Function at 0x4073a8
Capabilities:
Enumerate disk volumes
Get disk information

Disassembly:
push 0x45c
mov eax, 0x4215c6
call fcn.00421269
mov edi, ecx
mov dword [ebp - 0x430], edi
mov eax, dword fs:[0x2c]
xor ebx, ebx
mov dword [ebp - 0x428], ebx
mov ecx, dword [eax]
mov eax, dword [0x434d88]
cmp eax, dword [ecx + 4]
jle 0x407432
mov esi, 0x434d88
push esi
call fcn.004129fd
cmp dword [0x434d88], 0xffffffff
pop ecx
jne 0x407432
mov dword [ebp - 4], ebx
push 0x40
mov dword [0x434d8c], ebx
mov dword [0x434d90], ebx
call fcn.00412613
mov dword [esp], 0x421687
mov dword [eax], eax
mov dword [eax + 4], eax
mov dword [eax + 8], eax
mov word [eax + 0xc], 0x101
mov dword [0x434d8c], eax
call fcn.0041287f
or dword [ebp - 4], 0xffffffff
pop ecx
push esi
call fcn.004129b3
pop ecx
cmp byte [0x432d84], 0
jne 0x40768f
mov esi, 0x208
lea eax, [ebp - 0x420]
push esi
push ebx
push eax
call fcn.00413bd0
add esp, 0xc
lea eax, [ebp - 0x218]
push esi
push ebx
push eax
call fcn.00413bd0
add esp, 0xc
lea eax, [ebp - 0x218]
push 0x104
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstVolumeW]
mov ebx, eax
push 0x5c
pop esi
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
dec eax
cmp word [ebp - 0x218], si
jne 0x407681
cmp word [ebp - 0x216], si
jne 0x407681
cmp word [ebp - 0x214], 0x3f
jne 0x407681
cmp word [ebp - 0x212], si
jne 0x407681
lea esi, [eax + eax]
push 0x5c
pop eax
cmp word [ebp + esi - 0x218], ax
jne 0x407681
cmp esi, 0x208
jae 0x407757
xor eax, eax
mov word [ebp + esi - 0x218], ax
lea eax, [ebp - 0x420]
push 0x104
push eax
lea eax, [ebp - 0x210]
push eax
call dword [sym.imp.KERNEL32.dll_QueryDosDeviceW]
push 0x5c
pop ecx
mov word [ebp + esi - 0x218], cx
test eax, eax
je 0x407681
push 0x20a
mov dword [ebp - 0x424], 0x105
call fcn.00412ad3
pop ecx
mov esi, eax
lea eax, [ebp - 0x424]
push eax
push dword [ebp - 0x424]
lea eax, [ebp - 0x218]
push esi
push eax
call dword [sym.imp.KERNEL32.dll_GetVolumePathNamesForVolumeNameW]
test eax, eax
jne 0x4075a2
push 2
pop edi
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xea
jne 0x40759c
push esi
call fcn.004128c5
mov eax, dword [ebp - 0x424]
pop ecx
xor ecx, ecx
mul edi
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.00412ad3
pop ecx
mov esi, eax
lea eax, [ebp - 0x424]
push eax
push dword [ebp - 0x424]
lea eax, [ebp - 0x218]
push esi
push eax
call dword [sym.imp.KERNEL32.dll_GetVolumePathNamesForVolumeNameW]
test eax, eax
je 0x40754f
mov edi, dword [ebp - 0x430]
push 0x42b9ec
lea ecx, [ebp - 0x468]
call fcn.00406c9a
mov edx, eax
lea ecx, [ebp - 0x420]
mov dword [ebp - 4], 1
lea eax, [ecx + 2]
mov dword [ebp - 0x42c], eax
mov ax, word [ecx]
add ecx, 2
cmp ax, word [ebp - 0x428]
jne 0x4075ca
sub ecx, dword [ebp - 0x42c]
lea eax, [ebp - 0x420]
sar ecx, 1
push ecx
push eax
push ecx
mov ecx, edx
call fcn.00407f06
push eax
lea ecx, [ebp - 0x450]
call fcn.00406c64
push 2
pop eax
mov byte [ebp - 4], al
lea eax, [ebp - 0x450]
push eax
lea eax, [ebp - 0x438]
push eax
call fcn.00407c98
mov ecx, esi
mov edx, dword [eax]
lea eax, [ecx + 2]
mov dword [ebp - 0x42c], eax
mov ax, word [ecx]
add ecx, 2
cmp ax, word [ebp - 0x428]
jne 0x407623
sub ecx, dword [ebp - 0x42c]
sar ecx, 1
push ecx
push esi
lea ecx, [edx + 0x28]
call fcn.00406d34
lea ecx, [ebp - 0x450]
call fcn.00406c39
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x468]
call fcn.00406c39
push esi
call fcn.004128c5
mov dword [esp], 0x104
lea eax, [ebp - 0x218]
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_FindNextVolumeW]
test eax, eax
jne 0x40747a
push ebx
call dword [sym.imp.KERNEL32.dll_FindVolumeClose]
mov byte [0x432d84], 1
test edi, edi
je 0x407751
mov ebx, dword [0x434d8c]
mov esi, dword [ebx]
jmp 0x407714
mov ecx, dword [esi + 0x20]
lea eax, [esi + 0x10]
cmp dword [eax + 0x14], 8
mov dword [ebp - 0x42c], ecx
mov dword [ebp - 0x428], eax
jb 0x4076c1
mov edx, dword [eax]
mov dword [ebp - 0x428], edx
cmp dword [edi + 0x10], ecx
mov edx, ecx
mov ecx, edi
cmovb edx, dword [edi + 0x10]
cmp dword [edi + 0x14], 8
jb 0x4076d4
mov ecx, dword [edi]
push dword [eax + 0x10]
push dword [ebp - 0x428]
call fcn.00407d9b
pop ecx
pop ecx
test eax, eax
je 0x40771a
mov eax, dword [esi + 8]
cmp byte [eax + 0xd], 0
je 0x40770a
mov eax, dword [esi + 4]
jmp 0x407700
cmp esi, dword [eax + 8]
jne 0x407706
mov esi, eax
mov eax, dword [eax + 4]
cmp byte [eax + 0xd], 0
je 0x4076f6
mov esi, eax
jmp 0x407714
mov esi, eax
mov eax, dword [esi]
cmp byte [eax + 0xd], 0
je 0x40770a
cmp esi, ebx
jne 0x4076a1
jmp 0x407751
cmp dword [esi + 0x3c], 8
lea eax, [esi + 0x28]
jb 0x407726
mov eax, dword [esi + 0x28]
push dword [esi + 0x38]
push eax
push dword [ebp - 0x42c]
push ecx
mov ecx, edi
call fcn.00407a4b
cmp edi, eax
je 0x407751
cmp dword [eax + 0x14], 8
mov edx, eax
jb 0x407746
mov edx, dword [eax]
push dword [eax + 0x10]
mov ecx, edi
push edx
call fcn.00406d34
call fcn.00421227
ret
call fcn.00412538
int3