Function at 0x140030250
Capabilities:
Get disk information

Disassembly:
mov rax, rsp
push r12
push r14
push r15
sub rsp, 0x390
mov qword [rsp + 0x58], 0xfffffffffffffffe
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
movaps xmmword [rax - 0x28], xmm6
movaps xmmword [rax - 0x38], xmm7
mov rax, qword [0x140127190]
xor rax, rsp
mov qword [rsp + 0x360], rax
xor ebx, ebx
mov r14d, ebx
mov dword [rsp + 0x34], ebx
call fcn.140030020
xor eax, eax
mov qword [rsp + 0x138], rax
mov qword [rsp + 0x140], rax
mov qword [rsp + 0x148], rax
lea rcx, [rsp + 0x138]
call fcn.14002fe90
nop
xorps xmm0, xmm0
movdqu xmmword [rsp + 0xa8], xmm0
mov qword [rsp + 0xb8], rbx
mov byte [rsp + 0x30], bl
call fcn.14002f220
mov rdi, rax
mov qword [rsp + 0xf0], rax
lea rax, [rsp + 0x80]
mov qword [rsp + 0x20], rax
lea r9d, [rbx + 4]
lea r8, [rsp + 0x110]
lea edx, [rbx + 0x12]
mov rcx, rdi
call qword [sym.imp.ADVAPI32.dll_GetTokenInformation]
test eax, eax
je 0x140030be5
cmp dword [rsp + 0x110], 2
sete r15b
test rdi, rdi
je 0x140030334
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov byte [rsp + 0x30], r15b
jmp 0x140030348
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x120], xmm0
mov qword [rsp + 0x130], rbx
mov rsi, qword [rsp + 0x138]
mov r12, qword [rsp + 0x140]
cmp rsi, r12
je 0x14003085b
lea r8, [0x1401079f0]
mov rdx, rsi
lea rcx, [rsp + 0xc0]
call fcn.140031400
nop
lea rcx, [rsp + 0xc0]
cmp qword [rsp + 0xd8], 8
cmovae rcx, qword [rsp + 0xc0]
call qword [sym.imp.KERNEL32.dll_GetDriveTypeW]
cmp eax, 4
jne 0x140030407
test r15b, r15b
je 0x140030407
mov rdx, qword [rsp + 0xd8]
cmp rdx, 8
jb 0x140030852
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0xc0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003084d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140030c01
jmp 0x14003084d
mov qword [rsp + 0x98], rbx
mov qword [rsp + 0xa0], 7
mov word [rsp + 0x88], bx
mov dword [rsp + 0x110], 0x104
cmp eax, 4
jne 0x140030690
mov rcx, rsi
cmp qword [rsi + 0x18], 8
jb 0x140030444
mov rcx, qword [rsi]
lea r8, [rsp + 0x110]
lea rdx, [rsp + 0x150]
call qword [sym.imp.MPR.dll_WNetGetConnectionW]
test eax, eax
jne 0x14003071b
mov qword [rsp + 0x100], rbx
mov qword [rsp + 0x108], 7
mov word [rsp + 0xf0], bx
lea rax, [rsp + 0x150]
mov rdx, 0xffffffffffffffff
nop dword [rax]
inc rdx
cmp word [rax + rdx*2], 0
jne 0x140030490
lea rcx, [rsp + 0xf0]
cmp rdx, 7
ja 0x1400304ce
mov qword [rsp + 0x100], rdx
lea rdi, [rdx + rdx]
mov r8, rdi
lea rdx, [rsp + 0x150]
call fcn.14009a510
mov word [rsp + rdi + 0xf0], bx
jmp 0x1400304dc
lea r9, [rsp + 0x150]
call fcn.14002d410
nop
mov qword [rsp + 0x48], rbx
mov qword [rsp + 0x50], 7
mov word [rsp + 0x38], bx
mov rax, qword [rsp + 0x100]
cmp rax, 2
jb 0x140030c13
add rax, 0xfffffffffffffffe
mov rdx, 0xffffffffffffffff
cmp rax, rdx
cmovb rdx, rax
lea r9, [rsp + 0xf0]
cmp qword [rsp + 0x108], 8
cmovae r9, qword [rsp + 0xf0]
add r9, 4
lea rcx, [rsp + 0x38]
cmp rdx, 7
ja 0x140030557
mov qword [rsp + 0x48], rdx
lea rdi, [rdx + rdx]
mov r8, rdi
mov rdx, r9
call fcn.14009a510
mov word [rsp + rdi + 0x38], bx
jmp 0x14003055c
call fcn.14002d410
or r14d, 2
mov r9d, 8
lea r8, [0x140107a08]
lea rcx, [rsp + 0x38]
call fcn.140032050
movups xmm6, xmmword [rax]
movups xmm7, xmmword [rax + 0x10]
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], 7
mov word [rax], bx
or r14d, 4
lea rcx, [rsp + 0x88]
