Function at 0x1401288a4
Capabilities:
Get disk information

Disassembly:
mov rax, rsp
push rbx
push rbp
push rsi
push rdi
push r15
sub rsp, 0x40
and dword [rax + 0x18], 0
mov rsi, rdx
and qword [rax + 0x20], 0
mov rbp, rcx
and dword [rax + 0x10], 0
test rdx, rdx
jne 0x1401288e1
lea r8, str.pbIsReadonly
mov edx, 0x2e2
lea rcx, str.base_stor_blbwsbutilwsbvolumeutils.cpp
call fcn.140082070
lea rdx, [rsp + 0x88]
mov byte [rsi], 0
mov rcx, rbp
call fcn.140082c18
lea rdi, [0x14016f048]
mov ebx, eax
test eax, eax
js 0x140128afa
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_SetErrorMode]
and dword [rsp + 0x38], 0
xor r9d, r9d
and qword [rsp + 0x30], 0
mov r15d, eax
mov rcx, qword [rsp + 0x88]
lea rax, [rsp + 0x80]
mov qword [rsp + 0x28], rax
xor r8d, r8d
and qword [rsp + 0x20], 0
xor edx, edx
call qword [sym.imp.KERNEL32.dll_GetVolumeInformationW]
test eax, eax
jne 0x140128a96
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea r8, [rsp + 0x78]
mov dl, 1
mov rcx, rbp
mov edi, eax
call fcn.140129c80
test eax, eax
jns 0x1401289c6
mov rcx, qword [0x14016f048]
lea rdx, [0x14016f048]
cmp rcx, rdx
je 0x1401289ac
test byte [rcx + 0x1c], 1
je 0x1401289ac
cmp byte [rcx + 0x19], 3
jb 0x1401289ac
mov rcx, qword [rcx + 0x10]
lea r8, [0x140157ac8]
mov edx, 0x20
mov dword [rsp + 0x20], eax
mov r9, rbp
call fcn.140005938
mov rcx, qword [0x14016f048]
movzx ebx, di
or ebx, 0x80070000
test edi, edi
cmovle ebx, edi
lea rdi, [0x14016f048]
jmp 0x140128b01
mov eax, dword [rsp + 0x78]
shr eax, 0xb
test al, 1
je 0x140128a22
mov rcx, qword [0x14016f048]
lea rdi, [0x14016f048]
cmp rcx, rdi
je 0x140128a08
test byte [rcx + 0x1c], 1
je 0x140128a08
cmp byte [rcx + 0x19], 4
jb 0x140128a08
mov rcx, qword [rcx + 0x10]
lea r8, [0x140157ac8]
mov edx, 0x21
mov r9, rbp
call fcn.1400058d8
mov rdx, rsi
mov rcx, rbp
call fcn.140128d3c
mov ebx, eax
test eax, eax
js 0x140128afa
jmp 0x140128aa4
cmp edi, 0x3ed
je 0x140128a4e
cmp edi, 1
je 0x140128a4e
cmp edi, 0x57
je 0x140128a4e
movzx ebx, di
or ebx, 0x80070000
test edi, edi
cmovle ebx, edi
lea rdi, [0x14016f048]
jmp 0x140128afa
mov rcx, qword [0x14016f048]
lea rdi, [0x14016f048]
cmp rcx, rdi
je 0x140128a8f
test dword [rcx + 0x1c], 0x200
je 0x140128a8f
cmp byte [rcx + 0x19], 4
jb 0x140128a8f
mov rcx, qword [rcx + 0x10]
lea r8, [0x140157ac8]
mov edx, 0x22
mov r9, rbp
call fcn.1400058d8
mov rcx, qword [0x14016f048]
mov ebx, 0x80780076
jmp 0x140128b01
mov eax, dword [rsp + 0x80]
shr eax, 0x13
and al, 1
mov byte [rsi], al
mov rcx, qword [0x14016f048]
cmp rcx, rdi
je 0x140128af1
test dword [rcx + 0x1c], 0x200
je 0x140128af1
cmp byte [rcx + 0x19], 4
jb 0x140128af1
cmp byte [rsi], 0
lea rdx, [0x140148138]
mov rcx, qword [rcx + 0x10]
lea rax, str._not
cmovne rax, rdx
lea r8, [0x140157ac8]
mov edx, 0x23
mov qword [rsp + 0x20], rax
mov r9, rbp
call fcn.1400059ac
mov ecx, r15d
call qword [sym.imp.KERNEL32.dll_SetErrorMode]
mov rcx, qword [0x14016f048]
cmp qword [rsp + 0x88], 0
je 0x140128b21
mov rcx, qword [rsp + 0x88]
call qword [sym.imp.ole32.dll_CoTaskMemFree]
mov rcx, qword [0x14016f048]
test ebx, ebx
jns 0x140128b51
cmp rcx, rdi
je 0x140128b51
test dword [rcx + 0x1c], 0x200
je 0x140128b51
cmp byte [rcx + 0x19], 3
jb 0x140128b51
mov rcx, qword [rcx + 0x10]
lea r8, [0x140157ac8]
mov edx, 0x24
mov r9d, ebx
call fcn.1400049f8
mov eax, ebx
add rsp, 0x40
pop r15
pop rdi
pop rsi
pop rbp
pop rbx
ret