Function at 0x417d34
Capabilities:
Get disk information

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x73c
mov eax, dword [ebp + 8]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x14]
mov dword [eax + 4], 0
mov eax, dword [ebp - 0x14]
mov dword [eax + 8], 0
mov eax, dword [ebp - 0x14]
mov dword [eax + 0xc], 0
lea eax, [ebp - 0x318]
mov dword [esp], eax
mov dword [esp + 8], 0x208
mov dword [esp + 4], 0
call fcn.0044c927
mov dword [ebp - 0xa8], 0x45d7f8
mov dword [ebp - 0xa4], 0x463d1c
mov dword [ebp - 0xa0], ebp
mov dword [ebp - 0x98], esp
mov dword [ebp - 0xa0], 0x418499
mov dword [ebp - 0xbc], 1
lea eax, [ebp - 0xc4]
call fcn.0045e461
call sub.KERNEL32.DLL_GetLogicalDrives
mov dword [ebp - 0xf4], eax
xor ecx, ecx
lea esi, [ebp - 0x318]
jmp 0x418014
mov eax, dword [ebp - 0x54]
mov ecx, dword [eax + 0x14]
mov edx, dword [eax + 0x18]
mov dword [ebp - 0x20], 7
mov dword [ebp - 0x24], 0
mov word [ebp - 0x34], 0
mov eax, edx
sub eax, ecx
cmp eax, 7
je 0x417f25
mov dword [ebp - 0x3c], edx
mov dword [ebp - 0x18], ecx
mov dword [ebp - 0xbc], 0xf
mov dword [esp + 4], eax
lea eax, [ebp - 0x38]
mov dword [esp], eax
mov dword [esp + 8], 1
call fcn.00419d90
test al, al
mov ecx, dword [ebp - 0x18]
mov edx, dword [ebp - 0x3c]
je 0x417f25
cmp dword [ebp - 0x20], 7
ja 0x417f16
lea eax, [ebp - 0x34]
jmp 0x417f19
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x24], 0
mov word [eax], 0
mov dword [ebp - 0xbc], 0xc
mov al, byte [ebp - 0x10]
mov byte [esp + 0xc], al
mov dword [esp + 8], edx
mov dword [esp + 4], ecx
lea eax, [ebp - 0x38]
mov dword [esp], eax
call fcn.0041a83c
mov eax, dword [ebp - 0x24]
test eax, eax
je 0x417fe5
mov edx, dword [ebp - 0x70]
mov dword [ebp - 0x18], eax
mov ecx, edx
mov dword [ebp - 0x3c], ecx
lea eax, [edx + eax]
mov dword [ebp - 0xbc], 0xd
mov dword [ebp - 0x48], eax
mov dword [esp + 4], eax
lea eax, [ebp - 0x84]
mov dword [esp], eax
mov dword [esp + 8], 0
call fcn.00419d90
test al, al
mov edx, dword [ebp - 0x18]
je 0x417fe5
cmp dword [ebp - 0x6c], 7
ja 0x417ed3
lea eax, [ebp - 0x80]
jmp 0x417ed6
mov eax, dword [ebp - 0x80]
mov ecx, dword [ebp - 0x3c]
lea eax, [eax + ecx*2]
cmp dword [ebp - 0x20], 7
ja 0x417ee7
lea ecx, [ebp - 0x34]
jmp 0x417eea
mov ecx, dword [ebp - 0x34]
mov dword [ebp - 0xbc], 0xe
mov dword [esp + 8], edx
mov dword [esp + 4], ecx
mov dword [esp], eax
call fcn.0044cc90
cmp dword [ebp - 0x6c], 7
ja 0x417fd6
lea eax, [ebp - 0x80]
jmp 0x417fd9
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x24], 0
mov word [eax], 0
mov dword [ebp - 0xbc], 0x10
mov al, byte [ebp - 0x10]
mov byte [esp + 0xc], al
mov dword [esp + 8], edx
mov dword [esp + 4], ecx
lea eax, [ebp - 0x38]
mov dword [esp], eax
call fcn.0041a83c
mov eax, dword [ebp - 0x24]
test eax, eax
je 0x417fe5
mov edx, dword [ebp - 0x70]
mov dword [ebp - 0x18], eax
mov ecx, edx
mov dword [ebp - 0x3c], ecx
lea eax, [edx + eax]
mov dword [ebp - 0xbc], 0x11
mov dword [ebp - 0x48], eax
mov dword [esp + 4], eax
lea eax, [ebp - 0x84]
mov dword [esp], eax
mov dword [esp + 8], 0
call fcn.00419d90
test al, al
mov edx, dword [ebp - 0x18]
je 0x417fe5
cmp dword [ebp - 0x6c], 7
ja 0x417f9b
lea eax, [ebp - 0x80]
jmp 0x417f9e
mov eax, dword [ebp - 0x80]
mov ecx, dword [ebp - 0x3c]
lea eax, [eax + ecx*2]
cmp dword [ebp - 0x20], 7
ja 0x417faf
lea ecx, [ebp - 0x34]
jmp 0x417fb2
mov ecx, dword [ebp - 0x34]
mov dword [ebp - 0xbc], 0x12
mov dword [esp + 8], edx
mov dword [esp + 4], ecx
mov dword [esp], eax
call fcn.0044cc90
cmp dword [ebp - 0x6c], 7
jbe 0x417f0e
mov eax, dword [ebp - 0x80]
mov ecx, dword [ebp - 0x48]
mov dword [ebp - 0x70], ecx
mov word [eax + ecx*2], 0
mov ecx, dword [ebp - 0x20]
cmp ecx, 8
jb 0x4183a4
mov eax, dword [ebp - 0x34]
lea ecx, [ecx + ecx + 2]
cmp ecx, 0x1000
jb 0x418003
mov eax, dword [eax - 4]
mov dword [esp], eax
call fcn.004406b8
jmp 0x4183a4
mov eax, dword [ebp - 0xf4]
bt eax, ecx
jae 0x418471
mov dword [ebp - 0xf0], ecx
lea eax, [ecx + 0x41]
mov dword [ebp - 0xbc], 2
mov dword [esp + 0xc], eax
mov dword [esp], esi
mov dword [esp + 8], str._c:_
mov dword [esp + 4], 0x104
call fcn.0044f2c4
mov dword [ebp - 0xbc], 3
lea eax, [ebp - 0x318]
mov dword [esp], eax
call sub.KERNEL32.DLL_GetDriveTypeW
sub esp, 4
mov dword [ebp - 0x18], eax
lea edi, [ebp - 0x520]
mov dword [esp], edi
mov dword [esp + 8], 0x208
mov dword [esp + 4], 0
call fcn.0044c927
lea esi, [ebp - 0x728]
mov dword [esp], esi
mov dword [esp + 8], 0x208
mov dword [esp + 4], 0
call fcn.0044c927
mov dword [ebp - 0x100], 0
mov dword [ebp - 0xfc], 0
mov dword [ebp - 0xf8], 0
mov dword [ebp - 0xbc], 4
mov dword [esp + 0x18], esi
lea eax, [ebp - 0xf8]
mov dword [esp + 0x14], eax
lea eax, [ebp - 0xfc]
mov dword [esp + 0x10], eax
lea eax, [ebp - 0x100]
mov dword [esp + 0xc], eax
mov dword [esp + 4], edi
lea eax, [ebp - 0x318]
mov dword [esp], eax
mov dword [esp + 0x1c], 0x104
mov dword [esp + 8], 0x104
call sub.KERNEL32.DLL_GetVolumeInformationW
sub esp, 0x20
mov dword [ebp - 0x6c], 7
mov dword [ebp - 0x70], 0
mov word [ebp - 0x80], 0
test eax, eax
lea esi, [ebp - 0x318]
je 0x41846b
cmp word [ebp - 0x318], 0
je 0x418151
mov dword [esp], esi
call fcn.0044c630
jmp 0x418153
xor eax, eax
mov dword [ebp - 0xbc], 5
mov dword [esp + 8], eax
mov dword [esp + 4], esi
lea eax, [ebp - 0x84]
mov dword [esp], eax
call fcn.0041a23c
mov dword [ebp - 0xbc], 6
lea eax, [ebp - 0x84]
mov dword [esp], eax
mov dword [esp + 8], 3
mov dword [esp + 4], 0x463b48
call fcn.0041a51c
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0xbc], 7
mov dword [esp], 5
call fcn.00442604
mov dword [ebp - 0x34], eax
mov ecx, eax
add ecx, 5
mov dword [ebp - 0x2c], ecx
mov byte [eax + 4], 0x64
mov dword [eax], 0x65786946
mov dword [ebp - 0x30], ecx
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0xbc], 8
mov dword [esp], 9
call fcn.00442604
mov dword [ebp - 0x24], eax
mov ecx, eax
add ecx, 9
mov dword [ebp - 0x1c], ecx
mov byte [eax + 8], 0x65
mov dword [eax + 4], 0x6c626176
mov dword [eax], 0x6f6d6552
mov dword [ebp - 0x20], ecx
