Function at 0x140160be0
Capabilities:
Get disk information
Get memory capacity
Manipulate boot configuration

Disassembly:
mov qword [rsp + 8], rcx
push rbx
push rdi
mov eax, 0x2388
call fcn.1401d4c90
sub rsp, rax
mov qword [rsp + 0x22a0], 0xfffffffffffffffe
movaps xmmword [rsp + 0x2370], xmm6
mov rax, qword [0x1402a15c0]
xor rax, rsp
mov qword [rsp + 0x2360], rax
mov dword [rsp + 0x2298], 0
mov edx, 1
mov rcx, qword [rsp + 0x23a0]
call fcn.14007bfac
mov rcx, qword [rsp + 0x23a0]
add rcx, 0x618
call fcn.140006e20
movzx eax, al
test eax, eax
je 0x140160c68
xor r8d, r8d
xor edx, edx
lea rcx, str.Drive_cannot_be_empty.
call fcn.1400ef1c0
jmp 0x140161e50
mov rcx, qword [rsp + 0x23a0]
add rcx, 0x608
call fcn.140023510
mov rcx, rax
call fcn.1400a948c
test eax, eax
jle 0x140160ea0
lea rcx, [rsp + 0x1790]
call fcn.14000eff0
nop
lea rcx, [rsp + 0x1760]
call fcn.140007ac0
nop
lea rdx, [rsp + 0x1760]
lea rcx, [rsp + 0x1790]
call fcn.1401b7170
call fcn.1400db2a0
mov dword [rsp + 0x1758], eax
mov dword [rsp + 0x1ad0], 0
mov dword [rsp + 0x1ad4], 0
jmp 0x140160cf2
mov eax, dword [rsp + 0x1ad4]
add eax, 1
mov dword [rsp + 0x1ad4], eax
mov edi, dword [rsp + 0x1ad4]
lea rcx, [rsp + 0x1760]
call fcn.140007b40
cmp rdi, rax
jae 0x140160e40
mov edx, dword [rsp + 0x1ad4]
lea rcx, [rsp + 0x1760]
call fcn.140007b70
mov rdx, rax
mov rax, qword [rsp + 0x23a0]
mov eax, dword [rax + 0x210]
cmp dword [rdx + 0x198], eax
jne 0x140160d6f
mov rcx, qword [rsp + 0x23a0]
add rcx, 0x608
call fcn.140023510
mov rcx, rax
call fcn.1400a948c
mov edx, eax
mov eax, dword [rsp + 0x1ad0]
add eax, edx
mov dword [rsp + 0x1ad0], eax
jmp 0x140160ce1
mov edx, dword [rsp + 0x1ad4]
lea rcx, [rsp + 0x1760]
call fcn.140007b70
mov rcx, rax
add rcx, 0x1a8
lea rdx, [0x140238e08]
call fcn.1400060b0
test eax, eax
je 0x140160dfe
mov edx, dword [rsp + 0x1ad4]
lea rcx, [rsp + 0x1760]
call fcn.140007b70
mov rcx, rax
add rcx, 0x1a8
lea rdx, [0x140238e18]
call fcn.1400060b0
test eax, eax
je 0x140160dfe
mov edx, dword [rsp + 0x1ad4]
lea rcx, [rsp + 0x1760]
call fcn.140007b70
mov rcx, rax
add rcx, 0x1a8
lea rdx, [0x140238e28]
call fcn.1400060b0
test eax, eax
je 0x140160dfe
jmp 0x140160ce1
mov edx, dword [rsp + 0x1ad4]
lea rcx, [rsp + 0x1760]
call fcn.140007b70
mov rcx, rax
add rcx, 0x1b0
call fcn.140023510
mov rcx, rax
call fcn.1400a948c
mov edx, eax
mov eax, dword [rsp + 0x1ad0]
add eax, edx
mov dword [rsp + 0x1ad0], eax
jmp 0x140160ce1
mov eax, dword [rsp + 0x1758]
cmp dword [rsp + 0x1ad0], eax
jl 0x140160e85
xor r8d, r8d
mov edx, gethostbyname
lea rcx, [0x140238e40]
call fcn.1400ef1c0
nop
lea rcx, [rsp + 0x1760]
call fcn.140007b10
nop
lea rcx, [rsp + 0x1790]
call fcn.140005db0
jmp 0x140161e50
lea rcx, [rsp + 0x1760]
call fcn.140007b10
nop
lea rcx, [rsp + 0x1790]
call fcn.140005db0
