Function at 0x140001c80
Capabilities:
Get disk information

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rdi
push rbp
lea rbp, [rsp - 0x290]
sub rsp, 0x390
mov rax, qword [0x14000a040]
xor rax, rsp
mov qword [rbp + 0x280], rax
mov rdi, rcx
mov qword [rsp + 0x48], rcx
xor ebx, ebx
mov dword [rsp + 0x40], ebx
mov dword [rsp + 0x38], 0x100
lea rax, [rbp + 0x80]
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x6c]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x70]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x68]
mov r8d, 0x100
lea rdx, [rbp + 0x180]
lea rcx, [0x1400067b8]
call qword [sym.imp.KERNEL32.dll_GetVolumeInformationA]
test eax, eax
je 0x140001e33
xor edx, edx
mov r8d, pe_nt_image_headers64
lea rcx, [rbp - 0x80]
call sub.VCRUNTIME140.dll_memset
lea rcx, [rbp - 0x80]
call fcn.140003240
nop
lea rdx, [0x1400011d0]
lea rcx, [rbp - 0x70]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::ios_base____ptr64____cdecl___class_std::ios_base____ptr64_____ptr64]
lea rdx, [0x1400011f0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::ios_base____ptr64____cdecl___class_std::ios_base____ptr64_____ptr64]
mov edx, dword [rsp + 0x68]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int____ptr64]
nop
xorps xmm0, xmm0
movups xmmword [rdi], xmm0
mov qword [rdi + 0x10], rbx
mov qword [rdi + 0x18], 0xf
mov byte [rdi], bl
mov dword [rsp + 0x40], 4
mov rcx, qword [rbp + 8]
mov eax, ecx
and al, 0x22
cmp al, 2
je 0x140001d98
mov rax, qword [rbp - 0x28]
mov rbx, qword [rax]
test rbx, rbx
je 0x140001d98
mov rax, qword [rbp - 0x48]
mov r9, qword [rax]
cmp rbx, qword [rbp]
cmovb rbx, qword [rbp]
jmp 0x140001dba
test cl, 4
jne 0x140001dec
mov rax, qword [rbp - 0x30]
mov rcx, qword [rax]
test rcx, rcx
je 0x140001dec
mov rax, qword [rbp - 0x50]
mov r9, qword [rax]
mov rax, qword [rbp - 0x18]
movsxd rbx, dword [rax]
add rbx, rcx
mov rax, r9
sub rbx, r9
test rax, rax
je 0x140001dec
mov rcx, rdi
cmp rbx, 0xf
ja 0x140001de3
mov qword [rdi + 0x10], rbx
mov r8, rbx
mov rdx, r9
call sub.VCRUNTIME140.dll_memmove
mov byte [rdi + rbx], 0
jmp 0x140001dec
mov rdx, rbx
call fcn.1400039c0
nop
mov rcx, qword [rbp - 0x80]
movsxd rdx, dword [rcx + 4]
lea rax, vtable.std::basic_stringstream_char__struct_std::char_traits_char___class_std::allocator_char__.0
mov qword [rbp + rdx - 0x80], rax
mov rcx, qword [rbp - 0x80]
movsxd rdx, dword [rcx + 4]
lea r8d, [rdx - 0x98]
mov dword [rsp + rdx + 0x7c], r8d
lea rcx, [rbp - 0x68]
call fcn.140003180
lea rcx, [rbp - 0x60]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_iostream_char__struct_std::char_traits_char__::destructor_void____ptr64]
lea rcx, [rbp + 0x18]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
jmp 0x140001e47
xorps xmm0, xmm0
movups xmmword [rdi], xmm0
mov qword [rdi + 0x10], rbx
mov qword [rdi + 0x18], 0xf
mov byte [rdi], bl
mov rax, rdi
mov rcx, qword [rbp + 0x280]
xor rcx, rsp
call fcn.140004160
lea r11, [rsp + 0x390]
mov rbx, qword [r11 + 0x18]
mov rdi, qword [r11 + 0x20]
mov rsp, r11
pop rbp
ret