Function at 0x1400065c8
Capabilities:
Get disk information

Disassembly:
push r15
mov rax, 7
sub rsp, 8
mov qword [rsp], 0
dec rax
jne 0x1400065d1
sub rsp, 0x28
mov dword [rsp + 0x30], 0
mov dword [rsp + 0x40], 0
movabs rdx, 0x14001e028
lea rcx, [rsp + 0x58]
call fcn.1400181d0
mov rcx, qword [0x140034678]
call fcn.140014b94
mov r15, rax
and r15, r15
jle 0x140006676
mov rdx, qword [0x140034aa0]
push rdx
push rdx
movabs rax, str.BackupFile
push rax
movabs rax, str.Setting
mov rdx, rax
mov rcx, qword [0x140034678]
pop r8
sub rsp, 0x20
call fcn.1400053a3
add rsp, 0x28
lea rcx, [rsp + 0x60]
pop rdx
call fcn.140018090
movabs rdx, 2
mov rcx, qword [0x140034678]
call fcn.140014d34
mov dword [rsp + 0x50], 2
jmp 0x140006680
mov rax, 0x19
cmp eax, dword [rsp + 0x50]
jl 0x140006a28
mov rax, qword [0x140034aa0]
push rax
sub rsp, 8
push rax
movsxd r15, dword [rsp + 0x68]
add r15, 0x41
mov rax, r15
mov rcx, rax
pop rdx
sub rsp, 0x20
call fcn.140014000
add rsp, 0x28
lea rcx, [rsp + 0x30]
pop rdx
call fcn.140018090
push qword [rsp + 0x28]
movabs rcx, 0x14001e37e
pop rdx
call fcn.140018360
or rax, rax
je 0x1400066e4
jmp 0x140006a1e
push qword [0x140034aa0]
sub rsp, 8
mov rcx, qword [rsp + 0x38]
push qword [0x140034aa0]
sub rsp, 0x28
call fcn.140018160
add rsp, 0x28
movabs rcx, 0x14001f75e
sub rsp, 0x28
call fcn.140018160
add rsp, 0x28
mov rdx, qword [0x140034ac0]
add qword [rsp], rdx
pop rcx
sub rsp, 0x20
call sub.KERNEL32.dll_GetDriveTypeW
add rsp, 0x28
pop qword [0x140034aa0]
mov r15, rax
cmp r15, 3
jne 0x140006a1e
push qword [0x140034aa0]
sub rsp, 8
mov rcx, qword [rsp + 0x38]
push qword [0x140034aa0]
sub rsp, 0x28
call fcn.140018160
add rsp, 0x28
movabs rcx, str.:WindowsSystem32
sub rsp, 0x28
call fcn.140018160
add rsp, 0x28
mov rdx, qword [0x140034ac0]
add qword [rsp], rdx
pop rcx
sub rsp, 0x20
call fcn.140014b94
add rsp, 0x28
pop qword [0x140034aa0]
mov r15, rax
cmp r15, 0xfffffffffffffffe
jne 0x140006845
mov rcx, qword [rsp + 0x28]
push qword [0x140034aa0]
sub rsp, 0x28
call fcn.140018160
add rsp, 0x28
lea rcx, [0x140034688]
pop rdx
call fcn.140018090
movsxd r15, dword [rsp + 0x30]
inc r15
mov rax, r15
mov dword [rsp + 0x30], eax
mov rcx, qword [rsp + 0x38]
push qword [0x140034aa0]
sub rsp, 0x28
call fcn.140018160
add rsp, 0x28
movabs rcx, 0x14001e08c
sub rsp, 0x28
call fcn.140018160
add rsp, 0x28
mov rcx, qword [rsp + 0x30]
sub rsp, 0x28
call fcn.140018160
add rsp, 0x28
movabs rcx, 0x14001e130
sub rsp, 0x28
call fcn.140018160
add rsp, 0x28
lea rcx, [rsp + 0x40]
pop rdx
call fcn.140018090
push qword [0x140034aa0]
sub rsp, 8
mov rcx, qword [rsp + 0x38]
push qword [0x140034aa0]
sub rsp, 0x28
call fcn.140018160
add rsp, 0x28
movabs rcx, str.:Backup
sub rsp, 0x28
call fcn.140018160
add rsp, 0x28
mov rdx, qword [0x140034ac0]
add qword [rsp], rdx
pop rcx
sub rsp, 0x20
call fcn.140014b94
add rsp, 0x28
pop qword [0x140034aa0]
mov r15, rax
cmp r15, 0xfffffffffffffffe
jne 0x140006941
mov rcx, qword [rsp + 0x28]
push qword [0x140034aa0]
sub rsp, 0x28
call fcn.140018160
add rsp, 0x28
lea rcx, [0x140034698]
pop rdx
call fcn.140018090
movsxd r15, dword [rsp + 0x40]
inc r15
mov rax, r15
mov dword [rsp + 0x40], eax
mov rcx, qword [rsp + 0x48]
push qword [0x140034aa0]
sub rsp, 0x28
call fcn.140018160
add rsp, 0x28
movabs rcx, 0x14001e08c
sub rsp, 0x28
call fcn.140018160
add rsp, 0x28
mov rcx, qword [rsp + 0x30]
sub rsp, 0x28
call fcn.140018160
add rsp, 0x28
movabs rcx, 0x14001e130
sub rsp, 0x28
call fcn.140018160
add rsp, 0x28
lea rcx, [rsp + 0x50]
pop rdx
call fcn.140018090
push qword [rsp + 0x58]
movabs rcx, 0x14001e028
pop rdx
call fcn.140018360
or rax, rax
jne 0x140006a1e
push qword [0x140034aa0]
sub rsp, 8
mov rcx, qword [rsp + 0x38]
