Function at 0x18007eda0
Capabilities:
Get disk size
Hash data using djb2

Disassembly:
mov qword [rsp + 0x10], rbx
mov dword [rsp + 0x18], r8d
mov qword [rsp + 8], rcx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x27]
sub rsp, 0xc0
mov ebx, dword [rbp + 0x77]
lea r15d, [r8 - 0x12]
xor r10d, r10d
mov dword [rbp - 0x11], 0xffffffff
mov qword [rbp - 0x19], r10
mov r13, rdx
mov rdx, qword [rbp + 0x7f]
mov r12, rcx
mov qword [rbp - 0x41], rdx
mov eax, r8d
mov qword [rbp - 0xd], r10
mov esi, r8d
mov qword [rbp - 5], r10
lea rcx, [0x180050300]
mov qword [rbp + 3], r10
cmp r8d, r15d
jbe 0x18007f26c
mov r14, qword [rbp + 0x7f]
lea r9, [0x18002e2a0]
mov r12, qword [rbp + 0x7f]
mov eax, dword [rbp + 0x77]
mov dword [rbp + 0x7f], eax
mov rdi, qword [rbp + 0x7f]
lea eax, [rsi - 0x33]
lea r8, [0x180000000]
cmp eax, 0x4a
ja case.0x18007ee4b.69
movzx eax, byte [r8 + rax + 0x7f660]
mov ecx, dword [r8 + rax*4 + 0x7f614]
add rcx, r8
jmp rcx
mov r14, r12
jmp case.0x18007ee4b.69
mov rax, qword [rdx]
mov qword [rbp - 0x19], rax
jmp case.0x18007ee4b.69
lea rax, [rbp + 0xf]
mov rcx, r12
lea r9, [rbp - 0x21]
mov qword [rsp + 0x20], rax
lea r8, [rbp - 0x25]
lea rdx, [rbp - 0x29]
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceW]
mov dword [rbp - 0x49], eax
mov rdx, qword [rbp - 0x41]
lea r9, [0x18002e2a0]
xor r10d, r10d
jmp case.0x18007ee4b.69
mov rax, qword [rbp + 0x67]
cmp dword [rax + 0xa18], 0xfade9512
jne 0x18007f1c0
mov dword [rax + 0xa18], 0xea271285
jmp case.0x18007ee4b.69
movzx eax, word [r14]
test ax, ax
je 0x18007eef7
cmp ax, 0x5c
je 0x18007eecd
cmp ax, 0x2f
jne 0x18007eee9
mov ecx, 0x70
mov eax, ecx
sub eax, 0x6f
je 0x18007eef7
cmp eax, 1
jne 0x18007eee2
mov word [r14], r10w
dec ecx
cmp ecx, 0x6e
ja 0x18007eed2
movzx eax, word [r14 + 2]
add r14, 2
test ax, ax
jne 0x18007eec1
mov esi, 0x7b
jmp case.0x18007ee4b.69
mov rax, qword [rbp + 0x67]
mov r9d, 0x10f
xor r8d, r8d
mov rdx, rax
lea rcx, [rax + 0x580]
call fcn.180088190
mov rdx, qword [rbp - 0x41]
lea r9, [0x18002e2a0]
xor r10d, r10d
jmp case.0x18007ee4b.69
mov eax, dword [r13]
mov r8d, 0x1505
add rax, rdi
mov dword [rbp + 0x7f], r8d
mov qword [rbp + 0x17], rax
jmp 0x18007f13f
mov rdx, qword [rbp + 0x67]
lea r8, [rbp - 0x51]
mov rax, qword [rdx + 0xe8]
mov ecx, dword [rax + 0x10]
mov dword [rbp - 0x51], ecx
mov ecx, 0xcc
call fcn.18002ec60
mov rcx, qword [rbp + 0x67]
lea r9, [0x18002e2a0]
mov rdx, qword [rbp - 0x41]
xor r10d, r10d
mov qword [rcx + 0x250], rax
jmp case.0x18007ee4b.69
mov rdx, qword [rbp + 0x67]
lea rcx, [rbp - 0x31]
mov r9d, 0xc2
mov qword [rbp - 0x31], r10
xor r8d, r8d
call fcn.180018330
mov rdx, qword [rbp - 0x41]
lea r9, [0x18002e2a0]
xor r10d, r10d
jmp case.0x18007ee4b.69
mov rdx, qword [rbp + 0x67]
mov ecx, 0xf
call fcn.1800d0d90
mov r12, rax
test rax, rax
jne 0x18007ee82
mov edx, 0x18
mov ecx, edx
sub ecx, 0x18
je 0x18007efe8
cmp ecx, 1
je 0x18007f5f4
xor r10d, r10d
jmp 0x18007efef
xor r10d, r10d
mov qword [rbp - 0x59], r10
inc edx
cmp edx, 0x1a
jb 0x18007efd3
mov rdx, qword [rbp - 0x41]
lea r9, [0x18002e2a0]
jmp case.0x18007ee4b.69
mov r8, qword [rbp + 0x67]
lea rcx, [rbp - 0x51]
mov edx, 0x75
mov dword [rbp - 0x51], 0x80
mov r13, r10
call fcn.1800d2280
mov rdx, qword [rbp - 0x41]
lea r9, [0x18002e2a0]
xor r10d, r10d
jmp case.0x18007ee4b.69
mov rdi, qword [rbp + 0x67]
jmp case.0x18007ee4b.69
mov rax, qword [rbp + 0x67]
cmp qword [rax + 0x250], 0
jne case.0x18007ee4b.69
mov dword [rbp - 0x59], 0xffffffff
jmp 0x18007f5f4
mov qword [rbp - 5], r9
jmp case.0x18007ee4b.69
mov rdx, qword [rbp + 0x67]
mov qword [rbp - 0x41], rdx
jmp case.0x18007ee4b.69
lea rax, [rbp - 0x51]
mov dword [rbp - 0x39], r10d
mov qword [rsp + 0x30], rax
lea rcx, [rbp - 0x31]
lea rax, [rbp - 0x39]
mov dword [rbp - 0x31], r10d
mov qword [rsp + 0x28], rax
mov r9d, 0xf0
mov rax, qword [rbp + 0x67]
xor r8d, r8d
xor edx, edx
mov qword [rsp + 0x20], rax
mov dword [rbp - 0x51], 1
call fcn.1800d6300
mov rbx, rax
test eax, eax
je 0x18007ee82
mov eax, 0x9b
cmp eax, 0x9b
je 0x18007f0d4
cmp eax, 0x5122
je 0x18007f5f4
jmp 0x18007f0db
mov dword [rbp - 0x59], 0xffffffff
add eax, 0x5087
cmp eax, 0xa10e
jbe 0x18007f0c0
mov rdx, qword [rbp - 0x41]
lea r9, [0x18002e2a0]
xor r10d, r10d
jmp case.0x18007ee4b.69
cmp dword [rbp - 0x49], 0
jne 0x18007f126
mov eax, 0xee
cmp eax, 0xee
je 0x18007f116
cmp eax, 0x9fe8
je 0x18007f5f4
jmp 0x18007f11a
mov qword [rbp - 0x59], r10
add eax, 0x9efa
cmp eax, 0x13df4
jbe 0x18007f102
mov eax, dword [rbp - 0x25]
mov ecx, dword [rbp - 0x29]
imul rcx, rax
mov eax, dword [rbp - 0x21]
imul rcx, rax
mov qword [rbp - 0x59], rcx
mov r8d, dword [rbp + 0x7f]
dec esi
cmp esi, r15d
ja 0x18007ee24
mov r12, qword [rbp + 0x67]
lea rcx, [0x180050300]
mov eax, dword [rbp + 0x77]
mov r14d, eax
add eax, 0x936
