Function at 0x4b9eb5
Capabilities:
Get disk information

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x57117e
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x7c4
mov dword [ebp - 0x7cc], ecx
mov dword [ebp - 0x6ac], 1
mov eax, dword [ebp - 0x7cc]
mov dword [eax + 0x23c4], 0xff
mov dword [ebp - 0x668], 0
jmp 0x4b9f0e
mov ecx, dword [ebp - 0x668]
add ecx, 1
mov dword [ebp - 0x668], ecx
cmp dword [ebp - 0x668], 0x10
jge 0x4b9f39
mov edx, dword [ebp - 0x668]
mov eax, dword [ebp - 0x7cc]
cmp dword [eax + edx*4 + 0x2344], 0
je 0x4b9f37
mov dword [ebp - 0x6ac], 0
jmp 0x4b9eff
cmp dword [ebp - 0x6ac], 0
je 0x4b9f77
mov ecx, dword [ebp - 0x7cc]
call fcn.004ba790
mov ecx, dword [ebp + 0x434]
push ecx
push 0x5ac1b4
lea edx, [ebp - 0x65c]
push edx
call fcn.0054c45b
add esp, 0xc
lea eax, [ebp - 0x65c]
push eax
call fcn.00536ebf
add esp, 4
mov ecx, 1
test ecx, ecx
je 0x4b9fbc
mov edx, dword [ebp + 0x434]
push edx
mov ecx, dword [ebp - 0x7cc]
call fcn.004bb1a5
mov eax, dword [ebp + 0x434]
push eax
push str.SMIControlOpen:_SMIControlClose__d__r_n
lea ecx, [ebp - 0x65c]
push ecx
call fcn.0054c45b
add esp, 0xc
lea edx, [ebp - 0x65c]
push edx
call fcn.00536ebf
add esp, 4
mov eax, dword [ebp + 0x434]
mov ecx, dword [ebp - 0x7cc]
cmp dword [ecx + eax*4 + 0x2344], 0
je 0x4b9ff2
mov edx, dword [ebp + 0x434]
mov eax, dword [ebp - 0x7cc]
mov ecx, dword [eax + edx*4 + 0x2344]
cmp dword [ecx + 0x477c], 0xffffffff
jne 0x4ba75c
mov edx, dword [ebp + 0x434]
push edx
push str._____SMIControlOpen__d_
lea eax, [ebp - 0x45c]
push eax
call fcn.0054c45b
add esp, 0xc
lea ecx, [ebp - 0x45c]
push ecx
call fcn.00536ebf
add esp, 4
push 0x37378
call fcn.00560be2
add esp, 4
mov dword [ebp - 0x7c8], eax
mov dword [ebp - 4], 0
cmp dword [ebp - 0x7c8], 0
je 0x4ba052
mov ecx, dword [ebp - 0x7c8]
call fcn.004d9980
mov dword [ebp - 0x7d0], eax
jmp 0x4ba05c
mov dword [ebp - 0x7d0], 0
mov edx, dword [ebp - 0x7d0]
mov dword [ebp - 0x7c4], edx
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp + 0x434]
mov ecx, dword [ebp - 0x7cc]
mov edx, dword [ebp - 0x7c4]
mov dword [ecx + eax*4 + 0x2344], edx
mov eax, dword [ebp + 0x434]
mov ecx, dword [ebp - 0x7cc]
mov edx, dword [ecx + eax*4 + 0x2344]
mov dword [edx + 0x36f34], 1
mov eax, dword [0x5be024]
mov dword [0x5cc5ac], eax
mov ecx, dword [ebp + 0x434]
mov edx, dword [ebp - 0x7cc]
mov eax, dword [edx + ecx*4 + 0x2344]
mov ecx, dword [0x5be014]
mov dword [eax + 0x36f38], ecx
push 0x2518
push 0x5cc4c0
mov edx, dword [ebp + 0x434]
mov eax, dword [ebp - 0x7cc]
mov ecx, dword [eax + edx*4 + 0x2344]
add ecx, 0x2ac0
push ecx
call fcn.0054c980
add esp, 0xc
push 0xe4dc
push 0x5bdfe0
mov edx, dword [ebp + 0x434]
