Function at 0x1400276c0
Capabilities:
Get disk size

Disassembly:
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x40
mov qword [rsp + 0x30], 0xfffffffffffffffe
mov qword [rsp + 0x88], rbx
mov r15, rdx
mov r12, rcx
mov rdi, qword [rcx]
cmp dword [rdi - 0x10], 0
jne 0x14002774e
mov rax, qword [rdx]
lea rdx, [rax - 0x18]
mov rbx, qword [rdx]
cmp dword [rdx + 8], 0
je 0x140027747
cmp dword [rdx + 0x10], 0
jge 0x140027727
cmp dword [rax - 0xc], 0
jge 0x140027717
mov ecx, 0x80070057
call fcn.140001920
int3
xor r14d, r14d
mov dword [rax - 0x10], r14d
mov rax, qword [r15]
mov word [rax], r14w
jmp 0x140027747
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140027737
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + 0x18]
add rax, 0x18
mov qword [r15], rax
mov al, 1
jmp 0x1400279c7
mov byte [rsp + 0x80], 0
lea rcx, [0x1401b59a8]
mov rax, qword [0x1401b59a8]
call qword [rax + 0x18]
lea rbx, [rax + 0x18]
mov qword [rsp + 0x90], rbx
test rdi, rdi
je 0x1400277a5
test rdi, 0xffffffffffff0000
jne 0x1400277a5
movzx edi, di
mov ecx, edi
call fcn.1400019e0
test rax, rax
je 0x1400277bd
mov r8d, edi
mov rdx, rax
lea rcx, [rsp + 0x90]
call fcn.14001b560
jmp 0x1400277b5
mov rdx, rdi
lea rcx, [rsp + 0x90]
call fcn.14001ac40
mov rbx, qword [rsp + 0x90]
mov eax, dword [0x1401bdd80]
lea ecx, [rax + 1]
imul ecx, eax
mov eax, 0x38e38e39
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*8]
sub ecx, eax
cmp ecx, 7
jne 0x1400277f8
mov edx, reloc.OLEAUT32.dll_LoadRegTypeLib
lea r8d, [rdx + 1]
lea rcx, str._d__d_n
call fcn.1400cc3f4
xor r14d, r14d
mov dword [rsp + 0x28], r14d
mov qword [rsp + 0x20], r14
or rsi, 0xffffffffffffffff
mov r9d, esi
mov r8, rbx
xor edx, edx
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
movsxd r13, eax
test eax, eax
jne 0x14002784b
mov rdx, r12
mov rcx, r15
call fcn.140002310
nop
lea rdx, [rbx - 0x18]
lock add dword [rdx + 0x10], esi
jg 0x1400279bf
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
jmp 0x1400279bf
mov eax, 2
mul r13
cmovo rax, rsi
mov rcx, rax
call fcn.1400cb128
mov rbp, rax
lea r8, [r13*2]
xor edx, edx
mov rcx, rax
call fcn.1400d0f20
mov r8d, dword [0x1401bdd80]
imul r8d, r8d
mov eax, 0x2aaaaaab
imul r8d
sar edx, 1
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
lea eax, [rdx + rdx*2]
shl eax, 2
sub r8d, eax
cmp r8d, 8
jne 0x1400278b4
mov qword [rsp + 0x20], r14
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceW]
lea eax, [r13*2]
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rbp
mov r9d, dword [rbx - 0x10]
mov r8, rbx
xor edx, edx
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
test eax, eax
jne 0x140027906
mov rdx, r12
mov rcx, r15
call fcn.140002310
nop
lea rdx, [rbx - 0x18]
lock add dword [rdx + 0x10], 0xffffffff
jg 0x1400279b2
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
jmp 0x1400279b2
test rbp, rbp
je 0x14002791e
mov rax, rsi
nop
inc rax
cmp word [rbp + rax*2], r14w
jne 0x140027910
mov r14d, eax
mov r8d, r14d
mov rdx, rbp
mov rcx, r15
call fcn.1400023a0
mov byte [rsp + 0x80], 1
mov r8d, dword [0x1401bdd80]
lea ecx, [r8 + 1]
imul ecx, r8d
mov eax, 0x6bca1af3
imul ecx
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0x13
sub ecx, edx
cmp ecx, 0xa
jne 0x14002799d
mov eax, 0x51eb851f
imul r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0x64
sub r8d, edx
add r8d, 0x141
movsxd rcx, r8d
mov eax, 4
mul rcx
cmovo rax, rsi
mov rcx, rax
call fcn.1400cb128
mov rcx, rax
call fcn.1400cc208
nop
lea rdx, [rbx - 0x18]
lock add dword [rdx + 0x10], 0xffffffff
jg 0x1400279b2
mov rcx, qword [rdx]
mov r8, qword [rcx]
call qword [rreloc.OLEAUT32.dll_VariantClear + 8]
test rbp, rbp
je 0x1400279bf
mov rcx, rbp
call fcn.1400cc208
movzx eax, byte [rsp + 0x80]
mov rbx, qword [rsp + 0x88]
add rsp, 0x40
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret