Function at 0x14001f8d0
Capabilities:
Get disk information
Get disk size
Reference wmi statements

Disassembly:
mov r11, rsp
push rsi
push rdi
push r12
push r13
push r14
sub rsp, 0x9a0
mov qword [rsp + 0x530], 0xfffffffffffffffe
mov qword [r11 + 0x18], rbx
mov qword [r11 + 0x20], rbp
mov rax, qword [0x140087990]
xor rax, rsp
mov qword [rsp + 0x990], rax
mov rbp, rdx
mov r12, rcx
mov qword [r11 - 0x1e8], rdx
xor r13d, r13d
mov dword [rsp + 0x5c], r13d
mov qword [r11 - 0x218], 0xf
mov qword [r11 - 0x220], r13
mov byte [rsp + 0x798], r13b
xor r8d, r8d
lea rdx, [0x14007380c]
lea rcx, [r11 - 0x238]
call fcn.14003afb0
nop
mov qword [rsp + 0x738], 7
mov qword [rsp + 0x730], r13
mov word [rsp + 0x720], r13w
xor r8d, r8d
lea rdx, [0x140073800]
lea rcx, [rsp + 0x718]
call fcn.14003b810
nop
mov qword [rsp + 0x760], 0xf
mov qword [rsp + 0x758], r13
mov byte [rsp + 0x748], r13b
xor r8d, r8d
lea rdx, [0x14007380c]
lea rcx, [rsp + 0x740]
call fcn.14003afb0
nop
mov qword [rsp + 0x40], r13
mov qword [rsp + 0x48], r13
or r14, 0xffffffffffffffff
cmp qword [0x14008aca8], r13
je 0x14001ff69
lea ecx, [r13 + 0x18]
call fcn.140048898
mov rdi, rax
mov qword [rsp + 0x70], rax
test rax, rax
je 0x14001fa04
mov qword [rax + 8], r13
mov dword [rax + 0x10], 1
lea rcx, str.SELECT__FROM_Win32_LogicalDiskToPartition
call fcn.1400443a0
mov qword [rdi], rax
jmp 0x14001fa07
mov rdi, r13
mov qword [rsp + 0x538], rdi
test rdi, rdi
jne 0x14001fa1f
mov ecx, 0x8007000e
call fcn.140044070
nop
mov ecx, 0x18
call fcn.140048898
mov rbx, rax
mov qword [rsp + 0x70], rax
test rax, rax
je 0x14001fa52
mov qword [rax + 8], r13
mov dword [rax + 0x10], 1
lea rcx, [0x140074280]
call fcn.1400443a0
mov qword [rbx], rax
jmp 0x14001fa55
mov rbx, r13
mov qword [rsp + 0x548], rbx
test rbx, rbx
jne 0x14001fa6d
mov ecx, 0x8007000e
call fcn.140044070
nop
mov rcx, qword [0x14008aca8]
mov rax, qword [rcx]
lea rdx, [rsp + 0x40]
mov qword [rsp + 0x28], rdx
mov qword [rsp + 0x20], r13
mov r9d, gethostbyname
mov r8, qword [rdi]
mov rdx, qword [rbx]
call qword [rax + 0xa0]
mov esi, eax
mov ecx, r14d
lock xadd dword [rbx + 0x10], ecx
add ecx, 0xffffffff
jne 0x14001facc
mov rcx, qword [rbx]
test rcx, rcx
je 0x14001fab5
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x14001fac3
call fcn.1400464ec
mov rcx, rbx
call fcn.140044814
nop
mov eax, r14d
lock xadd dword [rdi + 0x10], eax
add eax, 0xffffffff
jne 0x14001fafd
mov rcx, qword [rdi]
test rcx, rcx
je 0x14001fae7
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x14001faf5
call fcn.1400464ec
mov rcx, rdi
call fcn.140044814
test esi, esi
js 0x14001ff69
mov dword [rsp + 0x60], r13d
mov rcx, qword [rsp + 0x40]
test rcx, rcx
je 0x14001ff46
nop dword [rax + rax]
mov rax, qword [rcx]
lea rdx, [rsp + 0x60]
mov qword [rsp + 0x20], rdx
lea r9, [rsp + 0x48]
mov r8d, 1
mov edx, r14d
call qword [rax + 0x20]
cmp dword [rsp + 0x60], 0
je 0x14001ff41
mov qword [rsp + 0xa0], 7
mov qword [rsp + 0x98], r13
mov word [rsp + 0x88], r13w
mov r8d, 9
lea rdx, str.Dependent
lea rcx, [rsp + 0x80]
call fcn.14003b810
nop
lea r8, [rsp + 0x80]
mov rdx, qword [rsp + 0x48]
lea rcx, [rsp + 0x768]
call fcn.14000d2b0
nop
cmp qword [rsp + 0xa0], 8
jb 0x14001fbb4
mov rcx, qword [rsp + 0x88]
call fcn.140044814
mov qword [rsp + 0xa0], 7
mov qword [rsp + 0x98], r13
mov word [rsp + 0x88], r13w
mov eax, r13d
cmp qword [rsp + 0x780], rax
setne al
test eax, eax
je 0x14001ff22
mov r9d, 1
xor r8d, r8d
lea rdx, [0x140074a8c]
lea rcx, [rsp + 0x768]
call fcn.140039fe0
cmp rax, 0xffffffffffffffff
je 0x14001ff22
mov rdx, rbp
lea rcx, [rsp + 0x560]
call fcn.140003080
mov rdi, rax
mov r9d, 1
xor r8d, r8d
lea rdx, [0x140074a8c]
lea rcx, [rsp + 0x768]
call fcn.140039fe0
lea r8, [rax + 1]
mov r9d, 1
lea rdx, [rsp + 0x1e8]
lea rcx, [rsp + 0x768]
call fcn.140039140
nop
mov r9, qword [rdi + 0x18]
cmp qword [rdi + 0x20], 8
jb 0x14001fc6f
mov rdx, qword [rdi + 8]
jmp 0x14001fc73
lea rdx, [rdi + 8]
mov r8, qword [rax + 0x18]
cmp qword [rax + 0x20], 8
jb 0x14001fc84
mov rcx, qword [rax + 8]
jmp 0x14001fc88
lea rcx, [rax + 8]
mov rdi, r9
cmp r8, r9
cmovb rdi, r8
test rdi, rdi
je 0x14001fcbd
movzx eax, word [rdx]
cmp word [rcx], ax
jne 0x14001fcaf
add rcx, 2
add rdx, 2
sub rdi, 1
jne 0x14001fc97
jmp 0x14001fcbd
mov edi, 1
cmp word [rcx], ax
cmovb edi, r14d
jmp 0x14001fcc0
mov edi, r13d
movsxd rax, edi
test edi, edi
jne 0x14001fcda
cmp r8, r9
jae 0x14001fcd1
mov eax, r14d
jmp 0x14001fcda
mov eax, r13d
cmp r8, r9
setne al
test eax, eax
sete dil
cmp qword [rsp + 0x208], 8
jb 0x14001fcf8
mov rcx, qword [rsp + 0x1f0]
call fcn.140044814
mov qword [rsp + 0x208], 7
mov qword [rsp + 0x200], r13
mov word [rsp + 0x1f0], r13w
cmp qword [rsp + 0x580], 8
jb 0x14001fd2d
mov rcx, qword [rsp + 0x568]
call fcn.140044814
test dil, dil
je 0x14001fedc
mov qword [rsp + 0x1b8], 7
mov qword [rsp + 0x1b0], r13
mov word [rsp + 0x1a0], r13w
mov r8d, 0xa
lea rdx, [0x140074a90]
lea rcx, [rsp + 0x198]
call fcn.14003b810
nop
lea r8, [rsp + 0x198]
mov rdx, qword [rsp + 0x48]
lea rcx, [rsp + 0x3f0]
call fcn.14000d2b0
nop
mov r9, r14
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x768]
call fcn.140039eb0
nop
cmp qword [rsp + 0x410], 8
jb 0x14001fdb8
mov rcx, qword [rsp + 0x3f8]
call fcn.140044814
mov qword [rsp + 0x410], 7
mov qword [rsp + 0x408], r13
mov word [rsp + 0x3f8], r13w
cmp qword [rsp + 0x1b8], 8
jb 0x14001fded
mov rcx, qword [rsp + 0x1a0]
call fcn.140044814
mov eax, r13d
cmp qword [rsp + 0x780], rax
setne al
test eax, eax
je 0x14001ff03
mov r9d, 1
xor r8d, r8d
lea rdx, [0x140074a8c]
lea rcx, [rsp + 0x768]
call fcn.140039fe0
cmp rax, 0xffffffffffffffff
je 0x14001ff03
mov r9d, 1
xor r8d, r8d
lea rdx, [0x140074a8c]
lea rcx, [rsp + 0x768]
call fcn.140039fe0
lea r8, [rax + 7]
mov r9d, 1
lea rdx, [rsp + 0x628]
lea rcx, [rsp + 0x768]
call fcn.140039140
nop
mov rdx, rax
lea rcx, [rsp + 0x300]
call fcn.140002ef0
nop
mov r9, r14
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x740]
call fcn.140039420
nop
cmp qword [rsp + 0x320], 0x10
jb 0x14001fea7
mov rcx, qword [rsp + 0x308]
call fcn.140044814
mov qword [rsp + 0x320], send
mov qword [rsp + 0x318], r13
mov byte [rsp + 0x308], 0
cmp qword [rsp + 0x648], 8
jb 0x14001fedc
mov rcx, qword [rsp + 0x630]
call fcn.140044814
nop
cmp qword [rsp + 0x788], 8
jb 0x14001fef4
mov rcx, qword [rsp + 0x770]
call fcn.140044814
mov rcx, qword [rsp + 0x40]
test rcx, rcx
je 0x14001ff46
jmp 0x14001fb20
cmp qword [rsp + 0x788], 8
jb 0x14001ff41
mov rcx, qword [rsp + 0x770]
call fcn.140044814
mov rcx, qword [rsp + 0x40]
jmp 0x14001ff46
cmp qword [rsp + 0x788], 8
jb 0x14001ff41
mov rcx, qword [rsp + 0x770]
call fcn.140044814
mov rcx, qword [rsp + 0x40]
jmp 0x14001ff46
mov rcx, qword [rsp + 0x40]
mov rdx, qword [rsp + 0x48]
test rdx, rdx
je 0x14001ff5e
mov rax, qword [rdx]
mov rcx, rdx
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [rsp + 0x40]
test rcx, rcx
je 0x14001ff69
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
lea rcx, [rsp + 0x748]
cmp qword [rsp + 0x760], 0x10
cmovae rcx, qword [rsp + 0x748]
xor r8d, r8d
lea rdx, [0x14007380c]
call fcn.1400592f0
movsxd rcx, eax
test eax, eax
jne 0x14001ffa9
mov eax, r13d
cmp qword [rsp + 0x758], rax
setne al
mov ecx, eax
test ecx, ecx
je 0x1400203ca
cmp qword [0x14008aca8], 0
je 0x1400203ca
mov ecx, 0x18
call fcn.140048898
mov rdi, rax
mov qword [rsp + 0x50], rax
test rax, rax
je 0x14001fff2
mov qword [rax + 8], r13
mov dword [rax + 0x10], 1
lea rcx, str.SELECT__FROM_Win32_DiskDrive
call fcn.1400443a0
mov qword [rdi], rax
jmp 0x14001fff5
mov rdi, r13
mov qword [rsp + 0x558], rdi
test rdi, rdi
jne 0x14002000d
mov ecx, 0x8007000e
call fcn.140044070
nop
mov ecx, 0x18
call fcn.140048898
mov rbx, rax
mov qword [rsp + 0x50], rax
test rax, rax
je 0x140020040
mov qword [rax + 8], r13
mov dword [rax + 0x10], 1
lea rcx, [0x140074280]
call fcn.1400443a0
mov qword [rbx], rax
jmp 0x140020043
mov rbx, r13
mov qword [rsp + 0x550], rbx
test rbx, rbx
jne 0x14002005b
mov ecx, 0x8007000e
call fcn.140044070
nop
mov rcx, qword [0x14008aca8]
mov rax, qword [rcx]
lea rdx, [rsp + 0x40]
mov qword [rsp + 0x28], rdx
mov qword [rsp + 0x20], r13
mov r9d, gethostbyname
mov r8, qword [rdi]
mov rdx, qword [rbx]
call qword [rax + 0xa0]
mov esi, eax
mov ecx, r14d
lock xadd dword [rbx + 0x10], ecx
add ecx, 0xffffffff
jne 0x1400200ba
mov rcx, qword [rbx]
test rcx, rcx
je 0x1400200a3
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x1400200b1
call fcn.1400464ec
mov rcx, rbx
call fcn.140044814
nop
mov eax, r14d
lock xadd dword [rdi + 0x10], eax
add eax, 0xffffffff
jne 0x1400200eb
mov rcx, qword [rdi]
test rcx, rcx
je 0x1400200d5
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x1400200e3
call fcn.1400464ec
mov rcx, rdi
call fcn.140044814
test esi, esi
js 0x1400203ca
mov dword [rsp + 0x58], r13d
mov rcx, qword [rsp + 0x40]
test rcx, rcx
je 0x1400203a7
nop word [rax + rax]
mov rax, qword [rcx]
lea rdx, [rsp + 0x58]
mov qword [rsp + 0x20], rdx
lea r9, [rsp + 0x48]
mov r8d, 1
mov edx, r14d
call qword [rax + 0x20]
cmp dword [rsp + 0x58], 0
je 0x1400203a2
mov qword [rsp + 0x118], 7
mov qword [rsp + 0x110], r13
mov word [rsp + 0x100], r13w
mov r8d, 4
lea rdx, str.Name
lea rcx, [rsp + 0xf8]
call fcn.14003b810
nop
lea r8, [rsp + 0x740]
lea rdx, str..PHYSICALDRIVE
lea rcx, [rsp + 0x440]
call fcn.14003d890
mov rdi, rax
lea r8, [rsp + 0xf8]
mov rdx, qword [rsp + 0x48]
lea rcx, [rsp + 0x350]
call fcn.14000d2b0
nop
mov rdx, rax
lea rcx, [rsp + 0x490]
call fcn.140002ef0
nop
mov rbx, qword [rdi + 0x18]
cmp qword [rdi + 0x20], 0x10
jb 0x1400201cd
mov rdx, qword [rdi + 8]
jmp 0x1400201d1
lea rdx, [rdi + 8]
mov rdi, qword [rax + 0x18]
cmp qword [rax + 0x20], 0x10
jb 0x1400201e2
mov rcx, qword [rax + 8]
jmp 0x1400201e6
lea rcx, [rax + 8]
mov r8, rbx
cmp rdi, rbx
cmovb r8, rdi
call fcn.1400592f0
movsxd rcx, eax
test eax, eax
jne 0x140020211
cmp rdi, rbx
jae 0x140020206
mov ecx, r14d
jmp 0x140020211
mov eax, r13d
cmp rdi, rbx
setne al
mov ecx, eax
test ecx, ecx
sete dil
cmp qword [rsp + 0x4b0], 0x10
jb 0x14002022f
mov rcx, qword [rsp + 0x498]
call fcn.140044814
mov qword [rsp + 0x4b0], 0xf
mov qword [rsp + 0x4a8], r13
mov byte [rsp + 0x498], 0
cmp qword [rsp + 0x370], 8
jb 0x140020263
mov rcx, qword [rsp + 0x358]
call fcn.140044814
mov qword [rsp + 0x370], 7
mov qword [rsp + 0x368], r13
mov word [rsp + 0x358], r13w
cmp qword [rsp + 0x460], 0x10
jb 0x140020298
mov rcx, qword [rsp + 0x448]
call fcn.140044814
mov qword [rsp + 0x460], 0xf
mov qword [rsp + 0x458], r13
mov byte [rsp + 0x448], 0
cmp qword [rsp + 0x118], 8
jb 0x1400202cc
mov rcx, qword [rsp + 0x100]
call fcn.140044814
test dil, dil
jne 0x1400202e4
mov rcx, qword [rsp + 0x40]
test rcx, rcx
jne 0x140020110
jmp 0x1400203a7
mov qword [rsp + 0xc8], 7
mov qword [rsp + 0xc0], r13
mov word [rsp + 0xb0], r13w
mov r8d, 5
lea rdx, [0x140074af0]
lea rcx, [rsp + 0xa8]
call fcn.14003b810
nop
lea r8, [rsp + 0xa8]
mov rdx, qword [rsp + 0x48]
lea rcx, [rsp + 0x3a0]
call fcn.14000d2b0
nop
mov r9, r14
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x718]
call fcn.140039eb0
nop
cmp qword [rsp + 0x3c0], 8
jb 0x140020366
mov rcx, qword [rsp + 0x3a8]
call fcn.140044814
mov qword [rsp + 0x3c0], 7
mov qword [rsp + 0x3b8], r13
mov word [rsp + 0x3a8], r13w
cmp qword [rsp + 0xc8], 8
jb 0x1400203a2
mov rcx, qword [rsp + 0xb0]
call fcn.140044814
mov rcx, qword [rsp + 0x40]
jmp 0x1400203a7
mov rcx, qword [rsp + 0x40]
mov rdx, qword [rsp + 0x48]
test rdx, rdx
je 0x1400203bf
mov rax, qword [rdx]
mov rcx, rdx
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [rsp + 0x40]
test rcx, rcx
je 0x1400203ca
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov eax, r13d
cmp qword [rsp + 0x730], rax
setne al
test eax, eax
jne 0x1400204cb
mov qword [r12 + 0x20], send
mov qword [r12 + 0x18], r13
mov byte [r12 + 8], al
xor r8d, r8d
lea rdx, [0x14007380c]
mov rcx, r12
call fcn.14003afb0
nop
cmp qword [rsp + 0x760], 0x10
jb 0x14002041e
mov rcx, qword [rsp + 0x748]
call fcn.140044814
mov qword [rsp + 0x760], 0xf
mov qword [rsp + 0x758], r13
mov byte [rsp + 0x748], 0
cmp qword [rsp + 0x738], 8
jb 0x140020452
mov rcx, qword [rsp + 0x720]
call fcn.140044814
mov qword [rsp + 0x738], 7
mov qword [rsp + 0x730], r13
mov word [rsp + 0x720], r13w
cmp qword [rsp + 0x7b0], 0x10
jb 0x140020487
mov rcx, qword [rsp + 0x798]
call fcn.140044814
mov qword [rsp + 0x7b0], 0xf
mov qword [rsp + 0x7a8], r13
mov byte [rsp + 0x798], 0
cmp qword [rbp + 0x20], 0x10
jb 0x1400204b3
mov rcx, qword [rbp + 8]
call fcn.140044814
mov qword [rbp + 0x20], send
mov qword [rbp + 0x18], r13
mov byte [rbp + 8], 0
mov rax, r12
jmp 0x1400210ee
mov word [rsp + 0x8c0], r13w
xor edx, edx
mov r8d, 0xc6
lea rcx, [rsp + 0x8c2]
call fcn.1400491c0
mov word [rsp + 0x7f0], r13w
xor edx, edx
mov r8d, 0xc6
lea rcx, [rsp + 0x7f2]
call fcn.1400491c0
mov dword [rsp + 0x5c], r13d
mov rdx, rbp
lea rcx, [rsp + 0x4e0]
call fcn.140003080
nop
cmp qword [rax + 0x20], 8
jb 0x14002052a
mov rdx, qword [rax + 8]
jmp 0x14002052e
lea rdx, [rax + 8]
mov qword [rsp + 0x7d8], 7
mov qword [rsp + 0x7d0], r13
mov word [rsp + 0x7c0], r13w
xor eax, eax
mov rcx, r14
mov rdi, rdx
repne scasw ax, word [rdi]
not rcx
lea r8, [rcx - 1]
lea rcx, [rsp + 0x7b8]
call fcn.14003b810
nop
cmp qword [rsp + 0x500], 8
jb 0x140020583
mov rcx, qword [rsp + 0x4e8]
call fcn.140044814
mov qword [rsp + 0x500], 7
mov qword [rsp + 0x4f8], r13
mov word [rsp + 0x4e8], r13w
mov r8d, 2
lea rdx, [0x140074afc]
lea rcx, [rsp + 0x7b8]
call fcn.14003b690
lea rcx, [rsp + 0x7c0]
cmp qword [rsp + 0x7d8], 8
cmovae rcx, qword [rsp + 0x7c0]
mov dword [rsp + 0x38], 0x64
lea rax, [rsp + 0x7f0]
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], r13
mov qword [rsp + 0x20], r13
lea r9, [rsp + 0x5c]
mov r8d, 0x64
lea rdx, [rsp + 0x8c0]
call qword [sym.imp.KERNEL32.dll_GetVolumeInformationW]
mov qword [rsp + 0x168], 7
mov qword [rsp + 0x160], r13
mov word [rsp + 0x150], r13w
xor eax, eax
mov rcx, r14
lea rdi, [rsp + 0x7f0]
repne scasw ax, word [rdi]
not rcx
lea r8, [rcx - 1]
lea rdx, [rsp + 0x7f0]
lea rcx, [rsp + 0x148]
call fcn.14003b810
nop
mov rdx, rbp
lea rcx, [rsp + 0x328]
call fcn.140003080
nop
lea r8, [0x140074b08]
mov rdx, rax
lea rcx, [rsp + 0x2d8]
call fcn.14003dc60
nop
lea r8, [rsp + 0x148]
mov rdx, rax
lea rcx, [rsp + 0x260]
call fcn.14003e0f0
nop
lea r8, [0x140074b04]
mov rdx, rax
lea rcx, [rsp + 0x210]
call fcn.14003dc60
nop
lea r8, [rsp + 0x718]
mov rdx, rax
lea rcx, [rsp + 0x238]
call fcn.14003e0f0
nop
lea r8, [0x140073804]
mov rdx, rax
lea rcx, [rsp + 0x288]
call fcn.14003dc60
nop
mov r9, r14
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x718]
call fcn.140039eb0
nop
cmp qword [rsp + 0x2a8], 8
jb 0x140020710
mov rcx, qword [rsp + 0x290]
call fcn.140044814
mov qword [rsp + 0x2a8], 7
mov qword [rsp + 0x2a0], r13
mov word [rsp + 0x290], r13w
cmp qword [rsp + 0x258], 8
jb 0x140020745
mov rcx, qword [rsp + 0x240]
call fcn.140044814
mov qword [rsp + 0x258], 7
mov qword [rsp + 0x250], r13
mov word [rsp + 0x240], r13w
cmp qword [rsp + 0x230], 8
jb 0x14002077a
mov rcx, qword [rsp + 0x218]
call fcn.140044814
mov qword [rsp + 0x230], 7
mov qword [rsp + 0x228], r13
mov word [rsp + 0x218], r13w
cmp qword [rsp + 0x280], 8
jb 0x1400207af
mov rcx, qword [rsp + 0x268]
call fcn.140044814
mov qword [rsp + 0x280], 7
mov qword [rsp + 0x278], r13
mov word [rsp + 0x268], r13w
cmp qword [rsp + 0x2f8], 8
jb 0x1400207e4
mov rcx, qword [rsp + 0x2e0]
call fcn.140044814
mov qword [rsp + 0x2f8], 7
mov qword [rsp + 0x2f0], r13
mov word [rsp + 0x2e0], r13w
cmp qword [rsp + 0x348], 8
jb 0x140020819
mov rcx, qword [rsp + 0x330]
call fcn.140044814
mov qword [rsp + 0x348], 7
mov qword [rsp + 0x340], r13
mov word [rsp + 0x330], r13w
cmp qword [rsp + 0x168], 8
jb 0x14002084e
mov rcx, qword [rsp + 0x150]
call fcn.140044814
mov qword [rsp + 0xf0], 7
mov qword [rsp + 0xe8], r13
mov word [rsp + 0xd8], r13w
xor eax, eax
mov rcx, r14
lea rdi, [rsp + 0x8c0]
repne scasw ax, word [rdi]
not rcx
lea r8, [rcx - 1]
lea rdx, [rsp + 0x8c0]
lea rcx, [rsp + 0xd0]
call fcn.14003b810
nop
lea r8, [rsp + 0xd0]
lea rdx, [0x140074b10]
lea rcx, [rsp + 0x3c8]
call fcn.14003e020
nop
lea r8, [0x140074b0c]
mov rdx, rax
lea rcx, [rsp + 0x378]
call fcn.14003dc60
nop
mov r9, r14
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x718]
call fcn.14003b540
nop
cmp qword [rsp + 0x398], 8
jb 0x1400208fc
mov rcx, qword [rsp + 0x380]
call fcn.140044814
mov qword [rsp + 0x398], 7
mov qword [rsp + 0x390], r13
mov word [rsp + 0x380], r13w
cmp qword [rsp + 0x3e8], 8
jb 0x140020931
mov rcx, qword [rsp + 0x3d0]
call fcn.140044814
mov qword [rsp + 0x3e8], 7
mov qword [rsp + 0x3e0], r13
mov word [rsp + 0x3d0], r13w
cmp qword [rsp + 0xf0], 8
jb 0x140020966
mov rcx, qword [rsp + 0xd8]
call fcn.140044814
lea rcx, [rsp + 0x7c0]
cmp qword [rsp + 0x7d8], 8
cmovae rcx, qword [rsp + 0x7c0]
lea r9, [rsp + 0x78]
lea r8, [rsp + 0x70]
lea rdx, [rsp + 0x540]
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
lea rcx, [0x140087590]
mov rax, qword [0x140087590]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x68], rax
mov qword [rsp + 0x710], 7
mov qword [rsp + 0x708], r13
mov word [rsp + 0x6f8], r13w
mov r8, qword [rsp + 0x78]
lea rdx, str._I64d
lea rcx, [rsp + 0x68]
call fcn.14003d820
mov qword [rsp + 0x140], 7
mov qword [rsp + 0x138], r13
mov word [rsp + 0x128], r13w
xor eax, eax
mov rcx, r14
mov rdx, qword [rsp + 0x68]
mov rdi, rdx
repne scasw ax, word [rdi]
not rcx
lea r8, [rcx - 1]
lea rcx, [rsp + 0x120]
call fcn.14003b810
nop
mov r9, r14
xor r8d, r8d
lea rdx, [rsp + 0x120]
lea rcx, [rsp + 0x6f0]
call fcn.140039eb0
nop
cmp qword [rsp + 0x140], 8
jb 0x140020a5b
mov rcx, qword [rsp + 0x128]
call fcn.140044814
mov r9, qword [rsp + 0x708]
cmp r9, 0xa
jae 0x140020b19
cmp r9, 7
jb 0x140020c5e
add r9, 0xfffffffffffffffa
xor r8d, r8d
lea rdx, [rsp + 0x588]
lea rcx, [rsp + 0x6f0]
call fcn.140039140
nop
lea r8, [0x140074b24]
mov rdx, rax
lea rcx, [rsp + 0x418]
call fcn.14003dc60
nop
mov r9, r14
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x6f0]
call fcn.140039eb0
nop
cmp qword [rsp + 0x438], 8
jb 0x140020adb
mov rcx, qword [rsp + 0x420]
call fcn.140044814
mov qword [rsp + 0x438], 7
mov qword [rsp + 0x430], r13
mov word [rsp + 0x420], r13w
cmp qword [rsp + 0x5a8], 8
jb 0x140020c5e
mov rcx, qword [rsp + 0x590]
call fcn.140044814
jmp 0x140020c5e
cmp r9, 0xc
ja 0x140020bc5
add r9, 0xfffffffffffffff7
xor r8d, r8d
lea rdx, [rsp + 0x5b0]
lea rcx, [rsp + 0x6f0]
call fcn.140039140
nop
lea r8, [0x140074b2c]
mov rdx, rax
lea rcx, [rsp + 0x468]
call fcn.14003dc60
nop
mov r9, r14
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x6f0]
call fcn.140039eb0
nop
cmp qword [rsp + 0x488], 8
jb 0x140020b87
mov rcx, qword [rsp + 0x470]
call fcn.140044814
mov qword [rsp + 0x488], 7
mov qword [rsp + 0x480], r13
mov word [rsp + 0x470], r13w
cmp qword [rsp + 0x5d0], 8
jb 0x140020c5e
mov rcx, qword [rsp + 0x5b8]
call fcn.140044814
jmp 0x140020c5e
add r9, 0xfffffffffffffff5
xor r8d, r8d
lea rdx, [rsp + 0x600]
lea rcx, [rsp + 0x6f0]
call fcn.140039140
nop
lea r8, [0x140074b34]
mov rdx, rax
lea rcx, [rsp + 0x4b8]
call fcn.14003dc60
nop
mov r9, r14
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x6f0]
call fcn.140039eb0
nop
cmp qword [rsp + 0x4d8], 8
jb 0x140020c29
mov rcx, qword [rsp + 0x4c0]
call fcn.140044814
mov qword [rsp + 0x4d8], 7
mov qword [rsp + 0x4d0], r13
mov word [rsp + 0x4c0], r13w
cmp qword [rsp + 0x620], 8
jb 0x140020c5e
mov rcx, qword [rsp + 0x608]
call fcn.140044814
lea r8, str._of
lea rdx, [rsp + 0x6f0]
lea rcx, [rsp + 0x678]
call fcn.14003dc60
nop
mov r9, r14
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x718]
call fcn.14003b540
nop
cmp qword [rsp + 0x698], 8
jb 0x140020caa
mov rcx, qword [rsp + 0x680]
call fcn.140044814
mov r8, qword [rsp + 0x70]
lea rdx, str._I64d
lea rcx, [rsp + 0x68]
call fcn.14003d820
mov qword [rsp + 0x190], 7
mov qword [rsp + 0x188], r13
mov word [rsp + 0x178], r13w
xor eax, eax
mov rcx, r14
mov rbx, qword [rsp + 0x68]
mov rdi, rbx
repne scasw ax, word [rdi]
not rcx
lea r8, [rcx - 1]
mov rdx, rbx
lea rcx, [rsp + 0x170]
call fcn.14003b810
nop
mov r9, r14
xor r8d, r8d
lea rdx, [rsp + 0x170]
lea rcx, [rsp + 0x6f0]
call fcn.140039eb0
nop
cmp qword [rsp + 0x190], 8
jb 0x140020d39
mov rcx, qword [rsp + 0x178]
call fcn.140044814
mov qword [rsp + 0x1e0], 7
mov qword [rsp + 0x1d8], r13
mov word [rsp + 0x1c8], r13w
xor eax, eax
mov rcx, r14
mov rdi, rbx
repne scasw ax, word [rdi]
not rcx
lea r8, [rcx - 1]
mov rdx, rbx
lea rcx, [rsp + 0x1c0]
call fcn.14003b810
nop
mov r9, r14
xor r8d, r8d
lea rdx, [rsp + 0x1c0]
lea rcx, [rsp + 0x6f0]
call fcn.140039eb0
nop
cmp qword [rsp + 0x1e0], 8
jb 0x140020dad
mov rcx, qword [rsp + 0x1c8]
call fcn.140044814
mov r9, qword [rsp + 0x708]
cmp r9, 0xa
jae 0x140020e6b
cmp r9, 7
jb 0x140020f04
add r9, 0xfffffffffffffffa
xor r8d, r8d
lea rdx, [rsp + 0x6a0]
lea rcx, [rsp + 0x6f0]
call fcn.140039140
nop
lea r8, [0x140074b24]
mov rdx, rax
lea rcx, [rsp + 0x508]
call fcn.14003dc60
nop
mov r9, r14
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x6f0]
call fcn.140039eb0
nop
cmp qword [rsp + 0x528], 8
jb 0x140020e2d
mov rcx, qword [rsp + 0x510]
call fcn.140044814
mov qword [rsp + 0x528], 7
mov qword [rsp + 0x520], r13
mov word [rsp + 0x510], r13w
cmp qword [rsp + 0x6c0], 8
jb 0x140020f04
mov rcx, qword [rsp + 0x6a8]
call fcn.140044814
jmp 0x140020f04
add r9, 0xfffffffffffffff7
xor r8d, r8d
lea rdx, [rsp + 0x6c8]
lea rcx, [rsp + 0x6f0]
call fcn.140039140
nop
lea r8, [0x140074b2c]
mov rdx, rax
lea rcx, [rsp + 0x2b0]
call fcn.14003dc60
nop
mov r9, r14
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x6f0]
call fcn.140039eb0
nop
cmp qword [rsp + 0x2d0], 8
jb 0x140020ecf
mov rcx, qword [rsp + 0x2b8]
call fcn.140044814
mov qword [rsp + 0x2d0], 7
mov qword [rsp + 0x2c8], r13
mov word [rsp + 0x2b8], r13w
cmp qword [rsp + 0x6e8], 8
jb 0x140020f04
mov rcx, qword [rsp + 0x6d0]
call fcn.140044814
lea r8, [0x140074a40]
lea rdx, [rsp + 0x6f0]
lea rcx, [rsp + 0x650]
call fcn.14003dc60
nop
mov r9, r14
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x718]
call fcn.14003b540
nop
cmp qword [rsp + 0x670], 8
jb 0x140020f51
mov rcx, qword [rsp + 0x658]
call fcn.140044814
nop
cmp qword [rsp + 0x710], 8
jb 0x140020f69
mov rcx, qword [rsp + 0x6f8]
call fcn.140044814
mov qword [rsp + 0x710], 7
mov qword [rsp + 0x708], r13
mov word [rsp + 0x6f8], r13w
lea rdx, [rbx - 0x18]
mov eax, r14d
lock xadd dword [rdx + 0x10], eax
dec eax
test eax, eax
jg 0x140020fa1
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
lea rdx, [rsp + 0x718]
lea rcx, [rsp + 0x5d8]
call fcn.140002ef0
nop
mov r9, r14
xor r8d, r8d
mov rdx, rax
lea rcx, [rsp + 0x790]
call fcn.140039420
nop
cmp qword [rsp + 0x5f8], 0x10
jb 0x140020fe6
mov rcx, qword [rsp + 0x5e0]
call fcn.140044814
mov qword [r12 + 0x20], send
mov qword [r12 + 0x18], r13
mov byte [r12 + 8], 0
mov r9, r14
xor r8d, r8d
lea rdx, [rsp + 0x790]
mov rcx, r12
call fcn.140039420
nop
cmp qword [rsp + 0x7d8], 8
jb 0x140021029
mov rcx, qword [rsp + 0x7c0]
call fcn.140044814
mov qword [rsp + 0x7d8], 7
mov qword [rsp + 0x7d0], r13
mov word [rsp + 0x7c0], r13w
cmp qword [rsp + 0x760], 0x10
jb 0x14002105e
mov rcx, qword [rsp + 0x748]
call fcn.140044814
mov qword [rsp + 0x760], 0xf
mov qword [rsp + 0x758], r13
mov byte [rsp + 0x748], 0
cmp qword [rsp + 0x738], 8
jb 0x140021092
mov rcx, qword [rsp + 0x720]
call fcn.140044814
mov qword [rsp + 0x738], 7
mov qword [rsp + 0x730], r13
mov word [rsp + 0x720], r13w
cmp qword [rsp + 0x7b0], 0x10
jb 0x1400210c7
mov rcx, qword [rsp + 0x798]
call fcn.140044814
mov qword [rsp + 0x7b0], 0xf
mov qword [rsp + 0x7a8], r13
mov byte [rsp + 0x798], 0
mov rcx, rbp
call fcn.140038910
mov rax, r12
mov rcx, qword [rsp + 0x990]
xor rcx, rsp
call fcn.140044830
lea r11, [rsp + 0x9a0]
mov rbx, qword [r11 + 0x40]
mov rbp, qword [r11 + 0x48]
mov rsp, r11
pop r14
pop r13
pop r12
pop rdi
pop rsi
ret