Function at 0x1400039b0
Capabilities:
Get disk information
Get hostname

Disassembly:
mov qword [rsp + 8], rcx
push rbp
push r12
lea rbp, [rsp - 0xa8]
sub rsp, 0x1a8
mov rdx, qword [0x140606b70]
mov r12, rcx
test rdx, rdx
je 0x1400039e9
call fcn.140009a00
mov rax, r12
add rsp, 0x1a8
pop r12
pop rbp
ret
mov qword [rsp + 0x1d0], rbx
lea rcx, [rbp - 0x80]
mov qword [rsp + 0x1a0], rsi
mov qword [rsp + 0x188], r14
mov qword [rsp + 0x180], r15
call fcn.140009520
lea rdx, [rbp + 0xc8]
mov dword [rbp + 0xc8], 0x400
lea rcx, [0x140607460]
call qword [sym.imp.KERNEL32.dll_GetComputerNameA]
lea rdx, [0x140607460]
lea rcx, [rbp - 0x70]
call fcn.14000c9b0
xor ecx, ecx
xor eax, eax
cpuid
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x40], xmm0
mov dword [rsp + 0x4c], edx
movzx edx, word [rsp + 0x4e]
add dx, word [rsp + 0x4c]
mov dword [rsp + 0x48], ecx
add dx, word [rsp + 0x4a]
add dx, cx
mov dword [rsp + 0x40], eax
mov dword [rsp + 0x44], ebx
lea rcx, [rbp - 0x70]
add dx, word [rsp + 0x46]
add dx, bx
add dx, word [rsp + 0x42]
add dx, ax
call fcn.140009690
xor ebx, ebx
lea r9, [rbp + 0xc8]
mov dword [rsp + 0x38], ebx
lea rcx, [0x1400b674c]
mov qword [rsp + 0x30], rbx
xor r8d, r8d
mov qword [rsp + 0x28], rbx
xor edx, edx
mov qword [rsp + 0x20], rbx
mov dword [rbp + 0xc8], ebx
call qword [sym.imp.KERNEL32.dll_GetVolumeInformationA]
mov eax, dword [rbp + 0xc8]
lea rcx, [rbp - 0x70]
mov edx, eax
shr edx, 0x10
add dx, ax
call fcn.140009690
mov rcx, qword [rbp + 8]
xor eax, eax
mov qword [rsp + 0x50], rax
mov r15d, reloc.WS2_32.dll_ntohs
mov eax, ecx
mov qword [rsp + 0x60], rbx
and al, 0x22
mov qword [rsp + 0x70], rbx
mov qword [rsp + 0x78], r15
xorps xmm0, xmm0
mov r14d, ebx
mov esi, ebx
movups xmmword [rsp + 0x40], xmm0
cmp al, 2
je 0x140003b2b
mov rax, qword [rbp - 0x28]
mov r8, qword [rax]
test r8, r8
je 0x140003b2b
cmp r8, qword [rbp]
mov rax, qword [rbp - 0x48]
cmovb r8, qword [rbp]
mov rdx, qword [rax]
sub r8, rdx
jmp 0x140003b5c
test cl, 4
jne 0x140003b52
mov rax, qword [rbp - 0x30]
mov rcx, qword [rax]
test rcx, rcx
je 0x140003b52
mov rax, qword [rbp - 0x50]
mov rdx, qword [rax]
mov rax, qword [rbp - 0x18]
movsxd r8, dword [rax]
sub r8, rdx
add r8, rcx
jmp 0x140003b5c
mov r8, qword [rsp + 0x48]
mov rdx, qword [rsp + 0x40]
mov qword [rsp + 0x198], rdi
mov qword [rsp + 0x190], r13
test rdx, rdx
je 0x140003b94
lea rcx, [rsp + 0x60]
call fcn.14000af90
mov rsi, qword [rsp + 0x70]
cmp rsi, 0x14
jae 0x140003cfa
mov r14, qword [rsp + 0x60]
mov r15, qword [rsp + 0x78]
movabs rcx, 0x7fffffffffffffff
mov r8d, reloc.WLDAP32.dll_Ordinal_22
mov rax, rcx
movabs rdx, 0x8000000000000027
sub rax, rsi
cmp rax, rsi
jb 0x140003e28
cmp r15, 0x10
mov qword [rsp + 0x40], rbx
lea r13, [rsp + 0x60]
mov ebx, reloc.WS2_32.dll_ntohs
lea rax, [rsp + 0x60]
cmovae r13, r14
cmovae rax, r14
lea r12, [rsi + rsi]
mov qword [rbp + 0xc8], rax
lea rdi, [rsp + 0x40]
cmp r12, rbx
jbe 0x140003c5d
mov rbx, r12
or rbx, 0xf
cmp rbx, rcx
jbe 0x140003c06
mov rbx, rcx
mov rax, rdx
jmp 0x140003c28
cmp rbx, 0x16
cmovb rbx, r8
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x140003c47
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140003e2e
mov rcx, rax
call fcn.140066a84
test rax, rax
je 0x140003e22
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x140003c58
test rcx, rcx
je 0x140003c56
call fcn.140066a84
mov rdi, rax
jmp 0x140003c58
xor edi, edi
mov qword [rsp + 0x40], rdi
mov r8, rsi
mov qword [rsp + 0x50], r12
mov rdx, r13
mov qword [rsp + 0x58], rbx
mov rcx, rdi
call fcn.1400688f0
mov rdx, qword [rbp + 0xc8]
lea rcx, [rsi + rdi]
mov r8, rsi
call fcn.1400688f0
mov byte [rdi + r12], 0
cmp r15, 0x10
jb 0x140003cc4
lea rdx, [r15 + 1]
mov rax, r14
cmp rdx, 0x1000
jb 0x140003cbc
mov r14, qword [r14 - 8]
add rdx, 0x27
sub rax, r14
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003e22
mov rcx, r14
call fcn.140066814
movups xmm1, xmmword [rsp + 0x50]
movups xmm0, xmmword [rsp + 0x40]
movq rsi, xmm1
movups xmmword [rsp + 0x70], xmm1
mov qword [rsp + 0x70], rsi
movups xmmword [rsp + 0x60], xmm0
cmp rsi, 0x14
jae 0x140003cef
xor ebx, ebx
jmp 0x140003b8a
mov r12, qword [rbp + 0xc0]
cmp rsi, 0x14
jbe 0x140003d95
mov rsi, qword [rsp + 0x78]
lea r14, [rsp + 0x60]
mov rbx, qword [rsp + 0x60]
mov edi, Ordinal_33
lea ecx, [rdi + 1]
cmp rsi, 0x10
jb 0x140003d20
mov r14, rbx
call fcn.140066a84
mov qword [rsp + 0x50], reloc.WS2_32.dll_sendto
mov qword [rsp + 0x58], rdi
mov qword [rsp + 0x40], rax
movups xmm0, xmmword [r14]
movups xmmword [rax], xmm0
mov ecx, dword [r14 + 0x10]
mov dword [rax + 0x10], ecx
mov byte [rax + 0x14], 0
cmp rsi, 0x10
jb 0x140003d81
lea rdx, [rsi + 1]
mov rax, rbx
cmp rdx, 0x1000
jb 0x140003d79
mov rbx, qword [rbx - 8]
add rdx, 0x27
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003e22
mov rcx, rbx
call fcn.140066814
movups xmm0, xmmword [rsp + 0x40]
movups xmm1, xmmword [rsp + 0x50]
movups xmmword [rsp + 0x60], xmm0
movups xmmword [rsp + 0x70], xmm1
lea rdx, [rsp + 0x60]
mov rcx, r12
call fcn.1400036d0
mov rdx, qword [rsp + 0x78]
cmp rdx, 0x10
jb 0x140003ddb
mov rcx, qword [rsp + 0x60]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003dd6
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003e22
call fcn.140066814
lea rcx, [rbp - 0x80]
call fcn.1400038b0
mov r13, qword [rsp + 0x190]
mov rax, r12
mov rdi, qword [rsp + 0x198]
mov r14, qword [rsp + 0x188]
mov rsi, qword [rsp + 0x1a0]
mov rbx, qword [rsp + 0x1d0]
mov r15, qword [rsp + 0x180]
add rsp, 0x1a8
pop r12
pop rbp
ret
call fcn.14007301c
int3
call fcn.1400014d0
int3
call fcn.140001430
int3