Function at 0x522b80
Capabilities:
Delete file
Get disk information

Disassembly:
push ebp
mov ebp, esp
mov ecx, 8
push 0
push 0
dec ecx
jne 0x522b88
push ecx
push ebx
push esi
push edi
mov dword [ebp - 5], edx
mov byte [ebp - 1], al
xor eax, eax
push ebp
push 0x522e66
push dword fs:[eax]
mov dword fs:[eax], esp
push 0
mov eax, dword [ebp - 5]
mov ecx, 1
mov edx, dword [0x522314]
call fcn.00409284
add esp, 4
call sub.kernel32.dll_GetLogicalDrives
mov dword [ebp - 0xc], eax
mov dword [ebp - 0x10], 2
mov ecx, dword [ebp - 0x10]
mov eax, 1
shl eax, cl
and eax, dword [ebp - 0xc]
je 0x522e3e
cmp byte [ebp - 1], 0
jne 0x522d07
movzx ebx, byte [ebp - 0x10]
mov eax, ebx
lea edx, [ebp - 0x14]
call fcn.00522894
mov eax, dword [ebp - 0x14]
mov edx, 0x522e80
call fcn.00407eb8
je 0x522c25
mov eax, ebx
lea edx, [ebp - 0x18]
call fcn.00522894
mov eax, dword [ebp - 0x18]
mov edx, 0x522e98
call fcn.00407eb8
jne 0x522e3e
xor eax, eax
push ebp
push 0x522cf8
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x1c]
movzx edx, word [ebp - 0x10]
add dx, 0x41
call fcn.0040794c
lea eax, [ebp - 0x1c]
mov edx, 0x522eb4
call fcn.00407bf4
mov eax, dword [ebp - 0x1c]
call fcn.00522a98
test al, al
je 0x522ceb
mov eax, dword [ebp - 5]
mov eax, dword [eax]
call fcn.004090bc
inc eax
push eax
mov eax, dword [ebp - 5]
mov ecx, 1
mov edx, dword [0x522314]
call fcn.00409284
add esp, 4
mov eax, dword [ebp - 5]
mov eax, dword [eax]
call fcn.004090c4
mov edx, dword [ebp - 5]
mov edx, dword [edx]
lea eax, [edx + eax*4]
push eax
lea eax, [ebp - 0x20]
movzx edx, word [ebp - 0x10]
add dx, 0x41
call fcn.0040794c
mov edx, dword [ebp - 0x20]
mov ecx, 0x522eb4
pop eax
call fcn.00407cb4
lea eax, [ebp - 0x28]
movzx edx, word [ebp - 0x10]
add dx, 0x41
call fcn.0040794c
push dword [ebp - 0x28]
push 0x522eb4
push 0x522ec8
lea eax, [ebp - 0x24]
mov edx, 3
call fcn.00407d98
mov eax, dword [ebp - 0x24]
call fcn.0040785c
push eax
call sub.kernel32.dll_DeleteFileW
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x522e3e
cmp byte [ebp - 1], 1
jne 0x522e3e
movzx ebx, byte [ebp - 0x10]
mov eax, ebx
lea edx, [ebp - 0x2c]
call fcn.00522894
mov eax, dword [ebp - 0x2c]
mov edx, 0x522e80
call fcn.00407eb8
je 0x522d64
mov eax, ebx
lea edx, [ebp - 0x30]
call fcn.00522894
mov eax, dword [ebp - 0x30]
mov edx, 0x522ee0
call fcn.00407eb8
je 0x522d64
mov eax, ebx
lea edx, [ebp - 0x34]
call fcn.00522894
mov eax, dword [ebp - 0x34]
mov edx, 0x522e98
call fcn.00407eb8
jne 0x522e3e
xor eax, eax
push ebp
push 0x522e34
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x38]
movzx edx, word [ebp - 0x10]
add dx, 0x41
call fcn.0040794c
lea eax, [ebp - 0x38]
mov edx, 0x522eb4
call fcn.00407bf4
mov eax, dword [ebp - 0x38]
call fcn.00522a98
test al, al
je 0x522e2a
mov eax, dword [ebp - 5]
mov eax, dword [eax]
call fcn.004090bc
inc eax
push eax
mov eax, dword [ebp - 5]
mov ecx, 1
mov edx, dword [0x522314]
call fcn.00409284
add esp, 4
mov eax, dword [ebp - 5]
mov eax, dword [eax]
call fcn.004090c4
mov edx, dword [ebp - 5]
mov edx, dword [edx]
lea eax, [edx + eax*4]
push eax
lea eax, [ebp - 0x3c]
movzx edx, word [ebp - 0x10]
add dx, 0x41
call fcn.0040794c
mov edx, dword [ebp - 0x3c]
mov ecx, 0x522eb4
pop eax
call fcn.00407cb4
lea eax, [ebp - 0x44]
movzx edx, word [ebp - 0x10]
add dx, 0x41
call fcn.0040794c
push dword [ebp - 0x44]
push 0x522eb4
push 0x522ec8
lea eax, [ebp - 0x40]
mov edx, 3
call fcn.00407d98
mov eax, dword [ebp - 0x40]
call fcn.0040785c
push eax
call sub.kernel32.dll_DeleteFileW
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x522e3e
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 0x1a
jne 0x522bce
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x522e6d
lea eax, [ebp - 0x44]
mov edx, 0xd
call fcn.004077c8
ret