Function at 0x6a18f4
Capabilities:
Get disk information

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffdb8
push ebx
push esi
push edi
xor ecx, ecx
mov dword [ebp - 0x240], ecx
mov dword [ebp - 0x244], ecx
mov dword [ebp - 0x248], ecx
mov dword [ebp - 0x238], ecx
mov dword [ebp - 0x23c], ecx
mov dword [ebp - 0x234], ecx
mov dword [ebp - 0x22c], ecx
mov dword [ebp - 0x230], ecx
mov dword [ebp - 0xc], ecx
mov dword [ebp - 0x18], ecx
mov dword [ebp - 8], edx
mov dword [ebp - 4], eax
mov eax, dword [ebp - 4]
call fcn.004099a0
xor eax, eax
push ebp
push 0x6a1c73
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 8]
call fcn.004098bc
xor eax, eax
push ebp
push 0x6a1c2d
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x224]
push eax
push 0x104
call sub.kernel32.dll_GetLogicalDriveStringsW
mov dword [ebp - 0x10], eax
push 0xffffffffffffffff
push 0xffeb9553
push 0
push 0x146aad
call fcn.0067d81c
push edx
push eax
mov eax, dword [ebp - 0x10]
xor edx, edx
cmp edx, dword [esp + 4]
jne 0x6a19a1
cmp eax, dword [esp]
pop edx
pop eax
jne 0x6a19b2
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x6a1c37
push 0xffffffffffffffff
push 0xffeb4b42
push 0
push 0x14b4c1
call fcn.0067d81c
push edx
push eax
mov eax, dword [ebp - 0x10]
xor edx, edx
push edx
push eax
push 0
push 2
push 0xffffffffffffffff
push 0xffec5d7d
push 0
push 0x13a285
call fcn.0067d81c
call fcn.0040c12c
sub dword [esp], eax
sbb dword [esp + 4], edx
pop eax
pop edx
call fcn.0040c150
push eax
lea eax, [ebp - 0x18]
mov ecx, 1
mov edx, dword [0x6a18c8]
call fcn.0040cb24
add esp, 4
mov eax, dword [ebp - 0x18]
call fcn.0040c760
test eax, eax
jl 0x6a1a5e
inc eax
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x14], 0
push 0xffffffffffffffff
push 0xffe57465
push 0
push 0x1a8b9f
call fcn.0067d81c
push edx
push eax
mov eax, dword [ebp - 0x14]
cdq
call fcn.0040c12c
mov ax, word [ebp + eax*2 - 0x224]
mov edx, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov word [edx + ecx*2], ax
inc dword [ebp - 0x14]
dec dword [ebp - 0x1c]
jne 0x6a1a26
mov eax, dword [ebp - 0x18]
call fcn.0040c760
test eax, eax
jl 0x6a1c23
inc eax
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x14], 0
push 0x104
lea eax, [ebp - 0x224]
push eax
lea eax, [ebp - 0x22c]
mov edx, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dx, word [edx + ecx*2]
call fcn.0040a49c
lea eax, [ebp - 0x22c]
push eax
push 0
push 0x102b9c
lea edx, [ebp - 0x230]
mov eax, 0x6a1c90
call fcn.0067d9b4
mov edx, dword [ebp - 0x230]
pop eax
call fcn.0040a688
mov eax, dword [ebp - 0x22c]
call fcn.0040a478
push eax
call sub.kernel32.dll_QueryDosDeviceW
mov dword [ebp - 0x10], eax
push 0
push 0x14a17c
push 0
push 0x14a17c
call fcn.0067d81c
push edx
push eax
mov eax, dword [ebp - 0x10]
xor edx, edx
cmp edx, dword [esp + 4]
jne 0x6a1b05
cmp eax, dword [esp]
pop edx
pop eax
jbe 0x6a1c17
jmp 0x6a1b0d
pop edx
pop eax
jle 0x6a1c17
lea eax, [ebp - 0x234]
lea edx, [ebp - 0x224]
call fcn.0040a4dc
mov eax, dword [ebp - 0x234]
lea edx, [ebp - 0xc]
call fcn.0042323c
lea eax, [ebp - 0x23c]
push eax
push 0
push 0x1b41c9
push 0
push 0x1b41c8
call fcn.0067d81c
push eax
mov eax, dword [ebp - 0xc]
call fcn.00409dac
mov ecx, eax
mov eax, dword [ebp - 4]
pop edx
call fcn.0040a850
mov eax, dword [ebp - 0x23c]
lea edx, [ebp - 0x238]
call fcn.0042323c
mov eax, dword [ebp - 0x238]
mov edx, dword [ebp - 0xc]
call fcn.0040a818
jne 0x6a1c17
lea eax, [ebp - 0x240]
mov edx, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dx, word [edx + ecx*2]
call fcn.0040a49c
push dword [ebp - 0x240]
push 0
push 0x10325a
lea edx, [ebp - 0x244]
mov eax, 0x6a1ca4
call fcn.0067d9b4
push dword [ebp - 0x244]
lea eax, [ebp - 0x248]
push eax
push 0xffffffffffffffff
push 0xffe1da0e
push 0
push 0x1e25f3
call fcn.0067d81c
push edx
push eax
mov eax, dword [ebp - 0xc]
call fcn.00409dac
cdq
add eax, dword [esp]
adc edx, dword [esp + 4]
add esp, 8
push eax
mov eax, dword [ebp - 4]
call fcn.00409dac
mov ecx, eax
mov eax, dword [ebp - 4]
pop edx
call fcn.0040a850
push dword [ebp - 0x248]
mov eax, dword [ebp - 8]
mov edx, 3
call fcn.0040a768
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x6a1c37
inc dword [ebp - 0x14]
dec dword [ebp - 0x1c]
jne 0x6a1a79
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x6a1c37
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x6a1c7a
lea eax, [ebp - 0x248]
mov edx, 8
call fcn.0040991c
lea eax, [ebp - 0x18]
mov edx, dword [0x6a18c8]
call fcn.0040cc48
lea eax, [ebp - 0xc]
call fcn.004098bc
lea eax, [ebp - 4]
call fcn.004098bc
ret