Function at 0x140070d50
Capabilities:
Get disk information

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rdx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x40
mov r15, rcx
lea rcx, [0x14012e018]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
lea rcx, [rsp + 0x88]
call fcn.140057738
lea rcx, [rsp + 0x38]
mov edx, 5
call fcn.14005fa8c
lea rcx, [rsp + 0x30]
mov edx, 0x14
call fcn.14005fa8c
xor esi, esi
lea rdx, [rsp + 0x88]
lea rcx, [0x14011787c]
lea r8d, [rsi + 3]
mov r12b, sil
mov ebp, esi
mov r14d, esi
mov r13b, sil
or ebx, 0xffffffff
mov edi, 0xfa0
call fcn.1400623c0
lea ecx, [rsi + 1]
cmp al, sil
lea r8d, [rsi + 4]
cmovne ebx, ecx
lea rcx, str._BD_
lea rdx, [rsp + 0x88]
call fcn.1400623c0
lea r8d, [rsi + 6]
lea rdx, [rsp + 0x88]
cmp al, sil
lea rcx, str.__qbrd
cmovne ebx, esi
call fcn.1400623c0
mov rcx, qword [rsp + 0x88]
cmp al, sil
movzx eax, word [rcx]
lea r9d, [rsi + 1]
cmovne edi, r9d
cmp ax, si
je 0x140070e83
lea r8d, [rsi + 0x2a]
cmp r8w, ax
jne 0x140070e53
cmp r8w, word [rcx + 2]
jne 0x140070e48
add rcx, 2
mov r12b, r9b
mov r13b, 0x10
jmp 0x140070e6f
cmp r8w, ax
jne 0x140070e53
mov r12b, r9b
jmp 0x140070e6f
mov edx, 0x26
cmp dx, ax
jne 0x140070e62
or ebp, 8
jmp 0x140070e6f
mov edx, 0x2d
cmp dx, ax
jne 0x140070e83
mov r14d, r9d
add rcx, 2
mov qword [rsp + 0x88], rcx
mov ax, word [rcx]
cmp ax, si
jne 0x140070e2f
lea rdx, [rsp + 0x38]
lea rcx, [rsp + 0x88]
mov r8d, 0x2c
call fcn.140063854
mov r11, qword [rsp + 0x38]
cmp word [r11], si
jne 0x140070eb2
mov rsi, 0xffffffff80070057
jmp 0x14007103f
cmp ebx, esi
jl 0x140070ec9
movzx ecx, word [r11]
mov r8d, edi
mov edx, ebx
call fcn.14001b870
jmp 0x14007103f
mov rdx, qword [rsp + 0x88]
mov edi, 0x2c
cmp di, word [rdx]
jne 0x140070f0a
lea rcx, [rsp + 0x30]
add rdx, 2
call fcn.14006ad18
mov rcx, qword [rsp + 0x30]
call fcn.140017e84
mov rcx, qword [rsp + 0x30]
call fcn.14001ae54
lea rcx, [rsp + 0x30]
mov rdx, rax
call fcn.14006ad18
lea rcx, [rsp + 0x38]
mov edx, 5
call fcn.14005fb18
mov rbx, qword [rsp + 0x38]
mov r11d, 0x3a
mov word [rbx + 2], r11w
cmp di, word [rbx]
jne 0x140070f35
mov eax, 0xff0c
jmp 0x140070f62
mov eax, 0x3b
cmp ax, word [rbx]
jne 0x140070f46
mov eax, 0xff1b
jmp 0x140070f62
cmp r11w, word [rbx]
jne 0x140070f53
mov eax, 0xff1a
jmp 0x140070f62
mov eax, 0x3d
cmp ax, word [rbx]
jne 0x140070f65
mov eax, 0xff1d
mov word [rbx], ax
mov rdi, qword [rsp + 0x30]
mov eax, 0x5c
mov word [rbx + 4], ax
mov word [rbx + 6], si
movzx eax, word [rbx]
mov word [rsp + 0x9a], r11w
mov word [rsp + 0x9c], si
mov word [rsp + 0x98], ax
cmp ax, si
je 0x140071068
mov eax, 0x3f
cmp ax, word [rdi]
jne 0x140071068
mov ebx, 0x100000
lea rcx, [rsp + 0x88]
mov rdx, rbx
call fcn.14005fa8c
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetLastError]
mov r8d, ebx
mov rbx, qword [rsp + 0x88]
lea rcx, [rsp + 0x98]
mov rdx, rbx
call qword [sym.imp.KERNEL32.dll_QueryDosDeviceW]
cmp eax, esi
jne 0x140070ffb
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, 1
mov ebp, eax
cmp eax, esi
cmove ebp, ecx
jmp 0x140070ffd
mov ebp, esi
mov ecx, 0x5c
cmp cx, word [rbx]
jne 0x140071020
lea eax, [rcx - 0x1d]
cmp ax, word [rbx + 2]
jne 0x140071020
cmp ax, word [rbx + 4]
jne 0x140071020
cmp cx, word [rbx + 6]
jne 0x140071020
add rbx, 8
lea rdx, [rdi + 2]
mov r8, rbx
mov rcx, r15
call fcn.14005ee18
lea rcx, [rsp + 0x88]
movsxd rsi, ebp
call fcn.140057768
lea rcx, [rsp + 0x30]
call fcn.140057768
lea rcx, [rsp + 0x38]
call fcn.140057768
lea rcx, [0x14012e018]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov rax, rsi
jmp 0x140071146
cmp word [rdi], si
je 0x1400710b7
cmp r14d, esi
jne 0x1400710b7
lea rdx, [rsp + 0x98]
mov r9d, ebp
mov r8, rbx
mov rcx, rdi
mov byte [rsp + 0x20], r12b
call fcn.140070ba8
mov edi, eax
test r13b, 0x10
je 0x1400710a6
movzx ecx, word [rbx]
mov edx, 2
lea r8d, [rdx + 0x30]
call fcn.14001b870
cmp edi, esi
jne 0x1400710b2
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
movsxd rbx, esi
jmp 0x140071122
cmp r12b, sil
je 0x1400710cf
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_DeleteVolumeMountPointW]
cmp eax, esi
jne 0x1400710cf
call qword [sym.imp.KERNEL32.dll_GetLastError]
movzx eax, word [rdi]
lea rdx, [rsp + 0x98]
neg ax
sbb r8, r8
or ebp, 2
mov ecx, ebp
and r8, rdi
call qword [sym.imp.KERNEL32.dll_DefineDosDeviceW]
cmp eax, esi
je 0x1400710f6
mov edi, esi
jmp 0x1400710fe
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
cmp r12b, sil
je 0x14007110b
movzx ecx, word [rbx]
call fcn.14005bc34
test r13b, 0x10
je 0x14007111f
movzx ecx, word [rbx]
xor edx, edx
lea r8d, [rdx + 0x32]
call fcn.14001b870
movsxd rbx, edi
lea rcx, [rsp + 0x30]
call fcn.140057768
lea rcx, [rsp + 0x38]
call fcn.140057768
lea rcx, [0x14012e018]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov rax, rbx
mov rbx, qword [rsp + 0x80]
add rsp, 0x40
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret