Function at 0x4ab5b0
Capabilities:
Get disk information

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x268
mov eax, dword [0x4f2be0]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
mov esi, dword [ebp + 8]
xor ebx, ebx
push edi
mov edi, dword [ebp + 0xc]
mov dword [ebp - 0x260], esi
cmp esi, ebx
jne 0x4ab5fe
call fcn.0047e12f
mov dword [eax], ebx
call fcn.0047e11c
push ebx
push ebx
push ebx
push ebx
push ebx
mov dword [eax], 0x16
call fcn.00475ca0
add esp, 0x14
jmp 0x4ab9f4
cmp edi, ebx
je 0x4ab5da
push 0x4d1fa4
push esi
call fcn.004abdea
pop ecx
pop ecx
test eax, eax
je 0x4ab629
call fcn.0047e11c
push 2
pop esi
mov dword [eax], esi
call fcn.0047e12f
mov dword [eax], esi
jmp 0x4ab9f4
cmp byte [esi + 1], 0x3a
jne 0x4ab649
mov al, byte [esi]
cmp al, bl
je 0x4ab63a
cmp byte [esi + 2], bl
je 0x4ab613
movsx eax, al
push eax
call fcn.004addc2
pop ecx
sub eax, 0x60
jmp 0x4ab64e
call fcn.004adc53
mov dword [ebp - 0x268], eax
lea eax, [ebp - 0x248]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov dword [ebp - 0x24c], eax
cmp eax, 0xffffffff
jne 0x4ab751
push 0x4d1fa0
push esi
mov dword [ebp - 0x24c], ebx
call fcn.004abdea
pop ecx
pop ecx
test eax, eax
je 0x4ab613
lea eax, [ebp - 0x24c]
push eax
push 0x104
lea eax, [ebp - 0x108]
push esi
push eax
call fcn.004ab550
mov esi, eax
add esp, 0x10
cmp esi, ebx
je 0x4ab734
push esi
call fcn.00475e30
pop ecx
cmp eax, 3
je 0x4ab6c3
call fcn.004ab4d6
test eax, eax
je 0x4ab734
push esi
call dword [sym.imp.KERNEL32.dll_GetDriveTypeA]
cmp eax, 1
jbe 0x4ab734
cmp dword [ebp - 0x24c], ebx
je 0x4ab6e3
push dword [ebp - 0x24c]
call fcn.0047668c
pop ecx
push 0xffffffffffffffff
push ebx
push ebx
push ebx
push 1
push 1
push 0x7bc
mov dword [ebp - 0x248], 0x10
mov dword [ebp - 0x22c], ebx
mov dword [ebp - 0x228], ebx
mov byte [ebp - 0x21c], bl
call fcn.004ad9e8
mov esi, dword [ebp - 0x260]
mov ecx, edx
add esp, 0x1c
mov dword [edi + 0x28], eax
mov dword [edi + 0x2c], edx
mov dword [edi + 0x20], eax
mov dword [edi + 0x24], ecx
mov dword [edi + 0x30], eax
mov dword [edi + 0x34], ecx
jmp 0x4ab984
cmp dword [ebp - 0x24c], ebx
je 0x4ab613
push dword [ebp - 0x24c]
call fcn.0047668c
pop ecx
jmp 0x4ab613
test dword [ebp - 0x248], 0x400
je 0x4ab7bc
cmp dword [ebp - 0x224], 0xa000000c
jne 0x4ab7bc
or dword [ebp - 0x24c], 0xffffffff
push ebx
push 0x40
push ebx
lea eax, [ebp - 0x24c]
push esi
push eax
call fcn.0048e43a
add esp, 0x14
test eax, eax
jne 0x4ab613
cmp dword [ebp - 0x24c], 0xffffffff
je 0x4ab613
push edi
push dword [ebp - 0x24c]
call fcn.004ad675
push dword [ebp - 0x24c]
mov esi, eax
call fcn.0047de8f
add esp, 0xc
mov eax, esi
jmp 0x4ab9f7
cmp dword [ebp - 0x234], ebx
jne 0x4ab7d4
cmp dword [ebp - 0x230], ebx
jne 0x4ab7d4
mov dword [edi + 0x28], ebx
mov dword [edi + 0x2c], ebx
jmp 0x4ab84c
lea eax, [ebp - 0x264]
push eax
lea eax, [ebp - 0x234]
push eax
call dword [sym.imp.KERNEL32.dll_FileTimeToLocalFileTime]
test eax, eax
je 0x4ab9db
lea eax, [ebp - 0x25c]
push eax
lea eax, [ebp - 0x264]
