Function at 0x442294
Capabilities:
Get disk information

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffe6c
push ebx
push esi
push edi
xor ecx, ecx
mov dword [ebp - 0x194], ecx
mov dword [ebp - 0x184], ecx
mov dword [ebp - 0x180], ecx
mov dword [ebp - 0x17c], ecx
mov dword [ebp - 0x178], ecx
mov dword [ebp - 0x168], ecx
mov dword [ebp - 0x16c], ecx
mov dword [ebp - 8], ecx
mov esi, edx
mov dword [ebp - 4], eax
lea eax, [ebp - 0x164]
mov edx, dword [0x4075d0]
call fcn.00405468
xor eax, eax
push ebp
push 0x442634
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 8]
mov edx, esi
call fcn.0040493c
mov byte [ebp - 9], 0
mov eax, dword [ebp - 4]
test byte [eax + 0x1c], 1
jne 0x4425bc
mov eax, dword [ebp - 8]
call fcn.004418f8
mov ebx, eax
mov eax, ebx
xor al, 1
test al, al
je 0x442353
cmp dword [ebp - 8], 0
je 0x442353
lea edx, [ebp - 0x16c]
mov eax, dword [ebp - 8]
call fcn.0044165c
mov eax, dword [ebp - 0x16c]
lea edx, [ebp - 0x168]
call fcn.0040d12c
mov edx, dword [ebp - 0x168]
lea eax, [ebp - 8]
call fcn.0040474c
mov edi, 0x10
mov eax, dword [ebp - 4]
test byte [eax + 0x2d9], 2
je 0x442367
or edi, 2
cmp dword [ebp - 8], 0
je 0x4423d8
test bl, bl
je 0x442381
lea edx, [ebp - 0x164]
mov eax, dword [ebp - 8]
call fcn.0044106c
jmp 0x4423d8
lea ecx, [ebp - 0x164]
mov edx, edi
mov eax, dword [ebp - 8]
call fcn.00408dd0
test eax, eax
je 0x4423d4
mov dword [ebp - 0x174], esi
mov byte [ebp - 0x170], 0xf
lea eax, [ebp - 0x174]
push eax
push 0
lea edx, [ebp - 0x178]
mov eax, dword [0x461490]
call fcn.00406a40
mov ecx, dword [ebp - 0x178]
mov dl, 1
mov eax, dword [0x440484]
call fcn.0040c554
call fcn.00404054
jmp 0x4423d8
mov byte [ebp - 9], 1
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x22c]
call fcn.0043aea4
mov eax, dword [ebp - 4]
mov byte [eax + 0x2d8], 1
xor eax, eax
push ebp
push 0x4425b5
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x22c]
call fcn.0043ee04
cmp dword [ebp - 8], 0
je 0x4424a2
test bl, bl
je 0x442445
lea eax, [ebp - 0x17c]
mov edx, dword [ebp - 0x158]
call fcn.00405014
mov ecx, dword [ebp - 0x17c]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x22c]
xor edx, edx
call fcn.0043ed28
mov esi, eax
jmp 0x44246b
lea eax, [ebp - 0x180]
mov edx, dword [ebp - 8]
call fcn.00405014
mov ecx, dword [ebp - 0x180]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x22c]
xor edx, edx
call fcn.0043ed28
mov esi, eax
lea eax, [ebp - 0x164]
call fcn.004413c4
mov dword [esi + 0x28], eax
xor bl, 1
test bl, bl
je 0x442489
xor edx, edx
mov eax, esi
call fcn.0043a780
mov edx, esi
mov eax, dword [ebp - 4]
call fcn.00442158
mov edx, esi
mov eax, dword [ebp - 4]
call fcn.0043b6cc
jmp 0x44257e
call sub.kernel32.dll_GetLogicalDrives
mov edi, eax
xor ebx, ebx
mov eax, ebx
cmp eax, 0x1f
ja 0x4424b5
bt edi, eax
jae 0x442574
lea eax, [ebp - 0x188]
mov edx, ebx
add dl, 0x41
mov byte [eax + 1], dl
mov byte [eax], 1
lea edx, [ebp - 0x188]
lea eax, [ebp - 0x18c]
call fcn.00403024
mov edx, 0x442644
lea eax, [ebp - 0x18c]
mov cl, 2
call fcn.00402ff4
lea edx, [ebp - 0x18c]
lea eax, [ebp - 0x190]
call fcn.00403024
mov edx, 0x442648
lea eax, [ebp - 0x190]
mov cl, 3
call fcn.00402ff4
lea edx, [ebp - 0x190]
lea eax, [ebp - 0x184]
call fcn.00404918
mov eax, dword [ebp - 0x184]
lea edx, [ebp - 0x164]
call fcn.0044106c
lea eax, [ebp - 0x194]
mov edx, dword [ebp - 0x158]
call fcn.00405014
mov ecx, dword [ebp - 0x194]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x22c]
xor edx, edx
call fcn.0043ed28
mov esi, eax
lea eax, [ebp - 0x164]
call fcn.004413c4
mov dword [esi + 0x28], eax
mov dl, 1
mov eax, esi
call fcn.0043e100
inc ebx
cmp ebx, 0x1a
jne 0x4424ab
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4425bc
mov eax, dword [ebp - 4]
mov byte [eax + 0x2d8], 0
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x22c]
call fcn.0043aebc
cmp byte [ebp - 9], 0
je 0x4425b4
lea eax, [ebp - 0x164]
call fcn.00408e44
ret
mov eax, dword [ebp - 4]
add eax, 0x2dc
mov edx, dword [ebp - 8]
call fcn.00405014
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x44263b
lea eax, [ebp - 0x194]
call fcn.00404e30
lea eax, [ebp - 0x184]
call fcn.004046b4
lea eax, [ebp - 0x180]
mov edx, 2
call fcn.00404e48
lea eax, [ebp - 0x178]
call fcn.004046b4
lea eax, [ebp - 0x16c]
mov edx, 2
call fcn.004046d8
lea eax, [ebp - 0x164]
mov edx, dword [0x4075d0]
call fcn.00405538
lea eax, [ebp - 8]
call fcn.004046b4
ret