Function at 0x14006fed0
Capabilities:
Get disk size

Disassembly:
mov rax, rsp
push rbp
push rdi
push r12
push r14
push r15
lea rbp, [rax - 0x5f]
sub rsp, 0xc0
mov qword [rbp + 7], 0xfffffffffffffffe
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov rbx, rdx
mov r14, rcx
xor r15d, r15d
mov qword [rbp - 0x41], r15
mov eax, dword [0x1401cbd80]
mov r8d, eax
imul r8d, eax
imul r8d, eax
mov eax, 0x38e38e39
imul r8d
sar edx, 2
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*8]
add eax, eax
sub r8d, eax
cmp r8d, 4
jne 0x14000be29
mov qword [rsp + 0x20], r15
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetMailslotInfo]
mov qword [rbp - 0x39], r15
mov qword [rbp - 0x59], r15
lea rcx, [0x1401c39a8]
mov rax, qword [0x1401c39a8]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp + 0x77], rax
mov eax, dword [0x1401cbd80]
lea ecx, [rax + 1]
imul ecx, eax
mov eax, 0x2aaaaaab
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
shl eax, 3
sub ecx, eax
cmp ecx, 0x11
jne 0x14000be9e
mov eax, 0xba
mov r8d, 0x48
nop
test r8d, r8d
je 0x14000be95
mov ecx, r8d
cdq
idiv r8d
mov r8d, edx
mov eax, ecx
test ecx, ecx
jne 0x14000be80
add eax, r8d
mov dword [0x1401cbd80], eax
lea rax, [rbp + 0x77]
mov qword [rsp + 0x28], rax
lea rax, [rbp - 0x59]
mov qword [rsp + 0x20], rax
lea r9, [rbp - 0x39]
lea r8, [rbp - 0x41]
mov rdx, rbx
call fcn.14000f440
test al, al
jne 0x14000bf8c
lea r8, [0x140154184]
lea rdx, [0x140154188]
lea rcx, [rbp + 0x77]
call fcn.1400100a0
lea rcx, [0x1401c39a8]
mov rax, qword [0x1401c39a8]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp + 0x7f], rax
lea rdx, str.addJsErrorHandle_QueryInterfacesForSandBox_
test rdx, 0xffffffffffff0000
jne 0x14000bf28
movzx ebx, dx
mov ecx, ebx
call fcn.1400019e0
test rax, rax
je 0x14000bf32
mov r8d, ebx
mov rdx, rax
lea rcx, [rbp + 0x7f]
call fcn.1400025b0
jmp 0x14000bf32
lea rcx, [rbp + 0x7f]
call fcn.140003350
nop
lea r8, [rbp + 0x77]
lea rdx, [rbp + 0x7f]
lea rcx, [rbp - 0x31]
call fcn.140010500
nop
mov r8, qword [r14]
mov rdx, rax
mov rcx, r14
call qword [r8 + RegisterTypeLib]
nop
mov rdx, qword [rbp - 0x31]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14000bf6e
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0x7f]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14000bf87
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
jmp 0x14000c159
mov rbx, qword [rbp - 0x41]
cmp qword [r14 + 0xa0], 0
jne 0x14000bfa4
test rbx, rbx
je 0x14000c011
jmp 0x14000c159
test rbx, rbx
je 0x14000c159
mov qword [rbp - 0x49], r15
mov qword [rbp - 0x51], r15
mov rcx, qword [r14 + 0xa0]
mov rax, qword [rcx]
lea r8, [rbp - 0x49]
lea rdx, [0x14014a7a8]
call qword [rax]
mov rax, qword [rbx]
lea r8, [rbp - 0x51]
lea rdx, [0x14014a7a8]
mov rcx, rbx
call qword [rax]
mov rax, qword [rbp - 0x51]
cmp qword [rbp - 0x49], rax
sete bl
mov rcx, qword [rbp - 0x51]
test rcx, rcx
je 0x14000bffa
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rbp - 0x49]
test rcx, rcx
je 0x14000c009
mov rax, qword [rcx]
call qword [rax + 0x10]
test bl, bl
je 0x14000c159
or rbx, 0xffffffffffffffff
cmp qword [r14 + 0xb0], 0
je 0x14000c157
call fcn.14000aac0
test al, al
jne 0x14000c06d
mov ecx, dword [0x1401cbd80]
mov eax, 0x51eb851f
imul ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0x64
sub ecx, edx
add ecx, 0x2f4
movsxd rcx, ecx
mov eax, 4
mul rcx
cmovo rax, rbx
mov rcx, rax
call fcn.1400d0cc8
mov rcx, rax
call fcn.1400d272c
mov r12d, 9
mov word [rbp - 0x11], r12w
mov rcx, qword [rbp - 0x59]
mov r8, qword [rcx]
lea rdx, [rbp - 0x11]
call qword [r8 + 0x178]
mov esi, dword [0x1401cbd80]
mov ecx, esi
imul ecx, esi
imul ecx, esi
mov eax, 0x38e38e39
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*8]
add eax, eax
sub ecx, eax
cmp ecx, 5
jne 0x14000c10a
lea r8d, [r12 + 0x76]
mov r11d, r15d
mov eax, esi
cdq
sub eax, edx
sar eax, 1
mov edi, eax
test edi, edi
jle 0x14000c102
mov eax, esi
cdq
and edx, 3
add eax, edx
sar eax, 2
mov r9d, r15d
mov r10, rdi
nop dword [rax + rax]
test eax, eax
jle 0x14000c0fa
mov ecx, r9d
mov edx, eax
nop dword [rax]
add r8d, ecx
dec ecx
dec rdx
jne 0x14000c0f0
add r9d, r11d
dec r10
jne 0x14000c0e0
inc r11d
cmp r11d, r8d
jl 0x14000c0c6
cmp word [rbp - 0x11], 1
jne 0x14000c157
mov word [rbp - 0x29], r12w
mov rax, qword [r14 + 0xb0]
mov qword [rbp - 0x21], rax
movups xmm0, xmmword [rbp - 0x29]
movaps xmmword [rbp + 0x17], xmm0
movsd xmm1, qword [rbp - 0x19]
movsd qword [rbp + 0x27], xmm1
mov rcx, qword [rbp - 0x59]
mov rax, qword [rcx]
lea rdx, [rbp + 0x17]
call qword [rax + 0x170]
mov rcx, qword [r14 + 0xa0]
mov rax, qword [rcx]
mov edx, ebx
call qword [rax + 0x1e0]
nop
jmp 0x14000c159
mov rdx, qword [rbp + 0x77]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14000c171
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov ecx, dword [0x1401cbd80]
imul ecx, ecx
mov eax, 0x78787879
imul ecx
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0x11
sub ecx, edx
cmp ecx, 3
jne 0x14000c1ab
mov qword [rsp + 0x20], r15
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceW]
nop
mov rcx, qword [rbp - 0x59]
test rcx, rcx
je 0x14000c1bb
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rbp - 0x39]
test rcx, rcx
je 0x14000c1cb
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rbp - 0x41]
test rcx, rcx
je 0x14000c1da
mov rax, qword [rcx]
call qword [rax + 0x10]
lea r11, [rsp + 0xc0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop r12
pop rdi
pop rbp
ret
jmp 0x14000bdb0