Function at 0x100052ca4
Capabilities:
Get disk size

Disassembly:
push rbx
push rbp
push rsi
push rdi
push r12
push r13
push r15
sub rsp, 0x30
mov rsi, rdx
mov rbp, rcx
mov rcx, qword [0x1001653b8]
lea r15, [0x1001653b8]
cmp rcx, r15
je 0x100052cee
bt dword [rcx + 0x1c], 9
jae 0x100052cee
cmp byte [rcx + 0x19], 4
jb 0x100052cee
mov rcx, qword [rcx + 0x10]
lea r8, [0x100003cf8]
mov edx, 0x1d9
call fcn.10001c7b8
mov rcx, qword [rsi + 8]
test rcx, rcx
je 0x100052cfd
call qword [sym.imp.ole32.dll_CoTaskMemFree]
mov rcx, qword [rsi + 0x10]
test rcx, rcx
je 0x100052d0c
call qword [sym.imp.ole32.dll_CoTaskMemFree]
xor edx, edx
mov rcx, rsi
lea r8d, [rdx + 0x28]
call sub.msvcrt.dll_memset
mov rdx, rsi
mov rcx, rbp
call fcn.10011b704
mov ebx, eax
test eax, eax
jns 0x100052d71
mov rcx, qword [0x1001653b8]
cmp rcx, r15
je 0x100052ee6
bt dword [rcx + 0x1c], 9
jae 0x100052ee6
cmp byte [rcx + 0x19], 2
jb 0x100052ee6
mov edx, 0x1da
mov dword [rsp + 0x20], eax
mov rcx, qword [rcx + 0x10]
lea r8, [0x100003cf8]
mov r9, rbp
call fcn.10001daa4
jmp 0x100052edf
cmp dword [rsi], 1
je 0x100052d93
cmp dword [rsi], 5
je 0x100052d93
lea r8, [0x1000061d0]
lea rcx, [0x100005eb0]
mov edx, 0x259f
call fcn.100099ad8
lea rdx, [rsi + 8]
mov rcx, rbp
call fcn.1001360c0
mov ebx, eax
test eax, eax
jns 0x100052dd1
mov rcx, qword [0x1001653b8]
cmp rcx, r15
je 0x100052ee6
bt dword [rcx + 0x1c], 9
jae 0x100052ee6
cmp byte [rcx + 0x19], 2
jb 0x100052ee6
mov edx, 0x1db
jmp 0x100052d55
cmp qword [rsi + 8], 0
je 0x100052ea2
lea rdx, [rsi + 0x10]
mov rcx, rbp
call fcn.100136af8
mov ebx, eax
test eax, eax
jns 0x100052e1d
mov rcx, qword [0x1001653b8]
cmp rcx, r15
je 0x100052ee6
bt dword [rcx + 0x1c], 9
jae 0x100052ee6
cmp byte [rcx + 0x19], 2
jb 0x100052ee6
mov edx, 0x1dc
jmp 0x100052d55
cmp qword [rsi + 8], 0
je 0x100052ea2
and qword [rsi + 0x18], 0
and qword [rsi + 0x20], 0
lea r9, [rsp + 0x88]
lea r8, [rsp + 0x78]
lea rdx, [rsp + 0x80]
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
test eax, eax
jne 0x100052e5c
mov rcx, rbp
call fcn.100134ad4
mov ebx, eax
jmp 0x100052e73
mov rax, qword [rsp + 0x78]
xor ebx, ebx
mov qword [rsi + 0x18], rax
mov rax, qword [rsp + 0x80]
mov qword [rsi + 0x20], rax
test ebx, ebx
jns 0x100052f16
mov rcx, qword [0x1001653b8]
cmp rcx, r15
je 0x100052ee6
bt dword [rcx + 0x1c], 9
jae 0x100052ee6
cmp byte [rcx + 0x19], 2
jb 0x100052ee6
mov edx, 0x1dd
mov dword [rsp + 0x20], ebx
jmp 0x100052d59
lea rdx, [rsi + 0x18]
mov rcx, rbp
call fcn.100135c50
mov ebx, eax
test eax, eax
jns 0x100052ed7
mov rcx, qword [0x1001653b8]
cmp rcx, r15
je 0x100052ee6
bt dword [rcx + 0x1c], 9
jae 0x100052ee6
cmp byte [rcx + 0x19], 2
jb 0x100052ee6
mov edx, 0x1de
jmp 0x100052d55
mov rax, qword [rsi + 0x18]
mov qword [rsi + 0x20], rax
mov rcx, qword [0x1001653b8]
test ebx, ebx
jns 0x100052f1d
mov rcx, qword [rsi + 8]
test rcx, rcx
je 0x100052ef9
call qword [sym.imp.ole32.dll_CoTaskMemFree]
mov rcx, qword [rsi + 0x10]
test rcx, rcx
je 0x100052f08
call qword [sym.imp.ole32.dll_CoTaskMemFree]
xor edx, edx
mov rcx, rsi
lea r8d, [rdx + 0x28]
call sub.msvcrt.dll_memset
mov rcx, qword [0x1001653b8]
cmp rcx, r15
je 0x100052f44
bt dword [rcx + 0x1c], 9
jae 0x100052f44
cmp byte [rcx + 0x19], 4
jb 0x100052f44
mov rcx, qword [rcx + 0x10]
lea r8, [0x100003cf8]
mov edx, 0x1df
call fcn.10001c7b8
mov eax, ebx
add rsp, 0x30
pop r15
pop r13
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret