Function at 0x1400fa180
Capabilities:
Get disk information

Disassembly:
mov word [rsp + 8], cx
push rsi
push rdi
sub rsp, 0x168
lea rax, [rsp + 0xe0]
lea rcx, str.Saturnine_Liquidations
mov rdi, rax
mov rsi, rcx
mov ecx, 0x2e
rep movsb byte [rdi], byte [rsi]
movabs rax, 0x7e6df05d13aa98
mov qword [rsp + 0x38], rax
movabs rax, 0x7cc7fb0279307c
mov qword [rsp + 0x48], rax
movabs rax, 0x7240fb849ac787
cmp qword [rsp + 0x48], rax
jbe 0x1400fa624
mov eax, dword [rsp + 0x30]
mov dword [rsp + 0x60], eax
cmp dword [rsp + 0x60], 0x479e
je 0x1400fa239
cmp dword [rsp + 0x60], 0xc761
je 0x1400fa1fb
jmp 0x1400fa265
movabs rax, 0x764163f45de980
cmp qword [rsp + 0x38], rax
jne 0x1400fa220
mov dword [rsp + 0x30], 0xd652
mov dl, 0xf6
mov cx, 0x61
call fcn.1400fa6b0
nop
mov edx, 0x31
mov ecx, 0x93
call qword [sym.imp.KERNEL32.dll_SetProcessShutdownParameters]
mov dword [rsp + 0x90], eax
jmp 0x1400fa265
mov dword [rsp + 0x30], 0x484a
mov rax, qword [rsp + 0x38]
mov qword [rsp + 0x20], rax
mov r9, qword [rsp + 0x38]
mov r8, qword [rsp + 0x38]
mov rdx, qword [rsp + 0x48]
mov rcx, qword [rsp + 0x48]
call fcn.1400f9690
nop
cmp dword [rsp + 0x30], 0xc6d4
jne 0x1400fa29d
mov eax, 0x5c1
mov word [rsp + 0x180], ax
mov edx, 0xfc
mov ecx, 0x92
call qword [sym.imp.KERNEL32.dll_SetProcessShutdownParameters]
mov dword [rsp + 0x40], eax
mov eax, 0x1b
mov word [rsp + 0x180], ax
movabs rax, 0x7b98de8508ac52
cmp qword [rsp + 0x48], rax
ja 0x1400fa312
mov rcx, qword [rsp + 0xa8]
call qword [sym.imp.KERNEL32.dll_FindCloseChangeNotification]
mov dword [rsp + 0x70], eax
movzx ecx, word [rsp + 0x180]
call fcn.1400fa180
movabs rax, 0x70b6ae5bd64d5b
mov rcx, qword [rsp + 0x38]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x38], rax
lea rax, [rsp + 0x70]
mov qword [rsp + 0x20], rax
mov r9d, 0xb2
lea r8, [rsp + 0x40]
mov edx, 0x1a
mov ecx, 0x4e
call qword [sym.imp.KERNEL32.dll_GetStringTypeA]
mov dword [rsp + 0x40], eax
jmp 0x1400fa384
movabs rax, 0x708ccb378fcb49
cmp qword [rsp + 0x38], rax
jge 0x1400fa384
mov rax, qword [rsp + 0x38]
mov qword [rsp + 0x78], rax
movabs rax, 0x7186a4cf4d762c
cmp qword [rsp + 0x78], rax
je 0x1400fa37c
movabs rax, 0x7202d242a64704
cmp qword [rsp + 0x78], rax
je 0x1400fa351
jmp 0x1400fa384
mov dword [rsp + 0x30], 0x8b42
mov eax, 0x480
mov word [rsp + 0x180], ax
mov edx, 1
mov ecx, 0xd8
call qword [sym.imp.KERNEL32.dll_IsValidLocale]
mov dword [rsp + 0x40], eax
jmp 0x1400fa384
mov dword [rsp + 0x30], 0x392f
movsx eax, word [rsp + 0x180]
mov dword [rsp + 0x64], eax
cmp dword [rsp + 0x64], 0x217
je 0x1400fa42e
cmp dword [rsp + 0x64], 0x4ea
je 0x1400fa3ad
jmp 0x1400fa4ea
movsx eax, word [rsp + 0x180]
mov dword [rsp + 0x68], eax
cmp dword [rsp + 0x68], 7
je 0x1400fa418
cmp dword [rsp + 0x68], 0x4d0
je 0x1400fa3cc
jmp 0x1400fa429
lea rcx, [rsp + 0x40]
call qword [sym.imp.KERNEL32.dll_SwitchToFiber]
nop
cmp dword [rsp + 0x30], 0x87c
ja 0x1400fa416
mov dword [rsp + 0x30], 0xee1c
lea r9, [rsp + 0x40]
mov r8d, 0x87
lea rdx, [rsp + 0x110]
lea rcx, str.C:ReassuredcorpuscleUndersides_shipbuilding_refocused
call qword [sym.imp.KERNEL32.dll_GetVolumePathNamesForVolumeNameW]
mov dword [rsp + 0x74], eax
mov dword [rsp + 0x30], 0xa5b6
