Function at 0x140085900
Capabilities:
Get disk information
Get storage device properties

Disassembly:
push rbp
sub rsp, 0x700
lea rbp, [rsp + 0x80]
mov qword [rbp + 0x678], 0xfffffffffffffffe
mov dword [rbp + 0xdc], r8d
mov qword [rbp + 0xe0], rcx
mov qword [rbp + 0xe8], rcx
mov qword [rbp + 0x530], rdx
mov rax, qword [rbp + 0x530]
mov rax, qword [rax]
mov qword [rbp + 0x538], rax
mov dword [rbp + 0x544], r8d
mov rax, qword [rdx]
mov eax, dword [rax]
mov dword [rbp + 0xf0], eax
cmp r8d, 0x20
jae 0x14008597b
mov eax, dword [rbp + 0xf0]
mov ecx, dword [rbp + 0xdc]
and ecx, 0x1f
shr eax, cl
and eax, 1
cmp eax, 0
je 0x140085987
jmp 0x140085997
lea rcx, str.C:Users_tuzki.cargo_registry_srcindex.crates.io_6f17d22bba15001f_sysinfo_0.29.11_srcwindowsdisk.rs
call fcn.1400eb7e0
mov rax, qword [rbp + 0xe0]
mov qword [rax], 3
jmp 0x1400859b5
mov eax, dword [rbp + 0xdc]
add ax, 0x41
mov word [rbp + 0xda], ax
setb al
test al, 1
jne 0x140085a3f
jmp 0x1400859c5
mov rax, qword [rbp + 0xe8]
add rsp, 0x700
pop rbp
ret
mov ax, word [rbp + 0xda]
mov word [rbp + 0xf6], ax
mov word [rbp + 0xf8], 0x3a
mov word [rbp + 0xfa], 0x5c
mov word [rbp + 0xfc], 0
lea rax, [rbp + 0xf6]
mov qword [rbp + 0x668], rax
mov qword [rbp + 0x670], 4
lea rcx, [rbp + 0xf6]
call sub.kernel32.dll_GetDriveTypeW
mov dword [rbp + 0xd4], eax
mov dword [rbp + 0x548], eax
cmp eax, 2
sete cl
mov byte [rbp + 0xd9], cl
and cl, 1
mov byte [rbp + 0x54f], cl
cmp eax, 3
jne 0x140085b4b
jmp 0x140085a4b
lea rcx, str.C:Users_tuzki.cargo_registry_srcindex.crates.io_6f17d22bba15001f_sysinfo_0.29.11_srcwindowsdisk.rs
call fcn.1400eb720
lea rcx, [rbp + 0xfe]
xor edx, edx
mov r8d, 0x20a
call sub.VCRUNTIME140.dll_memset
lea rcx, [rbp + 0x308]
xor edx, edx
mov r8d, 0x40
call sub.VCRUNTIME140.dll_memset
lea rax, [rbp + 0xf6]
mov qword [rbp + 0x658], rax
mov qword [rbp + 0x660], 4
lea rax, [rbp + 0xfe]
mov qword [rbp + 0x648], rax
mov qword [rbp + 0x650], 0x105
mov qword [rbp + 0x618], 0
mov qword [rbp + 0x620], 0
mov qword [rbp + 0x608], 0
mov qword [rbp + 0x610], 0
mov qword [rbp + 0x5f8], 0
mov qword [rbp + 0x600], 0
lea rax, [rbp + 0x308]
mov qword [rbp + 0x638], rax
mov qword [rbp + 0x640], 0x20
lea rcx, [rbp + 0xf6]
lea rdx, [rbp + 0xfe]
mov r8d, 0x105
xor eax, eax
mov r9d, eax
lea rax, [rbp + 0x308]
mov qword [rsp + 0x20], 0
mov qword [rsp + 0x28], 0
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x38], 0x20
call sub.kernel32.dll_GetVolumeInformationW
cmp eax, 0
je 0x140085b6d
jmp 0x140085b80
mov eax, dword [rbp + 0xd4]
cmp eax, 2
je 0x140085a4b
mov rax, qword [rbp + 0xe0]
mov qword [rax], 3
jmp 0x1400859b5
mov rax, qword [rbp + 0xe0]
mov qword [rax], 3
jmp 0x1400859b5
mov qword [rbp + 0x348], 0
lea rcx, [rbp + 0xfe]
mov edx, 0x105
call fcn.14007a5b0
mov rcx, rax
call fcn.14007d5d0
mov qword [rbp + 0x350], rax
mov qword [rbp + 0x358], rdx
lea rcx, [rbp + 0x350]
call fcn.14007e070
mov qword [rbp + 0x360], rax
mov rax, qword [rbp + 0x360]
cmp rax, 0
sete al
test al, 1
jne 0x140085bd9
jmp 0x140085c33
mov rdx, qword [rbp + 0x348]
lea r8, str.C:Users_tuzki.cargo_registry_srcindex.crates.io_6f17d22bba15001f_sysinfo_0.29.11_srcwindowsdisk.rs
lea rcx, [rbp + 0xfe]
call fcn.14005a9e0
mov qword [rbp + 0xb0], rax
mov r8, rdx
mov rdx, qword [rbp + 0xb0]
lea rcx, [rbp + 0x368]
mov qword [rbp + 0xb8], rcx
call fcn.140063b10
mov rcx, qword [rbp + 0xb8]
call fcn.140055030
mov qword [rbp + 0xc0], rdx
mov qword [rbp + 0xc8], rax
jmp 0x140085c67
mov rax, qword [rbp + 0x360]
mov qword [rbp + 0x550], rax
cmp word [rax], 0
je 0x140085bd9
mov rax, qword [rbp + 0x348]
add rax, 1
mov qword [rbp + 0xa8], rax
setb al
jb 0x1400862dd
jmp 0x1400862ca
mov rax, qword [rbp + 0xc0]
mov rcx, qword [rbp + 0xc8]
mov rdx, rcx
mov qword [rbp + 0x88], rdx
mov rdx, rax
mov qword [rbp + 0x90], rdx
mov qword [rbp + 0x558], rcx
mov qword [rbp + 0x560], rax
mov qword [rbp + 0x348], 0
lea rcx, [rbp + 0x308]
mov edx, 0x20
call fcn.14007a5b0
mov qword [rbp + 0x98], rdx
mov qword [rbp + 0xa0], rax
jmp 0x140085cc3
mov rdx, qword [rbp + 0x98]
mov rcx, qword [rbp + 0xa0]
call fcn.14007d5d0
mov qword [rbp + 0x78], rdx
mov qword [rbp + 0x80], rax
jmp 0x140085ce3
mov rax, qword [rbp + 0x78]
mov rcx, qword [rbp + 0x80]
mov qword [rbp + 0x380], rcx
mov qword [rbp + 0x388], rax
lea rcx, [rbp + 0x380]
call fcn.14007e070
mov qword [rbp + 0x70], rax
jmp 0x140085d0e
mov rax, qword [rbp + 0x70]
mov qword [rbp + 0x390], rax
mov rax, qword [rbp + 0x390]
cmp rax, 0
sete al
test al, 1
jne 0x140085d2d
jmp 0x140085d51
mov rdx, qword [rbp + 0x348]
lea r8, str.C:Users_tuzki.cargo_registry_srcindex.crates.io_6f17d22bba15001f_sysinfo_0.29.11_srcwindowsdisk.rs
lea rcx, [rbp + 0x308]
call fcn.14005a930
mov qword [rbp + 0x60], rdx
mov qword [rbp + 0x68], rax
jmp 0x140085d82
mov rax, qword [rbp + 0x390]
mov qword [rbp + 0x568], rax
cmp word [rax], 0
je 0x140085d2d
mov rax, qword [rbp + 0x348]
add rax, 1
mov qword [rbp + 0x58], rax
setb al
jb 0x1400862b9
jmp 0x1400862a9
mov rdx, qword [rbp + 0x60]
mov rcx, qword [rbp + 0x68]
call fcn.14007a5b0
mov qword [rbp + 0x48], rdx
mov qword [rbp + 0x50], rax
jmp 0x140085d99
mov rdx, qword [rbp + 0x48]
mov rcx, qword [rbp + 0x50]
call fcn.14007d350
mov qword [rbp + 0x38], rdx
mov qword [rbp + 0x40], rax
jmp 0x140085db0
mov r8, qword [rbp + 0x38]
mov rdx, qword [rbp + 0x40]
lea rcx, [rbp + 0x398]
call fcn.14007a000
jmp 0x140085dc6
mov eax, dword [rbp + 0xdc]
add ax, 0x41
mov word [rbp + 0x36], ax
setb al
test al, 1
jne 0x140085e3a
mov ax, word [rbp + 0x36]
mov word [rbp + 0x3b2], 0x5c
mov word [rbp + 0x3b4], 0x5c
mov word [rbp + 0x3b6], 0x2e
mov word [rbp + 0x3b8], 0x5c
mov word [rbp + 0x3ba], ax
mov word [rbp + 0x3bc], 0x3a
mov word [rbp + 0x3be], 0
lea rcx, [rbp + 0x3b2]
mov edx, 7
xor r8d, r8d
call fcn.140085560
mov qword [rbp + 0x20], rdx
mov qword [rbp + 0x28], rax
jmp 0x140085e4a
lea rcx, str.C:Users_tuzki.cargo_registry_srcindex.crates.io_6f17d22bba15001f_sysinfo_0.29.11_srcwindowsdisk.rs
call fcn.1400eb720
jmp 0x140085e48
ud2
mov rdx, qword [rbp + 0x20]
mov rcx, qword [rbp + 0x28]
call fcn.14007d140
mov qword [rbp + 0x10], rdx
mov qword [rbp + 0x18], rax
jmp 0x140085e61
mov rax, qword [rbp + 0x10]
mov rcx, qword [rbp + 0x18]
mov qword [rbp + 0x3c8], rcx
mov qword [rbp + 0x3d0], rax
cmp qword [rbp + 0x3c8], 0
jne 0x140085eb1
mov rax, qword [rbp + 0x3d0]
mov qword [rbp + 0x570], rax
mov qword [rbp + 0x3c0], rax
lea rcx, [rbp + 0x3f0]
lea rdx, [rbp + 0xf6]
mov r8d, 4
call fcn.140085660
jmp 0x140085ec2
mov rcx, qword [rbp + 0xe0]
call fcn.14007d1b0
jmp 0x140086296
lea rcx, [rbp + 0x3d8]
lea rdx, [rbp + 0x3f0]
call fcn.14007d020
jmp 0x140085ed7
cmp qword [rbp + 0x3d8], 0
jne 0x140085f1b
mov rax, qword [rbp + 0x3e0]
mov qword [rbp], rax
mov rcx, qword [rbp + 0x3e8]
mov qword [rbp + 8], rcx
mov qword [rbp + 0x578], rax
mov qword [rbp + 0x580], rcx
mov qword [rbp + 0x588], rax
mov qword [rbp + 0x590], rcx
cmp rax, 0
je 0x140085f2c
jmp 0x140085f3f
mov rcx, qword [rbp + 0xe0]
call fcn.14007d1b0
jmp 0x140086283
mov rax, qword [rbp + 0xe0]
mov qword [rax], 3
jmp 0x140086077
mov byte [rbp + 0x417], 0
mov dword [rbp + 0x408], 7
mov dword [rbp + 0x40c], 0
mov al, byte [rbp + 0x417]
mov byte [rbp + 0x410], al
mov byte [rbp + 0x59f], 0
mov qword [rbp + 0x5a0], 1
mov byte [rbp + 0x5af], 0
mov qword [rbp + 0x5b0], 1
lea rcx, [rbp + 0x5c8]
mov qword [rbp + 0x5e8], rcx
mov qword [rbp + 0x5f0], rcx
mov edx, 4
call fcn.14005a1b0
mov dword [rbp + 0x5d0], 0
mov qword [rbp + 0x5c8], 0
mov eax, dword [rbp + 0x5d0]
mov dword [rbp + 0x5c0], eax
mov rax, qword [rbp + 0x5c8]
mov qword [rbp + 0x5b8], rax
mov eax, dword [rbp + 0x5c0]
mov dword [rbp + 0x5e0], eax
mov rax, qword [rbp + 0x5b8]
mov qword [rbp + 0x5d8], rax
mov eax, dword [rbp + 0x5e0]
mov dword [rbp + 0x420], eax
mov rax, qword [rbp + 0x5d8]
mov qword [rbp + 0x418], rax
mov dword [rbp + 0x424], 0
mov rcx, qword [rbp + 0x3c0]
mov qword [rbp + 0x628], 0
mov qword [rbp + 0x630], 0
mov rax, rsp
lea rdx, [rbp + 0x424]
mov qword [rax + 0x30], rdx
lea rdx, [rbp + 0x418]
mov qword [rax + 0x20], rdx
mov qword [rax + 0x38], 0
mov dword [rax + 0x28], 0xc
mov edx, 0x2d1400
lea r8, [rbp + 0x408]
mov r9d, 0xc
call sub.kernel32.dll_DeviceIoControl
mov dword [rbp - 4], eax
jmp 0x140086088
lea rcx, [rbp + 0x3c0]
call fcn.1400620a0
jmp 0x140086288
mov eax, dword [rbp - 4]
cmp eax, 0
jne 0x1400860a8
mov qword [rbp + 0x430], 0xffffffffffffffff
mov qword [rbp + 0x428], 2
jmp 0x1400860e2
cmp dword [rbp + 0x424], 0xc
jne 0x140086090
cmp byte [rbp + 0x420], 0
sete al
mov cl, al
and cl, 1
mov byte [rbp + 0x59e], cl
test al, 1
jne 0x1400860d7
mov qword [rbp + 0x428], 0
jmp 0x1400860e2
mov qword [rbp + 0x428], 1
mov r8, qword [rbp + 0x90]
mov rdx, qword [rbp + 0x88]
mov rax, qword [rbp + 0x428]
mov qword [rbp - 0x18], rax
mov rax, qword [rbp + 0x430]
mov qword [rbp - 0x10], rax
lea rcx, [rbp + 0x4c8]
call fcn.1400564d0
jmp 0x140086114
lea rcx, [rbp + 0x398]
call fcn.14006eee0
mov qword [rbp - 0x28], rdx
mov qword [rbp - 0x20], rax
jmp 0x14008612a
mov r8, qword [rbp - 0x28]
mov rdx, qword [rbp - 0x20]
lea rcx, [rbp + 0x4e8]
call fcn.140063ab0
jmp 0x140086140
lea rcx, [rbp + 0x500]
lea rdx, [rbp + 0xf6]
mov r8d, 4
call fcn.140063a80
jmp 0x14008615b
lea r8, str.C:Users_tuzki.cargo_registry_srcindex.crates.io_6f17d22bba15001f_sysinfo_0.29.11_srcwindowsdisk.rs
lea rcx, [rbp + 0xf6]
mov edx, 3
call fcn.14005aa90
mov qword [rbp - 0x38], rdx
mov qword [rbp - 0x30], rax
jmp 0x14008617d
mov r8, qword [rbp - 0x38]
mov rdx, qword [rbp - 0x30]
lea rcx, [rbp + 0x518]
call fcn.140063b10
jmp 0x140086193
mov rcx, qword [rbp + 0xe0]
mov al, byte [rbp + 0xd9]
mov rdx, qword [rbp + 8]
mov r8, qword [rbp]
mov r9, qword [rbp - 0x10]
mov r10, qword [rbp - 0x18]
mov qword [rbp + 0x438], r10
mov qword [rbp + 0x440], r9
movups xmm0, xmmword [rbp + 0x4c8]
movups xmm1, xmmword [rbp + 0x4d8]
movups xmmword [rbp + 0x458], xmm1
movups xmmword [rbp + 0x448], xmm0
mov r9, qword [rbp + 0x4f8]
mov qword [rbp + 0x478], r9
movups xmm0, xmmword [rbp + 0x4e8]
movups xmmword [rbp + 0x468], xmm0
mov r9, qword [rbp + 0x510]
mov qword [rbp + 0x490], r9
movups xmm0, xmmword [rbp + 0x500]
movups xmmword [rbp + 0x480], xmm0
mov r9, qword [rbp + 0x528]
mov qword [rbp + 0x4a8], r9
movups xmm0, xmmword [rbp + 0x518]
movups xmmword [rbp + 0x498], xmm0
mov qword [rbp + 0x4b0], r8
mov qword [rbp + 0x4b8], rdx
and al, 1
mov byte [rbp + 0x4c0], al
lea rdx, [rbp + 0x438]
mov r8d, 0x90
call sub.VCRUNTIME140.dll_memcpy
lea rcx, [rbp + 0x3c0]
call fcn.1400620a0
jmp 0x140086264
lea rcx, [rbp + 0x398]
call fcn.1400a2cb0
jmp 0x140086272
lea rcx, [rbp + 0x368]
call fcn.1400a2c00
jmp 0x1400859b5
jmp 0x140086077
lea rcx, [rbp + 0x398]
call fcn.1400a2cb0
jmp 0x140086298
jmp 0x140086288
lea rcx, [rbp + 0x368]
call fcn.1400a2c00
jmp 0x1400859b5
mov rax, qword [rbp + 0x58]
mov qword [rbp + 0x348], rax
jmp 0x140085cfc
lea rcx, str.C:Users_tuzki.cargo_registry_srcindex.crates.io_6f17d22bba15001f_sysinfo_0.29.11_srcwindowsdisk.rs
call fcn.1400eb720
jmp 0x140085e48
mov rax, qword [rbp + 0xa8]
mov qword [rbp + 0x348], rax
jmp 0x140085bb2
lea rcx, str.C:Users_tuzki.cargo_registry_srcindex.crates.io_6f17d22bba15001f_sysinfo_0.29.11_srcwindowsdisk.rs
call fcn.1400eb720
int3