Function at 0x409c7c
Capabilities:
Get disk information
Get disk size

Disassembly:
push ebp
push ebx
mov edx, 0x44
sub esp, 4
mov dword [esp], 0
dec edx
jne 0x409c83
call fcn.00428a60
mov dword [esp + 0x90], 0
mov dword [esp + 0x94], 0
lea eax, [esp + 0xa0]
mov edx, 0x42c02e
push edx
push 3
push eax
call fcn.004289f0
push edx
call fcn.00428880
pop edx
push eax
push edx
call fcn.00428880
pop edx
push eax
push 0x28
call fcn.00426250
lea eax, [esp + 0xac]
push 0x28
push eax
call fcn.004289b0
push edx
call fcn.00428880
pop edx
push eax
push edx
call fcn.00428880
pop edx
push eax
push edx
call fcn.00428880
pop edx
push eax
push 0
push 0
push dword [esp + 0x130]
call fcn.00418c18
call fcn.004153d2
add dword [esp], edx
call fcn.00426360
call fcn.004153f0
mov ebx, eax
and ebx, ebx
jle 0x40a1c7
mov dword [esp + 0x94], 0
jmp 0x409d46
push dword [esp + 0x120]
call fcn.00418f65
mov ebx, eax
dec ebx
cmp ebx, dword [esp + 0x94]
jl 0x40a1c7
push edx
call fcn.00428880
pop edx
push eax
push edx
call fcn.00428880
pop edx
push eax
push 0
push 0
push dword [esp + 0x12c]
call fcn.00418c18
call fcn.00428b20
push edx
call fcn.00428880
pop edx
push eax
push edx
call fcn.00428880
pop edx
push eax
push 0
push dword [esp + 0xa4]
push dword [esp + 0x134]
call fcn.00418c18
call fcn.00415400
mov edx, eax
call fcn.00415400
mov ecx, eax
call fcn.00415410
je 0x40a1ba
push edx
call fcn.00428880
pop edx
push eax
push edx
call fcn.00428880
pop edx
push eax
push 0
push 0
push dword [esp + 0x12c]
call fcn.00418c18
mov edx, 0x42cc44
push edx
call fcn.00428950
lea eax, [esp + 0xa4]
push 3
push eax
call fcn.004289b0
push edx
call fcn.00428880
pop edx
push eax
push edx
call fcn.00428880
pop edx
push eax
push 0x104
call fcn.00426250
lea eax, [esp + 0x9c]
push eax
call fcn.004288c0
push edx
call fcn.00428880
pop edx
push eax
push edx
call fcn.00428880
pop edx
push eax
push 0x104
call fcn.00426250
lea eax, [esp + 0xa0]
push eax
call fcn.004288c0
push edx
call fcn.00428880
pop edx
push eax
push 0x104
mov eax, dword [esp + 0xa4]
push eax
push 0
push 0
push 0
push 0x104
mov eax, dword [esp + 0xb4]
push eax
lea edx, [esp + 0xc0]
push edx
call fcn.00428880
pop edx
push eax
push 3
push edx
call fcn.00428b50
call fcn.004153d2
add dword [esp], edx
call sub.KERNEL32.dll_GetVolumeInformationW
call fcn.004153f0
mov dword [esp + 0x90], eax
push edx
call fcn.00428880
pop edx
push eax
lea eax, [esp + 0x10c]
push eax
lea eax, [esp + 0x108]
push eax
lea eax, [esp + 0x104]
push eax
lea edx, [esp + 0xb0]
push edx
call fcn.00428880
pop edx
push eax
push 3
push edx
call fcn.00428b50
call fcn.004153d2
add dword [esp], edx
call sub.KERNEL32.dll_GetDiskFreeSpaceExW
call fcn.004153f0
mov dword [esp + 0x90], eax
push edx
call fcn.00428880
pop edx
push eax
lea eax, [esp + 4]
push eax
lea edx, [esp + 0xa8]
push edx
call fcn.00428880
pop edx
push eax
push 3
push edx
call fcn.00428b50
call fcn.004153d2
add dword [esp], edx
call fcn.0040b39f
call fcn.004153f0
and eax, eax
je 0x40a035
lea ebp, [esp]
mov ebx, dword [ebp]
cmp ebx, 1
jne 0x40a035
push 6
mov eax, 0x42d414
push eax
push dword [esp + 0x9c]
push dword [esp + 0x12c]
call fcn.004191b0
push 0x28
lea eax, [esp + 0xac]
push eax
lea ebp, [esp + 8]
lea eax, [ebp + 0x20]
push eax
call sub.ole32.dll_StringFromGUID2
push edx
call fcn.00428880
pop edx
push eax
push edx
call fcn.00428880
pop edx
push eax
lea edx, [esp + 0xb0]
push edx
call fcn.00428880
pop edx
push eax
push 0x28
push edx
call fcn.00428b50
call fcn.004153d2
add dword [esp], edx
call fcn.00426390
call fcn.00428b20
mov edx, 0x42da08
call fcn.00415400
mov ecx, eax
call fcn.00415410
je 0x40a035
push 7
mov eax, 0x42eb1e
push eax
push dword [esp + 0x9c]
push dword [esp + 0x12c]
call fcn.004191b0
push edx
call fcn.00428880
pop edx
push eax
push edx
call fcn.00428880
pop edx
push eax
lea ebp, [esp + 8]
lea eax, [ebp + 0x48]
push eax
call fcn.00427990
lea eax, [esp + 0x9c]
push eax
call fcn.004288c0
push edx
call fcn.00428880
pop edx
push eax
push 3
push edx
call fcn.00428880
pop edx
push eax
push edx
call fcn.00428880
pop edx
push eax
push dword [esp + 0xa8]
call fcn.00426340
call fcn.00428b20
push dword [esp + 0xa0]
push dword [esp + 0x130]
call fcn.004153d2
add dword [esp + 8], edx
call fcn.004191b0
call fcn.004153f0
push edx
call fcn.00428880
pop edx
push eax
push 5
push edx
call fcn.00428880
pop edx
push eax
push edx
call fcn.00428880
pop edx
push eax
push dword [esp + 0xac]
call fcn.00426340
call fcn.00428b20
push dword [esp + 0xa0]
push dword [esp + 0x130]
call fcn.004153d2
add dword [esp + 8], edx
call fcn.004191b0
call fcn.004153f0
push edx
call fcn.00428880
pop edx
push eax
push 9
push edx
call fcn.00428880
pop edx
push eax
push edx
call fcn.00428880
pop edx
push eax
push dword [esp + 0x114]
push dword [esp + 0x114]
lea eax, [esp + 0x120]
mov edx, dword [eax]
sub dword [esp], edx
mov edx, dword [eax + 4]
sbb dword [esp + 4], edx
pop eax
pop edx
push edx
push eax
call fcn.00427060
call fcn.00428b20
push dword [esp + 0xa0]
push dword [esp + 0x130]
call fcn.004153d2
add dword [esp + 8], edx
call fcn.004191b0
call fcn.004153f0
push edx
call fcn.00428880
pop edx
push eax
push 0xa
push edx
call fcn.00428880
pop edx
push eax
push edx
call fcn.00428880
pop edx
push eax
push dword [esp + 0x11c]
push dword [esp + 0x11c]
call fcn.00427060
call fcn.00428b20
push dword [esp + 0xa0]
push dword [esp + 0x130]
call fcn.004153d2
add dword [esp + 8], edx
call fcn.004191b0
call fcn.004153f0
xor eax, eax
push eax
push 0
push dword [esp + 0x124]
push dword [esp + 0xa0]
push dword [esp + 0x130]
call fcn.00403bbe
jmp 0x40a1c7
inc dword [esp + 0x94]
jno 0x409d46
xor eax, eax
push dword [esp + 0x9c]
call fcn.00428af0
push dword [esp + 0x98]
call fcn.00428af0
add esp, 0x110
pop ebx
pop ebp
ret 8