Function at 0x10045660
Capabilities:
Get volume information via ioctl

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
push ebx
push esi
push edi
push 0
push 0x80
push 3
push 0
mov esi, eax
push 3
lea ebx, [esi + 0x110]
push 0xc0000000
push ebx
call fcn.10012400
add esp, 0x1c
mov dword [esi + 0x31c], eax
cmp eax, 0xffffffff
jne 0x100456c0
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
push edi
push ebx
push str.Win32U_CreateFile_failed_for_volume__s_status__d._n
call sym.vmtools.dll_Log
add esp, 0xc
test edi, edi
je 0x100456b7
call fcn.10044560
mov eax, edi
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push 0
lea ecx, [ebp - 4]
push ecx
push 0x60
lea edx, [esi + 0x330]
push edx
push 0
push 0
push 0x90064
push eax
call dword [sym.imp.KERNEL32.dll_DeviceIoControl]
test eax, eax
jne 0x10045706
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
push edi
push ebx
push str.FSCTL_GET_NTFS_VOLUME_DATA_failed_for_volume__s_status__d._n
call sym.vmtools.dll_Log
push str.Volume_may_not_be_a_NTFS_volume._Unmap_reclamation_is_only_supported_for_NTFS_volumes._n
call sym.vmtools.dll_Log
add esp, 0x10
jmp 0x100456ae
mov eax, dword [esi + 0x340]
mov ecx, dword [esi + 0x344]
push 0
add eax, 7
push 8
adc ecx, 0
push ecx
push eax
call fcn.1004e450
mov edi, eax
add edi, 0x18
adc edx, 0
je 0x1004574f
mov edi, 0x32
push edi
push ebx
push str.Very_Large_Volume._Reclamation_not_supported_for_volume__s_status__d._n
call sym.vmtools.dll_Log
add esp, 0xc
call fcn.10044560
mov eax, edi
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push edi
call dword [sym.imp.MSVCR90.dll_malloc]
xor ecx, ecx
add esp, 4
mov dword [esi + 0x390], eax
cmp eax, ecx
jne 0x10045785
lea edi, [ecx + 0xe]
push edi
push ebx
push str.BitMapAllocation_failed_for_volume__s_status__d._n
call sym.vmtools.dll_Log
add esp, 0xc
call fcn.10044560
mov eax, edi
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push ecx
lea edx, [ebp - 4]
push edx
push edi
push eax
push 8
lea eax, [ebp - 0xc]
push eax
mov dword [ebp - 0xc], ecx
mov dword [ebp - 8], ecx
mov ecx, dword [esi + 0x31c]
push 0x9006f
push ecx
call dword [sym.imp.KERNEL32.dll_DeviceIoControl]
test eax, eax
jne 0x100457c2
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
push edi
push ebx
push str.FSCTL_GET_VOLUME_BITMAP_failed_for_volume__s_status__d._n
jmp 0x100456a6
mov edi, dword [esi + 0x35c]
lea edx, [edi + edi]
add dword [esi + 0x328], edx
mov ebx, 0
mov eax, edi
adc dword [esi + 0x32c], ebx
add eax, dword [esi + 0x328]
mov ecx, ebx
adc ecx, dword [esi + 0x32c]
push ebx
sub eax, 1
push edi
sbb ecx, ebx
push ecx
push eax
call fcn.1004e450
push ebx
push edi
push edx
push eax
call fcn.1004e410
mov dword [esi + 0x328], eax
xor eax, eax
mov ecx, esi
mov dword [esi + 0x32c], edx
call fcn.100454d0
mov edi, eax
test edi, edi
je 0x10045830
push edi
lea edx, [esi + 0x214]
push edx
push str.Failed_to_reopen_file_handle_for_file__s__d.
jmp 0x100456a6
mov edx, dword [esi + 0x31c]
push 0
lea eax, [ebp - 4]
push eax
push 0x38
lea ecx, [esi + 0xc60]
push ecx
push 0
push 0
push 0x560000
push edx
call dword [sym.imp.KERNEL32.dll_DeviceIoControl]
test eax, eax
jne 0x10045873
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
push edi
lea eax, [esi + 0x110]
push eax
push str.IOCTL_VOLUME_GET_VOLUME_DISK_EXTENTS_failed_for__s_volume_n__d.
jmp 0x100456a6
mov ebx, dword [esi + 0x35c]
mov ecx, dword [esi + 0xc78]
xor eax, eax
push eax
mov eax, dword [esi + 0xc7c]
push ebx
push eax
push ecx
call fcn.1004e450
xor ecx, ecx
push ecx
push ebx
push edx
push eax
call fcn.1004e410
mov ecx, dword [esi + 0xc74]
mov dword [esi + 0xc78], eax
mov ebx, eax
mov eax, dword [esi + 0xc70]
push 0
add eax, 0x1ff
push 0x200
adc ecx, 0
push ecx
push eax
mov dword [esi + 0xc7c], edx
mov dword [esi], 3
call fcn.1004e450
push 0
push 0x200
push edx
push eax
call fcn.1004e410
push 0
mov dword [esi + 0xc40], eax
mov dword [esi + 0xc50], eax
mov eax, dword [esi + 0xc7c]
push 0x200
push eax
push ebx
mov dword [esi + 0xc44], edx
mov dword [esi + 0xc54], edx
call fcn.1004e450
push 0
push 0x200
push edx
push eax
call fcn.1004e410
mov dword [esi + 0xc48], eax
mov eax, edi
pop edi
mov dword [esi + 0xc4c], edx
pop esi
pop ebx
mov esp, ebp
pop ebp
ret