Function at 0x140001c70
Capabilities:
Get disk information

Disassembly:
mov r11, rsp
mov qword [r11 + 8], rbx
mov qword [r11 + 0x10], rbp
mov qword [r11 + 0x18], rsi
push rdi
sub rsp, 0x90
mov rax, qword [0x14006a040]
xor rax, rsp
mov qword [rsp + 0x88], rax
xor edi, edi
mov dword [rsp + 0x60], edi
mov dword [rsp + 0x38], edi
mov qword [r11 - 0x68], rdi
mov qword [r11 - 0x70], rdi
mov qword [r11 - 0x78], rdi
lea r9, [r11 - 0x38]
xor r8d, r8d
xor edx, edx
lea rcx, [0x14005386c]
call qword [sym.imp.KERNEL32.dll_GetVolumeInformationA]
test eax, eax
je 0x140001cd9
mov edx, dword [rsp + 0x60]
lea rcx, [rsp + 0x68]
call fcn.140003ae0
jmp 0x140001d17
lea rdx, str.____________________HWID.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.140003c80
lea rdx, [0x140003e60]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
xorps xmm0, xmm0
movups xmmword [rsp + 0x68], xmm0
movdqa xmm1, xmmword [0x140061480]
movdqu xmmword [rsp + 0x78], xmm1
mov byte [rsp + 0x68], dil
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x50], xmm1
lea rbp, [0x1401078d1]
mov rbx, 0xffffffffffffffff
inc rbx
cmp byte [rbx + rbp], 0
jne 0x140001d36
movabs rsi, 0x7fffffffffffffff
cmp rbx, rsi
ja 0x140001ef4
cmp rbx, 0xf
ja 0x140001d80
mov qword [rsp + 0x50], rbx
mov qword [rsp + 0x58], 0xf
mov r8, rbx
mov rdx, rbp
lea rcx, [rsp + 0x40]
call sub.VCRUNTIME140.dll_memcpy
mov byte [rsp + rbx + 0x40], 0
jmp 0x140001e12
mov rax, rbx
or rax, 0xf
cmp rax, rsi
jbe 0x140001db9
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.1400512c4
test rax, rax
je 0x140001e5b
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x140001df1
mov rsi, rax
mov ecx, 0x16
cmp rax, rcx
cmovb rsi, rcx
lea rcx, [rsi + 1]
test rcx, rcx
je 0x140001df1
cmp rcx, 0x1000
jb 0x140001de9
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140001efa
jmp 0x140001d9a
call fcn.1400512c4
mov rdi, rax
mov qword [rsp + 0x40], rdi
mov qword [rsp + 0x50], rbx
mov qword [rsp + 0x58], rsi
mov r8, rbx
mov rdx, rbp
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcpy
mov byte [rdi + rbx], 0
lea rdx, [rsp + 0x68]
lea rcx, [rsp + 0x40]
call fcn.140001880
mov byte [0x14010816a], al
mov rdx, qword [rsp + 0x58]
cmp rdx, 0xf
jbe 0x140001e6e
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140001e62
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140001e62
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140051548
movzx eax, byte [0x14010816a]
test al, al
je 0x140001e7e
mov dword [0x14006a100], 1
jmp 0x140001e88
mov dword [0x140108078], 1
mov rdx, qword [rsp + 0x80]
cmp rdx, 0xf
jbe 0x140001ecb
inc rdx
mov rcx, qword [rsp + 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140001ec6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140001ec6
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140051548
mov rcx, qword [rsp + 0x88]
xor rcx, rsp
call fcn.1400511c0
lea r11, [rsp + 0x90]
mov rbx, qword [r11 + 0x10]
mov rbp, qword [r11 + 0x18]
mov rsi, qword [r11 + 0x20]
mov rsp, r11
pop rdi
ret
call fcn.1400011b0
nop
call fcn.140001110
int3