Function at 0x1400019d0
Capabilities:
Accept command line arguments
Get disk information
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
push rdi
sub rsp, 0x30
xor edi, edi
mov ebx, edi
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
lea edx, [rdi + 8]
mov r8d, 0xff
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
test rax, rax
je 0x140001a04
mov dword [rax], 0xc1
mov rbx, rax
cmp dword [rbx], 0x15e
jle 0x140001bb7
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
call qword [sym.imp.KERNEL32.dll_GetLastError]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetCriticalSectionSpinCount]
xor ecx, ecx
call qword [sym.imp.USER32.dll_GetWindowContextHelpId]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.USER32.dll_GetWindow]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.USER32.dll_GetWindowLongPtrW]
xor ecx, ecx
call qword [sym.imp.USER32.dll_RegisterClassW]
xor ecx, ecx
call qword [sym.imp.USER32.dll_IsWindowVisible]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ConvertDefaultLocale]
xor r9d, r9d
mov dword [rsp + 0x28], edi
xor r8d, r8d
mov qword [rsp + 0x20], rdi
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.USER32.dll_IsDialogMessageW]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_lstrlenA]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetConsoleMode]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetCommandLineW]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetCommandLineA]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_FlsFree]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_FlsAlloc]
xor r9d, r9d
mov dword [rsp + 0x28], edi
xor r8d, r8d
mov qword [rsp + 0x20], rdi
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CompareStringW]
call qword [sym.imp.KERNEL32.dll_GetOEMCP]
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_RtlLookupFunctionEntry]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_EncodePointer]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetCriticalSectionSpinCount]
xor r9d, r9d
mov dword [rsp + 0x28], edi
xor r8d, r8d
mov qword [rsp + 0x20], rdi
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_RtlLookupFunctionEntry]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetCPInfo]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.USER32.dll_GetMessageW]
xor ecx, ecx
call qword [sym.imp.USER32.dll_AllowSetForegroundWindow]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.USER32.dll_SetTimer]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.USER32.dll_PostMessageW]
xor r9d, r9d
mov dword [rsp + 0x20], edi
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.USER32.dll_PeekMessageW]
xor ecx, ecx
call qword [sym.imp.USER32.dll_IsWindow]
call sub.ADVAPI32.dll_ConvertStringSecurityDescriptorToSecurityDescriptorW
call qword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetDriveTypeW]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ExitProcess]
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov r8, rbx
xor edx, edx
mov rcx, rax
mov rbx, qword [rsp + 0x40]
add rsp, 0x30
pop rdi
jmp qword [sym.imp.KERNEL32.dll_HeapFree]
cmpsb byte [rsi], byte [rdi]
mov esp, 0x2ef99405
push rsi
cmc
test byte [rbx + rbp + 0x65b428e2], 0x63
invalid
int 0x75
popfq
out dx, eax
or esp, dword [rdi + rbp*4 + 0x4b155a45]
invalid
mov ds, word [rdx + 0x50]
mov ebp, 0xe3689898
sbb dword [rdi - 0x78], ebp
cmc
and dh, byte [rax - 0x62]
int3
out 0x2c, eax
jne 0x14000450d
insb byte [rdi], dx
cmpsb byte [rsi], byte [rdi]
xchg esi, eax
xchg edx, eax
mov edi, 0xf3a278cd
sbb dword [rdi - 0x697510e3], esp
xchg esi, eax
xchg esi, eax
movabs eax, dword [0x4c779237cda6de1d]
lodsd eax, dword [rsi]
push rdi
cld
std
outsd dx, dword [rsi]
mov dword [rbx - 0x1a], esp
invalid
out 0x6d, al
or edx, 0x4b813c44
iretd
invalid
dec byte [rax + 0x2d4a126c]
in eax, 0xdb
stc
je case.0x140001bcf.3
mov byte [rdx + rdx + 0x4a], ch
sub eax, 0x74f9dbe5
out 0xa7, al
cmpsd dword [rsi], dword [rdi]
cmpsd dword [rsi], dword [rdi]
invalid
and al, 0xfb
in eax, 0xa0
invalid
out 0xe2, eax
sbb dword [rbp - 0x215497dc], esp
loope 0x140004589
insd dword [rdi], dx
mov ecx, 0x87a3d2d2
invalid
fsubr qword [rcx + 0x3348857f]
cmp dl, byte [rdx]
hlt
push rsp
invalid
jg 0x14000458a
invalid
rol dword [rcx + rbp*2 - 0x35], cl
pop rsp
push r8
or dl, byte [rax]
invalid
loope 0x14000460f
and edx, dword [rcx - 0x6b6434b7]
mov dl, 0xfd
invalid
retf
invalid
invalid
sti
add dword [rcx + 0x4a], esp
jae 0x140004603
cli
test eax, 0x3375b941
mov ecx, 0xddb33375
mov ecx, 0xddb33375
jmp 0x140004625
cdq
out 0xb5, al
movsb byte [rdi], byte [rsi]
invalid
mov bl, cl
mov ebp, 0x70b27c7c
mov al, 0xc
or al, 0xdf
test byte [rdi + 0x32], ah
invalid
invalid
xchg ebx, eax
adc eax, 0x991d095f
pop rsp
invalid
xor al, 0x70
out dx, al
in al, dx
sub al, 0xb1
invalid
push 0x2652908b
invalid
jle 0x140004664
and byte [rbp + rcx*8 + 0x35], ch
out dx, al
je 0x14000472c
sbb byte [rcx], ah
insb byte [rdi], dx
stosd dword [rdi], eax
adc ebx, dword [rdx + rbx*4 - 0x72]
call 0x17eb3b414
mov dword ds:[rax], 0x58d24f94
mov dword ds:[rax], 0x58d24f94
xchg dword [rax - 0x46ec3eec], eax
mov edx, 0x8f7587df
invalid
mov ecx, 0x7587dfba
invalid
cmc
insd dword [rdi], dx
invalid
call 0x188d3b7a9
fadd st(6), st(0)
invalid
rol byte [rdi - 0x65], 1
push 0x3b063248
invalid