Function at 0x11dbe2c0
Capabilities:
Check for time delay via gettickcount
Get disk information

Disassembly:
push 0xffffffffffffffff
push 0x11fb5091
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x218
push ebp
push esi
push edi
mov dword [esp + 0x18], 0
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ebp, dword [esp + 0x234]
test ebp, ebp
je 0x11dbe557
mov ecx, dword [esp + 0x238]
push ebp
call fcn.11e7f500
push ebp
call fcn.11e67d05
add esp, 4
cmp eax, 1
jl 0x11dbe557
mov ax, word [ebp]
cmp ax, 0x61
jb 0x11dbe32a
cmp ax, 0x7a
jbe 0x11dbe33e
cmp ax, 0x41
jb 0x11dbe557
cmp ax, 0x5a
ja 0x11dbe557
cmp word [ebp + 2], 0x3a
jne 0x11dbe557
cmp ax, 0x61
jb 0x11dbe359
and eax, 0xffff
sub eax, 0x61
jmp 0x11dbe361
and eax, 0xffff
sub eax, 0x41
mov esi, eax
test esi, esi
jl 0x11dbe3a4
cmp esi, 0x1a
jge 0x11dbe3a4
shl eax, 6
add eax, esi
lea edi, [esi + eax*2]
shl edi, 2
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [edi + 0x12127690]
sub ecx, eax
cmp ecx, 0xea60
ja 0x11dbe3a4
lea edi, [edi + 0x12127488]
push edi
call fcn.11e67d05
add esp, 4
test eax, eax
ja 0x11dbe579
mov edx, dword [0x11fd6250]
push ebx
mov dword [esp + 0x14], edx
xor eax, eax
lea ecx, [esp + 0x14]
mov ax, word [ebp]
mov dword [esp + 0x230], 0
push eax
push 0x120acc1c
push ecx
call fcn.11e82200
mov edx, dword [0x11fd6250]
add esp, 0xc
mov dword [esp + 0x10], edx
mov byte [esp + 0x230], 1
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ebx, dword [sym.imp.KERNEL32.dll_QueryDosDeviceW]
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0x22]
mov word [esp + 0x20], 0
rep stosd dword es:[edi], eax
mov ecx, dword [esp + 0x14]
push 0x104
stosw word es:[edi], ax
lea eax, [esp + 0x24]
push eax
push ecx
call ebx
lea edx, [esp + 0x20]
push edx
call fcn.11e67d05
add esp, 4
test eax, eax
jbe 0x11dbe447
lea eax, [esp + 0x20]
lea ecx, [esp + 0x14]
push eax
call fcn.11e7f500
lea ecx, [esp + 0x20]
push ecx
lea ecx, [esp + 0x14]
call fcn.11e7f500
jmp 0x11dbe3f1
mov edi, dword [sym.imp.KERNEL32.dll_GetTickCount]
call edi
lea edx, [esp + 0x10]
lea ecx, [esp + 0x18]
push edx
call fcn.11e7e880
mov ecx, dword [esp + 0x18]
lea eax, [esp + 0x10]
mov bl, 2
push eax
push ecx
mov byte [esp + 0x238], bl
call fcn.11dbe5a0
add esp, 8
test eax, eax
je 0x11dbe4b8
lea ecx, [esp + 0x18]
mov byte [esp + 0x230], 1
call fcn.11e7f280
lea edx, [esp + 0x10]
lea ecx, [esp + 0x18]
push edx
call fcn.11e7e880
mov ecx, dword [esp + 0x18]
lea eax, [esp + 0x10]
push eax
push ecx
mov byte [esp + 0x238], bl
call fcn.11dbe5a0
add esp, 8
test eax, eax
jne 0x11dbe47c
lea ecx, [esp + 0x18]
mov byte [esp + 0x230], 1
call fcn.11e7f280
call edi
mov eax, dword [esp + 0x10]
pop ebx
mov ecx, dword [eax - 8]
test ecx, ecx
je 0x11dbe532
mov edx, dword [esp + 0x238]
add ebp, 4
push ebp
push eax
push 0x12027a5c
push edx
call fcn.11e82200
mov eax, esi
add esp, 0x10
shl eax, 6
add eax, esi
lea esi, [esi + eax*2]
shl esi, 2
call edi
lea edx, [esi + 0x12127488]
mov dword [esi + 0x12127690], eax
mov ecx, 0x41
xor eax, eax
mov edi, edx
push 0x103
rep stosd dword es:[edi], eax
mov ecx, dword [esp + 0x10]
push ecx
push edx
call fcn.11e674bf
add esp, 0xc
mov dword [esp + 0x18], 1
lea ecx, [esp + 0xc]
mov byte [esp + 0x22c], 0
call fcn.11e7f280
lea ecx, [esp + 0x10]
mov dword [esp + 0x22c], 0xffffffff
call fcn.11e7f280
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [esp + 0x224]
mov eax, dword [esp + 0x18]
pop edi
pop esi
pop ebp
mov dword fs:[0], ecx
add esp, 0x224
ret
mov edx, dword [esp + 0x238]
add ebp, 4
push ebp
push edi
push 0x12027a5c
push edx
call fcn.11e82200
add esp, 0x10
jmp 0x11dbe557