Function at 0x4ad0e20d
Capabilities:
Get disk information

Disassembly:
movzx eax, cx
dec eax
cmp eax, 9
ja case.0x4ad0e1f7.7
jmp dword [eax*4 + 0x4ad0e97c]
push 0x4ad31400
push 0x4ad0bab4
jmp 0x4ad0e34c
push 0x278
push 0x4ad0e970
call fcn.4ad01ad3
xor ebx, ebx
mov dword [ebp - 0x1c], ebx
cmp dword [0x4ad289e8], ebx
jne 0x4ad11a68
cmp dword [0x4ad2cac8], ebx
je 0x4ad0e381
cmp dword [0x4ad2ca28], ebx
jne 0x4ad0e24c
push 0x4ad31870
call fcn.4ad03e14
pop ecx
cmp byte [0x4ad2ca34], 0
jne 0x4ad0e4d7
push str.PROMPT
call fcn.4ad0133f
mov dword [ebp - 0x20], eax
cmp eax, ebx
je 0x4ad0e283
push eax
mov esi, 0x4ad39e40
push esi
call dword [sym.imp.msvcrt.dll_wcscpy]
pop ecx
pop ecx
mov dword [ebp - 0x20], esi
mov byte [0x4ad2ca34], 1
push ebx
push 0x4ad31400
call fcn.4ad03be2
mov edi, 0x4ad281e0
mov esi, edi
mov dword [ebp - 0x24], esi
mov word [0x4ad281e0], bx
mov eax, 0x400
mov dword [ebp - 0x28], eax
mov ecx, dword [ebp - 0x20]
cmp ecx, ebx
je 0x4ad11c56
cmp word [ecx], bx
je 0x4ad11c56
mov edi, dword [sym.imp.msvcrt.dll__snwprintf]
mov eax, dword [ebp - 0x20]
mov ax, word [eax]
cmp ax, bx
je 0x4ad0e367
cmp ax, 0x24
jne 0x4ad11a7f
add dword [ebp - 0x20], 2
xor eax, eax
mov dword [ebp - 0x2c], eax
cmp word [0x4ad39db0], bx
je 0x4ad0e320
mov eax, 0x4ad39db0
mov dword [ebp - 0x30], eax
mov ebx, eax
mov eax, dword [ebp - 0x20]
movzx eax, word [eax]
push eax
call dword [sym.imp.msvcrt.dll_towupper]
pop ecx
mov ecx, dword [ebp - 0x30]
cmp ax, word [ecx]
je 0x4ad0e31b
inc dword [ebp - 0x2c]
add ebx, 6
mov dword [ebp - 0x30], ebx
cmp word [ebx], 0
jne 0x4ad0e2f6
xor ebx, ebx
mov eax, dword [ebp - 0x2c]
lea eax, [eax + eax*2]
shl eax, 1
cmp word [eax + 0x4ad39db0], bx
je 0x4ad0e367
mov cx, word [eax + 0x4ad39db2]
cmp cx, 8
jne 0x4ad0e1ea
movzx eax, word [eax + 0x4ad39db4]
push eax
push 0x4ad39da8
push dword [ebp - 0x28]
push esi
call edi
add esp, 0x10
lea esi, [esi + eax*2]
mov dword [ebp - 0x24], esi
sub dword [ebp - 0x28], eax
add dword [ebp - 0x20], 2
jmp 0x4ad0e2c1
mov edi, 0x4ad281e0
mov word [esi], bx
push edi
call fcn.4ad0b133
cmp dword [0x4ad289e8], ebx
jne 0x4ad11c77
call fcn.4ad01371
ret
mov dword [ebp - 0x20], 0x4ad39e40
jmp 0x4ad0e283
movzx eax, word [0x4ad31400]
jmp 0x4ad0e346
push ebx
push 0x2335
call fcn.4ad0d276
pop ecx
pop ecx
call fcn.4ad02e2d
jmp 0x4ad0e22d
movzx eax, ax
push eax
push 0x4ad39da8
push dword [ebp - 0x28]
push esi
call edi
add esp, 0x10
lea esi, [esi + eax*2]
mov dword [ebp - 0x24], esi
sub dword [ebp - 0x28], eax
call fcn.4ad05d96
test al, al
je 0x4ad11ac2
mov eax, dword [ebp - 0x20]
movzx eax, word [eax]
push eax
call fcn.4ad1878d
test eax, eax
je 0x4ad11ac2
mov eax, dword [ebp - 0x20]
mov ax, word [eax]
mov word [ebp - 0x1c], ax
jmp 0x4ad0e35e
mov dword [ebp - 0x1c], ebx
jmp 0x4ad0e35e
push dword [ebp - 0x28]
push esi
push 1
push ebx
call fcn.4ad06e1f
jmp 0x4ad0e355
push dword [ebp - 0x28]
push esi
push 1
push ebx
call fcn.4ad080ce
jmp 0x4ad0e355
push 0x20
lea eax, [ebp - 0x70]
push eax
call fcn.4ad0eee0
lea eax, [ebp - 0x70]
push eax
push 0x2350
call fcn.4ad1b3f0
mov ebx, eax
push ebx
push 0x4ad0bab4
push dword [ebp - 0x28]
push esi
call edi
add esp, 0x18
lea esi, [esi + eax*2]
mov dword [ebp - 0x24], esi
sub dword [ebp - 0x28], eax
push ebx
call dword [sym.imp.KERNEL32.dll_LocalFree]
xor ebx, ebx
jmp 0x4ad0e35e
cmp word [ebp - 0x1c], bx
je 0x4ad11b3d
push str._b_b___b_b
jmp 0x4ad11c37
push 0x4ad3a2b0
jmp 0x4ad11c37
push 0x4ad31870
jmp 0x4ad11c37
cmp byte [0x4ad2ca64], 0
je 0x4ad0e35e
call fcn.4ad18de7
cmp dword [ebp - 0x28], ebx
je 0x4ad0e35e
mov ecx, eax
dec eax
test ecx, ecx
je 0x4ad0e35e
mov word [esi], 0x2b
inc esi
inc esi
mov dword [ebp - 0x24], esi
dec dword [ebp - 0x28]
jne 0x4ad11b6c
jmp 0x4ad0e35e
cmp byte [0x4ad2ca64], 0
je 0x4ad0e35e
push 2
push 0x4ad31400
lea eax, [ebp - 0x78]
push eax
call dword [sym.imp.msvcrt.dll_wcsncpy]
add esp, 0xc
mov word [ebp - 0x74], 0x5c
mov word [ebp - 0x72], bx
lea eax, [ebp - 0x78]
push eax
call dword [sym.imp.KERNEL32.dll_GetDriveTypeW]
cmp eax, 4
jne 0x4ad0e35e
mov word [ebp - 0x74], bx
mov dword [ebp - 0x7c], 0x104
mov dword [ebp - 4], ebx
lea eax, [ebp - 0x7c]
push eax
lea eax, [ebp - 0x284]
push eax
lea eax, [ebp - 0x78]
push eax
call sub.MPR.dll_WNetGetConnectionW
mov dword [ebp - 0x288], eax
or dword [ebp - 4], 0xffffffff
jmp 0x4ad11c1a
cmp dword [ebp - 0x288], ebx
je 0x4ad11c45
cmp dword [ebp - 0x288], 0x8ca
je 0x4ad0e35e
push 0x4ad15b14
push dword [ebp - 0x28]
push esi
call edi
add esp, 0xc
jmp 0x4ad0e355
lea eax, [ebp - 0x284]
push eax
push 0x4ad1c42c
jmp 0x4ad0e34c
push 0x4ad31400
push 0x4ad3a358
push eax
push edi
call dword [sym.imp.msvcrt.dll__snwprintf]
add esp, 0x10
lea esi, [eax*2 + 0x4ad281e0]
jmp 0x4ad0e36c
call fcn.4ad02e2d
jmp 0x4ad0e381