0x202
call sub.WS2_32.dll_WSAStartup
mov esi, dword [sym.imp.KERNEL32.DLL_GetProcessHeap]
push 0x800
push ebx
call esi
mov edi, dword [sym.imp.KERNEL32.DLL_HeapAlloc]
push eax
call edi
mov ecx, dword [ebp + 8]
push 0x800
push ebx
mov dword [ecx], eax
call esi
push eax
call edi
push 0xff
push eax
mov dword [ebp + 0x10], eax
call sub.WS2_32.dll_gethostname
xor eax, eax
lea edi, [eax*4 + str.soboc19]
cmp dword [edi], ebx
je 0x131513a7
mov cl, byte [edi]
mov byte [ebp + eax + 0x3a4], cl
mov byte [ebp + eax + 0x3a5], bl
inc eax
cmp eax, 0xfffff
jl 0x13151384
lea eax, [ebp + 0x3a4]
push eax
call dword [sym.imp.WINMM.dll_timeGetTime]
push eax
push dword [ebp + 0xc]
lea eax, [ebp + 0x1a4]
push dword [ebp + 0x10]
push dword [ebp + 4]
push eax
mov eax, dword [ebp + 8]
push dword [eax]
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x1c
push dword [ebp + 0x10]
push ebx
call esi
push eax
call dword [sym.imp.KERNEL32.DLL_HeapFree]
call sub.WS2_32.dll_WSACleanup
mov ecx, dword [ebp + 0x424]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.13155e7a
add ebp, 0x428
leave
ret