Function at 0x437ea0
Capabilities:
Get disk information

Disassembly:
mov eax, 0x126c
call sub.ntdll.dll__chkstk
mov eax, dword [0x4e9028]
xor eax, esp
mov dword [esp + 0x1264], eax
mov eax, dword [esp + 0x1270]
push ebx
push ebp
push esi
push edi
push 0x588
mov dword [esp + 0x1c], eax
call sub.MFC80U.DLL_Ordinal_762
xor edi, edi
add esp, 4
cmp eax, edi
je 0x437ee9
mov esi, eax
call fcn.0045c7b0
mov ebp, eax
mov dword [esp + 0x14], ebp
jmp 0x437eef
mov dword [esp + 0x14], edi
mov ebp, edi
mov edx, dword [ebp]
mov eax, dword [esp + 0x1284]
mov edx, dword [edx]
push eax
mov ecx, ebp
call edx
test eax, eax
jne 0x437f6b
test byte [0x4f1904], 1
jne 0x437f35
or dword [0x4f1904], 1
push 0x467ae0
mov dword [0x4f18dc], 0x4dbdb8
mov dword [0x4f18e0], 0xffffffff
call fcn.00462d9a
add esp, 4
push 0x6e2
call fcn.00433b80
add esp, 4
push eax
mov eax, dword [0x4f18dc]
mov ecx, dword [eax + 8]
push str._s:_ldmIO.Init___to_fail
push 0x4f18dc
call ecx
mov edx, dword [ebp]
mov eax, dword [edx + 4]
add esp, 0xc
mov ecx, ebp
call eax
xor eax, eax
jmp 0x4385e0
mov ecx, ebp
call fcn.00438600
mov edx, dword [ebp]
mov eax, dword [edx + 8]
mov ecx, ebp
call eax
mov esi, eax
mov edx, dword [esi + 0x123]
mov ecx, dword [esi + 0x11f]
mov dword [esp + 0x44], edx
xor edx, edx
mov dword [esp + 0x30], esi
mov dword [esp + 0x40], ecx
mov dword [esp + 0x20], edx
lea esp, [esp]
mov ecx, dword [esi + 0x35c]
cmp ecx, edi
je 0x4385d1
mov eax, dword [esi + 0x360]
sub eax, ecx
sar eax, 2
cmp edx, eax
jae 0x4385d1
cmp ecx, edi
je 0x437fd4
mov eax, dword [esi + 0x360]
sub eax, ecx
sar eax, 2
cmp edx, eax
jb 0x437fda
call dword [sym.imp.MSVCR80.dll__invalid_parameter_noinfo]
mov eax, dword [esi + 0x35c]
mov ecx, dword [esp + 0x20]
mov ebx, dword [eax + ecx*4]
mov eax, dword [ebx + 4]
mov ecx, dword [eax + 0x18]
mov edx, dword [eax + 0x1c]
mov dword [esp + 0x3c], eax
xor eax, eax
cmp ecx, edi
mov dword [esp + 0x28], ebx
jle 0x43801d
lea esi, [edx + ecx - 1]
mov dl, byte [esi]
mov byte [esp + eax + 0xe68], dl
add eax, 1
sub esi, 1
cmp eax, ecx
jl 0x438002
mov esi, dword [esp + 0x30]
mov ebp, dword [esp + 0x14]
xor edx, edx
mov dword [esp + 0x1c], edx
mov ecx, dword [ebx + 0xc]
cmp ecx, edi
je 0x43854d
mov eax, dword [ebx + 0x10]
sub eax, ecx
sar eax, 2
cmp edx, eax
jae 0x43854d
cmp ecx, edi
je 0x43804e
mov eax, dword [ebx + 0x10]
sub eax, ecx
sar eax, 2
cmp edx, eax
jb 0x438054
call dword [sym.imp.MSVCR80.dll__invalid_parameter_noinfo]
mov eax, dword [ebx + 0xc]
mov ecx, dword [esp + 0x1c]
mov esi, dword [eax + ecx*4]
mov dword [esp + 0xe68], esi
xor ebp, ebp
mov ecx, dword [esi + 0xc]
cmp ecx, edi
mov dword [esp + 0x34], ebp
je 0x438537
mov eax, dword [esi + 0x10]
sub eax, ecx
sar eax, 2
cmp ebp, eax
jae 0x438537
cmp ecx, edi
je 0x438096
mov eax, dword [esi + 0x10]
sub eax, ecx
sar eax, 2
cmp ebp, eax
jb 0x43809c
call dword [sym.imp.MSVCR80.dll__invalid_parameter_noinfo]
mov edx, dword [esi + 0xc]
mov ebx, dword [edx + ebp*4]
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x24], edi
lea ebx, [ebx]
mov ecx, dword [ebx + 0xc]
cmp ecx, edi
je 0x43852b
mov eax, dword [ebx + 0x10]
sub eax, ecx
sar eax, 2
cmp dword [esp + 0x24], eax
jae 0x43852b
mov ebp, dword [ebx + 4]
push 0x14
call sub.MFC80U.DLL_Ordinal_762
add esp, 4
cmp eax, edi
je 0x4380f1
mov dword [eax], vtable.CDynDiskLdm.0
mov dword [eax + 8], edi
mov dword [eax + 0xc], edi
mov dword [eax + 0x10], edi
mov esi, eax
jmp 0x4380f3
xor esi, esi
mov eax, dword [ebx + 0xc]
cmp eax, edi
je 0x438104
mov ecx, dword [ebx + 0x10]
sub ecx, eax
sar ecx, 2
jne 0x43810a
call dword [sym.imp.MSVCR80.dll__invalid_parameter_noinfo]
mov edx, dword [ebx + 0xc]
mov edi, dword [edx]
push 0x1fe
lea eax, [esp + 0x1076]
push 0
push eax
mov word [esp + 0x107c], 0
call sub.ntdll.dll_memset
mov eax, dword [edi + 4]
add esp, 0xc
lea edx, [esp + 0x1070]
call fcn.00433540
mov edx, dword [esi]
mov edx, dword [edx + 0x18]
lea eax, [esp + 0x1070]
push eax
mov ecx, esi
call edx
mov edi, eax
mov eax, dword [esi]
mov edx, dword [eax + 0xc]
mov ecx, esi
call edx
cmp edi, dword [esp + 0x1284]
jne 0x438514
push 0x840
lea eax, [esp + 0x54]
push 0
push eax
call sub.ntdll.dll_memset
mov ecx, dword [esp + 0x48]
movzx edx, byte [ecx + 0x71]
mov ecx, dword [esp + 0x34]
add esp, 0xc
mov dword [esp + 0x888], edx
mov dword [esp + 0x268], 0
call fcn.00437aa0
mov ebx, eax
cmp ebx, 1
je 0x4381ab
cmp ebx, 5
jne 0x4381b6
mov dword [esp + 0x268], 1
mov ecx, dword [ebp + 0x44]
mov edx, dword [ebp + 0x48]
xor eax, eax
test ecx, ecx
mov byte [esp + 0xe60], 0
mov dword [esp + 0xe61], eax
mov word [esp + 0xe65], ax
mov byte [esp + 0xe67], al
jle 0x4381f7
lea esi, [edx + ecx - 1]
mov dl, byte [esi]
mov byte [esp + eax + 0xe60], dl
add eax, 1
sub esi, 1
cmp eax, ecx
jl 0x4381e4
mov eax, dword [esp + 0xe60]
mov ecx, dword [esp + 0xe64]
mov dword [esp + 0x58], eax
mov dword [esp + 0x5c], ecx
mov edx, dword [ebp + 0x34]
add edx, dword [esp + 0x40]
mov eax, dword [ebp + 0x38]
adc eax, dword [esp + 0x44]
cmp dword [esp + 0x268], 0
mov dword [esp + 0x50], edx
mov dword [esp + 0x54], eax
je 0x4382a5
call dword [sym.imp.KERNEL32.dll_GetLogicalDrives]
mov edx, dword [0x4ebe30]
or edx, eax
mov dword [0x4ebe30], edx
mov ecx, 2
mov eax, 1
shl eax, cl
test edx, eax
je 0x438295
add ecx, 1
cmp ecx, 0x1a
jl 0x438246
mov eax, 0x2a
mov esi, dword [sym.imp.MSVCR80.dll__swprintf]
movzx ecx, ax
push ecx
lea edx, [esp + 0x64]
push 0x4dc080
push edx
call esi
add esp, 0xc
lea eax, [esp + 0x1070]
call fcn.00437df0
push eax
lea eax, [esp + 0x684]
push str._s
push eax
call esi
jmp 0x4382b7
or edx, eax
add ecx, 0x41
mov dword [0x4ebe30], edx
movzx eax, cx
jmp 0x43825e
push 0x2a
lea ecx, [esp + 0x64]
push 0x4dc080
push ecx
call dword [sym.imp.MSVCR80.dll__swprintf]
add esp, 0xc
push 4
call sub.MFC80U.DLL_Ordinal_762
add esp, 4
test eax, eax
je 0x4382d2
mov dword [eax], vtable.CFatDBR.0
mov edi, eax
jmp 0x4382d4
xor edi, edi
push 4
call sub.MFC80U.DLL_Ordinal_762
add esp, 4
test eax, eax
je 0x4382ec
mov dword [eax], vtable.CNtfsDBR.0
mov esi, eax
jmp 0x4382ee
xor esi, esi
push 0x1ff
lea edx, [esp + 0xe75]
push 0
push edx
mov byte [esp + 0xe7c], 0
call sub.ntdll.dll_memset
mov eax, dword [esp + 0x24]
mov ecx, dword [eax + 4]
mov eax, dword [esp + 0x60]
mov edx, dword [ecx]
mov edx, dword [edx + 0xc]
add esp, 0xc
push 0
push 1
push eax
mov eax, dword [esp + 0x5c]
push eax
lea eax, [esp + 0xe80]
push eax
call edx
test eax, eax
je 0x43855b
mov eax, dword [edi]
mov edx, dword [eax + 4]
lea ecx, [esp + 0xe70]
push ecx
mov ecx, edi
call edx
test eax, eax
jne 0x43839d
mov eax, dword [esi]
mov edx, dword [eax + 4]
lea ecx, [esp + 0xe70]
push ecx
mov ecx, esi
call edx
test eax, eax
jne 0x43839d
push 5
lea eax, [esp + 0xe77]
push str.EXFAT
push eax
call dword [sym.imp.ntdll.dll_strncmp]
add esp, 0xc
test eax, eax
je 0x43839d
mov ecx, dword [esp + 0x18]
mov ecx, dword [ecx + 4]
mov edx, dword [ecx]
mov eax, dword [edx + 0x3c]
call eax
xor ecx, ecx
add eax, dword [ebp + 0x34]
adc ecx, dword [ebp + 0x38]
mov dword [esp + 0x50], eax
mov dword [esp + 0x54], ecx
mov edx, dword [edi]
mov eax, dword [edx]
mov ecx, edi
call eax
mov edx, dword [esi]
mov eax, dword [edx]
mov ecx, esi
call eax
mov ecx, dword [esp + 0x1284]
mov edx, dword [esp + 0x54]
mov eax, dword [esp + 0x50]
push ecx
push edx
push eax
call fcn.00437d30
add esp, 0xc
push 0x5dc
mov dword [esp + 0x270], eax
call sub.MFC80U.DLL_Ordinal_762
mov esi, eax
add esp, 4
test esi, esi
je 0x438405
xor eax, eax
push 0x5cf
push eax
lea ecx, [esi + 0xc]
push ecx
mov dword [esi], vtable.CPart.0
mov dword [esi + 4], eax
mov dword [esi + 8], eax
call sub.ntdll.dll_memset
add esp, 0xc
mov ebp, esi
jmp 0x438407
xor ebp, ebp
mov ecx, dword [esp + 0x18]
mov edx, dword [ebp]
mov edx, dword [edx + 8]
lea eax, [esp + 0x50]
push eax
push ecx
mov ecx, ebp
mov dword [esp + 0x40], ebp
call edx
cmp dword [esp + 0x268], 0
jne 0x4384a0
mov eax, dword [ebp]
mov edx, dword [eax + 0x10]
mov ecx, ebp
call edx
cmp ebx, 2
mov ecx, 0x173
mov esi, eax
lea edi, [esp + 0x890]
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
je 0x438478
cmp ebx, 3
je 0x438478
cmp ebx, 4
jne 0x438464
push str.Striped_Volume
lea eax, [esp + 0xdd1]
push eax
jmp 0x438485
cmp ebx, 6
jne 0x43848e
push str.RAID5_Volume
lea ecx, [esp + 0xdd1]
push ecx
jmp 0x438485
push str.Spanned_Volume
lea edx, [esp + 0xdd1]
push edx
call dword [sym.imp.MSVCR80.dll__swprintf]
add esp, 8
mov eax, dword [ebp]
mov edx, dword [eax + 0x14]
lea ecx, [esp + 0x890]
push ecx
mov ecx, ebp
call edx
mov esi, dword [esp + 0x18]
mov ecx, dword [esi + 0xc]
add esi, 8
test ecx, ecx
jne 0x4384b2
xor edx, edx
jmp 0x4384ba
mov edx, dword [esi + 8]
sub edx, ecx
sar edx, 2
test ecx, ecx
je 0x4384f0
mov eax, dword [esi + 0xc]
sub eax, ecx
sar eax, 2
cmp edx, eax
jae 0x4384f0
mov eax, dword [esi + 8]
add dword [esp + 0x24], 1
mov ebx, dword [esp + 0x2c]
mov dword [eax], ebp
mov ebp, dword [esp + 0x34]
add eax, 4
mov dword [esi + 8], eax
mov esi, dword [esp + 0xe68]
xor edi, edi
jmp 0x4380b0
mov edi, dword [esi + 8]
cmp ecx, edi
jbe 0x4384fd
call dword [sym.imp.MSVCR80.dll__invalid_parameter_noinfo]
push edi
push esi
lea eax, [esp + 0x40]
push eax
lea ecx, [esp + 0x54]
push ecx
mov eax, esi
call fcn.00438920
mov ebx, dword [esp + 0x2c]
add dword [esp + 0x24], 1
mov esi, dword [esp + 0xe68]
mov ebp, dword [esp + 0x34]
xor edi, edi
jmp 0x4380b0
mov ebx, dword [esp + 0x28]
add ebp, 1
jmp 0x438067
add dword [esp + 0x1c], 1
mov esi, dword [esp + 0x30]
mov edx, dword [esp + 0x1c]
mov ebp, dword [esp + 0x14]
jmp 0x438023
add dword [esp + 0x20], 1
mov edx, dword [esp + 0x20]
jmp 0x437fa0
test byte [0x4f1904], 1
jne 0x43858c
or dword [0x4f1904], 1
push 0x467ae0
mov dword [0x4f18dc], 0x4dbdb8
mov dword [0x4f18e0], 0xffffffff
call fcn.00462d9a
add esp, 4
push 0x724
call fcn.00433b80
mov edx, dword [0x4f18dc]
add esp, 4
push eax
mov eax, dword [edx + 8]
push str._s:_Failed_to_ReadSector_in_InitPart.
push 0x4f18dc
call eax
mov ecx, dword [esp + 0x20]
mov edx, dword [ecx]
mov eax, dword [edx + 4]
add esp, 0xc
call eax
mov edx, dword [edi]
mov eax, dword [edx]
mov ecx, edi
call eax
mov edx, dword [esi]
mov eax, dword [edx]
mov ecx, esi
call eax
xor eax, eax
jmp 0x4385e0
mov edx, dword [ebp]
mov eax, dword [edx + 4]
mov ecx, ebp
call eax
mov eax, 1
mov ecx, dword [esp + 0x1274]
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.00462b77
add esp, 0x126c
ret 8