lea rcx, [rsp + 0x880]
call fcn.14000eff0
nop
mov rax, qword [rsp + 0x23a0]
mov eax, dword [rax + 0x210]
mov dword [rsp + 0xa18], eax
lea rcx, [rsp + 0x880]
call fcn.1401cf9e0
mov dword [rsp + 0x878], 0
mov rcx, qword [rsp + 0x23a0]
add rcx, 0x2c0
call fcn.1400167c0
mov rcx, qword [rsp + 0x23a0]
add rcx, 0x2c0
mov edx, eax
call fcn.140016ec0
mov r8d, eax
lea rdx, [rsp + 0x2210]
mov rcx, qword [rsp + 0x23a0]
call fcn.14015f560
mov qword [rsp + 0x22a8], rax
mov eax, dword [rsp + 0x2298]
or eax, 1
mov dword [rsp + 0x2298], eax
mov rcx, qword [rsp + 0x22a8]
call fcn.140023510
lea rcx, [rsp + 0xa28]
mov rdx, rax
call fcn.1400060b0
test eax, eax
jne 0x140160fd2
lea rcx, [rsp + 0xa30]
call fcn.140023510
mov rcx, rax
call fcn.1400a948c
mov edi, eax
mov rcx, qword [rsp + 0x23a0]
add rcx, 0x608
call fcn.140023510
mov rcx, rax
call fcn.1400a948c
cmp edi, eax
jne 0x140160fd2
lea rcx, [rsp + 0xa38]
call fcn.140023510
mov rcx, rax
call fcn.1400a948c
mov edi, eax
mov rcx, qword [rsp + 0x23a0]
add rcx, 0x610
call fcn.140023510
mov rcx, rax
call fcn.1400a948c
cmp edi, eax
jne 0x140160fd2
mov dword [rsp + 0x22b0], 0
jmp 0x140160fdd
mov dword [rsp + 0x22b0], 1
movzx eax, byte [rsp + 0x22b0]
mov byte [rsp + 0x2208], al
mov eax, dword [rsp + 0x2298]
and eax, 1
test eax, eax
je 0x14016100f
and dword [rsp + 0x2298], 0xfffffffe
lea rcx, [rsp + 0x2210]
call fcn.140001490
movzx eax, byte [rsp + 0x2208]
test eax, eax
je 0x14016118c
mov dword [rsp + 0x878], 1
mov dword [rsp + 0x1ae0], 0
lea rdi, [rsp + 0x1ae4]
xor eax, eax
mov ecx, 0x3c
rep stosb byte [rdi], al
mov dword [rsp + 0x1ae0], 0x40
lea rcx, [rsp + 0x1ae0]
call qword [sym.imp.KERNEL32.dll_GlobalMemoryStatusEx]
xor edx, edx
mov rax, qword [rsp + 0x1af0]
mov ecx, 0x400
div rcx
xor edx, edx
mov ecx, 0x400
div rcx
pxor xmm0, xmm0
cvtsi2ss xmm0, rax
test rax, rax
jge 0x140161091
addss xmm0, dword [0x14025c4a0]
movss dword [rsp + 0x1b20], xmm0
xor edx, edx
mov rax, qword [rsp + 0x1ae8]
mov ecx, 0x400
div rcx
xor edx, edx
mov ecx, 0x400
div rcx
pxor xmm0, xmm0
cvtsi2ss xmm0, rax
test rax, rax
jge 0x1401610cc
addss xmm0, dword [0x14025c4a0]
movss dword [rsp + 0x1b24], xmm0
movss xmm6, dword [rsp + 0x1b24]
subss xmm6, dword [rsp + 0x1b20]
mov rcx, qword [rsp + 0x23a0]
add rcx, 0x608
call fcn.140023510
mov rcx, rax
call fcn.1400a948c
mov edi, eax
lea rcx, [rsp + 0xa30]
call fcn.140023510
mov rcx, rax
call fcn.1400a948c
mov edx, eax
mov eax, edi
sub eax, edx
movd xmm1, eax
cvtdq2ps xmm1, xmm1
movaps xmm0, xmm6
addss xmm0, xmm1
unpcklps xmm0, xmm0
cvtps2pd xmm1, xmm0
movd xmm0, dword [rsp + 0x1b24]
cvtps2pd xmm0, xmm0
mulsd xmm0, qword [0x14025c498]
comisd xmm1, xmm0
jbe 0x140161175
xor r8d, r8d
mov edx, gethostbyname
lea rcx, str.Your_RAM_cache_exceed_the_available_RAM_on_your_system__Please_set_it_lower.
