Function at 0x180002b40
Capabilities:
Get disk information
Get hostname

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x48]
sub rsp, 0x148
mov rax, qword [0x180054020]
xor rax, rsp
mov qword [rbp + 0x38], rax
movzx r14d, r9b
mov byte [rsp + 0x64], r9b
mov r13, r8
mov qword [rbp - 0x68], r8
mov rbx, rdx
mov qword [rbp - 0x78], rdx
mov rdi, rcx
mov qword [rbp - 0x60], rcx
mov qword [rbp - 0x28], rcx
mov qword [rbp - 0x38], rdx
mov qword [rbp - 0x30], r8
xor r12d, r12d
test r9b, r9b
jne 0x180002ca6
cmp byte [rbp + 0xb0], r12b
jne 0x180002ca6
cmp byte [rbp + 0xb8], r12b
jne 0x180002ca6
cmp byte [rbp + 0xc0], r12b
jne 0x180002ca6
cmp byte [rbp + 0xc8], r12b
jne 0x180002ca6
cmp byte [rbp + 0xd0], r12b
jne 0x180002ca6
lea rdx, str.Not_enough_data_to_generate_machine_hash.
lea rcx, [0x1800559c0]
call fcn.180005b40
xorps xmm0, xmm0
movups xmmword [rdi], xmm0
mov qword [rdi + 0x10], r12
mov qword [rdi + 0x18], r12
xor r8d, r8d
lea rdx, [0x18004a7d0]
mov rcx, rdi
call fcn.180005e80
nop
mov rdx, qword [rbx + 0x18]
cmp rdx, 0x10
jb 0x180002c50
mov rcx, qword [rbx]
inc rdx
cmp rdx, 0x1000
jb 0x180002c4b
add rdx, 0x27
mov rbx, qword [rcx - 8]
sub rcx, rbx
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x180003e65
mov rcx, rbx
mov rbx, qword [rbp - 0x78]
call fcn.180012ae0
mov qword [rbx + 0x10], r12
mov qword [rbx + 0x18], 0xf
mov byte [rbx], 0
mov rdx, qword [r13 + 0x18]
cmp rdx, 0x10
jb 0x180002c9a
inc rdx
mov rcx, qword [r13]
cmp rdx, 0x1000
jb 0x180002c95
add rdx, 0x27
mov rbx, qword [rcx - 8]
sub rcx, rbx
add rcx, 0xfffffffffffffff8
cmp rcx, 0x1f
ja 0x180003e6b
mov rcx, rbx
call fcn.180012ae0
mov qword [r13 + 0x10], r12
mov rax, rdi
jmp 0x180003e38
lea rcx, [0x180055820]
call fcn.180005df0
lea rdx, str.Generating_local_machine_ID
mov rcx, rax
call fcn.180005b40
mov rcx, rax
call fcn.180005df0
xorps xmm0, xmm0
movups xmmword [rbp - 0x20], xmm0
mov qword [rbp - 0x10], r12
mov qword [rbp - 8], r12
xor r8d, r8d
lea rdx, [0x18004a7d0]
lea rcx, [rbp - 0x20]
call fcn.180005e80
nop
test r14b, r14b
je 0x180002ed6
lea rax, [rbp - 0x58]
mov qword [rbp + 0x28], rax
mov rdx, rbx
lea rcx, [rbp - 0x58]
call fcn.180004aa0
mov qword [rbp - 0x28], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], r12
mov qword [rsp + 0x58], r12
lea r12, [rbp - 0x20]
mov rsi, qword [rbp - 0x20]
mov r15, qword [rbp - 8]
cmp r15, 0x10
cmovae r12, rsi
mov rdi, qword [rbp - 0x10]
movabs rcx, 0x7fffffffffffffff
cmp rdi, rcx
ja 0x180003e71
mov qword [rsp + 0x58], 0xf
cmp rdi, 0x10
jae 0x180002d6d
mov qword [rsp + 0x50], rdi
movups xmm0, xmmword [r12]
movups xmmword [rsp + 0x40], xmm0
jmp 0x180002e05
mov rbx, rdi
or rbx, 0xf
cmp rbx, rcx
jbe 0x180002d7e
mov rbx, rcx
jmp 0x180002d8b
cmp rbx, 0x16
mov eax, 0x16
cmovb rbx, rax
mov rcx, rbx
add rcx, 1
mov rax, 0xffffffffffffffff
cmovb rcx, rax
cmp rcx, 0x1000
jb 0x180002dd5
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x180003e77
mov rcx, rax
call fcn.180012ae8
mov rcx, rax
test rax, rax
je 0x180003e7d
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x180002de3
test rcx, rcx
je 0x180002de1
call fcn.180012ae8
jmp 0x180002de3
xor eax, eax
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x50], rdi
mov qword [rsp + 0x58], rbx
lea r8, [rdi + 1]
mov rdx, r12
