Function at 0x4140ba
Capabilities:
Get disk information

Disassembly:
push ebp
lea ebp, [esp - 0x70]
mov ecx, dword [0x508068]
sub esp, 0x530
push ebx
xor ebx, ebx
cmp ecx, ebx
je 0x414d97
push esi
mov esi, dword [ebp + 0x78]
push esi
call fcn.0040121c
test eax, eax
je 0x414d96
mov ecx, dword [0x508068]
push esi
call fcn.0040491e
push str.DDI_1
push 3
call fcn.00449e4d
push str._r_n_________Device_Information__r_n
call fcn.0040e92d
lea eax, [esi + 0x1738]
add esp, 0xc
cmp word [eax], bx
je 0x414125
push eax
push str.Friendly_Name____________:__s_r_n
call fcn.0040e980
pop ecx
pop ecx
lea eax, [esi + 0x1838]
cmp word [eax], bx
je 0x41413d
push eax
push str.Device_Description_______:__s_r_n
call fcn.0040e980
pop ecx
pop ecx
push edi
push esi
call fcn.004135a0
mov edi, dword [sym.imp.USER32.dll_wsprintfW]
cmp dword [esi + 0x3a30], ebx
je 0x4141f7
cmp dword [esi + 0x3a24], 0xffffffff
jle 0x4141f7
xor eax, eax
push 0x7e
mov word [ebp - 0x40], ax
lea eax, [ebp - 0x3e]
push ebx
push eax
call fcn.00444396
mov eax, dword [esi + 0x3a28]
add esp, 0xc
cmp eax, 1
jne 0x414190
push dword [esi + 0x3a24]
push str..PhysicalDrive_i
jmp 0x4141b2
cmp eax, 2
jne 0x4141a2
push dword [esi + 0x3a24]
push str..CdRom_i
jmp 0x4141b2
cmp eax, 3
jne 0x4141bb
push dword [esi + 0x3a24]
push str..Floppy_i
lea eax, [ebp - 0x40]
push eax
call edi
add esp, 0xc
push 0x104
lea eax, [ebp - 0x2c8]
push eax
lea eax, [ebp - 0x38]
push eax
call dword [sym.imp.KERNEL32.dll_QueryDosDeviceW]
test eax, eax
je 0x4141f7
lea eax, [ebp - 0x40]
push eax
push str.Win32_Name_______________:__s_r_n
call fcn.0040e980
lea eax, [ebp - 0x2c8]
push eax
push str.Kernel_Name______________:__s_r_n
call fcn.0040e980
add esp, 0x10
lea edi, [esi + 0xe38]
push edi
push str.Device_ID________________:__s_r_n
call fcn.0040e980
pop ecx
pop ecx
push str.PCIVEN_
push edi
call dword [sym.imp.SHLWAPI.dll_StrStrW]
test eax, eax
je 0x414220
push edi
call fcn.0041bc4c
lea edi, [esi + 0x32fc]
cmp dword [edi], ebx
je 0x414257
push str.Hardware_IDs_____________:
call fcn.0040e92d
jmp 0x414245
push eax
push 0x459500
call fcn.0040e980
pop ecx
add edi, 4
mov eax, dword [edi]
pop ecx
cmp eax, ebx
jne 0x414236
push 0x453208
call fcn.0040e92d
pop ecx
push str.DDI_2
push 3
call fcn.00449e4d
lea eax, [esi + 0x1c38]
pop ecx
pop ecx
mov edi, eax
cmp word [eax], bx
jne 0x414277
mov edi, 0x44f050
push eax
call fcn.00411fbd
push eax
push edi
push str.Driver_KeyName___________:__s_s
call fcn.0040e980
mov edi, 0x453208
push edi
call fcn.0040e92d
lea eax, [esi + 0x33f8]
add esp, 0x10
cmp word [eax], bx
je 0x4142c5
lea ecx, [esi + 0x3868]
push ecx
lea ecx, [esi + 0x3848]
push ecx
lea ecx, [esi + 0x3808]
push ecx
push eax
push str.Driver___________________:__s__Version:__s__Date:__s__Company:__s__r_n
call fcn.0040e980
add esp, 0x14
lea eax, [esi + 0x3600]
cmp word [eax], bx
je 0x4142dd
push eax
push str.Driver_Inf_______________:__s_r_n
call fcn.0040e980
pop ecx
pop ecx
push str.DDI_3
push 3
call fcn.00449e4d
mov eax, dword [esi + 0x39d8]
pop ecx
pop ecx
cmp eax, 0x14
ja 0x4142ff
