Function at 0x1400716d0
Capabilities:
Get disk information
Get disk information via ioctl

Disassembly:
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x238
xor r14d, r14d
mov eax, 0xffdf
movzx ebp, r8w
mov ebx, r8d
lea r15d, [r14 + 1]
mov r12, rdx
sar ebx, 0x10
mov r13, rcx
mov esi, r14d
and bx, ax
movzx eax, bp
and ax, 0x20
mov word [rsp + 0x290], ax
test r15b, bpl
je 0x140071730
test bpl, 8
je 0x140071730
lea esi, [r14 + 8]
and ebp, 0xfffffff7
mov rax, rdx
neg rax
sbb ecx, ecx
not ecx
and ecx, 0x200
add ecx, 0x800
movsxd rdx, ecx
lea rcx, [rsp + 0x68]
call fcn.14005f7a0
mov rdi, qword [rsp + 0x68]
cmp r12, r14
jne 0x14007176c
lea rax, [rdi + 0x800]
mov qword [rsp + 0x288], rax
movdqu xmm0, xmmword [0x1401178d0]
lea rdx, [0x140000000]
lea rcx, [rsp + 0x80]
mov rax, qword [rdx + 0x1178b8]
mov qword [rsp + 0x58], r14
movdqu xmmword [rsp + 0x70], xmm0
mov qword [rcx], rax
mov rax, qword [rdx + 0x1178c0]
mov qword [rcx + 8], rax
mov eax, dword [rdx + 0x1178c8]
mov dword [rcx + 0x10], eax
mov ecx, 0x1b
lea rax, [r13 + 0xc]
lea edx, [rcx - 0x68]
mov dword [rax + 8], edx
mov dword [rax], edx
mov dword [rax - 4], edx
mov dword [rax - 0xc], edx
mov dword [rax - 8], edx
mov dword [rax + 4], r14d
mov word [rax + 0xc], r14w
add rax, 0x220
sub rcx, r15
jne 0x1400717b8
call qword [sym.imp.KERNEL32.DLL_GetLogicalDrives]
lea ecx, [rbx - 0x61]
mov r15d, 0x19
mov r8d, eax
mov dword [rsp + 0x40], eax
cmp cx, r15w
ja 0x1400717fe
mov eax, 0xffe0
add bx, ax
movzx ecx, bx
mov r9d, 0x41
mov edx, r14d
sub cx, r9w
mov dword [rsp + 0x298], edx
cmp cx, r15w
ja 0x14007182c
movzx r15d, bx
sub r15d, r9d
mov edx, r15d
mov dword [rsp + 0x298], edx
movsx r12d, dx
movsxd rax, esi
cmp r12d, r15d
mov qword [rsp + 0x60], rax
jg 0x140071a55
mov esi, dword [rsp + 0x298]
mov eax, 1
bt r8d, r12d
jae 0x140071a3e
lea ebx, [r9 + rsi]
lea eax, [r12 + 0x41]
movsx r14, si
lea rcx, [rsp + 0x88]
mov word [rsp + 0x88], bx
imul r14, r14, 0x220
mov dword [r14 + r13 + 0x10], eax
call qword [sym.imp.KERNEL32.DLL_GetDriveTypeW]
mov r13d, eax
mov dword [rsp + 0x44], eax
cmp eax, 3
je 0x1400718b8
cmp eax, 2
je 0x1400718b8
mov rsi, qword [rsp + 0x280]
xor r9d, r9d
or dword [r14 + rsi + 0x10], 0xc000
mov dword [r14 + rsi], r9d
mov cl, r9b
lea r8d, [r9 + 1]
jmp 0x1400718cc
mov rsi, qword [rsp + 0x280]
mov r8d, 1
xor r9d, r9d
mov cl, r8b
mov word [rsp + 0x78], bx
cmp eax, r8d
je 0x140071a20
cmp ebp, 8
je 0x1400718fe
cmp ebp, 0x10
jne 0x1400718e9
cmp eax, 2
jmp 0x140071901
cmp ebp, 4
je 0x140071907
cmp cl, r9b
jne 0x140071907
cmp qword [rsp + 0x60], r9
je 0x140071a20
cmp eax, 5
jne 0x140071a20
cmp word [rsp + 0x290], r9w
je 0x140071943
lea r9, [rsp + 0x58]
lea rcx, [rsp + 0x70]
xor r8d, r8d
xor edx, edx
call fcn.14001ca38
mov rdx, qword [rsp + 0x58]
lea rcx, [r14 + rsi + 0x18]
mov r8d, 0x104
call qword [sym.imp.SHLWAPI.DLL_StrCpyNW]
xor r9d, r9d
lea r8d, [r9 + 1]
or esi, 0xffffffff
cmp r13d, 2
jne 0x140071998
movsxd rdx, dword [rsp + 0x298]
cmp dx, r8w
jg 0x140071998
lea rcx, [0x140000000]
movsx rax, dx
cmp dword [rcx + rax*4 + 0x12d718], r9d
je 0x140071998
movsx esi, word [rcx + rax*4 + 0x12d718]
cmp ebp, 0x10
jne 0x140071985
cmp esi, 0xb
je 0x140071a20
cmp ebp, 4
je 0x140071998
cmp ebp, 0x10
je 0x140071998
cmp esi, 0xb
jne 0x140071a20
mov qword [rsp + 0x38], r9
mov dword [rsp + 0x30], 0x20000000
mov qword [rsp + 0x48], r9
mov dword [rsp + 0x28], 3
mov qword [rsp + 0x20], r9
lea rdx, [rsp + 0x80]
lea rcx, [rsp + 0x48]
mov r9d, 3
mov r8d, 0x80000000
call fcn.1400037e8
mov rbx, qword [rsp + 0x48]
xor r9d, r9d
cmp rbx, r9
je 0x140071a20
cmp esi, r9d
jge 0x1400719fd
xor edx, edx
mov r9d, r12d
mov rcx, rbx
lea r8d, [rdx + 1]
call fcn.140065b60
xor r9d, r9d
mov esi, eax
cmp r13d, 2
jne 0x140071a8f
cmp ebp, 0x10
jne 0x140071a85
cmp esi, 0xb
jne 0x140071a8f
cmp rbx, 0xffffffffffffffff
je 0x140071a20
mov rcx, rbx
call qword [sym.imp.KERNEL32.DLL_CloseHandle]
mov r13, qword [rsp + 0x280]
mov r8d, dword [rsp + 0x40]
mov esi, dword [rsp + 0x298]
mov r9d, 0x41
lea eax, [r9 - 0x40]
add si, ax
movsx r12d, si
mov dword [rsp + 0x298], esi
cmp r12d, r15d
jle 0x14007184d
xor ecx, ecx
call qword [sym.imp.KERNEL32.DLL_Sleep]
lea rcx, [rsp + 0x58]
call fcn.140057768
lea rcx, [rsp + 0x68]
call fcn.140057768
add rsp, 0x238
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret
cmp ebp, 4
je 0x140071a8f
cmp esi, 0xb
jne 0x140071a11
mov rax, qword [rsp + 0x280]
mov r12, qword [rsp + 0x288]
xor edx, edx
mov r13w, word [r14 + rax]
mov r8d, 0x90
mov rcx, r12
mov dword [rsp + 0xa0], r9d
call fcn.1400f3900
or dword [r12 + 0x18], 0xffffffff
xor ecx, ecx
lea rax, [rsp + 0xa0]
xor r9d, r9d
mov qword [rsp + 0x38], rcx
mov qword [rsp + 0x30], rax
xor r8d, r8d
mov edx, 0x70048
mov rcx, rbx
mov dword [rsp + 0x28], 0x90
mov qword [rsp + 0x20], r12
call qword [sym.imp.KERNEL32.DLL_DeviceIoControl]
xor ecx, ecx
cmp eax, ecx
je 0x140071b03
mov r13w, word [r12 + 0x18]
mov dword [rsp + 0xa0], ecx
call qword [sym.imp.KERNEL32.DLL_SetLastError]
or dword [r12 + 4], 0xffffffff
xor ecx, ecx
lea rax, [rsp + 0xa0]
xor r9d, r9d
mov qword [rsp + 0x38], rcx
mov qword [rsp + 0x30], rax
xor r8d, r8d
mov edx, 0x2d1080
mov rcx, rbx
mov dword [rsp + 0x28], 0xc
mov qword [rsp + 0x20], r12
call qword [sym.imp.KERNEL32.DLL_DeviceIoControl]
mov r12d, eax
call qword [sym.imp.KERNEL32.DLL_GetLastError]
mov eax, dword [rsp + 0x44]
xor r9d, r9d
cmp qword [rsp + 0x60], r9
je 0x140071bb9
cmp eax, 5
jne 0x140071bb9
cmp r12d, r9d
je 0x140071a11
mov rax, qword [rsp + 0x288]
mov word [rdi], r9w
lea r9, [0x14010f6f0]
movzx ecx, word [rax + 4]
xor r8d, r8d
mov rdx, rdi
call fcn.140071160
xor r9d, r9d
cmp word [rdi], r9w
je 0x140071a11
mov rcx, qword [rsp + 0x280]
movzx eax, word [rsp + 0x88]
mov dword [r14 + rcx + 0x10], eax
jmp 0x140071c75
cmp eax, 2
jne 0x140071c75
cmp r12d, r9d
je 0x140071bda
mov rcx, qword [rsp + 0x288]
cmp word [rcx + 4], r9w
jge 0x140071c7d
lea rcx, [rsp + 0x50]
call fcn.14005fa18
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x70]
xor r9d, r9d
xor r8d, r8d
call fcn.14001ca38
mov rcx, qword [rsp + 0x50]
lea rdx, [0x140117898]
mov r8d, 0xe
call qword [sym.imp.SHLWAPI.DLL_StrCmpNIW]
xor ecx, ecx
cmp eax, ecx
jne 0x140071c68
mov rax, qword [rsp + 0x50]
mov r13, qword [rsp + 0x288]
lea rdx, [rsp + 0x48]
add rax, 0x1c
lea rcx, [rsp + 0x98]
mov qword [rsp + 0x98], rax
mov eax, dword [r13 + 4]
mov dword [rsp + 0x48], eax
call fcn.140063f40
xor edx, edx
cmp eax, edx
je 0x140071c65
mov eax, dword [rsp + 0x48]
mov rcx, qword [rsp + 0x280]
mov dword [r13 + 4], eax
mov dword [r14 + rcx + 4], eax
mov r13d, edx
lea rcx, [rsp + 0x50]
call fcn.140057768
xor r9d, r9d
mov rcx, qword [rsp + 0x288]
movsx eax, r13w
mov r13, qword [rsp + 0x280]
mov dword [r14 + r13], eax
cmp r12d, r9d
je 0x140071c9b
movsx eax, word [rcx + 4]
mov dword [r14 + r13 + 4], eax
cmp ebp, 4
jne 0x140071caf
mov rdx, rbx
xor ecx, ecx
call fcn.140062210
mov dword [r14 + r13 + 0xc], eax
mov eax, dword [rsp + 0x44]
mov dword [r14 + r13 + 0x14], esi
mov dword [r14 + r13 + 8], eax
cmp rbx, 0xffffffffffffffff
je 0x140071a28
mov rcx, rbx
call qword [sym.imp.KERNEL32.DLL_CloseHandle]
jmp 0x140071a28