Function at 0x47fe90
Capabilities:
Get disk information

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x128
mov eax, dword [0x4ea5e0]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 8]
push ebx
push esi
xor esi, esi
push edi
mov edi, edx
mov dword [ebp - 0x124], eax
mov dword [ebp - 0x120], ecx
mov dword [ebp - 0x114], 1
cmp dword [0x544864], esi
jne 0x47fee7
call fcn.0047fd10
test eax, eax
jne 0x47fee7
xor eax, eax
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004a8a2f
mov esp, ebp
pop ebp
ret
test edi, edi
je 0x47ffb9
cmp byte [edi], 0
je 0x47ffb9
push edi
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov esi, eax
cmp esi, 0x104
ja 0x47fed4
lea eax, [ebp - 0x110]
xor edx, edx
sub edi, eax
mov bl, 0x5c
jmp 0x47ff20
lea eax, [ebp + edx - 0x110]
mov cl, byte [edi + eax]
cmp cl, 0x2f
jne 0x47ff33
mov byte [eax], bl
jmp 0x47ff35
mov byte [eax], cl
inc edx
cmp edx, esi
jbe 0x47ff20
mov al, byte [ebp - 0x10f]
cmp byte [ebp - 0x110], bl
jne 0x47ff98
cmp al, bl
jne 0x47ff98
mov eax, 2
xor ecx, ecx
cmp esi, eax
jbe 0x47ffb9
cmp byte [ebp + eax - 0x110], bl
jne 0x47ff66
inc ecx
cmp ecx, 2
je 0x47ff8b
inc eax
cmp eax, esi
jb 0x47ff57
cmp ecx, 1
jne 0x47ffb9
cmp byte [ebp + esi - 0x110], bl
je 0x47ffb9
mov byte [ebp + esi - 0x110], bl
mov byte [ebp + esi - 0x10f], 0
inc esi
jmp 0x47ffb9
mov byte [ebp + eax - 0x10f], 0
lea esi, [eax + 1]
jmp 0x47ffb9
cmp al, 0x3a
jne 0x47ffb0
mov byte [ebp - 0x10e], bl
mov byte [ebp - 0x10d], 0
mov esi, 3
jmp 0x47ffb9
mov byte [ebp - 0x110], 0
xor esi, esi
mov ebx, dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
push 0x57c0c0
call ebx
xor edi, edi
cmp dword [0x5496e0], edi
je 0x47ffea
lea ecx, [ebp - 0x110]
push ecx
push 0x5496fc
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x4800d0
push 0x57c0c0
mov dword [ebp - 0x118], edi
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
movsx eax, byte [ebp - 0x110]
push 0
push 0
lea edx, [ebp - 0x11c]
push edx
push 0
push 0
neg eax
push 0
sbb eax, eax
lea ecx, [ebp - 0x110]
push 0
and eax, ecx
push eax
call dword [sym.imp.KERNEL32.dll_GetVolumeInformationA]
mov dword [ebp - 0x114], eax
test eax, eax
je 0x48007d
test byte [ebp - 0x11c], 8
je 0x48007d
mov edx, dword [ebp - 0x120]
cmp dword [edx + 8], edi
je 0x48007d
movsx eax, byte [ebp - 0x110]
neg eax
sbb eax, eax
lea ecx, [ebp - 0x110]
and eax, ecx
push eax
call dword [sym.imp.KERNEL32.dll_GetDriveTypeA]
cmp eax, 4
jne 0x48007d
lea edx, [ebp - 0x118]
lea edi, [eax - 3]
mov eax, dword [ebp - 0x124]
push edx
call fcn.0047fdb0
add esp, 4
push 0x57c0c0
call ebx
xor ebx, ebx
cmp dword [ebp - 0x114], ebx
je 0x4800f5
inc esi
push esi
lea eax, [ebp - 0x110]
push eax
push 0x5496fc
call dword [sym.imp.KERNEL32.dll_lstrcpynA]
mov ecx, dword [ebp - 0x11c]
mov edx, dword [ebp - 0x118]
mov dword [0x5496e4], ebx
mov dword [0x5496ec], ecx
mov dword [0x5496f0], edi
mov dword [0x5496f4], edx
mov dword [0x5496e0], 1
mov edi, dword [ebp - 0x120]
mov eax, dword [edi + 8]
mov dword [0x5496e8], eax
mov ecx, dword [edi + 0x18]
mov dword [0x5496f8], ecx
mov ecx, 0x49
mov esi, 0x5496e0
rep movsd dword es:[edi], dword [esi]
jmp 0x4800fb
mov dword [0x5496e0], ebx
push 0x57c0c0
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov ecx, dword [ebp - 4]
mov eax, dword [ebp - 0x114]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.004a8a2f
mov esp, ebp
pop ebp
ret