Function at 0x1008c5e
Capabilities:
Get disk information

Disassembly:
push ebp
lea ebp, [esp - 0x6c]
sub esp, 0xb4
push ebx
push esi
push edi
lea eax, [ebp + 0x5c]
push eax
push 0x101a1a8
push 0x13
call fcn.0100e9ac
push dword [0x101a76c]
call fcn.01009547
push 0x1000
call fcn.01010a9d
mov esi, eax
xor ebx, ebx
cmp esi, ebx
jne 0x1008ca0
push 8
call fcn.0100e881
mov edi, dword [ebp + 0x74]
or dword [esi + 0x10], 0xffffffff
push 0x3d
push edi
mov dword [esi + 0xc], 0x3f
mov dword [esi + 8], ebx
call dword [sym.imp.msvcrt.dll_wcschr]
cmp eax, ebx
pop ecx
pop ecx
je 0x1008d04
push edi
mov word [eax], bx
call dword [sym.imp.msvcrt.dll_wcslen]
push dword [0x101a780]
lea eax, [edi + eax*2 + 2]
push edi
mov dword [ebp + 0x74], eax
call dword [sym.imp.msvcrt.dll__wcsicmp]
add esp, 0xc
test eax, eax
je 0x1008cf8
push dword [0x101a784]
push edi
call dword [sym.imp.msvcrt.dll__wcsicmp]
test eax, eax
pop ecx
pop ecx
jne 0x1008d07
push 0xec2
call fcn.0100e881
jmp 0x1008d07
mov dword [ebp + 0x74], ebx
push 2
pop eax
cmp dword [ebp + 0x7c], eax
mov dword [esi], edi
jne 0x1008d1d
mov dword [esi + 4], eax
mov dword [esi + 0xc], 7
jmp 0x1008d94
cmp dword [ebp + 0x74], ebx
jne 0x1008d46
push dword [0x101a780]
push edi
call dword [sym.imp.msvcrt.dll__wcsicmp]
test eax, eax
pop ecx
pop ecx
mov dword [esi + 0x18], ebx
jne 0x1008d3d
mov dword [esi + 4], ebx
jmp 0x1008d9a
mov dword [esi + 4], 3
jmp 0x1008d9a
push ebx
lea eax, [ebp + 0x68]
push eax
push dword [ebp + 0x74]
push ebx
call sub.NETAPI32.dll_I_NetPathType
test eax, eax
je 0x1008d5f
mov dword [ebp + 0x68], 0x4010
cmp dword [ebp + 0x68], 0x4000
jne 0x1008d91
push 3
push dword [ebp + 0x74]
lea eax, [ebp + 0x60]
push eax
call dword [sym.imp.msvcrt.dll_wcsncpy]
lea eax, [ebp + 0x64]
push 0x10014c0
push eax
call dword [sym.imp.msvcrt.dll_wcscpy]
add esp, 0x14
lea eax, [ebp + 0x60]
mov dword [esi + 4], ebx
jmp 0x1008d97
mov dword [esi + 4], ebx
mov eax, dword [ebp + 0x74]
mov dword [esi + 0x18], eax
lea eax, [ebp + 0x7c]
push eax
push esi
mov dword [esi + 0x1c], 0x100153c
call fcn.010082b7
mov edi, 0xffff
cmp dword [ebp + 0x7c], edi
je 0x1008dc4
cmp dword [esi + 4], ebx
je 0x1008dc9
push 0xec8
call fcn.0100e881
cmp dword [esi + 4], ebx
jne 0x1008e00
mov eax, dword [ebp + 0x74]
cmp eax, ebx
je 0x1008e00
mov ax, word [eax]
mov word [ebp - 0x48], ax
lea eax, [ebp - 0x48]
push eax
mov word [ebp - 0x46], 0x3a
mov word [ebp - 0x44], 0x5c
mov word [ebp - 0x42], bx
call dword [sym.imp.KERNEL32.dll_GetDriveTypeW]
cmp eax, 4
jne 0x1008e00
push 0xe98
call fcn.0100e881
push ebx
push esi
push 2
push ebx
call sub.NETAPI32.dll_NetShareAdd
cmp eax, ebx
je 0x1008e14
push eax
call fcn.0100e881
push dword [esi]
push 0x1230
call fcn.0100e852
cmp dword [ebp + 0x7c], edi
je 0x1008e6e
lea eax, [ebp + 0x74]
push eax
mov edi, 0x3ed
push edi
push dword [esi]
push ebx
call sub.NETAPI32.dll_NetShareGetInfo
cmp eax, ebx
je 0x1008e41
push eax
call fcn.0100e881
mov eax, dword [ebp + 0x74]
and dword [eax], 0xffffffcf
mov eax, dword [ebp + 0x74]
mov ecx, dword [ebp + 0x7c]
or dword [eax], ecx
push ebx
push dword [ebp + 0x74]
push edi
push dword [esi]
push ebx
call sub.NETAPI32.dll_NetShareSetInfo
cmp eax, ebx
je 0x1008e66
push eax
call fcn.0100e881
push dword [ebp + 0x74]
call sub.NETAPI32.dll_NetApiBufferFree
push esi
call sub.NETAPI32.dll_NetApiBufferFree
pop edi
pop esi
pop ebx
add ebp, 0x6c
leave
ret 0xc