Function at 0x4674ec
Capabilities:
Get disk information

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x2c
push ebx
lea eax, [ebp + 8]
push esi
push eax
mov dword [ebp - 0x18], ecx
call fcn.0043dae7
pop ecx
push 5
lea ecx, [ebp - 0x14]
call fcn.00443f79
push 0x14
lea ecx, [ebp - 0x1c]
call fcn.00443f79
mov byte [ebp - 3], 1
mov byte [ebp - 1], 0
mov byte [ebp - 2], 0
mov byte [ebp - 4], 0
jmp 0x467662
or esi, 0xffffffff
push esi
lea eax, [ebp + 8]
push eax
push str.__fullfile
call fcn.00445f31
add esp, 0xc
test al, al
je 0x46754c
mov byte [ebp - 3], 2
jmp 0x467662
push esi
lea eax, [ebp + 8]
push eax
push str.__full
call fcn.00445f31
add esp, 0xc
test al, al
je 0x46756b
mov byte [ebp - 3], 1
jmp 0x467662
push esi
lea eax, [ebp + 8]
push eax
push str.__short
call fcn.00445f31
add esp, 0xc
test al, al
je 0x46758a
mov byte [ebp - 1], 1
jmp 0x467662
push esi
lea eax, [ebp + 8]
push eax
push 0x4c65e8
call fcn.00445f31
add esp, 0xc
test al, al
je 0x4675a9
mov byte [ebp - 1], 0x11
jmp 0x467662
push esi
lea eax, [ebp + 8]
push eax
push str.__long
call fcn.00445f31
add esp, 0xc
test al, al
je 0x4675c8
mov byte [ebp - 1], 2
jmp 0x467662
push esi
lea eax, [ebp + 8]
push eax
push 0x4c65d8
call fcn.00445f31
add esp, 0xc
test al, al
je 0x4675e4
mov byte [ebp - 1], 0x12
jmp 0x467662
push 8
lea eax, [ebp + 8]
push eax
push str.__volume
call fcn.0043dbdf
add esp, 0xc
test eax, eax
je 0x467601
mov byte [ebp - 2], 1
jmp 0x467662
push 0xc
lea eax, [ebp + 8]
push eax
push str.__volumepart
call fcn.0043dbdf
add esp, 0xc
test eax, eax
je 0x46761e
mov byte [ebp - 2], 3
jmp 0x467662
push 6
lea eax, [ebp + 8]
push eax
push str.__part
call fcn.0043dbdf
add esp, 0xc
test eax, eax
je 0x46763b
mov byte [ebp - 2], 2
jmp 0x467662
push 3
lea eax, [ebp + 8]
push eax
push 0x4c6590
call fcn.0043dbdf
add esp, 0xc
test eax, eax
je 0x467658
mov byte [ebp - 4], 1
jmp 0x467662
lea eax, [ebp + 8]
push eax
call fcn.00408ddd
pop ecx
mov eax, dword [ebp + 8]
cmp word [eax], 0x2d
je 0x46752a
mov ecx, dword [ebp - 0x18]
xor esi, esi
push esi
push 0x3d
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp + 8]
push eax
call fcn.00438db7
mov dword [ebp + 8], eax
cmp word [eax], 0x3d
jne 0x4676a4
mov ecx, dword [ebp - 0x18]
inc eax
inc eax
push esi
mov dword [ebp + 8], eax
push esi
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp + 8]
push eax
call fcn.00438c4b
mov eax, dword [ebp - 0x1c]
call fcn.00449365
mov ebx, eax
mov eax, dword [ebp - 0x14]
cmp word [eax], si
je 0x4678fe
cmp word [ebx], si
je 0x4678fe
push edi
push ebx
call dword [sym.imp.KERNEL32.dll_lstrlenW]
push ebx
lea ecx, [ebp - 0x10]
lea edi, [eax*8 + 0x104]
call fcn.0044cd74
lea eax, [edi + 1]
push eax
lea ecx, [ebp - 0x10]
call fcn.00443fa0
mov eax, 0x4d8d24
push eax
mov dword [ebp - 8], esi
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
lea eax, [ebp - 0x24]
push eax
mov dword [ebp - 0x24], esi
call fcn.00403eaa
mov esi, dword [ebp - 0x10]
mov byte [ebp - 0x20], al
lea eax, [ebp - 8]
push eax
push esi
push edi
push ebx
call fcn.004447d0
add esp, 0x14
cmp dword [ebp - 8], 0
je 0x467721
sub dword [ebp - 8], 2
