Function at 0x467950
Capabilities:
Get disk information
Get hostname

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0x13
push 0
push 0
dec ecx
jne 0x467958
push ebx
push esi
push edi
mov dword [ebp - 8], edx
mov byte [ebp - 9], al
xor eax, eax
push ebp
push 0x467e22
push dword fs:[eax]
mov dword fs:[eax], esp
xor eax, eax
mov al, byte [ebp - 9]
cmp eax, 0x16
jg 0x467991
je 0x4679bb
sub eax, 0xd
je 0x46799d
dec eax
je 0x4679a7
sub eax, 7
je 0x4679b1
jmp 0x4679d7
sub eax, 0x17
je 0x4679c5
sub eax, 0x1d
je 0x4679cf
jmp 0x4679d7
mov eax, 0x42229c
mov dword [ebp - 4], eax
jmp 0x4679d7
mov eax, 0x4222ec
mov dword [ebp - 4], eax
jmp 0x4679d7
mov eax, 0x42235c
mov dword [ebp - 4], eax
jmp 0x4679d7
mov eax, fcn.004223ac
mov dword [ebp - 4], eax
jmp 0x4679d7
mov eax, 0x42241c
mov dword [ebp - 4], eax
jmp 0x4679d7
mov eax, 0x42246c
mov dword [ebp - 4], eax
mov byte [ebp - 0xa], 1
push 0
push 0
lea eax, [ebp - 0x10]
push eax
call dword [ebp - 4]
lea eax, [ebp - 0x10]
call fcn.004054e4
xor edx, edx
mov dl, byte [ebp - 0xa]
shl edx, 4
mov ecx, dword [ebp - 8]
lea edx, [ecx + edx*8 - 0x78]
mov ecx, 0x80
call fcn.00402f44
inc byte [ebp - 0xa]
cmp byte [ebp - 0xa], 0x25
jne 0x4679db
lea eax, [ebp - 0x14]
mov edx, pe_nt_image_headers32
call fcn.00405714
lea eax, [ebp - 0x18]
mov edx, pe_nt_image_headers32
call fcn.00405714
mov dword [ebp - 0x20], 0xff
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x14]
call fcn.004054e4
push eax
call sub.kernel32.dll_GetComputerNameA
push 0
lea eax, [ebp - 0x14]
call fcn.004054e4
lea edx, [ebp - 0x58]
call fcn.00409e08
mov eax, dword [ebp - 0x58]
push eax
lea eax, [ebp - 0x54]
push eax
call dword [ebp - 4]
mov edx, dword [ebp - 0x54]
mov eax, dword [ebp - 8]
add eax, 4
call fcn.0040501c
push 0xff
lea eax, [ebp - 0x18]
call fcn.004054e4
push eax
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x1c]
push eax
push 0xff
lea eax, [ebp - 0x14]
call fcn.004054e4
push eax
lea eax, [ebp - 0x5c]
call fcn.00466974
mov eax, dword [ebp - 0x5c]
call fcn.0040548c
push eax
call sub.kernel32.dll_GetVolumeInformationA
mov eax, dword [ebp - 0x1c]
xor edx, edx
push edx
push eax
lea eax, [ebp - 0x60]
call fcn.004094d8
mov edx, dword [ebp - 0x60]
lea eax, [ebp - 0x10]
mov ecx, 0x467e38
call fcn.004052d8
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x64]
call fcn.00466974
mov eax, dword [ebp - 0x64]
call fcn.0040548c
push eax
mov eax, dword [0x4780d4]
mov eax, dword [eax]
call eax
cmp dword [ebp - 0x34], 0
jne 0x467b02
cmp dword [ebp - 0x38], 0x40000000
jbe 0x467b57
jmp 0x467b04
jle 0x467b57
fild qword [ebp - 0x38]
fdiv dword [0x467e3c]
fmul dword [0x467e40]
call fcn.00403294
mov dword [ebp - 0x6c], eax
mov dword [ebp - 0x68], edx
fild qword [ebp - 0x6c]
fdiv dword [0x467e40]
fstp qword [ebp - 0x48]
wait
push dword [ebp - 0x10]
fld qword [ebp - 0x48]
add esp, 0xfffffff4
fstp xword [esp]
wait
lea eax, [ebp - 0x70]
call fcn.0040aa40
push dword [ebp - 0x70]
push 0x467e4c
lea eax, [ebp - 0x10]
mov edx, 3
call fcn.0040534c
jmp 0x467ba8
fild qword [ebp - 0x38]
fdiv dword [0x467e50]
fmul dword [0x467e40]
call fcn.00403294
mov dword [ebp - 0x6c], eax
mov dword [ebp - 0x68], edx
fild qword [ebp - 0x6c]
fdiv dword [0x467e40]
fstp qword [ebp - 0x48]
wait
push dword [ebp - 0x10]
fld qword [ebp - 0x48]
add esp, 0xfffffff4
fstp xword [esp]
wait
lea eax, [ebp - 0x74]
call fcn.0040aa40
push dword [ebp - 0x74]
push 0x467e5c
lea eax, [ebp - 0x10]
mov edx, 3
call fcn.0040534c
push 0
