Function at 0x4395e0
Capabilities:
Get disk information

Disassembly:
push 0xffffffffffffffff
push 0x616f91
mov eax, dword fs:[0]
push eax
sub esp, 0x130
mov eax, dword [0x685e38]
xor eax, esp
mov dword [esp + 0x12c], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x685e38]
xor eax, esp
push eax
lea eax, [esp + 0x144]
mov dword fs:[0], eax
mov ebx, ecx
mov eax, dword [ebx + 0x14]
test eax, eax
je 0x439970
mov eax, dword [eax]
test eax, eax
je 0x439970
cmp byte [eax], 0
je 0x439970
mov eax, dword [ebx]
test eax, eax
je 0x439646
cmp byte [eax], 0
jne 0x439648
xor eax, eax
mov ecx, dword [ebx + 0x18]
push eax
call fcn.005edbf0
mov eax, dword [ebx + 0x14]
push eax
lea ecx, [esp + 0x34]
call fcn.005edb30
push 0x636c34
lea ecx, [esp + 0x34]
mov dword [esp + 0x150], 0
call fcn.005edc30
mov ecx, dword [esp + 0x30]
push ecx
call dword [sym.imp.KERNEL32.dll_GetDriveTypeA]
add eax, 0xfffffffe
cmp eax, 4
ja case.0x43968e.3
jmp dword [eax*4 + 0x4399a0]
mov eax, dword [ebx + 0x14]
lea edx, [esp + 0x2c]
push edx
lea ecx, [esp + 0x40]
mov dword [esp + 0x30], 0x104
mov eax, dword [eax]
push ecx
push eax
call sub.MPR.dll_WNetGetConnectionA
lea edx, [esp + 0x3c]
push edx
lea ecx, [esp + 0x18]
call fcn.005edd80
lea eax, [esp + 0x14]
push eax
mov ecx, ebx
mov byte [esp + 0x150], 1
call fcn.004393d0
mov eax, dword [ebx]
test eax, eax
je 0x4396df
cmp byte [eax], 0
jne 0x4396e1
xor eax, eax
push eax
lea ecx, [esp + 0x24]
call fcn.005edd80
mov edx, dword [ebx + 4]
mov esi, dword [esp + 0x28]
mov ebp, dword [esp + 0x20]
xor eax, eax
mov byte [esp + 0x14c], 2
test edx, edx
jle 0x439761
mov ecx, dword [ebx + 0x14]
cmp eax, dword [ecx + 4]
jge 0x43972c
test esi, esi
je 0x43971a
lea ecx, [esi - 1]
cmp ecx, eax
lea ecx, [eax + ebp]
ja 0x43971f
mov ecx, 0x686dbc
mov byte [ecx], 0x20
mov esi, dword [esp + 0x28]
mov ebp, dword [esp + 0x20]
jmp 0x43975c
test esi, esi
je 0x43973a
lea ecx, [esi - 1]
cmp ecx, eax
lea ecx, [eax + ebp]
ja 0x43973f
mov ecx, 0x686dbc
cmp byte [ecx], 0x2f
je 0x439761
test esi, esi
je 0x439752
lea ecx, [esi - 1]
cmp ecx, eax
lea ecx, [eax + ebp]
ja 0x439757
mov ecx, 0x686dbc
cmp byte [ecx], 0x5c
je 0x439761
inc eax
cmp eax, edx
jl 0x439704
mov eax, dword [esp + 0x18]
test eax, eax
jbe 0x4397be
mov ecx, dword [esp + 0x1c]
mov edi, dword [esp + 0x14]
dec eax
test ecx, ecx
je 0x439780
lea edx, [ecx - 1]
cmp edx, eax
lea edx, [edi + eax]
ja 0x439785
mov edx, 0x686dbc
cmp byte [edx], 0x2f
je 0x4397a1
test ecx, ecx
je 0x439797
dec ecx
cmp ecx, eax
jbe 0x439797
add eax, edi
jmp 0x43979c
mov eax, 0x686dbc
cmp byte [eax], 0x5c
jne 0x4397be
mov edx, dword [ebx + 0x14]
mov eax, dword [edx + 4]
test esi, esi
je 0x4397b6
lea ecx, [esi - 1]
cmp ecx, eax
jbe 0x4397b6
add eax, ebp
jmp 0x4397bb
mov eax, 0x686dbc
mov byte [eax], 0x20
lea ecx, [esp + 0x20]
call fcn.005ed880
mov eax, dword [esp + 0x20]
push eax
lea ecx, [esp + 0x18]
call fcn.005edc30
mov ecx, dword [ebx + 0x14]
push 0
call fcn.005edbf0
mov ecx, dword [ebx + 0x10]
push 0
call fcn.005edbf0
mov eax, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
mov edi, dword [esp + 0x14]
mov ebp, edx
test eax, eax
je 0x439802
lea ecx, [eax - 1]
test ecx, ecx
ja 0x439809
mov ecx, 0x686dbc
jmp 0x43980b
mov ecx, edi
cmp byte [ecx], 0x5c
jne 0x439888
test eax, eax
je 0x43981c
lea ecx, [eax - 1]
cmp ecx, 1
ja 0x439823
mov ecx, 0x686dbc
jmp 0x439826
lea ecx, [edi + 1]
cmp byte [ecx], 0x5c
jne 0x439888
mov ecx, 2
cmp edx, ecx
mov word [ebx + 0xc], cx
mov esi, ecx
jle 0x439882
jmp 0x439844
mov eax, dword [esp + 0x1c]
test eax, eax
je 0x439852
lea ecx, [eax - 1]
cmp ecx, esi
lea ecx, [edi + esi]
ja 0x439857
mov ecx, 0x686dbc
cmp byte [ecx], 0x5c
je 0x439882
test eax, eax
je 0x439868
dec eax
cmp eax, esi
lea eax, [edi + esi]
ja 0x43986d
mov eax, 0x686dbc
movzx edx, byte [eax]
mov ecx, dword [ebx + 0x10]
push edx
call fcn.005edb20
mov edi, dword [esp + 0x14]
inc esi
cmp esi, ebp
jl 0x439840
push edi
jmp 0x439927
xor ecx, ecx
xor esi, esi
mov word [ebx + 0xc], cx
test edx, edx
jle 0x43990b
jmp 0x43989e
mov eax, dword [esp + 0x1c]
mov edi, dword [esp + 0x14]
test eax, eax
je 0x4398ac
lea ecx, [eax - 1]
cmp ecx, esi
lea ecx, [edi + esi]
ja 0x4398b1
mov ecx, 0x686dbc
cmp byte [ecx], 0x3a
je 0x4398f7
test eax, eax
je 0x4398c2
dec eax
cmp eax, esi
lea eax, [edi + esi]
ja 0x4398c7
mov eax, 0x686dbc
movzx edx, byte [eax]
mov ecx, dword [ebx + 0x10]
push edx
call fcn.005edb20
mov eax, dword [esp + 0x1c]
test eax, eax
je 0x4398e8
dec eax
cmp eax, esi
jbe 0x4398e8
mov eax, dword [esp + 0x14]
add eax, esi
jmp 0x4398ed
mov eax, 0x686dbc
inc esi
cmp esi, ebp
mov byte [eax], 0x20
jl 0x439896
jmp 0x43990b
test eax, eax
je 0x439903
dec eax
cmp eax, esi
lea eax, [edi + esi]
ja 0x439908
mov eax, 0x686dbc
mov byte [eax], 0x20
lea ecx, [esp + 0x14]
call fcn.005ed880
push 1
lea ecx, [esp + 0x18]
push ecx
mov ecx, ebx
call fcn.00439320
mov edx, dword [esp + 0x14]
push edx
mov ecx, ebx
call fcn.005edbf0
lea ecx, [esp + 0x20]
mov byte [esp + 0x14c], 1
call fcn.005ed430
lea ecx, [esp + 0x14]
mov byte [esp + 0x14c], 0
call fcn.005ed430
jmp case.0x43968e.3
mov ecx, dword [ebx + 0x10]
push 0
call fcn.005edbf0
lea ecx, [esp + 0x30]
mov dword [esp + 0x14c], 0xffffffff
call fcn.005ed430
mov eax, 1
mov ecx, dword [esp + 0x144]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x12c]
xor ecx, esp
call fcn.005fb9ce
add esp, 0x13c
ret