Function at 0x100117eb
Capabilities:
Get disk information

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100bb7fc
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xe0
push edi
cmp dword [ebp + 8], 0
je 0x1001181c
cmp dword [ebp + 0xc], 0
je 0x1001181c
cmp dword [ebp + 0x10], 0
jne 0x10011826
mov eax, 0xc000000d
jmp 0x10011d6f
mov eax, dword [ebp + 8]
push eax
lea ecx, [ebp - 0x14]
call fcn.1003d200
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x14]
call fcn.100038e0
mov dword [ebp - 0x10], eax
lea ecx, [ebp - 0x14]
call fcn.10003710
test eax, eax
jne 0x10011856
cmp dword [ebp - 0x10], 0
jne 0x1001187a
mov dword [ebp - 0xb8], 0xc000000d
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x14]
call fcn.1003d9a0
mov eax, dword [ebp - 0xb8]
jmp 0x10011d6f
push 0x100d8c74
call fcn.1004e37e
add esp, 4
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x18]
push ecx
push str._TSD_VOLUME_
mov edx, dword [ebp + 8]
push edx
call fcn.1004ea3e
add esp, 0xc
test eax, eax
je 0x100118c0
mov eax, dword [ebp - 0x18]
push eax
push str..TSD_VOLUME_
mov ecx, dword [ebp + 8]
push ecx
call fcn.1004ea3e
add esp, 0xc
test eax, eax
jne 0x10011a1e
push 0x3a
mov edx, dword [ebp - 0x18]
mov eax, dword [ebp + 8]
lea ecx, [eax + edx*2]
push ecx
call fcn.1004e39b
add esp, 8
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
jne 0x10011901
mov dword [ebp - 0xbc], 0xc000000d
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x14]
call fcn.1003d9a0
mov eax, dword [ebp - 0xbc]
jmp 0x10011d6f
mov edx, dword [ebp - 0x18]
mov eax, dword [ebp + 8]
lea ecx, [eax + edx*2]
mov edx, dword [ebp - 0x20]
sub edx, ecx
sar edx, 1
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x10]
sub eax, dword [ebp - 0x18]
cmp dword [ebp - 0x1c], eax
jbe 0x10011943
mov dword [ebp - 0xc0], 0x80000005
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x14]
call fcn.1003d9a0
mov eax, dword [ebp - 0xc0]
jmp 0x10011d6f
mov ecx, dword [ebp - 0x10]
add ecx, 7
cmp dword [ebp + 0x10], ecx
jae 0x10011972
mov dword [ebp - 0xc4], 0x80000005
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x14]
call fcn.1003d9a0
mov eax, dword [ebp - 0xc4]
jmp 0x10011d6f
mov edx, dword [ebp + 0x10]
shl edx, 1
push edx
push 0
mov eax, dword [ebp + 0xc]
push eax
call fcn.1004e290
add esp, 0xc
push 0x2e
push 0x100d8cd4
mov ecx, dword [ebp + 0xc]
push ecx
call fcn.1004eeb0
add esp, 0xc
mov edx, dword [ebp - 0x1c]
shl edx, 1
push edx
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp + 8]
lea edx, [ecx + eax*2]
push edx
mov eax, dword [ebp + 0xc]
add eax, 0x2e
push eax
call fcn.1004eeb0
add esp, 0xc
mov ecx, dword [ebp - 0x10]
sub ecx, dword [ebp - 0x18]
sub ecx, dword [ebp - 0x1c]
sub ecx, 1
test ecx, ecx
jbe 0x100119fa
mov edx, dword [ebp - 0x10]
sub edx, dword [ebp - 0x18]
sub edx, dword [ebp - 0x1c]
lea eax, [edx + edx - 2]
push eax
mov ecx, dword [ebp - 0x18]
mov edx, dword [ebp + 8]
lea eax, [edx + ecx*2]
mov ecx, dword [ebp - 0x1c]
lea edx, [eax + ecx*2 + 2]
push edx
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp + 0xc]
lea edx, [ecx + eax*2 + 0x2e]
push edx
call fcn.1004eeb0
add esp, 0xc
mov dword [ebp - 0xc8], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x14]
call fcn.1003d9a0
mov eax, dword [ebp - 0xc8]
jmp 0x10011d6f
push 0x100d8d04
call fcn.1004e37e
add esp, 4
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
push eax
push str._TVD_VOLUME_
mov ecx, dword [ebp + 8]
push ecx
call fcn.1004ea3e
add esp, 0xc
test eax, eax
je 0x10011a64
mov edx, dword [ebp - 0x18]
push edx
push str..TVD_VOLUME_
mov eax, dword [ebp + 8]
push eax
call fcn.1004ea3e
add esp, 0xc
test eax, eax
jne 0x10011bc2
push 0x3a
mov ecx, dword [ebp - 0x18]
mov edx, dword [ebp + 8]
lea eax, [edx + ecx*2]
push eax
call fcn.1004e39b
add esp, 8
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0
jne 0x10011aa5
mov dword [ebp - 0xcc], 0xc000000d
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x14]
call fcn.1003d9a0
mov eax, dword [ebp - 0xcc]
jmp 0x10011d6f
mov ecx, dword [ebp - 0x18]
