Function at 0x18000e810
Capabilities:
Get disk information

Disassembly:
mov rax, rsp
push rdi
sub rsp, 0x260
mov qword [rsp + 0xa8], 0xfffffffffffffffe
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov rax, qword [0x1800764c0]
xor rax, rsp
mov qword [rsp + 0x250], rax
mov rdx, r8
mov qword [rsp + 0x78], 0xf
and qword [rsp + 0x70], 0
mov byte [rsp + 0x60], 0
xor eax, eax
or rcx, 0xffffffffffffffff
mov rdi, r8
repne scasb al, byte [rdi]
not rcx
lea r8, [rcx - 1]
lea rcx, [rsp + 0x58]
call fcn.1800023b4
lea rdx, [rsp + 0x58]
lea rcx, [rsp + 0x228]
call fcn.180035f40
nop
and dword [rsp + 0x38], 0xfffffe00
and qword [rsp + 0x40], 0
and qword [rsp + 0x48], 0
and qword [rsp + 0x50], 0
lea rcx, [rsp + 0xd8]
call fcn.18001feec
nop
mov r9b, 1
lea r8, [rsp + 0x30]
lea rdx, [rsp + 0x228]
mov rcx, rax
call fcn.18001fff0
nop
lea rcx, [rsp + 0xd8]
call fcn.18000ebb4
lea rdx, str.action
lea rcx, [rsp + 0x30]
call fcn.180026aa8
mov rcx, rax
lea rdx, [rsp + 0x200]
call fcn.1800258ec
nop
lea rdx, str.content
lea rcx, [rsp + 0x30]
call fcn.180026aa8
mov rdx, rax
lea rcx, [rsp + 0x80]
call fcn.1800255a0
nop
lea rdx, [0x18006007c]
lea rcx, [rsp + 0x200]
call fcn.180008718
test al, al
je 0x18000ea83
call qword [sym.imp.KERNEL32.dll_GetLogicalDrives]
mov esi, eax
lea rdx, [0x180060084]
lea rcx, [rsp + 0x80]
call fcn.180026aa8
mov rcx, rax
lea rdx, [rsp + 0x1d8]
call fcn.1800258ec
nop
lea rdx, str.letter
lea rcx, [rsp + 0x80]
call fcn.180026aa8
mov rcx, rax
call fcn.180025aac
mov ebx, eax
mov dil, 0x6f
movsx ecx, dil
sub ecx, 0x61
movzx edx, cl
bt esi, edx
jae 0x18000e9a0
inc dil
cmp dil, 0x7a
jl 0x18000e983
jmp 0x18000ea62
movsx r8d, dil
movsx edx, al
lea rcx, [0x180060088]
call fcn.1800367c4
lea r8, [rsp + 0x1e0]
cmp qword [rsp + 0x1f8], 0x10
cmovae r8, qword [rsp + 0x1e0]
xor r9d, r9d
mov dl, dil
mov cl, bl
call fcn.180035924
test eax, eax
jne 0x18000e9fd
mov edi, dword [0x18007a264]
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r8d, eax
mov edx, edi
lea rcx, str.UvsMountVirtualDevice_error__uvserr:_d__syserr:_d
call fcn.1800367c4
jmp 0x18000ea62
movsx eax, dil
movzx r8d, ax
lea rdx, [0x18005f8f8]
lea rcx, [rsp + 0xb0]
call fcn.18001bccc
cmp qword [rax + 0x20], 8
jb 0x18000ea26
mov r9, qword [rax + 8]
jmp 0x18000ea2a
lea r9, [rax + 8]
and dword [rsp + 0x20], 0
lea r8, str.mounted
lea rdx, str.SoftwareWOW6432Nodeprojonepodlpusbmgr_
mov rcx, 0xffffffff80000002
call fcn.18001c154
cmp qword [rsp + 0xd0], 8
jb 0x18000ea62
mov rcx, qword [rsp + 0xb8]
call fcn.18003c660
nop
cmp qword [rsp + 0x1f8], 0x10
jb 0x18000eb28
mov rcx, qword [rsp + 0x1e0]
call fcn.18003c660
jmp 0x18000eb28
lea rdx, [0x180060188]
lea rcx, [rsp + 0x200]
call fcn.180008718
test al, al
je 0x18000eb28
lea rdx, str.letters
lea rcx, [rsp + 0x80]
call fcn.180026aa8
mov rcx, rax
lea rdx, [rsp + 0x1d8]
call fcn.1800258ec
nop
xor edi, edi
mov rax, qword [rsp + 0x1f0]
test rax, rax
je 0x18000eb0f
cmp rdi, rax
jbe 0x18000eadd
call fcn.18003c608
lea rax, [rsp + 0x1e0]
cmp qword [rsp + 0x1f8], 0x10
cmovae rax, qword [rsp + 0x1e0]
mov cl, byte [rax + rdi]
call fcn.180038ec0
inc rdi
mov rax, qword [rsp + 0x1f0]
cmp rdi, rax
jne 0x18000ead3
cmp qword [rsp + 0x1f8], 0x10
jb 0x18000eb28
mov rcx, qword [rsp + 0x1e0]
call fcn.18003c660
nop
lea rcx, [rsp + 0x80]
call fcn.18002574c
nop
cmp qword [rsp + 0x220], 0x10
jb 0x18000eb4e
mov rcx, qword [rsp + 0x208]
call fcn.18003c660
mov qword [rsp + 0x220], 0xf
and qword [rsp + 0x218], 0
mov byte [rsp + 0x208], 0
lea rcx, [rsp + 0x30]
call fcn.18002574c
nop
cmp qword [rsp + 0x248], 0x10
jb 0x18000eb8e
mov rcx, qword [rsp + 0x230]
call fcn.18003c660
mov rcx, qword [rsp + 0x250]
xor rcx, rsp
call fcn.18003c1a0
lea r11, [rsp + 0x260]
mov rbx, qword [r11 + 0x10]
mov rsi, qword [r11 + 0x18]
mov rsp, r11
pop rdi
ret