Function at 0x100dcbe
Capabilities:
Get disk information

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x434
mov eax, dword [section..data]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 0x10]
push ebx
push esi
mov esi, dword [ebp + 8]
push edi
push 0x2c
push 0
push 0x1022740
mov dword [ebp - 0x424], esi
mov dword [ebp - 0x428], eax
call sub.msvcrt.dll_memset
mov eax, dword [ebp + 0xc]
mov ebx, dword [sym.imp.KERNEL32.dll_HeapAlloc]
add esp, 0xc
mov dword [0x1022750], eax
test esi, esi
je 0x100dddb
lea edi, [ebp - 0xc]
movsd dword es:[edi], dword [esi]
xor eax, eax
movsw word es:[edi], word [esi]
mov word [ebp - 8], ax
push 0x104
lea eax, [ebp - 0x214]
push eax
lea eax, [ebp - 0xc]
push eax
call dword [sym.imp.KERNEL32.dll_QueryDosDeviceW]
test eax, eax
jne 0x100dd44
mov dword [ebp - 0x420], 0xc000000d
jmp 0x100dfe9
lea eax, [ebp - 0x214]
lea edx, [eax + 2]
mov cx, word [eax]
inc eax
inc eax
test cx, cx
jne 0x100dd4d
mov edi, dword [sym.imp.KERNEL32.dll_GetProcessHeap]
sub eax, edx
sar eax, 1
lea esi, [eax + eax + 2]
push esi
push 8
call edi
push eax
call ebx
mov dword [0x1022758], eax
test eax, eax
jne 0x100dd85
mov dword [ebp - 0x420], 0xc0000017
jmp 0x100dfe9
push esi
lea ecx, [ebp - 0x214]
push ecx
push eax
call sub.msvcrt.dll_memcpy
add esp, 0xc
add dword [ebp - 0x424], 4
mov eax, dword [ebp - 0x424]
lea ecx, [eax + 2]
mov dx, word [eax]
inc eax
inc eax
test dx, dx
jne 0x100dda6
sub eax, ecx
sar eax, 1
lea esi, [eax + eax + 2]
push esi
push 8
call edi
push eax
call ebx
mov dword [0x1022768], eax
test eax, eax
je 0x100dd76
push esi
push dword [ebp - 0x424]
push eax
call sub.msvcrt.dll_memcpy
add esp, 0xc
jmp 0x100dde1
mov edi, dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov byte [0x102274c], 0
call fcn.0100fa3a
cmp eax, 2
jne 0x100ddf9
mov byte [0x102274c], 1
and dword [ebp - 0x420], 0
cmp dword [ebp - 0x428], 0
jne 0x100de13
mov dword [ebp - 0x428], 0x1001568
mov eax, dword [ebp - 0x428]
lea edx, [eax + 2]
mov cx, word [eax]
inc eax
inc eax
test cx, cx
jne 0x100de1c
sub eax, edx
sar eax, 1
lea esi, [eax + eax + 2]
push esi
push 8
call edi
push eax
call ebx
mov dword [0x1022754], eax
test eax, eax
je 0x100dd76
push esi
push dword [ebp - 0x428]
push eax
call sub.msvcrt.dll_memcpy
add esp, 0xc
push 0
call fcn.01011001
mov dword [0x1022764], eax
test eax, eax
jne 0x100de72
mov dword [ebp - 0x420], 0xc0000225
jmp 0x100dfe9
test byte [ebp + 0xc], 0x10
je 0x100de88
push eax
call fcn.01010dcf
mov byte [0x102274d], al
mov eax, dword [0x1022764]
lea edx, [eax + 2]
mov cx, word [eax]
inc eax
inc eax
test cx, cx
jne 0x100de8b
sub eax, edx
sar eax, 1
lea eax, [eax + eax + 2]
mov dword [ebp - 0x430], eax
add eax, 0x3c
push eax
push 8
mov dword [ebp - 0x42c], eax
call edi
push eax
call ebx
mov esi, eax
test esi, esi
je 0x100dd76
push dword [ebp - 0x430]
mov dword [esi], 2
push dword [0x1022764]
lea eax, [esi + 0x14]
push eax
call sub.msvcrt.dll_memcpy
mov eax, dword [ebp - 0x42c]
mov dword [0x1022760], eax
lea eax, [ebp - 0x214]
add esp, 0xc
mov dword [0x102275c], esi
lea ecx, [eax + 2]
mov dx, word [eax]
inc eax
inc eax
test dx, dx
jne 0x100def6
sub eax, ecx
sar eax, 1
lea esi, [eax + eax + 2]
lea eax, [esi + 0x3c]
push eax
push 8
mov dword [ebp - 0x42c], eax
call edi
push eax
call ebx
mov edi, eax
test edi, edi
je 0x100dd76
push 2
pop ebx
push esi
lea eax, [ebp - 0x214]
push eax
lea eax, [edi + 0x14]
push eax
mov dword [edi], ebx
call sub.msvcrt.dll_memcpy
mov eax, dword [ebp - 0x42c]
add esp, 0xc
cmp dword [ebp - 0x424], 0
mov dword [0x1022744], eax
mov dword [0x1022740], edi
je 0x100dfee
push 0x100153c
push dword [ebp - 0x424]
lea eax, [ebp - 0xc]
push eax
push 0x100152c
lea eax, [ebp - 0x41c]
push 0x104
push eax
call fcn.0100948b
add esp, 0x18
lea eax, [ebp - 0x434]
push eax
push dword [ebp - 0x428]
call fcn.0101295b
push dword [ebp - 0x434]
lea eax, [ebp - 0x41c]
push 8
push eax
call fcn.0101eb73
mov dword [0x1022748], eax
test eax, eax
jne 0x100dfee
push ebx
push eax
lea eax, [ebp - 0x41c]
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryExW]
mov dword [0x1022748], eax
test eax, eax
jne 0x100dfee
mov dword [ebp - 0x420], 0xc0000001
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push 0x10014d0
push 4
call fcn.01011772
add esp, 0xc
call fcn.0100dbff
mov ecx, dword [ebp - 4]
mov eax, dword [ebp - 0x420]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.010090b9
leave
ret 0xc