Function at 0x410a00
Capabilities:
Get disk size

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x526983
mov eax, dword fs:[0]
push eax
sub esp, 0x94
mov eax, dword [0x57f7a0]
xor eax, esp
mov dword [esp + 0x8c], eax
push ebx
push esi
mov eax, dword [0x57f7a0]
xor eax, esp
push eax
lea eax, [esp + 0xa0]
mov dword fs:[0], eax
cmp dword [ecx + 0x14], 8
jb 0x410a47
mov ecx, dword [ecx]
mov edx, ecx
lea ecx, [esp + 0x38]
call fcn.0040fa70
sub esp, 8
mov dword [esp + 0xb0], 0
lea ecx, [esp + 0x40]
call fcn.004134b0
cmp eax, 0xffffffff
je 0x410a99
lea ecx, [eax + 1]
cmp dword [esp + 0x48], ecx
jae 0x410a81
push str.invalid_string_position
call fcn.0049d0e8
cmp dword [esp + 0x4c], 8
lea eax, [esp + 0x38]
mov dword [esp + 0x48], ecx
cmovae eax, dword [esp + 0x38]
xor edx, edx
mov word [eax + ecx*2], dx
sub esp, 8
lea ecx, [esp + 0x40]
call fcn.00413430
cmp eax, 0xffffffff
je 0x410ab6
push eax
push 0
lea ecx, [esp + 0x40]
call fcn.00407880
push 3
push 0
lea eax, [esp + 0x70]
push eax
lea ecx, [esp + 0x44]
call fcn.00413530
mov byte [esp + 0xa8], 1
cmp dword [esp + 0x48], 3
jb 0x410ce0
cmp dword [esp + 0x7c], 8
lea ecx, [esp + 0x14]
push 0
push 0
lea eax, [esp + 0x70]
mov dword [esp + 0x1c], 0
cmovae eax, dword [esp + 0x70]
push ecx
push eax
mov dword [esp + 0x28], 0
call dword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
cmp eax, 1
jne 0x410ce0
cmp dword [esp + 0x18], 0
ja 0x410b24
cmp dword [esp + 0x14], 0
jbe 0x410ce0
push 0xffffffffffffffff
push 3
lea eax, [esp + 0x28]
push eax
lea ecx, [esp + 0x44]
call fcn.00413530
lea ecx, [esp + 0x20]
mov byte [esp + 0xa8], 2
call fcn.004109a0
lea ecx, [esp + 0x20]
call fcn.0040fe30
test al, al
je 0x410b5b
xor bl, bl
jmp 0x410ca7
push 1
push 0
lea eax, [esp + 0x18]
mov dword [esp + 0x18], 0x5c
push eax
lea ecx, [esp + 0x2c]
call fcn.0040a350
mov esi, eax
cmp esi, 0xffffffff
je 0x410ca5
push esi
push 0
lea eax, [esp + 0x58]
push eax
lea ecx, [esp + 0x2c]
call fcn.00413530
sub esp, 8
mov byte [esp + 0xb0], 3
lea ecx, [esp + 0x58]
call fcn.004134b0
cmp eax, 0xffffffff
je 0x410bcf
lea ecx, [eax + 1]
cmp dword [esp + 0x60], ecx
jb 0x410a77
cmp dword [esp + 0x64], 8
lea eax, [esp + 0x50]
mov dword [esp + 0x60], ecx
cmovae eax, dword [esp + 0x50]
xor edx, edx
mov word [eax + ecx*2], dx
sub esp, 8
lea ecx, [esp + 0x58]
call fcn.00413430
cmp eax, 0xffffffff
je 0x410bec
push eax
push 0
lea ecx, [esp + 0x58]
call fcn.00407880
cmp dword [esp + 0x60], 0
je 0x410cd3
push 0xffffffffffffffff
lea eax, [esi + 1]
push eax
lea eax, [esp + 0x88]
push eax
lea ecx, [esp + 0x2c]
call fcn.00413530
mov esi, eax
lea eax, [esp + 0x20]
cmp eax, esi
je 0x410c4c
cmp dword [esp + 0x34], 8
jb 0x410c2b
push dword [esp + 0x20]
call fcn.004db8b0
add esp, 4
xor eax, eax
mov dword [esp + 0x34], 7
push esi
lea ecx, [esp + 0x24]
mov dword [esp + 0x34], 0
mov word [esp + 0x24], ax
call fcn.00407390
cmp dword [esp + 0x94], 8
jb 0x410c65
push dword [esp + 0x80]
call fcn.004db8b0
add esp, 4
push 1
push 0
lea eax, [esp + 0x18]
mov dword [esp + 0x18], 0x5c
push eax
lea ecx, [esp + 0x2c]
call fcn.0040a350
mov byte [esp + 0xa8], 2
mov esi, eax
cmp dword [esp + 0x64], 8
jb 0x410c9c
push dword [esp + 0x50]
call fcn.004db8b0
add esp, 4
cmp esi, 0xffffffff
jne 0x410b80
mov bl, 1
cmp dword [esp + 0x34], 8
jb 0x410cba
push dword [esp + 0x20]
call fcn.004db8b0
add esp, 4
xor eax, eax
mov dword [esp + 0x34], 7
mov dword [esp + 0x30], 0
mov word [esp + 0x20], ax
jmp 0x410ce2
lea ecx, [esp + 0x50]
call fcn.00407e10
xor bl, bl
jmp 0x410ca7
xor bl, bl
cmp dword [esp + 0x7c], 8
jb 0x410cf5
push dword [esp + 0x68]
call fcn.004db8b0
add esp, 4
xor eax, eax
mov dword [esp + 0x7c], 7
cmp dword [esp + 0x4c], 8
mov dword [esp + 0x78], 0
mov word [esp + 0x68], ax
jb 0x410d1f
push dword [esp + 0x38]
call fcn.004db8b0
add esp, 4
mov al, bl
mov ecx, dword [esp + 0xa0]
mov dword fs:[0], ecx
pop ecx
pop esi
pop ebx
mov ecx, dword [esp + 0x8c]
xor ecx, esp
call fcn.004ea604
mov esp, ebp
pop ebp
ret