Function at 0x140001090
Capabilities:
Get disk information
Set console window title

Disassembly:
push rdi
push r14
sub rsp, 0xa8
mov rax, qword [section..data]
xor rax, rsp
mov qword [rsp + 0x90], rax
mov ecx, 8
call fcn.140001540
mov qword [rsp + 0x30], rax
lea rcx, str.Edgey_Serial_Checker
xor edi, edi
mov r14, rax
mov qword [rax], rdi
call qword [sym.imp.KERNEL32.dll_SetConsoleTitleA]
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov rcx, rax
mov qword [r14], rax
lea rdx, [rsp + 0x30]
call qword [sym.imp.USER32.dll_GetWindowRect]
mov r8d, dword [rsp + 0x34]
mov r9d, 0x320
mov edx, dword [rsp + 0x30]
mov rcx, qword [r14]
mov dword [rsp + 0x28], 1
mov dword [rsp + 0x20], 0x3c0
call qword [sym.imp.USER32.dll_MoveWindow]
mov qword [rsp + 0x30], rdi
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
lea r8, [rsp + 0x30]
lea edx, [rdi + 8]
call qword [sym.imp.ADVAPI32.dll_OpenProcessToken]
test eax, eax
je 0x140001160
mov rcx, qword [rsp + 0x30]
lea rax, [rsp + 0x44]
lea r9d, [rdi + 4]
mov qword [rsp + 0x20], rax
lea r8, [rsp + 0x40]
lea edx, [rdi + 0x14]
call qword [sym.imp.ADVAPI32.dll_GetTokenInformation]
mov rcx, qword [rsp + 0x30]
test eax, eax
jne 0x1400011a4
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [r14]
xor edx, edx
call qword [sym.imp.USER32.dll_ShowWindow]
mov r9d, 0x10
lea r8, str.Error
lea rdx, str.Please_run_this_program_as_administrator_
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
xor eax, eax
mov rcx, qword [rsp + 0x90]
xor rcx, rsp
call fcn.140001520
add rsp, 0xa8
pop r14
pop rdi
ret
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [rsp + 0x40], edi
je 0x140001160
mov qword [rsp + 0xc0], rbx
lea r8, str._n__DISKS___n
mov qword [rsp + 0xc8], rbp
mov edx, 0xa
mov qword [rsp + 0xd0], rsi
mov rcx, r14
mov qword [rsp + 0xa0], r15
call fcn.140001010
lea r8, str.____________________n
mov edx, 0xa
mov rcx, r14
call fcn.140001010
mov ecx, 0xfffffff5
mov r15d, 0xc
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, r15w
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rcx, str.wmic_diskdrive_get_model__serialnumber__size
call fcn.140008d7c
lea ecx, [r15 + 4]
call fcn.140001540
mov qword [rsp + 0x30], rax
xorps xmm0, xmm0
mov rsi, rax
movups xmmword [rax], xmm0
mov qword [rax], r14
mov dword [rax + 8], edi
call qword [sym.imp.KERNEL32.dll_GetLogicalDrives]
mov ebp, eax
mov bl, 0x41
nop dword [rax]
movzx r8d, bl
lea ecx, [r8 - 0x41]
movzx edx, cl
bt ebp, edx
jae 0x140001296
lea rdx, str.vol__c:
lea rcx, [rsp + 0x50]
call fcn.1400014b0
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, r15w
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rcx, [rsp + 0x50]
call fcn.140008d7c
inc dword [rsi + 8]
inc bl
cmp bl, 0x5a
jle 0x140001250
mov rbp, qword [rsp + 0xc8]
mov rbx, qword [rsp + 0xc0]
call qword [sym.imp.KERNEL32.dll_GetLogicalDrives]
mov r8b, 0x41
nop word [rax + rax]
movzx ecx, r8b
sub ecx, 0x41
movzx edx, cl
lea ecx, [rdi + 1]
bt eax, edx
cmovae ecx, edi
inc r8b
mov edi, ecx
cmp r8b, 0x5a
jle 0x1400012c0
cmp dword [rsi + 8], ecx
mov rsi, qword [rsp + 0xd0]
jge 0x1400012ff
lea r8, str._nWARNING:_PLEASE_ALLOCATE_YOUR_DISK_S__IN_DISK_MANAGEMENT__n
mov edx, 0xe
mov rcx, r14
call fcn.140001010
lea r8, str._n__BASEBOARD___n
mov edx, 0xa
mov rcx, r14
call fcn.140001010
lea r8, str.____________________n
mov edx, 0xa
mov rcx, r14
call fcn.140001010
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, r15w
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rcx, str.wmic_baseboard_get_serialnumber
call fcn.140008d7c
lea r8, str._n__SMBIOS___n
mov edx, 0xa
mov rcx, r14
call fcn.140001010
lea r8, str.____________________n
mov edx, 0xa
mov rcx, r14
call fcn.140001010
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, r15w
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rcx, str.wmic_path_win32_computersystemproduct_get_uuid
call fcn.140008d7c
lea r8, str._n__BIOS___n
mov edx, 0xa
mov rcx, r14
call fcn.140001010
lea r8, str.____________________n
mov edx, 0xa
mov rcx, r14
call fcn.140001010
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, r15w
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rcx, str.wmic_csproduct_get_uuid
call fcn.140008d7c
lea r8, str._n__CPU___n
mov edx, 0xa
mov rcx, r14
call fcn.140001010
lea r8, str.____________________n
mov edx, 0xa
mov rcx, r14
call fcn.140001010
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, r15w
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rcx, str.wmic_cpu_get_serialnumber
call fcn.140008d7c
lea r8, str._n__NIC___n
mov edx, 0xa
mov rcx, r14
call fcn.140001010
lea r8, str.____________________n
mov edx, 0xa
mov rcx, r14
call fcn.140001010
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, r15w
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rcx, str.powershell__Get_NetAdapter__Select_Object_InterfaceDescription__Status__MacAddress_
call fcn.140008d7c
lea r8, str.___Press_any_key_to_exit____n
mov edx, 0xa
mov rcx, r14
call fcn.140001010
call fcn.140005dd0
mov r15, qword [rsp + 0xa0]
jmp 0x140001187