Function at 0x44e88b
Capabilities:
Get disk information

Disassembly:
jmp 0x440b10
push esi
mov esi, dword [esp + 8]
mov al, byte [esi]
test al, al
je 0x440b6b
mov cl, byte [esi + 1]
test cl, cl
je 0x440b6b
cmp al, 0x2f
je 0x440b2a
cmp al, 0x5c
jne 0x440b6b
cmp cl, 0x2f
je 0x440b34
cmp cl, 0x5c
jne 0x440b6b
mov al, byte [esi + 2]
test al, al
lea ecx, [esi + 2]
je 0x440b52
mov edi, edi
cmp al, 0x2f
je 0x440b60
cmp al, 0x5c
je 0x440b60
mov al, byte [ecx + 1]
add ecx, 1
test al, al
jne 0x440b40
pop esi
mov dword [esp + 4], 0x482014
jmp 0x44e88b
cmp byte [ecx], 0
je 0x440b52
cmp byte [ecx + 1], 0
je 0x440b52
push 1
push esi
call fcn.004017f3
add esp, 8
test eax, eax
jne 0x440b52
mov al, byte [esi + 1]
test al, al
je 0x440b8b
cmp al, 0x3a
jne 0x440b8b
cmp byte [esi + 2], 0
je 0x440b52
mov eax, dword [esp + 0xc]
push eax
push esi
call 0x44e88b
add esp, 8
pop esi
ret
push ebp
lea ebp, [esp - 0x1e8]
sub esp, 0x268
mov eax, dword [0x487180]
xor eax, ebp
mov dword [ebp + 0x1e4], eax
push ebx
push esi
mov esi, dword [ebp + 0x1f0]
xor ebx, ebx
cmp esi, ebx
push edi
mov edi, dword [ebp + 0x1f4]
mov dword [ebp - 0x78], esi
jne 0x44e8e2
call fcn.0044ad54
mov dword [eax], ebx
call fcn.0044ad41
push ebx
push ebx
push ebx
push ebx
push ebx
mov dword [eax], 0x16
call fcn.00450931
add esp, 0x14
jmp 0x44eba2
cmp edi, ebx
je 0x44e8be
push 0x4829c4
push esi
call fcn.004589dc
test eax, eax
pop ecx
pop ecx
je 0x44e90d
call fcn.0044ad41
push 2
pop esi
mov dword [eax], esi
call fcn.0044ad54
mov dword [eax], esi
jmp 0x44eba2
cmp byte [esi + 1], 0x3a
jne 0x44e92d
mov al, byte [esi]
cmp al, bl
je 0x44e91e
cmp byte [esi + 2], bl
je 0x44e8f7
movsx eax, al
push eax
call fcn.00458904
pop ecx
sub eax, 0x60
jmp 0x44e932
call fcn.0044f35b
mov dword [ebp - 0x80], eax
lea eax, [ebp - 0x60]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
cmp eax, 0xffffffff
mov dword [ebp - 0x64], eax
jne 0x44ea07
push 0x4829c0
push esi
mov dword [ebp - 0x64], ebx
call fcn.004589dc
test eax, eax
pop ecx
pop ecx
je 0x44e8f7
lea eax, [ebp - 0x64]
push eax
push 0x104
lea eax, [ebp + 0xe0]
push esi
push eax
call fcn.0044e82d
mov esi, eax
add esp, 0x10
cmp esi, ebx
je 0x44e9f0
push esi
call fcn.00451af0
cmp eax, 3
pop ecx
je 0x44e994
call fcn.0044e7b5
test eax, eax
je 0x44e9f0
push esi
call dword [sym.imp.KERNEL32.dll_GetDriveTypeA]
cmp eax, 1
jbe 0x44e9f0
cmp dword [ebp - 0x64], ebx
je 0x44e9ae
push dword [ebp - 0x64]
call fcn.00450ce8
pop ecx
push 0xffffffffffffffff
push ebx
push ebx
push ebx
push 1
push 1
push 0x7bc
mov dword [ebp - 0x60], 0x10
mov dword [ebp - 0x44], ebx
mov dword [ebp - 0x40], ebx
mov byte [ebp - 0x34], bl
call fcn.00457dcb
mov esi, dword [ebp - 0x78]
mov ecx, edx
add esp, 0x1c
mov dword [edi + 0x20], eax
mov dword [edi + 0x24], edx
mov dword [edi + 0x18], eax
mov dword [edi + 0x1c], ecx
mov dword [edi + 0x28], eax
mov dword [edi + 0x2c], ecx
jmp 0x44eb58
cmp dword [ebp - 0x64], ebx
je 0x44e8f7
push dword [ebp - 0x64]
call fcn.00450ce8
pop ecx
jmp 0x44e8f7
cmp dword [ebp - 0x4c], ebx
jne 0x44ea19
cmp dword [ebp - 0x48], ebx
jne 0x44ea19
mov dword [edi + 0x20], ebx
mov dword [edi + 0x24], ebx
jmp 0x44ea73
lea eax, [ebp - 0x7c]
push eax
lea eax, [ebp - 0x4c]
push eax
call dword [sym.imp.KERNEL32.dll_FileTimeToLocalFileTime]
test eax, eax
je 0x44eb8c
lea eax, [ebp - 0x74]
push eax
lea eax, [ebp - 0x7c]
push eax
call dword [sym.imp.KERNEL32.dll_FileTimeToSystemTime]
test eax, eax
je 0x44eb8c
movzx eax, word [ebp - 0x68]
push 0xffffffffffffffff
push eax
movzx eax, word [ebp - 0x6a]
push eax
movzx eax, word [ebp - 0x6c]
push eax
movzx eax, word [ebp - 0x6e]
push eax
movzx eax, word [ebp - 0x72]
push eax
movzx eax, word [ebp - 0x74]
push eax
call fcn.00457dcb
add esp, 0x1c
mov dword [edi + 0x20], eax
mov dword [edi + 0x24], edx
cmp dword [ebp - 0x54], ebx
jne 0x44ea8b
cmp dword [ebp - 0x50], ebx
jne 0x44ea8b
mov eax, dword [edi + 0x20]
mov dword [edi + 0x18], eax
mov eax, dword [edi + 0x24]
mov dword [edi + 0x1c], eax
jmp 0x44eae5
lea eax, [ebp - 0x7c]
push eax
lea eax, [ebp - 0x54]
push eax
call dword [sym.imp.KERNEL32.dll_FileTimeToLocalFileTime]
test eax, eax
je 0x44eb8c
lea eax, [ebp - 0x74]
push eax
lea eax, [ebp - 0x7c]
push eax
call dword [sym.imp.KERNEL32.dll_FileTimeToSystemTime]
test eax, eax
je 0x44eb8c
movzx eax, word [ebp - 0x68]
push 0xffffffffffffffff
push eax
movzx eax, word [ebp - 0x6a]
push eax
movzx eax, word [ebp - 0x6c]
push eax
movzx eax, word [ebp - 0x6e]
push eax
movzx eax, word [ebp - 0x72]
push eax
movzx eax, word [ebp - 0x74]
push eax
call fcn.00457dcb
add esp, 0x1c
mov dword [edi + 0x18], eax
mov dword [edi + 0x1c], edx
cmp dword [ebp - 0x5c], ebx
jne 0x44eafd
cmp dword [ebp - 0x58], ebx
jne 0x44eafd
mov eax, dword [edi + 0x20]
mov dword [edi + 0x28], eax
mov eax, dword [edi + 0x24]
mov dword [edi + 0x2c], eax
jmp 0x44eb4f
lea eax, [ebp - 0x7c]
push eax
lea eax, [ebp - 0x5c]
push eax
call dword [sym.imp.KERNEL32.dll_FileTimeToLocalFileTime]
test eax, eax
je 0x44eb8c
lea eax, [ebp - 0x74]
push eax
lea eax, [ebp - 0x7c]
push eax
call dword [sym.imp.KERNEL32.dll_FileTimeToSystemTime]
test eax, eax
je 0x44eb8c
movzx eax, word [ebp - 0x68]
push 0xffffffffffffffff
push eax
movzx eax, word [ebp - 0x6a]
push eax
movzx eax, word [ebp - 0x6c]
push eax
movzx eax, word [ebp - 0x6e]
push eax
movzx eax, word [ebp - 0x72]
push eax
movzx eax, word [ebp - 0x74]
push eax
call fcn.00457dcb
add esp, 0x1c
mov dword [edi + 0x28], eax
mov dword [edi + 0x2c], edx
push dword [ebp - 0x64]
call dword [sym.imp.KERNEL32.dll_FindClose]
push esi
push dword [ebp - 0x60]
call fcn.004583c8
mov word [edi + 6], ax
mov eax, dword [ebp - 0x40]
mov dword [edi + 0x14], eax
mov eax, dword [ebp - 0x80]
dec eax
pop ecx
mov dword [edi], eax
mov dword [edi + 0x10], eax
pop ecx
mov word [edi + 8], 1
mov word [edi + 4], bx
mov word [edi + 0xc], bx
mov word [edi + 0xa], bx
xor eax, eax
jmp 0x44eba5
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
call fcn.0044ad67
pop ecx
push dword [ebp - 0x64]
call dword [sym.imp.KERNEL32.dll_FindClose]
or eax, 0xffffffff
mov ecx, dword [ebp + 0x1e4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.0044b8bd
add ebp, 0x1e8
leave
ret