Function at 0x14002ad30
Capabilities:
Get disk size

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push r14
sub rsp, 0xa0
mov rsi, rdx
xor edx, edx
mov rbp, r8
mov rbx, rcx
lea r8d, [rdx + 0x60]
lea rcx, [rsp + 0x38]
mov r14, r9
call fcn.1400d2f00
mov ecx, 0x1000
mov dword [rsp + 0x30], 0x68
call fcn.1400cd108
mov ecx, 0x1000
mov qword [rsp + 0x48], rax
mov dword [rsp + 0x50], 0x800
call fcn.1400cd108
lea rcx, str.Wininet.dll
mov dword [rsp + 0x80], 0x800
mov qword [rsp + 0x78], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
test rax, rax
jne 0x14002ae4a
mov eax, dword [0x1401c3d80]
xor edi, edi
lea ecx, [rax + 1]
imul ecx, eax
mov eax, 0x66666667
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*4]
add eax, eax
sub ecx, eax
cmp ecx, 1
jne 0x14002adf8
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov qword [rsp + 0x20], rdi
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceW]
mov rcx, qword [rsp + 0x48]
call fcn.1400cebfc
mov r8d, dword [0x1401c3d80]
mov eax, 0x2e8ba2e9
mov ecx, r8d
imul ecx, r8d
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0xb
sub ecx, edx
cmp ecx, 6
jne 0x14002ae34
inc r8d
mov dword [0x1401c3d80], r8d
mov rcx, qword [rsp + 0x78]
mov qword [rsp + 0x48], rdi
call fcn.1400cebfc
xor al, al
jmp 0x14002b089
lea rdx, str.InternetCrackUrlW
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
jne 0x14002af45
mov rcx, qword [rsp + 0x48]
call fcn.1400cebfc
mov r8d, dword [0x1401c3d80]
xor edi, edi
lea ecx, [r8 + 1]
mov eax, 0x92492493
mov qword [rsp + 0x48], rdi
imul ecx, r8d
imul ecx
add edx, ecx
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0xe
sub ecx, edx
cmp ecx, 7
jne 0x14002aee5
mov eax, 0x51eb851f
mov rbx, 0xffffffffffffffff
imul r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
mov eax, 4
imul edx, edx, 0x64
sub r8d, edx
add r8d, 0x2f4
movsxd rcx, r8d
mul rcx
cmovo rax, rbx
mov rcx, rax
call fcn.1400cd108
mov rcx, rax
call fcn.1400cebfc
mov rcx, qword [rsp + 0x78]
call fcn.1400cebfc
mov ecx, dword [0x1401c3d80]
lea eax, [rcx + 1]
lea r8d, [rcx + 2]
imul r8d, eax
mov eax, 0x2aaaaaab
imul r8d, ecx
imul r8d
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
shl eax, 2
sub r8d, eax
cmp r8d, 0xb
jne 0x14002af3e
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], rdi
call qword [sym.imp.KERNEL32.dll_PeekNamedPipe]
xor al, al
jmp 0x14002b089
mov rcx, qword [rbx]
lea r9, [rsp + 0x30]
xor r8d, r8d
mov edx, dword [rcx - 0x10]
call rax
test eax, eax
jne 0x14002b018
mov r8d, dword [0x1401c3d80]
mov eax, 0x38e38e39
mov ecx, r8d
imul ecx, r8d
imul ecx, r8d
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*8]
add eax, eax
sub ecx, eax
cmp ecx, 3
jne 0x14002afab
mov ecx, 1
cmp r8d, ecx
jle 0x14002afa5
mov eax, r8d
cdq
idiv ecx
inc ecx
add ecx, edx
cmp ecx, r8d
jl 0x14002af96
mov dword [0x1401c3d80], ecx
mov rcx, qword [rsp + 0x48]
call fcn.1400cebfc
mov ecx, dword [0x1401c3d80]
lea eax, [rcx + 1]
lea r8d, [rcx + 2]
imul r8d, eax
mov eax, 0x88888889
imul r8d, ecx
imul r8d
add edx, r8d
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0xf
sub r8d, edx
cmp r8d, 0xa
jne 0x14002b011
mov eax, 0xb9
mov r8d, eax
test r8d, r8d
je 0x14002b008
cdq
mov ecx, r8d
idiv r8d
mov eax, ecx
mov r8d, edx
test ecx, ecx
jne 0x14002aff3
add eax, r8d
mov dword [0x1401c3d80], eax
xor edi, edi
jmp 0x14002ae34
mov rdx, qword [rsp + 0x48]
or rbx, 0xffffffffffffffff
xor edi, edi
test rdx, rdx
jne 0x14002b02c
mov eax, edi
jmp 0x14002b039
mov rax, rbx
nop
inc rax
cmp word [rdx + rax*2], di
jne 0x14002b030
mov r8d, eax
mov rcx, rsi
call fcn.1400022c0
mov rdx, qword [rsp + 0x78]
test rdx, rdx
jne 0x14002b052
mov ebx, edi
jmp 0x14002b05b
inc rbx
cmp word [rdx + rbx*2], di
jne 0x14002b052
mov r8d, ebx
mov rcx, rbp
call fcn.1400022c0
movzx eax, word [rsp + 0x54]
mov rcx, qword [rsp + 0x48]
mov dword [r14], eax
call fcn.1400cebfc
mov rcx, qword [rsp + 0x78]
mov qword [rsp + 0x48], rdi
call fcn.1400cebfc
mov al, 1
lea r11, [rsp + 0xa0]
mov rbx, qword [r11 + 0x10]
mov rbp, qword [r11 + 0x18]
mov rsi, qword [r11 + 0x20]
mov rdi, qword [r11 + 0x28]
mov rsp, r11
pop r14
ret