Function at 0x140024ce0
Capabilities:
Get disk information
Read file on windows

Disassembly:
xchg r9, rax
mov r9, rsp
xchg r9, rax
xchg rcx, rbx
mov qword [rax + 0x10], rcx
xchg rcx, rbx
jmp 0x140025113
xchg rbp, rbp
pand xmm2, xmmword [0x1401133b0]
packuswb xmm2, xmm2
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
mov dword [rsp - 0x14], ebx
movd xmm0, r8d
jmp 0x140024f4e
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x1401133b0]
packuswb xmm2, xmm2
mov r15, r15
paddb xmm2, xmm0
movd xmm0, dword [rdx - 8]
pxor xmm2, xmm0
jmp 0x140024fa3
mov dword [rsp - 0x28], ebx
xchg rdi, rax
mov rax, rdi
xchg rdi, rax
cmp rax, 0xffffffffffffffff
jmp 0x140025160
pmulld xmm0, xmm7
psubd xmm2, xmm0
mov r11, r11
jmp 0x140025130
xchg rbx, rax
mov qword [rsp + 0x2e0], rbx
xchg rbx, rax
xchg rbp, rcx
mov r14, rbp
jmp 0x1400250a9
xchg rbx, rax
mov rax, qword [0x14024f2e0]
mov dword [rsp - 0x18], 0x740beb50
xor rax, rsp
jmp 0x140024d67
sub eax, 0x5fbbba59
add eax, 0x737c496b
lea r8, [r8 + 1]
mov r10, r10
imul ecx
add edx, ecx
sar edx, 2
jmp 0x140025124
jge 0x140024f1c
xchg r8, r8
movsxd rax, ecx
jmp 0x14002518a
psrad xmm1, xmm6
movdqa xmm0, xmm1
mov dword [rsp - 0xc], esp
psrld xmm0, xmm8
paddd xmm0, xmm1
jmp 0x140024d56
xor dword [rsp + 0x190], 0x16ac7115
sub dword [rsp + 0x190], 0x32e58ca2
mov word [rsp + 0x194], ax
mov dword [rsp - 0x14], esp
lea rcx, [rsp + 0x190]
jmp 0x140025285
add dword [rsp + 0x190], 0x44bb83
sub dword [rsp + 0x190], 0x434b1116
add dword [rsp + 0x190], 0x2013de08
sub dword [rsp + 0x190], 0x3625d790
jmp 0x140024ddf
xchg rsi, rax
movaps xmmword [rsi - 0x38], xmm7
xchg rsi, rax
xchg rbx, rax
movaps xmmword [rbx - 0x48], xmm8
jmp 0x140024d7e
neg al
add al, 0xce
neg al
xor byte [r8 - 1], al
jmp 0x140024f0f
shr eax, 6
shr eax, 0xc
shr eax, 0xa
shr eax, 1
jmp 0x1400252ad
mov r14, r14
je 0x1400254af
cmp byte [rsp + 0x1a0], 0
jmp 0x140025023
lea r15d, [rbp + 0x1a]
nop dword [rax]
mov dword [rsp - 0x38], 0x43782c04
xor eax, eax
mov dword [rsp + 0x190], 0x5c58833d
add dword [rsp + 0x190], 0x1bb9b9f1
add dword [rsp + 0x190], 0x6f3c9e1
jmp 0x140024e0e
mov qword [rsp], r14
push r15
add rsp, 0xfffffffffffffce0
mov dword [rsp - 0x20], 0x4245b3e7
xchg r9, rax
movaps xmmword [r9 - 0x28], xmm6
xchg r9, rax
jmp 0x140024e3f
add rax, 0x22540658
sub rax, 0x57cb0842
add rax, 0x42949d19
sub rax, 0x424e1cbb
add rax, 0x7fffffff
add rax, 0x6f5317d1
nop dword [rax]
jmp 0x140025093
cmp ecx, 0x11
jl 0x14002519c
mov dword [rsp - 0x38], ebp
lea r8, [rsp + 0x190]
lea rdx, [rsp + 0x20]
lea rcx, [rsp + 0x1e0]
call fcn.14000ed10
jmp 0x140025051
push 0x222ca573
mov qword [rsp], rdi
nop
sub rsp, 8
jmp 0x140024ebf
paddb xmm2, xmm0
movd xmm0, dword [rdx - 0xc]
pxor xmm2, xmm0
mov dword [rsp - 0x34], esi
movdqa xmm0, xmm3
jmp 0x140024f80
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
movd xmm0, r8d
mov dword [rsp - 0x20], ecx
jmp 0x140024d1c
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
movd dword [rdx - 0xc], xmm2
mov dword [rsp - 0x38], edi
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, xmm6
jmp 0x1400250f1
