Function at 0x4e073a
Capabilities:
Get disk information
Get disk size

Disassembly:
push 0x60
mov eax, 0x516666
call fcn.00506098
mov ebx, ecx
xor esi, esi
mov dword [ebp - 0x2c], esi
mov dword [ebp - 0x28], esi
call fcn.00479e32
mov dword [ebp - 0x2c], eax
mov dword [ebp - 4], esi
mov dword [ebp - 0x34], esi
mov dword [ebp - 0x30], esi
call fcn.0044f816
mov dword [ebp - 0x34], eax
mov byte [ebp - 4], 1
call dword [sym.imp.KERNEL32.dll_GetLogicalDrives]
mov edx, eax
mov byte [ebp - 0x1c], 0x43
push 2
mov dword [ebp - 0x14], edx
pop edi
xor eax, eax
mov ecx, edi
inc eax
shl eax, cl
test edx, eax
je 0x4e09d0
push ecx
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x20]
call fcn.0041b005
push 0x555ccc
mov edx, eax
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x10]
call fcn.00405cb9
pop ecx
mov byte [ebp - 4], 4
or eax, 0xffffffff
mov edx, dword [ebp - 0x20]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4e07cd
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push dword [ebp - 0x10]
call dword [sym.imp.KERNEL32.dll_GetDriveTypeA]
cmp eax, 3
jne 0x4e09ae
push ecx
mov esi, esp
mov dword [ebp - 0x18], esi
mov ecx, dword [ebp - 0x10]
lea ecx, [ecx - 0x10]
call fcn.004098e7
add eax, 0x10
mov dword [esi], eax
call fcn.004e0556
pop ecx
test eax, eax
jne 0x4e09ae
xor esi, esi
lea edx, [ebp - 0x10]
push 0x553dc8
lea ecx, [ebp - 0x24]
mov dword [ebp - 0x3c], esi
mov dword [ebp - 0x38], esi
call fcn.00405cb9
pop ecx
lea ecx, [ebp - 0x3c]
push ecx
push esi
push esi
push dword [eax]
call dword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExA]
mov edx, dword [ebp - 0x24]
mov esi, eax
add edx, 0xfffffff0
or ecx, 0xffffffff
lock xadd dword [edx + 0xc], ecx
dec ecx
test ecx, ecx
jg 0x4e0847
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
cmp dword [0xd5c588], 0
jne 0x4e085e
test esi, esi
jne 0x4e0862
mov dword [0xd5c588], 1
test esi, esi
je 0x4e0885
lea eax, [ebp - 0x10]
push eax
lea eax, [ebp - 0x4c]
push eax
lea ecx, [ebp - 0x2c]
call fcn.004e0f05
mov ecx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x38]
mov edx, dword [ebp - 0x4c]
shrd ecx, eax, 0xa
shr eax, 0xa
mov dword [edx + 0x24], ecx
mov eax, dword [0xd58f54]
test eax, eax
je 0x4e09ae
add eax, 0x5c
je 0x4e09ae
cmp dword [eax + 0x2ac], 0
jne 0x4e08b3
mov eax, dword [eax + 0x26c]
cmp dword [eax], 0
je 0x4e09ae
mov esi, dword [ebp - 0x10]
mov ecx, esi
call fcn.004df9ec
cmp eax, 0xffffffff
jne 0x4e08c9
mov ecx, esi
call fcn.004dfafb
mov dword [ebp - 0x18], eax
cmp eax, 0x20
ja 0x4e09ae
lea eax, [ebp - 0x18]
push eax
lea ecx, [ebp - 0x34]
call fcn.0044ea19
test eax, eax
jne 0x4e09ae
push dword [ebp - 0x24]
lea eax, [ebp - 0x18]
push eax
push ecx
lea eax, [ebp - 0x6c]
push eax
lea ecx, [ebp - 0x34]
call fcn.0044ff2c
mov cl, byte [ebp - 0x18]
call fcn.004e0393
mov esi, eax
lea eax, [ebp - 0x10]
push eax
test esi, esi
je 0x4e0926
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x2c]
call fcn.004e0f05
mov eax, dword [ebp - 0x54]
mov dword [eax + 0x20], esi
jmp 0x4e09ae
lea eax, [ebp - 0x44]
mov ecx, ebx
push eax
call fcn.0041b594
mov eax, dword [ebp - 0x44]
xor esi, esi
cmp eax, dword [ebp - 0x40]
je 0x4e09ae
inc esi
cmp byte [eax + 0xd], 0
jne 0x4e097a
mov ecx, dword [eax + 8]
cmp byte [ecx + 0xd], 0
jne 0x4e0963
mov eax, ecx
mov edx, dword [eax]
cmp byte [edx + 0xd], 0
jne 0x4e097a
mov ecx, dword [edx]
mov eax, edx
mov edx, ecx
cmp byte [ecx + 0xd], 0
je 0x4e0955
jmp 0x4e097a
mov ecx, dword [eax + 4]
jmp 0x4e0972
cmp eax, dword [ecx + 8]
jne 0x4e0978
mov eax, ecx
mov ecx, dword [ecx + 4]
cmp byte [ecx + 0xd], 0
je 0x4e0968
mov eax, ecx
cmp eax, dword [ebp - 0x40]
jne 0x4e093b
test esi, esi
je 0x4e09ae
lea eax, [ebp - 0x10]
mov ecx, ebx
push eax
lea eax, [ebp - 0x5c]
push eax
call fcn.004e0f05
mov esi, dword [ebp - 0x5c]
lea eax, [ebp - 0x10]
push eax
lea eax, [ebp - 0x64]
push eax
lea ecx, [ebp - 0x2c]
call fcn.004e0f05
mov ecx, dword [ebp - 0x64]
mov eax, dword [esi + 0x20]
mov dword [ecx + 0x20], eax
mov byte [ebp - 4], 1
or eax, 0xffffffff
mov edx, dword [ebp - 0x10]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x4e09cd
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x14]
mov al, byte [ebp - 0x1c]
inc al
inc edi
mov byte [ebp - 0x1c], al
cmp al, 0x5a
jle 0x4e077f
lea esi, [ebx + 8]
push esi
mov dword [ebp - 0x24], esi
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
lea eax, [ebp - 0x2c]
mov byte [ebp - 4], 5
cmp ebx, eax
je 0x4e0a5b
mov ecx, ebx
call fcn.004e0d4b
push dword [ebp - 0x24]
mov eax, dword [ebp - 0x2c]
mov ecx, ebx
mov edi, dword [ebx]
push edi
push dword [eax + 4]
call fcn.004e1020
mov dword [edi + 4], eax
mov eax, dword [ebp - 0x28]
mov dword [ebx + 4], eax
mov edx, dword [ebx]
mov edi, dword [edx + 4]
cmp byte [edi + 0xd], 0
jne 0x4e0a54
mov ecx, dword [edi]
cmp byte [ecx + 0xd], 0
jne 0x4e0a3b
mov eax, dword [ecx]
mov edi, ecx
mov ecx, eax
cmp byte [eax + 0xd], 0
je 0x4e0a2f
mov dword [edx], edi
mov edx, dword [ebx]
mov eax, dword [edx + 4]
jmp 0x4e0a46
mov eax, ecx
mov ecx, dword [eax + 8]
cmp byte [ecx + 0xd], 0
je 0x4e0a44
mov dword [edx + 8], eax
jmp 0x4e0a5b
mov dword [edx], edx
mov eax, dword [ebx]
mov dword [eax + 8], eax
test esi, esi
je 0x4e0a66
push esi
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov eax, dword [ebp - 0x34]
lea ecx, [ebp - 0x34]
push eax
push dword [eax]
lea eax, [ebp - 0x24]
push eax
call fcn.0044f474
push ecx
mov ecx, dword [ebp - 0x34]
xor edx, edx
push 0x14
inc edx
call fcn.0040b8be
pop ecx
pop ecx
lea ecx, [ebp - 0x2c]
call fcn.004e0d4b
push ecx
mov ecx, dword [ebp - 0x2c]
xor edx, edx
push 0x28
inc edx
call fcn.0040b8be
pop ecx
pop ecx
call fcn.00506061
ret