Function at 0x41493a
Capabilities:
Get disk information

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x8a8
mov eax, dword [0x42c044]
xor eax, ebp
mov dword [ebp - 8], eax
push ebx
push esi
push edi
mov edi, dword [ebp + 8]
xor ebx, ebx
push 0x30
push ebx
push 0x42c4c0
mov dword [ebp - 0x89c], edx
mov esi, ecx
mov dword [ebp - 0x8a4], edi
call sub.msvcrt.dll_memset
mov eax, dword [ebp - 0x89c]
add esp, 0xc
mov dword [0x42c4d0], eax
push 0x5c
pop eax
test esi, esi
je 0x41499c
cmp word [esi], ax
jne 0x41499c
cmp word [esi + 2], ax
jne 0x41499c
mov al, 1
mov byte [ebp - 0x895], al
jmp 0x4149a4
mov al, bl
mov byte [ebp - 0x895], bl
test esi, esi
je 0x414c9a
test al, al
jne 0x414b67
push 0x104
lea eax, [ebp - 0x41c]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_GetVolumePathNameW]
test eax, eax
jne 0x4149e9
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push esi
push 0x405fe0
push 4
call fcn.0041944e
mov ebx, 0xc000000d
jmp 0x414f08
lea eax, [ebp - 0x41c]
push eax
push esi
push 0x406034
push 2
call fcn.0041944e
lea edi, [ebp - 0x41c]
add esp, 0x10
lea ecx, [edi + 2]
mov ax, word [edi]
add edi, 2
cmp ax, bx
jne 0x414a09
sub edi, ecx
mov ecx, esi
sar edi, 1
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
cmp ax, bx
jne 0x414a1d
sub ecx, edx
sar ecx, 1
cmp edi, ecx
jbe 0x414a50
lea eax, [ebp - 0x41c]
push eax
push 0x406070
push 4
call fcn.0041944e
add esp, 0xc
mov ebx, 0xc000000d
jmp 0x414f0b
cmp edi, 3
jne 0x414a97
xor eax, eax
mov word [ebp - 0x418], ax
lea eax, [ebp - 0x214]
push 0x104
push eax
lea eax, [ebp - 0x41c]
push eax
call dword [sym.imp.KERNEL32.dll_QueryDosDeviceW]
test eax, eax
jne 0x414b3f
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
lea eax, [ebp - 0x41c]
push eax
push 0x4060b0
jmp 0x4149d8
push 0x32
lea eax, [ebp - 0x484]
push eax
lea eax, [ebp - 0x41c]
push eax
call dword [sym.imp.KERNEL32.dll_GetVolumeNameForVolumeMountPointW]
test eax, eax
jne 0x414ac9
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
lea eax, [ebp - 0x41c]
push eax
push 0x405f18
jmp 0x4149d8
lea eax, [ebp - 0x484]
push eax
lea eax, [ebp - 0x214]
push 0x104
push eax
call dword [sym.imp.msvcrt.dll_wcscpy_s]
lea ecx, [ebp - 0x214]
add esp, 0xc
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
cmp ax, bx
jne 0x414aee
sub ecx, edx
sar ecx, 1
cmp ecx, 1
jbe 0x414b3f
push 0x5c
pop edx
cmp word [ebp - 0x212], dx
jne 0x414b18
push 0x3f
pop eax
mov word [ebp - 0x212], ax
cmp word [ebp + ecx*2 - 0x216], dx
jne 0x414b3f
lea ecx, [ecx*2 - 2]
cmp ecx, 0x208
jae 0x414f33
xor eax, eax
mov word [ebp + ecx - 0x214], ax
lea eax, [edi - 1]
push eax
lea eax, [ebp - 0x41c]
push esi
push eax
call dword [sym.imp.msvcrt.dll__wcsnicmp]
add esp, 0xc
test eax, eax
jne 0x414c02
lea esi, [esi + edi*2]
add esi, 0xfffffffe
jmp 0x414c02
mov ecx, esi
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
cmp ax, bx
jne 0x414b6c
sub ecx, edx
sar ecx, 1
cmp ecx, 0xe
jb 0x414d25
push 0xe
push esi
push 0x403684
call dword [sym.imp.msvcrt.dll__wcsnicmp]
add esp, 0xc
test eax, eax
jne 0x414d25
mov edi, 0x104
lea eax, [ebp - 0x894]
push edi
push eax
push esi
call dword [sym.imp.KERNEL32.dll_GetVolumePathNameW]
test eax, eax
jne 0x414bbf
mov ebx, 0xc0000001
jmp 0x414f0b
lea eax, [ebp - 0x894]
push eax
call dword [sym.imp.SHLWAPI.dll_PathRemoveBackslashW]
lea eax, [ebp - 0x878]
push eax
lea eax, [ebp - 0x214]
push edi
push eax
call dword [sym.imp.msvcrt.dll_wcscpy_s]
lea ecx, [ebp - 0x214]
add esp, 0xc
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
cmp ax, bx
jne 0x414bed
sub ecx, edx
sar ecx, 1
lea esi, [esi + ecx*2]
add esi, 0x1c
lea ecx, [ebp - 0x214]
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
cmp ax, bx
jne 0x414c0b
sub ecx, edx
sar ecx, 1
lea edi, [ecx*2 + 2]
push edi
push 8
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
push eax
call dword [sym.imp.KERNEL32.dll_HeapAlloc]
mov dword [0x42c4dc], eax
test eax, eax
jne 0x414c44
mov ebx, 0xc0000017
jmp 0x414f0b
push edi
lea ecx, [ebp - 0x214]
push ecx
push eax
call sub.msvcrt.dll_memcpy
mov ecx, esi
add esp, 0xc
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
cmp ax, bx
jne 0x414c5a
sub ecx, edx
sar ecx, 1
lea edi, [ecx*2 + 2]
push edi
push 8
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
push eax
call dword [sym.imp.KERNEL32.dll_HeapAlloc]
mov dword [0x42c4ec], eax
test eax, eax
je 0x414c3a
push edi
push esi
push eax
call sub.msvcrt.dll_memcpy
mov edi, dword [ebp - 0x8a4]
add esp, 0xc
mov byte [0x42c4cc], bl
call fcn.00413c32
cmp eax, 2
jne 0x414cb1
mov byte [0x42c4cc], 1
test edi, edi
jne 0x414cc0
mov edi, 0x406160
mov dword [ebp - 0x8a4], edi
mov ecx, edi
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
cmp ax, bx
jne 0x414cc5
sub ecx, edx
sar ecx, 1
lea edi, [ecx*2 + 2]
push edi
push 8
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
push eax
call dword [sym.imp.KERNEL32.dll_HeapAlloc]
mov dword [0x42c4d8], eax
test eax, eax
je 0x414c3a
push edi
push dword [ebp - 0x8a4]
push eax
call sub.msvcrt.dll_memcpy
add esp, 0xc
xor cl, cl
call fcn.00411f64
mov ecx, eax
mov dword [0x42c4e8], ecx
test ecx, ecx
jne 0x414d35
mov ebx, 0xc0000225
jmp 0x414f0b
push 0x403684
push esi
push 0x406100
jmp 0x4149d8
test byte [ebp - 0x89c], 0x10
je 0x414d4e
call fcn.00411904
mov ecx, dword [0x42c4e8]
mov byte [0x42c4cd], al
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
cmp ax, bx
jne 0x414d51
sub ecx, edx
sar ecx, 1
lea eax, [ecx*2 + 2]
mov dword [ebp - 0x89c], eax
add eax, 0x3c
push eax
push 8
mov dword [ebp - 0x8a0], eax
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
push eax
call dword [sym.imp.KERNEL32.dll_HeapAlloc]
mov edi, eax
test edi, edi
je 0x414c3a
push dword [ebp - 0x89c]
mov dword [edi], 2
lea eax, [edi + 0x14]
push dword [0x42c4e8]
push eax
call sub.msvcrt.dll_memcpy
mov eax, dword [ebp - 0x8a0]
lea ecx, [ebp - 0x214]
add esp, 0xc
mov dword [0x42c4e4], eax
mov dword [0x42c4e0], edi
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
cmp ax, bx
jne 0x414dc8
sub ecx, edx
sar ecx, 1
lea eax, [ecx*2 + 2]
mov dword [ebp - 0x8a0], eax
add eax, 0x3c
push eax
push 8
mov dword [ebp - 0x89c], eax
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
push eax
call dword [sym.imp.KERNEL32.dll_HeapAlloc]
mov edi, eax
test edi, edi
je 0x414c3a
push dword [ebp - 0x8a0]
lea eax, [ebp - 0x214]
mov dword [edi], 2
push eax
lea eax, [edi + 0x14]
push eax
call sub.msvcrt.dll_memcpy
mov eax, dword [ebp - 0x89c]
add esp, 0xc
mov dword [0x42c4c4], eax
mov dword [0x42c4c0], edi
test esi, esi
je 0x414f20
push 0x40616c
push esi
cmp byte [ebp - 0x895], bl
jne 0x414e70
lea eax, [ebp - 0x41c]
push eax
push 0x406198
lea eax, [ebp - 0x68c]
push 0x104
push eax
call dword [sym.imp.msvcrt.dll_swprintf_s]
add esp, 0x18
jmp 0x414e96
lea eax, [ebp - 0x214]
push eax
push 0x403684
push 0x4061a8
lea eax, [ebp - 0x68c]
push 0x104
push eax
call dword [sym.imp.msvcrt.dll_swprintf_s]
add esp, 0x1c
mov ecx, dword [ebp - 0x8a4]
lea edx, [ebp - 0x8a0]
call fcn.0041c0ae
test eax, eax
movzx eax, word [ebp - 0x8a0]
jns 0x414eb4
mov eax, ebx
mov edx, eax
mov word [0x42c4d4], ax
lea ecx, [ebp - 0x68c]
call fcn.00429e9e
mov dword [0x42c4c8], eax
test eax, eax
jne 0x414f20
push 2
push ebx
lea eax, [ebp - 0x68c]
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryExW]
mov dword [0x42c4c8], eax
test eax, eax
jne 0x414f20
mov ebx, 0xc0000001
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
lea eax, [ebp - 0x68c]
push eax
push 0x4061c0
push 4
call fcn.0041944e
add esp, 0x10
push ebx
push 0x406210
push 4
call fcn.0041944e
add esp, 0xc
call fcn.0041485f
mov ecx, dword [ebp - 8]
mov eax, ebx
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.0042a860
leave
ret 4
call fcn.0042a9a8
int3