Function at 0x1017707c
Capabilities:
Check if file exists
Get disk information
Get file attributes
Print debug messages

Disassembly:
push 0x64
mov eax, 0x101957f8
call fcn.1015d174
mov edi, dword [ebp + 8]
mov eax, dword [ebp + 0x10]
xor ebx, ebx
cmp byte [ebp + 0x14], bl
mov esi, ecx
mov dword [ebp - 0x54], edi
mov dword [ebp - 0x50], eax
jne 0x101770cb
mov eax, dword [ebp + 0xc]
cmp eax, dword [0x101c78c8]
je 0x101770b0
cmp eax, dword [0x101c78cc]
jne 0x101770cb
push 1
push str.SeManageVolumePrivilege
call fcn.10176ba1
test eax, eax
je 0x101770cb
push str.SetPrivilege_false_n
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
cmp edi, ebx
mov al, byte [ebp + 0x14]
mov byte [esi + 0x2c], al
jne 0x101770e5
mov eax, dword [ebp - 0x50]
mov dword [eax], 0x57
xor al, al
jmp 0x101772a6
push dword [ebp - 0x50]
mov ecx, esi
mov byte [ebp - 0x49], 1
call fcn.10176d73
push ebx
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x14], 7
call fcn.1002bde0
push edi
lea ecx, [ebp - 0x48]
mov dword [ebp - 4], ebx
call fcn.100019a0
push 0xffffffffffffffff
push ebx
lea edi, [esi + 0x30]
push eax
mov ecx, edi
mov byte [ebp - 4], 1
call fcn.10001a10
push ebx
push 1
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], bl
call fcn.10001b20
lea eax, [ebp - 0x2c]
push eax
push edi
call fcn.100f6be6
cmp dword [ebp - 0x14], 8
mov eax, dword [ebp - 0x28]
pop ecx
pop ecx
jae 0x10177147
lea eax, [ebp - 0x28]
push eax
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x1017715c
test ax, 0x200
jne 0x1017715c
mov byte [ebp + 0x14], bl
cmp dword [ebp - 0x18], ebx
jne 0x10177188
mov eax, dword [ebp + 0xc]
xor ecx, ecx
cmp eax, dword [0x101c78c4]
push ebx
setne cl
push 0x10000080
add ecx, 3
push ecx
push ebx
push 7
push eax
push dword [ebp - 0x54]
call dword [sym.imp.KERNEL32.dll_CreateFileA]
jmp 0x101771b7
cmp dword [ebp - 0x14], 8
mov edi, dword [ebp - 0x28]
jae 0x10177194
lea edi, [ebp - 0x28]
mov eax, dword [ebp + 0xc]
xor ecx, ecx
cmp eax, dword [0x101c78c4]
push ebx
setne cl
push 0x10000080
add ecx, 3
push ecx
push ebx
push 7
push eax
push edi
call dword [sym.imp.KERNEL32.dll_CreateFileW]
cmp eax, 0xffffffff
mov dword [esi + 0x24], eax
jne 0x101771d2
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, dword [ebp - 0x50]
mov dword [ecx], eax
mov byte [ebp - 0x49], bl
jmp 0x10177298
cmp byte [ebp + 0x14], bl
je 0x10177292
push ebx
lea ecx, [ebp - 0x48]
mov dword [ebp - 0x30], 0xf
call fcn.10001ce0
push ebx
mov edi, 0x1019ad40
push edi
lea ecx, [esi + 0x30]
mov byte [ebp - 4], 2
call fcn.10037120
cmp eax, 0xffffffff
mov dword [ebp - 0x54], eax
jne 0x10177216
push eax
push ebx
lea eax, [esi + 0x30]
push eax
lea ecx, [ebp - 0x48]
call fcn.10001a10
jmp 0x10177249
push edi
call fcn.1015d080
add eax, dword [ebp - 0x54]
pop ecx
push eax
push ebx
lea eax, [ebp - 0x70]
push eax
lea ecx, [esi + 0x30]
call fcn.1002cdd0
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 3
call fcn.10001a10
push ebx
push 1
lea ecx, [ebp - 0x70]
call fcn.10001b20
cmp dword [ebp - 0x30], 0x10
mov eax, dword [ebp - 0x44]
jae 0x10177255
lea eax, [ebp - 0x44]
push ebx
push ebx
lea ecx, [ebp - 0x50]
push ecx
push ebx
push ebx
push ebx
push ebx
push eax
call dword [sym.imp.KERNEL32.dll_GetVolumeInformationA]
test eax, eax
je 0x10177287
test byte [ebp - 0x50], 0x40
je 0x10177287
push ebx
lea eax, [ebp - 0x54]
push eax
push ebx
push ebx
push ebx
push ebx
push 0x900c4
push dword [esi + 0x24]
call dword [sym.imp.KERNEL32.dll_DeviceIoControl]
push ebx
push 1
lea ecx, [ebp - 0x48]
call fcn.10001b20
mov eax, dword [ebp + 0xc]
mov dword [esi + 0x28], eax
push ebx
push 1
lea ecx, [ebp - 0x2c]
call fcn.1002be10
mov al, byte [ebp - 0x49]
call fcn.1015d1f7
ret 0x10