Function at 0x41dc0f
Capabilities:
Get disk information via ioctl

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x10
mov eax, dword fs:[0x30]
push ebx
push esi
push edi
mov esi, 0x4830
mov dword [ebp - 0x10], edx
push esi
xor ebx, ebx
mov dword [ebp - 4], ecx
push ebx
push dword [eax + 0x18]
mov dword [ebp - 0xc], esi
call dword [sym.imp.ntdll.dll_RtlAllocateHeap]
mov edi, eax
test edi, edi
jne 0x41dc9a
mov esi, 0x5aa
jmp 0x41de3d
call dword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
mov esi, eax
cmp esi, 0x7a
je 0x41dc60
cmp esi, 0xea
jne 0x41dcb9
mov eax, dword fs:[0x30]
push edi
push 0
push dword [eax + 0x18]
call dword [sym.imp.ntdll.dll_RtlFreeHeap]
mov esi, dword [ebp - 0xc]
mov eax, dword fs:[0x30]
add esi, 0x2400
push esi
push 0
mov dword [ebp - 0xc], esi
push dword [eax + 0x18]
call dword [sym.imp.ntdll.dll_RtlAllocateHeap]
mov edi, eax
test edi, edi
je 0x41dd7b
xor ecx, ecx
lea eax, [ebp - 8]
push ecx
push eax
push esi
push edi
push ecx
push ecx
push 0x70050
push dword [ebp - 4]
call dword [sym.imp.api_ms_win_core_io_l1_1_0.dll_DeviceIoControl]
test eax, eax
je 0x41dc4b
xor esi, esi
test esi, esi
je 0x41de08
mov esi, 0x808
jmp 0x41dd02
mov esi, 0x5aa
jmp 0x41de27
call dword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
mov esi, eax
cmp esi, 0x7a
je 0x41dce7
cmp esi, 0xea
jne 0x41dd3c
mov eax, dword fs:[0x30]
push ebx
push 0
push dword [eax + 0x18]
call dword [sym.imp.ntdll.dll_RtlFreeHeap]
mov esi, dword [ebp - 0xc]
add esi, 0x800
mov eax, dword fs:[0x30]
push esi
push 0
mov dword [ebp - 0xc], esi
push dword [eax + 0x18]
call dword [sym.imp.ntdll.dll_RtlAllocateHeap]
mov ebx, eax
test ebx, ebx
je 0x41dcc8
xor ecx, ecx
lea eax, [ebp - 8]
push ecx
push eax
push esi
push ebx
push ecx
push ecx
push 0x7400c
push dword [ebp - 4]
call dword [sym.imp.api_ms_win_core_io_l1_1_0.dll_DeviceIoControl]
test eax, eax
je 0x41dcd2
xor esi, esi
test esi, esi
jne 0x41de0d
mov eax, dword fs:[0x30]
push edi
push esi
push dword [eax + 0x18]
call dword [sym.imp.ntdll.dll_RtlFreeHeap]
imul eax, dword [ebx], 0x90
add eax, 0x30
push eax
mov dword [ebp - 0xc], eax
mov eax, dword fs:[0x30]
push esi
push dword [eax + 0x18]
call dword [sym.imp.ntdll.dll_RtlAllocateHeap]
mov edi, eax
mov dword [ebp - 4], edi
test edi, edi
jne 0x41dd85
mov esi, 0x5aa
jmp 0x41de0d
push dword [ebp - 0xc]
push 0
push edi
call sub.msvcrt.dll_memset
and dword [edi], 0
lea edx, [ebx + 8]
mov eax, dword [ebx]
lea ecx, [edi + 0x30]
and dword [ebp - 0xc], 0
add esp, 0xc
mov dword [edi + 4], eax
mov eax, dword [ebx + 4]
mov dword [edi + 8], eax
cmp dword [ebx], 0
jbe 0x41de08
mov edi, dword [ebp - 0xc]
and dword [ecx], 0
inc edi
mov eax, dword [edx]
lea ecx, [ecx + 0x90]
mov dword [ecx - 0x88], eax
lea edx, [edx + 0x20]
mov eax, dword [edx - 0x1c]
mov dword [ecx - 0x84], eax
mov eax, dword [edx - 0x18]
mov dword [ecx - 0x80], eax
mov eax, dword [edx - 0x14]
mov dword [ecx - 0x7c], eax
mov eax, dword [edx - 0xc]
mov dword [ecx - 0x78], eax
mov al, byte [edx - 5]
mov byte [ecx - 0x74], al
mov al, byte [edx - 8]
mov byte [ecx - 0x70], al
mov al, byte [edx - 7]
mov byte [ecx - 0x6f], al
mov al, byte [edx - 6]
mov byte [ecx - 0x6e], al
mov eax, dword [edx - 0x10]
mov dword [ecx - 0x6c], eax
cmp edi, dword [ebx]
jb 0x41ddb3
mov edi, dword [ebp - 4]
mov eax, dword [ebp - 0x10]
mov dword [eax], edi
test ebx, ebx
je 0x41de23
mov eax, dword fs:[0x30]
push ebx
push 0
push dword [eax + 0x18]
call dword [sym.imp.ntdll.dll_RtlFreeHeap]
test esi, esi
je 0x41de3d
test edi, edi
je 0x41de3d
mov eax, dword fs:[0x30]
push edi
push 0
push dword [eax + 0x18]
call dword [sym.imp.ntdll.dll_RtlFreeHeap]
pop edi
mov eax, esi
pop esi
pop ebx
leave
ret