Function at 0x41e223
Capabilities:
Get disk information
Get file system object information

Disassembly:
sub esp, 0x740
push ebx
push ebp
push esi
push edi
push 1
call dword [sym.imp.KERNEL32.dll_SetErrorMode]
mov ebp, dword [esp + 0x754]
xor eax, eax
mov ebx, dword [sym.imp.USER32.dll_SendMessageW]
push eax
push eax
mov esi, dword [ebp + 0x14]
push 0x406
push dword [ebp]
mov dword [esp + 0x20], esi
call ebx
mov ecx, dword [esp + 0x758]
mov edi, eax
test ecx, ecx
jne 0x41e269
mov ecx, 0x49d008
push ecx
push esi
call sub.MSVCRT.dll_wcscpy
movzx eax, word [esi]
pop ecx
pop ecx
cmp eax, 0x61
jb 0x41e27d
sub eax, 0x20
mov word [esi], ax
test ax, ax
je 0x41e2a3
push esi
call sub.MSVCRT.dll_wcslen
pop ecx
push 0x5c
pop ecx
cmp word [esi + eax*2 - 2], cx
je 0x41e2a3
push 0x49f36c
push esi
call sub.MSVCRT.dll_wcscat
pop ecx
pop ecx
xor eax, eax
push eax
push eax
push 0x146
push edi
call ebx
test eax, eax
je 0x41e2d3
xor esi, esi
push esi
push esi
push 0x144
push dword [ebp]
call ebx
push esi
push esi
push 0x146
push edi
call ebx
test eax, eax
jne 0x41e2b5
mov esi, dword [esp + 0x10]
test byte [ebp + 0x10], 0x80
je 0x41e402
movzx ebx, word [esi]
push 0x41
pop edi
sub ebx, edi
cmp ebx, 0x19
ja 0x41e300
push 0x49f338
push esi
call sub.MSVCRT.dll_wcscpy
movsx ax, bl
pop ecx
pop ecx
add ax, di
jmp 0x41e305
or ebx, 0xffffffff
xor eax, eax
mov word [esi], ax
or edi, 0xffffffff
lea eax, [esp + 0x258]
mov dword [esp + 0x14], 0x37
xor esi, esi
mov dword [esp + 0x1c], eax
mov dword [esp + 0x18], esi
mov dword [esp + 0x30], esi
call dword [sym.imp.KERNEL32.dll_GetLogicalDrives]
mov dword [esp + 0x38], eax
lea eax, [esp + 0x44]
push 0x49f338
push eax
call sub.MSVCRT.dll_wcscpy
pop ecx
pop ecx
xor eax, eax
mov ecx, esi
inc eax
shl eax, cl
test dword [esp + 0x38], eax
je 0x41e3f3
lea eax, [esi + 0x41]
mov word [esp + 0x44], ax
lea eax, [esp + 0x460]
push str.Drive
push eax
call sub.MSVCRT.dll_wcscpy
pop ecx
pop ecx
push 0x4001
push 0x2b4
lea eax, [esp + 0x254]
push eax
xor eax, eax
push eax
lea eax, [esp + 0x54]
push eax
call dword [sym.imp.SHELL32.dll_SHGetFileInfoW]
mov eax, dword [esp + 0x250]
push 0x200
mov dword [esp + 0x28], eax
mov dword [esp + 0x2c], eax
lea eax, [esp + 0x250]
push 0x2b4
push eax
xor eax, eax
push eax
lea eax, [esp + 0x54]
push eax
call dword [sym.imp.SHELL32.dll_SHGetFileInfoW]
lea eax, [esp + 0x258]
mov dword [esp + 0x34], esi
mov dword [esp + 0x1c], eax
lea eax, [esp + 0x14]
push eax
xor eax, eax
push eax
push 0x40b
push dword [ebp]
call dword [sym.imp.USER32.dll_SendMessageW]
mov eax, dword [esp + 0x18]
cmp esi, ebx
jne 0x41e3ee
mov edi, eax
inc eax
mov dword [esp + 0x18], eax
inc esi
cmp esi, 0x1f
jle 0x41e343
jmp 0x41e8a5
xor edi, edi
test dword [ebp + 0x10], 0x200
mov dword [esp + 0x38], edi
jne 0x41e47a
lea eax, [esp + 0x44]
push esi
push eax
call sub.MSVCRT.dll_wcscpy
cmp word [esp + 0x4c], 0
lea edi, [esp + 0x4c]
pop ecx
pop ecx
je 0x41e445
xor esi, esi
movzx eax, word [edi]
push eax
call sub.MSVCRT.dll_tolower
mov word [edi], ax
lea edi, [edi + 2]
pop ecx
cmp word [edi], si
jne 0x41e42c
mov esi, dword [esp + 0x10]
cmp dword [0x4bc678], 0
je 0x41e478
mov edi, 0x4bc260
push edi
call sub.MSVCRT.dll_wcslen
push eax
lea eax, [esp + 0x4c]
push edi
push eax
call sub.MSVCRT.dll_wcsncmp
add esp, 0x10
xor edi, edi
test eax, eax
jne 0x41e47a
mov dword [esp + 0x38], 1
jmp 0x41e47a
xor edi, edi
mov eax, dword [0x4bc670]
mov dword [esp + 0x24], eax
mov dword [esp + 0x28], eax
lea eax, [esp + 0x14]
push eax
push edi
push 0x40b
push dword [ebp]
mov dword [esp + 0x24], 0x37
mov dword [esp + 0x2c], 0x4bc468
mov dword [esp + 0x28], edi
mov dword [esp + 0x40], edi
mov dword [esp + 0x44], 0xff
call ebx
inc dword [esp + 0x18]
lea eax, [esp + 0x258]
inc dword [esp + 0x30]
mov dword [esp + 0x1c], eax
call dword [sym.imp.KERNEL32.dll_GetLogicalDrives]
mov edx, eax
xor eax, eax
mov dword [esp + 0x40], edx
mov ecx, eax
mov dword [esp + 0x3c], eax
xor eax, eax
inc eax
shl eax, cl
test edx, eax
je 0x41e6f6
lea eax, [esp + 0x44]
push 0x49f338
push eax
call sub.MSVCRT.dll_wcscpy
mov eax, dword [esp + 0x44]
add eax, 0x41
mov word [esp + 0x4c], ax
lea eax, [esp + 0x468]
push str.Drive
push eax
call sub.MSVCRT.dll_wcscpy
add esp, 0x10
lea eax, [esp + 0x24c]
push 0x4001
push 0x2b4
push eax
xor eax, eax
push eax
lea eax, [esp + 0x54]
push eax
call dword [sym.imp.SHELL32.dll_SHGetFileInfoW]
mov eax, dword [esp + 0x250]
push 0x200
mov dword [esp + 0x28], eax
mov dword [esp + 0x2c], eax
lea eax, [esp + 0x250]
push 0x2b4
push eax
xor eax, eax
push eax
lea eax, [esp + 0x54]
push eax
call dword [sym.imp.SHELL32.dll_SHGetFileInfoW]
mov eax, dword [esp + 0x3c]
mov dword [esp + 0x34], eax
lea eax, [esp + 0x258]
mov dword [esp + 0x1c], eax
lea eax, [esp + 0x14]
push eax
xor eax, eax
push eax
push 0x40b
push dword [ebp]
call ebx
push 6
lea eax, [esp + 0x48]
push esi
push eax
call sub.MSVCRT.dll_memcmp
add esp, 0xc
test eax, eax
jne 0x41e6e5
cmp dword [esp + 0x38], eax
jne 0x41e6e5
lea eax, [esi + 6]
xor ecx, ecx
push 3
pop edi
cmp word [eax], cx
je 0x41e6d5
push 0x5c
mov dword [esp + 0x14], 0x100fd
pop edx
movzx eax, word [eax]
jmp 0x41e5dc
test ax, ax
je 0x41e5e1
inc edi
movzx eax, word [esi + edi*2]
cmp ax, dx
jne 0x41e5d2
lea eax, [edi + edi]
cmp word [eax + esi], cx
je 0x41e6c8
lea eax, [esp + 0x460]
push str.Unknown
push eax
call sub.MSVCRT.dll_wcscpy
lea eax, [edi + edi]
push eax
lea eax, [esp + 0x50]
push esi
push eax
call sub.MSVCRT.dll_memcpy
add esp, 0x14
lea eax, [edi + edi]
xor ecx, ecx
mov word [esp + eax + 0x44], cx
lea eax, [esp + 0x500]
push eax
lea eax, [esp + 0x48]
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
cmp eax, 0xffffffff
je 0x41e6c3
push eax
call dword [sym.imp.KERNEL32.dll_FindClose]
inc dword [esp + 0x18]
lea eax, [esp + 0x24c]
inc dword [esp + 0x30]
push 0x4001
push 0x2b4
push eax
xor eax, eax
push eax
lea eax, [esp + 0x54]
push eax
call dword [sym.imp.SHELL32.dll_SHGetFileInfoW]
mov eax, dword [esp + 0x250]
push 0x200
mov dword [esp + 0x28], eax
mov dword [esp + 0x2c], eax
lea eax, [esp + 0x250]
push 0x2b4
push eax
xor eax, eax
push eax
lea eax, [esp + 0x54]
push eax
call dword [sym.imp.SHELL32.dll_SHGetFileInfoW]
mov eax, dword [esp + 0x10]
mov dword [esp + 0x34], eax
lea eax, [esp + 0x258]
mov dword [esp + 0x1c], eax
lea eax, [esp + 0x14]
push eax
xor eax, eax
push eax
push 0x40b
push dword [ebp]
call ebx
add dword [esp + 0x10], 0x10000
push 0x5c
pop edx
xor ecx, ecx
inc edi
lea eax, [esi + edi*2]
cmp word [eax], cx
jne 0x41e5cd
mov eax, dword [esp + 0x18]
mov edi, eax
mov dword [esp + 0x30], 1
jmp 0x41e6e9
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x3c]
inc eax
mov edx, dword [esp + 0x40]
mov dword [esp + 0x18], eax
inc ecx
mov dword [esp + 0x3c], ecx
cmp ecx, 0x1f
jle 0x41e4de
cmp dword [0x4bc678], 0
je 0x41e749
test dword [ebp + 0x10], 0x200
jne 0x41e749
mov eax, dword [0x4bbe4c]
xor ecx, ecx
mov dword [esp + 0x24], eax
mov dword [esp + 0x28], eax
lea eax, [esp + 0x14]
push eax
push ecx
push 0x40b
push dword [ebp]
mov dword [esp + 0x40], ecx
mov dword [esp + 0x2c], 0x4bbe50
mov dword [esp + 0x44], 0xfe
call ebx
cmp dword [esp + 0x38], 0
je 0x41e8ab
xor eax, eax
push 0x4bc058
mov ebx, eax
mov edi, eax
call sub.MSVCRT.dll_wcslen
pop ecx
push 0x5c
pop ebp
cmp word [esi + edi*2], bp
jne 0x41e76f
inc ebx
push 0x4bc058
inc edi
call sub.MSVCRT.dll_wcslen
pop ecx
cmp edi, eax
jbe 0x41e768
mov ebp, dword [esp + 0x754]
inc edi
movzx eax, word [esi + edi*2]
test ax, ax
je 0x41e8a1
shl ebx, 0x10
add ebx, 0xfd
push 0x5c
pop ecx
jmp 0x41e7ac
test ax, ax
je 0x41e7b1
inc edi
movzx eax, word [esi + edi*2]
cmp ax, cx
jne 0x41e7a2
lea eax, [edi + edi]
xor ecx, ecx
cmp word [eax + esi], cx
je 0x41e893
lea eax, [esp + 0x460]
push str.Unknown
push eax
call sub.MSVCRT.dll_wcscpy
lea eax, [edi + edi]
push eax
lea eax, [esp + 0x50]
push esi
push eax
call sub.MSVCRT.dll_memcpy
add esp, 0x14
lea eax, [edi + edi]
xor ecx, ecx
mov word [esp + eax + 0x44], cx
lea eax, [esp + 0x500]
push eax
lea eax, [esp + 0x48]
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
cmp eax, 0xffffffff
je 0x41e893
push eax
call dword [sym.imp.KERNEL32.dll_FindClose]
inc dword [esp + 0x18]
lea eax, [esp + 0x24c]
inc dword [esp + 0x30]
push 0x4001
push 0x2b4
push eax
xor eax, eax
push eax
lea eax, [esp + 0x54]
push eax
call dword [sym.imp.SHELL32.dll_SHGetFileInfoW]
mov eax, dword [esp + 0x250]
push 0x200
mov dword [esp + 0x28], eax
mov dword [esp + 0x2c], eax
lea eax, [esp + 0x250]
push 0x2b4
push eax
xor eax, eax
push eax
lea eax, [esp + 0x54]
push eax
call dword [sym.imp.SHELL32.dll_SHGetFileInfoW]
lea eax, [esp + 0x258]
mov dword [esp + 0x34], ebx
mov dword [esp + 0x1c], eax
lea eax, [esp + 0x14]
push eax
xor eax, eax
push eax
push 0x40b
push dword [ebp]
call dword [sym.imp.USER32.dll_SendMessageW]
add ebx, 0x10000
inc edi
movzx eax, word [esi + edi*2]
test ax, ax
jne 0x41e79d
mov edi, dword [esp + 0x18]
mov ebx, dword [sym.imp.USER32.dll_SendMessageW]
xor esi, esi
push esi
call dword [sym.imp.KERNEL32.dll_SetErrorMode]
push esi
push edi
push 0x14e
push dword [ebp]
call ebx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x740
ret 8