Function at 0x4126fd
Capabilities:
Get disk information

Disassembly:
push ebp
lea ebp, [esp - 0x70]
mov ecx, dword [0x4fc94c]
sub esp, 0x528
push ebx
xor ebx, ebx
cmp ecx, ebx
je 0x4132e6
push esi
mov esi, dword [ebp + 0x78]
push esi
call fcn.004011ae
test eax, eax
je 0x4132e5
mov ecx, dword [0x4fc94c]
push esi
call fcn.0040477f
push str.DDI_1
push 3
call fcn.004452a3
push str._r_n_________Device_Information__r_n
call fcn.0040d11c
lea eax, [esi + 0x1734]
add esp, 0xc
cmp word [eax], bx
je 0x412768
push eax
push str.Friendly_Name____________:__s_r_n
call fcn.0040d16f
pop ecx
pop ecx
lea eax, [esi + 0x1834]
cmp word [eax], bx
je 0x412780
push eax
push str.Device_Description_______:__s_r_n
call fcn.0040d16f
pop ecx
pop ecx
push edi
push esi
call fcn.00411be0
mov edi, dword [sym.imp.USER32.dll_wsprintfW]
cmp dword [esi + 0x3a2c], ebx
je 0x41283a
cmp dword [esi + 0x3a20], 0xffffffff
jle 0x41283a
xor eax, eax
push 0x7e
mov word [ebp - 0x38], ax
lea eax, [ebp - 0x36]
push ebx
push eax
call fcn.0043f4d8
mov eax, dword [esi + 0x3a24]
add esp, 0xc
cmp eax, 1
jne 0x4127d3
push dword [esi + 0x3a20]
push str..PhysicalDrive_i
jmp 0x4127f5
cmp eax, 2
jne 0x4127e5
push dword [esi + 0x3a20]
push str..CdRom_i
jmp 0x4127f5
cmp eax, 3
jne 0x4127fe
push dword [esi + 0x3a20]
push str..Floppy_i
lea eax, [ebp - 0x38]
push eax
call edi
add esp, 0xc
push 0x104
lea eax, [ebp - 0x2c0]
push eax
lea eax, [ebp - 0x30]
push eax
call dword [sym.imp.KERNEL32.dll_QueryDosDeviceW]
test eax, eax
je 0x41283a
lea eax, [ebp - 0x38]
push eax
push str.Win32_Name_______________:__s_r_n
call fcn.0040d16f
lea eax, [ebp - 0x2c0]
push eax
push str.Kernel_Name______________:__s_r_n
call fcn.0040d16f
add esp, 0x10
lea edi, [esi + 0xe34]
push edi
push str.Device_ID________________:__s_r_n
call fcn.0040d16f
pop ecx
pop ecx
push str.PCIVEN_
push edi
call dword [sym.imp.SHLWAPI.dll_StrStrW]
test eax, eax
je 0x412863
push edi
call fcn.00419f7a
lea edi, [esi + 0x32f8]
cmp dword [edi], ebx
je 0x41289a
push str.Hardware_IDs_____________:
call fcn.0040d11c
jmp 0x412888
push eax
push 0x453948
call fcn.0040d16f
pop ecx
add edi, 4
mov eax, dword [edi]
pop ecx
cmp eax, ebx
jne 0x412879
push 0x44d77c
call fcn.0040d11c
pop ecx
push str.DDI_2
push 3
call fcn.004452a3
lea eax, [esi + 0x1c34]
pop ecx
pop ecx
mov edi, eax
cmp word [eax], bx
jne 0x4128ba
mov edi, 0x449cbc
push eax
call fcn.004106b2
push eax
push edi
push str.Driver_KeyName___________:__s_s
call fcn.0040d16f
mov edi, 0x44d77c
push edi
call fcn.0040d11c
lea eax, [esi + 0x33f4]
add esp, 0x10
cmp word [eax], bx
je 0x412908
lea ecx, [esi + 0x3864]
push ecx
lea ecx, [esi + 0x3844]
push ecx
lea ecx, [esi + 0x3804]
push ecx
push eax
push str.Driver___________________:__s__Version:__s__Date:__s__Company:__s__r_n
call fcn.0040d16f
add esp, 0x14
lea eax, [esi + 0x35fc]
cmp word [eax], bx
je 0x412920
push eax
push str.Driver_Inf_______________:__s_r_n
call fcn.0040d16f
pop ecx
pop ecx
push str.DDI_3
push 3
call fcn.004452a3
mov eax, dword [esi + 0x39d4]
pop ecx
pop ecx
cmp eax, 0x14
ja 0x412942
mov eax, dword [eax*4 + 0x493030]
jmp 0x412947
mov eax, str.undefined
push eax
push str.Legacy_BusType___________:__s_r_n
call fcn.0040d11c
lea eax, [esi + 0x1e0e]
pop ecx
pop ecx
cmp word [eax], bx
je 0x41296c
push eax
push str.Class____________________:__s_r_n
call fcn.0040d16f
pop ecx
pop ecx
lea eax, [esi + 0x1e8e]
cmp word [eax], bx
je 0x4129a3
push eax
push str.Class_GUID_______________:__s
call fcn.0040d16f
lea eax, [esi + 0x1ee8]
pop ecx
pop ecx
cmp word [eax], bx
je 0x41299c
push eax
push str.___s_
call fcn.0040d16f
pop ecx
pop ecx
push edi
call fcn.0040d11c
pop ecx
push str.DDI_4
push 3
call fcn.004452a3
lea eax, [esi + 0x1f6c]
pop ecx
pop ecx
cmp word [eax], bx
je 0x4129c9
push eax
push str.Service__________________:__s_r_n
call fcn.0040d16f
pop ecx
pop ecx
lea eax, [esi + 0x1d8e]
cmp word [eax], bx
je 0x4129e1
push eax
push str.Enumerator_______________:__s_r_n
call fcn.0040d16f
pop ecx
pop ecx
lea edi, [esi + 0x1c8e]
cmp word [edi], bx
je 0x412a0b
lea eax, [esi + 0x10a4]
push eax
push edi
call dword [sym.imp.KERNEL32.dll_lstrcmpW]
test eax, eax
je 0x412a0b
push edi
push str.PDO______________________:__s_r_n
call fcn.0040d16f
pop ecx
pop ecx
lea eax, [esi + 0x1b34]
cmp word [eax], bx
jne 0x412a1b
mov eax, 0x449cbc
push eax
push str.Location_Info____________:__s_r_n
call fcn.0040d16f
push dword [esi + 0x39d8]
push str.Address__________________:__u
call fcn.0040d16f
mov eax, dword [esi + 0x39d8]
add esp, 0x10
cmp eax, 0x7f
jb 0x412a51
push eax
push str.__0x_X_
call fcn.0040d16f
pop ecx
pop ecx
push 0x452c9c
call fcn.0040d16f
mov dword [esp], str.DDI_5
push 3
call fcn.004452a3
mov eax, dword [esi + 0xc]
pop ecx
pop ecx
cmp eax, 3
je 0x412a7d
cmp eax, 6
je 0x412a7d
cmp eax, 9
jne 0x412ae2
lea eax, [esi + 0x2af8]
cmp word [eax], bx
je 0x412aa4
push eax
call fcn.00424c79
mov edi, eax
push edi
push str.Location_IDs_____________:__s_r_n
call fcn.0040d16f
push edi
call fcn.0043f70d
add esp, 0xc
lea edi, [esi + 0x3964]
cmp word [edi], bx
je 0x412ae2
push edi
push str.Container_ID_____________:__s
call fcn.0040d16f
pop ecx
pop ecx
push str.00000000_0000_0000_ffff_ffffffffffff
push edi
call dword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
jne 0x412ad7
push str.__GUID_CONTAINERID_INTERNALLY_CONNECTED_DEVICE_
call fcn.0040d11c
pop ecx
push 0x44d77c
call fcn.0040d11c
pop ecx
push str.DDI_6
push 3
call fcn.004452a3
lea eax, [esi + 0x2074]
pop ecx
pop ecx
cmp word [eax], bx
jne 0x412b00
mov eax, 0x449cbc
push eax
push str.Manufacturer_Info________:__s_r_n
call fcn.0040d16f
pop ecx
pop ecx
lea edi, [esi + 0x39d0]
push dword [edi]
call fcn.00440028
push eax
push dword [edi]
push str.Capabilities_____________:_0x_02X___s__r_n
call fcn.0040d11c
add esp, 0xc
lea edi, [esi + 0x39e0]
push dword [edi]
call fcn.0044054f
push eax
push dword [edi]
push str.Status___________________:_0x_08X___s__r_n
call fcn.0040d11c
push dword [esi + 0x39e4]
push str.Problem_Code_____________:__u
call fcn.0040d11c
mov eax, dword [esi + 0x39e4]
add esp, 0x14
cmp eax, ebx
je 0x412b74
push eax
call fcn.0043fe9f
push eax
push str.___s_
call fcn.0040d11c
pop ecx
pop ecx
push 0x44d77c
call fcn.0040d11c
mov dword [esp], str.DDI_7
push 3
call fcn.004452a3
lea eax, [esi + 0x3338]
pop ecx
pop ecx
mov edi, 0x200
cmp dword [eax], ebx
je 0x412bbe
push edi
lea ecx, [ebp - 0x4b8]
push ecx
push eax
call fcn.004254c1
lea eax, [ebp - 0x4b8]
push eax
push str.Upper_Filters____________:__s_r_n
call fcn.0040d16f
pop ecx
pop ecx
push str.DDI_8
push 3
call fcn.004452a3
lea eax, [esi + 0x3378]
pop ecx
pop ecx
cmp dword [eax], ebx
je 0x412bf7
push edi
lea ecx, [ebp - 0x4b8]
push ecx
push eax
call fcn.004254c1
lea eax, [ebp - 0x4b8]
push eax
push str.Lower_Filters____________:__s_r_n
call fcn.0040d16f
pop ecx
pop ecx
mov edi, dword [sym.imp.KERNEL32.dll_lstrcmpW]
push 0x44a8c0
lea eax, [esi + 0x1e0e]
push eax
call edi
test eax, eax
je 0x412c25
push 0x44a8c0
lea eax, [esi + 0x1f6c]
push eax
call edi
test eax, eax
jne 0x412cee
push str.DDI_9
push 3
call fcn.004452a3
mov eax, dword [esi + 0x39dc]
pop ecx
pop ecx
cmp eax, ebx
jne 0x412cc4
push 0x3c
lea eax, [ebp + 0xc]
push ebx
push eax
mov dword [ebp + 8], 0x2d
call fcn.0043f4d8
mov eax, dword [esi + 0x39d8]
add esp, 0xc
cmp eax, 0xffffffff
je 0x412c8f
push eax
cmp eax, 0x7f
jb 0x412c7d
push eax
lea eax, [ebp + 8]
push str._u__0x_X_
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x10
jmp 0x412c8f
lea eax, [ebp + 8]
push 0x4535b0
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
lea eax, [ebp + 8]
push eax
push str.Address__________________:__s
call fcn.0040d16f
mov eax, dword [esi + 0xc]
pop ecx
pop ecx
cmp eax, 9
je 0x412cac
cmp eax, 6
jne 0x412ce3
movzx eax, byte [ebp + 0x7c]
cmp dword [esi + 0x39d8], eax
je 0x412ce3
push str.____strange__usually_this_is_equal_to_the_USB_port_number_
call fcn.0040d11c
jmp 0x412ce2
cmp eax, 0x1d
jne 0x412cd0
push str.TIMEOUT
jmp 0x412cd7
push eax
call fcn.00440521
push eax
push str.Address__________________:__s
call fcn.0040d11c
pop ecx
pop ecx
push 0x44d77c
call fcn.0040d11c
pop ecx
push str.DDI_10
push 3
call fcn.004452a3
mov eax, dword [esi + 0x39b4]
or edi, 0xffffffff
pop ecx
pop ecx
cmp eax, edi
je 0x412d16
push eax
push str.HcDisableSelectiveSuspend:__u_r_n
call fcn.0040d11c
pop ecx
pop ecx
mov eax, dword [esi + 0x39b8]
cmp eax, edi
je 0x412d2d
push eax
push str.EnableSelectiveSuspend___:__u_r_n
call fcn.0040d11c
pop ecx
pop ecx
mov eax, dword [esi + 0x39bc]
cmp eax, edi
je 0x412d44
push eax
push str.SelectiveSuspendEnabled__:__u_r_n
call fcn.0040d11c
pop ecx
pop ecx
mov eax, dword [esi + 0x39c0]
cmp eax, edi
je 0x412d5b
push eax
push str.EnhancedPowerMgmtEnabled_:__u_r_n
call fcn.0040d11c
pop ecx
pop ecx
mov eax, dword [esi + 0x39c4]
cmp eax, edi
je 0x412d72
push eax
push str.IdleInWorkingState_______:__u_r_n
call fcn.0040d11c
pop ecx
pop ecx
mov eax, dword [esi + 0x39c8]
cmp eax, edi
je 0x412d89
push eax
push str.WakeFromSleepState_______:__u_r_n
call fcn.0040d11c
pop ecx
pop ecx
mov eax, dword [esi + 0x39ec]
cmp eax, ebx
je 0x412dc9
dec eax
push eax
push str.Power_State______________:_D_u
call fcn.0040d11c
mov eax, dword [esi + 0x39f0]
pop ecx
pop ecx
cmp eax, ebx
je 0x412dbe
push eax
call fcn.00410654
push eax
push str.__supported:__s_
call fcn.0040d11c
pop ecx
pop ecx
push 0x44d77c
call fcn.0040d11c
pop ecx
push 0x44a140
lea edi, [esi + 0xfc4]
push edi
call fcn.0042568e
test eax, eax
je 0x412dfd
lea eax, [esi + 0x13ac]
cmp word [eax], bx
jne 0x412dee
mov eax, str.none_assigned
push eax
push edi
push str.COM_Port_________________:__s___s__r_n
call fcn.0040d16f
add esp, 0xc
cmp dword [0x492a68], ebx
jne 0x412ebf
push 0x453404
lea eax, [esi + 0x1f6c]
push eax
call dword [sym.imp.SHLWAPI.dll_StrStrIW]
test eax, eax
jne 0x412ebf
cmp dword [esi + 0x39e4], ebx
jne 0x412ebf
push str.DDI_11
push 3
call fcn.004452a3
pop ecx
pop ecx
cmp dword [esi + 0x828], ebx
jne 0x412e72
mov ecx, dword [0x4fc94c]
push 0x200
lea eax, [esi + 0x28]
push eax
push dword [esi + 0x10]
call fcn.00401681
push eax
push str.DDI_12_n_i
push 3
mov dword [esi + 0x828], eax
call fcn.004452a3
add esp, 0xc
xor edi, edi
cmp dword [esi + 0x828], ebx
jle 0x412ebf
lea eax, [esi + 0x28]
mov dword [ebp + 0x7c], eax
mov eax, dword [ebp + 0x7c]
mov eax, dword [eax]
mov dword [ebp + 0x78], eax
cmp eax, ebx
je 0x412eb2
cmp dword [0x506fb4], 5
jl 0x412ea7
push edi
push str.DDI_13_i_i
push 5
call fcn.004452a3
add esp, 0xc
push 1
push edi
push dword [ebp + 0x78]
call fcn.00412342
add dword [ebp + 0x7c], 4
inc edi
cmp edi, dword [esi + 0x828]
jl 0x412e82
cmp word [esi + 0x1084], bx
je 0x412eee
cmp dword [0x492a68], ebx
jne 0x412eee
push esi
call fcn.00410475
cmp dword [0x492a68], ebx
jne 0x4132d6
push ebx
push esi
call fcn.0041052b
jmp 0x4132d6
mov eax, dword [esi + 0x3a2c]
cmp eax, ebx
je 0x412f0b
cmp dword [esi + 0x3a28], ebx
jne 0x412f17
push esi
call fcn.00410475
jmp 0x4132d6
cmp dword [esi + 0x3a28], ebx
je 0x41306a
cmp eax, ebx
je 0x412f21
push esi
call fcn.00410475
mov esi, dword [esi + 0x3a74]
cmp esi, ebx
je 0x4132d6
lea eax, [esi + 0x848]
mov dword [ebp + 0x78], eax
cmp word [eax], bx
jne 0x412f42
mov eax, 0x44b318
push eax
push str.Volume_Name______________:__S_r_n
call fcn.0040d11c
pop ecx
pop ecx
push ebx
lea eax, [esi + 0x930]
push eax
call fcn.00410326
lea edi, [esi + 0x3264]
cmp word [edi], bx
je 0x412f97
lea eax, [esi + 0x3278]
push eax
push str.Volume_Label_____________:__S_r_n
call fcn.0040d11c
push edi
push str.Volume_Serial____________:__S_r_n
call fcn.0040d11c
lea eax, [esi + 0x347a]
push eax
push str.File_System______________:__S_r_n
call fcn.0040d11c
add esp, 0x18
lea eax, [esi + 0x31e0]
cmp word [eax], bx
je 0x412fd7
cmp dword [esi + 0x31dc], ebx
jl 0x412fcf
jg 0x412fb8
cmp dword [esi + 0x31d8], 0x200
jb 0x412fcf
add esi, 0x3220
cmp word [esi], bx
je 0x412fcf
push esi
push eax
push str.Size_____________________:__S___S_available__r_n
jmp 0x413050
push eax
push str.Size_____________________:__S_r_n
jmp 0x412fe7
lea eax, [esi + 0x34ba]
cmp byte [eax], bl
je 0x412ff0
push eax
push str.Hint_____________________:__s_r_n
call fcn.0040d11c
pop ecx
pop ecx
jmp 0x413058
xor eax, eax
push 0x7e
mov word [ebp - 0xb8], ax
lea eax, [ebp - 0xb6]
push ebx
push eax
call fcn.0043f4d8
push dword [esi + 0x844]
lea eax, [ebp - 0xb8]
push dword [esi + 0x840]
push str.DeviceHarddisk_iPartition_i
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x1c
lea eax, [ebp + 0x7c]
push eax
lea eax, [ebp - 0xb8]
push eax
mov dword [ebp + 0x7c], ebx
call fcn.0044781a
movzx eax, ax
cmp ax, bx
je 0x413058
movzx eax, ax
push eax
push dword [ebp + 0x7c]
push str.Hint_____________________:__S_Container_for__c:_r_n
call fcn.0040d11c
add esp, 0xc
push dword [ebp + 0x78]
lea eax, [ebp - 0x1c]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp 0x4132d6
push str.Mouse
lea edi, [esi + 0x1e0e]
push edi
call dword [sym.imp.SHLWAPI.dll_StrStrIW]
test eax, eax
je 0x413126
push ebx
push ebx
push 3
push ebx
push 3
push ebx
add esi, 0xc2c
push esi
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov esi, eax
cmp esi, 0xffffffff
je 0x4132d6
xor eax, eax
mov word [ebp + 0x64], ax
mov word [ebp + 0x7c], ax
lea edi, [ebp + 0x66]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
push ebx
stosw word es:[edi], ax
lea eax, [ebp + 0x78]
push eax
push 0xc
lea eax, [ebp + 0x64]
push eax
push 2
lea eax, [ebp + 0x7c]
push eax
push 0xf0000
push esi
mov dword [ebp + 0x78], ebx
call dword [sym.imp.KERNEL32.dll_DeviceIoControl]
test eax, eax
je 0x413120
push str._r_n______________Mouse_Information__r_n
call fcn.0040d11c
push dword [ebp + 0x6c]
push str.Input_Data_Queue_Length__:__u_r_n
call fcn.0040d11c
movzx eax, word [ebp + 0x64]
push eax
push str.Mouse_Identifier_________:__u_r_n
call fcn.0040d11c
movzx eax, word [ebp + 0x66]
push eax
push str.Number_of_Buttons________:__u_r_n
call fcn.0040d11c
movzx eax, word [ebp + 0x68]
push eax
push str.Sample_Rate______________:__u_r_n
call fcn.0040d11c
add esp, 0x24
push esi
jmp 0x4132d0
push str.Keyboard
push edi
call dword [sym.imp.SHLWAPI.dll_StrStrIW]
test eax, eax
je 0x4132d6
push ebx
push ebx
push 3
push ebx
push 3
push ebx
add esi, 0xc2c
push esi
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp + 0x7c], eax
cmp eax, 0xffffffff
je 0x4132d6
push 6
pop ecx
xor eax, eax
mov esi, dword [sym.imp.KERNEL32.dll_DeviceIoControl]
mov byte [ebp + 0x48], bl
lea edi, [ebp + 0x49]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
push ebx
stosb byte es:[edi], al
lea eax, [ebp + 0x78]
push eax
push 0x1c
lea eax, [ebp + 0x48]
push eax
push 0x1c
push eax
push 0xb0000
push dword [ebp + 0x7c]
mov dword [ebp + 0x78], ebx
call esi
test eax, eax
je 0x413277
push str._r_n______________Keyboad_Information__r_n
call fcn.0040d11c
cmp byte [ebp + 0x48], 0x51
pop ecx
mov eax, str.__HID_
je 0x4131af
mov eax, 0x44b285
push eax
movzx eax, byte [ebp + 0x48]
push eax
push str.Keyboard_ID.Type_________:_0x_X_s_r_n
call fcn.0040d11c
movzx eax, byte [ebp + 0x49]
push eax
push str.Keyboard_ID.Subtype______:__u_r_n
call fcn.0040d11c
movzx eax, word [ebp + 0x4a]
push eax
push str.Keyboard_Mode____________:__u_r_n
call fcn.0040d11c
movzx eax, word [ebp + 0x4c]
push eax
push str.Number_of_Function_Keys__:__u_r_n
call fcn.0040d11c
movzx eax, word [ebp + 0x4e]
push eax
push str.Number_of_Indicators_____:__u_r_n
call fcn.0040d11c
movzx eax, word [ebp + 0x50]
push eax
push str.Number_of_Keys_Total_____:__u_r_n
call fcn.0040d11c
push dword [ebp + 0x54]
push str.Input_Data_Queue_Length__:__u_r_n
call fcn.0040d11c
movzx eax, word [ebp + 0x58]
push eax
push str.Key_Repeat_Minimum.UnitId:__u_r_n
call fcn.0040d11c
movzx eax, word [ebp + 0x5a]
add esp, 0x44
push eax
push str.Key_Repeat_Minimum.Rate__:__u_per_second_r_n
call fcn.0040d11c
movzx eax, word [ebp + 0x5c]
push eax
push str.Key_Repeat_Minimum.Delay_:__u_ms_r_n
call fcn.0040d11c
movzx eax, word [ebp + 0x5e]
push eax
push str.Key_Repeat_Maximum.UnitId:__u_r_n
call fcn.0040d11c
movzx eax, word [ebp + 0x60]
push eax
push str.Key_Repeat_Maximum.Rate__:__u_per_second_r_n
call fcn.0040d11c
movzx eax, word [ebp + 0x62]
push eax
push str.Key_Repeat_Maximum.Delay_:__u_ms_r_n
call fcn.0040d11c
add esp, 0x28
xor eax, eax
push ebx
mov word [ebp + 0x68], ax
lea edi, [ebp + 0x6a]
stosd dword es:[edi], eax
lea eax, [ebp + 0x78]
push eax
push 6
lea eax, [ebp + 0x68]
push eax
push 6
push eax
push 0xb0020
push dword [ebp + 0x7c]
call esi
test eax, eax
je 0x4132cd
movzx eax, word [ebp + 0x68]
push eax
push str.Key_Repeat_UnitId________:__u_r_n
call fcn.0040d11c
movzx eax, word [ebp + 0x6a]
push eax
push str.Key_Repeat_Rate__________:__u_per_second_r_n
call fcn.0040d11c
movzx eax, word [ebp + 0x6c]
push eax
push str.Key_Repeat_Delay_________:__u_ms_r_n
call fcn.0040d11c
add esp, 0x18
push dword [ebp + 0x7c]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push str.DDI_end
push 3
call fcn.004452a3
pop ecx
pop ecx
pop edi
pop esi
pop ebx
add ebp, 0x70
leave
ret 8