Function at 0x4cd180
Capabilities:
Get storage device properties

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x550e2d
mov eax, dword fs:[0]
push eax
sub esp, 0xd24
mov eax, dword [0x5d3370]
xor eax, ebp
mov dword [ebp - 0x90], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0xd14], ecx
mov dword [ebp - 0xd10], 0
lea ecx, [ebp - 0xac]
call dword [0x55b404]
mov dword [ebp - 4], 1
push 1
push 2
lea ecx, [ebp - 0x8c]
call dword [0x55b41c]
mov byte [ebp - 4], 2
xor eax, eax
mov word [ebp - 0x2dc], ax
push 0x206
push 0
lea ecx, [ebp - 0x2da]
push ecx
call fcn.0053e25a
add esp, 0xc
lea edx, [ebp - 0x2dc]
push edx
push 0x104
call dword [0x55b178]
lea ecx, [ebp - 0xcc]
call fcn.004d3da0
mov byte [ebp - 4], 3
call dword [0x55b168]
mov dword [ebp - 0xd0], eax
mov dword [ebp - 0x2e0], 0
jmp 0x4cd24c
mov eax, dword [ebp - 0x2e0]
add eax, 1
mov dword [ebp - 0x2e0], eax
cmp dword [ebp - 0x2e0], 0x1a
jge 0x4cde3d
mov edx, 1
mov ecx, dword [ebp - 0x2e0]
shl edx, cl
and edx, dword [ebp - 0xd0]
jne 0x4cd270
jmp 0x4cd23d
mov eax, 1
mov ecx, dword [ebp - 0x2e0]
shl eax, cl
and eax, dword [ebp + 0x14]
je 0x4cd284
jmp 0x4cd23d
lea ecx, [ebp - 0x2f4]
call fcn.004d2fa0
mov ecx, dword [ebp - 0x2e0]
add ecx, 0x41
mov word [ebp - 0x534], cx
mov edx, dword [0x582eb8]
mov dword [ebp - 0x504], edx
mov eax, dword [0x582ebc]
mov dword [ebp - 0x500], eax
mov cx, word [ebp - 0x534]
mov word [ebp - 0x504], cx
lea edx, [ebp - 0x504]
push edx
call dword [0x55b140]
mov dword [ebp - 0x508], eax
cmp dword [ebp - 0x508], 3
je 0x4cd2e5
jmp 0x4cd23d
xor eax, eax
mov word [ebp - 0x4fc], ax
push 0x206
push 0
lea ecx, [ebp - 0x4fa]
push ecx
call fcn.0053e25a
add esp, 0xc
push 0x104
lea edx, [ebp - 0x4fc]
push edx
push 0
push 0
push 0
push 0
push 0
lea eax, [ebp - 0x504]
push eax
call dword [0x55b1a0]
test eax, eax
jne 0x4cd37b
mov ecx, 1
test ecx, ecx
je 0x4cd376
call fcn.00402980
mov dword [ebp - 0x550], eax
cmp dword [ebp - 0x550], 0
je 0x4cd376
call dword [0x55b27c]
push eax
lea edx, [ebp - 0x504]
push edx
push str.GetVolumeInformation__s__failed__err:__d
push 4
push 1
mov eax, dword [ebp - 0x550]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x550]
push edx
mov eax, dword [ecx + 0x18]
call eax
add esp, 0x18
jmp 0x4cd23d
push str.NTFS
lea ecx, [ebp - 0x4fc]
push ecx
call dword [0x55b6b4]
add esp, 8
test eax, eax
je 0x4cd399
jmp 0x4cd23d
mov dword [ebp - 0x52c], 0
xor edx, edx
mov dword [ebp - 0x528], edx
mov dword [ebp - 0x544], 0
xor eax, eax
mov dword [ebp - 0x540], eax
mov dword [ebp - 0x53c], 0
xor ecx, ecx
mov dword [ebp - 0x538], ecx
lea edx, [ebp - 0x53c]
push edx
lea eax, [ebp - 0x544]
push eax
lea ecx, [ebp - 0x52c]
push ecx
lea edx, [ebp - 0x504]
push edx
call dword [0x55b19c]
test eax, eax
jne 0x4cd445
mov eax, 1
test eax, eax
je 0x4cd440
call fcn.00402980
mov dword [ebp - 0x554], eax
cmp dword [ebp - 0x554], 0
je 0x4cd440
call dword [0x55b27c]
push eax
lea ecx, [ebp - 0x504]
push ecx
push str.GetDiskFreeSpaceEx__s__failed__err:__d
push 4
push 1
mov edx, dword [ebp - 0x554]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x554]
push ecx
mov edx, dword [eax + 0x18]
call edx
add esp, 0x18
jmp 0x4cd23d
mov eax, dword [ebp - 0x52c]
mov dword [ebp - 0x2ec], eax
mov ecx, dword [ebp - 0x528]
mov dword [ebp - 0x2e8], ecx
mov edx, dword [ebp - 0x2e8]
cmp edx, dword [ebp + 0x10]
ja 0x4cd4d4
jb 0x4cd475
mov eax, dword [ebp - 0x2ec]
cmp eax, dword [ebp + 0xc]
jae 0x4cd4d4
mov ecx, 1
test ecx, ecx
je 0x4cd4cf
call fcn.00402980
mov dword [ebp - 0x558], eax
cmp dword [ebp - 0x558], 0
je 0x4cd4cf
mov edx, dword [ebp + 0x10]
push edx
mov eax, dword [ebp + 0xc]
push eax
mov ecx, dword [ebp - 0x2e8]
push ecx
mov edx, dword [ebp - 0x2ec]
push edx
lea eax, [ebp - 0x504]
push eax
push str._s_does_not_have_enough_free_space___I64u____I64u
push 4
push 1
mov ecx, dword [ebp - 0x558]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x558]
push eax
mov ecx, dword [edx + 0x18]
call ecx
add esp, 0x24
jmp 0x4cd23d
push 0x582fd4
lea ecx, [ebp - 0xc38]
call dword [0x55b288]
mov byte [ebp - 4], 4
lea edx, [ebp - 0xc38]
push edx
lea ecx, [ebp - 0x8c]
call dword [0x55b4ec]
mov byte [ebp - 4], 3
lea ecx, [ebp - 0xc38]
call dword [0x55b408]
movzx eax, word [ebp - 0x2dc]
movzx ecx, word [ebp - 0x534]
cmp eax, ecx
jne 0x4cd542
push 0x582fd8
lea edx, [ebp - 0x2dc]
push edx
lea eax, [ebp - 0x8c]
push eax
call fcn.00427bc0
add esp, 8
push eax
call fcn.00427bc0
add esp, 8
movzx ecx, word [ebp - 0x2dc]
movzx edx, word [ebp - 0x534]
cmp ecx, edx
je 0x4cd578
push str.EUTMP_
lea eax, [ebp - 0x504]
push eax
lea ecx, [ebp - 0x8c]
push ecx
call fcn.00427bc0
add esp, 8
push eax
call fcn.00427bc0
add esp, 8
lea edx, [ebp - 0x524]
push edx
lea ecx, [ebp - 0x8c]
call dword [0x55b3e0]
mov byte [ebp - 4], 5
mov dword [ebp - 0x54c], 0
jmp 0x4cd5aa
mov eax, dword [ebp - 0x54c]
add eax, 1
mov dword [ebp - 0x54c], eax
cmp dword [ebp - 0x54c], 0x3e8
jge 0x4cd70e
xor ecx, ecx
mov word [ebp - 0x764], cx
push 0x206
push 0
lea edx, [ebp - 0x762]
push edx
call fcn.0053e25a
add esp, 0xc
mov eax, dword [ebp - 0x54c]
push eax
push str._04d
lea ecx, [ebp - 0x764]
push ecx
call fcn.00402960
add esp, 0xc
push 0x583004
lea ecx, [ebp - 0xc54]
call dword [0x55b288]
mov byte [ebp - 4], 6
lea edx, [ebp - 0xc54]
push edx
lea ecx, [ebp - 0x8c]
call dword [0x55b4ec]
mov byte [ebp - 4], 5
lea ecx, [ebp - 0xc54]
call dword [0x55b408]
lea eax, [ebp - 0x764]
push eax
lea ecx, [ebp - 0x524]
push ecx
lea edx, [ebp - 0x8c]
push edx
call dword [0x55b3e8]
add esp, 8
push eax
call fcn.00427bc0
add esp, 8
push 0
lea eax, [ebp - 0xc74]
push eax
lea ecx, [ebp - 0x8c]
call dword [0x55b3e0]
mov dword [ebp - 0xd18], eax
mov ecx, dword [ebp - 0xd18]
mov dword [ebp - 0xd1c], ecx
mov byte [ebp - 4], 7
mov ecx, dword [ebp - 0xd1c]
call dword [0x55b3dc]
push eax
call dword [0x55b5d8]
add esp, 8
neg eax
sbb eax, eax
neg eax
mov byte [ebp - 0xc55], al
mov byte [ebp - 4], 5
lea ecx, [ebp - 0xc74]
call dword [0x55b408]
movzx edx, byte [ebp - 0xc55]
test edx, edx
je 0x4cd709
lea eax, [ebp - 0xc90]
push eax
lea ecx, [ebp - 0x8c]
call dword [0x55b3e0]
mov dword [ebp - 0xd20], eax
mov ecx, dword [ebp - 0xd20]
mov dword [ebp - 0xd24], ecx
mov byte [ebp - 4], 8
mov edx, dword [ebp - 0xd24]
push edx
lea ecx, [ebp - 0x524]
call dword [0x55b3ec]
mov byte [ebp - 4], 5
lea ecx, [ebp - 0xc90]
call dword [0x55b408]
jmp 0x4cd70e
jmp 0x4cd59b
cmp dword [ebp - 0x54c], 0x3e8
jl 0x4cd72f
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x524]
call dword [0x55b408]
jmp 0x4cd23d
push 0
push 0x4000002
push 2
push 0
push 3
push 0xc0000000
lea ecx, [ebp - 0x524]
call dword [0x55b3dc]
push eax
call dword [0x55b228]
mov dword [ebp - 0x530], eax
cmp dword [ebp - 0x530], 0xffffffff
jne 0x4cd7c9
mov eax, 1
test eax, eax
je 0x4cd7b4
call fcn.00402980
mov dword [ebp - 0x768], eax
cmp dword [ebp - 0x768], 0
je 0x4cd7b4
call dword [0x55b27c]
push eax
lea ecx, [ebp - 0x524]
call dword [0x55b3dc]
push eax
push str.CreateFile__s__GENERIC_READ__GENERIC_WRITE__CREATE_ALWAYS__FILE_ATTRIBUTE_HIDDEN__FILE_FLAG_DELETE_ON_CLOSE__failed__err:__d
push 4
push 1
mov ecx, dword [ebp - 0x768]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x768]
push eax
mov ecx, dword [edx + 0x18]
call ecx
add esp, 0x18
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x524]
call dword [0x55b408]
jmp 0x4cd23d
cmp dword [ebp - 0x530], 0
je 0x4cd7f2
cmp dword [ebp - 0x530], 0xffffffff
je 0x4cd7f2
mov edx, dword [ebp - 0x530]
push edx
call dword [0x55b278]
mov dword [ebp - 0x530], 0
mov dword [ebp - 0x548], 0xffffffff
mov dword [ebp - 0x2e4], 0xffffffff
mov eax, dword [str..X:]
mov dword [ebp - 0x9bc], eax
mov ecx, dword [0x58310c]
mov dword [ebp - 0x9b8], ecx
mov edx, dword [0x583110]
mov dword [ebp - 0x9b4], edx
mov ax, word [0x583114]
mov word [ebp - 0x9b0], ax
mov cx, word [ebp - 0x534]
mov word [ebp - 0x9b4], cx
push 0
push 0
push 3
push 0
push 3
push 0x80000000
lea edx, [ebp - 0x9bc]
push edx
call dword [0x55b228]
mov dword [ebp - 0x548], eax
cmp dword [ebp - 0x548], 0xffffffff
jne 0x4cd8bf
mov eax, 1
test eax, eax
je 0x4cd8ba
call fcn.00402980
mov dword [ebp - 0xc08], eax
cmp dword [ebp - 0xc08], 0
je 0x4cd8ba
call dword [0x55b27c]
push eax
lea ecx, [ebp - 0x9bc]
push ecx
push str.CreateFile__s__GENERIC_READ__failed__err:__d
push 4
push 1
mov edx, dword [ebp - 0xc08]
mov eax, dword [edx]
mov ecx, dword [ebp - 0xc08]
push ecx
mov edx, dword [eax + 0x18]
call edx
add esp, 0x18
jmp 0x4cdd1e
mov dword [ebp - 0x99c], 0
xor eax, eax
mov dword [ebp - 0x998], eax
mov dword [ebp - 0x994], eax
mov dword [ebp - 0x99c], 0
mov dword [ebp - 0x998], 0
push 0x1000
lea ecx, [ebp - 0x780]
call fcn.0041eab0
mov byte [ebp - 4], 9
push 0
lea ecx, [ebp - 0x780]
call fcn.0041ebd0
mov dword [ebp - 0x9ac], eax
mov dword [ebp - 0x9a8], 0
push 0
lea ecx, [ebp - 0x9a8]
push ecx
lea ecx, [ebp - 0x780]
call fcn.0041ebb0
push eax
mov edx, dword [ebp - 0x9ac]
push edx
push 0xc
lea eax, [ebp - 0x99c]
push eax
push 0x2d1400
mov ecx, dword [ebp - 0x548]
push ecx
call dword [0x55b214]
mov dword [ebp - 0x9a4], eax
cmp dword [ebp - 0x9a4], 0
jne 0x4cd9c1
mov edx, 1
test edx, edx
je 0x4cd9ad
call fcn.00402980
mov dword [ebp - 0xc0c], eax
cmp dword [ebp - 0xc0c], 0
