Function at 0xb0c07b4
Capabilities:
Get disk information

Disassembly:
push 0xac
mov eax, 0xb11a0f3
call fcn.0b0f342f
mov ebx, ecx
mov dword [ebp - 0xac], ebx
mov dword [ebp - 0xb8], ebx
xor ecx, ecx
mov dword [ebp - 0xb4], ecx
mov edi, ebx
xor eax, eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
mov dword [ebx + 0x10], ecx
mov dword [ebx + 0x14], 0xf
mov byte [ebx], cl
mov dword [ebp - 4], ecx
xor esi, esi
inc esi
lea ecx, [ebp - 0x28]
mov dword [ebp - 0xb4], esi
call fcn.0b0dd982
push eax
mov ecx, ebx
mov dword [ebp - 4], esi
call fcn.0b0c0c7d
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0
call fcn.0b0bf84d
lea eax, [ebp - 0xa8]
push eax
call dword [sym.imp.ADVAPI32.dll_GetCurrentHwProfileA]
lea edi, [ebp - 0x28]
test eax, eax
jne 0xb0c0841
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
and dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
jmp 0xb0c0860
xor eax, eax
lea ecx, [ebp - 0x28]
stosd dword es:[edi], eax
push 0x27
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
lea eax, [ebp - 0xa4]
and dword [ebp - 0x18], 0
and dword [ebp - 0x14], 0
push eax
call fcn.0b0bf9ad
push 3
pop esi
mov dword [ebp - 0xb4], esi
lea eax, [ebp - 0x28]
mov dword [ebp - 4], 2
push eax
mov ecx, ebx
call fcn.0b0c0c7d
mov byte [ebp - 4], 0
mov eax, dword [ebp - 0x14]
cmp eax, 0xf
jbe 0xb0c08c8
mov ecx, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0xb0], eax
mov dword [ebp - 0xac], ecx
cmp eax, 0x1000
jb 0xb0c08bf
lea eax, [ebp - 0xb0]
push eax
lea eax, [ebp - 0xac]
push eax
call fcn.0b0b546b
mov eax, dword [ebp - 0xb0]
pop ecx
pop ecx
mov ecx, dword [ebp - 0xac]
push eax
push ecx
call fcn.0b0f26d7
pop ecx
pop ecx
lea ecx, [ebp - 0x28]
call fcn.0b0c0700
push eax
mov ecx, ebx
mov dword [ebp - 4], esi
call fcn.0b0c0c7d
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0
call fcn.0b0bf84d
xor ecx, ecx
lea eax, [ebp - 0xac]
push ecx
push ecx
push ecx
push ecx
push eax
push ecx
push ecx
push 0xb08e3f4
mov dword [ebp - 0xac], ecx
call dword [sym.imp.KERNEL32.dll_GetVolumeInformationA]
test eax, eax
jne 0xb0c092d
lea edi, [ebp - 0x28]
mov dword [ebp - 0xb4], 7
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
and dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
jmp 0xb0c0959
push ecx
push ecx
mov eax, esp
lea ecx, [ebp - 0xac]
push 7
pop esi
mov dword [eax], 0xb08e3f8
mov dword [eax + 4], esi
call fcn.0b0c0a8c
pop ecx
pop ecx
push eax
lea ecx, [ebp - 0x28]
call fcn.0b0bfa23
mov dword [ebp - 0xb4], esi
lea eax, [ebp - 0x28]
mov dword [ebp - 4], 4
push eax
mov ecx, ebx
call fcn.0b0c0c7d
mov byte [ebp - 4], 0
mov eax, dword [ebp - 0x14]
cmp eax, 0xf
jbe 0xb0c09b8
mov ecx, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0xac], eax
mov dword [ebp - 0xb0], ecx
cmp eax, 0x1000
jb 0xb0c09af
lea eax, [ebp - 0xac]
push eax
lea eax, [ebp - 0xb0]
push eax
call fcn.0b0b546b
mov eax, dword [ebp - 0xac]
pop ecx
pop ecx
mov ecx, dword [ebp - 0xb0]
push eax
push ecx
call fcn.0b0f26d7
pop ecx
pop ecx
cmp dword [ebx + 0x10], 0
jne 0xb0c0a01
push 0
push 0x20
mov ecx, ebx
call fcn.0b0c0bfa
cmp dword [ebx + 0x14], 0xf
mov edi, ebx
mov eax, dword [ebx + 0x10]
mov dword [ebp - 0xac], eax
jbe 0xb0c09dc
mov edi, dword [ebx]
mov ecx, dword [0xa44c578]
push dword [0xa44c574]
mov esi, dword [ecx + 0x14]
call dword [ecx + 0x10]
pop ecx
push dword [0xa44c574]
push dword [ebp - 0xac]
push edi
call esi
add esp, 0xc
mov eax, ebx
call fcn.0b0f33ed
ret