Function at 0x410b12
Capabilities:
Get disk information
Write file on windows

Disassembly:
mov ecx, dword [0x41ed0c]
mov edx, dword [0x41ed00]
mov eax, 0x80000002
call fcn.00406bb4
mov dword [0x41eb74], eax
mov eax, dword [0x41d320]
push eax
mov ecx, dword [0x41ed38]
mov edx, dword [0x41ed00]
mov eax, 0x80000002
call fcn.00406bb4
mov dword [0x41eb84], eax
cmp dword [0x41eb84], 0x64
jge 0x410d7d
mov eax, dword [0x41d320]
push eax
push 0x400
lea eax, [ebp - 0xe8]
push eax
mov ecx, dword [0x41ed04]
mov edx, dword [0x41ed00]
mov eax, 0x80000002
call fcn.00406c7c
mov eax, dword [ebp - 0xe8]
lea edx, [ebp - 0xe4]
call fcn.0040520c
mov edx, dword [ebp - 0xe4]
mov eax, 0x41eb3c
call fcn.00403780
mov eax, dword [0x41eb3c]
call fcn.004038a4
test eax, eax
je 0x410bd7
mov eax, 1
mov edx, dword [0x41eb3c]
dec eax
test edx, edx
je 0x410bc7
cmp eax, dword [edx - 4]
jb 0x410bcc
call fcn.00402f14
inc eax
mov al, byte [edx + eax - 1]
add al, 0x9f
sub al, 0x1a
jb 0x410be6
mov eax, 0x41eb3c
mov edx, 0x411e64
call fcn.00403780
push 0x100002
mov eax, 0x41ecac
mov ecx, 1
mov edx, dword [0x407a00]
call fcn.00404218
add esp, 4
mov eax, 1
mov edx, dword [0x41eb3c]
dec eax
test edx, edx
je 0x410c18
cmp eax, dword [edx - 4]
jb 0x410c1d
call fcn.00402f14
inc eax
mov al, byte [edx + eax - 1]
cmp al, 0x63
jb 0x410d4e
mov byte [ebp - 1], al
lea eax, [ebp - 0xec]
mov dl, byte [ebp - 1]
call fcn.0040384c
lea eax, [ebp - 0xec]
mov edx, 0x411e70
call fcn.004038ac
mov eax, dword [ebp - 0xec]
call fcn.00403aa4
push eax
call sub.kernel32.dll_GetDriveTypeA
add eax, 0xfffffffe
sub eax, 3
jb 0x410c6d
sub eax, 1
jne 0x410d3a
xor eax, eax
mov dword [0x41eb78], eax
lea eax, [ebp - 0xf0]
mov dl, byte [ebp - 1]
call fcn.0040384c
lea eax, [ebp - 0xf0]
mov edx, 0x411e70
call fcn.004038ac
mov eax, dword [ebp - 0xf0]
call fcn.0040ad10
lea eax, [ebp - 0xf8]
mov dl, byte [ebp - 1]
call fcn.0040384c
mov ecx, dword [ebp - 0xf8]
lea eax, [ebp - 0xf4]
mov edx, 0x411e7c
call fcn.004038f0
mov eax, dword [ebp - 0xf4]
call fcn.00412764
mov eax, 0x41eb54
mov edx, 0x411e90
call fcn.00403780
lea eax, [ebp - 0xfc]
xor edx, edx
mov dl, byte [ebp - 1]
sub edx, 1
jno 0x410cf0
call fcn.00402f1c
call fcn.0040384c
mov eax, dword [ebp - 0xfc]
push eax
mov ecx, dword [0x41ed04]
mov edx, dword [0x41ed00]
mov eax, 0x80000002
call fcn.00406d68
push 0
mov ecx, dword [0x41ed0c]
mov edx, dword [0x41ed00]
mov eax, 0x80000002
call fcn.00406e90
cmp byte [ebp - 1], 0x63
jne 0x410d3a
mov eax, 0x411ed0
call fcn.00412764
xor eax, eax
mov dword [0x41eb74], eax
dec byte [ebp - 1]
cmp byte [ebp - 1], 0x62
jne 0x410c2d
mov dword [0x41eb84], 0x64
mov eax, dword [0x41eb84]
test eax, eax
jns 0x410d66
call fcn.00402f14
push eax
mov ecx, dword [0x41ed38]
mov edx, dword [0x41ed00]
mov eax, 0x80000002
call fcn.00406e90
mov eax, 0x41eb54
mov edx, 0x411ee4
call fcn.00403780
cmp dword [0x41eb84], 0xc8
jge 0x410e4f
cmp byte [0x41eb98], 0x66
jne 0x410dac
mov byte [0x41d280], 0
xor eax, eax
mov dword [0x41eb7c], eax
mov eax, 0x41eb54
mov edx, 0x411f50
call fcn.00403780
mov eax, dword [0x41d320]
push eax
mov ecx, dword [0x41ed08]
mov edx, dword [0x41ed00]
mov eax, 0x80000002
call fcn.00406bb4
mov dword [0x41eb80], eax
push 0x100002
mov eax, 0x41ecac
mov ecx, 1
mov edx, dword [0x407a00]
call fcn.00404218
add esp, 4
xor eax, eax
call fcn.0040b9ac
mov dword [0x41eb84], 0xc8
mov eax, dword [0x41eb84]
test eax, eax
jns 0x410e1f
call fcn.00402f14
push eax
mov ecx, dword [0x41ed38]
mov edx, dword [0x41ed00]
mov eax, 0x80000002
call fcn.00406e90
mov eax, 0x411f88
call fcn.00412764
mov eax, 0x41eb54
mov edx, 0x411fa0
call fcn.00403780
push 0
mov eax, 0x41ecac
mov ecx, 1
mov edx, dword [0x407a00]
call fcn.00404218
add esp, 4
mov eax, 0x41eb54
mov edx, 0x412040
call fcn.00403780
mov eax, 0x41ebb0
call fcn.00406fe0
mov eax, dword [0x41eb30]
call fcn.004038a4
test eax, eax
jne 0x410ed7
lea edx, [ebp - 0x100]
mov eax, dword [0x41eb2c]
call fcn.0040548c
mov edx, dword [ebp - 0x100]
mov eax, 0x41eb30
call fcn.00403780
mov eax, dword [0x41eb30]
call fcn.004038a4
test eax, eax
jne 0x410ed7
call fcn.004085a0
jmp 0x41135c
cmp byte [0x41eb98], 0x64
jne 0x410eea
call fcn.00412b18
call fcn.004035c0
mov byte [0x41d280], 0
mov eax, dword [0x41d320]
push eax
mov ecx, dword [0x41ed14]
mov edx, dword [0x41ed00]
mov eax, 0x80000002
call fcn.00406bb4
dec eax
je 0x410ff5
loope 0x410f12
add byte [eax], al