Function at 0x14005ef20
Capabilities:
Get disk size

Disassembly:
push rbx
push rsi
push rdi
push r14
sub rsp, 0x258
mov rbx, rcx
mov rcx, qword [0x1401175c0]
movzx esi, r8b
mov rdi, rdx
call fcn.14001c010
test rdi, rdi
je 0x14005f2ee
cmp word [rdi], 0
je 0x14005f2ee
lea rcx, [rsp + 0x40]
mov r8d, 0x103
mov rdx, rdi
call fcn.1400cce74
or rcx, 0xffffffffffffffff
xor r14d, r14d
xor eax, eax
mov word [rsp + 0x246], r14w
lea rdi, [rsp + 0x40]
repne scasw ax, word [rdi]
not rcx
cmp word [rsp + rcx*2 + 0x3c], 0x5c
je 0x14005efab
cmp rcx, 0x104
jae 0x14005f2ee
mov eax, 0x5c
mov word [rsp + rcx*2 + 0x3e], ax
mov word [rsp + rcx*2 + 0x40], r14w
lea r9, [rsp + 0x30]
lea r8, [rsp + 0x288]
lea rdx, [rsp + 0x298]
lea rcx, [rsp + 0x40]
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
test eax, eax
je 0x14005f2ee
mov rdi, qword [0x1401182a0]
test sil, sil
mov qword [rsp + 0x290], r12
movzx ecx, byte [rdi + 0x23]
mov qword [rsp + 0x250], r13
mov r13, qword [rsp + 0x288]
cmovne r13, qword [rsp + 0x298]
shr r13, 0x14
test cl, cl
jne 0x14005f02b
mov rcx, qword [rdi + 0x10]
lea rdx, [0x1400e250c]
xor r9d, r9d
or r8, 0xffffffffffffffff
mov byte [rsp + 0x20], 1
call fcn.1400b0840
jmp 0x14005f27c
lea r12, [0x1400e250c]
mov qword [rsp + 0x280], rbp
cmp qword [rdi + 8], r12
jne 0x14005f049
mov rbp, qword [rdi + 0x10]
shr rbp, 1
jmp 0x14005f04e
mov ebp, 1
lea rax, [rbp + 1]
lea rsi, [rax + rax]
cmp cl, 2
jne 0x14005f06b
mov rdx, rbp
mov rcx, r12
call fcn.140006100
jmp 0x14005f274
mov rcx, qword [0x140112480]
cmp rsi, rcx
jbe 0x14005f09c
cmp rsi, qword [rdi + 0x18]
jbe 0x14005f09c
lea r8, [0x1400e246c]
lea rdx, str.Memory_limit_reached__see_MaxMem_in_the_help_file_.
lea rcx, [0x140119170]
call fcn.140040620
jmp 0x14005f274
cmp rax, 2
jae 0x14005f0b6
xor r8d, r8d
mov rcx, rdi
lea edx, [r8 + 4]
call fcn.1400b0ef0
jmp 0x14005f274
movzx eax, byte [rdi + 0x21]
test al, 2
je 0x14005f0d3
mov rcx, qword [rdi]
and al, 0x3d
mov byte [rdi + 0x21], al
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetDim]
mov rcx, qword [0x140112480]
mov r8, qword [rdi + 0x18]
and byte [rdi + 0x21], 0x82
cmp rsi, r8
jbe 0x14005f24c
movzx r9d, byte [rdi + 0x20]
movzx eax, r9b
cmp r9b, 1
jbe 0x14005f10c
cmp al, 2
je 0x14005f149
mov rbx, qword [rsp + 0x288]
mov rax, qword [rsp + 0x288]
jmp 0x14005f240
mov ebx, pe_nt_image_headers64
cmp rsi, rbx
ja 0x14005f149
cmp rsi, 8
ja 0x14005f123
mov ebx, 8
jmp 0x14005f12f
mov eax, reloc.OLEAUT32.dll_SafeArrayGetDim
cmp rsi, rax
cmovbe rbx, rax
mov rcx, rbx
call fcn.1400a99c0
test rax, rax
je 0x14005f274
mov byte [rdi + 0x20], 1
jmp 0x14005f240
cmp rsi, 0x20
jae 0x14005f159
mov ebx, SafeArrayAllocDescriptor
jmp 0x14005f203
mov ebx, 0x208
cmp rsi, rbx
jb 0x14005f203
cmp rsi, 0x50000
jae 0x14005f1bf
pxor xmm0, xmm0
cvtsi2sd xmm0, rsi
test rsi, rsi
jns 0x14005f186
addsd xmm0, qword [0x140100df8]
mulsd xmm0, qword [0x140100e30]
movsd xmm1, qword [0x140100e28]
xor eax, eax
comisd xmm0, xmm1
jbe 0x14005f1b5
subsd xmm0, xmm1
comisd xmm0, xmm1
jae 0x14005f1b5
movabs rdx, 0x8000000000000000
mov rax, rdx
cvttsd2si rbx, xmm0
add rbx, rax
jmp 0x14005f203
cmp rsi, 0x320000
jae 0x14005f1d1
lea rbx, [rsi + 0x8000]
jmp 0x14005f203
cmp rsi, 0xc80000
jae 0x14005f1fc
movabs rax, 0x47ae147ae147ae15
mov rbx, rsi
mul rsi
sub rbx, rdx
shr rbx, 1
add rbx, rdx
shr rbx, 6
add rbx, rsi
jmp 0x14005f203
lea rbx, [rsi + 0x20000]
cmp rbx, rcx
cmova rbx, rcx
cmp r9b, 2
jne 0x14005f223
test r8, r8
je 0x14005f223
mov rcx, qword [rdi + 8]
mov sil, 1
call fcn.1400ca7a0
jmp 0x14005f226
xor sil, sil
test rbx, rbx
js 0x14005f2b0
mov rcx, rbx
call fcn.1400c9d04
test rax, rax
je 0x14005f2b0
mov byte [rdi + 0x20], 2
and byte [rdi + 0x21], 0x7f
mov qword [rdi + 8], rax
mov qword [rdi + 0x18], rbx
mov rcx, qword [rdi + 8]
cmp rcx, r12
je 0x14005f262
lea r8, [rbp + rbp]
mov rdx, r12
call fcn.1400ca960
mov rcx, qword [rdi + 8]
lea rax, [rbp + rbp]
mov word [rax + rcx], r14w
mov qword [rdi + 0x10], rax
mov rbp, qword [rsp + 0x280]
mov rcx, qword [0x1401175c0]
mov r8b, reloc.OLEAUT32.dll_SafeArrayGetElement
mov rdx, r13
call fcn.140001090
mov r13, qword [rsp + 0x250]
mov r12, qword [rsp + 0x290]
mov eax, 1
add rsp, 0x258
pop r14
pop rdi
pop rsi
pop rbx
ret
test sil, sil
je 0x14005f2c6
lea rax, [0x140119128]
mov qword [rdi + 0x18], r14
mov qword [rdi + 8], rax
jmp 0x14005f2ce
mov rax, qword [rdi + 8]
mov word [rax], r14w
lea r8, [0x1400e246c]
lea rdx, str.Out_of_memory.
lea rcx, [0x140119170]
mov qword [rdi + 0x10], r14
call fcn.140040620
jmp 0x14005f274
mov dl, 1
mov rcx, rbx
call fcn.14003f080
add rsp, 0x258
pop r14
pop rdi
pop rsi
pop rbx
ret