Function at 0x449b80
Capabilities:
Get disk information
Get disk size

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
mov eax, 0x10864
call fcn.004a7840
push ebx
push esi
push edi
mov esi, edx
mov edi, ecx
call fcn.0041c820
mov ebx, eax
cmp ebx, 9
jne 0x449bb9
mov eax, dword [ebp + 8]
push 0
push eax
mov eax, edi
call fcn.00449790
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
cmp ebx, 4
jne 0x449c6a
push 0x7ffe
lea ecx, [esp + 0x874]
push edi
push ecx
call fcn.0049cae4
add esp, 0xc
xor edx, edx
lea eax, [esp + 0x870]
mov word [esp + 0x1086c], dx
lea edx, [eax + 2]
lea esp, [esp]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x449bf0
sub eax, edx
sar eax, 1
je 0x449c1b
cmp word [esp + eax*2 + 0x86e], 0x5c
lea eax, [esp + eax*2 + 0x870]
je 0x449c1b
mov ecx, 0x5c
mov word [eax], cx
lea ecx, [esi + 0x12]
mov edi, edi
movzx eax, word [ecx]
cmp eax, 0x20
je 0x449c2d
cmp eax, 9
jne 0x449c32
add ecx, 2
jmp 0x449c20
push ecx
lea edx, [esp + 0x874]
push edx
call dword [sym.imp.KERNEL32.dll_SetVolumeLabelW]
test eax, eax
mov eax, 0x4af9cc
jne 0x449c4f
mov eax, 0x4b360c
push 1
push 0
push 0xffffffffffffffff
push eax
mov eax, dword [0x4d9ea8]
push eax
call fcn.00482b00
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov ecx, dword [0x4d95e0]
mov dword [esp + 0x10], ecx
call fcn.0041a440
cmp ebx, 8
ja case.0x449c82.4
jmp dword [ebx*4 + 0x44a134]
cmp word [edi], 0
jne 0x449c99
mov edi, pe_nt_image_headers32
jmp 0x449d24
push str.CDRom
push edi
call fcn.00499409
add esp, 8
test eax, eax
jne 0x449cb0
lea edi, [eax + 5]
jmp 0x449d24
push str.Removable
push edi
call fcn.00499409
add esp, 8
test eax, eax
jne 0x449cc7
lea edi, [eax + 2]
jmp 0x449d24
push str.Fixed
push edi
call fcn.00499409
add esp, 8
test eax, eax
jne 0x449cde
lea edi, [eax + 3]
jmp 0x449d24
push str.Network
push edi
call fcn.00499409
add esp, 8
test eax, eax
jne 0x449cf5
lea edi, [eax + 4]
jmp 0x449d24
push str.Ramdisk
push edi
call fcn.00499409
add esp, 8
test eax, eax
jne 0x449d0c
lea edi, [eax + 6]
jmp 0x449d24
push str.Unknown
push edi
call fcn.00499409
add esp, 8
test eax, eax
jne case.0x449c82.0
xor edi, edi
mov dword [esp + 0x14], 0
mov bl, 0x41
mov edi, edi
movzx esi, bl
lea ecx, [esp + 0x70]
xor eax, eax
push ecx
mov word [esp + 0x74], si
mov dword [esp + 0x76], 0x5c003a
mov word [esp + 0x7a], ax
call dword [sym.imp.KERNEL32.dll_GetDriveTypeW]
cmp eax, edi
je 0x449d63
cmp edi, 0x100
jne 0x449d71
cmp eax, 1
je 0x449d71
mov eax, dword [esp + 0x14]
mov word [esp + eax*2 + 0x30], si
inc eax
mov dword [esp + 0x14], eax
inc bl
cmp bl, 0x5a
jbe 0x449d30
mov eax, dword [esp + 0x14]
push 1
xor edx, edx
push edx
push 0xffffffffffffffff
lea ecx, [esp + 0x3c]
mov word [esp + eax*2 + 0x3c], dx
mov edx, dword [esp + 0x1c]
push ecx
push edx
call fcn.00482b00
cmp word [esp + 0x30], 0
je case.0x449c82.0
jmp case.0x449c82.4
push 0x7ffe
lea eax, [esp + 0x874]
push edi
push eax
call fcn.0049cae4
add esp, 0xc
xor ecx, ecx
lea eax, [esp + 0x870]
mov word [esp + 0x1086c], cx
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x449dd2
sub eax, edx
sar eax, 1
je 0x449dfd
cmp word [esp + eax*2 + 0x86e], 0x5c
lea eax, [esp + eax*2 + 0x870]
je 0x449dfd
mov edx, 0x5c
mov word [eax], dx
push 0xff
lea eax, [esp + 0x674]
push eax
lea ecx, [esp + 0x34]
push ecx
lea edx, [esp + 0x2c]
push edx
lea eax, [esp + 0x24]
push eax
push 0xff
lea ecx, [esp + 0x288]
push ecx
lea edx, [esp + 0x88c]
push edx
call dword [sym.imp.KERNEL32.dll_GetVolumeInformationW]
test eax, eax
je case.0x449c82.0
mov eax, ebx
sub eax, 2
je 0x449e7d
dec eax
je 0x449e65
sub eax, 2
jne case.0x449c82.4
push 0x18
push eax
mov eax, dword [esp + 0x1c]
push eax