jmp 0x1400fa429
mov ecx, dword [rsp + 0x30]
call fcn.1400f92c0
mov dword [rsp + 0x30], 0x8abb
jmp 0x1400fa4ea
mov dword [rsp + 0x28], 0xa4
lea rax, [rsp + 0xe0]
mov qword [rsp + 0x20], rax
mov r9d, 0xcb
lea r8, str.Browning_Germanium_Selfdestructive_Imprecise
mov edx, 0x33
mov ecx, 0xa8
call qword [sym.imp.KERNEL32.dll_LCMapStringW]
mov dword [rsp + 0x44], eax
mov ecx, dword [rsp + 0x30]
call fcn.1400f92c0
mov rax, qword [rsp + 0x38]
sar rax, 0xe
mov qword [rsp + 0x38], rax
movabs rax, 0x729217ce4d6a45
cmp qword [rsp + 0x48], rax
jb 0x1400fa4ea
mov rcx, qword [rsp + 0xb0]
call qword [sym.imp.KERNEL32.dll_FindVolumeClose]
mov dword [rsp + 0x40], eax
mov rax, qword [rsp + 0x48]
shl rax, 0xf8
movabs rcx, 0x771b971b502739
cmp rax, rcx
jb 0x1400fa4ea
mov eax, 0x482
mov word [rsp + 0x180], ax
lea rdx, [rsp + 0x88]
mov rcx, qword [rsp + 0x88]
call qword [sym.imp.KERNEL32.dll_GetProcessPriorityBoost]
mov dword [rsp + 0x74], eax
mov eax, 0xeb
mov word [rsp + 0x180], ax
lea rax, [rsp + 0x44]
mov qword [rsp + 0x50], rax
cmp dword [rsp + 0x30], 0x9e8a
jne 0x1400fa51e
mov rax, qword [rsp + 0x50]
mov ecx, dword [rsp + 0x44]
mov eax, dword [rax]
xor eax, ecx
mov rcx, qword [rsp + 0x50]
mov dword [rcx], eax
mov dl, 0xb4
mov cx, 0x3f
call fcn.1400fa6b0
nop
mov rax, qword [rsp + 0x48]
mov qword [rsp + 0x80], rax
movabs rax, 0x703f6463e50079
cmp qword [rsp + 0x80], rax
je 0x1400fa5c9
movabs rax, 0x7cc7fb0279307c
cmp qword [rsp + 0x80], rax
je 0x1400fa55c
jmp 0x1400fa5dc
mov rax, qword [rsp + 0x50]
mov eax, dword [rax]
mov dword [rsp + 0x5c], eax
mov rax, qword [rsp + 0x50]
mov ecx, dword [rsp + 0x44]
mov eax, dword [rax]
or eax, ecx
cmp eax, dword [rsp + 0x5c]
je 0x1400fa5ba
mov rax, qword [rsp + 0x50]
mov eax, dword [rax]
add eax, dword [rsp + 0x44]
mov dword [rsp + 0x5c], eax
lea rax, [rsp + 0x50]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x40]
mov r8d, 0xa1
lea rdx, [rsp + 0xc8]
lea rcx, str.C:despondSpeckinconsistency
call qword [sym.imp.KERNEL32.dll_CheckNameLegalDOS8Dot3W]
mov dword [rsp + 0x94], eax
lea rax, [rsp + 0x30]
mov qword [rsp + 0xa0], rax
jmp 0x1400fa5dc
mov eax, dword [rsp + 0x5c]
mov ecx, dword [rsp + 0x44]
sub ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x50]
mov dword [rcx], eax
lea rax, [rsp + 0x38]
mov qword [rsp + 0xb8], rax
mov rax, qword [rsp + 0x50]
mov eax, dword [rax]
mov dword [rsp + 0x98], eax
mov rax, qword [rsp + 0x48]
mov qword [rsp + 0xc0], rax
mov rax, qword [rsp + 0xa0]
mov eax, dword [rax]
mov dword [rsp + 0x9c], eax
mov eax, 0x7f0
mov word [rsp + 0x6c], ax
mov byte [rsp + 0x58], 0xfd
movabs rax, 0x72b09d248f43cf
mov rcx, qword [rsp + 0x48]
sub rcx, rax
mov rax, rcx
movabs rcx, 0x74b5caac5c8497
cmp rax, rcx
jne 0x1400fa674
movabs rax, 0x7e2c3a2eb0d8a3
mov rcx, qword [rsp + 0x38]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x38], rax
mov rcx, qword [rsp + 0x88]
call qword [sym.imp.KERNEL32.dll_GetPriorityClass]
mov dword [rsp + 0x30], eax
mov rax, qword [rsp + 0x38]
mov qword [rsp + 0x20], rax
mov r9, qword [rsp + 0x38]
mov r8, qword [rsp + 0x38]
mov rdx, qword [rsp + 0x48]
mov rcx, qword [rsp + 0x48]
call fcn.1400f9690
mov eax, 0xbc
add rsp, 0x168
pop rdi
pop rsi
ret