Function at 0x1400331e0
Capabilities:
Get disk information

Disassembly:
mov rax, rsp
push r13
push r14
push r15
sub rsp, 0x400
mov qword [rsp + 0x78], 0xfffffffffffffffe
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
mov qword [rax + 0x20], r12
movaps xmmword [rax - 0x28], xmm6
movaps xmmword [rax - 0x38], xmm7
mov rax, qword [0x14012e190]
xor rax, rsp
mov qword [rsp + 0x3d0], rax
xor ebx, ebx
mov r14d, ebx
mov dword [rsp + 0x34], ebx
lea rcx, [rsp + 0x120]
call fcn.140036bf0
mov rdi, rax
lea rcx, [0x1401374d8]
cmp rcx, rax
je 0x140033270
call fcn.140023da0
movups xmm0, xmmword [rdi]
movups xmmword [0x1401374d8], xmm0
movups xmm1, xmmword [rdi + 0x10]
movups xmmword [0x1401374e8], xmm1
mov qword [rdi + 0x10], rbx
mov qword [rdi + 0x18], 0xf
mov byte [rdi], bl
lea rcx, [rsp + 0x120]
call fcn.140023da0
lea rcx, [rsp + 0x120]
call fcn.140039e20
mov rdi, rax
lea rcx, [0x1401374f8]
cmp rcx, rax
je 0x1400332c2
call fcn.14002d500
movups xmm0, xmmword [rdi]
movups xmmword [0x1401374f8], xmm0
movups xmm1, xmmword [rdi + 0x10]
movups xmmword [0x140137508], xmm1
mov qword [rdi + 0x10], rbx
mov qword [rdi + 0x18], 7
mov word [rdi], bx
lea rcx, [rsp + 0x120]
call fcn.14002d500
lea rcx, [rsp + 0x58]
call fcn.140039e20
nop
mov rdx, rax
lea rcx, [rsp + 0x120]
call fcn.1400322d0
mov rdi, rax
lea rcx, [0x140140cb0]
cmp rcx, rax
je 0x140033322
call fcn.14002d500
movups xmm0, xmmword [rdi]
movaps xmmword [0x140140cb0], xmm0
movups xmm1, xmmword [rdi + 0x10]
movaps xmmword [0x140140cc0], xmm1
mov qword [rdi + 0x10], rbx
mov qword [rdi + 0x18], 7
mov word [rdi], bx
lea rcx, [rsp + 0x120]
call fcn.14002d500
nop
lea rcx, [rsp + 0x58]
call fcn.14002d500
xor eax, eax
mov qword [rsp + 0x1a8], rax
mov qword [rsp + 0x1b0], rax
mov qword [rsp + 0x1b8], rax
lea rcx, [rsp + 0x1a8]
call fcn.140033090
nop
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x148], xmm0
mov qword [rsp + 0x158], rbx
mov byte [rsp + 0x30], 0
call fcn.140032700
mov rdi, rax
mov qword [rsp + 0x100], rax
lea rax, [rsp + 0xf0]
mov qword [rsp + 0x20], rax
mov r9d, 4
lea r8, [rsp + 0x180]
lea edx, [r9 + 0xe]
mov rcx, rdi
call qword [sym.imp.ADVAPI32.dll_GetTokenInformation]
test eax, eax
je 0x140033b89
cmp dword [rsp + 0x180], 2
sete r12b
lea rax, [rdi - 1]
cmp rax, 0xfffffffffffffffd
ja 0x1400333da
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov byte [rsp + 0x30], r12b
jmp 0x1400333ee
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x190], xmm0
mov qword [rsp + 0x1a0], rbx
mov rsi, qword [rsp + 0x1a8]
mov r13, qword [rsp + 0x1b0]
cmp rsi, r13
je 0x140033805
lea r8, [0x14010dd90]
mov rdx, rsi
lea rcx, [rsp + 0x120]
