Function at 0x64a4cf
Capabilities:
Get disk information

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x47c
mov eax, dword [0x71d770]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
mov esi, dword [ebp + 8]
xor ebx, ebx
push edi
mov edi, dword [ebp + 0xc]
mov dword [ebp - 0x474], esi
cmp esi, ebx
jne 0x64a51d
call fcn.00650da2
mov dword [eax], ebx
call fcn.00650d8f
push ebx
push ebx
push ebx
push ebx
push ebx
mov dword [eax], 0x16
call fcn.00658904
add esp, 0x14
jmp 0x64a903
cmp edi, ebx
je 0x64a4f9
push 0x7087a0
push esi
call fcn.006625b8
pop ecx
pop ecx
test eax, eax
je 0x64a548
call fcn.00650d8f
push 2
pop esi
mov dword [eax], esi
call fcn.00650da2
mov dword [eax], esi
jmp 0x64a903
cmp word [esi + 2], 0x3a
jne 0x64a56c
movzx eax, word [esi]
cmp ax, bx
je 0x64a55d
cmp word [esi + 4], bx
je 0x64a532
push eax
call fcn.0065877b
movzx eax, ax
pop ecx
sub eax, 0x60
jmp 0x64a571
call fcn.0066244d
mov dword [ebp - 0x47c], eax
lea eax, [ebp - 0x45c]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov dword [ebp - 0x460], eax
cmp eax, 0xffffffff
jne 0x64a677
push 0x708798
push esi
mov dword [ebp - 0x460], ebx
call fcn.006625b8
pop ecx
pop ecx
test eax, eax
je 0x64a532
lea eax, [ebp - 0x460]
push eax
push 0x104
lea eax, [ebp - 0x20c]
push esi
push eax
call fcn.0064a46f
mov esi, eax
add esp, 0x10
cmp esi, ebx
je 0x64a65a
push esi
call fcn.0064b0d1
pop ecx
cmp eax, 3
je 0x64a5e6
call fcn.0064a3ce
test eax, eax
je 0x64a65a
push esi
call dword [sym.imp.KERNEL32.dll_GetDriveTypeW]
cmp eax, 1
jbe 0x64a65a
cmp dword [ebp - 0x460], ebx
je 0x64a606
push dword [ebp - 0x460]
call fcn.0064978f
pop ecx
push 0xffffffffffffffff
push ebx
push ebx
push ebx
push 1
xor eax, eax
push 1
push 0x7bc
mov dword [ebp - 0x45c], 0x10
mov dword [ebp - 0x440], ebx
mov dword [ebp - 0x43c], ebx
mov word [ebp - 0x430], ax
call fcn.006621e2
mov esi, dword [ebp - 0x474]
mov ecx, edx
add esp, 0x1c
mov dword [edi + 0x20], eax
mov dword [edi + 0x24], edx
mov dword [edi + 0x18], eax
mov dword [edi + 0x1c], ecx
mov dword [edi + 0x28], eax
mov dword [edi + 0x2c], ecx
jmp 0x64a8aa
cmp dword [ebp - 0x460], ebx
je 0x64a532
push dword [ebp - 0x460]
call fcn.0064978f
pop ecx
jmp 0x64a532
test dword [ebp - 0x45c], 0x400
je 0x64a6e2
cmp dword [ebp - 0x438], 0xa000000c
jne 0x64a6e2
or dword [ebp - 0x460], 0xffffffff
push ebx
push 0x40
push ebx
lea eax, [ebp - 0x460]
push esi
push eax
call fcn.006621c2
add esp, 0x14
test eax, eax
jne 0x64a532
cmp dword [ebp - 0x460], 0xffffffff
je 0x64a532
push edi
push dword [ebp - 0x460]
call fcn.0064ede4
push dword [ebp - 0x460]
mov esi, eax
call fcn.006603b7
add esp, 0xc
mov eax, esi
jmp 0x64a906
cmp dword [ebp - 0x448], ebx
jne 0x64a6fa
cmp dword [ebp - 0x444], ebx
jne 0x64a6fa
mov dword [edi + 0x20], ebx
mov dword [edi + 0x24], ebx
jmp 0x64a772
lea eax, [ebp - 0x478]
push eax
lea eax, [ebp - 0x448]
push eax
call dword [sym.imp.KERNEL32.dll_FileTimeToLocalFileTime]
test eax, eax
je 0x64a8ea
lea eax, [ebp - 0x470]
push eax
lea eax, [ebp - 0x478]
push eax
call dword [sym.imp.KERNEL32.dll_FileTimeToSystemTime]
test eax, eax
je 0x64a8ea
movzx eax, word [ebp - 0x464]
push 0xffffffffffffffff
push eax
movzx eax, word [ebp - 0x466]
push eax
movzx eax, word [ebp - 0x468]
push eax
movzx eax, word [ebp - 0x46a]
push eax
movzx eax, word [ebp - 0x46e]
push eax
movzx eax, word [ebp - 0x470]
push eax
call fcn.006621e2
add esp, 0x1c
mov dword [edi + 0x20], eax
mov dword [edi + 0x24], edx
cmp dword [ebp - 0x450], ebx
jne 0x64a790
cmp dword [ebp - 0x44c], ebx
jne 0x64a790
mov eax, dword [edi + 0x20]
mov dword [edi + 0x18], eax
mov eax, dword [edi + 0x24]
mov dword [edi + 0x1c], eax
jmp 0x64a808
lea eax, [ebp - 0x478]
push eax
lea eax, [ebp - 0x450]
push eax
call dword [sym.imp.KERNEL32.dll_FileTimeToLocalFileTime]
test eax, eax
je 0x64a8ea
lea eax, [ebp - 0x470]
push eax
lea eax, [ebp - 0x478]
push eax
call dword [sym.imp.KERNEL32.dll_FileTimeToSystemTime]
test eax, eax
je 0x64a8ea
movzx eax, word [ebp - 0x464]
push 0xffffffffffffffff
push eax
movzx eax, word [ebp - 0x466]
push eax
movzx eax, word [ebp - 0x468]
push eax
movzx eax, word [ebp - 0x46a]
push eax
movzx eax, word [ebp - 0x46e]
push eax
movzx eax, word [ebp - 0x470]
push eax
call fcn.006621e2
add esp, 0x1c
mov dword [edi + 0x18], eax
mov dword [edi + 0x1c], edx
cmp dword [ebp - 0x458], ebx
jne 0x64a826
cmp dword [ebp - 0x454], ebx
jne 0x64a826
mov eax, dword [edi + 0x20]
mov dword [edi + 0x28], eax
mov eax, dword [edi + 0x24]
mov dword [edi + 0x2c], eax
jmp 0x64a89e
lea eax, [ebp - 0x478]
push eax
lea eax, [ebp - 0x458]
push eax
call dword [sym.imp.KERNEL32.dll_FileTimeToLocalFileTime]
test eax, eax
je 0x64a8ea
lea eax, [ebp - 0x470]
push eax
lea eax, [ebp - 0x478]
push eax
call dword [sym.imp.KERNEL32.dll_FileTimeToSystemTime]
test eax, eax
je 0x64a8ea
movzx eax, word [ebp - 0x464]
push 0xffffffffffffffff
push eax
movzx eax, word [ebp - 0x466]
push eax
movzx eax, word [ebp - 0x468]
push eax
movzx eax, word [ebp - 0x46a]
push eax
movzx eax, word [ebp - 0x46e]
push eax
movzx eax, word [ebp - 0x470]
push eax
call fcn.006621e2
add esp, 0x1c
mov dword [edi + 0x28], eax
mov dword [edi + 0x2c], edx
push dword [ebp - 0x460]
call dword [sym.imp.KERNEL32.dll_FindClose]
push esi
push dword [ebp - 0x45c]
call fcn.00661311
mov word [edi + 6], ax
xor eax, eax
inc eax
mov word [edi + 8], ax
mov eax, dword [ebp - 0x43c]
mov dword [edi + 0x14], eax
xor eax, eax
mov word [edi + 4], ax
mov word [edi + 0xc], ax
mov word [edi + 0xa], ax
mov eax, dword [ebp - 0x47c]
dec eax
pop ecx
mov dword [edi], eax
mov dword [edi + 0x10], eax
pop ecx
xor eax, eax
jmp 0x64a906
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
call fcn.00650db5
pop ecx
push dword [ebp - 0x460]
call dword [sym.imp.KERNEL32.dll_FindClose]
or eax, 0xffffffff
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.0064815a
leave
ret