Function at 0x490fa0
Capabilities:
Get disk information
Get disk information via ioctl

Disassembly:
push 0xffffffffffffffff
push 0x4f08f3
mov eax, dword fs:[0]
push eax
sub esp, 0x438
mov eax, dword [0x53fa2c]
xor eax, esp
mov dword [esp + 0x434], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x53fa2c]
xor eax, esp
push eax
lea eax, [esp + 0x44c]
mov dword fs:[0], eax
mov eax, dword [esp + 0x464]
mov esi, dword [esp + 0x45c]
xor ebx, ebx
mov dword [esp + 0x14], ebx
movzx ecx, word [0x51855c]
movzx edx, byte [0x51855e]
push ebx
push ebx
mov dword [esp + 0x2c], eax
mov eax, dword [str..x:]
push 3
mov word [esp + 0x24], cx
movzx ecx, word [0x518558]
push ebx
mov dword [esp + 0x50], eax
mov al, byte [esp + 0x470]
push 3
mov dword [esp + 0x30], 0x5c3a78
mov byte [esp + 0x2e], dl
movzx edx, byte [0x51855a]
mov word [esp + 0x58], cx
mov byte [esp + 0x30], al
mov byte [esp + 0x2c], al
mov byte [esp + 0x58], al
push ebx
lea eax, [esp + 0x58]
push eax
mov dword [esp + 0x4c], esi
mov byte [esp + 0x62], dl
or ebp, 0xffffffff
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov edi, eax
cmp edi, ebp
jne 0x491077
push 0x5116d8
mov ecx, esi
call dword [sym.imp.mfc90.dll_Ordinal_310]
jmp 0x491207
push ebx
lea ecx, [esp + 0x2c]
push ecx
push 0xc
lea edx, [esp + 0x40]
push edx
push ebx
push ebx
push 0x2d1080
push edi
mov dword [esp + 0x48], ebx
call dword [sym.imp.KERNEL32.dll_DeviceIoControl]
cmp eax, ebx
je 0x49109e
mov ebp, dword [esp + 0x38]
push edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp ebp, 0xffffffff
je 0x4911fa
lea eax, [esp + 0x1c]
push eax
call dword [sym.imp.KERNEL32.dll_GetDriveTypeA]
push 0x200
lea ecx, [esp + 0x4c]
push ecx
lea edx, [esp + 0x20]
push edx
mov edi, eax
call dword [sym.imp.KERNEL32.dll_QueryDosDeviceA]
cmp eax, ebx
je 0x4911fa
lea eax, [esp + 0x48]
push eax
push edi
push ebp
call fcn.00490d60
add esp, 0xc
cmp eax, ebx
je 0x4911fa
push ebx
push eax
lea ecx, [esp + 0x28]
push ecx
mov dword [esp + 0x2c], ebx
call dword [sym.imp.SETUPAPI.dll_CM_Get_Parent]
mov eax, dword [esp + 0x20]
push ebx
push 0x200
lea edx, [esp + 0x250]
push edx
push eax
call dword [sym.imp.SETUPAPI.dll_CM_Get_Device_IDA]
mov edi, dword [sym.imp.MSVCR90.dll_strchr]
lea ecx, [esp + 0x248]
push 0x5c
push ecx
call edi
add esp, 8
mov dword [esp + 0x2c], eax
cmp eax, ebx
je 0x4911fa
lea ebp, [eax + 1]
push 0x5c
push ebp
call edi
add esp, 8
cmp eax, ebx
je 0x4911fa
mov byte [eax], bl
inc eax
mov ecx, eax
lea edi, [ecx + 1]
mov dl, byte [ecx]
inc ecx
cmp dl, bl
jne 0x491155
sub ecx, edi
cmp ecx, 0xa
jbe 0x4911b6
mov ecx, eax
lea edi, [ecx + 1]
mov dl, byte [ecx]
inc ecx
cmp dl, bl
jne 0x491168
sub ecx, edi
lea edi, [eax + ecx - 0xa]
cmp edi, ebx
je 0x4911b6
mov edx, dword [esp + 0x24]
push edi
push edx
call dword [sym.imp.SHLWAPI.dll_StrStrIA]
test eax, eax
je 0x4911b6
mov eax, edi
lea edx, [eax + 1]
mov edi, edi
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x491190
sub eax, edx
cmp eax, 4
ja 0x4911a1
push edi
jmp 0x4911ff
mov eax, edi
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x4911a6
sub eax, edx
lea eax, [eax + edi - 4]
push eax
jmp 0x4911ff
mov ecx, dword [esp + 0x24]
push ebp
push ecx
call dword [sym.imp.SHLWAPI.dll_StrStrIA]
test eax, eax
je 0x4911fa
mov eax, ebp
lea edx, [eax + 1]
jmp 0x4911d0
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x4911d0
sub eax, edx
cmp eax, 4
ja 0x4911e1
push ebp
jmp 0x4911ff
mov eax, ebp
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x4911e6
sub eax, edx
mov edx, dword [esp + 0x2c]
lea eax, [eax + edx - 3]
push eax
jmp 0x4911ff
push 0x5116d8
mov ecx, esi
call dword [sym.imp.mfc90.dll_Ordinal_310]
mov dword [esp + 0x454], ebx
mov dword [esp + 0x14], 1
mov eax, esi
mov ecx, dword [esp + 0x44c]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x434]
xor ecx, esp
call fcn.004e0148
add esp, 0x444
ret