Function at 0x1400104fb
Capabilities:
Get disk information
Get disk size
Get storage device properties

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x4a8
movaps xmmword [rsp + 0x490], xmm6
mov rsi, rdx
mov qword [rsp + 0x80], rcx
mov r12, qword [rsp + 0x528]
mov ebp, dword [rsp + 0x520]
mov edi, dword [rsp + 0x518]
mov rax, qword [rsp + 0x510]
mov qword [rsp + 0x190], rdx
lea rbx, [rsp + 0x270]
mov qword [rbx], r9
mov qword [rbx + 8], rax
mov rcx, rbx
call fcn.14000cd4e
test al, al
je 0x140010692
shr rsi, 1
mov qword [rsp + 0x128], rsi
xor eax, eax
mov ecx, ebp
sub ecx, edi
cmovb ecx, eax
cmp rsi, rcx
ja 0x140010f4e
add esi, edi
lea rax, [rsp + 0x190]
mov qword [rsp + 0xe0], rax
lea rax, [rsp + 0x128]
mov qword [rsp + 0xe8], rax
mov qword [rsp + 0xf0], rbx
mov qword [rsp + 0xf8], r12
mov dword [rsp + 0x100], esi
mov dword [rsp + 0x104], ebp
mov qword [rsp + 0x108], rax
mov qword [rsp + 0x110], rbx
mov qword [rsp + 0x118], r12
mov dword [rsp + 0x120], edi
mov dword [rsp + 0x124], esi
mov eax, dword [0x140032b84]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
mov r8, qword [rax + 0x48]
test r8, r8
je 0x140010d41
lea rcx, [rsp + 0xa0]
lea rdx, [rsp + 0xe0]
xor r9d, r9d
call fcn.14001019f
mov rdx, qword [rsp + 0xa0]
mov rcx, qword [rsp + 0xa8]
mov rax, qword [rsp + 0xb0]
movups xmm0, xmmword [rsp + 0xb8]
movaps xmmword [rsp + 0x50], xmm0
mov r8, qword [rsp + 0xc8]
mov qword [rsp + 0x60], r8
test rcx, rcx
je 0x140010e13
mov r8, qword [rsp + 0x50]
and qword [rsp + 0x50], 0
test r8, r8
je 0x140010e38
mov qword [rcx + 0x18], r8
mov qword [r8 + 0x20], rcx
mov rcx, qword [rsp + 0x58]
xorps xmm0, xmm0
add rax, qword [rsp + 0x60]
movups xmmword [rsp + 0x58], xmm0
jmp 0x140010e38
xorps xmm6, xmm6
movaps xmmword [rsp + 0x140], xmm6
mov rsi, qword [r12]
mov eax, 8
mov qword [rsp + 0x88], rax
lea rbx, [rsp + 0x40]
mov qword [rsp + 0xd0], rsi
cmp edi, ebp
jae 0x140010c88
mov eax, dword [rsi]
bt eax, edi
jae 0x140010c61
lea r14d, [rdi + 0x41]
mov word [rsp + 0x40], r14w
mov dword [rsp + 0x42], 0x5c003a
and word [rsp + 0x46], 0
mov rcx, rbx
call sub.kernel32.dll_GetDriveTypeW
mov r13d, eax
and eax, 0xfffffffe
cmp eax, 2
jne 0x140010784
mov r8d, 0x20a
lea r15, [rsp + 0x280]
mov rcx, r15
xor edx, edx
call fcn.1400148b0
movaps xmmword [rsp + 0x110], xmm6
movaps xmmword [rsp + 0x100], xmm6
movaps xmmword [rsp + 0xf0], xmm6
movaps xmmword [rsp + 0xe0], xmm6
lea rax, [rsp + 0xe0]
mov qword [rsp + 0x30], rax
movups xmmword [rsp + 0x20], xmm6
mov dword [rsp + 0x38], 0x20
mov rcx, rbx
mov rdx, r15
mov r8d, 0x105
xor r9d, r9d
call sub.kernel32.dll_GetVolumeInformationW
test eax, eax
je 0x140010784
xor r8d, r8d
cmp r8, 0x105
je 0x140010795
cmp word [rsp + r8*2 + 0x280], 0
je 0x14001079d
inc r8
jmp 0x14001076a
mov qword [rsp + 0x1d0], 3
jmp 0x140010c61
mov r8d, 0x105
jmp 0x1400107aa
cmp r8, 0x106
jae 0x140010f4e
lea rcx, [rsp + 0x128]
lea rdx, [rsp + 0x280]
call fcn.14000ceaf
mov rsi, qword [rsp + 0x128]
mov r15, qword [rsp + 0x138]
xor ebx, ebx
cmp rbx, 0x20
je 0x1400107e7
cmp word [rsp + rbx*2 + 0xe0], 0
je 0x1400107ee
inc rbx
jmp 0x1400107d1
mov ebx, 0x20
jmp 0x1400107f8
cmp rbx, 0x21
jae 0x140010f4e
mov rcx, rbx
xor edx, edx
call fcn.140004f73
mov qword [rsp + 0xa0], rax
mov qword [rsp + 0xa8], rdx
and qword [rsp + 0xb0], 0
lea rcx, [rsp + 0xa0]
mov rdx, rbx
call fcn.140004cc7
mov rbp, qword [rsp + 0xa0]
mov r12, qword [rsp + 0xb0]
test rbx, rbx
je 0x140010859
xor eax, eax
mov cl, byte [rsp + rax*2 + 0xe0]
mov byte [rbp + r12], cl
inc r12
inc rax
cmp rbx, rax
jne 0x140010842
mov rax, qword [rsp + 0xa8]
mov qword [rsp + 0xd8], rax
movabs rax, 0x5c002e005c005c
mov qword [rsp + 0xa0], rax
mov word [rsp + 0xa8], r14w
mov dword [rsp + 0xaa], 0x3a
and qword [rsp + 0x30], 0
and dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 3
lea rcx, [rsp + 0xa0]
xor edx, edx
mov r8d, 3
xor r9d, r9d
call qword [sym.imp.kernel32.dll_CreateFileW]
cmp rax, 0xffffffffffffffff
je 0x140010c0c
mov r14, rax
and qword [rsp + 0x90], 0
and qword [rsp + 0x68], 0
lea rbx, [rsp + 0x40]
mov rcx, rbx
xor edx, edx
lea r8, [rsp + 0x90]
lea r9, [rsp + 0x68]
call sub.kernel32.dll_GetDiskFreeSpaceExW
test eax, eax
je 0x140010bf5
mov rax, qword [rsp + 0x90]
test rax, rax
je 0x140010bf5
mov rcx, qword [rsp + 0x68]
mov qword [rsp + 0x188], rcx
and dword [rsp + 0x70], 0
mov qword [rsp + 0x90], 7
and qword [rsp + 0x68], 0
xor ecx, ecx
mov byte [rsp + 0x98], cl
and dword [rsp + 0x4c], 0
mov qword [rsp + 0x180], rax
lea rax, [rsp + 0x4c]
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x68]
mov qword [rsp + 0x20], rax
and qword [rsp + 0x38], 0
mov dword [rsp + 0x28], 0xc
mov rcx, r14
mov edx, 0x2d1400
lea r8, [rsp + 0x90]
mov r9d, 0xc
call qword [sym.imp.kernel32.dll_DeviceIoControl]
xor ebx, ebx
xor ecx, ecx
cmp byte [rsp + 0x70], cl
sete bl
cmp dword [rsp + 0x4c], 0xc
mov ecx, 2
cmovne rbx, rcx
test eax, eax
cmove rbx, rcx
mov rcx, r15
call fcn.140004fd0
mov qword [rsp + 0x168], rax
mov qword [rsp + 0x178], rdx
mov rcx, rax
mov rdx, rsi
mov r8, r15
call fcn.140014210
mov rcx, r12
xor edx, edx
call fcn.140004f73
mov qword [rsp + 0x160], rax
mov qword [rsp + 0x170], rdx
mov rcx, rax
mov rdx, rbp
mov r8, r12
call fcn.140014210
mov ecx, 4
xor edx, edx
call fcn.14000a0ee
mov qword [rsp + 0x150], r15
mov r15, rax
mov qword [rsp + 0x158], rdx
mov rax, qword [rsp + 0x40]
mov qword [r15], rax
mov r8d, 3
lea rsi, [rsp + 0x230]
mov rcx, rsi
lea rdx, [rsp + 0x40]
call fcn.14000ceaf
mov rax, qword [rsp + 0x168]
mov qword [rsp + 0x1e0], rax
mov rax, qword [rsp + 0x178]
mov qword [rsp + 0x1e8], rax
mov rax, qword [rsp + 0x150]
mov qword [rsp + 0x1f0], rax
xor eax, eax
mov byte [rsp + 0x1f8], al
mov eax, dword [rsp + 0x79]
mov ecx, dword [rsp + 0x7c]
mov dword [rsi - 0x34], ecx
mov dword [rsi - 0x37], eax
or qword [rsp + 0x1d8], 0xffffffffffffffff
cmp r13d, 2
mov qword [rsp + 0x1d0], rbx
mov rax, qword [rsp + 0x160]
mov qword [rsp + 0x200], rax
mov rax, qword [rsp + 0x170]
mov qword [rsp + 0x208], rax
mov qword [rsp + 0x210], r12
mov qword [rsp + 0x218], r15
mov rax, qword [rsp + 0x158]
mov qword [rsp + 0x220], rax
mov qword [rsp + 0x228], 4
mov rax, qword [rsp + 0x180]
mov qword [rsp + 0x248], rax
mov rax, qword [rsp + 0x188]
mov qword [rsp + 0x250], rax
sete byte [rsp + 0x258]
mov eax, dword [rsp + 0x79]
mov ecx, dword [rsp + 0x7c]
mov dword [rsi + 0x2c], ecx
mov dword [rsi + 0x29], eax
mov rcx, r14
call qword [sym.imp.kernel32.dll_CloseHandle]
mov rcx, rbp
mov rdx, qword [rsp + 0xd8]
call fcn.140004eb7
mov rcx, qword [rsp + 0x128]
mov rdx, qword [rsp + 0x130]
call fcn.140004eb7
mov rdx, qword [rsp + 0x88]
mov qword [rsp + 0x280], rdx
movaps xmm0, xmmword [rsp + 0x140]
lea rax, [rsp + 0x288]
movups xmmword [rax], xmm0
mov rsi, qword [rsp + 0x290]
cmp rsi, qword [rsp + 0x288]
jne 0x140010b94
lea rcx, [rsp + 0x280]
mov rdx, rsi
call fcn.14000c827
mov rdx, qword [rsp + 0x280]
mov rsi, qword [rsp + 0x290]
mov r12, qword [rsp + 0x528]
mov ebp, dword [rsp + 0x520]
imul rcx, rsi, 0x90
mov qword [rsp + 0x88], rdx
add rcx, rdx
mov r8d, 0x90
lea rdx, [rsp + 0x1d0]
call fcn.140014210
inc rsi
mov qword [rsp + 0x290], rsi
lea rax, [rsp + 0x288]
movups xmm0, xmmword [rax]
movaps xmmword [rsp + 0xe0], xmm0
mov rsi, qword [rsp + 0xd0]
lea rbx, [rsp + 0x40]
jmp 0x140010c71
mov qword [rsp + 0x1d0], 3
mov rcx, r14
call qword [sym.imp.kernel32.dll_CloseHandle]
jmp 0x140010c2a
mov rcx, 0xffffffffffffffff
call qword [sym.imp.kernel32.dll_CloseHandle]
mov qword [rsp + 0x1d0], 3
lea rbx, [rsp + 0x40]
mov rcx, rbp
mov rdx, qword [rsp + 0xd8]
call fcn.140004eb7
mov rdx, qword [rsp + 0x130]
mov rcx, rsi
call fcn.140004eb7
mov r12, qword [rsp + 0x528]
mov ebp, dword [rsp + 0x520]
mov rsi, qword [rsp + 0xd0]
movaps xmm0, xmmword [rsp + 0x140]
movaps xmmword [rsp + 0xe0], xmm0
inc edi
movaps xmm0, xmmword [rsp + 0xe0]
movaps xmmword [rsp + 0x140], xmm0
jmp 0x1400106bb
mov rax, qword [rsp + 0x88]
mov qword [rsp + 0x198], rax
movaps xmm0, xmmword [rsp + 0x140]
movups xmmword [rsp + 0x1a0], xmm0
mov qword [rsp + 0x1b0], r12
cmp qword [rsp + 0x1a8], 0
je 0x140010e57
mov rax, qword [rsp + 0x1a8]
mov qword [rsp + 0x290], rax
mov rax, qword [rsp + 0x198]
mov qword [rsp + 0x280], rax
mov rax, qword [rsp + 0x1a0]
mov qword [rsp + 0x288], rax
mov ecx, 8
mov edx, 0x28
call fcn.140004e94
test rax, rax
je 0x140010f52
mov rcx, qword [rsp + 0x290]
mov qword [rax + 0x10], rcx
movaps xmm0, xmmword [rsp + 0x280]
movups xmmword [rax], xmm0
xorps xmm0, xmm0
movups xmmword [rax + 0x18], xmm0
mov rcx, qword [rsp + 0x80]
mov qword [rcx], rax
mov qword [rcx + 8], rax
mov qword [rcx + 0x10], 1
jmp 0x140010e77
call fcn.1400086c5
mov rax, qword [rax]
lea rbx, [rax + 0x80]
mov ecx, dword [0x140032b84]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
mov r14, qword [rcx + 0x48]
test r14, r14
je 0x140010e93
cmp qword [r14 + 0x110], rax
je 0x140010f36
lea rax, [r14 + 0x110]
mov rdx, qword [r14 + 0x100]
lea r15, [rsp + 0x1d0]
lea rsi, [rsp + 0xe0]
mov ecx, 9
mov rdi, r15
rep movsq qword [rdi], qword [rsi]
lea rsi, [rsp + 0x250]
mov qword [rsi], rax
and qword [rsi + 8], 0
mov qword [rsi + 0x10], rdx
mov byte [rsi + 0x18], 1
and qword [rsi - 0x38], 0
lea rdx, [0x140010f63]
mov rcx, rbx
mov r8, r15
call fcn.140009cc8
mov rcx, r14
mov rdx, rsi
call fcn.14000cd3a
lea rcx, [rsp + 0x280]
mov r8d, 0xa0
mov rdx, r15
call fcn.140014210
lea rdx, [rsp + 0x2c8]
lea rcx, [rsp + 0xa0]
call fcn.14000cc09
jmp 0x140010624
mov r8, qword [rsp + 0x50]
mov rcx, qword [rsp + 0x58]
mov r9, qword [rsp + 0x60]
mov qword [rsp + 0x50], rdx
and qword [rsp + 0x58], 0
mov qword [rsp + 0x60], rax
mov rax, r9
mov rdx, r8
mov r8, qword [rsp + 0x80]
mov qword [r8], rdx
mov qword [r8 + 8], rcx
mov qword [r8 + 0x10], rax
lea rcx, [rsp + 0x50]
call fcn.14001049b
jmp 0x140010e77
xorps xmm0, xmm0
mov rax, qword [rsp + 0x80]
movups xmmword [rax], xmm0
and qword [rax + 0x10], 0
lea rcx, [rsp + 0x198]
call fcn.14000cb6f
movaps xmm6, xmmword [rsp + 0x490]
add rsp, 0x4a8
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
xor ecx, ecx
call fcn.14000ce6a
lea rdx, [rsp + 0x1d8]
lea rsi, [rsp + 0xe0]
mov ecx, 9
mov rdi, rdx
rep movsq qword [rdi], qword [rsi]
mov qword [rdx - 8], rax
and qword [rdx + 0x48], 0
lea rdx, [0x140011097]
lea rsi, [rsp + 0x1d0]
mov rcx, rbx
mov r8, rsi
call fcn.140009cc8
mov rcx, qword [rsi]
call fcn.140008654
lea rcx, [rsp + 0x280]
mov r8d, 0x88
mov rdx, rsi
call fcn.140014210
lea rdx, [rsp + 0x2d0]
lea rsi, [rsp + 0x1a0]
mov rcx, rsi
call fcn.14000cc09
movups xmm0, xmmword [rsi]
movups xmm1, xmmword [rsi + 0x10]
movups xmm2, xmmword [rsi + 0x20]
movaps xmmword [rsp + 0xa0], xmm0
movaps xmmword [rsp + 0xb0], xmm1
movaps xmmword [rsp + 0xc0], xmm2
jmp 0x140010624
lea rcx, [rsp + 0xa0]
lea rdx, [rsp + 0xe0]
mov r8, r14
jmp 0x14001061c
ud2
mov ecx, 8
mov edx, 0x28
call fcn.140021e86
ud2