mov eax, dword [ebp - 0x10]
push eax
lea eax, [ebp - 0x78]
push eax
call dword [ebp - 4]
mov edx, dword [ebp - 0x78]
lea eax, [ebp - 0x10]
call fcn.00405060
lea eax, [ebp - 0x10]
call fcn.004054e4
mov edx, dword [ebp - 8]
add edx, 0x288
mov ecx, 0x80
call fcn.00402f44
xor eax, eax
mov dword [ebp - 0x4c], eax
xor eax, eax
push ebp
push 0x467ddb
push dword fs:[eax]
mov dword fs:[eax], esp
xor eax, eax
push ebp
push 0x467dad
push dword fs:[eax]
mov dword fs:[eax], esp
xor ecx, ecx
mov dl, 1
mov eax, dword [0x465f4c]
call fcn.00466024
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x4c]
call fcn.00466080
mov eax, dword [ebp - 0x4c]
cmp byte [eax + 0x3c], 0
jne 0x467c30
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
call fcn.00404a08
jmp 0x467de2
lea eax, [ebp - 0x7c]
call fcn.00466b64
mov edx, dword [ebp - 0x7c]
lea ecx, [ebp - 0x50]
mov eax, dword [ebp - 0x4c]
call fcn.0046614c
mov eax, dword [ebp - 0x50]
mov edx, dword [eax]
call dword [edx + 0xc]
lea eax, [ebp - 0x80]
call fcn.00466e4c
mov edx, dword [ebp - 0x80]
lea ecx, [ebp - 0x10]
mov eax, dword [ebp - 0x50]
mov ebx, dword [eax]
call dword [ebx + 0x1c]
mov eax, dword [ebp - 0x10]
mov edx, 0x467e68
call fcn.004053d8
jbe 0x467c7f
push ebp
mov edx, dword [ebp - 0x10]
mov al, 1
call fcn.00467878
pop ecx
lea eax, [ebp - 0x84]
call fcn.00466ec8
mov edx, dword [ebp - 0x84]
lea ecx, [ebp - 0x10]
mov eax, dword [ebp - 0x50]
mov ebx, dword [eax]
call dword [ebx + 0x1c]
mov eax, dword [ebp - 0x10]
mov edx, 0x467e68
call fcn.004053d8
jbe 0x467cb6
push ebp
mov edx, dword [ebp - 0x10]
mov al, 2
call fcn.00467878
pop ecx
lea eax, [ebp - 0x88]
call fcn.00466f44
mov edx, dword [ebp - 0x88]
lea ecx, [ebp - 0x10]
mov eax, dword [ebp - 0x50]
mov ebx, dword [eax]
call dword [ebx + 0x1c]
mov eax, dword [ebp - 0x10]
mov edx, 0x467e68
call fcn.004053d8
jbe 0x467ced
push ebp
mov edx, dword [ebp - 0x10]
mov al, 3
call fcn.00467878
pop ecx
lea eax, [ebp - 0x8c]
call fcn.00466be0
mov edx, dword [ebp - 0x8c]
lea ecx, [ebp - 0x50]
mov eax, dword [ebp - 0x4c]
call fcn.0046614c
mov eax, dword [ebp - 0x50]
mov edx, dword [eax]
call dword [edx + 0xc]
lea eax, [ebp - 0x90]
call fcn.00466fc0
mov edx, dword [ebp - 0x90]
lea ecx, [ebp - 0x10]
mov eax, dword [ebp - 0x50]
mov ebx, dword [eax]
call dword [ebx + 0x1c]
mov eax, dword [ebp - 0x10]
mov edx, 0x467e68
call fcn.004053d8
jbe 0x467d48
push ebp
mov edx, dword [ebp - 0x10]
mov al, 4
call fcn.00467878
pop ecx
lea eax, [ebp - 0x94]
call fcn.00466c5c
mov edx, dword [ebp - 0x94]
lea ecx, [ebp - 0x50]
mov eax, dword [ebp - 0x4c]
call fcn.0046614c
mov eax, dword [ebp - 0x50]
mov edx, dword [eax]
call dword [edx + 0xc]
lea eax, [ebp - 0x98]
call fcn.0046703c
mov edx, dword [ebp - 0x98]
lea ecx, [ebp - 0x10]
mov eax, dword [ebp - 0x50]
mov ebx, dword [eax]
call dword [ebx + 0x1c]
mov eax, dword [ebp - 0x10]
mov edx, 0x467e68
call fcn.004053d8
jbe 0x467da3
push ebp
mov edx, dword [ebp - 0x10]
mov al, 5
call fcn.00467878
pop ecx
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x467db7
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x467de2
lea eax, [ebp - 0x10]
call fcn.00404fc8
cmp dword [ebp - 0x4c], 0
je 0x467dda
mov eax, dword [ebp - 0x4c]
call fcn.004040e8
ret
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x467e29
lea eax, [ebp - 0x98]
mov edx, 0xb
call fcn.00404fec
lea eax, [ebp - 0x64]
mov edx, 5
call fcn.00404fec
lea eax, [ebp - 0x50]
call fcn.00406a04
lea eax, [ebp - 0x18]
mov edx, 3
call fcn.00404fec
ret