Function at 0x100dd9e
Capabilities:
Get disk information

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x434
mov eax, dword [section..data]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 0x10]
push ebx
push esi
mov esi, dword [ebp + 8]
push edi
push 0x2c
push 0
push 0x1022740
mov dword [ebp - 0x424], esi
mov dword [ebp - 0x428], eax
call sub.msvcrt.dll_memset
mov eax, dword [ebp + 0xc]
mov ebx, dword [sym.imp.KERNEL32.dll_HeapAlloc]
add esp, 0xc
mov dword [0x1022750], eax
test esi, esi
je 0x100debb
lea edi, [ebp - 0xc]
movsd dword es:[edi], dword [esi]
xor eax, eax
movsw word es:[edi], word [esi]
mov word [ebp - 8], ax
push 0x104
lea eax, [ebp - 0x214]
push eax
lea eax, [ebp - 0xc]
push eax
call dword [sym.imp.KERNEL32.dll_QueryDosDeviceW]
test eax, eax
jne 0x100de24
mov dword [ebp - 0x420], 0xc000000d
jmp 0x100e0c9
lea eax, [ebp - 0x214]
lea edx, [eax + 2]
mov cx, word [eax]
inc eax
inc eax
test cx, cx
jne 0x100de2d
mov edi, dword [sym.imp.KERNEL32.dll_GetProcessHeap]
sub eax, edx
sar eax, 1
lea esi, [eax + eax + 2]
push esi
push 8
call edi
push eax
call ebx
mov dword [0x1022758], eax
test eax, eax
jne 0x100de65
mov dword [ebp - 0x420], 0xc0000017
jmp 0x100e0c9
push esi
lea ecx, [ebp - 0x214]
push ecx
push eax
call sub.msvcrt.dll_memcpy
add esp, 0xc
add dword [ebp - 0x424], 4
mov eax, dword [ebp - 0x424]
lea ecx, [eax + 2]
mov dx, word [eax]
inc eax
inc eax
test dx, dx
jne 0x100de86
sub eax, ecx
sar eax, 1
lea esi, [eax + eax + 2]
push esi
push 8
call edi
push eax
call ebx
mov dword [0x1022768], eax
test eax, eax
je 0x100de56
push esi
push dword [ebp - 0x424]
push eax
call sub.msvcrt.dll_memcpy
add esp, 0xc
jmp 0x100dec1
mov edi, dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov byte [0x102274c], 0
call fcn.0100fb28
cmp eax, 2
jne 0x100ded9
mov byte [0x102274c], 1
and dword [ebp - 0x420], 0
cmp dword [ebp - 0x428], 0
jne 0x100def3
mov dword [ebp - 0x428], 0x1001568
mov eax, dword [ebp - 0x428]
lea edx, [eax + 2]
mov cx, word [eax]
inc eax
inc eax
test cx, cx
jne 0x100defc
sub eax, edx
sar eax, 1
lea esi, [eax + eax + 2]
push esi
push 8
call edi
push eax
call ebx
mov dword [0x1022754], eax
test eax, eax
je 0x100de56
push esi
push dword [ebp - 0x428]
push eax
call sub.msvcrt.dll_memcpy
add esp, 0xc
push 0
call fcn.010110f1
mov dword [0x1022764], eax
test eax, eax
jne 0x100df52
mov dword [ebp - 0x420], 0xc0000225
jmp 0x100e0c9
test byte [ebp + 0xc], 0x10
je 0x100df68
push eax
call fcn.01010ebf
mov byte [0x102274d], al
mov eax, dword [0x1022764]
lea edx, [eax + 2]
mov cx, word [eax]
inc eax
inc eax
test cx, cx
jne 0x100df6b
sub eax, edx
sar eax, 1
lea eax, [eax + eax + 2]
mov dword [ebp - 0x430], eax
add eax, 0x3c
push eax
push 8
mov dword [ebp - 0x42c], eax
call edi
push eax
call ebx
mov esi, eax
test esi, esi
je 0x100de56
push dword [ebp - 0x430]
mov dword [esi], 2
push dword [0x1022764]
lea eax, [esi + 0x14]
push eax
call sub.msvcrt.dll_memcpy
mov eax, dword [ebp - 0x42c]
mov dword [0x1022760], eax
lea eax, [ebp - 0x214]
add esp, 0xc
mov dword [0x102275c], esi
lea ecx, [eax + 2]
mov dx, word [eax]
inc eax
inc eax
test dx, dx
jne 0x100dfd6
sub eax, ecx
sar eax, 1
lea esi, [eax + eax + 2]
lea eax, [esi + 0x3c]
push eax
push 8
mov dword [ebp - 0x42c], eax
call edi
push eax
call ebx
mov edi, eax
test edi, edi
je 0x100de56
push 2
pop ebx
push esi
lea eax, [ebp - 0x214]
push eax
lea eax, [edi + 0x14]
push eax
mov dword [edi], ebx
call sub.msvcrt.dll_memcpy
mov eax, dword [ebp - 0x42c]
add esp, 0xc
cmp dword [ebp - 0x424], 0
mov dword [0x1022744], eax
mov dword [0x1022740], edi
je 0x100e0ce
push 0x100153c
push dword [ebp - 0x424]
lea eax, [ebp - 0xc]
push eax
push 0x100152c
lea eax, [ebp - 0x41c]
push 0x104
push eax
call fcn.0100956b
add esp, 0x18
lea eax, [ebp - 0x434]
push eax
push dword [ebp - 0x428]
call fcn.01012a4b
push dword [ebp - 0x434]
lea eax, [ebp - 0x41c]
push 8
push eax
call fcn.0101ec87
mov dword [0x1022748], eax
test eax, eax
jne 0x100e0ce
push ebx
push eax
lea eax, [ebp - 0x41c]
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryExW]
mov dword [0x1022748], eax
test eax, eax
jne 0x100e0ce
mov dword [ebp - 0x420], 0xc0000001
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push 0x10014d0
push 4
call fcn.01011862
add esp, 0xc
call fcn.0100dcdf
mov ecx, dword [ebp - 4]
mov eax, dword [ebp - 0x420]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.01009199
leave
ret 0xc