Function at 0x100127e64
Capabilities:
Get storage device properties

Disassembly:
mov qword [rsp + 0x10], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0xa0
mov rax, qword [0x100165138]
xor rax, rsp
mov qword [rsp + 0x90], rax
and dword [rsp + 0x60], 0
mov rbx, r8
mov dword [rsp + 0x40], edx
xor edx, edx
mov rsi, rcx
mov qword [rsp + 0x50], rcx
lea r8d, [rdx + 0x1c]
lea rcx, [rsp + 0x64]
mov qword [rsp + 0x58], rbx
call sub.msvcrt.dll_memset
and dword [rsp + 0x44], 0
xor edi, edi
test rbx, rbx
jne 0x100127eda
lea r8, [0x100013ca0]
lea rcx, [0x100013be0]
mov edx, 0x3db
call fcn.10009a050
and qword [rbx], rdi
xor eax, eax
lea r8, [rsp + 0x80]
and qword [rsp + 0x38], rax
mov dword [rsp + 0x84], eax
and dword [rsp + 0x84], eax
mov dword [rsp + 0x80], eax
mov dword [rsp + 0x88], eax
lea rax, [rsp + 0x44]
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x60]
mov r9d, 0xc
mov edx, 0x2d1400
mov rcx, rsi
mov dword [rsp + 0x28], 0x20
mov qword [rsp + 0x20], rax
mov dword [rsp + 0x80], 1
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
test eax, eax
jne 0x100127fa7
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
mov r10, qword [0x1001653b8]
lea rsi, [0x1001653b8]
mov bpl, 2
lea r12, [0x100002ee0]
cmp r10, rsi
je 0x100127f94
test byte [r10 + 0x1c], 1
je 0x100127f94
cmp byte [r10 + 0x19], bpl
jb 0x100127f94
mov rcx, qword [r10 + 0x10]
mov edx, 0x30
mov r9d, eax
mov r8, r12
call fcn.10001c878
mov r10, qword [0x1001653b8]
movzx ebx, di
or ebx, 0x80070000
test edi, edi
cmovle ebx, edi
jmp 0x100128264
mov ecx, dword [rsp + 0x70]
mov r14d, 0x108
mov bpl, 2
mov eax, ecx
lea r15d, [rcx + 0x50]
not eax
and r15d, eax
movsxd rax, r15d
mov qword [rsp + 0x48], rax
lea ebx, [rcx + r14 + 0x50]
test rdi, rdi
je 0x100127fda
mov rcx, rdi
call qword [sym.imp.ole32.dll_CoTaskMemFree]
mov ecx, ebx
mov r13d, ebx
call qword [sym.imp.ole32.dll_CoTaskMemAlloc]
lea rsi, [0x1001653b8]
lea r12, [0x100002ee0]
mov rdi, rax
test rax, rax
je 0x100128243
mov r8, r13
xor edx, edx
mov rcx, rax
call sub.msvcrt.dll_memset
mov ecx, dword [rsp + 0x40]
and qword [rsp + 0x38], 0
and byte [rdi + 0x25], 0xfe
or byte [rdi + 0x25], bpl
mov eax, 0x38
mov word [rdi], ax
mov dword [rdi + 0x20], eax
mov eax, r15d
mov qword [rdi + 0x18], rax
mov eax, ecx
mov byte [rdi + 0x27], cl
mov rcx, qword [rsp + 0x50]
sar eax, 8
mov r9d, ebx
mov byte [rdi + 0x26], al
mov eax, r14d
mov r8, rdi
shr eax, 8
mov edx, 0x4d004
mov byte [rdi + 7], 0x12
mov byte [rdi + 0x2b], al
lea rax, [rsp + 0x44]
mov byte [rdi + 8], 1
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], ebx
mov dword [rdi + 0xc], r14d
mov qword [rsp + 0x20], rdi
mov dword [rdi + 0x10], 0x14
mov byte [rdi + 6], 0xa
mov byte [rdi + 0x24], 0x46
mov byte [rdi + 0x2c], r14b
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
test eax, eax
je 0x1001281f3
test byte [rdi + 0x3a], 0xf
jne 0x1001281a2
mov rdx, qword [rsp + 0x48]
add rdx, rdi
movzx eax, byte [rdx + 1]
movzx ecx, byte [rdx]
shl ecx, 8
or ecx, eax
movzx eax, byte [rdx + 2]
shl ecx, 8
or ecx, eax
movzx eax, byte [rdx + 3]
shl ecx, 8
or ecx, eax
lea r13d, [rcx + 4]
cmp r13d, 4
jb 0x10012815f
xor ebx, ebx
cmp r13d, r14d
jbe 0x1001280e5
mov ecx, dword [rsp + 0x70]
mov r14d, r13d
jmp 0x100127fc7
mov ecx, r13d
mov r15d, r13d
call qword [sym.imp.ole32.dll_CoTaskMemAlloc]
mov r14, rax
test rax, rax
je 0x100128243
mov rdx, qword [rsp + 0x48]
mov r8, r15
mov rcx, rax
add rdx, rdi
call sub.msvcrt.dll_memcpy
mov r11, qword [rsp + 0x58]
mov qword [r11], r14
mov r10, qword [0x1001653b8]
cmp r10, rsi
je 0x10012824f
test byte [r10 + 0x1c], 1
je 0x10012824f
cmp byte [r10 + 0x19], 5
jb 0x10012824f
mov eax, dword [rsp + 0x40]
mov rcx, qword [r10 + 0x10]
mov edx, 0x35
mov r9d, r13d
mov r8, r12
mov dword [rsp + 0x20], eax
call fcn.10001d914
jmp 0x100128248
mov r10, qword [0x1001653b8]
cmp r10, rsi
je 0x100128198
test byte [r10 + 0x1c], 1
je 0x100128198
cmp byte [r10 + 0x19], bpl
jb 0x100128198
mov edx, 0x33
mov dword [rsp + 0x20], ecx
mov rcx, qword [r10 + 0x10]
lea r9d, [rdx - 0x2f]
mov r8, r12
call fcn.10001d914
mov r10, qword [0x1001653b8]
mov ebx, 0x8000ffff
jmp 0x10012824f
mov r10, qword [0x1001653b8]
cmp r10, rsi
je 0x1001281ec
test byte [r10 + 0x1c], 1
je 0x1001281ec
cmp byte [r10 + 0x19], bpl
jb 0x1001281ec
movzx ecx, byte [rdi + 0x44]
movzx eax, byte [rdi + 0x45]
movzx r9d, byte [rdi + 0x3a]
mov dword [rsp + 0x28], eax
mov dword [rsp + 0x20], ecx
mov rcx, qword [r10 + 0x10]
and r9d, 0xf
mov edx, 0x32
mov r8, r12
call fcn.10007fb28
mov r10, qword [0x1001653b8]
mov ebx, 1
jmp 0x10012824f
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r13d, eax
mov r10, qword [0x1001653b8]
cmp r10, rsi
je 0x100128230
test byte [r10 + 0x1c], 1
je 0x100128230
cmp byte [r10 + 0x19], bpl
jb 0x100128230
mov rcx, qword [r10 + 0x10]
mov edx, 0x31
mov r9d, eax
mov r8, r12
call fcn.10001c878
mov r10, qword [0x1001653b8]
movzx ebx, r13w
or ebx, 0x80070000
test r13d, r13d
cmovle ebx, r13d
jmp 0x10012824f
mov ebx, 0x8007000e
mov r10, qword [0x1001653b8]
test rdi, rdi
je 0x100128264
mov rcx, rdi
call qword [sym.imp.ole32.dll_CoTaskMemFree]
mov r10, qword [0x1001653b8]
test ebx, ebx
jns 0x10012828e
cmp r10, rsi
je 0x10012828e
test byte [r10 + 0x1c], 1
je 0x10012828e
cmp byte [r10 + 0x19], bpl
jb 0x10012828e
mov rcx, qword [r10 + 0x10]
mov edx, 0x36
mov r9d, ebx
mov r8, r12
call fcn.10001c878
mov eax, ebx
mov rcx, qword [rsp + 0x90]
xor rcx, rsp
call fcn.10014e600
mov rbx, qword [rsp + 0xe8]
add rsp, 0xa0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret