Function at 0x496168
Capabilities:
Get disk information

Disassembly:
push ebp
mov ebp, esp
push ecx
mov ecx, 0x2a
push 0
push 0
dec ecx
jne 0x496171
xchg dword [ebp - 4], ecx
push ebx
push esi
push edi
mov dword [ebp - 0xc], ecx
mov dword [ebp - 8], edx
mov dword [ebp - 4], eax
mov eax, dword [ebp - 8]
call fcn.004050f4
mov eax, dword [ebp + 8]
call fcn.004050f4
xor eax, eax
push ebp
push 0x4967a4
push dword fs:[eax]
mov dword fs:[eax], esp
mov byte [ebp - 0xd], 0
xor edx, edx
mov eax, dword [ebp - 4]
call fcn.00496bd4
xor edx, edx
mov eax, dword [ebp - 4]
call fcn.00496be8
xor edx, edx
push ebp
push 0x49675a
push dword fs:[edx]
mov dword fs:[edx], esp
xor edx, edx
push ebp
push 0x4966fb
push dword fs:[edx]
mov dword fs:[edx], esp
lea eax, [ebp - 0x20]
call fcn.00404c34
mov edx, dword [ebp + 8]
mov eax, 0x4967c0
call fcn.00405248
test eax, eax
jle 0x49620b
mov al, byte [0x4967c4]
push eax
lea eax, [ebp - 0x20]
push eax
xor ecx, ecx
mov edx, 0x4967c0
mov eax, dword [ebp + 8]
call fcn.0040ef14
xor ebx, ebx
mov eax, dword [ebp - 4]
call fcn.00496ac4
test al, al
je 0x4962c5
lea eax, [ebp - 0x14]
push eax
mov ecx, 0x1c
xor edx, edx
mov eax, dword [ebp - 4]
call fcn.0049695c
cmp dword [ebp - 0x14], 0
je 0x496243
lea eax, [ebp - 0x14]
mov edx, 0x4967d0
call fcn.00404f0c
push 0
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x128], eax
mov byte [ebp - 0x124], 0xb
lea ecx, [ebp - 0x128]
mov edx, 0x4967dc
mov eax, dword [ebp - 4]
call fcn.00495880
cmp dword [ebp - 0x14], 0
je 0x4962c5
mov eax, dword [ebp - 0x14]
call fcn.00409be4
test al, al
je 0x4962c5
push dword [ebp - 0x14]
push 0x4967fc
mov eax, dword [ebp - 0xc]
cmp eax, 4
jbe 0x49628f
call fcn.00403ddc
push dword [eax*4 + 0x4a8d20]
lea eax, [ebp - 0x18]
mov edx, 3
call fcn.00404fc4
mov eax, dword [ebp - 0xc]
push eax
mov eax, dword [ebp - 0x20]
push eax
push 0
mov ecx, dword [ebp - 8]
mov edx, dword [ebp - 0x18]
mov eax, dword [ebp - 4]
call fcn.00495888
test al, al
je 0x4962c5
mov byte [ebp - 0xd], 1
mov bl, 1
test bl, bl
jne 0x496383
lea edx, [ebp - 0x14]
mov eax, 0x496808
call fcn.0040f7a8
cmp dword [ebp - 0x14], 0
je 0x4962ec
mov eax, dword [ebp - 0x14]
call fcn.00409be4
test al, al
jne 0x496313
push 0xffffffffffffffff
lea ecx, [ebp - 0x128]
mov edx, 0x496820
mov eax, dword [ebp - 4]
call fcn.00495880
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
call fcn.004046f4
jmp 0x496761
push dword [ebp - 0x14]
push 0x4967fc
mov eax, dword [ebp - 0xc]
cmp eax, 4
jbe 0x496328
call fcn.00403ddc
push dword [eax*4 + 0x4a8d20]
lea eax, [ebp - 0x18]
mov edx, 3
call fcn.00404fc4
push 0
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x128], eax
mov byte [ebp - 0x124], 0xb
lea ecx, [ebp - 0x128]
mov edx, 0x496860
mov eax, dword [ebp - 4]
call fcn.00495880
mov eax, dword [ebp - 0xc]
push eax
mov eax, dword [ebp - 0x20]
push eax
push 0
mov ecx, dword [ebp - 8]
mov edx, dword [ebp - 0x18]
mov eax, dword [ebp - 4]
call fcn.00495888
test al, al
je 0x496383
mov byte [ebp - 0xd], 1
mov bl, 1
test bl, bl
jne 0x49640e
lea edx, [ebp - 0x14]
mov eax, 0x49687c
call fcn.0040f7a8
push 0
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x128], eax
mov byte [ebp - 0x124], 0xb
lea ecx, [ebp - 0x128]
mov edx, 0x496894
mov eax, dword [ebp - 4]
call fcn.00495880
cmp dword [ebp - 0x14], 0
je 0x49640e
push dword [ebp - 0x14]
push 0x4967fc
mov eax, dword [ebp - 0xc]
cmp eax, 4
jbe 0x4963d8
call fcn.00403ddc
push dword [eax*4 + 0x4a8d20]
lea eax, [ebp - 0x18]
mov edx, 3
call fcn.00404fc4
mov eax, dword [ebp - 0xc]
push eax
mov eax, dword [ebp - 0x20]
push eax
push 0
mov ecx, dword [ebp - 8]
mov edx, dword [ebp - 0x18]
mov eax, dword [ebp - 4]
call fcn.00495888
test al, al
je 0x49640e
mov byte [ebp - 0xd], 1
mov bl, 1
test bl, bl
je 0x496424
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
call fcn.004046f4
jmp 0x496761
lea eax, [ebp - 0x120]
xor ecx, ecx
mov edx, pe_nt_image_headers32
call fcn.00403688
lea eax, [ebp - 0x120]
push eax
push pe_nt_image_headers32
call sub.kernel32.dll_GetLogicalDriveStringsA
mov edi, eax
lea eax, [ebp - 0x120]
mov dword [ebp - 0x1c], eax
test edi, edi
jbe 0x4966f1
push 0
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x128], eax
mov byte [ebp - 0x124], 6
lea ecx, [ebp - 0x128]
mov edx, 0x4968b4
mov eax, dword [ebp - 4]
call fcn.00495880
mov eax, dword [ebp - 0x1c]
mov al, byte [eax]
add al, 0xbd
sub al, 0x18
jae 0x496689
lea eax, [ebp - 0x130]
push eax
mov ecx, 1
mov edx, 1
mov eax, dword [ebp - 0x14]
call fcn.00405164
mov eax, dword [ebp - 0x130]
lea edx, [ebp - 0x12c]
call fcn.00409228
mov eax, dword [ebp - 0x12c]
push eax
lea eax, [ebp - 0x138]
push eax
lea eax, [ebp - 0x13c]
mov edx, dword [ebp - 0x1c]
call fcn.00404e3c
mov eax, dword [ebp - 0x13c]
mov ecx, 1
mov edx, 1
call fcn.00405164
mov eax, dword [ebp - 0x138]
lea edx, [ebp - 0x134]
call fcn.00409228
mov edx, dword [ebp - 0x134]
pop eax
call fcn.00405050
jne 0x49656d
mov eax, edi
xor edx, edx
push edx
push eax
lea eax, [ebp - 0x140]
mov edx, dword [ebp - 0x1c]
call fcn.00404e3c
mov eax, dword [ebp - 0x140]
call fcn.00404f04
add eax, 1
jno 0x496531
call fcn.00403de4
cdq
sub dword [esp], eax
sbb dword [esp + 4], edx
pop eax
pop edx
test edx, edx
je 0x496544
call fcn.00403ddc
mov edi, eax
lea eax, [ebp - 0x144]
mov edx, dword [ebp - 0x1c]
call fcn.00404e3c
mov eax, dword [ebp - 0x144]
call fcn.00404f04
add eax, dword [ebp - 0x1c]
add eax, 1
mov dword [ebp - 0x1c], eax
jmp 0x4966e9
mov eax, dword [ebp - 0x1c]
push eax
call sub.kernel32.dll_GetDriveTypeA
mov esi, eax
push 0
mov dword [ebp - 0x128], esi
mov byte [ebp - 0x124], 0
lea ecx, [ebp - 0x128]
mov edx, 0x4968d0
mov eax, dword [ebp - 4]
call fcn.00495880
mov eax, esi
add eax, 0xfffffffe
sub eax, 2
jb 0x4965ae
dec eax
sub eax, 2
jae 0x496689
test bl, bl
jne 0x496689
mov eax, esi
add eax, 0xfffffffe
sub eax, 2
jb 0x4965ca
dec eax
sub eax, 2
jae 0x496689
push 0
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x128], eax
mov byte [ebp - 0x124], 6
lea ecx, [ebp - 0x128]
mov edx, 0x4968ec
mov eax, dword [ebp - 4]
call fcn.00495880
mov eax, dword [ebp - 0x1c]
mov dl, byte [eax]
mov eax, dword [ebp - 4]
call fcn.004969b0
test al, al
je 0x496674
mov eax, dword [ebp - 0xc]
push eax
mov eax, dword [ebp - 0x20]
push eax
push 0
lea eax, [ebp - 0x148]
mov edx, dword [ebp - 0x1c]
call fcn.00404e3c
lea eax, [ebp - 0x148]
mov edx, dword [ebp - 0xc]
cmp edx, 4
jbe 0x49662b
call fcn.00403ddc
mov edx, dword [edx*4 + 0x4a8d20]
call fcn.00404f0c
mov edx, dword [ebp - 0x148]
mov ecx, dword [ebp - 8]
mov eax, dword [ebp - 4]
call fcn.00495888
test al, al
je 0x496689
mov eax, esi
xor edx, edx
push edx
push eax
lea eax, [ebp - 0x14c]
call fcn.004097b8
mov edx, dword [ebp - 0x14c]
mov eax, dword [ebp - 4]
add eax, 4
call fcn.00404c88
mov byte [ebp - 0xd], 1
jmp 0x4966f1
push 0xffffffffffffffff
lea ecx, [ebp - 0x128]
mov edx, 0x496920
mov eax, dword [ebp - 4]
call fcn.00495880
mov eax, edi
xor edx, edx
push edx
push eax
lea eax, [ebp - 0x150]
mov edx, dword [ebp - 0x1c]
call fcn.00404e3c
mov eax, dword [ebp - 0x150]
call fcn.00404f04
add eax, 1
jno 0x4966b2
call fcn.00403de4
cdq
sub dword [esp], eax
sbb dword [esp + 4], edx
pop eax
pop edx
test edx, edx
je 0x4966c5
call fcn.00403ddc
mov edi, eax
lea eax, [ebp - 0x154]
mov edx, dword [ebp - 0x1c]
call fcn.00404e3c
mov eax, dword [ebp - 0x154]
call fcn.00404f04
add eax, dword [ebp - 0x1c]
add eax, 1
mov dword [ebp - 0x1c], eax
test edi, edi
ja 0x49645a
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x496744
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x496761
mov eax, dword [ebp - 4]
call fcn.00496c50
ret
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4967ab
lea eax, [ebp - 0x154]
mov edx, 0xb
call fcn.00404c58
lea eax, [ebp - 0x20]
call fcn.00404c34
lea eax, [ebp - 0x18]
mov edx, 2
call fcn.00404c58
lea eax, [ebp - 8]
call fcn.00404c34
lea eax, [ebp + 8]
call fcn.00404c34
ret