Function at 0x140009a80
Capabilities:
Get disk information

Disassembly:
push r15
push r14
push rsi
push rdi
push rbx
sub rsp, 0x2a0
movups xmmword [rsp + 0x290], xmm6
mov rsi, rcx
mov dword [rsp + 0x44], 0
mov dword [rsp + 0x4c], 0
mov dword [rsp + 0x48], 0
xorps xmm6, xmm6
movups xmmword [rsp + 0x190], xmm6
movups xmmword [rsp + 0x1a0], xmm6
movups xmmword [rsp + 0x1b0], xmm6
movups xmmword [rsp + 0x1c0], xmm6
movups xmmword [rsp + 0x1d0], xmm6
movups xmmword [rsp + 0x1e0], xmm6
movups xmmword [rsp + 0x1f0], xmm6
movups xmmword [rsp + 0x200], xmm6
movups xmmword [rsp + 0x210], xmm6
movups xmmword [rsp + 0x220], xmm6
movups xmmword [rsp + 0x230], xmm6
movups xmmword [rsp + 0x240], xmm6
movups xmmword [rsp + 0x250], xmm6
movups xmmword [rsp + 0x260], xmm6
movups xmmword [rsp + 0x270], xmm6
movups xmmword [rsp + 0x280], xmm6
movups xmmword [rsp + 0x180], xmm6
movups xmmword [rsp + 0x170], xmm6
movups xmmword [rsp + 0x160], xmm6
movups xmmword [rsp + 0x150], xmm6
movups xmmword [rsp + 0x140], xmm6
movups xmmword [rsp + 0x130], xmm6
movups xmmword [rsp + 0x120], xmm6
movups xmmword [rsp + 0x110], xmm6
movups xmmword [rsp + 0x100], xmm6
movups xmmword [rsp + 0xf0], xmm6
movups xmmword [rsp + 0xe0], xmm6
movups xmmword [rsp + 0xd0], xmm6
movups xmmword [rsp + 0xc0], xmm6
movups xmmword [rsp + 0xb0], xmm6
movups xmmword [rsp + 0xa0], xmm6
movups xmmword [rsp + 0x90], xmm6
lea rdi, [0x1400dde0c]
lea rdx, [0x140037b84]
mov rcx, rdi
call fcn.140009d80
lea rax, [rsp + 0x190]
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x48]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x4c]
mov qword [rsp + 0x20], rax
mov dword [rsp + 0x38], 0x100
lea rdx, [rsp + 0x90]
lea r9, [rsp + 0x44]
mov rcx, rdi
mov r8d, 0x100
call qword [sym.imp.KERNEL32.dll_GetVolumeInformationA]
test eax, eax
je 0x140009ca8
movups xmmword [rsp + 0x80], xmm6
movups xmmword [rsp + 0x70], xmm6
movups xmmword [rsp + 0x60], xmm6
movups xmmword [rsp + 0x50], xmm6
mov edi, dword [rsp + 0x44]
lea rbx, [0x1400dde14]
lea rdx, [0x140037bb8]
mov rcx, rbx
call fcn.140009e00
lea r14, [rsp + 0x50]
mov edx, 0x40
mov rcx, r14
mov r8, rbx
mov r9d, edi
call fcn.140009e70
movups xmmword [rsi], xmm6
movups xmmword [rsi + 0x10], xmm6
mov rcx, r14
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
test rax, rax
js 0x140009d6e
mov rdi, rax
mov rbx, rax
cmp rax, 0xf
ja 0x140009ce8
mov qword [rsi + 0x10], rbx
mov qword [rsi + 0x18], 0xf
lea rdx, [rsp + 0x50]
mov rcx, rsi
mov r8, rbx
call sub.VCRUNTIME140.dll_memcpy
add rdi, rsi
jmp 0x140009d51
mov qword [rsi + 8], 0
mov qword [rsi + 0x10], 0xc
mov qword [rsi + 0x18], 0xf
lea rcx, [0x1400dde20]
lea rdx, [0x140037bee]
call fcn.140009f00
mov rax, qword [0x1400dde20]
mov qword [rsi], rax
mov eax, dword [0x1400dde28]
mov dword [rsi + 8], eax
jmp 0x140009d54
mov rax, rdi
or rax, 0xf
cmp rax, 0x17
mov r15d, 0x16
cmovae r15, rax
cmp rax, 0xfff
jb 0x140009d27
lea rcx, [r15 + 0x28]
call fcn.1400338a8
test rax, rax
je 0x140009d73
mov rcx, rax
mov r14, rax
add r14, 0x27
and r14, 0xffffffffffffffe0
mov qword [r14 - 8], rax
jmp 0x140009d33
lea rcx, [r15 + 1]
call fcn.1400338a8
mov r14, rax
mov qword [rsi], r14
mov qword [rsi + 0x10], rbx
mov qword [rsi + 0x18], r15
lea rdx, [rsp + 0x50]
mov rcx, r14
mov r8, rbx
call sub.VCRUNTIME140.dll_memcpy
add rdi, r14
mov byte [rdi], 0
mov rax, rsi
movups xmm6, xmmword [rsp + 0x290]
add rsp, 0x2a0
pop rbx
pop rdi
pop rsi
pop r14
pop r15
ret
call fcn.1400014c0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3