Function at 0x4b4fb0
Capabilities:
Get disk information

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5b7ccb
mov eax, dword fs:[0]
push eax
sub esp, 0x44c
mov eax, dword [0x64786c]
xor eax, ebp
mov dword [ebp - 0x10], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x450], ecx
mov ecx, dword [ebp - 0x450]
add ecx, 4
call fcn.004ef740
push eax
mov ecx, dword [ebp - 0x450]
add ecx, 4
call fcn.00415eb0
push eax
mov ecx, dword [ebp - 0x450]
add ecx, 0x1c
call fcn.004b5ae0
push 0x1f
mov ecx, dword [ebp - 0x450]
add ecx, 0x1c
call fcn.004a9200
cmp dword [ebp + 8], 0
je 0x4b50f8
mov eax, dword [ebp + 8]
movzx ecx, word [eax]
test ecx, ecx
je 0x4b50f8
mov edx, dword [ebp + 8]
push edx
push 0x5c164c
push 0x104
lea eax, [ebp - 0x21c]
push eax
call fcn.0059be29
add esp, 0x10
xor ecx, ecx
mov word [ebp - 0x16], cx
mov edx, dword [ebp - 0x450]
add edx, 0x34
push edx
lea eax, [ebp - 0x21c]
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov ecx, dword [ebp - 0x450]
mov dword [ecx + 0x30], eax
mov edx, dword [ebp + 8]
push edx
lea ecx, [ebp - 0x44c]
call fcn.00496850
mov dword [ebp - 0x454], eax
mov eax, dword [ebp - 0x454]
mov dword [ebp - 0x458], eax
mov dword [ebp - 4], 0
mov ecx, dword [ebp - 0x458]
call fcn.00415eb0
push eax
mov ecx, dword [ebp - 0x450]
add ecx, 0x1c
call fcn.004a9eb0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x44c]
call fcn.00401c80
mov ecx, dword [ebp - 0x450]
add ecx, 0x1c
call fcn.004ef740
mov ecx, dword [ebp - 0x450]
mov dword [ecx + 0x2c], eax
push 1
mov ecx, dword [ebp - 0x450]
add ecx, 0x1c
call fcn.004b5ab0
jmp 0x4b52f2
lea ecx, [ebp - 0x43c]
call fcn.00405060
mov dword [ebp - 4], 1
push 0
mov ecx, dword [ebp - 0x450]
add ecx, 0x1c
call fcn.004a9200
lea edx, [ebp - 0x43c]
push edx
call fcn.004b5320
add esp, 4
mov dword [ebp - 0x428], eax
mov ecx, dword [ebp - 0x450]
add ecx, 0x1c
call fcn.004ef740
mov ecx, dword [ebp - 0x450]
mov dword [ecx + 0x2c], eax
mov edx, dword [ebp - 0x428]
or edx, 1
push edx
mov ecx, dword [ebp - 0x450]
add ecx, 0x1c
call fcn.004b5ab0
cmp dword [ebp - 0x428], 0
je 0x4b525b
push 0
push 0
push 0
push 0
push 3
push 0
push str.desktop
lea ecx, [ebp - 0x43c]
call fcn.00405250
push eax
mov ecx, dword [ebp - 0x450]
call fcn.004b55a0
push 0
push 0
push 0
push 0
push 4
push 0
push 0x5c1664
lea ecx, [ebp - 0x43c]
call fcn.00405250
push eax
mov ecx, dword [ebp - 0x450]
call fcn.004b55a0
push 0
push 0
push 0
push 0
push 5
push 0
push str.down
lea ecx, [ebp - 0x43c]
call fcn.00405250
push eax
mov ecx, dword [ebp - 0x450]
call fcn.004b55a0
push 0
push 0
push 0
push 0
push 7
push 0
push 0x5c1670
lea ecx, [ebp - 0x43c]
call fcn.00405250
push eax
mov ecx, dword [ebp - 0x450]
call fcn.004b55a0
push 0
push 0
push 0
push 0
push 8
push 0
push str.music
lea ecx, [ebp - 0x43c]
call fcn.00405250
push eax
mov ecx, dword [ebp - 0x450]
call fcn.004b55a0
push 0
push 0
push 0
push 0
push 9
push 0
push str.video
lea ecx, [ebp - 0x43c]
call fcn.00405250
push eax
mov ecx, dword [ebp - 0x450]
call fcn.004b55a0
mov dword [ebp - 0x440], 0
jmp 0x4b5276
mov eax, dword [ebp - 0x440]
add eax, 1
mov dword [ebp - 0x440], eax
cmp dword [ebp - 0x440], 0x1a
jge 0x4b52e0
mov ecx, dword [ebp - 0x440]
add ecx, 0x41
push ecx
push str._c:_
lea edx, [ebp - 0x424]
push edx
call fcn.00598b70
add esp, 0xc
lea eax, [ebp - 0x424]
push eax
call dword [sym.imp.KERNEL32.dll_GetDriveTypeW]
mov dword [ebp - 0x444], eax
cmp dword [ebp - 0x444], 1
je 0x4b52de
xor ecx, ecx
mov word [ebp - 0x420], cx
push 0
push 0
push 0
push 0
push 2
lea edx, [ebp - 0x424]
push edx
mov ecx, dword [ebp - 0x450]
call fcn.004b5490
jmp 0x4b5267
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x43c]
call fcn.00405190
mov eax, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0059709c
mov esp, ebp
pop ebp
ret 4