Function at 0x14013d7f4
Capabilities:
Get disk size

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
mov qword [rax + 0x20], r12
push rbp
push r14
push r15
mov rbp, rsp
sub rsp, 0x50
mov rdi, rcx
xor r12d, r12d
mov rcx, r9
mov rsi, r9
mov r15b, r8b
mov r14d, edx
mov byte [rbp - 0x1f], r12b
call fcn.14012268c
lea r8, [rbp - 0x20]
mov edx, r14d
mov rcx, rdi
call fcn.1401522fc
mov ebx, eax
test eax, eax
js 0x14013d84e
cmp byte [rbp - 0x20], r12b
jne 0x14013d8b1
mov ebx, 0x807800c6
lea r14, [0x14017d3a8]
mov rcx, qword [0x14017d3a8]
cmp rcx, r14
je 0x14013d889
test byte [rcx + 0x1c], 1
je 0x14013d889
cmp byte [rcx + 0x19], 3
jb 0x14013d889
mov rcx, qword [rcx + 0x10]
lea r8, [0x1400146b8]
mov edx, 0x16
mov r9, rdi
mov dword [rsp + 0x20], ebx
call fcn.14001ecbc
mov rcx, rsi
call fcn.14012268c
lea r11, [rsp + 0x50]
mov eax, ebx
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov r12, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop rbp
ret
lea r8, [rbp - 0x20]
mov edx, r14d
mov rcx, rdi
call fcn.1401524f4
mov ebx, eax
test eax, eax
js 0x14013d84e
test r14b, 8
je 0x14013d91d
cmp byte [rbp - 0x20], r12b
jne 0x14013d8dc
mov ebx, 0x8078011d
jmp 0x14013d84e
lea rdx, [rbp - 0x18]
mov rcx, rdi
mov dword [rbp - 0x18], r12d
call fcn.140152618
mov ebx, eax
test eax, eax
js 0x14013d84e
mov ebx, dword [rbp - 0x18]
test ebx, ebx
jns 0x14013d907
mov ebx, 0x80780061
jmp 0x14013d84e
jle 0x14013d91d
call fcn.1401436a0
cmp ebx, 1
jle 0x14013d91d
mov ebx, 0x807800b4
jmp 0x14013d84e
lea rdx, [rbp - 0x1f]
mov rcx, rdi
call fcn.14012f3fc
test eax, eax
jns 0x14013d9fb
mov rcx, qword [0x14017d3a8]
lea rdx, [0x14017d3a8]
cmp rcx, rdx
je 0x14013d96c
test byte [rcx + 0x1c], 1
je 0x14013d96c
cmp byte [rcx + 0x19], 3
jb 0x14013d96c
mov rcx, qword [rcx + 0x10]
lea r8, [0x1400146b8]
mov edx, CoRevokeClassObject
mov r9, rdi
mov dword [rsp + 0x20], eax
call fcn.14001ecbc
test r14b, 1
jne 0x14013da52
or rdx, 0xffffffffffffffff
inc rdx
cmp word [rdi + rdx*2], r12w
jne 0x14013d97a
mov r8, rsi
mov rcx, rdi
call fcn.1400ac484
mov ebx, eax
test eax, eax
js 0x14013d84e
lea rdx, [rsi + 0x18]
mov rcx, rdi
call fcn.140151d50
mov ebx, eax
test eax, eax
jns 0x14013da52
mov rcx, qword [0x14017d3a8]
lea r14, [0x14017d3a8]
cmp rcx, r14
je 0x14013db99
test byte [rcx + 0x1c], 1
je 0x14013db99
cmp byte [rcx + 0x19], 2
jb 0x14013db99
mov edx, CoDisconnectObject
mov rcx, qword [rcx + 0x10]
lea r8, [0x1400146b8]
mov r9, rdi
mov dword [rsp + 0x20], eax
call fcn.14001ecbc
jmp 0x14013db92
cmp byte [rbp - 0x1f], r12b
je 0x14013d96c
mov ebx, 0x807800b2
mov rcx, qword [0x14017d3a8]
lea r14, [0x14017d3a8]
cmp rcx, r14
je 0x14013d889
test byte [rcx + 0x1c], 1
je 0x14013d85c
cmp byte [rcx + 0x19], 2
jb 0x14013d85c
mov rcx, qword [rcx + 0x10]
lea r8, [0x1400146b8]
mov edx, reloc.ole32.dll_CoRevokeClassObject
mov r9, rdi
call fcn.14001ec40
jmp 0x14013d855
lea rdx, [rsi + 0x20]
mov rcx, rdi
mov dword [rsi + 0x10], r14d
call fcn.140153a9c
mov ebx, eax
test eax, eax
jns 0x14013da9d
mov rcx, qword [0x14017d3a8]
lea r14, [0x14017d3a8]
cmp rcx, r14
je 0x14013db99
test byte [rcx + 0x1c], 1
je 0x14013db99
cmp byte [rcx + 0x19], 2
jb 0x14013db99
mov edx, reloc.ole32.dll_CoDisconnectObject
jmp 0x14013d9df
lea r8, [rsi + 0x14]
mov dl, 1
mov rcx, rdi
call fcn.140153ce4
mov ebx, eax
test eax, eax
jns 0x14013dae6
mov rcx, qword [0x14017d3a8]
lea r14, [0x14017d3a8]
cmp rcx, r14
je 0x14013db99
test byte [rcx + 0x1c], 1
je 0x14013db99
cmp byte [rcx + 0x19], 2
jb 0x14013db99
mov edx, 0x14
jmp 0x14013d9df
lea rdx, [rsi + 0x40]
mov rcx, rdi
call fcn.14015349c
mov ebx, eax
test eax, eax
jns 0x14013db29
mov rcx, qword [0x14017d3a8]
lea r14, [0x14017d3a8]
cmp rcx, r14
je 0x14013db99
test byte [rcx + 0x1c], 1
je 0x14013db99
cmp byte [rcx + 0x19], 2
jb 0x14013db99
mov edx, 0x15
jmp 0x14013d9df
mov byte [rsi + 0x28], r15b
mov byte [rsi + 0x29], r12b
mov qword [rsi + 0x30], r12
lea r9, [rbp - 8]
lea r8, [rbp - 0x18]
lea rdx, [rbp - 0x10]
mov rcx, rdi
mov qword [rsi + 0x38], r12
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
test eax, eax
jne 0x14013db5e
mov rcx, rdi
call fcn.140154be4
mov ebx, eax
jmp 0x14013db71
mov rax, qword [rbp - 0x18]
mov ebx, r12d
mov qword [rsi + 0x30], rax
mov rax, qword [rbp - 0x10]
mov qword [rsi + 0x38], rax
test ebx, ebx
js 0x14013d84e
lea r8, [rsi + 0x44]
lea rdx, [rsi + 0x48]
mov rcx, rdi
call fcn.1400aca28
lea r14, [0x14017d3a8]
mov ebx, eax
mov rcx, qword [0x14017d3a8]
test ebx, ebx
jns 0x14013d891
jmp 0x14013d85c