Function at 0x1400e5300
Capabilities:
Get disk information

Disassembly:
mov rax, rsp
mov qword [rax + 0x18], r8
mov qword [rax + 0x10], rdx
mov qword [rax + 8], rcx
push rbp
push rsi
push rdi
lea rbp, [rax - 0x5f]
sub rsp, 0x90
mov qword [rbp + 0xf], 0xfffffffffffffffe
mov qword [rax + 0x20], rbx
xor edi, edi
mov dword [rbp - 0x19], edi
lea rcx, section..data
mov rax, qword [section..data]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x21], rax
lea rcx, section..data
mov rax, qword [section..data]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x29], rax
lea rcx, section..data
mov rax, qword [section..data]
call qword [rax + 0x18]
lea rbx, [rax + 0x18]
mov qword [rbp + 0x27], rbx
mov qword [rbp + 0x2f], rdi
mov qword [rbp + 0x37], rdi
mov rdx, qword [rbp - 0x21]
mov ecx, 1
sub ecx, dword [rdx - 8]
mov eax, dword [rdx - 0xc]
sub eax, 0x104
or eax, ecx
jge 0x1400e53ab
mov edx, 0x104
lea rcx, [rbp - 0x21]
call fcn.14001e8d0
mov rdx, qword [rbp - 0x21]
mov rax, qword [rbp + 0x77]
mov r8d, 0x104
mov rcx, qword [rax]
call qword [sym.imp.KERNEL32.dll_GetVolumePathNameW]
mov esi, eax
mov rcx, qword [rbp - 0x21]
movsxd rdx, dword [rcx - 0xc]
call fcn.14005e508
test eax, eax
js 0x1400e574c
mov rcx, qword [rbp - 0x21]
cmp eax, dword [rcx - 0xc]
jg 0x1400e574c
mov dword [rcx - 0x10], eax
movsxd rcx, eax
mov rax, qword [rbp - 0x21]
mov word [rax + rcx*2], di
test esi, esi
je 0x1400e56ac
mov rdx, qword [rbp - 0x29]
mov ecx, 1
sub ecx, dword [rdx - 8]
mov eax, dword [rdx - 0xc]
sub eax, 0x104
or eax, ecx
jge 0x1400e5422
mov edx, 0x104
lea rcx, [rbp - 0x29]
call fcn.14001e8d0
mov rdx, qword [rbp - 0x29]
mov r8d, 0x104
mov rcx, qword [rbp - 0x21]
call qword [sym.imp.KERNEL32.dll_GetVolumeNameForVolumeMountPointW]
mov esi, eax
mov rcx, qword [rbp - 0x29]
movsxd rdx, dword [rcx - 0xc]
call fcn.14005e508
test eax, eax
js 0x1400e56a1
mov rcx, qword [rbp - 0x29]
cmp eax, dword [rcx - 0xc]
jg 0x1400e56a1
mov dword [rcx - 0x10], eax
movsxd rcx, eax
mov rax, qword [rbp - 0x29]
mov word [rax + rcx*2], di
test esi, esi
je 0x1400e56ac
mov rsi, qword [rbp + 0x67]
mov r10, qword [rsi + 0x60]
mov r8, qword [r10 + 8]
mov rcx, qword [rbp - 0x29]
cmp byte [r8 + 0x31], 0
jne 0x1400e54e5
mov r11d, edi
test rcx, rcx
setne r11b
nop dword [rax]
test r11d, r11d
je 0x1400e54da
mov rax, qword [r8 + 0x18]
mov r9, rcx
sub r9, rax
nop
movzx edx, word [rax]
cmp dx, word [rax + r9]
jne 0x1400e54b7
add rax, 2
test dx, dx
jne 0x1400e54a0
mov eax, edi
jmp 0x1400e54bc
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
sets al
test al, al
je 0x1400e54cb
mov r8, qword [r8 + 0x10]
jmp 0x1400e54d1
mov r10, r8
mov r8, qword [r8]
cmp byte [r8 + 0x31], 0
je 0x1400e5490
jmp 0x1400e54e5
mov ecx, 0x80004005
call fcn.14001e940
int3
mov qword [rbp - 9], r10
mov rdx, qword [rsi + 0x60]
cmp r10, rdx
je 0x1400e5540
mov r9, qword [r10 + 0x18]
mov eax, edi
test r9, r9
setne al
test eax, eax
jne 0x1400e550d
mov ecx, 0x80004005
call fcn.14001e940
int3
mov rax, rcx
sub r9, rcx
movzx r8d, word [rax]
cmp r8w, word [rax + r9]
jne 0x1400e552c
add rax, 2
test r8w, r8w
jne 0x1400e5513
mov eax, edi
jmp 0x1400e5531
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
sets al
test al, al
jne 0x1400e5540
lea rax, [rbp - 9]
jmp 0x1400e5548
mov qword [rbp - 1], rdx
lea rax, [rbp - 1]
mov rax, qword [rax]
mov qword [rbp + 0x17], rax
cmp rax, rdx
je 0x1400e56ac
mov r11, rdx
mov r9, qword [rdx + 8]
cmp byte [r9 + 0x31], 0
jne 0x1400e55c7
mov esi, edi
test rcx, rcx
setne sil
nop
test esi, esi
je 0x1400e55bc
mov rax, qword [r9 + 0x18]
mov r10, rcx
sub r10, rax
nop
movzx r8d, word [rax]
cmp r8w, word [rax + r10]
jne 0x1400e5599
add rax, 2
test r8w, r8w
jne 0x1400e5580
mov eax, edi
jmp 0x1400e559e
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
sets al
test al, al
je 0x1400e55ad
mov r9, qword [r9 + 0x10]
jmp 0x1400e55b3
mov r11, r9
mov r9, qword [r9]
cmp byte [r9 + 0x31], 0
je 0x1400e5570
jmp 0x1400e55c7
mov ecx, 0x80004005
call fcn.14001e940
int3
mov qword [rbp - 0x11], r11
cmp r11, rdx
je 0x1400e5619
mov r8, qword [r11 + 0x18]
mov eax, edi
test r8, r8
setne al
test eax, eax
jne 0x1400e55eb
mov ecx, 0x80004005
call fcn.14001e940
int3
sub r8, rcx
nop
movzx eax, word [rcx]
cmp ax, word [rcx + r8]
jne 0x1400e5605
add rcx, 2
test ax, ax
jne 0x1400e55f0
jmp 0x1400e560a
sbb edi, edi
sbb edi, 0xffffffff
test edi, edi
sets al
test al, al
jne 0x1400e5619
lea rax, [rbp - 0x11]
jmp 0x1400e5621
mov qword [rbp + 7], rdx
lea rax, [rbp + 7]
mov rax, qword [rax]
mov qword [rbp + 0x1f], rax
mov rdi, qword [rbp + 0x6f]
mov rdx, rdi
mov rcx, qword [rax + 0x20]
call fcn.140001bd0
mov dword [rbp - 0x19], 1
lea rdx, [rbx - 0x18]
or ebx, 0xffffffff
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x1400e565d
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rdx, qword [rbp - 0x29]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x1400e567c
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rdx, qword [rbp - 0x21]
add rdx, 0xffffffffffffffe8
lock xadd dword [rdx + 0x10], ebx
dec ebx
test ebx, ebx
jg 0x1400e5699
mov rcx, qword [rdx]
mov r8, qword [rcx]
call qword [r8 + 8]
mov rax, rdi
jmp 0x1400e5757
mov ecx, 0x80070057
call fcn.14001e940
int3
lea rcx, section..data
mov rax, qword [section..data]
call qword [rax + 0x18]
add rax, 0x18
mov rdi, qword [rbp + 0x6f]
mov qword [rdi], rax
lea rdx, [0x14011c664]
test rdx, 0xffffffffffff0000
jne 0x1400e56f7
movzx esi, dx
mov ecx, esi
call fcn.14001df50
test rax, rax
je 0x1400e5703
mov r8d, esi
mov rdx, rax
mov rcx, rdi
call fcn.14001e130
jmp 0x1400e5703
xor r8d, r8d
mov rcx, rdi
call fcn.14001e490
nop
mov dword [rbp - 0x19], 1
lea rdx, [rbx - 0x18]
or ebx, 0xffffffff
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x1400e5728
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
mov rdx, qword [rbp - 0x29]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x1400e5747
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
nop
jmp 0x1400e567c
mov ecx, 0x80070057
call fcn.14001e940
nop
mov rbx, qword [rsp + 0xc8]
add rsp, 0x90
pop rdi
pop rsi
pop rbp
ret