Function at 0x180006c5c
Capabilities:
Get disk information
Read .ini file
Set current directory

Disassembly:
push rbx
sub rsp, 0x40
cmp dword [0x1800ca500], 0x28547f86
mov ebx, edx
jne 0x180006e3b
xor r9d, r9d
lea rdx, str.5mAkO3I133L42Yp81FEmZIDndhrAz
xor r8d, r8d
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_EnumTimeFormatsEx]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_DisassociateCurrentThreadFromCallback]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetStartupInfoW]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_FreeEnvironmentStringsW]
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_IsProcessInJob]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CloseThreadpoolIo]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetLargestConsoleWindowSize]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetMaximumProcessorCount]
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
call qword [sym.imp.KERNEL32.dll_GetLastError]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetCommTimeouts]
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThreadpoolWork]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetSystemTime]
call qword [sym.imp.KERNEL32.dll_GetVersion]
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetVolumeNameForVolumeMountPointW]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetCurrentDirectoryW]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_RemoveVectoredExceptionHandler]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetProcessVersion]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetCommMask]
call qword [sym.imp.KERNEL32.dll_GetThreadErrorMode]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetEvent]
xor r9d, r9d
lea rdx, str.B9u661iZAV6twjkG
xor r8d, r8d
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetFileMUIInfo]
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThreadpoolTimer]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileSectionW]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetThreadIdealProcessorEx]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetThreadId]
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileSectionNamesW]
call qword [sym.imp.KERNEL32.dll_IsDebuggerPresent]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetFirmwareType]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetThreadpoolWaitEx]
and qword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetAppContainerNamedObjectPath]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetConsoleAliasesLengthW]
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_LoadLibraryExW]
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_OpenFileMappingW]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetThreadUILanguage]
call qword [sym.imp.KERNEL32.dll_SetFileApisToOEM]
call qword [sym.imp.KERNEL32.dll_GetSystemDefaultLangID]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMemoryResourceNotification]
call qword [sym.imp.KERNEL32.dll_GetVersion]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SwitchToFiber]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_LocalHandle]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_VirtualProtect]
lea rcx, str.kovI7ssskIwJvGHkhb2318
call qword [sym.imp.KERNEL32.dll_IsValidLocaleName]
sub ebx, 1
je 0x180006e4c
sub ebx, 1
je 0x180006e79
cmp ebx, 1
je 0x180006e79
jmp 0x180006ea6
mov ecx, 0x122
lea rax, [0x1800069f0]
mov dword [rsp + 0x38], ecx
add rax, rcx
mov qword [rsp + 0x30], rax
lea rcx, [rsp + 0x30]
movaps xmm0, xmmword [rsp + 0x30]
movdqa xmmword [rsp + 0x30], xmm0
call fcn.18000b168
mov ecx, 0x1a0
lea rax, [sym.quilibsuci64.dll_DER_GeneralizedTimeToTime]
mov dword [rsp + 0x38], ecx
add rax, rcx
mov qword [rsp + 0x30], rax
lea rcx, [rsp + 0x30]
movaps xmm0, xmmword [rsp + 0x30]
movdqa xmmword [rsp + 0x30], xmm0
call fcn.18000b168
mov eax, 1
add rsp, 0x40
pop rbx
ret