Function at 0x140025200
Capabilities:
Get disk information
Read file on windows

Disassembly:
xchg rsp, rax
mov rsp, rax
xchg rsp, rax
mov qword [rax + 0x10], rbx
xchg rbx, rbp
mov qword [rax + 0x18], rbx
xchg rbp, rbx
jmp 0x1400252d9
xor dword [rsp + 0x190], 0x141e222e
add dword [rsp + 0x190], 0xc366268
xor dword [rsp + 0x190], 0x49618427
sub dword [rsp + 0x190], 0x18745803
jmp 0x1400256f1
mov eax, edx
shr eax, 2
shr eax, 8
shr eax, 0xa
shr eax, 1
shr eax, 8
jmp 0x1400256e0
cmp byte [rbx + rax], 0
xchg r9, r9
jne 0x1400255e1
jmp 0x1400252e6
movzx eax, byte [rbx]
mov byte [rsp + 0x190], al
call qword [sym.imp.KERNEL32.dll_GetDriveTypeA]
cmp eax, 5
mov rsp, rsp
jmp 0x14002564e
mov r15, r15
sub al, dl
add al, 0x3a
sub al, 9
jmp 0x14002556f
add ecx, 0x6be99368
sub ecx, 0x6e7b9734
xor ecx, 0x16ecc45c
add ecx, 0xef3d438
sub ecx, 0x2727d883
jmp 0x1400254de
mov r10, r10
lea rdx, [rdx + 8]
paddd xmm2, xmm5
movd xmm3, eax
movdqa xmm1, xmm2
xchg rcx, rcx
jmp 0x140025783
mov qword [rax + 0x20], rsi
xchg rcx, rcx
nop
jmp 0x140025699
inc rbx
add rbx, rax
cmp byte [rbx], 0
mov dword [rsp - 0x18], 0xb0e4229
jmp 0x1400253ea
jne 0x1400257c4
mov dword [rsp - 0x2c], ebx
nop
movabs rax, 0xffffffff7a939faa
sub rax, 0x316a54a6
jmp 0x14002539e
movd xmm0, dword [rdx - 8]
pxor xmm2, xmm0
mov rdx, rdx
movd dword [rdx - 8], xmm2
jmp 0x140025410
movd xmm0, r8d
xchg rbp, rbp
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x1401183d0]
packuswb xmm2, xmm2
mov dword [rsp - 0x30], esi
paddb xmm2, xmm0
jmp 0x14002531c
lea r15d, [rbp + 0x1b]
nop dword [rax]
mov dword [rsp - 0x24], 0x48bdb3ac
xor eax, eax
mov dword [rsp + 0x190], 0x62ab9ee
add dword [rsp + 0x190], 0x576d8ee4
jmp 0x14002521a
psrad xmm1, xmm6
mov dword [rsp - 0x14], ebx
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
jmp 0x140025638
xor rax, 0x1ce7d8c0
sub rax, 0x34251a53
sub rax, 0xd5ebf6e
sub rax, 0x10d76fbc
xor rax, 0x3d8126cb
jmp 0x1400255c9
xor ebp, 0x5663e46
sub ebp, 0x13f8b10f
sub ebp, 0x3563e9ad
add ebp, 0x21ed56f7
xor ebp, 0x318faa82
sub ebp, 0x666e5173
jmp 0x140025358
jne 0x140025367
jmp 0x1400259b2
xor eax, 0x2085cbe3
xor eax, 0x7e03cf58
lea r8, [r8 + 1]
imul ecx
xchg r8, r8
sar edx, 4
jmp 0x14002524b
cmp ecx, 0x10
jl 0x140025688
xchg r14, r14
cmp ecx, 0x11
jge 0x14002544f
movsxd rax, ecx
jmp 0x140025517
nop
mov qword [rsp - 8], r15
sub rsp, 8
neg rsp
sub rsp, 0xfffffffffffffce0
neg rsp
jmp 0x1400256b0
jl 0x140025539
lea r8, [rsp + 0x190]
lea rdx, [rsp + 0x20]
xchg r10, r10
lea rcx, [rsp + 0x1e0]
jmp 0x14002571f
movups xmmword [rsp + 0x20], xmm0
cmp esi, 2
mov dword [rsp - 0x30], esi
jl 0x140025425
movdqa xmm0, xmmword [str.1111111111111111]
lea rdx, [rsp + 0x24]
jmp 0x140025599
mov dword [rsp - 0x38], esp
packuswb xmm2, xmm2
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movd xmm0, r8d
xchg rcx, rcx
jmp 0x1400254ae
paddb xmm2, xmm0
movd xmm0, dword [rdx - 0xc]
pxor xmm2, xmm0
jmp 0x14002557f
pshufhw xmm1, xmm0, 0xd8
xchg r15, r15
pshufd xmm2, xmm1, 0xd8
movdqa xmm1, xmm3
pand xmm2, xmmword [0x1401183d0]
jmp 0x140025490
call qword [sym.imp.KERNEL32.dll_GetLogicalDriveStringsA]
test eax, eax
mov r14, r14
je 0x1400259b2
cmp byte [rsp + 0x1a0], 0
jmp 0x140025543
nop
add ecx, 0x64fa01a3
sub ecx, 0x64fa019b
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
jmp 0x140025384
xchg rsp, rsp
lea r8, [rsp + 0x20]
add r8, rax
nop dword [rax]
nop word [rax + rax]
mov dword [rsp - 0x1c], 0x3e882ace
mov eax, 0x6e40135c
jmp 0x140025615
lea rbx, [rsp + 0x1a0]
je 0x1400259b2
mov dword [rsp - 0x28], 0x4237031f
mov esi, dword [0x1402557d0]
mov ebp, 0x1915bf9d
add ebp, 0x6121425f
jmp 0x1400253c1
xor byte [r8 - 1], al
mov dword [rsp - 0x38], edx
cmp ecx, 0x11
jmp 0x140025449
mov r14, r14
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
movd dword [rdx - 0xc], xmm2
jmp 0x1400256be
mov r8, r8
movdqa xmm5, xmmword [0x140118390]
movdqa xmm4, xmmword [0x1401194f0]
movdqa xmm7, xmmword [str.5555]
mov dword [rsp - 0x44], 0x2ac5177
xchg rsp, rcx
movdqa xmmword [rcx + 0x40], xmm0
jmp 0x140025601
sub rax, 0x3dcfc9d8
add rax, 0x7fffffff
xor rax, 0x7edd5d4c
nop word [rax + rax]
inc rax
jmp 0x140025260
xchg r9, r9
mov r14, rcx
lea rdx, [rsp + 0x1a0]
mov ecx, 0x116ac4a3
jmp 0x14002529b
xchg rsp, rcx
mov r8d, dword [rsp + 0x40]
xchg rdi, rdi
movd xmm6, ebp
jmp 0x140025670
add eax, 0xe9907c4
sub eax, 0xcd8421c
sub eax, 0x12a7204b
xor eax, 0x27b1f6c3
sub eax, 0x47528477
sub eax, 0x1fc752ad
jmp 0x1400253f5
xchg rbx, rbx
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
jmp 0x1400254c0
jne 0x140025306
movups xmm0, xmmword [0x140118e50]
movzx eax, byte [0x140118e60]
xor ecx, ecx
mov r10, r10
mov byte [rsp + 0x30], al
jmp 0x14002546c
movd xmm8, r15d
nop dword [rax]
nop word [rax + rax]
mov dword [rsp - 0x10], ecx
movd xmm2, ecx
lea eax, [rcx + 4]
pshufd xmm2, xmm2, 0
jmp 0x1400252be
mov qword [rsp - 8], rdi
sub rsp, 8
nop
sub rsp, 8
mov qword [rsp], r14
jmp 0x14002542d
movaps xmmword [rax - 0x28], xmm6
mov r8, r8
xchg rbx, rax
jmp 0x140025732
mov dword [rsp - 0x28], 0x1a72261
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
mov dword [rsp - 0x38], ebx
psrld xmm0, xmm8
jmp 0x140025764
shr eax, 1
shr eax, 1
add edx, eax
mov rsp, rsp
movsx eax, dl
jmp 0x140025757
add dword [rsp + 0x190], 0x3359d368
sub dword [rsp + 0x190], 0x37668a69
mov word [rsp + 0x194], ax
lea rcx, [rsp + 0x190]
mov r8, r8
jmp 0x140025272
call fcn.14000ee70
lea rdx, [rsp + 0x50]
mov dword [rsp - 0x34], esp
jmp 0x1400257a6
movaps xmmword [rbx - 0x38], xmm7
xchg rbx, rax
movaps xmmword [rax - 0x48], xmm8
mov rsi, rsi
mov rax, qword [0x1402557f0]
xor rax, rsp
mov qword [rsp + 0x2e0], rax
jmp 0x1400255e9
imul edx, eax, 0x35
movzx eax, cl
inc ecx
jmp 0x14002528d
paddd xmm0, xmm1
pmulld xmm0, xmm7
xchg rbp, rbp
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
jmp 0x140025332
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
movdqa xmm0, xmm2
mov dword [rsp - 0x18], ebp
punpckhdq xmm0, xmm2
paddd xmm3, xmm5
pmuldq xmm0, xmm4
