Function at 0x4af8d0
Capabilities:
Get storage device properties

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x51c
mov eax, dword [0x4fe37c]
xor eax, ebp
mov dword [ebp - 0xc], eax
mov byte [ebp - 5], 0
mov dword [ebp - 4], 0
mov dword [ebp - 4], 0
jmp 0x4af900
mov eax, dword [ebp - 4]
add eax, 1
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0x10
jge 0x4afb90
movzx ecx, byte [ebp - 5]
test ecx, ecx
jne 0x4afb90
mov dword [ebp - 0x4fc], 0
mov byte [ebp - 0x110], 0
push 0xff
push 0
lea edx, [ebp - 0x10f]
push edx
call fcn.00445020
add esp, 0xc
mov byte [ebp - 0x4f8], 0
push 0x3e7
push 0
lea eax, [ebp - 0x4f7]
push eax
call fcn.00445020
add esp, 0xc
mov ecx, dword [ebp - 4]
push ecx
push str..PhysicalDrive_d
lea edx, [ebp - 0x110]
push edx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
push 0
push 0
push 3
push 0
push 3
push 0
lea eax, [ebp - 0x110]
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov dword [ebp - 0x4fc], eax
cmp dword [ebp - 0x4fc], 0xffffffff
je 0x4afb8b
mov dword [ebp - 0x514], 0
mov dword [ebp - 0x500], 0x2710
mov ecx, dword [ebp - 0x500]
push ecx
push 8
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
push eax
call dword [sym.imp.KERNEL32.dll_HeapAlloc]
mov dword [ebp - 0x510], eax
cmp dword [ebp - 0x510], 0
je 0x4afb7e
push 0xc
push 0
lea edx, [ebp - 0x50c]
push edx
call fcn.00445020
add esp, 0xc
mov dword [ebp - 0x50c], 0
mov dword [ebp - 0x508], 0
push 0
lea eax, [ebp - 0x514]
push eax
mov ecx, dword [ebp - 0x500]
push ecx
mov edx, dword [ebp - 0x510]
push edx
push 0xc
lea eax, [ebp - 0x50c]
push eax
push 0x2d1400
mov ecx, dword [ebp - 0x4fc]
push ecx
call dword [sym.imp.KERNEL32.dll_DeviceIoControl]
test eax, eax
je 0x4afab0
mov edx, dword [ebp - 0x510]
mov dword [ebp - 0x518], edx
mov eax, dword [ebp - 0x518]
cmp dword [eax + 0x18], 0
je 0x4afab0
lea ecx, [ebp - 0x4f8]
push ecx
mov edx, dword [ebp - 0x518]
mov eax, dword [ebp - 0x510]
add eax, dword [edx + 0x18]
push eax
call fcn.004aeb20
add esp, 8
lea ecx, [ebp - 0x4f8]
push ecx
call fcn.004ae9e0
add esp, 4
movsx dx, byte [ebp - 0x4f8]
movzx eax, dx
push eax
call dword [sym.imp.USER32.dll_IsCharAlphaNumericW]
test eax, eax
je 0x4afab0
mov ecx, dword [ebp + 0xc]
push ecx
lea edx, [ebp - 0x4f8]
push edx
mov eax, dword [ebp + 8]
push eax
call fcn.00447f00
add esp, 0xc
mov byte [ebp - 5], 1
movzx ecx, byte [ebp - 5]
test ecx, ecx
jne 0x4afb68
mov edx, dword [ebp - 0x500]
push edx
push 0
mov eax, dword [ebp - 0x510]
push eax
call fcn.00445020
add esp, 0xc
push 0
lea ecx, [ebp - 0x514]
push ecx
mov edx, dword [ebp - 0x500]
push edx
mov eax, dword [ebp - 0x510]
push eax
push 0
push 0
push 0x2d0c10
mov ecx, dword [ebp - 0x4fc]
push ecx
call dword [sym.imp.KERNEL32.dll_DeviceIoControl]
test eax, eax
je 0x4afb68
mov edx, dword [ebp - 0x510]
mov dword [ebp - 0x51c], edx
mov eax, dword [ebp - 0x51c]
add eax, 0x10
push eax
lea ecx, [ebp - 0x4f8]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
lea edx, [ebp - 0x4f8]
push edx
call fcn.004ae9e0
add esp, 4
movsx ax, byte [ebp - 0x4f8]
movzx ecx, ax
push ecx
call dword [sym.imp.USER32.dll_IsCharAlphaNumericW]
test eax, eax
je 0x4afb68
mov edx, dword [ebp + 0xc]
push edx
lea eax, [ebp - 0x4f8]
push eax
mov ecx, dword [ebp + 8]
push ecx
call fcn.00447f00
add esp, 0xc
mov byte [ebp - 5], 1
mov edx, dword [ebp - 0x510]
push edx
push 0
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
push eax
call dword [sym.imp.KERNEL32.dll_HeapFree]
mov eax, dword [ebp - 0x4fc]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x4af8f7
mov al, byte [ebp - 5]
mov ecx, dword [ebp - 0xc]
xor ecx, ebp
call fcn.004443e3
mov esp, ebp
pop ebp
ret