Function at 0x1001ebbb
Capabilities:
Get disk information

Disassembly:
push 0x100
mov eax, 0x100655cf
call fcn.1004adf3
mov edi, edx
mov esi, ecx
xor ebx, ebx
xor eax, eax
mov dword [ebp - 4], ebx
mov dword [ebp - 0x30], 7
mov dword [ebp - 0x34], ebx
mov word [ebp - 0x44], ax
lea eax, [ebp + 0xc]
mov byte [ebp - 4], 1
push eax
lea ecx, [ebp - 0x74]
call fcn.10002e17
push str.BQ87D40K3kZHcY2_b_X_Kc__rbL22P_iP2bc_3.._T_hbd
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 2
call fcn.10002e3f
lea edx, [ebp - 0x2c]
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x5c]
call fcn.1000c43d
mov edx, eax
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x74]
call fcn.1002b5e5
push ebx
push 1
lea ecx, [ebp - 0x5c]
call fcn.10003109
push ebx
push 1
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 2
call fcn.10003109
mov edx, esi
lea ecx, [ebp - 0x74]
call fcn.1002b5e5
lea eax, [ebp - 0x10c]
mov dword [ebp - 0x10c], 0x20019
push eax
lea eax, [ebp - 0x105]
mov byte [ebp - 0x105], bl
push eax
lea eax, [ebp - 0x74]
push eax
push dword [ebp + 8]
lea ecx, [ebp - 0x104]
call fcn.1002b11c
lea eax, [ebp - 0x10c]
mov byte [ebp - 4], 5
push eax
lea eax, [ebp - 0x105]
mov dword [ebp - 0x10c], 0x20119
push eax
lea eax, [ebp - 0x74]
mov byte [ebp - 0x105], bl
push eax
push dword [ebp + 8]
lea ecx, [ebp - 0xd8]
call fcn.1002b11c
mov byte [ebp - 4], 6
lea eax, [ebp - 0xac]
push dword [ebp - 0x10c]
lea ecx, [ebp - 0x20]
mov dword [ebp - 0x20], ebx
push eax
lea eax, [ebp - 0x104]
mov dword [ebp - 0x1c], ebx
push eax
push ebx
mov dword [ebp - 0x18], ebx
call fcn.10021410
mov byte [ebp - 4], 8
push fcn.1002b1d6
push 2
push 0x2c
lea eax, [ebp - 0x104]
push eax
call fcn.1004745f
mov esi, dword [ebp - 0x20]
jmp 0x1001eda7
cmp dword [esi + 8], ebx
je 0x1001eda4
push 0x10076ce0
lea ecx, [ebp - 0x5c]
call fcn.10002e3f
lea eax, [ebp - 0x5c]
mov byte [ebp - 4], 9
push eax
lea eax, [ebp - 0xac]
mov ecx, esi
push eax
call fcn.1002b25f
lea ecx, [ebp - 0x8c]
mov byte [ebp - 4], 0xa
push ecx
mov ecx, eax
call fcn.10021e8e
lea eax, [ebp - 0x8c]
push eax
lea ecx, [ebp - 0x44]
call fcn.10002e95
push ebx
push 1
lea ecx, [ebp - 0x8c]
call fcn.10003109
lea ecx, [ebp - 0xac]
call fcn.1002b748
push ebx
push 1
lea ecx, [ebp - 0x5c]
mov byte [ebp - 4], 8
call fcn.10003109
cmp dword [ebp - 0x34], 0
je 0x1001eda4
lea eax, [ebp - 0x44]
push eax
lea ecx, [ebp - 0x5c]
call fcn.10008070
mov ecx, eax
mov byte [ebp - 4], 0xb
call fcn.10008b8e
push ebx
push 1
lea ecx, [ebp - 0x5c]
mov byte [ebp - 0x105], al
mov byte [ebp - 4], 8
call fcn.10003109
cmp byte [ebp - 0x105], 0
jne 0x1001edeb
add esi, 0x2c
cmp esi, dword [ebp - 0x1c]
jne 0x1001ecf4
mov byte [ebp - 0x105], bl
lea ecx, [ebp - 0x20]
call fcn.10021005
push ebx
push 1
lea ecx, [ebp - 0x74]
call fcn.10003109
push ebx
push 1
lea ecx, [ebp - 0x44]
call fcn.10003109
push ebx
push 1
lea ecx, [ebp + 0xc]
call fcn.10003109
mov al, byte [ebp - 0x105]
call fcn.1004ada2
ret
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
test eax, eax
je 0x1001ee2f
mov ecx, 0x256
call fcn.1000c238
mov ecx, 0x194
mov esi, eax
call fcn.1000c2c8
cmp esi, eax
jge 0x1001ee2f
mov ecx, 0x1da
call fcn.1000c28f
mov ecx, 0xd8
mov esi, eax
call fcn.1000c342
cmp eax, esi
jle 0x1001ee2f
call dword [sym.imp.KERNEL32.dll_GetLogicalDrives]
lea eax, [ebp - 0x44]
cmp edi, eax
je 0x1001ee41
push 0xffffffffffffffff
push ebx
push eax
mov ecx, edi
call fcn.10003076
mov byte [ebp - 0x105], 1
jmp 0x1001edb6