Function at 0x10006920
Capabilities:
Get disk information
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x2428
call fcn.10008510
mov eax, dword [0x100180ac]
xor eax, ebp
mov dword [ebp - 8], eax
mov dword [ebp - 0x2428], ecx
mov eax, dword [ebp - 0x2428]
mov dword [eax + 0x100], 0
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x2c], 0
jmp 0x10006966
mov ecx, dword [ebp - 0x2c]
add ecx, 1
mov dword [ebp - 0x2c], ecx
cmp dword [ebp - 0x2c], 8
jge 0x100069c4
mov edx, dword [ebp - 0x2c]
push edx
push str..Scsi_d:
lea eax, [ebp - 0x1c]
push eax
call fcn.10006e20
add esp, 0xc
push 0
push 0xa0000000
push 3
push 0
push 3
push 0xc0000000
lea ecx, [ebp - 0x1c]
push ecx
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0xffffffff
je 0x100069c2
mov edx, dword [ebp - 0x2c]
add edx, 1
mov eax, dword [ebp - 0x2428]
mov dword [eax + 0x110], edx
mov ecx, dword [ebp - 0x30]
push ecx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x1000695d
mov byte [ebp - 1], 0x41
jmp 0x100069d3
mov dl, byte [ebp - 1]
add dl, 1
mov byte [ebp - 1], dl
movsx eax, byte [ebp - 1]
cmp eax, 0x5a
jg 0x10006dad
movsx ecx, byte [ebp - 1]
push ecx
push 0x100142f4
push 0xa
lea edx, [ebp - 0x28]
push edx
call fcn.100084e6
add esp, 0x10
lea eax, [ebp - 0x28]
push eax
call dword [sym.imp.KERNEL32.dll_GetDriveTypeA]
cmp eax, 5
jne 0x10006da8
push 0x104
lea ecx, [ebp - 0x138]
push ecx
lea edx, [ebp - 0x28]
push edx
call dword [sym.imp.KERNEL32.dll_QueryDosDeviceA]
test eax, eax
jne 0x10006a27
jmp 0x100069ca
push str.CdRom
lea eax, [ebp - 0x138]
push eax
call fcn.10008460
add esp, 8
mov dword [ebp - 0x13c], eax
cmp dword [ebp - 0x13c], 0
jne 0x10006a4f
jmp 0x100069ca
push 0x50
push 0
lea ecx, [ebp - 0x190]
push ecx
call fcn.10007a40
add esp, 0xc
mov edx, dword [ebp - 0x13c]
push edx
push str.._s
push 0x14
lea eax, [ebp - 0x158]
push eax
call fcn.100084e6
add esp, 0x10
movsx ecx, byte [ebp - 1]
mov dword [ebp - 0x170], ecx
mov dword [ebp - 0x160], 8
mov dword [ebp - 0x15c], 0x10000
push 0
push 0xa0000000
push 3
push 0
push 3
push 0xc0000000
lea edx, [ebp - 0x158]
push edx
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov dword [ebp - 0x17c], eax
cmp dword [ebp - 0x17c], 0xffffffff
je 0x10006da8
push 0x2000
push 0
lea eax, [ebp - 0x21c0]
push eax
call fcn.10007a40
add esp, 0xc
lea ecx, [ebp - 0x21c0]
mov dword [ebp - 0x21c4], ecx
push 0
lea edx, [ebp - 0x140]
push edx
push 0x2000
lea eax, [ebp - 0x21c0]
push eax
push 0x2000
lea ecx, [ebp - 0x21c0]
push ecx
push 0x41018
mov edx, dword [ebp - 0x17c]
push edx
call dword [sym.imp.KERNEL32.dll_DeviceIoControl]
test eax, eax
jne 0x10006bb3
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x23cc], eax
mov eax, dword [ebp - 0x2428]
mov ecx, dword [eax + 0x110]
mov dword [ebp - 0x190], ecx
mov edx, dword [ebp - 0x2428]
mov eax, dword [edx + 0x114]
mov dword [ebp - 0x18c], eax
mov ecx, dword [ebp - 0x2428]
mov edx, dword [ecx + 0x114]
add edx, 1
mov eax, dword [ebp - 0x2428]
mov dword [eax + 0x114], edx
mov ecx, dword [ebp - 0x2428]
cmp dword [ecx + 0x114], 7
jbe 0x10006bb1
mov edx, dword [ebp - 0x2428]
mov eax, dword [edx + 0x110]
add eax, 1
mov ecx, dword [ebp - 0x2428]
mov dword [ecx + 0x110], eax
mov edx, dword [ebp - 0x2428]
mov dword [edx + 0x114], 0
jmp 0x10006be3
mov eax, dword [ebp - 0x21c4]
movzx ecx, byte [eax + 4]
mov dword [ebp - 0x190], ecx
mov edx, dword [ebp - 0x21c4]
movzx eax, byte [edx + 6]
mov dword [ebp - 0x18c], eax
mov ecx, dword [ebp - 0x21c4]
movzx edx, byte [ecx + 7]
mov dword [ebp - 0x184], edx
mov dword [ebp - 0x1ac], 0x18
push 0
lea eax, [ebp - 0x1b0]
push eax
push 0x18
lea ecx, [ebp - 0x1ac]
push ecx
push 0x18
lea edx, [ebp - 0x1ac]
push edx
push 0x41010
mov eax, dword [ebp - 0x17c]
push eax
call dword [sym.imp.KERNEL32.dll_DeviceIoControl]
test eax, eax
je 0x10006c45
mov ecx, dword [ebp - 0x19c]
mov dword [ebp - 0x160], ecx
mov edx, dword [ebp - 0x19c]
add edx, 1
mov dword [ebp - 0x19c], edx
mov eax, dword [ebp - 0x1a8]
mov dword [ebp - 0x15c], eax
push 0x10014204
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexA]
mov dword [ebp - 0x168], eax
cmp dword [ebp - 0x168], 0
jne 0x10006c75
mov ecx, dword [ebp - 0x17c]
push ecx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x100069ca
mov dword [ebp - 0x1b4], 0
movsx edx, byte [ebp - 1]
push edx
push str.DosDevices_C:
push 0x100
lea eax, [ebp - 0x23c8]
push eax
call fcn.10006de0
add esp, 0x10
lea ecx, [ebp - 0x194]
push ecx
push 1
push 0
push str.SYSTEMMountedDevices
push 0x80000002
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
lea edx, [ebp - 0x1b4]
push edx
push 0
push 0
push 0
lea eax, [ebp - 0x23c8]
push eax
mov ecx, dword [ebp - 0x194]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
push 1
mov edx, dword [ebp - 0x1b4]
add edx, 2
push edx
call fcn.10008654
add esp, 8
mov dword [ebp - 0x144], eax
lea eax, [ebp - 0x1b4]
push eax
mov ecx, dword [ebp - 0x144]
push ecx
push 0
push 0
lea edx, [ebp - 0x23c8]
push edx
mov eax, dword [ebp - 0x194]
push eax
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov ecx, 0x5c
mov edx, dword [ebp - 0x144]
mov word [edx + 2], cx
mov eax, dword [ebp - 0x17c]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x17c], 0
push 0x9c
call fcn.1000858a
add esp, 4
mov dword [ebp - 0x174], eax
cmp dword [ebp - 0x174], 0
je 0x10006da8
mov dword [ebp - 0x164], 0x258
lea ecx, [ebp - 0x190]
push ecx
mov ecx, dword [ebp - 0x2428]
add ecx, 0x118
call fcn.10003b70
mov edx, 1
mov ecx, dword [ebp - 0x18c]
shl edx, cl
mov eax, dword [ebp - 0x190]
mov ecx, dword [ebp - 0x2428]
or edx, dword [ecx + eax*4]
mov eax, dword [ebp - 0x190]
mov ecx, dword [ebp - 0x2428]
mov dword [ecx + eax*4], edx
jmp 0x100069ca
mov edx, dword [ebp - 0x2428]
mov eax, dword [ebp - 0x2428]
mov ecx, dword [eax + 0x110]
mov dword [edx + 0x100], ecx
mov eax, 1
mov ecx, dword [ebp - 8]
xor ecx, ebp
call fcn.10006f5c
mov esp, ebp
pop ebp
ret