Function at 0x4f6fe3
Capabilities:
Get disk size
Get file size

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x84
mov eax, dword [0x5c9040]
xor eax, esp
mov dword [esp + 0x80], eax
mov eax, dword [ebp + 8]
push ebx
push esi
xor ebx, ebx
mov esi, ecx
mov dword [esp + 0xc], ebx
mov dword [esp + 0x10], ebx
push edi
test esi, esi
jne 0x4f704a
push str.file
push str.expr__s_:_assert_failed_n
push str.os_local_file_size_win
push 0x37a
push str.E:work_netbar_smcli_srcliblibpaloswindows_os_file2.h
push 0x5a9534
push 3
push ebx
call fcn.004e8a0a
add esp, 0x20
call fcn.004ee4bf
xor eax, eax
xor edx, edx
jmp 0x4f722a
cmp edx, 1
jne 0x4f70e3
add eax, 4
push eax
push 0x5ae044
lea eax, [esp + 0x74]
push 0x20
push eax
call fcn.004ea423
add esp, 0x10
lea eax, [esp + 0xc]
push eax
lea eax, [esp + 0x24]
push eax
lea eax, [esp + 0x24]
push eax
lea eax, [esp + 0x24]
push eax
lea eax, [esp + 0x7c]
push eax
call dword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceA]
test eax, eax
jne 0x4f70c4
lea eax, [esp + 0x6c]
push eax
push str.GetDiskFreeSpaceA___s__error:
push str.os_local_file_size_win
push 0x385
push str.E:work_netbar_smcli_srcliblibpaloswindows_os_file2.h
push 0x5a9534
push pe_nt_image_headers32
push ebx
call fcn.004e8a0a
add esp, 0x20
or edx, 0xffffffff
mov eax, edx
jmp 0x4f722a
mov eax, dword [esp + 0x18]
mul dword [esp + 0x1c]
mov ecx, eax
mov eax, edx
mul dword [esp + 0xc]
mov esi, eax
mov eax, ecx
mul dword [esp + 0xc]
add edx, esi
jmp 0x4f722a
cmp edx, 2
je 0x4f70f1
cmp edx, 3
jne 0x4f71fc
mov edi, dword [sym.imp.KERNEL32.dll_DeviceIoControl]
lea eax, [esp + 0xc]
push ebx
push eax
push 8
lea eax, [esp + 0x2c]
push eax
push ebx
push ebx
push 0x7405c
push esi
call edi
test eax, eax
je 0x4f711f
mov eax, dword [esp + 0x20]
mov edx, dword [esp + 0x24]
jmp 0x4f722a
push str.IOCTL_DISK_GET_LENGTH_INFO_error:
push str.os_local_file_size_win
push 0x394
push str.E:work_netbar_smcli_srcliblibpaloswindows_os_file2.h
push 0x5a9534
push pe_nt_image_headers32
push ebx
call fcn.004e8a0a
add esp, 0x1c
lea eax, [esp + 0xc]
push ebx
push eax
push 0x28
lea eax, [esp + 0x4c]
push eax
push ebx
push ebx
push 0x700a0
push esi
call edi
test eax, eax
je 0x4f716e
mov eax, dword [esp + 0x58]
mov edx, dword [esp + 0x5c]
jmp 0x4f722a
push str.IOCTL_DISK_GET_DRIVE_GEOMETRY_EX_error:
push str.os_local_file_size_win
push 0x399
push str.E:work_netbar_smcli_srcliblibpaloswindows_os_file2.h
push 0x5a9534
push pe_nt_image_headers32
push ebx
call fcn.004e8a0a
add esp, 0x1c
lea eax, [esp + 0xc]
push ebx
push eax
push 0x18
lea eax, [esp + 0x34]
push eax
push ebx
push ebx
push 0x70000
push esi
call edi
test eax, eax
je 0x4f71d5
mov eax, dword [esp + 0x3c]
mul dword [esp + 0x38]
push ebx
push dword [esp + 0x38]
push edx
push eax
call fcn.0054e5c0
push dword [esp + 0x2c]
push dword [esp + 0x2c]
push edx
push eax
call fcn.0054e5c0
jmp 0x4f722a
push str.IOCTL_DISK_GET_DRIVE_GEOMETRY_error:
push str.os_local_file_size_win
push 0x39e
push str.E:work_netbar_smcli_srcliblibpaloswindows_os_file2.h
push 0x5a9534
push pe_nt_image_headers32
push ebx
call fcn.004e8a0a
add esp, 0x1c
call fcn.004f9d60
mov eax, dword [eax + 4]
test eax, eax
je 0x4f721a
lea ecx, [esp + 0x10]
push ecx
push esi
call eax
test eax, eax
je 0x4f721a
mov eax, dword [esp + 0x10]
jmp 0x4f7226
lea eax, [esp + 0x14]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_GetFileSize]
mov edx, dword [esp + 0x14]
mov ecx, dword [esp + 0x8c]
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.0051b034
mov esp, ebp
pop ebp
ret