Function at 0x100057d0
Capabilities:
Link many functions at runtime

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x7a8
push ebx
push esi
mov esi, dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push edi
push str.FreeLibrary
mov dword [ebp - 0x44], ecx
push str.KERNEL32.dll
call esi
mov edi, dword [sym.imp.KERNEL32.dll_GetProcAddress]
push eax
call edi
push str.lstrlenA
push str.KERNEL32.dll
mov dword [ebp - 0x40], eax
call esi
push eax
call edi
push str.GetDriveTypeA
push str.KERNEL32.dll
mov dword [ebp - 0x18], eax
call esi
push eax
call edi
push str.GetDiskFreeSpaceExA
push str.KERNEL32.dll
mov dword [ebp - 0x2c], eax
call esi
push eax
call edi
push str.GetVolumeInformationA
push str.KERNEL32.dll
mov dword [ebp - 0x34], eax
call esi
push eax
call edi
push str.GetLogicalDriveStringsA
push str.KERNEL32.dll
mov dword [ebp - 0x3c], eax
call esi
push eax
call edi
lea ecx, [ebp - 0x248]
mov byte [ebp - 0x648], 0x67
push ecx
push pe_nt_image_headers32
call eax
lea edx, [ebp - 0x248]
xor eax, eax
push str.Shell32.dll
mov dword [ebp - 0x14], edx
mov dword [ebp - 0x10], eax
mov dword [ebp - 0xc], eax
mov dword [ebp - 8], eax
mov dword [ebp - 4], eax
call esi
mov dword [ebp - 0x24], eax
inc eax
dec eax
pushal
sub eax, 0xa
add eax, 0xa
popal
inc eax
dec eax
pushal
sub eax, 0xa
add eax, 0xa
popal
mov eax, dword [ebp - 0x24]
push str.SHGetFileInfoA
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0x30], eax
inc eax
dec eax
pushal
sub eax, 0xa
add eax, 0xa
popal
mov al, byte [ebp - 0x248]
mov ebx, 1
test al, al
je 0x10005a00
mov ecx, 0x41
xor eax, eax
lea edi, [ebp - 0x148]
mov esi, dword [ebp - 0x14]
rep stosd dword es:[edi], eax
lea ecx, [ebp - 0x148]
push 0x104
push ecx
push eax
push eax
push eax
push eax
push eax
push esi
call dword [ebp - 0x3c]
push 0x410
lea edx, [ebp - 0x7a8]
push 0x160
push edx
push 0x80
push esi
call dword [ebp - 0x30]
lea eax, [ebp - 0x698]
push eax
call dword [ebp - 0x18]
mov edi, eax
lea ecx, [ebp - 0x148]
inc edi
push ecx
mov dword [ebp - 0x38], edi
call dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x28], eax
mov al, byte [esi]
cmp al, 0x41
je 0x1000596d
cmp al, 0x42
je 0x1000596d
lea edx, [ebp - 0x10]
push 0
lea eax, [ebp - 8]
push edx
push eax
push esi
call dword [ebp - 0x34]
test eax, eax
je 0x1000596d
mov eax, dword [ebp - 0x10]
mov edx, dword [ebp - 0xc]
mov ecx, 0x14
call fcn.100198f0
mov edx, dword [ebp - 4]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 8]
mov ecx, 0x14
call fcn.100198f0
jmp 0x10005972
xor eax, eax
mov dword [ebp - 0x20], eax
mov cl, byte [esi]
push esi
mov dword [ebp - 0x1c], eax
mov byte [ebp + ebx - 0x648], cl
call dword [ebp - 0x2c]
mov edx, dword [ebp - 0x20]
mov byte [ebp + ebx - 0x647], al
mov eax, dword [ebp - 0x1c]
mov ecx, edi
mov dword [ebp + ebx - 0x646], edx
mov edx, ecx
lea esi, [ebp - 0x698]
lea edi, [ebp + ebx - 0x63e]
shr ecx, 2
mov dword [ebp + ebx - 0x642], eax
mov eax, dword [ebp - 0x38]
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
lea edx, [eax + ebx]
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ecx, dword [ebp - 0x28]
lea edi, [ebp + edx - 0x63e]
mov edx, ecx
lea esi, [ebp - 0x148]
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov esi, dword [ebp - 0x14]
mov ecx, edx
add ecx, eax
push esi
lea ebx, [ebx + ecx + 0xa]
call dword [ebp - 0x18]
mov cl, byte [esi + eax + 1]
lea eax, [esi + eax + 1]
test cl, cl
mov dword [ebp - 0x14], eax
jne 0x100058cd
mov edx, dword [ebp - 0x24]
push edx
call dword [ebp - 0x40]
mov ecx, dword [ebp - 0x44]
lea eax, [ebp - 0x648]
push ebx
push eax
call fcn.1000bc20
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret