Function at 0x140075da4
Capabilities:
Get disk information

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rdx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x40
mov r15, rcx
lea rcx, [0x14013e0e8]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
lea rcx, [rsp + 0x88]
call fcn.14005aec8
lea rcx, [rsp + 0x38]
mov edx, 5
call fcn.140063314
lea rcx, [rsp + 0x30]
mov edx, 0x14
call fcn.140063314
xor esi, esi
lea rdx, [rsp + 0x88]
lea rcx, [0x140126e14]
lea r8d, [rsi + 3]
mov r12b, sil
mov ebp, esi
mov r14d, esi
mov r13b, sil
or ebx, 0xffffffff
mov edi, 0xfa0
call fcn.140065d7c
lea ecx, [rsi + 1]
cmp al, sil
lea r8d, [rsi + 4]
cmovne ebx, ecx
lea rcx, str._BD_
lea rdx, [rsp + 0x88]
call fcn.140065d7c
lea r8d, [rsi + 6]
lea rdx, [rsp + 0x88]
cmp al, sil
lea rcx, str.__qbrd
cmovne ebx, esi
call fcn.140065d7c
mov rcx, qword [rsp + 0x88]
cmp al, sil
movzx eax, word [rcx]
lea r9d, [rsi + 1]
cmovne edi, r9d
cmp ax, si
je 0x140075ed7
lea r8d, [rsi + 0x2a]
cmp r8w, ax
jne 0x140075ea7
cmp r8w, word [rcx + 2]
jne 0x140075e9c
add rcx, 2
mov r12b, r9b
mov r13b, 0x10
jmp 0x140075ec3
cmp r8w, ax
jne 0x140075ea7
mov r12b, r9b
jmp 0x140075ec3
mov edx, 0x26
cmp dx, ax
jne 0x140075eb6
or ebp, 8
jmp 0x140075ec3
mov edx, 0x2d
cmp dx, ax
jne 0x140075ed7
mov r14d, r9d
add rcx, 2
mov qword [rsp + 0x88], rcx
mov ax, word [rcx]
cmp ax, si
jne 0x140075e83
lea rdx, [rsp + 0x38]
lea rcx, [rsp + 0x88]
mov r8d, 0x2c
call fcn.140067288
mov r11, qword [rsp + 0x38]
cmp word [r11], si
jne 0x140075f06
mov rsi, 0xffffffff80070057
jmp 0x140076093
cmp ebx, esi
jl 0x140075f1d
movzx ecx, word [r11]
mov r8d, edi
mov edx, ebx
call fcn.140035c04
jmp 0x140076093
mov rdx, qword [rsp + 0x88]
mov edi, 0x2c
cmp di, word [rdx]
jne 0x140075f5e
lea rcx, [rsp + 0x30]
add rdx, 2
call fcn.14006ffb0
mov rcx, qword [rsp + 0x30]
call fcn.140018bbc
mov rcx, qword [rsp + 0x30]
call fcn.14001be60
lea rcx, [rsp + 0x30]
mov rdx, rax
call fcn.14006ffb0
lea rcx, [rsp + 0x38]
mov edx, 5
call fcn.1400633a0
mov rbx, qword [rsp + 0x38]
mov r11d, 0x3a
mov word [rbx + 2], r11w
cmp di, word [rbx]
jne 0x140075f89
mov eax, 0xff0c
jmp 0x140075fb6
mov eax, 0x3b
cmp ax, word [rbx]
jne 0x140075f9a
mov eax, 0xff1b
jmp 0x140075fb6
cmp r11w, word [rbx]
jne 0x140075fa7
mov eax, 0xff1a
jmp 0x140075fb6
mov eax, 0x3d
cmp ax, word [rbx]
jne 0x140075fb9
mov eax, 0xff1d
mov word [rbx], ax
mov rdi, qword [rsp + 0x30]
mov eax, 0x5c
mov word [rbx + 4], ax
mov word [rbx + 6], si
movzx eax, word [rbx]
mov word [rsp + 0x9a], r11w
mov word [rsp + 0x9c], si
mov word [rsp + 0x98], ax
cmp ax, si
je 0x1400760bc
mov eax, 0x3f
cmp ax, word [rdi]
jne 0x1400760bc
mov ebx, 0x100000
lea rcx, [rsp + 0x88]
mov rdx, rbx
call fcn.140063314
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetLastError]
mov r8d, ebx
mov rbx, qword [rsp + 0x88]
lea rcx, [rsp + 0x98]
mov rdx, rbx
call qword [sym.imp.KERNEL32.dll_QueryDosDeviceW]
cmp eax, esi
jne 0x14007604f
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, 1
mov ebp, eax
cmp eax, esi
cmove ebp, ecx
jmp 0x140076051
mov ebp, esi
mov ecx, 0x5c
cmp cx, word [rbx]
jne 0x140076074
lea eax, [rcx - 0x1d]
cmp ax, word [rbx + 2]
jne 0x140076074
cmp ax, word [rbx + 4]
jne 0x140076074
cmp cx, word [rbx + 6]
jne 0x140076074
add rbx, 8
lea rdx, [rdi + 2]
mov r8, rbx
mov rcx, r15
call fcn.140062600
lea rcx, [rsp + 0x88]
movsxd rsi, ebp
call fcn.14005aef8
lea rcx, [rsp + 0x30]
call fcn.14005aef8
lea rcx, [rsp + 0x38]
call fcn.14005aef8
lea rcx, [0x14013e0e8]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov rax, rsi
jmp 0x14007619a
cmp word [rdi], si
je 0x14007610b
cmp r14d, esi
jne 0x14007610b
lea rdx, [rsp + 0x98]
mov r9d, ebp
mov r8, rbx
mov rcx, rdi
mov byte [rsp + 0x20], r12b
call fcn.140075bfc
mov edi, eax
test r13b, 0x10
je 0x1400760fa
movzx ecx, word [rbx]
mov edx, 2
lea r8d, [rdx + 0x30]
call fcn.140035c04
cmp edi, esi
jne 0x140076106
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
movsxd rbx, esi
jmp 0x140076176
cmp r12b, sil
je 0x140076123
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_DeleteVolumeMountPointW]
cmp eax, esi
jne 0x140076123
call qword [sym.imp.KERNEL32.dll_GetLastError]
movzx eax, word [rdi]
lea rdx, [rsp + 0x98]
neg ax
sbb r8, r8
or ebp, 2
mov ecx, ebp
and r8, rdi
call qword [sym.imp.KERNEL32.dll_DefineDosDeviceW]
cmp eax, esi
je 0x14007614a
mov edi, esi
jmp 0x140076152
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
cmp r12b, sil
je 0x14007615f
movzx ecx, word [rbx]
call fcn.14005f454
test r13b, 0x10
je 0x140076173
movzx ecx, word [rbx]
xor edx, edx
lea r8d, [rdx + 0x32]
call fcn.140035c04
movsxd rbx, edi
lea rcx, [rsp + 0x30]
call fcn.14005aef8
lea rcx, [rsp + 0x38]
call fcn.14005aef8
lea rcx, [0x14013e0e8]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov rax, rbx
mov rbx, qword [rsp + 0x80]
add rsp, 0x40
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret