Function at 0x1400228f0
Capabilities:
Get disk size

Disassembly:
mov qword [rsp + 0x18], r8
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1f]
sub rsp, 0xa8
mov rbx, r8
mov rdi, rdx
mov r14, rcx
mov rcx, qword [0x1401782b0]
lea rax, [0x1401782b0]
cmp rcx, rax
je 0x14002294a
test byte [rcx + 0x1c], 1
je 0x14002294a
cmp byte [rcx + 0x19], 4
jb 0x14002294a
mov rcx, qword [rcx + 0x10]
lea r8, [0x140151a70]
mov edx, 0x1c5
call fcn.140004c6c
xor r12d, r12d
cmp dword [r14 + 0x150], 1
mov eax, r12d
mov qword [rbp - 0x31], rax
mov r13d, r12d
mov qword [rbp - 0x49], rax
mov esi, r12d
mov qword [rbp + 0x7f], r12
mov r15d, r12d
mov qword [rbp - 0x39], r12
mov qword [rbp - 0x41], r12
mov qword [rbp - 0x21], r12
mov qword [rbp + 0x67], r12
mov qword [rbp - 0x29], r12
mov qword [rbp + 0x6f], r12
jne 0x14002299f
lea r8, str.m_eMediaType___BLB_MT_SHINY
mov edx, 0x29c5
lea rcx, str.base_stor_blbengine_service_backup.cpp
call fcn.14008624c
test rdi, rdi
jne 0x1400229bc
lea r8, str.pVolumeContext
mov edx, 0x29c6
lea rcx, str.base_stor_blbengine_service_backup.cpp
call fcn.14008624c
test rbx, rbx
jne 0x1400229d9
lea r8, str.pwszRestoreAccessPath
mov edx, 0x29c7
lea rcx, str.base_stor_blbengine_service_backup.cpp
call fcn.14008624c
mov qword [rbx], r12
mov rax, qword [rdi + 0xd8]
mov qword [rbp - 0x19], rax
test rax, rax
jne 0x140022a04
lea r8, str.pFileAsync
mov edx, 0x29cb
lea rcx, str.base_stor_blbengine_service_backup.cpp
call fcn.14008624c
lea rdx, [rbp - 0x21]
mov rcx, rdi
call fcn.140013e94
mov ebx, eax
test eax, eax
js 0x140022b4e
lea r15, [rdi + 0xe0]
cmp qword [r15], r12
jne 0x140022c97
movups xmm0, xmmword [rdi + 0x44]
mov r8, qword [r14 + 0x1d8]
lea r9, [rbp + 0x7f]
mov edx, dword [rdi + 0x54]
lea rcx, [rbp - 9]
movdqu xmmword [rbp - 9], xmm0
call fcn.14010f66c
mov ebx, eax
test eax, eax
js 0x140022b4a
test byte [rdi + 0x54], 0x10
jne 0x140022c40
mov rcx, qword [r14 + 0x158]
lea r8, [rbp + 0x67]
lea rdx, [0x14014d7b8]
call fcn.140087120
mov ebx, eax
test eax, eax
js 0x140022b4a
xor edx, edx
lea rcx, [r14 + 0x28]
call fcn.1400fc6dc
mov ebx, eax
test eax, eax
js 0x140022b4a
mov rbx, qword [rbp + 0x67]
lea r9, [rbp + 7]
mov rcx, rbx
lea r8, [rbp + 0xf]
lea rdx, [rbp - 9]
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
test eax, eax
jne 0x140022abd
mov rcx, rbx
call fcn.140133a1c
mov ebx, eax
jmp 0x140022abf
xor ebx, ebx
test ebx, ebx
js 0x140022b4a
lea rcx, [r14 + 0x28]
call fcn.1400fc870
mov edx, dword [rdi + 0x54]
lea r8, [rbp - 0x39]
xor r9d, r9d
lea rcx, [rdi + 0x44]
call fcn.140089d9c
mov r13, qword [rbp - 0x39]
mov ebx, eax
test eax, eax
js 0x140022b4a
lea rdx, [rbp - 0x29]
mov rcx, r13
call fcn.14008987c
mov ebx, eax
test eax, eax
js 0x140022b4a
lea rdx, [rbp + 0x6f]
mov rcx, r13
call fcn.140131aac
mov r12, qword [rbp + 0x6f]
mov ebx, eax
test eax, eax
js 0x140022b44
mov eax, dword [rdi + 0x40]
mov rcx, r14
mov r9, qword [rdi + 0x60]
mov r8, qword [rbp - 0x29]
mov rdx, qword [rbp + 0x7f]
mov qword [rsp + 0x38], r15
mov qword [rsp + 0x30], r12
mov dword [rsp + 0x28], eax
mov byte [rsp + 0x20], sil
call fcn.140021b00
jmp 0x140022c8b
mov r15, qword [rbp + 0x67]
jmp 0x140022b52
mov r15, qword [rbp + 0x67]
mov r12, qword [rbp + 0x6f]
lea rcx, [r14 + 0x28]
call fcn.1400fc870
test ebx, ebx
jns 0x140022b8e
lea rcx, [r14 + 0x58]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
cmp dword [r14 + 0x20], 0
jl 0x140022b84
mov ecx, 0x807800c5
xor eax, eax
cmp ebx, ecx
mov dword [r14 + 0x20], ecx
cmovne eax, ebx
mov dword [r14 + 0x24], eax
lea rcx, [r14 + 0x58]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
test r15, r15
je 0x140022b9c
mov rcx, r15
call qword [sym.imp.ole32.dll_CoTaskMemFree]
mov rcx, qword [rbp - 0x21]
test rcx, rcx
je 0x140022bab
call qword [sym.imp.ole32.dll_CoTaskMemFree]
mov rcx, qword [rbp + 0x7f]
test rcx, rcx
je 0x140022bba
call qword [sym.imp.ole32.dll_CoTaskMemFree]
test rsi, rsi
je 0x140022bc8
mov rcx, rsi
call qword [sym.imp.ole32.dll_CoTaskMemFree]
test r13, r13
je 0x140022bd6
mov rcx, r13
call qword [sym.imp.ole32.dll_CoTaskMemFree]
mov rax, qword [rbp - 0x31]
test rax, rax
je 0x140022be8
mov rcx, rax
call qword [sym.imp.ole32.dll_CoTaskMemFree]
test r12, r12
je 0x140022bf6
mov rcx, r12
call qword [sym.imp.ole32.dll_CoTaskMemFree]
mov rcx, qword [0x1401782b0]
lea rax, [0x1401782b0]
cmp rcx, rax
je 0x140022c2a
test byte [rcx + 0x1c], 1
je 0x140022c2a
cmp byte [rcx + 0x19], 4
jb 0x140022c2a
mov rcx, qword [rcx + 0x10]
lea r8, [0x140151a70]
mov edx, 0x1c8
call fcn.140004c6c
mov eax, ebx
add rsp, 0xa8
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
mov rcx, qword [0x1401782b0]
lea rax, [0x1401782b0]
cmp rcx, rax
je 0x140022c78
test byte [rcx + 0x1c], 1
je 0x140022c78
cmp byte [rcx + 0x19], 4
jb 0x140022c78
mov r9, qword [rbp + 0x7f]
lea r8, [0x140151a70]
mov rcx, qword [rcx + 0x10]
mov edx, 0x1c6
call fcn.140005c6c
mov rdx, qword [rbp + 0x7f]
mov r8, r15
mov rcx, r14
call fcn.14002e834
mov r12, qword [rbp + 0x6f]
mov ebx, eax
test eax, eax
js 0x140022b44
jmp 0x140022c9b
mov r12, qword [rbp + 0x6f]
mov rcx, qword [r15]
lea rdx, [rbp - 0x41]
call fcn.140086e28
mov rsi, qword [rbp - 0x41]
mov ebx, eax
test eax, eax
js 0x140022b44
mov rdx, qword [rdi + 0x60]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_SetVolumeLabelW]
test eax, eax
jne 0x140022d1c
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
mov rcx, qword [0x1401782b0]
lea rax, [0x1401782b0]
cmp rcx, rax
je 0x140022d1c
test byte [rcx + 0x1c], 1
je 0x140022d1c
cmp byte [rcx + 0x19], 3
jb 0x140022d1c
mov r9, qword [rdi + 0x60]
lea r8, [0x140151a70]
mov rcx, qword [rcx + 0x10]
movzx eax, dx
or eax, 0x80070000
test edx, edx
cmovle eax, edx
mov edx, 0x1c7
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rsi
call fcn.140005e64
test rsi, rsi
jne 0x140022d39
lea r8, str.wszMountedVolume
mov edx, 0x2a44
lea rcx, str.base_stor_blbengine_service_backup.cpp
call fcn.14008624c
mov rcx, qword [rbp - 0x19]
mov rdx, rsi
call fcn.140084d90
mov ebx, eax
test eax, eax
js 0x140022b44
lea rdx, [rbp - 0x49]
mov rcx, rsi
call fcn.140086e28
mov r15, qword [rbp + 0x67]
mov ebx, eax
test eax, eax
mov rax, qword [rbp - 0x49]
js 0x140022d7a
mov rcx, qword [rbp + 0x77]
and qword [rbp - 0x31], 0
mov qword [rcx], rax
jmp 0x140022b52
mov qword [rbp - 0x31], rax
jmp 0x140022b52