Function at 0x4139c1
Capabilities:
Get disk information

Disassembly:
push ebp
lea ebp, [esp - 0x70]
mov ecx, dword [0x5034fc]
sub esp, 0x528
push ebx
xor ebx, ebx
cmp ecx, ebx
je 0x414638
push esi
mov esi, dword [ebp + 0x78]
push esi
call fcn.0040121c
test eax, eax
je 0x414637
mov ecx, dword [0x5034fc]
push esi
call fcn.00404800
push str.DDI_1
push 3
call fcn.004487a4
push str._r_n_________Device_Information__r_n
call fcn.0040e27b
lea eax, [esi + 0x1738]
add esp, 0xc
cmp word [eax], bx
je 0x413a2c
push eax
push str.Friendly_Name____________:__s_r_n
call fcn.0040e2ce
pop ecx
pop ecx
lea eax, [esi + 0x1838]
cmp word [eax], bx
je 0x413a44
push eax
push str.Device_Description_______:__s_r_n
call fcn.0040e2ce
pop ecx
pop ecx
push edi
push esi
call fcn.00412ea5
mov edi, dword [sym.imp.USER32.dll_wsprintfW]
cmp dword [esi + 0x3a30], ebx
je 0x413afe
cmp dword [esi + 0x3a24], 0xffffffff
jle 0x413afe
xor eax, eax
push 0x7e
mov word [ebp - 0x38], ax
lea eax, [ebp - 0x36]
push ebx
push eax
call fcn.00442d2f
mov eax, dword [esi + 0x3a28]
add esp, 0xc
cmp eax, 1
jne 0x413a97
push dword [esi + 0x3a24]
push str..PhysicalDrive_i
jmp 0x413ab9
cmp eax, 2
jne 0x413aa9
push dword [esi + 0x3a24]
push str..CdRom_i
jmp 0x413ab9
cmp eax, 3
jne 0x413ac2
push dword [esi + 0x3a24]
push str..Floppy_i
lea eax, [ebp - 0x38]
push eax
call edi
add esp, 0xc
push 0x104
lea eax, [ebp - 0x2c0]
push eax
lea eax, [ebp - 0x30]
push eax
call dword [sym.imp.KERNEL32.dll_QueryDosDeviceW]
test eax, eax
je 0x413afe
lea eax, [ebp - 0x38]
push eax
push str.Win32_Name_______________:__s_r_n
call fcn.0040e2ce
lea eax, [ebp - 0x2c0]
push eax
push str.Kernel_Name______________:__s_r_n
call fcn.0040e2ce
add esp, 0x10
lea edi, [esi + 0xe38]
push edi
push str.Device_ID________________:__s_r_n
mov dword [ebp + 0x6c], edi
call fcn.0040e2ce
pop ecx
pop ecx
push str.PCIVEN_
push edi
call dword [sym.imp.SHLWAPI.dll_StrStrW]
test eax, eax
je 0x413b2a
push edi
call fcn.0041b4b6
lea edi, [esi + 0x32fc]
cmp dword [edi], ebx
je 0x413b61
push str.Hardware_IDs_____________:
call fcn.0040e27b
jmp 0x413b4f
push eax
push 0x4571f0
call fcn.0040e2ce
pop ecx
add edi, 4
mov eax, dword [edi]
pop ecx
cmp eax, ebx
jne 0x413b40
push 0x450f74
call fcn.0040e27b
pop ecx
push str.DDI_2
push 3
call fcn.004487a4
lea eax, [esi + 0x1c38]
pop ecx
pop ecx
mov edi, eax
cmp word [eax], bx
jne 0x413b81
mov edi, 0x44d044
push eax
call fcn.00411901
push eax
push edi
push str.Driver_KeyName___________:__s_s
call fcn.0040e2ce
mov edi, 0x450f74
push edi
call fcn.0040e27b
lea eax, [esi + 0x33f8]
add esp, 0x10
cmp word [eax], bx
je 0x413bcf
lea ecx, [esi + 0x3868]
push ecx
lea ecx, [esi + 0x3848]
push ecx
lea ecx, [esi + 0x3808]
push ecx
push eax
push str.Driver___________________:__s__Version:__s__Date:__s__Company:__s__r_n
call fcn.0040e2ce
add esp, 0x14
lea eax, [esi + 0x3600]
cmp word [eax], bx
je 0x413be7
push eax
push str.Driver_Inf_______________:__s_r_n
call fcn.0040e2ce
pop ecx
pop ecx
push str.DDI_3
push 3
call fcn.004487a4
mov eax, dword [esi + 0x39d8]
pop ecx
pop ecx
cmp eax, 0x14
ja 0x413c09
mov eax, dword [eax*4 + 0x499120]
jmp 0x413c0e
mov eax, str.undefined
push eax
push str.Legacy_BusType___________:__s_r_n
call fcn.0040e27b
lea eax, [esi + 0x1e12]
pop ecx
pop ecx
cmp word [eax], bx
je 0x413c33
push eax
push str.Class____________________:__s_r_n
call fcn.0040e2ce
pop ecx
pop ecx
lea eax, [esi + 0x1e92]
cmp word [eax], bx
je 0x413c6a
push eax
push str.Class_GUID_______________:__s
call fcn.0040e2ce
lea eax, [esi + 0x1eec]
pop ecx
pop ecx
cmp word [eax], bx
je 0x413c63
push eax
push str.___s_
call fcn.0040e2ce
pop ecx
pop ecx
push edi
call fcn.0040e27b
pop ecx
push str.DDI_4
push 3
call fcn.004487a4
lea eax, [esi + 0x1f70]
pop ecx
pop ecx
cmp word [eax], bx
je 0x413c90
push eax
push str.Service__________________:__s_r_n
call fcn.0040e2ce
pop ecx
pop ecx
lea eax, [esi + 0x1d92]
cmp word [eax], bx
je 0x413ca8
push eax
push str.Enumerator_______________:__s_r_n
call fcn.0040e2ce
pop ecx
pop ecx
lea edi, [esi + 0x1c92]
cmp word [edi], bx
je 0x413cd2
lea eax, [esi + 0x10a8]
push eax
push edi
call dword [sym.imp.KERNEL32.dll_lstrcmpW]
test eax, eax
je 0x413cd2
push edi
push str.PDO______________________:__s_r_n
call fcn.0040e2ce
pop ecx
pop ecx
lea eax, [esi + 0x1b38]
cmp word [eax], bx
jne 0x413ce2
mov eax, 0x44d044
push eax
push str.Location_Info____________:__s_r_n
call fcn.0040e2ce
push dword [esi + 0x39dc]
push str.Address__________________:__u
call fcn.0040e2ce
mov eax, dword [esi + 0x39dc]
add esp, 0x10
cmp eax, 0x7f
jb 0x413d18
push eax
push str.__0x_X_
call fcn.0040e2ce
pop ecx
pop ecx
push 0x456538
call fcn.0040e2ce
mov dword [esp], str.DDI_5
push 3
call fcn.004487a4
mov eax, dword [esi + 0xc]
pop ecx
pop ecx
cmp eax, 3
je 0x413d44
cmp eax, 6
je 0x413d44
cmp eax, 9
jne 0x413da9
lea eax, [esi + 0x2afc]
cmp word [eax], bx
je 0x413d6b
push eax
call fcn.004263f1
mov edi, eax
push edi
push str.Location_IDs_____________:__s_r_n
call fcn.0040e2ce
push edi
call fcn.00442f64
add esp, 0xc
lea edi, [esi + 0x3968]
cmp word [edi], bx
je 0x413da9
push edi
push str.Container_ID_____________:__s
call fcn.0040e2ce
pop ecx
pop ecx
push str.00000000_0000_0000_ffff_ffffffffffff
push edi
call dword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
jne 0x413d9e
push str.__GUID_CONTAINERID_INTERNALLY_CONNECTED_DEVICE_
call fcn.0040e27b
pop ecx
push 0x450f74
call fcn.0040e27b
pop ecx
push str.DDI_6
push 3
call fcn.004487a4
lea eax, [esi + 0x2078]
pop ecx
pop ecx
cmp word [eax], bx
jne 0x413dc7
mov eax, 0x44d044
push eax
push str.Manufacturer_Info________:__s_r_n
call fcn.0040e2ce
pop ecx
pop ecx
lea edi, [esi + 0x39d4]
push dword [edi]
call fcn.00443ea8
push eax
push dword [edi]
push str.Capabilities_____________:_0x_02X___s__r_n
call fcn.0040e27b
add esp, 0xc
lea edi, [esi + 0x39e4]
push dword [edi]
call fcn.004443cf
push eax
push dword [edi]
push str.Status___________________:_0x_08X___s__r_n
call fcn.0040e27b
push dword [esi + 0x39e8]
push str.Problem_Code_____________:__u
call fcn.0040e27b
mov eax, dword [esi + 0x39e8]
add esp, 0x14
cmp eax, ebx
je 0x413e3b
push eax
call fcn.00443d20
push eax
push str.___s_
call fcn.0040e27b
pop ecx
pop ecx
push 0x450f74
call fcn.0040e27b
mov dword [esp], str.DDI_7
push 3
call fcn.004487a4
lea eax, [esi + 0x333c]
pop ecx
pop ecx
mov edi, 0x200
cmp dword [eax], ebx
je 0x413e85
push edi
lea ecx, [ebp - 0x4b8]
push ecx
push eax
call fcn.00426c39
lea eax, [ebp - 0x4b8]
push eax
push str.Upper_Filters____________:__s_r_n
call fcn.0040e2ce
pop ecx
pop ecx
push str.DDI_8
push 3
call fcn.004487a4
lea eax, [esi + 0x337c]
pop ecx
pop ecx
cmp dword [eax], ebx
je 0x413ebe
push edi
lea ecx, [ebp - 0x4b8]
push ecx
push eax
call fcn.00426c39
lea eax, [ebp - 0x4b8]
push eax
push str.Lower_Filters____________:__s_r_n
call fcn.0040e2ce
pop ecx
pop ecx
mov edi, dword [sym.imp.KERNEL32.dll_lstrcmpW]
push 0x44dce8
lea eax, [esi + 0x1e12]
push eax
call edi
test eax, eax
je 0x413eec
push 0x44dce8
lea eax, [esi + 0x1f70]
push eax
call edi
test eax, eax
jne 0x413fb5
push str.DDI_9
push 3
call fcn.004487a4
mov eax, dword [esi + 0x39e0]
pop ecx
pop ecx
cmp eax, ebx
jne 0x413f8b
push 0x3c
lea eax, [ebp + 0xc]
push ebx
push eax
mov dword [ebp + 8], 0x2d
call fcn.00442d2f
mov eax, dword [esi + 0x39dc]
add esp, 0xc
cmp eax, 0xffffffff
je 0x413f56
push eax
cmp eax, 0x7f
jb 0x413f44
push eax
lea eax, [ebp + 8]
push str._u__0x_X_
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x10
jmp 0x413f56
lea eax, [ebp + 8]
push 0x44fac4
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
lea eax, [ebp + 8]
push eax
push str.Address__________________:__s
call fcn.0040e2ce
mov eax, dword [esi + 0xc]
pop ecx
pop ecx
cmp eax, 9
je 0x413f73
cmp eax, 6
jne 0x413faa
movzx eax, byte [ebp + 0x7c]
cmp dword [esi + 0x39dc], eax
je 0x413faa
push str.____strange__usually_this_is_equal_to_the_USB_port_number_
call fcn.0040e27b
jmp 0x413fa9
cmp eax, 0x1d
jne 0x413f97
push str.TIMEOUT
jmp 0x413f9e
push eax
call fcn.004443a1
push eax
push str.Address__________________:__s
call fcn.0040e27b
pop ecx
pop ecx
push 0x450f74
call fcn.0040e27b
pop ecx
push str.DDI_10
push 3
call fcn.004487a4
mov eax, dword [esi + 0x39b8]
or edi, 0xffffffff
pop ecx
pop ecx
cmp eax, edi
je 0x413fdd
push eax
push str.HcDisableSelectiveSuspend:__u_r_n
call fcn.0040e27b
pop ecx
pop ecx
mov eax, dword [esi + 0x39bc]
cmp eax, edi
je 0x413ff4
push eax
push str.EnableSelectiveSuspend___:__u_r_n
call fcn.0040e27b
pop ecx
pop ecx
mov eax, dword [esi + 0x39c0]
cmp eax, edi
je 0x41400b
push eax
push str.SelectiveSuspendEnabled__:__u_r_n
call fcn.0040e27b
pop ecx
pop ecx
mov eax, dword [esi + 0x39c4]
cmp eax, edi
je 0x414022
push eax
push str.EnhancedPowerMgmtEnabled_:__u_r_n
call fcn.0040e27b
pop ecx
pop ecx
mov eax, dword [esi + 0x39c8]
cmp eax, edi
je 0x414039
push eax
push str.IdleInWorkingState_______:__u_r_n
call fcn.0040e27b
pop ecx
pop ecx
mov eax, dword [esi + 0x39cc]
cmp eax, edi
je 0x414050
push eax
push str.WakeFromSleepState_______:__u_r_n
call fcn.0040e27b
pop ecx
pop ecx
mov eax, dword [esi + 0x39f0]
cmp eax, ebx
je 0x414090
dec eax
push eax
push str.Power_State______________:_D_u
call fcn.0040e27b
mov eax, dword [esi + 0x39f4]
pop ecx
pop ecx
cmp eax, ebx
je 0x414085
push eax
call fcn.004118a3
push eax
push str.__supported:__s_
call fcn.0040e27b
pop ecx
pop ecx
push 0x450f74
call fcn.0040e27b
pop ecx
push 0x44d4c0
lea edi, [esi + 0xfc8]
push edi
call fcn.00426e06
test eax, eax
je 0x4140c4
lea eax, [esi + 0x13b0]
cmp word [eax], bx
jne 0x4140b5
mov eax, str.none_assigned
push eax
push edi
push str.COM_Port_________________:__s___s__r_n
call fcn.0040e2ce
add esp, 0xc
cmp dword [0x498b08], ebx
jne 0x414186
push 0x456cc4
lea eax, [esi + 0x1f70]
push eax
call dword [sym.imp.SHLWAPI.dll_StrStrIW]
test eax, eax
jne 0x414186
cmp dword [esi + 0x39e8], ebx
jne 0x414186
push str.DDI_11
push 3
call fcn.004487a4
pop ecx
pop ecx
cmp dword [esi + 0x82c], ebx
jne 0x414139
mov ecx, dword [0x5034fc]
push 0x200
lea eax, [esi + 0x2c]
push eax
push dword [esi + 0x10]
call fcn.00401668
push eax
push str.DDI_12_n_i
push 3
mov dword [esi + 0x82c], eax
call fcn.004487a4
add esp, 0xc
xor edi, edi
cmp dword [esi + 0x82c], ebx
jle 0x414186
lea eax, [esi + 0x2c]
mov dword [ebp + 0x7c], eax
mov eax, dword [ebp + 0x7c]
mov eax, dword [eax]
mov dword [ebp + 0x78], eax
cmp eax, ebx
je 0x414179
cmp dword [0x50da14], 5
jl 0x41416e
push edi
push str.DDI_13_i_i
push 5
call fcn.004487a4
add esp, 0xc
push 1
push edi
push dword [ebp + 0x78]
call fcn.00413604
add dword [ebp + 0x7c], 4
inc edi
cmp edi, dword [esi + 0x82c]
jl 0x414149
cmp word [esi + 0x1088], bx
je 0x4141b5
cmp dword [0x498b08], ebx
jne 0x4141b5
push esi
call fcn.004116c4
cmp dword [0x498b08], ebx
jne 0x414628
push ebx
push esi
call fcn.0041177a
jmp 0x414628
mov eax, dword [esi + 0x3a30]
cmp eax, ebx
je 0x4141d2
cmp dword [esi + 0x3a2c], ebx
jne 0x4141de
push esi
call fcn.004116c4
jmp 0x414628
cmp dword [esi + 0x3a2c], ebx
je 0x41435f
cmp eax, ebx
je 0x4141e8
push esi
call fcn.004116c4
mov edi, dword [esi + 0x3a78]
cmp edi, ebx
je 0x414628
lea eax, [edi + 0x848]
mov dword [ebp + 0x78], eax
cmp word [eax], bx
jne 0x414209
mov eax, 0x44e7c8
push eax
push str.Volume_Name______________:__S_r_n
call fcn.0040e27b
cmp dword [esi + 0x3a28], 3
pop ecx
pop ecx
jne 0x414225
push esi
call fcn.004115c8
push ebx
lea eax, [edi + 0x930]
push eax
call fcn.00411479
lea esi, [edi + 0x3264]
cmp word [esi], bx
je 0x41426f
lea eax, [edi + 0x3278]
push eax
push str.Volume_Label_____________:__S_r_n
call fcn.0040e27b
push esi
push str.Volume_Serial____________:__S_r_n
call fcn.0040e27b
lea eax, [edi + 0x347a]
push eax
push str.File_System______________:__S_r_n
call fcn.0040e27b
add esp, 0x18
jmp 0x41428c
mov eax, dword [edi + 0x34f4]
cmp eax, ebx
je 0x41428c
push eax
call fcn.00443f98
push eax
push str.Volume_Info_Error________:__s_r_n
call fcn.0040e27b
pop ecx
pop ecx
lea ecx, [edi + 0x31e0]
cmp word [ecx], bx
je 0x4142cc
cmp dword [edi + 0x31dc], ebx
jl 0x4142c4
jg 0x4142ad
cmp dword [edi + 0x31d8], 0x200
jb 0x4142c4
lea eax, [edi + 0x3220]
cmp word [eax], bx
je 0x4142c4
push eax
push ecx
push str.Size_____________________:__S___S_available__r_n
jmp 0x414345
push ecx
push str.Size_____________________:__S_r_n
jmp 0x4142dc
lea eax, [edi + 0x34ba]
cmp byte [eax], bl
je 0x4142e5
push eax
push str.Hint_____________________:__s_r_n
call fcn.0040e27b
pop ecx
pop ecx
jmp 0x41434d
xor eax, eax
push 0x7e
mov word [ebp - 0xb8], ax
lea eax, [ebp - 0xb6]
push ebx
push eax
call fcn.00442d2f
push dword [edi + 0x844]
lea eax, [ebp - 0xb8]
push dword [edi + 0x840]
push str.DeviceHarddisk_iPartition_i
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x1c
lea eax, [ebp + 0x7c]
push eax
lea eax, [ebp - 0xb8]
push eax
mov dword [ebp + 0x7c], ebx
call fcn.0044ae30
movzx eax, ax
cmp ax, bx
je 0x41434d
movzx eax, ax
push eax
push dword [ebp + 0x7c]
push str.Hint_____________________:__S_Container_for__c:_r_n
call fcn.0040e27b
add esp, 0xc
push dword [ebp + 0x78]
lea eax, [ebp - 0x1c]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp 0x414628
push 0x44f7b8
lea edi, [esi + 0x1e12]
push edi
call dword [sym.imp.SHLWAPI.dll_StrStrIW]
test eax, eax
je 0x41441b
push ebx
push ebx
push 3
push ebx
push 3
push ebx
add esi, 0xc30
push esi
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov esi, eax
cmp esi, 0xffffffff
je 0x414628
xor eax, eax
mov word [ebp + 0x64], ax
mov word [ebp + 0x7c], ax
lea edi, [ebp + 0x66]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
push ebx
stosw word es:[edi], ax
lea eax, [ebp + 0x78]
push eax
push 0xc
lea eax, [ebp + 0x64]
push eax
push 2
lea eax, [ebp + 0x7c]
push eax
push 0xf0000
push esi
mov dword [ebp + 0x78], ebx
call dword [sym.imp.KERNEL32.dll_DeviceIoControl]
test eax, eax
je 0x414415
push str._r_n______________Mouse_Information__r_n
call fcn.0040e27b
push dword [ebp + 0x6c]
push str.Input_Data_Queue_Length__:__u_r_n
call fcn.0040e27b
movzx eax, word [ebp + 0x64]
push eax
push str.Mouse_Identifier_________:__u_r_n
call fcn.0040e27b
movzx eax, word [ebp + 0x66]
push eax
push str.Number_of_Buttons________:__u_r_n
call fcn.0040e27b
movzx eax, word [ebp + 0x68]
push eax
push str.Sample_Rate______________:__u_r_n
call fcn.0040e27b
add esp, 0x24
push esi
jmp 0x4145c5
push 0x44f7a4
push edi
call dword [sym.imp.SHLWAPI.dll_StrStrIW]
test eax, eax
je 0x4145cd
push ebx
push ebx
push 3
push ebx
push 3
push ebx
add esi, 0xc30
push esi
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp + 0x7c], eax
cmp eax, 0xffffffff
je 0x414628
push 6
pop ecx
xor eax, eax
mov esi, dword [sym.imp.KERNEL32.dll_DeviceIoControl]
mov byte [ebp + 0x48], bl
lea edi, [ebp + 0x49]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
push ebx
stosb byte es:[edi], al
lea eax, [ebp + 0x78]
push eax
push 0x1c
lea eax, [ebp + 0x48]
push eax
push 0x1c
push eax
push 0xb0000
push dword [ebp + 0x7c]
mov dword [ebp + 0x78], ebx
call esi
test eax, eax
je 0x41456c
push str._r_n______________Keyboad_Information__r_n
call fcn.0040e27b
cmp byte [ebp + 0x48], 0x51
pop ecx
mov eax, str.__HID_
je 0x4144a4
mov eax, 0x44e735
push eax
movzx eax, byte [ebp + 0x48]
push eax
push str.Keyboard_ID.Type_________:_0x_X_s_r_n
call fcn.0040e27b
movzx eax, byte [ebp + 0x49]
push eax
push str.Keyboard_ID.Subtype______:__u_r_n
call fcn.0040e27b
movzx eax, word [ebp + 0x4a]
push eax
push str.Keyboard_Mode____________:__u_r_n
call fcn.0040e27b
movzx eax, word [ebp + 0x4c]
push eax
push str.Number_of_Function_Keys__:__u_r_n
call fcn.0040e27b
movzx eax, word [ebp + 0x4e]
push eax
push str.Number_of_Indicators_____:__u_r_n
call fcn.0040e27b
movzx eax, word [ebp + 0x50]
push eax
push str.Number_of_Keys_Total_____:__u_r_n
call fcn.0040e27b
push dword [ebp + 0x54]
push str.Input_Data_Queue_Length__:__u_r_n
call fcn.0040e27b
movzx eax, word [ebp + 0x58]
push eax
push str.Key_Repeat_Minimum.UnitId:__u_r_n
call fcn.0040e27b
movzx eax, word [ebp + 0x5a]
add esp, 0x44
push eax
push str.Key_Repeat_Minimum.Rate__:__u_per_second_r_n
call fcn.0040e27b
movzx eax, word [ebp + 0x5c]
push eax
push str.Key_Repeat_Minimum.Delay_:__u_ms_r_n
call fcn.0040e27b
movzx eax, word [ebp + 0x5e]
push eax
push str.Key_Repeat_Maximum.UnitId:__u_r_n
call fcn.0040e27b
movzx eax, word [ebp + 0x60]
push eax
push str.Key_Repeat_Maximum.Rate__:__u_per_second_r_n
call fcn.0040e27b
movzx eax, word [ebp + 0x62]
push eax
push str.Key_Repeat_Maximum.Delay_:__u_ms_r_n
call fcn.0040e27b
add esp, 0x28
xor eax, eax
push ebx
mov word [ebp + 0x68], ax
lea edi, [ebp + 0x6a]
stosd dword es:[edi], eax
lea eax, [ebp + 0x78]
push eax
push 6
lea eax, [ebp + 0x68]
push eax
push 6
push eax
push 0xb0020
push dword [ebp + 0x7c]
call esi
test eax, eax
je 0x4145c2
movzx eax, word [ebp + 0x68]
push eax
push str.Key_Repeat_UnitId________:__u_r_n
call fcn.0040e27b
movzx eax, word [ebp + 0x6a]
push eax
push str.Key_Repeat_Rate__________:__u_per_second_r_n
call fcn.0040e27b
movzx eax, word [ebp + 0x6c]
push eax
push str.Key_Repeat_Delay_________:__u_ms_r_n
call fcn.0040e27b
add esp, 0x18
push dword [ebp + 0x7c]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x414628
push 0x44f768
push edi
call dword [sym.imp.SHLWAPI.dll_StrStrIW]
test eax, eax
je 0x414628
cmp dword [esi + 8], ebx
je 0x414628
lea edi, [esi + 0xc30]
cmp word [edi], bx
jne 0x414617
cmp dword [esi + 0x10], ebx
je 0x414612
push ebx
push 0x104
push edi
push dword [ebp + 0x6c]
push 0x44c7d0
call dword [sym.imp.CFGMGR32.dll_CM_Get_Device_Interface_ListW]
test eax, eax
jne 0x414612
push ebx
call dword [sym.imp.KERNEL32.dll_Sleep]
cmp word [edi], bx
je 0x414628
push edi
lea ecx, [ebp + 0x7f]
call fcn.0040d498
lea ecx, [ebp + 0x7f]
call fcn.0040d490
push str.DDI_end
push 3
call fcn.004487a4
pop ecx
pop ecx
pop edi
pop esi
pop ebx
add ebp, 0x70
leave
ret 8