Function at 0x42d595
Capabilities:
Get disk information

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5c4e66
mov eax, dword fs:[0]
push eax
sub esp, 0xa24
mov eax, dword [0x624500]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0xa28], ecx
mov edi, dword [sym.imp.KERNEL32.dll_GetLogicalDriveStringsW]
push 0
push 0
call edi
mov esi, eax
test esi, esi
jne 0x42d212
mov eax, dword [0x5fd7e0]
mov dword [ebp - 0x810], eax
mov eax, dword [0x5fd7e4]
push 0x7f8
mov dword [ebp - 0x80c], eax
lea eax, [ebp - 0x808]
push esi
push eax
call fcn.0058dad0
add esp, 0xc
lea eax, [ebp - 0x80a]
push str.e:_backup_backworkdtlsetuputility_basedtlprocesstoolhelp.h
push 0x6031e0
push eax
call fcn.0040988e
mov esi, dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
lea eax, [ebp - 0x810]
add esp, 0xc
push eax
call esi
mov eax, dword [0x5fd7e0]
mov dword [ebp - 0x810], eax
mov eax, dword [0x5fd7e4]
push 0x7f8
mov dword [ebp - 0x80c], eax
lea eax, [ebp - 0x808]
push 0
push eax
call fcn.0058dad0
add esp, 0xc
lea eax, [ebp - 0x80a]
push 0xbf
push str.GetLogicalDriveStrings_failedxm_line:_d_r_n
push eax
call fcn.0040988e
add esp, 0xc
lea eax, [ebp - 0x810]
push eax
call esi
mov eax, dword [0x5fd7e0]
mov dword [ebp - 0x810], eax
mov eax, dword [0x5fd7e4]
push 0x7f8
mov dword [ebp - 0x80c], eax
lea eax, [ebp - 0x808]
push 0
push eax
call fcn.0058dad0
add esp, 0xc
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
lea eax, [ebp - 0x80a]
push str.GetLogicalDriveStrings_failedxm_err:_d_r_n
push eax
call fcn.0040988e
add esp, 0xc
lea eax, [ebp - 0x810]
push eax
call esi
xor eax, eax
jmp 0x42d699
xor ecx, ecx
lea eax, [esi + 1]
mov edx, 2
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.0053a821
add esp, 4
mov ebx, eax
push ebx
push esi
call edi
test eax, eax
jne 0x42d335
mov eax, dword [0x5fd7e0]
mov dword [ebp - 0x810], eax
mov eax, dword [0x5fd7e4]
push 0x7f8
mov dword [ebp - 0x80c], eax
lea eax, [ebp - 0x808]
push 0
push eax
call fcn.0058dad0
add esp, 0xc
lea eax, [ebp - 0x80a]
push str.e:_backup_backworkdtlsetuputility_basedtlprocesstoolhelp.h
push 0x6031e0
push eax
call fcn.0040988e
mov esi, dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
lea eax, [ebp - 0x810]
add esp, 0xc
push eax
call esi
mov eax, dword [0x5fd7e0]
mov dword [ebp - 0x810], eax
mov eax, dword [0x5fd7e4]
push 0x7f8
mov dword [ebp - 0x80c], eax
lea eax, [ebp - 0x808]
push 0
push eax
call fcn.0058dad0
add esp, 0xc
lea eax, [ebp - 0x80a]
push 0xc7
push str.GetLogicalDriveStrings_failedxm_line:_d_r_n
push eax
call fcn.0040988e
add esp, 0xc
lea eax, [ebp - 0x810]
push eax
call esi
mov eax, dword [0x5fd7e0]
mov dword [ebp - 0x810], eax
mov eax, dword [0x5fd7e4]
push 0x7f8
mov dword [ebp - 0x80c], eax
lea eax, [ebp - 0x808]
push 0
push eax
call fcn.0058dad0
add esp, 0xc
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
lea eax, [ebp - 0x80a]
push str.GetLogicalDriveStrings_failedxm_err:_d_r_n
push eax
call fcn.0040988e
add esp, 0xc
lea eax, [ebp - 0x810]
push eax
call esi
xor eax, eax
jmp 0x42d699
push 0x208
lea eax, [ebp - 0xa18]
push 0
push eax
call fcn.0058dad0
add esp, 0xc
cmp word [ebx], 0
je 0x42d694
nop word [eax + eax]
xor eax, eax
mov word [ebx + 4], ax
lea eax, [ebp - 0xa18]
push 0x104
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_QueryDosDeviceW]
test eax, eax
je 0x42d687
call fcn.00405c3d
test eax, eax
je case.0x42d45c.1
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
add eax, 0x10
mov dword [ebp - 0xa20], eax
lea eax, [ebp - 0xa18]
mov dword [ebp - 4], 0
test eax, 0xffff0000
jne 0x42d463
movzx esi, ax
mov ecx, esi
call fcn.004098b0
mov edi, eax
test edi, edi
je 0x42d5b3
mov ecx, esi
shr ecx, 4
push 6
inc ecx
push ecx
push edi
call dword [sym.imp.KERNEL32.dll_FindResourceW]
test eax, eax
je 0x42d5b3
push esi
push eax
push edi
call fcn.00409910
mov edi, eax
add esp, 0xc
test edi, edi
je 0x42d5b3
mov ecx, dword [ebp - 0xa20]
mov edx, 1