jmp 0x1400254fc
lea rcx, [rsp + 0x1e0]
call qword [sym.imp.KERNEL32.dll_FindFirstFileA]
xchg r10, rax
mov rdi, r10
xchg r10, rax
cmp rax, 0xffffffffffffffff
jmp 0x1400252fc
lea rdx, [0x140118e64]
lea rcx, [rsp + 0x1e0]
call fcn.1400f540c
jmp 0x1400257dd
xchg r11, r11
mov rsi, rax
test rax, rax
je 0x1400259a3
mov r9, r9
jmp 0x140025842
mov rcx, rsp
xchg rbx, rsp
call fcn.1400e9010
jmp 0x14002594f
xchg rcx, r10
call qword [sym.imp.KERNEL32.dll_FindClose]
test rbp, rbp
xchg rsp, rsp
jmp 0x14002590c
jmp 0x140025a4f
xchg rbp, rax
mov rax, rbp
xchg rbp, rax
call fcn.1400f5678
xchg rcx, r14
mov r14, rsi
jmp 0x1400258f6
xchg rdx, rcx
mov rdx, rax
xchg rcx, rdx
jmp 0x14002581d
xor edx, edx
xchg rcx, rax
mov rax, rcx
xchg rcx, rax
lea r8d, [rdx + 2]
jmp 0x140025854
call fcn.1400f5948
xchg rsp, rcx
mov rsp, rsi
xchg rcx, rsp
call fcn.1400f5e44
xchg r10, r10
xchg rcx, r10
jmp 0x140025936
mov r15, rbp
xchg rdx, r15
call fcn.1400ead90
xchg rbp, r13
mov rcx, r13
xchg r13, rbp
call fcn.1400e8bd0
jmp 0x140025818
mov r8d, 0x75008f65
sub r8d, 0x61c1cb38
xor r8d, 0x5e7aeaa7
jmp 0x1400258d2
sub edx, 0x12bbcf74
sub edx, 0x44a25883
xor edx, 0x5fdb63a3
sub edx, 0x3ca385ec
add edx, 0x2c49ac11
sub edx, 0x4e08a17e
jmp 0x140025834
sub r8d, 0x1190b0bc
xor r8d, 0x382ff3a5
add r8d, 0x6735411f
sub r8d, 0x6ad1bf8a
xchg rdx, r15
jmp 0x140025872
xchg rcx, r14
call fcn.1400f52ec
xchg rcx, rcx
xchg rcx, r10
mov r10, rdi
jmp 0x140025804
je 0x1400259b2
lea rcx, [r14 + 0x50d]
mov byte [r14 + 0x50c], 0xf
xor byte [r14 + 0x50c], 0x7c
xor byte [r14 + 0x50c], 3
jmp 0x14002596e
mov r10, rsi
xchg rcx, r10
movsxd rbx, eax
call fcn.1400f5e4c
mov rsp, rsp
xchg rsp, rbx
jmp 0x1400257f4
xchg r11, r11
mov r9, rsi
xchg r11, rbx
mov r8, r11
xchg rbx, r11
mov edx, 0x1d9324dd
add edx, 0x3b841c13
jmp 0x1400258a9
xor byte [r14 + 0x50c], 0x36
xor byte [r14 + 0x50c], 0x6f
sub byte [r14 + 0x50c], 0x17
xor byte [r14 + 0x50c], 0x64
sub byte [r14 + 0x50c], 0x55
xor byte [r14 + 0x50c], 0x20
jmp 0x140025890
xchg rsp, rdi
mov rcx, rsp
xchg rdi, rsp
call qword [sym.imp.KERNEL32.dll_FindClose]
mov byte [r14 + 0x50c], 8
xor byte [r14 + 0x50c], 0x78
jmp 0x1400259ea
xchg rcx, r11
xchg rsp, r11
mov r11, rsp
xchg r11, rsp
pop r15
jmp 0x140025a43
mov rdi, rdi
xchg rcx, r11
movaps xmm8, xmmword [rcx - 0x30]
jmp 0x1400259c7
sub byte [r14 + 0x50c], 0xc
sub byte [r14 + 0x50c], 0x24
xor byte [r14 + 0x50c], 0x38
xor byte [r14 + 0x50c], 0x6f
xor byte [r14 + 0x50c], 0x2c
sub byte [r14 + 0x50c], 0x3b
jmp 0x140025a4f
movaps xmm6, xmmword [r13 - 0x10]
xchg r13, r11
movaps xmm7, xmmword [r11 - 0x20]
jmp 0x1400259da
xchg rsi, rsp
mov rsp, qword [r11 + 0x38]
xchg rsp, rsi
xchg r11, r13
jmp 0x140025a1f
pop r14
nop
mov rdi, qword [rsp]
add rsp, 8
ret
xchg rcx, r10
mov r10, qword [rsp + 0x2e0]
xchg rcx, r10
xor rcx, rsp
call fcn.1400e8cf0
mov dword [rsp - 0x2c], esi
jmp 0x140025a6e
lea r11, [rsp + 0x320]
xchg rbx, rsp
mov rsp, qword [r11 + 0x28]
xchg rsp, rbx
mov rbp, qword [r11 + 0x30]
jmp 0x140025a31