Function at 0x100303a7
Capabilities:
Get disk information

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x478
mov eax, dword [0x100de7b8]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
mov ebx, dword [ebp + 8]
push esi
mov esi, dword [ebp + 0xc]
push edi
xor edi, edi
test ebx, ebx
je 0x10050d2f
test esi, esi
je 0x10050d2f
push 0x10030360
push ebx
call fcn.1009c700
pop ecx
pop ecx
test eax, eax
jne 0x1003048e
cmp word [ebx + 2], 0x3a
je 0x10050d4b
call fcn.1009c700
push edi
push edi
push edi
mov dword [ebp - 0x478], eax
lea eax, [ebp - 0x46c]
push eax
push edi
push ebx
call dword [sym.imp.kernel32.dll_FindFirstFileExW]
mov dword [ebp - 0x474], eax
cmp eax, 0xffffffff
jne 0x10050df8
push 0x10030368
push ebx
mov dword [ebp - 0x470], edi
call fcn.1009c700
pop ecx
pop ecx
test eax, eax
je 0x1003048e
lea eax, [ebp - 0x470]
push eax
push 0x104
lea eax, [ebp - 0x20c]
push ebx
push eax
call fcn.1009c700
add esp, 0x10
mov dword [ebp - 0x474], eax
test eax, eax
je 0x10030482
push eax
call fcn.1009c700
pop ecx
cmp eax, 3
je 0x10050d6f
push dword [ebp - 0x474]
call fcn.1009c700
pop ecx
test eax, eax
jne 0x10050d6f
cmp dword [ebp - 0x470], edi
jne 0x10050de7
call sym.MSVCR120.dll__errno
push 2
pop esi
mov dword [eax], esi
call sym.MSVCR120.dll___doserrno
mov dword [eax], esi
or eax, 0xffffffff
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.10010cbc
mov esp, ebp
pop ebp
ret
call sym.MSVCR120.dll___doserrno
mov dword [eax], edi
call sym.MSVCR120.dll__errno
mov dword [eax], 0x16
call sym.MSVCR120.dll__invalid_parameter_noinfo
jmp 0x1003049f
movzx eax, word [ebx]
test ax, ax
je 0x10050d5d
cmp word [ebx + 4], di
je 0x1003048e
push eax
call fcn.1009c700
movzx eax, ax
pop ecx
sub eax, 0x60
jmp 0x100303fa
push dword [ebp - 0x474]
call dword [sym.imp.kernel32.dll_GetDriveTypeW]
xor ecx, ecx
inc ecx
cmp eax, ecx
jbe 0x10030482
cmp dword [ebp - 0x470], edi
je 0x10050d9a
push dword [ebp - 0x470]
call fcn.1009c700
pop ecx
push 0xffffffffffffffff
push edi
xor eax, eax
mov dword [ebp - 0x46c], 0x10
push edi
mov word [ebp - 0x440], ax
inc eax
push edi
push eax
push eax
push 0x7bc
mov dword [ebp - 0x450], edi
mov dword [ebp - 0x44c], edi
call fcn.1009c700
mov ecx, edx
mov dword [esi + 0x20], eax
add esp, 0x1c
mov dword [esi + 0x24], edx
mov dword [esi + 0x18], eax
mov dword [esi + 0x1c], ecx
mov dword [esi + 0x28], eax
mov dword [esi + 0x2c], ecx
jmp 0x1005102a
push dword [ebp - 0x470]
call fcn.1009c700
pop ecx
jmp 0x1003048e
test dword [ebp - 0x46c], 0x400
je 0x10050e71
cmp dword [ebp - 0x448], 0xa000000c
jne 0x10050e71
or dword [ebp - 0x470], 0xffffffff
mov eax, edi
test byte [ebp - 0x46c], 0x10
je 0x10050e27
mov eax, 0x2000
push edi
push 0x40
push eax
lea eax, [ebp - 0x470]
push ebx
push eax
call fcn.1009c700
add esp, 0x14
test eax, eax
jne 0x1003048e
cmp dword [ebp - 0x470], 0xffffffff
je 0x1003048e
push esi
push dword [ebp - 0x470]
call sym.MSVCR120.dll__fstat64i32
push dword [ebp - 0x470]
mov esi, eax
call sym.MSVCR120.dll__close
add esp, 0xc
jmp 0x10051091
cmp dword [ebp - 0x458], edi
jne 0x10050e89
cmp dword [ebp - 0x454], edi
jne 0x10050e89
mov dword [esi + 0x20], edi
mov dword [esi + 0x24], edi
jmp 0x10050efc
lea eax, [ebp - 0x21c]
push eax
lea eax, [ebp - 0x458]
