Function at 0x41d70c
Capabilities:
Get disk information

Disassembly:
push 0x9c
mov eax, 0x4332d6
call fcn.004318dd
mov bl, dl
mov edi, ecx
mov dword [ebp - 0x78], edi
xor esi, esi
mov dword [ebp - 0x98], edi
mov dword [ebp - 0x94], esi
sub esp, 0x18
mov dword [ebp - 4], 1
mov ecx, esp
mov dword [ebp - 0x78], esp
push 0x407134
call fcn.0041314d
sub esp, 0x18
mov byte [ebp - 4], 2
mov ecx, esp
push 0x404f58
call fcn.0041314d
push 0x14d
lea ecx, [ebp - 0x74]
mov byte [ebp - 4], 1
call fcn.00412723
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x40]
push esi
xor eax, eax
mov dword [ebp - 0x2c], 7
push 0x104
mov dword [ebp - 0x30], esi
mov word [ebp - 0x40], ax
call fcn.0041a80f
mov byte [ebp - 4], 4
xor eax, eax
push esi
mov dword [edi + 0x14], 7
mov ecx, edi
mov dword [edi + 0x10], esi
push 0x104
mov word [edi], ax
call fcn.0041a80f
cmp dword [ebp + 0x1c], 8
mov eax, dword [ebp + 8]
mov dword [ebp - 0x94], 1
jae 0x41d7c5
lea eax, [ebp + 8]
push eax
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x78], esp
push 0x406c50
call fcn.0041314d
sub esp, 0x18
mov byte [ebp - 4], 5
mov ecx, esp
mov dword [ebp - 0x80], esp
push 0x407134
call fcn.0041314d
push 0x154
sub esp, 0x18
mov byte [ebp - 4], 6
mov ecx, esp
push 0x404f58
call fcn.0041314d
lea eax, [ebp - 0x74]
mov byte [ebp - 4], 4
push eax
call fcn.004125b8
add esp, 0x3c
lea eax, [ebp + 8]
mov ecx, esp
push eax
call fcn.00412eff
lea ecx, [ebp - 0x28]
call fcn.0041d63e
push eax
lea ecx, [ebp + 8]
call fcn.00418e76
push esi
push 1
lea ecx, [ebp - 0x28]
call fcn.00413b40
cmp dword [ebp + 0x1c], 8
mov ecx, dword [ebp + 8]
jae 0x41d849
lea ecx, [ebp + 8]
call fcn.0041d6c0
test al, al
jne 0x41dd56
test bl, bl
je 0x41d9fe
cmp dword [ebp + 0x1c], 8
mov eax, dword [ebp + 8]
jae 0x41d86a
lea eax, [ebp + 8]
push eax
call dword [sym.imp.RESUTILS.dll_ClusterIsPathOnSharedVolume]
test eax, eax
je 0x41d9fe
mov eax, 0x104
lea ecx, [ebp - 0x20]
push edi
mov dword [ebp - 0x84], eax
mov dword [ebp - 0x80], eax
call fcn.004137cd
mov esi, eax
lea eax, [ebp - 0x40]
mov byte [ebp - 4], 7
push eax
lea ecx, [ebp - 0xa8]
call fcn.004137cd
cmp dword [ebp + 0x1c], 8
mov ecx, dword [eax + 4]
mov eax, dword [ebp + 8]
jae 0x41d8b4
lea eax, [ebp + 8]
lea edx, [ebp - 0x80]
push edx
push dword [esi + 4]
lea edx, [ebp - 0x84]
push edx
push ecx
push eax
call dword [sym.imp.RESUTILS.dll_ClusterPrepareSharedVolumeForBackup]
lea ecx, [ebp - 0xa8]
mov ebx, eax
call fcn.004136db
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 4
call fcn.004136db
push 0x406cc0
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x78], esp
push 0x404ef0
call fcn.0041314d
sub esp, 0x18
mov byte [ebp - 4], 8
mov ecx, esp
mov dword [ebp - 0x88], esp
push 0x407134
call fcn.0041314d
push 0x166
sub esp, 0x18
mov byte [ebp - 4], 9
mov ecx, esp
push 0x404f58
call fcn.0041314d
lea eax, [ebp - 0x74]
mov byte [ebp - 4], 4
push eax
call fcn.004125b8
add esp, 0x54
test ebx, ebx
jg 0x41d943
