Function at 0x1400994b0
Capabilities:
Get disk information

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
lea rbp, [rsp - 0x3e0]
sub rsp, 0x4e0
mov rax, qword [0x1404b75f0]
xor rax, rsp
mov qword [rbp + 0x3d0], rax
mov rdi, rcx
mov qword [rbp - 0x78], rcx
xor edx, edx
mov r8d, 0x20a
lea rcx, [rbp + 0x1c0]
call fcn.14025e970
xor edx, edx
mov r8d, 0x20a
lea rcx, [rbp - 0x50]
call fcn.14025e970
xor esi, esi
mov dword [rsp + 0x60], esi
mov dword [rbp - 0x78], esi
mov dword [rsp + 0x64], esi
mov qword [rsp + 0x68], rsi
mov qword [rsp + 0x78], rsi
mov qword [rbp - 0x80], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x68], sil
xor r8d, r8d
lea rdx, [0x14033d71b]
lea rcx, [rsp + 0x68]
call fcn.140063a80
nop
mov dword [rsp + 0x38], 0x105
lea rax, [rbp - 0x50]
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x64]
mov qword [rsp + 0x28], rax
lea rax, [rbp - 0x78]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x60]
mov r8d, 0x105
lea rdx, [rbp + 0x1c0]
lea rcx, [0x140488310]
call qword [sym.imp.KERNEL32.dll_GetVolumeInformationW]
test eax, eax
je 0x140099650
lea r9, [rbp - 0x5b]
mov ebx, dword [rsp + 0x60]
nop dword [rax + rax]
dec r9
mov eax, 0xcccccccd
mul ebx
shr edx, 3
movzx eax, dl
shl al, 2
lea ecx, [rax + rdx]
add cl, cl
sub bl, cl
add bl, 0x30
mov byte [r9], bl
mov ebx, edx
test edx, edx
jne 0x1400995a0
mov qword [rsp + 0x40], rsi
mov qword [rsp + 0x50], rsi
mov qword [rsp + 0x58], reloc.WS2_32.dll_ntohs
lea rax, [rbp - 0x5b]
cmp r9, rax
je 0x1400995f6
lea r8, [rbp - 0x5b]
sub r8, r9
mov rdx, r9
lea rcx, [rsp + 0x40]
call fcn.140063a80
mov rdx, qword [rbp - 0x80]
cmp rdx, 0x10
jb 0x140099632
inc rdx
mov rcx, qword [rsp + 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14009962d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140099765
call fcn.14025bc50
movups xmm0, xmmword [rsp + 0x40]
movups xmmword [rsp + 0x68], xmm0
movups xmm1, xmmword [rsp + 0x50]
movups xmmword [rsp + 0x78], xmm1
nop word [rax + rax]
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x70], xmm0
xor eax, eax
xor ecx, ecx
cpuid
mov dword [rbp - 0x70], eax
mov dword [rbp - 0x6c], ebx
mov dword [rbp - 0x68], ecx
mov dword [rbp - 0x64], edx
movzx eax, word [rbp - 0x62]
add ax, dx
add ax, word [rbp - 0x66]
add ax, cx
add ax, word [rbp - 0x6a]
add ax, bx
add ax, word [rbp - 0x6e]
add ax, word [rbp - 0x70]
movzx edx, ax
lea rcx, [rsp + 0x40]
call fcn.140095570
nop
mov rdx, rax
cmp qword [rax + 0x18], 0x10
jb 0x1400996a2
mov rdx, qword [rax]
mov r8, qword [rax + 0x10]
lea rcx, [rsp + 0x68]
call fcn.140063be0
nop
mov rdx, qword [rsp + 0x58]
cmp rdx, 0x10
jb 0x1400996ee
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400996e9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14009976b
call fcn.14025bc50
lea rdx, [rsp + 0x68]
mov rcx, rdi
call fcn.140098b70
nop
mov rdx, qword [rbp - 0x80]
cmp rdx, 0x10
jb 0x140099734
inc rdx
mov rcx, qword [rsp + 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14009972f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14009975f
call fcn.14025bc50
mov rax, rdi
mov rcx, qword [rbp + 0x3d0]
xor rcx, rsp
call fcn.14025bc30
lea r11, [rsp + 0x4e0]
mov rbx, qword [r11 + 0x18]
mov rsi, qword [r11 + 0x20]
mov rdi, qword [r11 + 0x28]
mov rsp, r11
pop rbp
ret
call fcn.14026c818
nop
call fcn.14026c818
nop
call fcn.14026c818
int3