Function at 0x140031100
Capabilities:
Get disk information

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
mov qword [rsp + 0x20], rsi
push rdi
mov eax, 0x3490
call fcn.1400406f0
sub rsp, rax
mov rax, qword [0x14005f180]
xor rax, rsp
mov qword [rsp + 0x3480], rax
mov rdi, rcx
mov ebp, edx
lea rcx, [rsp + 0x81]
xor edx, edx
mov r8d, 0x33ff
mov byte [rsp + 0x80], 0
call sub.MSVCR120.dll_memset
xor eax, eax
xor esi, esi
mov byte [rsp + 0x48], 0
mov qword [rsp + 0x49], rax
mov qword [rsp + 0x51], rax
mov qword [rsp + 0x59], rax
mov qword [rsp + 0x61], rax
mov qword [rsp + 0x69], rax
mov qword [rsp + 0x71], rax
mov byte [rsp + 0x79], al
test rdi, rdi
je 0x140031353
test byte [rdi], 0xdf
je 0x140031353
lea rcx, [rsp + 0x80]
mov r8d, 0x3400
mov rdx, rdi
call sub.liblocal.dll_lg_strlcpy
or rbx, 0xffffffffffffffff
lea rcx, [rsp + 0x80]
mov rax, rbx
inc rax
cmp byte [rcx + rax], sil
jne 0x1400311b3
cmp byte [rsp + rax + 0x7f], 0x5c
je 0x1400311e2
mov byte [rsp + rax + 0x80], 0x5c
inc rax
cmp rax, 0x3400
jae 0x14003137e
mov byte [rsp + rax + 0x80], sil
lea rdx, [rsp + 0x48]
lea rcx, [rsp + 0x80]
mov r8d, 0x32
call qword [sym.imp.KERNEL32.dll_GetVolumeNameForVolumeMountPointA]
test eax, eax
lea rax, [rsp + 0x80]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0x17
jne 0x140031235
lea r9, str.Could_not_get_volume_information_for__s_n
mov edx, 0xd6d8
mov ecx, 0x17257
mov r8d, 2
call sub.liblocal.dll_msg_print
jmp 0x140031353
lea r9, str.The_valid_volume_GUID_was_found_for__s_n
mov edx, 0xc350
mov ecx, 0x17258
mov r8d, 0x82
call sub.liblocal.dll_msg_print
lea rax, [rsp + 0x48]
inc rbx
cmp byte [rax + rbx], sil
jne 0x140031256
cmp byte [rsp + rbx + 0x47], 0x5c
jne 0x140031278
dec rbx
cmp rbx, 0x32
jae 0x140031384
mov byte [rsp + rbx + 0x48], sil
mov edx, 0x80000000
mov eax, 0xc0000000
mov qword [rsp + 0x30], rsi
cmp ebp, 1
lea rcx, [rsp + 0x48]
mov dword [rsp + 0x28], 0x80
cmove edx, eax
xor r9d, r9d
mov dword [rsp + 0x20], 3
lea r8d, [r9 + 3]
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov rbx, rax
cmp rax, 0xffffffffffffffff
mov rax, qword [sym.imp.liblocal.dll_Debug]
jne 0x14003131d
cmp dword [rax], 1
jge 0x1400312d6
mov rax, qword [sym.imp.liblocal.dll_LgTrace]
mov ecx, dword [rax]
test ecx, ecx
je 0x1400312f2
and ecx, 1
je 0x1400312f2
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, eax
call sub.liblocal.dll_nt_syserror
lea rcx, str.Error:_CreateFileW_failed_with_error:__s_n
mov rdx, rax
call sub.liblocal.dll_debugprintf
lea r9, str.Invalid_mount_exists_at_mount_point__s_n
mov edx, 0xd6d8
mov ecx, 0x17259
mov r8d, 2
mov qword [rsp + 0x28], rdi
mov dword [rsp + 0x20], 0x17
call sub.liblocal.dll_msg_print
jmp 0x140031353
cmp dword [rax], 1
jge 0x140031334
mov rax, qword [sym.imp.liblocal.dll_LgTrace]
mov ecx, dword [rax]
test ecx, ecx
je 0x140031345
and ecx, 1
je 0x140031345
lea rdx, [rsp + 0x48]
lea rcx, str.CreateFile_succeeded_for_path___s_n
call sub.liblocal.dll_debugprintf
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov esi, 1
mov eax, esi
mov rcx, qword [rsp + 0x3480]
xor rcx, rsp
call fcn.1400403f0
lea r11, [rsp + 0x3490]
mov rbx, qword [r11 + 0x18]
mov rbp, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rsp, r11
pop rdi
ret
call fcn.140040860
int3
call fcn.140040860
int3