Function at 0x14000e5c0
Capabilities:
Get storage device properties

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0xb0
mov rax, qword [0x140087118]
xor rax, rsp
mov qword [rsp + 0xa0], rax
mov r15, rdx
mov rbx, rcx
mov qword [rsp + 0x60], rcx
mov qword [rsp + 0x88], rdx
xor r12d, r12d
mov qword [rsp + 0x30], r12
mov dword [rsp + 0x28], r12d
mov dword [rsp + 0x20], 3
xor r9d, r9d
xor edx, edx
lea r8d, [r12 + 3]
lea rcx, str..PhysicalDrive0
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov rbp, rax
cmp rax, 0xffffffffffffffff
jne 0x14000e649
mov qword [rbx], r12
mov qword [rbx + 0x10], r12
mov edi, reloc.WS2_32.dll_ntohs
mov qword [rbx + 0x18], rdi
mov byte [rbx], r12b
jmp 0x14000e8c7
lea rax, [0x14000e580]
mov qword [rsp + 0x78], rax
mov qword [rsp + 0x80], rbp
mov qword [rsp + 0x94], r12
mov dword [rsp + 0x90], r12d
mov qword [rsp + 0x50], r12
mov dword [rsp + 0x40], r12d
mov qword [rsp + 0x38], r12
lea rax, [rsp + 0x40]
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], 8
lea rax, [rsp + 0x50]
mov qword [rsp + 0x20], rax
mov r9d, recvfrom
lea r8, [rsp + 0x90]
mov edx, 0x2d1400
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
test eax, eax
jne 0x14000e6cf
mov qword [rbx], r12
mov qword [rbx + 0x10], r12
mov edi, reloc.WS2_32.dll_ntohs
mov qword [rbx + 0x18], rdi
mov byte [rbx], al
jmp 0x14000e8b8
mov esi, dword [rsp + 0x54]
mov ecx, esi
call fcn.1400671a0
mov r14, rax
test rax, rax
je 0x14000e6f1
mov r8d, esi
xor edx, edx
mov rcx, rax
call sub.VCRUNTIME140.dll_memset
jmp 0x14000e6f4
mov r14, r12
mov qword [rsp + 0x70], r14
mov qword [rsp + 0x38], r12
lea rax, [rsp + 0x40]
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], esi
mov qword [rsp + 0x20], r14
mov r9d, recvfrom
lea r8, [rsp + 0x90]
mov edx, 0x2d1400
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
test eax, eax
jne 0x14000e756
mov qword [rbx], r12
mov qword [rbx + 0x10], r12
mov edi, reloc.WS2_32.dll_ntohs
mov qword [rbx + 0x18], rdi
mov byte [rbx], al
test r14, r14
je 0x14000e751
mov rcx, r14
call fcn.1400668bc
nop
jmp 0x14000e8b8
mov eax, dword [r14 + 0x18]
test eax, eax
jne 0x14000e77e
mov qword [rbx], r12
mov qword [rbx + 0x10], r12
mov edi, reloc.WS2_32.dll_ntohs
mov qword [rbx + 0x18], rdi
mov byte [rbx], al
mov rcx, r14
call fcn.1400668bc
nop
jmp 0x14000e8b8
lea r13, [r14 + rax]
mov rsi, 0xffffffffffffffff
nop dword [rax]
inc rsi
cmp byte [rsi + r13], 0
jne 0x14000e790
mov rcx, qword [r15 + 0x10]
mov qword [rsp + 0x60], rcx
movabs rdx, 0x7fffffffffffffff
mov rax, rdx
sub rax, rcx
cmp rax, rsi
jb 0x14000e8fd
mov qword [rsp + 0x58], r15
cmp qword [r15 + 0x18], 0x10
jb 0x14000e7d0
mov rax, qword [r15]
mov qword [rsp + 0x58], rax
mov qword [rbx], r12
mov qword [rbx + 0x10], r12
mov qword [rbx + 0x18], r12
lea rax, [rcx + rsi]
mov qword [rsp + 0x48], rax
mov edi, reloc.WS2_32.dll_ntohs
mov r12, rbx
cmp rax, rdi
jbe 0x14000e87c
mov rdi, rax
or rdi, 0xf
cmp rdi, rdx
jbe 0x14000e833
mov rdi, rdx
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.140066880
test rax, rax
je 0x14000e85b
lea r12, [rax + 0x27]
and r12, 0xffffffffffffffe0
mov qword [r12 - 8], rax
mov rax, qword [rsp + 0x48]
jmp 0x14000e879
mov ecx, reloc.WLDAP32.dll_Ordinal_22
cmp rdi, rcx
cmovb rdi, rcx
lea rcx, [rdi + 1]
cmp rcx, 0x1000
jb 0x14000e862
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14000e903
jmp 0x14000e812
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test rcx, rcx
je 0x14000e876
call fcn.140066880
mov r12, rax
mov rax, qword [rsp + 0x48]
jmp 0x14000e879
xor r12d, r12d
mov qword [rbx], r12
mov qword [rbx + 0x10], rax
mov qword [rbx + 0x18], rdi
mov r8, rsi
mov rdx, r13
mov rcx, r12
call sub.VCRUNTIME140.dll_memcpy
lea rcx, [r12 + rsi]
mov r8, qword [rsp + 0x60]
mov rdx, qword [rsp + 0x58]
call sub.VCRUNTIME140.dll_memcpy
mov rax, qword [rsp + 0x48]
mov byte [r12 + rax], 0
mov rcx, r14
call fcn.1400668bc
nop
test rbp, rbp
je 0x14000e8c7
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
mov rcx, r15
call fcn.140001cd0
mov rax, rbx
mov rcx, qword [rsp + 0xa0]
xor rcx, rsp
call fcn.140066950
mov rbx, qword [rsp + 0x100]
add rsp, 0xb0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.140001ab0
nop
call fcn.140001a90
int3