Function at 0x4e00d4
Capabilities:
Get storage device properties

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x2cd4
call fcn.004682f0
mov eax, dword [0x657114]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
mov ebx, ecx
xor esi, esi
push esi
lea eax, [ebp - 0x404]
push str..PhysicalDrive_d
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
lea eax, [ebp - 0x404]
push 0
push 0
push 3
push 0
push 3
push 0
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov edi, eax
cmp edi, 0xffffffff
je 0x4e039a
and dword [ebp - 0x2cd4], 0
lea eax, [ebp - 0x2b20]
push 0xc
push 0
push eax
call fcn.004e37a0
xor eax, eax
push 0x2710
push eax
mov dword [ebp - 0x2b20], eax
mov dword [ebp - 0x2b1c], eax
lea eax, [ebp - 0x2b14]
push eax
call fcn.004e37a0
add esp, 0x18
lea eax, [ebp - 0x2cd4]
push 0
push eax
push 0x2710
lea eax, [ebp - 0x2b14]
push eax
push 0xc
lea eax, [ebp - 0x2b20]
push eax
push 0x2d1400
push edi
call dword [sym.imp.KERNEL32.dll_DeviceIoControl]
test eax, eax
je 0x4e0380
push 0x80
lea eax, [ebp - 0x204]
push 0
push eax
call fcn.004e37a0
push 0x80
lea eax, [ebp - 0x104]
push 0
push eax
call fcn.004e37a0
push 0x80
lea eax, [ebp - 0x84]
push 0
push eax
call fcn.004e37a0
push 0x80
lea eax, [ebp - 0x184]
push 0
push eax
call fcn.004e37a0
add esp, 0x30
lea eax, [ebp - 0x84]
mov ecx, ebx
push eax
push 0
push dword [ebp - 0x2b08]
lea eax, [ebp - 0x2b14]
push eax
call fcn.004e04fd
lea eax, [ebp - 0x104]
mov ecx, ebx
push eax
push 0
push dword [ebp - 0x2b04]
lea eax, [ebp - 0x2b14]
push eax
call fcn.004e04fd
lea eax, [ebp - 0x184]
mov ecx, ebx
push eax
push 0
push dword [ebp - 0x2b00]
lea eax, [ebp - 0x2b14]
push eax
call fcn.004e04fd
lea eax, [ebp - 0x204]
mov ecx, ebx
push eax
push 1
push dword [ebp - 0x2afc]
lea eax, [ebp - 0x2b14]
push eax
call fcn.004e04fd
lea ecx, [ebp - 0x2cd0]
call fcn.004dfcb0
lea eax, [ebp - 0x84]
push eax
call fcn.004f3930
pop ecx
test eax, eax
je 0x4e028c
lea eax, [ebp - 0x84]
push eax
lea eax, [ebp - 0x2ca8]
push eax
call fcn.004f41c0
pop ecx
pop ecx
lea eax, [ebp - 0x104]
push eax
call fcn.004f3930
pop ecx
test eax, eax
je 0x4e02b2
lea eax, [ebp - 0x104]
push eax
lea eax, [ebp - 0x2ca8]
push eax
call fcn.004f41d0
pop ecx
pop ecx
lea eax, [ebp - 0x184]
push eax
lea eax, [ebp - 0x2ba8]
push eax
call fcn.004f41c0
lea eax, [ebp - 0x204]
push eax
lea eax, [ebp - 0x2c28]
push eax
call fcn.004f41c0
add esp, 0x10
lea eax, [ebp - 0x2c28]
mov ecx, ebx
push eax
call fcn.004e0782
lea eax, [ebp - 0x2ca8]
mov ecx, ebx
push eax
call fcn.004e0782
lea eax, [ebp - 0x2ba8]
mov ecx, ebx
push eax
call fcn.004e0782
push 0x2710
lea eax, [ebp - 0x2b14]
push 0
push eax
call fcn.004e37a0
add esp, 0xc
lea eax, [ebp - 0x2cd4]
xor ecx, ecx
push ecx
push eax
push 0x2710
lea eax, [ebp - 0x2b14]
push eax
push ecx
push ecx
push 0x700a0
push edi
call dword [sym.imp.KERNEL32.dll_DeviceIoControl]
test eax, eax
je 0x4e039a
mov eax, dword [ebp - 0x2afc]
mov dword [ebp - 0x2cd0], eax
mov eax, dword [ebp - 0x2af8]
mov dword [ebp - 0x2ccc], eax
xor eax, eax
cmp dword [ebp - 0x2b0c], 0xc
push 2
pop ecx
cmove eax, ecx
mov ecx, ebx
mov dword [ebp - 0x2b28], eax
lea eax, [ebp - 0x2cd0]
push eax
call fcn.004dfd0e
jmp 0x4e0393
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str._nDeviceIOControl_IOCTL_STORAGE_QUERY_PROPERTY_error___d_n
call fcn.00410750
pop ecx
pop ecx
push edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
inc esi
cmp esi, 0x10
jl 0x4e00f2
mov ecx, dword [ebp - 4]
xor eax, eax
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.004682d0
mov esp, ebp
pop ebp
ret