Function at 0x140021d94
Capabilities:
Get disk size

Disassembly:
mov qword [rsp + 0x18], r8
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1f]
sub rsp, 0xa8
mov rbx, r8
mov rdi, rdx
mov r14, rcx
mov rcx, qword [0x140170048]
lea rax, [0x140170048]
cmp rcx, rax
je 0x140021dee
test byte [rcx + 0x1c], 1
je 0x140021dee
cmp byte [rcx + 0x19], 4
jb 0x140021dee
mov rcx, qword [rcx + 0x10]
lea r8, [0x14014b1c0]
mov edx, 0x1c5
call fcn.140004c54
xor r12d, r12d
cmp dword [r14 + 0x150], 1
mov eax, r12d
mov qword [rbp - 0x31], rax
mov r13d, r12d
mov qword [rbp - 0x41], rax
mov esi, r12d
mov qword [rbp + 0x7f], r12
mov r15d, r12d
mov qword [rbp - 0x49], r12
mov qword [rbp - 0x39], r12
mov qword [rbp - 0x21], r12
mov qword [rbp + 0x67], r12
mov qword [rbp - 0x29], r12
mov qword [rbp + 0x6f], r12
jne 0x140021e43
lea r8, str.m_eMediaType___BLB_MT_SHINY
mov edx, 0x29c5
lea rcx, str.base_stor_blbengine_service_backup.cpp
call fcn.14008388c
test rdi, rdi
jne 0x140021e60
lea r8, str.pVolumeContext
mov edx, 0x29c6
lea rcx, str.base_stor_blbengine_service_backup.cpp
call fcn.14008388c
test rbx, rbx
jne 0x140021e7d
lea r8, str.pwszRestoreAccessPath
mov edx, 0x29c7
lea rcx, str.base_stor_blbengine_service_backup.cpp
call fcn.14008388c
mov qword [rbx], r12
mov rax, qword [rdi + 0xd8]
mov qword [rbp - 0x19], rax
test rax, rax
jne 0x140021ea8
lea r8, str.pFileAsync
mov edx, 0x29cb
lea rcx, str.base_stor_blbengine_service_backup.cpp
call fcn.14008388c
lea rdx, [rbp - 0x21]
mov rcx, rdi
call fcn.140013560
mov ebx, eax
test eax, eax
js 0x140021ff2
lea r15, [rdi + 0xe0]
cmp qword [r15], r12
jne 0x14002213b
movups xmm0, xmmword [rdi + 0x44]
mov r8, qword [r14 + 0x1d8]
lea r9, [rbp + 0x7f]
mov edx, dword [rdi + 0x54]
lea rcx, [rbp - 9]
movdqu xmmword [rbp - 9], xmm0
call fcn.140108b64
mov ebx, eax
test eax, eax
js 0x140021fee
test byte [rdi + 0x54], 0x10
jne 0x1400220e4
mov rcx, qword [r14 + 0x158]
lea r8, [rbp + 0x67]
lea rdx, [0x1401487f8]
call fcn.140084760
mov ebx, eax
test eax, eax
js 0x140021fee
xor edx, edx
lea rcx, [r14 + 0x28]
call fcn.1400f62b4
mov ebx, eax
test eax, eax
js 0x140021fee
mov rbx, qword [rbp + 0x67]
lea r9, [rbp + 7]
mov rcx, rbx
lea r8, [rbp + 0xf]
lea rdx, [rbp - 9]
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
test eax, eax
jne 0x140021f61
mov rcx, rbx
call fcn.14012db10
mov ebx, eax
jmp 0x140021f63
xor ebx, ebx
test ebx, ebx
js 0x140021fee
lea rcx, [r14 + 0x28]
call fcn.1400f6448
mov edx, dword [rdi + 0x54]
lea r8, [rbp - 0x49]
xor r9d, r9d
lea rcx, [rdi + 0x44]
call fcn.1400873b0
mov r13, qword [rbp - 0x49]
mov ebx, eax
test eax, eax
js 0x140021fee
lea rdx, [rbp - 0x29]
mov rcx, r13
call fcn.140086e90
mov ebx, eax
test eax, eax
js 0x140021fee
lea rdx, [rbp + 0x6f]
mov rcx, r13
call fcn.14012bbbc
mov r12, qword [rbp + 0x6f]
mov ebx, eax
test eax, eax
js 0x140021fe8
mov eax, dword [rdi + 0x40]
mov rcx, r14
mov r9, qword [rdi + 0x60]
mov r8, qword [rbp - 0x29]
mov rdx, qword [rbp + 0x7f]
mov qword [rsp + 0x38], r15
mov qword [rsp + 0x30], r12
mov dword [rsp + 0x28], eax
mov byte [rsp + 0x20], sil
call fcn.140020fd0
jmp 0x14002212f
mov r15, qword [rbp + 0x67]
jmp 0x140021ff6
