Function at 0x164c9d8f0
Capabilities:
Get common file path
Get disk information
Get disk information via ioctl

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
mov qword [rsp + 8], rcx
push rbp
push r12
push r13
push r14
push r15
mov rbp, rsp
sub rsp, 0x80
mov rax, qword [0x164cf5010]
xor rax, rsp
mov qword [rbp - 0x10], rax
mov r12, qword [rbp + 0x30]
xor r13d, r13d
mov qword [rbp - 0x30], r13
call fcn.164ca23d0
mov rcx, rax
test rax, rax
je 0x164c9dcce
mov rax, qword [rax]
mov rax, qword [rax + 0x18]
call qword [0x164cdeeb8]
lea rsi, [rax + 0x18]
mov qword [rbp - 0x30], rsi
mov qword [rbp - 0x38], r13
call fcn.164ca23d0
mov rcx, rax
test rax, rax
je 0x164c9dcd9
mov rax, qword [rax]
mov rax, qword [rax + 0x18]
call qword [0x164cdeeb8]
lea rdi, [rax + 0x18]
mov qword [rbp - 0x38], rdi
mov qword [rbp - 0x40], r13
call fcn.164ca23d0
mov rcx, rax
test rax, rax
je 0x164c9dcb8
mov rax, qword [rax]
mov rax, qword [rax + 0x18]
call qword [0x164cdeeb8]
lea rbx, [rax + 0x18]
mov qword [rbp - 0x40], rbx
xor eax, eax
mov qword [rbp - 0x20], rax
mov dword [rbp - 0x18], eax
mov dword [rbp - 0x28], r13d
mov r15d, 1
mov ecx, r15d
sub ecx, dword [rsi - 8]
mov eax, dword [rsi - 0xc]
sub eax, 0x105
or eax, ecx
jge 0x164c9d9e1
mov edx, 0x105
lea rcx, [rbp - 0x30]
call fcn.164ca0c00
mov rsi, qword [rbp - 0x30]
mov edx, 0x104
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
test eax, eax
jne 0x164c9d9fe
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r14d, eax
jmp 0x164c9da01
mov r14d, r13d
movsxd rdx, dword [rsi - 0xc]
mov rcx, rsi
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsnlen]
test eax, eax
js 0x164c9dcc3
cmp eax, dword [rsi - 0xc]
jg 0x164c9dcc3
mov dword [rsi - 0x10], eax
cdqe
mov word [rsi + rax*2], r13w
test r14d, r14d
jne 0x164c9dc1b
mov ecx, r15d
sub ecx, dword [rdi - 8]
mov eax, dword [rdi - 0xc]
sub eax, 0x105
or eax, ecx
jge 0x164c9da56
mov edx, 0x105
lea rcx, [rbp - 0x38]
call fcn.164ca0c00
mov rdi, qword [rbp - 0x38]
mov r8d, 0x104
mov rdx, rdi
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetVolumePathNameW]
test eax, eax
jne 0x164c9da75
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r14d, eax
movsxd rdx, dword [rdi - 0xc]
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsnlen]
test eax, eax
js 0x164c9dcc3
cmp eax, dword [rdi - 0xc]
jg 0x164c9dcc3
mov dword [rdi - 0x10], eax
cdqe
mov word [rdi + rax*2], r13w
test r14d, r14d
jne 0x164c9dc1b
mov ecx, r15d
sub ecx, dword [rbx - 8]
mov eax, dword [rbx - 0xc]
sub eax, 0x105
or eax, ecx
jge 0x164c9daca
mov edx, 0x105
lea rcx, [rbp - 0x40]
call fcn.164ca0c00
mov rbx, qword [rbp - 0x40]
mov r8d, 0x104
mov rdx, rbx
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_GetVolumeNameForVolumeMountPointW]
test eax, eax
jne 0x164c9dae9
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r14d, eax
movsxd rdx, dword [rbx - 0xc]
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsnlen]
test eax, eax
js 0x164c9dcc3
cmp eax, dword [rbx - 0xc]
jg 0x164c9dcc3
mov dword [rbx - 0x10], eax
cdqe
mov word [rbx + rax*2], r13w
test r14d, r14d
jne 0x164c9dc1b
mov rcx, rbx
mov rdi, r13
movzx eax, word [rbx]
test ax, ax
je 0x164c9db90
cmp ax, 0x5c
jne 0x164c9db3d
mov rax, rcx
test rdi, rdi
cmovne rax, rdi
mov rdi, rax
jmp 0x164c9db40
mov rdi, r13
add rcx, 2
movzx eax, word [rcx]
test ax, ax
jne 0x164c9db28
test rdi, rdi
je 0x164c9db90
sub rdi, rbx
sar rdi, 1
test edi, edi
js 0x164c9dcc3
sub r15d, dword [rbx - 8]
mov eax, dword [rbx - 0xc]
sub eax, edi
or eax, r15d
jge 0x164c9db7c
mov edx, edi
lea rcx, [rbp - 0x40]
call fcn.164ca0c00
mov rbx, qword [rbp - 0x40]
cmp edi, dword [rbx - 0xc]
jg 0x164c9dcc3
mov dword [rbx - 0x10], edi
movsxd rax, edi
mov word [rbx + rax*2], r13w
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], r13d
mov dword [rsp + 0x20], 3
xor r9d, r9d
xor edx, edx
lea r8d, [r9 + 3]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov rdi, rax
cmp rax, 0xffffffffffffffff
jne 0x164c9dbc8
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r14d, eax
jmp 0x164c9dc1b
mov qword [rsp + 0x38], r13
lea rax, [rbp - 0x28]
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], 0xc
lea rax, [rbp - 0x20]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x2d1080
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
test eax, eax
jne 0x164c9dc0a
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r14d, eax
jmp 0x164c9dc11
mov eax, dword [rbp - 0x1c]
mov dword [r12], eax
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
lea rdx, [rbx - 0x18]
mov ebx, 0xffffffff
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x164c9dc41
mov rcx, qword [rdx]
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [0x164cdeeb8]
nop
mov rdx, qword [rbp - 0x38]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x164c9dc66
mov rcx, qword [rdx]
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [0x164cdeeb8]
nop
mov rdx, qword [rbp - 0x30]
add rdx, 0xffffffffffffffe8
lock xadd dword [rdx + 0x10], ebx
sub ebx, 1
jg 0x164c9dc88
mov rcx, qword [rdx]
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [0x164cdeeb8]
mov eax, r14d
mov rcx, qword [rbp - 0x10]
xor rcx, rsp
call fcn.164cd6f70
lea r11, [rsp + 0x80]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
mov ecx, 0x80004005
call fcn.164ca2080
nop
mov ecx, 0x80070057
call fcn.164ca2080
nop
mov ecx, 0x80004005
call fcn.164ca2080
nop
mov ecx, 0x80004005
call fcn.164ca2080
int3