Function at 0x14000d3c8
Capabilities:
Get disk information via ioctl

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x20], rsi
push rdi
push r14
push r15
sub rsp, 0x40
mov r14, rcx
mov r15, rdx
mov rcx, qword gs:[0x60]
mov ebp, 0x4830
mov r8d, ebp
xor edx, edx
xor esi, esi
mov rcx, qword [rcx + 0x30]
call qword [sym.imp.ntdll.dll_RtlAllocateHeap]
nop dword [rax + rax]
mov rdi, rax
test rax, rax
jne 0x14000d489
mov ebx, 0x5aa
jmp 0x14000d6a5
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
mov ebx, eax
cmp eax, 0x7a
je 0x14000d43b
cmp eax, 0xea
jne 0x14000d4c5
mov rcx, qword gs:[0x60]
mov r8, rdi
xor edx, edx
mov rcx, qword [rcx + 0x30]
call qword [sym.imp.ntdll.dll_RtlFreeHeap]
nop dword [rax + rax]
mov rcx, qword gs:[0x60]
add ebp, 0x2400
mov r8d, ebp
xor edx, edx
mov rcx, qword [rcx + 0x30]
call qword [sym.imp.ntdll.dll_RtlAllocateHeap]
nop dword [rax + rax]
mov rdi, rax
test rax, rax
je 0x14000d5dd
and qword [rsp + 0x38], rsi
lea rax, [rsp + 0x70]
mov qword [rsp + 0x30], rax
xor r9d, r9d
mov dword [rsp + 0x28], ebp
xor r8d, r8d
mov edx, 0x70050
mov qword [rsp + 0x20], rdi
mov rcx, r14
call qword [sym.imp.api_ms_win_core_io_l1_1_0.dll_DeviceIoControl]
nop dword [rax + rax]
test eax, eax
je 0x14000d41d
xor ebx, ebx
test ebx, ebx
je 0x14000d658
mov ebp, 0x808
mov r8d, ebp
jmp 0x14000d526
mov ebx, 0x5aa
jmp 0x14000d682
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
mov ebx, eax
cmp eax, 0x7a
je 0x14000d4ff
cmp eax, 0xea
jne 0x14000d586
mov rcx, qword gs:[0x60]
mov r8, rsi
xor edx, edx
mov rcx, qword [rcx + 0x30]
call qword [sym.imp.ntdll.dll_RtlFreeHeap]
nop dword [rax + rax]
add ebp, 0x800
mov r8d, ebp
mov rcx, qword gs:[0x60]
xor edx, edx
mov rcx, qword [rcx + 0x30]
call qword [sym.imp.ntdll.dll_RtlAllocateHeap]
nop dword [rax + rax]
mov rsi, rax
test rax, rax
je 0x14000d4d7
and qword [rsp + 0x38], 0
lea rax, [rsp + 0x70]
mov qword [rsp + 0x30], rax
xor r9d, r9d
mov dword [rsp + 0x28], ebp
xor r8d, r8d
mov edx, 0x7400c
mov qword [rsp + 0x20], rsi
mov rcx, r14
call qword [sym.imp.api_ms_win_core_io_l1_1_0.dll_DeviceIoControl]
nop dword [rax + rax]
test eax, eax
je 0x14000d4e1
xor ebx, ebx
test ebx, ebx
jne 0x14000d65b
mov rcx, qword gs:[0x60]
mov r8, rdi
xor edx, edx
mov rcx, qword [rcx + 0x30]
call qword [sym.imp.ntdll.dll_RtlFreeHeap]
nop dword [rax + rax]
mov eax, dword [rsi]
xor edx, edx
mov rcx, qword gs:[0x60]
lea ebp, [rax + rax*8]
mov rcx, qword [rcx + 0x30]
shl ebp, 4
add ebp, 0x30
mov r8d, ebp
call qword [sym.imp.ntdll.dll_RtlAllocateHeap]
nop dword [rax + rax]
mov rdi, rax
test rax, rax
jne 0x14000d5e4
mov ebx, 0x5aa
jmp 0x14000d65b
mov r8, rbp
xor edx, edx
mov rcx, rdi
call sub.msvcrt.dll_memset
and dword [rdi], 0
lea rdx, [rsi + 8]
mov eax, dword [rsi]
lea rcx, [rdi + 0x30]
mov dword [rdi + 4], eax
xor r8d, r8d
mov eax, dword [rsi + 4]
mov dword [rdi + 8], eax
cmp dword [rsi], r8d
jbe 0x14000d658
and dword [rcx], 0
inc r8d
mov rax, qword [rdx]
lea rdx, [rdx + 0x20]
mov qword [rcx + 8], rax
lea rcx, [rcx + 0x90]
mov rax, qword [rdx - 0x18]
mov qword [rcx - 0x80], rax
mov eax, dword [rdx - 0xc]
mov dword [rcx - 0x78], eax
mov al, byte [rdx - 5]
mov byte [rcx - 0x74], al
mov al, byte [rdx - 8]
mov byte [rcx - 0x70], al
mov al, byte [rdx - 7]
mov byte [rcx - 0x6f], al
mov al, byte [rdx - 6]
mov byte [rcx - 0x6e], al
mov eax, dword [rdx - 0x10]
mov dword [rcx - 0x6c], eax
cmp r8d, dword [rsi]
jb 0x14000d60f
mov qword [r15], rdi
test rsi, rsi
je 0x14000d67e
mov rcx, qword gs:[0x60]
mov r8, rsi
xor edx, edx
mov rcx, qword [rcx + 0x30]
call qword [sym.imp.ntdll.dll_RtlFreeHeap]
nop dword [rax + rax]
test ebx, ebx
je 0x14000d6a5
test rdi, rdi
je 0x14000d6a5
mov rcx, qword gs:[0x60]
mov r8, rdi
xor edx, edx
mov rcx, qword [rcx + 0x30]
call qword [sym.imp.ntdll.dll_RtlFreeHeap]
nop dword [rax + rax]
mov rbp, qword [rsp + 0x68]
mov eax, ebx
mov rbx, qword [rsp + 0x60]
mov rsi, qword [rsp + 0x78]
add rsp, 0x40
pop r15
pop r14
pop rdi
ret