call fcn.1400290c0
movups xmmword [rsp + 0x88], xmm6
movups xmmword [rsp + 0x98], xmm7
mov rdx, qword [rsp + 0x50]
cmp rdx, 8
jb 0x1400305f0
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400305eb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140030c07
call fcn.1400765f0
lea rax, [rsp + 0x88]
mov rdx, qword [rsp + 0x88]
mov r8, qword [rsp + 0xa0]
cmp r8, 8
cmovae rax, rdx
mov rcx, qword [rsp + 0x98]
cmp word [rax + rcx*2 - 2], 0x5c
jne 0x14003063f
dec rcx
mov qword [rsp + 0x98], rcx
lea rax, [rsp + 0x88]
cmp r8, 8
cmovae rax, rdx
mov word [rax + rcx*2], bx
mov rdx, qword [rsp + 0x108]
cmp rdx, 8
jb 0x14003071b
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0xf0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140030686
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140030c0d
call fcn.1400765f0
jmp 0x14003071b
mov qword [rsp + 0x48], rbx
mov qword [rsp + 0x50], 7
mov word [rsp + 0x38], bx
or r14d, 8
mov dword [rsp + 0x34], r14d
mov rdx, qword [rsi + 0x10]
add rdx, 4
lea rcx, [rsp + 0x38]
call fcn.140031f90
mov r8d, 4
lea rdx, [0x140107a20]
lea rcx, [rsp + 0x38]
call fcn.14002b210
mov rdx, rsi
cmp qword [rsi + 0x18], 8
jb 0x1400306e2
mov rdx, qword [rsi]
mov r8, qword [rsi + 0x10]
lea rcx, [rsp + 0x38]
call fcn.14002b210
lea rcx, [rsp + 0x88]
call fcn.1400290c0
movups xmm0, xmmword [rsp + 0x38]
movups xmmword [rsp + 0x88], xmm0
movups xmm1, xmmword [rsp + 0x48]
movups xmmword [rsp + 0x98], xmm1
and r14d, 0xfffffff7
lea rdx, [rsp + 0x88]
lea rcx, [rsp + 0x38]
call fcn.14002e930
nop
mov rdx, qword [rsp + 0xb0]
lea r8, [rsp + 0x38]
cmp qword [rsp + 0xb8], rdx
je 0x140030755
call fcn.140031680
add qword [rsp + 0xb0], 0x10
jmp 0x140030763
lea rcx, [rsp + 0xa8]
call fcn.1400317d0
nop
mov rdx, qword [rsp + 0x50]
cmp rdx, 8
jb 0x1400307a6
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400307a0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140030c19
call fcn.1400765f0
nop
mov rdx, qword [rsp + 0xa0]
cmp rdx, 8
jb 0x1400307ee
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x88]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400307e9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140030c1f
call fcn.1400765f0
mov qword [rsp + 0x98], rbx
mov qword [rsp + 0xa0], 7
mov word [rsp + 0x88], bx
mov rdx, qword [rsp + 0xd8]
cmp rdx, 8
jb 0x140030852
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0xc0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003084d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140030c25
call fcn.1400765f0
add rsi, 0x20
jmp 0x14003036c
test r15b, r15b
je 0x140030a86
call fcn.14002f2a0
mov qword [rsp + 0x80], rax
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x88], xmm0
mov qword [rsp + 0x98], rbx
lea rax, [rsp + 0x80]
mov qword [rsp + 0xc0], rax
lea rax, [rsp + 0x88]
mov qword [rsp + 0xc8], rax
lea rax, [rsp + 0x120]
mov qword [rsp + 0xd0], rax
lea rax, [rsp + 0xa8]
mov qword [rsp + 0xd8], rax
mov ecx, 0x20
call fcn.1400765b4
mov rdi, rax
movups xmm0, xmmword [rsp + 0xc0]
movups xmmword [rax], xmm0
movups xmm1, xmmword [rsp + 0xd0]
movups xmmword [rax + 0x10], xmm1
mov qword [rsp + 0x110], rax
xor eax, eax
mov qword [rsp + 0xc0], rax
mov qword [rsp + 0xc8], rax
mov qword [rsp + 0xd0], rax
mov qword [rsp + 0xd8], rax
mov qword [rsp + 0xe0], rax
lea rcx, [rsp + 0xc0]
call fcn.1400240c0