mov rcx, rax
call fcn.180014b00
mov rax, qword [rbp - 0x28]
mov r8, rax
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x68]
call fcn.180002320
mov rbx, rax
lea rax, [rbp - 0x20]
cmp rax, rbx
je 0x180002e95
cmp r15, 0x10
jb 0x180002e5a
lea rdx, [r15 + 1]
mov rax, rsi
cmp rdx, 0x1000
jb 0x180002e52
add rdx, 0x27
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180003e7d
mov rcx, rsi
call fcn.180012ae0
movups xmm2, xmmword [rbx]
movups xmmword [rbp - 0x20], xmm2
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rbp - 0x10], xmm1
xor r12d, r12d
mov qword [rbx + 0x10], r12
mov qword [rbx + 0x18], 0xf
mov byte [rbx], r12b
movdqa xmm0, xmm1
psrldq xmm0, 8
movq r15, xmm0
movq rdi, xmm1
movq rsi, xmm2
jmp 0x180002e98
xor r12d, r12d
mov rdx, qword [rbp - 0x80]
cmp rdx, 0x10
jb 0x180002ee2
inc rdx
mov rcx, qword [rsp + 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180002ecf
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180003e7d
call fcn.180012ae0
jmp 0x180002ee2
mov r15, qword [rbp - 8]
mov rdi, qword [rbp - 0x10]
mov rsi, qword [rbp - 0x20]
cmp byte [rbp + 0xb0], 0
je 0x1800030be
lea rax, [rbp - 0x58]
mov qword [rbp + 0x28], rax
mov rdx, r13
lea rcx, [rbp - 0x58]
call fcn.180004aa0
mov qword [rbp - 0x28], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], r12
mov qword [rsp + 0x58], r12
lea r12, [rbp - 0x20]
cmp r15, 0x10
cmovae r12, rsi
movabs rcx, 0x7fffffffffffffff
cmp rdi, rcx
ja 0x180003e83
mov qword [rsp + 0x58], 0xf
cmp rdi, 0x10
jae 0x180002f5b
mov qword [rsp + 0x50], rdi
movups xmm0, xmmword [r12]
movups xmmword [rsp + 0x40], xmm0
jmp 0x180002ff3
mov rbx, rdi
or rbx, 0xf
cmp rbx, rcx
jbe 0x180002f6c
mov rbx, rcx
jmp 0x180002f79
cmp rbx, 0x16
mov eax, 0x16
cmovb rbx, rax
mov rcx, rbx
add rcx, 1
mov rax, 0xffffffffffffffff
cmovb rcx, rax
cmp rcx, 0x1000
jb 0x180002fc3
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x180003e89
mov rcx, rax
call fcn.180012ae8
mov rcx, rax
test rax, rax
je 0x180003e8f
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x180002fd1
test rcx, rcx
je 0x180002fcf
call fcn.180012ae8
jmp 0x180002fd1
xor eax, eax
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x50], rdi
mov qword [rsp + 0x58], rbx
lea r8, [rdi + 1]
mov rdx, r12
mov rcx, rax
call fcn.180014b00
mov rax, qword [rbp - 0x28]
mov r8, rax
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x68]
call fcn.180002320
mov rbx, rax
lea rax, [rbp - 0x20]
cmp rax, rbx
je 0x180003082
cmp r15, 0x10
jb 0x180003048
lea rdx, [r15 + 1]
mov rax, rsi
cmp rdx, 0x1000
jb 0x180003040
add rdx, 0x27
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180003e8f
mov rcx, rsi
call fcn.180012ae0
movups xmm2, xmmword [rbx]
movups xmmword [rbp - 0x20], xmm2
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rbp - 0x10], xmm1
mov qword [rbx + 0x10], 0
mov qword [rbx + 0x18], 0xf
mov byte [rbx], 0
movdqa xmm0, xmm1
psrldq xmm0, 8
movq r15, xmm0
movq rdi, xmm1
movq rsi, xmm2
mov rdx, qword [rbp - 0x80]
cmp rdx, 0x10
jb 0x1800030be
inc rdx
mov rcx, qword [rsp + 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800030b9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180003e8f
call fcn.180012ae0
cmp byte [rbp + 0xc0], 0
je 0x180003440
lea rdx, [rbp - 0x28]
lea rcx, [rsp + 0x60]
call fcn.180002210
