Function at 0x14002c71c
Capabilities:
Get disk information

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
push rbp
push rdi
push r12
push r14
push r15
lea rbp, [rsp - 0x7c0]
sub rsp, 0x8c0
mov rax, qword [0x1400390f8]
xor rax, rsp
mov qword [rbp + 0x7b0], rax
xor ebx, ebx
mov r15d, 0x104
mov rsi, rdx
mov qword [rbp + 0x598], rbx
mov r14, rcx
mov qword [rbp + 0x5a8], r15
mov r8d, r15d
lea rcx, [rbp + 0x390]
lea edi, [rbx + 1]
xor edx, edx
mov byte [rbp + 0x5a0], dil
call sub.msvcrt.dll_memset
mov r8d, r15d
mov qword [rbp + 0x378], rbx
xor edx, edx
mov byte [rbp + 0x380], dil
lea rcx, [rbp + 0x170]
mov qword [rbp + 0x388], r15
call sub.msvcrt.dll_memset
mov r8d, r15d
mov qword [rbp + 0x158], rbx
xor edx, edx
mov byte [rbp + 0x160], dil
lea rcx, [rsp + 0x50]
mov qword [rbp + 0x168], r15
call sub.msvcrt.dll_memset
mov al, byte [rbp + 0x5a0]
lea rcx, [rbp + 0x390]
neg al
mov r12d, 0x7ee3
sbb rdx, rdx
and rdx, r12
add rdx, r15
call fcn.1400104d0
test eax, eax
js 0x14002ca3d
mov al, byte [rbp + 0x380]
lea rcx, [rbp + 0x170]
neg al
sbb rdx, rdx
and rdx, r12
add rdx, r15
call fcn.1400104d0
test eax, eax
js 0x14002ca3d
mov al, byte [rbp + 0x160]
lea rcx, [rsp + 0x50]
neg al
sbb rdx, rdx
and rdx, r12
add rdx, r15
call fcn.1400104d0
test eax, eax
js 0x14002ca3d
mov rdx, rsi
lea rcx, [rbp + 0x390]
call fcn.140010630
mov rax, qword [rbp + 0x598]
lea r8, [rsp + 0x50]
cmp qword [rbp + 0x158], rbx
lea rcx, [rbp + 0x390]
lea r10, [rbp + 0x390]
cmovne r8, qword [rbp + 0x158]
test rax, rax
cmovne rcx, rax
cmovne r10, rax
or rax, 0xffffffffffffffff
inc rax
cmp word [rcx + rax*2], bx
jne 0x14002c889
mov r9d, dword [rbp + 0x168]
lea edx, [rdi + rax]
mov rcx, r10
call fcn.14000a850
test al, al
je 0x14002ca49
lea rdx, [0x1400304d0]
lea rcx, [rsp + 0x50]
call fcn.140010578
cmp qword [rbp + 0x378], rbx
lea rdx, [rbp + 0x170]
mov r8d, dword [rbp + 0x388]
lea rcx, [rsp + 0x50]
cmovne rdx, qword [rbp + 0x378]
lea r9, [rsp + 0x40]
cmp qword [rbp + 0x158], rbx
mov dword [rsp + 0x38], ebx
cmovne rcx, qword [rbp + 0x158]
mov qword [rsp + 0x30], rbx
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x20], rbx
call qword [sym.imp.api_ms_win_core_file_l1_1_0.dll_GetVolumeInformationW]
test eax, eax
jne 0x14002c935
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
cmp eax, 0x90
je 0x14002ca49
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
mov ecx, eax
xor edx, edx
call fcn.140014d90
jmp 0x14002ca4b
mov rdx, qword [rbp + 0x158]
lea rax, [rsp + 0x50]
test rdx, rdx
cmovne rax, rdx
cmp word [rax], 0x5c
jne 0x14002c964
test rdx, rdx
lea rcx, [rsp + 0x50]
cmovne rcx, rdx
call fcn.140012130
mov word [rax], bx
jmp 0x14002c974
test rdx, rdx
lea rax, [rsp + 0x50]
cmovne rax, rdx
mov word [rax + 2], bx
mov rcx, qword [rbp + 0x378]
lea rax, [rbp + 0x170]
test rcx, rcx
lea r9, [rsp + 0x50]
cmovne rax, rcx
cmp word [rax], bx
je 0x14002c9ca
test rcx, rcx
lea rax, [rbp + 0x170]
mov edx, 0x235f
mov r8d, 2
cmovne rax, rcx
cmp qword [rbp + 0x158], rbx
mov rcx, r14
mov qword [rsp + 0x20], rax
cmovne r9, qword [rbp + 0x158]
call fcn.1400294dc
jmp 0x14002c9e9
cmp qword [rbp + 0x158], rbx
mov r8d, edi
mov edx, 0x235e
mov rcx, r14
cmovne r9, qword [rbp + 0x158]
call fcn.1400294dc
mov esi, eax
test eax, eax
jne 0x14002ca4d
cmp dword [rsp + 0x40], ebx
jne 0x14002c9fb
cmp dword [rsp + 0x44], ebx
je 0x14002ca4d
movzx eax, word [rsp + 0x40]
lea r8, str._04X__04X
movzx r9d, word [rsp + 0x42]
lea rcx, [rbp + 0x5b0]
mov edx, 0x100
mov dword [rsp + 0x20], eax
call fcn.140012610
lea r9, [rbp + 0x5b0]
mov r8d, edi
mov edx, 0x235b
mov rcx, r14
call fcn.1400294dc
mov esi, eax
jmp 0x14002ca4d
xor edx, edx
lea ecx, [rdx + 8]
call fcn.140014d90
mov ebx, edi
mov edi, ebx
mov esi, edi
mov rcx, qword [rbp + 0x158]
call qword [sym.imp.msvcrt.dll_void___cdecl_operator_delete___void____ptr64_]
mov rcx, qword [rbp + 0x378]
call qword [sym.imp.msvcrt.dll_void___cdecl_operator_delete___void____ptr64_]
mov rcx, qword [rbp + 0x598]
call qword [sym.imp.msvcrt.dll_void___cdecl_operator_delete___void____ptr64_]
mov eax, esi
mov rcx, qword [rbp + 0x7b0]
xor rcx, rsp
call fcn.1400173b0
lea r11, [rsp + 0x8c0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r12
pop rdi
pop rbp
ret