Function at 0x1400e7ba0
Capabilities:
Get disk information

Disassembly:
mov rax, rsp
mov qword [rax + 0x18], r8
mov qword [rax + 0x10], rdx
mov qword [rax + 8], rcx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x5f]
sub rsp, 0xe0
mov qword [rbp + 0x1f], 0xfffffffffffffffe
mov qword [rax + 0x20], rbx
lea rax, [0x140124d98]
mov qword [rbp - 0x21], rax
mov dword [rbp - 0x19], 0x85
mov dword [rbp - 0x15], 1
lea rdx, str.Entering_CVolumeManagerBase::RebuildVolumesMap_n
lea rcx, [rbp - 0x21]
call fcn.14000b580
lea r11, [0x140124f08]
mov qword [rbp - 0x79], r11
mov dword [rbp - 0x71], 0x85
mov dword [rbp - 0x6d], 1
lea rcx, section..data
mov rax, qword [section..data]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x69], rax
lea rdx, str.Leaving_CVolumeManagerBase::RebuildVolumesMap_n
lea rcx, [rbp - 0x69]
call fcn.140018c30
mov r13, qword [rbp + 0x67]
mov rcx, qword [r13 + 0xe8]
call fcn.14001f750
call qword [sym.imp.KERNEL32.dll_GetLogicalDrives]
lea rcx, [0x140124fb8]
mov qword [rbp - 0x49], rcx
mov dword [rbp - 0x41], 0x8a
mov dword [rbp - 0x3d], 1
mov r8d, eax
lea rdx, str.Logical_drive_letters_id:_0x_08x__arrival_disks:
lea rcx, [rbp - 0x49]
call fcn.14000b5d0
mov r14, qword [rbp + 0x6f]
mov rdi, qword [r14 + 8]
mov rax, qword [rdi]
mov qword [rbp - 0x61], rax
lea r12, [0x140125048]
or esi, 0xffffffff
cmp rax, rdi
je 0x1400e7d00
mov rcx, qword [rax + 0x18]
sub rcx, 0x18
call fcn.14001e5d0
lea rbx, [rax + 0x18]
mov qword [rbp - 1], rbx
mov qword [rbp - 0x31], r12
mov dword [rbp - 0x29], 0x8e
mov dword [rbp - 0x25], 1
mov r8, rbx
lea rdx, str.Arrival_disk:__s
lea rcx, [rbp - 0x31]
call fcn.14000b580
nop
lea rdx, [rbx - 0x18]
mov eax, esi
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x1400e7cf1
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
lea rcx, [rbp - 0x61]
call fcn.14000e850
mov rax, qword [rbp - 0x61]
jmp 0x1400e7c97
mov r12, qword [rbp + 0x77]
mov rdi, qword [r12 + 8]
mov rax, qword [rdi]
mov qword [rbp - 0x59], rax
lea r15, str.CVolumeManagerBase::RebuildVolumesMap
cmp rax, rdi
je 0x1400e7d80
mov rcx, qword [rax + 0x18]
sub rcx, 0x18
call fcn.14001e5d0
lea rbx, [rax + 0x18]
mov qword [rbp + 0x17], rbx
mov qword [rbp - 0x11], r15
mov dword [rbp - 9], 0x93
mov dword [rbp - 5], 1
mov r8, rbx
lea rdx, str.Removal_disk:__s
lea rcx, [rbp - 0x11]
call fcn.14000b580
nop
lea rdx, [rbx - 0x18]
mov eax, esi
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x1400e7d71
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
lea rcx, [rbp - 0x59]
call fcn.14000e850
mov rax, qword [rbp - 0x59]
jmp 0x1400e7d17
mov rbx, qword [r12 + 8]
mov rax, qword [rbx]
mov qword [rsp + 0x38], rax
nop dword [rax]
cmp rax, rbx
je 0x1400e7e50
mov rcx, qword [rax + 0x18]
sub rcx, 0x18
call fcn.14001e5d0
add rax, 0x18
mov qword [rbp + 7], rax
lea rdi, [rax - 0x18]
mov rcx, rdi
call fcn.14001e5d0
add rax, 0x18
mov qword [rbp - 0x39], rax
lea rdx, [rbp - 0x39]
mov rcx, r13
call fcn.1400e6ec0
nop
mov eax, esi
lock xadd dword [rdi + 0x10], eax
dec eax
test eax, eax
jg 0x1400e7de8
mov rcx, qword [rdi]
mov rax, qword [rcx]
mov rdx, rdi
call qword [rax + 8]
mov rax, qword [rsp + 0x38]
cmp byte [rax + 0x21], 0
jne 0x1400e7d90
mov rcx, qword [rax + 0x10]
cmp byte [rcx + 0x21], 0
jne 0x1400e7e21
mov rax, rcx
mov rcx, qword [rcx]
cmp byte [rcx + 0x21], 0
jne 0x1400e7d88
nop dword [rax]
mov rax, rcx
mov rcx, qword [rcx]
cmp byte [rcx + 0x21], 0
je 0x1400e7e10
jmp 0x1400e7d88
mov rcx, qword [rax + 8]
cmp byte [rcx + 0x21], 0
jne 0x1400e7e43
nop dword [rax + rax]
cmp rax, qword [rcx + 0x10]
jne 0x1400e7e43
mov rax, rcx
mov rcx, qword [rcx + 8]
cmp byte [rcx + 0x21], 0
je 0x1400e7e30
mov rax, rcx
mov qword [rsp + 0x38], rcx
jmp 0x1400e7d90
mov rbx, qword [r14 + 8]
mov rax, qword [rbx]
mov qword [rsp + 0x30], rax
nop dword [rax]
cmp rax, rbx
je 0x1400e7f20
mov rcx, qword [rax + 0x18]
sub rcx, 0x18
call fcn.14001e5d0
add rax, 0x18
mov qword [rbp + 0xf], rax
lea rdi, [rax - 0x18]
mov rcx, rdi
call fcn.14001e5d0
add rax, 0x18
mov qword [rbp - 0x51], rax
lea rdx, [rbp - 0x51]
mov rcx, r13
call fcn.1400e7400
nop
mov eax, esi
lock xadd dword [rdi + 0x10], eax
dec eax
test eax, eax
jg 0x1400e7eb8
mov rcx, qword [rdi]
mov rax, qword [rcx]
mov rdx, rdi
call qword [rax + 8]
mov rax, qword [rsp + 0x30]
cmp byte [rax + 0x21], 0
jne 0x1400e7e60
mov rcx, qword [rax + 0x10]
cmp byte [rcx + 0x21], 0
jne 0x1400e7ef1
mov rax, rcx
mov rcx, qword [rcx]
cmp byte [rcx + 0x21], 0
jne 0x1400e7e57
nop dword [rax]
mov rax, rcx
mov rcx, qword [rcx]
cmp byte [rcx + 0x21], 0
je 0x1400e7ee0
jmp 0x1400e7e57
mov rcx, qword [rax + 8]
cmp byte [rcx + 0x21], 0
jne 0x1400e7f13
nop dword [rax + rax]
cmp rax, qword [rcx + 0x10]
jne 0x1400e7f13
mov rax, rcx
mov rcx, qword [rcx + 8]
cmp byte [rcx + 0x21], 0
je 0x1400e7f00
mov rax, rcx
mov qword [rsp + 0x30], rcx
jmp 0x1400e7e60
mov rcx, qword [r13 + 0x108]
call fcn.14001f750
nop
mov eax, dword [0x140178460]
test al, 1
jne 0x1400e7f86
or eax, 1
mov dword [0x140178460], eax
mov eax, dword [0x140178464]
test al, 1
jne 0x1400e7f6d
or eax, 1
mov dword [0x140178464], eax
mov byte [0x140178398], 0
mov dword [0x14017839c], 1
mov word [0x1401783a0], 0x100
lea rcx, [0x140178398]
call fcn.14001c0c0
lea rcx, [0x140109390]
call fcn.14005f2e8
nop
lea rax, [rbp - 0x69]
mov qword [rsp + 0x20], rax
mov r9d, dword [rbp - 0x6d]
mov r8d, dword [rbp - 0x71]
mov rdx, qword [rbp - 0x79]
lea rcx, [0x1401783b0]
call fcn.14001d040
nop
mov rdx, qword [rbp - 0x69]
add rdx, 0xffffffffffffffe8
lock xadd dword [rdx + 0x10], esi
dec esi
test esi, esi
jg 0x1400e7fc4
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + 8]
mov rbx, qword [rsp + 0x138]
add rsp, 0xe0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret