Function at 0x44f1f3
Capabilities:
Get disk information

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x74
push ebx
push esi
push edi
call fcn.0040f28e
lea eax, [ebp + 8]
push eax
call fcn.00439c95
pop ecx
push 0x2c
push dword [ebp + 8]
call dword [sym.imp.SHLWAPI.dll_StrChrW]
xor ebx, ebx
cmp eax, ebx
mov dword [ebp - 8], eax
mov byte [ebp - 1], 0
je 0x44f265
mov word [eax], bx
add dword [ebp - 8], 2
lea eax, [ebp - 8]
push eax
call fcn.00439c95
mov eax, dword [ebp - 8]
mov ax, word [eax]
and ax, 0xffdf
cmp ax, 0x52
pop ecx
jne 0x44f24a
mov byte [ebp - 1], 2
jmp 0x44f265
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 8]
push eax
mov dword [ebp - 0x14], ebx
call fcn.0043c486
cmp dword [ebp - 0x14], ebx
pop ecx
pop ecx
je 0x44f265
mov byte [ebp - 1], 1
mov eax, dword [ebp + 8]
mov cx, word [eax]
or dword [ebp - 0xc], 0xffffffff
cmp cx, 0x43
mov dword [ebp - 0x14], ebx
mov dword [ebp - 0x10], ebx
jne 0x44f28b
cmp word [eax + 2], 0x2d
jne 0x44f28b
mov dword [ebp - 0x14], 1
jmp 0x44f2ca
cmp cx, 0x55
jne 0x44f2a1
cmp word [eax + 2], 0x2d
jne 0x44f2a1
mov dword [ebp - 0x10], 1
jmp 0x44f2ca
cmp cx, bx
je 0x44f2ca
cmp word [eax + 2], 0x3a
jne 0x44f2af
mov ebx, ecx
cmp cx, 0x30
jb 0x44f2ca
cmp cx, 0x39
ja 0x44f2ca
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp + 8]
push eax
call fcn.0043c486
pop ecx
pop ecx
push 5
pop ecx
mov esi, 0x4b6d78
lea edi, [ebp - 0x44]
rep movsd dword es:[edi], dword [esi]
mov esi, 0x4b0dbc
lea edi, [ebp - 0x24]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
xor edi, edi
cmp dword [ebp - 0xc], edi
jl 0x44f435
push dword [ebp - 0xc]
mov esi, ebx
call fcn.0044f176
pop ecx
cmp word [ebp - 0x14], di
jne 0x44f30c
cmp word [ebp - 0x10], di
je 0x44f4b5
mov byte [ebp - 1], 0
call dword [sym.imp.KERNEL32.dll_GetLogicalDrives]
mov dword [ebp - 0x18], eax
push 6
xor eax, eax
and dword [ebp - 0xc], 0
mov byte [ebp - 0x74], 0
pop ecx
lea edi, [ebp - 0x73]
rep stosd dword es:[edi], eax
stosb byte es:[edi], al
mov byte [ebp - 2], 0
mov ecx, dword [ebp - 0xc]
xor eax, eax
inc eax
shl eax, cl
mov ecx, dword [ebp - 0x18]
test ecx, eax
je 0x44f3f6
movsx ax, byte [ebp - 2]
push 5
pop ebx
mov ecx, ebx
mov esi, 0x4b6d78
lea edi, [ebp - 0x58]
rep movsd dword es:[edi], dword [esi]
mov esi, 0x4b0dbc
lea edi, [ebp - 0x30]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
add eax, 0x41
movsd dword es:[edi], dword [esi]
mov word [ebp - 0x50], ax
mov word [ebp - 0x30], ax
lea eax, [ebp - 0x30]
push eax
call dword [sym.imp.KERNEL32.dll_GetDriveTypeW]
cmp byte [ebp - 2], 2
mov esi, eax
jge 0x44f380
cmp esi, 2
je 0x44f3f6
cmp word [ebp - 0x10], 0
je 0x44f391
cmp esi, ebx
jne 0x44f395
cmp byte [ebp - 1], 2
jne 0x44f3f6
cmp esi, ebx
je 0x44f39f
cmp esi, 2
je 0x44f39f
cmp esi, 3
jne 0x44f3f6
cmp word [ebp - 0x14], 0
je 0x44f3aa
cmp esi, ebx
jne 0x44f3f6
lea eax, [ebp - 0x58]
push 0
push eax
call fcn.00441ac6
cmp word [ebp - 0x10], 0
pop ecx
pop ecx
je 0x44f3d5
cmp eax, 7
jne 0x44f3f6
cmp esi, ebx
jne 0x44f3cd
cmp byte [ebp - 1], 2
jne 0x44f3f6
mov ecx, dword [ebp - 0xc]
mov byte [ebp + ecx - 0x74], 0x45
cmp word [ebp - 0x14], 0
je 0x44f3f6
cmp esi, ebx
jne 0x44f3f6
cmp byte [ebp - 1], 2
jne 0x44f3ed
cmp eax, 7
mov al, 0x45
je 0x44f3ef
mov al, 0x43
mov ecx, dword [ebp - 0xc]
mov byte [ebp + ecx - 0x74], al
inc byte [ebp - 2]
inc dword [ebp - 0xc]
cmp byte [ebp - 2], 0x1a
jl 0x44f32c
xor bl, bl
lea edi, [ebp - 0x74]
mov al, byte [edi]
cmp al, 0x43
jne 0x44f496
movsx ax, bl
add eax, 0x41
mov word [ebp - 0x3c], ax
xor eax, eax
cmp byte [ebp - 1], 1
setne al
push eax
push dword [ebp - 0x3c]
call fcn.00447b52
pop ecx
jmp 0x44f4a8
cmp bx, di
je 0x44f2f8
movsx ax, bl
mov word [ebp - 0x3c], ax
lea eax, [ebp - 0x24]
push eax
mov word [ebp - 0x24], bx
call dword [sym.imp.KERNEL32.dll_GetDriveTypeW]
mov esi, eax
lea eax, [ebp - 0x44]
push edi
push eax
call fcn.00441ac6
cmp esi, 5
pop ecx
pop ecx
jne 0x44f489
cmp byte [ebp - 1], 2
jne 0x44f476
cmp eax, 7
jne 0x44f476
push 0xffffffffffffffff
jmp 0x44f48c
xor eax, eax
cmp byte [ebp - 1], 1
setne al
push eax
push ebx
call fcn.00447b52
pop ecx
jmp 0x44f493
push dword [ebp - 0xc]
mov esi, ebx
call fcn.0044f176
pop ecx
jmp 0x44f4b5
cmp al, 0x45
jne 0x44f4a9
movsx si, bl
push 0xffffffffffffffff
add esi, 0x41
call fcn.0044f176
pop ecx
inc bl
inc edi
cmp bl, 0x1a
jl 0x44f40b
pop edi
pop esi
xor eax, eax
pop ebx
leave
ret 4