Function at 0x1000b3d3
Capabilities:
Get disk information

Disassembly:
mov eax, 0x10061e8c
call fcn.10061518
sub esp, 0x11c
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
xor ebx, ebx
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x18], 0x540d7f82
mov dword [ebp - 0x14], 0xdb7758b3
mov dword [ebp - 0x30], 0xe8ea4716
push 9
mov dword [ebp - 0x30], 0xffffffff
pop edi
mov dword [ebp - 0x30], edi
mov dword [ebp - 0x30], 0xffffffff
mov dword [ebp - 0x30], 0xfffffffb
push 4
mov dword [ebp - 0x28], 1
mov dword [ebp - 0x64], edx
mov dword [ebp - 0x68], ecx
mov dword [ebp - 0x18], ebx
pop esi
jmp 0x1000b440
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x124], esi
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jl 0x1000b433
mov dword [ebp - 0x18], ebx
cmp dword [ebp - 0x18], 0xfffffffc
je 0x1000b82e
push 2
lea ecx, [ebp - 0x60]
call fcn.10001a5a
mov dword [ebp - 4], ebx
mov dword [ebp - 0x20], 0x3962
cmp dword [ebp - 0x20], 0x3c0f
jle 0x1000b4da
call fcn.10029dfe
mov esi, ebx
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x1c], esi
mov dword [ebp - 0x2c], 0x33bf
mov edi, ebx
mov dword [ebp - 0x14], ebx
mov ecx, edi
mov dword [ebp - 0x3c], esi
mov dword [ebp - 0x30], ebx
mov edi, ebx
sar esi, cl
mov ecx, edi
mov eax, esi
sar eax, cl
mov ecx, 0x1007d858
cdq
push edx
push eax
call fcn.1000bb8e
inc edi
cmp edi, 0x6e90
jl 0x1000b494
mov edi, dword [ebp - 0x14]
mov esi, dword [ebp - 0x1c]
inc edi
mov dword [ebp - 0x14], edi
cmp edi, 0xebd
jl 0x1000b488
dec esi
dec dword [ebp - 0x2c]
mov dword [ebp - 0x1c], esi
jne 0x1000b483
mov esi, dword [ebp - 0x24]
inc esi
mov dword [ebp - 0x24], esi
cmp esi, 0x5aec
jl 0x1000b479
mov dword [ebp - 0x14], ebx
jmp 0x1000b4ed
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x74], 0xfffffff9
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 2
jl 0x1000b4df
mov byte [ebp - 4], 1
cmp dword [ebp - 0x20], 0x38b8
jge 0x1000b52d
mov edx, str.fpinqnqb_ylyfum_hcmcgej_gegq_gkicfpo_kckfpv_xzjncefni
mov ecx, 0x1007d858
call fcn.1000dfd7
jmp 0x1000b52d
xor edi, edi
mov dword [ebp - 4], ebx
inc edi
mov dword [ebp - 0x14], ebx
jmp 0x1000b548
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x60]
mov dword [eax + ecx*4], 0x677b568b
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 2
jl 0x1000b538
mov dword [ebp - 0x14], ebx
jmp 0x1000b564
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x8c], 0x141a9c21
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 3
jl 0x1000b553
mov dword [ebp - 0x3c], 0x33f2
cmp dword [ebp - 0x3c], 0x3532
jle 0x1000b60e
mov dword [ebp - 0x1c], ebx
mov esi, ebx
mov dword [ebp - 0x2c], ebx
mov eax, esi
mov dword [ebp - 0x24], 0x73d
mov esi, dword [ebp - 0x1c]
mov dword [ebp - 0x20], eax
xor eax, esi
lea ecx, [ebp - 0xe4]
cdq
push edx
push eax
call fcn.1000260d
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1000b5af
mov eax, dword [eax]
push eax
call fcn.1004ae5e
pop ecx
push ebx
push edi
lea ecx, [ebp - 0xe4]
call fcn.1000c17a
mov eax, dword [ebp - 0x20]
dec eax
dec dword [ebp - 0x24]
mov dword [ebp - 0x20], eax
jne 0x1000b595
mov esi, dword [ebp - 0x2c]
inc esi
mov dword [ebp - 0x2c], esi
cmp esi, 0x5ced
jl 0x1000b586
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp eax, 0x623c
jl 0x1000b581
push ebx
push ebx
push ebx
push 0x23b4
push 0x1ab3
push ebx
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetTextExtentExPointA]
mov eax, dword [ebp - 0x18]
xor ecx, ecx
mov eax, dword [ebp - 0x60]
cmp dword [eax], ebx
mov dword [ebp - 0x70], ebx
setne cl
xor edx, edx
mov dword [eax], ecx
mov eax, dword [ebp - 0x8c]
cmp ecx, eax
mov eax, dword [ebp - 0x18]
setle dl
xor ecx, ecx
cmp eax, edx
setg cl
test ecx, ecx
jle 0x1000b7f7
mov dword [ebp - 0x14], ebx
jmp 0x1000b652
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x80], 0xffff
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 3
jl 0x1000b644
mov dword [ebp - 0x2c], 0x3a60
cmp dword [ebp - 0x2c], 0x3df1
jle 0x1000b6ef
mov eax, ebx
mov dword [ebp - 0x14], ebx
mov esi, ebx
mov dword [ebp - 0x24], ebx
cdq
mov ecx, ebx
idiv esi
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x20], edx
mov esi, ebx
mov eax, ecx
mov ecx, esi
shl eax, cl
lea ecx, [ebp - 0xb4]
and eax, edx
cdq
push edx
push eax
call fcn.1000260d
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1000b6a3
mov eax, dword [eax]
push eax
call fcn.1004ae5e
pop ecx
push ebx
push edi
lea ecx, [ebp - 0xb4]
call fcn.1000c17a
mov ecx, dword [ebp - 0x1c]
inc esi
mov edx, dword [ebp - 0x20]
cmp esi, 0x4339
jl 0x1000b683
inc ecx
mov dword [ebp - 0x1c], ecx
cmp ecx, 0x1b59
jl 0x1000b681
mov esi, dword [ebp - 0x24]
mov eax, dword [ebp - 0x14]
inc esi
mov dword [ebp - 0x24], esi
cmp esi, 0x4ec
jl 0x1000b676
inc eax
mov dword [ebp - 0x14], eax
cmp eax, 0x44c8
jl 0x1000b671
mov dword [ebp - 0x14], ebx
jmp 0x1000b701
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x9c], ebx
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 4
jl 0x1000b6f4
cmp dword [ebp - 0x2c], 0x3997
jge 0x1000b71b
push str.zcypdcyf_uqkb_etrefff_msdggrskj
call fcn.1004ae5e
pop ecx
mov dword [ebp - 4], ebx
xor ecx, ecx
mov eax, dword [ebp - 0x7c]
mov dword [ebp - 0x14], edi
mov eax, dword [ebp - 0x98]
mov eax, dword [ebp - 0x70]
mov eax, dword [ebp - 0x7c]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x88]
test eax, eax
mov eax, dword [ebp - 0x60]
sets cl
xor ebx, ebx
imul ecx, ecx, 0x67e7
cmp ecx, dword [eax]
mov eax, dword [ebp - 0x18]
setl bl
xor edx, edx
cmp ebx, eax
mov eax, dword [ebp - 0x7c]
setge dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x60]
setne cl
xor ebx, ebx
mov dword [eax + 4], ecx
mov dword [ebp - 0x24], 0x3bf1
cmp dword [ebp - 0x24], 0x3dd4
jle 0x1000b7d1
mov esi, ebx
mov ecx, ebx
mov dword [ebp - 0x20], ebx
mov eax, esi
cdq
idiv ecx
lea ecx, [ebp - 0xcc]
mov eax, edx
cdq
push edx
push eax
call fcn.1000260d
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1000b7a5
mov eax, dword [eax]
push eax
call fcn.1004ae5e
pop ecx
push ebx
push edi
lea ecx, [ebp - 0xcc]
call fcn.1000c17a
mov ecx, dword [ebp - 0x20]
inc ecx
mov dword [ebp - 0x20], ecx
cmp ecx, 0x3348
jl 0x1000b786
inc esi
cmp esi, 0x62c
jl 0x1000b781
mov byte [ebp - 0x31], bl
cmp byte [ebp - 0x31], 0
je 0x1000b7e1
push ebx
call dword [sym.imp.KERNEL32.dll_GetDriveTypeW]
cmp dword [ebp - 0x24], 0x39ab
jge 0x1000b806
push str.naufbvmy_qsq_xbtavf_cndzzl_jup_kdbclw_lblflxgkn_hjgumk_chud_uck_bnzmbbrqv
call fcn.1004ae5e
pop ecx
jmp 0x1000b806
mov dword [ebp - 0x20], edi
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x3c], 0x3167
jge 0x1000b81a
push str.zrdqtrwe_ygi_rajkr_baq_ivt_gzs
call fcn.1004ae5e
pop ecx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x60]
call fcn.10001abc
dec dword [ebp - 0x18]
jmp 0x1000b448
inc dword [ebp - 0x28]
call fcn.10007509
push ecx
push eax
lea ecx, [ebp - 0x54]
call fcn.1000c58b
push 9
pop edi
mov dword [ebp - 4], edi
mov dword [ebp - 0x14], 0x2c03342e
mov dword [ebp - 0x18], 0x8e3bf118
mov dword [ebp - 0x1c], 5
mov dword [ebp - 0x28], 1
mov dword [ebp - 0x28], 0xfffffff9
mov dword [ebp - 0x14], ebx
jmp 0x1000b933
push 1
lea ecx, [ebp - 0x48]
call fcn.10001a5a
mov dword [ebp - 0x30], edi
xor edx, edx
mov dword [ebp - 0x28], 5
inc edx
mov dword [ebp - 0x18], ebx
jmp 0x1000b89a
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x48]
or dword [eax + ecx*4], 0xffffffff
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edx
jl 0x1000b88d
mov esi, dword [ebp - 0x48]
cmp dword [esi], ebx
je 0x1000b8b0
cmp dword [ebp - 0x14], ebx
mov ecx, edx
mov esi, dword [ebp - 0x48]
jne 0x1000b8b2
mov ecx, ebx
mov eax, dword [esi]
mov esi, dword [esi]
imul eax, ecx
cmp eax, 0x9bdd7770
mov eax, dword [ebp - 0x14]
sbb ecx, ecx
neg ecx
add eax, ecx
imul eax, esi
cmp eax, 0xfffffff9
jb 0x1000b8d5
mov eax, ebx
test esi, esi
je 0x1000b8d7
mov eax, edx
add eax, esi
sub eax, dword [ebp - 0x14]
neg eax
sbb eax, eax
inc eax
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x48]
cmp ecx, dword [eax]
jle 0x1000b8f1
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x48]
cmp dword [eax], ebx
je 0x1000b902
mov ecx, edx
cmp dword [ebp - 0x14], ebx
jne 0x1000b904
mov ecx, ebx
mov eax, dword [ebp - 0x14]
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x48]
setl dl
xor ecx, ecx
cmp dword [eax], edx
setl cl
mov dword [ebp - 0x1c], ecx
lea ecx, [ebp - 0x48]
mov eax, dword [ebp - 0x1c]
imul eax, dword [ebp - 0x30], 0x83d6a5ae
mov dword [ebp - 0x28], eax
call fcn.10001abc
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 7
jl 0x1000b871
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x1c], ebx
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
sub eax, dword [ebp - 0x18]
neg eax
mov esi, dword [ebp - 0x64]
sbb eax, eax
add eax, 0xa2015bb3
neg eax
sbb eax, eax
xor ecx, ecx
inc eax
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x14]
cmp eax, 0xad8faefd
mov eax, dword [ebp - 0x18]
setle cl
xor edx, edx
test ecx, ecx
setg dl
xor ebx, ebx
cmp eax, edx
mov eax, dword [ebp - 0x14]
setl bl
xor ecx, ecx
cmp eax, ebx
setge cl
xor eax, eax
cmp ecx, 0xb1bb30b1
mov ecx, dword [ebp - 0x54]
mov edx, ecx
setne al
add esi, 0xffffd2dc
mov dword [ebp - 0x14], eax
mov eax, dword [ecx + 4]
cmp byte [eax + 0xd], 0
jne 0x1000b9d8
cmp dword [eax + 0x10], esi
jge 0x1000b9bd
mov eax, dword [eax + 8]
jmp 0x1000b9c1
mov edx, eax
mov eax, dword [eax]
cmp byte [eax + 0xd], 0
je 0x1000b9b3
cmp edx, ecx
je 0x1000b9d8
cmp esi, dword [edx + 0x10]
jl 0x1000b9d8
mov dword [ebp - 0x6c], edx
lea esi, [ebp - 0x6c]
jmp 0x1000b9de
mov dword [ebp - 0x4c], ecx
lea esi, [ebp - 0x4c]
mov eax, dword [0x100e0a14]
xor edi, edi
mov esi, dword [esi]
inc edi
test al, 1
jne 0x1000ba1a
and dword [0x100e09fc], 0
or eax, edi
mov dword [0x100e0a14], eax
xor eax, eax
push 0x10063294
mov dword [0x100e0a00], 7
mov word [0x100e09ec], ax
call fcn.1004ae34
pop ecx
mov ecx, dword [ebp - 0x54]
cmp esi, ecx
je 0x1000ba3b
push dword [esi + 0x18]
mov edx, dword [esi + 0x14]
lea ecx, [ebp - 0x114]
call fcn.100027a9
pop ecx
mov byte [ebp - 4], 0xa
mov ebx, dword [ebp - 0x38]
or ebx, edi
jmp 0x1000ba58
push 0x100e09ec
lea ecx, [ebp - 0xfc]
call fcn.1000bca3
mov dword [ebp - 4], 0xb
mov ebx, dword [ebp - 0x38]
or ebx, 2
mov esi, dword [ebp - 0x68]
mov ecx, esi
push eax
mov dword [ebp - 0x38], ebx
call fcn.1000bca3
or ebx, 4
test bl, 2
je 0x1000ba7f
push 0
push edi
lea ecx, [ebp - 0xfc]
and ebx, 0xfffffffd
call fcn.1000c4ec
test bl, 1
je 0x1000ba92
push 0
push edi
lea ecx, [ebp - 0x114]
call fcn.1000c4ec
lea ecx, [ebp - 0x54]
call fcn.1000bde7
mov ecx, dword [ebp - 0xc]
mov eax, esi
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret