Function at 0x411eb0
Capabilities:
Get disk information

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x634
mov eax, dword [0x43f004]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [0x4403e4]
xorps xmm0, xmm0
push ebx
push esi
push edi
mov dword [ebp - 0x414], eax
xor edi, edi
mov eax, dword [0x4403e0]
mov esi, 0x41
mov dword [ebp - 0x41c], eax
mov dword [ebp - 0x40c], 0
mov dword [ebp - 0x410], edi
movlpd qword [ebp - 0x430], xmm0
call dword [sym.imp.KERNEL32.dll_GetLogicalDrives]
mov ebx, eax
test ebx, ebx
je 0x411f47
nop word [eax + eax]
test bl, 1
je 0x411f3c
xor edx, edx
mov dword [ebp + edi*4 - 0x408], esi
mov ecx, esi
call fcn.00408c00
push eax
push esi
push str.Logical_Drive:_C____PhyDrive:_d
mov dword [ebp + edi*4 - 0x208], eax
call fcn.0040ffe0
add esp, 0xc
inc edi
inc esi
shr ebx, 1
jne 0x411f10
mov dword [ebp - 0x410], edi
mov eax, dword [ebp - 0x414]
test eax, eax
je 0x41226e
mov ebx, dword [ebp - 0x41c]
add ebx, 0x264
mov dword [ebp - 0x418], eax
nop word [eax + eax]
push 0x40
lea eax, [ebx - 0x40]
mov dword [ebx - 0x264], 0xffffffff
xorps xmm0, xmm0
push 0
push eax
movlpd qword [ebp - 0x428], xmm0
call fcn.0041a3d0
add esp, 0xc
cmp dword [0x4403dc], 0
je 0x411fc7
cmp dword [ebx - 0x248], 0
jne 0x411fc7
lea eax, [ebx - 0x1c4]
push eax
lea eax, [ebx - 0x244]
push eax
push str.__s__s__is_filtered_for_not_removable.
call fcn.0040ffe0
add esp, 0xc
jmp 0x412220
cmp dword [0x43f8b8], 0
je 0x411ff6
cmp dword [ebx - 0x44], 7
je 0x411ff6
lea eax, [ebx - 0x1c4]
push eax
lea eax, [ebx - 0x244]
push eax
push str.__s__s__is_filtered_for_not_USB_type.
call fcn.0040ffe0
add esp, 0xc
jmp 0x412220
mov esi, dword [ebp - 0x40c]
xor edx, edx
mov dword [ebx - 0x264], esi
inc esi
mov dword [ebp - 0x40c], esi
test edi, edi
jle 0x412045
lea ecx, [edx + 1]
nop dword [eax]
nop word [eax + eax]
mov eax, dword [ebp + edx*4 - 0x208]
cmp eax, dword [ebx - 0x260]
jne 0x412040
cmp ecx, 0x40
jae 0x41203f
mov al, byte [ebp + edx*4 - 0x408]
mov byte [ebx + ecx - 0x41], al
inc ecx
inc edx
cmp edx, edi
jl 0x412020
mov ecx, dword [ebx - 0x260]
lea eax, [ebp - 0x428]
push eax
lea eax, [ebp - 0x430]
push eax
sub esp, 8
lea edx, [ebp - 0x630]
call fcn.004117a0
add esp, 0x10
test eax, eax
je 0x412226
xor eax, eax
lea edi, [ebx + 0x24]
cmp byte [ebp - 0x46e], 0xee
lea esi, [ebp - 0x630]
mov ecx, 0x80
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [ebp - 0x424]
sete al
push ecx
mov dword [ebx - 0x25c], eax
xor dl, dl
mov eax, dword [ebp - 0x428]
mov dword [ebx + 0x228], ecx
mov ecx, dword [ebx - 0x260]
push 0
mov dword [ebx + 0x224], eax
call fcn.00408910
mov edi, eax
add esp, 8
cmp edi, 0xffffffff
je 0x4121ee
mov eax, dword [ebp - 0x430]
mov ecx, dword [ebp - 0x42c]
push str.Parse_FAT_fs...
mov dword [0x441448], edi
mov dword [0x4414d8], eax
mov dword [0x4414dc], ecx
call fcn.0040ffe0
add esp, 4
call fcn.00404710
cmp dword [0x441238], 0
jne 0x412107
call fcn.00404710
mov ecx, 0x440538
mov dword [0x44056c], 0x409740
mov dword [0x440570], 0
call fcn.00403750
test eax, eax
je 0x412152
push eax
push str.FAT_FS:_Error_could_not_load_FAT_details___d___r_n
call fcn.0040ffe0
push str.attach_media_failed...
call fcn.0040ffe0
add esp, 0xc
push 1
push str.GetVentoyVerInPhyDrive_rc_d...
call fcn.0040ffe0
add esp, 8
jmp 0x4121b9
push str.attach_media_success...
mov dword [0x440414], 1
call fcn.0040ffe0
add esp, 4
mov ecx, ebx
call fcn.00409590
mov esi, eax
push esi
push str.GetVentoyVerInPhyDrive_rc_d...
call fcn.0040ffe0
add esp, 8
test esi, esi
jne 0x4121b9
push ebx
push dword [ebx - 0x260]
push str.VentoyVerInPhyDrive__d_is___s_...
call fcn.0040ffe0
add esp, 0xc
mov edx, 0x4388d4
mov ecx, str._EFI_BOOT_grubx64_real.efi
call fcn.004047c0
test eax, eax
je 0x4121b9
mov ecx, eax
mov dword [ebx + 0x20], 1
call fcn.00404ab0
cmp dword [0x441238], 0
jne 0x4121c7
call fcn.00404710
mov eax, dword [0x440574]
test eax, eax
je 0x4121d2
call eax
mov ecx, 0x440538
call fcn.004059a0
mov eax, dword [0x440578]
test eax, eax
je 0x4121e7
call eax
push edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push dword [ebx + 0x20]
push ebx
push dword [ebx - 0x260]
push str.PhyDrive__d_is_Ventoy_Disk_ver:_s_SecureBoot:_u
call fcn.0040ffe0
add esp, 0x10
cmp byte [ebx], 0
jne 0x41221a
push str.Unknown_Ventoy_Version
mov byte [ebx], 0x3f
call fcn.0040ffe0
add esp, 4
mov edi, dword [ebp - 0x410]
mov esi, dword [ebp - 0x40c]
add ebx, 0x4930
sub dword [ebp - 0x418], 1
jne 0x411f70
mov eax, dword [ebp - 0x41c]
mov ecx, dword [ebp - 0x414]
cmp dword [eax], 0
jge 0x412251
mov dword [eax + 4], 0xffffff
add eax, 0x4930
sub ecx, 1
jne 0x412245
mov eax, esi
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00418e9d
mov esp, ebp
pop ebp
ret
mov ecx, dword [ebp - 4]
xor eax, eax
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.00418e9d
mov esp, ebp
pop ebp
ret