Function at 0x14002414c
Capabilities:
Get disk information via ioctl

Disassembly:
mov rax, rsp
push rbp
push rdi
push r12
push r13
push r15
lea rbp, [rax - 0x5f]
sub rsp, 0xd0
mov qword [rbp - 0x19], 0xfffffffffffffffe
mov qword [rax + 8], rbx
mov qword [rax + 0x18], rsi
mov rax, qword [0x1400c9158]
xor rax, rsp
mov qword [rbp + 0x27], rax
mov qword [rbp - 0x31], rdx
call fcn.14002508c
mov r13, rax
mov qword [rbp - 0x29], rax
mov ebx, 0x80070000
cmp rax, 0xffffffffffffffff
je 0x1400413d6
xor esi, esi
test esi, esi
js 0x14002439d
and qword [rbp - 0x49], 0
lea rdx, [rbp - 0x49]
mov rcx, r13
call fcn.140024534
mov rdi, qword [rbp - 0x49]
test eax, eax
js 0x14004145e
and qword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.DEVOBJ.dll_DevObjCreateDeviceInfoList]
mov r12, rax
mov qword [rbp - 0x11], rax
cmp rax, 0xffffffffffffffff
je 0x1400413f1
xor esi, esi
test esi, esi
js 0x14002438a
and qword [rsp + 0x28], 0
and qword [rsp + 0x20], 0
mov r9d, SafeArrayGetLBound
xor r8d, r8d
lea rdx, [0x140097408]
mov rcx, r12
call qword [sym.imp.DEVOBJ.dll_DevObjGetClassDevs]
test eax, eax
je 0x14004140b
xor r15d, r15d
mov dword [rbp - 0x59], r15d
mov dword [rbp + 7], 0x20
lea rax, [rbp + 7]
mov qword [rsp + 0x20], rax
mov r9d, r15d
lea r8, [0x140097408]
xor edx, edx
mov rcx, r12
call qword [sym.imp.DEVOBJ.dll_DevObjEnumDeviceInterfaces]
test eax, eax
je 0x140024376
and qword [rbp - 0x51], 0
lea r8, [rbp - 0x51]
mov rdx, r12
lea rcx, [rbp + 7]
call fcn.140024460
mov esi, eax
mov rbx, qword [rbp - 0x51]
test eax, eax
js 0x14002435d
lea rax, [rbx + 4]
mov qword [rbp - 0x39], rax
and qword [rsp + 0x30], 0
and dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 3
xor r9d, r9d
xor edx, edx
lea r8d, [r9 + 1]
mov rcx, rax
call qword [sym.imp.api_ms_win_core_file_l1_1_0.dll_CreateFileW]
mov r15, rax
mov qword [rbp - 0x21], rax
cmp rax, 0xffffffffffffffff
je 0x14004142c
xor esi, esi
test esi, esi
js 0x140024346
xor eax, eax
mov qword [rbp - 9], rax
mov dword [rbp - 1], eax
and qword [rsp + 0x38], rax
lea rax, [rbp - 0x41]
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], SafeArrayGetDim
lea rax, [rbp - 9]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x2d1080
mov rcx, r15
call qword [sym.imp.api_ms_win_core_io_l1_1_0.dll_DeviceIoControl]
test eax, eax
je 0x14004144a
xor esi, esi
xor r15d, r15d
mov rbx, qword [rbp - 0x39]
mov r13, qword [rbp - 0x31]
cmp r15d, dword [rdi]
jae 0x14002433a
lea rcx, [r15 + r15*2]
mov eax, dword [rbp - 5]
cmp dword [rdi + rcx*8 + 8], eax
jne 0x140024333
mov rdx, rbx
mov rcx, r13
call fcn.140023ec4
mov esi, eax
inc r15d
test esi, esi
jns 0x140024314
mov rbx, qword [rbp - 0x51]
mov r13, qword [rbp - 0x29]
mov r15, qword [rbp - 0x21]
lea rax, [r15 - 1]
cmp rax, 0xfffffffffffffffd
ja 0x140024359
mov rcx, r15
call qword [sym.imp.api_ms_win_core_handle_l1_1_0.dll_CloseHandle]
mov r15d, dword [rbp - 0x59]
mov rcx, rbx
call fcn.14000abd8
inc r15d
mov dword [rbp - 0x59], r15d
test esi, esi
jns 0x14002422b
jmp 0x14002438a
call fcn.14001e28c
mov esi, eax
cmp eax, 0x80070103
jne 0x14004141f
xor esi, esi
mov rcx, r12
call qword [sym.imp.DEVOBJ.dll_DevObjDestroyDeviceInfoList]
nop
mov rcx, rdi
call fcn.14000abd8
nop
lea rax, [r13 - 1]
cmp rax, 0xfffffffffffffffd
ja 0x1400243b0
mov rcx, r13
call qword [sym.imp.api_ms_win_core_handle_l1_1_0.dll_CloseHandle]
mov eax, esi
mov rcx, qword [rbp + 0x27]
xor rcx, rsp
call fcn.14002cdb0
lea r11, [rsp + 0xd0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r13
pop r12
pop rdi
pop rbp
ret
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop
mov esi, eax
test eax, eax
jle 0x1400241a1
movzx esi, ax
or esi, ebx
jmp 0x1400241a1
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
mov esi, eax
test eax, eax
jle 0x1400241ef
movzx esi, ax
or esi, ebx
jmp 0x1400241ef
call fcn.14001e28c
mov esi, eax
test eax, eax
js 0x14002438a
jmp 0x140024224
test eax, eax
js 0x140024365
jmp 0x140024258
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
mov esi, eax
test eax, eax
jle 0x1400242bb
movzx esi, ax
or esi, 0x80070000
jmp 0x1400242bb
call fcn.14001e28c
mov esi, eax
test eax, eax
js 0x140024346
jmp 0x140024309
xor esi, esi
jmp 0x140024394