Function at 0x4a8aa7
Capabilities:
Get disk information

Disassembly:
push ebp
lea ebp, [esp - 0x1e8]
sub esp, 0x268
mov eax, dword [0x4d7334]
xor eax, ebp
mov dword [ebp + 0x1e4], eax
push ebx
push esi
mov esi, dword [ebp + 0x1f0]
xor ebx, ebx
cmp esi, ebx
push edi
mov edi, dword [ebp + 0x1f4]
mov dword [ebp - 0x78], esi
jne 0x4a8afe
call fcn.0047fbea
mov dword [eax], ebx
call fcn.0047fbd7
push ebx
push ebx
push ebx
push ebx
push ebx
mov dword [eax], 0x16
call fcn.00478bda
add esp, 0x14
jmp 0x4a8ddb
cmp edi, ebx
je 0x4a8ada
push 0x4b6f40
push esi
call fcn.004a939c
test eax, eax
pop ecx
pop ecx
je 0x4a8b29
call fcn.0047fbd7
push 2
pop esi
mov dword [eax], esi
call fcn.0047fbea
mov dword [eax], esi
jmp 0x4a8ddb
cmp byte [esi + 1], 0x3a
jne 0x4a8b49
mov al, byte [esi]
cmp al, bl
je 0x4a8b3a
cmp byte [esi + 2], bl
je 0x4a8b13
movsx eax, al
push eax
call fcn.004a92c4
pop ecx
sub eax, 0x60
jmp 0x4a8b4e
call fcn.004934f8
mov dword [ebp - 0x80], eax
lea eax, [ebp - 0x60]
push eax
push esi
call dword [sym.imp.KERNEL32.DLL_FindFirstFileA]
cmp eax, 0xffffffff
mov dword [ebp - 0x64], eax
jne 0x4a8c23
push 0x4b6f3c
push esi
mov dword [ebp - 0x64], ebx
call fcn.004a939c
test eax, eax
pop ecx
pop ecx
je 0x4a8b13
lea eax, [ebp - 0x64]
push eax
push 0x104
lea eax, [ebp + 0xe0]
push esi
push eax
call fcn.004a8a49
mov esi, eax
add esp, 0x10
cmp esi, ebx
je 0x4a8c0c
push esi
call fcn.004766a0
cmp eax, 3
pop ecx
je 0x4a8bb0
call fcn.004a89d1
test eax, eax
je 0x4a8c0c
push esi
call dword [sym.imp.KERNEL32.DLL_GetDriveTypeA]
cmp eax, 1
jbe 0x4a8c0c
cmp dword [ebp - 0x64], ebx
je 0x4a8bca
push dword [ebp - 0x64]
call fcn.00478eb2
pop ecx
push 0xffffffffffffffff
push ebx
push ebx
push ebx
push 1
push 1
push 0x7bc
mov dword [ebp - 0x60], 0x10
mov dword [ebp - 0x44], ebx
mov dword [ebp - 0x40], ebx
mov byte [ebp - 0x34], bl
call fcn.004a8fb7
mov esi, dword [ebp - 0x78]
mov ecx, edx
add esp, 0x1c
mov dword [edi + 0x28], eax
mov dword [edi + 0x2c], edx
mov dword [edi + 0x20], eax
mov dword [edi + 0x24], ecx
mov dword [edi + 0x30], eax
mov dword [edi + 0x34], ecx
jmp 0x4a8d7c
cmp dword [ebp - 0x64], ebx
je 0x4a8b13
push dword [ebp - 0x64]
call fcn.00478eb2
pop ecx
jmp 0x4a8b13
cmp dword [ebp - 0x4c], ebx
jne 0x4a8c35
cmp dword [ebp - 0x48], ebx
jne 0x4a8c35
mov dword [edi + 0x28], ebx
mov dword [edi + 0x2c], ebx
jmp 0x4a8c8f
lea eax, [ebp - 0x7c]
push eax
lea eax, [ebp - 0x4c]
push eax
call dword [sym.imp.KERNEL32.DLL_FileTimeToLocalFileTime]
test eax, eax
je 0x4a8dc5
lea eax, [ebp - 0x74]
push eax
lea eax, [ebp - 0x7c]
push eax
call dword [sym.imp.KERNEL32.DLL_FileTimeToSystemTime]
test eax, eax
je 0x4a8dc5
movzx eax, word [ebp - 0x68]
push 0xffffffffffffffff
push eax
movzx eax, word [ebp - 0x6a]
push eax
movzx eax, word [ebp - 0x6c]
push eax
movzx eax, word [ebp - 0x6e]
push eax
movzx eax, word [ebp - 0x72]
push eax
movzx eax, word [ebp - 0x74]
push eax
call fcn.004a8fb7
add esp, 0x1c
mov dword [edi + 0x28], eax
mov dword [edi + 0x2c], edx
cmp dword [ebp - 0x54], ebx
jne 0x4a8ca7
cmp dword [ebp - 0x50], ebx
jne 0x4a8ca7
mov eax, dword [edi + 0x28]
mov dword [edi + 0x20], eax
mov eax, dword [edi + 0x2c]
mov dword [edi + 0x24], eax
jmp 0x4a8d01
lea eax, [ebp - 0x7c]
push eax
lea eax, [ebp - 0x54]
push eax
call dword [sym.imp.KERNEL32.DLL_FileTimeToLocalFileTime]
test eax, eax
je 0x4a8dc5
lea eax, [ebp - 0x74]
push eax
lea eax, [ebp - 0x7c]
push eax
call dword [sym.imp.KERNEL32.DLL_FileTimeToSystemTime]
test eax, eax
je 0x4a8dc5
movzx eax, word [ebp - 0x68]
push 0xffffffffffffffff
push eax
movzx eax, word [ebp - 0x6a]
push eax
movzx eax, word [ebp - 0x6c]
push eax
movzx eax, word [ebp - 0x6e]
push eax
movzx eax, word [ebp - 0x72]
push eax
movzx eax, word [ebp - 0x74]
push eax
call fcn.004a8fb7
add esp, 0x1c
mov dword [edi + 0x20], eax
mov dword [edi + 0x24], edx
cmp dword [ebp - 0x5c], ebx
jne 0x4a8d19
cmp dword [ebp - 0x58], ebx
jne 0x4a8d19
mov eax, dword [edi + 0x28]
mov dword [edi + 0x30], eax
mov eax, dword [edi + 0x2c]
mov dword [edi + 0x34], eax
jmp 0x4a8d73
lea eax, [ebp - 0x7c]
push eax
lea eax, [ebp - 0x5c]
push eax
call dword [sym.imp.KERNEL32.DLL_FileTimeToLocalFileTime]
test eax, eax
je 0x4a8dc5
lea eax, [ebp - 0x74]
push eax
lea eax, [ebp - 0x7c]
push eax
call dword [sym.imp.KERNEL32.DLL_FileTimeToSystemTime]
test eax, eax
je 0x4a8dc5
movzx eax, word [ebp - 0x68]
push 0xffffffffffffffff
push eax
movzx eax, word [ebp - 0x6a]
push eax
movzx eax, word [ebp - 0x6c]
push eax
movzx eax, word [ebp - 0x6e]
push eax
movzx eax, word [ebp - 0x72]
push eax
movzx eax, word [ebp - 0x74]
push eax
call fcn.004a8fb7
add esp, 0x1c
mov dword [edi + 0x30], eax
mov dword [edi + 0x34], edx
push dword [ebp - 0x64]
call dword [sym.imp.KERNEL32.DLL_FindClose]
push esi
push dword [ebp - 0x60]
call fcn.004a8efe
pop ecx
pop ecx
push 1
push ebx
push ebx
push dword [ebp - 0x44]
mov word [edi + 6], ax
mov word [edi + 8], 1
call fcn.0048b020
mov ecx, dword [ebp - 0x40]
xor esi, esi
add eax, ecx
mov dword [edi + 0x18], eax
mov eax, dword [ebp - 0x80]
adc edx, esi
dec eax
mov dword [edi], eax
mov dword [edi + 0x10], eax
mov dword [edi + 0x1c], edx
mov word [edi + 4], bx
mov word [edi + 0xc], bx
mov word [edi + 0xa], bx
xor eax, eax
jmp 0x4a8dde
call dword [sym.imp.KERNEL32.DLL_GetLastError]
push eax
call fcn.0047fbfd
pop ecx
push dword [ebp - 0x64]
call dword [sym.imp.KERNEL32.DLL_FindClose]
or eax, 0xffffffff
mov ecx, dword [ebp + 0x1e4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.0047e757
add ebp, 0x1e8
leave
ret