Function at 0x403800
Capabilities:
Get disk information

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
push ebx
sub esp, 0x4dc
mov ebx, eax
mov dword [ebp - 0x4a0], eax
lea eax, [ebp - 0x4a0]
mov dword [esp + 4], eax
mov dword [esp], 0x42a1f0
call fcn.0041ce10
mov esi, eax
mov eax, dword [eax]
test eax, eax
mov dword [ebp - 0x4bc], eax
je 0x403850
cmp eax, dword [0x423960]
je 0x403850
mov eax, dword [ebp - 0x4bc]
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret
mov dword [esp], ebx
call sub.msvcrt.dll_strlen
add eax, ebx
mov dword [ebp - 0x4b0], eax
mov dword [esp], 8
call fcn.00411c90
mov dword [ebp - 0x4bc], eax
mov eax, dword [ebp - 0x4b0]
mov dword [esp], ebx
sub eax, ebx
mov dword [esp + 4], eax
call fcn.00411e80
mov edx, dword [ebp - 0x4bc]
mov dword [edx], eax
mov dword [esp + 8], esi
mov dword [esp + 4], edx
mov dword [esp], 0x42a1f0
call fcn.0041cf60
mov edi, dword [ebp - 0x4b0]
cmp byte [edi - 1], 0x5c
je 0x403979
lea esi, [esi]
lea edi, [edi]
mov dword [esp], ebx
lea eax, [ebp - 0x448]
mov dword [esp + 4], eax
call sub.msvcrt.dll__stat
cmp eax, 0xffffffff
mov esi, eax
jne 0x4038e3
call sub.msvcrt.dll__errno
cmp dword [eax], 4
je 0x4038c0
mov edx, dword [ebp - 0x4b0]
cmp byte [edx - 1], 0
jne 0x4038f3
mov byte [edx - 1], 0x5c
test esi, esi
js 0x403982
mov eax, dword [ebp - 0x448]
mov dword [ebp - 0x498], eax
mov eax, 1
mov dword [esp + 4], eax
mov dword [esp], ebx
call fcn.0041f8a0
mov dword [ebp - 0x494], eax
mov esi, eax
mov eax, dword [ebp - 0x428]
mov dword [ebp - 0x490], eax
lea eax, [ebp - 0x498]
mov dword [esp + 4], eax
mov dword [esp], 0x42a1c0
call fcn.0041ce10
mov dword [ebp - 0x4b8], eax
mov eax, dword [eax]
test eax, eax
mov dword [ebp - 0x4b4], eax
je 0x40399d
cmp eax, dword [0x423960]
je 0x40399d
mov eax, dword [ebp - 0x4bc]
mov edx, dword [ebp - 0x4b4]
mov dword [eax + 4], edx
mov eax, dword [ebp - 0x4bc]
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret
mov byte [edi - 1], 0
jmp 0x4038c0
mov edi, dword [ebp - 0x4bc]
mov eax, dword [ebp - 0x4bc]
mov dword [edi + 4], 0
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret
mov dword [esp], 0x44
call fcn.00411c90
mov dword [ebp - 0x4b4], eax
mov edx, dword [ebp - 0x4b4]
mov eax, dword [ebp - 0x448]
mov dword [edx], eax
mov dword [esp], esi
call fcn.00411e50
mov edi, dword [ebp - 0x4b4]
mov dword [edi + 4], eax
mov eax, dword [ebp - 0x428]
mov dword [edi + 8], eax
mov eax, dword [ebp - 0x42c]
mov dword [edi + 0xc], eax
mov eax, 0x200
mov byte [esi + 3], 0
mov dword [esp + 0x1c], eax
lea eax, [ebp - 0x418]
mov dword [esp + 0x18], eax
lea eax, [ebp - 0x4a4]
mov dword [esp + 0x14], eax
lea eax, [ebp - 0x4a8]
mov dword [esp + 0x10], eax
lea eax, [ebp - 0x4ac]
mov dword [esp + 0xc], eax
mov eax, 0x200
mov dword [esp + 8], eax
lea eax, [ebp - 0x218]
mov dword [esp + 4], eax
mov dword [esp], esi
call sub.KERNEL32.dll_GetVolumeInformationA
sub esp, 0x20
test eax, eax
jne 0x403b03
mov dword [edi + 0x10], 4
mov edi, dword [ebp - 0x4b8]
mov dword [esp + 8], edi
mov eax, dword [ebp - 0x4b4]
mov dword [esp], 0x42a1c0
mov dword [esp + 4], eax
call fcn.0041cf60
call sub.msvcrt.dll__errno
mov dword [eax], 0
lea esi, [esi]
mov dword [esp], ebx
call fcn.004218d0
mov edx, dword [ebp - 0x4b4]
test eax, eax
mov dword [edx + 0x40], eax
jne 0x403aa8
call sub.msvcrt.dll__errno
cmp dword [eax], 4
je 0x403a70
mov edi, dword [ebp - 0x4b4]
mov eax, dword [edi + 0x40]
test eax, eax
jne 0x403aa8
mov dword [edi + 0x14], 0
jmp 0x40395c
mov eax, 0x403540
mov edi, 0x403400
mov esi, 0x6b
mov dword [esp + 0x10], eax
mov eax, 0x4034a0
mov dword [esp + 0xc], eax
mov dword [esp + 8], edi
mov dword [esp + 4], esi
mov eax, dword [ebp - 0x4b4]
add eax, 0x14
mov dword [esp], eax
call fcn.0041cd50
mov eax, dword [0x42a080]
inc eax
cmp eax, 0xa
mov dword [0x42a080], eax
jne 0x40395c
mov eax, dword [ebp - 0x4b4]
xor edx, edx
call fcn.00403580
jmp 0x40395c
cld
mov eax, 0x4250c0
mov ecx, 4
lea esi, [ebp - 0x418]
mov edi, eax
repe cmpsb byte [esi], byte es:[edi]
jne 0x403b2c
mov eax, dword [ebp - 0x4b4]
mov dword [eax + 0x10], 1
jmp 0x403a42
cld
mov eax, str.NTFS
mov edi, eax
mov ecx, 5
lea esi, [ebp - 0x418]
repe cmpsb byte [esi], byte es:[edi]
setb al
seta dl
sub dl, al
movsx eax, dl
cmp eax, 1
mov edx, dword [ebp - 0x4b4]
sbb eax, eax
and eax, 0xfffffffe
add eax, 4
mov dword [edx + 0x10], eax
jmp 0x403a42