Function at 0x100105f5c
Capabilities:
Get disk information

Disassembly:
mov r11, rsp
push r13
push r14
push r15
sub rsp, 0x660
mov qword [rsp + 0x168], 0xfffffffffffffffe
mov qword [r11 + 8], rbx
mov qword [r11 + 0x10], rsi
mov qword [r11 + 0x18], rdi
mov qword [r11 + 0x20], r12
mov rax, qword [0x100176150]
xor rax, rsp
mov qword [rsp + 0x650], rax
lea rdi, [0x10003c720]
mov qword [r11 - 0x4f8], rdi
lea r12, [0x10003f120]
mov qword [r11 - 0x4f0], r12
lea rsi, [0x10003c708]
mov qword [r11 - 0x4e8], rsi
mov dword [rsp + 0x198], 0x6c9
mov r13d, 0xb
mov dword [r11 - 0x4dc], r13d
mov r14d, 0xff
mov dword [r11 - 0x4d8], r14d
xor ebx, ebx
mov word [rsp + 0x220], bx
mov byte [rsp + 0x222], bl
mov byte [rsp + 0x223], 1
xor edx, edx
lea r8d, [r13 + 0x6d]
lea rcx, [r11 - 0x4d0]
call sub.msvcrt.dll_memset
xor r8d, r8d
lea rdx, [rsp + 0x180]
lea rcx, [rsp + 0xf0]
call fcn.1000e8000
nop
lea edx, [r14 + 6]
lea rcx, [rsp + 0x440]
call qword [sym.imp.KERNEL32.dll_GetSystemWindowsDirectoryW]
mov r15d, eax
cmp eax, ebx
jne 0x1001060c5
lea rdx, [rsp + 0x40]
mov qword [rsp + 0x40], rdi
mov qword [rsp + 0x48], r12
mov qword [rsp + 0x50], rsi
mov dword [rsp + 0x58], 0x6d2
mov dword [rsp + 0x5c], r13d
mov dword [rsp + 0x60], r14d
mov word [rsp + 0xe0], bx
mov byte [rsp + 0xe2], bl
mov byte [rsp + 0xe3], 1
movzx ecx, bx
cmp cx, 0xf
jae 0x100106099
movzx eax, cx
mov qword [rdx + rax*8 + 0x28], rbx
inc cx
jmp 0x100106086
mov dword [rsp + 0x28], r15d
mov r15d, 0x105
mov dword [rsp + 0x20], r15d
lea r9, [rsp + 0x440]
lea r8, [0x10003f180]
lea rcx, [rsp + 0xf0]
call fcn.1000e9c20
lea rdx, [rsp + 0x40]
mov qword [rsp + 0x40], rdi
mov qword [rsp + 0x48], r12
mov qword [rsp + 0x50], rsi
mov dword [rsp + 0x58], 0x6d4
mov dword [rsp + 0x5c], r13d
mov dword [rsp + 0x60], r14d
mov word [rsp + 0xe0], bx
mov byte [rsp + 0xe2], bl
mov byte [rsp + 0xe3], 1
movzx ecx, bx
cmp cx, 0xf
jae 0x100106118
movzx eax, cx
mov qword [rdx + rax*8 + 0x28], rbx
inc cx
jmp 0x100106105
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x30], eax
mov dword [rsp + 0x28], r15d
mov r15d, 0x105
mov dword [rsp + 0x20], r15d
lea r9, [rsp + 0x440]
lea r8, [0x10003f1d0]
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0xf0]
call fcn.1000e91dc
mov word [rsp + 0x230], bx
xor edx, edx
mov r8d, 0x208
lea rcx, [rsp + 0x232]
call sub.msvcrt.dll_memset
mov r8d, r15d
lea rdx, [rsp + 0x230]
lea rcx, [rsp + 0x440]
call qword [sym.imp.KERNEL32.dll_GetVolumePathNameW]
cmp eax, ebx
jne 0x100106212
lea rdx, [rsp + 0x40]
mov qword [rsp + 0x40], rdi
mov qword [rsp + 0x48], r12
mov qword [rsp + 0x50], rsi
mov dword [rsp + 0x58], 0x6dd
mov dword [rsp + 0x5c], r13d
mov dword [rsp + 0x60], r14d
mov word [rsp + 0xe0], bx
mov byte [rsp + 0xe2], bl
mov byte [rsp + 0xe3], 1
movzx ecx, bx
cmp cx, 0xf
jae 0x1001061e4
movzx eax, cx
mov qword [rdx + rax*8 + 0x28], rbx
inc cx
jmp 0x1001061d1
mov dword [rsp + 0x28], r15d
lea rax, [rsp + 0x230]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x440]
lea r8, [0x10003f238]
lea rcx, [rsp + 0xf0]
call fcn.1000e9c20
mov r8d, 0x32
lea rdx, [rsp + 0x180]
lea rcx, [rsp + 0x230]
call qword [sym.imp.KERNEL32.dll_GetVolumeNameForVolumeMountPointW]
cmp eax, ebx
jne 0x1001062a1
lea rdx, [rsp + 0x40]
mov qword [rsp + 0x40], rdi
mov qword [rsp + 0x48], r12
mov qword [rsp + 0x50], rsi
mov dword [rsp + 0x58], 0x6e3
mov dword [rsp + 0x5c], r13d
mov dword [rsp + 0x60], r14d
mov word [rsp + 0xe0], bx
mov byte [rsp + 0xe2], bl
mov byte [rsp + 0xe3], 1
movzx ecx, bx
cmp cx, 0xf
jae 0x100106285
movzx eax, cx
mov qword [rdx + rax*8 + 0x28], rbx
inc cx
jmp 0x100106272
lea r9, [rsp + 0x230]
lea r8, [0x10003f280]
lea rcx, [rsp + 0xf0]
call fcn.1000e9c20
lea rdx, [rsp + 0x40]
mov qword [rsp + 0x40], rdi
mov qword [rsp + 0x48], r12
mov qword [rsp + 0x50], rsi
mov dword [rsp + 0x58], 0x6e5
mov dword [rsp + 0x5c], r13d
mov dword [rsp + 0x60], r14d
mov word [rsp + 0xe0], bx
mov byte [rsp + 0xe2], bl
mov byte [rsp + 0xe3], 1
movzx ecx, bx
cmp cx, 0xf
jae 0x1001062f4
movzx eax, cx
mov qword [rdx + rax*8 + 0x28], rbx
inc cx
jmp 0x1001062e1
lea r9, [rsp + 0x180]
lea r8, [0x10003f320]
lea rcx, [rsp + 0xf0]
call fcn.1000e91dc
lea rcx, [rsp + 0x180]
call fcn.100105b20
mov rbx, rax
lea rcx, [rsp + 0xf0]
call fcn.1000e80ec
mov rax, rbx
jmp 0x1001063dc
mov rcx, qword [rsp + 0x650]
xor rcx, rsp
call fcn.100130830
lea r11, [rsp + 0x660]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov r12, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop r13
ret