Function at 0x1800052a4
Capabilities:
Get disk information

Disassembly:
mov r11, rsp
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x520
mov qword [rsp + 0x190], 0xfffffffffffffffe
mov qword [r11 + 0x10], rbx
mov qword [r11 + 0x18], rbp
mov qword [r11 + 0x20], rsi
mov rax, qword [0x1800824d0]
xor rax, rsp
mov qword [rsp + 0x510], rax
mov qword [rsp + 0xf0], rcx
mov qword [r11 - 0x3b0], rcx
xor r12d, r12d
mov ebx, r12d
mov dword [rsp + 0x44], ebx
lea edx, [r12 + 6]
lea rcx, [r11 - 0x3e0]
call fcn.18002afec
nop
lea edx, [r12 + 1]
lea rcx, [rsp + 0x200]
call fcn.180039854
nop
lea ecx, [r12 + 8]
call fcn.18004316c
cmp rax, r12
je 0x18000533b
lea rcx, [rsp + 0x100]
mov qword [rax], rcx
jmp 0x18000533e
mov rax, r12
mov qword [rsp + 0x100], rax
lea rcx, [rsp + 0x100]
call fcn.180002d50
mov qword [rsp + 0x130], rax
mov byte [rax + 0x41], 1
mov rax, qword [rsp + 0x130]
mov qword [rax + 8], rax
mov rax, qword [rsp + 0x130]
mov qword [rax], rax
mov rax, qword [rsp + 0x130]
mov qword [rax + 0x10], rax
mov qword [rsp + 0x138], r12
mov r13, qword [rsp + 0x230]
mov rbp, qword [r13]
mov qword [rsp + 0xd0], rbp
mov rsi, qword [rsp + 0x200]
mov qword [rsp + 0xc8], rsi
mov r14, rsi
cmp rsi, r12
je 0x1800053bb
cmp rsi, r14
je 0x1800053c0
call fcn.180043018
cmp rbp, r13
je 0x18000599b
cmp rsi, r12
jne 0x1800053d8
call fcn.180043018
mov rdx, r12
jmp 0x1800053db
mov rdx, qword [rsi]
cmp rbp, qword [rdx + 0x30]
jne 0x1800053e6
call fcn.180043018
mov dl, byte [rbp + 0x18]
lea rcx, [rsp + 0x2b8]
call fcn.180004240
nop
xor edx, edx
lea rcx, [rsp + 0x2b8]
call fcn.180011768
mov ecx, 0x10000001
mov r12d, 1
xor r15d, r15d
cmp eax, r15d
cmovne r12d, ecx
and dword [rsp + 0xa8], 0xfffffe00
mov qword [rsp + 0xb0], r15
mov qword [rsp + 0xb8], r15
mov qword [rsp + 0xc0], r15
lea rax, [rsp + 0x290]
mov qword [rsp + 0x98], rax
lea rdx, [rsp + 0x2b8]
lea rcx, [rsp + 0x290]
call fcn.18002b148
mov rdi, rax
lea rdx, str.unique
lea rcx, [rsp + 0xa0]
call fcn.18002c6ac
mov rcx, rax
mov rdx, rdi
call fcn.18002b3d4
lea rax, [rsp + 0x2e0]
mov qword [rsp + 0x98], rax
cmp rsi, r15
jne 0x1800054a4
call fcn.180043018
mov rdx, r15
jmp 0x1800054a7
mov rdx, qword [rsi]
cmp rbp, qword [rdx + 0x30]
jne 0x1800054b2
call fcn.180043018
movsx r8d, byte [rbp + 0x18]
lea rdx, [0x180068154]
lea rcx, [rsp + 0x290]
call fcn.1800213d4
nop
mov rdx, rax
lea rcx, [rsp + 0x2e0]
call fcn.18002b148
mov rdi, rax
lea rdx, str.letter
lea rcx, [rsp + 0xa0]
call fcn.18002c6ac
mov rcx, rax
mov rdx, rdi
call fcn.18002b3d4
nop
cmp qword [rsp + 0x2b0], 0x10
jb 0x180005517
mov rcx, qword [rsp + 0x298]
call fcn.180043070
lea rax, [rsp + 0x70]
mov qword [rsp + 0x98], rax
mov byte [rsp + 0x78], 1
btr dword [rsp + 0x78], 8
mov qword [rsp + 0x80], r15
mov qword [rsp + 0x88], r15
mov qword [rsp + 0x90], r15
movsxd rax, r12d
mov qword [rsp + 0x70], rax
lea rdx, str.state
lea rcx, [rsp + 0xa0]
call fcn.18002c6ac
mov rcx, rax
lea rdx, [rsp + 0x70]
call fcn.18002b3d4
xor r12d, r12d
cmp rsi, r12
jne 0x180005582
call fcn.180043018
mov rdx, r12
jmp 0x180005585
mov rdx, qword [rsi]
cmp rbp, qword [rdx + 0x30]
jne 0x180005590
call fcn.180043018
movsx eax, byte [rbp + 0x18]
movzx r8d, ax
lea rdx, [0x180068160]
lea rcx, [rsp + 0x268]
call fcn.18002132c
nop
mov word [rsp + 0x310], r12w
mov r15d, 0xfe
mov r8, r15
xor edx, edx
lea rcx, [rsp + 0x312]
call fcn.180045560
mov word [rsp + 0x410], r12w
mov r8, r15
xor edx, edx
lea rcx, [rsp + 0x412]
call fcn.180045560
lea rcx, [rsp + 0x270]
cmp qword [rsp + 0x288], 8
cmovae rcx, qword [rsp + 0x270]
mov r15d, 0x80
mov dword [rsp + 0x38], r15d
lea rax, [rsp + 0x410]
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], r12
mov qword [rsp + 0x20], r12
xor r9d, r9d
mov r8d, r15d
lea rdx, [rsp + 0x310]
call qword [sym.imp.KERNEL32.dll_GetVolumeInformationW]
cmp eax, r12d
je 0x18000572c
cmp word [rsp + 0x310], r12w
je 0x18000572c
lea rax, [rsp + 0x290]
mov qword [rsp + 0x98], rax
mov qword [rsp + 0x68], 7
mov qword [rsp + 0x60], r12
mov word [rsp + 0x50], r12w
xor eax, eax
or rcx, 0xffffffffffffffff
lea rdi, [rsp + 0x310]
repne scasw ax, word [rdi]
not rcx
lea r8, [rcx - 1]
lea rdx, [rsp + 0x310]
lea rcx, [rsp + 0x48]
call fcn.18000297c
nop
lea rdx, [rsp + 0x48]
lea rcx, [rsp + 0x70]
call fcn.180003fdc
nop
mov rdx, rax
lea rcx, [rsp + 0x290]
call fcn.18002b148
mov rdi, rax
lea rdx, str.label
lea rcx, [rsp + 0xa0]
call fcn.18002c6ac
mov rcx, rax
mov rdx, rdi
call fcn.18002b3d4
nop
cmp qword [rsp + 0x90], 0x10
jb 0x1800056f8
mov rcx, qword [rsp + 0x78]
call fcn.180043070
mov qword [rsp + 0x90], 0xf
mov qword [rsp + 0x88], r12
mov byte [rsp + 0x78], r12b
cmp qword [rsp + 0x68], 8
jb 0x1800057eb
mov rcx, qword [rsp + 0x50]
call fcn.180043070
jmp 0x1800057eb
lea rax, [rsp + 0x290]
mov qword [rsp + 0x98], rax
mov qword [rsp + 0x68], 7
mov qword [rsp + 0x60], r12
mov word [rsp + 0x50], r12w
mov r8d, 5
lea rdx, [0x180068178]
lea rcx, [rsp + 0x48]
