Function at 0x402430
Capabilities:
Enumerate gui resources
Get disk information

Disassembly:
mov eax, dword [esp + 8]
sub esp, 0x444
sub eax, 0x8000
push ebx
push esi
push edi
je 0x4025eb
sub eax, 4
jne 0x40285b
push str.DriveIcon_OnDeviceChange_:_EventTypeDBT_DEVICEREMOVECOMPLETE_:
call fcn.00401100
mov esi, dword [esp + 0x460]
add esp, 4
mov eax, dword [esi + 4]
cmp eax, 5
jne 0x402503
push str.DeviceTypeDBT_DEVTYP_DEVICEINTERFACE_n
call fcn.00401100
mov edi, dword [sym.imp.KERNEL32.dll_lstrcmpA]
lea ebx, [esi + 0x1c]
mov esi, dword [sym.imp.USER32.dll_wsprintfA]
add esp, 4
mov dword [esp + 0xc], 0
push ebx
push 0x40c10c
push 0x4158fa
call esi
mov eax, dword [esp + 0x18]
add esp, 0xc
and eax, 0xffff
push 0x4158fa
lea ecx, [eax + eax*8]
shl ecx, 5
add ecx, eax
lea edx, [ecx*4 + 0x40e392]
push edx
call edi
test eax, eax
jne 0x4024e5
mov eax, dword [esp + 0xc]
and eax, 0xffff
push eax
call fcn.00402c60
mov ecx, dword [esp + 0x10]
push ecx
call fcn.00401f60
add esp, 8
mov eax, dword [esp + 0xc]
inc eax
cmp ax, 0x1a
mov dword [esp + 0xc], eax
jb 0x402495
pop edi
pop esi
mov eax, 1
pop ebx
add esp, 0x444
ret
cmp eax, 2
jne 0x4025c6
push str.DeviceTypeDBT_DEVTYP_VOLUME_n
call fcn.00401100
mov ecx, dword [esi + 0xc]
add esp, 4
xor eax, eax
mov dword [esp + 0xc], eax
test cl, 1
jne 0x402543
inc eax
shr ecx, 1
cmp ax, 0x1a
jb 0x402522
pop edi
mov dword [esp + 8], eax
pop esi
mov eax, 1
pop ebx
add esp, 0x444
ret
mov ecx, eax
mov dword [esp + 0xc], eax
and ecx, 0xffff
lea edx, [ecx + ecx*8]
shl edx, 5
add edx, ecx
mov cl, byte [edx*4 + 0x40e792]
test cl, cl
je 0x40285b
add al, 0x41
lea ecx, [esp + 0x50]
movsx eax, al
push eax
push str._c:_
push ecx
call fcn.0040346f
add esp, 0xc
lea edx, [esp + 0x50]
push edx
call dword [sym.imp.KERNEL32.dll_GetDriveTypeA]
cmp eax, 2
je 0x40259b
cmp eax, 1
je 0x40259b
test eax, eax
jne 0x40285b
mov eax, dword [esp + 0xc]
and eax, 0xffff
push eax
call fcn.00402c60
mov ecx, dword [esp + 0x10]
push ecx
call fcn.00401f60
add esp, 8
mov eax, 1
pop edi
pop esi
pop ebx
add esp, 0x444
ret
cmp eax, 1
jne 0x40285b
push str.DeviceTypeDBT_DEVTYP_DEVNODE_n
call fcn.00401100
add esp, 4
mov eax, 1
pop edi
pop esi
pop ebx
add esp, 0x444
ret
push str.DriveIcon_OnDeviceChange_:_EventTypeDBT_DEVICEARRIVAL_:
call fcn.00401100
mov esi, dword [esp + 0x460]
mov edi, 1
mov dword [0x417e24], edi
add esp, 4
mov eax, dword [esi + 4]
cmp eax, 5
jne 0x402744
push ebp
push str.DeviceTypeDBT_DEVTYP_DEVICEINTERFACE_n
call fcn.00401100
add esp, 4
push 0
push 0
call dword [sym.imp.SETUPAPI.dll_SetupDiCreateDeviceInfoList]
mov ebp, eax
mov edx, 0x1c
mov ecx, 6
xor eax, eax
lea edi, [esp + 0x20]
mov dword [esp + 0x1c], edx
rep stosd dword es:[edi], eax
mov dword [esp + 0x38], edx
mov ecx, 6
lea edi, [esp + 0x3c]
lea edx, [esp + 0x1c]
rep stosd dword es:[edi], eax
lea eax, [esi + 0x1c]
push edx
push 0
push eax
push ebp
mov dword [esp + 0x28], eax
call dword [sym.imp.SETUPAPI.dll_SetupDiOpenDeviceInterfaceA]
mov esi, dword [sym.imp.SETUPAPI.dll_SetupDiGetDeviceInterfaceDetailA]
lea eax, [esp + 0x14]
push 0
push eax
push 0
lea ecx, [esp + 0x28]
push 0
push ecx
push ebp
call esi
mov edx, dword [esp + 0x14]
push edx
call fcn.004033c6
mov ebx, eax
add esp, 4
lea eax, [esp + 0x38]
lea edx, [esp + 0x1c]
mov dword [ebx], 5
mov ecx, dword [esp + 0x14]
push eax
push 0
push ecx
push ebx
push edx
push ebp
call esi
push ebx
call fcn.004013c0
mov edi, eax
add esp, 4
cmp di, 0x1a
ja 0x402724
and eax, 0xffff
lea esi, [eax + eax*8]
shl esi, 5
add esi, eax
mov eax, dword [esp + 0x18]
shl esi, 2
push eax
push 0x40c10c
lea ecx, [esi + 0x40e392]
mov word [esi + 0x40e390], di
push ecx
call dword [sym.imp.USER32.dll_wsprintfA]
xor ecx, ecx
mov cx, word [esi + 0x40e812]
mov eax, ecx
shl eax, 6
add eax, ecx
shl eax, 3
lea edx, [eax + 0x40d03c]
lea eax, [eax + 0x40cf38]
push edx
push eax
push edi
call fcn.00401cf0
add esp, 0x18
push 0
push 0x401c30
call dword [sym.imp.USER32.dll_EnumWindows]
push ebp
call dword [sym.imp.SETUPAPI.dll_SetupDiDestroyDeviceInfoList]
push ebx
call fcn.00403397
add esp, 4
mov eax, 1
pop ebp
pop edi
pop esi
pop ebx
add esp, 0x444
ret
cmp eax, 2
jne 0x4027f0
push str.DeviceTypeDBT_DEVTYP_VOLUME_n
call fcn.00401100
add esp, 4
xor eax, eax
mov dword [0x417e24], edi
mov ecx, dword [esi + 0xc]
mov dword [esp + 0xc], eax
test cl, 1
jne 0x40278a
inc eax
shr ecx, 1
cmp ax, 0x1a
jb 0x402769
pop edi
mov dword [esp + 8], eax
pop esi
mov eax, 1
pop ebx
add esp, 0x444
ret
mov dword [esp + 0xc], eax
add al, 0x41
movsx ecx, al
push ecx
lea edx, [esp + 0x54]
push str._c:_
push edx
call fcn.0040346f
add esp, 0xc
lea eax, [esp + 0x50]
push eax
call dword [sym.imp.KERNEL32.dll_GetDriveTypeA]
cmp eax, 2
jne 0x40285b
mov ecx, dword [esp + 0xc]
push ecx
call fcn.004019c0
mov edx, dword [esp + 0x10]
add esp, 4
mov eax, edx
and eax, 0xffff
lea ecx, [eax + eax*8]
shl ecx, 5
add ecx, eax
mov ax, word [ecx*4 + 0x40e812]
test ax, ax
je 0x40285b
and eax, 0xffff
mov ecx, eax
jmp 0x40283a
cmp eax, edi
jne 0x40285b
push str.DeviceTypeDBT_DEVTYP_DEVNODE_n
call fcn.00401100
mov dword [0x417e24], 1
mov edx, dword [esi + 0xc]
lea ecx, [esp + 0x10]
push ecx
push edx
call fcn.00401a80
add esp, 0xc
test eax, eax
je 0x40285b
mov edx, dword [esp + 0xc]
mov eax, edx
and eax, 0xffff
lea esi, [eax + eax*8]
shl esi, 5
add esi, eax
xor ecx, ecx
mov cx, word [esi*4 + 0x40e812]
mov eax, ecx
shl eax, 6
add eax, ecx
shl eax, 3
lea ecx, [eax + 0x40d03c]
lea eax, [eax + 0x40cf38]
push ecx
push eax
push edx
call fcn.00401cf0
add esp, 0xc
pop edi
pop esi
mov eax, 1
pop ebx
add esp, 0x444
ret