Function at 0x100052cf4
Capabilities:
Get disk size

Disassembly:
push rbx
push rbp
push rsi
push rdi
push r12
push r13
push r15
sub rsp, 0x30
mov rsi, rdx
mov rbp, rcx
mov rcx, qword [0x1001653b8]
lea r15, [0x1001653b8]
cmp rcx, r15
je 0x100052d3e
bt dword [rcx + 0x1c], 9
jae 0x100052d3e
cmp byte [rcx + 0x19], 4
jb 0x100052d3e
mov rcx, qword [rcx + 0x10]
lea r8, [0x100003cb8]
mov edx, 0x1d9
call fcn.10001c854
mov rcx, qword [rsi + 8]
test rcx, rcx
je 0x100052d4d
call qword [sym.imp.ole32.dll_CoTaskMemFree]
mov rcx, qword [rsi + 0x10]
test rcx, rcx
je 0x100052d5c
call qword [sym.imp.ole32.dll_CoTaskMemFree]
xor edx, edx
mov rcx, rsi
lea r8d, [rdx + 0x28]
call sub.msvcrt.dll_memset
mov rdx, rsi
mov rcx, rbp
call fcn.10011b7a8
mov ebx, eax
test eax, eax
jns 0x100052dc1
mov rcx, qword [0x1001653b8]
cmp rcx, r15
je 0x100052f36
bt dword [rcx + 0x1c], 9
jae 0x100052f36
cmp byte [rcx + 0x19], 2
jb 0x100052f36
mov edx, 0x1da
mov dword [rsp + 0x20], eax
mov rcx, qword [rcx + 0x10]
lea r8, [0x100003cb8]
mov r9, rbp
call fcn.10001ddb0
jmp 0x100052f2f
cmp dword [rsi], 1
je 0x100052de3
cmp dword [rsi], 5
je 0x100052de3
lea r8, [0x100006160]
lea rcx, [0x100005e40]
mov edx, 0x259f
call fcn.10009a050
lea rdx, [rsi + 8]
mov rcx, rbp
call fcn.10013610c
mov ebx, eax
test eax, eax
jns 0x100052e21
mov rcx, qword [0x1001653b8]
cmp rcx, r15
je 0x100052f36
bt dword [rcx + 0x1c], 9
jae 0x100052f36
cmp byte [rcx + 0x19], 2
jb 0x100052f36
mov edx, 0x1db
jmp 0x100052da5
cmp qword [rsi + 8], 0
je 0x100052ef2
lea rdx, [rsi + 0x10]
mov rcx, rbp
call fcn.100136b44
mov ebx, eax
test eax, eax
jns 0x100052e6d
mov rcx, qword [0x1001653b8]
cmp rcx, r15
je 0x100052f36
bt dword [rcx + 0x1c], 9
jae 0x100052f36
cmp byte [rcx + 0x19], 2
jb 0x100052f36
mov edx, 0x1dc
jmp 0x100052da5
cmp qword [rsi + 8], 0
je 0x100052ef2
and qword [rsi + 0x18], 0
and qword [rsi + 0x20], 0
lea r9, [rsp + 0x88]
lea r8, [rsp + 0x78]
lea rdx, [rsp + 0x80]
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
test eax, eax
jne 0x100052eac
mov rcx, rbp
call fcn.100134b20
mov ebx, eax
jmp 0x100052ec3
mov rax, qword [rsp + 0x78]
xor ebx, ebx
mov qword [rsi + 0x18], rax
mov rax, qword [rsp + 0x80]
mov qword [rsi + 0x20], rax
test ebx, ebx
jns 0x100052f66
mov rcx, qword [0x1001653b8]
cmp rcx, r15
je 0x100052f36
bt dword [rcx + 0x1c], 9
jae 0x100052f36
cmp byte [rcx + 0x19], 2
jb 0x100052f36
mov edx, 0x1dd
mov dword [rsp + 0x20], ebx
jmp 0x100052da9
lea rdx, [rsi + 0x18]
mov rcx, rbp
call fcn.100135c9c
mov ebx, eax
test eax, eax
jns 0x100052f27
mov rcx, qword [0x1001653b8]
cmp rcx, r15
je 0x100052f36
bt dword [rcx + 0x1c], 9
jae 0x100052f36
cmp byte [rcx + 0x19], 2
jb 0x100052f36
mov edx, 0x1de
jmp 0x100052da5
mov rax, qword [rsi + 0x18]
mov qword [rsi + 0x20], rax
mov rcx, qword [0x1001653b8]
test ebx, ebx
jns 0x100052f6d
mov rcx, qword [rsi + 8]
test rcx, rcx
je 0x100052f49
call qword [sym.imp.ole32.dll_CoTaskMemFree]
mov rcx, qword [rsi + 0x10]
test rcx, rcx
je 0x100052f58
call qword [sym.imp.ole32.dll_CoTaskMemFree]
xor edx, edx
mov rcx, rsi
lea r8d, [rdx + 0x28]
call sub.msvcrt.dll_memset
mov rcx, qword [0x1001653b8]
cmp rcx, r15
je 0x100052f94
bt dword [rcx + 0x1c], 9
jae 0x100052f94
cmp byte [rcx + 0x19], 4
jb 0x100052f94
mov rcx, qword [rcx + 0x10]
lea r8, [0x100003cb8]
mov edx, 0x1df
call fcn.10001c854
mov eax, ebx
add rsp, 0x30
pop r15
pop r13
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret