Function at 0x4ad0b973
Capabilities:
Get disk information

Disassembly:
push 0x27c
push 0x4ad0baf0
call fcn.4ad015f8
mov eax, dword [0x4ad33b38]
mov dword [ebp - 0x1c], eax
xor ebx, ebx
mov dword [ebp - 0x280], ebx
cmp dword [0x4ad2b9a8], ebx
jne 0x4ad0bb1d
cmp dword [0x4ad2fa80], ebx
je 0x4ad0bdc6
cmp dword [0x4ad2f9e8], ebx
jne 0x4ad0b9bd
push 0x4ad3cb88
call fcn.4ad04115
pop ecx
cmp byte [0x4ad2f9f4], 0
je 0x4ad0bdfa
mov dword [ebp - 0x278], 0x4ad3cce0
push ebx
push 0x4ad34460
call fcn.4ad0234c
mov edi, 0x4ad2b1a0
mov esi, edi
mov dword [ebp - 0x274], esi
mov word [0x4ad2b1a0], bx
mov eax, 0x400
mov dword [ebp - 0x270], eax
mov ecx, dword [ebp - 0x278]
cmp ecx, ebx
je 0x4ad0bd52
cmp word [ecx], bx
je 0x4ad0bd52
mov edi, dword [sym.imp.msvcrt.dll__snwprintf]
mov eax, dword [ebp - 0x278]
mov ax, word [eax]
cmp ax, bx
je 0x4ad0bdb0
cmp ax, 0x24
jne 0x4ad0bb34
add dword [ebp - 0x278], 2
xor eax, eax
mov dword [ebp - 0x284], eax
cmp word [0x4ad3cc60], bx
je 0x4ad0ba95
mov eax, 0x4ad3cc60
mov dword [ebp - 0x288], eax
mov ebx, eax
mov eax, dword [ebp - 0x278]
movzx eax, word [eax]
push eax
call dword [sym.imp.msvcrt.dll_towupper]
pop ecx
mov ecx, dword [ebp - 0x288]
cmp ax, word [ecx]
je 0x4ad0ba8d
inc dword [ebp - 0x284]
add ebx, 6
mov dword [ebp - 0x288], ebx
cmp word [ebx], 0
jne 0x4ad0ba5c
xor ebx, ebx
mov eax, dword [ebp - 0x284]
lea eax, [eax + eax*2]
shl eax, 1
cmp word [eax + 0x4ad3cc60], bx
je 0x4ad0bdb0
mov cx, word [eax + 0x4ad3cc62]
cmp cx, 8
jne 0x4ad0bdd4
movzx eax, word [eax + 0x4ad3cc64]
push eax
push 0x4ad3cc58
push dword [ebp - 0x270]
push esi
call edi
add esp, 0x10
lea esi, [esi + eax*2]
mov dword [ebp - 0x274], esi
sub dword [ebp - 0x270], eax
add dword [ebp - 0x278], 2
jmp 0x4ad0ba1b
push ebx
push 0x2335
call fcn.4ad05031
pop ecx
pop ecx
call fcn.4ad01f53
jmp 0x4ad0b99e
movzx eax, ax
push eax
push 0x4ad3cc58
push dword [ebp - 0x270]
push esi
call edi
add esp, 0x10
lea esi, [esi + eax*2]
mov dword [ebp - 0x274], esi
sub dword [ebp - 0x270], eax
call fcn.4ad06197
test al, al
je 0x4ad0bb89
mov eax, dword [ebp - 0x278]
movzx eax, word [eax]
push eax
call fcn.4ad1cf49
test eax, eax
je 0x4ad0bb89
mov eax, dword [ebp - 0x278]
mov ax, word [eax]
mov word [ebp - 0x280], ax
jmp 0x4ad0bae0
mov dword [ebp - 0x280], ebx
jmp 0x4ad0bae0
push dword [ebp - 0x270]
push esi
push 1
push ebx
call fcn.4ad06358
jmp 0x4ad0bad1
push dword [ebp - 0x270]
push esi
push 1
push ebx
call fcn.4ad0cf54
jmp 0x4ad0bad1
push 0x20
lea eax, [ebp - 0x64]
push eax
call fcn.4ad0f9ae
lea eax, [ebp - 0x64]
push eax
push 0x2350
call fcn.4ad11fc9
mov ebx, eax
push ebx
push 0x4ad0bdf4
push dword [ebp - 0x270]
push esi
call edi
add esp, 0x18
lea esi, [esi + eax*2]
mov dword [ebp - 0x274], esi
sub dword [ebp - 0x270], eax
push ebx
call dword [sym.imp.KERNEL32.dll_LocalFree]
xor ebx, ebx
jmp 0x4ad0bae0
cmp word [ebp - 0x280], bx
je 0x4ad0bc19
push str._b_b___b_b
jmp 0x4ad0bd30
push 0x4ad3d3d0
jmp 0x4ad0bd30
push 0x4ad3cb88
jmp 0x4ad0bd30
cmp byte [0x4ad2fa24], 0
je 0x4ad0bae0
call fcn.4ad1d7b5
cmp dword [ebp - 0x270], ebx
je 0x4ad0bae0
mov ecx, eax
dec eax
test ecx, ecx
je 0x4ad0bae0
mov word [esi], 0x2b
inc esi
inc esi
mov dword [ebp - 0x274], esi
dec dword [ebp - 0x270]
je 0x4ad0bae0
jmp 0x4ad0bc4b
cmp byte [0x4ad2fa24], 0
je 0x4ad0bae0
push 2
push 0x4ad34460
lea eax, [ebp - 0x24]
push eax
call dword [sym.imp.msvcrt.dll_wcsncpy]
add esp, 0xc
mov word [ebp - 0x20], 0x5c
mov word [ebp - 0x1e], bx
lea eax, [ebp - 0x24]
push eax
call dword [sym.imp.KERNEL32.dll_GetDriveTypeW]
cmp eax, 4
jne 0x4ad0bae0
mov word [ebp - 0x20], bx
mov dword [ebp - 0x28c], 0x104
mov dword [ebp - 4], ebx
lea eax, [ebp - 0x28c]
push eax
lea eax, [ebp - 0x26c]
push eax
lea eax, [ebp - 0x24]
push eax
call sub.MPR.dll_WNetGetConnectionW
mov dword [ebp - 0x27c], eax
or dword [ebp - 4], 0xffffffff
jmp 0x4ad0bd13
cmp dword [ebp - 0x27c], ebx
je 0x4ad0bd41
cmp dword [ebp - 0x27c], 0x8ca
je 0x4ad0bae0
push 0x4ad0bda0
push dword [ebp - 0x270]
push esi
call edi
add esp, 0xc
jmp 0x4ad0bad1
lea eax, [ebp - 0x26c]
push eax
push 0x4ad19e84
jmp 0x4ad0bac5
push 0x4ad34460
push 0x4ad3d460
push eax
push edi
call dword [sym.imp.msvcrt.dll__snwprintf]
add esp, 0x10
lea esi, [eax*2 + 0x4ad2b1a0]
jmp 0x4ad0bdb5
call fcn.4ad01f53
jmp 0x4ad0bdc6
mov edi, 0x4ad2b1a0
mov word [esi], bx
push edi
call fcn.4ad0bb01
cmp dword [0x4ad2b9a8], ebx
jne 0x4ad0bd70
mov ecx, dword [ebp - 0x1c]
call fcn.4ad01389
call fcn.4ad013a2
ret
movzx eax, cx
dec eax
cmp eax, 9
ja case.0x4ad0bddd.7
jmp dword [eax*4 + 0x4ad0bd77]
push 0x4ad34460
push 0x4ad0bdf4
jmp 0x4ad0bac5
push 0x4ad33ba8
call fcn.4ad01f78
mov dword [ebp - 0x278], eax
cmp eax, ebx
je 0x4ad0b9d4
push eax
mov esi, 0x4ad3cce0
push esi
call dword [sym.imp.msvcrt.dll_wcscpy]
pop ecx
pop ecx
mov dword [ebp - 0x278], esi
mov byte [0x4ad2f9f4], 1
jmp 0x4ad0b9d4
movzx eax, word [0x4ad34460]
jmp 0x4ad0babf