Function at 0x140002d60
Capabilities:
Get disk size

Disassembly:
mov r11, rsp
push rbp
mov rbp, rsp
sub rsp, 0x60
mov qword [rbp - 8], 0xfffffffffffffffe
mov qword [r11 + 8], rbx
mov qword [r11 + 0x10], rsi
mov qword [r11 + 0x18], rdi
mov qword [r11 + 0x20], r14
mov r14d, edx
mov rsi, rcx
mov edi, 0x80004005
mov r8d, dword [0x1401c3d80]
lea r9d, [r8 + 2]
lea eax, [r8 + 1]
imul r9d, eax
imul r9d, r8d
mov eax, 0x2aaaaaab
imul r9d
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
shl eax, 2
sub r9d, eax
cmp r9d, 0xb
jne 0x140002ddd
mov qword [r11 - 0x48], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceW]
test byte [rbp + 0x30], 1
je 0x14000303e
lea rcx, [0x1401bb9a8]
mov rax, qword [0x1401bb9a8]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x30], rax
mov rdx, qword [rbp + 0x38]
cmp dword [rdx + 0x10], 1
je 0x140002eaa
lea rcx, [0x1401bb9a8]
mov rax, qword [0x1401bb9a8]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x28], rax
lea rdx, str.invoke_cargs_not_1
test rdx, 0xffffffffffff0000
jne 0x140002e57
movzx ebx, dx
mov ecx, ebx
call fcn.1400019e0
test rax, rax
je 0x140002e61
mov r8d, ebx
mov rdx, rax
lea rcx, [rbp - 0x28]
call fcn.1400025b0
jmp 0x140002e61
lea rcx, [rbp - 0x28]
call fcn.140003290
nop
mov rax, qword [rsi]
lea rdx, [rbp - 0x28]
mov rcx, rsi
call qword [rax + 0x48]
nop
mov rdx, qword [rbp - 0x28]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140002e88
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x30]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14000303e
mov rcx, qword [rdx]
mov r8, qword [rcx]
call qword [rreloc.OLEAUT32.dll_VariantClear + 8]
jmp 0x14000303e
mov rdx, qword [rdx]
cmp word [rdx], 8
je 0x140002f49
lea rcx, [0x1401bb9a8]
mov rax, qword [0x1401bb9a8]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x20], rax
lea rdx, str.invoke_not_bstr
test rdx, 0xffffffffffff0000
jne 0x140002f00
movzx ebx, dx
mov ecx, ebx
call fcn.1400019e0
test rax, rax
je 0x140002f0a
mov r8d, ebx
mov rdx, rax
lea rcx, [rbp - 0x20]
call fcn.1400025b0
jmp 0x140002f0a
lea rcx, [rbp - 0x20]
call fcn.140003290
nop
mov rax, qword [rsi]
lea rdx, [rbp - 0x20]
mov rcx, rsi
call qword [rax + 0x48]
nop
mov rdx, qword [rbp - 0x20]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140002f31
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x30]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jle 0x140003035
jmp 0x14000303e
mov rdx, qword [rdx + 8]
or rbx, 0xffffffffffffffff
test rdx, rdx
jne 0x140002f5a
xor eax, eax
jmp 0x140002f6a
mov rax, rbx
nop dword [rax]
inc rax
cmp word [rdx + rax*2], 0
jne 0x140002f60
mov r8d, eax
lea rcx, [rbp - 0x30]
call fcn.1400022c0
dec r14d
je 0x140002ff6
lea rcx, [0x1401bb9a8]
mov rax, qword [0x1401bb9a8]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x18], rax
lea rdx, str.invoke_wrong_func_name
test rdx, 0xffffffffffff0000
jne 0x140002fc4
movzx edi, dx
mov ecx, edi
call fcn.1400019e0
test rax, rax
je 0x140002fce
mov r8d, edi
mov rdx, rax
lea rcx, [rbp - 0x18]
call fcn.1400025b0
jmp 0x140002fce
lea rcx, [rbp - 0x18]
call fcn.140003290
nop
mov rax, qword [rsi]
lea rdx, [rbp - 0x18]
mov rcx, rsi
call qword [rax + 0x48]
nop
mov rdx, qword [rbp - 0x18]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140003024
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
jmp 0x140003024
lea rax, [rbp - 0x10]
mov qword [rbp - 0x20], rax
mov rcx, qword [rbp - 0x30]
add rcx, 0xffffffffffffffe8
call fcn.140002410
add rax, 0x18
mov qword [rbp - 0x10], rax
mov rax, qword [rsi]
mov r8, qword [rbp + 0x40]
lea rdx, [rbp - 0x10]
mov rcx, rsi
call qword [rax + 0x40]
xor edi, edi
mov rdx, qword [rbp - 0x30]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14000303e
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov eax, edi
lea r11, [rsp + 0x60]
mov rbx, qword [r11 + 0x10]
mov rsi, qword [r11 + 0x18]
mov rdi, qword [r11 + 0x20]
mov r14, qword [r11 + 0x28]
mov rsp, r11
pop rbp
ret