cmp byte [ebp - 1], 0
jle 0x4677a0
push 0x2000
lea ecx, [ebp - 0xc]
call fcn.00443f79
mov edi, dword [ebp - 0xc]
and word [edi], 0
test byte [ebp - 1], 1
mov ebx, 0x1fff
je 0x467751
push ebx
push edi
push esi
call dword [sym.imp.KERNEL32.dll_GetShortPathNameW]
jmp 0x467764
test byte [ebp - 1], 2
je 0x467772
push ebx
push edi
push esi
call dword [sym.imp.KERNEL32.dll_GetLongPathNameW]
and byte [ebp - 1], 0xfd
test byte [ebp - 1], 0x10
je 0x467751
cmp word [edi], 0
jne 0x467751
jmp 0x467798
mov eax, esi
mov esi, edi
and word [esi + 0x3ffc], 0
cmp byte [ebp - 3], 1
mov dword [ebp - 0x10], esi
mov dword [ebp - 0xc], eax
jne 0x467798
push 0x5c
push 0
push esi
call dword [sym.imp.SHLWAPI.dll_StrRChrW]
mov dword [ebp - 8], eax
lea ecx, [ebp - 0xc]
call fcn.0043db4f
cmp byte [ebp - 0x20], 0
je 0x4677af
push dword [ebp - 0x24]
call fcn.00403ebb
pop ecx
mov eax, 0x4d8d24
test eax, eax
je 0x4677bf
push eax
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
cmp byte [ebp - 3], 1
jne 0x4677d0
mov eax, dword [ebp - 8]
test eax, eax
je 0x4677d0
and word [eax], 0
cmp byte [ebp - 2], 0
je 0x4678b6
cmp word [esi], 0
je 0x4678b6
cmp word [esi + 2], 0x3a
jne 0x4678b6
mov ebx, 0x1000
push ebx
lea ecx, [ebp - 0xc]
call fcn.00443f79
mov edi, dword [ebp - 0xc]
xor eax, eax
test byte [ebp - 2], 1
mov word [edi], ax
mov cx, word [esi]
mov word [ebp - 0x2c], cx
mov word [ebp - 0x2a], 0x3a
mov word [ebp - 0x28], 0x5c
mov word [ebp - 0x26], ax
mov dword [ebp - 0x20], edi
mov word [esi], ax
je 0x467840
push ebx
push edi
lea eax, [ebp - 0x2c]
push eax
call dword [sym.imp.KERNEL32.dll_GetVolumeNameForVolumeMountPointW]
test eax, eax
je 0x46783e
cmp word [edi], 0
jne 0x46788c
xor eax, eax
test byte [ebp - 2], 2
je 0x4678ae
mov cx, word [ebp - 0x2c]
push eax
push eax
push eax
push 0xac
mov word [edi], cx
push 0xffffffffffffffff
mov word [edi + 2], ax
lea eax, [ebp - 0xc]
push 0xffffffffffffffff
push eax
call fcn.00461938
mov edi, dword [ebp - 0xc]
mov eax, dword [edi]
add esp, 0x1c
test eax, eax
jl 0x4678ae
mov ecx, dword [edi + 4]
test ecx, ecx
jle 0x4678ae
push ecx
push eax
push str._Harddisk_uPartition_u_
push dword [ebp - 0x20]
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x10
mov ebx, dword [ebp - 0x20]
push ebx
call dword [sym.imp.KERNEL32.dll_lstrlenW]
lea ecx, [esi + 6]
push ecx
lea eax, [ebx + eax*2]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
mov eax, esi
mov esi, edi
mov dword [ebp - 0x10], esi
mov dword [ebp - 0xc], eax
lea ecx, [ebp - 0xc]
call fcn.0043db4f
and dword [ebp - 0x20], 0
cmp byte [ebp - 4], 0
mov dword [ebp + 8], esi
pop edi
je 0x4678dc
cmp word [esi], 0x22
je 0x4678dc
push 0xffffffffffffffff
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp + 8]
push eax
call fcn.00449383
add esp, 0xc
push dword [ebp + 8]
mov ecx, dword [ebp - 0x18]
push dword [ebp - 0x14]
call fcn.00443666
lea ecx, [ebp - 0x20]
call fcn.0043db4f
lea ecx, [ebp - 0x10]
call fcn.0043db4f
xor esi, esi
jmp 0x467903
mov esi, 0x80070057
lea ecx, [ebp - 0x1c]
call fcn.0043db4f
lea ecx, [ebp - 0x14]
call fcn.0043db4f
mov eax, esi
pop esi
pop ebx
leave
ret 8