Function at 0x14006bb10
Capabilities:
Get disk size

Disassembly:
push rbx
push rsi
push rdi
push r14
sub rsp, 0x258
mov rbx, rcx
mov rcx, qword [0x1401298a0]
movzx esi, r8b
mov rdi, rdx
call fcn.1400241e0
test rdi, rdi
je 0x14006bede
cmp word [rdi], 0
je 0x14006bede
lea rcx, [rsp + 0x40]
mov r8d, 0x103
mov rdx, rdi
call fcn.1400d94e4
or rcx, 0xffffffffffffffff
xor r14d, r14d
xor eax, eax
mov word [rsp + 0x246], r14w
lea rdi, [rsp + 0x40]
repne scasw ax, word [rdi]
not rcx
cmp word [rsp + rcx*2 + 0x3c], 0x5c
je 0x14006bb9b
cmp rcx, 0x104
jae 0x14006bede
mov eax, 0x5c
mov word [rsp + rcx*2 + 0x3e], ax
mov word [rsp + rcx*2 + 0x40], r14w
lea r9, [rsp + 0x30]
lea r8, [rsp + 0x288]
lea rdx, [rsp + 0x298]
lea rcx, [rsp + 0x40]
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
test eax, eax
je 0x14006bede
mov rdi, qword [0x14012a580]
test sil, sil
mov qword [rsp + 0x290], r12
movzx ecx, byte [rdi + 0x23]
mov qword [rsp + 0x250], r13
mov r13, qword [rsp + 0x288]
cmovne r13, qword [rsp + 0x298]
shr r13, 0x14
test cl, cl
jne 0x14006bc1b
mov rcx, qword [rdi + 0x10]
lea rdx, [0x1400f0614]
xor r9d, r9d
or r8, 0xffffffffffffffff
mov byte [rsp + 0x20], 1
call fcn.1400bc2f0
jmp 0x14006be6c
lea r12, [0x1400f0614]
mov qword [rsp + 0x280], rbp
cmp qword [rdi + 8], r12
jne 0x14006bc39
mov rbp, qword [rdi + 0x10]
shr rbp, 1
jmp 0x14006bc3e
mov ebp, 1
lea rax, [rbp + 1]
lea rsi, [rax + rax]
cmp cl, 2
jne 0x14006bc5b
mov rdx, rbp
mov rcx, r12
call fcn.140006f00
jmp 0x14006be64
mov rcx, qword [0x140124580]
cmp rsi, rcx
jbe 0x14006bc8c
cmp rsi, qword [rdi + 0x18]
jbe 0x14006bc8c
lea r8, [0x1400f0524]
lea rdx, [0x14010f290]
lea rcx, [0x14012b510]
call fcn.14004e080
jmp 0x14006be64
cmp rax, 2
jae 0x14006bca6
xor r8d, r8d
mov rcx, rdi
lea edx, [r8 + 4]
call fcn.1400bc9a0
jmp 0x14006be64
movzx eax, byte [rdi + 0x21]
test al, 2
je 0x14006bcc3
mov rcx, qword [rdi]
and al, 0x3d
mov byte [rdi + 0x21], al
mov rax, qword [rcx]
call qword [rax + reloc.WSOCK32.dll_recv]
mov rcx, qword [0x140124580]
mov r8, qword [rdi + 0x18]
and byte [rdi + 0x21], 0x82
cmp rsi, r8
jbe 0x14006be3c
movzx r9d, byte [rdi + 0x20]
movzx eax, r9b
cmp r9b, 1
jbe 0x14006bcfc
cmp al, 2
je 0x14006bd39
mov rbx, qword [rsp + 0x288]
mov rax, qword [rsp + 0x288]
jmp 0x14006be30
mov ebx, 0x80
cmp rsi, rbx
ja 0x14006bd39
cmp rsi, 8
ja 0x14006bd13
mov ebx, 8
jmp 0x14006bd1f
mov eax, reloc.WSOCK32.dll_recv
cmp rsi, rax
cmovbe rbx, rax
mov rcx, rbx
call fcn.1400b4e60
test rax, rax
je 0x14006be64
mov byte [rdi + 0x20], 1
jmp 0x14006be30
cmp rsi, 0x20
jae 0x14006bd49
mov ebx, SafeArrayAllocDescriptor
jmp 0x14006bdf3
mov ebx, 0x208
cmp rsi, rbx
jb 0x14006bdf3
cmp rsi, 0x50000
jae 0x14006bdaf
pxor xmm0, xmm0
cvtsi2sd xmm0, rsi
test rsi, rsi
jns 0x14006bd76
addsd xmm0, qword [0x140110e78]
mulsd xmm0, qword [0x140110eb0]
movsd xmm1, qword [0x140110ea8]
xor eax, eax
comisd xmm0, xmm1
jbe 0x14006bda5
subsd xmm0, xmm1
comisd xmm0, xmm1
jae 0x14006bda5
movabs rdx, 0x8000000000000000
mov rax, rdx
cvttsd2si rbx, xmm0
add rbx, rax
jmp 0x14006bdf3
cmp rsi, 0x320000
jae 0x14006bdc1
lea rbx, [rsi + 0x8000]
jmp 0x14006bdf3
cmp rsi, 0xc80000
jae 0x14006bdec
movabs rax, 0x47ae147ae147ae15
mov rbx, rsi
mul rsi
sub rbx, rdx
shr rbx, 1
add rbx, rdx
shr rbx, 6
add rbx, rsi
jmp 0x14006bdf3
lea rbx, [rsi + 0x20000]
cmp rbx, rcx
cmova rbx, rcx
cmp r9b, 2
jne 0x14006be13
test r8, r8
je 0x14006be13
mov rcx, qword [rdi + 8]
mov sil, 1
call fcn.1400d5bd8
jmp 0x14006be16
xor sil, sil
test rbx, rbx
js 0x14006bea0
mov rcx, rbx
call fcn.1400d5b18
test rax, rax
je 0x14006bea0
mov byte [rdi + 0x20], 2
and byte [rdi + 0x21], 0x7f
mov qword [rdi + 8], rax
mov qword [rdi + 0x18], rbx
mov rcx, qword [rdi + 8]
cmp rcx, r12
je 0x14006be52
lea r8, [rbp + rbp]
mov rdx, r12
call fcn.1400d6960
mov rcx, qword [rdi + 8]
lea rax, [rbp + rbp]
mov word [rax + rcx], r14w
mov qword [rdi + 0x10], rax
mov rbp, qword [rsp + 0x280]
mov rcx, qword [0x1401298a0]
mov r8b, reloc.OLEAUT32.dll_SafeArrayGetElement
mov rdx, r13
call fcn.140001090
mov r13, qword [rsp + 0x250]
mov r12, qword [rsp + 0x290]
mov eax, 1
add rsp, 0x258
pop r14
pop rdi
pop rsi
pop rbx
ret
test sil, sil
je 0x14006beb6
lea rax, [0x14012b418]
mov qword [rdi + 0x18], r14
mov qword [rdi + 8], rax
jmp 0x14006bebe
mov rax, qword [rdi + 8]
mov word [rax], r14w
lea r8, [0x1400f0524]
lea rdx, str.Out_of_memory.
lea rcx, [0x14012b510]
mov qword [rdi + 0x10], r14
call fcn.14004e080
jmp 0x14006be64
mov dl, 1
mov rcx, rbx
call fcn.14004ca90
add rsp, 0x258
pop r14
pop rdi
pop rsi
pop rbx
ret