Function at 0x14005ea00
Capabilities:
Get disk size

Disassembly:
push rbx
push rsi
push rdi
push r14
sub rsp, 0x258
mov rbx, rcx
mov rcx, qword [0x140116640]
movzx esi, r8b
mov rdi, rdx
call fcn.14001bbe0
test rdi, rdi
je 0x14005edce
cmp word [rdi], 0
je 0x14005edce
lea rcx, [rsp + 0x40]
mov r8d, 0x103
mov rdx, rdi
call fcn.1400cc204
or rcx, 0xffffffffffffffff
xor r14d, r14d
xor eax, eax
mov word [rsp + 0x246], r14w
lea rdi, [rsp + 0x40]
repne scasw ax, word [rdi]
not rcx
cmp word [rsp + rcx*2 + 0x3c], 0x5c
je 0x14005ea8b
cmp rcx, 0x104
jae 0x14005edce
mov eax, 0x5c
mov word [rsp + rcx*2 + 0x3e], ax
mov word [rsp + rcx*2 + 0x40], r14w
lea r9, [rsp + 0x30]
lea r8, [rsp + 0x288]
lea rdx, [rsp + 0x298]
lea rcx, [rsp + 0x40]
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
test eax, eax
je 0x14005edce
mov rdi, qword [0x140117318]
test sil, sil
mov qword [rsp + 0x290], r12
movzx ecx, byte [rdi + 0x23]
mov qword [rsp + 0x250], r13
mov r13, qword [rsp + 0x288]
cmovne r13, qword [rsp + 0x298]
shr r13, 0x14
test cl, cl
jne 0x14005eb0b
mov rcx, qword [rdi + 0x10]
lea rdx, [0x1400e14fc]
xor r9d, r9d
or r8, 0xffffffffffffffff
mov byte [rsp + 0x20], 1
call fcn.1400afc70
jmp 0x14005ed5c
lea r12, [0x1400e14fc]
mov qword [rsp + 0x280], rbp
cmp qword [rdi + 8], r12
jne 0x14005eb29
mov rbp, qword [rdi + 0x10]
shr rbp, 1
jmp 0x14005eb2e
mov ebp, 1
lea rax, [rbp + 1]
lea rsi, [rax + rax]
cmp cl, 2
jne 0x14005eb4b
mov rdx, rbp
mov rcx, r12
call fcn.1400060a0
jmp 0x14005ed54
mov rcx, qword [0x140111460]
cmp rsi, rcx
jbe 0x14005eb7c
cmp rsi, qword [rdi + 0x18]
jbe 0x14005eb7c
lea r8, [0x1400e14ec]
lea rdx, [0x1400fddf0]
lea rcx, [0x1401181e0]
call fcn.1400401e0
jmp 0x14005ed54
cmp rax, 2
jae 0x14005eb96
xor r8d, r8d
mov rcx, rdi
lea edx, [r8 + 4]
call fcn.1400b0320
jmp 0x14005ed54
movzx eax, byte [rdi + 0x21]
test al, 2
je 0x14005ebb3
mov rcx, qword [rdi]
and al, 0x3d
mov byte [rdi + 0x21], al
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetDim]
mov rcx, qword [0x140111460]
mov r8, qword [rdi + 0x18]
and byte [rdi + 0x21], 0x82
cmp rsi, r8
jbe 0x14005ed2c
movzx r9d, byte [rdi + 0x20]
movzx eax, r9b
cmp r9b, 1
jbe 0x14005ebec
cmp al, 2
je 0x14005ec29
mov rbx, qword [rsp + 0x288]
mov rax, qword [rsp + 0x288]
jmp 0x14005ed20
mov ebx, 0x80
cmp rsi, rbx
ja 0x14005ec29
cmp rsi, 8
ja 0x14005ec03
mov ebx, 8
jmp 0x14005ec0f
mov eax, reloc.OLEAUT32.dll_SafeArrayGetDim
cmp rsi, rax
cmovbe rbx, rax
mov rcx, rbx
call fcn.1400a8f20
test rax, rax
je 0x14005ed54
mov byte [rdi + 0x20], 1
jmp 0x14005ed20
cmp rsi, 0x20
jae 0x14005ec39
mov ebx, SafeArrayAllocDescriptor
jmp 0x14005ece3
mov ebx, 0x208
cmp rsi, rbx
jb 0x14005ece3
cmp rsi, 0x50000
jae 0x14005ec9f
pxor xmm0, xmm0
cvtsi2sd xmm0, rsi
test rsi, rsi
jns 0x14005ec66
addsd xmm0, qword [0x1400ffd58]
mulsd xmm0, qword [0x1400ffd90]
movsd xmm1, qword [0x1400ffd88]
xor eax, eax
comisd xmm0, xmm1
jbe 0x14005ec95
subsd xmm0, xmm1
comisd xmm0, xmm1
jae 0x14005ec95
movabs rdx, 0x8000000000000000
mov rax, rdx
cvttsd2si rbx, xmm0
add rbx, rax
jmp 0x14005ece3
cmp rsi, 0x320000
jae 0x14005ecb1
lea rbx, [rsi + 0x8000]
jmp 0x14005ece3
cmp rsi, 0xc80000
jae 0x14005ecdc
movabs rax, 0x47ae147ae147ae15
mov rbx, rsi
mul rsi
sub rbx, rdx
shr rbx, 1
add rbx, rdx
shr rbx, 6
add rbx, rsi
jmp 0x14005ece3
lea rbx, [rsi + 0x20000]
cmp rbx, rcx
cmova rbx, rcx
cmp r9b, 2
jne 0x14005ed03
test r8, r8
je 0x14005ed03
mov rcx, qword [rdi + 8]
mov sil, 1
call fcn.1400c9b30
jmp 0x14005ed06
xor sil, sil
test rbx, rbx
js 0x14005ed90
mov rcx, rbx
call fcn.1400c9094
test rax, rax
je 0x14005ed90
mov byte [rdi + 0x20], 2
and byte [rdi + 0x21], 0x7f
mov qword [rdi + 8], rax
mov qword [rdi + 0x18], rbx
mov rcx, qword [rdi + 8]
cmp rcx, r12
je 0x14005ed42
lea r8, [rbp + rbp]
mov rdx, r12
call fcn.1400c9cf0
mov rcx, qword [rdi + 8]
lea rax, [rbp + rbp]
mov word [rax + rcx], r14w
mov qword [rdi + 0x10], rax
mov rbp, qword [rsp + 0x280]
mov rcx, qword [0x140116640]
mov r8b, reloc.OLEAUT32.dll_SafeArrayGetElement
mov rdx, r13
call fcn.140001090
mov r13, qword [rsp + 0x250]
mov r12, qword [rsp + 0x290]
mov eax, 1
add rsp, 0x258
pop r14
pop rdi
pop rsi
pop rbx
ret
test sil, sil
je 0x14005eda6
lea rax, [0x140118198]
mov qword [rdi + 0x18], r14
mov qword [rdi + 8], rax
jmp 0x14005edae
mov rax, qword [rdi + 8]
mov word [rax], r14w
lea r8, [0x1400e14ec]
lea rdx, [0x1400e4580]
lea rcx, [0x1401181e0]
mov qword [rdi + 0x10], r14
call fcn.1400401e0
jmp 0x14005ed54
mov dl, 1
mov rcx, rbx
call fcn.14003ec40
add rsp, 0x258
pop r14
pop rdi
pop rsi
pop rbx
ret