Function at 0x4d7ca9
Capabilities:
Get disk information via ioctl

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffeb4
push ebx
push esi
push edi
xor edx, edx
mov dword [ebp - 0x14c], edx
mov dword [ebp - 0x138], edx
mov dword [ebp - 0x134], edx
mov dword [ebp - 0x130], edx
mov dword [ebp - 0x12c], edx
mov dword [ebp - 0xc], edx
mov dword [ebp - 0x10], edx
mov dword [ebp - 0x14], edx
mov dword [ebp - 0x18], edx
mov dword [ebp - 8], eax
xor eax, eax
push ebp
push 0x4d8337
push dword fs:[eax]
mov dword fs:[eax], esp
mov dword [ebp - 0x1c], 0x20
xor eax, eax
mov dword [ebp - 0x20], eax
xor eax, eax
push ebp
push 0x4d81b3
push dword fs:[eax]
mov dword fs:[eax], esp
xor eax, eax
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x1c]
shl eax, 4
lea eax, [eax + eax*8]
add eax, 0xc0
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
call fcn.004041d4
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x30]
xor ecx, ecx
mov edx, dword [ebp - 0x2c]
call fcn.0040476c
lea eax, [ebp - 0xc]
push eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x128], eax
mov byte [ebp - 0x124], 0
lea edx, [ebp - 0x128]
xor ecx, ecx
mov eax, 0x4d8354
call fcn.00412dfc
push 0
push 0
push 3
push 0
push 3
push 0x80000000
mov eax, dword [ebp - 0xc]
call fcn.00406900
push eax
call sub.kernel32.dll_CreateFileW
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0xffffffff
jne 0x4d7d3b
call fcn.00405964
jmp 0x4d81ba
lea edx, [ebp - 0x120]
mov eax, dword [ebp - 0x24]
call fcn.004d6b08
push 0
lea eax, [ebp - 0x28]
push eax
mov eax, dword [ebp - 0x2c]
push eax
mov eax, dword [ebp - 0x30]
push eax
push 0
push 0
push 0x70050
mov eax, dword [ebp - 0x24]
push eax
call sub.kernel32.dll_DeviceIoControl
test eax, eax
je 0x4d7d78
mov eax, dword [ebp - 0x24]
push eax
call sub.kernel32.dll_CloseHandle_1
jmp 0x4d7dad
mov eax, dword [ebp - 0x24]
push eax
call sub.kernel32.dll_CloseHandle_1
mov edx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x30]
call fcn.004041f0
call sub.kernel32.dll_GetLastError_1
cmp eax, 0x7a
jne 0x4d7da3
mov eax, dword [ebp - 0x1c]
add eax, eax
mov dword [ebp - 0x1c], eax
jmp 0x4d7cb7
call fcn.00405964
jmp 0x4d7ca9
mov edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x30]
call fcn.004d6b48
xor edi, edi
xor esi, esi
mov byte [ebp - 0x59], 0
mov eax, edi
add eax, eax
lea eax, [eax + eax*8]
mov edx, dword [ebp - 0x30]
push esi
push edi
lea esi, [edx + eax*8 + 0x30]
lea edi, [ebp - 0xf8]
mov ecx, 0x24
rep movsd dword es:[edi], dword [esi]
pop edi
pop esi
inc edi
mov eax, dword [ebp - 0x1c]
add eax, 2
cmp edi, eax
je 0x4d805b
mov eax, dword [ebp - 0xf0]
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0xec]
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0xe8]
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0xe4]
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 0
jne 0x4d7e1e
cmp dword [ebp - 0x58], 0
je 0x4d7dc0
cmp byte [ebp - 0xf8], 1
jne 0x4d7e3c
push 0x4ee39c
lea eax, [ebp - 0xd8]
push eax
call sub.ole32.dll_IsEqualGUID_1
test al, al
jne 0x4d7dc0
inc esi
mov eax, dword [ebp - 8]
mov eax, dword [eax]
call fcn.0040806c
mov ebx, eax
lea eax, [ebx + 1]
push eax
mov eax, dword [ebp - 8]
mov ecx, 1
mov edx, dword [0x4d6ad8]
call fcn.00408234
add esp, 4
push dword [ebp - 0x4c]
push dword [ebp - 0x50]
push dword [ebp - 0x54]
push dword [ebp - 0x58]
lea edx, [ebp - 0x12c]
mov eax, dword [ebp - 0x20]
call fcn.004d6d08
mov edx, dword [ebp - 0x12c]
mov eax, ebx
add eax, eax
lea eax, [eax + eax*4]
mov ecx, dword [ebp - 8]
mov ecx, dword [ecx]
lea eax, [ecx + eax*8]
call fcn.00406874
mov eax, ebx
add eax, eax
lea eax, [eax + eax*4]
mov edx, dword [ebp - 8]
mov edx, dword [edx]
cmp dword [edx + eax*8], 0
jne 0x4d7edd
push dword [ebp - 0x4c]
push dword [ebp - 0x50]
push dword [ebp - 0x54]
push dword [ebp - 0x58]
lea edx, [ebp - 0x130]
mov eax, dword [ebp - 0x20]
call fcn.004d6ef4
mov edx, dword [ebp - 0x130]
mov eax, ebx
add eax, eax
lea eax, [eax + eax*4]
mov ecx, dword [ebp - 8]
mov ecx, dword [ecx]
lea eax, [ecx + eax*8]
call fcn.00406874
mov eax, ebx
add eax, eax
lea eax, [eax + eax*4]
mov edx, dword [ebp - 8]
mov edx, dword [edx]
mov eax, dword [edx + eax*8]
lea edx, [ebp - 0x134]
call fcn.004d70e4
mov edx, dword [ebp - 0x134]
mov eax, ebx
add eax, eax
lea eax, [eax + eax*4]
mov ecx, dword [ebp - 8]
mov ecx, dword [ecx]
lea eax, [ecx + eax*8 + 4]
call fcn.00406874
mov eax, ebx
add eax, eax
lea eax, [eax + eax*4]
mov edx, dword [ebp - 8]
mov edx, dword [edx]
mov ecx, dword [ebp - 0x20]
mov dword [edx + eax*8 + 8], ecx
mov eax, ebx
add eax, eax
lea eax, [eax + eax*4]
mov edx, dword [ebp - 8]
mov edx, dword [edx]
movzx ecx, byte [ebp - 0xe0]
mov byte [edx + eax*8 + 0xc], cl
cmp byte [ebp - 0xf8], 0
jne 0x4d7f82
cmp byte [ebp - 0xd8], 0x42
jne 0x4d7f52
mov byte [ebp - 0x59], 1
mov eax, ebx
add eax, eax
lea eax, [eax + eax*4]
mov edx, dword [ebp - 8]
mov edx, dword [edx]
movzx ecx, byte [ebp - 0xd7]
mov byte [edx + eax*8 + 0x15], cl
mov eax, ebx
add eax, eax
lea eax, [eax + eax*4]
mov edx, dword [ebp - 8]
mov edx, dword [edx]
movzx ecx, byte [ebp - 0xd8]
mov byte [edx + eax*8 + 0x20], cl
jmp 0x4d7fb9
cmp byte [ebp - 0xf8], 1
jne 0x4d7fb9
push 0x4ee3ac
lea eax, [ebp - 0xd8]
push eax
call sub.ole32.dll_IsEqualGUID_1
test al, al
jne 0x4d7fb5
push 0x4ee3bc
lea eax, [ebp - 0xd8]
push eax
call sub.ole32.dll_IsEqualGUID_1
test al, al
je 0x4d7fb9
mov byte [ebp - 0x59], 1
lea eax, [ebp - 0x138]
push eax
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x148], eax
mov byte [ebp - 0x144], 0
mov dword [ebp - 0x140], esi
mov byte [ebp - 0x13c], 0
lea edx, [ebp - 0x148]
mov ecx, 1
mov eax, 0x4d8388
call fcn.00412dfc
mov edx, dword [ebp - 0x138]
mov eax, ebx
add eax, eax
lea eax, [eax + eax*4]
mov ecx, dword [ebp - 8]
mov ecx, dword [ecx]
lea eax, [ecx + eax*8 + 0x10]
call fcn.00406874
mov eax, ebx
add eax, eax
lea eax, [eax + eax*4]
mov edx, dword [ebp - 8]
mov edx, dword [edx]
mov ecx, dword [ebp - 0x50]
mov dword [edx + eax*8 + 0x40], ecx
mov ecx, dword [ebp - 0x4c]
mov dword [edx + eax*8 + 0x44], ecx
mov eax, ebx
add eax, eax
lea eax, [eax + eax*4]
mov edx, dword [ebp - 8]
mov edx, dword [edx]
movzx ecx, byte [ebp - 0x104]
mov byte [edx + eax*8 + 0x48], cl
mov eax, ebx
add eax, eax
lea eax, [eax + eax*4]
mov edx, dword [ebp - 8]
mov edx, dword [edx]
movzx ecx, byte [ebp - 0xf8]
mov byte [edx + eax*8 + 0x49], cl
jmp 0x4d7dc0
mov edx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x30]
call fcn.004041f0
cmp byte [ebp - 0x59], 0
je 0x4d81a2
push 0
lea eax, [ebp - 0x18]
mov ecx, 1
mov edx, dword [0x4d6ad8]
call fcn.00408234
add esp, 4
movzx edx, byte [ebp - 0x20]
lea eax, [ebp - 0x18]
call fcn.004d7200
mov eax, dword [ebp - 8]
mov eax, dword [eax]
call fcn.0040806c
dec eax
test eax, eax
jl 0x4d81a2
inc eax
mov dword [ebp - 0x60], eax
xor edi, edi
mov eax, edi
add eax, eax
lea eax, [eax + eax*4]
mov edx, dword [ebp - 8]
mov edx, dword [edx]
mov eax, dword [edx + eax*8 + 8]
cmp eax, dword [ebp - 0x20]
jne 0x4d8198
mov eax, dword [ebp - 0x18]
call fcn.0040806c
dec eax
test eax, eax
jl 0x4d81a2
inc eax
mov dword [ebp - 0x64], eax
xor esi, esi
lea ebx, [esi + edi]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
call fcn.0040806c
cmp ebx, eax
jne 0x4d8108
lea eax, [ebx + 1]
push eax
mov eax, dword [ebp - 8]
mov ecx, 1
mov edx, dword [0x4d6ad8]
call fcn.00408234
add esp, 4
mov eax, ebx
add eax, eax
lea eax, [eax + eax*4]
mov edx, dword [ebp - 8]
mov edx, dword [edx]
movzx eax, byte [edx + eax*8 + 0x15]
mov edx, esi
add edx, edx
lea edx, [edx + edx*4]
mov ecx, dword [ebp - 0x18]
mov byte [ecx + edx*8 + 0x15], al
mov eax, ebx
add eax, eax
lea eax, [eax + eax*4]
mov edx, dword [ebp - 8]
mov edx, dword [edx]
movzx eax, byte [edx + eax*8 + 0x20]
mov edx, esi
add edx, edx
lea edx, [edx + edx*4]
mov ecx, dword [ebp - 0x18]
mov byte [ecx + edx*8 + 0x20], al
mov eax, ebx
add eax, eax
lea eax, [eax + eax*4]
mov edx, dword [ebp - 8]
mov edx, dword [edx]
movzx eax, byte [edx + eax*8 + 0x49]
mov edx, esi
add edx, edx
lea edx, [edx + edx*4]
mov ecx, dword [ebp - 0x18]
mov byte [ecx + edx*8 + 0x49], al
mov eax, ebx
add eax, eax
lea eax, [eax + eax*4]
mov edx, dword [ebp - 8]
mov edx, dword [edx]
lea eax, [edx + eax*8]
mov edx, esi
add edx, edx
lea edx, [edx + edx*4]
mov ecx, dword [ebp - 0x18]
lea edx, [ecx + edx*8]
mov ecx, dword [0x4d6a8c]
call fcn.0040787c
inc esi
dec dword [ebp - 0x64]
jne 0x4d80dd
jmp 0x4d81a2
inc edi
dec dword [ebp - 0x60]
jne 0x4d80ad
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4d7ca9
inc dword [ebp - 0x20]
ret
mov eax, dword [ebp - 8]
mov eax, dword [eax]
call fcn.0040806c
dec eax
test eax, eax
jl 0x4d82f3
inc eax
mov dword [ebp - 0x60], eax
xor edi, edi
mov ebx, edi
add ebx, ebx
lea ebx, [ebx + ebx*4]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
cmp dword [eax + ebx*8], 0
jne 0x4d8256
push ebp
lea eax, [ebp - 0x14c]
call fcn.004d7b78
pop ecx
mov edx, dword [ebp - 0x14c]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
lea eax, [eax + ebx*8]
call fcn.00406874
mov eax, dword [ebp - 8]
mov eax, dword [eax]
cmp dword [eax + ebx*8], 0
je 0x4d82e9
push 1
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov ecx, dword [eax + ebx*8]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
movzx edx, byte [eax + ebx*8 + 0xc]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov eax, dword [eax + ebx*8 + 8]
call fcn.004d84e8
mov edx, dword [ebp - 8]
mov edx, dword [edx]
mov byte [edx + ebx*8 + 0x14], al
mov eax, edi
add eax, eax
lea eax, [eax + eax*4]
mov edx, dword [ebp - 8]
mov edx, dword [edx]
cmp byte [edx + eax*8 + 0x14], 0
je 0x4d82e9
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov eax, dword [eax + ebx*8]
lea ecx, [ebp - 0x14]
lea edx, [ebp - 0x10]
call fcn.004d77cc
test al, al
je 0x4d828f
mov eax, dword [ebp - 8]
mov eax, dword [eax]
lea eax, [eax + ebx*8 + 0x18]
mov edx, dword [ebp - 0x10]
call fcn.00406874
mov eax, dword [ebp - 8]
mov eax, dword [eax]
lea eax, [eax + ebx*8 + 0x1c]
mov edx, dword [ebp - 0x14]
call fcn.00406874
lea eax, [ebp - 0x48]
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov eax, dword [eax + ebx*8]
lea ecx, [ebp - 0x40]
lea edx, [ebp - 0x38]
call fcn.004d3704
test al, al
je 0x4d82e9
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, dword [ebp - 0x38]
mov dword [eax + ebx*8 + 0x30], edx
mov edx, dword [ebp - 0x34]
mov dword [eax + ebx*8 + 0x34], edx
mov eax, dword [ebp - 0x40]
mov edx, dword [ebp - 0x3c]
sub eax, dword [ebp - 0x38]
sbb edx, dword [ebp - 0x34]
mov ecx, dword [ebp - 8]
mov ecx, dword [ecx]
mov dword [ecx + ebx*8 + 0x28], eax
mov dword [ecx + ebx*8 + 0x2c], edx
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov edx, dword [ebp - 0x40]
mov dword [eax + ebx*8 + 0x38], edx
mov edx, dword [ebp - 0x3c]
mov dword [eax + ebx*8 + 0x3c], edx
inc edi
dec dword [ebp - 0x60]
jne 0x4d81d3
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4d833e
lea eax, [ebp - 0x14c]
call fcn.00406864
lea eax, [ebp - 0x138]
mov edx, 4
call fcn.0040686c
lea eax, [ebp - 0x18]
mov edx, dword [0x4d6ad8]
call fcn.00408354
lea eax, [ebp - 0x14]
mov edx, 3
call fcn.0040686c
ret