call fcn.1400ef1c0
nop
lea rcx, [rsp + 0x880]
call fcn.140005db0
jmp 0x140161e50
lea rcx, [rsp + 0xa20]
xor edx, edx
call fcn.140006dd0
movzx ecx, ax
call fcn.1401d42e0
mov dword [rsp + 0x40], 0
lea rcx, [rsp + 0xa28]
lea rdx, [0x140238f80]
call fcn.1400060b0
test eax, eax
jne 0x1401611e4
mov rcx, qword [rsp + 0x23a0]
add rcx, 0x2c0
call fcn.1400167c0
mov rcx, qword [rsp + 0x23a0]
add rcx, 0x2c0
mov edx, eax
call fcn.140016ec0
cmp rax, 4
je 0x1401611e4
mov dword [rsp + 0x40], 1
mov rcx, qword [rsp + 0x23a0]
add rcx, 0x2c0
call fcn.1400167c0
mov rcx, qword [rsp + 0x23a0]
add rcx, 0x2c0
mov edx, eax
call fcn.140016ec0
mov r8d, eax
lea rdx, [rsp + 0x870]
mov rcx, qword [rsp + 0x23a0]
call fcn.14015f560
nop
mov rdx, qword [rsp + 0x23a0]
add rdx, 0x618
lea rcx, [rsp + 0xa20]
call fcn.140002d80
lea rcx, [rsp + 0xa28]
lea rdx, [rsp + 0x870]
call fcn.140002d80
lea rdx, [0x140238f88]
lea rcx, [rsp + 0x870]
call fcn.1400060b0
test eax, eax
je 0x1401612ef
lea rdx, [0x140238f98]
lea rcx, [rsp + 0x870]
call fcn.1400060b0
test eax, eax
je 0x1401612ef
lea rdx, [0x140238fa8]
lea rcx, [rsp + 0x870]
call fcn.1400060b0
test eax, eax
je 0x1401612ef
lea rdx, [0x1402379dc]
lea rcx, [rsp + 0x2220]
call fcn.1400020d0
mov qword [rsp + 0x22b8], rax
mov rax, qword [rsp + 0x22b8]
mov qword [rsp + 0x22c0], rax
mov eax, dword [rsp + 0x2298]
or eax, 2
mov dword [rsp + 0x2298], eax
mov rax, qword [rsp + 0x22c0]
mov qword [rsp + 0x22c8], rax
jmp 0x140161305
mov rax, qword [rsp + 0x23a0]
add rax, 0x608
mov qword [rsp + 0x22c8], rax
mov rax, qword [rsp + 0x22c8]
mov qword [rsp + 0x2218], rax
lea rcx, [rsp + 0xa30]
mov rdx, qword [rsp + 0x2218]
call fcn.140002d80
nop
mov eax, dword [rsp + 0x2298]
and eax, 2
test eax, eax
je 0x14016134e
and dword [rsp + 0x2298], 0xfffffffd
lea rcx, [rsp + 0x2220]
call fcn.140001490
lea rdx, [0x140238fb8]
lea rcx, [rsp + 0x870]
call fcn.1400060b0
test eax, eax
jne 0x14016137e
mov rax, qword [rsp + 0x23a0]
add rax, 0x610
mov qword [rsp + 0x22d0], rax
jmp 0x1401613cb
lea rdx, [0x140237a1c]
lea rcx, [rsp + 0x2230]
call fcn.1400020d0
mov qword [rsp + 0x22d8], rax
mov rax, qword [rsp + 0x22d8]
mov qword [rsp + 0x22e0], rax
mov eax, dword [rsp + 0x2298]
or eax, 4
mov dword [rsp + 0x2298], eax
mov rax, qword [rsp + 0x22e0]
mov qword [rsp + 0x22d0], rax
mov rax, qword [rsp + 0x22d0]
mov qword [rsp + 0x2228], rax
lea rcx, [rsp + 0xa38]
mov rdx, qword [rsp + 0x2228]
call fcn.140002d80
nop
mov eax, dword [rsp + 0x2298]
and eax, 4
test eax, eax
