Function at 0x4766ef
Capabilities:
Get disk information
Get disk size

Disassembly:
mov eax, 0x6115e2
call fcn.0060bcd8
sub esp, 0x210
push ebx
push esi
push edi
mov edi, ecx
xor ebx, ebx
and dword [ebp - 0x2c], ebx
mov eax, dword [edi + 0x98]
mov esi, dword [edi + 0xa8]
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x18]
push eax
lea ecx, [esi + 0xc]
call fcn.00471e48
test eax, eax
je 0x476757
lea eax, [ebp - 0x18]
push eax
lea ecx, [esi + 0xc]
call fcn.00472316
cmp eax, dword [esi + 0xc]
je 0x476744
mov ecx, dword [ebp - 0x28]
cmp ecx, dword [eax + 0x10]
jge 0x476747
mov eax, dword [esi + 0xc]
mov ecx, dword [eax + 0x14]
test ecx, ecx
je 0x476757
call fcn.00471a87
test eax, eax
jne 0x476759
xor ecx, ecx
mov dword [edi + 0xbc], ecx
test ecx, ecx
je 0x476aeb
call fcn.00471a87
test eax, eax
je 0x476aeb
lea eax, [ebp - 0x48]
push eax
call fcn.00475499
and dword [ebp - 4], 0
lea ecx, [ebp - 0x90]
push dword [eax]
call fcn.0040d603
xor eax, eax
lea edx, [ebp - 0x90]
inc eax
push ecx
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], al
call fcn.0040a5a3
pop ecx
push 0
push 1
lea ecx, [ebp - 0x90]
call fcn.004097fa
mov byte [ebp - 4], 4
mov ecx, dword [ebp - 0x48]
lea ecx, [ecx - 0x10]
call fcn.00404ea9
cmp dword [ebp - 0x60], 0
je 0x4767df
cmp dword [ebp - 0x5c], 8
lea eax, [ebp - 0x70]
lea ecx, [edi + 0xdc]
cmovae eax, dword [ebp - 0x70]
push eax
call fcn.004060f8
mov ecx, dword [edi + 0xbc]
mov eax, dword [ecx + 8]
mov dword [edi + 0x30], eax
mov eax, dword [ecx + 0x1c]
sub eax, dword [ecx + 0x18]
xor ecx, ecx
sar eax, 2
mov dword [ebp - 0x54], eax
mov dword [ebp - 0x28], ecx
test eax, eax
jle 0x476ad7
push ecx
mov ecx, dword [edi + 0xbc]
call fcn.00471bb0
mov esi, eax
test esi, esi
je 0x476ad2
mov ecx, esi
call fcn.00471616
test eax, eax
je 0x476ad2
lea ecx, [esi + 0x48]
push ecx
mov ecx, edi
call fcn.00478c37
test eax, eax
je 0x476a8c
call fcn.00404f47
push eax
lea ecx, [ebp - 0x1c]
call fcn.004065d8
mov byte [ebp - 4], 5
mov ecx, dword [esi + 0x4c]
sub ecx, 0x10
call fcn.00409008
mov dword [ebp - 0x24], eax
add eax, 0x10
mov dword [ebp - 0x58], eax
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 6
push ecx
lea ecx, [ebp - 0x38]
push ecx
push eax
lea ecx, [edi + 0xa4]
call fcn.004728fd
test eax, eax
jne 0x476a75
inc dword [ebp - 0x2c]
push esi
call fcn.0047999f
xor eax, eax
inc eax
push esi
mov dword [ebp - 0x30], eax
call fcn.00479b3b
test eax, eax
jne 0x4768b1
push esi
call fcn.00479851
test eax, eax
jne 0x4768ad
push esi
call fcn.00479793
jmp 0x4768b1
and dword [ebp - 0x30], 0
lea eax, [esi + 0x14]
lea ecx, [ebp - 0x214]
mov dword [ebp - 0x38], eax
push 3
push dword [eax]
mov dword [ebp - 0x218], ecx
lea ecx, [ebp - 0x218]
call fcn.004066f6
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x14]
push dword [ebp - 0x218]
call fcn.00406173
lea eax, [ebp - 0x214]
mov byte [ebp - 4], 9
cmp dword [ebp - 0x218], eax
je 0x476902
push dword [ebp - 0x218]
call fcn.005f0063
pop ecx
cmp dword [ebp - 0x30], 0
je 0x47691a
lea eax, [ebp - 0x14]
push eax
call fcn.0046f5f7
pop ecx
test eax, eax
je 0x476a9e
push 3
lea eax, [ebp - 0x4c]
push eax
lea ecx, [ebp - 0x14]
call fcn.00405d36
mov esi, dword [eax]
xor eax, eax
inc eax
push esi
mov byte [ebp - 0x18], al
call dword [sym.imp.KERNEL32.dll_GetDriveTypeW]
cmp eax, 3
jne 0x476983
xor eax, eax
xor ecx, ecx
inc eax
mov dword [ebp - 0x44], ecx
mov byte [ebp - 0x18], al
lea eax, [ebp - 0x44]
push eax
push ecx
push ecx
push esi
mov dword [ebp - 0x40], ecx
call dword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
test eax, eax
je 0x476983
mov ecx, dword [ebp - 0x44]
mov edx, dword [ebp - 0x40]
shrd ecx, edx, 0x14
shr edx, 0x14
call fcn.0060b680
xor eax, eax
xor ecx, ecx
inc eax
comisd xmm0, xmmword [0x6a03f8]
movzx eax, al
cmovae eax, ecx
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x4c]
lea ecx, [ecx - 0x10]
call fcn.00404ea9
cmp byte [ebp - 0x18], 0
je 0x476a22
mov edx, 0x400
lea ecx, [ebp - 0x20]
call fcn.004703f7
mov byte [ebp - 4], 0xa
mov eax, dword [ebp - 0x20]
cmp dword [eax - 0xc], 0
je 0x476ac3
mov edx, dword [ebp - 0x14]
lea ecx, [ebp - 0x34]
call fcn.0040b060
lea eax, [ebp - 0x34]
mov byte [ebp - 4], 0xb
push eax
lea edx, [ebp - 0x20]
lea ecx, [ebp - 0x50]
call fcn.0040b545
pop ecx
push eax
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0xc
call fcn.00406123
mov byte [ebp - 4], 0xb
mov ecx, dword [ebp - 0x50]
add ecx, 0xfffffff0
call fcn.00404ea9
push dword [ebp - 0x58]
lea eax, [ebp - 0x20]
push eax
push ecx
lea eax, [ebp - 0x78]
push eax
lea ecx, [edi + 0xe0]
call fcn.0047a2c2
mov ecx, dword [ebp - 0x34]
lea ecx, [ecx - 0x10]
call fcn.00404ea9
mov byte [ebp - 4], 9
mov ecx, dword [ebp - 0x20]
lea ecx, [ecx - 0x10]
call fcn.00404ea9
push 3
push dword [ebp - 0x14]
lea eax, [ebp - 0x110]
lea ecx, [ebp - 0x114]
mov dword [ebp - 0x114], eax
call fcn.00408f48
mov byte [ebp - 4], 0xd
push dword [ebp - 0x114]
mov ecx, dword [ebp - 0x38]
call fcn.00405d0b
lea eax, [ebp - 0x110]
cmp dword [ebp - 0x114], eax
je 0x476a6a
push dword [ebp - 0x114]
call fcn.005f0063
pop ecx
mov ecx, dword [ebp - 0x14]
lea ecx, [ecx - 0x10]
call fcn.00404ea9
mov ecx, dword [ebp - 0x24]
call fcn.00404ea9
mov byte [ebp - 4], 4
mov ecx, dword [ebp - 0x1c]
lea ecx, [ecx - 0x10]
call fcn.00404ea9
mov ecx, dword [ebp - 0x28]
inc ecx
mov dword [ebp - 0x28], ecx
cmp ecx, dword [ebp - 0x54]
jl 0x476804
jmp 0x476ad7
mov ebx, 0xfc
mov ecx, dword [ebp - 0x14]
lea ecx, [ecx - 0x10]
call fcn.00404ea9
mov ecx, dword [ebp - 0x24]
call fcn.00404ea9
mov ecx, dword [ebp - 0x1c]
lea ecx, [ecx - 0x10]
call fcn.00404ea9
jmp 0x476ad7
lea ecx, [eax - 0x10]
mov ebx, 0x105
call fcn.00404ea9
jmp 0x476aa3
mov ebx, 0xfd
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x70]
xor eax, eax
push 0
inc eax
push eax
call fcn.004044ec
jmp 0x476af0
mov ebx, 0x96
cmp dword [ebp - 0x2c], 0
jne 0x476b0c
push 0x69d5ac
push 0x6c8880
call fcn.0048de14
pop ecx
pop ecx
mov ebx, 0xc8
mov ecx, dword [ebp - 0xc]
mov eax, ebx
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret