Function at 0x140160b10
Capabilities:
Get disk information
Get memory capacity
Manipulate boot configuration

Disassembly:
mov qword [rsp + 8], rcx
push rbx
push rdi
mov eax, 0x2388
call fcn.1401d5c30
sub rsp, rax
mov qword [rsp + 0x22a0], 0xfffffffffffffffe
movaps xmmword [rsp + 0x2370], xmm6
mov rax, qword [0x1402a25c0]
xor rax, rsp
mov qword [rsp + 0x2360], rax
mov dword [rsp + 0x2298], 0
mov edx, 1
mov rcx, qword [rsp + 0x23a0]
call fcn.14007bfdc
mov rcx, qword [rsp + 0x23a0]
add rcx, 0x618
call fcn.140007b70
movzx eax, al
test eax, eax
je 0x140160b98
xor r8d, r8d
xor edx, edx
lea rcx, str.Drive_cannot_be_empty.
call fcn.1400ef150
jmp 0x140161d80
mov rcx, qword [rsp + 0x23a0]
add rcx, 0x608
call fcn.1400012c0
mov rcx, rax
call fcn.1400a947c
test eax, eax
jle 0x140160dd0
lea rcx, [rsp + 0x1790]
call fcn.14000f930
nop
lea rcx, [rsp + 0x1760]
call fcn.140007bb0
nop
lea rdx, [rsp + 0x1760]
lea rcx, [rsp + 0x1790]
call fcn.1401b8110
call fcn.1400db290
mov dword [rsp + 0x1758], eax
mov dword [rsp + 0x1ad0], 0
mov dword [rsp + 0x1ad4], 0
jmp 0x140160c22
mov eax, dword [rsp + 0x1ad4]
add eax, 1
mov dword [rsp + 0x1ad4], eax
mov edi, dword [rsp + 0x1ad4]
lea rcx, [rsp + 0x1760]
call fcn.140007c30
cmp rdi, rax
jae 0x140160d70
mov edx, dword [rsp + 0x1ad4]
lea rcx, [rsp + 0x1760]
call fcn.140007c60
mov rdx, rax
mov rax, qword [rsp + 0x23a0]
mov eax, dword [rax + 0x210]
cmp dword [rdx + 0x198], eax
jne 0x140160c9f
mov rcx, qword [rsp + 0x23a0]
add rcx, 0x608
call fcn.1400012c0
mov rcx, rax
call fcn.1400a947c
mov edx, eax
mov eax, dword [rsp + 0x1ad0]
add eax, edx
mov dword [rsp + 0x1ad0], eax
jmp 0x140160c11
mov edx, dword [rsp + 0x1ad4]
lea rcx, [rsp + 0x1760]
call fcn.140007c60
mov rcx, rax
add rcx, 0x1a8
lea rdx, [0x140239e08]
call fcn.140006050
test eax, eax
je 0x140160d2e
mov edx, dword [rsp + 0x1ad4]
lea rcx, [rsp + 0x1760]
call fcn.140007c60
mov rcx, rax
add rcx, 0x1a8
lea rdx, [0x140239e18]
call fcn.140006050
test eax, eax
je 0x140160d2e
mov edx, dword [rsp + 0x1ad4]
lea rcx, [rsp + 0x1760]
call fcn.140007c60
mov rcx, rax
add rcx, 0x1a8
lea rdx, [0x140239e28]
call fcn.140006050
test eax, eax
je 0x140160d2e
jmp 0x140160c11
mov edx, dword [rsp + 0x1ad4]
lea rcx, [rsp + 0x1760]
call fcn.140007c60
mov rcx, rax
add rcx, 0x1b0
call fcn.1400012c0
mov rcx, rax
call fcn.1400a947c
mov edx, eax
mov eax, dword [rsp + 0x1ad0]
add eax, edx
mov dword [rsp + 0x1ad0], eax
jmp 0x140160c11
mov eax, dword [rsp + 0x1758]
cmp dword [rsp + 0x1ad0], eax
jl 0x140160db5
xor r8d, r8d
mov edx, gethostbyname
lea rcx, [0x140239e40]
call fcn.1400ef150
nop
lea rcx, [rsp + 0x1760]
call fcn.140007c00
nop
lea rcx, [rsp + 0x1790]
call fcn.140005d50
jmp 0x140161d80
lea rcx, [rsp + 0x1760]
call fcn.140007c00
nop
lea rcx, [rsp + 0x1790]
call fcn.140005d50
lea rcx, [rsp + 0x880]
call fcn.14000f930
nop
mov rax, qword [rsp + 0x23a0]
mov eax, dword [rax + 0x210]
mov dword [rsp + 0xa18], eax
lea rcx, [rsp + 0x880]
call fcn.1401d0980
mov dword [rsp + 0x878], 0
mov rcx, qword [rsp + 0x23a0]
add rcx, 0x2c0
call fcn.140017270
mov rcx, qword [rsp + 0x23a0]
add rcx, 0x2c0
mov edx, eax
call fcn.140017960
mov r8d, eax
lea rdx, [rsp + 0x2210]
mov rcx, qword [rsp + 0x23a0]
call fcn.14015f490
mov qword [rsp + 0x22a8], rax
mov eax, dword [rsp + 0x2298]
or eax, 1
mov dword [rsp + 0x2298], eax
mov rcx, qword [rsp + 0x22a8]
call fcn.1400012c0
lea rcx, [rsp + 0xa28]
mov rdx, rax
call fcn.140006050
test eax, eax
jne 0x140160f02
lea rcx, [rsp + 0xa30]
call fcn.1400012c0
mov rcx, rax
call fcn.1400a947c
mov edi, eax
mov rcx, qword [rsp + 0x23a0]
add rcx, 0x608
call fcn.1400012c0
mov rcx, rax
call fcn.1400a947c
cmp edi, eax
jne 0x140160f02
lea rcx, [rsp + 0xa38]
call fcn.1400012c0
mov rcx, rax
call fcn.1400a947c
mov edi, eax
mov rcx, qword [rsp + 0x23a0]
add rcx, 0x610
call fcn.1400012c0
mov rcx, rax
call fcn.1400a947c
cmp edi, eax
jne 0x140160f02
mov dword [rsp + 0x22b0], 0
jmp 0x140160f0d
mov dword [rsp + 0x22b0], 1
movzx eax, byte [rsp + 0x22b0]
mov byte [rsp + 0x2208], al
mov eax, dword [rsp + 0x2298]
and eax, 1
test eax, eax
je 0x140160f3f
and dword [rsp + 0x2298], 0xfffffffe
lea rcx, [rsp + 0x2210]
call fcn.140001470
movzx eax, byte [rsp + 0x2208]
test eax, eax
je 0x1401610bc
mov dword [rsp + 0x878], 1
mov dword [rsp + 0x1ae0], 0
lea rdi, [rsp + 0x1ae4]
xor eax, eax
mov ecx, 0x3c
rep stosb byte [rdi], al
mov dword [rsp + 0x1ae0], 0x40
lea rcx, [rsp + 0x1ae0]
call qword [sym.imp.KERNEL32.dll_GlobalMemoryStatusEx]
xor edx, edx
mov rax, qword [rsp + 0x1af0]
mov ecx, 0x400
div rcx
xor edx, edx
mov ecx, 0x400
div rcx
pxor xmm0, xmm0
cvtsi2ss xmm0, rax
test rax, rax
jge 0x140160fc1
addss xmm0, dword [0x14025d260]
movss dword [rsp + 0x1b20], xmm0
xor edx, edx
mov rax, qword [rsp + 0x1ae8]
mov ecx, 0x400
div rcx
xor edx, edx
mov ecx, 0x400
div rcx
pxor xmm0, xmm0
cvtsi2ss xmm0, rax
test rax, rax
jge 0x140160ffc
addss xmm0, dword [0x14025d260]
movss dword [rsp + 0x1b24], xmm0
movss xmm6, dword [rsp + 0x1b24]
subss xmm6, dword [rsp + 0x1b20]
mov rcx, qword [rsp + 0x23a0]
add rcx, 0x608
call fcn.1400012c0
mov rcx, rax
call fcn.1400a947c
mov edi, eax
lea rcx, [rsp + 0xa30]
call fcn.1400012c0
mov rcx, rax
call fcn.1400a947c
mov edx, eax
mov eax, edi
sub eax, edx
movd xmm1, eax
cvtdq2ps xmm1, xmm1
movaps xmm0, xmm6
addss xmm0, xmm1
unpcklps xmm0, xmm0
cvtps2pd xmm1, xmm0
movd xmm0, dword [rsp + 0x1b24]
cvtps2pd xmm0, xmm0
mulsd xmm0, qword [0x14025d258]
comisd xmm1, xmm0
jbe 0x1401610a5
xor r8d, r8d
mov edx, gethostbyname
lea rcx, str.Your_RAM_cache_exceed_the_available_RAM_on_your_system__Please_set_it_lower.
call fcn.1400ef150
nop
lea rcx, [rsp + 0x880]
call fcn.140005d50
jmp 0x140161d80
lea rcx, [rsp + 0xa20]
xor edx, edx
call fcn.140006d70
movzx ecx, ax
call fcn.1401d5280
mov dword [rsp + 0x40], 0
lea rcx, [rsp + 0xa28]
lea rdx, [0x140239f80]
call fcn.140006050
test eax, eax
jne 0x140161114
mov rcx, qword [rsp + 0x23a0]
add rcx, 0x2c0
call fcn.140017270
mov rcx, qword [rsp + 0x23a0]
add rcx, 0x2c0
mov edx, eax
call fcn.140017960
cmp rax, 4
je 0x140161114
mov dword [rsp + 0x40], 1
mov rcx, qword [rsp + 0x23a0]
add rcx, 0x2c0
call fcn.140017270
mov rcx, qword [rsp + 0x23a0]
add rcx, 0x2c0
mov edx, eax
call fcn.140017960
mov r8d, eax
lea rdx, [rsp + 0x870]
mov rcx, qword [rsp + 0x23a0]
call fcn.14015f490
nop
mov rdx, qword [rsp + 0x23a0]
add rdx, 0x618
lea rcx, [rsp + 0xa20]
call fcn.140002d20
lea rcx, [rsp + 0xa28]
lea rdx, [rsp + 0x870]
call fcn.140002d20
lea rdx, [0x140239f88]
lea rcx, [rsp + 0x870]
call fcn.140006050
test eax, eax
je 0x14016121f
lea rdx, [0x140239f98]
lea rcx, [rsp + 0x870]
call fcn.140006050
test eax, eax
je 0x14016121f
lea rdx, [0x140239fa8]
lea rcx, [rsp + 0x870]
call fcn.140006050
test eax, eax
je 0x14016121f
lea rdx, [0x1402389dc]
lea rcx, [rsp + 0x2220]
call fcn.140002090
mov qword [rsp + 0x22b8], rax
mov rax, qword [rsp + 0x22b8]
mov qword [rsp + 0x22c0], rax
mov eax, dword [rsp + 0x2298]
or eax, 2
mov dword [rsp + 0x2298], eax
mov rax, qword [rsp + 0x22c0]
mov qword [rsp + 0x22c8], rax
jmp 0x140161235
mov rax, qword [rsp + 0x23a0]
add rax, 0x608
mov qword [rsp + 0x22c8], rax
mov rax, qword [rsp + 0x22c8]
mov qword [rsp + 0x2218], rax
lea rcx, [rsp + 0xa30]
mov rdx, qword [rsp + 0x2218]
call fcn.140002d20
nop
mov eax, dword [rsp + 0x2298]
and eax, 2
test eax, eax
je 0x14016127e
and dword [rsp + 0x2298], 0xfffffffd
lea rcx, [rsp + 0x2220]
call fcn.140001470
lea rdx, [0x140239fb8]
lea rcx, [rsp + 0x870]
call fcn.140006050
test eax, eax
jne 0x1401612ae
mov rax, qword [rsp + 0x23a0]
add rax, 0x610
mov qword [rsp + 0x22d0], rax
jmp 0x1401612fb
lea rdx, [0x140238a1c]
lea rcx, [rsp + 0x2230]
call fcn.140002090
mov qword [rsp + 0x22d8], rax
mov rax, qword [rsp + 0x22d8]
mov qword [rsp + 0x22e0], rax
mov eax, dword [rsp + 0x2298]
or eax, 4
mov dword [rsp + 0x2298], eax
mov rax, qword [rsp + 0x22e0]
mov qword [rsp + 0x22d0], rax
mov rax, qword [rsp + 0x22d0]
mov qword [rsp + 0x2228], rax
lea rcx, [rsp + 0xa38]
mov rdx, qword [rsp + 0x2228]
call fcn.140002d20
nop
mov eax, dword [rsp + 0x2298]
and eax, 4
test eax, eax
je 0x140161344
and dword [rsp + 0x2298], 0xfffffffb
lea rcx, [rsp + 0x2230]
call fcn.140001470
lea rdx, [0x140239fc8]
lea rcx, [rsp + 0x870]
call fcn.140006050
test eax, eax
jne 0x140161374
mov rax, qword [rsp + 0x23a0]
add rax, 0x620
mov qword [rsp + 0x22e8], rax
jmp 0x1401613c1
lea rdx, [0x140238a84]
lea rcx, [rsp + 0x2240]
call fcn.140002090
mov qword [rsp + 0x22f0], rax
mov rax, qword [rsp + 0x22f0]
mov qword [rsp + 0x22f8], rax
mov eax, dword [rsp + 0x2298]
or eax, 8
mov dword [rsp + 0x2298], eax
mov rax, qword [rsp + 0x22f8]
mov qword [rsp + 0x22e8], rax
mov rax, qword [rsp + 0x22e8]
mov qword [rsp + 0x2238], rax
lea rcx, [rsp + 0xa40]
mov rdx, qword [rsp + 0x2238]
call fcn.140002d20
nop
mov eax, dword [rsp + 0x2298]
and eax, 8
test eax, eax
je 0x14016140a
and dword [rsp + 0x2298], 0xfffffff7
lea rcx, [rsp + 0x2240]
call fcn.140001470
lea rdx, [0x140239fd8]
lea rcx, [rsp + 0x870]
call fcn.140006050
test eax, eax
jne 0x140161456
mov rcx, qword [rsp + 0x23a0]
add rcx, 0x560
call fcn.140017270
mov rcx, qword [rsp + 0x23a0]
add rcx, 0x560
mov edx, eax
call fcn.140017960
mov qword [rsp + 0x2300], rax
jmp 0x140161462
mov qword [rsp + 0x2300], 0xfffffffffffffffe
lea rcx, [rsp + 0xa48]
mov r8, qword [rsp + 0x2300]
lea rdx, [0x140239e34]
call fcn.140002be0
lea rcx, [rsp + 0x880]
call fcn.1401b8720
lea rcx, [rsp + 0x13f0]
call fcn.14000fb00
nop
mov dword [rsp + 0x1588], 1
lea rcx, [rsp + 0x13f0]
call fcn.1401d0bc0
lea rcx, [rsp + 0x1730]
call fcn.140081e00
nop
lea rax, [rsp + 0x2248]
mov qword [rsp + 0x2250], rax
lea rdx, [0x140239fe8]
mov rcx, qword [rsp + 0x2250]
call fcn.140002090
mov qword [rsp + 0x2308], rax
mov r9d, 0xfffffffe
lea r8, [rsp + 0x1730]
mov rdx, qword [rsp + 0x2308]
lea rcx, [rsp + 0x880]
call fcn.1401d0720
lea rdx, [0x140238c0c]
lea rcx, [rsp + 0x868]
call fcn.140002090
nop
mov dword [rsp + 0x1b28], 0
jmp 0x140161541
mov eax, dword [rsp + 0x1b28]
add eax, 1
mov dword [rsp + 0x1b28], eax
movsxd rdi, dword [rsp + 0x1b28]
lea rcx, [rsp + 0x1730]
call fcn.14000f920
cmp rdi, rax
jge 0x140161589
movsxd rdx, dword [rsp + 0x1b28]
lea rcx, [rsp + 0x1730]
call fcn.14000f810
mov r8d, dword [rax]
lea rdx, [0x140239ff8]
lea rcx, [rsp + 0x868]
call fcn.14000f8d0
jmp 0x140161530
lea rcx, [rsp + 0x868]
call fcn.140007b70
movzx eax, al
test eax, eax
je 0x1401615ae
lea rax, [0x14023a008]
mov qword [rsp + 0x2310], rax
jmp 0x1401615c3
lea rcx, [rsp + 0x868]
call fcn.1400012c0
mov qword [rsp + 0x2310], rax
lea rcx, [rsp + 0x1598]
mov rdx, qword [rsp + 0x2310]
call fcn.140002060
lea rax, [rsp + 0x2258]
mov qword [rsp + 0x2260], rax
lea rdx, [0x14023a010]
mov rcx, qword [rsp + 0x2260]
call fcn.140002090
mov qword [rsp + 0x2318], rax
mov r9d, 0xfffffffe
lea r8, [rsp + 0x1730]
mov rdx, qword [rsp + 0x2318]
lea rcx, [rsp + 0x880]
call fcn.1401d0720
lea rcx, [rsp + 0x868]
call fcn.140001960
mov dword [rsp + 0x1b2c], 0
jmp 0x140161652
mov eax, dword [rsp + 0x1b2c]
add eax, 1
mov dword [rsp + 0x1b2c], eax
movsxd rdi, dword [rsp + 0x1b2c]
lea rcx, [rsp + 0x1730]
call fcn.14000f920
cmp rdi, rax
jge 0x14016169a
movsxd rdx, dword [rsp + 0x1b2c]
lea rcx, [rsp + 0x1730]
call fcn.14000f810
mov r8d, dword [rax]
lea rdx, [0x14023a020]
lea rcx, [rsp + 0x868]
call fcn.14000f8d0
jmp 0x140161641
lea rcx, [rsp + 0x868]
call fcn.140007b70
movzx eax, al
test eax, eax
je 0x1401616bf
lea rax, [0x14023a030]
mov qword [rsp + 0x2320], rax
jmp 0x1401616d4
lea rcx, [rsp + 0x868]
call fcn.1400012c0
mov qword [rsp + 0x2320], rax
lea rcx, [rsp + 0x15a0]
mov rdx, qword [rsp + 0x2320]
call fcn.140002060
lea rax, [rsp + 0x2268]
mov qword [rsp + 0x2270], rax
lea rdx, [0x14023a038]
mov rcx, qword [rsp + 0x2270]
call fcn.140002090
mov qword [rsp + 0x2328], rax
mov r9d, 0xfffffffe
lea r8, [rsp + 0x1730]
mov rdx, qword [rsp + 0x2328]
lea rcx, [rsp + 0x880]
call fcn.1401d0720
lea rcx, [rsp + 0x868]
call fcn.140001960
mov dword [rsp + 0x1b30], 0
jmp 0x140161763
mov eax, dword [rsp + 0x1b30]
add eax, 1
mov dword [rsp + 0x1b30], eax
movsxd rdi, dword [rsp + 0x1b30]
lea rcx, [rsp + 0x1730]
call fcn.14000f920
cmp rdi, rax
jge 0x1401617ab
movsxd rdx, dword [rsp + 0x1b30]
lea rcx, [rsp + 0x1730]
call fcn.14000f810
mov r8d, dword [rax]
lea rdx, [0x14023a040]
lea rcx, [rsp + 0x868]
call fcn.14000f8d0
jmp 0x140161752
lea rcx, [rsp + 0x1618]
lea rdx, [rsp + 0x868]
call fcn.140002d20
lea rcx, [rsp + 0x13f0]
call fcn.1401b8720
lea rdx, [0x14023a050]
lea rcx, [rsp + 0x870]
call fcn.140006050
test eax, eax
je 0x140161801
lea rdx, [0x14023a060]
lea rcx, [rsp + 0x870]
call fcn.140006050
test eax, eax
jne 0x14016189a
cmp dword [rsp + 0x878], 0
je 0x14016189a
lea rcx, [rsp + 0x1618]
call fcn.140007b70
movzx eax, al
test eax, eax
je 0x140161830
mov dword [rsp + 0x2330], 0
jmp 0x14016184c
lea rcx, [rsp + 0xa38]
call fcn.1400012c0
mov rcx, rax
call fcn.1400a947c
mov dword [rsp + 0x2330], eax
lea rcx, [rsp + 0x1618]
xor edx, edx
call fcn.140006d70
movzx ebx, ax
lea rcx, [rsp + 0xa30]
call fcn.1400012c0
mov rcx, rax
call fcn.1400a947c
