Function at 0x100129078
Capabilities:
Get disk size

Disassembly:
mov rax, rsp
push rbp
push rsi
push rdi
push r12
push r15
sub rsp, 0x90
mov qword [rsp + 0x38], 0xfffffffffffffffe
mov qword [rax + 8], rbx
mov r12, rdx
mov rbp, rcx
lea r15, [0x1001653b8]
mov rcx, qword [0x1001653b8]
cmp rcx, r15
je 0x1001290d0
test byte [rcx + 0x1c], 1
je 0x1001290d0
cmp byte [rcx + 0x19], 4
jb 0x1001290d0
mov edx, 0x17
lea r8, [0x100002ed0]
mov rcx, qword [rcx + 0x10]
call fcn.10001c854
and qword [rsp + 0x30], 0
and qword [rsp + 0xd8], 0
and qword [rsp + 0xd0], 0
xor edx, edx
lea r8d, [rdx + 0x30]
lea rcx, [rsp + 0x60]
call sub.msvcrt.dll_memset
and qword [r12], 0
xor esi, esi
lea r9, [rsp + 0x40]
lea r8, [rsp + 0xc8]
lea rdx, [rsp + 0x50]
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
test eax, eax
jne 0x10012912a
mov rcx, rbp
call fcn.100134b20
mov ebx, eax
jmp 0x100129134
mov rsi, qword [rsp + 0xc8]
xor ebx, ebx
test ebx, ebx
js 0x100129506
lea rdi, [0x100005a48]
cmp qword [rsp + 0x30], 0
je 0x10012915f
mov r8, rdi
mov edx, reloc.OLEAUT32.dll_SysAllocStringByteLen
lea rcx, [0x100005960]
call fcn.10009a050
lea rax, [rsp + 0x30]
mov qword [rsp + 0x20], rax
lea r9, [0x100002008]
xor edx, edx
lea r8d, [rdx + 4]
lea rcx, [0x100002078]
call qword [sym.imp.ole32.dll_CoCreateInstance]
mov ebx, eax
test eax, eax
jns 0x1001291d1
mov rcx, qword [0x1001653b8]
cmp rcx, r15
je 0x1001294bf
test byte [rcx + 0x1c], 1
je 0x1001294bf
cmp byte [rcx + 0x19], 2
jb 0x1001294bf
mov edx, 0x18
mov r9d, eax
lea r8, [0x100002ed0]
mov rcx, qword [rcx + 0x10]
call fcn.10001c878
mov rcx, qword [0x1001653b8]
jmp 0x1001294bf
movdqu xmm0, xmmword [0x100002ec0]
movdqu xmmword [rsp + 0x50], xmm0
mov rbx, qword [rsp + 0x30]
test rbx, rbx
jne 0x100129206
lea r8, [0x100005a50]
mov edx, 0x9a
lea rcx, [0x100005960]
call fcn.10009a050
mov rbx, qword [rsp + 0x30]
cmp qword [rsp + 0xd8], 0
je 0x100129225
mov r8, rdi
mov edx, reloc.OLEAUT32.dll_SysAllocStringByteLen
lea rcx, [0x100005960]
call fcn.10009a050
mov rax, qword [rbx]
lea r9, [rsp + 0xd8]
lea r8, [0x100002028]
lea rdx, [rsp + 0x50]
mov rcx, rbx
call qword [rax + 0x18]
mov ebx, eax
test eax, eax
jns 0x100129290
mov rcx, qword [0x1001653b8]
cmp rcx, r15
je 0x1001294bf
test byte [rcx + 0x1c], 1
je 0x1001294bf
cmp byte [rcx + 0x19], 2
jb 0x1001294bf
mov edx, 0x19
mov r9d, eax
lea r8, [0x100002ed0]
mov rcx, qword [rcx + 0x10]
call fcn.10001c878
mov rcx, qword [0x1001653b8]
jmp 0x1001294bf
mov rbx, qword [rsp + 0xd8]
test rbx, rbx
jne 0x1001292bd
lea r8, [0x100005a50]
mov edx, 0x9a
lea rcx, [0x100005960]
call fcn.10009a050
mov rbx, qword [rsp + 0xd8]
cmp qword [rsp + 0xd0], 0
je 0x1001292dc
mov r8, rdi
mov edx, reloc.OLEAUT32.dll_SysAllocStringByteLen
lea rcx, [0x100005960]
call fcn.10009a050
mov rax, qword [rbx]
lea r8, [rsp + 0xd0]
mov rdx, rbp
mov rcx, rbx
call qword [rax + 0x30]
mov ebx, eax
test eax, eax
jns 0x100129342
mov rcx, qword [0x1001653b8]
cmp rcx, r15
je 0x1001294bf
test byte [rcx + 0x1c], 1
je 0x1001294bf
cmp byte [rcx + 0x19], 2
jb 0x1001294bf
mov edx, 0x1a
mov dword [rsp + 0x20], eax
mov r9, rbp
lea r8, [0x100002ed0]
mov rcx, qword [rcx + 0x10]
call fcn.10001ddb0
mov rcx, qword [0x1001653b8]
jmp 0x1001294bf
xor edx, edx
lea r8d, [rdx + 0x30]
lea rcx, [rsp + 0x60]
call sub.msvcrt.dll_memset
and dword [rsp + 0xc8], 0
mov rcx, qword [rsp + 0xd0]
test rcx, rcx
jne 0x100129387
lea r8, [0x100005a50]
mov edx, 0x9a
lea rcx, [0x100005960]
call fcn.10009a050
mov rcx, qword [rsp + 0xd0]
mov rax, qword [rcx]
lea r9, [rsp + 0xc8]
lea r8, [rsp + 0x60]
mov edx, 1
call qword [rax + 0x18]
mov ebx, eax
cmp eax, 1
je 0x1001294c9
test eax, eax
js 0x100129506
cmp dword [rsp + 0x60], 3
je 0x1001293d1
lea r8, [0x100013d50]
mov edx, 0x1e6
lea rcx, [0x100013cc0]
call fcn.10009a050
cmp dword [rsp + 0xc8], 1
je 0x1001293f3
lea r8, [0x100013d00]
mov edx, 0x1e7
lea rcx, [0x100013cc0]
call fcn.10009a050
mov rdx, rbp
mov rcx, qword [rsp + 0x70]
call sub.msvcrt.dll__wcsicmp
test eax, eax
je 0x10012944c
mov rcx, qword [0x1001653b8]
cmp rcx, r15
je 0x100129431
test byte [rcx + 0x1c], 1
je 0x100129431
cmp byte [rcx + 0x19], 3
jb 0x100129431
mov edx, 0x1b
lea r8, [0x100002ed0]
mov rcx, qword [rcx + 0x10]
call fcn.10001c854
mov rcx, qword [rsp + 0x70]
call qword [sym.imp.ole32.dll_CoTaskMemFree]
mov rcx, qword [rsp + 0x68]
call qword [sym.imp.ole32.dll_CoTaskMemFree]
jmp 0x100129342
mov rcx, qword [rsp + 0x70]
call qword [sym.imp.ole32.dll_CoTaskMemFree]
mov rcx, qword [rsp + 0x68]
call qword [sym.imp.ole32.dll_CoTaskMemFree]
mov rdi, qword [rsp + 0x80]
mov rcx, qword [0x1001653b8]
cmp rcx, r15
je 0x10012949a
test byte [rcx + 0x1c], 1
je 0x10012949a
cmp byte [rcx + 0x19], 4
jb 0x10012949a
mov edx, 0x1d
mov r9, rbp
lea r8, [0x100002ed0]
mov rcx, qword [rcx + 0x10]
call fcn.10001db08
shr rsi, 3
cmp rdi, rsi
jbe 0x1001294b3
sub rdi, rsi
mov qword [r12], rdi
mov rcx, qword [0x1001653b8]
jmp 0x1001294bf
and qword [r12], 0
mov rcx, qword [0x1001653b8]
test ebx, ebx
jns 0x100129552
jmp 0x100129506
mov rcx, qword [0x1001653b8]
cmp rcx, r15
je 0x100129579
test byte [rcx + 0x1c], 1
je 0x100129552
cmp byte [rcx + 0x19], 4
jb 0x100129552
mov edx, 0x1c
mov r9, rbp
lea r8, [0x100002ed0]
mov rcx, qword [rcx + 0x10]
call fcn.10001db08
mov rcx, qword [0x1001653b8]
jmp 0x100129552
lea rdx, [rsp + 0xc8]
mov ecx, ebx
call fcn.1001052a8
mov ebx, eax
mov rcx, qword [0x1001653b8]
cmp rcx, r15
je 0x100129579
test byte [rcx + 0x1c], 1
je 0x100129552
cmp byte [rcx + 0x19], 2
jb 0x100129552
mov edx, 0x1e
mov dword [rsp + 0x20], eax
mov r9, rbp
lea r8, [0x100002ed0]
mov rcx, qword [rcx + 0x10]
call fcn.10001ddb0
mov rcx, qword [0x1001653b8]
cmp rcx, r15
je 0x100129579
test byte [rcx + 0x1c], 1
je 0x100129579
cmp byte [rcx + 0x19], 4
jb 0x100129579
mov edx, 0x1f
lea r8, [0x100002ed0]
mov rcx, qword [rcx + 0x10]
call fcn.10001c854
nop
mov rcx, qword [rsp + 0xd0]
test rcx, rcx
je 0x10012958d
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0xd8]
test rcx, rcx
je 0x1001295a1
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x30]
test rcx, rcx
je 0x1001295b1
mov rax, qword [rcx]
call qword [rax + 0x10]
mov eax, ebx
mov rbx, qword [rsp + 0xc0]
add rsp, 0x90
pop r15
pop r12
pop rdi
pop rsi
pop rbp
ret