Function at 0x40ee6c
Capabilities:
Get common file path
Get disk information
Get disk size

Disassembly:
sub esp, 0x42c
mov eax, dword [0x43b004]
xor eax, esp
mov dword [esp + 0x424], eax
push ebx
push ebp
push esi
push edi
push 1
call dword [sym.imp.KERNEL32.dll_SetErrorMode]
xor eax, eax
mov esi, 0x206
push esi
push eax
mov word [esp + 0x28], ax
lea eax, [esp + 0x2a]
push eax
call fcn.004162b0
add esp, 0xc
lea eax, [esp + 0x20]
mov ebx, 0x104
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_GetLogicalDriveStringsW]
shr eax, 2
mov dword [0x43d1ac], eax
xor eax, eax
push esi
push eax
mov word [esp + 0x230], ax
lea eax, [esp + 0x232]
push eax
call fcn.004162b0
add esp, 0xc
lea eax, [esp + 0x228]
push ebx
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
and dword [esp + 0x18], 0
cmp dword [0x43d1ac], 0
mov dword [esp + 0x1c], eax
jle 0x40f0eb
mov ebx, dword [sym.imp.SHLWAPI.dll_StrCpyW]
lea eax, [esp + 0x20]
mov edi, 0x43d458
mov dword [esp + 0x14], eax
lea eax, [edi - 0x208]
push 0x4355cc
push eax
call ebx
push dword [esp + 0x14]
and dword [edi], 0
lea esi, [edi + 8]
and dword [edi + 4], 0
lea ebp, [edi - 0x2a8]
and dword [esi], 0
and dword [esi + 4], 0
push ebp
call ebx
push ebp
call dword [sym.imp.KERNEL32.dll_GetDriveTypeW]
cmp dword [esp + 0x1c], 0
mov dword [edi + 0x13c], eax
je 0x40f030
cmp eax, 3
jne 0x40f039
mov ax, word [ebp]
cmp ax, word [esp + 0x228]
jne 0x40ef79
mov dword [edi + 0x13c], 0x6f
xor eax, eax
push eax
push eax
push eax
push eax
push eax
push 0x104
lea eax, [edi - 0x208]
push eax
push ebp
call dword [sym.imp.KERNEL32.dll_GetVolumeInformationW]
push esi
push edi
push 0
push ebp
call dword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
push dword [edi + 4]
push dword [edi]
call fcn.0040ed03
pop ecx
pop ecx
push eax
lea eax, [edi + 0x10]
push eax
call ebx
push dword [esi + 4]
push dword [esi]
call fcn.0040ed03
pop ecx
pop ecx
push eax
lea eax, [edi + 0x74]
push eax
call ebx
push 0x4358d8
lea esi, [edi - 0x26c]
push esi
call ebx
push ebp
push esi
call dword [sym.imp.SHLWAPI.dll_StrCatW]
push 0x5d
pop eax
mov word [edi - 0x264], ax
movzx eax, word [edi - 0x268]
push eax
call fcn.004194fa
mov word [edi - 0x268], ax
mov eax, dword [edi + 0x13c]
pop ecx
cmp eax, 4
ja 0x40f095
je 0x40f08e
sub eax, 0
je 0x40f087
sub eax, 1
je 0x40f080
sub eax, 1
je 0x40f079
sub eax, 1
jne 0x40f0cb
mov edx, 0x436334
jmp 0x40f0b7
cmp eax, 3
je 0x40ef79
cmp eax, 5
je 0x40ef79
cmp eax, 0x6f
je 0x40ef79
mov edx, 0x4372dc
mov ecx, 0x435f1c
call fcn.00414a37
push eax
lea eax, [edi - 0x208]
push eax
call ebx
mov esi, 0x4372e4
lea eax, [edi + 0x74]
push esi
push eax
call ebx
push esi
lea eax, [edi + 0x10]
jmp 0x40efc1
mov edx, 0x43631c
jmp 0x40f0b7
mov edx, 0x4365c0
jmp 0x40f0b7
mov edx, 0x4371f8
jmp 0x40f0b7
mov edx, 0x43632c
jmp 0x40f0b7
sub eax, 5
je 0x40f0b2
sub eax, 1
je 0x40f0ab
sub eax, 0x69
jne 0x40f0cb
mov edx, 0x4372f0
jmp 0x40f0b7
mov edx, 0x4365b8
jmp 0x40f0b7
mov edx, 0x4372e8
mov ecx, 0x435f1c
call fcn.00414a37
push eax
lea eax, [edi + 0xd8]
push eax
call ebx
mov eax, dword [esp + 0x18]
add edi, 0x3e8
add dword [esp + 0x14], 8
inc eax
mov dword [esp + 0x18], eax
cmp eax, dword [0x43d1ac]
jl 0x40ef14
push 0
call dword [sym.imp.KERNEL32.dll_SetErrorMode]
mov ecx, dword [esp + 0x434]
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.00415673
add esp, 0x42c
ret