Function at 0x408045
Capabilities:
Get disk size
Hide graphical window

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
and esp, 0xfffffff8
mov eax, 0x1d0c
call fcn.00412ca0
mov eax, dword [0x413074]
xor eax, esp
mov dword [esp + 0x1d08], eax
mov edx, dword [ebp + 8]
xor eax, eax
push ebx
push esi
push edi
inc eax
mov dword [esp + 0x24], edx
xor esi, esi
mov dword [esp + 0x28], eax
push 0x60
mov ebx, eax
mov dword [esp + 0x24], esi
lea eax, [esp + 0x4c]
mov edi, ecx
push esi
push eax
call sub.msvcrt.dll_memset
add esp, 0xc
push esi
push esi
push ebx
push esi
call dword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapSetInformation]
push 0x401798
push esi
push esi
push esi
call dword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_CreateEventW]
mov esi, eax
mov dword [esp + 0x14], esi
test esi, esi
je 0x4080cd
call dword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
cmp eax, 0xb7
jne 0x4080cd
mov ecx, edi
call fcn.00407f3b
xor ebx, ebx
jmp 0x4086bb
mov dword [0x413518], edi
call dword [sym.imp.COMCTL32.dll_InitCommonControls]
call fcn.004087dc
mov dword [esp + 0x2c], eax
test eax, eax
js 0x4086aa
and dword [esp + 0x10], 0
lea eax, [esp + 0x1c]
and dword [esp + 0x1c], 0
lea edx, [esp + 0x10]
mov dword [0x413534], edi
mov edi, dword [esp + 0x24]
mov ecx, edi
push eax
call fcn.004079bb
test eax, eax
jne 0x408138
call fcn.00407945
test eax, eax
je 0x4086aa
push 0
push 0x4017d8
push 0x4017e8
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
jmp 0x4086aa
push ecx
lea edx, [esp + 0xac]
mov ecx, edi
call fcn.00407c94
mov dword [esp + 0x18], eax
neg eax
sbb eax, eax
and eax, 0x100
or eax, dword [esp + 0x10]
mov ecx, eax
mov dword [esp + 0x10], eax
call fcn.00407e15
cmp eax, 2
jne 0x40818f
test esi, esi
je 0x408179
push esi
call dword [sym.imp.api_ms_win_core_handle_l1_1_0.dll_CloseHandle]
xor eax, eax
mov dword [esp + 0x14], eax
mov edx, edi
push dword [ebp + 0xc]
call fcn.00407e7a
xor ebx, ebx
test eax, eax
setns bl
jmp 0x4086aa
cmp dword [esp + 0x18], 0
mov eax, dword [esp + 0x10]
jne 0x4081a5
test eax, 0x203
je 0x408297
test eax, 0x202
jne 0x408322
push ecx
push ecx
call fcn.004078e4
push 0x6e8
push 8
call dword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
push eax
call dword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
test eax, eax
je 0x408428
push dword [esp + 0x1c]
lea ecx, [esp + 0xac]
push dword [esp + 0x14]
push ecx
mov ecx, eax
call fcn.0040c196
mov edi, eax
test edi, edi
je 0x408428
cmp dword [edi + 0x6b0], 0
jne 0x4082e7
cmp dword [edi], 0x1a
jne 0x4082b4
cmp dword [edi + 0x670], 0
je 0x40823e
push 0xffffffffffffffff
push dword [edi + 0x66c]
mov dword [edi + 0x6b0], 1
call dword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_WaitForSingleObject]
push dword [edi + 0x66c]
call dword [sym.imp.api_ms_win_core_handle_l1_1_0.dll_CloseHandle]
and dword [edi + 0x6b0], 0
