Function at 0x4ad08d90
Capabilities:
Get disk information

Disassembly:
push 0x27c
push 0x4ad08f30
call fcn.4ad0162f
mov eax, dword [0x4ad33b78]
mov dword [ebp - 0x1c], eax
xor ebx, ebx
mov dword [ebp - 0x280], ebx
cmp dword [0x4ad2b9e8], ebx
jne 0x4ad08f5c
cmp dword [0x4ad2fac8], ebx
je 0x4ad09206
cmp dword [0x4ad2fa28], ebx
jne 0x4ad08dda
push 0x4ad3cba0
call fcn.4ad05e0c
pop ecx
cmp byte [0x4ad2fa34], 0
jne 0x4ad09214
push 0x4ad34624
call fcn.4ad01b84
mov dword [ebp - 0x278], eax
cmp eax, ebx
je 0x4ad08e17
push eax
mov esi, 0x4ad3cd80
push esi
call dword [sym.imp.msvcrt.dll_wcscpy]
pop ecx
pop ecx
mov dword [ebp - 0x278], esi
mov byte [0x4ad2fa34], 1
push ebx
push 0x4ad34400
call fcn.4ad01555
mov edi, 0x4ad2b1e0
mov esi, edi
mov dword [ebp - 0x274], esi
mov word [0x4ad2b1e0], bx
mov eax, 0x400
mov dword [ebp - 0x270], eax
mov ecx, dword [ebp - 0x278]
cmp ecx, ebx
je 0x4ad09190
cmp word [ecx], bx
je 0x4ad09190
mov edi, dword [sym.imp.msvcrt.dll__snwprintf]
mov eax, dword [ebp - 0x278]
mov ax, word [eax]
cmp ax, bx
je 0x4ad091f0
cmp ax, 0x24
jne 0x4ad08f73
add dword [ebp - 0x278], 2
xor eax, eax
mov dword [ebp - 0x284], eax
cmp word [0x4ad3ccf8], bx
je 0x4ad08ed8
mov eax, 0x4ad3ccf8
mov dword [ebp - 0x288], eax
mov ebx, eax
mov eax, dword [ebp - 0x278]
movzx eax, word [eax]
push eax
call dword [sym.imp.msvcrt.dll_towupper]
pop ecx
mov ecx, dword [ebp - 0x288]
cmp ax, word [ecx]
je 0x4ad08ed0
inc dword [ebp - 0x284]
add ebx, 6
mov dword [ebp - 0x288], ebx
cmp word [ebx], 0
jne 0x4ad08e9f
xor ebx, ebx
mov eax, dword [ebp - 0x284]
lea eax, [eax + eax*2]
shl eax, 1
cmp word [eax + 0x4ad3ccf8], bx
je 0x4ad091f0
mov cx, word [eax + 0x4ad3ccfa]
cmp cx, 8
jne 0x4ad08f3c
movzx eax, word [eax + 0x4ad3ccfc]
push eax
push 0x4ad3ccf0
push dword [ebp - 0x270]
push esi
call edi
add esp, 0x10
lea esi, [esi + eax*2]
mov dword [ebp - 0x274], esi
sub dword [ebp - 0x270], eax
add dword [ebp - 0x278], 2
jmp 0x4ad08e5e
movzx eax, cx
dec eax
cmp eax, 9
ja case.0x4ad08f49.7
jmp dword [eax*4 + 0x4ad091b5]
push 0x4ad34400
push 0x4ad05e60
jmp 0x4ad08f04
push ebx
push 0x2335
call fcn.4ad069f4
pop ecx
pop ecx
call fcn.4ad01f01
jmp 0x4ad08dbb
movzx eax, ax
push eax
push 0x4ad3ccf0
push dword [ebp - 0x270]
push esi
call edi
add esp, 0x10
lea esi, [esi + eax*2]
mov dword [ebp - 0x274], esi
sub dword [ebp - 0x270], eax
call fcn.4ad08b08
test al, al
je 0x4ad08fc8
mov eax, dword [ebp - 0x278]
movzx eax, word [eax]
push eax
call fcn.4ad1cc1b
test eax, eax
je 0x4ad08fc8
mov eax, dword [ebp - 0x278]
mov ax, word [eax]
mov word [ebp - 0x280], ax
jmp 0x4ad08f1f
mov dword [ebp - 0x280], ebx
jmp 0x4ad08f1f
push dword [ebp - 0x270]
push esi
push 1
push ebx
call fcn.4ad0e2eb
jmp 0x4ad08f10
push dword [ebp - 0x270]
push esi
push 1
push ebx
call fcn.4ad0e537
jmp 0x4ad08f10
push 0x20
lea eax, [ebp - 0x64]
push eax
call fcn.4ad0e0f8
lea eax, [ebp - 0x64]
push eax
push 0x2350
call fcn.4ad0c7e9
mov ebx, eax
push ebx
push 0x4ad05e60
push dword [ebp - 0x270]
push esi
call edi
add esp, 0x18
lea esi, [esi + eax*2]
mov dword [ebp - 0x274], esi
sub dword [ebp - 0x270], eax
push ebx
call dword [sym.imp.KERNEL32.dll_LocalFree]
xor ebx, ebx
jmp 0x4ad08f1f
cmp word [ebp - 0x280], bx
je 0x4ad09058
push 0x4ad3d838
jmp 0x4ad0916e
push 0x4ad3d830
jmp 0x4ad0916e
push 0x4ad3cba0
jmp 0x4ad0916e
cmp byte [0x4ad2fa64], 0
je 0x4ad08f1f
call fcn.4ad1d545
cmp dword [ebp - 0x270], ebx
je 0x4ad08f1f
mov ecx, eax
dec eax
test ecx, ecx
je 0x4ad08f1f
mov word [esi], 0x2b
inc esi
inc esi
mov dword [ebp - 0x274], esi
dec dword [ebp - 0x270]
jne 0x4ad0908a
jmp 0x4ad08f1f
cmp byte [0x4ad2fa64], 0
je 0x4ad08f1f
push 2
push 0x4ad34400
lea eax, [ebp - 0x24]
push eax
call dword [sym.imp.msvcrt.dll_wcsncpy]
add esp, 0xc
mov word [ebp - 0x20], 0x5c
mov word [ebp - 0x1e], bx
lea eax, [ebp - 0x24]
push eax
call dword [sym.imp.KERNEL32.dll_GetDriveTypeW]
cmp eax, 4
jne 0x4ad08f1f
mov word [ebp - 0x20], bx
mov dword [ebp - 0x28c], 0x104
mov dword [ebp - 4], ebx
lea eax, [ebp - 0x28c]
push eax
lea eax, [ebp - 0x26c]
push eax
lea eax, [ebp - 0x24]
push eax
call sub.MPR.dll_WNetGetConnectionW
mov dword [ebp - 0x27c], eax
or dword [ebp - 4], 0xffffffff
jmp 0x4ad09151
cmp dword [ebp - 0x27c], ebx
je 0x4ad0917f
cmp dword [ebp - 0x27c], 0x8ca
je 0x4ad08f1f
push 0x4ad091e0
push dword [ebp - 0x270]
push esi
call edi
add esp, 0xc
jmp 0x4ad08f10
lea eax, [ebp - 0x26c]
push eax
push 0x4ad192cc
jmp 0x4ad08f04
push 0x4ad34400
push 0x4ad3d8e8
push eax
push edi
call dword [sym.imp.msvcrt.dll__snwprintf]
add esp, 0x10
lea esi, [eax*2 + 0x4ad2b1e0]
jmp 0x4ad091f5
call fcn.4ad01f01
jmp 0x4ad09206
mov edi, 0x4ad2b1e0
mov word [esi], bx
push edi
call fcn.4ad05e44
cmp dword [0x4ad2b9e8], ebx
jne 0x4ad091ae
mov ecx, dword [ebp - 0x1c]
call fcn.4ad01305
call fcn.4ad01447
ret
mov dword [ebp - 0x278], 0x4ad3cd80
jmp 0x4ad08e17
movzx eax, word [0x4ad34400]
jmp 0x4ad08efe