Function at 0x140022afc
Capabilities:
Get disk size

Disassembly:
mov qword [rsp + 0x18], r8
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1f]
sub rsp, 0xa8
mov rbx, r8
mov rdi, rdx
mov r14, rcx
mov rcx, qword [0x14017b048]
lea rax, [0x14017b048]
cmp rcx, rax
je 0x140022b56
test byte [rcx + 0x1c], 1
je 0x140022b56
cmp byte [rcx + 0x19], 4
jb 0x140022b56
mov rcx, qword [rcx + 0x10]
lea r8, [0x1401563e0]
mov edx, 0x1c5
call fcn.140004c10
xor r12d, r12d
cmp dword [r14 + 0x150], 1
mov eax, r12d
mov qword [rbp - 0x31], rax
mov r13d, r12d
mov qword [rbp - 0x41], rax
mov esi, r12d
mov qword [rbp + 0x7f], r12
mov r15d, r12d
mov qword [rbp - 0x49], r12
mov qword [rbp - 0x39], r12
mov qword [rbp - 0x21], r12
mov qword [rbp + 0x67], r12
mov qword [rbp - 0x29], r12
mov qword [rbp + 0x6f], r12
jne 0x140022bab
lea r8, str.m_eMediaType___BLB_MT_SHINY
mov edx, 0x29c5
lea rcx, str.base_stor_blbengine_service_backup.cpp
call fcn.140087b08
test rdi, rdi
jne 0x140022bc8
lea r8, str.pVolumeContext
mov edx, 0x29c6
lea rcx, str.base_stor_blbengine_service_backup.cpp
call fcn.140087b08
test rbx, rbx
jne 0x140022be5
lea r8, str.pwszRestoreAccessPath
mov edx, 0x29c7
lea rcx, str.base_stor_blbengine_service_backup.cpp
call fcn.140087b08
mov qword [rbx], r12
mov rax, qword [rdi + 0xd8]
mov qword [rbp - 0x19], rax
test rax, rax
jne 0x140022c10
lea r8, str.pFileAsync
mov edx, 0x29cb
lea rcx, str.base_stor_blbengine_service_backup.cpp
call fcn.140087b08
lea rdx, [rbp - 0x21]
mov rcx, rdi
call fcn.140013b70
mov ebx, eax
test eax, eax
js 0x140022d60
lea r15, [rdi + 0xe0]
cmp qword [r15], r12
jne 0x140022ee0
movups xmm0, xmmword [rdi + 0x44]
mov r8, qword [r14 + 0x1d8]
lea r9, [rbp + 0x7f]
mov edx, dword [rdi + 0x54]
lea rcx, [rbp - 9]
movdqu xmmword [rbp - 9], xmm0
call fcn.14011124c
mov ebx, eax
test eax, eax
js 0x140022d5c
test byte [rdi + 0x54], 0x10
jne 0x140022e89
mov rcx, qword [r14 + 0x158]
lea r8, [rbp + 0x67]
lea rdx, [0x140153978]
call fcn.140088abc
mov ebx, eax
test eax, eax
js 0x140022d5c
xor edx, edx
lea rcx, [r14 + 0x28]
call fcn.1400fdfb8
mov ebx, eax
test eax, eax
js 0x140022d5c
mov rbx, qword [rbp + 0x67]
lea r9, [rbp + 7]
mov rcx, rbx
lea r8, [rbp + 0xf]
lea rdx, [rbp - 9]
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
nop dword [rax + rax]
test eax, eax
jne 0x140022ccf
mov rcx, rbx
call fcn.140137834
mov ebx, eax
jmp 0x140022cd1
xor ebx, ebx
test ebx, ebx
js 0x140022d5c
lea rcx, [r14 + 0x28]
call fcn.1400fe164
mov edx, dword [rdi + 0x54]
lea r8, [rbp - 0x49]
xor r9d, r9d
lea rcx, [rdi + 0x44]
call fcn.14008b8e4
mov r13, qword [rbp - 0x49]
mov ebx, eax
test eax, eax
js 0x140022d5c
lea rdx, [rbp - 0x29]
mov rcx, r13
call fcn.14008b36c
mov ebx, eax
test eax, eax
js 0x140022d5c
lea rdx, [rbp + 0x6f]
mov rcx, r13
call fcn.140135758
mov r12, qword [rbp + 0x6f]
mov ebx, eax
test eax, eax
js 0x140022d56
mov eax, dword [rdi + 0x40]
mov rcx, r14
mov r9, qword [rdi + 0x60]
mov r8, qword [rbp - 0x29]
mov rdx, qword [rbp + 0x7f]
mov qword [rsp + 0x38], r15
mov qword [rsp + 0x30], r12
mov dword [rsp + 0x28], eax
mov byte [rsp + 0x20], sil
call fcn.140021c84
jmp 0x140022ed4
mov r15, qword [rbp + 0x67]
jmp 0x140022d64
mov r15, qword [rbp + 0x67]
mov r12, qword [rbp + 0x6f]
lea rcx, [r14 + 0x28]
call fcn.1400fe164
test ebx, ebx
