Function at 0x10011aac4
Capabilities:
Get disk size

Disassembly:
push rbx
push rbp
push rsi
push rdi
push r12
push r13
push r15
sub rsp, 0x80
mov r13, rdx
mov rdi, rcx
mov rcx, qword [0x1001653b8]
lea r15, [0x1001653b8]
mov bpl, 1
cmp rcx, r15
je 0x10011ab13
test byte [rcx + 0x1c], bpl
je 0x10011ab13
cmp byte [rcx + 0x19], 4
jb 0x10011ab13
mov rcx, qword [rcx + 0x10]
lea r8, [0x100002f30]
mov edx, SysAllocStringByteLen
call fcn.10001c854
xor esi, esi
cmp rdi, rsi
jne 0x10011ab32
lea r8, [0x100013210]
lea rcx, [0x100012f20]
mov edx, 0xac1
call fcn.10009a050
cmp r13, rsi
jne 0x10011ab4f
lea r8, [0x100013228]
lea rcx, [0x100012f20]
mov edx, 0xac2
call fcn.10009a050
lea r9, [rsp + 0xd0]
lea r8, [rsp + 0xd8]
lea rdx, [rsp + 0xc8]
lea rcx, [rsp + 0xc0]
mov dword [rsp + 0xc0], esi
mov dword [rsp + 0xc8], esi
mov dword [rsp + 0xd8], esi
mov dword [rsp + 0xd0], esi
mov dword [rsp + 0x60], esi
mov qword [rsp + 0x58], rsi
mov qword [rsp + 0x50], rsi
mov r12b, sil
mov byte [r13], sil
call fcn.1001340ec
cmp eax, esi
mov ebx, eax
jge 0x10011abec
mov rcx, qword [0x1001653b8]
cmp rcx, r15
je 0x10011af85
test byte [rcx + 0x1c], bpl
je 0x10011af5f
cmp byte [rcx + 0x19], 2
jb 0x10011af5f
mov rcx, qword [rcx + 0x10]
lea r8, [0x100002f30]
mov edx, DllRegisterServer
mov r9d, eax
call fcn.10001c878
jmp 0x10011af58
cmp dword [rsp + 0xc0], esi
je 0x10011ac33
mov rcx, qword [0x1001653b8]
cmp rcx, r15
je 0x10011af85
test byte [rcx + 0x1c], bpl
je 0x10011af5f
cmp byte [rcx + 0x19], 4
jb 0x10011af5f
mov rcx, qword [rcx + 0x10]
lea r8, [0x100002f30]
mov edx, DllRegisterServer
call fcn.10001c854
jmp 0x10011af58
cmp dword [rsp + 0xc8], esi
je 0x10011ac79
mov rcx, qword [0x1001653b8]
cmp rcx, r15
je 0x10011ac70
test byte [rcx + 0x1c], bpl
je 0x10011ac70
cmp byte [rcx + 0x19], 4
jb 0x10011ac70
mov rcx, qword [rcx + 0x10]
lea r8, [0x100002f30]
mov edx, DllRegisterServer
call fcn.10001c854
mov rcx, qword [0x1001653b8]
mov byte [r13], bpl
jmp 0x10011af5f
lea r8, [rsp + 0x50]
lea rdx, [0x100002934]
mov rcx, rdi
call fcn.10009bb88
cmp eax, esi
mov ebx, eax
jge 0x10011acc1
mov rcx, qword [0x1001653b8]
cmp rcx, r15
je 0x10011af46
test byte [rcx + 0x1c], bpl
je 0x10011af46
cmp byte [rcx + 0x19], 2
jb 0x10011af46
mov edx, reloc.OLEAUT32.dll_SysAllocStringByteLen
jmp 0x10011ad8e
mov rcx, qword [rsp + 0x50]
lea r9, [rsp + 0x70]
lea r8, [rsp + 0xc8]
lea rdx, [rsp + 0x68]
mov r15, rsi
mov qword [rsp + 0xc0], rsi
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
cmp eax, esi
jne 0x10011acfb
mov rcx, qword [rsp + 0x50]
call fcn.100134b20
mov ebx, eax
jmp 0x10011ad12
mov rax, qword [rsp + 0x68]
mov r15, qword [rsp + 0xc8]
mov qword [rsp + 0xc0], rax
mov ebx, esi
cmp ebx, esi
jge 0x10011ad4b
mov rcx, qword [0x1001653b8]
lea r15, [0x1001653b8]
cmp rcx, r15
je 0x10011af46
test byte [rcx + 0x1c], bpl
