Function at 0x140008534
Capabilities:
Get disk information

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x10a0]
mov eax, 0x11a0
call fcn.140019100
sub rsp, rax
mov rax, qword [0x140023008]
xor rax, rsp
mov qword [rbp + 0x1090], rax
mov r12, rdx
mov rbx, rcx
xor r13d, r13d
mov qword [rcx], r13
mov qword [rcx + 0x10], r13
mov qword [rcx + 0x18], 7
mov word [rsp + 0x40], r13w
lea rdx, [rsp + 0x40]
lea ecx, [r13 + 0x7f]
call qword [sym.imp.KERNEL32.dll_GetLogicalDriveStringsW]
test eax, eax
je 0x1400086c5
lea r14, [rsp + 0x40]
cmp word [rsp + 0x40], r13w
je 0x1400086c5
lea edx, [r13 + 0x5c]
or rsi, 0xffffffffffffffff
inc rsi
cmp word [r14 + rsi*2], r13w
jne 0x1400085b8
lea r15, [r14 + rsi*2]
cmp rsi, 2
jb 0x1400086b6
cmp word [r14 + rsi*2 - 2], dx
jne 0x1400085e0
dec rsi
mov word [r14 + rsi*2], r13w
mov r8d, 0x823
lea rdx, [rbp + 0x40]
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_QueryDosDeviceW]
test eax, eax
je 0x1400086b1
lea rax, [rbp + 0x40]
or rdi, 0xffffffffffffffff
inc rdi
cmp word [rax + rdi*2], r13w
jne 0x140008603
mov edx, 0x5c
cmp rdi, rsi
jb 0x1400086b6
cmp word [rbp + rdi*2 + 0x3e], dx
je 0x140008640
mov word [rbp + rdi*2 + 0x40], dx
inc rdi
lea rax, [rdi + rdi]
cmp rax, 0x1048
jae 0x1400087e6
mov word [rbp + rax + 0x40], r13w
lea rcx, [rbp + 0x40]
or rax, 0xffffffffffffffff
inc rax
cmp word [rcx + rax*2], r13w
jne 0x140008648
mov rcx, rdi
cmp rax, rdi
cmovb rcx, rax
test ecx, ecx
js 0x1400087a5
test edi, edi
js 0x140008797
cmp ecx, edi
je 0x140008675
mov al, r13b
jmp 0x140008691
mov r9d, edi
mov r8, r12
mov edx, ecx
lea rcx, [rbp + 0x40]
call qword [sym.imp.Mso20Win32Client.dll_Ordinal_103]
test eax, eax
sete al
mov edx, 0x5c
test al, al
je 0x1400086b6
mov rdx, r14
mov rcx, rbx
call fcn.14000c9e0
lea rdx, [r12 - 2]
lea rdx, [rdx + rdi*2]
mov rcx, rbx
call fcn.14000c950
mov edx, 0x5c
lea r14, [r15 + 2]
cmp word [r15 + 2], r13w
jne 0x1400085b4
cmp qword [rbx + 0x10], r13
jne 0x1400086d6
mov rdx, r12
mov rcx, rbx
call fcn.14000c9e0
mov rdx, rbx
cmp qword [rbx + 0x18], 8
jb 0x1400086e3
mov rdx, qword [rbx]
lea rcx, [rsp + 0x20]
call fcn.1400080a0
mov rdi, rax
mov esi, 0x1000
cmp rbx, rax
je 0x14000875f
mov rcx, qword [rbx + 0x18]
cmp rcx, 8
jb 0x140008731
mov rdx, qword [rbx]
lea rcx, [rcx*2 + 2]
cmp rcx, rsi
jb 0x140008728
mov rcx, qword [rdx - 8]
sub rdx, rcx
lea rax, [rdx - 8]
cmp rax, 0x1f
ja 0x140008790
mov rdx, rcx
mov rcx, rdx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov qword [rbx + 0x10], r13
mov qword [rbx + 0x18], 7
mov word [rbx], r13w
movups xmm0, xmmword [rdi]
movups xmmword [rbx], xmm0
movups xmm1, xmmword [rdi + 0x10]
movups xmmword [rbx + 0x10], xmm1
mov qword [rdi + 0x10], r13
mov qword [rdi + 0x18], 7
mov word [rdi], r13w
mov rax, qword [rsp + 0x38]
cmp rax, 8
jb 0x1400087b9
mov rcx, qword [rsp + 0x20]
mov rdx, rcx
lea rax, [rax*2 + 2]
cmp rax, rsi
jb 0x1400087b3
mov rcx, qword [rcx - 8]
sub rdx, rcx
lea rax, [rdx - 8]
cmp rax, 0x1f
jbe 0x1400087b3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
xor edx, edx
mov ecx, 0x1f5c2187
call qword [sym.imp.Mso20Win32Client.dll_Ordinal_2055]
int3
xor edx, edx
mov ecx, 0x1f5c2188
call qword [sym.imp.Mso20Win32Client.dll_Ordinal_2055]
nop
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rax, rbx
mov rcx, qword [rbp + 0x1090]
xor rcx, rsp
call fcn.140017980
mov rbx, qword [rsp + 0x11f0]
add rsp, 0x11a0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.140017ae8
int3