Function at 0x1006bf03
Capabilities:
Get disk information

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x2c
push ebx
lea eax, [ebp + 8]
push esi
push eax
mov dword [ebp - 0x18], ecx
call fcn.1003f9c4
pop ecx
push 5
lea ecx, [ebp - 0x14]
call fcn.10046141
push 0x14
lea ecx, [ebp - 0x1c]
call fcn.10046141
mov byte [ebp - 3], 1
mov byte [ebp - 1], 0
mov byte [ebp - 2], 0
mov byte [ebp - 4], 0
jmp 0x1006c079
or esi, 0xffffffff
push esi
lea eax, [ebp + 8]
push eax
push str.__fullfile
call fcn.10048195
add esp, 0xc
test al, al
je 0x1006bf63
mov byte [ebp - 3], 2
jmp 0x1006c079
push esi
lea eax, [ebp + 8]
push eax
push str.__full
call fcn.10048195
add esp, 0xc
test al, al
je 0x1006bf82
mov byte [ebp - 3], 1
jmp 0x1006c079
push esi
lea eax, [ebp + 8]
push eax
push str.__short
call fcn.10048195
add esp, 0xc
test al, al
je 0x1006bfa1
mov byte [ebp - 1], 1
jmp 0x1006c079
push esi
lea eax, [ebp + 8]
push eax
push 0x100d0cb8
call fcn.10048195
add esp, 0xc
test al, al
je 0x1006bfc0
mov byte [ebp - 1], 0x11
jmp 0x1006c079
push esi
lea eax, [ebp + 8]
push eax
push str.__long
call fcn.10048195
add esp, 0xc
test al, al
je 0x1006bfdf
mov byte [ebp - 1], 2
jmp 0x1006c079
push esi
lea eax, [ebp + 8]
push eax
push 0x100d0ca8
call fcn.10048195
add esp, 0xc
test al, al
je 0x1006bffb
mov byte [ebp - 1], 0x12
jmp 0x1006c079
push 8
lea eax, [ebp + 8]
push eax
push str.__volume
call fcn.1003faa9
add esp, 0xc
test eax, eax
je 0x1006c018
mov byte [ebp - 2], 1
jmp 0x1006c079
push 0xc
lea eax, [ebp + 8]
push eax
push str.__volumepart
call fcn.1003faa9
add esp, 0xc
test eax, eax
je 0x1006c035
mov byte [ebp - 2], 3
jmp 0x1006c079
push 6
lea eax, [ebp + 8]
push eax
push str.__part
call fcn.1003faa9
add esp, 0xc
test eax, eax
je 0x1006c052
mov byte [ebp - 2], 2
jmp 0x1006c079
push 3
lea eax, [ebp + 8]
push eax
push 0x100d0c60
call fcn.1003faa9
add esp, 0xc
test eax, eax
je 0x1006c06f
mov byte [ebp - 4], 1
jmp 0x1006c079
lea eax, [ebp + 8]
push eax
call fcn.10008e60
pop ecx
mov eax, dword [ebp + 8]
cmp word [eax], 0x2d
je 0x1006bf41
mov ecx, dword [ebp - 0x18]
xor esi, esi
push esi
push 0x3d
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp + 8]
push eax
call fcn.1003ac0c
mov dword [ebp + 8], eax
cmp word [eax], 0x3d
jne 0x1006c0bb
mov ecx, dword [ebp - 0x18]
inc eax
inc eax
push esi
mov dword [ebp + 8], eax
push esi
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp + 8]
push eax
call fcn.1003aaa0
mov eax, dword [ebp - 0x1c]
call fcn.1004c150
mov ebx, eax
mov eax, dword [ebp - 0x14]
cmp word [eax], si
je 0x1006c315
cmp word [ebx], si
je 0x1006c315
push edi
push ebx
call dword [sym.imp.KERNEL32.dll_lstrlenW]
push ebx
lea ecx, [ebp - 0x10]
lea edi, [eax*8 + 0x104]
call fcn.100501eb
lea eax, [edi + 1]
push eax
lea ecx, [ebp - 0x10]
call fcn.10046168
mov eax, 0x100e3d7c
push eax
mov dword [ebp - 8], esi
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
lea eax, [ebp - 0x24]
push eax
mov dword [ebp - 0x24], esi
call fcn.10003ea0
mov esi, dword [ebp - 0x10]
mov byte [ebp - 0x20], al
lea eax, [ebp - 8]
push eax
push esi
push edi
push ebx
call fcn.100469ca
add esp, 0x14
cmp dword [ebp - 8], 0
je 0x1006c138
sub dword [ebp - 8], 2
cmp byte [ebp - 1], 0
jle 0x1006c1b7
push 0x2000
lea ecx, [ebp - 0xc]
call fcn.10046141
mov edi, dword [ebp - 0xc]
and word [edi], 0
test byte [ebp - 1], 1
mov ebx, 0x1fff
je 0x1006c168
push ebx
push edi
push esi
call dword [sym.imp.KERNEL32.dll_GetShortPathNameW]
jmp 0x1006c17b
test byte [ebp - 1], 2
je 0x1006c189
push ebx
push edi
push esi
call dword [sym.imp.KERNEL32.dll_GetLongPathNameW]
and byte [ebp - 1], 0xfd
test byte [ebp - 1], 0x10
je 0x1006c168
cmp word [edi], 0
jne 0x1006c168
jmp 0x1006c1af
mov eax, esi
mov esi, edi
and word [esi + 0x3ffc], 0
cmp byte [ebp - 3], 1
mov dword [ebp - 0x10], esi
mov dword [ebp - 0xc], eax
jne 0x1006c1af
push 0x5c
push 0
push esi
call dword [sym.imp.SHLWAPI.dll_StrRChrW]
mov dword [ebp - 8], eax
lea ecx, [ebp - 0xc]
call fcn.1003f96c
cmp byte [ebp - 0x20], 0
je 0x1006c1c6
push dword [ebp - 0x24]
call fcn.10003eb1
pop ecx
mov eax, 0x100e3d7c
test eax, eax
je 0x1006c1d6
push eax
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
cmp byte [ebp - 3], 1
jne 0x1006c1e7
mov eax, dword [ebp - 8]
test eax, eax
je 0x1006c1e7
and word [eax], 0
cmp byte [ebp - 2], 0
je 0x1006c2cd
cmp word [esi], 0
je 0x1006c2cd
cmp word [esi + 2], 0x3a
jne 0x1006c2cd
mov ebx, 0x1000
push ebx
lea ecx, [ebp - 0xc]
call fcn.10046141
mov edi, dword [ebp - 0xc]
xor eax, eax
test byte [ebp - 2], 1
mov word [edi], ax
mov cx, word [esi]
mov word [ebp - 0x2c], cx
mov word [ebp - 0x2a], 0x3a
mov word [ebp - 0x28], 0x5c
mov word [ebp - 0x26], ax
mov dword [ebp - 0x20], edi
mov word [esi], ax
je 0x1006c257
push ebx
push edi
lea eax, [ebp - 0x2c]
push eax
call dword [sym.imp.KERNEL32.dll_GetVolumeNameForVolumeMountPointW]
test eax, eax
je 0x1006c255
cmp word [edi], 0
jne 0x1006c2a3
xor eax, eax
test byte [ebp - 2], 2
je 0x1006c2c5
mov cx, word [ebp - 0x2c]
push eax
push eax
push eax
push 0xac
mov word [edi], cx
push 0xffffffffffffffff
mov word [edi + 2], ax
lea eax, [ebp - 0xc]
push 0xffffffffffffffff
push eax
call fcn.100655b2
mov edi, dword [ebp - 0xc]
mov eax, dword [edi]
add esp, 0x1c
test eax, eax
jl 0x1006c2c5
mov ecx, dword [edi + 4]
test ecx, ecx
jle 0x1006c2c5
push ecx
push eax
push str._Harddisk_uPartition_u_
push dword [ebp - 0x20]
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x10
mov ebx, dword [ebp - 0x20]
push ebx
call dword [sym.imp.KERNEL32.dll_lstrlenW]
lea ecx, [esi + 6]
push ecx
lea eax, [ebx + eax*2]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
mov eax, esi
mov esi, edi
mov dword [ebp - 0x10], esi
mov dword [ebp - 0xc], eax
lea ecx, [ebp - 0xc]
call fcn.1003f96c
and dword [ebp - 0x20], 0
cmp byte [ebp - 4], 0
mov dword [ebp + 8], esi
pop edi
je 0x1006c2f3
cmp word [esi], 0x22
je 0x1006c2f3
push 0xffffffffffffffff
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp + 8]
push eax
call fcn.1004c16e
add esp, 0xc
push dword [ebp + 8]
mov ecx, dword [ebp - 0x18]
push dword [ebp - 0x14]
call fcn.100457c2
lea ecx, [ebp - 0x20]
call fcn.1003f96c
lea ecx, [ebp - 0x10]
call fcn.1003f96c
xor esi, esi
jmp 0x1006c31a
mov esi, 0x80070057
lea ecx, [ebp - 0x1c]
call fcn.1003f96c
lea ecx, [ebp - 0x14]
call fcn.1003f96c
mov eax, esi
pop esi
pop ebx
leave
ret 8