Function at 0x10084300
Capabilities:
Get disk information
Get session user name

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x3c
mov eax, dword [0x100f2010]
xor eax, ebp
mov dword [ebp - 4], eax
push esi
xor eax, eax
mov ecx, dword [ebp + 8]
mov dword [ecx], eax
mov dword [ecx + 4], eax
mov dword [ecx + 8], eax
xor edx, edx
mov dword [ebp - 0x14], edx
mov dword [ebp - 0x10], edx
mov dword [ebp - 0xc], edx
mov byte [ebp - 8], dl
mov dword [ebp - 0x1c], 0xd
lea eax, [ebp - 0x1c]
push eax
lea ecx, [ebp - 0x14]
push ecx
call dword [sym.imp.ADVAPI32.dll_GetUserNameA]
cmp dword [ebp - 0x1c], 0
jne 0x10084354
mov edx, 1
imul eax, edx, 0
mov byte [ebp + eax - 0x14], 0x78
lea ecx, [ebp - 0x14]
mov dword [ebp - 0x30], ecx
mov edx, dword [ebp - 0x30]
add edx, 1
mov dword [ebp - 0x38], edx
mov eax, dword [ebp - 0x30]
mov cl, byte [eax]
mov byte [ebp - 0x25], cl
add dword [ebp - 0x30], 1
cmp byte [ebp - 0x25], 0
jne 0x10084363
mov edx, dword [ebp - 0x30]
sub edx, dword [ebp - 0x38]
mov dword [ebp - 0x3c], edx
cmp dword [ebp - 0x3c], 0xc
je 0x10084398
push 0xd
lea eax, [ebp - 0x14]
push eax
lea ecx, [ebp - 0x14]
push ecx
call fcn.10084210
add esp, 0xc
jmp 0x10084354
lea edx, [ebp - 0x14]
push edx
call fcn.10083f60
add esp, 4
mov byte [ebp - 0x1d], al
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0x14]
mov dword [eax], ecx
mov edx, dword [ebp - 0x10]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0xc]
mov dword [eax + 8], ecx
mov edx, 1
imul eax, edx, 5
mov ecx, 1
imul edx, ecx, 0xb
mov ecx, dword [ebp + 8]
mov esi, dword [ebp + 8]
mov al, byte [esi + eax]
mov byte [ecx + edx], al
mov dword [ebp - 0x34], 0
jmp 0x100843e9
mov ecx, dword [ebp - 0x34]
add ecx, 1
mov dword [ebp - 0x34], ecx
cmp dword [ebp - 0x34], 0xc
jge 0x10084408
movzx edx, byte [ebp - 0x1d]
mov eax, dword [ebp + 8]
add eax, dword [ebp - 0x34]
movsx ecx, byte [eax]
xor ecx, edx
mov edx, dword [ebp + 8]
add edx, dword [ebp - 0x34]
mov byte [edx], cl
jmp 0x100843e0
push 0
push 0
push 0
push 0
lea eax, [ebp - 0x18]
push eax
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetVolumeInformationA]
mov dword [ebp - 0x24], 0
jmp 0x10084432
mov ecx, dword [ebp - 0x24]
add ecx, 1
mov dword [ebp - 0x24], ecx
cmp dword [ebp - 0x24], 0xc
jge 0x100844b5
mov edx, dword [ebp - 0x18]
shr edx, 6
and edx, 0xff
mov eax, dword [ebp + 8]
add eax, dword [ebp - 0x24]
movsx ecx, byte [eax]
xor ecx, edx
mov edx, dword [ebp + 8]
add edx, dword [ebp - 0x24]
mov byte [edx], cl
mov eax, dword [ebp - 0x18]
shr eax, 4
and eax, 0xff
mov ecx, dword [ebp + 8]
add ecx, dword [ebp - 0x24]
movsx edx, byte [ecx]
xor edx, eax
mov eax, dword [ebp + 8]
add eax, dword [ebp - 0x24]
mov byte [eax], dl
mov ecx, dword [ebp - 0x18]
shr ecx, 2
and ecx, 0xff
mov edx, dword [ebp + 8]
add edx, dword [ebp - 0x24]
movsx eax, byte [edx]
xor eax, ecx
mov ecx, dword [ebp + 8]
add ecx, dword [ebp - 0x24]
mov byte [ecx], al
mov edx, dword [ebp - 0x18]
and edx, 0xff
mov eax, dword [ebp + 8]
add eax, dword [ebp - 0x24]
movsx ecx, byte [eax]
xor ecx, edx
mov edx, dword [ebp + 8]
add edx, dword [ebp - 0x24]
mov byte [edx], cl
jmp 0x10084429
mov dword [ebp - 0x2c], 0
jmp 0x100844c7
mov eax, dword [ebp - 0x2c]
add eax, 1
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0xc
jge 0x100844ea
movzx ecx, byte [ebp - 0x1d]
imul ecx, dword [ebp - 0x2c]
mov edx, dword [ebp + 8]
add edx, dword [ebp - 0x2c]
movsx eax, byte [edx]
xor eax, ecx
mov ecx, dword [ebp + 8]
add ecx, dword [ebp - 0x2c]
mov byte [ecx], al
jmp 0x100844be
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.10084889
mov esp, ebp
pop ebp
ret