Function at 0x49ab87
Capabilities:
Get disk information
Get disk size

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffffc8
push ebx
push esi
push edi
mov edi, dword [ebp + 0x18]
mov ebx, dword [ebp + 0x10]
mov esi, dword [ebp + 0xc]
cmp dword [ebx + 8], 0
jne 0x49abb5
push 1
push dword [ebp + 0x1c]
push edi
push ebx
push dword [esi]
push dword [ebp + 8]
call fcn.004e47a0
jmp 0x49b03a
mov eax, dword [ebx + 0x40]
test eax, eax
jne 0x49abc6
mov eax, 2
jmp 0x49b03a
cmp dword [eax + 0x1c], 1
je 0x49abd6
mov eax, 1
jmp 0x49b03a
cmp dword [eax + 0xc], 0
jne 0x49b02a
push dword [eax]
call fcn.0050cfa1
push 2
push 0x564c81
mov edx, dword [ebx + 0x40]
push dword [edx]
call fcn.0054c52c
add esp, 0xc
test eax, eax
jne 0x49ac90
mov ecx, dword [ebx + 0x40]
mov eax, dword [ecx]
push esi
push edi
mov esi, edi
mov edi, eax
xor eax, eax
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
xchg edi, esi
mov eax, edi
mov edx, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
pop edi
pop esi
push 0x5c
lea eax, [edi + 2]
push eax
call fcn.0054c230
add esp, 8
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0
je 0x49ac80
inc dword [ebp - 0x38]
mov edx, dword [ebp - 0x38]
cmp byte [edx], 0
je 0x49aca8
push 0x5c
push dword [ebp - 0x38]
call fcn.0054c230
add esp, 8
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0
je 0x49ac70
inc dword [ebp - 0x38]
mov ecx, dword [ebp - 0x38]
mov byte [ecx], 0
jmp 0x49aca8
push 0x564c85
push edi
call fcn.0054c1f4
add esp, 8
jmp 0x49aca8
push 0x564c88
push edi
call fcn.0054c1f4
add esp, 8
jmp 0x49aca8
mov eax, dword [ebx + 0x40]
mov edx, dword [eax]
xor ecx, ecx
mov cl, byte [edx]
push ecx
push str._c:_
push edi
call sub.USER32.dll_wsprintfA
add esp, 0xc
push edi
call sub.KERNEL32.dll_GetDriveTypeA
mov dword [ebp - 0x34], eax
cmp dword [ebx + 0x10], 0
je 0x49afc0
push 0x2e
push dword [ebx]
call fcn.0054c5b8
add esp, 8
mov dword [ebp - 0x38], eax
test eax, eax
je 0x49afc0
cmp dword [ebp - 0x34], 1
jbe 0x49b02a
push str..label
push dword [ebp - 0x38]
call fcn.0054c494
add esp, 8
test eax, eax
jne 0x49ad15
push 0x3e7
push dword [ebp + 0x1c]
lea edx, [ebp - 0x30]
push edx
lea ecx, [ebp - 0x2c]
push ecx
push 0
push 0x3e7
push dword [ebp + 0x14]
push edi
call sub.KERNEL32.dll_GetVolumeInformationA
jmp 0x49b02a
push str..unc
push dword [ebp - 0x38]
call fcn.0054c494
add esp, 8
test eax, eax
jne 0x49ad68
push edi
push dword [ebp + 0x1c]
call fcn.00517e14
test eax, eax
je 0x49b02a
mov eax, dword [ebp + 0x14]
mov edx, dword [ebp + 0x1c]
push esi
mov esi, eax
mov edi, edx
xor eax, eax
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
xchg edi, esi
mov eax, edi
mov edx, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
pop esi
jmp 0x49b02a
push str..free
push dword [ebp - 0x38]
call fcn.0054c494
add esp, 8
test eax, eax
jne 0x49ae3a
mov eax, dword [ebp + 0x14]
mov byte [eax], 0
cmp dword [0x55cfe8], 0
jne 0x49ad9e
push 0x564ca6
call sub.KERNEL32.dll_LoadLibraryA
mov dword [0x55cfe8], eax
mov eax, dword [0x55cfe8]
test eax, eax
je 0x49addf
push 0x564cb4
push eax
call sub.KERNEL32.dll_GetProcAddress
test eax, eax
je 0x49addf
lea edx, [ebp - 0x18]
push edx
lea ecx, [ebp - 0x10]
push ecx
lea edx, [ebp - 8]
push edx
push edi
call eax
test eax, eax
je 0x49addf
push dword [ebp - 4]
push dword [ebp - 8]
push 0x564cc9
push dword [ebp + 0x14]
call fcn.00551088
add esp, 0x10
mov ecx, dword [ebp + 0x14]
cmp byte [ecx], 0
jne 0x49b02a
mov eax, dword [ebp + 0x14]
push esi
push edi
mov esi, 0x564cd1
mov edi, eax
mov eax, edi
movsw word es:[edi], word [esi]
pop edi
pop esi
lea edx, [ebp - 0x28]
push edx
lea ecx, [ebp - 0x24]
push ecx
lea eax, [ebp - 0x20]
push eax
lea edx, [ebp - 0x1c]
push edx
push edi
call sub.KERNEL32.dll_GetDiskFreeSpaceA
test eax, eax
je 0x49b02a
mov eax, dword [ebp - 0x1c]
imul dword [ebp - 0x20]
imul dword [ebp - 0x24]
push eax
push 0x564cd4
push dword [ebp + 0x14]
call sub.USER32.dll_wsprintfA
add esp, 0xc
jmp 0x49b02a
push 0x564cd9
push dword [ebp - 0x38]
call fcn.0054c494
add esp, 8
test eax, eax
jne 0x49af0c
mov edx, dword [ebp + 0x14]
mov byte [edx], 0
cmp dword [0x55cfe8], 0
jne 0x49ae70
push 0x564ce0
call sub.KERNEL32.dll_LoadLibraryA
mov dword [0x55cfe8], eax
mov eax, dword [0x55cfe8]
test eax, eax
je 0x49aeb1
push str.GetDiskFreeSpaceExA
push eax
call sub.KERNEL32.dll_GetProcAddress
test eax, eax
je 0x49aeb1
lea edx, [ebp - 0x18]
push edx
lea ecx, [ebp - 0x10]
push ecx
lea edx, [ebp - 8]
push edx
push edi
call eax
test eax, eax
je 0x49aeb1
push dword [ebp - 0xc]
push dword [ebp - 0x10]
push 0x564d03
push dword [ebp + 0x14]
call fcn.00551088
add esp, 0x10
mov ecx, dword [ebp + 0x14]
cmp byte [ecx], 0
jne 0x49b02a
mov eax, dword [ebp + 0x14]
push esi
push edi
mov esi, 0x564d0b
mov edi, eax
mov eax, edi
movsw word es:[edi], word [esi]
pop edi
pop esi
lea edx, [ebp - 0x28]
push edx
lea ecx, [ebp - 0x24]
push ecx
lea eax, [ebp - 0x20]
push eax
lea edx, [ebp - 0x1c]
push edx
push edi
call sub.KERNEL32.dll_GetDiskFreeSpaceA
test eax, eax
je 0x49b02a
mov eax, dword [ebp - 0x1c]
imul dword [ebp - 0x20]
imul dword [ebp - 0x28]
push eax
push 0x564d0e
push dword [ebp + 0x14]
call sub.USER32.dll_wsprintfA
add esp, 0xc
jmp 0x49b02a
push 0x564d13
push dword [ebp - 0x38]
call fcn.0054c494
add esp, 8
test eax, eax
jne 0x49b02a
cmp dword [ebp - 0x34], 2
jne 0x49af41
mov edx, dword [ebp + 0x14]
push esi
mov esi, str.removable
mov edi, edx
mov eax, edi
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
pop esi
jmp 0x49b02a
cmp dword [ebp - 0x34], 3
jne 0x49af5d
mov edx, dword [ebp + 0x14]
push esi
mov esi, str.fixed
mov edi, edx
mov eax, edi
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
pop esi
jmp 0x49b02a
cmp dword [ebp - 0x34], 4
jne 0x49af7a
mov edx, dword [ebp + 0x14]
push esi
mov esi, 0x564d2c
mov edi, edx
mov eax, edi
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
pop esi
jmp 0x49b02a
cmp dword [ebp - 0x34], 5
jne 0x49af96
mov edx, dword [ebp + 0x14]
push esi
mov esi, str.cdrom
mov edi, edx
mov eax, edi
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
pop esi
jmp 0x49b02a
cmp dword [ebp - 0x34], 6
jne 0x49afae
mov edx, dword [ebp + 0x14]
push esi
mov esi, str.ramdisk
mov edi, edx
mov eax, edi
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
pop esi
jmp 0x49b02a
mov edx, dword [ebp + 0x14]
push esi
mov esi, 0x564d44
mov edi, edx
mov eax, edi
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
pop esi
jmp 0x49b02a
cmp dword [ebp - 0x34], 1
ja 0x49afda
mov edx, dword [ebp + 0x14]
push esi
mov esi, 0x564d4d
mov edi, edx
mov eax, edi
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
pop esi
jmp 0x49b02a
lea edx, [ebp - 0x28]
push edx
lea ecx, [ebp - 0x24]
push ecx
lea eax, [ebp - 0x20]
push eax
lea edx, [ebp - 0x1c]
push edx
push edi
call sub.KERNEL32.dll_GetDiskFreeSpaceA
test eax, eax
je 0x49b007
mov ecx, dword [ebp + 0x14]
push esi
mov esi, 0x564d55
mov edi, ecx
mov eax, edi
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
pop esi
jmp 0x49b02a
mov edx, dword [ebp + 0x14]
push esi
mov esi, 0x564d5c
mov edi, edx
mov eax, edi
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
pop esi
jmp 0x49b02a
push dword [ebx + 0x40]
push dword [esi]
call fcn.004c6cb6
mov dword [esi], eax
dec dword [ebx + 8]
cmp dword [ebx + 8], 0
jg 0x49b01b
xor edx, edx
mov dword [ebx + 8], edx
mov eax, 2
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x18