Function at 0x140001250
Capabilities:
Get disk information
Set console window title

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
sub rsp, 0x540
lea rbp, [rsp + 0x50]
and rbp, 0xffffffffffffffe0
mov rax, qword [section..data]
xor rax, rsp
mov qword [rbp + 0x4e0], rax
xor edi, edi
mov qword [rbp + 0x20], rdi
mov qword [rbp + 0x2a0], rdi
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
lea r8, [rbp + 0x2a0]
lea edx, [rdi + 8]
call qword [sym.imp.ADVAPI32.dll_OpenProcessToken]
test eax, eax
je 0x1400012ef
lea rax, [rbp + 0x270]
mov qword [rsp + 0x20], rax
lea r9d, [rdi + 4]
lea r8, [rbp + 0x248]
lea edx, [rdi + 0x14]
mov rcx, qword [rbp + 0x2a0]
call qword [sym.imp.ADVAPI32.dll_GetTokenInformation]
mov rcx, qword [rbp + 0x2a0]
test eax, eax
jne 0x1400014e5
call qword [sym.imp.KERNEL32.dll_CloseHandle]
movabs rax, 0x8e1032720d15ddca
mov qword [rbp + 8], rax
mov rax, qword [rbp + 8]
mov qword [rbp + 0x20], rax
movabs r14, 0xbe3ea0e9b510c434
mov qword [rbp + 8], r14
mov rax, qword [rbp + 8]
mov qword [rbp + 0x28], rax
movabs r12, 0x8e1032006267af8f
mov qword [rbp + 8], r12
mov rax, qword [rbp + 8]
mov qword [rbp + 0x2a0], rax
mov qword [rbp + 8], r14
mov rax, qword [rbp + 8]
mov qword [rbp + 0x2a8], rax
movdqa xmm0, xmmword [rbp + 0x20]
xorps xmm0, xmmword [rbp + 0x2a0]
movdqa xmmword [rbp + 0x20], xmm0
movabs rax, 0xfc3057730302c3df
mov qword [rbp + 8], rax
mov rax, qword [rbp + 8]
mov qword [rbp + 0x200], rax
movabs rax, 0xce1ec581c130aa41
mov qword [rbp + 8], rax
mov rax, qword [rbp + 8]
mov qword [rbp + 0x208], rax
movabs rax, 0x3645667773e81aab
mov qword [rbp + 8], rax
mov rax, qword [rbp + 8]
mov qword [rbp + 0x210], rax
movabs rax, 0xb432592a2dfc3ae5
mov qword [rbp + 8], rax
mov rax, qword [rbp + 8]
mov qword [rbp + 0x218], rax
movabs rax, 0x9e8a2e203c177590
mov qword [rbp + 8], rax
mov rax, qword [rbp + 8]
mov qword [rbp + 0x220], rax
movabs rcx, 0x13f1987d3eaac868
mov qword [rbp + 8], rcx
mov rax, qword [rbp + 8]
mov qword [rbp + 0x228], rax
mov qword [rbp + 8], r12
mov rax, qword [rbp + 8]
mov qword [rbp + 0x2a0], rax
mov qword [rbp + 8], r14
mov rax, qword [rbp + 8]
mov qword [rbp + 0x2a8], rax
movabs rdi, 0x57650b16018f75d9
mov qword [rbp + 8], rdi
mov rax, qword [rbp + 8]
mov qword [rbp + 0x2b0], rax
movabs rbx, 0xdd5c3047499d1a96
mov qword [rbp + 8], rbx
mov rax, qword [rbp + 8]
mov qword [rbp + 0x2b8], rax
movabs rax, 0xbff841545d6501e3
mov qword [rbp + 8], rax
mov rax, qword [rbp + 8]
mov qword [rbp + 0x2c0], rax
mov qword [rbp + 8], rcx
mov rax, qword [rbp + 8]
mov qword [rbp + 0x2c8], rax
vmovdqu ymm0, ymmword [rbp + 0x2a0]
vpxor ymm1, ymm0, ymmword [rbp + 0x200]
vmovdqa ymmword [rbp + 0x200], ymm1
vmovdqa xmm2, xmmword [rbp + 0x220]
vxorps xmm2, xmm2, xmmword [rbp + 0x2c0]
vmovdqa xmmword [rbp + 0x220], xmm2
mov r9d, 0x10
lea r8, [rbp + 0x20]
lea rdx, [rbp + 0x200]
xor ecx, ecx
vzeroupper
call qword [sym.imp.USER32.dll_MessageBoxA]
call fcn.140009460
xor eax, eax
mov rcx, qword [rbp + 0x4e0]
xor rcx, rsp
call fcn.1400029a0
lea r11, [rsp + 0x540]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [rbp + 0x248], edi
je 0x1400012ef
mov ecx, 8
call fcn.1400029c0
mov r15, rax
mov qword [rbp + 8], rax
mov qword [rax], rdi
movabs rax, 0xe071706e0302c3cc
mov qword [rbp], rax
mov rcx, qword [rbp]
mov qword [rbp + 0x60], rcx
movabs rax, 0xdf57d28ce630e914
mov qword [rbp], rax
mov rcx, qword [rbp]
mov qword [rbp + 0x68], rcx
movabs rax, 0x320e687369cc55b5
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x70], rax
movabs rax, 0xdd5c3047499d1ae4
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x78], rax
movabs r12, 0x8e1032006267af8f
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x480], rax
movabs r14, 0xbe3ea0e9b510c434
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x488], rax
movabs rsi, 0x57650b16018f75d9
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x490], rax
movabs rbx, 0xdd5c3047499d1a96
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x498], rax
vmovdqu ymm0, ymmword [rbp + 0x60]
vpxor ymm1, ymm0, ymmword [rbp + 0x480]
vmovdqa ymmword [rbp + 0x60], ymm1
lea rcx, [rbp + 0x60]
vzeroupper
call qword [sym.imp.KERNEL32.dll_SetConsoleTitleA]
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov qword [r15], rax
lea rdx, [rbp + 0x278]
mov rcx, rax
call qword [sym.imp.USER32.dll_GetWindowRect]
mov dword [rsp + 0x28], 1
mov dword [rsp + 0x20], 0x352
mov r9d, 0x2ee
mov r8d, dword [rbp + 0x27c]
mov edx, dword [rbp + 0x278]
mov rcx, qword [r15]
call qword [sym.imp.USER32.dll_MoveWindow]
movabs rax, 0xd14f6d206b6da685
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x80], rax
movabs rax, 0xe11e80b6ea4f9b6b
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x88], rax
movabs rax, 0x773a54495ed02a86
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x90], rax
movabs rax, 0x8120394d69bd3ab6
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x98], rax
movabs rax, 0xe3a71e0b024521c3
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xa0], rax
movabs rax, 0x33aec75d1e8a9414
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xa8], rax
movabs rax, 0x2915a81a6f91f8ed
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xb0], rax
movabs rax, 0xb5561e2b85b350a6
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xb8], rax
movabs rax, 0x6f383a846d28c2a8
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xc0], rax
movabs rax, 0x478434bee2db8680
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xc8], rax
movabs rax, 0xc254feee65d0daeb
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xd0], rax
movabs rax, 0x74688fdf674c8782
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xd8], rax
movabs rax, 0x7d9fa0139da661ab
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xe0], rax
movabs rax, 0x26dda07518d10490
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xe8], rax
movabs rax, 0x8b90caad45dbfd69
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xf0], rax
movabs rax, 0x20349343a3754ffe
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xf8], rax
movabs rax, 0xb5182c3a154d243f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x100], rax
movabs rax, 0x11809d4651dcba64
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x108], rax
movabs rax, 0x56f4b466167d0736
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x110], rax
movabs rax, 0x9cf74ba8f427d679
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x118], rax
movabs rax, 0xafce01d88a86f053
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x120], rax
movabs rax, 0x38d6a8f2113762a7
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x128], rax
movabs rax, 0x94dab2b5e08e8882
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x130], rax
movabs rax, 0x924f879baee15980
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x138], rax
movabs rax, 0xb62ea8a8d52e24a7
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x140], rax
movabs rax, 0x39cad231fee9592c