lea eax, [esp + 0xa8]
push eax
push 0x65
call fcn.00411b52
pop ecx
pop ecx
push 0x100
mov esi, eax
lea eax, [esp + 0x794]
push eax
push 0x13
push dword [0x413518]
call dword [sym.imp.USER32.dll_LoadStringW]
push 0x10030
lea eax, [esp + 0x794]
push eax
push esi
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
push esi
call dword [sym.imp.api_ms_win_core_heap_l2_1_0.dll_LocalFree]
mov ecx, edi
call fcn.0040c39e
mov ecx, edi
call fcn.00407798
lea ecx, [esp + 0xa8]
call fcn.00411b88
test eax, eax
je 0x4086aa
mov eax, dword [esp + 0x10]
jmp 0x4081a5
mov edx, edi
call fcn.00408e65
test eax, eax
je 0x4082e2
or dword [edi + 0x658], 0x80000000
test byte [esp + 0x10], 5
jne 0x4082e7
cmp dword [edi + 0x664], 0
je 0x4082e7
mov ecx, edi
call fcn.0040f92a
jmp 0x4082e7
and dword [esp + 0x28], 0
mov ebx, dword [edi + 0x654]
mov ecx, edi
call fcn.0040c39e
mov ecx, edi
call fcn.00407798
cmp ebx, 5
jne 0x408428
mov esi, dword [esp + 0x14]
test esi, esi
je 0x408319
push esi
call dword [sym.imp.api_ms_win_core_handle_l1_1_0.dll_CloseHandle]
xor eax, eax
mov dword [esp + 0x14], eax
mov edx, dword [esp + 0x24]
jmp 0x40817b
push 0x3a
pop ecx
mov word [esp + 0xb2], cx
push 0x5c
pop ecx
mov word [esp + 0xb4], cx
xor ecx, ecx
mov word [esp + 0xb6], cx
test eax, 0x200
je 0x408360
cmp dword [esp + 0x18], ecx
je 0x408360
movzx ecx, word [esp + 0xa8]
mov dword [esp + 0x18], ecx
movzx edi, cx
jmp 0x40836b
push 0x41
pop edi
mov dword [esp + 0x18], 0x5a
push 0x6e8
push 8
mov word [esp + 0xb8], di
call dword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
push eax
call dword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapAlloc]
test eax, eax
je 0x40841c
push dword [esp + 0x1c]
lea ecx, [esp + 0xb4]
push dword [esp + 0x14]
push ecx
mov ecx, eax
call fcn.0040c196
mov esi, eax
test esi, esi
je 0x40841c
cmp dword [esi + 0x6b0], 0
jne 0x4083c1
cmp dword [esi], 0x1a
je 0x4083c1
mov ecx, esi
call fcn.0040f92a
mov eax, dword [esi + 0x670]
test eax, eax
je 0x4083d4
push 0
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
cmp dword [esi + 0x670], 0
mov ebx, dword [esi + 0x654]
je 0x40840e
push 0xffffffffffffffff
push dword [esi + 0x66c]
mov dword [esi + 0x6b0], 1
call dword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_WaitForSingleObject]
push dword [esi + 0x66c]
call dword [sym.imp.api_ms_win_core_handle_l1_1_0.dll_CloseHandle]
and dword [esi + 0x6b0], 0
mov ecx, esi
call fcn.0040c39e
mov ecx, esi
call fcn.00407798
inc edi
cmp di, word [esp + 0x18]
jbe 0x40836b
push 0x4018a4
push 0x4018c0
push 0
call dword [sym.imp.SHLWAPI.dll_Ordinal_271]
test eax, eax
jne 0x4086aa
mov eax, dword [esp + 0x10]
test eax, 0x1200
jne 0x4086aa
cmp dword [esp + 0x28], 0
je 0x4086aa
test al, 0x18
je 0x4086aa
lea eax, [esp + 0x30]
push eax
lea eax, [esp + 0x3c]
push eax
lea eax, [esp + 0x48]
push eax
lea eax, [esp + 0xb4]
push eax
call dword [sym.imp.api_ms_win_core_file_l1_1_0.dll_GetDiskFreeSpaceExW]
mov esi, dword [esp + 0x30]
mov ecx, 0x32c
mov eax, dword [esp + 0x34]
shrd esi, eax, 0x14
mov eax, dword [esp + 0x10]
lea edi, [ecx + 0x12]
test al, 8
je 0x408567
cmp esi, 0x12c
jae 0x40850e
push ecx
lea eax, [esp + 0x13c]
push eax
push 0x4b1
push dword [0x413518]
call dword [sym.imp.USER32.dll_LoadStringW]
lea eax, [esp + 0x990]
push edi
push eax
cmp esi, 0x50
jae 0x4084d8
push 0x4b3
jmp 0x4084dd
push 0x4b2
push dword [0x413518]
call dword [sym.imp.USER32.dll_LoadStringW]
push 0x40
lea eax, [esp + 0xbc]
push eax
push 0x4b0
push dword [0x413518]
call dword [sym.imp.USER32.dll_LoadStringW]
mov edi, 0xffff
jmp 0x4085d6
push 0x40
lea eax, [esp + 0xbc]
push eax
push 0x4b6
push dword [0x413518]
call dword [sym.imp.USER32.dll_LoadStringW]
push 0x32c
lea eax, [esp + 0x13c]
push eax
push 0x4b8
push dword [0x413518]
call dword [sym.imp.USER32.dll_LoadStringW]
push edi
lea eax, [esp + 0x994]
push eax
push 0x4b7
push dword [0x413518]
call dword [sym.imp.USER32.dll_LoadStringW]
mov edi, dword [esp + 0x20]
jmp 0x4085d6
test al, 0x10
je 0x4085ca
lea eax, [esp + 0xb8]
push 0x40
push eax
cmp esi, 0x32
jae 0x408518
push 0x4b0
push dword [0x413518]
call dword [sym.imp.USER32.dll_LoadStringW]
push 0x32c
lea eax, [esp + 0x13c]
push eax
push 0x4b4
push dword [0x413518]
call dword [sym.imp.USER32.dll_LoadStringW]
push edi
lea eax, [esp + 0x994]
push eax
push 0x4b5
push dword [0x413518]
call dword [sym.imp.USER32.dll_LoadStringW]
mov edi, 0xfffe
jmp 0x4085d6
xor eax, eax
mov word [esp + 0x138], ax
mov edi, eax
cmp word [esp + 0x138], 0
je 0x408607
push esi
lea eax, [esp + 0xac]
push eax
lea eax, [esp + 0x140]
push eax
lea eax, [esp + 0x101c]
push 0x33e
push eax
call fcn.004076aa
add esp, 0x14
push 0x32c
lea eax, [esp + 0x13c]
push eax
push 0x4b9
push dword [0x413518]
call dword [sym.imp.USER32.dll_LoadStringW]
lea eax, [esp + 0x138]
push eax
lea eax, [esp + 0x994]
push eax
push 0x4018d4
lea eax, [esp + 0x169c]
push 0x33e
push eax
call fcn.004076aa
add esp, 0x14
mov dword [esp + 0x48], 0x60
lea eax, [esp + 0xb8]
mov dword [esp + 0x60], edi
mov dword [esp + 0x5c], eax
xor ecx, ecx
lea eax, [esp + 0x1010]
mov dword [esp + 0x9c], 0x408700
push 0
mov dword [esp + 0x68], eax
inc ecx
lea eax, [esp + 0x1694]
mov dword [esp + 0x5c], ecx
push 0
mov dword [esp + 0x70], eax
lea eax, [esp + 0x50]
push 0
push eax
mov dword [esp + 0x64], ecx
mov dword [esp + 0x84], ecx
call dword [sym.imp.COMCTL32.dll_Ordinal_345]
cmp dword [esp + 0x2c], 0
jne 0x4086b7
call dword [sym.imp.api_ms_win_core_com_l1_1_0.dll_CoUninitialize]
mov esi, dword [esp + 0x14]
and dword [0x413534], 0
call fcn.00407915
test esi, esi
je 0x4086d2
push esi
call dword [sym.imp.api_ms_win_core_handle_l1_1_0.dll_CloseHandle]
mov ecx, dword [esp + 0x1d14]
mov eax, ebx
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.004124d0
mov esp, ebp
pop ebp
ret 8