push eax
call dword [sym.imp.KERNEL32.dll_FileTimeToSystemTime]
test eax, eax
je 0x4ab9db
movzx eax, word [ebp - 0x250]
push 0xffffffffffffffff
push eax
movzx eax, word [ebp - 0x252]
push eax
movzx eax, word [ebp - 0x254]
push eax
movzx eax, word [ebp - 0x256]
push eax
movzx eax, word [ebp - 0x25a]
push eax
movzx eax, word [ebp - 0x25c]
push eax
call fcn.004ad9e8
add esp, 0x1c
mov dword [edi + 0x28], eax
mov dword [edi + 0x2c], edx
cmp dword [ebp - 0x23c], ebx
jne 0x4ab86a
cmp dword [ebp - 0x238], ebx
jne 0x4ab86a
mov eax, dword [edi + 0x28]
mov dword [edi + 0x20], eax
mov eax, dword [edi + 0x2c]
mov dword [edi + 0x24], eax
jmp 0x4ab8e2
lea eax, [ebp - 0x264]
push eax
lea eax, [ebp - 0x23c]
push eax
call dword [sym.imp.KERNEL32.dll_FileTimeToLocalFileTime]
test eax, eax
je 0x4ab9db
lea eax, [ebp - 0x25c]
push eax
lea eax, [ebp - 0x264]
push eax
call dword [sym.imp.KERNEL32.dll_FileTimeToSystemTime]
test eax, eax
je 0x4ab9db
movzx eax, word [ebp - 0x250]
push 0xffffffffffffffff
push eax
movzx eax, word [ebp - 0x252]
push eax
movzx eax, word [ebp - 0x254]
push eax
movzx eax, word [ebp - 0x256]
push eax
movzx eax, word [ebp - 0x25a]
push eax
movzx eax, word [ebp - 0x25c]
push eax
call fcn.004ad9e8
add esp, 0x1c
mov dword [edi + 0x20], eax
mov dword [edi + 0x24], edx
cmp dword [ebp - 0x244], ebx
jne 0x4ab900
cmp dword [ebp - 0x240], ebx
jne 0x4ab900
mov eax, dword [edi + 0x28]
mov dword [edi + 0x30], eax
mov eax, dword [edi + 0x2c]
mov dword [edi + 0x34], eax
jmp 0x4ab978
lea eax, [ebp - 0x264]
push eax
lea eax, [ebp - 0x244]
push eax
call dword [sym.imp.KERNEL32.dll_FileTimeToLocalFileTime]
test eax, eax
je 0x4ab9db
lea eax, [ebp - 0x25c]
push eax
lea eax, [ebp - 0x264]
push eax
call dword [sym.imp.KERNEL32.dll_FileTimeToSystemTime]
test eax, eax
je 0x4ab9db
movzx eax, word [ebp - 0x250]
push 0xffffffffffffffff
push eax
movzx eax, word [ebp - 0x252]
push eax
movzx eax, word [ebp - 0x254]
push eax
movzx eax, word [ebp - 0x256]
push eax
movzx eax, word [ebp - 0x25a]
push eax
movzx eax, word [ebp - 0x25c]
push eax
call fcn.004ad9e8
add esp, 0x1c
mov dword [edi + 0x30], eax
mov dword [edi + 0x34], edx
push dword [ebp - 0x24c]
call dword [sym.imp.KERNEL32.dll_FindClose]
push esi
push dword [ebp - 0x248]
call fcn.004ad5b8
pop ecx
mov word [edi + 6], ax
pop ecx
xor eax, eax
inc eax
push eax
push ebx
push ebx
push dword [ebp - 0x22c]
mov word [edi + 8], ax
call fcn.0047e3b0
mov ecx, dword [ebp - 0x228]
xor esi, esi
add eax, ecx
adc edx, esi
mov dword [edi + 0x18], eax
xor eax, eax
mov word [edi + 4], ax
mov word [edi + 0xc], ax
mov word [edi + 0xa], ax
mov eax, dword [ebp - 0x268]
dec eax
mov dword [edi], eax
mov dword [edi + 0x10], eax
mov dword [edi + 0x1c], edx
xor eax, eax
jmp 0x4ab9f7
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
call fcn.0047e142
pop ecx
push dword [ebp - 0x24c]
call dword [sym.imp.KERNEL32.dll_FindClose]
or eax, 0xffffffff
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.00474a8a
leave
ret