lea rax, vtable.std::_LaunchPad_class_std::unique_ptr_class_std::tuple_class__lambda_e420b2b94725128a5640514617c114b7____struct_std::default_delete_class_std::tuple_class__lambda_e420b2b94725128a5640514617c114b7_____.0
mov qword [rsp + 0xc0], rax
mov qword [rsp + 0x110], rbx
mov qword [rsp + 0xe0], rdi
lea r8, [rsp + 0xc0]
lea rdx, [0x140024170]
lea rcx, [rsp + 0xf0]
call fcn.140078c6c
mov ecx, 1
cmp eax, 4
cmovne ecx, eax
test ecx, ecx
je 0x140030980
call fcn.14007918c
nop word [rax + rax]
cmp byte [rsp + 0xd8], 0
jne 0x1400309ac
mov rdx, qword [rsp + 0xd0]
mov rcx, qword [rsp + 0xc8]
call fcn.1400780a0
test eax, eax
je 0x140030980
mov ecx, eax
call fcn.14007918c
jmp 0x140030980
mov rcx, qword [rsp + 0xe0]
test rcx, rcx
je 0x1400309c4
mov edx, 0x20
call fcn.1400765f0
nop
mov rsi, qword [rsp + 0xc8]
mov rdi, qword [rsp + 0xd0]
mov rcx, rdi
call fcn.140079bd8
test eax, eax
je 0x1400309e7
mov ecx, eax
call fcn.14007918c
mov rcx, rdi
call fcn.140079af0
mov rcx, rsi
call fcn.140078004
nop
test rbx, rbx
je 0x140030a0b
mov edx, 0x20
mov rcx, rbx
call fcn.1400765f0
nop
mov eax, dword [rsp + 0xf8]
test eax, eax
jne 0x140030a31
lea ecx, [rax + 1]
call fcn.1400791c8
mov eax, dword [rsp + 0xf8]
test eax, eax
jne 0x140030a31
lea ecx, [rax + 1]
call fcn.1400791c8
call sub.KERNEL32.dll_GetCurrentThreadId
cmp dword [rsp + 0xf8], eax
jne 0x140030a49
mov ecx, 5
call fcn.1400791c8
movaps xmm0, xmmword [rsp + 0xf0]
movdqa xmmword [rsp + 0x110], xmm0
xor edx, edx
lea rcx, [rsp + 0x110]
call fcn.140078c04
test eax, eax
je 0x140030a78
mov ecx, 2
call fcn.1400791c8
nop
lea rcx, [rsp + 0x88]
call fcn.140031330
nop
jmp 0x140030a8a
mov rsi, qword [rsp + 0xb0]
mov rdi, qword [rsp + 0xa8]
cmp rdi, rsi
je 0x140030b0e
add rdi, 8
mov eax, dword [rdi]
test eax, eax
jne 0x140030abf
lea ecx, [rax + 1]
call fcn.1400791c8
mov eax, dword [rdi]
test eax, eax
jne 0x140030abf
lea ecx, [rax + 1]
call fcn.1400791c8
call sub.KERNEL32.dll_GetCurrentThreadId
cmp dword [rdi], eax
jne 0x140030ad2
mov ecx, 5
call fcn.1400791c8
movups xmm0, xmmword [rdi - 8]
movaps xmmword [rsp + 0xf0], xmm0
xor edx, edx
lea rcx, [rsp + 0xf0]
call fcn.140078c04
test eax, eax
je 0x140030afb
mov ecx, 2
call fcn.1400791c8
mov qword [rdi - 8], rbx
mov dword [rdi], ebx
add rdi, 0x10
lea rax, [rdi - 8]
cmp rax, rsi
jne 0x140030aa3
lea rcx, [rsp + 0x120]
call fcn.140031330
nop
mov rcx, qword [rsp + 0xa8]
test rcx, rcx
je 0x140030ba0
mov rax, rcx
mov rdx, qword [rsp + 0xb0]
cmp rcx, rdx
je 0x140030b53
nop dword [rax]
cmp dword [rax + 8], 0
jne 0x140030c31
add rax, 0x10
cmp rax, rdx
jne 0x140030b40
mov rdx, qword [rsp + 0xb8]
sub rdx, rcx
and rdx, 0xfffffffffffffff0
mov rax, rcx
cmp rdx, 0x1000
jb 0x140030b87
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140030c2b
call fcn.1400765f0
xorps xmm0, xmm0
movdqu xmmword [rsp + 0xa8], xmm0
mov qword [rsp + 0xb8], rbx
lea rcx, [rsp + 0x138]
call fcn.140031330
mov rcx, qword [rsp + 0x360]
xor rcx, rsp
call fcn.140076590
lea r11, [rsp + 0x390]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
mov rsp, r11
pop r15
pop r14
pop r12
ret
lea rcx, [rsp + 0x60]
call fcn.14002f150
lea rdx, [0x140124af0]
lea rcx, [rsp + 0x60]
call fcn.14009a418
nop
call fcn.1400a3864
nop
call fcn.1400a3864
nop
call fcn.1400a3864
nop
call fcn.14002cb90
nop
call fcn.1400a3864
nop
call fcn.1400a3864
nop
call fcn.1400a3864
nop
call fcn.1400a3864
int3
call fcn.1400a5fbc
int3