Function at 0x14002c130
Capabilities:
Get disk information
Get disk size
Get storage device properties

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x3a8
lea rbp, [rsp + 0x80]
mov qword [rbp + 0x320], 0xfffffffffffffffe
mov r12, rcx
mov eax, dword [rdx]
bt eax, r8d
jae 0x14002c24c
mov ebx, r8d
add ebx, 0x41
mov word [rbp + 0x318], bx
mov dword [rbp + 0x31a], 0x5c003a
mov word [rbp + 0x31e], 0
lea rcx, [rbp + 0x318]
call sub.kernel32.dll_GetDriveTypeW
mov edi, eax
lea eax, [rdi - 4]
cmp eax, 0xfffffffe
jb 0x14002c24c
lea r15, [rbp - 0x3a]
mov r8d, 0x20a
mov rcx, r15
xor edx, edx
call sub.VCRUNTIME140.dll_memset
pxor xmm0, xmm0
movdqa xmmword [rbp + 0x300], xmm0
movdqa xmmword [rbp + 0x2f0], xmm0
movdqa xmmword [rbp + 0x2e0], xmm0
movdqa xmmword [rbp + 0x2d0], xmm0
lea r14, [rbp + 0x2d0]
mov qword [rsp + 0x30], r14
movdqu xmmword [rsp + 0x20], xmm0
mov dword [rsp + 0x38], 0x20
lea rcx, [rbp + 0x318]
mov rdx, r15
mov r8d, 0x105
xor r9d, r9d
call sub.kernel32.dll_GetVolumeInformationW
test eax, eax
je 0x14002c24c
mov esi, 2
nop word cs:[rax + rax]
cmp word [rbp + rsi*2 - 0x3e], 0
je 0x14002c269
cmp word [rbp + rsi*2 - 0x3c], 0
je 0x14002c26f
cmp word [rbp + rsi*2 - 0x3a], 0
je 0x14002c272
add rsi, 3
cmp rsi, 0x107
jne 0x14002c220
mov esi, 0x105
jmp 0x14002c27f
mov qword [r12 + 0x20], 3
add rsp, 0x3a8
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret
add rsi, 0xfffffffffffffffe
jmp 0x14002c272
dec rsi
cmp rsi, 0x106
jae 0x14002c60f
mov qword [rbp + 0x2a0], 0
mov qword [rbp + 0x2a8], 1
mov qword [rbp + 0x2b0], 0
mov rax, rsi
shr rax, 1
mov r8d, esi
and r8d, 1
add r8, rax
je 0x14002c2c0
lea rcx, [rbp + 0x2a0]
xor edx, edx
call fcn.14020b1c0
lea rax, [rsi*2 - 0x3a]
add rax, rbp
mov qword [rbp + 0x280], rax
mov qword [rbp + 0x288], r15
mov word [rbp + 0x290], 0
lea rcx, [rbp + 0x280]
lea rdx, [rbp + 0x2a0]
call fcn.140029b20
mov rax, qword [rbp + 0x2a8]
mov rcx, qword [rbp + 0x2b0]
cmp word [rbp + 0x2d0], 0
mov qword [rbp + 0x238], rdi
mov qword [rbp + 0x2c0], rax
mov qword [rbp + 0x2c8], rcx
je 0x14002c4e1
cmp word [rbp + 0x2d2], 0
je 0x14002c507
cmp word [rbp + 0x2d4], 0
je 0x14002c512
cmp word [rbp + 0x2d6], 0
je 0x14002c51d
cmp word [rbp + 0x2d8], 0
je 0x14002c528
cmp word [rbp + 0x2da], 0
je 0x14002c533
cmp word [rbp + 0x2dc], 0
je 0x14002c53e
cmp word [rbp + 0x2de], 0
je 0x14002c549
cmp word [rbp + 0x2e0], 0
je 0x14002c554
cmp word [rbp + 0x2e2], 0
je 0x14002c55f
