Function at 0x403c60
Capabilities:
Get disk information

Disassembly:
mov eax, 0x1038
call fcn.005401e0
mov eax, dword [0x60bd28]
xor eax, esp
mov dword [esp + 0x1034], eax
mov eax, dword [str..C:]
mov cx, word [0x5962ac]
mov dl, byte [0x5962ae]
push ebx
push ebp
push esi
mov dword [esp + 0x20], eax
xor eax, eax
push edi
mov dword [esp + 0x1c], 0x5c3a41
mov byte [esp + 0x20], 0
mov word [esp + 0x28], cx
mov byte [esp + 0x2a], dl
xor esi, esi
mov dword [esp + 0x2b], eax
mov dword [esp + 0x2f], eax
call dword [sym.imp.KERNEL32.dll_GetLogicalDrives]
or eax, 0xffffffff
mov ecx, 0x80
mov edi, 0x60e050
rep stosd dword es:[edi], eax
or eax, eax
mov ecx, 0x80
mov edi, 0x60dc50
rep stosd dword es:[edi], eax
mov edi, 0x60d9f8
lea eax, [esp + 0x24]
lea ebx, [esi + 2]
sub edi, eax
mov dword [esp + 0x14], esi
lea esp, [esp]
mov cl, bl
lea edx, [esp + 0x1c]
add cl, 0x41
push edx
mov byte [esp + 0x20], cl
call dword [sym.imp.KERNEL32.dll_GetDriveTypeA]
cmp eax, 5
jne 0x403df4
mov al, byte [esp + 0x1c]
mov byte [esp + 0x28], al
lea eax, [esp + 0x24]
lea esp, [esp]
mov cl, byte [eax]
mov byte [edi + eax], cl
add eax, 1
test cl, cl
jne 0x403d20
mov ebp, dword [sym.imp.KERNEL32.dll_CreateFileA]
push 0
push 0
push 3
push 0
push 3
push 0xc0000000
lea ecx, [esp + 0x3c]
push ecx
call ebp
cmp eax, 0xffffffff
mov dword [esi*4 + 0x60dbe8], eax
jne 0x403d71
push 0
push 0
push 3
push 0
push 1
push SysReAllocString
lea edx, [esp + 0x3c]
push edx
call ebp
mov dword [esi*4 + 0x60dbe8], eax
mov ebp, dword [esi*4 + 0x60dbe8]
cmp ebp, 0xffffffff
je 0x403df4
push 0x1000
lea eax, [esp + 0x48]
push 0
push eax
call fcn.0053fd60
add esp, 0xc
push 0
lea ecx, [esp + 0x1c]
push ecx
push 0x1000
lea edx, [esp + 0x50]
push edx
push 0
push 0
push 0x41018
push ebp
call dword [sym.imp.KERNEL32.dll_DeviceIoControl]
test eax, eax
je 0x403dd7
movzx eax, byte [esp + 0x48]
movzx ecx, byte [esp + 0x4a]
shl eax, 4
add eax, ecx
add eax, eax
add eax, eax
mov dword [eax + 0x60e050], esi
mov dword [eax + 0x60dc50], ebx
jmp 0x403dee
mov eax, dword [esp + 0x14]
mov dword [eax + 0x60e210], esi
mov dword [eax + 0x60de10], ebx
add eax, 4
mov dword [esp + 0x14], eax
add esi, 1
add edi, 0xf
add ebx, 1
cmp ebx, 0x1a
jl 0x403cf0
xor ebp, ebp
cmp esi, ebp
jne 0x403e0d
xor eax, eax
jmp 0x403f1d
mov edx, dword [0x59629c]
mov eax, dword [0x5962a0]
mov cx, word [0x5962a4]
mov dword [esp + 0x34], edx
mov dl, byte [0x5962a6]
mov dword [esp + 0x38], eax
mov word [esp + 0x3c], cx
mov byte [esp + 0x3e], dl
mov dword [esp + 0x3f], ebp
mov byte [esp + 0x13], 0
xor ebx, ebx
mov edi, dword [sym.imp.KERNEL32.dll_CreateFileA]
push 0
push 0
push 3
push 0
push 3
mov al, bl
push 0xc0000000
lea ecx, [esp + 0x4c]
add al, 0x30
push ecx
mov byte [esp + 0x58], al
add ebx, 1
call edi
mov esi, eax
cmp esi, 0xffffffff
jne 0x403e8c
push 0
push 0
push 3
push 0
push 1
push SysReAllocString
lea edx, [esp + 0x4c]
push edx
call edi
mov esi, eax
cmp esi, 0xffffffff
je 0x403ef4
push 0x1000
lea eax, [esp + 0x48]
push 0
push eax
call fcn.0053fd60
add esp, 0xc
push 0
lea ecx, [esp + 0x1c]
push ecx
push 0x1000
lea edx, [esp + 0x50]
push edx
push 0
push 0
push 0x4100c
push esi
call dword [sym.imp.KERNEL32.dll_DeviceIoControl]
test eax, eax
mov cl, byte [esp + 0x44]
je 0x403f01
test cl, cl
mov byte [esp + 0x13], 1
je 0x403f14
mov eax, dword [esp + 0x4c]
test eax, eax
je 0x403ee8
lea ebx, [ebx]
mov eax, dword [esp + eax + 0x4c]
test eax, eax
jne 0x403ee0
mov dword [ebp*4 + 0x60db80], esi
add ebp, 1
jmp 0x403f0c
cmp byte [esp + 0x13], 0
je 0x403e41
jmp 0x403f14
cmp byte [esp + 0x13], 0
je 0x403e41
test cl, cl
jne 0x403e41
mov byte [0x60e330], 1
mov eax, ebp
mov ecx, dword [esp + 0x1044]
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.0053fab2
add esp, 0x1038
ret