Function at 0x14000b0d0
Capabilities:
Get disk information
Get disk size
Get storage device properties

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x388
lea rbp, [rsp + 0x80]
mov qword [rbp + 0x300], 0xfffffffffffffffe
mov rsi, rcx
mov rax, qword [rdx]
mov rax, qword [rax]
mov eax, dword [rax]
bt eax, r8d
jae 0x14000b1f0
mov ebx, r8d
add ebx, 0x41
mov word [rbp + 0x2f0], bx
mov dword [rbp + 0x2f2], 0x5c003a
mov word [rbp + 0x2f6], 0
lea rcx, [rbp + 0x2f0]
call sub.KERNEL32.dll_GetDriveTypeW
mov edi, eax
lea eax, [rdi - 4]
cmp eax, 0xfffffffe
jb 0x14000b1f0
lea r14, [rbp - 0x3a]
mov r8d, 0x20a
mov rcx, r14
xor edx, edx
call sub.VCRUNTIME140.dll_memset
pxor xmm0, xmm0
movdqa xmmword [rbp + 0x2d0], xmm0
movdqa xmmword [rbp + 0x2c0], xmm0
movdqa xmmword [rbp + 0x2b0], xmm0
movdqa xmmword [rbp + 0x2a0], xmm0
lea r12, [rbp + 0x2a0]
mov qword [rsp + 0x30], r12
movdqu xmmword [rsp + 0x20], xmm0
mov dword [rsp + 0x38], 0x20
lea rcx, [rbp + 0x2f0]
mov rdx, r14
mov r8d, 0x105
xor r9d, r9d
call sub.KERNEL32.dll_GetVolumeInformationW
test eax, eax
je 0x14000b1f0
mov r15d, 2
nop dword [rax]
cmp word [rbp + r15*2 - 0x3e], 0
je 0x14000b20f
cmp word [rbp + r15*2 - 0x3c], 0
je 0x14000b215
cmp word [rbp + r15*2 - 0x3a], 0
je 0x14000b218
add r15, 3
cmp r15, 0x107
jne 0x14000b1c0
mov r15d, 0x105
jmp 0x14000b225
mov qword [rsi + 0x20], 3
mov rax, rsi
add rsp, 0x388
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret
add r15, 0xfffffffffffffffe
jmp 0x14000b218
dec r15
cmp r15, 0x106
jae 0x14000b5a8
mov qword [rbp + 0x270], 0
mov qword [rbp + 0x278], 1
mov qword [rbp + 0x280], 0
mov rax, r15
shr rax, 1
mov r8d, r15d
and r8d, 1
add r8, rax
je 0x14000b266
lea rcx, [rbp + 0x270]
xor edx, edx
call fcn.14002ec00
lea rax, [r15*2 - 0x3a]
add rax, rbp
mov qword [rbp + 0x250], rax
mov qword [rbp + 0x258], r14
mov word [rbp + 0x260], 0
lea rcx, [rbp + 0x250]
lea rdx, [rbp + 0x270]
call fcn.14000dbf0
mov rax, qword [rbp + 0x278]
mov r14, qword [rbp + 0x280]
movzx r13d, word [rbp + 0x2a0]
test r13w, r13w
mov qword [rbp + 0x298], rax
je 0x14000b47d
cmp word [rbp + 0x2a2], 0
je 0x14000b4a0
cmp word [rbp + 0x2a4], 0
je 0x14000b4ab
cmp word [rbp + 0x2a6], 0
je 0x14000b4b6
cmp word [rbp + 0x2a8], 0
je 0x14000b4c1
cmp word [rbp + 0x2aa], 0
je 0x14000b4cc
cmp word [rbp + 0x2ac], 0
je 0x14000b4d7
cmp word [rbp + 0x2ae], 0
je 0x14000b4e2
cmp word [rbp + 0x2b0], 0
je 0x14000b4ed
cmp word [rbp + 0x2b2], 0
je 0x14000b4f8
cmp word [rbp + 0x2b4], 0
je 0x14000b503
cmp word [rbp + 0x2b6], 0
je 0x14000b50e
cmp word [rbp + 0x2b8], 0
je 0x14000b519
cmp word [rbp + 0x2ba], 0
je 0x14000b524
cmp word [rbp + 0x2bc], 0
je 0x14000b52f
cmp word [rbp + 0x2be], 0
je 0x14000b53a
cmp word [rbp + 0x2c0], 0
je 0x14000b545
cmp word [rbp + 0x2c2], 0
je 0x14000b550
cmp word [rbp + 0x2c4], 0
je 0x14000b558
cmp word [rbp + 0x2c6], 0
je 0x14000b560
cmp word [rbp + 0x2c8], 0
je 0x14000b568
cmp word [rbp + 0x2ca], 0
je 0x14000b570
cmp word [rbp + 0x2cc], 0
je 0x14000b578
cmp word [rbp + 0x2ce], 0
je 0x14000b580
cmp word [rbp + 0x2d0], 0
je 0x14000b588
cmp word [rbp + 0x2d2], 0
je 0x14000b590
cmp word [rbp + 0x2d4], 0
je 0x14000b598
cmp word [rbp + 0x2d6], 0
je 0x14000b5a0
cmp word [rbp + 0x2d8], 0
je 0x14000b5be
cmp word [rbp + 0x2da], 0
je 0x14000b5c6
cmp word [rbp + 0x2dc], 0
je 0x14000b5ce
cmp word [rbp + 0x2de], 1
mov r15d, 0x20
sbb r15, 0
jmp 0x14000b5d4
mov eax, 1
mov qword [rbp + 0x2f8], rax
xor eax, eax
mov qword [rbp + 0x288], rax
xor eax, eax
mov qword [rbp + 0x2e8], rax
jmp 0x14000b6ac
mov r15d, 1
jmp 0x14000b5d4
mov r15d, 2
jmp 0x14000b5d4
mov r15d, 3
jmp 0x14000b5d4
mov r15d, 4
jmp 0x14000b5d4
mov r15d, 5
jmp 0x14000b5d4
mov r15d, 6
jmp 0x14000b5d4
mov r15d, 7
jmp 0x14000b5d4
mov r15d, 8
jmp 0x14000b5d4
mov r15d, 9
jmp 0x14000b5d4
mov r15d, 0xa
jmp 0x14000b5d4
mov r15d, 0xb
jmp 0x14000b5d4
mov r15d, 0xc
jmp 0x14000b5d4
mov r15d, 0xd
jmp 0x14000b5d4
mov r15d, 0xe
jmp 0x14000b5d4
mov r15d, 0xf
jmp 0x14000b5d4
mov r15d, 0x10
jmp 0x14000b5d4
mov r15d, 0x11
jmp 0x14000b5d4
mov r15d, 0x12
jmp 0x14000b5d4
mov r15d, 0x13
jmp 0x14000b5d4
mov r15d, 0x14
jmp 0x14000b5d4
mov r15d, 0x15
jmp 0x14000b5d4
mov r15d, 0x16
jmp 0x14000b5d4
mov r15d, 0x17
jmp 0x14000b5d4
mov r15d, 0x18
jmp 0x14000b5d4
mov r15d, 0x19
jmp 0x14000b5d4
mov r15d, 0x1a
jmp 0x14000b5d4
mov r15d, 0x1b
jmp 0x14000b5d4
lea r8, str.C:UsersAdministrator.cargo_registry_srcindex.crates.io_6f17d22bba15001f_sysinfo_0.29.4_srcwindowsdisk.rs
mov edx, 0x105
mov rcx, r15
call fcn.1400320b0
ud2
mov r15d, 0x1c
jmp 0x14000b5d4
mov r15d, 0x1d
jmp 0x14000b5d4
mov r15d, 0x1e
mov edx, 1
mov rcx, r15
call fcn.140003720
mov qword [rbp + 0x2f8], rax
test rax, rax
je 0x14000ba4b
lea rcx, [r15 - 1]
movabs rax, 0x7fffffffffffffff
and rax, rcx
cmp rax, 0xf
mov qword [rbp + 0x288], r15
jae 0x14000b614
xor r8d, r8d
jmp 0x14000b671
inc rax
mov r8, rax
and r8, 0xfffffffffffffff0
lea r12, [r8*2 + 0x2a0]
add r12, rbp
xor ecx, ecx
movdqa xmm0, xmmword [0x140033dd0]
mov rdx, qword [rbp + 0x2f8]
nop word [rax + rax]
movdqu xmm1, xmmword [rbp + rcx*2 + 0x2a0]
movdqu xmm2, xmmword [rbp + rcx*2 + 0x2b0]
pand xmm1, xmm0
pand xmm2, xmm0
packuswb xmm1, xmm2
movdqu xmmword [rdx + rcx], xmm1
add rcx, 0x10
cmp r8, rcx
jne 0x14000b640
cmp rax, r8
je 0x14000b6a5
lea rax, [r15*2 + 0x2a0]
add rax, rbp
mov rdx, qword [rbp + 0x2f8]
nop word cs:[rax + rax]
movzx ecx, byte [r12]
add r12, 2
mov byte [rdx + r8], cl
inc r8
cmp r12, rax
jne 0x14000b690
mov qword [rbp + 0x2e8], r8
movabs rax, 0x5c002e005c005c
mov qword [rbp + 0x200], rax
mov word [rbp + 0x208], bx
mov dword [rbp + 0x20a], 0x3a
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 3
lea rcx, [rbp + 0x200]
xor edx, edx
mov r8d, 3
xor r9d, r9d
call sub.KERNEL32.dll_CreateFileW
cmp rax, 0xffffffffffffffff
je 0x14000b888
mov qword [rbp + 0x290], rax
mov qword [rbp + 0x238], 0
mov qword [rbp + 0x250], 0
lea rbx, [rbp + 0x2f0]
lea r8, [rbp + 0x238]
lea r9, [rbp + 0x250]
mov rcx, rbx
xor edx, edx
call sub.KERNEL32.dll_GetDiskFreeSpaceExW
test eax, eax
je 0x14000b8a1
mov r12, qword [rbp + 0x238]
test r12, r12
mov rcx, qword [rbp + 0x290]
je 0x14000b8a8
mov rax, qword [rbp + 0x250]
mov qword [rbp + 0x1f8], rax
mov qword [rbp + 0x1e8], 7
mov byte [rbp + 0x1f0], 0
mov dword [rbp + 0x218], 0
mov qword [rbp + 0x210], 0
mov dword [rbp + 0x2e4], 0
lea rax, [rbp + 0x2e4]
mov qword [rsp + 0x30], rax
lea rax, [rbp + 0x210]
mov qword [rsp + 0x20], rax
mov qword [rsp + 0x38], 0
mov dword [rsp + 0x28], 0xc
lea r8, [rbp + 0x1e8]
mov edx, 0x2d1400
mov r9d, 0xc
call sub.KERNEL32.dll_DeviceIoControl
xor r15d, r15d
cmp byte [rbp + 0x218], 0
sete r15b
cmp dword [rbp + 0x2e4], 0xc
mov ecx, 2
cmovne r15, rcx
test eax, eax
cmove r15, rcx
lea rcx, [rbp + 0x250]
mov rdx, qword [rbp + 0x298]
mov r8, r14
call fcn.14001e470
mov rax, qword [rbp + 0x250]
mov qword [rbp + 0x220], rax
mov rax, qword [rbp + 0x258]
mov qword [rbp + 0x298], rax
movdqu xmm0, xmmword [rbp + 0x260]
movdqa xmmword [rbp + 0x1d0], xmm0
mov r8, qword [rbp + 0x2e8]
test r8, r8
je 0x14000b8ba
setns al
js 0x14000ba6b
movzx r14d, al
mov rcx, r8
mov rdx, r14
call fcn.140003720
mov r8, qword [rbp + 0x2e8]
test rax, rax
jne 0x14000b8bf
mov rcx, r8
mov rdx, r14
call fcn.140031ba0
jmp 0x14000ba70
mov rcx, 0xffffffffffffffff
call sub.KERNEL32.dll_CloseHandle
mov qword [rsi + 0x20], 3
jmp 0x14000ba05
mov rcx, qword [rbp + 0x290]
mov qword [rsi + 0x20], 3
call sub.KERNEL32.dll_CloseHandle
jmp 0x14000ba05
mov eax, 1
mov qword [rbp + 0x228], rax
mov rcx, rax
mov rdx, qword [rbp + 0x2f8]
call sub.VCRUNTIME140.dll_memcpy
mov r14, qword [rbp + 0x2f0]
mov ecx, 8
mov edx, 2
call fcn.140003720
test rax, rax
je 0x14000ba5a
mov qword [rbp + 0x230], rax
mov qword [rax], r14
mov qword [rbp + 0x238], 0
mov qword [rbp + 0x240], 1
mov qword [rbp + 0x248], 0
lea rcx, [rbp + 0x238]
mov r8d, 2
xor edx, edx
call fcn.14002ec00
lea rax, [rbp + 0x2f6]
mov qword [rbp + 0x250], rax
mov qword [rbp + 0x258], rbx
mov word [rbp + 0x260], 0
lea rcx, [rbp + 0x250]
lea rdx, [rbp + 0x238]
call fcn.14000dbf0
cmp edi, 2
mov rax, qword [rbp + 0x220]
mov qword [rsi], rax
mov rax, qword [rbp + 0x298]
mov qword [rsi + 8], rax
movaps xmm0, xmmword [rbp + 0x1d0]
movups xmmword [rsi + 0x10], xmm0
mov rax, qword [rbp + 0x2e8]
mov qword [rsi + 0x40], rax
mov rcx, qword [rbp + 0x228]
mov qword [rsi + 0x48], rcx
mov qword [rsi + 0x50], rax
mov qword [rsi + 0x58], 4
mov rax, qword [rbp + 0x230]
mov qword [rsi + 0x60], rax
mov qword [rsi + 0x68], 4
movdqu xmm0, xmmword [rbp + 0x238]
movdqu xmmword [rsi + 0x70], xmm0
mov rax, qword [rbp + 0x248]
mov qword [rsi + 0x80], rax
mov qword [rsi + 0x20], r15
mov qword [rsi + 0x28], 0xffffffffffffffff
mov qword [rsi + 0x30], r12
mov rax, qword [rbp + 0x1f8]
mov qword [rsi + 0x38], rax
sete byte [rsi + 0x88]
mov rcx, qword [rbp + 0x290]
call sub.KERNEL32.dll_CloseHandle
test r13w, r13w
je 0x14000ba24
mov r8d, 1
mov rcx, qword [rbp + 0x2f8]
mov rdx, qword [rbp + 0x288]
call fcn.140003730
mov rdx, qword [rbp + 0x270]
test rdx, rdx
je 0x14000b1f8
mov rcx, qword [rbp + 0x278]
mov r8d, 1
call fcn.140003730
jmp 0x14000b1f8
mov edx, 1
mov rcx, r15
call fcn.140031ba0
jmp 0x14000ba70
mov ecx, 8
mov edx, 2
call fcn.140031ba0
jmp 0x14000ba70
call fcn.140028340
ud2