je 0x140161414
and dword [rsp + 0x2298], 0xfffffffb
lea rcx, [rsp + 0x2230]
call fcn.140001490
lea rdx, [0x140238fc8]
lea rcx, [rsp + 0x870]
call fcn.1400060b0
test eax, eax
jne 0x140161444
mov rax, qword [rsp + 0x23a0]
add rax, 0x620
mov qword [rsp + 0x22e8], rax
jmp 0x140161491
lea rdx, [0x140237a84]
lea rcx, [rsp + 0x2240]
call fcn.1400020d0
mov qword [rsp + 0x22f0], rax
mov rax, qword [rsp + 0x22f0]
mov qword [rsp + 0x22f8], rax
mov eax, dword [rsp + 0x2298]
or eax, 8
mov dword [rsp + 0x2298], eax
mov rax, qword [rsp + 0x22f8]
mov qword [rsp + 0x22e8], rax
mov rax, qword [rsp + 0x22e8]
mov qword [rsp + 0x2238], rax
lea rcx, [rsp + 0xa40]
mov rdx, qword [rsp + 0x2238]
call fcn.140002d80
nop
mov eax, dword [rsp + 0x2298]
and eax, 8
test eax, eax
je 0x1401614da
and dword [rsp + 0x2298], 0xfffffff7
lea rcx, [rsp + 0x2240]
call fcn.140001490
lea rdx, [0x140238fd8]
lea rcx, [rsp + 0x870]
call fcn.1400060b0
test eax, eax
jne 0x140161526
mov rcx, qword [rsp + 0x23a0]
add rcx, 0x560
call fcn.1400167c0
mov rcx, qword [rsp + 0x23a0]
add rcx, 0x560
mov edx, eax
call fcn.140016ec0
mov qword [rsp + 0x2300], rax
jmp 0x140161532
mov qword [rsp + 0x2300], 0xfffffffffffffffe
lea rcx, [rsp + 0xa48]
mov r8, qword [rsp + 0x2300]
lea rdx, [0x140238e34]
call fcn.140002c40
lea rcx, [rsp + 0x880]
call fcn.1401b7780
lea rcx, [rsp + 0x13f0]
call fcn.14000f1c0
nop
mov dword [rsp + 0x1588], 1
lea rcx, [rsp + 0x13f0]
call fcn.1401cfc20
lea rcx, [rsp + 0x1730]
call fcn.140081d08
nop
lea rax, [rsp + 0x2248]
mov qword [rsp + 0x2250], rax
lea rdx, [0x140238fe8]
mov rcx, qword [rsp + 0x2250]
call fcn.1400020d0
mov qword [rsp + 0x2308], rax
mov r9d, 0xfffffffe
lea r8, [rsp + 0x1730]
mov rdx, qword [rsp + 0x2308]
lea rcx, [rsp + 0x880]
call fcn.1401cf780
lea rdx, [0x140237c0c]
lea rcx, [rsp + 0x868]
call fcn.1400020d0
nop
mov dword [rsp + 0x1b28], 0
jmp 0x140161611
mov eax, dword [rsp + 0x1b28]
add eax, 1
mov dword [rsp + 0x1b28], eax
movsxd rdi, dword [rsp + 0x1b28]
lea rcx, [rsp + 0x1730]
call fcn.140014cc0
cmp rdi, rax
jge 0x140161659
movsxd rdx, dword [rsp + 0x1b28]
lea rcx, [rsp + 0x1730]
call fcn.14000eee0
mov r8d, dword [rax]
lea rdx, [0x140238ff8]
lea rcx, [rsp + 0x868]
call fcn.14000efa0
jmp 0x140161600
lea rcx, [rsp + 0x868]
call fcn.140006e20
movzx eax, al
test eax, eax
je 0x14016167e
lea rax, [0x140239008]
mov qword [rsp + 0x2310], rax
jmp 0x140161693
lea rcx, [rsp + 0x868]
call fcn.140023510
mov qword [rsp + 0x2310], rax
lea rcx, [rsp + 0x1598]
