Function at 0x140213c40
Capabilities:
Get disk information

Disassembly:
mov dword [rsp + 0x10], edx
mov word [rsp + 8], cx
sub rsp, 0x248
mov eax, 0x3ad5
mov word [rsp + 0x44], ax
mov byte [rsp + 0x55], ILCreateFromPathW
mov dword [rsp + 0x4c], 0x7be8350e
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
nop
mov eax, dword [rsp + 0x4c]
mov dword [rsp + 0x90], eax
cmp dword [rsp + 0x90], 0x7be8350e
je 0x140213c8f
jmp 0x14021413b
movsx eax, word [rsp + 0x250]
add eax, 0x549f
mov word [rsp + 0x44], ax
lea rax, [rsp + 0x258]
mov qword [rsp + 0x68], rax
mov eax, dword [rsp + 0x4c]
mov dword [rsp + 0x94], eax
cmp dword [rsp + 0x94], 0x7be8350e
je 0x140213cc8
jmp 0x140213ced
mov eax, dword [rsp + 0x4c]
mov dword [rsp + 0x50], eax
movzx eax, word [section..data]
mov word [rsp + 0x60], ax
movzx eax, word [rsp + 0x60]
mov word [rsp + 0x78], ax
mov byte [rsp + 0x40], 0x64
jmp 0x140213d07
mov edx, 1
mov rcx, qword [rsp + 0xe0]
call qword [sym.imp.USER32.dll_ShowOwnedPopups]
mov dword [rsp + 0xbc], eax
lea rax, [rsp + 0x58]
mov qword [rsp + 0x80], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x200
mov dword [rsp + 0x20], 0
xor r9d, r9d
mov r8d, 8
mov edx, 0x40000000
lea rcx, str.UnhonouredHumouring
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rsp + 0xe8], rax
movzx eax, word [rsp + 0x44]
mov word [rsp + 0x48], ax
call qword [sym.imp.KERNEL32.dll_GetLogicalDrives]
mov dword [rsp + 0xc0], eax
movabs rax, 0xa1abe4ad34d7f1d
mov qword [rsp + 0x88], rax
call qword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov qword [rsp + 0xf0], rax
movsx eax, word [rsp + 0x44]
mov dword [rsp + 0x98], eax
cmp dword [rsp + 0x98], 0x471b
je 0x140213da5
jmp 0x140213e7c
movzx eax, word [rsp + 0x48]
mov word [rsp + 0x250], ax
mov eax, dword [rsp + 0x258]
mov ecx, dword [rsp + 0x58]
and ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x80]
mov dword [rcx], eax
mov rax, qword [rsp + 0x68]
mov edx, dword [rax]
movzx ecx, word [rsp + 0x48]
call fcn.140213c40
movabs rax, 0x2705d509c78019e8
mov rcx, qword [rsp + 0x88]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0x88], rax
movzx eax, byte [rsp + 0x40]
mov byte [rsp + 0x9c], al
cmp byte [rsp + 0x9c], 0x72
je 0x140213e14
jmp 0x140213e4d
mov rax, qword [rsp + 0x80]
mov eax, dword [rax]
movzx ecx, al
mov eax, dword [rsp + 0x58]
shr eax, cl
mov rcx, qword [rsp + 0x68]
mov dword [rcx], eax
xor r8d, r8d
mov rdx, qword [rsp + 0xa8]
mov rcx, qword [rsp + 0xd8]
call qword [sym.imp.USER32.dll_SetWindowRgn]
mov dword [rsp + 0x5c], eax
jmp 0x140213e77
movzx eax, word [rsp + 0x48]
mov word [rsp + 0x250], ax
mov r8d, 0xb6
lea rdx, [rsp + 0x44]
mov cx, 0x74
call qword [sym.imp.USER32.dll_CharNextExA]
mov qword [rsp + 0xf8], rax
jmp 0x140213f8a
movabs rax, 0x6d78cae733e800c0
cmp qword [rsp + 0x88], rax
je 0x140213f58
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0xb8], eax
movabs rax, 0x69a1fa1eeea6f849
cmp qword [rsp + 0x88], rax
jl 0x140213f56
mov eax, dword [rsp + 0x58]
mov rcx, qword [rsp + 0x80]
mov qword [rsp + 0xc8], rcx
movzx ecx, al
mov rax, qword [rsp + 0xc8]
mov eax, dword [rax]
shl eax, cl
mov rcx, qword [rsp + 0x68]
mov dword [rcx], eax
movsx eax, byte [rsp + 0x40]
sub eax, 0x3b
mov byte [rsp + 0x40], al
mov eax, dword [rsp + 0x5c]
mov dword [rsp + 0xa0], eax
cmp dword [rsp + 0xa0], 0x587e5702
je 0x140213f09
jmp 0x140213f42
mov edx, 0xec
mov rcx, qword [rsp + 0xb0]
call qword [sym.imp.USER32.dll_GetWindowLongW]
mov dword [rsp + 0x5c], eax
mov eax, dword [rsp + 0x5c]
mov dword [rsp + 0x20], eax
mov r9d, dword [rsp + 0x4c]