movd dword [rdx - 8], xmm2
xchg r15, r15
cmp ecx, 0x10
jl 0x140025151
cmp ecx, 0x11
jmp 0x140024db4
jl 0x140024dbd
movdqa xmm0, xmmword [str.2222222222222222]
lea rdx, [rsp + 0x24]
mov r9, r9
movdqa xmm5, xmmword [0x140113370]
movdqa xmm4, xmmword [0x1401144e0]
jmp 0x1400251d3
xor ecx, 0x26258a89
sub ecx, 0x24eefba3
call qword [sym.imp.KERNEL32.dll_GetLogicalDriveStringsA]
test eax, eax
jmp 0x140024e72
add eax, 0x2bf9403e
xor eax, 0x6954722b
add eax, 0x3f654b42
add eax, 0x284efe8e
sub eax, 0x51d83ef4
xor eax, 0x5872f476
jmp 0x140024d97
lea rbx, [rsp + 0x1a0]
je 0x1400254af
mov dword [rsp - 0x28], ecx
mov esi, dword [0x14024f2c0]
mov ebp, 0x11cd9019
sub ebp, 0x97cf9aa
add ebp, 0x17f1f32a
jmp 0x140025245
mov r12, r12
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x1e0]
call qword [sym.imp.KERNEL32.dll_FindFirstFileA]
jmp 0x140024d42
xchg rbx, rsp
movups xmmword [rbx + 0x20], xmm0
xchg rbx, rsp
cmp esi, 2
mov rsi, rsi
jmp 0x140024fbc
cmp byte [rbx], 0
jne 0x140024e97
mov dword [rsp - 0x18], edi
jmp 0x1400254af
mov dword [rsp - 0x3c], edx
inc rax
cmp byte [rbx + rax], 0
jne 0x140025097
jmp 0x1400252c1
xchg rcx, rbp
lea rdx, [rsp + 0x1a0]
mov ecx, 0x101c00c9
xor ecx, 0x37191307
xor ecx, 0x172f8f02
jmp 0x140025268
pshufd xmm2, xmm2, 0
lea rdx, [rdx + 8]
paddd xmm2, xmm5
jmp 0x1400250dc
movd xmm3, eax
xchg r10, r10
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
jmp 0x140025220
mov r11, r11
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
mov dword [rsp - 0x38], ecx
psubd xmm3, xmm0
jmp 0x140024f68
mov qword [rax + 0x18], rbp
mov qword [rax + 0x20], rsi
mov r14, r14
nop
jmp 0x140024f3b
sar edx, 1
sar edx, 2
mov eax, edx
jmp 0x140024e62
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
movdqa xmm1, xmm3
jmp 0x140024cf6
movd xmm6, ebp
movd xmm8, r15d
movd xmm2, ecx
lea eax, [rcx + 4]
mov rbp, rbp
jmp 0x1400250ca
mov dword [rsp - 0x28], 0x39ea9e1d
jne 0x1400252cf
nop
movabs rax, 0xffffffff2ee03622
sub rax, 0x175c344c
xor rax, 0x5259686d
jmp 0x140024ee2
lea r8, [rsp + 0x20]
add r8, rax
xchg r8, r8
nop dword [rax]
mov eax, 0x4c50e4f2
jmp 0x140025000
movzx eax, cl
inc ecx
sub al, dl
mov dword [rsp - 0x30], 0x266e7483
jmp 0x140024e53
mov r13, r13
movzx eax, byte [0x140113e40]
xor ecx, ecx
mov byte [rsp + 0x30], al
mov dword [rsp - 0x14], esp
jmp 0x14002506c
movdqa xmm7, xmmword [str.8888]
mov dword [rsp - 0x34], ecx
xchg rsp, r10
movdqa xmmword [r10 + 0x40], xmm0
xchg rsp, r10
mov r8d, dword [rsp + 0x40]
mov dword [rsp - 0x1c], edi
jmp 0x140025148
nop
add ecx, 0x2672ee31
sub ecx, 0x2672ee29
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
mov dword [rsp - 0x3c], 0x5873a45d
paddd xmm1, xmm2
jmp 0x140024dc5
punpckldq xmm1, xmm2
movdqa xmm0, xmm2
mov dword [rsp - 0x10], 0x2302b6b8
punpckhdq xmm0, xmm2
paddd xmm3, xmm5
pmuldq xmm0, xmm4
mov rdi, rdi
jmp 0x1400251f9
xor ebp, 0x26326b88
add ebp, 0x5f834eda
xor ebp, 0x22656fa2
xor ebp, 0x406345f7
xor ebp, 0x7f21abb
jmp 0x140024e88
xor ecx, 0x798d2775
sub ecx, 0x23d12f64
add ecx, 0x3b5be28e
sub ecx, 0x5e66fd79
jmp 0x140024fe7
movzx eax, byte [rbx]
