Function at 0x1001e9a2
Capabilities:
Get disk information

Disassembly:
mov eax, 0x10044a03
call fcn.10033d28
sub esp, 0xa8
mov eax, dword [0x1005392c]
push ebx
push esi
mov dword [ebp - 0x10], eax
push edi
lea eax, [ebp - 0x64]
push eax
mov edi, ecx
call fcn.1001ddef
xor esi, esi
push 0x10046888
lea ecx, [ebp - 0x64]
mov dword [ebp - 4], esi
call fcn.10001bb8
lea ecx, [edi + 0x14c]
mov dword [ebp - 0x84], ecx
call fcn.10017bca
push 0x10047c84
lea ecx, [ebp - 0x80]
call fcn.10001cde
mov eax, dword [ebp - 0x7c]
xor ebx, ebx
inc ebx
cmp dword [ebp - 0x68], 0x10
mov byte [ebp - 4], bl
mov dword [ebp - 0xb4], esi
jae 0x1001ea10
lea eax, [ebp - 0x7c]
push esi
push esi
push esi
push esi
lea ecx, [ebp - 0xb4]
push ecx
push 0xc
push esi
push eax
call dword [sym.imp.KERNEL32.dll_GetVolumeInformationA]
lea ecx, [ebp - 0xb0]
call fcn.10024ab4
push 4
lea eax, [ebp - 0xb4]
push eax
lea eax, [ebp - 0x48]
push eax
lea ecx, [ebp - 0xb0]
mov byte [ebp - 4], 2
call fcn.10025563
cmp dword [ebp - 0x30], 0x10
mov eax, dword [ebp - 0x44]
mov byte [ebp - 4], 3
jae 0x1001ea5c
lea eax, [ebp - 0x44]
push dword [ebp - 0x34]
lea ecx, [ebp - 0xb0]
push eax
lea eax, [ebp - 0xa0]
push eax
call fcn.10025563
or edi, 0xffffffff
push edi
push esi
push eax
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 4
call fcn.10001a1c
push esi
push ebx
lea ecx, [ebp - 0xa0]
mov byte [ebp - 4], 3
call fcn.1000151f
push 4
push esi
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x48]
call fcn.10001d00
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x64]
push eax
lea eax, [ebp - 0xa0]
push eax
mov byte [ebp - 4], 5
call fcn.100024a8
add esp, 0xc
push edi
push esi
push eax
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 6
call fcn.10001a1c
push esi
push ebx
lea ecx, [ebp - 0xa0]
mov byte [ebp - 4], 5
call fcn.1000151f
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0xa4]
call fcn.10001bd5
mov dword [ebp - 0x88], esi
mov ecx, dword [ebp - 0x84]
lea eax, [ebp - 0xa4]
push eax
lea eax, [ebp - 0xac]
push eax
mov byte [ebp - 4], 7
call fcn.10017dd5
push esi
push ebx
lea ecx, [ebp - 0xa4]
mov byte [ebp - 4], 5
call fcn.1000151f
push 3
push 4
lea eax, [ebp - 0xa0]
push eax
lea ecx, [ebp - 0x48]
call fcn.10001d00
push edi
push esi
push eax
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 8
call fcn.10001a1c
push esi
mov byte [ebp - 4], 5
push ebx
lea ecx, [ebp - 0xa0]
call fcn.1000151f
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x64]
push eax
lea eax, [ebp - 0xa0]
push eax
call fcn.100024a8
add esp, 0xc
push edi
push esi
push eax
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 9
call fcn.10001a1c
push esi
push ebx
lea ecx, [ebp - 0xa0]
mov byte [ebp - 4], 5
call fcn.1000151f
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0xa4]
call fcn.10001bd5
mov dword [ebp - 0x88], esi
mov ecx, dword [ebp - 0x84]
lea eax, [ebp - 0xa4]
push eax
lea eax, [ebp - 0xac]
push eax
mov byte [ebp - 4], 0xa
call fcn.10017dd5
push esi
push ebx
lea ecx, [ebp - 0xa4]
mov byte [ebp - 4], 5
call fcn.1000151f
push 3
push 8
lea eax, [ebp - 0xa0]
push eax
lea ecx, [ebp - 0x48]
call fcn.10001d00
push edi
push esi
push eax
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0xb
call fcn.10001a1c
push esi
push ebx
lea ecx, [ebp - 0xa0]
mov byte [ebp - 4], 5
call fcn.1000151f
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x64]
push eax
lea eax, [ebp - 0xa0]
push eax
call fcn.100024a8
add esp, 0xc
push edi
push esi
push eax
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0xc
call fcn.10001a1c
