Function at 0x40156d
Capabilities:
Get disk information

Disassembly:
mov eax, 0x40a40a
call fcn.004050f4
sub esp, 0x238
push ebx
push esi
push edi
mov ebx, ecx
push dword [ebp + 8]
push str.CDriveVolumeInfo::CreateSnapshot_Start__s
push 3
call fcn.0040116e
add esp, 0xc
cmp dword [0x40e2a8], 0x501
jl 0x4015c0
push str.kernel32.dll
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
test eax, eax
je 0x4015c0
push str.GetVolumePathNamesForVolumeNameA
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x40ead8], eax
mov ecx, ebx
call fcn.00401b54
test al, al
mov byte [ebp + 0xb], al
je 0x40161e
xor edi, edi
cmp dword [0x40ead8], edi
jne 0x40161e
mov ecx, ebx
call fcn.00401fbc
cmp dword [ebx + 0x34c88], edi
mov byte [ebp + 0xb], al
jle 0x40161e
lea esi, [ebx + 0xeac]
lea eax, [esi + 4]
push 0x200
push eax
push 0x80
push dword [esi]
lea eax, [esi - 0x500]
push eax
call fcn.00404638
add esp, 0x14
inc edi
add esi, 0x10e4
cmp edi, dword [ebx + 0x34c88]
jl 0x4015f0
push 0x6b0c
call fcn.00404cc1
pop ecx
mov dword [ebp - 0x14], eax
and dword [ebp - 4], 0
test eax, eax
je 0x401640
mov ecx, eax
call fcn.00401164
mov dword [ebp - 0x1c], eax
jmp 0x401644
and dword [ebp - 0x1c], 0
sub esp, 0x10
mov esi, 0x40b218
mov edi, esp
mov ecx, dword [ebp - 0x1c]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
or dword [ebp - 4], 0xffffffff
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call fcn.0040116f
push 0x6b0c
call fcn.00404cc1
pop ecx
mov dword [ebp - 0x14], eax
test eax, eax
mov dword [ebp - 4], 1
je 0x401683
mov ecx, eax
call fcn.00401164
mov dword [ebp - 0x18], eax
jmp 0x401687
and dword [ebp - 0x18], 0
sub esp, 0x10
mov esi, 0x40b208
mov edi, esp
mov ecx, dword [ebp - 0x18]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
or dword [ebp - 4], 0xffffffff
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call fcn.0040116f
push 0x6b0c
call fcn.00404cc1
pop ecx
mov dword [ebp - 0x14], eax
test eax, eax
mov dword [ebp - 4], 2
je 0x4016c6
mov ecx, eax
call fcn.00401164
mov dword [ebp - 0x14], eax
jmp 0x4016ca
and dword [ebp - 0x14], 0
sub esp, 0x10
mov esi, 0x40b1f8
mov edi, esp
mov ecx, dword [ebp - 0x14]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
or dword [ebp - 4], 0xffffffff
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call fcn.0040116f
and dword [ebp - 0x10], 0
cmp dword [ebx + 0x34c88], 0
jle 0x401947
lea esi, [ebx + 0x10b0]
mov eax, dword [esi + 4]
cmp eax, 5
jne 0x40170d
mov edi, dword [ebp - 0x18]
push str.CDROM
jmp 0x40172a
cmp eax, 2
jne 0x401722
cmp byte [esi + 0xe], 0
je 0x401722
mov edi, dword [ebp - 0x14]
push str.FLOPPY
jmp 0x40172a
mov edi, dword [ebp - 0x1c]
push str.DISK
lea eax, [ebp - 0x3c]
push eax
call fcn.00404900
xor eax, eax
pop ecx
cmp dword [edi + 0x6b08], eax
pop ecx
jle 0x4017cf
mov edx, dword [esi]
lea ecx, [edi + 0x10]
cmp dword [ecx], edx
je 0x40175d
inc eax
add ecx, 0x224
cmp eax, dword [edi + 0x6b08]
jl 0x401748
jmp 0x4017cf
imul eax, eax, 0x224
add edi, eax
lea eax, [edi + 0x11d]
push eax
call dword [sym.imp.KERNEL32.dll_GetDriveTypeA]
mov dword [esi + 8], eax
mov eax, dword [edi + 4]
mov dword [esi - 0xd28], eax
mov eax, dword [edi + 8]
mov dword [esi - 0xd24], eax
mov eax, dword [edi + 0xc]
mov dword [esi - 0xd20], eax
lea eax, [edi + 0x11d]
lea ecx, [esi - 0xa10]
push eax
push ecx
call fcn.00404900
add edi, 0x18
lea eax, [esi - 0x808]
push edi
push eax
call fcn.00404900
add esp, 0x10
lea eax, [esi - 0xa10]
push eax
push dword [ebp - 0x10]
push str._DiskDevicePath__i__s
push 5
call fcn.0040116e
add esp, 0x10
mov edi, dword [sym.imp.SETUPAPI.dll_CM_Get_Device_IDA]
lea eax, [esi - 0xd1c]
push 0
push 0x104
push eax
push dword [esi - 0xd28]
call edi
lea eax, [esi - 0xc18]
push 0
push 0x104
push eax
push dword [esi - 0xd24]
call edi
push 0
lea eax, [esi - 0xb14]
push 0x104
push eax
push dword [esi - 0xd20]
call edi
lea eax, [esi - 0xc18]
push eax
lea eax, [ebp - 0x140]
push eax
call fcn.00404900
and byte [ebp - 0x134], 0
lea eax, [esi - 0xd1c]
push eax
lea eax, [ebp - 0x244]
push eax
call fcn.00404900
and byte [ebp - 0x134], 0
lea eax, [ebp - 0x140]
push str.PCI_
push eax
call fcn.00404a30
lea ecx, [ebp - 0x140]
add esp, 0x18
cmp eax, ecx
jne 0x401895
lea eax, [ebp - 0x244]
push str.SCSI_
push eax
call fcn.00404a30
pop ecx
pop ecx
lea ecx, [ebp - 0x244]
cmp eax, ecx
jne 0x401895
mov dword [esi - 0xd34], 1
jmp 0x40192f
lea eax, [ebp - 0x140]
push str.PCIIDE_
push eax
call fcn.00404a30
pop ecx
pop ecx
lea ecx, [ebp - 0x140]
cmp eax, ecx
jne 0x4018ce
push 3
pop eax
cmp dword [esi + 4], eax
jne 0x4018c2
mov dword [esi - 0xd34], eax
jmp 0x40192f
mov dword [esi - 0xd34], 2
jmp 0x40192f
lea eax, [ebp - 0x140]
push str.USB_
push eax
call fcn.00404a30
pop ecx
pop ecx
lea ecx, [ebp - 0x140]
cmp eax, ecx
jne 0x4018f7
mov dword [esi - 0xd34], 7
jmp 0x40192f
lea eax, [ebp - 0x140]
push str.SBP2_
push eax
call fcn.00404a30
pop ecx
test eax, eax
pop ecx
jne 0x401925
lea eax, [ebp - 0x140]
push str.1394_
push eax
call fcn.00404a30
pop ecx
test eax, eax
pop ecx
je 0x40192f
mov dword [esi - 0xd34], 4
inc dword [ebp - 0x10]
add esi, 0x10e4
mov eax, dword [ebp - 0x10]
cmp eax, dword [ebx + 0x34c88]
jl 0x4016fb
xor esi, esi
cmp dword [ebp - 0x1c], esi
je 0x40195f
mov ecx, dword [ebp - 0x1c]
call fcn.0040116e
push dword [ebp - 0x1c]
call fcn.00404cbc
pop ecx
cmp dword [ebp - 0x18], esi
je 0x401975
mov ecx, dword [ebp - 0x18]
call fcn.0040116e
push dword [ebp - 0x18]
call fcn.00404cbc
pop ecx
mov eax, dword [ebx + 0x34c88]
mov dword [ebp - 0x10], esi
cmp eax, esi
jle 0x401a6c
mov dword [ebp - 0x14], 0xffffef34
sub dword [ebp - 0x14], ebx
lea esi, [ebx + 0x10cc]
xor ecx, ecx
test eax, eax
jle 0x401a10
lea edx, [ebx + 0x10b4]
mov dword [ebp - 0x18], edx
mov eax, dword [edx - 0xd28]
cmp eax, dword [esi - 0xd40]
jne 0x4019fe
mov eax, dword [ebp - 0x14]
mov edi, dword [esi]
add eax, esi
lea edx, [eax + ebx]
mov byte [edx + edi + 0x10bf], cl
mov edx, dword [ebp - 0x18]
inc dword [esi]
mov edi, dword [edx - 4]
cmp edi, dword [esi - 0x1c]
jne 0x4019de
add eax, dword [esi + 0x10]
mov byte [eax + ebx + 0x10d0], cl
inc dword [esi + 0x10]
cmp dword [esi - 0xd50], 7
jne 0x4019fe
mov eax, dword [edx]
mov edi, dword [esi - 0x18]
cmp eax, edi
je 0x4019fe
cmp eax, 5
je 0x4019fa
cmp edi, 5
jne 0x4019fe
mov byte [esi - 0xf], 1
inc ecx
add edx, 0x10e4
cmp ecx, dword [ebx + 0x34c88]
mov dword [ebp - 0x18], edx
jl 0x4019a5
cmp byte [esi - 0xf], 0
jne 0x401a54
cmp dword [esi - 0x18], 3
je 0x401a54
lea edi, [esi - 0xe10]
push str._U3
push edi
call fcn.00404a30
pop ecx
test eax, eax
pop ecx
je 0x401a37
mov byte [esi - 0xf], 1
cmp byte [edi], 0x55
jne 0x401a54
cmp byte [esi - 0xe0f], 0x33
lea eax, [esi - 0xe0e]
jne 0x401a54
cmp byte [eax], 0x20
jne 0x401a54
mov byte [esi - 0xf], 1
inc dword [ebp - 0x10]
mov eax, dword [ebx + 0x34c88]
add esi, 0x10e4
cmp dword [ebp - 0x10], eax
jl 0x401996
push str.______________
push 3
call fcn.0040116e
and dword [ebp - 0x10], 0
cmp dword [ebx + 0x34c88], 0
pop ecx
pop ecx
jle 0x401b17
lea esi, [ebx + 0x10be]
lea eax, [esi - 0x20e]
lea edi, [esi - 0x10be]
push eax
movzx eax, byte [esi]
push dword [esi - 0xe]
push eax
push dword [esi - 0xd42]
push edi
push dword [ebp - 0x10]
push str.vol__i__s_bus_i_floppy_i_devnum_i_mp_s
push 3
call fcn.0040116e
add esp, 0x20
cmp byte [edi], 0
jne 0x401aff
lea eax, [esi - 0x108a]
push eax
push str.__vmp_s
push 3
call fcn.0040116e
add esp, 0xc
lea eax, [esi - 0xe02]
push eax
lea eax, [esi - 0xf86]
push eax
push dword [esi - 0xd32]
push dword [esi - 0xe]
push str.__dev_i_cdi_i_dos_s_fn_s
push 3
call fcn.0040116e
add esp, 0x18
inc dword [ebp - 0x10]
add esi, 0x10e4
mov eax, dword [ebp - 0x10]
cmp eax, dword [ebx + 0x34c88]
jl 0x401a91
push str.______________
push 3
call fcn.0040116e
pop ecx
pop ecx
push dword [ebx + 0x34c8c]
push dword [ebx + 0x34c88]
push str.CDriveVolumeInfo::CreateSnapshot_Finish__Count_i_CountReady_i
push 3
call fcn.0040116e
mov ecx, dword [ebp - 0xc]
mov al, byte [ebp + 0xb]
add esp, 0x10
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
leave
ret 4