Function at 0x10003a60
Capabilities:
Enumerate disk volumes
Get disk information

Disassembly:
lea ecx, [esp + 4]
and esp, 0xfffffff8
mov edx, 2
push dword [ecx - 4]
push ebp
mov ebp, esp
push edi
push esi
push ebx
push ecx
sub esp, 0x24c
mov eax, dword [ecx]
mov edi, dword [ecx + 4]
mov ecx, 8
mov dword [ebp - 0x22c], eax
mov dword [ebp - 0x244], edi
call sym._resize_table
test eax, eax
je 0x10003d18
lea edi, [ebp - 0x218]
mov dword [esp + 4], 0x104
mov dword [esp], edi
call dword [sym.imp.kernel32.dll_FindFirstVolumeW]
mov dword [ebp - 0x240], eax
sub esp, 8
cmp eax, 0xffffffff
je 0x10003d63
mov ecx, dword [ebp - 0x244]
xor eax, eax
mov dword [ebp - 0x234], 0
mov dword [ebp - 0x228], 0
test ecx, ecx
setne al
mov dword [ebp - 0x248], eax
nop
mov eax, dword [ebp - 0x228]
mov ebx, dword [ebp - 0x22c]
mov ecx, 8
add eax, 1
mov dword [ebp - 0x238], eax
mov edx, eax
mov eax, ebx
call sym._resize_table
test eax, eax
je 0x10003d18
mov eax, dword [ebp - 0x234]
add eax, dword [ebx + 0x14]
lea ebx, [ebp - 0x220]
mov dword [ebp - 0x230], eax
mov esi, eax
mov dword [esp], edi
call dword [sym.imp.ucrtbase.dll__wcsdup]
mov dword [esi], eax
mov dword [ebp - 0x220], 0
mov dword [esp + 0xc], ebx
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], edi
call dword [sym.imp.kernel32.dll_GetVolumePathNamesForVolumeNameW]
sub esp, 0x10
test eax, eax
jne 0x10003b7e
mov eax, dword fs:[0x18]
cmp dword [eax + 0x34], 0xea
jne 0x10003ce1
mov ecx, dword [ebp - 0x220]
lea eax, [ecx + ecx]
mov dword [ebp - 0x23c], ecx
mov dword [esp], eax
call dword [sym.imp.ucrtbase.dll_malloc]
mov esi, eax
test eax, eax
je 0x10003ce1
mov dword [esp + 0xc], ebx
mov ecx, dword [ebp - 0x23c]
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov dword [esp], edi
call dword [sym.imp.kernel32.dll_GetVolumePathNamesForVolumeNameW]
sub esp, 0x10
test eax, eax
je 0x10003cd8
mov ecx, dword [sym.imp.ucrtbase.dll_wcschr]
mov dword [esp + 4], 0x3a
mov dword [esp], esi
mov dword [ebp - 0x23c], ecx
call ecx
test eax, eax
je 0x10003cd8
mov dword [esp + 4], 0x3a
mov dword [esp], esi
mov ecx, dword [ebp - 0x23c]
call ecx
xor edx, edx
mov word [eax + 2], dx
mov eax, dword [ebp - 0x230]
mov edx, dword [ebp - 0x244]
mov dword [eax + 4], esi
test edx, edx
je 0x10003c5c
lea eax, [ebp - 0x224]
mov dword [esp + 0xc], ebx
mov ebx, 0xffffffff
mov dword [esp + 0x10], eax
mov dword [esp + 8], edx
mov eax, dword [ebp - 0x228]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x22c]
mov dword [esp], eax
call sym._eval_cond
test eax, eax
jne 0x10003cf8
mov eax, dword [ebp - 0x220]
or eax, dword [ebp - 0x21c]
je 0x10003cf0
mov eax, dword [ebp - 0x238]
add dword [ebp - 0x234], 8
mov ebx, dword [ebp - 0x248]
mov dword [ebp - 0x228], eax
mov dword [esp + 8], 0x104
mov dword [esp + 4], edi
mov eax, dword [ebp - 0x240]
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_FindNextVolumeW]
sub esp, 0xc
test eax, eax
jne 0x10003af0
mov eax, dword [ebp - 0x240]
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_FindVolumeClose]
sub esp, 4
test byte [0x1002179c], 8
jne 0x10003d30
mov eax, dword [ebp - 0x22c]
mov edi, dword [ebp - 0x228]
mov dword [eax + 0xc], edi
lea esp, [ebp - 0x10]
mov eax, ebx
pop ecx
pop ebx
pop esi
pop edi
pop ebp
lea esp, [ecx - 4]
ret
mov dword [esp], esi
call dword [sym.imp.ucrtbase.dll_free]
xor esi, esi
jmp 0x10003c00
mov ebx, 1
lea esi, [esi]
mov eax, dword [ebp - 0x228]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x22c]
mov dword [esp], eax
call sym._free_row_values
jmp 0x10003c75
lea esp, [ebp - 0x10]
mov ebx, 0xffffffff
pop ecx
mov eax, ebx
pop ebx
pop esi
pop edi
pop ebp
lea esp, [ecx - 4]
ret
mov eax, dword [ebp - 0x228]
mov dword [esp + 0xc], str.created__u_rows_n
mov dword [esp + 8], str.fill_volume
mov dword [esp + 0x10], eax
mov dword [esp + 4], 0x1002179c
mov dword [esp], 3
call sym._wine_dbg_log.constprop.0
jmp 0x10003cb6
mov dword [ebp - 0x228], 0
xor ebx, ebx
jmp 0x10003cad