push esi
push ebx
lea ecx, [ebp - 0xa0]
mov byte [ebp - 4], 5
call fcn.1000151f
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0xa4]
call fcn.10001bd5
mov dword [ebp - 0x88], esi
mov ecx, dword [ebp - 0x84]
lea eax, [ebp - 0xa4]
push eax
lea eax, [ebp - 0xac]
push eax
mov byte [ebp - 4], 0xd
call fcn.10017dd5
push esi
push ebx
lea ecx, [ebp - 0xa4]
mov byte [ebp - 4], 5
call fcn.1000151f
push 4
push 0xa
lea eax, [ebp - 0xa0]
push eax
lea ecx, [ebp - 0x48]
call fcn.10001d00
push edi
push esi
push eax
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0xe
call fcn.10001a1c
push esi
push ebx
lea ecx, [ebp - 0xa0]
mov byte [ebp - 4], 5
call fcn.1000151f
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x64]
push eax
lea eax, [ebp - 0xa0]
push eax
call fcn.100024a8
add esp, 0xc
push edi
push esi
push eax
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0xf
call fcn.10001a1c
push esi
push ebx
lea ecx, [ebp - 0xa0]
mov byte [ebp - 4], 5
call fcn.1000151f
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0xa4]
call fcn.10001bd5
mov dword [ebp - 0x88], esi
mov ecx, dword [ebp - 0x84]
lea eax, [ebp - 0xa4]
push eax
lea eax, [ebp - 0xac]
push eax
mov byte [ebp - 4], 0x10
call fcn.10017dd5
push esi
push ebx
lea ecx, [ebp - 0xa4]
mov byte [ebp - 4], 5
call fcn.1000151f
push 6
push 0xb
lea eax, [ebp - 0xa0]
push eax
lea ecx, [ebp - 0x48]
call fcn.10001d00
push edi
mov byte [ebp - 4], 0x11
push esi
push eax
lea ecx, [ebp - 0x2c]
call fcn.10001a1c
push esi
push ebx
lea ecx, [ebp - 0xa0]
mov byte [ebp - 4], 5
call fcn.1000151f
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x64]
push eax
lea eax, [ebp - 0xa0]
push eax
call fcn.100024a8
add esp, 0xc
push edi
push esi
push eax
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x12
call fcn.10001a1c
push esi
push ebx
lea ecx, [ebp - 0xa0]
mov byte [ebp - 4], 5
call fcn.1000151f
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0xa4]
call fcn.10001bd5
mov dword [ebp - 0x88], esi
mov ecx, dword [ebp - 0x84]
lea eax, [ebp - 0xa4]
push eax
lea eax, [ebp - 0xac]
push eax
mov byte [ebp - 4], 0x13
call fcn.10017dd5
push esi
push ebx
lea ecx, [ebp - 0xa4]
mov byte [ebp - 4], 5
call fcn.1000151f
push 3
push 0x11
lea eax, [ebp - 0xa0]
push eax
lea ecx, [ebp - 0x48]
call fcn.10001d00
push edi
push esi
push eax
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x14
call fcn.10001a1c
push esi
push ebx
lea ecx, [ebp - 0xa0]
mov byte [ebp - 4], 5
call fcn.1000151f
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x64]
push eax
lea eax, [ebp - 0xa0]
push eax
call fcn.100024a8
add esp, 0xc
push edi
push esi
push eax
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x15
call fcn.10001a1c
mov byte [ebp - 4], 5
push esi
push ebx
lea ecx, [ebp - 0xa0]
call fcn.1000151f
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0xa4]
call fcn.10001bd5
mov dword [ebp - 0x88], esi
mov ecx, dword [ebp - 0x84]
lea eax, [ebp - 0xa4]
push eax
lea eax, [ebp - 0xac]
push eax
mov byte [ebp - 4], 0x16
call fcn.10017dd5
push esi
push ebx
lea ecx, [ebp - 0xa4]
mov byte [ebp - 4], 5
call fcn.1000151f
push 4
push 0x12
lea eax, [ebp - 0xa0]
push eax
lea ecx, [ebp - 0x48]
call fcn.10001d00
push edi
push esi
push eax
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x17
call fcn.10001a1c
push esi
push ebx
lea ecx, [ebp - 0xa0]
mov byte [ebp - 4], 5
call fcn.1000151f
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x64]
push eax
lea eax, [ebp - 0xa0]
push eax
call fcn.100024a8
add esp, 0xc
push edi
push esi
push eax
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x18
call fcn.10001a1c
push esi
push ebx
lea ecx, [ebp - 0xa0]
mov byte [ebp - 4], 5
call fcn.1000151f
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0xa4]
call fcn.10001bd5
mov dword [ebp - 0x88], esi
mov ecx, dword [ebp - 0x84]
lea eax, [ebp - 0xa4]
push eax
lea eax, [ebp - 0xac]
push eax
mov byte [ebp - 4], 0x19
call fcn.10017dd5
push esi
push ebx
lea ecx, [ebp - 0xa4]
mov byte [ebp - 4], 5
call fcn.1000151f
push 5
push 0x13
lea eax, [ebp - 0xa0]
push eax
lea ecx, [ebp - 0x48]
call fcn.10001d00
push edi
push esi
push eax
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x1a
call fcn.10001a1c
push esi
push ebx
lea ecx, [ebp - 0xa0]
mov byte [ebp - 4], 5
call fcn.1000151f
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x64]
push eax
lea eax, [ebp - 0xa0]
push eax
call fcn.100024a8
add esp, 0xc
push edi
push esi
push eax
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x1b
call fcn.10001a1c
push esi
push ebx
lea ecx, [ebp - 0xa0]
mov byte [ebp - 4], 5
call fcn.1000151f
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0xa4]
call fcn.10001bd5
mov dword [ebp - 0x88], esi
mov ecx, dword [ebp - 0x84]
lea eax, [ebp - 0xa4]
push eax
lea eax, [ebp - 0xac]
push eax
mov byte [ebp - 4], 0x1c
call fcn.10017dd5
push esi
push ebx
lea ecx, [ebp - 0xa4]
mov byte [ebp - 4], 5
call fcn.1000151f
push 4
push 0x15
lea eax, [ebp - 0xa0]
push eax
lea ecx, [ebp - 0x48]
call fcn.10001d00
push edi
push esi
push eax
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x1d
call fcn.10001a1c
push esi
push ebx
lea ecx, [ebp - 0xa0]
mov byte [ebp - 4], 5
call fcn.1000151f
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x64]
push eax
lea eax, [ebp - 0xa0]
push eax
call fcn.100024a8
add esp, 0xc
mov byte [ebp - 4], 0x1e
push edi
push esi
push eax
lea ecx, [ebp - 0x2c]
call fcn.10001a1c
push esi
push ebx
lea ecx, [ebp - 0xa0]
mov byte [ebp - 4], 5
call fcn.1000151f
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0xa4]
call fcn.10001bd5
mov dword [ebp - 0x88], esi
mov ecx, dword [ebp - 0x84]
lea eax, [ebp - 0xa4]
push eax
lea eax, [ebp - 0xac]
push eax
mov byte [ebp - 4], 0x1f
call fcn.10017dd5
push esi
push ebx
lea ecx, [ebp - 0xa4]
mov byte [ebp - 4], 5
call fcn.1000151f
push 3
push 0x16
lea eax, [ebp - 0xa0]
push eax
lea ecx, [ebp - 0x48]
call fcn.10001d00
push edi
push esi
push eax
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x20
call fcn.10001a1c
push esi
push ebx
lea ecx, [ebp - 0xa0]
mov byte [ebp - 4], 5
call fcn.1000151f
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x64]
push eax
lea eax, [ebp - 0xa0]
push eax
call fcn.100024a8
add esp, 0xc
push edi
push esi
push eax
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x21
call fcn.10001a1c
push esi
push ebx
lea ecx, [ebp - 0xa0]
mov byte [ebp - 4], 5
call fcn.1000151f
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0xa4]
call fcn.10001bd5
mov dword [ebp - 0x88], esi
mov ecx, dword [ebp - 0x84]
lea eax, [ebp - 0xa4]
push eax
lea eax, [ebp - 0xac]
push eax
mov byte [ebp - 4], 0x22
call fcn.10017dd5
push esi
push ebx
lea ecx, [ebp - 0xa4]
call fcn.1000151f
push esi
push ebx
lea ecx, [ebp - 0x2c]
call fcn.1000151f
push esi
push ebx
lea ecx, [ebp - 0x48]
call fcn.1000151f
lea ecx, [ebp - 0xb0]
mov byte [ebp - 4], bl
call fcn.10024abd
push esi
push ebx
lea ecx, [ebp - 0x80]
call fcn.1000151f
push esi
push ebx
lea ecx, [ebp - 0x64]
call fcn.1000151f
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
mov ecx, dword [ebp - 0x10]
pop ebx
call fcn.100341e0
leave
ret