Function at 0x180006ae0
Capabilities:
Get disk information

Disassembly:
mov rax, rsp
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x100
mov qword [rsp + 0x48], 0xfffffffffffffffe
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rbp
mov qword [rax + 0x20], rsi
mov rax, qword [0x18004d080]
xor rax, rsp
mov qword [rsp + 0xf0], rax
mov rbx, rcx
cmp qword [rcx + 0x3778], 0
jne 0x180006b2e
xor eax, eax
jmp 0x180006f33
lea r15, [rcx + 0x37a0]
mov edx, 0x5c
mov rcx, r15
call fcn.18002209c
mov r13, rax
or rsi, 0xffffffffffffffff
test rax, rax
jne 0x180006b7c
mov rcx, rsi
mov rdi, r15
repne scasw ax, word [rdi]
not rcx
dec rcx
cmp rcx, 1
je 0x180006b80
cmp rcx, 2
jne 0x180006f33
cmp word [rbx + 0x37a2], 0x3a
je 0x180006b80
jmp 0x180006f33
add r13, 2
lea rdi, [rbx + 0x39a8]
mov edx, 0x5c
mov rcx, rdi
call fcn.18002209c
mov r14, rax
test rax, rax
jne 0x180006bc7
mov rcx, rsi
repne scasw ax, word [rdi]
not rcx
dec rcx
cmp rcx, 1
je 0x180006bcb
cmp rcx, 2
jne 0x180006f33
cmp word [rbx + 0x39aa], 0x3a
je 0x180006bcb
jmp 0x180006f33
add r14, 2
mov rcx, qword [rbx + 0x240]
test rcx, rcx
je 0x180006be8
xor r9d, r9d
xor r8d, r8d
mov edx, 0x467
call qword [sym.imp.USER32.dll_SendMessageW]
call fcn.1800100bc
mov rdx, rax
xor ecx, ecx
test rax, rax
setne cl
test ecx, ecx
jne 0x180006c07
mov ecx, 0x80004005
call fcn.180001c10
int3
mov rax, qword [rax]
mov rcx, rdx
call qword [rax + 0x18]
lea rdi, [rax + 0x18]
mov qword [rsp + 0x40], rdi
lea r12, [rbx + 0x368]
xor edx, edx
mov r8d, 0xc00
mov rcx, r12
call fcn.180023da0
lea rdx, [rdi - 0x18]
mov rbp, qword [rdx]
cmp dword [rdx + 8], 0
je 0x180006c8b
cmp dword [rdx + 0x10], 0
jge 0x180006c5e
cmp dword [rdi - 0xc], 0
jge 0x180006c54
mov ecx, 0x80070057
call fcn.180001c10
int3
xor ebp, ebp
mov dword [rdi - 0x10], ebp
mov word [rdi], bp
jmp 0x180006c8d
mov eax, esi
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x180006c74
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rax, qword [rbp]
mov rcx, rbp
call qword [rax + 0x18]
lea rdi, [rax + 0x18]
mov qword [rsp + 0x40], rdi
xor ebp, ebp
jmp 0x180006c8d
xor ebp, ebp
mov ecx, 0x3ea
call fcn.1800100a8
test rax, rax
je 0x180006cb4
mov r8d, 0x3ea
mov rdx, rax
lea rcx, [rsp + 0x40]
call fcn.180001900
mov rdi, qword [rsp + 0x40]
cmp dword [rdi - 0x10], 0
je 0x180006cf7
mov eax, dword [rbx + 0x5410]
mov r9d, ebp
test eax, eax
cmovne r9d, eax
mov r8, rdi
mov edx, 0x1ff
mov rcx, r12
call fcn.1800223f0
mov rcx, qword [rbx + 0x240]
test rcx, rcx
jne 0x180006cee
mov qword [rbx + 0x15c], r12
jmp 0x180006cf7
mov rdx, r12
call qword [sym.imp.USER32.dll_SetWindowTextW]
cmp word [rbx + 0x3770], 2
setne bpl
lea rdx, [rdi - 0x18]
mov r12, qword [rdx]
cmp dword [rdx + 8], 0
je 0x180006d62
cmp dword [rdx + 0x10], 0
jge 0x180006d34
cmp dword [rdi - 0xc], 0
jge 0x180006d27
mov ecx, 0x80070057
call fcn.180001c10
int3
xor r12d, r12d
mov dword [rdi - 0x10], r12d
mov word [rdi], r12w
jmp 0x180006d65
mov eax, esi
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x180006d4a
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rax, qword [r12]
mov rcx, r12
call qword [rax + 0x18]
lea rdi, [rax + 0x18]
mov qword [rsp + 0x40], rdi
xor r12d, r12d
jmp 0x180006d65
xor r12d, r12d
lea ecx, [rbp + 0x3f4]
call fcn.1800100a8
test rax, rax
je 0x180006d8e
lea r8d, [rbp + 0x3f4]
mov rdx, rax
lea rcx, [rsp + 0x40]
call fcn.180001900
mov rdi, qword [rsp + 0x40]
cmp dword [rdi - 0x10], 0
je 0x180006de3
mov eax, dword [rbx + 0x5410]
mov r9d, r12d
test eax, eax
cmovne r9d, eax
lea rbp, [rbx + 0x768]
mov r8, rdi
mov edx, 0x1ff
mov rcx, rbp
call fcn.1800223f0
mov rcx, qword [rbx + 0x240]
test rcx, rcx
jne 0x180006dcf
mov qword [rbx + 0x16c], rbp
jmp 0x180006de3
mov r9, rbp
mov edx, 0x46c
mov r8d, 3
call qword [sym.imp.USER32.dll_SendMessageW]
lea rdx, [rdi - 0x18]
mov rbp, qword [rdx]
cmp dword [rdx + 8], 0
je 0x180006e3a
cmp dword [rdx + 0x10], 0
jge 0x180006e11
cmp dword [rdi - 0xc], 0
jge 0x180006e07
mov ecx, 0x80070057
call fcn.180001c10
int3
mov dword [rdi - 0x10], r12d
mov word [rdi], r12w
jmp 0x180006e3a
mov eax, esi
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x180006e27
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rax, qword [rbp]
mov rcx, rbp
call qword [rax + 0x18]
lea rdi, [rax + 0x18]
mov qword [rsp + 0x40], rdi
mov ecx, 0x3ec
call fcn.1800100a8
test rax, rax
je 0x180006e61
mov r8d, 0x3ec
mov rdx, rax
lea rcx, [rsp + 0x40]
call fcn.180001900
mov rdi, qword [rsp + 0x40]
cmp dword [rdi - 0x10], 0
je 0x180006f16
mov word [rsp + 0x50], r12w
xor edx, edx
mov r8d, 0x9e
lea rcx, [rsp + 0x52]
call fcn.180023da0
test r13, r13
jne 0x180006ebf
mov dword [rsp + 0x38], r12d
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x28], r12
mov qword [rsp + 0x20], r12
xor r9d, r9d
lea r8d, [r13 + 0x50]
lea rdx, [rsp + 0x50]
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_GetVolumeInformationW]
lea rcx, [rsp + 0x50]
test eax, eax
cmove rcx, r13
mov r13, rcx
lea rbp, [rbx + 0xb68]
lea rax, [rbx + 0x39a8]
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], r14
mov qword [rsp + 0x20], r15
mov r9, r13
mov r8, rdi
mov edx, 0x1ff
mov rcx, rbp
call fcn.1800223f0
mov rcx, qword [rbx + 0x240]
test rcx, rcx
jne 0x180006f04
mov qword [rbx + 0x174], rbp
jmp 0x180006f16
mov r9, rbp
xor r8d, r8d
mov edx, 0x46c
call qword [sym.imp.USER32.dll_SendMessageW]
nop
lea rdx, [rdi - 0x18]
lock xadd dword [rdx + 0x10], esi
dec esi
test esi, esi
jg 0x180006f2e
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov eax, 1
mov rcx, qword [rsp + 0xf0]
xor rcx, rsp
call fcn.180021890
lea r11, [rsp + 0x100]
mov rbx, qword [r11 + 0x38]
mov rbp, qword [r11 + 0x40]
mov rsi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret