Function at 0x1000fa25
Capabilities:
Get disk size

Disassembly:
push 0x54
mov eax, 0x1003d3de
call fcn.1001d244
mov byte [ebp - 0x5d], dl
mov dword [ebp - 0x18], ecx
push str.KZPfI
lea ecx, [ebp - 0x44]
call fcn.10001fd7
cmp dword [ebp - 0x30], 0xf
lea eax, [ebp - 0x44]
push 0x2bca863f
cmova eax, dword [ebp - 0x44]
push eax
push str._s:__d
call fcn.10007d3a
add esp, 0xc
lea ecx, [ebp - 0x44]
call fcn.10002037
lea eax, [ebp - 0x5c]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemTime]
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0x4c]
push eax
lea eax, [ebp - 0x2c]
push eax
push 0x1004774c
call dword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
push 0
push 0x80
push 3
push 0
push 1
push 0x80000000
push str.KA7.txt
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp eax, 0xffffffff
je 0x1000fab6
push eax
call esi
push 8
lea eax, [ebp - 0x2c]
push eax
call dword [sym.imp.WINMM.dll_timeGetDevCaps]
mov edi, dword [sym.imp.WINMM.dll_timeBeginPeriod]
mov ebx, dword [sym.imp.WINMM.dll_timeEndPeriod]
test eax, eax
jne 0x1000fada
push 1
call edi
push 1
call ebx
lea eax, [ebp - 0x5c]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemTime]
push 0
push 0x80
push 3
push 0
push 1
push 0x80000000
push str.HPzz8mkwz5.txt
call dword [sym.imp.KERNEL32.dll_CreateFileW]
cmp eax, 0xffffffff
je 0x1000fb09
push eax
call esi
push 8
lea eax, [ebp - 0x2c]
push eax
call dword [sym.imp.WINMM.dll_timeGetDevCaps]
test eax, eax
jne 0x1000fb21
push 1
call edi
push 1
call ebx
xor edi, edi
xor ebx, ebx
push edi
push 0x80
push 3
push edi
inc ebx
push ebx
push 0x80000000
push str.3P0ITCzJ.txt
call dword [sym.imp.KERNEL32.dll_CreateFileW]
cmp eax, 0xffffffff
je 0x1000fb48
push eax
call esi
push str.Xffhq
lea ecx, [ebp - 0x44]
call fcn.10001fd7
cmp dword [ebp - 0x30], 0xf
lea eax, [ebp - 0x44]
push 0x1708cd58
cmova eax, dword [ebp - 0x44]
push eax
push str._s:__d
call fcn.10007d3a
add esp, 0xc
lea ecx, [ebp - 0x44]
call fcn.10002037
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0x4c]
push eax
push 0x1004774c
call dword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
push 0x100479b0
lea ecx, [ebp - 0x44]
call fcn.10001fd7
push 0x8022971
push ecx
lea edx, [ebp - 0x44]
mov dword [ebp - 4], edi
mov ecx, 0x10051b50
call fcn.1000d771
pop ecx
mov ecx, eax
call fcn.1000c683
push eax
call fcn.1000d789
or dword [ebp - 4], 0xffffffff
pop ecx
lea ecx, [ebp - 0x44]
call fcn.10002037
mov esi, 0x100528e8
mov ecx, esi
mov dword [ebp - 0x48], esi
call fcn.1000500f
lea eax, [ebp - 0x18]
mov dword [ebp - 4], ebx
push eax
push eax
lea eax, [ebp - 0x58]
push eax
call fcn.10010c8a
push dword [eax + 8]
call fcn.10010ccf
test al, al
je 0x1000fc60
lea eax, [ebp - 0x18]
xorps xmm0, xmm0
push eax
lea eax, [ebp - 0x2c]
movlpd qword [ebp - 0x24], xmm0
push eax
call fcn.10010bdf
lea ecx, [ebp - 0x24]
mov eax, dword [eax]
add eax, 0x14
push eax
call fcn.100014c2
cmp byte [ebp - 0x5d], 0
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x24]
setne al
mov byte [ecx + 0x39], al
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x54]
mov byte [ecx + 0x38], bl
push eax
call fcn.10010bdf
mov eax, dword [eax]
add eax, 0x14
push eax
call fcn.10010ced
lea eax, [ebp - 0x18]
push eax
call fcn.10010aa3
mov ecx, dword [ebp - 0x20]
test ecx, ecx
je 0x1000fc60
call fcn.10001270
push esi
call fcn.1001ad7b
pop ecx
call fcn.1001d1f3
ret