Function at 0x411ad0
Capabilities:
Get disk information

Disassembly:
push 0xffffffffffffffff
push 0x433b9b
mov eax, dword fs:[0]
push eax
sub esp, 0x164
mov eax, dword [0x44dd94]
xor eax, esp
mov dword [esp + 0x160], eax
push ebx
push ebp
push esi
mov eax, dword [0x44dd94]
xor eax, esp
push eax
lea eax, [esp + 0x174]
mov dword fs:[0], eax
mov esi, dword [esp + 0x184]
xor ebx, ebx
mov dword [esp + 0x14], ebx
push 4
push ebx
push 0x436514
lea ecx, [esp + 0x194]
mov dword [esp + 0x188], ebx
call fcn.004011f0
lea ebp, [ebx + 0x10]
test eax, eax
jne 0x411b80
push 0xffffffffffffffff
push 4
lea eax, [esp + 0x20]
push eax
lea ecx, [esp + 0x194]
call fcn.00402110
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [esp + 0x194]
mov byte [esp + 0x188], 1
call fcn.004019c0
mov byte [esp + 0x17c], bl
cmp dword [esp + 0x30], ebp
jb 0x411b80
mov ecx, dword [esp + 0x1c]
push ecx
call fcn.00417d54
add esp, 4
push 7
push ebx
push 0x435374
lea ecx, [esp + 0x194]
call fcn.004011f0
test eax, eax
jne 0x411d1b
push 2
push 0xffffffffffffffff
push 0x435398
lea ecx, [esp + 0x194]
call fcn.004012b0
mov ecx, dword [esp + 0x19c]
lea edx, [ecx - 2]
cmp eax, edx
jne 0x411d1b
dec ecx
push ecx
push ebx
lea eax, [esp + 0x20]
push eax
lea ecx, [esp + 0x194]
call fcn.00402110
cmp dword [eax + 0x18], ebp
jb 0x411be1
mov eax, dword [eax + 4]
jmp 0x411be4
add eax, 4
push 0x104
lea ecx, [esp + 0x70]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_QueryDosDeviceA]
test eax, eax
sete byte [esp + 0x13]
cmp dword [esp + 0x30], ebp
jb 0x411c0f
mov edx, dword [esp + 0x1c]
push edx
call fcn.00417d54
add esp, 4
cmp byte [esp + 0x13], bl
je 0x411c3c
mov dword [esi + 0x18], 0xf
mov dword [esi + 0x14], ebx
mov byte [esi + 4], bl
cmp dword [esp + 0x1a0], ebp
jb 0x411d41
mov eax, dword [esp + 0x18c]
push eax
jmp 0x411d39
lea ecx, [esp + 0x6c]
push ecx
lea ecx, [esp + 0x1c]
call fcn.004020d0
lea edx, [esp + 0x18]
push edx
lea eax, [esp + 0x54]
push eax
mov byte [esp + 0x184], 2
call fcn.004118a0
add esp, 8
mov byte [esp + 0x17c], 4
cmp dword [esp + 0x30], ebp
jb 0x411c7f
mov ecx, dword [esp + 0x1c]
push ecx
call fcn.00417d54
add esp, 4
mov dword [esp + 0x30], 0xf
mov dword [esp + 0x2c], ebx
mov byte [esp + 0x1c], bl
cmp dword [esp + 0x64], ebx
jne 0x411cb5
lea edx, [esp + 0x6c]
push edx
lea ecx, [esp + 0x38]
call fcn.004020d0
mov byte [esp + 0x17c], 5
mov dword [esp + 0x14], 2
jmp 0x411cb9
lea eax, [esp + 0x50]
push 0xffffffffffffffff
push ebx
mov dword [esi + 0x18], 0xf
mov dword [esi + 0x14], ebx
push eax
mov ecx, esi
mov byte [esi + 4], bl
call fcn.004019c0
mov eax, dword [esp + 0x14]
or eax, 1
test al, 2
je 0x411ce5
lea ecx, [esp + 0x34]
call fcn.00401870
cmp dword [esp + 0x68], ebp
jb 0x411cf8
mov eax, dword [esp + 0x54]
push eax
call fcn.00417d54
add esp, 4
mov dword [esp + 0x68], 0xf
mov dword [esp + 0x64], ebx
mov byte [esp + 0x54], bl
cmp dword [esp + 0x1a0], ebp
jb 0x411d41
mov ecx, dword [esp + 0x18c]
push ecx
jmp 0x411d39
mov dword [esi + 0x18], 0xf
mov dword [esi + 0x14], ebx
mov byte [esi + 4], bl
cmp dword [esp + 0x1a0], ebp
jb 0x411d41
mov edx, dword [esp + 0x18c]
push edx
call fcn.00417d54
add esp, 4
mov eax, esi
mov ecx, dword [esp + 0x174]
mov dword fs:[0], ecx
pop ecx
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x160]
xor ecx, esp
call fcn.0041851b
add esp, 0x170
ret