Function at 0x41a2a0
Capabilities:
Get disk information
Get disk size
Get storage device properties
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff0
sub esp, 0x3a0
mov esi, dword [edx + 4]
mov edi, edx
mov ebx, ecx
push esi
call sub.kernel32.dll_GetDriveTypeW
mov ecx, eax
and ecx, 0xfffffffe
cmp ecx, 2
jne 0x41a538
mov dword [esp], ebx
mov dword [esp + 8], eax
lea ebx, [esp + 0x192]
push 0x20a
push 0
push ebx
call sub.msvcrt.dll_memset
add esp, 0xc
xorps xmm0, xmm0
mov dword [esp + 0x38], 0
lea ecx, [esp + 0x40]
lea eax, [esp + 0x38]
movaps xmmword [esp + 0x70], xmm0
movaps xmmword [esp + 0x60], xmm0
movaps xmmword [esp + 0x50], xmm0
movaps xmmword [esp + 0x40], xmm0
push 0x20
push ecx
push eax
push 0
push 0
push 0x105
push ebx
push esi
call sub.kernel32.dll_GetVolumeInformationW
test eax, eax
je 0x41a503
mov eax, dword [esp + 0x38]
mov dword [esp + 0x34], edi
mov edi, dword [edi + 8]
mov dword [esp + 0xac], eax
lea eax, [esp + 0x88]
push edi
mov dword [esp + 0x10], esi
push esi
push eax
call fcn.00413600
add esp, 0xc
mov esi, dword [esp + 0x90]
mov ebx, dword [esp]
test esi, esi
je 0x41a54e
mov eax, edi
sub eax, 2
jb 0x41a99b
mov ecx, dword [esp + 0xc]
lea eax, [ecx + eax*2]
mov dword [esp + 0x138], ecx
lea ecx, [esp + 0x110]
mov dword [esp + 0x13c], eax
lea eax, [esp + 0x128]
mov dword [esp + 0x128], 1
mov dword [esp + 0x12c], 0
mov dword [esp + 0x130], 1
mov word [esp + 0x134], 0
push eax
push ecx
call fcn.004193d0
add esp, 8
mov edi, dword [esp + 0x114]
call fcn.00436790
push eax
push 0
push 3
push 0
push 3
push 0
push edi
call sub.kernel32.dll_CreateFileW
lea ecx, [eax - 1]
cmp ecx, 0xfffffffe
jae 0x41a5aa
mov dword [esp + 4], eax
mov eax, dword [esp + 0x8c]
lea edx, [esp + 0x20]
lea ecx, [esp + 0x10]
mov dword [esp + 0x30], eax
mov eax, dword [eax + 4]
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0x24], 0
mov dword [esp + 0x20], 0
push edx
push ecx
push 0
push eax
call sub.kernel32.dll_GetDiskFreeSpaceExW
test eax, eax
je 0x41a5f5
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
mov eax, ecx
or eax, edx
je 0x41a627
mov eax, dword [esp + 0x20]
xorps xmm0, xmm0
mov dword [esp + 0xa4], edx
mov dword [esp + 0xa8], ecx
mov dword [esp + 0x11c], 7
mov dword [esp + 0x120], 0
mov byte [esp + 0x124], 0
mov dword [esp + 0x108], 0
mov dword [esp + 0x3c], 0
lea ecx, [esp + 0x100]
lea edx, [esp + 0x11c]
movsd qword [esp + 0x100], xmm0
mov dword [esp + 0xa0], eax
mov eax, dword [esp + 0x24]
mov dword [esp + 0x9c], eax
lea eax, [esp + 0x3c]
push 0
push eax
push 0xc
push ecx
push 0xc
push edx
push 0x2d1400
push dword [esp + 0x20]
call sub.kernel32.dll_DeviceIoControl
test eax, eax
je 0x41a6c2
cmp dword [esp + 0x3c], 0xc
mov eax, 2
jne 0x41a6f9
xor eax, eax
cmp byte [esp + 0x108], 0
sete al
jmp 0x41a6f9
call fcn.00447f20
mov ebx, dword [esp]
test edx, edx
mov dword [esp + 0xb4], eax
mov dword [esp + 0xb8], edx
mov dword [esp + 0xb0], 1
je 0x41a538
lea eax, [esp + 0xb8]
push eax
call fcn.00447ed0
add esp, 4
mov dword [ebx], 0
mov dword [ebx + 4], 8
mov dword [ebx + 8], 0
jmp 0x41a58e
mov edi, dword [esp + 0x8c]
mov dword [ebx], 0
mov dword [ebx + 4], 8
mov dword [ebx + 8], 0
mov eax, dword [esp + 0x88]
mov esi, dword [esp + 0xc]
test eax, eax
je 0x41a58a
shl eax, 2
lea eax, [eax + eax*2]
push 4
push eax
push edi
call fcn.0040d1e0
add esp, 0xc
mov edi, dword [esp + 0x34]
mov eax, dword [edi]
test eax, eax
je 0x41a5a2
add eax, eax
push 2
push eax
push esi
call fcn.0040d1e0
add esp, 0xc
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
call fcn.00447f20
test edx, edx
mov dword [esp + 0xb8], edx
mov dword [esp + 0xb4], eax
mov dword [esp + 0xb0], 1
je 0x41a5dc
lea eax, [esp + 0xb8]
push eax
call fcn.00447ed0
add esp, 4
mov dword [ebx], 0
mov dword [ebx + 4], 8
mov dword [ebx + 8], 0
jmp 0x41a67a
call fcn.00447f20
test edx, edx
mov dword [esp + 0xb4], eax
mov dword [esp + 0xb8], edx
mov dword [esp + 0xb0], 1
je 0x41a627
lea eax, [esp + 0xb8]
push eax
call fcn.00447ed0
add esp, 4
mov dword [ebx], 0
mov dword [ebx + 4], 8
mov dword [ebx + 8], 0
push dword [esp + 4]
call sub.kernel32.dll_CloseHandle
test eax, eax
jne 0x41a67a
call fcn.00447f20
test edx, edx
mov dword [esp + 0xb4], eax
mov dword [esp + 0xb8], edx
mov dword [esp + 0xb0], 1
je 0x41a67a
lea eax, [esp + 0xb8]
push eax
call fcn.00447ed0
add esp, 4
mov eax, dword [esp + 0x110]
test eax, eax
je 0x41a693
add eax, eax
push 2
push eax
push edi
call fcn.0040d1e0
add esp, 0xc
mov edi, dword [esp + 0x8c]
lea ebx, [edi + 4]
jmp 0x41a6aa
add ebx, 0xc
dec esi
je 0x41a569
mov eax, dword [ebx - 4]
test eax, eax
je 0x41a6a0
add eax, eax
push 2
push eax
push dword [ebx]
call fcn.0040d1e0
add esp, 0xc
jmp 0x41a6a0
call fcn.00447f20
test edx, edx
mov dword [esp + 0xb4], eax
mov dword [esp + 0xb8], edx
mov dword [esp + 0xb0], 1
je 0x41a6f4
lea eax, [esp + 0xb8]
push eax
call fcn.00447ed0
add esp, 4
mov eax, 2
mov dword [esp + 0x98], eax
xor ecx, ecx
mov edx, 0x20a
lea eax, [esp + 0x148]
nop
cmp word [esp + ecx*2 + 0x192], 0
je 0x41a726
inc ecx
add edx, 0xfffffffe
jne 0x41a710
mov ecx, 0x105
push ecx
lea ecx, [esp + 0x196]
push ecx
push eax
call fcn.00491170
add esp, 0xc
cmp word [esp + 0x40], 0
lea eax, [esp + 0x158]
mov ecx, 0
mov dword [esp + 0x2c], 0
je 0x41a9d9
cmp word [esp + 0x42], 0
je 0x41a8d3
cmp word [esp + 0x44], 0
je 0x41a8dd
cmp word [esp + 0x46], 0
je 0x41a8e7
cmp word [esp + 0x48], 0
je 0x41a8f1
cmp word [esp + 0x4a], 0
je 0x41a8fb
cmp word [esp + 0x4c], 0
je 0x41a905
cmp word [esp + 0x4e], 0
je 0x41a90f
cmp word [esp + 0x50], 0
je 0x41a919
cmp word [esp + 0x52], 0
je 0x41a923
cmp word [esp + 0x54], 0
je 0x41a92d
cmp word [esp + 0x56], 0
je 0x41a937
cmp word [esp + 0x58], 0
je 0x41a941
cmp word [esp + 0x5a], 0
je 0x41a94b
cmp word [esp + 0x5c], 0
je 0x41a955
cmp word [esp + 0x5e], 0
je 0x41a95c
cmp word [esp + 0x60], 0
je 0x41a963
cmp word [esp + 0x62], 0
je 0x41a96a
cmp word [esp + 0x64], 0
je 0x41a971
cmp word [esp + 0x66], 0
je 0x41a978
cmp word [esp + 0x68], 0
je 0x41a97f
cmp word [esp + 0x6a], 0
je 0x41a986
cmp word [esp + 0x6c], 0
je 0x41a98d
cmp word [esp + 0x6e], 0
je 0x41a994
cmp word [esp + 0x70], 0
je 0x41a9a7
cmp word [esp + 0x72], 0
je 0x41a9ae
cmp word [esp + 0x74], 0
je 0x41a9b5
cmp word [esp + 0x76], 0
je 0x41a9bc
cmp word [esp + 0x78], 0
je 0x41a9c3
cmp word [esp + 0x7a], 0
je 0x41a9ca
cmp word [esp + 0x7c], 0
je 0x41a9d1
cmp word [esp + 0x7e], 1
mov ecx, 0x20
sbb ecx, 0
jmp 0x41a9d6
mov ecx, 1
jmp 0x41a9d9
mov ecx, 2
jmp 0x41a9d9
mov ecx, 3
jmp 0x41a9d9
mov ecx, 4
jmp 0x41a9d9
mov ecx, 5
jmp 0x41a9d9
mov ecx, 6
jmp 0x41a9d9
mov ecx, 7
jmp 0x41a9d9
mov ecx, 8
jmp 0x41a9d9
mov ecx, 9
jmp 0x41a9d9
mov ecx, 0xa
jmp 0x41a9d9
mov ecx, 0xb
jmp 0x41a9d9
mov ecx, 0xc
jmp 0x41a9d9
mov ecx, 0xd
jmp 0x41a9d6
mov ecx, 0xe
jmp 0x41a9d6
mov ecx, 0xf
jmp 0x41a9d6
mov ecx, 0x10
jmp 0x41a9d6
mov ecx, 0x11
jmp 0x41a9d6
mov ecx, 0x12
jmp 0x41a9d6
mov ecx, 0x13
jmp 0x41a9d6
mov ecx, 0x14
jmp 0x41a9d6
mov ecx, 0x15
jmp 0x41a9d6
mov ecx, 0x16
jmp 0x41a9d6
mov ecx, 0x17
jmp 0x41a9d6
push 0x537fdc
push edi
push eax
call fcn.004e1cd0
mov ecx, 0x18
jmp 0x41a9d6
mov ecx, 0x19
jmp 0x41a9d6
mov ecx, 0x1a
jmp 0x41a9d6
mov ecx, 0x1b
jmp 0x41a9d6
mov ecx, 0x1c
jmp 0x41a9d6
mov ecx, 0x1d
jmp 0x41a9d6
mov ecx, 0x1e
mov ebx, dword [esp]
mov dword [esp + 0x94], edi
push ecx
lea ecx, [esp + 0x44]
push ecx
push eax
call fcn.00491170
add esp, 0xc
mov ecx, dword [esp + 0x30]
mov eax, dword [esp + 0xac]
mov dword [esp + 0x180], ecx
mov ecx, dword [esp + 0x98]
shr eax, 0x13
and al, 1
cmp dword [esp + 8], 2
mov dword [esp + 0x140], ecx
mov ecx, dword [esp + 0xa4]
mov dword [esp + 0x144], 0xffffffff
mov dword [esp + 0x16c], ecx
mov ecx, dword [esp + 0xa8]
mov dword [esp + 0x168], ecx
mov ecx, dword [esp + 0x9c]
mov dword [esp + 0x174], ecx
mov ecx, dword [esp + 0xa0]
mov dword [esp + 0x170], ecx
mov ecx, dword [esp + 0x88]
sete byte [esp + 0x178]
imul edi, esi, 0x58
cmp esi, 0x1745d17
mov byte [esp + 0x179], al
ja 0x41aba7
test edi, edi
mov dword [esp], ecx
js 0x41aba7
mov eax, dword [0x55bd94]
movzx eax, byte [eax]
push 8
push edi
call fcn.0040d1d0
add esp, 8
test eax, eax
je 0x41ab9f
mov edx, dword [esp + 0x30]
lea ecx, [esi + esi*2]
mov dword [esp + 0x10], esi
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], 0
lea edi, [esp + 0xb0]
lea esi, [esp + 0x140]
lea ecx, [edx + ecx*4]
mov dword [esp + 8], ecx
mov ecx, 0x11
rep movsd dword es:[edi], dword [esi]
mov dword [esp + 0xf4], edx
lea edx, [esp + 0x18]
mov ecx, dword [esp]
mov esi, dword [esp + 8]
mov dword [esp + 0x20], edx
mov dword [esp + 0x24], 0
mov dword [esp + 0x28], eax
lea eax, [esp + 0x20]
mov dword [esp + 0xf8], ecx
mov dword [esp + 0xfc], esi
push eax
lea eax, [esp + 0xb4]
push eax
call fcn.00410620
add esp, 8
mov eax, dword [esp + 0x18]
movsd xmm0, qword [esp + 0x10]
mov dword [ebx + 8], eax
movsd qword [ebx], xmm0
push dword [esp + 4]
call sub.kernel32.dll_CloseHandle
test eax, eax
jne 0x41ab6f
call fcn.00447f20
test edx, edx
mov dword [esp + 0xb4], eax
mov dword [esp + 0xb8], edx
mov dword [esp + 0xb0], 1
je 0x41ab6f
lea eax, [esp + 0xb8]
push eax
call fcn.00447ed0
add esp, 4
mov eax, dword [esp + 0x110]
mov esi, dword [esp + 0xc]
mov edi, dword [esp + 0x34]
test eax, eax
je 0x41a58e
add eax, eax
push 2
push eax
push dword [esp + 0x9c]
call fcn.0040d1e0
add esp, 0xc
jmp 0x41a58e
mov dword [esp + 0x2c], 8
push edi
push dword [esp + 0x30]
call fcn.004d09f0
nop word cs:[eax + eax]
nop dword [eax + eax]