mov esi, ebx
jmp 0x41d94c
movzx esi, bx
or esi, 0x80070000
test ebx, ebx
jne 0x41e1ae
cmp dword [ebp - 0x2c], 8
mov eax, dword [ebp - 0x40]
jae 0x41d960
lea eax, [ebp - 0x40]
push eax
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x78], esp
push 0x4070d0
call fcn.0041314d
sub esp, 0x18
mov byte [ebp - 4], 0xb
mov ecx, esp
mov dword [ebp - 0x88], esp
mov ebx, 0x407134
push ebx
call fcn.0041314d
push 0x168
sub esp, 0x18
mov byte [ebp - 4], 0xc
mov ecx, esp
mov esi, 0x404f58
push esi
call fcn.0041314d
lea eax, [ebp - 0x74]
mov byte [ebp - 4], 4
push eax
call fcn.004125b8
add esp, 0x54
cmp dword [edi + 0x14], 8
jb 0x41d9c0
mov eax, dword [edi]
jmp 0x41d9c2
mov eax, edi
push eax
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x78], esp
push 0x4070f8
call fcn.0041314d
sub esp, 0x18
mov byte [ebp - 4], 0xd
mov ecx, esp
mov dword [ebp - 0x88], esp
push ebx
call fcn.0041314d
push 0x169
sub esp, 0x18
mov byte [ebp - 4], 0xe
mov ecx, esp
push esi
jmp 0x41dd3a
lea eax, [ebp - 0x40]
push eax
lea ecx, [ebp - 0x20]
call fcn.004137cd
cmp dword [ebp + 0x1c], 8
mov ecx, dword [eax + 4]
mov eax, dword [ebp + 8]
jae 0x41da19
lea eax, [ebp + 8]
push dword [ebp - 0x30]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_GetVolumePathNameW]
lea ecx, [ebp - 0x20]
mov esi, eax
call fcn.004136db
test esi, esi
jne 0x41db50
push 0x406d10
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x78], esp
push 0x404ef0
call fcn.0041314d
sub esp, 0x18
mov byte [ebp - 4], 0xf
mov ecx, esp
mov dword [ebp - 0x80], esp
push 0x407134
call fcn.0041314d
push 0x16f
sub esp, 0x18
mov byte [ebp - 4], 0x10
mov ecx, esp
push 0x404f58
call fcn.0041314d
lea eax, [ebp - 0x74]
mov byte [ebp - 4], 4
push eax
call fcn.004125b8
add esp, 0x54
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
test ebx, ebx
jg 0x41da9b
mov esi, ebx
jmp 0x41daa4
movzx esi, bx
or esi, 0x80070000
test ebx, ebx
je 0x41db50
push 0x406d10
sub esp, 0x18
mov ecx, esp
push 0x4050c8
call fcn.0041314d
lea eax, [ebp - 0x74]
push eax
call fcn.004124a5
add esp, 0x20
push ebx
sub esp, 0x18
mov ecx, esp
push 0x405104
call fcn.0041314d
lea eax, [ebp - 0x74]
push eax
call fcn.004124a5
add esp, 0x20
lea ecx, [ebp - 0x28]
mov edx, esi
call fcn.00412874
mov ecx, eax
mov byte [ebp - 4], 0x11
call fcn.00413833
push eax
sub esp, 0x18
mov ecx, esp
push 0x403c6c
call fcn.0041314d
lea eax, [ebp - 0x74]
push eax
call fcn.004124a5
add esp, 0x20
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x28]
call fcn.00413b89
sub esp, 0x18
mov ecx, esp
push 0x403bd8
call fcn.0041314d
lea eax, [ebp - 0x74]
push eax
call fcn.004124a5
add esp, 0x1c
mov dword [ebp - 0x80], esi
push 0x4394e4
lea eax, [ebp - 0x80]
jmp 0x41e253
cmp dword [ebp - 0x2c], 8
mov eax, dword [ebp - 0x40]
jae 0x41db5c
lea eax, [ebp - 0x40]
push eax
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x78], esp
push 0x4070d0
call fcn.0041314d
sub esp, 0x18
mov byte [ebp - 4], 0x12
mov ecx, esp
mov dword [ebp - 0x80], esp
mov ebx, 0x407134
push ebx
call fcn.0041314d
push 0x170
sub esp, 0x18
mov byte [ebp - 4], 0x13
mov ecx, esp
push 0x404f58
call fcn.0041314d
lea eax, [ebp - 0x74]
mov byte [ebp - 4], 4
push eax
call fcn.004125b8
add esp, 0x54
lea ecx, [ebp - 0x20]
push edi
call fcn.004137cd
cmp dword [ebp - 0x2c], 8
mov ecx, dword [eax + 4]
mov eax, dword [ebp - 0x40]
jae 0x41dbc6
lea eax, [ebp - 0x40]
push dword [edi + 0x10]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_GetVolumeNameForVolumeMountPointW]
lea ecx, [ebp - 0x20]
mov esi, eax
call fcn.004136db
test esi, esi
jne 0x41dcf6
push 0x406de8
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x78], esp
push 0x404ef0
call fcn.0041314d
sub esp, 0x18
mov byte [ebp - 4], 0x14
mov ecx, esp
mov dword [ebp - 0x80], esp
push ebx
call fcn.0041314d
push 0x173
sub esp, 0x18
mov byte [ebp - 4], 0x15
mov ecx, esp
push 0x404f58
call fcn.0041314d
lea eax, [ebp - 0x74]
mov byte [ebp - 4], 4
push eax
call fcn.004125b8
add esp, 0x54
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
test esi, esi
jg 0x41dc44
mov ebx, esi
jmp 0x41dc4d
movzx ebx, si
or ebx, 0x80070000
test esi, esi
je 0x41dcf1
push 0x406de8
sub esp, 0x18
mov ecx, esp
push 0x4050c8
call fcn.0041314d
lea eax, [ebp - 0x74]
push eax
call fcn.004124a5
add esp, 0x20
push esi
sub esp, 0x18
mov ecx, esp
push 0x405104
call fcn.0041314d
lea eax, [ebp - 0x74]
push eax
call fcn.004124a5
add esp, 0x20
lea ecx, [ebp - 0x28]
mov edx, ebx
call fcn.00412874
mov ecx, eax
mov byte [ebp - 4], 0x16
call fcn.00413833
push eax
sub esp, 0x18
mov ecx, esp
push 0x403c6c
call fcn.0041314d
lea eax, [ebp - 0x74]
push eax
call fcn.004124a5
add esp, 0x20
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x28]
call fcn.00413b89
sub esp, 0x18
mov ecx, esp
push 0x403bd8
call fcn.0041314d
lea eax, [ebp - 0x74]
push eax
call fcn.004124a5
add esp, 0x1c
mov dword [ebp - 0x80], ebx
jmp 0x41db43
mov ebx, 0x407134
cmp dword [edi + 0x14], 8
jb 0x41dd00
mov eax, dword [edi]
jmp 0x41dd02
mov eax, edi
push eax
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x78], esp
push 0x4070f8
call fcn.0041314d
sub esp, 0x18
mov byte [ebp - 4], 0x17
mov ecx, esp
mov dword [ebp - 0x80], esp
push ebx
call fcn.0041314d
push 0x174
sub esp, 0x18
mov byte [ebp - 4], 0x18
mov ecx, esp
push 0x404f58
call fcn.0041314d
lea eax, [ebp - 0x74]
mov byte [ebp - 4], 4
push eax
call fcn.004125b8
add esp, 0x54
xor ebx, ebx
jmp 0x41e186
mov dword [ebp - 0x80], esi
mov dword [ebp - 0x84], esi
push 0x406f00
sub esp, 0x18
mov byte [ebp - 4], 0x1a
mov ecx, esp
mov dword [ebp - 0x78], esp
push 0x403d04
call fcn.0041314d
sub esp, 0x18
mov byte [ebp - 4], 0x1b
mov ecx, esp
mov dword [ebp - 0x90], esp
mov ebx, 0x407134
push ebx
call fcn.0041314d
push 0x17b
sub esp, 0x18
mov byte [ebp - 4], 0x1c
mov ecx, esp
push 0x404f58
call fcn.0041314d
lea eax, [ebp - 0x74]
mov byte [ebp - 4], 0x1a
push eax
call fcn.004125b8
add esp, 0x54
lea eax, [ebp - 0x80]
push eax
call dword [sym.imp.VSSAPI.DLL_CreateVssBackupComponentsInternal]
mov esi, eax
test esi, esi
jns 0x41de74
push 0x406f00
sub esp, 0x18
mov ecx, esp
push 0x403ccc
call fcn.0041314d
lea eax, [ebp - 0x74]
push eax
call fcn.004124a5
add esp, 0x20
push esi
sub esp, 0x18
mov ecx, esp
push 0x403c90
call fcn.0041314d
lea eax, [ebp - 0x74]
push eax
call fcn.004124a5
add esp, 0x20
lea ecx, [ebp - 0x28]
mov edx, esi
call fcn.00412874
mov byte [ebp - 4], 0x1d
mov ecx, eax
call fcn.00413833
push eax
sub esp, 0x18
mov ecx, esp
push 0x403c6c
call fcn.0041314d
lea eax, [ebp - 0x74]
push eax
call fcn.004124a5
add esp, 0x20
mov byte [ebp - 4], 0x1a
lea ecx, [ebp - 0x28]
call fcn.00413b89
sub esp, 0x18
mov ecx, esp
push 0x403bd8
call fcn.0041314d
lea eax, [ebp - 0x74]
push eax
call fcn.004124a5
add esp, 0x1c
mov dword [ebp - 0x78], esi
lea eax, [ebp - 0x78]
push 0x4394e4
jmp 0x41e253
push 0x406f68
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x7c], esp
push 0x403d04
call fcn.0041314d
sub esp, 0x18
mov byte [ebp - 4], 0x1e
mov ecx, esp
mov dword [ebp - 0x90], esp
push ebx
call fcn.0041314d
push 0x17c
sub esp, 0x18
mov byte [ebp - 4], 0x1f
mov ecx, esp
push 0x404f58
call fcn.0041314d
lea eax, [ebp - 0x74]
mov byte [ebp - 4], 0x1a
push eax
call fcn.004125b8
mov eax, dword [ebp - 0x80]
lea ecx, [ebp - 0x84]
add esp, 0x54
mov esi, dword [eax]
push ecx
push 0x406f54
push eax
mov ecx, dword [esi]
call dword [0x43b26c]
call dword [esi]
mov esi, eax
test esi, esi
jns 0x41df39
push 0x406f68
sub esp, 0x18
mov ecx, esp
push 0x403ccc
call fcn.0041314d
lea eax, [ebp - 0x74]
push eax
call fcn.004124a5
add esp, 0x20
push esi
sub esp, 0x18
mov ecx, esp
push 0x403c90
call fcn.0041314d
lea eax, [ebp - 0x74]
push eax
call fcn.004124a5
add esp, 0x20
lea ecx, [ebp - 0x28]
mov edx, esi
call fcn.00412874
mov byte [ebp - 4], 0x20
jmp 0x41de1a
push 0x406ff0
sub esp, 0x18
xor ebx, ebx
mov ecx, esp
mov dword [ebp - 0x7c], esp
mov dword [ebp - 0x8c], ebx
mov dword [ebp - 0x88], ebx
push 0x403d04
call fcn.0041314d
sub esp, 0x18
mov byte [ebp - 4], 0x21
mov ecx, esp
mov dword [ebp - 0x90], esp
push 0x407134
call fcn.0041314d
push 0x17f
sub esp, 0x18
mov byte [ebp - 4], 0x22
mov ecx, esp
push 0x404f58
call fcn.0041314d
lea eax, [ebp - 0x74]
mov byte [ebp - 4], 0x1a
push eax
call fcn.004125b8
mov ecx, dword [ebp + 8]
add esp, 0x54
cmp dword [ebp + 0x1c], 8
jae 0x41dfab
lea ecx, [ebp + 8]
mov eax, dword [ebp - 0x84]
lea edx, [ebp - 0x88]
push ebx
push edx
lea edx, [ebp - 0x8c]
mov esi, dword [eax]
push edx
push ecx
push eax
mov esi, dword [esi + 0x100]
mov ecx, esi
call dword [0x43b26c]
call esi
mov esi, eax
test esi, esi
jns 0x41e029
push 0x406ff0
sub esp, 0x18
mov ecx, esp
push 0x403ccc
call fcn.0041314d
lea eax, [ebp - 0x74]
push eax
call fcn.004124a5
add esp, 0x20
push esi
sub esp, 0x18
mov ecx, esp
push 0x403c90
call fcn.0041314d
lea eax, [ebp - 0x74]
push eax
call fcn.004124a5
add esp, 0x20
lea ecx, [ebp - 0x28]
mov edx, esi
call fcn.00412874
mov byte [ebp - 4], 0x23
jmp 0x41de1a
mov edx, dword [ebp - 0x8c]
lea ecx, [ebp - 0x28]
call fcn.0041a469
push eax
mov ecx, edi
call fcn.00418e76
push ebx
push 1
lea ecx, [ebp - 0x28]
call fcn.00413b40
mov edx, dword [ebp - 0x88]
lea ecx, [ebp - 0x28]
call fcn.0041a469
push eax
lea ecx, [ebp - 0x40]
call fcn.00418e76
push ebx
push 1
lea ecx, [ebp - 0x28]
call fcn.00413b40
push dword [ebp - 0x8c]
call dword [sym.imp.ole32.dll_CoTaskMemFree]
push dword [ebp - 0x88]
mov dword [ebp - 0x8c], ebx
call dword [sym.imp.ole32.dll_CoTaskMemFree]
cmp dword [ebp - 0x2c], 8
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x88], ebx
jae 0x41e09c
lea eax, [ebp - 0x40]
push eax
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x7c], esp
push 0x4070d0
call fcn.0041314d
sub esp, 0x18
mov byte [ebp - 4], 0x24
mov ecx, esp
mov dword [ebp - 0x90], esp
mov esi, 0x407134
push esi
call fcn.0041314d
push 0x189
sub esp, 0x18
mov byte [ebp - 4], 0x25
mov ecx, esp
push 0x404f58
call fcn.0041314d
lea eax, [ebp - 0x74]
mov byte [ebp - 4], 0x1a
push eax
call fcn.004125b8
add esp, 0x54
cmp dword [edi + 0x14], 8
jb 0x41e0fb
mov eax, dword [edi]
jmp 0x41e0fd
mov eax, edi
push eax
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x7c], esp
push 0x4070f8
call fcn.0041314d
sub esp, 0x18
mov byte [ebp - 4], 0x26
mov ecx, esp
mov dword [ebp - 0x90], esp
push esi
call fcn.0041314d
push 0x18a
sub esp, 0x18
mov byte [ebp - 4], 0x27
mov ecx, esp
push 0x404f58
call fcn.0041314d
lea eax, [ebp - 0x74]
mov byte [ebp - 4], 0x1a
push eax
call fcn.004125b8
add esp, 0x54
mov byte [ebp - 4], 0x28
mov eax, dword [ebp - 0x84]
test eax, eax
je 0x41e16b
mov ecx, dword [eax]
push eax
mov esi, dword [ecx + 8]
mov ecx, esi
call dword [0x43b26c]
call esi
mov byte [ebp - 4], 0x29
mov eax, dword [ebp - 0x80]
test eax, eax
je 0x41e186
mov ecx, dword [eax]
push eax
mov esi, dword [ecx + 8]
mov ecx, esi
call dword [0x43b26c]
call esi
push ebx
push 1
lea ecx, [ebp - 0x40]
call fcn.00413b40
lea ecx, [ebp - 0x74]
call fcn.004127db
push ebx
push 1
lea ecx, [ebp + 8]
call fcn.00413b40
mov eax, edi
call fcn.0043188c
ret 0x18
push 0x406cc0
sub esp, 0x18
mov ecx, esp
push 0x4050c8
call fcn.0041314d
lea eax, [ebp - 0x74]
push eax
call fcn.004124a5
add esp, 0x20
push ebx
sub esp, 0x18
mov ecx, esp
push 0x405104
call fcn.0041314d
lea eax, [ebp - 0x74]
push eax
call fcn.004124a5
add esp, 0x20
lea ecx, [ebp - 0x28]
mov edx, esi
call fcn.00412874
mov ecx, eax
mov byte [ebp - 4], 0xa
call fcn.00413833
push eax
sub esp, 0x18
mov ecx, esp
push 0x403c6c
call fcn.0041314d
lea eax, [ebp - 0x74]
push eax
call fcn.004124a5
add esp, 0x20
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x28]
call fcn.00413b89
sub esp, 0x18
mov ecx, esp
push 0x403bd8
call fcn.0041314d
lea eax, [ebp - 0x74]
push eax
call fcn.004124a5
add esp, 0x1c
mov dword [ebp - 0x88], esi
lea eax, [ebp - 0x88]
push 0x4394e4
push eax
call sub.msvcrt.dll__CxxThrowException
int3