Function at 0x1000530b
Capabilities:
Get disk information

Disassembly:
mov eax, 0x10063d50
call fcn.10063758
sub esp, 0x38
mov dword [ebp - 0x28], ecx
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
test dl, dl
je 0x1000551d
mov dword [ebp - 0x24], 0x7fee
mov esi, 0x10080d98
cmp dword [ebp - 0x24], 0x828f
jle 0x10005391
xor ebx, ebx
xor edi, edi
mov dword [ebp - 0x20], edi
mov dword [ebp - 0x18], edi
mov dword [ebp - 0x1c], 0x5378
xor ecx, ecx
mov dword [ebp - 0x18], ecx
mov eax, edi
sar eax, cl
mov ecx, esi
and eax, ebx
cdq
push edx
push eax
call fcn.10001b47
mov ecx, dword [ebp - 0x18]
inc ecx
mov dword [ebp - 0x18], ecx
cmp ecx, 0x83d
jl 0x10005354
dec edi
dec dword [ebp - 0x1c]
jne 0x1000534f
mov edi, dword [ebp - 0x20]
inc edi
mov dword [ebp - 0x20], edi
cmp edi, 0x12ce
jl 0x10005345
inc ebx
cmp ebx, 0x2402
jl 0x10005340
and dword [ebp - 4], 0
cmp dword [ebp - 0x24], 0x7cba
jge 0x100053cb
mov edx, str.xlqgypo_jllaytgzd_dxcpuicxf_fwjdpjekf_cztb_zsf_ntbjdykze_gmt_noeafjqz_jubg
mov ecx, esi
call fcn.10003a21
jmp 0x100053cb
or dword [ebp - 4], 0xffffffff
cmp byte [ebp + 0xc], 0
je 0x1000541d
mov esi, dword [ebp + 0x24]
mov dword [esi], 0
cmp dword [esi], 2
jg 0x10005562
mov edi, dword [ebp - 0x28]
mov edx, dword [ebp + 0x14]
lea eax, [ebp - 0x2c]
push 0
push ecx
push 0x7b9
push eax
push esi
push edi
push ecx
push dword [ebp + 0x20]
mov ecx, dword [ebp + 0x10]
mov dword [ebp - 0x2c], 0x5452
call fcn.100047c9
add esp, 0x20
inc dword [esi]
cmp dword [esi], 2
jle 0x100053ea
jmp 0x10005562
mov dword [ebp - 0x24], 0x4986
cmp dword [ebp - 0x24], 0x4a7c
jle 0x10005453
xor edi, edi
xor ebx, ebx
mov ecx, ebx
mov eax, edi
sar eax, cl
mov ecx, esi
cdq
push edx
push eax
call fcn.10001b47
inc ebx
cmp ebx, 0x2e06
jl 0x10005431
inc edi
cmp edi, 0x8f3
jl 0x1000542f
mov dword [ebp - 4], 2
cmp dword [ebp - 0x24], 0x4642
jge 0x1000546f
mov edx, str.ydnhnhs_takrjkswg_opvkn_gvlj_azikkmii_vbnon_ldaweam_jqcoq_irg_uwazdree_qqktt_ponn
mov ecx, esi
call fcn.10003a21
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x20], 0x7f
cmp dword [ebp - 0x20], 0x315
jle 0x100054e7
xor esi, esi
xor edi, edi
xor ebx, ebx
xor eax, eax
mov dword [ebp - 0x24], eax
lea ecx, [eax + ebx]
lea eax, [edi + esi]
sar eax, cl
lea ecx, [ebp - 0x44]
cdq
push edx
push eax
call fcn.10001a65
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x100054ab
mov eax, dword [eax]
push eax
call fcn.1004b9e4
pop ecx
push 0
push 1
lea ecx, [ebp - 0x44]
call fcn.10002062
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp eax, 0x3328
jl 0x1000548e
inc ebx
cmp ebx, 0x3562
jl 0x10005489
inc edi
cmp edi, 0x7c86
jl 0x10005487
inc esi
cmp esi, 0x393f
jl 0x10005485
mov eax, dword [ebp + 0x18]
mov dword [eax], 0xc1ed5297
cmp dword [ebp - 0x20], 0xffffffb6
jge 0x10005562
push str.tcqq_tdrie_ana
call fcn.1004b9e4
pop ecx
jmp 0x10005562
cmp byte [ebp + 0x1c], 0
je 0x10005554
push 0x714e
push 0x11e
push 0
lea eax, [ebp - 0x11]
mov byte [ebp - 0x11], 0
push eax
push 0x1bf8
push 0
push 0x1a8e
mov edx, 0x66b8
mov cl, 1
call fcn.100048cf
add esp, 0x1c
jmp 0x10005562
mov eax, dword [ebp + 8]
cmp byte [eax], 0
je 0x10005562
call dword [sym.imp.KERNEL32.dll_GetLogicalDrives]
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret