Function at 0x41b5a0
Capabilities:
Get disk information
Get file system object information

Disassembly:
push 0xffffffffffffffff
push 0x47e0a1
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x1e8
push ebx
mov ebx, ecx
push ebp
lea ecx, [esp + 0x64]
call fcn.0043a8f0
xor ebp, ebp
lea ecx, [esp + 0xc]
mov dword [esp + 0x1f8], ebp
call fcn.0043a8f0
lea ecx, [esp + 0x38]
mov byte [esp + 0x1f8], 1
call fcn.0043a8f0
mov cl, byte [0x4a32e0]
mov al, 2
test al, cl
mov byte [esp + 0x1f8], al
jne 0x41b65b
push ebp
lea ecx, [ebx + 0x1b8]
call fcn.0043ba70
cmp al, 0x41
jne 0x41b65b
lea ecx, [esp + 0x38]
mov byte [esp + 0x1f8], 1
call fcn.0043a990
lea ecx, [esp + 0xc]
mov byte [esp + 0x1f8], 0
call fcn.0043a990
lea ecx, [esp + 0x64]
mov dword [esp + 0x1f8], 0xffffffff
call fcn.0043a990
pop ebp
pop ebx
mov ecx, dword [esp + 0x1e8]
mov dword fs:[0], ecx
add esp, 0x1f4
ret
push edi
push 0x8001
mov dword [ebx + 0x1e4], ebp
call dword [sym.imp.KERNEL32.dll_SetErrorMode]
lea edi, [ebx + 0x1b8]
mov dword [esp + 0xc], eax
mov ecx, edi
call fcn.0043baf0
test eax, eax
jle 0x41b80c
push esi
push ebp
mov ecx, edi
call fcn.0043ba70
movsx eax, al
push eax
lea ecx, [esp + 0x70]
push str._c:_
push ecx
call fcn.0043bde0
add esp, 0xc
lea ecx, [esp + 0x14]
call fcn.0043bb30
push eax
push 0
lea ecx, [esp + 0x1c]
call fcn.0043baa0
push eax
push 0
lea eax, [ebx + 0x1e4]
push 0
push eax
lea ecx, [esp + 0x54]
call fcn.0043bb30
push eax
push 0
lea ecx, [esp + 0x5c]
call fcn.0043baa0
push eax
push 0
lea ecx, [esp + 0x8c]
call fcn.0043baa0
push eax
call dword [sym.imp.KERNEL32.dll_GetVolumeInformationA]
test eax, eax
je 0x41b725
lea ecx, [esp + 0x40]
call fcn.0043acd0
lea ecx, [esp + 0x14]
call fcn.0043acd0
mov ecx, edi
call fcn.0043baf0
cmp eax, 1
jne 0x41b733
lea edx, [esp + 0x14]
lea ecx, [ebx + 0x160]
push edx
call fcn.0043ae60
jmp 0x41b733
push 0x4a3290
lea ecx, [esp + 0x44]
call fcn.0043ae00
push 0x200
lea eax, [esp + 0x9c]
push 0x160
push eax
push 0
push 0
lea ecx, [esp + 0x80]
call fcn.0043baa0
push eax
call dword [sym.imp.SHELL32.dll_SHGetFileInfoA]
test eax, eax
je 0x41b773
lea ecx, [esp + 0xa4]
push ecx
lea ecx, [esp + 0x18]
call fcn.0043ae00
jmp 0x41b781
lea edx, [esp + 0x40]
lea ecx, [esp + 0x14]
push edx
call fcn.0043ae60
lea ecx, [esp + 0x14]
call fcn.0043baf0
test eax, eax
je 0x41b7be
lea esi, [ebx + 0x108]
mov ecx, esi
call fcn.0043baf0
test eax, eax
je 0x41b7ab
push 0x4942e4
mov ecx, esi
call fcn.0043ad50
push 0
lea ecx, [esp + 0x18]
call fcn.0043baa0
push eax
mov ecx, esi
call fcn.0043ad50
lea ecx, [esp + 0x40]
call fcn.0043baf0
test eax, eax
je 0x41b7fb
lea esi, [ebx + 0x134]
mov ecx, esi
call fcn.0043baf0
test eax, eax
je 0x41b7e8
push 0x4942e4
mov ecx, esi
call fcn.0043ad50
push 0
lea ecx, [esp + 0x44]
call fcn.0043baa0
push eax
mov ecx, esi
call fcn.0043ad50
mov ecx, edi
inc ebp
call fcn.0043baf0
cmp ebp, eax
jl 0x41b687
pop esi
mov eax, dword [esp + 0xc]
push eax
call dword [sym.imp.KERNEL32.dll_SetErrorMode]
lea ecx, [esp + 0x3c]
mov byte [esp + 0x1fc], 1
call fcn.0043a990
lea ecx, [esp + 0x10]
mov byte [esp + 0x1fc], 0
call fcn.0043a990
lea ecx, [esp + 0x68]
mov dword [esp + 0x1fc], 0xffffffff
call fcn.0043a990
mov ecx, dword [esp + 0x1f4]
pop edi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x1f4
ret