Function at 0x446850
Capabilities:
Get disk information

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5b15d4
mov eax, dword fs:[0]
push eax
sub esp, 0x248
mov eax, dword [0x628960]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 4], 0
cmp dword [ebp + 0x18], 0
je 0x446b3f
push 1
sub esp, 8
lea ecx, [ebp + 8]
call fcn.0044f380
push eax
push 0
lea ecx, [ebp + 8]
call fcn.004376a0
push 1
sub esp, 8
lea ecx, [ebp + 8]
call fcn.0044f410
lea ecx, [eax + 1]
cmp dword [ebp + 0x18], ecx
jae 0x4468c5
push str.invalid_string_position
call fcn.004c1026
cmp dword [ebp + 0x1c], 0x10
lea eax, [ebp + 8]
mov dword [ebp + 0x18], ecx
cmovae eax, dword [ebp + 8]
mov byte [eax + ecx], 0
cmp dword [ebp + 0x18], 0
je 0x446b3f
push 0xfe
lea eax, [ebp - 0x20f]
mov byte [ebp - 0x210], 0
push 0
push eax
call fcn.004a2440
add esp, 0xc
mov byte [ebp - 0x110], 0
lea eax, [ebp - 0x10f]
push 0xfe
push 0
push eax
call fcn.004a2440
add esp, 0xc
mov dword [ebp - 0x214], 0
lea eax, [ebp - 0x254]
mov dword [ebp - 0x21c], 0
lea ecx, [ebp + 8]
mov dword [ebp - 0x218], 0
push 1
push 0
push eax
call fcn.00436c60
sub esp, 0x18
mov byte [ebp - 4], 1
mov ecx, esp
mov edx, eax
push 0x60d36c
call fcn.00440b60
add esp, 4
lea ecx, [ebp - 0x23c]
call fcn.00445020
mov esi, eax
add esp, 0x18
lea eax, [ebp + 8]
cmp eax, esi
je 0x4469a7
cmp dword [ebp + 0x1c], 0x10
jb 0x44698c
push dword [ebp + 8]
call fcn.0048b2ba
add esp, 4
push esi
lea ecx, [ebp + 8]
mov dword [ebp + 0x1c], 0xf
mov dword [ebp + 0x18], 0
mov byte [ebp + 8], 0
call fcn.004379f0
cmp dword [ebp - 0x228], 0x10
jb 0x4469be
push dword [ebp - 0x23c]
call fcn.0048b2ba
add esp, 4
mov byte [ebp - 4], 0
cmp dword [ebp - 0x240], 0x10
mov dword [ebp - 0x228], 0xf
mov dword [ebp - 0x22c], 0
mov byte [ebp - 0x23c], 0
jb 0x4469f4
push dword [ebp - 0x254]
call fcn.0048b2ba
add esp, 4
cmp dword [ebp + 0x1c], 0x10
lea ecx, [ebp - 0x110]
push 0xff
push ecx
lea ecx, [ebp - 0x218]
push ecx
lea ecx, [ebp - 0x21c]
push ecx
lea ecx, [ebp - 0x214]
push ecx
push 0xff
lea ecx, [ebp - 0x210]
lea eax, [ebp + 8]
cmovae eax, dword [ebp + 8]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_GetVolumeInformationA]
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x220], esp
push 3
mov dword [ecx + 0x14], 0xf
mov dword [ecx + 0x10], 0
push 0x60d3b0
mov byte [ecx], 0
call fcn.004373f0
sub esp, 0x18
mov byte [ebp - 4], 2
mov edx, esp
mov dword [edx + 0x14], 0xf
mov dword [edx + 0x10], 0
mov byte [edx], 0
cmp byte [ebp - 0x110], 0
jne 0x446a82
xor ecx, ecx
jmp 0x446a99
lea ecx, [ebp - 0x110]
lea esi, [ecx + 1]
jmp 0x446a90
mov al, byte [ecx]
inc ecx
test al, al
jne 0x446a90
sub ecx, esi
push ecx
lea eax, [ebp - 0x110]
mov ecx, edx
push eax
call fcn.004373f0
mov byte [ebp - 4], 0
call fcn.0044dbb0
add esp, 0x30
test al, al
jne 0x446b3f
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x224], esp
push str.FAT32
call fcn.00437360
sub esp, 0x18
mov byte [ebp - 4], 3
lea eax, [ebp - 0x110]
mov ecx, esp
push eax
call fcn.00437360
mov byte [ebp - 4], 0
call fcn.0044dbb0
add esp, 0x30
test al, al
je 0x446afd
mov ebx, 1
jmp 0x446b41
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x224], esp
push str.NTFS
call fcn.00437360
sub esp, 0x18
mov byte [ebp - 4], 4
lea eax, [ebp - 0x110]
mov ecx, esp
push eax
call fcn.00437360
mov byte [ebp - 4], 0
call fcn.0044dbb0
xor ebx, ebx
add esp, 0x30
test al, al
sete bl
add ebx, 2
jmp 0x446b41
xor ebx, ebx
cmp dword [ebp + 0x1c], 0x10
jb 0x446b52
push dword [ebp + 8]
call fcn.0048b2ba
add esp, 4
mov eax, ebx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004a0676
mov esp, ebp
pop ebp
ret