call fcn.140034d90
nop
lea rcx, [rsp + 0x120]
cmp qword [rsp + 0x138], 8
cmovae rcx, qword [rsp + 0x120]
call qword [sym.imp.KERNEL32.dll_GetDriveTypeW]
mov r15d, eax
cmp eax, 4
jne 0x140033464
test r12b, r12b
jne 0x1400337ef
mov qword [rsp + 0x170], rbx
mov qword [rsp + 0x178], 7
mov word [rsp + 0x160], bx
mov dword [rsp + 0x180], 0x104
cmp r15d, 4
jne 0x140033694
mov rcx, rsi
cmp qword [rsi + 0x18], 8
jb 0x1400334a2
mov rcx, qword [rsi]
lea r8, [rsp + 0x180]
lea rdx, [rsp + 0x1c0]
call qword [sym.imp.MPR.dll_WNetGetConnectionW]
test eax, eax
jne 0x140033760
mov qword [rsp + 0x110], rbx
mov qword [rsp + 0x118], 7
mov word [rsp + 0x100], bx
lea rax, [rsp + 0x1c0]
mov rdx, 0xffffffffffffffff
nop dword [rax + rax]
inc rdx
cmp word [rax + rdx*2], 0
jne 0x1400334f0
lea rcx, [rsp + 0x100]
cmp rdx, 7
ja 0x14003352e
mov qword [rsp + 0x110], rdx
lea rdi, [rdx + rdx]
mov r8, rdi
lea rdx, [rsp + 0x1c0]
call fcn.14009df80
mov word [rsp + rdi + 0x100], bx
jmp 0x14003353c
lea r9, [rsp + 0x1c0]
call fcn.14002fcb0
nop
mov qword [rsp + 0x48], rbx
mov qword [rsp + 0x50], 7
mov word [rsp + 0x38], bx
mov rax, qword [rsp + 0x110]
cmp rax, 2
jb 0x140033bab
add rax, 0xfffffffffffffffe
mov rdx, 0xffffffffffffffff
cmp rax, rdx
cmovb rdx, rax
lea r9, [rsp + 0x100]
cmp qword [rsp + 0x118], 8
cmovae r9, qword [rsp + 0x100]
add r9, 4
lea rcx, [rsp + 0x38]
cmp rdx, 7
ja 0x1400335b7
mov qword [rsp + 0x48], rdx
lea rdi, [rdx + rdx]
mov r8, rdi
mov rdx, r9
call fcn.14009df80
mov word [rsp + rdi + 0x38], bx
jmp 0x1400335bc
call fcn.14002fcb0
or r14d, 2
mov r9d, 8
lea r8, [0x14010dda8]
lea rcx, [rsp + 0x38]
call fcn.140035a50
movups xmm7, xmmword [rax]
movups xmmword [rsp + 0x58], xmm7
movups xmm6, xmmword [rax + 0x10]
movups xmmword [rsp + 0x68], xmm6
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], 7
mov word [rax], bx
or r14d, 4
lea rcx, [rsp + 0x160]
call fcn.14002d500
movups xmmword [rsp + 0x160], xmm7
movups xmmword [rsp + 0x170], xmm6
mov qword [rsp + 0x68], rbx
mov qword [rsp + 0x70], 7
mov word [rsp + 0x58], bx
lea rcx, [rsp + 0x58]
call fcn.14002d500
nop
lea rcx, [rsp + 0x38]
call fcn.14002d500
lea rax, [rsp + 0x160]
mov rdx, qword [rsp + 0x160]
mov r8, qword [rsp + 0x178]
cmp r8, 8
cmovae rax, rdx
mov rcx, qword [rsp + 0x170]
cmp word [rax + rcx*2 - 2], 0x5c
jne 0x14003368f
dec rcx
mov qword [rsp + 0x170], rcx
lea rax, [rsp + 0x160]
cmp r8, 8
cmovae rax, rdx
mov word [rax + rcx*2], bx
jmp 0x140033753
mov qword [rsp + 0x110], rbx
mov qword [rsp + 0x118], 7
mov word [rsp + 0x100], bx
or r14d, 8
mov dword [rsp + 0x34], r14d
mov rdx, qword [rsi + 0x10]
add rdx, 4
lea rcx, [rsp + 0x100]
call fcn.140035990
mov r8d, 4
lea rdx, str.__
lea rcx, [rsp + 0x100]
call fcn.14002d5e0
mov rdx, rsi
cmp qword [rsi + 0x18], 8
jb 0x1400336f5
mov rdx, qword [rsi]
mov r8, qword [rsi + 0x10]
lea rcx, [rsp + 0x100]
call fcn.14002d5e0
lea rcx, [rsp + 0x160]
call fcn.14002d500
movups xmm0, xmmword [rsp + 0x100]
movups xmmword [rsp + 0x160], xmm0
movups xmm1, xmmword [rsp + 0x110]
movups xmmword [rsp + 0x170], xmm1
mov qword [rsp + 0x110], rbx
mov qword [rsp + 0x118], 7
mov word [rsp + 0x100], bx
and r14d, 0xfffffff7
lea rcx, [rsp + 0x100]
call fcn.14002d500
lea rdx, [rsp + 0x160]
lea rcx, [rsp + 0x80]
call fcn.140031cf0
nop
mov rdx, rsi
lea rcx, [rsp + 0xa0]
call fcn.140031cf0
mov dword [rsp + 0xc0], r15d
mov rdx, qword [rsp + 0x150]
lea r8, [rsp + 0x80]
cmp qword [rsp + 0x158], rdx
je 0x1400337b8
call fcn.140034f70
add qword [rsp + 0x150], 0x10
jmp 0x1400337c6
lea rcx, [rsp + 0x148]
call fcn.140035100
nop
lea rcx, [rsp + 0xa0]
call fcn.14002d500
lea rcx, [rsp + 0x80]
call fcn.14002d500
nop
lea rcx, [rsp + 0x160]
call fcn.14002d500
nop
lea rcx, [rsp + 0x120]
call fcn.14002d500
add rsi, 0x20
jmp 0x140033412
test r12b, r12b
je 0x140033a27
call fcn.140032780
mov qword [rsp + 0xf0], rax
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x160], xmm0
mov qword [rsp + 0x170], rbx
lea rax, [rsp + 0xf0]
mov qword [rsp + 0x120], rax
lea rax, [rsp + 0x160]
mov qword [rsp + 0x128], rax
lea rax, [rsp + 0x190]
mov qword [rsp + 0x130], rax
lea rax, [rsp + 0x148]
mov qword [rsp + 0x138], rax
mov ecx, 0x20
call fcn.14007a00c
mov rdi, rax
movups xmm0, xmmword [rsp + 0x120]
movups xmmword [rax], xmm0
movups xmm1, xmmword [rsp + 0x130]
movups xmmword [rax + 0x10], xmm1
mov qword [rsp + 0x180], rax
xor eax, eax
mov qword [rsp + 0x120], rax
mov qword [rsp + 0x128], rax
mov qword [rsp + 0x130], rax
mov qword [rsp + 0x138], rax
mov qword [rsp + 0x140], rax
lea rcx, [rsp + 0x120]
call fcn.140022a10
lea rax, vtable.std::_LaunchPad_class_std::unique_ptr_class_std::tuple_class__lambda_696892a538d15910b9cdde76a3fd0594____struct_std::default_delete_class_std::tuple_class__lambda_696892a538d15910b9cdde76a3fd0594_____.0
mov qword [rsp + 0x120], rax
mov qword [rsp + 0x180], rbx
mov qword [rsp + 0x140], rdi
lea r8, [rsp + 0x120]
lea rdx, [0x140022ac0]
lea rcx, [rsp + 0x100]
call fcn.14007c040
mov ecx, 1
cmp eax, 4
cmovne ecx, eax
test ecx, ecx
je 0x140033921
call fcn.14007b648
cmp byte [rsp + 0x138], 0
jne 0x14003394d
mov rdx, qword [rsp + 0x130]
mov rcx, qword [rsp + 0x128]
call fcn.14007b544
test eax, eax
je 0x140033921
mov ecx, eax
call fcn.14007b648
jmp 0x140033921
mov rcx, qword [rsp + 0x140]
test rcx, rcx