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xor eax, eax
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x58], rax
lea r12, [rbp - 0x20]
cmp r15, 0x10
cmovae r12, rsi
movabs rcx, 0x7fffffffffffffff
cmp rdi, rcx
ja 0x180003e95
mov qword [rsp + 0x58], 0xf
cmp rdi, 0x10
jae 0x18000312f
mov qword [rsp + 0x50], rdi
movups xmm0, xmmword [r12]
movups xmmword [rsp + 0x40], xmm0
jmp 0x1800031bf
mov rbx, rdi
or rbx, 0xf
cmp rbx, rcx
jbe 0x180003140
mov rbx, rcx
jmp 0x18000314d
cmp rbx, 0x16
mov ecx, 0x16
cmovb rbx, rcx
mov rcx, rbx
add rcx, 1
mov rdx, 0xffffffffffffffff
cmovb rcx, rdx
cmp rcx, 0x1000
jb 0x180003197
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x180003e9b
mov rcx, rax
call fcn.180012ae8
mov rcx, rax
test rax, rax
je 0x180003ea1
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x1800031a1
test rcx, rcx
je 0x1800031a1
call fcn.180012ae8
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x50], rdi
mov qword [rsp + 0x58], rbx
lea r8, [rdi + 1]
mov rdx, r12
mov rcx, rax
call fcn.180014b00
movzx r8d, word [rsp + 0x60]
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x68]
call fcn.180002690
mov rbx, rax
lea rax, [rbp - 0x20]
cmp rax, rbx
je 0x180003251
cmp r15, 0x10
jb 0x180003217
lea rdx, [r15 + 1]
mov rax, rsi
cmp rdx, 0x1000
jb 0x18000320f
add rdx, 0x27
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180003ea1
mov rcx, rsi
call fcn.180012ae0
movups xmm2, xmmword [rbx]
movups xmmword [rbp - 0x20], xmm2
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rbp - 0x10], xmm1
mov qword [rbx + 0x10], 0
mov qword [rbx + 0x18], 0xf
mov byte [rbx], 0
movdqa xmm0, xmm1
psrldq xmm0, 8
movq r15, xmm0
movq rdi, xmm1
movq rsi, xmm2
mov rdx, qword [rbp - 0x80]
cmp rdx, 0x10
jb 0x18000328d
inc rdx
mov rcx, qword [rsp + 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180003288
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180003ea1
call fcn.180012ae0
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xor eax, eax
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x58], rax
lea r12, [rbp - 0x20]
cmp r15, 0x10
cmovae r12, rsi
movabs rcx, 0x7fffffffffffffff
cmp rdi, rcx
ja 0x180003ea7
mov qword [rsp + 0x58], 0xf
cmp rdi, 0x10
jae 0x1800032e3
mov qword [rsp + 0x50], rdi
movups xmm0, xmmword [r12]
movups xmmword [rsp + 0x40], xmm0
jmp 0x180003373
mov rbx, rdi
or rbx, 0xf
cmp rbx, rcx
jbe 0x1800032f4
mov rbx, rcx
jmp 0x180003301
cmp rbx, 0x16
mov ecx, 0x16
cmovb rbx, rcx
mov rcx, rbx
add rcx, 1
mov rdx, 0xffffffffffffffff
cmovb rcx, rdx
cmp rcx, 0x1000
jb 0x18000334b
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x180003ead
mov rcx, rax
call fcn.180012ae8
mov rcx, rax
test rax, rax
je 0x180003eb3
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x180003355
test rcx, rcx
je 0x180003355
call fcn.180012ae8
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x50], rdi
mov qword [rsp + 0x58], rbx
lea r8, [rdi + 1]
mov rdx, r12
mov rcx, rax
call fcn.180014b00
movzx r8d, word [rbp - 0x28]
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x68]
call fcn.180002690
mov rbx, rax
lea rax, [rbp - 0x20]
cmp rax, rbx
je 0x180003404
cmp r15, 0x10
jb 0x1800033ca
lea rdx, [r15 + 1]
mov rax, rsi
cmp rdx, 0x1000
jb 0x1800033c2
add rdx, 0x27
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180003eb3
mov rcx, rsi
call fcn.180012ae0
movups xmm2, xmmword [rbx]
movups xmmword [rbp - 0x20], xmm2
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rbp - 0x10], xmm1
mov qword [rbx + 0x10], 0
mov qword [rbx + 0x18], 0xf
mov byte [rbx], 0
movdqa xmm0, xmm1
psrldq xmm0, 8
movq r15, xmm0
movq rdi, xmm1
movq rsi, xmm2
mov rdx, qword [rbp - 0x80]
cmp rdx, 0x10
jb 0x180003440
inc rdx
mov rcx, qword [rsp + 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000343b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180003eb3
call fcn.180012ae0
cmp byte [rbp + 0xb8], 0
je 0x180003586
lea rax, [rsp + 0x40]
mov qword [rbp + 0x28], rax
mov dword [rbp - 0x28], 0x400
lea rdx, [rbp - 0x28]
lea rbx, [0x180056fd0]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetComputerNameA]
mov rdx, rbx
lea rcx, str._tComputer_Name:__s_n
call fcn.180001240
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xor r12d, r12d
mov qword [rsp + 0x50], r12
mov qword [rsp + 0x58], r12
mov r8, 0xffffffffffffffff
nop dword [rax]
inc r8
cmp byte [rbx + r8], r12b
jne 0x1800034a0
mov rdx, rbx
lea rcx, [rsp + 0x40]
call fcn.180005e80
nop
lea rdx, [rbp - 0x20]
lea rcx, [rbp - 0x58]
call fcn.180004aa0
nop
lea r8, [rsp + 0x40]
mov rdx, rax
lea rcx, [rsp + 0x68]
call fcn.180002320
mov rbx, rax
lea rax, [rbp - 0x20]
cmp rax, rbx
je 0x18000353c
mov rdx, qword [rbp - 8]
cmp rdx, 0x10
jb 0x18000351e
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180003519
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180003eb9
call fcn.180012ae0
movups xmm0, xmmword [rbx]
movups xmmword [rbp - 0x20], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rbp - 0x10], xmm1
mov qword [rbx + 0x10], r12
mov qword [rbx + 0x18], 0xf
mov byte [rbx], 0
mov rdx, qword [rbp - 0x80]
cmp rdx, 0x10
jb 0x180003578
inc rdx
mov rcx, qword [rsp + 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180003573
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180003eb9
call fcn.180012ae0
mov r15, qword [rbp - 8]
mov rdi, qword [rbp - 0x10]
mov rsi, qword [rbp - 0x20]
jmp 0x180003589
xor r12d, r12d
cmp byte [rbp + 0xc8], 0
je 0x1800037ae
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], r12
mov qword [rsp + 0x58], r12
lea r12, [rbp - 0x20]
cmp r15, 0x10
cmovae r12, rsi
movabs rax, 0x7fffffffffffffff
cmp rdi, rax
ja 0x180003ebf
mov qword [rsp + 0x58], 0xf
cmp rdi, 0x10
jae 0x1800035ea
mov qword [rsp + 0x50], rdi
movups xmm0, xmmword [r12]
movups xmmword [rsp + 0x40], xmm0
jmp 0x180003680
mov rbx, rdi
or rbx, 0xf
cmp rbx, rax
jbe 0x1800035fb
mov rbx, rax
jmp 0x180003608
cmp rbx, 0x16
mov eax, 0x16
cmovb rbx, rax
mov rcx, rbx
add rcx, 1
mov rax, 0xffffffffffffffff
cmovb rcx, rax
cmp rcx, 0x1000
jb 0x180003652
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x180003ec5
mov rcx, rax
call fcn.180012ae8
mov rcx, rax
test rax, rax
je 0x180003ecb
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x180003660
test rcx, rcx
je 0x18000365e
call fcn.180012ae8
jmp 0x180003660
xor eax, eax
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x50], rdi
mov qword [rsp + 0x58], rbx
lea r8, [rdi + 1]
mov rdx, r12
mov rcx, rax
call fcn.180014b00
nop
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x28], xmm0
xor eax, eax
xor ecx, ecx
cpuid
mov r8d, ebx
mov dword [rbp + 0x28], eax
mov dword [rbp + 0x2c], ebx
mov dword [rbp + 0x30], ecx
mov dword [rbp + 0x34], edx
movdqu xmm1, xmmword [rbp + 0x28]
movdqa xmm0, xmm1
psrldq xmm0, 8
paddw xmm1, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 4
paddw xmm1, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 2
paddw xmm1, xmm0
movd ebx, xmm1
mov dword [rsp + 0x20], edx
mov r9d, ecx
mov edx, eax
lea rcx, str._tCPU_Info:__08X__08X__08X__08X_n
call fcn.180001240
movzx r8d, bx
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x68]
call fcn.180002690
mov rbx, rax
lea rax, [rbp - 0x20]
cmp rax, rbx
je 0x180003772
cmp r15, 0x10
jb 0x180003738
lea rdx, [r15 + 1]
mov rax, rsi
cmp rdx, 0x1000
jb 0x180003730
add rdx, 0x27
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180003ecb
mov rcx, rsi
call fcn.180012ae0
movups xmm2, xmmword [rbx]
movups xmmword [rbp - 0x20], xmm2
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rbp - 0x10], xmm1
mov qword [rbx + 0x10], 0
mov qword [rbx + 0x18], 0xf
mov byte [rbx], 0
movdqa xmm0, xmm1
psrldq xmm0, 8
movq r15, xmm0
movq rdi, xmm1
movq rsi, xmm2
mov rdx, qword [rbp - 0x80]
cmp rdx, 0x10
jb 0x1800037ae
inc rdx
mov rcx, qword [rsp + 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800037a9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180003ecb
call fcn.180012ae0
cmp byte [rbp + 0xd0], 0
je 0x1800039b4
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xor eax, eax
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x58], rax
lea r12, [rbp - 0x20]
cmp r15, 0x10
cmovae r12, rsi
movabs rcx, 0x7fffffffffffffff
cmp rdi, rcx
ja 0x180003ed1
mov qword [rsp + 0x58], 0xf
cmp rdi, 0x10
jae 0x180003811
mov qword [rsp + 0x50], rdi
movups xmm0, xmmword [r12]
movups xmmword [rsp + 0x40], xmm0
jmp 0x1800038a3
mov rbx, rdi
or rbx, 0xf
cmp rbx, rcx
jbe 0x180003822
mov rbx, rcx
jmp 0x18000382f
cmp rbx, 0x16
mov ecx, 0x16
cmovb rbx, rcx
mov rcx, rbx
add rcx, 1
mov rdx, 0xffffffffffffffff
cmovb rcx, rdx
cmp rcx, 0x1000
jb 0x180003879
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x180003ed7
mov rcx, rax
call fcn.180012ae8
mov rcx, rax
test rax, rax
je 0x180003edd
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x180003883
test rcx, rcx
je 0x180003883
call fcn.180012ae8
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x50], rdi
mov qword [rsp + 0x58], rbx
lea r8, [rdi + 1]
mov rdx, r12
mov rcx, rax
call fcn.180014b00
xor eax, eax
mov dword [rbp - 0x28], eax
mov dword [rsp + 0x38], eax
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rax
lea r9, [rbp - 0x28]
xor r8d, r8d
xor edx, edx
lea rcx, [0x18004a870]
call qword [sym.imp.KERNEL32.dll_GetVolumeInformationA]
mov edx, dword [rbp - 0x28]
lea rcx, str._tVolume_Id:__04X_n
call fcn.180001240
mov eax, dword [rbp - 0x28]
mov r8d, eax
shr r8d, 0x10
add r8w, ax
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x68]
call fcn.180002690
mov rbx, rax
lea rax, [rbp - 0x20]
cmp rax, rbx
je 0x180003978
cmp r15, 0x10
jb 0x18000393e
lea rdx, [r15 + 1]
mov rax, rsi
cmp rdx, 0x1000
jb 0x180003936
add rdx, 0x27
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180003edd
mov rcx, rsi
call fcn.180012ae0
movups xmm2, xmmword [rbx]
movups xmmword [rbp - 0x20], xmm2
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rbp - 0x10], xmm1
mov qword [rbx + 0x10], 0
mov qword [rbx + 0x18], 0xf
mov byte [rbx], 0
movdqa xmm0, xmm1
psrldq xmm0, 8
movq r15, xmm0
movq rdi, xmm1
movq rsi, xmm2
mov rdx, qword [rbp - 0x80]
cmp rdx, 0x10
jb 0x1800039b4
inc rdx
mov rcx, qword [rsp + 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800039af
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180003edd
call fcn.180012ae0
cmp rdi, 0x10
jae 0x180003b2d
nop
movabs rdx, 0x7fffffffffffffff
mov rax, rdx
sub rax, rdi
cmp rax, rdi
jb 0x180003eef
lea r13, [rbp - 0x20]
cmp r15, 0x10
setae cl
mov byte [rsp + 0x60], cl
cmovae r13, rsi
lea rax, [rbp - 0x20]
test cl, cl
cmovne rax, rsi
mov qword [rbp - 0x28], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
lea r12, [rdi + rdi]
mov r14d, 0xf
lea rbx, [rsp + 0x40]
cmp r12, r14
jbe 0x180003a91
mov r14, r12
or r14, 0xf
cmp r14, rdx
jbe 0x180003a27
mov r14, rdx
jmp 0x180003a34
cmp r14, 0x16
mov eax, 0x16
cmovb r14, rax
mov rcx, r14
add rcx, 1
mov rax, 0xffffffffffffffff
cmovb rcx, rax
cmp rcx, 0x1000
jb 0x180003a7b
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x180003ee9
mov rcx, rax
call fcn.180012ae8
test rax, rax
je 0x180003ee3
lea rbx, [rax + 0x27]
and rbx, 0xffffffffffffffe0
mov qword [rbx - 8], rax
jmp 0x180003a8c
test rcx, rcx
je 0x180003a8a
call fcn.180012ae8
mov rbx, rax
jmp 0x180003a8c
xor ebx, ebx
mov qword [rsp + 0x40], rbx
mov qword [rsp + 0x50], r12
mov qword [rsp + 0x58], r14
mov r8, rdi
mov rdx, r13
mov rcx, rbx
call fcn.180014b00
lea rcx, [rbx + rdi]
mov r8, rdi
mov rdx, qword [rbp - 0x28]
call fcn.180014b00
mov byte [rbx + r12], 0
cmp byte [rsp + 0x60], 0
je 0x180003af6
lea rdx, [r15 + 1]
mov rax, rsi
cmp rdx, 0x1000
jb 0x180003aee
add rdx, 0x27
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180003ee3
mov rcx, rsi
call fcn.180012ae0
movups xmm0, xmmword [rsp + 0x40]
movups xmmword [rbp - 0x20], xmm0
movups xmm1, xmmword [rsp + 0x50]
movups xmmword [rbp - 0x10], xmm1
movq rdi, xmm1
mov r15, qword [rbp - 8]
mov rsi, qword [rbp - 0x20]
cmp rdi, 0x10
jb 0x1800039c0
movzx r14d, byte [rsp + 0x64]
mov r13, qword [rbp - 0x68]
cmp rdi, 0x10
jbe 0x180003bad
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x50], xmm1
mov r8d, 0x10
cmovb r8, rdi
lea rdx, [rbp - 0x20]
cmp r15, 0x10
cmovae rdx, rsi
lea rcx, [rsp + 0x40]
call fcn.180005e80
mov rdx, qword [rbp - 8]
cmp rdx, 0x10
jb 0x180003b9b
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180003b96
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180003ee3
call fcn.180012ae0
movups xmm0, xmmword [rsp + 0x40]
movups xmmword [rbp - 0x20], xmm0
movups xmm1, xmmword [rsp + 0x50]
movups xmmword [rbp - 0x10], xmm1
lea rdx, [rbp - 0x20]
lea rcx, [rbp + 8]
call fcn.180002900
nop
add r14b, r14b
or r14b, byte [rbp + 0xb0]
add r14b, r14b
or r14b, byte [rbp + 0xb8]
add r14b, r14b
or r14b, byte [rbp + 0xc0]
add r14b, r14b
or r14b, byte [rbp + 0xc8]
add r14b, r14b
or r14b, byte [rbp + 0xd0]
movzx r9d, r14b
lea r8, str._02X
mov edx, 3
lea rcx, [rbp]
call fcn.1800012a0
lea rax, [rbp]
mov rdx, 0xffffffffffffffff
mov rbx, rdx
inc rbx
cmp byte [rax + rbx], 0
jne 0x180003c14
mov r15, qword [rbp + 0x18]
movabs rcx, 0x7fffffffffffffff
mov rax, rcx
sub rax, r15
cmp rax, rbx
jb 0x180003ef5
lea r12, [rbp + 8]
cmp qword [rbp + 0x20], 0x10
cmovae r12, qword [rbp + 8]
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
lea r14, [r15 + rbx]
mov esi, 0xf
lea rdi, [rsp + 0x40]
cmp r14, rsi
jbe 0x180003cd7
mov rsi, r14
or rsi, 0xf
cmp rsi, rcx
jbe 0x180003c74
mov rsi, rcx
jmp 0x180003c81
cmp rsi, 0x16
mov eax, 0x16
cmovb rsi, rax
mov rcx, rsi
add rcx, 1
cmovb rcx, rdx
cmp rcx, 0x1000
jb 0x180003cc1
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x180003efb
mov rcx, rax
call fcn.180012ae8
test rax, rax
je 0x180003f01
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x180003cd2
test rcx, rcx
je 0x180003cd0
call fcn.180012ae8
mov rdi, rax
jmp 0x180003cd2
xor edi, edi
mov qword [rsp + 0x40], rdi
mov qword [rsp + 0x50], r14
mov qword [rsp + 0x58], rsi
mov r8, rbx
lea rdx, [rbp]
mov rcx, rdi
call fcn.180014b00
lea rcx, [rdi + rbx]
mov r8, r15
mov rdx, r12
call fcn.180014b00
mov byte [rdi + r14], 0
mov rdx, qword [rbp + 0x20]
cmp rdx, 0x10
jb 0x180003d3f
inc rdx
mov rcx, qword [rbp + 8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180003d3a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180003f01
call fcn.180012ae0
movups xmm2, xmmword [rsp + 0x40]
movups xmmword [rbp + 8], xmm2
movups xmm1, xmmword [rsp + 0x50]
movups xmmword [rbp + 0x18], xmm1
mov rsi, qword [rbp - 0x60]
xor ebx, ebx
movups xmmword [rsi], xmm2
movups xmmword [rsi + 0x10], xmm1
mov qword [rbp + 0x18], rbx
mov qword [rbp + 0x20], 0xf
mov byte [rbp + 8], bl
mov rdx, qword [rbp - 8]
cmp rdx, 0x10
jb 0x180003da9
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180003da3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180003f07
call fcn.180012ae0
nop
mov rdi, qword [rbp - 0x78]
mov rdx, qword [rdi + 0x18]
cmp rdx, 0x10
jb 0x180003de9
mov rcx, qword [rdi]
inc rdx
cmp rdx, 0x1000
jb 0x180003de4
add rdx, 0x27
mov rbx, qword [rcx - 8]
sub rcx, rbx
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x180003e65
mov rcx, rbx
xor ebx, ebx
call fcn.180012ae0
mov qword [rdi + 0x10], rbx
mov qword [rdi + 0x18], 0xf
mov byte [rdi], 0
mov rdx, qword [r13 + 0x18]
cmp rdx, 0x10
jb 0x180003e31
inc rdx
mov rcx, qword [r13]
cmp rdx, 0x1000
jb 0x180003e2c
add rdx, 0x27
mov rbx, qword [rcx - 8]
sub rcx, rbx
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x180003e6b
mov rcx, rbx
xor ebx, ebx
call fcn.180012ae0
mov qword [r13 + 0x10], rbx
mov rax, rsi
mov byte [r13], 0
mov qword [r13 + 0x18], 0xf
mov rcx, qword [rbp + 0x38]
xor rcx, rsp
call fcn.180012ac0
add rsp, 0x148
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
call fcn.18001cbf0
nop
call fcn.18001cbf0
nop
call fcn.180001500
int3
call fcn.180001460
int3
call fcn.18001cbf0
nop
call fcn.180001500
int3
call fcn.180001460
int3
call fcn.18001cbf0
nop
call fcn.180001500
int3
call fcn.180001460
int3
call fcn.18001cbf0
int3
call fcn.180001500
int3
call fcn.180001460
int3
call fcn.18001cbf0
int3
call fcn.18001cbf0
int3
call fcn.180001500
int3
call fcn.180001460
int3
call fcn.18001cbf0
int3
call fcn.180001500
int3
call fcn.180001460
int3
call fcn.18001cbf0
int3
call fcn.18001cbf0
int3
call fcn.180001460
int3
call fcn.180001500
nop
call fcn.180001500
int3
call fcn.180001460
int3
call fcn.18001cbf0
nop
call fcn.18001cbf0
int3