Function at 0x1400deee0
Capabilities:
Get disk size
Unmount volume via ioctl

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
mov rbp, rsp
sub rsp, 0x60
xor r12d, r12d
mov rbx, r9
mov r13b, r8b
mov r15, rdx
mov r14, rcx
mov dword [rbp + 0x48], r12d
mov qword [rbp - 0x20], r12
mov rcx, qword [0x14017d3a8]
lea rsi, [0x14017d3a8]
mov dil, 4
cmp rcx, rsi
je 0x1400def54
test byte [rcx + 0x1c], dil
je 0x1400def54
cmp byte [rcx + 0x19], dil
jb 0x1400def54
mov rcx, qword [rcx + 0x10]
lea r8, [0x14000d0d8]
mov edx, 0x1b6
call fcn.14001dd24
mov rcx, qword [0x14017d3a8]
mov qword [rbp - 0x10], rbx
mov byte [rbp - 8], r12b
cmp rcx, rsi
je 0x1400def8a
test byte [rcx + 0x1c], dil
je 0x1400def8a
cmp byte [rcx + 0x19], 5
jb 0x1400def8a
mov rcx, qword [rcx + 0x10]
lea r8, [0x14000d0d8]
mov edx, 0x1b7
mov r9, r14
mov qword [rsp + 0x20], r15
call fcn.14001ed50
mov rax, qword [rbp + 0x50]
mov rsi, qword [rbp + 0x58]
mov qword [rax], r12
mov dword [rsi], r12d
cmp rbx, 0xffffffffffffffff
je 0x1400df008
mov rcx, rbx
call qword [sym.imp.ADVAPI32.dll_ImpersonateLoggedOnUser]
test eax, eax
jne 0x1400df004
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsi], eax
mov rcx, qword [0x14017d3a8]
lea rdx, [0x14017d3a8]
mov ebx, reloc.ole32.dll_CoDisconnectObject
cmp rcx, rdx
je 0x1400df68c
test byte [rcx + 0x1c], dil
je 0x1400df68c
cmp byte [rcx + 0x19], 2
jb 0x1400df68c
mov rcx, qword [rcx + 0x10]
lea r8, [0x14000d0d8]
mov edx, 0x1b8
mov r9d, ebx
mov dword [rsp + 0x20], eax
call fcn.1400d357c
jmp 0x1400df68c
mov byte [rbp - 8], 1
lea rdx, [rbp - 0x20]
mov r8, rsi
mov rcx, r15
call fcn.1400dedc8
mov ebx, eax
test eax, eax
je 0x1400df067
mov rcx, qword [0x14017d3a8]
lea rdx, [0x14017d3a8]
cmp rcx, rdx
je 0x1400df68c
test byte [rcx + 0x1c], dil
je 0x1400df68c
cmp byte [rcx + 0x19], 2
jb 0x1400df68c
mov edx, 0x1b9
mov r8, r15
mov eax, dword [rsi]
mov rcx, qword [rcx + 0x10]
mov r9d, ebx
mov dword [rsp + 0x20], eax
call fcn.1400d37c0
jmp 0x1400df68c
mov rcx, qword [0x14017d3a8]
mov r12, qword [rbp - 0x20]
lea rdx, [0x14017d3a8]
cmp rcx, rdx
je 0x1400df0a2
test byte [rcx + 0x1c], dil
je 0x1400df0a2
cmp byte [rcx + 0x19], dil
jb 0x1400df0a2
mov rcx, qword [rcx + 0x10]
lea r8, [0x14000d0d8]
mov edx, 0x1ba
mov r9, r12
call fcn.140029954
lea rcx, [rbp - 0x10]
call fcn.1400d3e98
mov ebx, 0x218
xor ecx, ecx
mov edx, ebx
call qword [sym.imp.KERNEL32.dll_LocalAlloc]
mov rdi, rax
test rax, rax
jne 0x1400df0d2
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea ebx, [rdi + 3]
mov dword [rsi], eax
jmp 0x1400df68c
mov r8, rbx
xor edx, edx
mov rcx, rax
call sub.msvcrt.dll_memset
mov r8, rsi
mov rcx, r14
movups xmm5, xmmword [0x14000d0c8]
mov byte [rdi + 0x19], r13b
lea r13, [rdi + 0x1f8]
mov rdx, r13
movdqu xmmword [rdi], xmm5
call fcn.1400d4aa8
mov ebx, eax
test eax, eax
je 0x1400df15b
mov rcx, qword [0x14017d3a8]
lea rax, [0x14017d3a8]
cmp rcx, rax
je 0x1400df68c
test byte [rcx + 0x1c], 4
je 0x1400df68c
cmp byte [rcx + 0x19], 2
jb 0x1400df68c
mov eax, dword [rsi]
mov rcx, qword [rcx + 0x10]
lea r8, [0x14000d0d8]
mov dword [rsp + 0x28], eax
mov edx, 0x1bb
mov r9, r14
mov dword [rsp + 0x20], ebx
call fcn.140028d10
jmp 0x1400df68c
mov rcx, qword [0x14017d3a8]
lea rax, [0x14017d3a8]
cmp rcx, rax
je 0x1400df19a
test byte [rcx + 0x1c], 4
je 0x1400df19a
cmp byte [rcx + 0x19], 4
jb 0x1400df19a
mov eax, dword [r13]
mov rcx, qword [rcx + 0x10]
lea r8, [0x14000d0d8]
mov edx, 0x1bc
mov r9, r14
mov dword [rsp + 0x20], eax
call fcn.14001ecbc
and qword [rsp + 0x30], 0
mov ebx, 3
xor r9d, r9d
mov edx, 0xc0000000
mov rcx, r14
mov r8d, ebx
mov dword [rsp + 0x28], reloc.ADVAPI32.dll_TraceEvent
mov dword [rsp + 0x20], ebx
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rdi + 0x10], rax
cmp rax, 0xffffffffffffffff
jne 0x1400df21d
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rcx, rdi
mov dword [rsi], eax
call qword [sym.imp.KERNEL32.dll_LocalFree]
mov rcx, qword [0x14017d3a8]
lea rax, [0x14017d3a8]
mov ebx, reloc.ADVAPI32.dll_GetTraceEnableLevel
cmp rcx, rax
je 0x1400df68c
test byte [rcx + 0x1c], 4
je 0x1400df68c
cmp byte [rcx + 0x19], 2
jb 0x1400df68c
mov edx, 0x1bd
mov r8, r14
jmp 0x1400df050
mov rcx, qword [0x14017d3a8]
lea rdx, [0x14017d3a8]
mov r13b, 4
cmp rcx, rdx
je 0x1400df25c
test byte [rcx + 0x1c], r13b
je 0x1400df25c
cmp byte [rcx + 0x19], r13b
jb 0x1400df25c
mov rcx, qword [rcx + 0x10]
lea r8, [0x14000d0d8]
mov edx, 0x1be
mov r9, r14
mov qword [rsp + 0x20], rax
call fcn.140028b0c
and qword [rsp + 0x38], 0
mov rcx, qword [rdi + 0x10]
lea rax, [rbp + 0x48]
mov qword [rsp + 0x30], rax
lea rax, [rbp - 0x18]
xor r9d, r9d
xor r8d, r8d
mov edx, 0x7405c
mov dword [rsp + 0x28], 8
mov qword [rsp + 0x20], rax
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
test eax, eax
jne 0x1400df2ea
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rcx, qword [rdi + 0x10]
mov dword [rsi], eax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_LocalFree]
mov rcx, qword [0x14017d3a8]
lea rax, [0x14017d3a8]
mov ebx, reloc.ADVAPI32.dll_GetTraceEnableLevel
cmp rcx, rax
je 0x1400df68c
test byte [rcx + 0x1c], r13b
je 0x1400df68c
cmp byte [rcx + 0x19], 2
jb 0x1400df68c
mov edx, 0x1bf
jmp 0x1400df215
mov r8, qword [rbp - 0x18]
cmp r8, r12
jge 0x1400df343
mov rcx, qword [0x14017d3a8]
lea rax, [0x14017d3a8]
cmp rcx, rax
je 0x1400df326
test byte [rcx + 0x1c], r13b
je 0x1400df326
cmp byte [rcx + 0x19], 2
jb 0x1400df326
mov rcx, qword [rcx + 0x10]
mov r9, r15
mov rdx, r14
mov qword [rsp + 0x20], r12
call fcn.1400d3870
mov rcx, qword [rdi + 0x10]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_LocalFree]
mov ebx, reloc.ADVAPI32.dll_GetTraceEnableFlags
jmp 0x1400df68c
mov rcx, qword [rdi + 0x10]
xor r12d, r12d
lea rax, [rbp + 0x48]
mov qword [rsp + 0x38], r12
mov qword [rsp + 0x30], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x90018
mov dword [rsp + 0x28], r12d
mov qword [rsp + 0x20], r12
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
test eax, eax
jne 0x1400df3c0
mov rax, qword [0x14017d3a8]
lea r15, [0x14017d3a8]
cmp rax, r15
je 0x1400df3c7
test byte [rax + 0x1c], r13b
je 0x1400df3c7
cmp byte [rax + 0x19], bl
jb 0x1400df3c7
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rcx, qword [0x14017d3a8]
lea r8, [0x14000d0d8]
mov rcx, qword [rcx + 0x10]
mov edx, 0x1c1
mov r9, r14
mov dword [rsp + 0x20], eax
call fcn.14001ecbc
jmp 0x1400df3c7
lea r15, [0x14017d3a8]
mov qword [rsp + 0x38], r12
lea rax, [rbp + 0x48]
mov dword [rbp + 0x48], r12d
mov rcx, qword [rdi + 0x10]
mov qword [rsp + 0x30], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x90020
mov dword [rsp + 0x28], r12d
mov qword [rsp + 0x20], r12
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
test eax, eax
jne 0x1400df44a
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rcx, qword [rdi + 0x10]
mov dword [rsi], eax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_LocalFree]
mov rcx, qword [0x14017d3a8]
mov ebx, reloc.ADVAPI32.dll_GetTraceEnableLevel
cmp rcx, r15
je 0x1400df68c
test byte [rcx + 0x1c], r13b
je 0x1400df68c
cmp byte [rcx + 0x19], 2
jb 0x1400df68c
mov edx, 0x1c2
jmp 0x1400df215
mov rcx, qword [rdi + 0x10]
mov r8, rsi
xor edx, edx
call fcn.1400de8c0
mov rcx, qword [rdi + 0x10]
mov r15d, eax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
test r15d, r15d
je 0x1400df4b7
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_LocalFree]
mov rcx, qword [0x14017d3a8]
lea rax, [0x14017d3a8]
cmp rcx, rax
je 0x1400df4af
test byte [rcx + 0x1c], r13b
je 0x1400df4af
cmp byte [rcx + 0x19], 2
jb 0x1400df4af
mov rcx, qword [rcx + 0x10]
lea r8, [0x14000d0d8]
mov edx, 0x1c3
mov r9, r14
mov dword [rsp + 0x20], r15d
call fcn.14001ecbc
mov ebx, r15d
jmp 0x1400df68c
mov qword [rsp + 0x30], r12
xor r9d, r9d
mov r8d, ebx
mov edx, 0xc0000000
mov rcx, r14
mov dword [rsp + 0x28], reloc.ADVAPI32.dll_TraceEvent
mov dword [rsp + 0x20], ebx
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rdi + 0x10], rax
cmp rax, 0xffffffffffffffff
jne 0x1400df531
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rcx, rdi
mov dword [rsi], eax
call qword [sym.imp.KERNEL32.dll_LocalFree]
mov rcx, qword [0x14017d3a8]
lea rax, [0x14017d3a8]
mov ebx, reloc.ADVAPI32.dll_GetTraceEnableLevel
cmp rcx, rax
je 0x1400df68c
test byte [rcx + 0x1c], r13b
je 0x1400df68c
cmp byte [rcx + 0x19], 2
jb 0x1400df68c
mov edx, 0x1c4
jmp 0x1400df215
mov rcx, qword [0x14017d3a8]
lea r15, [0x14017d3a8]
cmp rcx, r15
je 0x1400df56d
test byte [rcx + 0x1c], r13b
je 0x1400df56d
cmp byte [rcx + 0x19], r13b
jb 0x1400df56d
mov rcx, qword [rcx + 0x10]
lea r8, [0x14000d0d8]
mov edx, 0x1c5
mov r9, r14
mov qword [rsp + 0x20], rax
call fcn.140028b0c
mov rcx, qword [rdi + 0x10]
mov qword [rsp + 0x38], r12
lea rax, [rbp + 0x48]
mov qword [rsp + 0x30], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x90018
mov dword [rsp + 0x28], r12d
mov qword [rsp + 0x20], r12
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
test eax, eax
jne 0x1400df5de
mov rax, qword [0x14017d3a8]
cmp rax, r15
je 0x1400df5de
test byte [rax + 0x1c], r13b
je 0x1400df5de
cmp byte [rax + 0x19], bl
jb 0x1400df5de
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rcx, qword [0x14017d3a8]
lea r8, [0x14000d0d8]
mov rcx, qword [rcx + 0x10]
mov edx, 0x1c6
mov r9, r14
mov dword [rsp + 0x20], eax
call fcn.14001ecbc
mov qword [rsp + 0x38], r12
lea rax, [rbp + 0x48]
mov dword [rbp + 0x48], r12d
mov rcx, qword [rdi + 0x10]
mov qword [rsp + 0x30], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x90020
mov dword [rsp + 0x28], r12d
mov qword [rsp + 0x20], r12
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
test eax, eax
jne 0x1400df655
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rcx, qword [rdi + 0x10]
mov dword [rsi], eax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_LocalFree]
mov rcx, qword [0x14017d3a8]
mov ebx, reloc.ADVAPI32.dll_GetTraceEnableLevel
cmp rcx, r15
je 0x1400df68c
test byte [rcx + 0x1c], r13b
je 0x1400df68c
cmp byte [rcx + 0x19], 2
jb 0x1400df68c
mov edx, 0x1c7
jmp 0x1400df215
mov rax, qword [rbp + 0x50]
mov qword [rax], rdi
mov rcx, qword [0x14017d3a8]
cmp rcx, r15
je 0x1400df689
test byte [rcx + 0x1c], r13b
je 0x1400df689
cmp byte [rcx + 0x19], r13b
jb 0x1400df689
mov rcx, qword [rcx + 0x10]
lea r8, [0x14000d0d8]
mov edx, 0x1c8
call fcn.14001dd24
mov ebx, r12d
lea rcx, [rbp - 0x10]
call fcn.1400d3e98
lea r11, [rsp + 0x60]
mov eax, ebx
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret