Function at 0x7d702d50
Capabilities:
Get disk information

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x6ac
push esi
lea eax, [ebp - 0x6ac]
mov dword [ebp - 4], eax
mov dword [ebp - 0xc], 0
mov dword [ebp - 8], 0
mov ecx, dword [0x7d712080]
movzx edx, byte [ecx]
and edx, 8
je 0x7d702dc4
push 0x7d73f752
push 0x30
push 0x7d73f753
push 0x7d73a328
mov eax, dword [0x7d712080]
push eax
push 3
call fcn.7d70d8f0
add esp, 0x18
cmp eax, 0xffffffff
je 0x7d702dc4
mov ecx, dword [ebp + 0x14]
push ecx
mov edx, dword [ebp + 0x10]
push edx
mov eax, dword [ebp + 0xc]
push eax
mov ecx, dword [ebp + 8]
push ecx
push 0x7d73a37c
call fcn.7d70d960
add esp, 0x14
mov edx, dword [ebp + 0x14]
and edx, 0xfffffff0
je 0x7d702e1f
mov eax, dword [0x7d712080]
movzx ecx, byte [eax]
and ecx, 4
je 0x7d702e11
push 0x7d73f756
push 0x34
push 0x7d73f757
push 0x7d73a3a0
mov edx, dword [0x7d712080]
push edx
push 2
call fcn.7d70d8f0
add esp, 0x18
cmp eax, 0xffffffff
je 0x7d702e11
mov eax, dword [ebp + 0x14]
push eax
push str.Unknown_flags:__x_n
call fcn.7d70d960
add esp, 8
push 0x57
call sub.kernel32.dll_SetLastError
xor eax, eax
jmp 0x7d70334c
lea ecx, [ebp - 0x18]
push ecx
push 0x218
lea edx, [ebp - 0x6ac]
push edx
push 1
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.ntext.dll_NtQueryObject]
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
je 0x7d702e5b
mov ecx, dword [ebp - 0x14]
push ecx
call dword [sym.imp.ntext.dll_RtlNtStatusToDosError]
push eax
call sub.kernel32.dll_SetLastError
xor eax, eax
jmp 0x7d70334c
mov edx, dword [ebp - 4]
cmp dword [edx + 4], 0
jne 0x7d702e72
push 6
call sub.kernel32.dll_SetLastError
xor eax, eax
jmp 0x7d70334c
mov eax, dword [ebp - 4]
movzx ecx, word [eax]
cmp ecx, 8
jb 0x7d702ed8
mov edx, 2
imul edx, edx, 0
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 4]
movzx edx, word [ecx + edx]
cmp edx, 0x5c
jne 0x7d702ed8
mov eax, 2
shl eax, 0
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + 4]
movzx eax, word [edx + eax]
cmp eax, 0x3f
jne 0x7d702ed8
mov ecx, 2
shl ecx, 1
mov edx, dword [ebp - 4]
mov eax, dword [edx + 4]
movzx ecx, word [eax + ecx]
cmp ecx, 0x3f
jne 0x7d702ed8
mov edx, 2
imul edx, edx, 3
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 4]
movzx edx, word [ecx + edx]
cmp edx, 0x5c
je 0x7d702f40
mov eax, dword [0x7d712080]
movzx ecx, byte [eax]
and ecx, 1
je 0x7d702f32
push 0x7d73f758
push 0x48
push 0x7d73f759
push 0x7d73a410
mov edx, dword [0x7d712080]
push edx
push 0
call fcn.7d70d8f0
add esp, 0x18
cmp eax, 0xffffffff
je 0x7d702f32
mov eax, dword [ebp - 4]
movzx ecx, word [eax]
shr ecx, 1
push ecx
mov edx, dword [ebp - 4]
mov eax, dword [edx + 4]
push eax
call fcn.7d704960
add esp, 8
push eax
push str.Unexpected_object_name:__s_n
call fcn.7d70d960
add esp, 8
push 0x1f
call sub.kernel32.dll_SetLastError
xor eax, eax
jmp 0x7d70334c
mov ecx, dword [ebp - 4]
movzx edx, word [ecx]
shr edx, 1
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 4]
xor eax, eax
mov word [ecx + edx*2], ax
mov ecx, dword [ebp - 4]
movzx edx, word [ecx]
sub edx, 8
mov eax, dword [ebp - 4]
mov word [eax], dx
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + 4]
add edx, 8
mov eax, dword [ebp - 4]
mov dword [eax + 4], edx
mov ecx, dword [ebp + 0x14]
and ecx, 8
je 0x7d702fc5
mov edx, dword [0x7d712080]
movzx eax, byte [edx]
and eax, 1
je 0x7d702fbc
push 0x7d73f75a
push 0x55
push 0x7d73f75b
push 0x7d73a4a8
mov ecx, dword [0x7d712080]
push ecx
push 0
call fcn.7d70d8f0
add esp, 0x18
cmp eax, 0xffffffff
je 0x7d702fbc
push str.FILE_NAME_OPENED_not_supported_n
call fcn.7d70d960
add esp, 4
mov edx, dword [ebp + 0x14]
and edx, 0xfffffff7
mov dword [ebp + 0x14], edx
cmp dword [ebp + 0x14], 4
je 0x7d702fdb
cmp dword [ebp + 0x14], 1
je 0x7d702fdb
cmp dword [ebp + 0x14], 2
jne 0x7d7030c7
push 0x104
lea eax, [ebp - 0x288]
push eax
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + 4]
push edx
call sym.kernel32_wrapper.dll_GetVolumePathNameW
test eax, eax
jne 0x7d702ffe
xor eax, eax
jmp 0x7d70334c
lea eax, [ebp - 0x288]
push eax
call sub.ntext.dll_wcslen
add esp, 4
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0
je 0x7d703058
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + 4]
push edx
call sub.ntext.dll_wcslen
add esp, 4
cmp dword [ebp - 0xc], eax
ja 0x7d703058
mov eax, dword [ebp - 0xc]
movzx ecx, word [ebp + eax*2 - 0x28a]
cmp ecx, 0x5c
jne 0x7d703058
mov edx, dword [ebp - 0xc]
push edx
lea eax, [ebp - 0x288]
push eax
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + 4]
push edx
call sub.ntext.dll__wcsnicmp
add esp, 0xc
test eax, eax
je 0x7d7030c7
mov eax, dword [0x7d712080]
movzx ecx, byte [eax]
and ecx, 1
je 0x7d7030b9
push 0x7d73f75e
push 0x64
push 0x7d73f75f
push 0x7d73a540
mov edx, dword [0x7d712080]
push edx
push 0
call fcn.7d70d8f0
add esp, 0x18
cmp eax, 0xffffffff
je 0x7d7030b9
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 4]
push ecx
call fcn.7d7052f0
add esp, 4
push eax
lea edx, [ebp - 0x288]
push edx
call fcn.7d7052f0
add esp, 4
push eax
push str.Path__s_returned_by_GetVolumePathNameW_does_not_match_file_path__s_n
call fcn.7d70d960
add esp, 0xc
push 0x1f
call sub.kernel32.dll_SetLastError
xor eax, eax
jmp 0x7d70334c
cmp dword [ebp + 0x14], 4
jne 0x7d70311c
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 4]
mov edx, dword [ebp - 0xc]
lea eax, [ecx + edx*2 - 2]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
push ecx
call sub.ntext.dll_wcslen
add esp, 4
mov dword [ebp - 8], eax
mov edx, dword [ebp - 8]
cmp edx, dword [ebp + 0x10]
jae 0x7d70310e
mov eax, dword [ebp - 8]
lea ecx, [eax + eax + 2]
push ecx
mov edx, dword [ebp - 0x10]
push edx
mov eax, dword [ebp + 0xc]
push eax
call sub.ntext.dll_memcpy
add esp, 0xc
jmp 0x7d703117
mov ecx, dword [ebp - 8]
add ecx, 1
mov dword [ebp - 8], ecx
jmp 0x7d703349
cmp dword [ebp + 0x14], 1
jne 0x7d7031c1
push 0x32
lea edx, [ebp - 0x80]
push edx
lea eax, [ebp - 0x288]
push eax
call sym.kernel32_wrapper.dll_GetVolumeNameForVolumeMountPointW
test eax, eax
jne 0x7d703143
xor eax, eax
jmp 0x7d70334c
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + 4]
mov eax, dword [ebp - 0xc]
lea ecx, [edx + eax*2]
mov dword [ebp - 0x10], ecx
lea edx, [ebp - 0x80]
push edx
call sub.ntext.dll_wcslen
add esp, 4
mov esi, eax
mov eax, dword [ebp - 0x10]
push eax
call sub.ntext.dll_wcslen
add esp, 4
add esi, eax
mov dword [ebp - 8], esi
mov ecx, dword [ebp - 8]
cmp ecx, dword [ebp + 0x10]
jae 0x7d7031ac
mov edx, 2
imul edx, edx, 0
xor eax, eax
mov ecx, dword [ebp + 0xc]
mov word [ecx + edx], ax
lea edx, [ebp - 0x80]
push edx
mov eax, dword [ebp + 0xc]
push eax
call sub.ntext.dll_wcscat
add esp, 8
mov ecx, dword [ebp - 0x10]
push ecx
mov edx, dword [ebp + 0xc]
push edx
call sub.ntext.dll_wcscat
add esp, 8
jmp 0x7d7031bc
push 8
call sub.kernel32.dll_SetLastError
mov eax, dword [ebp - 8]
add eax, 1
mov dword [ebp - 8], eax
jmp 0x7d703349
cmp dword [ebp + 0x14], 2
jne 0x7d703280
xor ecx, ecx
mov edx, dword [ebp - 0xc]
mov word [ebp + edx*2 - 0x28a], cx
push 0x104
lea eax, [ebp - 0x490]
push eax
lea ecx, [ebp - 0x288]
push ecx
call sym.kernel32_wrapper.dll_QueryDosDeviceW
test eax, eax
jne 0x7d7031fb
xor eax, eax
jmp 0x7d70334c
mov edx, dword [ebp - 4]
mov eax, dword [edx + 4]
mov ecx, dword [ebp - 0xc]
lea edx, [eax + ecx*2 - 2]
mov dword [ebp - 0x10], edx
lea eax, [ebp - 0x490]
push eax
call sub.ntext.dll_wcslen
add esp, 4
mov esi, eax
mov ecx, dword [ebp - 0x10]
push ecx
call sub.ntext.dll_wcslen
add esp, 4
add esi, eax
mov dword [ebp - 8], esi
mov edx, dword [ebp - 8]
cmp edx, dword [ebp + 0x10]
jae 0x7d70326b
mov eax, 2
imul eax, eax, 0
xor ecx, ecx
mov edx, dword [ebp + 0xc]
mov word [edx + eax], cx
lea eax, [ebp - 0x490]
push eax
mov ecx, dword [ebp + 0xc]
push ecx
call sub.ntext.dll_wcscat
add esp, 8
mov edx, dword [ebp - 0x10]
push edx
mov eax, dword [ebp + 0xc]
push eax
call sub.ntext.dll_wcscat
add esp, 8
jmp 0x7d70327b
push 8
call sub.kernel32.dll_SetLastError
mov ecx, dword [ebp - 8]
add ecx, 1
mov dword [ebp - 8], ecx
jmp 0x7d703349
cmp dword [ebp + 0x14], 0
jne 0x7d7032fa
push str.__
call sub.ntext.dll_wcslen
add esp, 4
mov esi, eax
mov edx, dword [ebp - 4]
mov eax, dword [edx + 4]
push eax
call sub.ntext.dll_wcslen
add esp, 4
add esi, eax
mov dword [ebp - 8], esi
mov ecx, dword [ebp - 8]
cmp ecx, dword [ebp + 0x10]
jae 0x7d7032e8
mov edx, 2
imul edx, edx, 0
xor eax, eax
mov ecx, dword [ebp + 0xc]
mov word [ecx + edx], ax
push str.__
mov edx, dword [ebp + 0xc]
push edx
call sub.ntext.dll_wcscat
add esp, 8
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 4]
push ecx
mov edx, dword [ebp + 0xc]
push edx
call sub.ntext.dll_wcscat
add esp, 8
jmp 0x7d7032f8
push 8
call sub.kernel32.dll_SetLastError
mov eax, dword [ebp - 8]
add eax, 1
mov dword [ebp - 8], eax
jmp 0x7d703349
mov ecx, dword [0x7d712080]
movzx edx, byte [ecx]
and edx, 4
je 0x7d703342
push 0x7d73f760
push 0xb4
push 0x7d73f761
push 0x7d73a648
mov eax, dword [0x7d712080]
push eax
push 2
call fcn.7d70d8f0
add esp, 0x18
cmp eax, 0xffffffff
je 0x7d703342
mov ecx, dword [ebp + 0x14]
push ecx
push str.Invalid_combination_of_flags:__x_n
call fcn.7d70d960
add esp, 8
push 0x57
call sub.kernel32.dll_SetLastError
mov eax, dword [ebp - 8]
pop esi
mov esp, ebp
pop ebp
ret 0x10