Function at 0x14008d194
Capabilities:
Get disk information

Disassembly:
mov r11, rsp
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x750
mov qword [r11 - 0x5c0], 0xfffffffffffffffe
mov qword [r11 + 8], rbx
mov qword [r11 + 0x10], rsi
mov rax, qword [0x14015d3e0]
xor rax, rsp
mov qword [rsp + 0x740], rax
mov rax, r9
mov qword [rsp + 0x58], rax
mov rbx, rdx
mov qword [rsp + 0x120], r8
mov qword [rsp + 0x48], rax
lea rsi, str.base_stor_vssmodulescoord_srchwdelete.cxx
mov qword [rsp + 0x60], rsi
lea r14, str.CVssHardwareProviderWrapper::RestoreSharesAndMountPointsOnVolume
mov qword [rsp + 0x68], r14
lea r15, str.CORHDELC
mov qword [rsp + 0x70], r15
mov dword [rsp + 0x78], 0x59c
mov dword [rsp + 0x7c], 1
mov r12d, 0xff
mov dword [r11 - 0x6f8], r12d
xor edi, edi
mov dword [rsp + 0x100], 0x1000000
lea r13d, [rdi + 0x78]
mov r8d, r13d
xor edx, edx
lea rcx, [r11 - 0x6f0]
call sub.msvcrt.dll_memset
xor r8d, r8d
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x140]
call fcn.1400bec34
nop
mov dword [rsp + 0x50], edi
xor edx, edx
mov r8d, 0x208
lea rcx, [rsp + 0x320]
call sub.msvcrt.dll_memset
mov qword [rsp + 0x138], rdi
lea rax, [0x1400f6248]
mov qword [rsp + 0x130], rax
mov r8, rbx
lea edx, [r12 + 5]
lea rcx, [rsp + 0x320]
call fcn.14002d18c
mov dword [rsp + 0x148], eax
mov qword [rsp + 0x60], rsi
mov qword [rsp + 0x68], r14
mov qword [rsp + 0x70], r15
mov dword [rsp + 0x78], 0x5a9
mov dword [rsp + 0x7c], 1
mov dword [rsp + 0x80], r12d
mov dword [rsp + 0x100], 0x1000000
mov r8d, r13d
xor edx, edx
lea rcx, [rsp + 0x88]
call sub.msvcrt.dll_memset
lea r8, str.StringCchCopy_copy_input_volume_name
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x140]
call fcn.140031318
lea rcx, [rsp + 0x320]
or rax, 0xffffffffffffffff
inc rax
cmp word [rcx + rax*2], di
jne 0x14008d312
movzx eax, ax
cmp word [rsp + rax*2 + 0x31e], 0x5c
je 0x14008d43a
mov edx, 0x104
lea rax, [rsp + 0x320]
cmp word [rax], di
je 0x14008d349
add rax, 2
sub rdx, 1
jne 0x14008d33a
mov rax, rdx
neg rax
sbb ecx, ecx
not ecx
and ecx, 0x80070057
test rdx, rdx
je 0x14008d368
mov eax, 0x104
sub rax, rdx
jmp 0x14008d36b
mov rax, rdi
test rdx, rdx
je 0x14008d3d6
mov ecx, 0x104
sub rcx, rax
lea rdx, [rsp + 0x320]
lea rdx, [rdx + rax*2]
je 0x14008d3bb
lea r8, [rax + 0x7ffffefa]
add r8, rcx
lea rax, [0x1401035b0]
sub rax, rdx
test r8, r8
je 0x14008d3bb
movzx r9d, word [rdx + rax]
test r9w, r9w
je 0x14008d3bb
mov word [rdx], r9w
add rdx, 2
dec r8
sub rcx, 1
jne 0x14008d39a
lea rax, [rdx - 2]
test rcx, rcx
cmovne rax, rdx
mov word [rax], di
neg rcx
sbb ecx, ecx
not ecx
and ecx, 0x8007007a
mov dword [rsp + 0x148], ecx
mov qword [rsp + 0x60], rsi
mov qword [rsp + 0x68], r14
mov qword [rsp + 0x70], r15
mov dword [rsp + 0x78], 0x5b2
mov dword [rsp + 0x7c], 1
mov dword [rsp + 0x80], r12d
mov dword [rsp + 0x100], 0x1000000
mov r8, r13
xor edx, edx
lea rcx, [rsp + 0x88]
call sub.msvcrt.dll_memset
lea r8, str.StringCchCat_fails_to_concat_backslash
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x140]
call fcn.140031318
mov eax, edi
mov rcx, qword [rsp + 0x58]
test rcx, rcx
sete al
mov dword [rsp + 0x108], eax
test rcx, rcx
je 0x14008d8e7
lea r9, [rsp + 0x50]
xor r8d, r8d
xor edx, edx
lea rcx, [rsp + 0x320]
call qword [sym.imp.api_ms_win_core_file_l1_2_0.dll_GetVolumePathNamesForVolumeNameW]
nop dword [rax + rax]
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
cmp eax, 0xea
je 0x14008d530
mov qword [rsp + 0x60], rsi
mov qword [rsp + 0x68], r14
mov qword [rsp + 0x70], r15
mov dword [rsp + 0x78], 0x5c7
mov dword [rsp + 0x7c], 1
mov dword [rsp + 0x80], r12d
mov dword [rsp + 0x100], 0x1000000
mov r8, r13
xor edx, edx
lea rcx, [rsp + 0x88]
call sub.msvcrt.dll_memset
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
mov ebx, eax
test eax, eax
jle 0x14008d4eb
movzx ebx, ax
or ebx, 0x80070000
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
test eax, eax
jle 0x14008d503
movzx eax, ax
or eax, 0x80070000
mov dword [rsp + 0x28], ebx
lea rcx, [rsp + 0x320]
mov qword [rsp + 0x20], rcx
lea r9, str.GetVolumePathNamesForVolumeName__s__fails_with_0x_08lx
mov r8d, eax
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x140]
call fcn.1400c2090
mov ebx, dword [rsp + 0x50]
lea rcx, [rsp + 0x130]
call fcn.1400313a4
lea rdx, [rbx*2 + 2]
xor ecx, ecx
call qword [sym.imp.api_ms_win_core_heap_l2_1_0.dll_LocalAlloc]
nop dword [rax + rax]
mov rbx, rax
mov qword [rsp + 0x138], rax
test rax, rax
jne 0x14008d586
mov dword [rsp + 0x118], 0x8007000e
lea rdx, [0x140159b90]
lea rcx, [rsp + 0x118]
call sub.msvcrt.dll__CxxThrowException
lea r9, [rsp + 0x50]
mov r8d, dword [rsp + 0x50]
mov rdx, rax
lea rcx, [rsp + 0x320]
call qword [sym.imp.api_ms_win_core_file_l1_2_0.dll_GetVolumePathNamesForVolumeNameW]
nop dword [rax + rax]
test eax, eax
jne 0x14008d653
mov qword [rsp + 0x60], rsi
mov qword [rsp + 0x68], r14
mov qword [rsp + 0x70], r15
mov dword [rsp + 0x78], 0x5cf
mov dword [rsp + 0x7c], 1
mov dword [rsp + 0x80], r12d
mov dword [rsp + 0x100], 0x1000000
mov r8, r13
xor edx, edx
lea rcx, [rsp + 0x88]
call sub.msvcrt.dll_memset
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
mov ebx, eax
test eax, eax
jle 0x14008d60e
movzx ebx, ax
or ebx, 0x80070000
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
test eax, eax
jle 0x14008d626
movzx eax, ax
or eax, 0x80070000
mov dword [rsp + 0x28], ebx
lea rcx, [rsp + 0x320]
mov qword [rsp + 0x20], rcx
lea r9, str.GetVolumePathNamesForVolumeName__s__fails_with_0x_08lx
mov r8d, eax
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x140]
call fcn.1400c2090
or rax, 0xffffffffffffffff
inc rax
cmp word [rbx + rax*2], di
jne 0x14008d657
test rax, rax
je 0x14008d714
mov rcx, rbx
call qword [sym.imp.api_ms_win_core_file_l1_1_0.dll_DeleteVolumeMountPointW]
nop dword [rax + rax]
test eax, eax
jne 0x14008d6f9
mov qword [rsp + 0x60], rsi
mov qword [rsp + 0x68], r14
mov qword [rsp + 0x70], r15
mov dword [rsp + 0x78], 0x5db
mov dword [rsp + 0x7c], 1
mov dword [rsp + 0x80], r12d
mov dword [rsp + 0x100], 0x1000000
mov r8, r13
xor edx, edx
lea rcx, [rsp + 0x88]
call sub.msvcrt.dll_memset
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
mov dword [rsp + 0x28], eax
lea rax, [rsp + 0x320]
mov qword [rsp + 0x20], rax
mov r9, rbx
lea r8, str.Fail_to_delete_mount_point__s_for_volume__s__winerror__d
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x140]
call fcn.140009fb0
or rax, 0xffffffffffffffff
inc rax
cmp word [rbx + rax*2], di
jne 0x14008d6fd
lea rbx, [rbx + rax*2]
add rbx, 2
jne 0x14008d653
mov rbx, qword [rsp + 0x58]
mov qword [rsp + 0x110], rbx
or rax, 0xffffffffffffffff
inc rax
cmp word [rbx + rax*2], di
jne 0x14008d725
test rax, rax
je 0x14008d8e7
lea rdx, [rsp + 0x320]
mov rcx, rbx
call qword [sym.imp.api_ms_win_core_kernel32_legacy_l1_1_1.dll_SetVolumeMountPointW]
nop dword [rax + rax]
test eax, eax
jne 0x14008d8c4
mov qword [rsp + 0x60], rsi
mov qword [rsp + 0x68], r14
mov qword [rsp + 0x70], r15
mov dword [rsp + 0x78], 0x5eb
mov dword [rsp + 0x7c], 6
mov dword [rsp + 0x80], r12d
mov dword [rsp + 0x100], 0x1000000
mov r8, r13
xor edx, edx
lea rcx, [rsp + 0x88]
call sub.msvcrt.dll_memset
mov r8, rbx
lea rdx, [rsp + 0x278]
lea rcx, [rsp + 0x60]
call fcn.1400bf0cc
lea r8, [rsp + 0x320]
lea rdx, [rsp + 0x1d0]
mov rcx, rax
call fcn.1400bf0cc
mov rbx, rax
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
mov r8d, eax
lea rdx, [rsp + 0x530]
mov rcx, rbx
call fcn.1400bf2cc
mov r9d, 1
mov r8, rax
mov edx, 0x3041
lea rcx, [rsp + 0x140]
call fcn.1400c09a4
lea rcx, [rsp + 0x1d0]
call fcn.1400bed5c
lea rcx, [rsp + 0x278]
call fcn.1400bed5c
lea rcx, [rsp + 0x60]
call fcn.1400bed5c
mov qword [rsp + 0x60], rsi
mov qword [rsp + 0x68], r14
mov qword [rsp + 0x70], r15
mov dword [rsp + 0x78], 0x5ed
mov dword [rsp + 0x7c], 6
mov dword [rsp + 0x80], r12d
mov dword [rsp + 0x100], 0x1000000
mov r8, r13
xor edx, edx
lea rcx, [rsp + 0x88]
call sub.msvcrt.dll_memset
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
nop dword [rax + rax]
test eax, eax
jle 0x14008d884
movzx eax, ax
or eax, 0x80070000
mov dword [rsp + 0x28], eax
lea rax, [rsp + 0x320]
mov qword [rsp + 0x20], rax
mov rbx, qword [rsp + 0x110]
mov r9, rbx
lea r8, str.SetVolumeMountPoint__s___s__fails_with_0x_08lx
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x140]
call fcn.140009fb0
mov dword [rsp + 0x108], 1
or rax, 0xffffffffffffffff
inc rax
cmp word [rbx + rax*2], di
jne 0x14008d8c8
lea rbx, [rbx + rax*2]
add rbx, 2
mov qword [rsp + 0x110], rbx
jne 0x14008d721
jmp 0x14008d91c
mov ebx, dword [rsp + 0x148]
test ebx, ebx
jns 0x14008d997
mov qword [rsp + 0x60], rsi
mov qword [rsp + 0x68], r14
mov qword [rsp + 0x70], r15
mov dword [rsp + 0x78], 0x5fb
mov dword [rsp + 0x7c], 1
mov dword [rsp + 0x80], r12d
mov dword [rsp + 0x100], 0x1000000
mov r8, r13
xor edx, edx
lea rcx, [rsp + 0x88]
call sub.msvcrt.dll_memset
mov dword [rsp + 0x20], ebx
lea r9, [rsp + 0x320]
lea r8, str.Fail_to_restore_all_mount_points_for__s.__0_08lx_._Continuing.
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x140]
call fcn.140009fb0
mov dword [rsp + 0x148], edi
mov ecx, edi
mov dword [rsp + 0x110], ecx
mov rax, qword [rsp + 0x120]
mov eax, dword [rax + 8]
test eax, eax
jle 0x14008dc8f
mov rbx, rdi
test rbx, rbx
js 0x14008dd3e
cmp ecx, eax
jge 0x14008dd3e
mov rax, qword [rsp + 0x120]
mov rax, qword [rax]
mov qword [rsp + 0x48], rax
xor edx, edx
mov r8d, 0x208
lea rcx, [rsp + 0x530]
call sub.msvcrt.dll_memset
mov rax, qword [rsp + 0x48]
lea rdx, [rbx + rax]
or rcx, 0xffffffffffffffff
inc rcx
cmp word [rdx + rcx*2 + 8], di
jne 0x14008d9f9
mov rax, qword [rbx + rax]
mov rdx, qword [rax + 0x28]
movsxd rax, dword [rsp + 0x108]
lea r8, str._s_s
test rax, rax
lea rax, [rdx + rcx*2]
mov qword [rsp + 0x20], rax
mov edx, 0x104
lea rcx, [rsp + 0x530]
lea r9, [rsp + 0x320]
jne 0x14008da42
mov r9, qword [rsp + 0x58]
call fcn.1400053e0
mov dword [rsp + 0x148], eax
shr eax, 0x1f
test al, al
jne 0x14008dcd8
mov rdx, qword [rsp + 0x48]
mov rdx, qword [rbx + rdx]
xor r8d, r8d
mov rdx, qword [rdx]
xor ecx, ecx
call qword [sym.imp.srvcli.dll_NetShareDel]
nop dword [rax + rax]
mov dword [rsp + 0x54], eax
test eax, eax
je 0x14008daef
mov qword [rsp + 0x60], rsi
mov qword [rsp + 0x68], r14
mov qword [rsp + 0x70], r15
mov dword [rsp + 0x78], 0x617
mov dword [rsp + 0x7c], 6
mov dword [rsp + 0x80], r12d
mov dword [rsp + 0x100], 0x1000000
mov r8, r13
xor edx, edx
lea rcx, [rsp + 0x88]
call sub.msvcrt.dll_memset
mov rax, qword [rsp + 0x48]
mov r9, qword [rbx + rax]
mov eax, dword [rsp + 0x54]
mov dword [rsp + 0x20], eax
mov r9, qword [r9]
lea r8, str.NetShareDel__s__failed_with__d
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x140]
call fcn.140009fb0
mov rcx, qword [rsp + 0x48]
mov rax, qword [rbx + rcx]
mov rdx, qword [rax + 0x28]
mov qword [rsp + 0x40], rdx
lea r8, [rsp + 0x530]
mov qword [rax + 0x28], r8
xor r9d, r9d
mov r8, qword [rbx + rcx]
mov edx, 0x1f6
xor ecx, ecx
call qword [sym.imp.srvcli.dll_NetShareAdd]
nop dword [rax + rax]
mov dword [rsp + 0x54], eax
test eax, eax
je 0x14008dc53
mov qword [rsp + 0x60], rsi
mov qword [rsp + 0x68], r14
mov qword [rsp + 0x70], r15
mov dword [rsp + 0x78], 0x61f
mov dword [rsp + 0x7c], 6
mov dword [rsp + 0x80], r12d
mov dword [rsp + 0x100], 0x1000000
mov r8, r13
xor edx, edx
lea rcx, [rsp + 0x88]
call sub.msvcrt.dll_memset
lea r8, [rsp + 0x530]
lea rdx, [rsp + 0x1d0]
lea rcx, [rsp + 0x60]
call fcn.1400bf0cc
mov r8d, dword [rsp + 0x54]
lea rdx, [rsp + 0x278]
mov rcx, rax
call fcn.1400bf2cc
mov r9d, 1
mov r8, rax
mov edx, 0x3042
lea rcx, [rsp + 0x140]
call fcn.1400c09a4
lea rcx, [rsp + 0x1d0]
call fcn.1400bed5c
lea rcx, [rsp + 0x60]
call fcn.1400bed5c
mov qword [rsp + 0x60], rsi
mov qword [rsp + 0x68], r14
mov qword [rsp + 0x70], r15
mov dword [rsp + 0x78], 0x620
mov dword [rsp + 0x7c], 6
mov dword [rsp + 0x80], r12d
mov dword [rsp + 0x100], 0x1000000
mov r8, r13
xor edx, edx
lea rcx, [rsp + 0x88]
call sub.msvcrt.dll_memset
mov rax, qword [rsp + 0x48]
mov r9, qword [rbx + rax]
mov eax, dword [rsp + 0x54]
mov dword [rsp + 0x28], eax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x20], rax
mov r9, qword [r9]
lea r8, str.NetShareAdd__s___s__failed_with__d
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x140]
call fcn.140009fb0
mov rax, qword [rsp + 0x48]
mov rax, qword [rbx + rax]
mov rcx, qword [rsp + 0x40]
mov qword [rax + 0x28], rcx
mov ecx, dword [rsp + 0x110]
inc ecx
mov dword [rsp + 0x110], ecx
add rbx, 0x210
mov rax, qword [rsp + 0x120]
mov eax, dword [rax + 8]
cmp ecx, eax
jl 0x14008d9b6
lea rcx, [rsp + 0x130]
call fcn.14002e4c8
nop
lea rcx, [rsp + 0x140]
call fcn.140009990
mov rcx, qword [rsp + 0x740]
xor rcx, rsp
call fcn.1400164a0
lea r11, [rsp + 0x750]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret
mov qword [rsp + 0x60], rsi
mov qword [rsp + 0x68], r14
mov qword [rsp + 0x70], r15
mov dword [rsp + 0x78], 0x613
mov dword [rsp + 0x7c], 1
mov dword [rsp + 0x80], r12d
mov dword [rsp + 0x100], 0x1000000
mov r8, r13
xor edx, edx
lea rcx, [rsp + 0x88]
call sub.msvcrt.dll_memset
lea r9, str.StringCchPrintfW__
mov r8d, dword [rsp + 0x148]
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x140]
call fcn.1400c2a9c
int3
call fcn.1400431a4
int3