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x148], rax
movabs rax, 0xde5ec9de1e4fee51
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x150], rax
movabs rax, 0x1359a0432b0c1d4e
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x158], rax
movabs rax, 0xca488a9fe5606f59
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x160], rax
movabs rax, 0x88d566f70f720b6d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x168], rax
movabs rax, 0xf57318414fa13865
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x170], rax
movabs rax, 0x39fb87fbb474d138
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x178], rax
movabs rax, 0x521f9a81c7aeaa4a
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x180], rax
movabs rax, 0x6508fa21c2b7d4b6
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x188], rax
movabs rax, 0x2fb686d6263b758c
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x190], rax
movabs rax, 0x4149ff07457e5896
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x198], rax
movabs rdx, 0x5387eb34b2fc7283
mov qword [rbp], rdx
mov rax, qword [rbp]
mov qword [rbp + 0x1a0], rax
movabs rcx, 0x1adae7dd0d2ec688
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0x1a8], rax
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x340], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x348], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x350], rax
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x358], rax
movabs rax, 0xbff841545d6501e3
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x360], rax
movabs rax, 0x13f1987d3eaac868
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x368], rax
movabs rax, 0x201f883a4fb1a4cd
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x370], rax
movabs rax, 0xea09420ba5ef70fa
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x378], rax
movabs rax, 0x33181ad84d74bef7
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x380], rax
movabs rax, 0x67a414e1cdfbdafc
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x388], rax
movabs rax, 0xe274a2ce39f0d3e1
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x390], rax
movabs rax, 0x2848d3ff476ca7de
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x398], rax
movabs rax, 0x21bf804cc286418b
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x3a0], rax
movabs rax, 0x681805511db24b0
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x3a8], rax
movabs rax, 0xd4cf95f219fbdd35
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x3b0], rax
movabs rax, 0x7c48cf6383296fa2
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x3b8], rax
movabs rax, 0x953825303511041f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x3c0], rax
movabs rax, 0x4edfc2190dfce644
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x3c8], rax
movabs rax, 0x9abe8464a225869
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x3d0], rax
movabs rax, 0x95fd17f7ab788926
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x3d8], rax
movabs rax, 0xf0917d84aaa6d073
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x3e0], rax
movabs rax, 0x448ad4ad4e683df8
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x3e8], rax
movabs rax, 0xe885edeabfd1d7dd
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x3f0], rax
movabs rax, 0xb26fa7bb8ec1798a
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x3f8], rax
movabs rax, 0x960e8888f50e0487
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x400], rax
