Function at 0x1000f399
Capabilities:
Get disk information
Get disk information via ioctl

Disassembly:
push ebp
lea ebp, [esp - 0x3ac]
sub esp, 0x42c
mov eax, dword [0x10084adc]
xor eax, ebp
mov dword [ebp + 0x3a8], eax
mov eax, dword [0x1015668c]
mov ecx, dword [ebp + 0x3b8]
push ebx
mov bl, byte [ebp + 0x3b4]
push esi
push edi
mov dword [ebp - 0x64], ecx
cmp eax, 5
je 0x1000f3d7
cmp eax, 0x91
jne 0x1000f3eb
push ecx
movsx eax, bl
push eax
push str.IsSpecUSB_:___c___s_
push 0
call fcn.100412e2
add esp, 0x10
mov esi, 0x10063948
lea edi, [ebp - 0x68]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
mov esi, str..x:
lea edi, [ebp + 0x3a0]
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
mov dword [ebp - 0x70], 0x5c3a78
mov byte [ebp - 0x70], bl
mov byte [ebp - 0x68], bl
mov byte [ebp + 0x3a4], bl
xor ebx, ebx
push ebx
push ebx
push 3
push ebx
push 3
push ebx
lea eax, [ebp + 0x3a0]
push eax
or edi, 0xffffffff
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov esi, eax
cmp esi, edi
jne 0x1000f458
mov eax, dword [0x1015668c]
cmp eax, 5
je 0x1000f44d
cmp eax, 0x91
jne 0x1000f69c
push str.ret_IsSpecUSB_false1
push ebx
jmp 0x1000f695
push ebx
lea eax, [ebp - 0x74]
push eax
push 0xc
lea eax, [ebp - 0x80]
push eax
push ebx
push ebx
push 0x2d1080
push esi
mov dword [ebp - 0x74], ebx
call dword [sym.imp.KERNEL32.dll_DeviceIoControl]
test eax, eax
je 0x1000f47b
mov edi, dword [ebp - 0x7c]
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp edi, 0xffffffff
jne 0x1000f4a3
mov eax, dword [0x1015668c]
cmp eax, 5
je 0x1000f49c
cmp eax, 0x91
jne 0x1000f69c
push str.ret_IsSpecUSB_false2
jmp 0x1000f452
lea eax, [ebp - 0x70]
push eax
call dword [sym.imp.KERNEL32.dll_GetDriveTypeA]
mov ebx, eax
mov esi, 0x200
push esi
lea eax, [ebp - 0x60]
push eax
lea eax, [ebp - 0x68]
push eax
call dword [sym.imp.KERNEL32.dll_QueryDosDeviceA]
test eax, eax
jne 0x1000f4e6
mov eax, dword [0x1015668c]
cmp eax, 5
je 0x1000f4dc
cmp eax, 0x91
jne 0x1000f69c
push str.ret_IsSpecUSB_false3
jmp 0x1000f693
lea eax, [ebp - 0x60]
push eax
push ebx
push edi
call fcn.1000f1e4
xor edi, edi
add esp, 0xc
cmp eax, edi
jne 0x1000f51a
mov eax, dword [0x1015668c]
cmp eax, 5
je 0x1000f50f
cmp eax, 0x91
jne 0x1000f69c
push str.ret_IsSpecUSB_false4
push edi
jmp 0x1000f695
push edi
push eax
lea eax, [ebp - 0x6c]
push eax
mov dword [ebp - 0x6c], edi
call dword [sym.imp.SETUPAPI.dll_CM_Get_Parent]
push edi
push esi
lea eax, [ebp + 0x1a0]
push eax
push dword [ebp - 0x6c]
call dword [sym.imp.SETUPAPI.dll_CM_Get_Device_IDA]
mov eax, dword [0x1015668c]
mov ebx, 0x91
cmp eax, 5
je 0x1000f54e
cmp eax, ebx
jne 0x1000f563
lea eax, [ebp + 0x1a0]
push eax
push str.buf__s_
push edi
call fcn.100412e2
add esp, 0xc
lea eax, [ebp + 0x1a0]
push 0x5c
push eax
call fcn.10044f10
pop ecx
pop ecx
cmp eax, edi
jne 0x1000f590
mov eax, dword [0x1015668c]
cmp eax, 5
je 0x1000f589
cmp eax, ebx
jne 0x1000f69c
push str.ret_IsSpecUSB_false5
jmp 0x1000f514
lea edi, [eax + 1]
push 0x5c
push edi
call fcn.10044f10
mov esi, eax
pop ecx
pop ecx
test esi, esi
jne 0x1000f5bf
mov eax, dword [0x1015668c]
cmp eax, 5
je 0x1000f5b5
cmp eax, ebx
jne 0x1000f69c
push str.ret_IsSpecUSB_false6
jmp 0x1000f693
mov byte [esi], 0
mov eax, dword [0x1015668c]
cmp eax, 5
je 0x1000f5d0
cmp eax, ebx
jne 0x1000f5e3
push edi
push dword [ebp - 0x64]
push str.sHWID__s_pFound11__s_
push 0
call fcn.100412e2
add esp, 0x10
push edi
push dword [ebp - 0x64]
mov edi, dword [sym.imp.SHLWAPI.dll_StrStrIA]
call edi
test eax, eax
je 0x1000f616
mov eax, dword [0x1015668c]
cmp eax, 5
je 0x1000f601
cmp eax, ebx
jne 0x1000f60f
push str.ret_IsSpecUSB_true1
push 0
call fcn.100412e2
pop ecx
pop ecx
mov al, 1
jmp 0x1000f69e
inc esi
mov eax, esi
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x1000f61c
sub eax, edx
cmp eax, 0xa
jbe 0x1000f63c
mov eax, esi
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x1000f62f
sub eax, edx
lea esi, [esi + eax - 0xa]
mov eax, dword [0x1015668c]
cmp eax, 5
je 0x1000f64a
cmp eax, ebx
jne 0x1000f65d
push esi
push dword [ebp - 0x64]
push str.sHWID__s_pFound2__s_
push 0
call fcn.100412e2
add esp, 0x10
test esi, esi
je 0x1000f680
push esi
push dword [ebp - 0x64]
call edi
test eax, eax
je 0x1000f680
mov eax, dword [0x1015668c]
cmp eax, 5
je 0x1000f679
cmp eax, ebx
jne 0x1000f60f
push str.ret_IsSpecUSB_true2
jmp 0x1000f606
mov eax, dword [0x1015668c]
cmp eax, 5
je 0x1000f68e
cmp eax, ebx
jne 0x1000f69c
push str.ret_IsSpecUSB_false7
push 0
call fcn.100412e2
pop ecx
pop ecx
xor al, al
mov ecx, dword [ebp + 0x3a8]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.1004501f
add ebp, 0x3ac
leave
ret