Function at 0x10071aa3
Capabilities:
Get disk information

Disassembly:
push ebp
lea ebp, [esp - 0x3fc]
sub esp, 0x47c
mov eax, dword [0x100e13e0]
xor eax, ebp
mov dword [ebp + 0x3f8], eax
push ebx
push esi
mov esi, dword [ebp + 0x404]
xor ebx, ebx
cmp esi, ebx
push edi
mov edi, dword [ebp + 0x408]
mov dword [ebp - 0x78], esi
jne 0x10071afa
call fcn.100761f4
mov dword [eax], ebx
call fcn.100761e1
push ebx
push ebx
push ebx
push ebx
push ebx
mov dword [eax], 0x16
call fcn.1006f2a7
add esp, 0x14
jmp 0x10071ddc
cmp edi, ebx
je 0x10071ad6
push 0x100bdc00
push esi
call fcn.10073ad0
test eax, eax
pop ecx
pop ecx
je 0x10071b25
call fcn.100761e1
push 2
pop esi
mov dword [eax], esi
call fcn.100761f4
mov dword [eax], esi
jmp 0x10071ddc
cmp word [esi + 2], 0x3a
jne 0x10071b49
movzx eax, word [esi]
cmp ax, bx
je 0x10071b3a
cmp word [esi + 4], bx
je 0x10071b0f
push eax
call fcn.10074673
movzx eax, ax
pop ecx
sub eax, 0x60
jmp 0x10071b4e
call fcn.1007f4e2
mov dword [ebp - 0x80], eax
lea eax, [ebp - 0x60]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
cmp eax, 0xffffffff
mov dword [ebp - 0x64], eax
jne 0x10071c24
push 0x100bdbf8
push esi
mov dword [ebp - 0x64], ebx
call fcn.10073ad0
test eax, eax
pop ecx
pop ecx
je 0x10071b0f
lea eax, [ebp - 0x64]
push eax
push 0x104
lea eax, [ebp + 0x1f0]
push esi
push eax
call fcn.10071a45
mov esi, eax
add esp, 0x10
cmp esi, ebx
je 0x10071c0d
push esi
call fcn.1006f3ab
cmp eax, 3
pop ecx
je 0x10071bb0
call fcn.100719a6
test eax, eax
je 0x10071c0d
push esi
call dword [sym.imp.KERNEL32.dll_GetDriveTypeW]
cmp eax, 1
jbe 0x10071c0d
cmp dword [ebp - 0x64], ebx
je 0x10071bca
push dword [ebp - 0x64]
call fcn.100718cd
pop ecx
push 0xffffffffffffffff
push ebx
push ebx
push ebx
push 1
push 1
push 0x7bc
mov dword [ebp - 0x60], 0x10
mov dword [ebp - 0x44], ebx
mov dword [ebp - 0x40], ebx
mov word [ebp - 0x34], bx
call fcn.1007f279
mov esi, dword [ebp - 0x78]
mov ecx, edx
add esp, 0x1c
mov dword [edi + 0x28], eax
mov dword [edi + 0x2c], edx
mov dword [edi + 0x20], eax
mov dword [edi + 0x24], ecx
mov dword [edi + 0x30], eax
mov dword [edi + 0x34], ecx
jmp 0x10071d7d
cmp dword [ebp - 0x64], ebx
je 0x10071b0f
push dword [ebp - 0x64]
call fcn.100718cd
pop ecx
jmp 0x10071b0f
cmp dword [ebp - 0x4c], ebx
jne 0x10071c36
cmp dword [ebp - 0x48], ebx
jne 0x10071c36
mov dword [edi + 0x28], ebx
mov dword [edi + 0x2c], ebx
jmp 0x10071c90
lea eax, [ebp - 0x7c]
push eax
lea eax, [ebp - 0x4c]
push eax
call dword [sym.imp.KERNEL32.dll_FileTimeToLocalFileTime]
test eax, eax
je 0x10071dc6
lea eax, [ebp - 0x74]
push eax
lea eax, [ebp - 0x7c]
push eax
call dword [sym.imp.KERNEL32.dll_FileTimeToSystemTime]
test eax, eax
je 0x10071dc6
movzx eax, word [ebp - 0x68]
push 0xffffffffffffffff
push eax
movzx eax, word [ebp - 0x6a]
push eax
movzx eax, word [ebp - 0x6c]
push eax
movzx eax, word [ebp - 0x6e]
push eax
movzx eax, word [ebp - 0x72]
push eax
movzx eax, word [ebp - 0x74]
push eax
call fcn.1007f279
add esp, 0x1c
mov dword [edi + 0x28], eax
mov dword [edi + 0x2c], edx
cmp dword [ebp - 0x54], ebx
jne 0x10071ca8
cmp dword [ebp - 0x50], ebx
jne 0x10071ca8
mov eax, dword [edi + 0x28]
mov dword [edi + 0x20], eax
mov eax, dword [edi + 0x2c]
mov dword [edi + 0x24], eax
jmp 0x10071d02
lea eax, [ebp - 0x7c]
push eax
lea eax, [ebp - 0x54]
push eax
call dword [sym.imp.KERNEL32.dll_FileTimeToLocalFileTime]
test eax, eax
je 0x10071dc6
lea eax, [ebp - 0x74]
push eax
lea eax, [ebp - 0x7c]
push eax
call dword [sym.imp.KERNEL32.dll_FileTimeToSystemTime]
test eax, eax
je 0x10071dc6
movzx eax, word [ebp - 0x68]
push 0xffffffffffffffff
push eax
movzx eax, word [ebp - 0x6a]
push eax
movzx eax, word [ebp - 0x6c]
push eax
movzx eax, word [ebp - 0x6e]
push eax
movzx eax, word [ebp - 0x72]
push eax
movzx eax, word [ebp - 0x74]
push eax
call fcn.1007f279
add esp, 0x1c
mov dword [edi + 0x20], eax
mov dword [edi + 0x24], edx
cmp dword [ebp - 0x5c], ebx
jne 0x10071d1a
cmp dword [ebp - 0x58], ebx
jne 0x10071d1a
mov eax, dword [edi + 0x28]
mov dword [edi + 0x30], eax
mov eax, dword [edi + 0x2c]
mov dword [edi + 0x34], eax
jmp 0x10071d74
lea eax, [ebp - 0x7c]
push eax
lea eax, [ebp - 0x5c]
push eax
call dword [sym.imp.KERNEL32.dll_FileTimeToLocalFileTime]
test eax, eax
je 0x10071dc6
lea eax, [ebp - 0x74]
push eax
lea eax, [ebp - 0x7c]
push eax
call dword [sym.imp.KERNEL32.dll_FileTimeToSystemTime]
test eax, eax
je 0x10071dc6
movzx eax, word [ebp - 0x68]
push 0xffffffffffffffff
push eax
movzx eax, word [ebp - 0x6a]
push eax
movzx eax, word [ebp - 0x6c]
push eax
movzx eax, word [ebp - 0x6e]
push eax
movzx eax, word [ebp - 0x72]
push eax
movzx eax, word [ebp - 0x74]
push eax
call fcn.1007f279
add esp, 0x1c
mov dword [edi + 0x30], eax
mov dword [edi + 0x34], edx
push dword [ebp - 0x64]
call dword [sym.imp.KERNEL32.dll_FindClose]
push esi
push dword [ebp - 0x60]
call fcn.1007f1ba
pop ecx
pop ecx
push 1
push ebx
push ebx
push dword [ebp - 0x44]
mov word [edi + 6], ax
mov word [edi + 8], 1
call fcn.1007f5b0
mov ecx, dword [ebp - 0x40]
xor esi, esi
add eax, ecx
mov dword [edi + 0x18], eax
mov eax, dword [ebp - 0x80]
adc edx, esi
dec eax
mov dword [edi], eax
mov dword [edi + 0x10], eax
mov dword [edi + 0x1c], edx
mov word [edi + 4], bx
mov word [edi + 0xc], bx
mov word [edi + 0xa], bx
xor eax, eax
jmp 0x10071ddf
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
call fcn.10076207
pop ecx
push dword [ebp - 0x64]
call dword [sym.imp.KERNEL32.dll_FindClose]
or eax, 0xffffffff
mov ecx, dword [ebp + 0x3f8]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.1006f3c1
add ebp, 0x3fc
leave
ret