Function at 0x140131380
Capabilities:
Get disk information

Disassembly:
mov rax, rsp
push rbx
push rbp
push rsi
push rdi
push r15
sub rsp, 0x40
and dword [rax + 0x18], 0
mov rsi, rdx
and qword [rax + 0x20], 0
mov rbp, rcx
and dword [rax + 0x10], 0
test rdx, rdx
jne 0x1401313bd
lea r8, [0x1401618a8]
mov edx, 0x2e2
lea rcx, str.base_stor_blbwsbutilwsbvolumeutils.cpp
call fcn.14008624c
lea rdx, [rsp + 0x88]
mov byte [rsi], 0
mov rcx, rbp
call fcn.140086e28
lea rdi, [0x1401782b0]
mov ebx, eax
test eax, eax
js 0x1401315d6
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_SetErrorMode]
and dword [rsp + 0x38], 0
xor r9d, r9d
and qword [rsp + 0x30], 0
mov r15d, eax
mov rcx, qword [rsp + 0x88]
lea rax, [rsp + 0x80]
mov qword [rsp + 0x28], rax
xor r8d, r8d
and qword [rsp + 0x20], 0
xor edx, edx
call qword [sym.imp.KERNEL32.dll_GetVolumeInformationW]
test eax, eax
jne 0x140131572
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea r8, [rsp + 0x78]
mov dl, 1
mov rcx, rbp
mov edi, eax
call fcn.140132780
test eax, eax
jns 0x1401314a2
mov rcx, qword [0x1401782b0]
lea rdx, [0x1401782b0]
cmp rcx, rdx
je 0x140131488
test byte [rcx + 0x1c], 1
je 0x140131488
cmp byte [rcx + 0x19], 3
jb 0x140131488
mov rcx, qword [rcx + 0x10]
lea r8, [0x140161898]
mov edx, 0x20
mov dword [rsp + 0x20], eax
mov r9, rbp
call fcn.140005ce8
mov rcx, qword [0x1401782b0]
movzx ebx, di
or ebx, 0x80070000
test edi, edi
cmovle ebx, edi
lea rdi, [0x1401782b0]
jmp 0x1401315dd
mov eax, dword [rsp + 0x78]
shr eax, 0xb
test al, 1
je 0x1401314fe
mov rcx, qword [0x1401782b0]
lea rdi, [0x1401782b0]
cmp rcx, rdi
je 0x1401314e4
test byte [rcx + 0x1c], 1
je 0x1401314e4
cmp byte [rcx + 0x19], 4
jb 0x1401314e4
mov rcx, qword [rcx + 0x10]
lea r8, [0x140161898]
mov edx, 0x21
mov r9, rbp
call fcn.140005c6c
mov rdx, rsi
mov rcx, rbp
call fcn.140131820
mov ebx, eax
test eax, eax
js 0x1401315d6
jmp 0x140131580
cmp edi, 0x3ed
je 0x14013152a
cmp edi, 1
je 0x14013152a
cmp edi, 0x57
je 0x14013152a
movzx ebx, di
or ebx, 0x80070000
test edi, edi
cmovle ebx, edi
lea rdi, [0x1401782b0]
jmp 0x1401315d6
mov rcx, qword [0x1401782b0]
lea rdi, [0x1401782b0]
cmp rcx, rdi
je 0x14013156b
test dword [rcx + 0x1c], 0x200
je 0x14013156b
cmp byte [rcx + 0x19], 4
jb 0x14013156b
mov rcx, qword [rcx + 0x10]
lea r8, [0x140161898]
mov edx, 0x22
mov r9, rbp
call fcn.140005c6c
mov rcx, qword [0x1401782b0]
mov ebx, 0x80780076
jmp 0x1401315dd
mov eax, dword [rsp + 0x80]
shr eax, 0x13
and al, 1
mov byte [rsi], al
mov rcx, qword [0x1401782b0]
cmp rcx, rdi
je 0x1401315cd
test dword [rcx + 0x1c], 0x200
je 0x1401315cd
cmp byte [rcx + 0x19], 4
jb 0x1401315cd
cmp byte [rsi], 0
lea rdx, [0x140151a68]
mov rcx, qword [rcx + 0x10]
lea rax, str._not
cmovne rax, rdx
lea r8, [0x140161898]
mov edx, 0x23
mov qword [rsp + 0x20], rax
mov r9, rbp
call fcn.140005d7c
mov ecx, r15d
call qword [sym.imp.KERNEL32.dll_SetErrorMode]
mov rcx, qword [0x1401782b0]
cmp qword [rsp + 0x88], 0
je 0x1401315fd
mov rcx, qword [rsp + 0x88]
call qword [sym.imp.ole32.dll_CoTaskMemFree]
mov rcx, qword [0x1401782b0]
test ebx, ebx
jns 0x14013162d
cmp rcx, rdi
je 0x14013162d
test dword [rcx + 0x1c], 0x200
je 0x14013162d
cmp byte [rcx + 0x19], 3
jb 0x14013162d
mov rcx, qword [rcx + 0x10]
lea r8, [0x140161898]
mov edx, 0x24
mov r9d, ebx
call fcn.140004c90
mov eax, ebx
add rsp, 0x40
pop r15
pop rdi
pop rsi
pop rbp
pop rbx
ret