Function at 0x103b9c0
Capabilities:
Get disk information

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x25c
mov eax, dword [0x1076530]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 0xc]
push ebx
mov ebx, dword [ebp + 0x10]
push esi
push edi
mov edi, dword [ebp + 8]
push 1
push 0x715
push 0x100725c
lea ecx, [ebp - 0x234]
mov dword [ebp - 0x238], eax
call fcn.01055826
xor esi, esi
mov eax, 0x1010420
mov dword [ebp - 0x25c], eax
mov dword [ebp - 0x250], eax
xor eax, eax
push 0x206
mov word [ebp - 0x20c], ax
lea eax, [ebp - 0x20a]
push esi
push eax
mov dword [ebp - 0x244], esi
mov dword [ebp - 0x240], esi
mov dword [ebp - 0x23c], esi
mov dword [ebp - 0x210], esi
mov dword [ebp - 0x258], esi
mov dword [ebp - 0x254], esi
mov dword [ebp - 0x24c], esi
mov dword [ebp - 0x248], esi
call sub.msvcrt.dll_memset
add esp, 0xc
cmp ebx, esi
je 0x103ba65
mov dword [ebx], esi
mov eax, dword [ebp - 0x238]
cmp eax, esi
jne 0x103ba8a
mov eax, 0x71e
mov dword [ebp - 0x234], 0x80070057
mov word [ebp - 0x22e], ax
jmp 0x103bc29
mov ecx, 0x71e
mov word [ebp - 0x230], cx
cmp ebx, esi
jne 0x103ba9f
lea eax, [ecx + 1]
jmp 0x103ba74
mov ecx, 0x71f
mov dword [ebp - 0x234], esi
mov word [ebp - 0x230], cx
cmp dword [eax + 0x44], esi
je 0x103babf
cmp dword [eax + 0x30], esi
jne 0x103babf
cmp dword [eax], esi
jne 0x103bac9
mov eax, 0x727
jmp 0x103bc1a
mov edx, dword [edi + 0x14]
lea ecx, [ebp - 0x244]
call fcn.010367e8
mov dword [ebp - 0x234], eax
cmp eax, esi
mov eax, 0x72e
jl 0x103ba7e
mov word [ebp - 0x230], ax
lea edi, [eax + 0x13]
mov eax, dword [ebp - 0x210]
cmp eax, esi
je 0x103bb06
push eax
mov dword [ebp - 0x210], esi
call fcn.0101ad8d
mov eax, dword [ebp - 0x210]
cmp eax, esi
je 0x103bb1c
push eax
mov dword [ebp - 0x210], esi
call fcn.0101ad8d
lea edx, [ebp - 0x210]
lea ecx, [ebp - 0x244]
call fcn.0101facf
mov dword [ebp - 0x234], eax
cmp eax, esi
mov eax, 0x732
jl 0x103ba7e
mov word [ebp - 0x230], ax
xor eax, eax
inc eax
cmp dword [ebp - 0x234], eax
je 0x103bc89
mov eax, dword [ebp - 0x210]
cmp dword [eax + 0x40], esi
je 0x103baf0
test byte [eax + 0x3c], 1
jne 0x103baf0
mov edx, eax
add edx, 4
lea ecx, [ebp - 0x25c]
call fcn.01063ff9
mov dword [ebp - 0x234], eax
cmp eax, esi
mov eax, 0x73d
jl 0x103ba7e
push 0x1001814
push dword [ebp - 0x25c]
mov edx, 0x1003394
lea ecx, [ebp - 0x250]
mov word [ebp - 0x230], ax
call fcn.01064743
mov dword [ebp - 0x234], eax
cmp eax, esi
mov eax, 0x73e
jl 0x103ba7e
mov word [ebp - 0x230], ax
push 0x104
lea eax, [ebp - 0x20c]
push eax
push dword [ebp - 0x250]
call dword [sym.imp.KERNEL32.dll_GetVolumeNameForVolumeMountPointW]
test eax, eax
je 0x103bc8d
mov eax, edi
mov word [ebp - 0x230], ax
mov eax, dword [ebp - 0x238]
push dword [eax + 4]
lea eax, [ebp - 0x20c]
push eax
mov dword [ebp - 0x234], esi
call dword [sym.imp.msvcrt.dll__wcsicmp]
pop ecx
pop ecx
test eax, eax
jne 0x103baf0
mov eax, 0x746
mov word [ebp - 0x230], ax
mov dword [ebp - 0x234], esi
mov dword [ebx], esi
mov edi, dword [ebp - 0x234]
lea ecx, [ebp - 0x250]
call fcn.010635b3
lea ecx, [ebp - 0x25c]
call fcn.010635b3
cmp dword [ebp - 0x210], esi
je 0x103bc58
push dword [ebp - 0x210]
call fcn.0101ad8d
cmp dword [ebp - 0x23c], esi
je 0x103bc6b
push dword [ebp - 0x23c]
call fcn.0101cbf3
lea ecx, [ebp - 0x234]
call fcn.01055a3c
mov ecx, dword [ebp - 4]
mov eax, edi
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.01054fa7
leave
ret 0xc
mov dword [ebx], eax
jmp 0x103bc29
call fcn.0105d3b8
mov dword [ebp - 0x234], eax
mov word [ebp - 0x22e], di
jmp 0x103bc29