Function at 0x443e2f
Capabilities:
Get storage device properties

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x2cd4
call fcn.00437070
mov eax, dword [0x62e10c]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
mov ebx, ecx
call fcn.00424a57
test al, al
je 0x443e64
invalid
xor esi, esi
push esi
lea eax, [ebp - 0x404]
push 0x5ab8c8
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
lea eax, [ebp - 0x404]
push 0
push 0
push 3
push 0
push 3
push 0
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov edi, eax
cmp edi, 0xffffffff
je 0x44410e
and dword [ebp - 0x2cd4], 0
lea eax, [ebp - 0x2b20]
push 0xc
push 0
push eax
call fcn.00446a10
xor eax, eax
push 0x2710
push eax
mov dword [ebp - 0x2b20], eax
mov dword [ebp - 0x2b1c], eax
lea eax, [ebp - 0x2b14]
push eax
call fcn.00446a10
add esp, 0x18
lea eax, [ebp - 0x2cd4]
push 0
push eax
push 0x2710
lea eax, [ebp - 0x2b14]
push eax
push 0xc
lea eax, [ebp - 0x2b20]
push eax
push 0x2d1400
push edi
call dword [sym.imp.KERNEL32.dll_DeviceIoControl]
test eax, eax
je 0x4440f4
push 0x80
lea eax, [ebp - 0x204]
push 0
push eax
call fcn.00446a10
push 0x80
lea eax, [ebp - 0x104]
push 0
push eax
call fcn.00446a10
push 0x80
lea eax, [ebp - 0x84]
push 0
push eax
call fcn.00446a10
push 0x80
lea eax, [ebp - 0x184]
push 0
push eax
call fcn.00446a10
add esp, 0x30
lea eax, [ebp - 0x84]
mov ecx, ebx
push eax
push 0
push dword [ebp - 0x2b08]
lea eax, [ebp - 0x2b14]
push eax
call fcn.004442c1
lea eax, [ebp - 0x104]
mov ecx, ebx
push eax
push 0
push dword [ebp - 0x2b04]
lea eax, [ebp - 0x2b14]
push eax
call fcn.004442c1
lea eax, [ebp - 0x184]
mov ecx, ebx
push eax
push 0
push dword [ebp - 0x2b00]
lea eax, [ebp - 0x2b14]
push eax
call fcn.004442c1
lea eax, [ebp - 0x204]
mov ecx, ebx
push eax
push 1
push dword [ebp - 0x2afc]
lea eax, [ebp - 0x2b14]
push eax
call fcn.004442c1
lea ecx, [ebp - 0x2cd0]
call fcn.00443806
lea eax, [ebp - 0x84]
push eax
call fcn.00455070
pop ecx
test eax, eax
je 0x444000
lea eax, [ebp - 0x84]
push eax
lea eax, [ebp - 0x2ca8]
push eax
call fcn.00454f20
pop ecx
pop ecx
lea eax, [ebp - 0x104]
push eax
call fcn.00455070
pop ecx
test eax, eax
je 0x444026
lea eax, [ebp - 0x104]
push eax
lea eax, [ebp - 0x2ca8]
push eax
call fcn.00454f30
pop ecx
pop ecx
lea eax, [ebp - 0x184]
push eax
lea eax, [ebp - 0x2ba8]
push eax
call fcn.00454f20
lea eax, [ebp - 0x204]
push eax
lea eax, [ebp - 0x2c28]
push eax
call fcn.00454f20
add esp, 0x10
lea eax, [ebp - 0x2c28]
mov ecx, ebx
push eax
call fcn.0044470d
lea eax, [ebp - 0x2ca8]
mov ecx, ebx
push eax
call fcn.0044470d
lea eax, [ebp - 0x2ba8]
mov ecx, ebx
push eax
call fcn.0044470d
push 0x2710
lea eax, [ebp - 0x2b14]
push 0
push eax
call fcn.00446a10
add esp, 0xc
lea eax, [ebp - 0x2cd4]
xor ecx, ecx
push ecx
push eax
push 0x2710
lea eax, [ebp - 0x2b14]
push eax
push ecx
push ecx
push 0x700a0
push edi
call dword [sym.imp.KERNEL32.dll_DeviceIoControl]
test eax, eax
je 0x44410e
mov eax, dword [ebp - 0x2afc]
mov dword [ebp - 0x2cd0], eax
mov eax, dword [ebp - 0x2af8]
mov dword [ebp - 0x2ccc], eax
xor eax, eax
cmp dword [ebp - 0x2b0c], 0xc
push 2
pop ecx
cmove eax, ecx
mov ecx, ebx
mov dword [ebp - 0x2b28], eax
lea eax, [ebp - 0x2cd0]
push eax
call fcn.00443864
jmp 0x444107
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str._nDeviceIOControl_IOCTL_STORAGE_QUERY_PROPERTY_error___d_n
call fcn.00444810
pop ecx
pop ecx
push edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
pop edx
add byte [esi - 0x7d], al
invalid
inc esi
cmp esi, 0x10
jl 0x443e66
call fcn.00424d09
test al, al
je 0x44413c
sti
or eax, 0xfa3739c5
or eax, 0x8b90f831
pop ebx
cmp dword [eax], ebx
inc ebp
ret 0x38a3
call fcn.00424bb0
test al, al
je 0x444163
sub bl, byte [ebx + 0x4a40bdfe]
push ds
jp 0x444179
xor bh, ah
pop esp
leave
jp 0x44410c
das
shl byte [edi + ebx], cl
mov ebx, 0xb939724a
xchg esp, eax
test byte [ecx], 0x1f
iretd
mov ecx, dword [ebp - 4]
xor eax, eax
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.0043671f
mov esp, ebp
pop ebp
ret
mov ebp, dword [eax + 0x5a]
add al, ch
into
das
invalid