Function at 0x140021fe4
Capabilities:
Get disk size

Disassembly:
mov qword [rsp + 0x18], r8
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1f]
sub rsp, 0xa8
mov rbx, r8
mov rdi, rdx
mov r14, rcx
mov rcx, qword [0x1401720a0]
lea rax, [0x1401720a0]
cmp rcx, rax
je 0x14002203e
test byte [rcx + 0x1c], 1
je 0x14002203e
cmp byte [rcx + 0x19], 4
jb 0x14002203e
mov rcx, qword [rcx + 0x10]
lea r8, [0x14014be60]
mov edx, 0x1c5
call fcn.140004b74
xor r12d, r12d
cmp dword [r14 + 0x150], 1
mov eax, r12d
mov qword [rbp - 0x31], rax
mov r13d, r12d
mov qword [rbp - 0x41], rax
mov esi, r12d
mov qword [rbp + 0x7f], r12
mov r15d, r12d
mov qword [rbp - 0x49], r12
mov qword [rbp - 0x39], r12
mov qword [rbp - 0x21], r12
mov qword [rbp + 0x67], r12
mov qword [rbp - 0x29], r12
mov qword [rbp + 0x6f], r12
jne 0x140022093
lea r8, str.m_eMediaType___BLB_MT_SHINY
mov edx, 0x29c5
lea rcx, str.base_stor_blbengine_service_backup.cpp
call fcn.14008410c
test rdi, rdi
jne 0x1400220b0
lea r8, str.pVolumeContext
mov edx, 0x29c6
lea rcx, str.base_stor_blbengine_service_backup.cpp
call fcn.14008410c
test rbx, rbx
jne 0x1400220cd
lea r8, str.pwszRestoreAccessPath
mov edx, 0x29c7
lea rcx, str.base_stor_blbengine_service_backup.cpp
call fcn.14008410c
mov qword [rbx], r12
mov rax, qword [rdi + 0xd8]
mov qword [rbp - 0x19], rax
test rax, rax
jne 0x1400220f8
lea r8, str.pFileAsync
mov edx, 0x29cb
lea rcx, str.base_stor_blbengine_service_backup.cpp
call fcn.14008410c
lea rdx, [rbp - 0x21]
mov rcx, rdi
call fcn.1400136f4
mov ebx, eax
test eax, eax
js 0x140022242
lea r15, [rdi + 0xe0]
cmp qword [r15], r12
jne 0x14002238b
movups xmm0, xmmword [rdi + 0x44]
mov r8, qword [r14 + 0x1d8]
lea r9, [rbp + 0x7f]
mov edx, dword [rdi + 0x54]
lea rcx, [rbp - 9]
movdqu xmmword [rbp - 9], xmm0
call fcn.14010adb8
mov ebx, eax
test eax, eax
js 0x14002223e
test byte [rdi + 0x54], 0x10
jne 0x140022334
mov rcx, qword [r14 + 0x158]
lea r8, [rbp + 0x67]
lea rdx, [0x140149494]
call fcn.140084fcc
mov ebx, eax
test eax, eax
js 0x14002223e
xor edx, edx
lea rcx, [r14 + 0x28]
call fcn.1400f83ec
mov ebx, eax
test eax, eax
js 0x14002223e
mov rbx, qword [rbp + 0x67]
lea r9, [rbp + 7]
mov rcx, rbx
lea r8, [rbp + 0xf]
lea rdx, [rbp - 9]
call qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
test eax, eax
jne 0x1400221b1
mov rcx, rbx
call fcn.14012ebe0
mov ebx, eax
jmp 0x1400221b3
xor ebx, ebx
test ebx, ebx
js 0x14002223e
lea rcx, [r14 + 0x28]
call fcn.1400f8580
mov edx, dword [rdi + 0x54]
lea r8, [rbp - 0x49]
xor r9d, r9d
lea rcx, [rdi + 0x44]
call fcn.140087c2c
mov r13, qword [rbp - 0x49]
mov ebx, eax
test eax, eax
js 0x14002223e
lea rdx, [rbp - 0x29]
mov rcx, r13
call fcn.14008770c
mov ebx, eax
test eax, eax
js 0x14002223e
lea rdx, [rbp + 0x6f]
mov rcx, r13
call fcn.14012cc9c
mov r12, qword [rbp + 0x6f]
mov ebx, eax
test eax, eax
js 0x140022238
mov eax, dword [rdi + 0x40]
mov rcx, r14
mov r9, qword [rdi + 0x60]
mov r8, qword [rbp - 0x29]
mov rdx, qword [rbp + 0x7f]
mov qword [rsp + 0x38], r15
mov qword [rsp + 0x30], r12
mov dword [rsp + 0x28], eax
mov byte [rsp + 0x20], sil
call fcn.1400211ec
jmp 0x14002237f
mov r15, qword [rbp + 0x67]
jmp 0x140022246
mov r15, qword [rbp + 0x67]
mov r12, qword [rbp + 0x6f]
lea rcx, [r14 + 0x28]
call fcn.1400f8580
test ebx, ebx
jns 0x140022282
lea rcx, [r14 + 0x58]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
cmp dword [r14 + 0x20], 0
jl 0x140022278
mov ecx, 0x807800c5
xor eax, eax
cmp ebx, ecx
mov dword [r14 + 0x20], ecx
cmovne eax, ebx
mov dword [r14 + 0x24], eax
lea rcx, [r14 + 0x58]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
test r15, r15
je 0x140022290
mov rcx, r15
call qword [sym.imp.ole32.dll_CoTaskMemFree]
mov rcx, qword [rbp - 0x21]
test rcx, rcx
je 0x14002229f
call qword [sym.imp.ole32.dll_CoTaskMemFree]
mov rcx, qword [rbp + 0x7f]
test rcx, rcx
je 0x1400222ae
call qword [sym.imp.ole32.dll_CoTaskMemFree]
test rsi, rsi
je 0x1400222bc
mov rcx, rsi
call qword [sym.imp.ole32.dll_CoTaskMemFree]
test r13, r13
je 0x1400222ca
mov rcx, r13
call qword [sym.imp.ole32.dll_CoTaskMemFree]
mov rax, qword [rbp - 0x31]
test rax, rax
je 0x1400222dc
mov rcx, rax
call qword [sym.imp.ole32.dll_CoTaskMemFree]
test r12, r12
je 0x1400222ea
mov rcx, r12
call qword [sym.imp.ole32.dll_CoTaskMemFree]
mov rcx, qword [0x1401720a0]
lea rax, [0x1401720a0]
cmp rcx, rax
je 0x14002231e
test byte [rcx + 0x1c], 1
je 0x14002231e
cmp byte [rcx + 0x19], 4
jb 0x14002231e
mov rcx, qword [rcx + 0x10]
lea r8, [0x14014be60]
mov edx, 0x1c8
call fcn.140004b74
mov eax, ebx
add rsp, 0xa8
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
mov rcx, qword [0x1401720a0]
lea rax, [0x1401720a0]
cmp rcx, rax
je 0x14002236c
test byte [rcx + 0x1c], 1
je 0x14002236c
cmp byte [rcx + 0x19], 4
jb 0x14002236c
mov r9, qword [rbp + 0x7f]
lea r8, [0x14014be60]
mov rcx, qword [rcx + 0x10]
mov edx, 0x1c6
call fcn.140005afc
mov rdx, qword [rbp + 0x7f]
mov r8, r15
mov rcx, r14
call fcn.14002dd64
mov r12, qword [rbp + 0x6f]
mov ebx, eax
test eax, eax
js 0x140022238
jmp 0x14002238f
mov r12, qword [rbp + 0x6f]
mov rcx, qword [r15]
lea rdx, [rbp - 0x39]
call fcn.140084cd4
mov rsi, qword [rbp - 0x39]
mov ebx, eax
test eax, eax
js 0x140022238
mov rdx, qword [rdi + 0x60]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_SetVolumeLabelW]
test eax, eax
jne 0x140022410
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
mov rcx, qword [0x1401720a0]
lea rax, [0x1401720a0]
cmp rcx, rax
je 0x140022410
test byte [rcx + 0x1c], 1
je 0x140022410
cmp byte [rcx + 0x19], 3
jb 0x140022410
mov r9, qword [rdi + 0x60]
lea r8, [0x14014be60]
mov rcx, qword [rcx + 0x10]
movzx eax, dx
or eax, 0x80070000
test edx, edx
cmovle eax, edx
mov edx, 0x1c7
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rsi
call fcn.140005c9c
test rsi, rsi
jne 0x14002242d
lea r8, str.wszMountedVolume
mov edx, 0x2a44
lea rcx, str.base_stor_blbengine_service_backup.cpp
call fcn.14008410c
mov rcx, qword [rbp - 0x19]
mov rdx, rsi
call fcn.140082c50
mov ebx, eax
test eax, eax
js 0x140022238
lea rdx, [rbp - 0x41]
mov rcx, rsi
call fcn.140084cd4
mov r15, qword [rbp + 0x67]
mov ebx, eax
test eax, eax
mov rax, qword [rbp - 0x41]
js 0x14002246e
mov rcx, qword [rbp + 0x77]
and qword [rbp - 0x31], 0
mov qword [rcx], rax
jmp 0x140022246
mov qword [rbp - 0x31], rax
jmp 0x140022246