Function at 0x10016710
Capabilities:
Get disk information
Get hostname
Get session user name

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1002225d
mov eax, dword fs:[0]
push eax
sub esp, 0x6a4
mov eax, dword [0x1002d018]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, 0xff
mov dword [ebp - 0x6ac], eax
mov dword [ebp - 0x6b0], eax
lea eax, [ebp - 0x6ac]
push eax
lea ecx, [ebp - 0x210]
push ecx
call dword [sym.imp.ADVAPI32.dll_GetUserNameA]
test eax, eax
je 0x100169f3
xor ebx, ebx
push ebx
push ebx
push ebx
push ebx
lea edx, [ebp - 0x6a8]
push edx
push ebx
push ebx
lea eax, [ebp - 0x6a4]
push eax
mov dword [ebp - 0x6a4], 0x5c3a43
call dword [sym.imp.KERNEL32.dll_GetVolumeInformationA]
test eax, eax
setne al
test al, al
je 0x100169f3
lea ecx, [ebp - 0x6b0]
push ecx
lea edx, [ebp - 0x110]
push edx
call dword [sym.imp.KERNEL32.dll_GetComputerNameA]
test eax, eax
je 0x100169f3
lea edi, [ebp - 0x210]
call fcn.10016690
lea edi, [ebp - 0x110]
mov esi, eax
call fcn.10016690
add eax, esi
add eax, dword [ebp - 0x6a8]
lea ecx, [ebp - 0x5f8]
push eax
lea eax, [ebp - 0x6a4]
push eax
push ecx
mov word [ebp - 0x6a4], 0x6425
mov byte [ebp - 0x6a2], bl
call dword [sym.imp.MSVCR100.dll_sprintf]
mov dword [ebp - 0x600], 0x3d327826
mov byte [ebp - 0x5fc], bl
sub esp, 0x10
mov dword [ebp - 4], ebx
mov eax, esp
lea ecx, [ebp - 0x5f8]
mov dword [eax + 0x14], 0xf
mov dword [eax + 0x10], ebx
mov dword [ebp - 0x6a4], esp
mov byte [eax], bl
lea esi, [ecx + 1]
mov dl, byte [ecx]
inc ecx
test dl, dl
jne 0x10016831
sub ecx, esi
lea edx, [ebp - 0x5f8]
push edx
mov esi, ecx
call fcn.10019420
lea edi, [ebp - 0x670]
call fcn.1001dbf0
add esp, 0x1c
mov ebx, eax
mov edi, 0x349bc554
lea esi, [ebp - 0x6a0]
call fcn.1001cdf0
mov edx, eax
push ebx
lea eax, [ebp - 0x654]
mov byte [ebp - 4], 2
call fcn.1001cda0
push eax
lea edx, [ebp - 0x600]
lea eax, [ebp - 0x638]
mov byte [ebp - 4], 3
call fcn.1001ce30
push eax
mov edx, 0x10028778
lea eax, [ebp - 0x61c]
mov byte [ebp - 4], 4
call fcn.1001ce30
add esp, 0xc
mov edi, eax
mov esi, 0x1002dc14
mov byte [ebp - 4], 5
call fcn.10018d50
mov ebx, 0x10
cmp dword [ebp - 0x608], ebx
jb 0x100168d5
mov eax, dword [ebp - 0x61c]
push eax
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
xor esi, esi
mov edi, 0xf
mov dword [ebp - 0x608], edi
mov dword [ebp - 0x60c], esi
mov byte [ebp - 0x61c], 0
cmp dword [ebp - 0x624], ebx
jb 0x10016907
mov ecx, dword [ebp - 0x638]
push ecx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov dword [ebp - 0x624], edi
mov dword [ebp - 0x628], esi
mov byte [ebp - 0x638], 0
cmp dword [ebp - 0x640], ebx
jb 0x10016932
mov edx, dword [ebp - 0x654]
push edx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
push 0x30
lea eax, [ebp - 0x6a0]
push esi
push eax
mov dword [ebp - 0x640], edi
mov dword [ebp - 0x644], esi
mov byte [ebp - 0x654], 0
call sub.MSVCR100.dll_memset
add esp, 0xc
cmp dword [ebp - 0x65c], ebx
jb 0x1001696f
mov ecx, dword [ebp - 0x670]
push ecx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov edi, 0x44684e7f
lea esi, [ebp - 0x610]
call fcn.1001ce80
mov esi, eax
mov dword [ebp - 4], 6
call fcn.10016540
push 0
push 0
push 0
push 0
add eax, 5
push esi
mov dword [0x1003239c], eax
mov dword [0x10032708], 0x10016520
call fcn.10016520
mov dword [ebp - 4], 0xffffffff
mov dword [0x10032260], eax
xor eax, eax
mov dword [ebp - 0x610], eax
mov dword [ebp - 0x60c], eax
mov dword [ebp - 0x608], eax
mov dword [ebp - 0x604], eax
mov eax, dword [0x1002dc14]
cmp dword [0x1002dc28], ebx
jae 0x100169e5
mov eax, 0x1002dc14
push eax
call fcn.10016650
add esp, 4
mov dword [0x10032c38], eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.1001fd05
mov esp, ebp
pop ebp
ret