Function at 0x140114338
Capabilities:
Get disk information

Disassembly:
mov r11, rsp
push r13
push r14
push r15
sub rsp, 0x670
mov qword [r11 - 0x510], 0xfffffffffffffffe
mov qword [r11 + 8], rbx
mov qword [r11 + 0x10], rsi
mov qword [r11 + 0x18], rdi
mov qword [r11 + 0x20], r12
mov rax, qword [section..data]
xor rax, rsp
mov qword [rsp + 0x660], rax
lea rdi, [0x140005f30]
mov qword [r11 - 0x4f8], rdi
lea rsi, [0x140042ee0]
mov qword [r11 - 0x4f0], rsi
lea r14, [0x140005f88]
mov qword [r11 - 0x4e8], r14
mov dword [rsp + 0x1a8], 0x6c9
mov r15d, reloc.VssTrace.DLL_Ordinal_11
mov dword [r11 - 0x4dc], r15d
mov r12d, 0xff
mov dword [r11 - 0x4d8], r12d
xor ebx, ebx
mov dword [rsp + 0x230], 0x1000000
lea r13d, [r15 + 0x6d]
mov r8d, r13d
xor edx, edx
lea rcx, [r11 - 0x4d0]
call sub.msvcrt.dll_memset
xor r8d, r8d
lea rdx, [rsp + 0x190]
lea rcx, [rsp + 0x100]
call fcn.140052e50
nop
lea edx, [r12 + 6]
lea rcx, [rsp + 0x450]
call qword [sym.imp.api_ms_win_core_sysinfo_l1_2_1.dll_GetSystemWindowsDirectoryW]
mov dword [rsp + 0x40], eax
mov qword [rsp + 0x48], rdi
mov qword [rsp + 0x50], rsi
mov qword [rsp + 0x58], r14
mov dword [rsp + 0x64], r15d
mov dword [rsp + 0x68], r12d
mov dword [rsp + 0xe8], 0x1000000
mov r8d, r13d
xor edx, edx
lea rcx, [rsp + 0x70]
test eax, eax
jne 0x140114482
mov dword [rsp + 0x60], 0x6d2
call sub.msvcrt.dll_memset
mov dword [rsp + 0x28], ebx
mov dword [rsp + 0x20], 0x105
lea r9, [rsp + 0x450]
lea r8, [0x140042e90]
lea rdx, [rsp + 0x48]
lea rcx, [rsp + 0x100]
call fcn.140103888
mov dword [rsp + 0x60], 0x6d4
call sub.msvcrt.dll_memset
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_1.dll_GetLastError]
mov dword [rsp + 0x30], eax
mov eax, dword [rsp + 0x40]
mov dword [rsp + 0x28], eax
mov dword [rsp + 0x20], 0x105
lea r9, [rsp + 0x450]
lea r8, [0x140042f80]
lea rdx, [rsp + 0x48]
lea rcx, [rsp + 0x100]
call fcn.1400510b0
mov word [rsp + 0x240], bx
xor edx, edx
mov r8d, 0x208
lea rcx, [rsp + 0x242]
call sub.msvcrt.dll_memset
mov r8d, 0x105
lea rdx, [rsp + 0x240]
lea rcx, [rsp + 0x450]
call qword [sym.imp.api_ms_win_core_file_l1_2_1.dll_GetVolumePathNameW]
test eax, eax
jne 0x140114578
mov qword [rsp + 0x48], rdi
mov qword [rsp + 0x50], rsi
mov qword [rsp + 0x58], r14
mov dword [rsp + 0x60], 0x6dd
mov dword [rsp + 0x64], r15d
mov dword [rsp + 0x68], r12d
mov dword [rsp + 0xe8], 0x1000000
mov r8, r13
xor edx, edx
lea rcx, [rsp + 0x70]
call sub.msvcrt.dll_memset
mov dword [rsp + 0x28], 0x105
lea rax, [rsp + 0x240]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x450]
lea r8, [0x140042f40]
lea rdx, [rsp + 0x48]
lea rcx, [rsp + 0x100]
call fcn.140103888
mov r8d, 0x32
lea rdx, [rsp + 0x190]
lea rcx, [rsp + 0x240]
call qword [sym.imp.api_ms_win_core_file_l1_2_1.dll_GetVolumeNameForVolumeMountPointW]
mov qword [rsp + 0x48], rdi
mov qword [rsp + 0x50], rsi
mov qword [rsp + 0x58], r14
mov dword [rsp + 0x64], r15d
mov dword [rsp + 0x68], r12d
mov dword [rsp + 0xe8], 0x1000000
mov r8, r13
xor edx, edx
lea rcx, [rsp + 0x70]
test eax, eax
jne 0x1401145f4
mov dword [rsp + 0x60], 0x6e3
call sub.msvcrt.dll_memset
lea r9, [rsp + 0x240]
lea r8, [0x140043020]
lea rdx, [rsp + 0x48]
lea rcx, [rsp + 0x100]
call fcn.140103888
mov dword [rsp + 0x60], 0x6e5
call sub.msvcrt.dll_memset
lea r9, [rsp + 0x190]
lea r8, [0x140042fe8]
lea rdx, [rsp + 0x48]
lea rcx, [rsp + 0x100]
call fcn.1400510b0
lea rcx, [rsp + 0x190]
call fcn.140114888
mov rbx, rax
lea rcx, [rsp + 0x100]
call fcn.140050f50
mov rax, rbx
jmp 0x1401146e5
mov rcx, qword [rsp + 0x660]
xor rcx, rsp
call fcn.14005dc70
lea r11, [rsp + 0x670]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov r12, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop r13
ret