Function at 0x100231b0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x494
mov eax, dword [0x1004004c]
xor eax, esp
mov dword [esp + 0x48c], eax
push ebx
push ebp
mov ebp, dword [sym.imp.KERNEL32.dll_DeviceIoControl]
push esi
xor ebx, ebx
mov esi, ecx
push edi
mov dword [esp + 0x20], esi
mov dword [esp + 0x14], ebx
mov dword [esp + 0x18], ebx
cmp dword [esi + 0x10], 0x20
jge 0x10023412
xor eax, eax
push 0x1fe
push eax
lea ecx, [esp + 0x2a2]
push ecx
mov word [esp + 0x2a4], ax
call sub.MSVCR90.dll_memset
push ebx
push str..PhysicalDrive_d
lea edx, [esp + 0x2ac]
call fcn.100239a0
add esp, 0x14
push 0
push 0
push 3
push 0
push 3
push 0xc0000000
lea edx, [esp + 0x2b0]
push edx
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov edi, eax
cmp edi, 0xffffffff
je 0x10023404
xor eax, eax
push eax
lea ecx, [esp + 0x20]
push ecx
push 0x18
lea edx, [esp + 0x30]
push edx
push eax
push eax
push 0x74080
push edi
mov dword [esp + 0x3c], eax
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], eax
mov dword [esp + 0x4c], eax
mov dword [esp + 0x50], eax
mov dword [esp + 0x54], eax
mov dword [esp + 0x58], eax
call ebp
test eax, eax
je 0x100233f9
mov bl, byte [esp + 0x27]
test bl, bl
jbe 0x100233f9
xor eax, eax
push 0x210
push eax
mov dword [esp + 0x6c], eax
mov dword [esp + 0x70], eax
mov dword [esp + 0x74], eax
mov dword [esp + 0x78], eax
mov dword [esp + 0x7c], eax
mov dword [esp + 0x80], eax
mov dword [esp + 0x84], eax
mov dword [esp + 0x88], eax
mov byte [esp + 0x8c], al
lea eax, [esp + 0x90]
push eax
call sub.MSVCR90.dll_memset
mov al, byte [esp + 0x24]
mov cl, al
and cl, 1
add esp, 0xc
or cl, 0xfa
shl cl, 4
push 0
mov byte [esp + 0x71], cl
mov cl, al
shr bl, cl
lea edx, [esp + 0x20]
push edx
push 0x210
and bl, 0x10
mov byte [esp + 0x7c], al
lea eax, [esp + 0x94]
push eax
neg bl
push 0x20
sbb bl, bl
lea ecx, [esp + 0x78]
push ecx
and bl, 0xb5
push 0x7c088
add bl, 0xec
push edi
mov byte [esp + 0x88], 0
mov byte [esp + 0x89], 1
mov byte [esp + 0x8b], 0
mov byte [esp + 0x8c], 0
mov byte [esp + 0x8e], bl
mov dword [esp + 0x84], 0x200
call ebp
test eax, eax
je 0x100233f9
movzx eax, word [esp + 0xae]
movzx edx, word [esp + 0xac]
movzx ecx, word [esp + 0xb0]
mov dword [esp + 0x40], eax
movzx eax, word [esp + 0xb4]
mov dword [esp + 0x3c], edx
movzx edx, word [esp + 0xb2]
mov dword [esp + 0x44], ecx
movzx ecx, word [esp + 0xb6]
mov dword [esp + 0x4c], eax
movzx eax, word [esp + 0xba]
mov dword [esp + 0x48], edx
movzx edx, word [esp + 0xb8]
mov dword [esp + 0x50], ecx
movzx ecx, word [esp + 0xbc]
mov dword [esp + 0x58], eax
mov eax, dword [esi + 0x10]
mov dword [esp + 0x54], edx
movzx edx, word [esp + 0xbe]
mov dword [esp + 0x5c], ecx
mov ecx, eax
shl ecx, 7
mov dword [esp + 0x60], edx
mov edx, dword [esp + 0x20]
lea esi, [ecx + esi + 0x18]
inc eax
lea ecx, [esp + 0x3c]
mov dword [edx + 0x10], eax
call fcn.10022f70
mov esi, dword [esp + 0x20]
mov dword [esp + 0x14], 1
push edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ebx, dword [esp + 0x18]
inc ebx
cmp ebx, 0x10
mov dword [esp + 0x18], ebx
jl 0x100231de
mov ecx, dword [esp + 0x49c]
mov eax, dword [esp + 0x14]
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.1002c7c6
add esp, 0x494
ret