mov eax, dword [eax*4 + 0x49e120]
jmp 0x414304
mov eax, str.undefined
push eax
push str.Legacy_BusType___________:__s_r_n
call fcn.0040e92d
lea eax, [esi + 0x1e12]
pop ecx
pop ecx
cmp word [eax], bx
je 0x414329
push eax
push str.Class____________________:__s_r_n
call fcn.0040e980
pop ecx
pop ecx
lea eax, [esi + 0x1e92]
cmp word [eax], bx
je 0x414360
push eax
push str.Class_GUID_______________:__s
call fcn.0040e980
lea eax, [esi + 0x1eec]
pop ecx
pop ecx
cmp word [eax], bx
je 0x414359
push eax
push str.___s_
call fcn.0040e980
pop ecx
pop ecx
push edi
call fcn.0040e92d
pop ecx
push str.DDI_4
push 3
call fcn.00449e4d
lea eax, [esi + 0x1f70]
pop ecx
pop ecx
cmp word [eax], bx
je 0x414386
push eax
push str.Service__________________:__s_r_n
call fcn.0040e980
pop ecx
pop ecx
lea eax, [esi + 0x1d92]
cmp word [eax], bx
je 0x41439e
push eax
push str.Enumerator_______________:__s_r_n
call fcn.0040e980
pop ecx
pop ecx
lea edi, [esi + 0x1c92]
cmp word [edi], bx
je 0x4143c8
lea eax, [esi + 0x10a8]
push eax
push edi
call dword [sym.imp.KERNEL32.dll_lstrcmpW]
test eax, eax
je 0x4143c8
push edi
push str.PDO______________________:__s_r_n
call fcn.0040e980
pop ecx
pop ecx
lea eax, [esi + 0x1b38]
cmp word [eax], bx
jne 0x4143d8
mov eax, 0x44f050
push eax
push str.Location_Info____________:__s_r_n
call fcn.0040e980
push dword [esi + 0x39dc]
push str.Address__________________:__u
call fcn.0040e980
mov eax, dword [esi + 0x39dc]
add esp, 0x10
cmp eax, 0x7f
jb 0x41440e
push eax
push str.__0x_X_
call fcn.0040e980
pop ecx
pop ecx
push 0x4587e8
call fcn.0040e980
mov dword [esp], str.DDI_5
push 3
call fcn.00449e4d
mov eax, dword [esi + 0xc]
pop ecx
pop ecx
cmp eax, 3
je 0x41443a
cmp eax, 6
je 0x41443a
cmp eax, 9
jne 0x41449f
lea eax, [esi + 0x2afc]
cmp word [eax], bx
je 0x414461
push eax
call fcn.00426da3
mov edi, eax
push edi
push str.Location_IDs_____________:__s_r_n
call fcn.0040e980
push edi
call fcn.004445cb
add esp, 0xc
lea edi, [esi + 0x3968]
cmp word [edi], bx
je 0x41449f
push edi
push str.Container_ID_____________:__s
call fcn.0040e980
pop ecx
pop ecx
push str.00000000_0000_0000_ffff_ffffffffffff
push edi
call dword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
jne 0x414494
push str.__GUID_CONTAINERID_INTERNALLY_CONNECTED_DEVICE_
call fcn.0040e92d
pop ecx
push 0x453208
call fcn.0040e92d
pop ecx
push str.DDI_6
push 3
call fcn.00449e4d
lea eax, [esi + 0x2078]
pop ecx
pop ecx
cmp word [eax], bx
jne 0x4144bd
mov eax, 0x44f050
push eax
push str.Manufacturer_Info________:__s_r_n
call fcn.0040e980
pop ecx
pop ecx
lea edi, [esi + 0x39d4]
push dword [edi]
call fcn.0044550b
push eax
push dword [edi]
push str.Capabilities_____________:_0x_02X___s__r_n
call fcn.0040e92d
add esp, 0xc
lea edi, [esi + 0x39e4]
push dword [edi]
call fcn.00445a47
push eax
push dword [edi]
push str.Status___________________:_0x_08X___s__r_n
call fcn.0040e92d
push dword [esi + 0x39e8]
push str.Problem_Code_____________:__u
call fcn.0040e92d
mov eax, dword [esi + 0x39e8]
add esp, 0x14
cmp eax, ebx
je 0x414531
push eax
call fcn.00445383
push eax
push str.___s_
call fcn.0040e92d
pop ecx
pop ecx
push 0x453208
call fcn.0040e92d
mov dword [esp], str.DDI_7
push 3
call fcn.00449e4d
lea eax, [esi + 0x333c]
pop ecx
pop ecx
mov edi, 0x200
cmp dword [eax], ebx
je 0x41457b
push edi
lea ecx, [ebp - 0x4c0]
push ecx
push eax
call fcn.004275eb
lea eax, [ebp - 0x4c0]
push eax
push str.Upper_Filters____________:__s_r_n
call fcn.0040e980
pop ecx
pop ecx
push str.DDI_8
push 3
call fcn.00449e4d
lea eax, [esi + 0x337c]
pop ecx
pop ecx
cmp dword [eax], ebx
je 0x4145b4
push edi
lea ecx, [ebp - 0x4c0]
push ecx
push eax
call fcn.004275eb
lea eax, [ebp - 0x4c0]
push eax
push str.Lower_Filters____________:__s_r_n
call fcn.0040e980
pop ecx
pop ecx
mov edi, dword [sym.imp.KERNEL32.dll_lstrcmpW]
push 0x44fd68
lea eax, [esi + 0x1e12]
push eax
call edi
test eax, eax
je 0x4145e2
push 0x44fd68
lea eax, [esi + 0x1f70]
push eax
call edi
test eax, eax
jne 0x4146ab
push str.DDI_9
push 3
call fcn.00449e4d
mov eax, dword [esi + 0x39e0]
pop ecx
pop ecx
cmp eax, ebx
jne 0x414681
push 0x3c
lea eax, [ebp + 4]
push ebx
push eax
mov dword [ebp], 0x2d
call fcn.00444396
mov eax, dword [esi + 0x39dc]
add esp, 0xc
cmp eax, 0xffffffff
je 0x41464c
push eax
cmp eax, 0x7f
jb 0x41463a
push eax
lea eax, [ebp]
push str._u__0x_X_
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x10
jmp 0x41464c
lea eax, [ebp]
push 0x451c1c
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
lea eax, [ebp]
push eax
push str.Address__________________:__s
call fcn.0040e980
mov eax, dword [esi + 0xc]
pop ecx
pop ecx
cmp eax, 9
je 0x414669
cmp eax, 6
jne 0x4146a0
movzx eax, byte [ebp + 0x7c]
cmp dword [esi + 0x39dc], eax
je 0x4146a0
push str.____strange__usually_this_is_equal_to_the_USB_port_number_
call fcn.0040e92d
jmp 0x41469f
cmp eax, 0x1d
jne 0x41468d
push str.TIMEOUT
jmp 0x414694
push eax
call fcn.00445a19
push eax
push str.Address__________________:__s
call fcn.0040e92d
pop ecx
pop ecx
push 0x453208
call fcn.0040e92d
pop ecx
push str.DDI_10
push 3
call fcn.00449e4d
mov eax, dword [esi + 0x39b8]
or edi, 0xffffffff
pop ecx
pop ecx
cmp eax, edi
je 0x4146d3
push eax
push str.HcDisableSelectiveSuspend:__u_r_n
call fcn.0040e92d
pop ecx
pop ecx
mov eax, dword [esi + 0x39bc]
cmp eax, edi
je 0x4146ea
push eax
push str.EnableSelectiveSuspend___:__u_r_n
call fcn.0040e92d
pop ecx
pop ecx
mov eax, dword [esi + 0x39c0]
cmp eax, edi
je 0x414701
push eax
push str.SelectiveSuspendEnabled__:__u_r_n
call fcn.0040e92d
pop ecx
pop ecx
mov eax, dword [esi + 0x39c4]
cmp eax, edi
je 0x414718
push eax
push str.EnhancedPowerMgmtEnabled_:__u_r_n
call fcn.0040e92d
pop ecx
pop ecx
mov eax, dword [esi + 0x39c8]
cmp eax, edi
je 0x41472f
push eax
push str.IdleInWorkingState_______:__u_r_n
call fcn.0040e92d
pop ecx
pop ecx
mov eax, dword [esi + 0x39cc]
cmp eax, edi
je 0x414746
push eax
push str.WakeFromSleepState_______:__u_r_n
call fcn.0040e92d
pop ecx
pop ecx
mov eax, dword [esi + 0x39f0]
cmp eax, ebx
je 0x414786
dec eax
push eax
push str.Power_State______________:_D_u
call fcn.0040e92d
