Function at 0x4011c0
Capabilities:
Get disk information
Move file

Disassembly:
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [ebp - 0x77], dl
push ebp
mov ebp, esp
push esi
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
push ebp
mov ebp, esp
push esi
and esp, 0xfffffff8
sub esp, 0x30
mov al, byte [esp + 0x23]
mov word [esp + 0x24], 0x1b45
mov dword [esp + 0x14], 0x7206
mov ecx, dword [esp + 0x14]
mov edx, ecx
add edx, 0xffffa0ae
mov dword [esp + 0x10], edx
xor al, 0xff
mov byte [esp + 0x23], al
mov dword [esp], ecx
or al, 0x24
jmp 0x4012fc
mov eax, dword [sym.imp.KERNEL32.dll_QueryDosDeviceA]
call eax
add dword [edx + 0x617c5f4], eax
je 0x401193
inc esp
and al, 4
jmp 0x40135c
mov eax, 0x115b7fa
sub eax, dword [esp + 0x14]
mov ecx, dword [sym.imp.KERNEL32.dll_SetVolumeLabelA]
call ecx
add dword [edx + 0x617c5f4], eax
je 0x4011b4
inc esp
and al, 4
mov dword [esp + 8], eax
jmp 0x401313
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x14]
add ecx, 0xffff8dfa
cmp eax, ecx
jne 0x401274
invalid
jmp 0x4012cf
mov eax, dword [esp + 0x14]
add eax, 0xffffae90
mov ecx, dword [esp + 0x10]
mov edx, dword [sym.imp.KERNEL32.dll_IsBadWritePtr]
call edx
add dword [edx + 0x617c5f4], eax
je 0x4011f4
inc esp
and al, 4
cmp ecx, eax
jb 0x401237
jmp 0x40124e
mov ax, word [esp + 0x26]
sub ax, word [esp + 0x26]
mov word [esp + 0x26], ax
inc esp
and al, 0x26
jmp 0x4012fc
jmp 0x4012e8
mov eax, dword [esp]
add eax, 0xffff9bd6
mov dword [esp + 0x28], eax
movzx eax, word [esp + 0x24]
mov bh, 0x44
and al, 0x24
mov ecx, eax
xor ecx, 0x4ed4
mov dx, cx
add eax, 0xffffef41
mov si, ax
mov eax, dword [sym.imp.KERNEL32.dll_FindAtomA]
call eax
add dword [edx + 0x617c5f4], eax
je 0x401243
inc esp
and al, 4
mov word [esp + 0xe], dx
push esp
and al, 0xe
cmp si, word [esp + 0xe]
je 0x4011fb
jmp 0x40133b
jmp 0x401287
mov eax, dword [sym.imp.KERNEL32.dll_MoveFileWithProgressA]
call eax
add dword [edx + 0x617c5f4], eax
je 0x401269
inc esp
and al, 4
jmp 0x401212
mov eax, 0x401ac4
call eax
add dword [edx + 0x617c5f4], eax
push es
je 0x401280
inc esp
and al, 4
jmp 0x401370
mov eax, dword [sym.imp.KERNEL32.dll_GetCompressedFileSizeA]
call eax
add dword [edx + 0x617c5f4], eax
push es
je 0x401294
inc esp
and al, 4
jmp 0x40124e
mov eax, dword [esp + 8]
lea esp, [ebp - 4]
pop esi
pop ebp
ret
mov dword [esp + 8], 0xffffffff
jmp 0x401313
mov eax, dword [sym.imp.KERNEL32.dll_GetVersionExA]
call eax
add dword [edx + 0x617c5f4], eax
je 0x4012bf
inc esp
and al, 4
jmp 0x4012d1
mov eax, 0x7207
mov ecx, dword [esp + 4]
sub eax, dword [esp + 0x14]
and ecx, eax
mov eax, dword [esp + 0x14]
add eax, 0xffff8dfa
cmp ecx, eax
jne 0x40131d
jmp 0x401285
mov eax, dword [sym.imp.KERNEL32.dll_GetTapePosition]
call eax
add dword [edx + 0x617c5f4], eax
je 0x4012f4
inc esp
and al, 4
jmp 0x401327
mov eax, dword [sym.imp.KERNEL32.dll_ConvertFiberToThread]
call eax
add dword [edx + 0x617c5f4], eax
je 0x401308
inc esp
and al, 4
jmp 0x4011fb