push eax
call dword [sym.imp.kernel32.dll_FileTimeToSystemTime]
test eax, eax
je 0x100510a4
lea eax, [ebp - 0x21c]
push eax
push eax
push edi
call dword [sym.imp.kernel32.dll_SystemTimeToTzSpecificLocalTime]
test eax, eax
je 0x100510a4
movzx eax, word [ebp - 0x210]
push 0xffffffffffffffff
push eax
movzx eax, word [ebp - 0x212]
push eax
movzx eax, word [ebp - 0x214]
push eax
movzx eax, word [ebp - 0x216]
push eax
movzx eax, word [ebp - 0x21a]
push eax
movzx eax, word [ebp - 0x21c]
push eax
call fcn.1009c700
add esp, 0x1c
mov dword [esi + 0x20], eax
mov dword [esi + 0x24], edx
cmp dword [ebp - 0x460], edi
jne 0x10050f1a
cmp dword [ebp - 0x45c], edi
jne 0x10050f1a
mov eax, dword [esi + 0x20]
mov dword [esi + 0x18], eax
mov eax, dword [esi + 0x24]
mov dword [esi + 0x1c], eax
jmp 0x10050f8d
lea eax, [ebp - 0x21c]
push eax
lea eax, [ebp - 0x460]
push eax
call dword [sym.imp.kernel32.dll_FileTimeToSystemTime]
test eax, eax
je 0x10051081
lea eax, [ebp - 0x21c]
push eax
push eax
push edi
call dword [sym.imp.kernel32.dll_SystemTimeToTzSpecificLocalTime]
test eax, eax
je 0x10051081
movzx eax, word [ebp - 0x210]
push 0xffffffffffffffff
push eax
movzx eax, word [ebp - 0x212]
push eax
movzx eax, word [ebp - 0x214]
push eax
movzx eax, word [ebp - 0x216]
push eax
movzx eax, word [ebp - 0x21a]
push eax
movzx eax, word [ebp - 0x21c]
push eax
call fcn.1009c700
add esp, 0x1c
mov dword [esi + 0x18], eax
mov dword [esi + 0x1c], edx
cmp dword [ebp - 0x468], edi
jne 0x10050fab
cmp dword [ebp - 0x464], edi
jne 0x10050fab
mov eax, dword [esi + 0x20]
mov dword [esi + 0x28], eax
mov eax, dword [esi + 0x24]
mov dword [esi + 0x2c], eax
jmp 0x1005101e
lea eax, [ebp - 0x21c]
push eax
lea eax, [ebp - 0x468]
push eax
call dword [sym.imp.kernel32.dll_FileTimeToSystemTime]
test eax, eax
je 0x10051081
lea eax, [ebp - 0x21c]
push eax
push eax
push edi
call dword [sym.imp.kernel32.dll_SystemTimeToTzSpecificLocalTime]
test eax, eax
je 0x10051081
movzx eax, word [ebp - 0x210]
push 0xffffffffffffffff
push eax
movzx eax, word [ebp - 0x212]
push eax
movzx eax, word [ebp - 0x214]
push eax
movzx eax, word [ebp - 0x216]
push eax
movzx eax, word [ebp - 0x21a]
push eax
movzx eax, word [ebp - 0x21c]
push eax
call fcn.1009c700
add esp, 0x1c
mov dword [esi + 0x28], eax
mov dword [esi + 0x2c], edx
push dword [ebp - 0x474]
call dword [sym.imp.kernel32.dll_FindClose]
push ebx
push dword [ebp - 0x46c]
call fcn.1009c700
pop ecx
pop ecx
xor ecx, ecx
mov word [esi + 6], ax
mov eax, dword [ebp - 0x44c]
inc ecx
mov word [esi + 8], cx
mov dword [esi + 0x14], eax
cmp dword [ebp - 0x450], edi
je 0x10051065
call sym.MSVCR120.dll__errno
mov dword [eax], 0x84
mov dword [esi + 0x14], edi
or edi, 0xffffffff
mov ecx, dword [ebp - 0x478]
xor eax, eax
dec ecx
mov word [esi + 4], ax
mov dword [esi + 0xa], eax
mov eax, edi
mov dword [esi], ecx
mov dword [esi + 0x10], ecx
jmp 0x100304a2
call dword [sym.imp.kernel32.dll_GetLastError]
push eax
call fcn.1009c700
or esi, 0xffffffff
pop ecx
push dword [ebp - 0x474]
call dword [sym.imp.kernel32.dll_FindClose]
mov eax, esi
jmp 0x100304a2
call dword [sym.imp.kernel32.dll_GetLastError]
push eax
call fcn.1009c700
pop ecx
push dword [ebp - 0x474]
call dword [sym.imp.kernel32.dll_FindClose]
jmp 0x1003049f