Function at 0x1400126e0
Capabilities:
Get storage device properties

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0xb0
mov rax, qword [0x14008c118]
xor rax, rsp
mov qword [rsp + 0xa0], rax
mov r15, rdx
mov rbx, rcx
mov qword [rsp + 0x60], rcx
mov qword [rsp + 0x88], rdx
xor r12d, r12d
mov qword [rsp + 0x30], r12
mov dword [rsp + 0x28], r12d
mov dword [rsp + 0x20], 3
xor r9d, r9d
xor edx, edx
lea r8d, [r12 + 3]
lea rcx, [0x14006f5e0]
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov rbp, rax
cmp rax, 0xffffffffffffffff
jne 0x140012769
mov qword [rbx], r12
mov qword [rbx + 0x10], r12
mov edi, reloc.WS2_32.dll_ntohs
mov qword [rbx + 0x18], rdi
mov byte [rbx], r12b
jmp 0x1400129e7
lea rax, [0x1400126a0]
mov qword [rsp + 0x78], rax
mov qword [rsp + 0x80], rbp
mov qword [rsp + 0x94], r12
mov dword [rsp + 0x90], r12d
mov qword [rsp + 0x50], r12
mov dword [rsp + 0x40], r12d
mov qword [rsp + 0x38], r12
lea rax, [rsp + 0x40]
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], 8
lea rax, [rsp + 0x50]
mov qword [rsp + 0x20], rax
mov r9d, recvfrom
lea r8, [rsp + 0x90]
mov edx, 0x2d1400
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
test eax, eax
jne 0x1400127ef
mov qword [rbx], r12
mov qword [rbx + 0x10], r12
mov edi, reloc.WS2_32.dll_ntohs
mov qword [rbx + 0x18], rdi
mov byte [rbx], al
jmp 0x1400129d8
mov esi, dword [rsp + 0x54]
mov ecx, esi
call fcn.14006b440
mov r14, rax
test rax, rax
je 0x140012811
mov r8d, esi
xor edx, edx
mov rcx, rax
call sub.VCRUNTIME140.dll_memset
jmp 0x140012814
mov r14, r12
mov qword [rsp + 0x70], r14
mov qword [rsp + 0x38], r12
lea rax, [rsp + 0x40]
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], esi
mov qword [rsp + 0x20], r14
mov r9d, recvfrom
lea r8, [rsp + 0x90]
mov edx, 0x2d1400
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
test eax, eax
jne 0x140012876
mov qword [rbx], r12
mov qword [rbx + 0x10], r12
mov edi, reloc.WS2_32.dll_ntohs
mov qword [rbx + 0x18], rdi
mov byte [rbx], al
test r14, r14
je 0x140012871
mov rcx, r14
call fcn.14006ab5c
nop
jmp 0x1400129d8
mov eax, dword [r14 + 0x18]
test eax, eax
jne 0x14001289e
mov qword [rbx], r12
mov qword [rbx + 0x10], r12
mov edi, reloc.WS2_32.dll_ntohs
mov qword [rbx + 0x18], rdi
mov byte [rbx], al
mov rcx, r14
call fcn.14006ab5c
nop
jmp 0x1400129d8
lea r13, [r14 + rax]
mov rsi, 0xffffffffffffffff
nop dword [rax]
inc rsi
cmp byte [rsi + r13], 0
jne 0x1400128b0
mov rcx, qword [r15 + 0x10]
mov qword [rsp + 0x60], rcx
movabs rdx, 0x7fffffffffffffff
mov rax, rdx
sub rax, rcx
cmp rax, rsi
jb 0x140012a1d
mov qword [rsp + 0x58], r15
cmp qword [r15 + 0x18], 0x10
jb 0x1400128f0
mov rax, qword [r15]
mov qword [rsp + 0x58], rax
mov qword [rbx], r12
mov qword [rbx + 0x10], r12
mov qword [rbx + 0x18], r12
lea rax, [rcx + rsi]
mov qword [rsp + 0x48], rax
mov edi, reloc.WS2_32.dll_ntohs
mov r12, rbx
cmp rax, rdi
jbe 0x14001299c
mov rdi, rax
or rdi, 0xf
cmp rdi, rdx
jbe 0x140012953
mov rdi, rdx
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.14006ab20
test rax, rax
je 0x14001297b
lea r12, [rax + 0x27]
and r12, 0xffffffffffffffe0
mov qword [r12 - 8], rax
mov rax, qword [rsp + 0x48]
jmp 0x140012999
mov ecx, reloc.WLDAP32.dll_Ordinal_22
cmp rdi, rcx
cmovb rdi, rcx
lea rcx, [rdi + 1]
cmp rcx, 0x1000
jb 0x140012982
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140012a23
jmp 0x140012932
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test rcx, rcx
je 0x140012996
call fcn.14006ab20
mov r12, rax
mov rax, qword [rsp + 0x48]
jmp 0x140012999
xor r12d, r12d
mov qword [rbx], r12
mov qword [rbx + 0x10], rax
mov qword [rbx + 0x18], rdi
mov r8, rsi
mov rdx, r13
mov rcx, r12
call sub.VCRUNTIME140.dll_memcpy
lea rcx, [r12 + rsi]
mov r8, qword [rsp + 0x60]
mov rdx, qword [rsp + 0x58]
call sub.VCRUNTIME140.dll_memcpy
mov rax, qword [rsp + 0x48]
mov byte [r12 + rax], 0
mov rcx, r14
call fcn.14006ab5c
nop
test rbp, rbp
je 0x1400129e7
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
mov rcx, r15
call fcn.140001ce0
mov rax, rbx
mov rcx, qword [rsp + 0xa0]
xor rcx, rsp
call fcn.14006abf0
mov rbx, qword [rsp + 0x100]
add rsp, 0xb0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.140001ac0
nop
call fcn.140001aa0
int3