Function at 0x498043
Capabilities:
Get storage device properties

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x2cd4
call fcn.004480b0
mov eax, dword [0x6610e4]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
mov ebx, ecx
call fcn.00485f02
test al, al
je 0x498078
pop ebp
push ecx
push ebx
push ebp
pop edx
pop edi
push edx
push esp
push esi
pop ebp
push edx
push edx
pop ecx
pop esp
pop esp
pop esi
xor esi, esi
push esi
lea eax, [ebp - 0x404]
push str..PhysicalDrive_d
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
lea eax, [ebp - 0x404]
push 0
push 0
push 3
push 0
push 3
push 0
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov edi, eax
cmp edi, 0xffffffff
je 0x498322
and dword [ebp - 0x2cd4], 0
lea eax, [ebp - 0x2b20]
push 0xc
push 0
push eax
call fcn.004a2e40
xor eax, eax
push 0x2710
push eax
mov dword [ebp - 0x2b20], eax
mov dword [ebp - 0x2b1c], eax
lea eax, [ebp - 0x2b14]
push eax
call fcn.004a2e40
add esp, 0x18
lea eax, [ebp - 0x2cd4]
push 0
push eax
push 0x2710
lea eax, [ebp - 0x2b14]
push eax
push 0xc
lea eax, [ebp - 0x2b20]
push eax
push 0x2d1400
push edi
call dword [sym.imp.KERNEL32.dll_DeviceIoControl]
test eax, eax
je 0x498308
push 0x80
lea eax, [ebp - 0x204]
push 0
push eax
call fcn.004a2e40
push 0x80
lea eax, [ebp - 0x104]
push 0
push eax
call fcn.004a2e40
push 0x80
lea eax, [ebp - 0x84]
push 0
push eax
call fcn.004a2e40
push 0x80
lea eax, [ebp - 0x184]
push 0
push eax
call fcn.004a2e40
add esp, 0x30
lea eax, [ebp - 0x84]
mov ecx, ebx
push eax
push 0
push dword [ebp - 0x2b08]
lea eax, [ebp - 0x2b14]
push eax
call fcn.004984d5
lea eax, [ebp - 0x104]
mov ecx, ebx
push eax
push 0
push dword [ebp - 0x2b04]
lea eax, [ebp - 0x2b14]
push eax
call fcn.004984d5
lea eax, [ebp - 0x184]
mov ecx, ebx
push eax
push 0
push dword [ebp - 0x2b00]
lea eax, [ebp - 0x2b14]
push eax
call fcn.004984d5
lea eax, [ebp - 0x204]
mov ecx, ebx
push eax
push 1
push dword [ebp - 0x2afc]
lea eax, [ebp - 0x2b14]
push eax
call fcn.004984d5
lea ecx, [ebp - 0x2cd0]
call fcn.00497a1a
lea eax, [ebp - 0x84]
push eax
call fcn.004b0b60
pop ecx
test eax, eax
je 0x498214
lea eax, [ebp - 0x84]
push eax
lea eax, [ebp - 0x2ca8]
push eax
call fcn.004b0c20
pop ecx
pop ecx
lea eax, [ebp - 0x104]
push eax
call fcn.004b0b60
pop ecx
test eax, eax
je 0x49823a
lea eax, [ebp - 0x104]
push eax
lea eax, [ebp - 0x2ca8]
push eax
call fcn.004b0c30
pop ecx
pop ecx
lea eax, [ebp - 0x184]
push eax
lea eax, [ebp - 0x2ba8]
push eax
call fcn.004b0c20
lea eax, [ebp - 0x204]
push eax
lea eax, [ebp - 0x2c28]
push eax
call fcn.004b0c20
add esp, 0x10
lea eax, [ebp - 0x2c28]
mov ecx, ebx
push eax
call fcn.00498921
lea eax, [ebp - 0x2ca8]
mov ecx, ebx
push eax
call fcn.00498921
lea eax, [ebp - 0x2ba8]
mov ecx, ebx
push eax
call fcn.00498921
push 0x2710
lea eax, [ebp - 0x2b14]
push 0
push eax
call fcn.004a2e40
add esp, 0xc
lea eax, [ebp - 0x2cd4]
xor ecx, ecx
push ecx
push eax
push 0x2710
lea eax, [ebp - 0x2b14]
push eax
push ecx
push ecx
push 0x700a0
push edi
call dword [sym.imp.KERNEL32.dll_DeviceIoControl]
test eax, eax
je 0x498322
mov eax, dword [ebp - 0x2afc]
mov dword [ebp - 0x2cd0], eax
mov eax, dword [ebp - 0x2af8]
mov dword [ebp - 0x2ccc], eax
xor eax, eax
cmp dword [ebp - 0x2b0c], 0xc
push 2
pop ecx
cmove eax, ecx
mov ecx, ebx
mov dword [ebp - 0x2b28], eax
lea eax, [ebp - 0x2cd0]
push eax
call fcn.00497a78
jmp 0x49831b
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str._nDeviceIOControl_IOCTL_STORAGE_QUERY_PROPERTY_error___d_n
call fcn.00420d70
pop ecx
pop ecx
push edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
inc esi
cmp esi, 0x10
jl 0x49807a
call fcn.004861b4
test al, al
je 0x498350
push eax
push esi
push edi
pop ebp
pop esi
pop edi
pop ebx
push esi
pop ecx
pop esp
push edi
pop eax
pop ebp
push ebp
pop ecx
push edx
pop esp
pop esi
pop esp
push esp
pop eax
pop ebp
push edi
push ebx
pop ecx
push esi
push ecx
call fcn.0048605b
test al, al
je 0x498377
push edi
pop edi
push ebx
push eax
push ebp
push ecx
push edi
push edx
pop esp
push edi
pop edi
pop ecx
push esp
push eax
pop esi
pop edx
push ecx
pop esi
pop ecx
pop edi
pop ebx
push esi
pop edx
push esi
pop edx
pop ecx
pop ecx
pop eax
pop ebx
pop esp
mov ecx, dword [ebp - 4]
xor eax, eax
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.00447f5d
mov esp, ebp
pop ebp
ret