Function at 0x1001a140
Capabilities:
Get disk information
Get disk size
Get storage device properties
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff0
sub esp, 0x3a0
mov esi, dword [edx + 4]
mov edi, edx
mov ebx, ecx
push esi
call sub.kernel32.dll_GetDriveTypeW
mov ecx, eax
and ecx, 0xfffffffe
cmp ecx, 2
jne 0x1001a3d8
mov dword [esp], ebx
mov dword [esp + 8], eax
lea ebx, [esp + 0x192]
push 0x20a
push 0
push ebx
call sub.msvcrt.dll_memset
add esp, 0xc
xorps xmm0, xmm0
mov dword [esp + 0x38], 0
lea ecx, [esp + 0x40]
lea eax, [esp + 0x38]
movaps xmmword [esp + 0x70], xmm0
movaps xmmword [esp + 0x60], xmm0
movaps xmmword [esp + 0x50], xmm0
movaps xmmword [esp + 0x40], xmm0
push 0x20
push ecx
push eax
push 0
push 0
push 0x105
push ebx
push esi
call sub.kernel32.dll_GetVolumeInformationW
test eax, eax
je 0x1001a3a3
mov eax, dword [esp + 0x38]
mov dword [esp + 0x34], edi
mov edi, dword [edi + 8]
mov dword [esp + 0xac], eax
lea eax, [esp + 0x88]
push edi
mov dword [esp + 0x10], esi
push esi
push eax
call fcn.100134a0
add esp, 0xc
mov esi, dword [esp + 0x90]
mov ebx, dword [esp]
test esi, esi
je 0x1001a3ee
mov eax, edi
sub eax, 2
jb 0x1001a83b
mov ecx, dword [esp + 0xc]
lea eax, [ecx + eax*2]
mov dword [esp + 0x138], ecx
lea ecx, [esp + 0x110]
mov dword [esp + 0x13c], eax
lea eax, [esp + 0x128]
mov dword [esp + 0x128], 1
mov dword [esp + 0x12c], 0
mov dword [esp + 0x130], 1
mov word [esp + 0x134], 0
push eax
push ecx
call fcn.10019270
add esp, 8
mov edi, dword [esp + 0x114]
call fcn.10036630
push eax
push 0
push 3
push 0
push 3
push 0
push edi
call sub.kernel32.dll_CreateFileW
lea ecx, [eax - 1]
cmp ecx, 0xfffffffe
jae 0x1001a44a
mov dword [esp + 4], eax
mov eax, dword [esp + 0x8c]
lea edx, [esp + 0x20]
lea ecx, [esp + 0x10]
mov dword [esp + 0x30], eax
mov eax, dword [eax + 4]
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0x24], 0
mov dword [esp + 0x20], 0
push edx
push ecx
push 0
push eax
call sub.kernel32.dll_GetDiskFreeSpaceExW
test eax, eax
je 0x1001a495
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
mov eax, ecx
or eax, edx
je 0x1001a4c7
mov eax, dword [esp + 0x20]
xorps xmm0, xmm0
mov dword [esp + 0xa4], edx
mov dword [esp + 0xa8], ecx
mov dword [esp + 0x11c], 7
mov dword [esp + 0x120], 0
mov byte [esp + 0x124], 0
mov dword [esp + 0x108], 0
mov dword [esp + 0x3c], 0
lea ecx, [esp + 0x100]
lea edx, [esp + 0x11c]
movsd qword [esp + 0x100], xmm0
mov dword [esp + 0xa0], eax
mov eax, dword [esp + 0x24]
mov dword [esp + 0x9c], eax
lea eax, [esp + 0x3c]
push 0
push eax
push 0xc
push ecx
push 0xc
push edx
push 0x2d1400
push dword [esp + 0x20]
call sub.kernel32.dll_DeviceIoControl
test eax, eax
je 0x1001a562
cmp dword [esp + 0x3c], 0xc
mov eax, 2
jne 0x1001a599
xor eax, eax
cmp byte [esp + 0x108], 0
sete al
jmp 0x1001a599
call fcn.10047dc0
mov ebx, dword [esp]
test edx, edx
mov dword [esp + 0xb4], eax
mov dword [esp + 0xb8], edx
mov dword [esp + 0xb0], 1
je 0x1001a3d8
lea eax, [esp + 0xb8]
push eax
call fcn.10047d70
add esp, 4
mov dword [ebx], 0
mov dword [ebx + 4], 8
mov dword [ebx + 8], 0
jmp 0x1001a42e
mov edi, dword [esp + 0x8c]
mov dword [ebx], 0
mov dword [ebx + 4], 8
mov dword [ebx + 8], 0
mov eax, dword [esp + 0x88]
mov esi, dword [esp + 0xc]
test eax, eax
je 0x1001a42a
shl eax, 2
lea eax, [eax + eax*2]
push 4
push eax
push edi
call fcn.1000d080
add esp, 0xc
mov edi, dword [esp + 0x34]
mov eax, dword [edi]
test eax, eax
je 0x1001a442
add eax, eax
push 2
push eax
push esi
call fcn.1000d080
add esp, 0xc
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
call fcn.10047dc0
test edx, edx
mov dword [esp + 0xb8], edx
mov dword [esp + 0xb4], eax
mov dword [esp + 0xb0], 1
je 0x1001a47c
lea eax, [esp + 0xb8]
push eax
call fcn.10047d70
add esp, 4
mov dword [ebx], 0
mov dword [ebx + 4], 8
mov dword [ebx + 8], 0
jmp 0x1001a51a
call fcn.10047dc0
test edx, edx
mov dword [esp + 0xb4], eax
mov dword [esp + 0xb8], edx
mov dword [esp + 0xb0], 1
je 0x1001a4c7
lea eax, [esp + 0xb8]
push eax
call fcn.10047d70
add esp, 4
mov dword [ebx], 0
mov dword [ebx + 4], 8
mov dword [ebx + 8], 0
push dword [esp + 4]
call sub.kernel32.dll_CloseHandle
test eax, eax
jne 0x1001a51a
call fcn.10047dc0
test edx, edx
mov dword [esp + 0xb4], eax
mov dword [esp + 0xb8], edx
mov dword [esp + 0xb0], 1
je 0x1001a51a
lea eax, [esp + 0xb8]
push eax
call fcn.10047d70
add esp, 4
mov eax, dword [esp + 0x110]
test eax, eax
je 0x1001a533
add eax, eax
push 2
push eax
push edi
call fcn.1000d080
add esp, 0xc
mov edi, dword [esp + 0x8c]
lea ebx, [edi + 4]
jmp 0x1001a54a
add ebx, 0xc
dec esi
je 0x1001a409
mov eax, dword [ebx - 4]
test eax, eax
je 0x1001a540
add eax, eax
push 2
push eax
push dword [ebx]
call fcn.1000d080
add esp, 0xc
jmp 0x1001a540
call fcn.10047dc0
test edx, edx
mov dword [esp + 0xb4], eax
mov dword [esp + 0xb8], edx
mov dword [esp + 0xb0], 1
je 0x1001a594
lea eax, [esp + 0xb8]
push eax
call fcn.10047d70
add esp, 4
mov eax, 2
mov dword [esp + 0x98], eax
xor ecx, ecx
mov edx, 0x20a
lea eax, [esp + 0x148]
nop
cmp word [esp + ecx*2 + 0x192], 0
je 0x1001a5c6
inc ecx
add edx, 0xfffffffe
jne 0x1001a5b0
mov ecx, 0x105
push ecx
lea ecx, [esp + 0x196]
push ecx
push eax
call fcn.10091010
add esp, 0xc
cmp word [esp + 0x40], 0
lea eax, [esp + 0x158]
mov ecx, 0
mov dword [esp + 0x2c], 0
je 0x1001a879
cmp word [esp + 0x42], 0
je 0x1001a773
cmp word [esp + 0x44], 0
je 0x1001a77d
cmp word [esp + 0x46], 0
je 0x1001a787
cmp word [esp + 0x48], 0
je 0x1001a791
cmp word [esp + 0x4a], 0
je 0x1001a79b
cmp word [esp + 0x4c], 0
je 0x1001a7a5
cmp word [esp + 0x4e], 0
je 0x1001a7af
cmp word [esp + 0x50], 0
je 0x1001a7b9
cmp word [esp + 0x52], 0
je 0x1001a7c3
cmp word [esp + 0x54], 0
je 0x1001a7cd
cmp word [esp + 0x56], 0
je 0x1001a7d7
cmp word [esp + 0x58], 0
je 0x1001a7e1
cmp word [esp + 0x5a], 0
je 0x1001a7eb
cmp word [esp + 0x5c], 0
je 0x1001a7f5
cmp word [esp + 0x5e], 0
je 0x1001a7fc
cmp word [esp + 0x60], 0
je 0x1001a803
cmp word [esp + 0x62], 0
je 0x1001a80a
cmp word [esp + 0x64], 0
je 0x1001a811
cmp word [esp + 0x66], 0
je 0x1001a818
cmp word [esp + 0x68], 0
je 0x1001a81f
cmp word [esp + 0x6a], 0
je 0x1001a826
cmp word [esp + 0x6c], 0
je 0x1001a82d
cmp word [esp + 0x6e], 0
je 0x1001a834
cmp word [esp + 0x70], 0
je 0x1001a847
cmp word [esp + 0x72], 0
je 0x1001a84e
cmp word [esp + 0x74], 0
je 0x1001a855
cmp word [esp + 0x76], 0
je 0x1001a85c
cmp word [esp + 0x78], 0
je 0x1001a863
cmp word [esp + 0x7a], 0
je 0x1001a86a
cmp word [esp + 0x7c], 0
je 0x1001a871
cmp word [esp + 0x7e], 1
mov ecx, 0x20
sbb ecx, 0
jmp 0x1001a876
mov ecx, 1
jmp 0x1001a879
mov ecx, 2
jmp 0x1001a879
mov ecx, 3
jmp 0x1001a879
mov ecx, 4
jmp 0x1001a879
mov ecx, 5
jmp 0x1001a879
mov ecx, 6
jmp 0x1001a879
mov ecx, 7
jmp 0x1001a879
mov ecx, 8
jmp 0x1001a879
mov ecx, 9
jmp 0x1001a879
mov ecx, 0xa
jmp 0x1001a879
mov ecx, 0xb
jmp 0x1001a879
mov ecx, 0xc
jmp 0x1001a879
mov ecx, 0xd
jmp 0x1001a876
mov ecx, 0xe
jmp 0x1001a876
mov ecx, 0xf
jmp 0x1001a876
mov ecx, 0x10
jmp 0x1001a876
mov ecx, 0x11
jmp 0x1001a876
mov ecx, 0x12
jmp 0x1001a876
mov ecx, 0x13
jmp 0x1001a876
mov ecx, 0x14
jmp 0x1001a876
mov ecx, 0x15
jmp 0x1001a876
mov ecx, 0x16
jmp 0x1001a876
mov ecx, 0x17
jmp 0x1001a876
push 0x106929ec
push edi
push eax
call fcn.100e1b70
mov ecx, 0x18
jmp 0x1001a876
mov ecx, 0x19
jmp 0x1001a876
mov ecx, 0x1a
jmp 0x1001a876
mov ecx, 0x1b
jmp 0x1001a876
mov ecx, 0x1c
jmp 0x1001a876
mov ecx, 0x1d
jmp 0x1001a876
mov ecx, 0x1e
mov ebx, dword [esp]
mov dword [esp + 0x94], edi
push ecx
lea ecx, [esp + 0x44]
push ecx
push eax
call fcn.10091010
add esp, 0xc
mov ecx, dword [esp + 0x30]
mov eax, dword [esp + 0xac]
mov dword [esp + 0x180], ecx
mov ecx, dword [esp + 0x98]
shr eax, 0x13
and al, 1
cmp dword [esp + 8], 2
mov dword [esp + 0x140], ecx
mov ecx, dword [esp + 0xa4]
mov dword [esp + 0x144], 0xffffffff
mov dword [esp + 0x16c], ecx
mov ecx, dword [esp + 0xa8]
mov dword [esp + 0x168], ecx
mov ecx, dword [esp + 0x9c]
mov dword [esp + 0x174], ecx
mov ecx, dword [esp + 0xa0]
mov dword [esp + 0x170], ecx
mov ecx, dword [esp + 0x88]
sete byte [esp + 0x178]
imul edi, esi, 0x58
cmp esi, 0x1745d17
mov byte [esp + 0x179], al
ja 0x1001aa47
test edi, edi
mov dword [esp], ecx
js 0x1001aa47
mov eax, dword [0x106b6680]
movzx eax, byte [eax]
push 8
push edi
call fcn.1000d070
add esp, 8
test eax, eax
je 0x1001aa3f
mov edx, dword [esp + 0x30]
lea ecx, [esi + esi*2]
mov dword [esp + 0x10], esi
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], 0
lea edi, [esp + 0xb0]
lea esi, [esp + 0x140]
lea ecx, [edx + ecx*4]
mov dword [esp + 8], ecx
mov ecx, 0x11
rep movsd dword es:[edi], dword [esi]
mov dword [esp + 0xf4], edx
lea edx, [esp + 0x18]
mov ecx, dword [esp]
mov esi, dword [esp + 8]
mov dword [esp + 0x20], edx
mov dword [esp + 0x24], 0
mov dword [esp + 0x28], eax
lea eax, [esp + 0x20]
mov dword [esp + 0xf8], ecx
mov dword [esp + 0xfc], esi
push eax
lea eax, [esp + 0xb4]
push eax
call fcn.100104c0
add esp, 8
mov eax, dword [esp + 0x18]
movsd xmm0, qword [esp + 0x10]
mov dword [ebx + 8], eax
movsd qword [ebx], xmm0
push dword [esp + 4]
call sub.kernel32.dll_CloseHandle
test eax, eax
jne 0x1001aa0f
call fcn.10047dc0
test edx, edx
mov dword [esp + 0xb4], eax
mov dword [esp + 0xb8], edx
mov dword [esp + 0xb0], 1
je 0x1001aa0f
lea eax, [esp + 0xb8]
push eax
call fcn.10047d70
add esp, 4
mov eax, dword [esp + 0x110]
mov esi, dword [esp + 0xc]
mov edi, dword [esp + 0x34]
test eax, eax
je 0x1001a42e
add eax, eax
push 2
push eax
push dword [esp + 0x9c]
call fcn.1000d080
add esp, 0xc
jmp 0x1001a42e
mov dword [esp + 0x2c], 8
push edi
push dword [esp + 0x30]
call fcn.100d0890
nop word cs:[eax + eax]
nop dword [eax + eax]