call fcn.18000297c
nop
lea rdx, [rsp + 0x48]
lea rcx, [rsp + 0x70]
call fcn.180003fdc
nop
mov rdx, rax
lea rcx, [rsp + 0x290]
call fcn.18002b148
mov rdi, rax
lea rdx, str.label
lea rcx, [rsp + 0xa0]
call fcn.18002c6ac
mov rcx, rax
mov rdx, rdi
call fcn.18002b3d4
nop
cmp qword [rsp + 0x90], 0x10
jb 0x1800057c0
mov rcx, qword [rsp + 0x78]
call fcn.180043070
mov qword [rsp + 0x90], 0xf
mov qword [rsp + 0x88], r12
mov byte [rsp + 0x78], r12b
cmp qword [rsp + 0x68], 8
jb 0x1800057eb
mov rcx, qword [rsp + 0x50]
call fcn.180043070
mov byte [rsp + 0x40], r12b
mov byte [rsp + 0x41], r12b
cmp rsi, r12
jne 0x180005804
call fcn.180043018
mov rdx, r12
jmp 0x180005807
mov rdx, qword [rsi]
cmp rbp, qword [rdx + 0x30]
jne 0x180005812
call fcn.180043018
lea r8, [rsp + 0x41]
lea rdx, [rsp + 0x40]
mov cl, byte [rbp + 0x18]
call fcn.18003ab6c
cmp al, r12b
je 0x180005895
lea rax, [rsp + 0x70]
mov qword [rsp + 0x98], rax
mov al, byte [rsp + 0x40]
neg al
sbb ecx, ecx
and ecx, 0x1000
or ecx, 1
mov byte [rsp + 0x78], 1
btr dword [rsp + 0x78], 8
mov qword [rsp + 0x80], r12
mov qword [rsp + 0x88], r12
mov qword [rsp + 0x90], r12
movsxd rax, ecx
mov qword [rsp + 0x70], rax
lea rdx, str.encryption
lea rcx, [rsp + 0xa0]
call fcn.18002c6ac
mov rcx, rax
lea rdx, [rsp + 0x70]
call fcn.18002b3d4
jmp 0x1800058eb
lea rax, [rsp + 0x70]
mov qword [rsp + 0x98], rax
mov byte [rsp + 0x78], 1
btr dword [rsp + 0x78], 8
mov qword [rsp + 0x80], r12
mov qword [rsp + 0x88], r12
mov qword [rsp + 0x90], r12
mov qword [rsp + 0x70], r12
lea rdx, str.encryption
lea rcx, [rsp + 0xa0]
call fcn.18002c6ac
mov rcx, rax
lea rdx, [rsp + 0x70]
call fcn.18002b3d4
lea rdx, [rsp + 0xa0]
lea rcx, [rsp + 0x168]
call fcn.18002c710
lea r8, [rsp + 0x2b8]
lea rdx, [rsp + 0x1a0]
lea rcx, [rsp + 0x100]
call fcn.180003bc0
nop
cmp qword [rsp + 0x288], 8
jb 0x180005936
mov rcx, qword [rsp + 0x270]
call fcn.180043070
mov qword [rsp + 0x288], 7
mov qword [rsp + 0x280], r12
mov word [rsp + 0x270], r12w
lea rcx, [rsp + 0xa0]
call fcn.18002b33c
nop
cmp qword [rsp + 0x2d8], 0x10
jb 0x180005979
mov rcx, qword [rsp + 0x2c0]
call fcn.180043070
lea rcx, [rsp + 0xc8]
call fcn.180007f88
mov rbp, qword [rsp + 0xd0]
mov rsi, qword [rsp + 0xc8]
jmp 0x1800053b1
lea r8, str.SoftwareWOW6432Nodeprojonepodlpusbmgr_recents_
mov rdx, 0xffffffff80000002
lea rcx, [rsp + 0x1c0]
call fcn.18000408c
nop
mov rdi, qword [rsp + 0x1f0]
mov qword [rsp + 0x98], rdi
mov rax, qword [rdi]
mov qword [rsp + 0xe8], rax
mov r15, qword [rsp + 0x1c0]
mov qword [rsp + 0xe0], r15
movaps xmm0, xmmword [rsp + 0xe0]
movdqa xmmword [rsp + 0xe0], xmm0
mov rbp, qword [rsp + 0xe0]
cmp rbp, r12
je 0x180005a05
cmp rbp, r15
je 0x180005a0a
call fcn.180043018
mov r13, qword [rsp + 0xe8]
cmp r13, rdi
je 0x180006041
cmp rbp, r12
jne 0x180005a2a
call fcn.180043018
mov rdx, r12
jmp 0x180005a2e
mov rdx, qword [rbp]
cmp r13, qword [rdx + 0x30]
jne 0x180005a39
call fcn.180043018
lea rdx, [r13 + 0x18]
lea rcx, [rsp + 0x2b8]
call fcn.180003fdc
nop
cmp qword [rsp + 0x2d0], 8
jne 0x180005add
cmp rbp, r12
jne 0x180005a69
call fcn.180043018
mov rdx, r12
jmp 0x180005a6d
mov rdx, qword [rbp]
cmp r13, qword [rdx + 0x30]
jne 0x180005a78
call fcn.180043018
lea rdx, [r13 + 0x18]
lea rcx, [rsp + 0x290]
call fcn.180003fdc
nop
or ebx, 1
mov dword [rsp + 0x44], ebx
mov r12, qword [rsp + 0x130]
mov rsi, qword [rsp + 0x100]
mov r8, rax
lea rdx, [rsp + 0x1a0]
lea rcx, [rsp + 0x100]
call fcn.180007c00
mov rdi, rax
cmp qword [rax], 0
je 0x180005ac7
cmp qword [rax], rsi
je 0x180005acc
call fcn.180043018
cmp qword [rdi + 8], r12
jne 0x180005ada
mov dil, 1
xor r12d, r12d
jmp 0x180005ae0
xor r12d, r12d
mov dil, r12b
test bl, 1
je 0x180005b04
and ebx, 0xfffffffe
mov dword [rsp + 0x44], ebx
cmp qword [rsp + 0x2b0], 0x10
jb 0x180005b04
mov rcx, qword [rsp + 0x298]
call fcn.180043070
cmp dil, r12b
je 0x18000600f
cmp rbp, r12
jne 0x180005b1c
call fcn.180043018
mov rdx, r12
jmp 0x180005b20
mov rdx, qword [rbp]
cmp r13, qword [rdx + 0x30]
jne 0x180005b2b
call fcn.180043018
cmp qword [r13 + 0x38], 8
jb 0x180005b38
mov r9, qword [r13 + 0x20]
jmp 0x180005b3c
lea r9, [r13 + 0x20]
lea r8, str.SoftwareWOW6432Nodeprojonepodlpusbmgr_recents_
mov rdx, 0xffffffff80000002
lea rcx, [rsp + 0x290]
call fcn.18002182c
nop
and dword [rsp + 0x270], 0xfffffe00
mov qword [rsp + 0x278], r12
mov qword [rsp + 0x280], r12
mov qword [rsp + 0x288], r12
lea rdx, [rsp + 0x290]
lea rcx, [rsp + 0x2e0]
call fcn.180003fdc
nop
or ebx, 2
mov dword [rsp + 0x44], ebx
lea rdx, [rsp + 0x268]
mov rcx, rax
call fcn.18000132c
cmp al, r12b
je 0x180005bbc
cmp byte [rsp + 0x270], 7
jne 0x180005bbc
mov dil, 1
jmp 0x180005bbf
mov dil, r12b
test bl, 2
je 0x180005be3
and ebx, 0xfffffffd
mov dword [rsp + 0x44], ebx
cmp qword [rsp + 0x300], 0x10
jb 0x180005be3
mov rcx, qword [rsp + 0x2e8]
call fcn.180043070
cmp dil, r12b
je 0x180005fe8
mov edi, 0xf
mov qword [rsp + 0x90], rdi
mov qword [rsp + 0x88], r12
mov byte [rsp + 0x78], r12b
lea r8d, [rdi - 0xa]
lea rdx, str.label
lea rcx, [rsp + 0x70]
call fcn.1800026f8
nop
mov qword [rsp + 0x160], rdi
mov qword [rsp + 0x158], r12
mov byte [rsp + 0x148], r12b
xor r8d, r8d
lea rdx, [0x1800677fc]
lea rcx, [rsp + 0x140]
call fcn.1800026f8
lea r9, [rsp + 0x140]
lea r8, [rsp + 0x70]
lea rdx, [rsp + 0x268]
lea rcx, [rsp + 0x2e0]
call fcn.180004158
nop
cmp qword [rsp + 0x90], 0x10
jb 0x180005c83
mov rcx, qword [rsp + 0x78]
call fcn.180043070
mov qword [rsp + 0x90], rdi
mov qword [rsp + 0x88], r12
mov byte [rsp + 0x78], r12b
mov qword [rsp + 0x68], rdi
mov qword [rsp + 0x60], r12
mov byte [rsp + 0x50], r12b
mov r8d, 6
lea rdx, str.action
lea rcx, [rsp + 0x48]
call fcn.1800026f8
nop
cmp byte [rsp + 0x270], 7
jne 0x180005d06
lea rdx, [rsp + 0x48]
lea rcx, [rsp + 0x268]
call fcn.18002c660
mov rcx, rax
call fcn.18002c980
cmp al, r12b
je 0x180005d06
lea rdx, [rsp + 0x48]
lea rcx, [rsp + 0x268]
call fcn.18002c660
mov rcx, rax
call fcn.18002b69c
mov edi, eax
jmp 0x180005d09
mov edi, r12d
cmp qword [rsp + 0x68], 0x10
jb 0x180005d1b
mov rcx, qword [rsp + 0x50]
call fcn.180043070
mov esi, r12d
mov eax, 0x10000
cmp edi, 3
cmove esi, eax
mov eax, 0x8000
cmp edi, 1
cmove esi, eax
mov eax, 0x4000
cmp edi, 2
cmove esi, eax
mov eax, 0x2000
cmp edi, r12d
cmove esi, eax
bts esi, 0xc
xor edx, edx
lea rcx, [rsp + 0x2b8]
call fcn.180011768
cmp eax, r12d
je 0x180005d66
bts esi, 0x1c
and dword [rsp + 0xa8], 0xfffffe00
mov qword [rsp + 0xb0], r12
mov qword [rsp + 0xb8], r12
mov qword [rsp + 0xc0], r12
lea rax, [rsp + 0x48]
mov qword [rsp + 0xc8], rax
lea rdx, [rsp + 0x2b8]
lea rcx, [rsp + 0x48]
call fcn.18002b148
mov rdi, rax
lea rdx, str.unique
lea rcx, [rsp + 0xa0]
call fcn.18002c6ac
mov rcx, rax
mov rdx, rdi
call fcn.18002b3d4
lea rax, [rsp + 0x48]
mov qword [rsp + 0xc8], rax
lea rdx, [0x180068210]
lea rcx, [rsp + 0x48]
call fcn.18002b0a0
mov rdi, rax
lea rdx, str.letter
lea rcx, [rsp + 0xa0]
call fcn.18002c6ac
mov rcx, rax
mov rdx, rdi
call fcn.18002b3d4
lea rax, [rsp + 0x48]
mov qword [rsp + 0xc8], rax
mov byte [rsp + 0x50], 1
btr dword [rsp + 0x50], 8
mov qword [rsp + 0x58], r12
mov qword [rsp + 0x60], r12
mov qword [rsp + 0x68], r12
movsxd rax, esi
mov qword [rsp + 0x48], rax
lea rdx, str.state
lea rcx, [rsp + 0xa0]
call fcn.18002c6ac
mov rcx, rax
lea rdx, [rsp + 0x48]
call fcn.18002b3d4
lea rax, [rsp + 0x240]
mov qword [rsp + 0xc8], rax
cmp qword [rsp + 0x2f8], r12
jne 0x180005eac
mov qword [rsp + 0x68], 0xf
mov qword [rsp + 0x60], r12
mov byte [rsp + 0x50], r12b
mov r8d, 2
lea rdx, [0x180068210]
lea rcx, [rsp + 0x48]
call fcn.1800026f8
lea rdx, [rsp + 0x48]
or ebx, 4
mov dword [rsp + 0x44], ebx
jmp 0x180005eb4
lea rdx, [rsp + 0x2e0]
lea rcx, [rsp + 0x240]
call fcn.18002b148
mov rdi, rax
lea rdx, str.label
lea rcx, [rsp + 0xa0]
call fcn.18002c6ac
mov rcx, rax
mov rdx, rdi
call fcn.18002b3d4
nop
test bl, 4
je 0x180005f02
and ebx, 0xfffffffb
mov dword [rsp + 0x44], ebx
cmp qword [rsp + 0x68], 0x10
jb 0x180005f02
mov rcx, qword [rsp + 0x50]
call fcn.180043070
lea rax, [rsp + 0x48]
mov qword [rsp + 0xc8], rax
mov byte [rsp + 0x50], 1
btr dword [rsp + 0x50], 8
mov qword [rsp + 0x58], r12
mov qword [rsp + 0x60], r12
mov qword [rsp + 0x68], r12
mov qword [rsp + 0x48], 0x10000000
lea rdx, str.encryption
lea rcx, [rsp + 0xa0]
call fcn.18002c6ac
mov rcx, rax
lea rdx, [rsp + 0x48]
call fcn.18002b3d4
lea rdx, [rsp + 0xa0]
lea rcx, [rsp + 0x168]
call fcn.18002c710
cmp rbp, r12
jne 0x180005f77
call fcn.180043018
mov rdx, r12
jmp 0x180005f7b
mov rdx, qword [rbp]
cmp r13, qword [rdx + 0x30]
jne 0x180005f86
call fcn.180043018
lea rdx, [r13 + 0x18]
lea rcx, [rsp + 0x48]
call fcn.180003fdc
nop
mov r8, rax
lea rdx, [rsp + 0xc8]
lea rcx, [rsp + 0x100]
call fcn.180003bc0
nop
cmp qword [rsp + 0x68], 0x10
jb 0x180005fc1
mov rcx, qword [rsp + 0x50]
call fcn.180043070
nop
lea rcx, [rsp + 0xa0]
call fcn.18002b33c
nop
cmp qword [rsp + 0x300], 0x10
jb 0x180005fe8
mov rcx, qword [rsp + 0x2e8]
call fcn.180043070
nop
lea rcx, [rsp + 0x268]
call fcn.18002b33c
nop
cmp qword [rsp + 0x2b0], 8
jb 0x18000600f
mov rcx, qword [rsp + 0x298]
call fcn.180043070
nop
cmp qword [rsp + 0x2d8], 0x10
jb 0x180006027
mov rcx, qword [rsp + 0x2c0]
call fcn.180043070
lea rcx, [rsp + 0xe0]
call fcn.180007d4c
mov rdi, qword [rsp + 0x98]
jmp 0x1800059f3
lea r9, [rsp + 0x168]
lea r8, [0x180068214]
xor edx, edx
mov rdi, qword [rsp + 0xf0]
mov rcx, rdi
call fcn.18001e4d4
or ebx, 8
mov dword [rsp + 0x44], ebx
lea rcx, [rsp + 0x1c0]
call fcn.180007e34
nop
mov rcx, qword [rsp + 0x1c0]
call fcn.180043070
nop
lea rcx, [rsp + 0x100]
call fcn.18000221c
nop
lea rcx, [rsp + 0x200]
call fcn.180007db8
nop
lea rcx, [rsp + 0x168]
call fcn.18002b33c
mov rax, rdi
mov rcx, qword [rsp + 0x510]
xor rcx, rsp
call fcn.180042bb0
lea r11, [rsp + 0x520]
mov rbx, qword [r11 + 0x38]
mov rbp, qword [r11 + 0x40]
mov rsi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret