Function at 0x443072
Capabilities:
Get storage device properties

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x2cd4
call fcn.0043c7d0
mov eax, dword [0x630198]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
mov ebx, ecx
call fcn.00426026
test al, al
je 0x4430a7
mov edi, 0xe438d3d2
mov eax, 0xf0e5c2d3
into
int3
xor esi, esi
push esi
lea eax, [ebp - 0x404]
push 0x5b0018
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
lea eax, [ebp - 0x404]
push 0
push 0
push 3
push 0
push 3
push 0
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov edi, eax
cmp edi, 0xffffffff
je 0x443351
and dword [ebp - 0x2cd4], 0
lea eax, [ebp - 0x2b20]
push 0xc
push 0
push eax
call fcn.00447ad0
xor eax, eax
push 0x2710
push eax
mov dword [ebp - 0x2b20], eax
mov dword [ebp - 0x2b1c], eax
lea eax, [ebp - 0x2b14]
push eax
call fcn.00447ad0
add esp, 0x18
lea eax, [ebp - 0x2cd4]
push 0
push eax
push 0x2710
lea eax, [ebp - 0x2b14]
push eax
push 0xc
lea eax, [ebp - 0x2b20]
push eax
push 0x2d1400
push edi
call dword [sym.imp.KERNEL32.dll_DeviceIoControl]
test eax, eax
je 0x443337
push 0x80
lea eax, [ebp - 0x204]
push 0
push eax
call fcn.00447ad0
push 0x80
lea eax, [ebp - 0x104]
push 0
push eax
call fcn.00447ad0
push 0x80
lea eax, [ebp - 0x84]
push 0
push eax
call fcn.00447ad0
push 0x80
lea eax, [ebp - 0x184]
push 0
push eax
call fcn.00447ad0
add esp, 0x30
lea eax, [ebp - 0x84]
mov ecx, ebx
push eax
push 0
push dword [ebp - 0x2b08]
lea eax, [ebp - 0x2b14]
push eax
call fcn.00443504
lea eax, [ebp - 0x104]
mov ecx, ebx
push eax
push 0
push dword [ebp - 0x2b04]
lea eax, [ebp - 0x2b14]
push eax
call fcn.00443504
lea eax, [ebp - 0x184]
mov ecx, ebx
push eax
push 0
push dword [ebp - 0x2b00]
lea eax, [ebp - 0x2b14]
push eax
call fcn.00443504
lea eax, [ebp - 0x204]
mov ecx, ebx
push eax
push 1
push dword [ebp - 0x2afc]
lea eax, [ebp - 0x2b14]
push eax
call fcn.00443504
lea ecx, [ebp - 0x2cd0]
call fcn.00442a49
lea eax, [ebp - 0x84]
push eax
call fcn.00456280
pop ecx
test eax, eax
je 0x443243
lea eax, [ebp - 0x84]
push eax
lea eax, [ebp - 0x2ca8]
push eax
call fcn.00456310
pop ecx
pop ecx
lea eax, [ebp - 0x104]
push eax
call fcn.00456280
pop ecx
test eax, eax
je 0x443269
lea eax, [ebp - 0x104]
push eax
lea eax, [ebp - 0x2ca8]
push eax
call fcn.00456320
pop ecx
pop ecx
lea eax, [ebp - 0x184]
push eax
lea eax, [ebp - 0x2ba8]
push eax
call fcn.00456310
lea eax, [ebp - 0x204]
push eax
lea eax, [ebp - 0x2c28]
push eax
call fcn.00456310
add esp, 0x10
lea eax, [ebp - 0x2c28]
mov ecx, ebx
push eax
call fcn.00443950
lea eax, [ebp - 0x2ca8]
mov ecx, ebx
push eax
call fcn.00443950
lea eax, [ebp - 0x2ba8]
mov ecx, ebx
push eax
call fcn.00443950
push 0x2710
lea eax, [ebp - 0x2b14]
push 0
push eax
call fcn.00447ad0
add esp, 0xc
lea eax, [ebp - 0x2cd4]
xor ecx, ecx
push ecx
push eax
push 0x2710
lea eax, [ebp - 0x2b14]
push eax
push ecx
push ecx
push 0x700a0
push edi
call dword [sym.imp.KERNEL32.dll_DeviceIoControl]
test eax, eax
je 0x443351
mov eax, dword [ebp - 0x2afc]
mov dword [ebp - 0x2cd0], eax
mov eax, dword [ebp - 0x2af8]
mov dword [ebp - 0x2ccc], eax
xor eax, eax
cmp dword [ebp - 0x2b0c], 0xc
push 2
pop ecx
test dword [eax], esi
sar edi, cl
dec dword [ebx - 0x2af77b]
dec dword [ecx - 0x2ccb7b]
push dword [ebx]
rol byte [ebx - 0x2b0b43], 0xff
or al, 0x6a
add bl, byte [ecx + 0xf]
inc esp
ror dword [ebx - 0x277a7635], 0xd4
invalid
cmove eax, ecx
mov ecx, ebx
mov dword [ebp - 0x2b28], eax
lea eax, [ebp - 0x2cd0]
push eax
call fcn.00442aa7
jmp 0x44334a
xor bl, dl
invalid
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str._nDeviceIOControl_IOCTL_STORAGE_QUERY_PROPERTY_error___d_n
call fcn.00443a53
pop ecx
pop ecx
push edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
inc esi
cmp esi, 0x10
jl 0x4430a9
call fcn.004262d8
test al, al
je 0x44337f
add bh, cl
popfd
xchg edi, eax
cmp al, 0x91
pushal
cmpsd dword [esi], dword es:[edi]
dec esi
sahf
sbb esi, dword [ecx + 0x4e]
jne 0x4433a0
fucom st(4)
js 0x443301
inc edi
lcall 0x976b, 0x3a61633
call fcn.0042617f
test al, al
je 0x4433a6
outsb dx, byte [esi]
jg 0x44331e
dec esp
int1
jl 0x44332b
adc al, 0xf
cmpsb byte [esi], byte es:[edi]
sub al, 0xd0
inc esp
insb byte es:[edi], dx
xchg dword [edi + 0x57b7a6e5], eax
aaa
and dword [esi - 0x56], 0xffffffc8
pop ds
push esi
fimul word [ebx - 0x3fcc03b3]
stosb byte es:[edi], al
enter 0x561f, 0xffffffffffffffde
mov ecx, dword [ebp - 4]
xor eax, eax
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.0043c551
mov esp, ebp
pop ebp
ret