je 0x140033965
mov edx, 0x20
call fcn.14007a2fc
nop
mov rsi, qword [rsp + 0x128]
mov rdi, qword [rsp + 0x130]
mov rcx, rdi
call fcn.14007bce4
test eax, eax
je 0x140033988
mov ecx, eax
call fcn.14007b648
mov rcx, rdi
call fcn.14007bbfc
mov rcx, rsi
call fcn.14007b4a8
nop
test rbx, rbx
je 0x1400339ac
mov edx, 0x20
mov rcx, rbx
call fcn.14007a2fc
nop
mov eax, dword [rsp + 0x108]
test eax, eax
jne 0x1400339d2
lea ecx, [rax + 1]
call fcn.14007b684
mov eax, dword [rsp + 0x108]
test eax, eax
jne 0x1400339d2
lea ecx, [rax + 1]
call fcn.14007b684
call sub.KERNEL32.dll_GetCurrentThreadId
cmp dword [rsp + 0x108], eax
jne 0x1400339ea
mov ecx, 5
call fcn.14007b684
movaps xmm0, xmmword [rsp + 0x100]
movdqa xmmword [rsp + 0x180], xmm0
xor edx, edx
lea rcx, [rsp + 0x180]
call fcn.14007bfd8
test eax, eax
je 0x140033a19
mov ecx, 2
call fcn.14007b684
nop
lea rcx, [rsp + 0x160]
call fcn.140034c70
nop
jmp 0x140033a2b
mov rsi, qword [rsp + 0x150]
mov rdi, qword [rsp + 0x148]
cmp rdi, rsi
je 0x140033aaf
add rdi, 8
mov eax, dword [rdi]
test eax, eax
jne 0x140033a60
lea ecx, [rax + 1]
call fcn.14007b684
mov eax, dword [rdi]
test eax, eax
jne 0x140033a60
lea ecx, [rax + 1]
call fcn.14007b684
call sub.KERNEL32.dll_GetCurrentThreadId
cmp dword [rdi], eax
jne 0x140033a73
mov ecx, 5
call fcn.14007b684
movups xmm0, xmmword [rdi - 8]
movaps xmmword [rsp + 0x100], xmm0
xor edx, edx
lea rcx, [rsp + 0x100]
call fcn.14007bfd8
test eax, eax
je 0x140033a9c
mov ecx, 2
call fcn.14007b684
mov qword [rdi - 8], rbx
mov dword [rdi], ebx
add rdi, 0x10
lea rax, [rdi - 8]
cmp rax, rsi
jne 0x140033a44
lea rcx, [rsp + 0x190]
call fcn.140034c70
nop
mov rcx, qword [rsp + 0x148]
test rcx, rcx
je 0x140033b40
mov rax, rcx
mov rdx, qword [rsp + 0x150]
cmp rcx, rdx
je 0x140033af3
nop word [rax + rax]
cmp dword [rax + 8], 0
jne 0x140033bb7
add rax, 0x10
cmp rax, rdx
jne 0x140033ae0
mov rdx, qword [rsp + 0x158]
sub rdx, rcx
and rdx, 0xfffffffffffffff0
mov rax, rcx
cmp rdx, 0x1000
jb 0x140033b27
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140033bb1
call fcn.14007a2fc
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x148], xmm0
mov qword [rsp + 0x158], rbx
lea rcx, [rsp + 0x1a8]
call fcn.140034c70
mov rcx, qword [rsp + 0x3d0]
xor rcx, rsp
call fcn.140079ca0
lea r11, [rsp + 0x400]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov r12, qword [r11 + 0x38]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
mov rsp, r11
pop r15
pop r14
pop r13
ret
lea rcx, [rsp + 0xd0]
call fcn.140032630
lea rdx, [0x14012c1b8]
lea rcx, [rsp + 0xd0]
call fcn.14009de88
nop
call fcn.14002ee60
nop
call fcn.1400a74a4
int3
call fcn.1400a7250
int3