Function at 0x467c11
Capabilities:
Get disk information

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x2c
push ebx
lea eax, [ebp + 8]
push esi
push eax
mov dword [ebp - 0x18], ecx
call fcn.0043dcd9
pop ecx
push 5
lea ecx, [ebp - 0x14]
call fcn.004441bf
push 0x14
lea ecx, [ebp - 0x1c]
call fcn.004441bf
mov byte [ebp - 3], 1
mov byte [ebp - 1], 0
mov byte [ebp - 2], 0
mov byte [ebp - 4], 0
jmp 0x467d87
or esi, 0xffffffff
push esi
lea eax, [ebp + 8]
push eax
push str.__fullfile
call fcn.004460ea
add esp, 0xc
test al, al
je 0x467c71
mov byte [ebp - 3], 2
jmp 0x467d87
push esi
lea eax, [ebp + 8]
push eax
push str.__full
call fcn.004460ea
add esp, 0xc
test al, al
je 0x467c90
mov byte [ebp - 3], 1
jmp 0x467d87
push esi
lea eax, [ebp + 8]
push eax
push str.__short
call fcn.004460ea
add esp, 0xc
test al, al
je 0x467caf
mov byte [ebp - 1], 1
jmp 0x467d87
push esi
lea eax, [ebp + 8]
push eax
push 0x4c6610
call fcn.004460ea
add esp, 0xc
test al, al
je 0x467cce
mov byte [ebp - 1], 0x11
jmp 0x467d87
push esi
lea eax, [ebp + 8]
push eax
push str.__long
call fcn.004460ea
add esp, 0xc
test al, al
je 0x467ced
mov byte [ebp - 1], 2
jmp 0x467d87
push esi
lea eax, [ebp + 8]
push eax
push 0x4c6600
call fcn.004460ea
add esp, 0xc
test al, al
je 0x467d09
mov byte [ebp - 1], 0x12
jmp 0x467d87
push 8
lea eax, [ebp + 8]
push eax
push str.__volume
call fcn.0043ddef
add esp, 0xc
test eax, eax
je 0x467d26
mov byte [ebp - 2], 1
jmp 0x467d87
push 0xc
lea eax, [ebp + 8]
push eax
push str.__volumepart
call fcn.0043ddef
add esp, 0xc
test eax, eax
je 0x467d43
mov byte [ebp - 2], 3
jmp 0x467d87
push 6
lea eax, [ebp + 8]
push eax
push str.__part
call fcn.0043ddef
add esp, 0xc
test eax, eax
je 0x467d60
mov byte [ebp - 2], 2
jmp 0x467d87
push 3
lea eax, [ebp + 8]
push eax
push 0x4c65b8
call fcn.0043ddef
add esp, 0xc
test eax, eax
je 0x467d7d
mov byte [ebp - 4], 1
jmp 0x467d87
lea eax, [ebp + 8]
push eax
call fcn.00408ddd
pop ecx
mov eax, dword [ebp + 8]
cmp word [eax], 0x2d
je 0x467c4f
mov ecx, dword [ebp - 0x18]
xor esi, esi
push esi
push 0x3d
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp + 8]
push eax
call fcn.00438f7b
mov dword [ebp + 8], eax
cmp word [eax], 0x3d
jne 0x467dc9
mov ecx, dword [ebp - 0x18]
inc eax
inc eax
push esi
mov dword [ebp + 8], eax
push esi
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp + 8]
push eax
call fcn.00438e0f
mov eax, dword [ebp - 0x1c]
call fcn.0044951e
mov ebx, eax
mov eax, dword [ebp - 0x14]
cmp word [eax], si
je 0x468023
cmp word [ebx], si
je 0x468023
push edi
push ebx
call dword [sym.imp.KERNEL32.dll_lstrlenW]
push ebx
lea ecx, [ebp - 0x10]
lea edi, [eax*8 + 0x104]
call fcn.0044cf2d
lea eax, [edi + 1]
push eax
lea ecx, [ebp - 0x10]
call fcn.004441e6
mov eax, 0x4d8d1c
push eax
mov dword [ebp - 8], esi
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
lea eax, [ebp - 0x24]
push eax
mov dword [ebp - 0x24], esi
call fcn.00403ecb
mov esi, dword [ebp - 0x10]
mov byte [ebp - 0x20], al
lea eax, [ebp - 8]
push eax
push esi
push edi
push ebx
call fcn.00444989
add esp, 0x14
cmp dword [ebp - 8], 0
je 0x467e46
sub dword [ebp - 8], 2
cmp byte [ebp - 1], 0
jle 0x467ec5
push 0x2000
lea ecx, [ebp - 0xc]
call fcn.004441bf
mov edi, dword [ebp - 0xc]
and word [edi], 0
test byte [ebp - 1], 1
mov ebx, 0x1fff
je 0x467e76
push ebx
push edi
push esi
call dword [sym.imp.KERNEL32.dll_GetShortPathNameW]
jmp 0x467e89
test byte [ebp - 1], 2
je 0x467e97
push ebx
push edi
push esi
call dword [sym.imp.KERNEL32.dll_GetLongPathNameW]
and byte [ebp - 1], 0xfd
test byte [ebp - 1], 0x10
je 0x467e76
cmp word [edi], 0
jne 0x467e76
jmp 0x467ebd
mov eax, esi
mov esi, edi
and word [esi + 0x3ffc], 0
cmp byte [ebp - 3], 1
mov dword [ebp - 0x10], esi
mov dword [ebp - 0xc], eax
jne 0x467ebd
push 0x5c
push 0
push esi
call dword [sym.imp.SHLWAPI.dll_StrRChrW]
mov dword [ebp - 8], eax
lea ecx, [ebp - 0xc]
call fcn.0043dd41
cmp byte [ebp - 0x20], 0
je 0x467ed4
push dword [ebp - 0x24]
call fcn.00403edc
pop ecx
mov eax, 0x4d8d1c
test eax, eax
je 0x467ee4
push eax
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
cmp byte [ebp - 3], 1
jne 0x467ef5
mov eax, dword [ebp - 8]
test eax, eax
je 0x467ef5
and word [eax], 0
cmp byte [ebp - 2], 0
je 0x467fdb
cmp word [esi], 0
je 0x467fdb
cmp word [esi + 2], 0x3a
jne 0x467fdb
mov ebx, 0x1000
push ebx
lea ecx, [ebp - 0xc]
call fcn.004441bf
mov edi, dword [ebp - 0xc]
xor eax, eax
test byte [ebp - 2], 1
mov word [edi], ax
mov cx, word [esi]
mov word [ebp - 0x2c], cx
mov word [ebp - 0x2a], 0x3a
mov word [ebp - 0x28], 0x5c
mov word [ebp - 0x26], ax
mov dword [ebp - 0x20], edi
mov word [esi], ax
je 0x467f65
push ebx
push edi
lea eax, [ebp - 0x2c]
push eax
call dword [sym.imp.KERNEL32.dll_GetVolumeNameForVolumeMountPointW]
test eax, eax
je 0x467f63
cmp word [edi], 0
jne 0x467fb1
xor eax, eax
test byte [ebp - 2], 2
je 0x467fd3
mov cx, word [ebp - 0x2c]
push eax
push eax
push eax
push 0xac
mov word [edi], cx
push 0xffffffffffffffff
mov word [edi + 2], ax
lea eax, [ebp - 0xc]
push 0xffffffffffffffff
push eax
call fcn.0046205d
mov edi, dword [ebp - 0xc]
mov eax, dword [edi]
add esp, 0x1c
test eax, eax
jl 0x467fd3
mov ecx, dword [edi + 4]
test ecx, ecx
jle 0x467fd3
push ecx
push eax
push str._Harddisk_uPartition_u_
push dword [ebp - 0x20]
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x10
mov ebx, dword [ebp - 0x20]
push ebx
call dword [sym.imp.KERNEL32.dll_lstrlenW]
lea ecx, [esi + 6]
push ecx
lea eax, [ebx + eax*2]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
mov eax, esi
mov esi, edi
mov dword [ebp - 0x10], esi
mov dword [ebp - 0xc], eax
lea ecx, [ebp - 0xc]
call fcn.0043dd41
and dword [ebp - 0x20], 0
cmp byte [ebp - 4], 0
mov dword [ebp + 8], esi
pop edi
je 0x468001
cmp word [esi], 0x22
je 0x468001
push 0xffffffffffffffff
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp + 8]
push eax
call fcn.0044953c
add esp, 0xc
push dword [ebp + 8]
mov ecx, dword [ebp - 0x18]
push dword [ebp - 0x14]
call fcn.004438ac
lea ecx, [ebp - 0x20]
call fcn.0043dd41
lea ecx, [ebp - 0x10]
call fcn.0043dd41
xor esi, esi
jmp 0x468028
mov esi, 0x80070057
lea ecx, [ebp - 0x1c]
call fcn.0043dd41
lea ecx, [ebp - 0x14]
call fcn.0043dd41
mov eax, esi
pop esi
pop ebx
leave
ret 8