Function at 0x14001155a
Capabilities:
Get disk information

Disassembly:
jmp 0x140015ef0
mov qword [rsp + 8], rcx
push rbp
push rdi
sub rsp, 0x758
lea rbp, [rsp + 0x40]
lea rdi, [rsp + 0x40]
mov ecx, 0x136
mov eax, 0xcccccccc
rep stosd dword [rdi], eax
mov rcx, qword [rsp + 0x778]
mov rax, qword [0x14002a040]
xor rax, rbp
mov qword [rbp + 0x700], rax
mov dword [rbp + 0x6e4], 0
lea rcx, [0x1400310f6]
call fcn.1400117bc
nop
lea rcx, [rbp + 8]
call fcn.1400117ad
nop
lea rdx, str.Error_:_string_is_null
lea rcx, [rbp + 8]
call fcn.14001104b
nop
mov dword [rbp + 0x2e4], 0
mov dword [rsp + 0x38], 0xff
lea rax, [rbp + 0x50]
mov qword [rsp + 0x30], rax
lea rax, [rbp + 0x2c4]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x2a4]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x284]
mov r8d, 0xff
lea rdx, [rbp + 0x170]
lea rcx, [0x140024f54]
call qword [sym.imp.KERNEL32.dll_GetVolumeInformationA]
test eax, eax
je 0x140015fc0
mov byte [rbp + 0x6f4], 1
jmp 0x140015fc7
mov byte [rbp + 0x6f4], 0
movzx eax, byte [rbp + 0x6f4]
mov byte [rbp + 0x304], al
movzx eax, byte [rbp + 0x304]
test eax, eax
jne 0x140016025
lea rdx, str.Error_:_Not_elevated__please_run_this_with_admin_rights_
lea rcx, [rbp + 8]
call fcn.14001104b
nop
lea rdx, [rbp + 8]
mov rcx, qword [rbp + 0x730]
call fcn.140011749
mov eax, dword [rbp + 0x6e4]
or eax, 1
mov dword [rbp + 0x6e4], eax
lea rcx, [rbp + 8]
call fcn.140011181
nop
mov rax, qword [rbp + 0x730]
jmp 0x140016145
mov edx, 0xf8
lea rcx, [rbp + 0x330]
call fcn.14001153c
mov edx, 1
lea rcx, [rbp + 0x330]
call fcn.140011663
nop
lea rax, [rbp + 0x340]
lea rdx, [0x14001171c]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::ios_base____ptr64____cdecl___class_std::ios_base____ptr64_____ptr64]
mov edx, dword [rbp + 0x284]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int____ptr64]
nop
lea rdx, [rbp + 0x448]
lea rcx, [rbp + 0x330]
call fcn.14001173f
nop
mov dword [rbp + 0x484], 0
jmp 0x14001609d
mov eax, dword [rbp + 0x484]
inc eax
mov dword [rbp + 0x484], eax
movsxd rax, dword [rbp + 0x484]
mov qword [rbp + 0x6f8], rax
lea rcx, [rbp + 0x448]
call fcn.1400116a9
mov rcx, qword [rbp + 0x6f8]
cmp rcx, rax
jae 0x1400160f8
movsxd rax, dword [rbp + 0x484]
mov rdx, rax
lea rcx, [rbp + 0x448]
call fcn.140011113
mov qword [rbp + 0x6f8], rax
mov rax, qword [rbp + 0x6f8]
movsx eax, byte [rax]
add eax, 0xc
mov rcx, qword [rbp + 0x6f8]
mov byte [rcx], al
jmp 0x14001608f
lea rdx, [rbp + 0x448]
mov rcx, qword [rbp + 0x730]
call fcn.140011749
mov eax, dword [rbp + 0x6e4]
or eax, 1
mov dword [rbp + 0x6e4], eax
lea rcx, [rbp + 0x448]
call fcn.140011181
nop
lea rcx, [rbp + 0x330]
call fcn.140011168
nop
lea rcx, [rbp + 8]
call fcn.140011181
nop
mov rax, qword [rbp + 0x730]
mov rdi, rax
lea rcx, [rbp - 0x40]
lea rdx, [0x1400240a0]
call fcn.14001165e
mov rax, rdi
mov rcx, qword [rbp + 0x700]
xor rcx, rbp
call fcn.1400113a2
lea rsp, [rbp + 0x718]
pop rdi
pop rbp
ret