Function at 0x460ca0
Capabilities:
Get disk information
Get volume information via ioctl

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x1288
call fcn.004e1f60
mov eax, dword [0x55e2f4]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
mov ebx, dword [ebp + 8]
lea eax, [ebp - 0x1214]
push 0x802
push 0
push eax
call fcn.004e46b0
push 0x802
lea eax, [ebp - 0xa10]
push 0
push eax
call fcn.004e46b0
add esp, 0x18
mov dword [ebp - 0xc], 0x3a0000
mov dword [ebp - 8], 0x5c
mov dword [ebp - 0x1278], 0xffffffff
mov dword [ebp - 0x127c], 0xffffffff
call fcn.0041b290
cmp eax, 6
jge 0x460d36
cmp dword [ebp + 0xc], 0
jne 0x460d25
push 0
push str.OS_NOT_SUPPORTED_FOR_INPLACE
call fcn.004636a0
add esp, 8
xor eax, eax
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004e1f40
mov esp, ebp
pop ebp
ret
lea eax, [ebp - 0x1278]
push eax
push 0x51acf4
push ebx
call fcn.004172d0
add esp, 0xc
cmp eax, 1
je 0x460d97
lea eax, [ebp - 0x1278]
push eax
lea eax, [ebp - 0x127c]
push eax
push str.DeviceHarddisk_dPartition_d
push ebx
call fcn.004172d0
add esp, 0x10
cmp eax, 2
je 0x460d97
cmp dword [ebp + 0xc], 0
jne 0x460d25
push 0
push str.INPLACE_ENC_INVALID_PATH
call fcn.00419a00
add esp, 8
xor eax, eax
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004e1f40
mov esp, ebp
pop ebp
ret
cmp dword [ebp - 0x1278], 0
jne 0x460dca
cmp dword [ebp + 0xc], 0
jne 0x460d25
push 0
push str.RAW_DEV_NOT_SUPPORTED_FOR_INPLACE_ENC
call fcn.00419c20
add esp, 8
xor eax, eax
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004e1f40
mov esp, ebp
pop ebp
ret
push esi
call sub.SHELL32.dll_IsUserAnAdmin
mov esi, dword [ebp + 0xc]
test eax, eax
jne 0x460de9
test esi, esi
jne 0x460de9
push esi
push str.ADMIN_PRIVILEGES_WARN_DEVICES
call fcn.00419c20
add esp, 8
push ebx
call fcn.00427440
add esp, 4
test eax, eax
js 0x460e00
cbw
add ax, 0x41
mov word [ebp - 0xc], ax
lea eax, [ebp - 0xa10]
push eax
lea eax, [ebp - 0x1214]
push eax
push ebx
call fcn.00426bf0
add esp, 0xc
test eax, eax
je 0x460e4a
test esi, esi
jne 0x460e38
push dword [0x5685fc]
call fcn.00417c00
push esi
push str.INPLACE_ENC_CANT_ACCESS_OR_GET_INFO_ON_VOL
call fcn.00419a00
add esp, 0xc
pop esi
xor eax, eax
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004e1f40
mov esp, ebp
pop ebp
ret
push edi
push 0
push SysReAllocString
push 3
push 0
push 3
push 0xc0000000
lea eax, [ebp - 0xa10]
push eax
call dword [sym.imp.KERNEL32.DLL_CreateFileW]
mov edi, eax
cmp edi, 0xffffffff
jne 0x460ea5
test esi, esi
jne 0x46106f
push dword [0x5685fc]
call fcn.00417c00
push esi
push str.INPLACE_ENC_CANT_ACCESS_OR_GET_INFO_ON_VOL
call fcn.00419a00
add esp, 0xc
xor eax, eax
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004e1f40
mov esp, ebp
pop ebp
ret
push 0x100
lea eax, [ebp - 0x20c]
push eax
push 0
push 0
push 0
push 0
push 0
lea eax, [ebp - 0xc]
push eax
call dword [sym.imp.KERNEL32.DLL_GetVolumeInformationW]
push 4
lea eax, [ebp - 0x20c]
push str.NTFS
push eax
call fcn.004f845a
add esp, 0xc
test eax, eax
je 0x460f3a
push 0
lea eax, [ebp - 0x1280]
push eax
push 0x60
lea eax, [ebp - 0x1274]
push eax
push 0
push 0
push 0x90064
push edi
call dword [sym.imp.KERNEL32.DLL_DeviceIoControl]
test eax, eax
jne 0x460f3a
test esi, esi
jne 0x461068
lea eax, [ebp - 0xa10]
push eax
call fcn.00429b00
add esp, 4
push esi
test eax, eax
je 0x460f2b
push str.ONLY_NTFS_SUPPORTED_FOR_INPLACE
jmp 0x461060
push str.ONLY_MOUNTED_VOL_SUPPORTED_FOR_INPLACE
call fcn.00419c20
jmp 0x461065
push esi
push 0
push 0
push ebx
push edi
call fcn.004633b0
and eax, edx
add esp, 0x14
cmp eax, 0xffffffff
jne 0x460f64
test esi, esi
jne 0x461068
push 1
push str.INPLACE_ENC_CANT_ACCESS_OR_GET_INFO_ON_VOL_ALT
jmp 0x461060
lea eax, [ebp - 0x1288]
push eax
push ebx
call fcn.004275e0
add esp, 8
test eax, eax
jne 0x460f90
test esi, esi
jne 0x461068
push esi
push str.INPLACE_ENC_CANT_ACCESS_OR_GET_INFO_ON_VOL
call fcn.00419a00
jmp 0x461065
cmp dword [ebp - 0x1284], 0
jg 0x460fba
jl 0x460fa7
cmp dword [ebp - 0x1288], 0x728000
jae 0x460fba
test esi, esi
jne 0x461068
push esi
push str.PARTITION_TOO_SMALL_FOR_INPLACE
jmp 0x461060
push 0
lea eax, [ebp - 0x1280]
push eax
push 0x60
lea eax, [ebp - 0x1274]
push eax
push 0
push 0
push 0x90064
push edi
call dword [sym.imp.KERNEL32.DLL_DeviceIoControl]
test eax, eax
jne 0x460ff1
test esi, esi
jne 0x461068
push 1
push str.INPLACE_ENC_CANT_ACCESS_OR_GET_INFO_ON_VOL
jmp 0x461060
push dword [ebp - 0x1258]
push dword [ebp - 0x125c]
push 0
push dword [ebp - 0x1248]
call fcn.004e2b40
test edx, edx
jg 0x461024
jl 0x461017
cmp eax, 0x40000
jae 0x461024
test esi, esi
jne 0x461068
push 1
push str.NOT_ENOUGH_FREE_FILESYS_SPACE_FOR_SHRINK
jmp 0x461060
mov eax, dword [ebp - 0x124c]
cmp eax, 0x1000
ja 0x461055
test eax, 0x1ff
jne 0x461055
push edi
call dword [sym.imp.KERNEL32.DLL_CloseHandle]
pop edi
pop esi
mov eax, 1
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004e1f40
mov esp, ebp
pop ebp
ret
test esi, esi
jne 0x461068
push 1
push str.SECTOR_SIZE_UNSUPPORTED
call fcn.004636a0
add esp, 8
push edi
call dword [sym.imp.KERNEL32.DLL_CloseHandle]
mov ecx, dword [ebp - 4]
xor eax, eax
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.004e1f40
mov esp, ebp
pop ebp
ret