Function at 0x4a95fe
Capabilities:
Get disk information

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x268
mov eax, dword [0x5f4760]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
mov esi, dword [ebp + 8]
xor ebx, ebx
push edi
mov edi, dword [ebp + 0xc]
mov dword [ebp - 0x260], esi
cmp esi, ebx
jne 0x4a964c
call fcn.004a837d
mov dword [eax], ebx
call fcn.004a836a
push ebx
push ebx
push ebx
push ebx
push ebx
mov dword [eax], 0x16
call fcn.004a35cd
add esp, 0x14
jmp 0x4a9a42
cmp edi, ebx
je 0x4a9628
push 0x5929ec
push esi
call fcn.004bb45a
pop ecx
pop ecx
test eax, eax
je 0x4a9677
call fcn.004a836a
push 2
pop esi
mov dword [eax], esi
call fcn.004a837d
mov dword [eax], esi
jmp 0x4a9a42
cmp byte [esi + 1], 0x3a
jne 0x4a9697
mov al, byte [esi]
cmp al, bl
je 0x4a9688
cmp byte [esi + 2], bl
je 0x4a9661
movsx eax, al
push eax
call fcn.004bb37a
pop ecx
sub eax, 0x60
jmp 0x4a969c
call fcn.004bb20b
mov dword [ebp - 0x268], eax
lea eax, [ebp - 0x248]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov dword [ebp - 0x24c], eax
cmp eax, 0xffffffff
jne 0x4a979f
push 0x5929e8
push esi
mov dword [ebp - 0x24c], ebx
call fcn.004bb45a
pop ecx
pop ecx
test eax, eax
je 0x4a9661
lea eax, [ebp - 0x24c]
push eax
push 0x104
lea eax, [ebp - 0x108]
push esi
push eax
call fcn.0057e6c6
mov esi, eax
add esp, 0x10
cmp esi, ebx
je 0x4a9782
push esi
call fcn.004aaad0
pop ecx
cmp eax, 3
je 0x4a9711
call fcn.004a9584
test eax, eax
je 0x4a9782
push esi
call dword [sym.imp.KERNEL32.dll_GetDriveTypeA]
cmp eax, 1
jbe 0x4a9782
cmp dword [ebp - 0x24c], ebx
je 0x4a9731
push dword [ebp - 0x24c]
call fcn.004a4132
pop ecx
push 0xffffffffffffffff
push ebx
push ebx
push ebx
push 1
push 1
push 0x7bc
mov dword [ebp - 0x248], 0x10
mov dword [ebp - 0x22c], ebx
mov dword [ebp - 0x228], ebx
mov byte [ebp - 0x21c], bl
call fcn.004bafa0
mov esi, dword [ebp - 0x260]
mov ecx, edx
add esp, 0x1c
mov dword [edi + 0x28], eax
mov dword [edi + 0x2c], edx
mov dword [edi + 0x20], eax
mov dword [edi + 0x24], ecx
mov dword [edi + 0x30], eax
mov dword [edi + 0x34], ecx
jmp 0x4a99d2
cmp dword [ebp - 0x24c], ebx
je 0x4a9661
push dword [ebp - 0x24c]
call fcn.004a4132
pop ecx
jmp 0x4a9661
test dword [ebp - 0x248], 0x400
je 0x4a980a
cmp dword [ebp - 0x224], 0xa000000c
jne 0x4a980a
or dword [ebp - 0x24c], 0xffffffff
push ebx
push 0x40
push ebx
lea eax, [ebp - 0x24c]
push esi
push eax
call fcn.004baf80
add esp, 0x14
test eax, eax
jne 0x4a9661
cmp dword [ebp - 0x24c], 0xffffffff
je 0x4a9661
push edi
push dword [ebp - 0x24c]
call fcn.004ba36c
push dword [ebp - 0x24c]
mov esi, eax
call fcn.004b11a7
add esp, 0xc
mov eax, esi
jmp 0x4a9a45
cmp dword [ebp - 0x234], ebx
jne 0x4a9822
cmp dword [ebp - 0x230], ebx
jne 0x4a9822
mov dword [edi + 0x28], ebx
mov dword [edi + 0x2c], ebx
jmp 0x4a989a
lea eax, [ebp - 0x264]
push eax
lea eax, [ebp - 0x234]
push eax
call dword [sym.imp.KERNEL32.dll_FileTimeToLocalFileTime]
test eax, eax
je 0x4a9a29
lea eax, [ebp - 0x25c]
push eax
lea eax, [ebp - 0x264]
push eax
call dword [sym.imp.KERNEL32.dll_FileTimeToSystemTime]
test eax, eax
je 0x4a9a29
movzx eax, word [ebp - 0x250]
push 0xffffffffffffffff
push eax
movzx eax, word [ebp - 0x252]
push eax
movzx eax, word [ebp - 0x254]
push eax
movzx eax, word [ebp - 0x256]
push eax
movzx eax, word [ebp - 0x25a]
push eax
movzx eax, word [ebp - 0x25c]
push eax
call fcn.004bafa0
add esp, 0x1c
mov dword [edi + 0x28], eax
mov dword [edi + 0x2c], edx
cmp dword [ebp - 0x23c], ebx
jne 0x4a98b8
cmp dword [ebp - 0x238], ebx
jne 0x4a98b8
mov eax, dword [edi + 0x28]
mov dword [edi + 0x20], eax
mov eax, dword [edi + 0x2c]
mov dword [edi + 0x24], eax
jmp 0x4a9930
lea eax, [ebp - 0x264]
push eax
lea eax, [ebp - 0x23c]
push eax
call dword [sym.imp.KERNEL32.dll_FileTimeToLocalFileTime]
test eax, eax
je 0x4a9a29
lea eax, [ebp - 0x25c]
push eax
lea eax, [ebp - 0x264]
push eax
call dword [sym.imp.KERNEL32.dll_FileTimeToSystemTime]
test eax, eax
je 0x4a9a29
movzx eax, word [ebp - 0x250]
push 0xffffffffffffffff
push eax
movzx eax, word [ebp - 0x252]
push eax
movzx eax, word [ebp - 0x254]
push eax
movzx eax, word [ebp - 0x256]
push eax
movzx eax, word [ebp - 0x25a]
push eax
movzx eax, word [ebp - 0x25c]
push eax
call fcn.004bafa0
add esp, 0x1c
mov dword [edi + 0x20], eax
mov dword [edi + 0x24], edx
cmp dword [ebp - 0x244], ebx
jne 0x4a994e
cmp dword [ebp - 0x240], ebx
jne 0x4a994e
mov eax, dword [edi + 0x28]
mov dword [edi + 0x30], eax
mov eax, dword [edi + 0x2c]
mov dword [edi + 0x34], eax
jmp 0x4a99c6
lea eax, [ebp - 0x264]
push eax
lea eax, [ebp - 0x244]
push eax
call dword [sym.imp.KERNEL32.dll_FileTimeToLocalFileTime]
test eax, eax
je 0x4a9a29
lea eax, [ebp - 0x25c]
push eax
lea eax, [ebp - 0x264]
push eax
call dword [sym.imp.KERNEL32.dll_FileTimeToSystemTime]
test eax, eax
je 0x4a9a29
movzx eax, word [ebp - 0x250]
push 0xffffffffffffffff
push eax
movzx eax, word [ebp - 0x252]
push eax
movzx eax, word [ebp - 0x254]
push eax
movzx eax, word [ebp - 0x256]
push eax
movzx eax, word [ebp - 0x25a]
push eax
movzx eax, word [ebp - 0x25c]
push eax
call fcn.004bafa0
add esp, 0x1c
mov dword [edi + 0x30], eax
mov dword [edi + 0x34], edx
push dword [ebp - 0x24c]
call dword [sym.imp.KERNEL32.dll_FindClose]
push esi
push dword [ebp - 0x248]
call fcn.004ba2af
pop ecx
mov word [edi + 6], ax
pop ecx
xor eax, eax
inc eax
push eax
push ebx
push ebx
push dword [ebp - 0x22c]
mov word [edi + 8], ax
call fcn.004adae0
mov ecx, dword [ebp - 0x228]
xor esi, esi
add eax, ecx
adc edx, esi
mov dword [edi + 0x18], eax
xor eax, eax
mov word [edi + 4], ax
mov word [edi + 0xc], ax
mov word [edi + 0xa], ax
mov eax, dword [ebp - 0x268]
dec eax
mov dword [edi], eax
mov dword [edi + 0x10], eax
mov dword [edi + 0x1c], edx
xor eax, eax
jmp 0x4a9a45
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
call fcn.004a8390
pop ecx
push dword [ebp - 0x24c]
call dword [sym.imp.KERNEL32.dll_FindClose]
or eax, 0xffffffff
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.004a314d
leave
ret