Function at 0x1008cb70
Capabilities:
Get disk information
Read file on windows
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x88
mov eax, dword [0x101e6040]
xor eax, esp
mov dword [esp + 0x84], eax
mov eax, dword [esp + 0x8c]
push ebx
mov ebx, dword [esp + 0x94]
push ebp
mov ebp, dword [esp + 0x9c]
push esi
mov esi, dword [esp + 0xa4]
push edi
mov edi, ecx
mov dword [esp + 0x10], eax
mov al, byte [0x101e7c6c]
mov byte [esp + 0x17], al
mov eax, dword [edi + 0x424]
mov ecx, eax
mov dword [esp + 0x8c], eax
call fcn.1005f8f0
mov ecx, dword [ebx + 0x54]
mov dword [esp + 0x18], eax
mov eax, dword [ebx + 0x50]
mov dword [esp + 0x1c], edx
mov dword [esp + 0x20], eax
mov eax, dword [edi + 0x424]
mov dword [esp + 0x24], ecx
mov ecx, dword [eax + 0x30]
mov eax, dword [eax + 0x34]
mov dword [esp + 0x50], ecx
mov ecx, dword [edi + 0x424]
mov dword [esp + 0x54], eax
call fcn.1005f850
mov dword [esp + 0x60], eax
mov dword [esp + 0x64], edx
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
cmp dword [edi + 0x9c], 0
je 0x1008cc29
push esi
push ebp
push ebx
push dword [esp + 0x1c]
mov ecx, edi
call fcn.100a62b0
mov dword [esp + 0x10], eax
jmp 0x1008cc85
cmp byte [esp + 0x17], 0
jne 0x1008cc61
cmp dword [edi + 0x94], 0
je 0x1008cc47
test esi, esi
ja 0x1008cc61
jb 0x1008cc47
cmp ebp, 0x40000
ja 0x1008cc61
push dword [edi + 0x8c]
mov ecx, edi
push esi
push ebp
push ebx
push dword [esp + 0x20]
call fcn.1008d100
mov dword [esp + 0x10], eax
jmp 0x1008cc85
push dword [esp + 0xac]
mov ecx, edi
push dword [edi + 0x8c]
push esi
push ebp
push ebx
push dword [esp + 0x24]
call fcn.1008d4d0
mov dword [esp + 0x10], eax
mov byte [esp + 0x7c], 1
mov ecx, dword [edi + 0x424]
call fcn.1005f8f0
mov ecx, dword [ebx + 0x54]
mov dword [esp + 0x28], eax
mov eax, dword [ebx + 0x50]
mov dword [esp + 0x2c], edx
mov dword [esp + 0x30], eax
mov dword [esp + 0x34], ecx
mov edx, dword [esp + 0x28]
mov esi, dword [esp + 0x2c]
mov eax, dword [esp + 0x18]
sub edx, eax
mov ecx, dword [esp + 0x1c]
sbb esi, ecx
mov dword [esp + 0x38], edx
mov dword [esp + 0x3c], esi
mov edx, dword [esp + 0x30]
mov esi, dword [esp + 0x34]
mov eax, dword [esp + 0x20]
sub edx, eax
mov ecx, dword [esp + 0x24]
sbb esi, ecx
mov dword [esp + 0x40], edx
mov dword [esp + 0x44], esi
mov esi, dword [esp + 0x10]
test esi, esi
je 0x1008cecb
mov eax, dword [esp + 0x8c]
cmp eax, dword [edi + 0x424]
jne 0x1008cecb
mov ecx, dword [esp + 0x40]
mov eax, dword [esp + 0x44]
mov dword [esp + 0x8c], eax
mov eax, dword [esp + 0x38]
mov edx, dword [esp + 0x3c]
cmp ecx, eax
jne 0x1008cd25
cmp dword [esp + 0x8c], edx
je 0x1008cecb
mov ecx, dword [edi + 0x424]
call fcn.1005f850
mov dword [esp + 0x48], eax
mov eax, dword [edi + 0x424]
mov dword [esp + 0x4c], edx
mov ecx, dword [eax + 0x30]
mov eax, dword [eax + 0x34]
mov dword [esp + 0x58], ecx
mov ecx, dword [edi + 0x424]
mov dword [esp + 0x5c], eax
call fcn.1005f8f0
mov dword [esp + 0x68], eax
mov eax, dword [edi + 0x424]
mov dword [esp + 0x6c], edx
push dword [eax + 0xc]
call dword [sym.imp.KERNEL32.dll_FlushFileBuffers]
mov ecx, dword [edi + 0x424]
call fcn.1005f8f0
mov dword [esp + 0x70], eax
mov eax, dword [edi + 0x434]
mov dword [esp + 0x74], edx
test eax, eax
je 0x1008cde6
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
cmp eax, 3
jle 0x1008cde6
mov eax, dword [edi + 0x434]
movzx edx, word [eax + 2]
cmp edx, 0x3a
jne 0x1008cde6
movzx ecx, word [eax + 4]
cmp ecx, 0x5c
jne 0x1008cde6
mov ax, word [eax]
mov word [esp + 0x8c], ax
xor eax, eax
mov word [esp + 0x92], ax
lea eax, [esp + 0x8c]
push eax
mov word [esp + 0x92], dx
mov word [esp + 0x94], cx
call dword [sym.imp.KERNEL32.dll_GetDriveTypeW]
mov dword [esp + 0x78], eax
cmp dword [esp + 0xa8], 0
jg 0x1008cea1
jl 0x1008ce02
cmp ebp, 0x7d000
jae 0x1008cea1
push 0x101ca7a8
push dword [ebx]
lea eax, [esp + 0x94]
mov dword [esp + 0x94], 0
push eax
call fcn.10156701
mov eax, dword [esp + 0x98]
add esp, 0xc
xor edi, edi
test eax, eax
je 0x1008ce9b
push 2
push edi
push edi
push eax
call fcn.1015d243
push dword [esp + 0x9c]
call fcn.1015cee9
add esp, 0x14
mov ebx, eax
mov esi, edx
push edi
push edi
push edi
push dword [esp + 0x98]
call fcn.1015d243
mov eax, ebx
add esp, 0x10
or eax, esi
je 0x1008ce88
push ebx
call fcn.101554b7
mov edi, eax
add esp, 4
test edi, edi
je 0x1008ce88
push dword [esp + 0x8c]
push ebx
push 1
push edi
call fcn.10161a08
add esp, 0x10
push dword [esp + 0x8c]
call fcn.1015c218
mov esi, dword [esp + 0x14]
add esp, 4
mov dword [0x101fa834], edi
push 0
call fcn.10154ef2
add esp, 4
or eax, edx
jne 0x1008cee8
mov eax, dword [0x101fa834]
test eax, eax
je 0x1008cecb
push eax
call fcn.10154f5a
add esp, 4
mov dword [0x101fa834], 0
mov ecx, dword [esp + 0x94]
mov eax, esi
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.10151433
add esp, 0x88
ret 0x14
push 0x101e45c8
lea eax, [esp + 0x14]
mov dword [esp + 0x14], 0
push eax
call fcn.10153200
int3