mov edi, eax
lea rcx, [rsp + 0xa20]
xor edx, edx
call fcn.140006d70
mov r9d, dword [rsp + 0x2330]
movzx r8d, bx
mov edx, edi
movzx ecx, ax
call fcn.1401d5710
lea rdx, [0x14023a070]
lea rcx, [rsp + 0x870]
call fcn.140006050
test eax, eax
jne 0x14016190c
cmp dword [rsp + 0x878], 0
je 0x14016190c
lea rcx, [rsp + 0x1620]
call fcn.1400012c0
mov rcx, rax
call fcn.1400a947c
mov ebx, eax
lea rcx, [rsp + 0xa30]
call fcn.1400012c0
mov rcx, rax
call fcn.1400a947c
mov edi, eax
lea rcx, [rsp + 0xa20]
xor edx, edx
call fcn.140006d70
mov r9d, ebx
mov r8d, 1
mov edx, edi
movzx ecx, ax
call fcn.1401d53f0
cmp dword [rsp + 0x40], 0
je 0x140161b01
lea rcx, [rsp + 0x1b70]
call fcn.14000f930
nop
lea rcx, [rsp + 0x1b38]
call fcn.140007bb0
nop
lea rdx, [rsp + 0x1b38]
lea rcx, [rsp + 0x1b70]
call fcn.1401b8110
mov dword [rsp + 0x1eb0], 0
jmp 0x140161966
mov eax, dword [rsp + 0x1eb0]
add eax, 1
mov dword [rsp + 0x1eb0], eax
mov edi, dword [rsp + 0x1eb0]
lea rcx, [rsp + 0x1b38]
call fcn.140007c30
cmp rdi, rax
jae 0x140161ae6
mov edx, dword [rsp + 0x1eb0]
lea rcx, [rsp + 0x1b38]
call fcn.140007c60
mov rcx, rax
add rcx, 0x1a8
lea rdx, [0x14023a080]
call fcn.140006050
test eax, eax
je 0x1401619b3
jmp 0x140161955
mov edx, dword [rsp + 0x1eb0]
lea rcx, [rsp + 0x1b38]
call fcn.140007c60
mov rcx, rax
add rcx, 0x1b8
call fcn.1400012c0
mov rcx, rax
call fcn.1400a947c
test eax, eax
jne 0x1401619e7
jmp 0x140161955
mov edx, dword [rsp + 0x1eb0]
lea rcx, [rsp + 0x1b38]
call fcn.140007c60
mov rcx, rax
add rcx, 0x1a0
xor edx, edx
call fcn.140006d70
movzx ecx, ax
call fcn.1401d5280
mov edx, dword [rsp + 0x1eb0]
lea rcx, [rsp + 0x1b38]
call fcn.140007c60
mov rcx, rax
add rcx, 0x1b0
call fcn.1400012c0
mov rcx, rax
call fcn.1400a947c
mov edi, eax
mov edx, dword [rsp + 0x1eb0]
lea rcx, [rsp + 0x1b38]
call fcn.140007c60
mov rcx, rax
add rcx, 0x1a0
xor edx, edx
call fcn.140006d70
xor r9d, r9d
xor r8d, r8d
mov edx, edi
movzx ecx, ax
call fcn.1401d5710
lea rcx, [rsp + 0x1ec0]
call fcn.14000f930
nop
mov edx, dword [rsp + 0x1eb0]
lea rcx, [rsp + 0x1b38]
call fcn.140007c60
mov eax, dword [rax + 0x198]
mov dword [rsp + 0x2058], eax
lea rcx, [rsp + 0x1ec0]
call fcn.1401d0980
lea rcx, [rsp + 0x2078]
lea rdx, [0x140238c34]
call fcn.140002060
lea rcx, [rsp + 0x1ec0]
call fcn.1401b8720
nop
lea rcx, [rsp + 0x1ec0]
call fcn.140005d50
jmp 0x140161955
lea rcx, [rsp + 0x1b38]
call fcn.140007c00
nop
lea rcx, [rsp + 0x1b70]
call fcn.140005d50
mov edx, 1
mov ecx, 1
call fcn.1401b8f10