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0xbc], 9
mov al, byte [ebp - 0x10]
mov byte [esp + 0xc], al
lea eax, [ebp - 0x18]
mov dword [esp + 8], eax
lea eax, [ebp - 0x38]
mov dword [esp + 4], eax
lea eax, [ebp - 0x58]
mov dword [esp], eax
call fcn.0040fca4
mov eax, dword [ebp - 0x24]
test eax, eax
lea esi, [ebp - 0x520]
je 0x4182a1
mov ecx, dword [ebp - 0x1c]
sub ecx, eax
cmp ecx, 0x1000
jb 0x418284
mov eax, dword [eax - 4]
mov dword [esp], eax
call fcn.004406b8
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x1c], 0
mov eax, dword [ebp - 0x34]
test eax, eax
je 0x4182d5
mov ecx, dword [ebp - 0x2c]
sub ecx, eax
cmp ecx, 0x1000
jb 0x4182b8
mov eax, dword [eax - 4]
mov dword [esp], eax
call fcn.004406b8
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x2c], 0
mov dword [esp], esi
call fcn.0044c630
test eax, eax
je 0x4182fc
cmp word [ebp - 0x520], 0
je 0x418382
mov dword [esp], esi
call fcn.0044c630
jmp 0x418384
mov eax, dword [ebp - 0x18]
cmp eax, 2
je 0x417dd9
cmp eax, 3
jne 0x4183a4
mov eax, dword [ebp - 0x54]
mov ecx, dword [eax + 4]
mov edx, dword [eax + 8]
mov dword [ebp - 0x20], 7
mov dword [ebp - 0x24], 0
mov word [ebp - 0x34], 0
mov eax, edx
sub eax, ecx
cmp eax, 7
je 0x417e59
mov dword [ebp - 0x3c], edx
mov dword [ebp - 0x18], ecx
mov dword [ebp - 0xbc], 0xb
mov dword [esp + 4], eax
lea eax, [ebp - 0x38]
mov dword [esp], eax
mov dword [esp + 8], 1
call fcn.00419d90
test al, al
mov ecx, dword [ebp - 0x18]
mov edx, dword [ebp - 0x3c]
je 0x417e59
cmp dword [ebp - 0x20], 7
ja 0x417e4a
lea eax, [ebp - 0x34]
jmp 0x417e4d
xor eax, eax
mov dword [ebp - 0xbc], 0xa
mov dword [esp + 8], eax
mov dword [esp + 4], esi
lea eax, [ebp - 0x84]
mov dword [esp], eax
call fcn.0041a51c
mov esi, dword [ebp - 0x54]
test esi, esi
je 0x41841e
mov edi, dword [ebp - 0x50]
cmp esi, edi
je 0x4183f2
nop
mov eax, dword [esi + 4]
test eax, eax
je 0x4183e8
mov ecx, dword [esi + 0xc]
sub ecx, eax
cmp ecx, 0x1000
jb 0x4183cb
mov eax, dword [eax - 4]
mov dword [esp], eax
call fcn.004406b8
mov dword [esi + 4], 0
mov dword [esi + 8], 0
mov dword [esi + 0xc], 0
add esi, 0x10
cmp edi, esi
jne 0x4183b4
mov esi, dword [ebp - 0x54]
mov eax, dword [ebp - 0x4c]
sub eax, esi
cmp eax, 0x1000
jb 0x418401
mov esi, dword [esi - 4]
mov dword [esp], esi
call fcn.004406b8
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x4c], 0
cmp dword [ebp - 0x70], 0
je 0x418443
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0xbc], 0x13
lea ecx, [ebp - 0x84]
mov dword [esp + 4], ecx
mov dword [esp], eax
call fcn.0041890c
mov ecx, dword [ebp - 0x6c]
cmp ecx, 8
lea esi, [ebp - 0x318]
jb 0x41846b
mov eax, dword [ebp - 0x80]
lea ecx, [ecx + ecx + 2]
cmp ecx, 0x1000
jb 0x418463
mov eax, dword [eax - 4]
mov dword [esp], eax
call fcn.004406b8
mov ecx, dword [ebp - 0xf0]
cmp ecx, 0x19
lea ecx, [ecx + 1]
jb 0x418014
lea eax, [ebp - 0xc4]
mov dword [esp], eax
call fcn.0045e482
mov eax, dword [ebp + 8]
add esp, 0x73c
pop esi
pop edi
pop ebx
pop ebp
ret