Function at 0x56baab
Capabilities:
Get disk information

Disassembly:
push 0x474
mov eax, 0x5828f6
call fcn.00547987
mov eax, dword [ebp + 8]
mov edi, ecx
xor ebx, ebx
push eax
lea ecx, [ebp - 0x42c]
mov dword [ebp - 0x474], edi
mov dword [ebp - 0x46c], ebx
call fcn.00418d10
lea eax, [ebp - 0x464]
xor edx, edx
push eax
inc edx
lea ecx, [ebp - 0x42c]
mov dword [ebp - 4], ebx
call fcn.0056b48b
mov dword [ebp - 0x478], eax
mov esi, 0x5bb0ac
push esi
mov byte [ebp - 4], 1
call fcn.005472f1
pop ecx
pop ecx
mov ecx, dword [ebp - 0x478]
push eax
push esi
push dword [ecx + 0x10]
push ebx
call fcn.00423fe3
push ebx
test eax, eax
push 1
lea ecx, [ebp - 0x464]
setne byte [ebp - 0x465]
mov byte [ebp - 4], bl
call fcn.00418f30
cmp byte [ebp - 0x465], bl
je 0x56bb4f
push esi
call fcn.005472f1
pop ecx
push eax
push esi
lea ecx, [ebp - 0x42c]
call fcn.004247e1
xor eax, eax
inc eax
push eax
mov dword [ebp - 0x478], eax
push ebx
lea eax, [ebp - 0x448]
push eax
lea ecx, [ebp - 0x42c]
mov dword [edi], SysReAllocStringLen
mov dword [edi + 4], ebx
call fcn.00424b97
mov dword [ebp - 0x470], eax
push esi
mov byte [ebp - 4], 2
mov dword [ebp - 0x46c], 1
call fcn.005472f1
pop ecx
mov ecx, dword [ebp - 0x470]
push eax
push esi
push dword [ecx + 0x10]
push ebx
call fcn.00423fe3
test eax, eax
je 0x56bbfa
push 1
push 1
lea eax, [ebp - 0x464]
push eax
lea ecx, [ebp - 0x42c]
call fcn.00424b97
mov dword [ebp - 0x470], eax
push 3
pop eax
mov edi, 0x594c68
push edi
mov dword [ebp - 4], eax
mov dword [ebp - 0x46c], eax
call fcn.005472f1
pop ecx
mov ecx, dword [ebp - 0x470]
push eax
push edi
push dword [ecx + 0x10]
push ebx
call fcn.00423fe3
mov edi, dword [ebp - 0x474]
mov byte [ebp - 0x465], bl
test eax, eax
jne 0x56bc01
mov byte [ebp - 0x465], 1
test byte [ebp - 0x46c], 2
je 0x56bc1f
and dword [ebp - 0x46c], 0xfffffffd
push ebx
push 1
lea ecx, [ebp - 0x464]
call fcn.00418f30
test byte [ebp - 0x46c], 1
mov dword [ebp - 4], ebx
je 0x56bc39
push ebx
push 1
lea ecx, [ebp - 0x448]
call fcn.00418f30
cmp byte [ebp - 0x465], bl
je 0x56bc47
mov dword [ebp - 0x478], ebx
xor eax, eax
push 0x1fe
mov word [ebp - 0x410], ax
lea eax, [ebp - 0x40e]
push ebx
push eax
call fcn.005474c0
xor eax, eax
push 0x1fe
mov word [ebp - 0x210], ax
lea eax, [ebp - 0x20e]
push ebx
push eax
mov dword [ebp - 0x480], ebx
mov dword [ebp - 0x47c], ebx
mov dword [ebp - 0x470], ebx
call fcn.005474c0
add esp, 0x18
cmp dword [ebp - 0x41c], ebx
je 0x56bcb3
cmp dword [ebp - 0x418], 8
jb 0x56bcab
mov ecx, dword [ebp - 0x42c]
jmp 0x56bcb5
lea ecx, [ebp - 0x42c]
jmp 0x56bcb5
xor ecx, ecx
mov eax, 0xff
push eax
lea edx, [ebp - 0x210]
push edx
lea edx, [ebp - 0x470]
push edx
lea edx, [ebp - 0x47c]
push edx
lea edx, [ebp - 0x480]
push edx
push eax
lea eax, [ebp - 0x410]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_GetVolumeInformationW]
mov dword [ebp - 0x474], eax
cmp eax, ebx
je 0x56bd37
lea eax, [ebp - 0x210]
push str.NTFS
push eax
call fcn.00546749
pop ecx
pop ecx
test eax, eax
jne 0x56bd11
or dword [edi], 0xffffffff
mov dword [edi + 4], SysReAllocStringLen
lea eax, [ebp - 0x210]
push 0x5ba788
push eax
call fcn.00546749
pop ecx
pop ecx
test eax, eax
jne 0x56bdf9
or dword [edi], 0xffffffff
mov dword [edi + 4], ebx
jmp 0x56bdf9
mov eax, dword [ebp - 0x41c]
cmp eax, ebx
je 0x56be05
dec eax
push eax
push ebx
lea eax, [ebp - 0x448]
push eax
lea ecx, [ebp - 0x42c]
call fcn.00424b97
push eax
lea ecx, [ebp - 0x42c]
mov byte [ebp - 4], 4
call fcn.00424bb9
push ebx
push 1
lea ecx, [ebp - 0x448]
mov byte [ebp - 4], bl
call fcn.00418f30
push esi
call fcn.005472f1
pop ecx
push eax
push 0xffffffffffffffff
push esi
lea ecx, [ebp - 0x42c]
call fcn.0056bfd8
cmp eax, 0xffffffff
je 0x56bdd5
cmp eax, ebx
jbe 0x56bdd5
inc eax
push eax
push ebx
lea eax, [ebp - 0x448]
push eax
lea ecx, [ebp - 0x42c]
call fcn.00424b97
push eax
lea ecx, [ebp - 0x42c]
mov byte [ebp - 4], 5
call fcn.00424bb9
push ebx
push 1
lea ecx, [ebp - 0x448]
mov byte [ebp - 4], bl
call fcn.00418f30
jmp 0x56bc47
cmp dword [ebp - 0x478], ebx
je 0x56be05
push 0x5bb280
call fcn.005472f1
pop ecx
push eax
push 0x5bb280
lea ecx, [ebp - 0x42c]
call fcn.00418f80
cmp dword [ebp - 0x474], ebx
je 0x56bc47
push ebx
push 1
lea ecx, [ebp - 0x42c]
call fcn.00418f30
mov eax, dword [ebp - 0x474]
call fcn.00547a0a
ret