mov rdx, qword [rsp + 0x2310]
call fcn.1400020a0
lea rax, [rsp + 0x2258]
mov qword [rsp + 0x2260], rax
lea rdx, [0x140239010]
mov rcx, qword [rsp + 0x2260]
call fcn.1400020d0
mov qword [rsp + 0x2318], rax
mov r9d, 0xfffffffe
lea r8, [rsp + 0x1730]
mov rdx, qword [rsp + 0x2318]
lea rcx, [rsp + 0x880]
call fcn.1401cf780
lea rcx, [rsp + 0x868]
call fcn.1400019b0
mov dword [rsp + 0x1b2c], 0
jmp 0x140161722
mov eax, dword [rsp + 0x1b2c]
add eax, 1
mov dword [rsp + 0x1b2c], eax
movsxd rdi, dword [rsp + 0x1b2c]
lea rcx, [rsp + 0x1730]
call fcn.140014cc0
cmp rdi, rax
jge 0x14016176a
movsxd rdx, dword [rsp + 0x1b2c]
lea rcx, [rsp + 0x1730]
call fcn.14000eee0
mov r8d, dword [rax]
lea rdx, [0x140239020]
lea rcx, [rsp + 0x868]
call fcn.14000efa0
jmp 0x140161711
lea rcx, [rsp + 0x868]
call fcn.140006e20
movzx eax, al
test eax, eax
je 0x14016178f
lea rax, [0x140239030]
mov qword [rsp + 0x2320], rax
jmp 0x1401617a4
lea rcx, [rsp + 0x868]
call fcn.140023510
mov qword [rsp + 0x2320], rax
lea rcx, [rsp + 0x15a0]
mov rdx, qword [rsp + 0x2320]
call fcn.1400020a0
lea rax, [rsp + 0x2268]
mov qword [rsp + 0x2270], rax
lea rdx, [0x140239038]
mov rcx, qword [rsp + 0x2270]
call fcn.1400020d0
mov qword [rsp + 0x2328], rax
mov r9d, 0xfffffffe
lea r8, [rsp + 0x1730]
mov rdx, qword [rsp + 0x2328]
lea rcx, [rsp + 0x880]
call fcn.1401cf780
lea rcx, [rsp + 0x868]
call fcn.1400019b0
mov dword [rsp + 0x1b30], 0
jmp 0x140161833
mov eax, dword [rsp + 0x1b30]
add eax, 1
mov dword [rsp + 0x1b30], eax
movsxd rdi, dword [rsp + 0x1b30]
lea rcx, [rsp + 0x1730]
call fcn.140014cc0
cmp rdi, rax
jge 0x14016187b
movsxd rdx, dword [rsp + 0x1b30]
lea rcx, [rsp + 0x1730]
call fcn.14000eee0
mov r8d, dword [rax]
lea rdx, [0x140239040]
lea rcx, [rsp + 0x868]
call fcn.14000efa0
jmp 0x140161822
lea rcx, [rsp + 0x1618]
lea rdx, [rsp + 0x868]
call fcn.140002d80
lea rcx, [rsp + 0x13f0]
call fcn.1401b7780
lea rdx, [0x140239050]
lea rcx, [rsp + 0x870]
call fcn.1400060b0
test eax, eax
je 0x1401618d1
lea rdx, [0x140239060]
lea rcx, [rsp + 0x870]
call fcn.1400060b0
test eax, eax
jne 0x14016196a
cmp dword [rsp + 0x878], 0
je 0x14016196a
lea rcx, [rsp + 0x1618]
call fcn.140006e20
movzx eax, al
test eax, eax
je 0x140161900
mov dword [rsp + 0x2330], 0
jmp 0x14016191c
lea rcx, [rsp + 0xa38]
call fcn.140023510
mov rcx, rax
call fcn.1400a948c
mov dword [rsp + 0x2330], eax
lea rcx, [rsp + 0x1618]
xor edx, edx
call fcn.140006dd0
movzx ebx, ax
lea rcx, [rsp + 0xa30]
call fcn.140023510
mov rcx, rax
call fcn.1400a948c
