Function at 0x42294e
Capabilities:
Get disk information

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1cc
mov eax, dword [0x4d8300]
xor eax, ebp
mov dword [ebp - 4], eax
xor eax, eax
mov dword [ebp - 0x1c0], edx
inc eax
push ebx
mov dword [ebp - 0x1b4], eax
mov ebx, ecx
mov ax, word [0x4b5824]
push esi
mov word [ebp - 0x1ac], ax
xor esi, esi
mov al, byte [0x4b5826]
push edi
mov dword [ebp - 0x1b8], ebx
mov edi, esi
mov byte [ebp - 0x1aa], al
call dword [sym.imp.KERNEL32.dll_GetTickCount64]
push esi
push esi
mov ecx, eax
mov eax, ebx
push esi
mov esi, dword [sym.imp.USER32.dll_SendMessageW]
xor ebx, ebx
add eax, ecx
mov dword [ebp - 0x1c8], ecx
push 0x147
push dword [0x5222a4]
adc ebx, edx
mov dword [ebp - 0x1bc], eax
mov dword [ebp - 0x1c4], ebx
call esi
push eax
push 0x150
push dword [0x5222a4]
call esi
mov esi, eax
mov dword [ebp - 0x1b0], esi
cmp esi, 0x80
jb 0x422c49
cmp esi, 0xffffffff
je 0x422c49
cmp dword [ebp - 0x1c0], edi
je 0x422a13
push 0xcce
push edi
push edi
push 1
call fcn.00414c2d
add esp, 0x10
mov ecx, esi
call fcn.00403ca0
mov dword [ebp - 0x1cc], eax
push 0x104
lea ebx, [eax + 4]
lea eax, [ebp - 0x1a8]
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_QueryDosDeviceA]
test eax, eax
je 0x422aac
mov edx, dword [ebp - 0x1b8]
push 1
push ecx
push ecx
lea ecx, [ebp - 0x1a8]
call fcn.0041c637
mov cl, al
add esp, 0xc
mov eax, dword [0x4dc5d0]
test eax, eax
jns 0x422a67
cmp ax, 0x4c7
je 0x422c27
test cl, cl
je 0x422aac
xor eax, eax
push ebx
push str.Found_potentially_blocking_process_es__against__s:
mov dword [ebp - 0x1b4], eax
call fcn.0042ed57
xor ebx, ebx
pop ecx
pop ecx
cmp dword [0x521f34], ebx
jbe 0x422aac
xor esi, esi
mov eax, dword [0x521f30]
push dword [esi + eax]
call fcn.0042ed57
inc ebx
lea esi, [esi + 4]
pop ecx
cmp ebx, dword [0x521f34]
jb 0x422a8c
mov esi, dword [ebp - 0x1b0]
push 0
lea edx, [ebp - 0x20]
mov ecx, esi
call fcn.00404f70
pop ecx
mov cl, byte [ebp - 0x20]
test cl, cl
je 0x422baf
lea esi, [ebp - 0x20]
mov dword [ebp - 0x1b0], esi
push 0x104
lea eax, [ebp - 0x1a8]
mov byte [ebp - 0x1ac], cl
push eax
lea eax, [ebp - 0x1ac]
push eax
call dword [sym.imp.KERNEL32.dll_QueryDosDeviceA]
test eax, eax
je 0x422b9c
mov ecx, 0x521f30
call fcn.0042dd0c
call dword [sym.imp.KERNEL32.dll_GetTickCount64]
cmp edx, dword [ebp - 0x1c4]
ja 0x422baf
mov ecx, dword [ebp - 0x1bc]
jb 0x422b20
cmp eax, ecx
jae 0x422baf
push 1
push ecx
mov edx, ecx
push ecx
sub edx, eax
lea ecx, [ebp - 0x1a8]
call fcn.0041c637
mov cl, al
add esp, 0xc
mov eax, dword [0x4dc5d0]
test eax, eax
jns 0x422b4b
cmp ax, 0x4c7
je 0x422c27
test cl, 6
jne 0x422b55
cmp cl, 0x80
jne 0x422b9c
xor eax, eax
mov dword [ebp - 0x1b4], eax
lea eax, [ebp - 0x1ac]
push eax
push str.Found_potentially_blocking_process_es__against__s
call fcn.0042ed57
xor ebx, ebx
pop ecx
pop ecx
cmp dword [0x521f34], ebx
jbe 0x422b9c
xor esi, esi
mov eax, dword [0x521f30]
push dword [esi + eax]
call fcn.0042ed57
inc ebx
lea esi, [esi + 4]
pop ecx
cmp ebx, dword [0x521f34]
jb 0x422b7c
mov esi, dword [ebp - 0x1b0]
inc esi
mov dword [ebp - 0x1b0], esi
mov al, byte [esi]
mov cl, al
test al, al
jne 0x422acd
cmp dword [ebp - 0x1c0], edi
je 0x422c07
mov eax, dword [ebp - 0x1b4]
test eax, eax
jne 0x422bfa
mov ecx, dword [0x5222a4]
lea edx, [ebp - 0xa0]
push 0x80
call fcn.0041cf7b
mov dword [esp], 0xc3c
call fcn.00414768
pop ecx
push eax
lea eax, [ebp - 0xa0]
push eax
push 0
push 0
push 4
call fcn.0043232d
add esp, 0x14
xor edi, edi
test eax, eax
cmovne edi, dword [ebp - 0x1b8]
jmp 0x422c27
call dword [sym.imp.KERNEL32.dll_GetTickCount64]
mov ecx, eax
mov eax, dword [ebp - 0x1b8]
sub ecx, dword [ebp - 0x1c8]
sub eax, ecx
cmp ecx, dword [ebp - 0x1b8]
sbb edi, edi
and edi, eax
push 0xc8a
push 0
push 0
push 1
call fcn.00414c2d
push dword [ebp - 0x1cc]
call fcn.004812c6
add esp, 0x14
mov eax, edi
jmp 0x422c4b
xor eax, eax
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.00475c80
leave
ret