mov edx, dword [ebp + 8]
lea eax, [edx + ecx*2]
mov ecx, dword [ebp - 0x28]
sub ecx, eax
sar ecx, 1
mov dword [ebp - 0x24], ecx
mov edx, dword [ebp - 0x10]
sub edx, dword [ebp - 0x18]
cmp dword [ebp - 0x24], edx
jbe 0x10011ae7
mov dword [ebp - 0xd0], 0x80000005
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x14]
call fcn.1003d9a0
mov eax, dword [ebp - 0xd0]
jmp 0x10011d6f
mov eax, dword [ebp - 0x10]
add eax, 0xa
cmp dword [ebp + 0x10], eax
jae 0x10011b16
mov dword [ebp - 0xd4], 0x80000005
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x14]
call fcn.1003d9a0
mov eax, dword [ebp - 0xd4]
jmp 0x10011d6f
mov ecx, dword [ebp + 0x10]
shl ecx, 1
push ecx
push 0
mov edx, dword [ebp + 0xc]
push edx
call fcn.1004e290
add esp, 0xc
push 0x34
push 0x100d8d64
mov eax, dword [ebp + 0xc]
push eax
call fcn.1004eeb0
add esp, 0xc
mov ecx, dword [ebp - 0x24]
shl ecx, 1
push ecx
mov edx, dword [ebp - 0x18]
mov eax, dword [ebp + 8]
lea ecx, [eax + edx*2]
push ecx
mov edx, dword [ebp + 0xc]
add edx, 0x34
push edx
call fcn.1004eeb0
add esp, 0xc
mov eax, dword [ebp - 0x10]
sub eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0x24]
sub eax, 1
test eax, eax
jbe 0x10011b9e
mov ecx, dword [ebp - 0x10]
sub ecx, dword [ebp - 0x18]
sub ecx, dword [ebp - 0x24]
lea edx, [ecx + ecx - 2]
push edx
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp + 8]
lea edx, [ecx + eax*2]
mov eax, dword [ebp - 0x24]
lea ecx, [edx + eax*2 + 2]
push ecx
mov edx, dword [ebp - 0x24]
mov eax, dword [ebp + 0xc]
lea ecx, [eax + edx*2 + 0x34]
push ecx
call fcn.1004eeb0
add esp, 0xc
mov dword [ebp - 0xd8], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x14]
call fcn.1003d9a0
mov eax, dword [ebp - 0xd8]
jmp 0x10011d6f
cmp dword [ebp - 0x10], 2
jbe 0x10011c6a
mov edx, dword [ebp + 8]
xor eax, eax
mov ax, word [edx]
cmp eax, 0x5c
jne 0x10011c6a
mov ecx, dword [ebp + 8]
xor edx, edx
mov dx, word [ecx + 2]
cmp edx, 0x5c
jne 0x10011c6a
mov eax, dword [ebp - 0x10]
add eax, 0x18
cmp dword [ebp + 0x10], eax
jae 0x10011c1a
mov dword [ebp - 0xdc], 0x80000005
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x14]
call fcn.1003d9a0
mov eax, dword [ebp - 0xdc]
jmp 0x10011d6f
mov ecx, dword [ebp + 0x10]
shl ecx, 1
push ecx
push 0
mov edx, dword [ebp + 0xc]
push edx
call fcn.1004e290
add esp, 0xc
mov eax, dword [ebp + 8]
add eax, 2
push eax
push str.DeviceLanmanRedirector_s
mov ecx, dword [ebp + 0xc]
push ecx
call fcn.1004f648
add esp, 0xc
mov dword [ebp - 0xe0], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x14]
call fcn.1003d9a0
mov eax, dword [ebp - 0xe0]
jmp 0x10011d6f
cmp dword [ebp - 0x10], 2
jb 0x10011d50
mov edx, dword [ebp + 8]
xor eax, eax
mov ax, word [edx + 2]
cmp eax, 0x3a
jne 0x10011d50
mov word [ebp - 0x34], 0
xor ecx, ecx
mov dword [ebp - 0x32], ecx
mov word [ebp - 0x2e], cx
mov edx, dword [ebp + 8]
mov ax, word [edx]
mov word [ebp - 0x34], ax
mov word [ebp - 0x32], 0x3a
mov word [ebp - 0xb4], 0
mov ecx, 0x1f
xor eax, eax
lea edi, [ebp - 0xb2]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
push 0x40
lea ecx, [ebp - 0xb4]
push ecx
lea edx, [ebp - 0x34]
push edx
call dword [sym.imp.KERNEL32.dll_QueryDosDeviceW]
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0
jne 0x10011cfc
mov dword [ebp - 0xe4], 0x80000005
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x14]
call fcn.1003d9a0
mov eax, dword [ebp - 0xe4]
jmp 0x10011d6f
mov eax, dword [ebp + 0x10]
shl eax, 1
push eax
push 0
mov ecx, dword [ebp + 0xc]
push ecx
call fcn.1004e290
add esp, 0xc
mov edx, dword [ebp + 8]
add edx, 4
push edx
lea eax, [ebp - 0xb4]
push eax
push 0x100d8dd4
mov ecx, dword [ebp + 0xc]
push ecx
call fcn.1004f648
add esp, 0x10
mov dword [ebp - 0xe8], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x14]
call fcn.1003d9a0
mov eax, dword [ebp - 0xe8]
jmp 0x10011d6f
mov dword [ebp - 0xec], 0xc000000d
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x14]
call fcn.1003d9a0
mov eax, dword [ebp - 0xec]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
mov esp, ebp
pop ebp
ret