cmp r14d, eax
jae 0x18007f5f4
cmp r14d, 0x1d0
ja 0x18007f39a
je 0x18007f330
cmp r14d, 0xb8
ja 0x18007f2b5
je 0x18007f295
cmp r14d, 0x35
je 0x18007f310
cmp r14d, 0x47
je 0x18007f288
cmp r14d, 0x6b
je 0x18007f279
cmp r14d, 0x7d
je 0x18007f5f4
jmp 0x18007f5d3
mov dword [rbp - 0x59], 0xffffffe8
jmp 0x18007f5f4
mov rdx, qword [rbp + 0x17]
mov r8d, dword [rbp + 0x7f]
nop dword [rax]
nop dword [rax + rax]
mov ecx, 0x103
cmp ecx, 0x337
ja 0x18007f24f
je 0x18007f22c
cmp ecx, 0x103
je 0x18007f212
cmp ecx, 0x190
je 0x18007f23c
cmp ecx, 0x21d
je 0x18007f227
cmp ecx, 0x2aa
jne 0x18007f217
inc rdi
cmp rdi, rdx
jae 0x18007f279
add ecx, 0x8d
cmp ecx, 0x56b
jb 0x18007f1e5
jmp 0x18007f1e0
cmp rdi, rdx
jae 0x18007f279
movzx eax, byte [rdi]
imul r8d, r8d, 0x21
add r8d, eax
mov dword [rbp + 0x7f], r8d
jmp 0x18007f217
movzx eax, byte [rdi]
imul r8d, r8d, 0x21
add r8d, eax
mov dword [rbp + 0x7f], r8d
inc rdi
jmp 0x18007f217
cmp ecx, 0x3c4
je 0x18007f20f
cmp ecx, 0x451
je 0x18007f22c
cmp ecx, 0x4de
jne 0x18007f217
inc rdi
jmp 0x18007f217
mov r8d, dword [rbp + 0x77]
mov dword [rbp + 0x7f], r8d
jmp 0x18007f158
mov r14d, 0x6b
mov dword [rbp - 0x59], r8d
jmp 0x18007f5d3
mov qword [r12 + 0x730], rcx
jmp 0x18007f5d3
lea rax, [rdx + 0xc]
xor r9d, r9d
mov edx, 0xb3
mov qword [rbp - 0xd], rax
lea r8, [rbp - 0x19]
xor ecx, ecx
call fcn.18000fd20
jmp 0x18007f5cc
mov eax, r14d
sub eax, 0xca
je 0x18007f31b
sub eax, 0x24
je 0x18007f5f4
sub eax, 0x4d
je 0x18007f2e7
cmp eax, 0x12
jne 0x18007f5d3
mov dword [r12 + 0x7b0], 0x10
jmp 0x18007f5d3
mov ecx, 0xea
nop dword [rax]
mov eax, ecx
sub eax, 0xe9
je 0x18007f5f4
cmp eax, 1
jne 0x18007f306
mov dword [rbp - 0x59], r10d
dec ecx
cmp ecx, 0xe8
ja 0x18007f2f0
mov eax, dword [rdx + 8]
mov dword [rbp - 0x11], eax
jmp 0x18007f5d3
lea rax, [r12 + 0x400]
mov qword [r12 + 0x738], rax
jmp 0x18007f5d3
mov eax, dword [r12 + 0x7b0]
lea rdx, [rbp - 0x49]
shl eax, 3
xor r9d, r9d
mov r8d, 0x97
mov dword [rbp - 0x49], eax
mov rcx, r12
call fcn.18002e320
mov qword [r12 + 0x7a0], rax
test rax, rax
jne 0x18007f5cc
mov eax, 0x4c
nop dword [rax]
cmp eax, 0x4c
je 0x18007f382
cmp eax, 0xc2c
je 0x18007f5f4
jmp 0x18007f389
mov dword [rbp - 0x59], 0xffffffff
add eax, 0xbe0
cmp eax, 0x17c0
jbe 0x18007f370
jmp 0x18007f5cc
cmp r14d, 0x45f
ja 0x18007f4d3
je 0x18007f49b
cmp r14d, 0x253
je 0x18007f45b
cmp r14d, 0x2d6
je 0x18007f429
cmp r14d, 0x359
je 0x18007f3f6
cmp r14d, 0x3dc
jne 0x18007f5d3
xor r9d, r9d
mov qword [rsp + 0x20], r10
xor r8d, r8d
mov edx, 0x105
mov rcx, r12
call fcn.1800aa8d0
jmp 0x18007f5cc
test ebx, ebx
je 0x18007f5d3
mov ecx, 0x10d
mov eax, ecx
sub eax, 0x10d
je 0x18007f417
cmp eax, 1
je 0x18007f5f4
jmp 0x18007f41a
mov dword [rbp - 0x59], ebx
inc ecx
cmp ecx, 0x10f
jb 0x18007f403
jmp 0x18007f5d3
test ebx, ebx
je 0x18007f447
mov eax, 0xec
cmp eax, 0xec
je 0x18007f5f1
add eax, 0x2d
cmp eax, 0x119
jb 0x18007f432
mov rdx, r12
mov ecx, 0xc3
call fcn.18003ed80
mov ebx, eax
jmp 0x18007f5cc
mov eax, dword [r12 + 0x7b0]
lea rcx, [rbp - 0x49]
mov r9, qword [r12 + 0x7a0]
xor r8d, r8d
shl eax, 3
mov edx, 0xd5
mov dword [rbp - 0x49], eax
call fcn.1800c77c0
mov r9d, 0xc2
mov r8, r12
xor edx, edx
xor ecx, ecx
call fcn.1800a9a00
mov ebx, eax
jmp 0x18007f5cc
mov dword [rsp + 0x28], 0x76
xor r9d, r9d
xor r8d, r8d
mov qword [rsp + 0x20], r12
xor edx, edx
xor ecx, ecx
call fcn.18004bf20
lea r8, [r12 + 0x280]
xor r9d, r9d
xor edx, edx
mov ecx, 0x10e
call fcn.180063050
jmp 0x18007f5cc
cmp r14d, 0x4e2
je 0x18007f51d
cmp r14d, 0x565
je 0x18007f4f7
cmp r14d, 0x5e8
je 0x18007f5f4
jmp 0x18007f5d3
xor edx, edx
mov r8, r12
lea ecx, [rdx + 0x3b]
call fcn.180054480
and eax, 0x3ff
xor r10d, r10d
mov dword [r12 + 0x71c], eax
mov dword [rbp - 0x59], r10d
jmp 0x18007f5cf
xor r9d, r9d
lea rdx, [r12 + 0x280]
mov r8d, 0xa3
xor ecx, ecx
call fcn.18009fdb0
mov rsi, rax
test rax, rax
je 0x18007f5cc
mov edi, 0x11d
cmp edi, 0x11d
je 0x18007f585
cmp edi, 0x41af
jne 0x18007f59a
test ebx, ebx
je 0x18007f59a
mov eax, 0x113
nop
cmp eax, 0x113
je 0x18007f574
cmp eax, 0x72f1
je 0x18007f5f4
jmp 0x18007f577
mov dword [rbp - 0x59], ebx
add eax, 0x71de
cmp eax, 0xe3bc
jbe 0x18007f560
jmp 0x18007f59a
mov r9, qword [rsi + 0x10]
mov r8, r12
mov edx, 0x31
xor ecx, ecx
call fcn.1800a6e40
mov ebx, eax
add edi, 0x4092
cmp edi, 0x8124
jbe 0x18007f546
xor r9d, r9d
lea rdx, [r12 + 0x280]
mov r8d, 0xa3
xor ecx, ecx
call fcn.18009fdb0
mov rsi, rax
test rax, rax
jne 0x18007f541
xor r10d, r10d
mov r8d, dword [rbp + 0x7f]
mov r12, qword [rbp + 0x67]
lea rcx, [0x180050300]
mov rdx, qword [rbp - 0x41]
add r14d, 0x83
mov eax, dword [rbp + 0x77]
jmp 0x18007f15b
mov dword [rbp - 0x59], ebx
mov rax, qword [rbp - 0x59]
mov rbx, qword [rsp + 0x108]
add rsp, 0xc0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret