Function at 0x1001359e4
Capabilities:
Get disk information

Disassembly:
mov rax, rsp
push rbx
push rbp
push rsi
push rdi
push r13
sub rsp, 0x40
and dword [rax + 0x18], 0
and qword [rax + 0x20], 0
and dword [rax + 0x10], 0
mov rsi, rdx
mov rbp, rcx
test rdx, rdx
jne 0x100135a21
lea r8, [0x100014bb8]
lea rcx, [0x100014b80]
mov edx, 0x2c5
call fcn.10009a050
lea rdx, [rsp + 0x88]
mov rcx, rbp
mov byte [rsi], 0
call fcn.10009b954
lea rdi, [0x1001653b8]
mov ebx, eax
test eax, eax
js 0x100135c34
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_SetErrorMode]
and dword [rsp + 0x38], 0
and qword [rsp + 0x30], 0
mov rcx, qword [rsp + 0x88]
mov r13d, eax
lea rax, [rsp + 0x80]
mov qword [rsp + 0x28], rax
and qword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
call qword [sym.imp.KERNEL32.dll_GetVolumeInformationW]
test eax, eax
jne 0x100135bd2
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea rdx, [rsp + 0x78]
mov rcx, rbp
mov edi, eax
call fcn.100136d80
test eax, eax
jns 0x100135b04
mov rcx, qword [0x1001653b8]
lea rdx, [0x1001653b8]
cmp rcx, rdx
je 0x100135aea
test byte [rcx + 0x1c], 1
je 0x100135aea
cmp byte [rcx + 0x19], 3
jb 0x100135aea
mov rcx, qword [rcx + 0x10]
lea r8, [0x100002e10]
mov edx, 0x1f
mov r9, rbp
mov dword [rsp + 0x20], eax
call fcn.10001ddb0
mov rcx, qword [0x1001653b8]
movzx ebx, di
or ebx, 0x80070000
test edi, edi
cmovle ebx, edi
lea rdi, [0x1001653b8]
jmp 0x100135c3b
mov eax, dword [rsp + 0x78]
shr eax, 0xb
test al, 1
je 0x100135b60
mov rcx, qword [0x1001653b8]
lea rdi, [0x1001653b8]
cmp rcx, rdi
je 0x100135b46
test byte [rcx + 0x1c], 1
je 0x100135b46
cmp byte [rcx + 0x19], 4
jb 0x100135b46
mov rcx, qword [rcx + 0x10]
lea r8, [0x100002e10]
mov edx, 0x20
mov r9, rbp
call fcn.10001db08
mov rdx, rsi
mov rcx, rbp
call fcn.100135e68
mov ebx, eax
test eax, eax
js 0x100135c34
jmp 0x100135be0
cmp edi, 0x3ed
je 0x100135b8c
cmp edi, 1
je 0x100135b8c
cmp edi, 0x57
je 0x100135b8c
movzx ebx, di
or ebx, 0x80070000
test edi, edi
cmovle ebx, edi
lea rdi, [0x1001653b8]
jmp 0x100135c34
mov rcx, qword [0x1001653b8]
lea rdi, [0x1001653b8]
cmp rcx, rdi
je 0x100135bcb
bt dword [rcx + 0x1c], 9
jae 0x100135bcb
cmp byte [rcx + 0x19], 4
jb 0x100135bcb
mov rcx, qword [rcx + 0x10]
lea r8, [0x100002e10]
mov edx, 0x21
mov r9, rbp
call fcn.10001db08
mov rcx, qword [0x1001653b8]
mov ebx, 0x80780076
jmp 0x100135c3b
mov eax, dword [rsp + 0x80]
shr eax, 0x13
and al, 1
mov byte [rsi], al
mov rcx, qword [0x1001653b8]
cmp rcx, rdi
je 0x100135c2b
bt dword [rcx + 0x1c], 9
jae 0x100135c2b
cmp byte [rcx + 0x19], 4
jb 0x100135c2b
cmp byte [rsi], 0
mov rcx, qword [rcx + 0x10]
lea rdx, [0x100005928]
lea rax, [0x100009fe0]
lea r8, [0x100002e10]
mov r9, rbp
cmovne rax, rdx
mov edx, 0x22
mov qword [rsp + 0x20], rax
call fcn.10001df74
mov ecx, r13d
call qword [sym.imp.KERNEL32.dll_SetErrorMode]
mov rcx, qword [0x1001653b8]
cmp qword [rsp + 0x88], 0
je 0x100135c5b
mov rcx, qword [rsp + 0x88]
call qword [sym.imp.ole32.dll_CoTaskMemFree]
mov rcx, qword [0x1001653b8]
test ebx, ebx
jns 0x100135c89
cmp rcx, rdi
je 0x100135c89
bt dword [rcx + 0x1c], 9
jae 0x100135c89
cmp byte [rcx + 0x19], 3
jb 0x100135c89
mov rcx, qword [rcx + 0x10]
lea r8, [0x100002e10]
mov edx, 0x23
mov r9d, ebx
call fcn.10001c878
mov eax, ebx
add rsp, 0x40
pop r13
pop rdi
pop rsi
pop rbp
pop rbx
ret