jns 0x140022dac
lea rcx, [r14 + 0x58]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
nop dword [rax + rax]
cmp dword [r14 + 0x20], 0
jl 0x140022d9c
mov ecx, 0x807800c5
xor eax, eax
cmp ebx, ecx
mov dword [r14 + 0x20], ecx
cmovne eax, ebx
mov dword [r14 + 0x24], eax
lea rcx, [r14 + 0x58]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
nop dword [rax + rax]
test r15, r15
je 0x140022dc0
mov rcx, r15
call qword [sym.imp.ole32.dll_CoTaskMemFree]
nop dword [rax + rax]
mov rcx, qword [rbp - 0x21]
test rcx, rcx
je 0x140022dd5
call qword [sym.imp.ole32.dll_CoTaskMemFree]
nop dword [rax + rax]
mov rcx, qword [rbp + 0x7f]
test rcx, rcx
je 0x140022dea
call qword [sym.imp.ole32.dll_CoTaskMemFree]
nop dword [rax + rax]
test rsi, rsi
je 0x140022dfe
mov rcx, rsi
call qword [sym.imp.ole32.dll_CoTaskMemFree]
nop dword [rax + rax]
test r13, r13
je 0x140022e12
mov rcx, r13
call qword [sym.imp.ole32.dll_CoTaskMemFree]
nop dword [rax + rax]
mov rax, qword [rbp - 0x31]
test rax, rax
je 0x140022e2a
mov rcx, rax
call qword [sym.imp.ole32.dll_CoTaskMemFree]
nop dword [rax + rax]
test r12, r12
je 0x140022e3e
mov rcx, r12
call qword [sym.imp.ole32.dll_CoTaskMemFree]
nop dword [rax + rax]
mov rcx, qword [0x14017b048]
lea rax, [0x14017b048]
cmp rcx, rax
je 0x140022e72
test byte [rcx + 0x1c], 1
je 0x140022e72
cmp byte [rcx + 0x19], 4
jb 0x140022e72
mov rcx, qword [rcx + 0x10]
lea r8, [0x1401563e0]
mov edx, 0x1c8
call fcn.140004c10
mov eax, ebx
add rsp, 0xa8
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
mov rcx, qword [0x14017b048]
lea rax, [0x14017b048]
cmp rcx, rax
je 0x140022ec1
test byte [rcx + 0x1c], 1
je 0x140022ec1
cmp byte [rcx + 0x19], 4
jb 0x140022ec1
mov r9, qword [rbp + 0x7f]
lea r8, [0x1401563e0]
mov rcx, qword [rcx + 0x10]
mov edx, 0x1c6
call fcn.140005cd0
mov rdx, qword [rbp + 0x7f]
mov r8, r15
mov rcx, r14
call fcn.14002eecc
mov r12, qword [rbp + 0x6f]
mov ebx, eax
test eax, eax
js 0x140022d56
jmp 0x140022ee4
mov r12, qword [rbp + 0x6f]
mov rcx, qword [r15]
lea rdx, [rbp - 0x39]
call fcn.1400887a0
mov rsi, qword [rbp - 0x39]
mov ebx, eax
test eax, eax
js 0x140022d56
mov rdx, qword [rdi + 0x60]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_SetVolumeLabelW]
nop dword [rax + rax]
test eax, eax
jne 0x140022f71
call qword [sym.imp.KERNEL32.dll_GetLastError]
nop dword [rax + rax]
mov edx, eax
mov rcx, qword [0x14017b048]
lea rax, [0x14017b048]
cmp rcx, rax
je 0x140022f71
test byte [rcx + 0x1c], 1
je 0x140022f71
cmp byte [rcx + 0x19], 3
jb 0x140022f71
mov r9, qword [rdi + 0x60]
lea r8, [0x1401563e0]
mov rcx, qword [rcx + 0x10]
movzx eax, dx
or eax, 0x80070000
test edx, edx
cmovle eax, edx
mov edx, 0x1c7
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rsi
call fcn.140005e80
test rsi, rsi
jne 0x140022f8e
lea r8, str.wszMountedVolume
mov edx, 0x2a44
lea rcx, str.base_stor_blbengine_service_backup.cpp
call fcn.140087b08
mov rcx, qword [rbp - 0x19]
mov rdx, rsi
call fcn.140086560
mov ebx, eax
test eax, eax
js 0x140022d56
lea rdx, [rbp - 0x41]
mov rcx, rsi
call fcn.1400887a0
mov r15, qword [rbp + 0x67]
mov ebx, eax
test eax, eax
mov rax, qword [rbp - 0x41]
js 0x140022fcf
mov rcx, qword [rbp + 0x77]
and qword [rbp - 0x31], 0
mov qword [rcx], rax
jmp 0x140022d64
mov qword [rbp - 0x31], rax
jmp 0x140022d64