Function at 0x140152890
Capabilities:
Get disk information

Disassembly:
mov rax, rsp
push rbx
push rbp
push rsi
push rdi
push r15
sub rsp, 0x40
and dword [rax + 0x18], 0
and qword [rax + 0x20], 0
and dword [rax + 0x10], 0
mov rsi, rdx
mov rbp, rcx
test rdx, rdx
jne 0x1401528cd
lea r8, [0x140015c90]
lea rcx, [0x140015ca0]
mov edx, 0x2e1
call fcn.1400a8be8
lea rdx, [rsp + 0x88]
mov rcx, rbp
mov byte [rsi], 0
call fcn.1400a97c0
lea rdi, [0x14017d3a8]
mov ebx, eax
test eax, eax
js 0x140152ae6
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_SetErrorMode]
and dword [rsp + 0x38], 0
and qword [rsp + 0x30], 0
mov rcx, qword [rsp + 0x88]
mov r15d, eax
lea rax, [rsp + 0x80]
mov qword [rsp + 0x28], rax
and qword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
call qword [sym.imp.KERNEL32.dll_GetVolumeInformationW]
test eax, eax
jne 0x140152a82
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea r8, [rsp + 0x78]
mov dl, 1
mov rcx, rbp
mov edi, eax
call fcn.140153ce4
test eax, eax
jns 0x1401529b2
mov rcx, qword [0x14017d3a8]
lea rdx, [0x14017d3a8]
cmp rcx, rdx
je 0x140152998
test byte [rcx + 0x1c], 1
je 0x140152998
cmp byte [rcx + 0x19], 3
jb 0x140152998
mov rcx, qword [rcx + 0x10]
lea r8, [0x140015d68]
mov edx, 0x20
mov r9, rbp
mov dword [rsp + 0x20], eax
call fcn.14001ecbc
mov rcx, qword [0x14017d3a8]
movzx ebx, di
or ebx, 0x80070000
test edi, edi
cmovle ebx, edi
lea rdi, [0x14017d3a8]
jmp 0x140152aed
mov eax, dword [rsp + 0x78]
shr eax, 0xb
test al, 1
je 0x140152a0e
mov rcx, qword [0x14017d3a8]
lea rdi, [0x14017d3a8]
cmp rcx, rdi
je 0x1401529f4
test byte [rcx + 0x1c], 1
je 0x1401529f4
cmp byte [rcx + 0x19], 4
jb 0x1401529f4
mov rcx, qword [rcx + 0x10]
lea r8, [0x140015d68]
mov edx, 0x21
mov r9, rbp
call fcn.14001ec40
mov rdx, rsi
mov rcx, rbp
call fcn.140152d30
mov ebx, eax
test eax, eax
js 0x140152ae6
jmp 0x140152a90
cmp edi, 0x3ed
je 0x140152a3a
cmp edi, 1
je 0x140152a3a
cmp edi, 0x57
je 0x140152a3a
movzx ebx, di
or ebx, 0x80070000
test edi, edi
cmovle ebx, edi
lea rdi, [0x14017d3a8]
jmp 0x140152ae6
mov rcx, qword [0x14017d3a8]
lea rdi, [0x14017d3a8]
cmp rcx, rdi
je 0x140152a7b
test dword [rcx + 0x1c], reloc.ADVAPI32.dll_TraceEvent
je 0x140152a7b
cmp byte [rcx + 0x19], 4
jb 0x140152a7b
mov rcx, qword [rcx + 0x10]
lea r8, [0x140015d68]
mov edx, 0x22
mov r9, rbp
call fcn.14001ec40
mov rcx, qword [0x14017d3a8]
mov ebx, 0x80780076
jmp 0x140152aed
mov eax, dword [rsp + 0x80]
shr eax, 0x13
and al, 1
mov byte [rsi], al
mov rcx, qword [0x14017d3a8]
cmp rcx, rdi
je 0x140152add
test dword [rcx + 0x1c], reloc.ADVAPI32.dll_TraceEvent
je 0x140152add
cmp byte [rcx + 0x19], 4
jb 0x140152add
cmp byte [rsi], 0
mov rcx, qword [rcx + 0x10]
lea rdx, [0x1400056c0]
lea rax, [0x140009cb0]
lea r8, [0x140015d68]
mov r9, rbp
cmovne rax, rdx
mov edx, 0x23
mov qword [rsp + 0x20], rax
call fcn.14001ed50
mov ecx, r15d
call qword [sym.imp.KERNEL32.dll_SetErrorMode]
mov rcx, qword [0x14017d3a8]
cmp qword [rsp + 0x88], 0
je 0x140152b0d
mov rcx, qword [rsp + 0x88]
call qword [sym.imp.ole32.dll_CoTaskMemFree]
mov rcx, qword [0x14017d3a8]
test ebx, ebx
jns 0x140152b3d
cmp rcx, rdi
je 0x140152b3d
test dword [rcx + 0x1c], reloc.ADVAPI32.dll_TraceEvent
je 0x140152b3d
cmp byte [rcx + 0x19], 3
jb 0x140152b3d
mov rcx, qword [rcx + 0x10]
lea r8, [0x140015d68]
mov edx, 0x24
mov r9d, ebx
call fcn.14001de24
mov eax, ebx
add rsp, 0x40
pop r15
pop rdi
pop rsi
pop rbp
pop rbx
ret