Function at 0x14006c230
Capabilities:
Get disk size

Disassembly:
push rbx
push rsi
push rdi
push r14
sub rsp, 0x258
mov rbx, rcx
mov rcx, qword [0x14012a950]
movzx esi, r8b
mov rdi, rdx
call fcn.1400243d0
test rdi, rdi
je 0x14006c5fe
cmp word [rdi], 0
je 0x14006c5fe
lea rcx, [rsp + 0x40]
mov r8d, 0x103
mov rdx, rdi
call fcn.1400da5b4
or rcx, 0xffffffffffffffff
xor r14d, r14d
xor eax, eax
mov word [rsp + 0x246], r14w
lea rdi, [rsp + 0x40]
repne scasw ax, word [rdi]
not rcx
cmp word [rsp + rcx*2 + 0x3c], 0x5c
je 0x14006c2bb
cmp rcx, 0x104
jae 0x14006c5fe
mov eax, 0x5c
mov word [rsp + rcx*2 + 0x3e], ax
mov word [rsp + rcx*2 + 0x40], r14w
lea r9, [rsp + 0x30]
lea r8, [rsp + 0x288]
lea rdx, [rsp + 0x298]
lea rcx, [rsp + 0x40]
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
test eax, eax
je 0x14006c5fe
mov rdi, qword [0x14012b628]
test sil, sil
mov qword [rsp + 0x290], r12
movzx ecx, byte [rdi + 0x23]
mov qword [rsp + 0x250], r13
mov r13, qword [rsp + 0x288]
cmovne r13, qword [rsp + 0x298]
shr r13, 0x14
test cl, cl
jne 0x14006c33b
mov rcx, qword [rdi + 0x10]
lea rdx, [0x1400f1614]
xor r9d, r9d
or r8, 0xffffffffffffffff
mov byte [rsp + 0x20], 1
call fcn.1400bd640
jmp 0x14006c58c
lea r12, [0x1400f1614]
mov qword [rsp + 0x280], rbp
cmp qword [rdi + 8], r12
jne 0x14006c359
mov rbp, qword [rdi + 0x10]
shr rbp, 1
jmp 0x14006c35e
mov ebp, 1
lea rax, [rbp + 1]
lea rsi, [rax + rax]
cmp cl, 2
jne 0x14006c37b
mov rdx, rbp
mov rcx, r12
call fcn.140006da0
jmp 0x14006c584
mov rcx, qword [0x1401255a0]
cmp rsi, rcx
jbe 0x14006c3ac
cmp rsi, qword [rdi + 0x18]
jbe 0x14006c3ac
lea r8, [0x1400f1524]
lea rdx, [0x140110420]
lea rcx, [0x14012c5c0]
call fcn.14004e590
jmp 0x14006c584
cmp rax, 2
jae 0x14006c3c6
xor r8d, r8d
mov rcx, rdi
lea edx, [r8 + 4]
call fcn.1400bdcf0
jmp 0x14006c584
movzx eax, byte [rdi + 0x21]
test al, 2
je 0x14006c3e3
mov rcx, qword [rdi]
and al, 0x3d
mov byte [rdi + 0x21], al
mov rax, qword [rcx]
call qword [rax + reloc.WSOCK32.dll_recv]
mov rcx, qword [0x1401255a0]
mov r8, qword [rdi + 0x18]
and byte [rdi + 0x21], 0x82
cmp rsi, r8
jbe 0x14006c55c
movzx r9d, byte [rdi + 0x20]
movzx eax, r9b
cmp r9b, 1
jbe 0x14006c41c
cmp al, 2
je 0x14006c459
mov rbx, qword [rsp + 0x288]
mov rax, qword [rsp + 0x288]
jmp 0x14006c550
mov ebx, 0x80
cmp rsi, rbx
ja 0x14006c459
cmp rsi, 8
ja 0x14006c433
mov ebx, 8
jmp 0x14006c43f
mov eax, reloc.WSOCK32.dll_recv
cmp rsi, rax
cmovbe rbx, rax
mov rcx, rbx
call fcn.1400b60a0
test rax, rax
je 0x14006c584
mov byte [rdi + 0x20], 1
jmp 0x14006c550
cmp rsi, 0x20
jae 0x14006c469
mov ebx, SafeArrayAllocDescriptor
jmp 0x14006c513
mov ebx, 0x208
cmp rsi, rbx
jb 0x14006c513
cmp rsi, 0x50000
jae 0x14006c4cf
pxor xmm0, xmm0
cvtsi2sd xmm0, rsi
test rsi, rsi
jns 0x14006c496
addsd xmm0, qword [0x140112018]
mulsd xmm0, qword [0x140112050]
movsd xmm1, qword [0x140112048]
xor eax, eax
comisd xmm0, xmm1
jbe 0x14006c4c5
subsd xmm0, xmm1
comisd xmm0, xmm1
jae 0x14006c4c5
movabs rdx, 0x8000000000000000
mov rax, rdx
cvttsd2si rbx, xmm0
add rbx, rax
jmp 0x14006c513
cmp rsi, 0x320000
jae 0x14006c4e1
lea rbx, [rsi + 0x8000]
jmp 0x14006c513
cmp rsi, 0xc80000
jae 0x14006c50c
movabs rax, 0x47ae147ae147ae15
mov rbx, rsi
mul rsi
sub rbx, rdx
shr rbx, 1
add rbx, rdx
shr rbx, 6
add rbx, rsi
jmp 0x14006c513
lea rbx, [rsi + 0x20000]
cmp rbx, rcx
cmova rbx, rcx
cmp r9b, 2
jne 0x14006c533
test r8, r8
je 0x14006c533
mov rcx, qword [rdi + 8]
mov sil, 1
call fcn.1400d6fc8
jmp 0x14006c536
xor sil, sil
test rbx, rbx
js 0x14006c5c0
mov rcx, rbx
call fcn.1400d6f08
test rax, rax
je 0x14006c5c0
mov byte [rdi + 0x20], 2
and byte [rdi + 0x21], 0x7f
mov qword [rdi + 8], rax
mov qword [rdi + 0x18], rbx
mov rcx, qword [rdi + 8]
cmp rcx, r12
je 0x14006c572
lea r8, [rbp + rbp]
mov rdx, r12
call fcn.1400d7a30
mov rcx, qword [rdi + 8]
lea rax, [rbp + rbp]
mov word [rax + rcx], r14w
mov qword [rdi + 0x10], rax
mov rbp, qword [rsp + 0x280]
mov rcx, qword [0x14012a950]
mov r8b, reloc.OLEAUT32.dll_SafeArrayGetElement
mov rdx, r13
call fcn.140001090
mov r13, qword [rsp + 0x250]
mov r12, qword [rsp + 0x290]
mov eax, 1
add rsp, 0x258
pop r14
pop rdi
pop rsi
pop rbx
ret
test sil, sil
je 0x14006c5d6
lea rax, [0x14012c4b8]
mov qword [rdi + 0x18], r14
mov qword [rdi + 8], rax
jmp 0x14006c5de
mov rax, qword [rdi + 8]
mov word [rax], r14w
lea r8, [0x1400f1524]
lea rdx, [0x1400f5a40]
lea rcx, [0x14012c5c0]
mov qword [rdi + 0x10], r14
call fcn.14004e590
jmp 0x14006c584
mov dl, 1
mov rcx, rbx
call fcn.14004ced0
add rsp, 0x258
pop r14
pop rdi
pop rsi
pop rbx
ret