Function at 0x405cb3
Capabilities:
Enumerate files on windows
Get disk information

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
push edi
sub esp, 0x5e0
mov ebx, dword [ebp + 8]
push 0x429d24
push ebx
mov byte [ebp - 0x5d9], 0x40
mov esi, dword [ebp + 0x10]
call fcn.00409960
test eax, eax
pop ecx
pop ecx
jne 0x405ecb
mov eax, dword [ebp + 0x10]
xor edi, edi
mov byte [eax], 0
mov byte [ebp - 0x5d9], 0x40
lea eax, [edi + 0x41]
push eax
lea eax, [ebp - 0x5d8]
push str._c:_
push eax
xor ebx, ebx
call fcn.0040b2b0
lea eax, [ebp - 0x5d8]
add esp, 0xc
push eax
call dword [sym.imp.KERNEL32.dll_GetDriveTypeA]
cmp eax, 6
ja case.default.0x405d1e
jmp dword [eax*4 + 0x405d25]
inc byte [ebp - 0x5d9]
jmp case.default.0x405d1e
jmp case.0x405d1e.1502
add byte [ebp - 0x5d9], 4
jmp 0x405d64
add byte [ebp - 0x5d9], 8
jmp 0x405d64
add byte [ebp - 0x5d9], 2
mov ebx, 2
jmp case.default.0x405d1e
add byte [ebp - 0x5d9], 2
jmp case.default.0x405d1e
mov ebx, 1
cmp ebx, 1
je 0x405ebc
push dword [ebp + 0xc]
call fcn.004098c0
cmp eax, 1
pop ecx
je 0x405dc8
movzx edx, byte [ebp - 0x5d9]
lea eax, [edi + 0x41]
push edx
push eax
lea eax, [ebp - 0x3d8]
push str._c:_c_n
push eax
call fcn.0040b2b0
lea eax, [ebp - 0x3d8]
add esp, 0x10
push eax
push dword [ebp + 0x10]
call fcn.00409930
pop ecx
pop ecx
jmp 0x405ebc
lea eax, [ebp - 0x5d8]
push 2
push eax
push esi
call fcn.00409b20
mov al, byte [ebp - 0x5d9]
add esi, 2
mov byte [esi], al
add esp, 0xc
inc esi
cmp ebx, 2
jne 0x405eac
lea eax, [ebp - 0x198]
lea ecx, [ebp - 0x1d8]
push 0x1f
push eax
lea eax, [ebp - 0x5d8]
push 0
push 0
push 0
push 0x3f
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_GetVolumeInformationA]
lea eax, [ebp - 0x1d8]
push eax
call fcn.004098c0
mov bl, al
mov dword [ebp - 0x34], 0
movzx edx, bl
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x30], 0
mov byte [esi], bl
lea eax, [ebp - 0x1d8]
inc esi
pop ecx
push edx
push eax
push esi
call fcn.00409b20
movzx eax, bl
add esp, 0xc
push 8
add esi, eax
lea eax, [ebp - 0x34]
push eax
push esi
call fcn.00409b20
lea eax, [ebp - 0x2c]
add esp, 0xc
add esi, 8
push 8
push eax
push esi
call fcn.00409b20
lea eax, [ebp - 0x198]
add esp, 0xc
push eax
add esi, 8
call fcn.004098c0
mov bl, al
pop ecx
movzx ecx, bl
mov byte [esi], bl
inc esi
lea eax, [ebp - 0x198]
push ecx
push eax
push esi
call fcn.00409b20
movzx eax, bl
add esp, 0xc
add esi, eax
jmp 0x405ebc
push 0x12
push 0
push esi
call fcn.00409b60
add esp, 0xc
add esi, 0x12
inc edi
cmp edi, 0x1a
jl 0x405ce9
jmp 0x40613e
lea eax, [ebp - 0x174]
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
cmp eax, 0xffffffff
mov dword [ebp - 0x5e0], eax
jne 0x405f07
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.Error:__d_r_n
push dword [ebp + 0x10]
call fcn.0040b2b0
mov eax, 0xffffffff
add esp, 0xc
jmp 0x406143
push ebx
call fcn.004098c0
mov byte [ebx + eax - 4], 0
mov eax, dword [ebp + 0x10]
mov byte [eax], 0
lea eax, [ebp - 0x174]
mov dword [ebp - 0x5e8], eax
lea eax, [ebp - 0x174]
lea edi, [ebp - 0x174]
mov dword [ebp - 0x5e4], eax
add edi, 0x2c
pop ecx
add dword [ebp - 0x5e8], 0x14
add dword [ebp - 0x5e4], 0x20
mov eax, dword [ebp - 0x174]
mov byte [ebp - 0x5d9], 0x40
and eax, 0x10
test eax, eax
je 0x405f6c
add byte [ebp - 0x5d9], 2
mov ebx, 1
jmp 0x405f6e
xor ebx, ebx
mov eax, dword [ebp - 0x174]
and eax, 2
test eax, eax
je 0x405f84
add byte [ebp - 0x5d9], 4
mov eax, dword [ebp - 0x174]
and eax, 1
test eax, eax
je 0x405f9a
add byte [ebp - 0x5d9], 8
mov eax, dword [ebp - 0x174]
and eax, 4
test eax, eax
je 0x405fb0
add byte [ebp - 0x5d9], 0x10
lea eax, [ebp - 0x14]
push eax
push dword [ebp - 0x5e8]
call dword [sym.imp.KERNEL32.dll_FileTimeToLocalFileTime]
push 0x429d44
push dword [ebp + 0xc]
call fcn.00409960
test eax, eax
pop ecx
pop ecx
jne 0x406017
lea eax, [ebp - 0x14]
lea ebx, [ebp - 0x24]
push ebx
push eax
call dword [sym.imp.KERNEL32.dll_FileTimeToSystemTime]
movzx eax, word [ebp - 0x1a]
movzx edx, word [ebp - 0x1c]
movzx ecx, word [ebp - 0x22]
push eax
movzx eax, word [ebp - 0x24]
push edx
push eax
push ecx
movzx eax, word [ebp - 0x1e]
push eax
lea eax, [ebp - 0x5d8]
push dword [ebp - 0x154]
push edi
push str._30s__10lu__02d._02d._d__02d:_02d_n
push eax
call fcn.0040b2b0
add esp, 0x24
jmp 0x406078
push dword [ebp + 0xc]
call fcn.004098c0
cmp eax, 1
pop ecx
jbe 0x40608e
push 0
push 0x429d6c
push dword [ebp + 0xc]
call fcn.004065df
add esp, 0xc
test eax, eax
jne 0x406041
test ebx, ebx
jne 0x40605b
push 0
push str.FILE
push dword [ebp + 0xc]
call fcn.004065df
add esp, 0xc
test eax, eax
jne 0x40608e
test ebx, ebx
jne 0x40608e
movzx eax, byte [ebp - 0x5d9]
push eax
lea eax, [ebp - 0x5d8]
push edi
push str._s_c_n
push eax
call fcn.0040b2b0
add esp, 0x10
lea eax, [ebp - 0x5d8]
push eax
push dword [ebp + 0x10]
call fcn.00409930
pop ecx
pop ecx
jmp 0x406117
mov eax, dword [ebp + 0xc]
mov al, byte [eax]
cmp al, 0x66
jne 0x40609b
test ebx, ebx
je 0x4060a3
cmp al, 0x64
jne 0x406117
test ebx, ebx
je 0x406117
push edi
call fcn.004098c0
mov byte [ebp - 0x175], al
lea eax, [ebp - 0x175]
pop ecx
push 1
push eax
push esi
call fcn.00409b20
movzx eax, byte [ebp - 0x175]
inc esi
add esp, 0xc
push eax
push edi
push esi
call fcn.00409b20
movzx eax, byte [ebp - 0x175]
add esp, 0xc
push 1
add esi, eax
lea eax, [ebp - 0x5d9]
push eax
push esi
call fcn.00409b20
inc esi
add esp, 0xc
push 4
push dword [ebp - 0x5e4]
push esi
call fcn.00409b20
lea eax, [ebp - 0x14]
add esp, 0xc
add esi, 4
push 8
push eax
push esi
call fcn.00409b20
add esp, 0xc
add esi, 8
lea eax, [ebp - 0x174]
push eax
push dword [ebp - 0x5e0]
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
test eax, eax
jne 0x405f48
push dword [ebp - 0x5e0]
call dword [sym.imp.KERNEL32.dll_FindClose]
mov eax, esi
sub eax, dword [ebp + 0x10]
lea esp, [ebp - 0xc]
pop edi
pop esi
pop ebx
pop ebp
ret