lea rcx, [rsp + 0xbc8]
call fcn.140002d50
nop
mov rcx, qword [rsp + 0x23a0]
add rcx, 0x618
xor edx, edx
call fcn.140006d70
movzx r8d, ax
lea rdx, [0x14023a08c]
lea rcx, [rsp + 0xbc8]
call fcn.140002be0
xor edx, edx
mov word [rsp + 0xbe0], dx
lea rdi, [rsp + 0xbe2]
xor eax, eax
mov ecx, 0x800
rep stosb byte [rdi], al
xor eax, eax
mov word [rsp + 0x50], ax
lea rdi, [rsp + 0x52]
xor eax, eax
mov ecx, 0x800
rep stosb byte [rdi], al
lea r8, [0x14023a094]
lea rdx, [rsp + 0xbc8]
lea rcx, [rsp + 0x2280]
call fcn.1400010b0
mov qword [rsp + 0x2338], rax
mov rcx, qword [rsp + 0x2338]
call fcn.1400012c0
mov rcx, rax
mov dword [rsp + 0x38], 0x400
lea rax, [rsp + 0x50]
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0xbd0]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0xbc0]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x860]
mov r8d, 0x400
lea rdx, [rsp + 0xbe0]
call qword [sym.imp.KERNEL32.dll_GetVolumeInformationW]
test eax, eax
je 0x140161c09
mov dword [rsp + 0x2340], 1
jmp 0x140161c14
mov dword [rsp + 0x2340], 0
movzx eax, byte [rsp + 0x2340]
mov byte [rsp + 0x2278], al
lea rcx, [rsp + 0x2280]
call fcn.140001470
movzx edx, byte [rsp + 0x2278]
test edx, edx
je 0x140161d1f
lea rcx, [rsp + 0x2200]
call fcn.140002d50
nop
mov r8d, dword [rsp + 0x860]
lea rdx, [0x14023a0a0]
lea rcx, [rsp + 0x2200]
call fcn.140002be0
lea rcx, [rsp + 0x2288]
call fcn.140001000
mov qword [rsp + 0x2348], rax
mov rax, qword [rsp + 0x2348]
mov qword [rsp + 0x2350], rax
lea r8, [0x14023a0b0]
mov rdx, qword [rsp + 0x2350]
lea rcx, [rsp + 0x2290]
call fcn.1400010b0
mov qword [rsp + 0x2358], rax
mov rcx, qword [rsp + 0x2358]
call fcn.1400012c0
mov rbx, rax
lea rcx, [rsp + 0x2200]
call fcn.1400012c0
mov rdi, rax
lea rcx, [rsp + 0xbc8]
call fcn.1400012c0
mov r9, rbx
mov r8, rdi
mov rdx, rax
lea rcx, str.DiskSerialNumber
call qword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
lea rcx, [rsp + 0x2290]
call fcn.140001470
nop
lea rcx, [rsp + 0x2288]
call fcn.140001470
nop
lea rcx, [rsp + 0x2200]
call fcn.140001470
mov rcx, qword [rsp + 0x23a0]
call fcn.14008115c
nop
lea rcx, [rsp + 0xbc8]
call fcn.140001470
nop
lea rcx, [rsp + 0x868]
call fcn.140001470
nop
lea rcx, [rsp + 0x1730]
call fcn.140081e20
nop
lea rcx, [rsp + 0x13f0]
call fcn.140005d50
nop
lea rcx, [rsp + 0x870]
call fcn.140001470
nop
lea rcx, [rsp + 0x880]
call fcn.140005d50
mov rcx, qword [rsp + 0x2360]
xor rcx, rsp
call fcn.1400a8040
movaps xmm6, xmmword [rsp + 0x2370]
add rsp, 0x2388
pop rdi
pop rbx
ret