Function at 0x18006a6a0
Capabilities:
Get disk size

Disassembly:
mov qword [rsp + 0x20], r9
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 7]
sub rsp, 0xa8
mov ebx, dword [rbp + 0x97]
mov r10, rdx
mov edx, dword [rbp + 0x97]
mov r14, r8
mov r8, rcx
mov qword [rbp - 0x41], 0
mov dword [rbp - 0x39], 0xffffffff
mov qword [rbp - 0x35], 0
lea r11d, [rdx + 0xa]
mov qword [rbp - 0x2d], 0
mov qword [rbp - 0x25], 0
mov dword [rbp - 0x6d], r11d
cmp edx, r11d
jae case.0x18006a75e.2
mov r15, qword [rbp + 0xa7]
lea r11d, [rdx - 0xdc]
mov r13, qword [rbp + 0x7f]
mov rdi, qword [rbp + 0x77]
mov r12, qword [rbp + 0x6f]
mov eax, dword [rbp - 0x6d]
mov dword [rbp - 0x69], r11d
lea rsi, [0x180000000]
cmp r11d, 0x1f
ja case.default.0x18006a75e
movzx eax, byte [rsi + r11 + 0x6adc4]
mov ecx, dword [rsi + rax*4 + 0x6ad9c]
add rcx, rsi
jmp rcx
mov rax, qword [rdi]
cmp dword [rax], 0x7f2bb705
je case.0x18006a75e.9
mov eax, 0x7f2bb705
jmp 0x18006ad88
mov rax, qword [rdi]
cmp byte [rax + 0x292], 0
jne 0x18006a7d6
mov esi, 0xdc
nop word [rax + rax]
mov eax, esi
sub eax, 0xda
je 0x18006a929
sub eax, 1
je 0x18006a839
cmp eax, 1
jne 0x18006a7be
mov rax, qword [rdi]
movzx r8d, byte [rax + 0x570]
mov byte [rbp - 0x71], r8b
mov r8, qword [rbp + 0x4f]
mov r10, qword [rbp + 0x57]
dec esi
cmp esi, 0xd9
ja 0x18006a790
mov edx, dword [rbp + 0x97]
mov r11d, dword [rbp - 0x69]
mov rax, qword [rdi]
cmp byte [rax + 0x291], 0
jne case.0x18006a75e.9
cmp byte [rax + 0x570], 4
je 0x18006a7f8
cmp dword [rax + 0x258], 0
jne 0x18006a821
xor r9d, r9d
mov qword [rbp - 0x59], rax
xor edx, edx
mov qword [rsp + 0x20], 0
mov r8d, 0xa4
lea rcx, [rbp - 0x59]
call fcn.180042710
test eax, eax
jne 0x18006ad88
mov rax, qword [rdi]
inc dword [rax + 0x254]
mov rax, qword [rdi]
mov byte [rax + 0x251], 1
jmp 0x18006ad1c
movzx r8d, byte [rbp - 0x71]
lea eax, [r8 - 2]
test al, 0xfd
je 0x18006a85e
mov rax, qword [rdi]
cmp byte [rax + 0x251], 0
je 0x18006a8a8
cmp byte [r14], 4
jne 0x18006a8a8
mov qword [rbp - 0x59], rax
jmp 0x18006a878
mov rcx, qword [rdi]
cmp dword [rcx + 0x254], 0
je 0x18006a89c
movzx eax, byte [r14]
dec al
test al, 0xfd
je 0x18006a89c
mov qword [rbp - 0x59], rcx
mov r8d, 0x8d
lea rcx, [rbp - 0x59]
xor edx, edx
call fcn.18007f150
test eax, eax
jne 0x18006ad88
movzx r8d, byte [rbp - 0x71]
mov r9, qword [rbp + 0x67]
jmp 0x18006a8a8
mov eax, dword [rcx + 0x590]
mov dword [rcx + 0x574], eax
movzx eax, byte [r14]
mov rcx, qword [rdi]
test al, al
je 0x18006a8c2
mov byte [rcx + 0x550], al
mov rcx, qword [rdi]
movzx eax, byte [r14]
jmp 0x18006a8c9
movzx eax, byte [rcx + 0x550]
mov rdx, qword [rbp + 0x9f]
mov byte [rcx + 0x570], al
mov rcx, qword [rdi]
cmp byte [rdx], 0
je 0x18006a918
mov eax, dword [r15]
mov dword [rcx + 0x590], eax
lea eax, [r8 - 2]
test al, 0xfd
jne 0x18006a8fe
mov rcx, qword [rdi]
mov eax, dword [rcx + 0x554]
mov dword [rcx + 0x574], eax
cmp byte [rdx], 2
jne 0x18006a7ba
mov rcx, qword [rdi]
mov eax, dword [r15]
mov dword [rcx + 0x554], eax
jmp 0x18006a7ba
mov eax, dword [rcx + 0x554]
mov dword [rcx + 0x590], eax
jmp 0x18006a7ba
cmp byte [r13], 0
mov rcx, qword [rdi]
je 0x18006a957
mov eax, dword [r12]
mov dword [rcx + 0x578], eax
movzx eax, byte [r13]
sub al, 2
test al, 0xf9
jne 0x18006a963
mov rcx, qword [rdi]
mov eax, dword [r12]
mov dword [rcx + 0x558], eax
jmp 0x18006a963
mov eax, dword [rcx + 0x558]
mov dword [rcx + 0x578], eax
mov rdx, qword [rbp + 0x87]
cmp byte [rdx], 0
je 0x18006aa6d
mov rax, qword [rdi]
mov r11, qword [rbp + 0x8f]
mov byte [rax + 0x57c], 1
cmp byte [r10], 0
mov r10, qword [rbp + 0xaf]
mov rcx, qword [rdi]
mov eax, dword [r11]
jne 0x18006a9c3
mov dword [rcx + 0x580], eax
mov rcx, qword [rdi]
mov eax, dword [r9]
mov dword [rcx + 0x584], eax
mov rcx, qword [rdi]
mov eax, dword [r10]
mov dword [rcx + 0x588], eax
mov rcx, qword [rdi]
mov eax, dword [r8]
mov dword [rcx + 0x58c], eax
jmp 0x18006a9ed
add dword [rcx + 0x580], eax
mov rcx, qword [rdi]
mov eax, dword [r9]
add dword [rcx + 0x584], eax
mov rcx, qword [rdi]
mov eax, dword [r10]
add dword [rcx + 0x588], eax
mov rcx, qword [rdi]
mov eax, dword [r8]
add dword [rcx + 0x58c], eax
cmp byte [rdx], 2
jne 0x18006a7be
mov rax, qword [rdi]
mov byte [rax + 0x55c], 1
mov rax, qword [rbp + 0x57]
mov rcx, qword [rdi]
cmp byte [rax], 0
mov eax, dword [r11]
jne 0x18006aa3e
mov dword [rcx + 0x560], eax
mov rcx, qword [rdi]
mov eax, dword [r9]
mov dword [rcx + 0x564], eax
mov rcx, qword [rdi]
mov eax, dword [r10]
mov dword [rcx + 0x568], eax
mov rcx, qword [rdi]
mov eax, dword [r8]
mov dword [rcx + 0x56c], eax
jmp 0x18006a7be
add dword [rcx + 0x560], eax
mov rcx, qword [rdi]
mov eax, dword [r9]
add dword [rcx + 0x564], eax
mov rcx, qword [rdi]
mov eax, dword [r10]
add dword [rcx + 0x568], eax
mov rcx, qword [rdi]
mov eax, dword [r8]
add dword [rcx + 0x56c], eax
jmp 0x18006a7be
mov edx, 0x120
mov eax, edx
sub eax, 0x11f
je 0x18006aabf
cmp eax, 1
jne 0x18006aace
mov rcx, qword [rdi]
movzx eax, byte [rcx + 0x55c]
mov byte [rcx + 0x57c], al
mov rcx, qword [rdi]
mov eax, dword [rcx + 0x560]
mov dword [rcx + 0x580], eax
mov rcx, qword [rdi]
mov eax, dword [rcx + 0x564]
mov dword [rcx + 0x584], eax
mov rcx, qword [rdi]
mov eax, dword [rcx + 0x568]
mov dword [rcx + 0x588], eax
jmp 0x18006aace
mov rcx, qword [rdi]
mov eax, dword [rcx + 0x56c]
mov dword [rcx + 0x58c], eax
dec edx
cmp edx, 0x11e
ja 0x18006aa72
jmp 0x18006a7be
mov rcx, qword [rdi]
mov r10, qword [rcx + 8]
mov rax, qword [r10 + 0x60]
test rax, rax
jne 0x18006ad54
mov rax, qword [r14]
movabs rdx, 0xffffffff00000000
test rdx, rax
jne 0x18006ad4d
mov rsi, qword [rbp + 0x9f]
mov r9, r15
mov edx, eax
mov r8d, dword [rsi]
call qword [r10 + 0x30]
mov ebx, eax
jmp 0x18006ad1c
lea rax, [0x1800102b0]
mov qword [rbp - 0x2d], rax
mov rax, qword [rdi]
mov qword [rbp - 0x41], rax
mov eax, dword [rdi + 8]
mov dword [rbp - 0x39], eax
lea rax, [rdi + 0xc]
mov qword [rbp - 0x35], rax
jmp case.0x18006a75e.9
mov r9d, 0xc9
mov qword [rsp + 0x20], 0
xor r8d, r8d
lea rcx, [rbp - 0x41]
xor edx, edx
call fcn.180008310
lea rax, [rbp - 0x19]
xor ecx, ecx
lea r9, [rbp - 0x15]
mov qword [rsp + 0x20], rax
lea r8, [rbp - 0x51]
lea rdx, [rbp - 0x51]
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceA]
xor ebx, ebx
jmp 0x18006ad1c
mov rsi, qword [rbp + 0x9f]
mov edx, dword [rsi]
test edx, edx
je 0x18006ad68
mov rax, qword [rdi]
mov r9, r15
mov r8d, 1
mov rcx, qword [rax + 8]
mov rax, qword [rcx + 8]
call qword [rax + 0x28]
mov dword [rbp - 0x61], eax
test eax, eax
jne 0x18006ad88
test byte [r14], 2
je 0x18006ad1c
mov rax, qword [rbp + 0x87]
mov r9, r15
mov r8d, 1
mov ecx, dword [rax]
mov eax, dword [r12]
mov dword [rbp - 0x65], ecx
mov dword [r15 + rax*4], ecx
mov rax, qword [rdi]
mov edx, dword [rsi]
mov rcx, qword [rax + 8]
mov rax, qword [rcx + 8]
call qword [rax + 0x30]
jmp 0x18006ad88
mov r14d, 0x90
nop dword [rax]
mov eax, r14d
sub eax, 0x90
je 0x18006ac18
cmp eax, 1
je case.0x18006a75e.8
jmp 0x18006ad08
mov eax, dword [r12]
mov edx, dword [r15 + rax*4]
mov dword [rbp - 0x65], edx
test edx, edx
jne 0x18006acff
mov rax, qword [rbp + 0x5f]
test byte [rax], 1
je 0x18006acff
mov esi, ILRemoveLastID
nop dword [rax]
mov eax, esi
sub eax, 0xa
je 0x18006acf0
sub eax, 1
je 0x18006ace3
sub eax, 1
je 0x18006ac7c
cmp eax, 1
jne 0x18006acf4
mov eax, dword [r12]
test eax, eax
je 0x18006ac75
dec eax
mov edx, dword [r15 + rax*4]
mov dword [rbp - 0x65], edx
jmp 0x18006acf4
xor edx, edx
mov dword [rbp - 0x65], edx
jmp 0x18006acf4
mov rax, qword [rdi]
lea r8, [rbp - 0x11]
mov r9d, 0x11a
mov ecx, dword [rax + 0x28]
add rcx, r15
mov dword [rbp - 0x49], edx
mov qword [rsp + 0x20], rcx
lea rdx, [rbp - 0x65]
lea rcx, [rbp - 0x49]
mov qword [rbp - 0x11], rax
call fcn.180037a90
test eax, eax
jne 0x18006ad88
mov ecx, dword [r12]
mov r9, r15
mov eax, dword [rbp - 0x65]
mov r8d, 1
mov rdx, qword [rbp + 0x9f]
mov dword [r15 + rcx*4], eax
mov rax, qword [rdi]
mov edx, dword [rdx]
mov rcx, qword [rax + 8]
mov rax, qword [rcx + 8]
call qword [rax + 0x30]
mov edx, dword [rbp - 0x65]
mov dword [rbp - 0x61], eax
jmp 0x18006acf4
mov eax, dword [rbp - 0x61]
test eax, eax
jne 0x18006ad88
jmp 0x18006acf4
inc dword [r13]
dec esi
cmp esi, 9
ja 0x18006ac40
mov rax, qword [rbp + 0x87]
mov dword [rax], edx
inc r14d
cmp r14d, 0x92
jb 0x18006ac00
mov r14, qword [rbp + 0x5f]
mov edx, dword [rbp + 0x97]
mov r11d, dword [rbp - 0x69]
mov eax, dword [rbp - 0x6d]
inc edx
inc r11d
mov dword [rbp + 0x97], edx
mov dword [rbp - 0x69], r11d
cmp edx, eax
jae case.0x18006a75e.2
mov r9, qword [rbp + 0x67]
mov r8, qword [rbp + 0x4f]
mov r10, qword [rbp + 0x57]
jmp 0x18006a73a
mov eax, 0x7f2bb787
jmp 0x18006ad88
mov rdx, qword [rbp + 0x9f]
mov r9, r15
mov r8d, dword [rdx]
mov rdx, qword [r14]
call rax
jmp 0x18006ad88
test byte [r14], 2
je 0x18006ad75
mov eax, 0x7f2bb75f
jmp 0x18006ad88
mov rax, qword [rbp + 0x87]
mov dword [rax], 0
xor eax, eax
jmp 0x18006ad88
mov eax, ebx
add rsp, 0xa8
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret