Function at 0x14000d070
Capabilities:
Get disk information

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x40
mov r13, r8
mov r12, rdx
mov rdi, rcx
xor esi, esi
mov dword [rax + 0x10], esi
mov qword [rax - 0x58], rsi
mov dword [rax + 0x20], esi
mov qword [rdx], rsi
lea r8, str.CVdsVolume::QueryAccessPathsToVolume__
lea edx, [rsi + 0x5e]
lea rcx, [rax - 0x50]
call qword [sym.imp.vdsutil.dll_public:_void___cdecl_CVdsCallTracer::constructor_unsigned_long_int__char_const____ptr64____ptr64]
nop dword [rax + rax]
nop
lea r9, [rsp + 0x88]
xor r8d, r8d
xor edx, edx
mov rcx, rdi
call qword [sym.imp.api_ms_win_core_file_l1_2_0.dll_GetVolumePathNamesForVolumeNameW]
nop dword [rax + rax]
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
mov ebx, dword [rsp + 0x88]
add rbx, rbx
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, rbx
lea edx, [rsi + 8]
mov rcx, rax
call qword [sym.imp.vdsutil.dll_VdsHeapAlloc]
nop dword [rax + rax]
mov r15, rax
mov qword [rsp + 0x20], rax
test rax, rax
je 0x14000d2fe
lea r9, [rsp + 0x98]
mov r8d, dword [rsp + 0x88]
mov rdx, rax
mov rcx, rdi
call qword [sym.imp.api_ms_win_core_file_l1_2_0.dll_GetVolumePathNamesForVolumeNameW]
nop dword [rax + rax]
test eax, eax
jne 0x14000d190
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
mov ebx, eax
mov r9d, eax
lea r8, str.CVdsVolume::QueryAccessPathsToVolume:_GetVolumePathNamesForVolumeName_failed:__X
xor edx, edx
lea ecx, [rsi + 0x5e]
call qword [sym.imp.vdsutil.dll_VdsTraceEx]
nop dword [rax + rax]
nop
lea rcx, [rsp + 0x28]
call qword [sym.imp.vdsutil.dll_public:_void___cdecl_CVdsCallTracer::destructor_void____ptr64]
nop dword [rax + rax]
nop
lea rcx, [rsp + 0x20]
call sym.vds.exe_public:_void___cdecl_CVdsHeapPtr_char_::destructor_void____ptr64
mov eax, ebx
jmp 0x14000d31f
mov ebx, esi
cmp word [r15], bx
je 0x14000d35c
mov rcx, r15
nop
mov rax, 0xffffffffffffffff
nop word [rax + rax]
lea rax, [rax + 1]
cmp word [rcx + rax*2], 0
jne 0x14000d1b0
lea rcx, [rcx + rax*2]
add rcx, 2
inc ebx
cmp word [rcx], 0
jne 0x14000d1a0
test ebx, ebx
je 0x14000d35c
mov edi, ebx
shl rdi, 3
mov rcx, rdi
call qword [sym.imp.api_ms_win_core_com_l1_1_0.dll_CoTaskMemAlloc]
nop dword [rax + rax]
mov qword [r12], rax
test rax, rax
jne 0x14000d22d
lea rcx, [rsp + 0x28]
call qword [sym.imp.vdsutil.dll_public:_void___cdecl_CVdsCallTracer::destructor_void____ptr64]
nop dword [rax + rax]
nop
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r15
xor edx, edx
mov rcx, rax
call qword [sym.imp.vdsutil.dll_VdsHeapFree]
nop dword [rax + rax]
mov qword [rsp + 0x20], rsi
jmp 0x14000d31a
mov r8, rdi
xor edx, edx
mov rcx, rax
call sub.msvcrt.dll_memset
cmp esi, ebx
jae 0x14000d338
mov rdi, 0xffffffffffffffff
inc rdi
cmp word [r15 + rdi*2], 0
jne 0x14000d249
lea rcx, [rdi*2 + 2]
call qword [sym.imp.api_ms_win_core_com_l1_1_0.dll_CoTaskMemAlloc]
nop dword [rax + rax]
mov ebp, esi
lea r14, [rbp*8]
mov rcx, qword [r12]
mov qword [r14 + rcx], rax
mov rcx, qword [r12]
mov rax, qword [rcx + r14]
test rax, rax
je 0x14000d2b3
lea rdx, [rdi + 1]
mov r9, rdi
mov r8, r15
mov rcx, rax
call fcn.14002bf7c
mov r11, qword [r12]
mov rax, qword [r14 + r11]
xor ecx, ecx
mov word [rax + rdi*2], cx
lea r15, [r15 + rdi*2]
add r15, 2
inc esi
jmp 0x14000d23a
xor edi, edi
test esi, esi
je 0x14000d2e9
mov ebx, edi
mov rax, qword [rbx + rcx]
test rax, rax
je 0x14000d2df
mov rcx, rax
call qword [sym.imp.api_ms_win_core_com_l1_1_0.dll_CoTaskMemFree]
nop dword [rax + rax]
mov rax, qword [r12]
mov qword [rbx + rax], rdi
mov rcx, qword [r12]
add rbx, 8
sub rbp, 1
jne 0x14000d2bb
test rcx, rcx
je 0x14000d2fe
call qword [sym.imp.api_ms_win_core_com_l1_1_0.dll_CoTaskMemFree]
nop dword [rax + rax]
mov qword [r12], rdi
lea rcx, [rsp + 0x28]
call qword [sym.imp.vdsutil.dll_public:_void___cdecl_CVdsCallTracer::destructor_void____ptr64]
nop dword [rax + rax]
nop
lea rcx, [rsp + 0x20]
call sym.vds.exe_public:_void___cdecl_CVdsHeapPtr_char_::destructor_void____ptr64
mov eax, 8
mov rbx, qword [rsp + 0x80]
add rsp, 0x40
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
mov dword [r13], ebx
lea rcx, [rsp + 0x28]
call qword [sym.imp.vdsutil.dll_public:_void___cdecl_CVdsCallTracer::destructor_void____ptr64]
nop dword [rax + rax]
nop
lea rcx, [rsp + 0x20]
call sym.vds.exe_public:_void___cdecl_CVdsHeapPtr_char_::destructor_void____ptr64
xor eax, eax
jmp 0x14000d31f
lea rcx, [rsp + 0x28]
call qword [sym.imp.vdsutil.dll_public:_void___cdecl_CVdsCallTracer::destructor_void____ptr64]
nop dword [rax + rax]
nop
call qword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
nop dword [rax + rax]
mov r8, r15
xor edx, edx
mov rcx, rax
call qword [sym.imp.vdsutil.dll_VdsHeapFree]
nop dword [rax + rax]
mov qword [rsp + 0x20], rsi
xor eax, eax
jmp 0x14000d31f