Function at 0x140004c80
Capabilities:
Get disk information

Disassembly:
mov qword [rsp + 0x18], r8
mov qword [rsp + 8], rcx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0xe0
mov qword [rsp + 0x70], 0xfffffffffffffffe
mov qword [rsp + 0x128], rbx
mov r13, r8
mov r12, rdx
mov rbp, rcx
mov r9, r8
mov edx, 0x110a
mov r8d, 4
mov rcx, qword [rcx + 0x40]
call qword [sym.imp.USER32.dll_SendMessageW]
mov rbx, rax
call fcn.140075174
mov rcx, rax
xor edx, edx
test rax, rax
setne dl
test edx, edx
jne 0x140004cf0
mov ecx, 0x80004005
call fcn.140001000
int3
mov rax, qword [rax]
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetElement]
add rax, 0x18
mov qword [rsp + 0x58], rax
or rsi, 0xffffffffffffffff
test r12, r12
je 0x140004d47
test r12, 0xffffffffffff0000
jne 0x140004d33
movzx edi, r12w
mov ecx, edi
call fcn.140076014
test rax, rax
je 0x140004d5a
mov r8d, edi
mov rdx, rax
lea rcx, [rsp + 0x58]
call fcn.140056a00
jmp 0x140004d5a
xor eax, eax
mov rcx, rsi
mov rdi, r12
repne scasw ax, word [rdi]
not rcx
sub rcx, 1
jmp 0x140004d49
xor ecx, ecx
mov r8d, ecx
mov rdx, r12
lea rcx, [rsp + 0x58]
call fcn.140006a00
nop
test rbx, rbx
je 0x140004e3d
nop
nop
nop
nop
mov r8, rbx
lea rdx, [rsp + 0x60]
mov rcx, rbp
call fcn.1400768b8
nop
mov rdx, qword [rax]
xor eax, eax
test rdx, rdx
setne al
test eax, eax
je 0x140004e32
mov rax, qword [rsp + 0x58]
sub rdx, rax
nop
movzx ecx, word [rax]
cmp cx, word [rax + rdx]
jne 0x140004db6
add rax, 2
test cx, cx
jne 0x140004da0
xor eax, eax
jmp 0x140004dbb
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
sete dil
mov rdx, qword [rsp + 0x60]
add rdx, 0xffffffffffffffe8
mov eax, esi
lock xadd dword [rdx + 0x10], eax
add eax, 0xffffffff
test eax, eax
jg 0x140004de1
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
test dil, dil
jne 0x140004e0c
mov r9, rbx
mov edx, 0x110a
mov r8d, 1
mov rcx, qword [rbp + 0x40]
call qword [sym.imp.USER32.dll_SendMessageW]
mov rbx, rax
test rax, rax
jne 0x140004d70
jmp 0x140004e3d
mov rdx, qword [rsp + 0x58]
add rdx, 0xffffffffffffffe8
lock xadd dword [rdx + 0x10], esi
add esi, 0xffffffff
test esi, esi
jg 0x140004e2a
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
mov rax, rbx
jmp 0x1400051ef
mov ecx, 0x80004005
call fcn.140001000
nop
call fcn.140075174
mov rdx, rax
xor ecx, ecx
test rax, rax
setne cl
test ecx, ecx
jne 0x140004e5c
mov ecx, 0x80004005
call fcn.140001000
int3
mov rax, qword [rax]
mov rcx, rdx
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetElement]
add rax, 0x18
mov qword [rsp + 0x50], rax
call fcn.140075174
mov rdx, rax
xor ecx, ecx
test rax, rax
setne cl
test ecx, ecx
jne 0x140004e8d
mov ecx, 0x80004005
call fcn.140001000
int3
mov rax, qword [rax]
mov rcx, rdx
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetElement]
lea rbx, [rax + 0x18]
mov qword [rsp + 0x68], rbx
lea r8, [rsp + 0x50]
mov rdx, r13
mov rcx, rbp
call fcn.140003780
test r12, r12
jne 0x140004eb9
xor r13d, r13d
jmp 0x140004ecb
xor eax, eax
mov rcx, rsi
mov rdi, r12
repne scasw ax, word [rdi]
not rcx
lea r13, [rcx - 1]
mov r15, r12
mov r14, r12
mov rdi, qword [rsp + 0x50]
sub r14, rdi
sar r14, 1
mov eax, dword [rdi - 0x10]
mov dword [rsp + 0x138], eax
lea ebp, [rax + r13]
mov edx, 1
sub edx, dword [rdi - 8]
mov eax, dword [rdi - 0xc]
sub eax, ebp
or eax, edx
jge 0x140004f0c
mov edx, ebp
lea rcx, [rsp + 0x50]
call fcn.140006b70
mov rdi, qword [rsp + 0x50]
mov eax, dword [rsp + 0x138]
cmp r14, rax
ja 0x140004f1c
lea r15, [rdi + r14*2]
movsxd rdx, r13d
add rdx, rdx
lea rcx, [rdi + rax*2]
mov r9, rdx
mov r8, r15
call fcn.14009d1a0
test ebp, ebp
js 0x1400051e4
cmp ebp, dword [rdi - 0xc]
jg 0x1400051e4
mov dword [rdi - 0x10], ebp
movsxd rax, ebp
mov word [rdi + rax*2], 0
lea rdx, [rsp + 0x50]
mov rbp, qword [rsp + 0x120]
mov rcx, rbp
call fcn.1400046f0
mov edi, eax
mov r13, qword [rsp + 0x130]
cmp r13, 0xffffffffffff0000
jne 0x1400050cf
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_GetDriveTypeW]
sub eax, 2
je 0x140005063
sub eax, 1
je 0x140005031
sub eax, 1
je 0x140004fff
cmp eax, 1
je 0x140004fcd
mov dword [rsp + 0x30], edi
mov qword [rsp + 0x28], 0xffffffffffff0002
mov qword [rsp + 0x20], r13
mov r9d, 5
mov r8d, r9d
mov rdx, r12
mov rcx, rbp
call fcn.1400052b0
mov rdi, rax
jmp 0x140005184
mov dword [rsp + 0x30], edi
mov qword [rsp + 0x28], 0xffffffffffff0002
mov qword [rsp + 0x20], 0xffffffffffff0000
mov r9d, 2
mov r8d, r9d
mov rdx, r12
mov rcx, rbp
call fcn.1400052b0
mov rdi, rax
jmp 0x140005184
mov dword [rsp + 0x30], edi
mov qword [rsp + 0x28], 0xffffffffffff0002
mov qword [rsp + 0x20], 0xffffffffffff0000
mov r9d, 6
mov r8d, r9d
mov rdx, r12
mov rcx, rbp
call fcn.1400052b0
mov rdi, rax
jmp 0x140005184
mov dword [rsp + 0x30], edi
mov qword [rsp + 0x28], 0xffffffffffff0002
mov qword [rsp + 0x20], 0xffffffffffff0000
mov r9d, 5
mov r8d, r9d
invalid
sub al, 0x1d
jmp 0x13c879e14
call qword [rsi + 0x41]
pop rbx
pop rbx