Function at 0x14006c100
Capabilities:
Get disk size

Disassembly:
push rbx
push rsi
push rdi
push r14
sub rsp, 0x258
mov rbx, rcx
mov rcx, qword [0x14012a8c0]
movzx esi, r8b
mov rdi, rdx
call fcn.1400243d0
test rdi, rdi
je 0x14006c4ce
cmp word [rdi], 0
je 0x14006c4ce
lea rcx, [rsp + 0x40]
mov r8d, 0x103
mov rdx, rdi
call fcn.1400d9e34
or rcx, 0xffffffffffffffff
xor r14d, r14d
xor eax, eax
mov word [rsp + 0x246], r14w
lea rdi, [rsp + 0x40]
repne scasw ax, word [rdi]
not rcx
cmp word [rsp + rcx*2 + 0x3c], 0x5c
je 0x14006c18b
cmp rcx, 0x104
jae 0x14006c4ce
mov eax, 0x5c
mov word [rsp + rcx*2 + 0x3e], ax
mov word [rsp + rcx*2 + 0x40], r14w
lea r9, [rsp + 0x30]
lea r8, [rsp + 0x288]
lea rdx, [rsp + 0x298]
lea rcx, [rsp + 0x40]
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
test eax, eax
je 0x14006c4ce
mov rdi, qword [0x14012b5a0]
test sil, sil
mov qword [rsp + 0x290], r12
movzx ecx, byte [rdi + 0x23]
mov qword [rsp + 0x250], r13
mov r13, qword [rsp + 0x288]
cmovne r13, qword [rsp + 0x298]
shr r13, 0x14
test cl, cl
jne 0x14006c20b
mov rcx, qword [rdi + 0x10]
lea rdx, [0x1400f1614]
xor r9d, r9d
or r8, 0xffffffffffffffff
mov byte [rsp + 0x20], 1
call fcn.1400bcba0
jmp 0x14006c45c
lea r12, [0x1400f1614]
mov qword [rsp + 0x280], rbp
cmp qword [rdi + 8], r12
jne 0x14006c229
mov rbp, qword [rdi + 0x10]
shr rbp, 1
jmp 0x14006c22e
mov ebp, 1
lea rax, [rbp + 1]
lea rsi, [rax + rax]
cmp cl, 2
jne 0x14006c24b
mov rdx, rbp
mov rcx, r12
call fcn.140006f10
jmp 0x14006c454
mov rcx, qword [0x1401255a0]
cmp rsi, rcx
jbe 0x14006c27c
cmp rsi, qword [rdi + 0x18]
jbe 0x14006c27c
lea r8, [0x1400f1604]
lea rdx, [0x1401103d0]
lea rcx, [0x14012c540]
call fcn.14004e5d0
jmp 0x14006c454
cmp rax, 2
jae 0x14006c296
xor r8d, r8d
mov rcx, rdi
lea edx, [r8 + 4]
call fcn.1400bd250
jmp 0x14006c454
movzx eax, byte [rdi + 0x21]
test al, 2
je 0x14006c2b3
mov rcx, qword [rdi]
and al, 0x3d
mov byte [rdi + 0x21], al
mov rax, qword [rcx]
call qword [rax + reloc.WSOCK32.dll_recv]
mov rcx, qword [0x1401255a0]
mov r8, qword [rdi + 0x18]
and byte [rdi + 0x21], 0x82
cmp rsi, r8
jbe 0x14006c42c
movzx r9d, byte [rdi + 0x20]
movzx eax, r9b
cmp r9b, 1
jbe 0x14006c2ec
cmp al, 2
je 0x14006c329
mov rbx, qword [rsp + 0x288]
mov rax, qword [rsp + 0x288]
jmp 0x14006c420
mov ebx, 0x80
cmp rsi, rbx
ja 0x14006c329
cmp rsi, 8
ja 0x14006c303
mov ebx, 8
jmp 0x14006c30f
mov eax, reloc.WSOCK32.dll_recv
cmp rsi, rax
cmovbe rbx, rax
mov rcx, rbx
call fcn.1400b55f0
test rax, rax
je 0x14006c454
mov byte [rdi + 0x20], 1
jmp 0x14006c420
cmp rsi, 0x20
jae 0x14006c339
mov ebx, SafeArrayAllocDescriptor
jmp 0x14006c3e3
mov ebx, 0x208
cmp rsi, rbx
jb 0x14006c3e3
cmp rsi, 0x50000
jae 0x14006c39f
pxor xmm0, xmm0
cvtsi2sd xmm0, rsi
test rsi, rsi
jns 0x14006c366
addsd xmm0, qword [0x140111fc8]
mulsd xmm0, qword [0x140112000]
movsd xmm1, qword [0x140111ff8]
xor eax, eax
comisd xmm0, xmm1
jbe 0x14006c395
subsd xmm0, xmm1
comisd xmm0, xmm1
jae 0x14006c395
movabs rdx, 0x8000000000000000
mov rax, rdx
cvttsd2si rbx, xmm0
add rbx, rax
jmp 0x14006c3e3
cmp rsi, 0x320000
jae 0x14006c3b1
lea rbx, [rsi + 0x8000]
jmp 0x14006c3e3
cmp rsi, 0xc80000
jae 0x14006c3dc
movabs rax, 0x47ae147ae147ae15
mov rbx, rsi
mul rsi
sub rbx, rdx
shr rbx, 1
add rbx, rdx
shr rbx, 6
add rbx, rsi
jmp 0x14006c3e3
lea rbx, [rsi + 0x20000]
cmp rbx, rcx
cmova rbx, rcx
cmp r9b, 2
jne 0x14006c403
test r8, r8
je 0x14006c403
mov rcx, qword [rdi + 8]
mov sil, 1
call fcn.1400d6528
jmp 0x14006c406
xor sil, sil
test rbx, rbx
js 0x14006c490
mov rcx, rbx
call fcn.1400d6468
test rax, rax
je 0x14006c490
mov byte [rdi + 0x20], 2
and byte [rdi + 0x21], 0x7f
mov qword [rdi + 8], rax
mov qword [rdi + 0x18], rbx
mov rcx, qword [rdi + 8]
cmp rcx, r12
je 0x14006c442
lea r8, [rbp + rbp]
mov rdx, r12
call fcn.1400d72b0
mov rcx, qword [rdi + 8]
lea rax, [rbp + rbp]
mov word [rax + rcx], r14w
mov qword [rdi + 0x10], rax
mov rbp, qword [rsp + 0x280]
mov rcx, qword [0x14012a8c0]
mov r8b, reloc.OLEAUT32.dll_SafeArrayGetElement
mov rdx, r13
call fcn.140001090
mov r13, qword [rsp + 0x250]
mov r12, qword [rsp + 0x290]
mov eax, 1
add rsp, 0x258
pop r14
pop rdi
pop rsi
pop rbx
ret
test sil, sil
je 0x14006c4a6
lea rax, [0x14012c438]
mov qword [rdi + 0x18], r14
mov qword [rdi + 8], rax
jmp 0x14006c4ae
mov rax, qword [rdi + 8]
mov word [rax], r14w
lea r8, [0x1400f1604]
lea rdx, str.Out_of_memory.
lea rcx, [0x14012c540]
mov qword [rdi + 0x10], r14
call fcn.14004e5d0
jmp 0x14006c454
mov dl, 1
mov rcx, rbx
call fcn.14004cf10
add rsp, 0x258
pop r14
pop rdi
pop rsi
pop rbx
ret