Function at 0x1000ae90
Capabilities:
Get disk information
Get disk size
Get file system object information

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100308de
mov eax, dword fs:[0]
push eax
sub esp, 0x794
mov eax, dword [0x10042040]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ebx, ecx
mov dword [ebp - 0x788], ebx
mov dword [ebp - 0x784], ebx
mov eax, dword [ebp + 8]
push 0
push 0
mov dword [ebp - 0x79c], ebx
push 1
mov dword [ebx], vtable.CManager.0
mov byte [ebx + 4], 0
mov dword [ebx + 8], eax
push 0
mov dword [eax + 0x20], ebx
call dword [sym.imp.KERNEL32.dll_CreateEventA]
mov dword [ebx + 0xc], eax
mov dword [ebp - 4], 0
mov dword [ebx], vtable.CFileManager.0
push 0x20
mov dword [ebx + 0x10], 0
mov dword [ebx + 0x14], 0
call fcn.10011895
add esp, 4
mov dword [eax], eax
mov dword [eax + 4], eax
mov dword [ebx + 0x10], eax
lea eax, [ebp - 0x218]
mov byte [ebp - 4], 1
push eax
push 0x100
mov dword [ebx + 0x18], 0
mov byte [ebp - 0x618], 0x67
call dword [sym.imp.KERNEL32.dll_GetLogicalDriveStringsA]
cmp byte [ebp - 0x218], 0
lea esi, [ebp - 0x218]
xorps xmm0, xmm0
mov edi, 1
movlpd qword [ebp - 0x790], xmm0
movlpd qword [ebp - 0x798], xmm0
mov dword [ebp - 0x77c], edi
je 0x1000b0de
mov ebx, dword [sym.imp.KERNEL32.dll_lstrlenA]
nop
push 0x104
lea eax, [ebp - 0x118]
push 0
push eax
call fcn.10013850
add esp, 0xc
lea eax, [ebp - 0x118]
push 0x104
push eax
push 0
push 0
push 0
push 0
push 0
push esi
call dword [sym.imp.KERNEL32.dll_GetVolumeInformationA]
push 0x410
push 0x160
lea eax, [ebp - 0x778]
push eax
push 0x80
push esi
call dword [sym.imp.SHELL32.dll_SHGetFileInfoA]
lea eax, [ebp - 0x668]
push eax
call ebx
inc eax
mov dword [ebp - 0x784], eax
lea eax, [ebp - 0x118]
push eax
call ebx
mov cl, byte [esi]
inc eax
mov dword [ebp - 0x780], eax
cmp cl, 0x41
je 0x1000b039
cmp cl, 0x42
je 0x1000b039
push 0
lea eax, [ebp - 0x790]
push eax
lea eax, [ebp - 0x798]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExA]
test eax, eax
je 0x1000b039
mov edi, dword [ebp - 0x790]
mov eax, dword [ebp - 0x78c]
mov ebx, dword [ebp - 0x798]
shrd edi, eax, 0x14
mov eax, dword [ebp - 0x794]
shrd ebx, eax, 0x14
jmp 0x1000b03d
xor edi, edi
xor ebx, ebx
mov ecx, dword [ebp - 0x77c]
mov al, byte [esi]
push esi
mov byte [ebp + ecx - 0x618], al
call dword [sym.imp.KERNEL32.dll_GetDriveTypeA]
mov ecx, dword [ebp - 0x77c]
mov byte [ebp + ecx - 0x617], al
lea eax, [ebp - 0x668]
mov dword [ebp + ecx - 0x616], edi
mov edi, ecx
mov dword [ebp + edi - 0x612], ebx
mov ebx, dword [ebp - 0x784]
push ebx
push eax
lea eax, [ebp - 0x60e]
add eax, edi
push eax
call fcn.100132d0
add esp, 0xc
lea eax, [ebp - 0x118]
lea ecx, [ebp - 0x60e]
push dword [ebp - 0x780]
push eax
lea eax, [ebx + edi]
add eax, ecx
push eax
call fcn.100132d0
mov eax, dword [ebp - 0x780]
add esp, 0xc
add eax, ebx
add edi, 0xa
mov ebx, dword [sym.imp.KERNEL32.dll_lstrlenA]
add edi, eax
mov dword [ebp - 0x77c], edi
push esi
call ebx
inc esi
add esi, eax
cmp byte [esi], 0
jne 0x1000af80
mov ebx, dword [ebp - 0x788]
push edi
lea eax, [ebp - 0x618]
mov ecx, ebx
push eax
call fcn.1000c460
mov eax, ebx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.10011882
mov esp, ebp
pop ebp
ret 8