Function at 0x140002ed0
Capabilities:
Get disk information

Disassembly:
push rbp
mov eax, 0x22b0
call fcn.14002aeb0
sub rsp, rax
lea rbp, [rsp + 0x80]
mov qword [rbp + 0x2228], 0xfffffffffffffffe
mov qword [rbp - 0x40], rcx
mov rax, rcx
mov qword [rbp - 0x38], rax
mov qword [rbp + 0x2220], rcx
lea rcx, [rbp + 0x20f8]
mov qword [rbp - 0x30], rcx
call fcn.140002d70
mov rcx, qword [rbp - 0x30]
call fcn.140009e50
mov rdx, rax
lea rcx, [rbp + 0x2118]
call fcn.140010820
jmp 0x140002f30
lea rcx, [rbp + 0x20f8]
call fcn.140004f90
lea rcx, [rbp + 0x2118]
call fcn.140006c30
mov rdx, rax
lea rcx, [rbp + 0x20d8]
call fcn.140006950
jmp 0x140002f5c
lea rcx, [rbp + 0x20c0]
call fcn.140007b10
mov rcx, qword [rbp - 0x40]
mov byte [rbp + 0x20bf], 0
call fcn.140007b10
xor eax, eax
mov dl, al
lea rcx, [rbp + 0xb0]
mov qword [rbp - 0x50], rcx
mov r8d, 0x2000
call fcn.1400593a0
mov rdx, qword [rbp - 0x50]
mov rax, qword [sym.imp.KERNEL32.dll_GetLogicalDriveStringsW]
mov ecx, 0x1fff
call rax
mov dword [rbp - 0x44], eax
jmp 0x140002fac
mov eax, dword [rbp - 0x44]
mov dword [rbp + 0xac], eax
lea rcx, [rbp + 0x88]
call fcn.140008770
mov dword [rbp + 0x84], 0
mov eax, dword [rbp + 0x84]
cmp eax, dword [rbp + 0xac]
jae 0x14000307c
movsxd rax, dword [rbp + 0x84]
movzx eax, word [rbp + rax*2 + 0xb0]
cmp eax, 0
jne 0x14000302a
lea rcx, [rbp + 0x20c0]
lea rdx, [rbp + 0x88]
call fcn.140010870
jmp 0x14000300d
lea rdx, [0x14005bac4]
lea rcx, [rbp + 0x88]
call fcn.1400108a0
jmp 0x140003025
jmp 0x140003068
movsxd rax, dword [rbp + 0x84]
mov r8w, word [rbp + rax*2 + 0xb0]
lea rcx, [rbp + 0x60]
lea rdx, [rbp + 0x88]
call fcn.1400108d0
jmp 0x14000304f
lea rcx, [rbp + 0x88]
lea rdx, [rbp + 0x60]
call fcn.1400088b0
lea rcx, [rbp + 0x60]
call fcn.140004f60
mov eax, dword [rbp + 0x84]
add eax, 1
mov dword [rbp + 0x84], eax
jmp 0x140002fcb
lea rax, [rbp + 0x20c0]
mov qword [rbp + 0x58], rax
mov rcx, qword [rbp + 0x58]
lea rdx, [rbp + 0x50]
call fcn.140008de0
mov rcx, qword [rbp + 0x58]
lea rdx, [rbp + 0x48]
call fcn.140008e30
lea rcx, [rbp + 0x50]
lea rdx, [rbp + 0x48]
call fcn.140008e80
test al, 1
jne 0x1400030bb
jmp 0x1400031bf
lea rcx, [rbp + 0x50]
call fcn.140008eb0
mov qword [rbp + 0x40], rax
mov rcx, qword [rbp + 0x40]
call fcn.140008750
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetDriveTypeW]
call rax
mov dword [rbp - 0x54], eax
jmp 0x1400030e5
mov eax, dword [rbp - 0x54]
mov dword [rbp + 0x3c], eax
cmp dword [rbp + 0x3c], 2
je 0x140003109
cmp dword [rbp + 0x3c], 3
je 0x140003109
cmp dword [rbp + 0x3c], 4
jne 0x1400031b1
mov rcx, qword [rbp + 0x40]
xor eax, eax
mov edx, eax
call fcn.140010990
movzx eax, word [rax]
cmp eax, 0x43
jne 0x14000319a
mov rdx, qword [rbp + 0x40]
lea r8, str.Users_
lea rcx, [rbp - 0x28]
call fcn.1400109c0
jmp 0x14000313b
lea rcx, [rbp - 8]
lea rdx, [rbp - 0x28]
lea r8, [rbp + 0x20d8]
call fcn.140010a80
jmp 0x140003154
lea r8, [0x14005bac6]
lea rcx, [rbp + 0x18]
lea rdx, [rbp - 8]
call fcn.140010ad0
jmp 0x14000316d
mov rcx, qword [rbp + 0x40]
lea rdx, [rbp + 0x18]
call fcn.1400088b0
lea rcx, [rbp + 0x18]
call fcn.140004f60
lea rcx, [rbp - 8]
call fcn.140004f60
lea rcx, [rbp - 0x28]
call fcn.140004f60
jmp 0x14000319a
mov rcx, qword [rbp - 0x40]
mov rdx, qword [rbp + 0x40]
call fcn.140010870
jmp 0x1400031ac
jmp 0x1400031b1
lea rcx, [rbp + 0x50]
call fcn.140010b20
jmp 0x1400030a1
mov byte [rbp + 0x20bf], 1
lea rcx, [rbp + 0x88]
call fcn.140004f60
test byte [rbp + 0x20bf], 1
jne 0x1400031ed
jmp 0x1400031e4
mov rcx, qword [rbp - 0x40]
call fcn.140006a50
lea rcx, [rbp + 0x20c0]
call fcn.140006a50
lea rcx, [rbp + 0x20d8]
call fcn.140004f60
lea rcx, [rbp + 0x2118]
call fcn.140010b50
mov rax, qword [rbp - 0x38]
add rsp, 0x22b0
pop rbp
ret