mov edi, eax
lea rcx, [rsp + 0xa20]
xor edx, edx
call fcn.140006dd0
mov r9d, dword [rsp + 0x2330]
movzx r8d, bx
mov edx, edi
movzx ecx, ax
call fcn.1401d4770
lea rdx, [0x140239070]
lea rcx, [rsp + 0x870]
call fcn.1400060b0
test eax, eax
jne 0x1401619dc
cmp dword [rsp + 0x878], 0
je 0x1401619dc
lea rcx, [rsp + 0x1620]
call fcn.140023510
mov rcx, rax
call fcn.1400a948c
mov ebx, eax
lea rcx, [rsp + 0xa30]
call fcn.140023510
mov rcx, rax
call fcn.1400a948c
mov edi, eax
lea rcx, [rsp + 0xa20]
xor edx, edx
call fcn.140006dd0
mov r9d, ebx
mov r8d, 1
mov edx, edi
movzx ecx, ax
call fcn.1401d4450
cmp dword [rsp + 0x40], 0
je 0x140161bd1
lea rcx, [rsp + 0x1b70]
call fcn.14000eff0
nop
lea rcx, [rsp + 0x1b38]
call fcn.140007ac0
nop
lea rdx, [rsp + 0x1b38]
lea rcx, [rsp + 0x1b70]
call fcn.1401b7170
mov dword [rsp + 0x1eb0], 0
jmp 0x140161a36
mov eax, dword [rsp + 0x1eb0]
add eax, 1
mov dword [rsp + 0x1eb0], eax
mov edi, dword [rsp + 0x1eb0]
lea rcx, [rsp + 0x1b38]
call fcn.140007b40
cmp rdi, rax
jae 0x140161bb6
mov edx, dword [rsp + 0x1eb0]
lea rcx, [rsp + 0x1b38]
call fcn.140007b70
mov rcx, rax
add rcx, 0x1a8
lea rdx, [0x140239080]
call fcn.1400060b0
test eax, eax
je 0x140161a83
jmp 0x140161a25
mov edx, dword [rsp + 0x1eb0]
lea rcx, [rsp + 0x1b38]
call fcn.140007b70
mov rcx, rax
add rcx, 0x1b8
call fcn.140023510
mov rcx, rax
call fcn.1400a948c
test eax, eax
jne 0x140161ab7
jmp 0x140161a25
mov edx, dword [rsp + 0x1eb0]
lea rcx, [rsp + 0x1b38]
call fcn.140007b70
mov rcx, rax
add rcx, 0x1a0
xor edx, edx
call fcn.140006dd0
movzx ecx, ax
call fcn.1401d42e0
mov edx, dword [rsp + 0x1eb0]
lea rcx, [rsp + 0x1b38]
call fcn.140007b70
mov rcx, rax
add rcx, 0x1b0
call fcn.140023510
mov rcx, rax
call fcn.1400a948c
mov edi, eax
mov edx, dword [rsp + 0x1eb0]
lea rcx, [rsp + 0x1b38]
call fcn.140007b70
mov rcx, rax
add rcx, 0x1a0
xor edx, edx
call fcn.140006dd0
xor r9d, r9d
xor r8d, r8d
mov edx, edi
movzx ecx, ax
call fcn.1401d4770
lea rcx, [rsp + 0x1ec0]
call fcn.14000eff0
nop
mov edx, dword [rsp + 0x1eb0]
lea rcx, [rsp + 0x1b38]
call fcn.140007b70
mov eax, dword [rax + 0x198]
mov dword [rsp + 0x2058], eax
lea rcx, [rsp + 0x1ec0]
call fcn.1401cf9e0
lea rcx, [rsp + 0x2078]
lea rdx, [0x140237c34]
call fcn.1400020a0
lea rcx, [rsp + 0x1ec0]
call fcn.1401b7780
nop
lea rcx, [rsp + 0x1ec0]
call fcn.140005db0
jmp 0x140161a25
lea rcx, [rsp + 0x1b38]
call fcn.140007b10
nop
lea rcx, [rsp + 0x1b70]
call fcn.140005db0
mov edx, 1
mov ecx, 1
call fcn.1401b7f70