push qword [0x140034aa0]
sub rsp, 0x28
call fcn.140018160
add rsp, 0x28
movabs rcx, 0x14001e130
sub rsp, 0x28
call fcn.140018160
add rsp, 0x28
mov rcx, qword [rsp + 0x70]
sub rsp, 0x28
call fcn.140018160
add rsp, 0x28
mov rdx, qword [0x140034ac0]
add qword [rsp], rdx
pop rcx
sub rsp, 0x20
call fcn.140014b94
add rsp, 0x28
pop qword [0x140034aa0]
mov r15, rax
and r15, r15
jle 0x140006a1e
mov rcx, qword [rsp + 0x28]
push qword [0x140034aa0]
sub rsp, 0x28
call fcn.140018160
add rsp, 0x28
movabs rcx, 0x14001e130
sub rsp, 0x28
call fcn.140018160
add rsp, 0x28
mov rcx, qword [rsp + 0x60]
sub rsp, 0x28
call fcn.140018160
add rsp, 0x28
lea rcx, [0x1400346b0]
pop rdx
call fcn.140018090
inc dword [rsp + 0x50]
jno 0x140006680
movsxd r15, dword [rsp + 0x30]
and r15, r15
jne 0x140006a8a
mov rax, 0xfffd
push rax
mov rax, 1
push rax
movabs rax, 0x14001eb58
push rax
movabs rax, 0x14001f124
push rax
movabs rax, 0x14001e23e
push rax
xor rax, rax
mov rcx, rax
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.14000393b
add rsp, 0x30
xor rax, rax
mov qword [0x140034670], rax
jmp 0x1400013f1
movsxd r15, dword [rsp + 0x30]
cmp r15, 1
jle 0x140006b86
push qword [0x140034aa0]
sub rsp, 8
mov rax, 0xfffd
push rax
mov rax, 1
push rax
push qword [0x140034aa0]
movabs rcx, 0x14001e05e
sub rsp, 0x28
call fcn.140018160
add rsp, 0x28
mov rcx, qword [rsp + 0x60]
sub rsp, 0x28
call fcn.140018160
add rsp, 0x28
movabs rcx, 0x14001e85e
sub rsp, 0x28
call fcn.140018160
add rsp, 0x28
movsxd rax, dword [rsp + 0x58]
mov rcx, rax
mov rdx, qword [0x140034aa0]
push rdx
push rdx
pop rdx
sub rsp, 0x20
call fcn.140013fa0
add rsp, 0x20
pop rax
movabs rcx, 0x14001f0c8
sub rsp, 0x28
call fcn.140018160
add rsp, 0x28
add qword [0x140034aa0], 2
movabs rax, 0x14001f124
push rax
movabs rax, 0x14001e23e
push rax
xor rax, rax
push rax
mov rdx, qword [0x140034ac0]
add qword [rsp + 0x18], rdx
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.14000393b
add rsp, 0x38
pop qword [0x140034aa0]
xor rax, rax
mov qword [0x140034670], rax
jmp 0x1400013f1
movsxd r15, dword [rsp + 0x40]
and r15, r15
jne 0x140006be8
mov rax, 0xfffd
push rax
mov rax, 1
push rax
movabs rax, 0x14001e29e
push rax
movabs rax, 0x14001ea3e
push rax
movabs rax, 0x14001e23e
push rax
xor rax, rax
mov rcx, rax
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.14000393b
add rsp, 0x30
xor rax, rax
mov qword [0x140034670], rax
jmp 0x1400013f1
movsxd r15, dword [rsp + 0x40]
cmp r15, 1
jle 0x140006ce4
push qword [0x140034aa0]
sub rsp, 8
mov rax, 0xfffd
push rax
mov rax, 1
push rax
push qword [0x140034aa0]
movabs rcx, 0x14001f98a
sub rsp, 0x28
call fcn.140018160
add rsp, 0x28
mov rcx, qword [rsp + 0x70]
sub rsp, 0x28
call fcn.140018160
add rsp, 0x28
movabs rcx, 0x14001e85e
sub rsp, 0x28
call fcn.140018160
add rsp, 0x28
movsxd rax, dword [rsp + 0x68]
mov rcx, rax
mov rdx, qword [0x140034aa0]
push rdx
push rdx
pop rdx
sub rsp, 0x20
call fcn.140013fa0
add rsp, 0x20
pop rax
movabs rcx, 0x14001e134
sub rsp, 0x28
call fcn.140018160
add rsp, 0x28
add qword [0x140034aa0], 2
movabs rax, 0x14001ea3e
push rax
movabs rax, 0x14001e23e
push rax
xor rax, rax
push rax
mov rdx, qword [0x140034ac0]
add qword [rsp + 0x18], rdx
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.14000393b
add rsp, 0x38
pop qword [0x140034aa0]
xor rax, rax
mov qword [0x140034670], rax
jmp 0x1400013f1
xor rax, rax
push rax
mov rcx, qword [rsp + 0x50]
sub rsp, 0x28
call fcn.1400182c0
add rsp, 0x28
mov rcx, qword [rsp + 0x60]
sub rsp, 0x28
call fcn.1400182c0
add rsp, 0x28
mov rcx, qword [rsp + 0x30]
sub rsp, 0x28
call fcn.1400182c0
add rsp, 0x28
mov rcx, qword [rsp + 0x40]
sub rsp, 0x28
call fcn.1400182c0
add rsp, 0x28
pop rax
add rsp, 0x60
pop r15
ret