Function at 0x100106530
Capabilities:
Get disk information

Disassembly:
mov r11, rsp
push r13
push r14
push r15
sub rsp, 0x660
mov qword [rsp + 0x168], 0xfffffffffffffffe
mov qword [r11 + 8], rbx
mov qword [r11 + 0x10], rsi
mov qword [r11 + 0x18], rdi
mov qword [r11 + 0x20], r12
mov rax, qword [0x100176150]
xor rax, rsp
mov qword [rsp + 0x650], rax
lea rdi, [0x10003c880]
mov qword [r11 - 0x4f8], rdi
lea r12, [0x10003f280]
mov qword [r11 - 0x4f0], r12
lea rsi, [0x10003c868]
mov qword [r11 - 0x4e8], rsi
mov dword [rsp + 0x198], 0x6c9
mov r13d, reloc.VssTrace.DLL_Ordinal_11
mov dword [r11 - 0x4dc], r13d
mov r14d, 0xff
mov dword [r11 - 0x4d8], r14d
xor ebx, ebx
mov word [rsp + 0x220], bx
mov byte [rsp + 0x222], bl
mov byte [rsp + 0x223], 1
xor edx, edx
lea r8d, [r13 + 0x6d]
lea rcx, [r11 - 0x4d0]
call sub.msvcrt.dll_memset
xor r8d, r8d
lea rdx, [rsp + 0x180]
lea rcx, [rsp + 0xf0]
call fcn.1000e842c
nop
lea edx, [r14 + 6]
lea rcx, [rsp + 0x440]
call qword [sym.imp.KERNEL32.dll_GetSystemWindowsDirectoryW]
mov r15d, eax
cmp eax, ebx
jne 0x100106699
lea rdx, [rsp + 0x40]
mov qword [rsp + 0x40], rdi
mov qword [rsp + 0x48], r12
mov qword [rsp + 0x50], rsi
mov dword [rsp + 0x58], 0x6d2
mov dword [rsp + 0x5c], r13d
mov dword [rsp + 0x60], r14d
mov word [rsp + 0xe0], bx
mov byte [rsp + 0xe2], bl
mov byte [rsp + 0xe3], 1
movzx ecx, bx
cmp cx, 0xf
jae 0x10010666d
movzx eax, cx
mov qword [rdx + rax*8 + 0x28], rbx
inc cx
jmp 0x10010665a
mov dword [rsp + 0x28], r15d
mov r15d, 0x105
mov dword [rsp + 0x20], r15d
lea r9, [rsp + 0x440]
lea r8, [0x10003f2e0]
lea rcx, [rsp + 0xf0]
call fcn.1000ea04c
lea rdx, [rsp + 0x40]
mov qword [rsp + 0x40], rdi
mov qword [rsp + 0x48], r12
mov qword [rsp + 0x50], rsi
mov dword [rsp + 0x58], 0x6d4
mov dword [rsp + 0x5c], r13d
mov dword [rsp + 0x60], r14d
mov word [rsp + 0xe0], bx
mov byte [rsp + 0xe2], bl
mov byte [rsp + 0xe3], 1
movzx ecx, bx
cmp cx, 0xf
jae 0x1001066ec
movzx eax, cx
mov qword [rdx + rax*8 + 0x28], rbx
inc cx
jmp 0x1001066d9
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x30], eax
mov dword [rsp + 0x28], r15d
mov r15d, 0x105
mov dword [rsp + 0x20], r15d
lea r9, [rsp + 0x440]
lea r8, [0x10003f330]
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0xf0]
call fcn.1000e9608
mov word [rsp + 0x230], bx
xor edx, edx
mov r8d, 0x208
lea rcx, [rsp + 0x232]
call sub.msvcrt.dll_memset
mov r8d, r15d
lea rdx, [rsp + 0x230]
lea rcx, [rsp + 0x440]
call qword [sym.imp.KERNEL32.dll_GetVolumePathNameW]
cmp eax, ebx
jne 0x1001067e6
lea rdx, [rsp + 0x40]
mov qword [rsp + 0x40], rdi
mov qword [rsp + 0x48], r12
mov qword [rsp + 0x50], rsi
mov dword [rsp + 0x58], 0x6dd
mov dword [rsp + 0x5c], r13d
mov dword [rsp + 0x60], r14d
mov word [rsp + 0xe0], bx
mov byte [rsp + 0xe2], bl
mov byte [rsp + 0xe3], 1
movzx ecx, bx
cmp cx, 0xf
jae 0x1001067b8
movzx eax, cx
mov qword [rdx + rax*8 + 0x28], rbx
inc cx
jmp 0x1001067a5
mov dword [rsp + 0x28], r15d
lea rax, [rsp + 0x230]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x440]
lea r8, [0x10003f398]
lea rcx, [rsp + 0xf0]
call fcn.1000ea04c
mov r8d, 0x32
lea rdx, [rsp + 0x180]
lea rcx, [rsp + 0x230]
call qword [sym.imp.KERNEL32.dll_GetVolumeNameForVolumeMountPointW]
cmp eax, ebx
jne 0x100106875
lea rdx, [rsp + 0x40]
mov qword [rsp + 0x40], rdi
mov qword [rsp + 0x48], r12
mov qword [rsp + 0x50], rsi
mov dword [rsp + 0x58], 0x6e3
mov dword [rsp + 0x5c], r13d
mov dword [rsp + 0x60], r14d
mov word [rsp + 0xe0], bx
mov byte [rsp + 0xe2], bl
mov byte [rsp + 0xe3], 1
movzx ecx, bx
cmp cx, 0xf
jae 0x100106859
movzx eax, cx
mov qword [rdx + rax*8 + 0x28], rbx
inc cx
jmp 0x100106846
lea r9, [rsp + 0x230]
lea r8, [0x10003f3e0]
lea rcx, [rsp + 0xf0]
call fcn.1000ea04c
lea rdx, [rsp + 0x40]
mov qword [rsp + 0x40], rdi
mov qword [rsp + 0x48], r12
mov qword [rsp + 0x50], rsi
mov dword [rsp + 0x58], 0x6e5
mov dword [rsp + 0x5c], r13d
mov dword [rsp + 0x60], r14d
mov word [rsp + 0xe0], bx
mov byte [rsp + 0xe2], bl
mov byte [rsp + 0xe3], 1
movzx ecx, bx
cmp cx, 0xf
jae 0x1001068c8
movzx eax, cx
mov qword [rdx + rax*8 + 0x28], rbx
inc cx
jmp 0x1001068b5
lea r9, [rsp + 0x180]
lea r8, [0x10003f480]
lea rcx, [rsp + 0xf0]
call fcn.1000e9608
lea rcx, [rsp + 0x180]
call fcn.1001060f4
mov rbx, rax
lea rcx, [rsp + 0xf0]
call fcn.1000e8518
mov rax, rbx
jmp 0x1001069b0
mov rcx, qword [rsp + 0x650]
xor rcx, rsp
call fcn.100130df0
lea r11, [rsp + 0x660]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov r12, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop r13
ret