Function at 0x427e00
Capabilities:
Get disk information
Get disk information via ioctl
Get disk size

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4c6ce1
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
sub esp, 0x5f4
mov eax, dword [0x4fb770]
mov dword [ebp - 0x40], eax
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x600], ecx
push 0
mov ecx, dword [ebp - 0x600]
add ecx, 0x1cd4
call fcn.004795a0
mov ecx, dword [ebp - 0x600]
call fcn.004283e0
lea eax, [ebp - 0x140]
mov dword [ebp - 0x24], eax
lea ecx, [ebp - 0x140]
push ecx
push 0x80
call dword [sym.imp.KERNEL32.dll_GetLogicalDriveStringsW]
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0
jle 0x4282cf
mov edx, dword [ebp - 0x24]
lea eax, [ebp - 0x140]
sub edx, eax
sar edx, 1
cmp edx, dword [ebp - 0x2c]
jge 0x4282a5
mov ecx, dword [ebp - 0x24]
push ecx
lea ecx, [ebp - 0x14c]
call fcn.00401e40
mov dword [ebp - 4], 0
mov edx, dword [ebp - 0x14c]
mov eax, dword [edx - 0xc]
mov dword [ebp - 0x5b0], eax
mov ecx, dword [ebp - 0x5b0]
mov edx, dword [ebp - 0x24]
lea eax, [edx + ecx*2 + 2]
mov dword [ebp - 0x24], eax
mov ecx, dword [ebp - 0x14c]
push ecx
call dword [sym.imp.KERNEL32.dll_GetDriveTypeW]
cmp eax, 3
je 0x427eea
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x14c]
call fcn.0044f730
jmp 0x427e79
push 0
push 0x5c
lea ecx, [ebp - 0x14c]
call fcn.004317f0
mov dword [ebp - 0x144], eax
mov dword [ebp - 0x164], 0xffffffff
cmp dword [ebp - 0x144], 0
jl 0x427f62
mov edx, dword [ebp - 0x144]
push edx
lea eax, [ebp - 0x58c]
push eax
lea ecx, [ebp - 0x14c]
call fcn.00419350
mov dword [ebp - 0x604], eax
mov ecx, dword [ebp - 0x604]
mov dword [ebp - 0x5c4], ecx
mov byte [ebp - 4], 1
mov edx, dword [ebp - 0x5c4]
push edx
lea ecx, [ebp - 0x14c]
call fcn.00402240
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x58c]
call fcn.0044f730
lea eax, [ebp - 0x14c]
push eax
push 0x4d293c
lea ecx, [ebp - 0x150]
push ecx
call fcn.00401950
add esp, 0xc
mov byte [ebp - 4], 2
push 0
push 0x20000080
push 3
push 0
push 3
push 0
mov edx, dword [ebp - 0x150]
push edx
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x160], eax
cmp dword [ebp - 0x160], 0xffffffff
je 0x42827f
push 0
lea eax, [ebp - 0x148]
push eax
push 0xc
lea ecx, [ebp - 0x15c]
push ecx
push 0
push 0
push 0x2d1080
mov edx, dword [ebp - 0x160]
push edx
call dword [sym.imp.KERNEL32.dll_DeviceIoControl]
test eax, eax
je 0x427fed
mov eax, dword [ebp - 0x158]
mov dword [ebp - 0x164], eax
jmp 0x42806e
lea ecx, [ebp - 0x568]
mov dword [ebp - 0x168], ecx
push 0
lea edx, [ebp - 0x148]
push edx
push 0x400
mov eax, dword [ebp - 0x168]
push eax
push 0
push 0
push 0x560000
mov ecx, dword [ebp - 0x160]
push ecx
call dword [sym.imp.KERNEL32.dll_DeviceIoControl]
test eax, eax
je 0x42806e
mov dword [ebp - 0x56c], 0
jmp 0x428043
mov edx, dword [ebp - 0x56c]
add edx, 1
mov dword [ebp - 0x56c], edx
mov eax, dword [ebp - 0x168]
mov ecx, dword [ebp - 0x56c]
cmp ecx, dword [eax]
jae 0x42806e
mov edx, dword [ebp - 0x56c]
imul edx, edx, 0x18
mov eax, dword [ebp - 0x168]
mov ecx, dword [eax + edx + 8]
mov dword [ebp - 0x164], ecx
jmp 0x428034
cmp dword [ebp - 0x164], 0
jl 0x42826b
push 0x80
call fcn.004ba59a
add esp, 4
mov dword [ebp - 0x590], eax
mov edx, dword [ebp - 0x590]
mov dword [ebp - 0x570], edx
push 0x80
push 0
mov eax, dword [ebp - 0x570]
push eax
call fcn.0049db40
add esp, 0xc
mov byte [ebp - 4], 3
xor ecx, ecx
jl 0x4280d0
mov edx, dword [ebp - 0x14c]
mov eax, dword [edx - 0xc]
mov dword [ebp - 0x5cc], eax
cmp dword [ebp - 0x5cc], 0
jge 0x4280da
push 0x80070057
call fcn.00401db0
xor ecx, ecx
shl ecx, 1
mov edx, dword [ebp - 0x14c]
mov ax, word [edx + ecx]
mov word [ebp - 0x5ce], ax
mov ecx, dword [ebp - 0x570]
mov dx, word [ebp - 0x5ce]
mov word [ecx + 2], dx
mov eax, dword [ebp - 0x570]
mov cl, byte [ebp - 0x164]
mov byte [eax], cl
push 0x4d2938
lea edx, [ebp - 0x14c]
push edx
lea eax, [ebp - 0x594]
push eax
call fcn.00401850
add esp, 0xc
mov dword [ebp - 0x5d4], eax
mov ecx, dword [ebp - 0x5d4]
mov edx, dword [ecx]
mov dword [ebp - 0x5d8], edx
push 0x14
mov eax, dword [ebp - 0x570]
add eax, 0x46
push eax
push 0
push 0
push 0
push 0x21
mov ecx, dword [ebp - 0x570]
add ecx, 4
push ecx
mov edx, dword [ebp - 0x5d8]
push edx
call dword [sym.imp.KERNEL32.dll_GetVolumeInformationW]
lea ecx, [ebp - 0x594]
call fcn.0044f730
push 0x4d2938
lea eax, [ebp - 0x14c]
push eax
lea ecx, [ebp - 0x59c]
push ecx
call fcn.00401850
add esp, 0xc
mov dword [ebp - 0x5e0], eax
mov edx, dword [ebp - 0x5e0]
mov eax, dword [edx]
mov dword [ebp - 0x5e4], eax
lea ecx, [ebp - 0x580]
push ecx
lea edx, [ebp - 0x578]
push edx
lea eax, [ebp - 0x588]
push eax
mov ecx, dword [ebp - 0x5e4]
push ecx
call dword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
mov dword [ebp - 0x598], eax
lea ecx, [ebp - 0x59c]
call fcn.0044f730
cmp dword [ebp - 0x598], 0
je 0x42820e
mov edx, dword [ebp - 0x570]
mov eax, dword [ebp - 0x588]
mov dword [edx + 0x70], eax
mov ecx, dword [ebp - 0x584]
mov dword [edx + 0x74], ecx
mov edx, dword [ebp - 0x570]
mov eax, dword [ebp - 0x578]
mov dword [edx + 0x78], eax
mov ecx, dword [ebp - 0x574]
mov dword [edx + 0x7c], ecx
mov edx, dword [ebp - 0x600]
add edx, 0x2148
mov dword [ebp - 0x5f0], edx
mov eax, dword [ebp - 0x5f0]
mov ecx, dword [eax + 8]
mov dword [ebp - 0x5ec], ecx
lea edx, [ebp - 0x570]
push edx
mov eax, dword [ebp - 0x5ec]
push eax
mov ecx, dword [ebp - 0x5f0]
call fcn.00431ee0
jmp 0x42826b
mov dword [ebp - 4], 2
mov eax, dword [ebp - 0x160]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x150]
call fcn.0044f730
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x14c]
call fcn.0044f730
jmp 0x427e79
mov ecx, dword [ebp - 0x600]
mov edx, dword [ecx + 0x2150]
mov dword [ebp - 0x5fc], edx
mov eax, dword [ebp - 0x5fc]
push eax
mov ecx, dword [ebp - 0x600]
add ecx, 0x1cd4
call fcn.004795a0
lea ecx, [ebp - 0x20]
push ecx
mov edx, dword [ebp - 0x600]
mov eax, dword [edx + 0x1c]
push eax
call dword [sym.imp.USER32.dll_GetWindowRect]
lea ecx, [ebp - 0x3c]
push ecx
mov edx, dword [ebp - 0x600]
mov eax, dword [edx + 0x1cf0]
push eax
call dword [sym.imp.USER32.dll_GetWindowRect]
push 0
push 0
mov ecx, dword [ebp - 0x600]
add ecx, 0x1cd4
call fcn.00471ab0
cdq
sub eax, edx
mov esi, eax
sar esi, 1
mov ecx, dword [ebp - 0x600]
add ecx, 0x1cd4
call fcn.00479a70
push eax
push 0
mov ecx, dword [ebp - 0x600]
add ecx, 0x1cd4
call fcn.00471ab0
add eax, esi
mov dword [ebp - 0x28], eax
mov ecx, dword [ebp - 0x30]
sub ecx, dword [ebp - 0x38]
mov edx, dword [ebp - 0x14]
sub edx, dword [ebp - 0x1c]
sub edx, ecx
add edx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x600]
mov dword [eax + 0xa8], edx
mov ecx, dword [ebp - 0x14]
sub ecx, dword [ebp - 0x1c]
mov edx, dword [ebp - 0x600]
cmp ecx, dword [edx + 0xa8]
jle 0x4283b6
mov eax, dword [ebp - 0x600]
mov ecx, dword [ebp - 0x1c]
add ecx, dword [eax + 0xa8]
mov dword [ebp - 0x14], ecx
mov edx, dword [ebp - 0x600]
mov dword [edx + 0xb4], 8
push 1
mov eax, dword [ebp - 0x14]
sub eax, dword [ebp - 0x1c]
push eax
mov ecx, dword [ebp - 0x18]
sub ecx, dword [ebp - 0x20]
push ecx
mov edx, dword [ebp - 0x1c]
push edx
mov eax, dword [ebp - 0x20]
push eax
mov ecx, dword [ebp - 0x600]
call fcn.004b9a2b
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov ecx, dword [ebp - 0x40]
call fcn.0049d184
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret