Function at 0x4d2fa0
Capabilities:
Get disk information

Disassembly:
push ebp
mov ebp, esp
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push ebx
push esi
mov byte [ebp - 0xa], cl
mov byte [ebp - 9], dl
mov ebx, eax
xor eax, eax
push ebp
push 0x4d32a4
push dword fs:[eax]
mov dword fs:[eax], esp
mov byte [ebp - 0xb], 0
lea edx, [ebp - 4]
mov eax, ebx
call fcn.00465f10
lea eax, [ebp - 4]
call fcn.004ccb00
mov edx, dword [ebp - 4]
mov eax, ebx
call fcn.00465f48
mov eax, dword [ebp - 4]
test eax, eax
je 0x4d2ff7
sub eax, 4
mov eax, dword [eax]
cmp eax, 0xf0
jle 0x4d301d
push 0
push 1
push 1
mov eax, dword [0x537e7c]
mov eax, dword [eax + 0xb4]
mov cl, 2
xor edx, edx
call fcn.004eb374
jmp 0x4d327c
mov eax, dword [ebp - 4]
test eax, eax
je 0x4d3029
sub eax, 4
mov eax, dword [eax]
cmp eax, 2
jl 0x4d303a
mov eax, dword [ebp - 4]
cmp word [eax], 0x5c
sete al
jmp 0x4d303c
xor eax, eax
test al, al
je 0x4d304d
mov eax, dword [ebp - 4]
cmp word [eax + 2], 0x5c
sete al
jmp 0x4d304f
xor eax, eax
mov ebx, eax
test bl, bl
je 0x4d3077
cmp byte [ebp - 9], 0
jne 0x4d3077
push 0
push 1
push 1
mov eax, dword [0x537e7c]
mov eax, dword [eax + 0x6c]
mov cl, 2
xor edx, edx
call fcn.004eb374
jmp 0x4d327c
test bl, bl
jne 0x4d3122
cmp byte [ebp - 0xa], 0
jne 0x4d308c
mov edx, 4
jmp 0x4d3091
mov edx, 3
mov eax, dword [ebp - 4]
test eax, eax
je 0x4d309d
sub eax, 4
mov eax, dword [eax]
cmp edx, eax
jle 0x4d30a5
mov al, 1
jmp 0x4d30d9
mov eax, dword [ebp - 4]
movzx edx, word [eax]
mov eax, edx
mov ecx, edx
add ecx, 0xffffff9f
sub cx, 0x1a
jae 0x4d30be
mov eax, edx
and ax, 0xffdf
mov esi, 0x4d32b8
cmp ax, 0x100
jae 0x4d30d1
movzx eax, al
bt dword [esi], eax
jb 0x4d30d5
xor eax, eax
jmp 0x4d30d7
mov al, 1
xor al, 1
test al, al
je 0x4d30e1
mov al, 1
jmp 0x4d30ec
mov eax, dword [ebp - 4]
cmp word [eax + 2], 0x3a
setne al
test al, al
je 0x4d30f4
mov al, 1
jmp 0x4d30ff
mov eax, dword [ebp - 4]
cmp word [eax + 4], 0x5c
setne al
test al, al
je 0x4d3156
push 0
push 1
push 1
mov eax, dword [0x537e7c]
mov eax, dword [eax + 0x19c]
mov cl, 2
xor edx, edx
call fcn.004eb374
jmp 0x4d327c
mov eax, dword [ebp - 4]
lea esi, [eax + 4]
mov dx, 0x5c
mov eax, esi
call fcn.00489840
cmp esi, eax
jb 0x4d3156
push 0
push 1
push 1
mov eax, dword [0x537e7c]
mov eax, dword [eax + 0x19c]
mov cl, 2
xor edx, edx
call fcn.004eb374
jmp 0x4d327c
mov eax, dword [ebp - 4]
call fcn.004ccc48
test al, al
jne 0x4d317a
mov eax, dword [ebp - 4]
call fcn.004ccc70
test al, al
jne 0x4d317a
mov eax, dword [ebp - 4]
call fcn.004cccb0
test al, al
je 0x4d3199
push 0
push 1
push 1
mov eax, dword [0x537e7c]
mov eax, dword [eax + 0x18c]
mov cl, 2
xor edx, edx
call fcn.004eb374
jmp 0x4d327c
lea eax, [ebp - 0x10]
push eax
mov ecx, 0x7fffffff
mov edx, 3
mov eax, dword [ebp - 4]
call fcn.00406bec
mov edx, dword [ebp - 0x10]
mov eax, 0x4d32e4
call fcn.004896b8
test eax, eax
je 0x4d31f1
push 0
push 1
push 1
lea edx, [ebp - 0x18]
mov eax, 0x4d32e4
call fcn.004ccd34
mov edx, dword [ebp - 0x18]
lea ecx, [ebp - 0x14]
mov al, 7
call fcn.0048d3fc
mov eax, dword [ebp - 0x14]
mov cl, 2
xor edx, edx
call fcn.004eb374
jmp 0x4d327c
lea edx, [ebp - 0x20]
mov eax, dword [ebp - 4]
call fcn.004895dc
mov eax, dword [ebp - 0x20]
lea edx, [ebp - 0x1c]
call fcn.004890d8
mov eax, dword [ebp - 0x1c]
lea edx, [ebp - 8]
call fcn.004898cc
mov eax, dword [ebp - 8]
call fcn.004d2f34
mov eax, dword [ebp - 8]
call fcn.004899b0
test al, al
jne 0x4d3242
push 0
push 1
push 1
mov eax, dword [0x537e7c]
mov eax, dword [eax + 0x190]
mov cl, 2
xor edx, edx
call fcn.004eb374
jmp 0x4d327c
test bl, bl
jne 0x4d3278
cmp byte [ebp + 8], 0
jne 0x4d3278
mov eax, dword [ebp - 8]
call fcn.004064d4
push eax
call sub.kernel32.dll_GetDriveTypeW
cmp eax, 4
jne 0x4d3278
push 0
push 1
push 1
mov eax, dword [0x537e7c]
mov eax, dword [eax + 0x68]
mov cl, 2
xor edx, edx
call fcn.004eb374
jmp 0x4d327c
mov byte [ebp - 0xb], 1
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4d32ab
lea eax, [ebp - 0x20]
mov edx, 5
call fcn.00406440
lea eax, [ebp - 8]
mov edx, 2
call fcn.00406440
ret