Function at 0x140073728
Capabilities:
Get disk information

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rdx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x40
mov r15, rcx
lea rcx, [0x140134078]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
lea rcx, [rsp + 0x88]
call fcn.140059074
lea rcx, [rsp + 0x38]
mov edx, 5
call fcn.1400616e0
lea rcx, [rsp + 0x30]
mov edx, 0x14
call fcn.1400616e0
xor esi, esi
lea rdx, [rsp + 0x88]
lea rcx, [0x14011db9c]
lea r8d, [rsi + 3]
mov r12b, sil
mov ebp, esi
mov r14d, esi
mov r13b, sil
or ebx, 0xffffffff
mov edi, 0xfa0
call fcn.1400640c8
lea ecx, [rsi + 1]
cmp al, sil
lea r8d, [rsi + 4]
cmovne ebx, ecx
lea rcx, str._BD_
lea rdx, [rsp + 0x88]
call fcn.1400640c8
lea r8d, [rsi + 6]
lea rdx, [rsp + 0x88]
cmp al, sil
lea rcx, str.__qbrd
cmovne ebx, esi
call fcn.1400640c8
mov rcx, qword [rsp + 0x88]
cmp al, sil
movzx eax, word [rcx]
lea r9d, [rsi + 1]
cmovne edi, r9d
cmp ax, si
je 0x14007385b
lea r8d, [rsi + 0x2a]
cmp r8w, ax
jne 0x14007382b
cmp r8w, word [rcx + 2]
jne 0x140073820
add rcx, 2
mov r12b, r9b
mov r13b, 0x10
jmp 0x140073847
cmp r8w, ax
jne 0x14007382b
mov r12b, r9b
jmp 0x140073847
mov edx, 0x26
cmp dx, ax
jne 0x14007383a
or ebp, 8
jmp 0x140073847
mov edx, 0x2d
cmp dx, ax
jne 0x14007385b
mov r14d, r9d
add rcx, 2
mov qword [rsp + 0x88], rcx
mov ax, word [rcx]
cmp ax, si
jne 0x140073807
lea rdx, [rsp + 0x38]
lea rcx, [rsp + 0x88]
mov r8d, 0x2c
call fcn.14006555c
mov r11, qword [rsp + 0x38]
cmp word [r11], si
jne 0x14007388a
mov rsi, 0xffffffff80070057
jmp 0x140073a17
cmp ebx, esi
jl 0x1400738a1
movzx ecx, word [r11]
mov r8d, edi
mov edx, ebx
call fcn.14001c09c
jmp 0x140073a17
mov rdx, qword [rsp + 0x88]
mov edi, 0x2c
cmp di, word [rdx]
jne 0x1400738e2
lea rcx, [rsp + 0x30]
add rdx, 2
call fcn.14006d680
mov rcx, qword [rsp + 0x30]
call fcn.1400186b0
mov rcx, qword [rsp + 0x30]
call fcn.14001b680
lea rcx, [rsp + 0x30]
mov rdx, rax
call fcn.14006d680
lea rcx, [rsp + 0x38]
mov edx, 5
call fcn.14006176c
mov rbx, qword [rsp + 0x38]
mov r11d, 0x3a
mov word [rbx + 2], r11w
cmp di, word [rbx]
jne 0x14007390d
mov eax, 0xff0c
jmp 0x14007393a
mov eax, 0x3b
cmp ax, word [rbx]
jne 0x14007391e
mov eax, 0xff1b
jmp 0x14007393a
cmp r11w, word [rbx]
jne 0x14007392b
mov eax, 0xff1a
jmp 0x14007393a
mov eax, 0x3d
cmp ax, word [rbx]
jne 0x14007393d
mov eax, 0xff1d
mov word [rbx], ax
mov rdi, qword [rsp + 0x30]
mov eax, 0x5c
mov word [rbx + 4], ax
mov word [rbx + 6], si
movzx eax, word [rbx]
mov word [rsp + 0x9a], r11w
mov word [rsp + 0x9c], si
mov word [rsp + 0x98], ax
cmp ax, si
je 0x140073a40
mov eax, 0x3f
cmp ax, word [rdi]
jne 0x140073a40
mov ebx, 0x100000
lea rcx, [rsp + 0x88]
mov rdx, rbx
call fcn.1400616e0
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetLastError]
mov r8d, ebx
mov rbx, qword [rsp + 0x88]
lea rcx, [rsp + 0x98]
mov rdx, rbx
call qword [sym.imp.KERNEL32.dll_QueryDosDeviceW]
cmp eax, esi
jne 0x1400739d3
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, 1
mov ebp, eax
cmp eax, esi
cmove ebp, ecx
jmp 0x1400739d5
mov ebp, esi
mov ecx, 0x5c
cmp cx, word [rbx]
jne 0x1400739f8
lea eax, [rcx - 0x1d]
cmp ax, word [rbx + 2]
jne 0x1400739f8
cmp ax, word [rbx + 4]
jne 0x1400739f8
cmp cx, word [rbx + 6]
jne 0x1400739f8
add rbx, 8
lea rdx, [rdi + 2]
mov r8, rbx
mov rcx, r15
call fcn.140060a94
lea rcx, [rsp + 0x88]
movsxd rsi, ebp
call fcn.1400590a4
lea rcx, [rsp + 0x30]
call fcn.1400590a4
lea rcx, [rsp + 0x38]
call fcn.1400590a4
lea rcx, [0x140134078]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov rax, rsi
jmp 0x140073b1e
cmp word [rdi], si
je 0x140073a8f
cmp r14d, esi
jne 0x140073a8f
lea rdx, [rsp + 0x98]
mov r9d, ebp
mov r8, rbx
mov rcx, rdi
mov byte [rsp + 0x20], r12b
call fcn.140073580
mov edi, eax
test r13b, 0x10
je 0x140073a7e
movzx ecx, word [rbx]
mov edx, 2
lea r8d, [rdx + 0x30]
call fcn.14001c09c
cmp edi, esi
jne 0x140073a8a
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
movsxd rbx, esi
jmp 0x140073afa
cmp r12b, sil
je 0x140073aa7
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_DeleteVolumeMountPointW]
cmp eax, esi
jne 0x140073aa7
call qword [sym.imp.KERNEL32.dll_GetLastError]
movzx eax, word [rdi]
lea rdx, [rsp + 0x98]
neg ax
sbb r8, r8
or ebp, 2
mov ecx, ebp
and r8, rdi
call qword [sym.imp.KERNEL32.dll_DefineDosDeviceW]
cmp eax, esi
je 0x140073ace
mov edi, esi
jmp 0x140073ad6
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
cmp r12b, sil
je 0x140073ae3
movzx ecx, word [rbx]
call fcn.14005d644
test r13b, 0x10
je 0x140073af7
movzx ecx, word [rbx]
xor edx, edx
lea r8d, [rdx + 0x32]
call fcn.14001c09c
movsxd rbx, edi
lea rcx, [rsp + 0x30]
call fcn.1400590a4
lea rcx, [rsp + 0x38]
call fcn.1400590a4
lea rcx, [0x140134078]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov rax, rbx
mov rbx, qword [rsp + 0x80]
add rsp, 0x40
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret