Function at 0x432b5d
Capabilities:
Get disk information

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x70
push ebx
push esi
push edi
call fcn.00409ebc
lea ecx, [ebp + 8]
call fcn.00429ef2
mov esi, dword [ebp + 8]
push 0x2c
push esi
call dword [sym.imp.SHLWAPI.dll_StrChrW]
xor ebx, ebx
cmp eax, ebx
mov byte [ebp + 0xb], 0
je 0x432bca
mov word [eax], bx
inc eax
inc eax
lea ecx, [ebp - 0x10]
mov dword [ebp - 0x10], eax
call fcn.00429ef2
mov eax, dword [ebp - 0x10]
mov ax, word [eax]
and ax, 0xffdf
cmp ax, 0x52
jne 0x432baf
mov byte [ebp + 0xb], 2
jmp 0x432bca
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 0x10]
push eax
mov dword [ebp - 0xc], ebx
call fcn.0042e410
cmp dword [ebp - 0xc], ebx
pop ecx
pop ecx
je 0x432bca
mov byte [ebp + 0xb], 1
mov ax, word [esi]
cmp ax, 0x43
mov dword [ebp - 0x10], ebx
mov dword [ebp - 0xc], ebx
jne 0x432be9
cmp word [esi + 2], 0x2d
jne 0x432be9
mov dword [ebp - 0x10], 1
jmp 0x432c0d
cmp ax, 0x55
jne 0x432bff
cmp word [esi + 2], 0x2d
jne 0x432bff
mov dword [ebp - 0xc], 1
jmp 0x432c0d
cmp ax, bx
je 0x432c0d
cmp word [esi + 2], 0x3a
jne 0x432c0d
mov ebx, eax
push 5
pop ecx
mov esi, 0x47aadc
lea edi, [ebp - 0x40]
rep movsd dword es:[edi], dword [esi]
mov esi, 0x476bdc
lea edi, [ebp - 0x20]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
xor edi, edi
cmp bx, di
je 0x432c83
movsx ax, bl
mov word [ebp - 0x38], ax
lea eax, [ebp - 0x20]
push eax
mov word [ebp - 0x20], bx
call dword [sym.imp.KERNEL32.DLL_GetDriveTypeW]
mov esi, eax
lea eax, [ebp - 0x40]
push edi
push eax
call fcn.0042c6e0
cmp esi, 5
pop ecx
pop ecx
jne 0x432c77
cmp byte [ebp + 0xb], 2
jne 0x432c60
cmp eax, 7
je 0x432c77
xor eax, eax
cmp byte [ebp + 0xb], 1
setne al
push eax
push ebx
call fcn.004328ca
pop ecx
pop ecx
jmp 0x432dd5
mov esi, ebx
call fcn.00432aea
jmp 0x432dd5
cmp word [ebp - 0x10], di
jne 0x432c97
cmp word [ebp - 0xc], di
je 0x432dd5
mov byte [ebp + 0xb], 0
call dword [sym.imp.KERNEL32.DLL_GetLogicalDrives]
mov dword [ebp - 0x14], eax
push 6
xor eax, eax
and dword [ebp - 8], 0
mov byte [ebp - 0x70], 0
pop ecx
lea edi, [ebp - 0x6f]
rep stosd dword es:[edi], eax
stosb byte es:[edi], al
mov byte [ebp - 1], 0
mov ecx, dword [ebp - 8]
xor eax, eax
inc eax
shl eax, cl
mov ecx, dword [ebp - 0x14]
test ecx, eax
je 0x432d81
movsx ax, byte [ebp - 1]
push 5
pop ebx
mov ecx, ebx
mov esi, 0x47aadc
lea edi, [ebp - 0x54]
rep movsd dword es:[edi], dword [esi]
mov esi, 0x476bdc
lea edi, [ebp - 0x2c]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
add eax, 0x41
movsd dword es:[edi], dword [esi]
mov word [ebp - 0x4c], ax
mov word [ebp - 0x2c], ax
lea eax, [ebp - 0x2c]
push eax
call dword [sym.imp.KERNEL32.DLL_GetDriveTypeW]
cmp byte [ebp - 1], 2
mov esi, eax
jge 0x432d0b
cmp esi, 2
je 0x432d81
cmp word [ebp - 0xc], 0
je 0x432d1c
cmp esi, ebx
jne 0x432d20
cmp byte [ebp + 0xb], 2
jne 0x432d81
cmp esi, ebx
je 0x432d2a
cmp esi, 2
je 0x432d2a
cmp esi, 3
jne 0x432d81
cmp word [ebp - 0x10], 0
je 0x432d35
cmp esi, ebx
jne 0x432d81
lea eax, [ebp - 0x54]
push 0
push eax
call fcn.0042c6e0
cmp word [ebp - 0xc], 0
pop ecx
pop ecx
je 0x432d60
cmp eax, 7
jne 0x432d81
cmp esi, ebx
jne 0x432d58
cmp byte [ebp + 0xb], 2
jne 0x432d81
mov ecx, dword [ebp - 8]
mov byte [ebp + ecx - 0x70], 0x45
cmp word [ebp - 0x10], 0
je 0x432d81
cmp esi, ebx
jne 0x432d81
cmp byte [ebp + 0xb], 2
jne 0x432d78
cmp eax, 7
mov al, 0x45
je 0x432d7a
mov al, 0x43
mov ecx, dword [ebp - 8]
mov byte [ebp + ecx - 0x70], al
inc byte [ebp - 1]
inc dword [ebp - 8]
cmp byte [ebp - 1], 0x1a
jl 0x432cb7
xor bl, bl
lea edi, [ebp - 0x70]
mov al, byte [edi]
cmp al, 0x43
jne 0x432dbd
movsx ax, bl
add eax, 0x41
mov word [ebp - 0x38], ax
xor eax, eax
cmp byte [ebp + 0xb], 1
setne al
push eax
push dword [ebp - 0x38]
call fcn.004328ca
pop ecx
pop ecx
jmp 0x432dcd
cmp al, 0x45
jne 0x432dcd
movsx si, bl
add esi, 0x41
call fcn.00432aea
inc bl
inc edi
cmp bl, 0x1a
jl 0x432d96
pop edi
pop esi
xor eax, eax
pop ebx
leave
ret 4