cmp word [rbp + 0x2e4], 0
je 0x14002c56a
cmp word [rbp + 0x2e6], 0
je 0x14002c575
cmp word [rbp + 0x2e8], 0
je 0x14002c580
cmp word [rbp + 0x2ea], 0
je 0x14002c58b
cmp word [rbp + 0x2ec], 0
je 0x14002c596
cmp word [rbp + 0x2ee], 0
je 0x14002c5a1
cmp word [rbp + 0x2f0], 0
je 0x14002c5ac
cmp word [rbp + 0x2f2], 0
je 0x14002c5b7
cmp word [rbp + 0x2f4], 0
je 0x14002c5bf
cmp word [rbp + 0x2f6], 0
je 0x14002c5c7
cmp word [rbp + 0x2f8], 0
je 0x14002c5cf
cmp word [rbp + 0x2fa], 0
je 0x14002c5d7
cmp word [rbp + 0x2fc], 0
je 0x14002c5df
cmp word [rbp + 0x2fe], 0
je 0x14002c5e7
cmp word [rbp + 0x300], 0
je 0x14002c5ef
cmp word [rbp + 0x302], 0
je 0x14002c5f7
cmp word [rbp + 0x304], 0
je 0x14002c5ff
cmp word [rbp + 0x306], 0
je 0x14002c607
cmp word [rbp + 0x308], 0
je 0x14002c625
cmp word [rbp + 0x30a], 0
je 0x14002c62d
cmp word [rbp + 0x30c], 0
je 0x14002c635
cmp word [rbp + 0x30e], 1
mov r13d, 0x20
sbb r13, 0
jmp 0x14002c63b
mov qword [rbp + 0x220], 0
mov qword [rbp + 0x228], 1
mov edi, 1
xor r13d, r13d
xor r15d, r15d
jmp 0x14002c774
mov r13d, 1
jmp 0x14002c63b
mov r13d, 2
jmp 0x14002c63b
mov r13d, 3
jmp 0x14002c63b
mov r13d, 4
jmp 0x14002c63b
mov r13d, 5
jmp 0x14002c63b
mov r13d, 6
jmp 0x14002c63b
mov r13d, 7
jmp 0x14002c63b
mov r13d, 8
jmp 0x14002c63b
mov r13d, 9
jmp 0x14002c63b
mov r13d, 0xa
jmp 0x14002c63b
mov r13d, 0xb
jmp 0x14002c63b
mov r13d, 0xc
jmp 0x14002c63b
mov r13d, 0xd
jmp 0x14002c63b
mov r13d, 0xe
jmp 0x14002c63b
mov r13d, 0xf
jmp 0x14002c63b
mov r13d, 0x10
jmp 0x14002c63b
mov r13d, 0x11
jmp 0x14002c63b
mov r13d, 0x12
jmp 0x14002c63b
mov r13d, 0x13
jmp 0x14002c63b
mov r13d, 0x14
jmp 0x14002c63b
mov r13d, 0x15
jmp 0x14002c63b
mov r13d, 0x16
jmp 0x14002c63b
mov r13d, 0x17
jmp 0x14002c63b
mov r13d, 0x18
jmp 0x14002c63b
mov r13d, 0x19
jmp 0x14002c63b
mov r13d, 0x1a
jmp 0x14002c63b
mov r13d, 0x1b
jmp 0x14002c63b
lea r8, str.C:UsersAdministrator.cargo_registry_srcgithub.com_1ecc6299db9ec823_sysinfo_0.29.0_srcwindowsdisk.rs
mov edx, 0x105
mov rcx, rsi
call fcn.140218040
ud2
mov r13d, 0x1c
jmp 0x14002c63b
mov r13d, 0x1d
jmp 0x14002c63b
mov r13d, 0x1e
mov edx, 1
mov rcx, r13
call fcn.14001c230
test rax, rax
je 0x14002cb46
mov rdi, rax
mov qword [rbp + 0x220], r13
mov qword [rbp + 0x228], rax
lea rcx, [r13 - 1]
movabs rax, 0x7fffffffffffffff
and rax, rcx
cmp rax, 0xf
jae 0x14002c681
xor r15d, r15d
jmp 0x14002c752
inc rax
mov r15, rax
and r15, 0xfffffffffffffff0
lea rcx, [r15 - 0x10]
mov rsi, rcx
shr rsi, 4
inc rsi
test rcx, rcx
je 0x14002c978
mov rdx, rsi
and rdx, 0xfffffffffffffffe
xor ecx, ecx
movdqa xmm0, xmmword [0x14021c3d0]
nop word cs:[rax + rax]
movdqu xmm1, xmmword [rbp + rcx*2 + 0x2d0]
movdqu xmm2, xmmword [rbp + rcx*2 + 0x2e0]
pand xmm1, xmm0
pand xmm2, xmm0
packuswb xmm1, xmm2
movdqu xmmword [rdi + rcx], xmm1
movdqu xmm1, xmmword [rbp + rcx*2 + 0x2f0]
movdqu xmm2, xmmword [rbp + rcx*2 + 0x300]
pand xmm1, xmm0
pand xmm2, xmm0
packuswb xmm1, xmm2
movdqu xmmword [rdi + rcx + 0x10], xmm1
add rcx, 0x20
add rdx, 0xfffffffffffffffe
jne 0x14002c6c0
test sil, 1
je 0x14002c742
movdqu xmm0, xmmword [rbp + rcx*2 + 0x2d0]
movdqu xmm1, xmmword [rbp + rcx*2 + 0x2e0]
movdqa xmm2, xmmword [0x14021c3d0]
pand xmm0, xmm2
pand xmm1, xmm2
packuswb xmm0, xmm1
movdqu xmmword [rdi + rcx], xmm0
cmp rax, r15
je 0x14002c774
lea r14, [r15*2 + 0x2d0]
add r14, rbp
lea rax, [r13*2 + 0x2d0]
add rax, rbp
nop dword [rax]
movzx ecx, byte [r14]
add r14, 2
mov byte [rdi + r15], cl
inc r15
cmp r14, rax
jne 0x14002c760
mov qword [rbp + 0x230], r15
movabs rax, 0x5c002e005c005c
mov qword [rbp + 0x248], rax
mov word [rbp + 0x250], bx
mov dword [rbp + 0x252], 0x3a
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 3
lea rcx, [rbp + 0x248]
xor edx, edx
mov r8d, 3
xor r9d, r9d
call sub.kernel32.dll_CreateFileW
cmp rax, 0xffffffffffffffff
je 0x14002c944
mov qword [rbp + 0x2b8], rax
mov qword [rbp + 0x268], 0
mov qword [rbp + 0x280], 0
lea rcx, [rbp + 0x318]
lea r8, [rbp + 0x268]
lea r9, [rbp + 0x280]
xor edx, edx
call sub.kernel32.dll_GetDiskFreeSpaceExW
test eax, eax
je 0x14002c95e
mov rsi, qword [rbp + 0x268]
test rsi, rsi
mov rcx, qword [rbp + 0x2b8]
je 0x14002c965
mov rbx, qword [rbp + 0x280]
mov qword [rbp + 0x210], 7
mov byte [rbp + 0x218], 0
mov dword [rbp + 0x260], 0
mov qword [rbp + 0x258], 0
mov dword [rbp + 0x314], 0
lea rax, [rbp + 0x314]
mov qword [rsp + 0x30], rax
lea rax, [rbp + 0x258]
mov qword [rsp + 0x20], rax
mov qword [rsp + 0x38], 0
mov dword [rsp + 0x28], 0xc
lea r8, [rbp + 0x210]
mov edx, 0x2d1400
mov r9d, 0xc
call sub.kernel32.dll_DeviceIoControl
xor r14d, r14d
cmp byte [rbp + 0x260], 0
sete r14b
cmp dword [rbp + 0x314], 0xc
mov ecx, 2
cmovne r14, rcx
test eax, eax
cmove r14, rcx
lea rcx, [rbp + 0x280]
mov rdx, qword [rbp + 0x2c0]
mov r8, qword [rbp + 0x2c8]
call fcn.1401e9500
mov rax, qword [rbp + 0x280]
mov qword [rbp + 0x2c8], rax
mov rax, qword [rbp + 0x288]