mov eax, dword [ebp - 0x7cc]
mov ecx, dword [eax + edx*4 + 0x2344]
add ecx, 0x28a50
push ecx
call fcn.0054c980
add esp, 0xc
mov edx, dword [ebp + 0x434]
mov eax, dword [ebp - 0x7cc]
mov ecx, dword [eax + edx*4 + 0x2344]
mov dword [ecx + 0x1ec], 0
cmp dword [0x5be024], 0
je 0x4ba170
movsx edx, byte [ebp + 0x10]
and edx, 0x7f
add edx, 1
push edx
push str._d:_
lea eax, [ebp - 0x6bc]
push eax
call fcn.0054c45b
add esp, 0xc
jmp 0x4ba1f2
mov ecx, dword [ebp + 0x434]
mov edx, dword [ebp - 0x7cc]
mov eax, dword [edx + ecx*4 + 0x2344]
cmp dword [eax + 0x36f38], 0
je 0x4ba1c0
movsx ecx, byte [ebp + 0x10]
push ecx
push 0x5ac22c
lea edx, [ebp - 0x6bc]
push edx
call fcn.0054c45b
add esp, 0xc
movsx eax, byte [ebp + 0x10]
push eax
push str..PhysicalDrive_d
lea ecx, [ebp - 0x6a8]
push ecx
call fcn.0054c45b
add esp, 0xc
jmp 0x4ba1f2
movsx edx, byte [ebp + 0x10]
push edx
push 0x5ac248
lea eax, [ebp - 0x6bc]
push eax
call fcn.0054c45b
add esp, 0xc
movsx ecx, byte [ebp + 0x10]
push ecx
push 0x5ac250
lea edx, [ebp - 0x6a8]
push edx
call fcn.0054c45b
add esp, 0xc
cmp dword [0x5be024], 0
jne 0x4ba418
push 0x50
lea eax, [ebp - 0x5c]
push eax
push 0
push 0
lea ecx, [ebp - 0x660]
push ecx
push 0xff
lea edx, [ebp - 0x7c0]
push edx
lea eax, [ebp - 0x6bc]
push eax
call dword [sym.imp.KERNEL32.dll_GetVolumeInformationA]
test eax, eax
je 0x4ba26e
movsx ecx, byte [ebp - 0x5c]
cmp ecx, 0x4e
jne 0x4ba26e
movsx edx, byte [ebp - 0x5b]
cmp edx, 0x54
jne 0x4ba26e
movsx eax, byte [ebp - 0x5a]
cmp eax, 0x46
jne 0x4ba26e
movsx ecx, byte [ebp - 0x59]
cmp ecx, 0x53
jne 0x4ba26e
mov edx, dword [ebp + 0x434]
mov eax, dword [ebp - 0x7cc]
mov ecx, dword [eax + edx*4 + 0x2344]
mov dword [ecx + 0x1ec], 1
mov edx, dword [ebp + 0x434]
mov eax, dword [ebp - 0x7cc]
mov ecx, dword [eax + edx*4 + 0x2344]
cmp dword [ecx + 0x477c], 0
jne 0x4ba416
cmp dword [ebp + 0x438], 0
jne 0x4ba347
push 0
push 0x20000000
push 3
push 0
push 3
push 0xc0000000
lea edx, [ebp + 0x31]
push edx
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov ecx, dword [ebp + 0x434]
mov edx, dword [ebp - 0x7cc]
mov ecx, dword [edx + ecx*4 + 0x2344]
mov dword [ecx + 0x477c], eax
mov edx, dword [ebp + 0x434]
mov eax, dword [ebp - 0x7cc]
mov ecx, dword [eax + edx*4 + 0x2344]
mov edx, dword [ecx + 0x477c]
push edx
mov eax, dword [ebp + 0x434]
push eax
push str.SMIControlOpen:_m_SMIObject__d___testparam.hDevice___X_r_n
lea ecx, [ebp - 0x65c]
push ecx
call fcn.0054c45b
add esp, 0x10
lea edx, [ebp - 0x65c]
push edx
call fcn.00536ebf
add esp, 4
lea eax, [ebp + 0x31]
push eax
mov ecx, dword [ebp + 0x434]
push ecx
push str.SMIControlOpen:_m_SMIObject__d_:_SMIPort.szUSBStorPath___s_r_n
lea edx, [ebp - 0x65c]
push edx
call fcn.0054c45b
add esp, 0x10
lea eax, [ebp - 0x65c]
push eax
call fcn.00536ebf
add esp, 4
jmp 0x4ba416
mov ecx, dword [ebp + 0x434]
mov edx, dword [ebp - 0x7cc]
mov eax, dword [edx + ecx*4 + 0x2344]
cmp dword [eax + 0x29038], 0
je 0x4ba39d
push 0
push 0x20000000
push 3
push 0
push 3
push 0xc0000000
lea ecx, [ebp - 0x6a8]
push ecx
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov edx, dword [ebp + 0x434]
mov ecx, dword [ebp - 0x7cc]
mov edx, dword [ecx + edx*4 + 0x2344]
mov dword [edx + 0x477c], eax
jmp 0x4ba416
push 0
push 0x20000000
push 3
push 0
push 3
push 0xc0000000
lea eax, [ebp + 0x31]
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov ecx, dword [ebp + 0x434]
mov edx, dword [ebp - 0x7cc]
mov ecx, dword [edx + ecx*4 + 0x2344]
mov dword [ecx + 0x477c], eax
mov edx, dword [ebp + 0x434]
mov eax, dword [ebp - 0x7cc]
mov ecx, dword [eax + edx*4 + 0x2344]
mov edx, dword [ecx + 0x477c]
push edx
mov eax, dword [ebp + 0x434]
push eax
push str.Paul:_L1002_SMIControlOpen:_m_SMIObject__d___testparam.hDevice___X_r_n
lea ecx, [ebp - 0x65c]
push ecx
call fcn.0054c45b
add esp, 0x10
lea edx, [ebp - 0x65c]
push edx
call fcn.00536ebf
add esp, 4
jmp 0x4ba456
lea eax, [ebp + 0x31]
push eax
mov ecx, dword [ebp + 0x434]
mov edx, dword [ebp - 0x7cc]
mov eax, dword [edx + ecx*4 + 0x2344]
add eax, 0x4774
push eax
mov ecx, dword [ebp + 0x434]
mov edx, dword [ebp - 0x7cc]
mov eax, dword [edx + ecx*4 + 0x2344]
add eax, 0x4778
push eax
lea ecx, [ebp + 8]
call fcn.00540640
cmp dword [0x5be024], 0
jne 0x4ba47b
mov ecx, dword [ebp + 0x434]
mov edx, dword [ebp - 0x7cc]
mov eax, dword [edx + ecx*4 + 0x2344]
cmp dword [eax + 0x477c], 0xffffffff
jne 0x4ba4c8
cmp dword [0x5be024], 0
je 0x4ba6eb
mov ecx, dword [ebp + 0x434]
mov edx, dword [ebp - 0x7cc]
mov eax, dword [edx + ecx*4 + 0x2344]
cmp dword [eax + 0x4778], 0xffffffff
je 0x4ba6eb
mov ecx, dword [ebp + 0x434]
mov edx, dword [ebp - 0x7cc]
mov eax, dword [edx + ecx*4 + 0x2344]
cmp dword [eax + 0x4774], 0xffffffff
je 0x4ba6eb
mov ecx, dword [ebp + 0x434]
mov edx, dword [ebp - 0x7cc]
mov eax, dword [edx + ecx*4 + 0x2344]
cmp dword [eax + 0x2bac], 0
je 0x4ba503
mov ecx, dword [ebp + 0x434]
mov edx, dword [ebp - 0x7cc]
mov eax, dword [edx + ecx*4 + 0x2344]
mov dword [eax + 0x4768], 1
jmp 0x4ba527
mov ecx, dword [ebp - 0x7cc]
call fcn.004bb4e8
mov ecx, dword [ebp + 0x434]
mov edx, dword [ebp - 0x7cc]
mov ecx, dword [edx + ecx*4 + 0x2344]
mov dword [ecx + 0x4768], eax
cmp dword [0x5be024], 0
jne 0x4ba5d9
mov ecx, dword [ebp - 0x7cc]
call fcn.004bb428
test eax, eax
je 0x4ba581
push 0
lea edx, [ebp - 0x664]
push edx
push 0
push 0
push 0
push 0
push 0x90018
mov eax, dword [ebp + 0x434]
mov ecx, dword [ebp - 0x7cc]
mov edx, dword [ecx + eax*4 + 0x2344]
mov eax, dword [edx + 0x477c]
push eax
call dword [sym.imp.KERNEL32.dll_DeviceIoControl]
mov dword [ebp - 0x6c0], eax
jmp 0x4ba5d9
mov ecx, dword [ebp + 0x434]
mov edx, dword [ebp - 0x7cc]
mov eax, dword [edx + ecx*4 + 0x2344]
cmp dword [eax + 0x1ec], 0
je 0x4ba5d9
push 0
lea ecx, [ebp - 0x664]
push ecx
push 0
push 0
push 0
push 0
push 0x90018
mov edx, dword [ebp + 0x434]
mov eax, dword [ebp - 0x7cc]
mov ecx, dword [eax + edx*4 + 0x2344]
mov edx, dword [ecx + 0x477c]
push edx
call dword [sym.imp.KERNEL32.dll_DeviceIoControl]
mov dword [ebp - 0x6c0], eax
push 0x5d96b8
mov eax, dword [ebp + 0x434]
mov ecx, dword [ebp - 0x7cc]
mov edx, dword [ecx + eax*4 + 0x2344]
add edx, 0x29fc
push edx
call fcn.0054c45b
add esp, 8
mov eax, dword [ebp + 0x434]
mov ecx, dword [ebp - 0x7cc]
mov edx, dword [ecx + eax*4 + 0x2344]
mov eax, dword [ebp + 0x434]
mov dword [edx + 0x194], eax
mov ecx, dword [ebp + 0x434]
mov edx, dword [ebp - 0x7cc]
mov eax, dword [edx + ecx*4 + 0x2344]
mov ecx, dword [ebp + 0x438]
mov dword [eax + 0x36f44], ecx
mov edx, dword [ebp + 0x434]
mov eax, dword [ebp - 0x7cc]
mov ecx, dword [eax + edx*4 + 0x2344]
mov edx, dword [ebp - 0x7cc]
mov eax, dword [edx + 0x23c8]
mov dword [ecx + 0x36f40], eax
mov ecx, dword [ebp + 0x434]
push ecx
mov ecx, dword [ebp - 0x7cc]
call fcn.004cc30f
mov edx, dword [ebp + 0x434]
mov eax, dword [ebp - 0x7cc]
mov ecx, dword [eax + edx*4 + 0x2344]
mov dl, byte [ebp + 0x10]
mov byte [ecx + 0x4760], dl
mov eax, dword [ebp - 0x7cc]
cmp dword [eax + 0x23c4], 0xff
jne 0x4ba6b5
mov ecx, dword [ebp - 0x7cc]
mov edx, dword [ebp + 0x434]
mov dword [ecx + 0x23c4], edx
cmp dword [ebp + 0x438], 0
je 0x4ba6e1
lea eax, [ebp + 0x31]
push eax
mov ecx, dword [ebp + 0x434]
shl ecx, 8
mov edx, dword [ebp - 0x7cc]
lea eax, [edx + ecx + 0x2c4]
push eax
call fcn.0054bec0
add esp, 8
mov eax, 1
jmp 0x4ba780
push 0x2518
push 0x5cc4c0
mov ecx, dword [ebp + 0x434]
mov edx, dword [ebp - 0x7cc]
mov eax, dword [edx + ecx*4 + 0x2344]
add eax, 0x2ac0
push eax
call fcn.0054c980
add esp, 0xc
push 0xe4dc
push 0x5bdfe0
mov ecx, dword [ebp + 0x434]
mov edx, dword [ebp - 0x7cc]
mov eax, dword [edx + ecx*4 + 0x2344]
add eax, 0x28a50
push eax
call fcn.0054c980
add esp, 0xc
mov ecx, dword [ebp + 0x434]
mov edx, dword [ebp - 0x7cc]
mov dword [edx + ecx*4 + 0x2384], 0
xor eax, eax
jmp 0x4ba780
mov eax, dword [ebp + 0x434]
mov ecx, dword [ebp - 0x7cc]
mov edx, dword [ecx + eax*4 + 0x2344]
mov eax, dword [ebp + 0x438]
mov dword [edx + 0x36f44], eax
mov eax, 2
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 0x434