Function at 0x100128fd4
Capabilities:
Get disk size

Disassembly:
mov rax, rsp
push rbp
push rsi
push rdi
push r12
push r15
sub rsp, 0x90
mov qword [rsp + 0x38], 0xfffffffffffffffe
mov qword [rax + 8], rbx
mov r12, rdx
mov rbp, rcx
lea r15, [0x1001653b8]
mov rcx, qword [0x1001653b8]
cmp rcx, r15
je 0x10012902c
test byte [rcx + 0x1c], 1
je 0x10012902c
cmp byte [rcx + 0x19], 4
jb 0x10012902c
mov edx, 0x17
lea r8, [0x100002f10]
mov rcx, qword [rcx + 0x10]
call fcn.10001c7b8
and qword [rsp + 0x30], 0
and qword [rsp + 0xd8], 0
and qword [rsp + 0xd0], 0
xor edx, edx
lea r8d, [rdx + 0x30]
lea rcx, [rsp + 0x60]
call sub.msvcrt.dll_memset
and qword [r12], 0
xor esi, esi
lea r9, [rsp + 0x40]
lea r8, [rsp + 0xc8]
lea rdx, [rsp + 0x50]
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
test eax, eax
jne 0x100129086
mov rcx, rbp
call fcn.100134ad4
mov ebx, eax
jmp 0x100129090
mov rsi, qword [rsp + 0xc8]
xor ebx, ebx
test ebx, ebx
js 0x100129462
lea rdi, [0x100005ab8]
cmp qword [rsp + 0x30], 0
je 0x1001290bb
mov r8, rdi
mov edx, 0x95
lea rcx, [0x1000059c0]
call fcn.100099ad8
lea rax, [rsp + 0x30]
mov qword [rsp + 0x20], rax
lea r9, [0x100002028]
xor edx, edx
lea r8d, [rdx + 4]
lea rcx, [0x100002098]
call qword [sym.imp.ole32.dll_CoCreateInstance]
mov ebx, eax
test eax, eax
jns 0x10012912d
mov rcx, qword [0x1001653b8]
cmp rcx, r15
je 0x10012941b
test byte [rcx + 0x1c], 1
je 0x10012941b
cmp byte [rcx + 0x19], 2
jb 0x10012941b
mov edx, 0x18
mov r9d, eax
lea r8, [0x100002f10]
mov rcx, qword [rcx + 0x10]
call fcn.10001c7dc
mov rcx, qword [0x1001653b8]
jmp 0x10012941b
movdqu xmm0, xmmword [0x100002f00]
movdqu xmmword [rsp + 0x50], xmm0
mov rbx, qword [rsp + 0x30]
test rbx, rbx
jne 0x100129162
lea r8, [0x100005ac0]
mov edx, 0x9a
lea rcx, [0x1000059c0]
call fcn.100099ad8
mov rbx, qword [rsp + 0x30]
cmp qword [rsp + 0xd8], 0
je 0x100129181
mov r8, rdi
mov edx, 0x95
lea rcx, [0x1000059c0]
call fcn.100099ad8
mov rax, qword [rbx]
lea r9, [rsp + 0xd8]
lea r8, [0x100002048]
lea rdx, [rsp + 0x50]
mov rcx, rbx
call qword [rax + 0x18]
mov ebx, eax
test eax, eax
jns 0x1001291ec
mov rcx, qword [0x1001653b8]
cmp rcx, r15
je 0x10012941b
test byte [rcx + 0x1c], 1
je 0x10012941b
cmp byte [rcx + 0x19], 2
jb 0x10012941b
mov edx, 0x19
mov r9d, eax
lea r8, [0x100002f10]
mov rcx, qword [rcx + 0x10]
call fcn.10001c7dc
mov rcx, qword [0x1001653b8]
jmp 0x10012941b
mov rbx, qword [rsp + 0xd8]
test rbx, rbx
jne 0x100129219
lea r8, [0x100005ac0]
mov edx, 0x9a
lea rcx, [0x1000059c0]
call fcn.100099ad8
mov rbx, qword [rsp + 0xd8]
cmp qword [rsp + 0xd0], 0
je 0x100129238
mov r8, rdi
mov edx, 0x95
lea rcx, [0x1000059c0]
call fcn.100099ad8
mov rax, qword [rbx]
lea r8, [rsp + 0xd0]
mov rdx, rbp
mov rcx, rbx
call qword [rax + 0x30]
mov ebx, eax
test eax, eax
jns 0x10012929e
mov rcx, qword [0x1001653b8]
cmp rcx, r15
je 0x10012941b
test byte [rcx + 0x1c], 1
je 0x10012941b
cmp byte [rcx + 0x19], 2
jb 0x10012941b
mov edx, 0x1a
mov dword [rsp + 0x20], eax
mov r9, rbp
lea r8, [0x100002f10]
mov rcx, qword [rcx + 0x10]
call fcn.10001daa4
mov rcx, qword [0x1001653b8]
jmp 0x10012941b
xor edx, edx
lea r8d, [rdx + 0x30]
lea rcx, [rsp + 0x60]
call sub.msvcrt.dll_memset
and dword [rsp + 0xc8], 0
mov rcx, qword [rsp + 0xd0]
test rcx, rcx
jne 0x1001292e3
lea r8, [0x100005ac0]
mov edx, 0x9a
lea rcx, [0x1000059c0]
call fcn.100099ad8
mov rcx, qword [rsp + 0xd0]
mov rax, qword [rcx]
lea r9, [rsp + 0xc8]
lea r8, [rsp + 0x60]
mov edx, 1
call qword [rax + 0x18]
mov ebx, eax
cmp eax, 1
je 0x100129425
test eax, eax
js 0x100129462
cmp dword [rsp + 0x60], 3
je 0x10012932d
lea r8, [0x100013de0]
mov edx, 0x1e6
lea rcx, [0x100013d50]
call fcn.100099ad8
cmp dword [rsp + 0xc8], 1
je 0x10012934f
lea r8, [0x100013d90]
mov edx, 0x1e7
lea rcx, [0x100013d50]
call fcn.100099ad8
mov rdx, rbp
mov rcx, qword [rsp + 0x70]
call sub.msvcrt.dll__wcsicmp
test eax, eax
je 0x1001293a8
mov rcx, qword [0x1001653b8]
cmp rcx, r15
je 0x10012938d
test byte [rcx + 0x1c], 1
je 0x10012938d
cmp byte [rcx + 0x19], 3
jb 0x10012938d
mov edx, 0x1b
lea r8, [0x100002f10]
mov rcx, qword [rcx + 0x10]
call fcn.10001c7b8
mov rcx, qword [rsp + 0x70]
call qword [sym.imp.ole32.dll_CoTaskMemFree]
mov rcx, qword [rsp + 0x68]
call qword [sym.imp.ole32.dll_CoTaskMemFree]
jmp 0x10012929e
mov rcx, qword [rsp + 0x70]
call qword [sym.imp.ole32.dll_CoTaskMemFree]
mov rcx, qword [rsp + 0x68]
call qword [sym.imp.ole32.dll_CoTaskMemFree]
mov rdi, qword [rsp + 0x80]
mov rcx, qword [0x1001653b8]
cmp rcx, r15
je 0x1001293f6
test byte [rcx + 0x1c], 1
je 0x1001293f6
cmp byte [rcx + 0x19], 4
jb 0x1001293f6
mov edx, 0x1d
mov r9, rbp
lea r8, [0x100002f10]
mov rcx, qword [rcx + 0x10]
call fcn.10001da24
shr rsi, 3
cmp rdi, rsi
jbe 0x10012940f
sub rdi, rsi
mov qword [r12], rdi
mov rcx, qword [0x1001653b8]
jmp 0x10012941b
and qword [r12], 0
mov rcx, qword [0x1001653b8]
test ebx, ebx
jns 0x1001294ae
jmp 0x100129462
mov rcx, qword [0x1001653b8]
cmp rcx, r15
je 0x1001294d5
test byte [rcx + 0x1c], 1
je 0x1001294ae
cmp byte [rcx + 0x19], 4
jb 0x1001294ae
mov edx, 0x1c
mov r9, rbp
lea r8, [0x100002f10]
mov rcx, qword [rcx + 0x10]
call fcn.10001da24
mov rcx, qword [0x1001653b8]
jmp 0x1001294ae
lea rdx, [rsp + 0xc8]
mov ecx, ebx
call fcn.100104e18
mov ebx, eax
mov rcx, qword [0x1001653b8]
cmp rcx, r15
je 0x1001294d5
test byte [rcx + 0x1c], 1
je 0x1001294ae
cmp byte [rcx + 0x19], 2
jb 0x1001294ae
mov edx, 0x1e
mov dword [rsp + 0x20], eax
mov r9, rbp
lea r8, [0x100002f10]
mov rcx, qword [rcx + 0x10]
call fcn.10001daa4
mov rcx, qword [0x1001653b8]
cmp rcx, r15
je 0x1001294d5
test byte [rcx + 0x1c], 1
je 0x1001294d5
cmp byte [rcx + 0x19], 4
jb 0x1001294d5
mov edx, 0x1f
lea r8, [0x100002f10]
mov rcx, qword [rcx + 0x10]
call fcn.10001c7b8
nop
mov rcx, qword [rsp + 0xd0]
test rcx, rcx
je 0x1001294e9
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0xd8]
test rcx, rcx
je 0x1001294fd
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x30]
test rcx, rcx
je 0x10012950d
mov rax, qword [rcx]
call qword [rax + 0x10]
mov eax, ebx
mov rbx, qword [rsp + 0xc0]
add rsp, 0x90
pop r15
pop r12
pop rdi
pop rsi
pop rbp
ret