Function at 0x4b3fa0
Capabilities:
Get disk information

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x124
mov dword [ebp - 8], 0
mov dword [ebp - 4], 1
cmp dword [0x59715c], 0
jne 0x4b3fd0
call fcn.004b4300
test eax, eax
jne 0x4b3fd0
xor eax, eax
jmp 0x4b42f3
cmp dword [ebp + 8], 0
je 0x4b417b
mov eax, dword [ebp + 8]
movzx ecx, byte [eax]
test ecx, ecx
je 0x4b417b
mov edx, dword [ebp + 8]
push edx
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0x104
jbe 0x4b4005
xor eax, eax
jmp 0x4b42f3
mov dword [ebp - 0x114], 0
jmp 0x4b4020
mov eax, dword [ebp - 0x114]
add eax, 1
mov dword [ebp - 0x114], eax
mov ecx, dword [ebp - 0x114]
cmp ecx, dword [ebp - 8]
ja 0x4b4066
mov edx, dword [ebp + 8]
add edx, dword [ebp - 0x114]
movzx eax, byte [edx]
cmp eax, 0x2f
jne 0x4b404c
mov ecx, dword [ebp - 0x114]
mov byte [ebp + ecx - 0x110], 0x5c
jmp 0x4b4064
mov edx, dword [ebp + 8]
add edx, dword [ebp - 0x114]
mov eax, dword [ebp - 0x114]
mov cl, byte [edx]
mov byte [ebp + eax - 0x110], cl
jmp 0x4b4011
movzx edx, byte [ebp - 0x110]
cmp edx, 0x5c
jne 0x4b414a
movzx eax, byte [ebp - 0x10f]
cmp eax, 0x5c
jne 0x4b414a
mov dword [ebp - 0x118], 0
mov dword [ebp - 0x114], 2
jmp 0x4b40ab
mov ecx, dword [ebp - 0x114]
add ecx, 1
mov dword [ebp - 0x114], ecx
mov edx, dword [ebp - 0x114]
cmp edx, dword [ebp - 8]
jae 0x4b410b
mov eax, dword [ebp - 0x114]
movzx ecx, byte [ebp + eax - 0x110]
cmp ecx, 0x5c
jne 0x4b4109
mov edx, dword [ebp - 0x118]
add edx, 1
mov dword [ebp - 0x118], edx
cmp dword [ebp - 0x118], 2
jne 0x4b4109
mov eax, dword [ebp - 0x114]
add eax, 1
mov dword [ebp - 0x114], eax
mov ecx, dword [ebp - 0x114]
mov byte [ebp + ecx - 0x110], 0
mov edx, dword [ebp - 0x114]
mov dword [ebp - 8], edx
jmp 0x4b410b
jmp 0x4b409c
cmp dword [ebp - 0x118], 1
jne 0x4b4148
mov eax, dword [ebp - 8]
movzx ecx, byte [ebp + eax - 0x110]
cmp ecx, 0x5c
je 0x4b4148
mov edx, dword [ebp - 8]
mov al, byte [ebp - 0x110]
mov byte [ebp + edx - 0x110], al
mov ecx, dword [ebp - 8]
mov byte [ebp + ecx - 0x10f], 0
mov edx, dword [ebp - 8]
add edx, 1
mov dword [ebp - 8], edx
jmp 0x4b417b
movzx eax, byte [ebp - 0x10f]
cmp eax, 0x3a
jne 0x4b416d
mov byte [ebp - 0x10e], 0x5c
mov byte [ebp - 0x10d], 0
mov dword [ebp - 8], 3
jmp 0x4b417b
mov byte [ebp - 0x110], 0
mov dword [ebp - 8], 0
push 0x597640
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
cmp dword [0x597520], 0
je 0x4b41a9
lea ecx, [ebp - 0x110]
push ecx
push 0x597538
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x4b42a5
mov dword [ebp - 0x124], 0
mov dword [ebp - 0x120], 0
push 0x597640
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
push 0
push 0
lea edx, [ebp - 0x11c]
push edx
push 0
push 0
push 0
push 0
movzx eax, byte [ebp - 0x110]
neg eax
sbb eax, eax
lea ecx, [ebp - 0x110]
and eax, ecx
push eax
call dword [sym.imp.KERNEL32.dll_GetVolumeInformationA]
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
je 0x4b424e
mov edx, dword [ebp - 0x11c]
and edx, 8
je 0x4b424e
mov eax, dword [ebp + 0x10]
cmp dword [eax + 4], 0
je 0x4b424e
movzx ecx, byte [ebp - 0x110]
neg ecx
sbb ecx, ecx
lea edx, [ebp - 0x110]
and ecx, edx
push ecx
call dword [sym.imp.KERNEL32.dll_GetDriveTypeA]
cmp eax, 4
jne 0x4b424e
mov dword [ebp - 0x120], 1
lea eax, [ebp - 0x124]
push eax
mov ecx, dword [ebp + 0xc]
push ecx
call fcn.004b43d0
add esp, 8
push 0x597640
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
cmp dword [ebp - 4], 0
je 0x4b42a5
mov edx, dword [ebp - 8]
add edx, 1
push edx
lea eax, [ebp - 0x110]
push eax
push 0x597538
call dword [sym.imp.KERNEL32.dll_lstrcpynA]
mov ecx, dword [ebp - 0x11c]
mov dword [0x597528], ecx
mov edx, dword [ebp - 0x120]
mov dword [0x59752c], edx
mov eax, dword [ebp - 0x124]
mov dword [0x597530], eax
mov dword [0x597520], 1
cmp dword [ebp - 4], 0
je 0x4b42db
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx + 4]
mov dword [0x597524], edx
mov eax, dword [ebp + 0x10]
mov ecx, dword [eax + 0x14]
mov dword [0x597534], ecx
push 0x120
push 0x597520
mov edx, dword [ebp + 0x10]
push edx
call fcn.004bed60
add esp, 0xc
jmp 0x4b42e5
mov dword [0x597520], 0
push 0x597640
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov eax, dword [ebp - 4]
mov esp, ebp
pop ebp
ret