je 0x10011af46
cmp byte [rcx + 0x19], 2
jb 0x10011af46
mov edx, reloc.OLEAUT32.dll_DllRegisterServer
mov r9d, ebx
jmp 0x10011ad91
lea rdx, [rsp + 0x58]
mov rcx, rdi
call fcn.10011afa0
cmp eax, esi
mov ebx, eax
jge 0x10011adad
mov rcx, qword [0x1001653b8]
lea r15, [0x1001653b8]
cmp rcx, r15
je 0x10011af46
test byte [rcx + 0x1c], bpl
je 0x10011af46
cmp byte [rcx + 0x19], 2
jb 0x10011af46
mov edx, 0x97
mov r9d, eax
mov rcx, qword [rcx + 0x10]
lea r8, [0x100002f30]
call fcn.10001c878
mov rcx, qword [0x1001653b8]
jmp 0x10011af46
mov rcx, qword [0x1001653b8]
mov rsi, qword [rsp + 0x58]
lea rdx, [0x1001653b8]
cmp rcx, rdx
je 0x10011adf7
test byte [rcx + 0x1c], bpl
je 0x10011adf7
cmp byte [rcx + 0x19], 4
jb 0x10011adf7
mov rcx, qword [rcx + 0x10]
lea r8, [0x100002f30]
mov edx, 0x98
mov r9, rsi
call fcn.10001d71c
mov rcx, qword [0x1001653b8]
lea rdx, [0x1001653b8]
mov r8, qword [rsp + 0xc0]
mov rbp, r15
sub rbp, r8
cmp rsi, rbp
jb 0x10011af3a
mov eax, dword [rsp + 0xd0]
mov rdi, rsi
shl rax, 0x1e
sub rdi, rbp
cmp rdi, rax
jb 0x10011ae48
cmp rcx, rdx
je 0x10011aecf
test byte [rcx + 0x1c], 1
je 0x10011aecf
cmp byte [rcx + 0x19], 4
jb 0x10011aecf
mov edx, 0x99
jmp 0x10011aea9
movsd xmm2, qword [0x1000174e0]
pxor xmm0, xmm0
cvtsi2sd xmm0, rdi
test rdi, rdi
jns 0x10011ae62
addsd xmm0, xmm2
pxor xmm1, xmm1
cvtsi2sd xmm1, rsi
test rsi, rsi
jns 0x10011ae74
addsd xmm1, xmm2
divsd xmm0, xmm1
mulsd xmm0, qword [0x100016c08]
cvttsd2si rax, xmm0
mov qword [rsp + 0x60], rax
cmp eax, dword [rsp + 0xd8]
jb 0x10011aed2
cmp rcx, rdx
je 0x10011aecf
test byte [rcx + 0x1c], 1
je 0x10011aecf
cmp byte [rcx + 0x19], 4
jb 0x10011aecf
mov edx, 0x9a
mov rcx, qword [rcx + 0x10]
lea r8, [0x100002f30]
call fcn.10001c854
mov rcx, qword [0x1001653b8]
mov r8, qword [rsp + 0xc0]
lea rdx, [0x1001653b8]
mov r12b, 1
cmp rcx, rdx
je 0x10011af36
test byte [rcx + 0x1c], 1
je 0x10011af36
cmp byte [rcx + 0x19], 4
jb 0x10011af36
mov rcx, qword [rcx + 0x10]
lea rax, [0x100004850]
test r12b, r12b
lea r9, [0x100004860]
mov edx, 0x9b
cmovne r9, rax
mov rax, qword [rsp + 0x60]
mov dword [rsp + 0x48], eax
mov qword [rsp + 0x40], rdi
mov qword [rsp + 0x38], rbp
mov qword [rsp + 0x30], r8
lea r8, [0x100002f30]
mov qword [rsp + 0x28], r15
mov qword [rsp + 0x20], rsi
call fcn.100117094
mov rcx, qword [0x1001653b8]
mov byte [r13], r12b
lea r15, [0x1001653b8]
mov bpl, 1
xor esi, esi
cmp qword [rsp + 0x50], rsi
je 0x10011af5f
mov rcx, qword [rsp + 0x50]
call qword [sym.imp.ole32.dll_CoTaskMemFree]
mov rcx, qword [0x1001653b8]
cmp rcx, r15
je 0x10011af85
test byte [rcx + 0x1c], bpl
je 0x10011af85
cmp byte [rcx + 0x19], 4
jb 0x10011af85
mov rcx, qword [rcx + 0x10]
lea r8, [0x100002f30]
mov edx, 0x9c
call fcn.10001c854
mov eax, ebx
add rsp, 0x80
pop r15
pop r13
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret