Function at 0x14002fc70
Capabilities:
Unmount volume via ioctl

Disassembly:
push rbx
push rbp
push rsi
push rdi
push r12
push r13
push r15
sub rsp, 0x70
mov rax, qword [0x140197b10]
xor rax, rsp
mov qword [rsp + 0x60], rax
mov esi, 2
mov r13d, r9d
mov r12d, r8d
mov rbx, rdx
mov ebp, ecx
lea r15d, [rsi + 1]
test rdx, rdx
jne 0x14002fcd1
mov edx, 0xc0000000
call qword [0x14019c140]
mov rdi, rax
cmp rax, 0xffffffffffffffff
jne 0x14002fe48
mov edx, 0x80000000
mov ecx, ebp
call qword [0x14019c140]
jmp 0x14002fda3
mov rcx, rdx
call qword [sym.imp.KERNEL32.dll_lstrlenW]
mov ebp, 0x3a
cmp eax, esi
jne 0x14002fceb
xor ecx, ecx
cmp word [rbx + 2], bp
jmp 0x14002fd0d
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_lstrlenW]
cmp eax, r15d
jne 0x14002fd12
lea rcx, [rbx + 2]
lea rdx, [0x140148b18]
call fcn.14010e1b8
xor ecx, ecx
test eax, eax
sete cl
jmp 0x14002fd14
xor ecx, ecx
mov edx, 0xc0000000
test ecx, ecx
je 0x14002fdd3
mov rax, qword [str.._:]
and qword [rsp + 0x30], 0
lea rcx, [rsp + 0x50]
mov qword [rcx], rax
mov eax, dword [0x140148b10]
mov ebp, 0x20000000
mov dword [rcx + 8], eax
movzx eax, word [0x140148b14]
xor r9d, r9d
mov word [rcx + 0xc], ax
movzx eax, word [rbx]
lea rcx, [rsp + 0x50]
mov r8d, r15d
mov dword [rsp + 0x28], ebp
mov word [rsp + 0x58], ax
mov dword [rsp + 0x20], r15d
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov rdi, rax
cmp rax, 0xffffffffffffffff
jne 0x14002fe48
and qword [rsp + 0x30], 0
lea rcx, [rsp + 0x50]
xor r9d, r9d
mov r8d, r15d
mov edx, 0x80000000
mov dword [rsp + 0x28], ebp
mov dword [rsp + 0x20], r15d
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov rdi, rax
cmp rax, 0xffffffffffffffff
jne 0x14002fe48
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, esi
jne 0x14002fdc2
lea eax, [rdi + 2]
jmp 0x14002ff77
lea rcx, str.Error_opening_device:
call fcn.14002ecf8
jmp 0x14002ff75
mov rcx, rbx
call qword [0x14019c148]
mov rdi, rax
cmp rax, 0xffffffffffffffff
jne 0x14002fe48
mov edx, 0x80000000
mov rcx, rbx
call qword [0x14019c148]
mov rdi, rax
cmp rax, 0xffffffffffffffff
jne 0x14002fe48
call qword [sym.imp.KERNEL32.dll_GetLastError]
sub eax, 1
je 0x14002fe3e
sub eax, 0x56
je 0x14002fe3e
sub eax, ebp
je 0x14002fe26
sub eax, 0x7a
je 0x14002fe26
cmp eax, 0x101b
je 0x14002fe26
mov rcx, rbx
call fcn.14002ecf8
jmp 0x14002fe3e
call fcn.14010df94
lea rdx, str.Not_a_mount_point:__1_ws__n
mov r8, rbx
lea rcx, [rax + 0x60]
call fcn.14002ec70
mov eax, 9
jmp 0x14002ff77
mov rcx, rdi
call fcn.14002ed74
test eax, eax
jne 0x14002fe5c
lea esi, [rax + 5]
jmp 0x14002ff6c
test r15b, r12b
je 0x14002feef
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_FlushFileBuffers]
and qword [rsp + 0x38], 0
lea rax, [rsp + 0x40]
mov qword [rsp + 0x30], rax
and dword [rsp + 0x28], 0
and qword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
mov edx, 0x90018
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
test eax, eax
jne 0x14002febc
lea rax, str.Error
test rbx, rbx
cmove rbx, rax
mov rcx, rbx
call fcn.14002ecf8
jmp 0x14002ff6c
and qword [rsp + 0x38], 0
lea rax, [rsp + 0x40]
xor r9d, r9d
mov qword [rsp + 0x30], rax
and dword [rsp + 0x28], 0
and qword [rsp + 0x20], 0
xor r8d, r8d
mov edx, 0x90020
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
test eax, eax
je 0x14002fea1
and qword [rsp + 0x38], 0
lea rax, [rsp + 0x40]
mov r9d, 8
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x48]
mov dword [rsp + 0x28], r9d
lea r8, [rsp + 0x48]
mov edx, 0x83722014
mov rcx, rdi
mov qword [rsp + 0x20], rax
mov dword [rsp + 0x48], r12d
mov dword [rsp + 0x4c], r13d
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
test eax, eax
jne 0x14002ff3d
mov rcx, rbx
call fcn.14002ecf8
cmp dword [rsp + 0x48], 0
je 0x14002ff6a
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
call fcn.14010df94
lea rdx, str._1_ws_:_Not_all_new_options_were_successfully_changed.
lea rcx, [rax + 0x60]
mov r8, rbx
call fcn.14002ec70
mov eax, r15d
jmp 0x14002ff77
xor esi, esi
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, esi
mov rcx, qword [rsp + 0x60]
xor rcx, rsp
call fcn.14010bcc0
add rsp, 0x70
pop r15
pop r13
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret