CmpGetVolumeLogFileSizeCap
UINT64 __stdcall CmpGetVolumeLogFileSizeCap(PVOID Handle){
UINT64 result;
unsigned __int64 v2;
struct _IO_STATUS_BLOCK IoStatusBlock;
__int128 FsInformation;
__int64 v5;
v5 = 0i64;
FsInformation = 0i64;
IoStatusBlock = 0i64;
if( ZwQueryVolumeInformationFile(Handle, &IoStatusBlock, &FsInformation, 0x18u, FileFsSizeInformation) < 0 )
return 0x2000000i64;
result = 0x2000000i64;
v2 = ((unsigned __int64)FsInformation * (unsigned int)v5 * (unsigned __int64)HIDWORD(v5)) >> 11;
if( (unsigned int)v2 < 0x2000000 )
{
result = (unsigned int)v2;
if( (unsigned int)v2 <= 0x80000 )
return 0x80000i64;
}
return result;
}Referenced by:
CmpOpenHiveFile