mov eax, dword [esp + 0x1c]
call fcn.00401140
jmp case.0x449c82.4
mov edx, dword [esp + 0x10]
push 1
push 0
push 0xffffffffffffffff
lea ecx, [esp + 0x27c]
push ecx
push edx
jmp 0x44a0a0
mov ecx, dword [esp + 0x10]
push 1
push 0
push 0xffffffffffffffff
lea eax, [esp + 0x67c]
push eax
push ecx
jmp 0x44a0a0
push 0x7ffe
lea edx, [esp + 0x874]
push edi
push edx
call fcn.0049cae4
add esp, 0xc
xor eax, eax
mov word [esp + 0x1086c], ax
lea eax, [esp + 0x870]
lea edx, [eax + 2]
nop
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x449ec0
sub eax, edx
sar eax, 1
je 0x449eeb
cmp word [esp + eax*2 + 0x86e], 0x5c
lea eax, [esp + eax*2 + 0x870]
je 0x449eeb
mov ecx, 0x5c
mov word [eax], cx
lea edx, [esp + 0x870]
push edx
call dword [sym.imp.KERNEL32.dll_GetDriveTypeW]
cmp eax, 6
ja case.0x449c82.0
jmp dword [eax*4 + 0x44a158]
push 1
push 0
push 0xffffffffffffffff
push str.Unknown
jmp 0x44a09b
mov ecx, dword [esp + 0x10]
push 1
push 0
push 0xffffffffffffffff
push str.Removable
push ecx
jmp 0x44a0a0
mov edx, dword [esp + 0x10]
push 1
push 0
push 0xffffffffffffffff
push str.Fixed
push edx
jmp 0x44a0a0
push 1
push 0
push 0xffffffffffffffff
push str.Network
jmp 0x44a09b
mov ecx, dword [esp + 0x10]
push 1
push 0
push 0xffffffffffffffff
push str.CDROM
push ecx
jmp 0x44a0a0
mov edx, dword [esp + 0x10]
push 1
push 0
push 0xffffffffffffffff
push str.RAMDisk
push edx
jmp 0x44a0a0
push 0x7ffe
lea eax, [esp + 0x874]
push edi
push eax
call fcn.0049cae4
add esp, 0xc
xor ecx, ecx
lea eax, [esp + 0x870]
mov word [esp + 0x1086c], cx
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x449fa7
sub eax, edx
sar eax, 1
je 0x449fd2
cmp word [esp + eax*2 + 0x86e], 0x5c
lea eax, [esp + eax*2 + 0x870]
je 0x449fd2
mov edx, 0x5c
mov word [eax], dx
lea eax, [esp + 0x28]
push eax
lea ecx, [esp + 0x20]
push ecx
lea edx, [esp + 0x2c]
push edx
lea eax, [esp + 0x24]
push eax
lea ecx, [esp + 0x880]
push ecx
call dword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceW]
test eax, eax
je 0x449ffc
xor eax, eax
jmp 0x44a007
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x15
ja case.0x44a00e.1
movzx edx, byte [eax + 0x44a188]
jmp dword [edx*4 + 0x44a174]
push 1
push 0
push 0xffffffffffffffff
push str.Ready
jmp 0x44a09b
mov ecx, dword [esp + 0x10]
push 1
push 0
push 0xffffffffffffffff
push str.Invalid
push ecx
jmp 0x44a0a0
mov edx, dword [esp + 0x10]
push 1
push 0
push 0xffffffffffffffff
push str.NotReady
push edx
jmp 0x44a0a0
push 1
push 0
push 0xffffffffffffffff
push str.ReadOnly
jmp 0x44a09b
mov ecx, dword [esp + 0x10]
push 1
push 0
push 0xffffffffffffffff
push str.Unknown
push ecx
jmp 0x44a0a0
cmp word [edi], 0
jne 0x44a0c5
push 0
push 0x80
lea edx, [esp + 0x178]
push edx
push str.status_cdaudio_mode
call dword [sym.imp.WINMM.dll_mciSendStringW]
test eax, eax
jne case.0x449c82.0
push 1
push 0
push 0xffffffffffffffff
lea edx, [esp + 0x17c]
push edx
mov eax, dword [esp + 0x20]
push eax
call fcn.00482b00
mov ecx, dword [0x4d9ea8]
push 1
push 0
push 0xffffffffffffffff
push 0x4af9cc
push ecx
call fcn.00482b00
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
push edi
push str.open__s_type_cdaudio_alias_cd_wait_shareable
mov esi, pe_nt_image_headers32
lea edi, [esp + 0x478]
call fcn.0047f770
mov esi, dword [sym.imp.WINMM.dll_mciSendStringW]
add esp, 8
push 0
push 0
push 0
mov eax, edi
push eax
call esi
test eax, eax
jne case.0x449c82.0
push eax
push 0x80
lea ecx, [esp + 0x178]
push ecx
push str.status_cd_mode
call esi
push 0
push 0
push 0
push str.close_cd_wait
mov edi, eax
call esi
test edi, edi
je 0x44a08d
mov ebx, dword [ebp + 8]
call fcn.0043be60
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4