mov qword [rbp + 0x2c0], rax
movdqu xmm0, xmmword [rbp + 0x290]
movdqa xmmword [rbp + 0x1d0], xmm0
test r15, r15
mov qword [rbp + 0x240], rbx
je 0x14002c989
mov edx, 1
mov rcx, r15
call fcn.14001c230
mov rcx, rax
test rax, rax
jne 0x14002c98e
mov edx, 1
mov rcx, r15
call fcn.1402179b0
jmp 0x14002cb64
mov rcx, 0xffffffffffffffff
call sub.kernel32.dll_CloseHandle
mov qword [r12 + 0x20], 3
jmp 0x14002cb09
mov rcx, qword [rbp + 0x2b8]
mov qword [r12 + 0x20], 3
call sub.kernel32.dll_CloseHandle
jmp 0x14002cb09
xor ecx, ecx
test sil, 1
jne 0x14002c717
jmp 0x14002c742
mov ecx, 1
mov qword [rbp + 0x1f8], r15
mov qword [rbp + 0x200], rcx
mov rdx, rdi
mov r8, r15
call sub.VCRUNTIME140.dll_memcpy
mov qword [rbp + 0x208], r15
mov rbx, qword [rbp + 0x318]
mov ecx, 8
mov edx, 2
call fcn.14001c230
test rax, rax
je 0x14002cb55
mov qword [rbp + 0x1e0], 4
mov qword [rbp + 0x1e8], rax
mov qword [rax], rbx
mov qword [rbp + 0x1f0], 4
mov qword [rbp + 0x268], 0
mov qword [rbp + 0x270], 1
mov qword [rbp + 0x278], 0
lea rcx, [rbp + 0x268]
mov r8d, 2
xor edx, edx
call fcn.14020b1c0
lea rax, [rbp + 0x31e]
mov qword [rbp + 0x280], rax
lea rax, [rbp + 0x318]
mov qword [rbp + 0x288], rax
mov word [rbp + 0x290], 0
lea rcx, [rbp + 0x280]
lea rdx, [rbp + 0x268]
call fcn.140029b20
cmp dword [rbp + 0x238], 2
mov rax, qword [rbp + 0x2c8]
mov qword [r12], rax
mov rax, qword [rbp + 0x2c0]
mov qword [r12 + 8], rax
movaps xmm0, xmmword [rbp + 0x1d0]
movups xmmword [r12 + 0x10], xmm0
mov rax, qword [rbp + 0x208]
mov qword [r12 + 0x50], rax
movups xmm0, xmmword [rbp + 0x1f8]
movups xmmword [r12 + 0x40], xmm0
mov rax, qword [rbp + 0x1f0]
mov qword [r12 + 0x68], rax
movups xmm0, xmmword [rbp + 0x1e0]
movups xmmword [r12 + 0x58], xmm0
movdqu xmm0, xmmword [rbp + 0x268]
movdqu xmmword [r12 + 0x70], xmm0
mov rax, qword [rbp + 0x278]
mov qword [r12 + 0x80], rax
mov qword [r12 + 0x20], r14
mov qword [r12 + 0x28], 0xffffffffffffffff
mov qword [r12 + 0x30], rsi
mov rax, qword [rbp + 0x240]
mov qword [r12 + 0x38], rax
sete byte [r12 + 0x88]
mov rcx, qword [rbp + 0x2b8]
call sub.kernel32.dll_CloseHandle
test r13, r13
je 0x14002cb1f
mov r8d, 1
mov rcx, rdi
mov rdx, r13
call fcn.14001c240
mov rdx, qword [rbp + 0x2a0]
test rdx, rdx
je 0x14002c255
mov rcx, qword [rbp + 0x2a8]
mov r8d, 1
call fcn.14001c240
jmp 0x14002c255
mov edx, 1
mov rcx, r13
call fcn.1402179b0
jmp 0x14002cb64
mov ecx, 8
mov edx, 2
call fcn.1402179b0
ud2