Function at 0x4ad0c60c
Capabilities:
Get disk information

Disassembly:
mov ebx, 0x4ad25480
jmp 0x4ad0c68b
movzx eax, cx
dec eax
cmp eax, 9
ja case.0x4ad0c5d3.7
jmp dword [eax*4 + 0x4ad0caea]
push 0x4ad25260
push 0x4ad02cb4
push dword [ebp - 0x270]
push esi
call fcn.4ad0179d
add esp, 0x10
mov eax, esi
lea ecx, [eax + 2]
mov dx, word [eax]
inc eax
inc eax
test dx, dx
jne 0x4ad0c5f8
jmp 0x4ad0c773
push 0x278
push 0x4ad0c798
call fcn.4ad013e1
xor edi, edi
mov dword [ebp - 0x280], edi
cmp dword [0x4ad241b4], edi
jne 0x4ad0c7d6
cmp dword [0x4ad2408c], edi
je 0x4ad0c7d0
cmp dword [0x4ad24110], edi
jne 0x4ad0c64e
push 0x4ad245a8
call fcn.4ad058f3
pop ecx
cmp byte [0x4ad24085], 0
jne 0x4ad0c1d3
push str.PROMPT
call fcn.4ad02070
mov ebx, eax
mov dword [ebp - 0x278], ebx
cmp ebx, edi
je 0x4ad0c691
push ebx
push 0x200
mov esi, 0x4ad25480
push esi
call fcn.4ad0185a
mov ebx, esi
mov byte [0x4ad24085], 1
mov dword [ebp - 0x278], ebx
push edi
push 0x104
mov edi, 0x4ad25260
push edi
call fcn.4ad02c56
mov esi, 0x4ad25e40
mov dword [ebp - 0x274], esi
xor eax, eax
mov word [0x4ad25e40], ax
mov eax, 0x3ff
mov dword [ebp - 0x270], eax
test ebx, ebx
je 0x4ad0cab1
cmp word [ebx], 0
je 0x4ad0cab1
movzx eax, word [ebx]
test ax, ax
je 0x4ad0c7b4
cmp ax, 0x24
jne 0x4ad0c7ed
inc ebx
inc ebx
mov dword [ebp - 0x278], ebx
xor ebx, ebx
cmp word [0x4ad24dc0], bx
je 0x4ad0c728
mov edi, 0x4ad24dc0
mov eax, dword [ebp - 0x278]
movzx eax, word [eax]
push eax
call dword [sym.imp.msvcrt.dll_towupper]
pop ecx
cmp ax, word [edi]
je 0x4ad0c728
inc ebx
mov eax, ebx
imul eax, eax, 6
lea edi, [eax + 0x4ad24dc0]
cmp word [edi], 0
jne 0x4ad0c700
mov eax, ebx
imul eax, eax, 6
cmp word [eax + 0x4ad24dc0], 0
je 0x4ad0c7b4
movzx ecx, word [eax + 0x4ad24dc2]
cmp cx, 8
jne 0x4ad0c5c6
movzx eax, word [eax + 0x4ad24dc4]
push eax
push 0x4ad245b8
push dword [ebp - 0x270]
push esi
call fcn.4ad0179d
add esp, 0x10
mov eax, esi
lea ecx, [eax + 2]
mov dx, word [eax]
inc eax
inc eax
test dx, dx
jne 0x4ad0c769
sub eax, ecx
sar eax, 1
lea esi, [esi + eax*2]
sub dword [ebp - 0x270], eax
mov dword [ebp - 0x274], esi
add dword [ebp - 0x278], 2
mov ebx, dword [ebp - 0x278]
jmp 0x4ad0c6d2
xor eax, eax
mov word [esi], ax
push 0x4ad25e40
call fcn.4ad0c5a0
cmp dword [0x4ad241b4], 0
jne 0x4ad0cae0
call fcn.4ad013ca
ret
push edi
push 0x2335
call fcn.4ad099e1
pop ecx
pop ecx
call fcn.4ad01e6c
jmp 0x4ad0c62f
movzx eax, ax
push eax
push 0x4ad245b8
push dword [ebp - 0x270]
push esi
call fcn.4ad0179d
add esp, 0x10
mov eax, esi
lea ecx, [eax + 2]
mov dx, word [eax]
inc eax
inc eax
test dx, dx
jne 0x4ad0c80a
sub eax, ecx
sar eax, 1
lea esi, [esi + eax*2]
mov dword [ebp - 0x274], esi
sub dword [ebp - 0x270], eax
call fcn.4ad0661c
test al, al
je 0x4ad0c84b
movzx eax, word [ebx]
push eax
call fcn.4ad1eac4
test eax, eax
je 0x4ad0c84b
movzx eax, word [ebx]
mov dword [ebp - 0x280], eax
jmp 0x4ad0c786
and dword [ebp - 0x280], 0
jmp 0x4ad0c786
push dword [ebp - 0x270]
push esi
push 1
push 0
call fcn.4ad0d701
jmp 0x4ad0c777
push dword [ebp - 0x270]
push esi
push 1
push 0
call fcn.4ad1270d
jmp 0x4ad0c777
push 0x20
lea eax, [ebp - 0x64]
push eax
call fcn.4ad0d3b3
lea eax, [ebp - 0x64]
push eax
push 0x2350
call fcn.4ad0c56b
mov edi, eax
push edi
push 0x4ad02cb4
push dword [ebp - 0x270]
push esi
call fcn.4ad0179d
add esp, 0x18
push edi
call dword [sym.imp.KERNEL32.dll_LocalFree]
mov eax, esi
lea ecx, [eax + 2]
mov dx, word [eax]
inc eax
inc eax
test dx, dx
je 0x4ad0c773
jmp 0x4ad0c8bd
cmp word [ebp - 0x280], 0
je 0x4ad0c8de
push str._b_b___b_b
jmp 0x4ad0c8e3
push 0x4ad40758
push dword [ebp - 0x270]
push esi
call fcn.4ad0185a
mov eax, esi
lea edx, [eax + 2]
mov cx, word [eax]
inc eax
inc eax
test cx, cx
jne 0x4ad0c8f4
sub eax, edx
jmp 0x4ad0c775
push 0x4ad245a8
push dword [ebp - 0x270]
push esi
call fcn.4ad0185a
mov eax, esi
lea ecx, [eax + 2]
mov dx, word [eax]
inc eax
inc eax
test dx, dx
je 0x4ad0c773
jmp 0x4ad0c91b
cmp byte [0x4ad24081], 0
je 0x4ad0c786
call fcn.4ad1f169
jmp 0x4ad0c95e
mov ecx, eax
dec eax
test ecx, ecx
je 0x4ad0c786
push 0x2b
pop ecx
mov word [esi], cx
inc esi
inc esi
mov dword [ebp - 0x274], esi
dec dword [ebp - 0x270]
cmp dword [ebp - 0x270], 1
jle 0x4ad0c786
jmp 0x4ad0c93f
cmp byte [0x4ad24081], 0
je 0x4ad0c786
mov ax, word [0x4ad25260]
mov word [ebp - 0x24], ax
mov ax, word [0x4ad25262]
mov word [ebp - 0x22], ax
push 0x5c
pop eax
mov word [ebp - 0x20], ax
xor eax, eax
mov word [ebp - 0x1e], ax
lea eax, [ebp - 0x24]
push eax
call dword [sym.imp.KERNEL32.dll_GetDriveTypeW]
cmp eax, 4
jne 0x4ad0c786
xor eax, eax
mov word [ebp - 0x20], ax
mov dword [ebp - 0x284], 0x104
and dword [ebp - 4], eax
lea eax, [ebp - 0x284]
push eax
lea eax, [ebp - 0x26c]
push eax
lea eax, [ebp - 0x24]
push eax
call sub.MPR.dll_WNetGetConnectionW
mov dword [ebp - 0x27c], eax
mov dword [ebp - 4], 0xfffffffe
jmp 0x4ad0ca0e
cmp dword [ebp - 0x27c], 0
je 0x4ad0ca50
cmp dword [ebp - 0x27c], 0x8ca
je 0x4ad0c786
push 0x4ad0cb14
push dword [ebp - 0x270]
push esi
call fcn.4ad0179d
add esp, 0xc
mov eax, esi
lea edx, [eax + 2]
mov cx, word [eax]
inc eax
inc eax
test cx, cx
je 0x4ad0c8fe
jmp 0x4ad0ca40
lea eax, [ebp - 0x26c]
push eax
push 0x4ad1bd5c
push dword [ebp - 0x270]
push esi
call fcn.4ad0179d
add esp, 0x10
mov eax, esi
lea edx, [eax + 2]
mov cx, word [eax]
inc eax
inc eax
test cx, cx
je 0x4ad0c8fe
jmp 0x4ad0ca70
movzx eax, word [0x4ad25260]
push eax
push 0x4ad245b8
push dword [ebp - 0x270]
push esi
call fcn.4ad0179d
add esp, 0x10
mov eax, esi
lea ecx, [eax + 2]
mov dx, word [eax]
inc eax
inc eax
test dx, dx
je 0x4ad0c773
jmp 0x4ad0caa1
push edi
push 0x4ad407f0
push eax
push esi
call fcn.4ad0179d
add esp, 0x10
mov eax, esi
lea edx, [eax + 2]
mov cx, word [eax]
inc eax
inc eax
test cx, cx
jne 0x4ad0cac6
sub eax, edx
sar eax, 1
lea esi, [eax*2 + 0x4ad25e40]
jmp 0x4ad0c7b4
call fcn.4ad01e6c
jmp 0x4ad0c7d0