mov eax, dword [esi + 0x39f4]
pop ecx
pop ecx
cmp eax, ebx
je 0x41477b
push eax
call fcn.00411f5f
push eax
push str.__supported:__s_
call fcn.0040e92d
pop ecx
pop ecx
push 0x453208
call fcn.0040e92d
pop ecx
push 0x44f4d0
lea edi, [esi + 0xfc8]
push edi
call fcn.00427780
test eax, eax
je 0x4147ba
lea eax, [esi + 0x13b0]
cmp word [eax], bx
jne 0x4147ab
mov eax, str.none_assigned
push eax
push edi
push str.COM_Port_________________:__s___s__r_n
call fcn.0040e980
add esp, 0xc
cmp dword [0x49db08], ebx
jne 0x41487c
push 0x458fd4
lea eax, [esi + 0x1f70]
push eax
call dword [sym.imp.SHLWAPI.dll_StrStrIW]
test eax, eax
jne 0x41487c
cmp dword [esi + 0x39e8], ebx
jne 0x41487c
push str.DDI_11
push 3
call fcn.00449e4d
pop ecx
pop ecx
cmp dword [esi + 0x82c], ebx
jne 0x41482f
mov ecx, dword [0x508068]
push 0x200
lea eax, [esi + 0x2c]
push eax
push dword [esi + 0x10]
call fcn.00401668
push eax
push str.DDI_12_n_i
push 3
mov dword [esi + 0x82c], eax
call fcn.00449e4d
add esp, 0xc
xor edi, edi
cmp dword [esi + 0x82c], ebx
jle 0x41487c
lea eax, [esi + 0x2c]
mov dword [ebp + 0x7c], eax
mov eax, dword [ebp + 0x7c]
mov eax, dword [eax]
mov dword [ebp + 0x78], eax
cmp eax, ebx
je 0x41486f
cmp dword [0x512584], 5
jl 0x414864
push edi
push str.DDI_13_i_i
push 5
call fcn.00449e4d
add esp, 0xc
push 1
push edi
push dword [ebp + 0x78]
call fcn.00413cff
add dword [ebp + 0x7c], 4
inc edi
cmp edi, dword [esi + 0x82c]
jl 0x41483f
mov dword [ebp + 0x78], ebx
cmp word [esi + 0x1088], bx
je 0x4148ae
cmp dword [0x49db08], ebx
jne 0x4148ae
push esi
call fcn.00411d80
cmp dword [0x49db08], ebx
jne 0x414d2c
push ebx
push esi
call fcn.00411e36
jmp 0x414d2c
mov eax, dword [esi + 0x3a30]
cmp eax, ebx
je 0x4148cb
cmp dword [esi + 0x3a2c], ebx
jne 0x4148d7
push esi
call fcn.00411d80
jmp 0x414d2c
cmp dword [esi + 0x3a2c], ebx
je 0x414a5c
cmp eax, ebx
je 0x4148e1
push esi
call fcn.00411d80
mov edi, dword [esi + 0x3a78]
cmp edi, ebx
je 0x414d2c
lea eax, [edi + 0x848]
mov dword [ebp + 0x68], eax
cmp word [eax], bx
jne 0x414902
mov eax, 0x450854
push eax
push str.Volume_Name______________:__S_r_n
call fcn.0040e92d
cmp dword [esi + 0x3a28], 3
pop ecx
pop ecx
jne 0x41491e
push esi
call fcn.00411c84
push ebx
lea eax, [edi + 0x930]
push eax
call fcn.00411b35
cmp word [edi + 0x3264], bx
je 0x41496c
lea eax, [edi + 0x3278]
push eax
push str.Volume_Label_____________:__S_r_n
call fcn.0040e92d
lea eax, [edi + 0x3264]
push eax
push str.Volume_Serial____________:__S_r_n
call fcn.0040e92d
lea eax, [edi + 0x347a]
push eax
push str.File_System______________:__S_r_n
call fcn.0040e92d
add esp, 0x18
jmp 0x414989
mov eax, dword [edi + 0x34f4]
cmp eax, ebx
je 0x414989
push eax
call fcn.004455fb
push eax
push str.Volume_Info_Error________:__s_r_n
call fcn.0040e92d
pop ecx
pop ecx
lea ecx, [edi + 0x31e0]
cmp word [ecx], bx
je 0x4149c9
cmp dword [edi + 0x31dc], ebx
jl 0x4149c1
jg 0x4149aa
cmp dword [edi + 0x31d8], 0x200
jb 0x4149c1
lea eax, [edi + 0x3220]
cmp word [eax], bx
je 0x4149c1
push eax
push ecx
push str.Size_____________________:__S___S_available__r_n
jmp 0x414a42
push ecx
push str.Size_____________________:__S_r_n
jmp 0x4149d9
lea eax, [edi + 0x34ba]
cmp byte [eax], bl
je 0x4149e2
push eax
push str.Hint_____________________:__s_r_n
call fcn.0040e92d
pop ecx
pop ecx
jmp 0x414a4a
xor eax, eax
push 0x7e
mov word [ebp - 0xc0], ax
lea eax, [ebp - 0xbe]
push ebx
push eax
call fcn.00444396
push dword [edi + 0x844]
lea eax, [ebp - 0xc0]
push dword [edi + 0x840]
push str.DeviceHarddisk_iPartition_i
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x1c
lea eax, [ebp + 0x7c]
push eax
lea eax, [ebp - 0xc0]
push eax
mov dword [ebp + 0x7c], ebx
call fcn.0044c4d9
movzx eax, ax
cmp ax, bx
je 0x414a4a
movzx eax, ax
push eax
push dword [ebp + 0x7c]
push str.Hint_____________________:__S_Container_for__c:_r_n
call fcn.0040e92d
add esp, 0xc
push dword [ebp + 0x68]
lea eax, [ebp - 0x24]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp 0x414d2c
push 0x451884
lea edi, [esi + 0x1e12]
push edi
call dword [sym.imp.SHLWAPI.dll_StrStrIW]
test eax, eax
je 0x414b1e
push ebx
push ebx
push 3
push ebx
push 3
push ebx
lea eax, [esi + 0xc30]
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp + 0x78], eax
cmp eax, 0xffffffff
je 0x414d2c
xor eax, eax
mov word [ebp + 0x40], ax
mov word [ebp + 0x7c], ax
lea edi, [ebp + 0x42]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
push ebx
stosw word es:[edi], ax
lea eax, [ebp + 0x68]
push eax
push 0xc
lea eax, [ebp + 0x40]
push eax
push 2
lea eax, [ebp + 0x7c]
push eax
push 0xf0000
push dword [ebp + 0x78]
mov dword [ebp + 0x68], ebx
call dword [sym.imp.KERNEL32.dll_DeviceIoControl]
test eax, eax
je 0x414d2c
push str._r_n______________Mouse_Information__r_n
call fcn.0040e92d
push dword [ebp + 0x48]
push str.Input_Data_Queue_Length__:__u_r_n
call fcn.0040e92d
movzx eax, word [ebp + 0x40]
push eax
push str.Mouse_Identifier_________:__u_r_n
call fcn.0040e92d
movzx eax, word [ebp + 0x42]
push eax
push str.Number_of_Buttons________:__u_r_n
call fcn.0040e92d
movzx eax, word [ebp + 0x44]
push eax
push str.Sample_Rate______________:__u_r_n
call fcn.0040e92d
add esp, 0x24
jmp 0x414d2c
push 0x451870
push edi
call dword [sym.imp.SHLWAPI.dll_StrStrIW]
test eax, eax
je 0x414ccd
push ebx
push ebx
push 3
push ebx
push 3
push ebx
lea eax, [esi + 0xc30]
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp + 0x78], eax
cmp eax, 0xffffffff
je 0x414d2c
push 6
pop ecx
xor eax, eax
mov byte [ebp + 0x4c], bl
lea edi, [ebp + 0x4d]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
push ebx
stosb byte es:[edi], al
lea eax, [ebp + 0x7c]
push eax
push 0x1c
lea eax, [ebp + 0x4c]
push eax
push 0x1c
push eax
push 0xb0000
push dword [ebp + 0x78]
mov dword [ebp + 0x7c], ebx
call dword [sym.imp.KERNEL32.dll_DeviceIoControl]
test eax, eax
je 0x414c6d
push str._r_n______________Keyboad_Information__r_n
call fcn.0040e92d
cmp byte [ebp + 0x4c], 0x51
pop ecx
mov eax, str.__HID_
je 0x414ba5
mov eax, 0x4507c1
push eax
movzx eax, byte [ebp + 0x4c]
push eax
push str.Keyboard_ID.Type_________:_0x_X_s_r_n
call fcn.0040e92d
movzx eax, byte [ebp + 0x4d]
push eax
push str.Keyboard_ID.Subtype______:__u_r_n
call fcn.0040e92d
movzx eax, word [ebp + 0x4e]
push eax
push str.Keyboard_Mode____________:__u_r_n
call fcn.0040e92d
movzx eax, word [ebp + 0x50]
push eax
push str.Number_of_Function_Keys__:__u_r_n
call fcn.0040e92d
movzx eax, word [ebp + 0x52]
push eax
push str.Number_of_Indicators_____:__u_r_n
call fcn.0040e92d
movzx eax, word [ebp + 0x54]
push eax
push str.Number_of_Keys_Total_____:__u_r_n
call fcn.0040e92d
push dword [ebp + 0x58]
push str.Input_Data_Queue_Length__:__u_r_n
call fcn.0040e92d
movzx eax, word [ebp + 0x5c]
push eax
push str.Key_Repeat_Minimum.UnitId:__u_r_n
call fcn.0040e92d
movzx eax, word [ebp + 0x5e]
add esp, 0x44
push eax
push str.Key_Repeat_Minimum.Rate__:__u_per_second_r_n
call fcn.0040e92d
movzx eax, word [ebp + 0x60]
push eax
push str.Key_Repeat_Minimum.Delay_:__u_ms_r_n
call fcn.0040e92d
movzx eax, word [ebp + 0x62]
push eax
push str.Key_Repeat_Maximum.UnitId:__u_r_n
call fcn.0040e92d
movzx eax, word [ebp + 0x64]
push eax
push str.Key_Repeat_Maximum.Rate__:__u_per_second_r_n
call fcn.0040e92d
movzx eax, word [ebp + 0x66]
push eax
push str.Key_Repeat_Maximum.Delay_:__u_ms_r_n
call fcn.0040e92d
add esp, 0x28
xor eax, eax
push ebx
mov word [ebp + 0x68], ax
lea edi, [ebp + 0x6a]
stosd dword es:[edi], eax
lea eax, [ebp + 0x7c]
push eax
push 6
lea eax, [ebp + 0x68]
push eax
push 6
push eax
push 0xb0020
push dword [ebp + 0x78]
call dword [sym.imp.KERNEL32.dll_DeviceIoControl]
test eax, eax
je 0x414d2c
movzx eax, word [ebp + 0x68]
push eax
push str.Key_Repeat_UnitId________:__u_r_n
call fcn.0040e92d
movzx eax, word [ebp + 0x6a]
push eax
push str.Key_Repeat_Rate__________:__u_per_second_r_n
call fcn.0040e92d
movzx eax, word [ebp + 0x6c]
push eax
push str.Key_Repeat_Delay_________:__u_ms_r_n
call fcn.0040e92d
add esp, 0x18
jmp 0x414d2c
push 0x451834
push edi
call dword [sym.imp.SHLWAPI.dll_StrStrIW]
test eax, eax
je 0x414d2c
cmp dword [esi + 8], ebx
je 0x414d2c
lea edi, [esi + 0xc30]
cmp word [edi], bx
jne 0x414d1b
cmp dword [esi + 0x10], ebx
je 0x414d16
push ebx
push 0x104
push edi
lea eax, [esi + 0xe38]
push eax
push 0x44e7b0
call dword [sym.imp.CFGMGR32.dll_CM_Get_Device_Interface_ListW]
test eax, eax
jne 0x414d16
push ebx
call dword [sym.imp.KERNEL32.dll_Sleep]
cmp word [edi], bx
je 0x414d2c
push edi
lea ecx, [ebp + 0x7f]
call fcn.0040db1f
lea ecx, [ebp + 0x7f]
call fcn.0040db17
push str.HIDClass
lea eax, [esi + 0x1e12]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpW]
test eax, eax
je 0x414d66
mov edi, dword [sym.imp.SHLWAPI.dll_StrStrIW]
push str.4d1e55b2_f16f_11cf_88cb_001111000030
lea ebx, [esi + 0xc30]
push ebx
call edi
test eax, eax
jne 0x414d66
push str.HID
push ebx
call edi
test eax, eax
je 0x414d72
add esi, 0xc30
push esi
call fcn.00421a70
push dword [ebp + 0x78]
call fcn.004269fe
pop edi
test eax, eax
je 0x414d88
push dword [ebp + 0x78]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push str.DDI_end
push 3
call fcn.00449e4d
pop ecx
pop ecx
pop esi
pop ebx
add ebp, 0x70
leave
ret 8