lea rcx, [rsp + 0xbc8]
call fcn.140002db0
nop
mov rcx, qword [rsp + 0x23a0]
add rcx, 0x618
xor edx, edx
call fcn.140006dd0
movzx r8d, ax
lea rdx, [0x14023908c]
lea rcx, [rsp + 0xbc8]
call fcn.140002c40
xor edx, edx
mov word [rsp + 0xbe0], dx
lea rdi, [rsp + 0xbe2]
xor eax, eax
mov ecx, 0x800
rep stosb byte [rdi], al
xor eax, eax
mov word [rsp + 0x50], ax
lea rdi, [rsp + 0x52]
xor eax, eax
mov ecx, 0x800
rep stosb byte [rdi], al
lea r8, [0x140239094]
lea rdx, [rsp + 0xbc8]
lea rcx, [rsp + 0x2280]
call fcn.1400010b0
mov qword [rsp + 0x2338], rax
mov rcx, qword [rsp + 0x2338]
call fcn.140023510
mov rcx, rax
mov dword [rsp + 0x38], 0x400
lea rax, [rsp + 0x50]
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0xbd0]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0xbc0]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x860]
mov r8d, 0x400
lea rdx, [rsp + 0xbe0]
call qword [sym.imp.KERNEL32.dll_GetVolumeInformationW]
test eax, eax
je 0x140161cd9
mov dword [rsp + 0x2340], 1
jmp 0x140161ce4
mov dword [rsp + 0x2340], 0
movzx eax, byte [rsp + 0x2340]
mov byte [rsp + 0x2278], al
lea rcx, [rsp + 0x2280]
call fcn.140001490
movzx edx, byte [rsp + 0x2278]
test edx, edx
je 0x140161def
lea rcx, [rsp + 0x2200]
call fcn.140002db0
nop
mov r8d, dword [rsp + 0x860]
lea rdx, [0x1402390a0]
lea rcx, [rsp + 0x2200]
call fcn.140002c40
lea rcx, [rsp + 0x2288]
call fcn.140001000
mov qword [rsp + 0x2348], rax
mov rax, qword [rsp + 0x2348]
mov qword [rsp + 0x2350], rax
lea r8, [0x1402390b0]
mov rdx, qword [rsp + 0x2350]
lea rcx, [rsp + 0x2290]
call fcn.1400010b0
mov qword [rsp + 0x2358], rax
mov rcx, qword [rsp + 0x2358]
call fcn.140023510
mov rbx, rax
lea rcx, [rsp + 0x2200]
call fcn.140023510
mov rdi, rax
lea rcx, [rsp + 0xbc8]
call fcn.140023510
mov r9, rbx
mov r8, rdi
mov rdx, rax
lea rcx, str.DiskSerialNumber
call qword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
lea rcx, [rsp + 0x2290]
call fcn.140001490
nop
lea rcx, [rsp + 0x2288]
call fcn.140001490
nop
lea rcx, [rsp + 0x2200]
call fcn.140001490
mov rcx, qword [rsp + 0x23a0]
call fcn.14008112c
nop
lea rcx, [rsp + 0xbc8]
call fcn.140001490
nop
lea rcx, [rsp + 0x868]
call fcn.140001490
nop
lea rcx, [rsp + 0x1730]
call fcn.140081d28
nop
lea rcx, [rsp + 0x13f0]
call fcn.140005db0
nop
lea rcx, [rsp + 0x870]
call fcn.140001490
nop
lea rcx, [rsp + 0x880]
call fcn.140005db0
mov rcx, qword [rsp + 0x2360]
xor rcx, rsp
call fcn.1400a8050
movaps xmm6, xmmword [rsp + 0x2370]
add rsp, 0x2388
pop rdi
pop rbx
ret