mov byte [rsp + 0x190], al
mov dword [rsp - 0x38], edx
call qword [sym.imp.KERNEL32.dll_GetDriveTypeA]
cmp eax, ebp
jne 0x14002516e
movups xmm0, xmmword [0x140113e30]
jmp 0x1400251ba
shr eax, 1
shr eax, 1
add edx, eax
movsx eax, dl
mov rbx, rbx
imul edx, eax, 0x38
jmp 0x1400251a6
inc rbx
xchg rcx, rcx
add rbx, rax
jmp 0x140025081
lea rdx, [0x140113e44]
lea rcx, [rsp + 0x1e0]
call fcn.1400efdbc
mov dword [rsp - 0x14], ebx
xchg rbp, rax
jmp 0x140025385
xchg rbp, rsi
mov rcx, rsi
xchg rbp, rsi
call fcn.1400e3588
jmp 0x14002545c
xor edx, edx
xchg r15, rax
mov rcx, r15
xchg r15, rax
lea r8d, [rdx + 2]
xchg rsp, rsp
jmp 0x1400253e3
xchg rcx, rax
mov rbp, rax
mov dword [rsp - 0x1c], ecx
call fcn.1400f0028
mov rcx, rsi
call fcn.1400efc9c
xchg r10, r10
jmp 0x1400253d5
xchg r8, rbp
mov edx, 0x42c3b425
xor edx, 0x66c0ce60
jmp 0x140025434
call qword [sym.imp.KERNEL32.dll_FindClose]
test rbp, rbp
je 0x1400254af
xchg rbx, rbx
lea rcx, [r14 + 0x50d]
mov byte [r14 + 0x50c], 0x52
sub byte [r14 + 0x50c], 0x30
jmp 0x1400253a0
xchg r8, rbx
call fcn.1400e39c0
mov r9, rsi
jmp 0x140025425
mov rsi, rbp
xchg rbp, rax
test rax, rax
mov dword [rsp - 0x3c], 0x62373626
je 0x1400254a2
jmp 0x140025301
xor byte [r14 + 0x50c], 0x43
xor byte [r14 + 0x50c], 0x10
sub byte [r14 + 0x50c], 0x31
add byte [r14 + 0x50c], 0x29
sub byte [r14 + 0x50c], 0x41
sub byte [r14 + 0x50c], 0x27
jmp 0x1400253fe
xchg rdi, r10
mov rcx, r10
xchg rdi, r10
jmp 0x140025347
call fcn.1400f02f8
xchg rsi, rcx
mov rsi, rcx
xchg rsi, rcx
call fcn.1400f07f4
xchg rsi, rcx
jmp 0x140025465
mov r8d, 0x5725c79f
add r8d, 0x1548431c
sub r8d, 0x43e9aec0
add r8d, 0x680e71d
sub r8d, 0x23677b4d
jmp 0x140025481
mov dword [rsp - 0x1c], esi
xchg r8, rbp
mov rbp, rbx
jmp 0x140025334
xor edx, 0x6da2e296
add edx, 0x10deacde
sub edx, 0x2e3e8bc3
sub edx, 0x24ffe3f7
sub edx, 0x741d5f6
xchg rcx, rax
mov rax, rcx
jmp 0x140025316
mov dword [rsp - 0x28], ebx
jmp 0x140025518
mov rsi, rcx
xchg rcx, rsi
movsxd rbx, eax
call fcn.1400f07fc
mov rcx, rcx
xchg r8, rbx
mov rcx, r8
jmp 0x140025375
add r8d, 0x16cfb98e
sub r8d, 0x226d7159
xchg rdx, rbp
mov rbp, rdx
xchg rbp, rdx
call fcn.1400e5740
jmp 0x1400252ee
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_FindClose]
mov dword [rsp - 0x3c], ecx
mov byte [r14 + 0x50c], 0xe
xor byte [r14 + 0x50c], 0x47
jmp 0x1400254f8
xchg r10, r11
movaps xmm6, xmmword [r10 - 0x10]
xchg r10, r11
xchg r11, r14
movaps xmm7, xmmword [r14 - 0x20]
xchg r11, r14
jmp 0x140025555
pop r15
nop
mov r14, qword [rsp]
add rsp, 8
nop
mov rdi, qword [rsp]
add rsp, 8
jmp 0x14002556e
xor byte [r14 + 0x50c], 0x5f
xor byte [r14 + 0x50c], 0x74
add byte [r14 + 0x50c], 0xa
sub byte [r14 + 0x50c], 0x6c
mov rcx, qword [rsp + 0x2e0]
jmp 0x140025535
mov r14, qword [r11 + 0x30]
xchg r14, rbp
mov rsi, qword [r11 + 0x38]
jmp 0x1400254c4
xor rcx, rsp
mov dword [rsp - 0x14], esi
call fcn.1400e36a0
lea r11, [rsp + 0x320]
mov rbx, qword [r11 + 0x28]
xchg r14, rbp
jmp 0x140025525
xchg r11, r8
movaps xmm8, xmmword [r8 - 0x30]
xchg r11, r8
xchg r11, rsp
mov r11, rsp
xchg rsp, r11
jmp 0x1400254df
ret