Function at 0x468f97
Capabilities:
Get disk information

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x2c
push ebx
lea eax, [ebp + 8]
push esi
push eax
mov dword [ebp - 0x18], ecx
call fcn.0043e425
pop ecx
push 5
lea ecx, [ebp - 0x14]
call fcn.00444a2e
push 0x14
lea ecx, [ebp - 0x1c]
call fcn.00444a2e
mov byte [ebp - 3], 1
mov byte [ebp - 1], 0
mov byte [ebp - 2], 0
mov byte [ebp - 4], 0
jmp 0x46910d
or esi, 0xffffffff
push esi
lea eax, [ebp + 8]
push eax
push str.__fullfile
call fcn.00446a34
add esp, 0xc
test al, al
je 0x468ff7
mov byte [ebp - 3], 2
jmp 0x46910d
push esi
lea eax, [ebp + 8]
push eax
push str.__full
call fcn.00446a34
add esp, 0xc
test al, al
je 0x469016
mov byte [ebp - 3], 1
jmp 0x46910d
push esi
lea eax, [ebp + 8]
push eax
push str.__short
call fcn.00446a34
add esp, 0xc
test al, al
je 0x469035
mov byte [ebp - 1], 1
jmp 0x46910d
push esi
lea eax, [ebp + 8]
push eax
push 0x4c97dc
call fcn.00446a34
add esp, 0xc
test al, al
je 0x469054
mov byte [ebp - 1], 0x11
jmp 0x46910d
push esi
lea eax, [ebp + 8]
push eax
push str.__long
call fcn.00446a34
add esp, 0xc
test al, al
je 0x469073
mov byte [ebp - 1], 2
jmp 0x46910d
push esi
lea eax, [ebp + 8]
push eax
push 0x4c97cc
call fcn.00446a34
add esp, 0xc
test al, al
je 0x46908f
mov byte [ebp - 1], 0x12
jmp 0x46910d
push 8
lea eax, [ebp + 8]
push eax
push str.__volume
call fcn.0043e51d
add esp, 0xc
test eax, eax
je 0x4690ac
mov byte [ebp - 2], 1
jmp 0x46910d
push 0xc
lea eax, [ebp + 8]
push eax
push str.__volumepart
call fcn.0043e51d
add esp, 0xc
test eax, eax
je 0x4690c9
mov byte [ebp - 2], 3
jmp 0x46910d
push 6
lea eax, [ebp + 8]
push eax
push str.__part
call fcn.0043e51d
add esp, 0xc
test eax, eax
je 0x4690e6
mov byte [ebp - 2], 2
jmp 0x46910d
push 3
lea eax, [ebp + 8]
push eax
push 0x4c9784
call fcn.0043e51d
add esp, 0xc
test eax, eax
je 0x469103
mov byte [ebp - 4], 1
jmp 0x46910d
lea eax, [ebp + 8]
push eax
call fcn.00409168
pop ecx
mov eax, dword [ebp + 8]
cmp word [eax], 0x2d
je 0x468fd5
mov ecx, dword [ebp - 0x18]
xor esi, esi
push esi
push 0x3d
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp + 8]
push eax
call fcn.0043970c
mov dword [ebp + 8], eax
cmp word [eax], 0x3d
jne 0x46914f
mov ecx, dword [ebp - 0x18]
inc eax
inc eax
push esi
mov dword [ebp + 8], eax
push esi
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp + 8]
push eax
call fcn.004395a0
mov eax, dword [ebp - 0x1c]
call fcn.0044a574
mov ebx, eax
mov eax, dword [ebp - 0x14]
cmp word [eax], si
je 0x4693a9
cmp word [ebx], si
je 0x4693a9
push edi
push ebx
call dword [sym.imp.KERNEL32.DLL_lstrlenW]
push ebx
lea ecx, [ebp - 0x10]
lea edi, [eax*8 + 0x104]
call fcn.0044df7a
lea eax, [edi + 1]
push eax
lea ecx, [ebp - 0x10]
call fcn.00444a55
mov eax, 0x4dbd30
push eax
mov dword [ebp - 8], esi
call dword [sym.imp.KERNEL32.DLL_EnterCriticalSection]
lea eax, [ebp - 0x24]
push eax
mov dword [ebp - 0x24], esi
call fcn.00403ee2
mov esi, dword [ebp - 0x10]
mov byte [ebp - 0x20], al
lea eax, [ebp - 8]
push eax
push esi
push edi
push ebx
call fcn.00445269
add esp, 0x14
cmp dword [ebp - 8], 0
je 0x4691cc
sub dword [ebp - 8], 2
cmp byte [ebp - 1], 0
jle 0x46924b
push 0x2000
lea ecx, [ebp - 0xc]
call fcn.00444a2e
mov edi, dword [ebp - 0xc]
and word [edi], 0
test byte [ebp - 1], 1
mov ebx, 0x1fff
je 0x4691fc
push ebx
push edi
push esi
call dword [sym.imp.KERNEL32.DLL_GetShortPathNameW]
jmp 0x46920f
test byte [ebp - 1], 2
je 0x46921d
push ebx
push edi
push esi
call dword [sym.imp.KERNEL32.DLL_GetLongPathNameW]
and byte [ebp - 1], 0xfd
test byte [ebp - 1], 0x10
je 0x4691fc
cmp word [edi], 0
jne 0x4691fc
jmp 0x469243
mov eax, esi
mov esi, edi
and word [esi + 0x3ffc], 0
cmp byte [ebp - 3], 1
mov dword [ebp - 0x10], esi
mov dword [ebp - 0xc], eax
jne 0x469243
push 0x5c
push 0
push esi
call dword [sym.imp.shlwapi.dll_StrRChrW]
mov dword [ebp - 8], eax
lea ecx, [ebp - 0xc]
call fcn.0043e48d
cmp byte [ebp - 0x20], 0
je 0x46925a
push dword [ebp - 0x24]
call fcn.00403ef3
pop ecx
mov eax, 0x4dbd30
test eax, eax
je 0x46926a
push eax
call dword [sym.imp.KERNEL32.DLL_LeaveCriticalSection]
cmp byte [ebp - 3], 1
jne 0x46927b
mov eax, dword [ebp - 8]
test eax, eax
je 0x46927b
and word [eax], 0
cmp byte [ebp - 2], 0
je 0x469361
cmp word [esi], 0
je 0x469361
cmp word [esi + 2], 0x3a
jne 0x469361
mov ebx, 0x1000
push ebx
lea ecx, [ebp - 0xc]
call fcn.00444a2e
mov edi, dword [ebp - 0xc]
xor eax, eax
test byte [ebp - 2], 1
mov word [edi], ax
mov cx, word [esi]
mov word [ebp - 0x2c], cx
mov word [ebp - 0x2a], 0x3a
mov word [ebp - 0x28], 0x5c
mov word [ebp - 0x26], ax
mov dword [ebp - 0x20], edi
mov word [esi], ax
je 0x4692eb
push ebx
push edi
lea eax, [ebp - 0x2c]
push eax
call dword [sym.imp.KERNEL32.DLL_GetVolumeNameForVolumeMountPointW]
test eax, eax
je 0x4692e9
cmp word [edi], 0
jne 0x469337
xor eax, eax
test byte [ebp - 2], 2
je 0x469359
mov cx, word [ebp - 0x2c]
push eax
push eax
push eax
push 0xac
mov word [edi], cx
push 0xffffffffffffffff
mov word [edi + 2], ax
lea eax, [ebp - 0xc]
push 0xffffffffffffffff
push eax
call fcn.00463084
mov edi, dword [ebp - 0xc]
mov eax, dword [edi]
add esp, 0x1c
test eax, eax
jl 0x469359
mov ecx, dword [edi + 4]
test ecx, ecx
jle 0x469359
push ecx
push eax
push str._Harddisk_uPartition_u_
push dword [ebp - 0x20]
call dword [sym.imp.user32.dll_wsprintfW]
add esp, 0x10
mov ebx, dword [ebp - 0x20]
push ebx
call dword [sym.imp.KERNEL32.DLL_lstrlenW]
lea ecx, [esi + 6]
push ecx
lea eax, [ebx + eax*2]
push eax
call dword [sym.imp.KERNEL32.DLL_lstrcpyW]
mov eax, esi
mov esi, edi
mov dword [ebp - 0x10], esi
mov dword [ebp - 0xc], eax
lea ecx, [ebp - 0xc]
call fcn.0043e48d
and dword [ebp - 0x20], 0
cmp byte [ebp - 4], 0
mov dword [ebp + 8], esi
pop edi
je 0x469387
cmp word [esi], 0x22
je 0x469387
push 0xffffffffffffffff
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp + 8]
push eax
call fcn.0044a592
add esp, 0xc
push dword [ebp + 8]
mov ecx, dword [ebp - 0x18]
push dword [ebp - 0x14]
call fcn.0044414b
lea ecx, [ebp - 0x20]
call fcn.0043e48d
lea ecx, [ebp - 0x10]
call fcn.0043e48d
xor esi, esi
jmp 0x4693ae
mov esi, 0x80070057
lea ecx, [ebp - 0x1c]
call fcn.0043e48d
lea ecx, [ebp - 0x14]
call fcn.0043e48d
mov eax, esi
pop esi
pop ebx
leave
ret 8