mov r8d, dword [rsp + 0x50]
mov edx, dword [rsp + 0x50]
mov ecx, dword [rsp + 0x50]
call fcn.140213850
nop
jmp 0x140213f56
movsx eax, word [rsp + 0x48]
movsx ecx, word [rsp + 0x250]
add eax, ecx
mov word [rsp + 0x44], ax
jmp 0x140213f8a
movsx eax, word [rsp + 0x48]
movsx ecx, word [rsp + 0x44]
or eax, ecx
movsx ecx, word [rsp + 0x250]
cmp eax, ecx
jne 0x140213f8a
mov rax, qword [rsp + 0x68]
mov rcx, qword [rsp + 0x80]
mov ecx, dword [rcx]
mov eax, dword [rax]
and eax, ecx
mov rcx, qword [rsp + 0x68]
mov dword [rcx], eax
movsx eax, word [rsp + 0x48]
movsx ecx, word [rsp + 0x44]
add eax, ecx
movsx ecx, word [rsp + 0x250]
cmp eax, ecx
jne 0x140214043
lea rax, [rsp + 0xa8]
mov qword [rsp + 0x20], rax
mov r9d, reloc.SHELL32.dll_SHGetNewLinkInfoW
lea r8, [rsp + 0xa8]
mov edx, 0x58
mov rcx, qword [rsp + 0xb0]
call qword [sym.imp.USER32.dll_CascadeWindows]
mov word [rsp + 0x74], ax
mov eax, dword [rsp + 0x50]
mov dword [rsp + 0x7c], eax
cmp dword [rsp + 0x7c], 0x1be9df71
je 0x140213ff7
cmp dword [rsp + 0x7c], 0x2d704799
je 0x140214039
jmp 0x140214041
mov rax, qword [rsp + 0x68]
mov eax, dword [rax]
mov dword [rsp + 0x258], eax
mov rax, qword [rsp + 0x68]
mov ecx, dword [rsp + 0x58]
mov eax, dword [rax]
sub eax, ecx
mov rcx, qword [rsp + 0x80]
mov dword [rcx], eax
mov edx, 0x43
mov rcx, qword [rsp + 0xb0]
call qword [sym.imp.USER32.dll_GetAncestor]
mov qword [rsp + 0x100], rax
jmp 0x140214041
mov eax, dword [rsp + 0x50]
mov dword [rsp + 0x5c], eax
jmp 0x140214088
lea rax, [rsp + 0x40]
mov qword [rsp + 0xd0], rax
movsx eax, word [rsp + 0x48]
movsx ecx, word [rsp + 0x44]
add eax, ecx
movsx ecx, word [rsp + 0x250]
cmp eax, ecx
jne 0x140214088
mov eax, dword [rsp + 0x50]
mov dword [rsp + 0x20], eax
mov r9d, dword [rsp + 0x50]
mov r8d, dword [rsp + 0x50]
mov edx, dword [rsp + 0x50]
mov ecx, dword [rsp + 0x5c]
call fcn.140213850
nop
mov byte [rsp + 0x54], 0xd8
lea rax, [rsp + 0x88]
mov qword [rsp + 0x108], rax
mov dword [rsp + 0x120], 0x114
mov eax, dword [rsp + 0x5c]
mov ecx, dword [rsp + 0x4c]
or ecx, eax
mov eax, ecx
cmp eax, dword [rsp + 0x50]
jg 0x1402140ec
mov rax, qword [rsp + 0xd0]
movzx eax, byte [rax]
mov byte [rsp + 0x70], al
movzx eax, byte [rsp + 0x54]
imul eax, eax, 0x24
mov byte [rsp + 0x55], al
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
lea rax, [rsp + 0x50]
mov qword [rsp + 0x110], rax
mov eax, dword [rsp + 0x258]
mov ecx, dword [rsp + 0x58]
xor ecx, eax
mov eax, ecx
mov rcx, qword [rsp + 0x68]
mov dword [rcx], eax
movsx eax, word [rsp + 0x48]
movsx ecx, word [rsp + 0x250]
sar eax, cl
mov word [rsp + 0x44], ax
mov rcx, qword [rsp + 0xd8]
call qword [sym.imp.USER32.dll_GetDlgCtrlID]
mov dword [rsp + 0x4c], eax
movzx eax, word [rsp + 0x74]
movzx ecx, word [rsp + 0x60]
shl eax, cl
mov word [rsp + 0x78], ax
jmp 0x14021414b
mov edx, 0x7f
mov ecx, 0xe0
call fcn.140213740
nop
mov edx, dword [rsp + 0x258]
movzx ecx, word [rsp + 0x250]
call fcn.140213c40
mov edx, 0xa1
mov rcx, qword [rsp + 0x118]
call qword [sym.imp.USER32.dll_WaitForInputIdle]
mov dword [rsp + 0x58], eax
mov eax, dword [rsp + 0x58]
mov dword [rsp + 0x258], eax
mov eax, dword [rsp + 0x4c]
mov dword [rsp + 0xa4], eax
cmp dword [rsp + 0xa4], 0x36ce56d
je 0x14021419b
jmp 0x1402141bd
mov eax, dword [rsp + 0x4c]
mov dword [rsp + 0x20], eax
mov r9d, dword [rsp + 0x4c]
mov r8d, dword [rsp + 0x4c]
mov edx, dword [rsp + 0x4c]
mov ecx, dword [rsp + 0x4c]
call fcn.140213850
nop
jmp 0x1402141ca
mov eax, dword [rsp + 0x4c]
sub eax, 0x7cd490b3
mov dword [rsp + 0x4c], eax
mov eax, SHGetNewLinkInfoW
add rsp, 0x248
ret