Function at 0x100105b00
Capabilities:
Get disk information

Disassembly:
mov r11, rsp
push r13
push r14
push r15
sub rsp, 0x660
mov qword [rsp + 0x168], 0xfffffffffffffffe
mov qword [r11 + 8], rbx
mov qword [r11 + 0x10], rsi
mov qword [r11 + 0x18], rdi
mov qword [r11 + 0x20], r12
mov rax, qword [0x100175150]
xor rax, rsp
mov qword [rsp + 0x650], rax
lea rdi, [0x10003c5c0]
mov qword [r11 - 0x4f8], rdi
lea r12, [0x10003efc0]
mov qword [r11 - 0x4f0], r12
lea rsi, [0x10003c5a8]
mov qword [r11 - 0x4e8], rsi
mov dword [rsp + 0x198], 0x6c9
mov r13d, 0xb
mov dword [r11 - 0x4dc], r13d
mov r14d, 0xff
mov dword [r11 - 0x4d8], r14d
xor ebx, ebx
mov word [rsp + 0x220], bx
mov byte [rsp + 0x222], bl
mov byte [rsp + 0x223], 1
xor edx, edx
lea r8d, [r13 + 0x6d]
lea rcx, [r11 - 0x4d0]
call sub.msvcrt.dll_memset
xor r8d, r8d
lea rdx, [rsp + 0x180]
lea rcx, [rsp + 0xf0]
call fcn.1000e7c38
nop
lea edx, [r14 + 6]
lea rcx, [rsp + 0x440]
call qword [sym.imp.KERNEL32.dll_GetSystemWindowsDirectoryW]
mov r15d, eax
cmp eax, ebx
jne 0x100105c69
lea rdx, [rsp + 0x40]
mov qword [rsp + 0x40], rdi
mov qword [rsp + 0x48], r12
mov qword [rsp + 0x50], rsi
mov dword [rsp + 0x58], 0x6d2
mov dword [rsp + 0x5c], r13d
mov dword [rsp + 0x60], r14d
mov word [rsp + 0xe0], bx
mov byte [rsp + 0xe2], bl
mov byte [rsp + 0xe3], 1
movzx ecx, bx
cmp cx, 0xf
jae 0x100105c3d
movzx eax, cx
mov qword [rdx + rax*8 + 0x28], rbx
inc cx
jmp 0x100105c2a
mov dword [rsp + 0x28], r15d
mov r15d, 0x105
mov dword [rsp + 0x20], r15d
lea r9, [rsp + 0x440]
lea r8, [0x10003f020]
lea rcx, [rsp + 0xf0]
call fcn.1000e9858
lea rdx, [rsp + 0x40]
mov qword [rsp + 0x40], rdi
mov qword [rsp + 0x48], r12
mov qword [rsp + 0x50], rsi
mov dword [rsp + 0x58], 0x6d4
mov dword [rsp + 0x5c], r13d
mov dword [rsp + 0x60], r14d
mov word [rsp + 0xe0], bx
mov byte [rsp + 0xe2], bl
mov byte [rsp + 0xe3], 1
movzx ecx, bx
cmp cx, 0xf
jae 0x100105cbc
movzx eax, cx
mov qword [rdx + rax*8 + 0x28], rbx
inc cx
jmp 0x100105ca9
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x30], eax
mov dword [rsp + 0x28], r15d
mov r15d, 0x105
mov dword [rsp + 0x20], r15d
lea r9, [rsp + 0x440]
lea r8, [0x10003f070]
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0xf0]
call fcn.1000e8e14
mov word [rsp + 0x230], bx
xor edx, edx
mov r8d, 0x208
lea rcx, [rsp + 0x232]
call sub.msvcrt.dll_memset
mov r8d, r15d
lea rdx, [rsp + 0x230]
lea rcx, [rsp + 0x440]
call qword [sym.imp.KERNEL32.dll_GetVolumePathNameW]
cmp eax, ebx
jne 0x100105db6
lea rdx, [rsp + 0x40]
mov qword [rsp + 0x40], rdi
mov qword [rsp + 0x48], r12
mov qword [rsp + 0x50], rsi
mov dword [rsp + 0x58], 0x6dd
mov dword [rsp + 0x5c], r13d
mov dword [rsp + 0x60], r14d
mov word [rsp + 0xe0], bx
mov byte [rsp + 0xe2], bl
mov byte [rsp + 0xe3], 1
movzx ecx, bx
cmp cx, 0xf
jae 0x100105d88
movzx eax, cx
mov qword [rdx + rax*8 + 0x28], rbx
inc cx
jmp 0x100105d75
mov dword [rsp + 0x28], r15d
lea rax, [rsp + 0x230]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x440]
lea r8, [0x10003f0d8]
lea rcx, [rsp + 0xf0]
call fcn.1000e9858
mov r8d, 0x32
lea rdx, [rsp + 0x180]
lea rcx, [rsp + 0x230]
call qword [sym.imp.KERNEL32.dll_GetVolumeNameForVolumeMountPointW]
cmp eax, ebx
jne 0x100105e45
lea rdx, [rsp + 0x40]
mov qword [rsp + 0x40], rdi
mov qword [rsp + 0x48], r12
mov qword [rsp + 0x50], rsi
mov dword [rsp + 0x58], 0x6e3
mov dword [rsp + 0x5c], r13d
mov dword [rsp + 0x60], r14d
mov word [rsp + 0xe0], bx
mov byte [rsp + 0xe2], bl
mov byte [rsp + 0xe3], 1
movzx ecx, bx
cmp cx, 0xf
jae 0x100105e29
movzx eax, cx
mov qword [rdx + rax*8 + 0x28], rbx
inc cx
jmp 0x100105e16
lea r9, [rsp + 0x230]
lea r8, [0x10003f120]
lea rcx, [rsp + 0xf0]
call fcn.1000e9858
lea rdx, [rsp + 0x40]
mov qword [rsp + 0x40], rdi
mov qword [rsp + 0x48], r12
mov qword [rsp + 0x50], rsi
mov dword [rsp + 0x58], 0x6e5
mov dword [rsp + 0x5c], r13d
mov dword [rsp + 0x60], r14d
mov word [rsp + 0xe0], bx
mov byte [rsp + 0xe2], bl
mov byte [rsp + 0xe3], 1
movzx ecx, bx
cmp cx, 0xf
jae 0x100105e98
movzx eax, cx
mov qword [rdx + rax*8 + 0x28], rbx
inc cx
jmp 0x100105e85
lea r9, [rsp + 0x180]
lea r8, [0x10003f1c0]
lea rcx, [rsp + 0xf0]
call fcn.1000e8e14
lea rcx, [rsp + 0x180]
call fcn.1001056c4
mov rbx, rax
lea rcx, [rsp + 0xf0]
call fcn.1000e7d24
mov rax, rbx
jmp 0x100105f80
mov rcx, qword [rsp + 0x650]
xor rcx, rsp
call fcn.1001303c0
lea r11, [rsp + 0x660]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov r12, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop r13
ret