Function at 0x415cb0
Capabilities:
Get disk information
Get disk size

Disassembly:
mov eax, dword [esp + 0x10]
sub esp, 0x274
push ebx
push ebp
xor ebx, ebx
cmp eax, ebx
push esi
push edi
je 0x415cd5
mov esi, dword [esp + 0x288]
cmp esi, ebx
mov dword [eax], ebx
je 0x415cd5
cmp byte [esi], bl
jne 0x415ceb
push 0x57
call fcn.00411cb0
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0x274
ret 0x18
call fcn.004159c0
push 0x104
push esi
lea eax, [esp + 0x84]
push eax
call fcn.00410330
lea ecx, [esp + 0x7c]
mov byte [esp + 0x17f], bl
call fcn.004158e0
test eax, eax
jne 0x415d64
cmp byte [esi], 0x5c
je 0x415d51
mov edi, dword [sym.imp.MSVCRT.dll_strstr]
push 0x43a8cc
push esi
call edi
add esp, 8
test eax, eax
jne 0x415d51
push 0x43a8c8
push esi
call edi
add esp, 8
test eax, eax
jne 0x415d51
push ebx
lea edx, [esp + 0x80]
mov ecx, esi
call fcn.004158f0
jmp 0x415d64
push 0x104
push esi
lea ecx, [esp + 0x84]
push ecx
call fcn.00410330
push 4
lea edx, [esp + 0x80]
push edx
lea eax, [esp + 0x18]
push eax
call fcn.00410330
lea ecx, [esp + 0x10]
push ecx
call dword [sym.imp.KERNEL32.dll_GetDriveTypeA]
push 0x104
mov esi, eax
xor eax, eax
mov ecx, 0x41
lea edi, [esp + 0x184]
rep stosd dword es:[edi], eax
lea edx, [esp + 0x184]
push edx
lea eax, [esp + 0x1c]
push eax
push ebx
push ebx
push ebx
push ebx
lea ecx, [esp + 0x2c]
push ecx
mov dword [esp + 0x34], ebx
call dword [sym.imp.KERNEL32.dll_GetVolumeInformationA]
test eax, eax
jne 0x415dc4
mov dword [esp + 0x10], ebx
jmp 0x415e3c
lea edx, [esp + 0x20]
push edx
lea eax, [esp + 0x1c]
push eax
lea ecx, [esp + 0x24]
push ecx
lea edx, [esp + 0x30]
push edx
lea eax, [esp + 0x20]
push eax
mov dword [esp + 0x38], ebx
mov dword [esp + 0x30], ebx
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x34], ebx
call dword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceA]
test eax, eax
jne 0x415dfd
mov dword [esp + 0x10], ebx
jmp 0x415e3c
mov eax, dword [esp + 0x14]
mov edx, dword [esp + 0x180]
mov ecx, dword [esp + 0x18]
mov ebp, dword [esp + 0x1c]
and eax, 4
xor eax, edx
xor eax, ecx
xor eax, ebp
xor eax, esi
mov ecx, eax
shr ecx, 0x10
xor ecx, eax
cmp cx, 0x1f00
je 0x415e34
cmp cx, 0x805
mov dword [esp + 0x10], ebx
jne 0x415e3c
mov dword [esp + 0x10], 1
mov eax, dword [esp + 0x290]
test al, 1
je 0x415e63
cmp dword [esp + 0x10], ebx
jne 0x415e63
push 0xf
call fcn.00411cb0
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0x274
ret 0x18
and eax, 0x10
je 0x415f3e
cmp eax, 0x10
jne 0x415f7e
mov eax, dword [esp + 0x29c]
mov edx, dword [esp + 0x298]
lea ecx, [esp + 0x7c]
mov dword [esp + 0x48], ecx
mov dword [esp + 0x2c], eax
mov eax, 0x1000
lea ecx, [esp + 0x48]
push ebx
push ecx
mov dword [esp + 0x54], 0x80000000
mov dword [esp + 0x58], 1
mov dword [esp + 0x5c], 3
mov dword [esp + 0x60], 0x80
mov dword [esp + 0x30], edx
mov dword [esp + 0x38], eax
mov dword [esp + 0x6c], ebx
mov dword [esp + 0x70], ebx
mov dword [esp + 0x74], eax
mov dword [esp + 0x78], 4
mov byte [esp + 0x7c], bl
call fcn.00419240
mov esi, eax
add esp, 8
cmp esi, ebx
je 0x415f7e
lea edx, [esp + 0x28]
push esi
push edx
call fcn.00418fe0
mov ebp, eax
add esp, 8
cmp ebp, ebx
jne 0x415f16
mov ecx, esi
call fcn.0040af90
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0x274
ret 0x18
lea eax, [esp + 0x64]
push ebp
push eax
call fcn.004183b0
add esp, 8
cmp eax, ebx
jne 0x415f78
mov ecx, ebp
call fcn.0040af90
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0x274
ret 0x18
lea edx, [esp + 0x34]
lea ecx, [esp + 0x7c]
push ebx
push edx
mov dword [esp + 0x3c], ecx
mov dword [esp + 0x40], 0x80000000
mov dword [esp + 0x44], 1
mov dword [esp + 0x48], 3
mov dword [esp + 0x4c], 0x80
call fcn.00419240
add esp, 8
cmp eax, ebx
je 0x415f7e
mov edi, eax
cmp edi, ebx
jne 0x415f8d
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0x274
ret 0x18
push 0x443018
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
push 8
push 0xfffffffffffffffe
push 0x43a8e0
push 0x29c
call fcn.0040e9d0
mov esi, eax
cmp esi, ebx
je 0x416015
mov ecx, esi
call fcn.00417600
mov ebp, dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
lea eax, [esi + 8]
push eax
call ebp
lea ecx, [esi + 0x20]
push ecx
call ebp
inc dword [esi + 0x38]
push 0x443018
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
push 0x104
lea edx, [esp + 0x80]
push edx
lea eax, [esi + 0x3c]
push eax
call fcn.00410330
mov ebp, dword [esp + 0x10]
cmp ebp, ebx
mov ecx, dword [esp + 0x28c]
mov dword [esi + 0x140], edi
mov dword [esi + 0x148], ecx
je 0x416019
mov dword [esi + 0x298], 3
jmp 0x416035
xor esi, esi
jmp 0x415fcd
test byte [esp + 0x290], 2
je 0x41602f
mov dword [esi + 0x298], 1
jmp 0x416035
mov dword [esi + 0x298], ebx
mov edx, dword [esp + 0x290]
shr edx, 2
and edx, 1
lea ecx, [esp + 0x5c]
mov dword [esi + 0x144], edx
mov eax, dword [edi]
push ecx
mov ecx, edi
call dword [eax + 0x10]
mov eax, dword [esp + 0x294]
mov dword [esi + 0x27c], ebx
mov edx, dword [esp + 0x5c]
push eax
mov dword [esi + 0x280], edx
mov edx, dword [esp + 0x294]
push ebp
mov ecx, esi
mov dword [esi + 0x294], ebx
call fcn.00416090
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x274
ret 0x18