movabs rax, 0x19eaf211dec9790c
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x408], rax
movabs rax, 0xfe7ee9fe3e6fe471
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x410], rax
movabs rax, 0x7d38c52f682c3d6e
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x418], rax
movabs rax, 0xea25e5fccb0e0e1b
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x420], rax
movabs rax, 0xe4b40f856a212b40
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x428], rax
movabs rax, 0x871673222ac97b45
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x430], rax
movabs rax, 0x5298e293f754d832
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x438], rax
movabs rax, 0x727afee0aa8ed82f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x440], rax
movabs rax, 0x1269f49b697add4
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x448], rax
movabs rax, 0xf96a6f6065e11f9
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x450], rax
movabs rax, 0x4843f527655e78b6
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x458], rax
mov qword [rbp], rdx
mov rax, qword [rbp]
mov qword [rbp + 0x460], rax
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0x468], rax
vmovdqu ymm0, ymmword [rbp + 0x80]
vpxor ymm1, ymm0, ymmword [rbp + 0x340]
vmovdqa ymmword [rbp + 0x80], ymm1
vmovdqu ymm0, ymmword [rbp + 0xa0]
vpxor ymm1, ymm0, ymmword [rbp + 0x360]
vmovdqa ymmword [rbp + 0xa0], ymm1
vmovdqu ymm0, ymmword [rbp + 0xc0]
vpxor ymm1, ymm0, ymmword [rbp + 0x380]
vmovdqa ymmword [rbp + 0xc0], ymm1
vmovdqu ymm0, ymmword [rbp + 0xe0]
vpxor ymm1, ymm0, ymmword [rbp + 0x3a0]
vmovdqa ymmword [rbp + 0xe0], ymm1
vmovdqu ymm0, ymmword [rbp + 0x100]
vpxor ymm1, ymm0, ymmword [rbp + 0x3c0]
vmovdqa ymmword [rbp + 0x100], ymm1
vmovdqu ymm0, ymmword [rbp + 0x120]
vpxor ymm1, ymm0, ymmword [rbp + 0x3e0]
vmovdqa ymmword [rbp + 0x120], ymm1
vmovdqu ymm0, ymmword [rbp + 0x140]
vpxor ymm1, ymm0, ymmword [rbp + 0x400]
vmovdqa ymmword [rbp + 0x140], ymm1
vmovdqu ymm0, ymmword [rbp + 0x160]
vpxor ymm1, ymm0, ymmword [rbp + 0x420]
vmovdqa ymmword [rbp + 0x160], ymm1
vmovdqu ymm0, ymmword [rbp + 0x180]
vpxor ymm1, ymm0, ymmword [rbp + 0x440]
vmovdqa ymmword [rbp + 0x180], ymm1
vmovdqa xmm0, xmmword [rbp + 0x1a0]
vxorps xmm0, xmm0, xmmword [rbp + 0x460]
vmovdqa xmmword [rbp + 0x1a0], xmm0
vxorps xmm0, xmm0, xmm0
vmovups xmmword [rbp + 0x250], xmm0
mov qword [rbp + 0x260], rdi
mov qword [rbp + 0x268], rdi
lea rax, [rbp + 0x80]
mov rbx, 0xffffffffffffffff
vzeroupper
inc rbx
cmp byte [rax + rbx], dil
jne 0x140001e76
movabs r13, 0x7fffffffffffffff
cmp rbx, r13
ja 0x140002503
cmp rbx, 0xf
ja 0x140001ecd
mov qword [rbp + 0x260], rbx
mov qword [rbp + 0x268], 0xf
mov r8, rbx
lea rdx, [rbp + 0x80]
lea rcx, [rbp + 0x250]
call fcn.14001c0e0
mov byte [rbp + rbx + 0x250], dil
jmp 0x140001f7c
mov rax, rbx
or rax, 0xf
mov qword [rbp + 0x288], rax
cmp rax, r13
jbe 0x140001f0d
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.1400029c0
test rax, rax
je 0x140002509
lea rsi, [rax + 0x27]
and rsi, 0xffffffffffffffe0
mov qword [rsi - 8], rax
jmp 0x140001f51
mov ecx, 0x16
mov qword [rbp + 0x240], rcx
cmp rax, rcx
cmovb rax, rcx
mov r13, rax
lea rcx, [rax + 1]
cmp rcx, 0x1000
jb 0x140001f3f
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x1400024fd
jmp 0x140001eee
test rcx, rcx
je 0x140001f4e
call fcn.1400029c0
mov rsi, rax
jmp 0x140001f51
mov rsi, rdi
mov qword [rbp + 0x250], rsi
mov qword [rbp + 0x260], rbx
mov qword [rbp + 0x268], r13
mov r8, rbx
lea rdx, [rbp + 0x80]
mov rcx, rsi
call fcn.14001c0e0
mov byte [rsi + rbx], dil
lea r8, [rbp + 0x250]
cmp qword [rbp + 0x268], 0xf
cmova r8, qword [rbp + 0x250]
mov edx, 0xb
mov rcx, r15
call fcn.1400011d0
mov qword [rbp], 0x775
lea rcx, [rbp]
call fcn.1400025d0
lea rcx, [0x140025b30]
call fcn.14000c40c
lea r8, str.__Disks___n
mov edx, 0xb
mov rcx, r15
call fcn.1400011d0
mov ebx, 6
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, bx
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rcx, str.wmic_diskdrive_get_model__serialnumber__size
call fcn.14000c40c
lea ecx, [rbx + 0xa]
call fcn.1400029c0
mov rsi, rax
mov qword [rbp + 0x10], rax
xorps xmm0, xmm0
movups xmmword [rax], xmm0
mov qword [rax], r15
mov dword [rax + 8], edi
call qword [sym.imp.KERNEL32.dll_GetLogicalDrives]
mov r13d, eax
mov bl, 0x41
movabs rdi, 0x8e2a5125420bc0f9
mov r15d, 6
nop
movzx r8d, bl
lea ecx, [r8 - 0x41]
movzx edx, cl
bt r13d, edx
jae 0x1400020bf
mov qword [rbp + 0x10], rdi
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x40], rax
mov qword [rbp + 0x10], r14
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x48], rax
mov qword [rbp + 0x10], r12
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x2e0], rax
mov qword [rbp + 0x10], r14
mov rax, qword [rbp + 0x10]
mov qword [rbp + 0x2e8], rax
movdqa xmm0, xmmword [rbp + 0x40]
xorps xmm0, xmmword [rbp + 0x2e0]
movdqa xmmword [rbp + 0x40], xmm0
lea rdx, [rbp + 0x40]
lea rcx, [rbp + 0x4a0]
call fcn.140002570
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, r15w
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rcx, [rbp + 0x4a0]
call fcn.14000c40c
inc dword [rsi + 8]
inc bl
cmp bl, 0x5a
jle 0x140002030
call qword [sym.imp.KERNEL32.dll_GetLogicalDrives]
mov r8b, 0x41
mov rdi, qword [rbp + 0x20]
mov r15, qword [rbp + 8]
nop dword [rax + rax]
movzx ecx, r8b
sub ecx, 0x41
movzx edx, cl
lea ecx, [rdi + 1]
bt eax, edx
cmovae ecx, edi
inc r8b
mov edi, ecx
cmp r8b, 0x5a
jle 0x1400020e0
cmp dword [rsi + 8], ecx
jge 0x14000225e
movabs rax, 0xc95e7b4e3026f885
mov qword [rbp + 8], rax
mov rax, qword [rbp + 8]
mov qword [rbp + 0x1c0], rax
movabs rax, 0xfb6de1acf940e40e
mov qword [rbp + 8], rax
mov rax, qword [rbp + 8]
mov qword [rbp + 0x1c8], rax
movabs rax, 0x32448594dc334f9
mov qword [rbp + 8], rax
mov rax, qword [rbp + 8]
mov qword [rbp + 0x1d0], rax
movabs rax, 0x997c621206c43ad3
mov qword [rbp + 8], rax
mov rax, qword [rbp + 8]
mov qword [rbp + 0x1d8], rax
movabs rax, 0xb5d96807752e52aa
mov qword [rbp + 8], rax
mov rax, qword [rbp + 8]
mov qword [rbp + 0x1e0], rax
movabs rcx, 0x13f1987d3eaac868
mov qword [rbp + 8], rcx
mov rax, qword [rbp + 8]
mov qword [rbp + 0x1e8], rax
mov qword [rbp + 8], r12
mov rax, qword [rbp + 8]
mov qword [rbp + 0x300], rax
mov qword [rbp + 8], r14
mov rax, qword [rbp + 8]
mov qword [rbp + 0x308], rax
movabs rdi, 0x57650b16018f75d9
mov qword [rbp + 8], rdi
mov rax, qword [rbp + 8]
mov qword [rbp + 0x310], rax
movabs rbx, 0xdd5c3047499d1a96
mov qword [rbp + 8], rbx
mov rax, qword [rbp + 8]
mov qword [rbp + 0x318], rax
movabs rax, 0xbff841545d6501e3
mov qword [rbp + 8], rax
mov rax, qword [rbp + 8]
mov qword [rbp + 0x320], rax
mov qword [rbp + 8], rcx
mov rax, qword [rbp + 8]
mov qword [rbp + 0x328], rax
vmovdqu ymm0, ymmword [rbp + 0x1c0]
vpxor ymm1, ymm0, ymmword [rbp + 0x300]
vmovdqa ymmword [rbp + 0x1c0], ymm1
vmovdqa xmm0, xmmword [rbp + 0x1e0]
vxorps xmm0, xmm0, xmmword [rbp + 0x320]
vmovdqa xmmword [rbp + 0x1e0], xmm0
lea r8, [rbp + 0x1c0]
mov edx, 0xc
mov rcx, r15
vzeroupper
call fcn.1400011d0
jmp 0x140002272
movabs rbx, 0xdd5c3047499d1a96
movabs rdi, 0x57650b16018f75d9
lea r8, str._n__Motherboard___n
mov edx, 0xb
mov rcx, r15
call fcn.1400011d0
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
mov esi, 6
movzx edx, si
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rcx, str.wmic_baseboard_get_serialnumber
call fcn.14000c40c
lea r8, str.__SMBIOS___n
lea edx, [rsi + 5]
mov rcx, r15
call fcn.1400011d0
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, si
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rcx, str.wmic_path_win32_computersystemproduct_get_uuid
call fcn.14000c40c
lea r8, str.__BIOS___n
lea edx, [rsi + 5]
mov rcx, r15
call fcn.1400011d0
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, si
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rcx, str.wmic_csproduct_get_uuid__identifyingnumber
call fcn.14000c40c
lea r8, str.__CPU___n
lea edx, [rsi + 5]
mov rcx, r15
call fcn.1400011d0
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, si
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rcx, str.wmic_cpu_get_serialnumber
call fcn.14000c40c
lea r8, str.__MAC__
lea edx, [rsi + 5]
mov rcx, r15
call fcn.1400011d0
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, si
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rcx, str.powershell__Get_NetAdapter__Select_Object_InterfaceDescription__Status__MacAddress_
call fcn.14000c40c
lea r8, str.__TPM__
lea edx, [rsi + 5]
mov rcx, r15
call fcn.1400011d0
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, si
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rcx, str.powershell__Get_Tpm__Select_Object_ManufacturerIdTxt__TpmPresent__TpmReady__TpmActivated__OwnerAuth_
call fcn.14000c40c
lea r8, str.__Secure_Boot___n
lea edx, [rsi + 5]
mov rcx, r15
call fcn.1400011d0
movabs rax, 0xe15257721704cadc
mov qword [rbp + 8], rax
mov rax, qword [rbp + 8]
mov qword [rbp + 0x20], rax
movabs rax, 0x841ee9aff045b05b
mov qword [rbp + 8], rax
mov rax, qword [rbp + 8]
mov qword [rbp + 0x28], rax
movabs rax, 0x57650b16018f75f9
mov qword [rbp + 8], rax
mov rax, qword [rbp + 8]
mov qword [rbp + 0x30], rax
mov qword [rbp + 8], rbx
mov rax, qword [rbp + 8]
mov qword [rbp + 0x38], rax
mov qword [rbp + 8], r12
mov rax, qword [rbp + 8]
mov qword [rbp + 0x2a0], rax
mov qword [rbp + 8], r14
mov rax, qword [rbp + 8]
mov qword [rbp + 0x2a8], rax
mov qword [rbp + 8], rdi
mov rax, qword [rbp + 8]
mov qword [rbp + 0x2b0], rax
mov qword [rbp + 8], rbx
mov rax, qword [rbp + 8]
mov qword [rbp + 0x2b8], rax
vmovdqu ymm0, ymmword [rbp + 0x20]
vpxor ymm1, ymm0, ymmword [rbp + 0x2a0]
vmovdqa ymmword [rbp + 0x20], ymm1
lea r8, [rbp + 0x20]
mov edx, esi
mov rcx, r15
vzeroupper
call fcn.1400011d0
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
movzx edx, si
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
lea rcx, str.powershell__Confirm_SecureBootUEFI_
call fcn.14000c40c
lea r8, str._n__Press_any_key_to_exit___n
lea edx, [rsi + 5]
mov rcx, r15
call fcn.1400011d0
call fcn.140009460
nop
mov rdx, qword [rbp + 0x268]
cmp rdx, 0xf
jbe 0x1400014b3
inc rdx
mov rcx, qword [rbp + 0x250]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400024ed
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400024f7
call fcn.140002a04
jmp 0x1400014b3
call fcn.14000c8f8
int3
call fcn.140001110
int3
call fcn.1400011b0
int3
call fcn.14000c8f8
int3