mov r15, qword [rbp + 0x67]
mov r12, qword [rbp + 0x6f]
lea rcx, [r14 + 0x28]
call fcn.1400f6448
test ebx, ebx
jns 0x140022032
lea rcx, [r14 + 0x58]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
cmp dword [r14 + 0x20], 0
jl 0x140022028
mov ecx, 0x807800c5
xor eax, eax
cmp ebx, ecx
mov dword [r14 + 0x20], ecx
cmovne eax, ebx
mov dword [r14 + 0x24], eax
lea rcx, [r14 + 0x58]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
test r15, r15
je 0x140022040
mov rcx, r15
call qword [sym.imp.ole32.dll_CoTaskMemFree]
mov rcx, qword [rbp - 0x21]
test rcx, rcx
je 0x14002204f
call qword [sym.imp.ole32.dll_CoTaskMemFree]
mov rcx, qword [rbp + 0x7f]
test rcx, rcx
je 0x14002205e
call qword [sym.imp.ole32.dll_CoTaskMemFree]
test rsi, rsi
je 0x14002206c
mov rcx, rsi
call qword [sym.imp.ole32.dll_CoTaskMemFree]
test r13, r13
je 0x14002207a
mov rcx, r13
call qword [sym.imp.ole32.dll_CoTaskMemFree]
mov rax, qword [rbp - 0x31]
test rax, rax
je 0x14002208c
mov rcx, rax
call qword [sym.imp.ole32.dll_CoTaskMemFree]
test r12, r12
je 0x14002209a
mov rcx, r12
call qword [sym.imp.ole32.dll_CoTaskMemFree]
mov rcx, qword [0x140170048]
lea rax, [0x140170048]
cmp rcx, rax
je 0x1400220ce
test byte [rcx + 0x1c], 1
je 0x1400220ce
cmp byte [rcx + 0x19], 4
jb 0x1400220ce
mov rcx, qword [rcx + 0x10]
lea r8, [0x14014b1c0]
mov edx, 0x1c8
call fcn.140004c54
mov eax, ebx
add rsp, 0xa8
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
mov rcx, qword [0x140170048]
lea rax, [0x140170048]
cmp rcx, rax
je 0x14002211c
test byte [rcx + 0x1c], 1
je 0x14002211c
cmp byte [rcx + 0x19], 4
jb 0x14002211c
mov r9, qword [rbp + 0x7f]
lea r8, [0x14014b1c0]
mov rcx, qword [rcx + 0x10]
mov edx, 0x1c6
call fcn.140005bdc
mov rdx, qword [rbp + 0x7f]
mov r8, r15
mov rcx, r14
call fcn.14002dae4
mov r12, qword [rbp + 0x6f]
mov ebx, eax
test eax, eax
js 0x140021fe8
jmp 0x14002213f
mov r12, qword [rbp + 0x6f]
mov rcx, qword [r15]
lea rdx, [rbp - 0x39]
call fcn.140084468
mov rsi, qword [rbp - 0x39]
mov ebx, eax
test eax, eax
js 0x140021fe8
mov rdx, qword [rdi + 0x60]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_SetVolumeLabelW]
test eax, eax
jne 0x1400221c0
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
mov rcx, qword [0x140170048]
lea rax, [0x140170048]
cmp rcx, rax
je 0x1400221c0
test byte [rcx + 0x1c], 1
je 0x1400221c0
cmp byte [rcx + 0x19], 3
jb 0x1400221c0
mov r9, qword [rdi + 0x60]
lea r8, [0x14014b1c0]
mov rcx, qword [rcx + 0x10]
movzx eax, dx
or eax, 0x80070000
test edx, edx
cmovle eax, edx
mov edx, 0x1c7
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rsi
call fcn.140005d78
test rsi, rsi
jne 0x1400221dd
lea r8, str.wszMountedVolume
mov edx, 0x2a44
lea rcx, str.base_stor_blbengine_service_backup.cpp
call fcn.14008388c
mov rcx, qword [rbp - 0x19]
mov rdx, rsi
call fcn.1400823a0
mov ebx, eax
test eax, eax
js 0x140021fe8
lea rdx, [rbp - 0x41]
mov rcx, rsi
call fcn.140084468
mov r15, qword [rbp + 0x67]
mov ebx, eax
test eax, eax
mov rax, qword [rbp - 0x41]
js 0x14002221e
mov rcx, qword [rbp + 0x77]
and qword [rbp - 0x31], 0
mov qword [rcx], rax
jmp 0x140021ff6
mov qword [rbp - 0x31], rax
jmp 0x140021ff6