movzx esi, word [edi]
mov dword [ebp - 0xa1c], esi
mov dword [ebp - 0xa24], esi
mov eax, dword [ecx - 8]
sub edx, dword [ecx - 4]
sub eax, esi
or eax, edx
jge 0x42d434
push esi
lea ecx, [ebp - 0xa20]
call fcn.0040595f
movzx eax, word [edi]
mov ecx, dword [ebp - 0xa20]
jmp 0x42d43a
mov eax, dword [ebp - 0xa24]
movzx edx, ax
lea eax, [edi + 2]
push edx
push eax
push esi
push ecx
call fcn.00594fab
add esp, 0x10
cmp eax, 0x50
ja case.0x42d45c.1
movzx eax, byte [eax + 0x42d6e4]
jmp dword [eax*4 + 0x42d6d4]
push eax
call fcn.00594f90
mov esi, eax
add esp, 4
test esi, esi
jne 0x42d4e9
mov byte [ebp - 4], 1
mov edx, dword [ebp - 0xa20]
add edx, 0xfffffff0
mov esi, dword [edx]
cmp dword [edx + 4], eax
je 0x42d5b3
mov eax, dword [edx + 0xc]
lea ecx, [edx + 0xc]
shr eax, 0x1f
test al, al
je 0x42d4b8
cmp dword [edx + 8], 0
jl case.0x42d45c.20
mov dword [edx + 4], 0
xor ecx, ecx
mov eax, dword [ebp - 0xa20]
mov word [eax], cx
jmp 0x42d5b3
mov byte [ebp - 4], 2
or eax, 0xffffffff
lock xadd dword [ecx], eax
dec eax
test eax, eax
jg 0x42d4d0
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 1
mov ecx, esi
mov eax, dword [esi]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xa20], eax
jmp 0x42d5b3
mov eax, dword [ebp - 0xa20]
lea edi, [ebp - 0xa18]
sub edi, eax
sar edi, 1
mov ecx, dword [eax - 0xc]
mov dword [ebp - 0xa24], ecx
test esi, esi
js case.0x42d45c.20
mov ecx, dword [eax - 8]
mov edx, 1
sub edx, dword [eax - 4]
sub ecx, esi
or ecx, edx
jge 0x42d52d
push esi
lea ecx, [ebp - 0xa20]
call fcn.0040595f
mov eax, dword [ebp - 0xa20]
cmp edi, dword [ebp - 0xa24]
ja 0x42d581
mov ecx, dword [eax - 8]
lea edx, [esi + esi]
lea edi, [eax + edi*2]
test edx, edx
je 0x42d59b
test eax, eax
jne 0x42d558
call fcn.00591718
mov dword [eax], 0x16
call fcn.0059163f
jmp case.0x42d45c.78
test edi, edi
je 0x42d546
add ecx, ecx
cmp ecx, edx
jae 0x42d574
call fcn.00591718
mov dword [eax], 0x22
call fcn.0059163f
jmp case.0x42d45c.78
push edx
push edi
push eax
call fcn.0058d520
add esp, 0xc
jmp case.0x42d45c.78
push esi
lea ecx, [ebp - 0xa18]
push ecx
push dword [eax - 8]
push eax
call fcn.00405d4d
add esp, 0x10
mov eax, dword [ebp - 0xa20]
cmp esi, dword [eax - 8]
jg case.0x42d45c.20
mov dword [eax - 0xc], esi
xor ecx, ecx
mov eax, dword [ebp - 0xa20]
mov word [eax + esi*2], cx
mov edi, dword [ebp - 0xa28]
lea eax, [ebp - 0xa20]
push eax
lea eax, [ebp - 0xa1c]
mov dword [ebp - 4], 3
add edi, 4
mov dword [ebp - 0xa1c], 0
push eax
mov ecx, edi
call fcn.0042dad0
mov esi, dword [ebp - 0xa1c]
cmp esi, dword [edi]
je 0x42d612
mov byte [ebp - 4], 4
mov eax, dword [esi + 0x10]
test eax, eax
je case.0x42d45c.1
push eax
mov byte [ebp - 4], 3
push dword [ebp - 0xa20]
call fcn.005950bb
add esp, 8
test eax, eax
jns 0x42d648
lea eax, [ebp - 0xa20]
push ecx
mov dword [ebp - 0xa24], eax
lea eax, [ebp - 0xa24]
push eax
push ecx
mov ecx, edi
call fcn.0042cfd0
push eax
add eax, 0x10
mov ecx, edi
push eax
push esi
lea eax, [ebp - 0xa2c]
push eax
call fcn.0042df80
mov esi, dword [ebp - 0xa2c]
push ebx
call fcn.00594f90
add esp, 4
lea ecx, [esi + 0x14]
push eax
push ebx
call fcn.00409b39
mov edx, dword [ebp - 0xa20]
add edx, 0xfffffff0
mov dword [ebp - 4], 5
or eax, 0xffffffff
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x42d680
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov dword [ebp - 4], 0xffffffff
add ebx, 8
cmp word [ebx], 0
jne 0x42d360
mov eax, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0053a175
mov esp, ebp
pop ebp
ret
push 0x80004005
call fcn.00405d25
push 0x80070057
call fcn.00405d25
push 0x8007000e
call fcn.00405d25
nop
xchg ebp, eax
aad 66
add cl, cl
salc
inc edx
add byte [edi - 0x4affbd2a], bh
salc
inc edx
add byte [eax], al
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ecx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [edx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [edx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [eax]
int3