Function at 0x140004d10
Capabilities:
Get disk size

Disassembly:
mov qword [rsp + 0x20], r9
mov dword [rsp + 0x18], r8d
mov dword [rsp + 0x10], edx
mov qword [rsp + 8], rcx
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x3b8]
sub rsp, 0x4b8
mov rax, qword [0x140012088]
xor rax, rsp
mov qword [rbp + 0x3a0], rax
mov rax, qword [rbp + 0x400]
mov qword [rsp + 0x70], rax
mov eax, dword [rbp + 0x408]
mov dword [rsp + 0x44], eax
mov r15d, dword [rbp + 0x410]
mov dword [rsp + 0x40], r15d
mov r12, qword [rbp + 0x418]
mov rdi, qword [rbp + 0x420]
mov rsi, qword [rbp + 0x428]
test r12, r12
jne 0x140004da9
test rsi, rsi
je 0x140004d9f
lea rdx, str.dumpFileName_is_null_n
mov rcx, rsi
call fcn.14000110e
mov eax, 0x80070057
jmp 0x1400051b0
xor r14d, r14d
mov qword [rsp + 0x48], r14
mov qword [rsp + 0x60], r14
mov qword [rsp + 0x68], r14
xor edx, edx
mov r8d, 0x208
lea rcx, [rbp + 0x190]
call sub.VCRUNTIME140.dll_memset
lea rbx, [rbp + 0x190]
mov r8, r12
mov edx, 0x104
lea rcx, [rbp + 0x190]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcscpy_s]
lea edx, [r14 + 0x5c]
lea rcx, [rbp + 0x190]
call sub.VCRUNTIME140.dll_wcsrchr
test rax, rax
je 0x140004e1e
cmp word [rbp + 0x190], 0x5c
jne 0x140004e18
cmp word [rbp + 0x192], 0x5c
jne 0x140004e18
add rax, 2
mov word [rax], r14w
jmp 0x140004e21
mov rbx, r14
lea r9, [rsp + 0x68]
lea r8, [rsp + 0x60]
lea rdx, [rsp + 0x48]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
xor edx, edx
mov r8d, 0x208
lea rcx, [rbp - 0x80]
call sub.VCRUNTIME140.dll_memset
mov rax, qword [rsp + 0x68]
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x60]
mov qword [rsp + 0x20], rax
mov r9, qword [rsp + 0x48]
mov r8, rbx
lea rdx, str.Disk_space__s__Free_Bytes_Available__zd___Total_Number_Of_Bytes__zd___Total_Number_Of_Free_Bytes__zd__n
lea rcx, [rbp - 0x80]
call fcn.140001104
cmp eax, 0xffffffff
je 0x140004e95
lea rcx, [rbp - 0x80]
call fcn.140001023
test rsi, rsi
je 0x140004e95
lea rdx, [rbp - 0x80]
mov rcx, rsi
call fcn.14000110e
mov r9d, r15d
mov r8, r12
lea rdx, str.Writing_dump_file:__s__type:0x_08x__n
lea rcx, [rbp - 0x80]
call fcn.140001104
cmp eax, 0xffffffff
je 0x140004eca
lea rcx, [rbp - 0x80]
call fcn.140001023
test rsi, rsi
je 0x140004eca
lea rdx, [rbp - 0x80]
mov rcx, rsi
call fcn.14000110e
mov qword [rsp + 0x30], r14
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 2
xor r9d, r9d
xor r8d, r8d
mov edx, 0xc0000000
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov rbx, rax
cmp rax, 0xffffffffffffffff
cmove rbx, r14
mov qword [rsp + 0x68], rbx
test rbx, rbx
jne 0x140004f44
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r14d, eax
test rsi, rsi
je 0x140004f2b
mov r9d, eax
mov r8, r12
lea rdx, str.Failed_to_create__s_Error:_0x_08x_n
mov rcx, rsi
call fcn.14000110e
test r14d, r14d
jle 0x14000519f
movzx r14d, r14w
or r14d, 0x80070000
jmp 0x14000519f
test rsi, rsi
je 0x140004f5b
mov r8, r12
lea rdx, str.Created__s_n
mov rcx, rsi
call fcn.14000110e
mov r13, r14
test rdi, rdi
je 0x140004f83
mov dword [rsp + 0x5c], r14d
mov eax, dword [rdi + 0x19f8]
mov dword [rsp + 0x50], eax
lea rax, [rdi + 0x210]
mov qword [rsp + 0x54], rax
lea r13, [rsp + 0x50]
lea rcx, str.dbghelp.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov rdi, rax
test rax, rax
jne 0x140004fc0
call qword [sym.imp.KERNEL32.dll_GetLastError]
test rsi, rsi
je 0x140004fb5
mov r8d, eax
lea rdx, str.Failed_to_load_dbghelp.dll_Error:_0x_08x_n
mov rcx, rsi
call fcn.14000110e
mov r14d, 0x80070006
jmp 0x14000519f
test rsi, rsi
je 0x140004fd4
lea rdx, str.Loaded_dbghelp.dll_n
mov rcx, rsi
call fcn.14000110e
lea rdx, str.MiniDumpWriteDump
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rsp + 0x60], rax
test rax, rax
jne 0x140005027
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r14d, eax
test rsi, rsi
je 0x14000500e
mov r8d, eax
lea rdx, str.Failed_to_find_MiniDumpWriteDump_in_dbghelp.dll_Error:_0x_08x_n
mov rcx, rsi
call fcn.14000110e
test r14d, r14d
jle 0x14000519f
movzx r14d, r14w
or r14d, 0x80070000
jmp 0x14000519f
test rsi, rsi
je 0x14000503b
lea rdx, str.Found_MiniDumpWriteDump_in_dbghelp.dll_n
mov rcx, rsi
call fcn.14000110e
mov qword [rsp + 0x48], 0xffffffffffffffff
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rdi, rax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov dword [rsp + 0x30], r14d
mov dword [rsp + 0x28], r14d
mov dword [rsp + 0x20], 0x450
lea r9, [rsp + 0x48]
mov r8, rdi
mov rdx, qword [rsp + 0x70]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DuplicateHandle]
test eax, eax
jne 0x14000509c
call qword [sym.imp.KERNEL32.dll_GetLastError]
test rsi, rsi
je 0x14000509c
mov r8d, eax
lea rdx, str.Failed_DuplicateHandle_lastError:_0x_08x_n
mov rcx, rsi
call fcn.14000110e
mov r15, qword [rsp + 0x48]
cmp r15, 0xffffffffffffffff
cmove r15, r14
mov qword [rsp + 0x70], r15
test r15, r15
je 0x140005187
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x28], r14
mov qword [rsp + 0x20], r13
mov r9d, dword [rsp + 0x40]
mov r8, rbx
mov edx, dword [rsp + 0x44]
mov rcx, r15
call qword [rsp + 0x60]
mov edi, eax
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_CloseHandle]
test edi, edi
jne 0x140005110
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
test rsi, rsi
je 0x14000519c
mov r8d, eax
lea rdx, str.Failed_MiniDumpWriteDump_hresultError:_0x_08x_n
mov rcx, rsi
call fcn.14000110e
jmp 0x14000519c
test rsi, rsi
je 0x140005124
lea rdx, str.MiniDumpWriteDump_completed__n
mov rcx, rsi
call fcn.14000110e
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_FlushFileBuffers]
test eax, eax
jne 0x14000515f
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
test rsi, rsi
je 0x140005150
mov r8d, eax
lea rdx, str.Failed_flush_file_buffers_Error:_0x_08x_n
mov rcx, rsi
call fcn.14000110e
test edi, edi
jle 0x14000519c
movzx edi, di
or edi, 0x80070000
jmp 0x14000519c
test rsi, rsi
je 0x14000519f
lea rdx, str.Flushed_file_buffers_n
mov rcx, rsi
call fcn.14000110e
mov r8, r12
lea rdx, str.Dump_completed_successfully:__s_n
mov rcx, rsi
call fcn.14000110e
jmp 0x14000519f
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
test eax, eax
jle 0x14000519c
movzx edi, ax
or edi, 0x80070000
mov r14d, edi
test rbx, rbx
je 0x1400051ad
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, r14d
mov rcx, qword [rbp + 0x3a0]
xor rcx, rsp
call fcn.1400011b3
add rsp, 0x4b8
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret