Function at 0x47de91
Capabilities:
Get storage device properties

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x2cd4
call fcn.0046d920
mov eax, dword [0x67432c]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
mov ebx, ecx
call fcn.00451f63
test al, al
je 0x47dec6
jle 0x47dee7
sbb dl, byte [ecx]
sbb ecx, dword [ecx + esi*4]
add byte [0x73543bee], 0xc7
aad 0x90
xor esi, esi
push esi
lea eax, [ebp - 0x404]
push str..PhysicalDrive_d
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
lea eax, [ebp - 0x404]
push 0
push 0
push 3
add byte [edx + 3], ch
push 0
push 3
push 0
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov edi, eax
cmp edi, 0xffffffff
je 0x47e170
and dword [ebp - 0x2cd4], 0
lea eax, [ebp - 0x2b20]
push 0xc
push 0
push eax
call fcn.00480620
xor eax, eax
push 0x2710
push eax
mov dword [ebp - 0x2b20], eax
mov dword [ebp - 0x2b1c], eax
lea eax, [ebp - 0x2b14]
push eax
call fcn.00480620
add esp, 0x18
lea eax, [ebp - 0x2cd4]
push 0
push eax
push 0x2710
lea eax, [ebp - 0x2b14]
push eax
push 0xc
lea eax, [ebp - 0x2b20]
push eax
push 0x2d1400
push edi
call dword [sym.imp.KERNEL32.dll_DeviceIoControl]
test eax, eax
je 0x47e156
push 0x80
lea eax, [ebp - 0x204]
push 0
push eax
call fcn.00480620
push 0x80
lea eax, [ebp - 0x104]
push 0
push eax
call fcn.00480620
push 0x80
lea eax, [ebp - 0x84]
push 0
push eax
call fcn.00480620
push 0x80
lea eax, [ebp - 0x184]
push 0
push eax
call fcn.00480620
add esp, 0x30
lea eax, [ebp - 0x84]
mov ecx, ebx
push eax
push 0
push dword [ebp - 0x2b08]
lea eax, [ebp - 0x2b14]
push eax
call fcn.0047e323
lea eax, [ebp - 0x104]
mov ecx, ebx
push eax
push 0
push dword [ebp - 0x2b04]
lea eax, [ebp - 0x2b14]
push eax
call fcn.0047e323
lea eax, [ebp - 0x184]
mov ecx, ebx
push eax
push 0
push dword [ebp - 0x2b00]
lea eax, [ebp - 0x2b14]
push eax
call fcn.0047e323
lea eax, [ebp - 0x204]
mov ecx, ebx
push eax
push 1
push dword [ebp - 0x2afc]
lea eax, [ebp - 0x2b14]
push eax
call fcn.0047e323
lea ecx, [ebp - 0x2cd0]
call fcn.0047d868
lea eax, [ebp - 0x84]
push eax
call fcn.0048edf0
pop ecx
test eax, eax
je 0x47e062
lea eax, [ebp - 0x84]
push eax
lea eax, [ebp - 0x2ca8]
push eax
call fcn.0048ee80
pop ecx
pop ecx
lea eax, [ebp - 0x104]
push eax
call fcn.0048edf0
pop ecx
test eax, eax
je 0x47e088
lea eax, [ebp - 0x104]
push eax
lea eax, [ebp - 0x2ca8]
push eax
call fcn.0048ee90
pop ecx
pop ecx
lea eax, [ebp - 0x184]
push eax
lea eax, [ebp - 0x2ba8]
push eax
call fcn.0048ee80
lea eax, [ebp - 0x204]
push eax
lea eax, [ebp - 0x2c28]
push eax
call fcn.0048ee80
add esp, 0x10
lea eax, [ebp - 0x2c28]
mov ecx, ebx
push eax
call fcn.0047e76f
lea eax, [ebp - 0x2ca8]
mov ecx, ebx
push eax
call fcn.0047e76f
lea eax, [ebp - 0x2ba8]
mov ecx, ebx
push eax
call fcn.0047e76f
push 0x2710
lea eax, [ebp - 0x2b14]
push 0
push eax
call fcn.00480620
add esp, 0xc
lea eax, [ebp - 0x2cd4]
xor ecx, ecx
push ecx
push eax
push 0x2710
lea eax, [ebp - 0x2b14]
push eax
push ecx
push ecx
push 0x700a0
push edi
call dword [sym.imp.KERNEL32.dll_DeviceIoControl]
test eax, eax
je 0x47e170
mov eax, dword [ebp - 0x2afc]
mov dword [ebp - 0x2cd0], eax
mov eax, dword [ebp - 0x2af8]
mov dword [ebp - 0x2ccc], eax
xor eax, eax
cmp dword [ebp - 0x2b0c], 0xc
push 2
pop ecx
cmove eax, ecx
mov ecx, ebx
mov dword [ebp - 0x2b28], eax
lea eax, [ebp - 0x2cd0]
push eax
call fcn.0047d8c6
jmp 0x47e169
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str._nDeviceIOControl_IOCTL_STORAGE_QUERY_PROPERTY_error___d_n
call fcn.00416500
pop ecx
pop ecx
push edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
inc esi
cmp esi, 0x10
jl 0x47dec8
call fcn.00452215
test al, al
je 0x47e19e
or byte [edi], dh
xor byte [ebp + 0x494732ab], ah
call 0x7679af58
movsd dword es:[edi], dword [esi]
call 0xff279816
cmp byte [edx], bh
in al, dx
lodsb al, byte [esi]
lcall 0x3f19, 0xe8623959
std
inc dword [eax + eax*8 - 0x379e18c]
call fcn.004520bc
test al, al
je 0x47e1c5
xchg ah, bh
push esi
sbb ah, byte [edx + 0x764f2433]
cdq
imul edx, dword [eax + 0x1c], 0x47
or esp, dword [edi + 0x70]
enter 0xffffffffffffaaa1, 0xffffffffffffffd4
sub al, 0x9e
mov ebx, ecx
mov ebx, 0x62893bae
mov ecx, dword [ebp - 4]
xor eax, eax
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.0046d802
mov esp, ebp
pop ebp
ret