je 0x4cd9ad
call dword [0x55b27c]
push eax
lea eax, [ebp - 0x9bc]
push eax
push str.DeviceIoControl__s__IOCTL_STORAGE_QUERY_PROPERTY__failed__err:__d
push 4
push 1
mov ecx, dword [ebp - 0xc0c]
mov edx, dword [ecx]
mov eax, dword [ebp - 0xc0c]
push eax
mov ecx, dword [edx + 0x18]
call ecx
add esp, 0x18
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x780]
call fcn.0041eb30
jmp 0x4cdd1e
mov edx, dword [ebp - 0x9ac]
xor eax, eax
cmp dword [edx + 0x1c], 7
sete al
mov dword [ebp - 0x2f4], eax
push 0x1000
lea ecx, [ebp - 0xc04]
call fcn.0041eab0
mov byte [ebp - 4], 0xa
push 0
lea ecx, [ebp - 0xc04]
call fcn.0041ebd0
mov dword [ebp - 0x990], eax
mov dword [ebp - 0x9a8], 0
push 0
lea ecx, [ebp - 0x9a8]
push ecx
lea ecx, [ebp - 0xc04]
call fcn.0041ebb0
push eax
mov edx, dword [ebp - 0x990]
push edx
push 0
push 0
push 0x560000
mov eax, dword [ebp - 0x548]
push eax
call dword [0x55b214]
mov dword [ebp - 0x9a4], eax
cmp dword [ebp - 0x9a4], 0
jne 0x4cdab6
mov ecx, 1
test ecx, ecx
je 0x4cda93
call fcn.00402980
mov dword [ebp - 0xc10], eax
cmp dword [ebp - 0xc10], 0
je 0x4cda93
call dword [0x55b27c]
push eax
lea edx, [ebp - 0x9bc]
push edx
push str.DeviceIoControl__s__IOCTL_VOLUME_GET_VOLUME_DISK_EXTENTS__failed__err:__d
push 4
push 1
mov eax, dword [ebp - 0xc10]
mov ecx, dword [eax]
mov edx, dword [ebp - 0xc10]
push edx
mov eax, dword [ecx + 0x18]
call eax
add esp, 0x18
mov byte [ebp - 4], 9
lea ecx, [ebp - 0xc04]
call fcn.0041eb30
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x780]
call fcn.0041eb30
jmp 0x4cdd1e
mov ecx, dword [ebp - 0x990]
cmp dword [ecx], 0
ja 0x4cdae4
mov byte [ebp - 4], 9
lea ecx, [ebp - 0xc04]
call fcn.0041eb30
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x780]
call fcn.0041eb30
jmp 0x4cdd1e
mov edx, dword [ebp - 0x990]
add edx, 8
mov dword [ebp - 0x9c0], edx
xor eax, eax
mov word [ebp - 0x98c], ax
push 0x206
push 0
lea ecx, [ebp - 0x98a]
push ecx
call fcn.0053e25a
add esp, 0xc
mov edx, dword [ebp - 0x9c0]
mov eax, dword [edx]
push eax
push str..PhysicalDrive_u
push 0x104
lea ecx, [ebp - 0x98c]
push ecx
call dword [0x55b644]
add esp, 0x10
push 0
push 0
push 3
push 0
push 3
push 0xc0000000
lea edx, [ebp - 0x98c]
push edx
call dword [0x55b228]
mov dword [ebp - 0x2e4], eax
cmp dword [ebp - 0x2e4], 0xffffffff
jne 0x4cdbce
mov eax, 1
test eax, eax
je 0x4cdbab
call fcn.00402980
mov dword [ebp - 0xc14], eax
cmp dword [ebp - 0xc14], 0
je 0x4cdbab
call dword [0x55b27c]
push eax
lea ecx, [ebp - 0x98c]
push ecx
push 0x5832c8
push 4
push 1
mov edx, dword [ebp - 0xc14]
mov eax, dword [edx]
mov ecx, dword [ebp - 0xc14]
push ecx
mov edx, dword [eax + 0x18]
call edx
add esp, 0x18
mov byte [ebp - 4], 9
lea ecx, [ebp - 0xc04]
call fcn.0041eb30
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x780]
call fcn.0041eb30
jmp 0x4cdd1e
push 0x228
push 0
lea eax, [ebp - 0xbec]
push eax
call fcn.0053e25a
add esp, 0xc
mov ecx, 0x28
mov word [ebp - 0xbec], cx
mov edx, 2
mov word [ebp - 0xbea], dx
mov dword [ebp - 0xbe4], 0x200
mov dword [ebp - 0xbe0], 5
xor eax, eax
add eax, 0x28
mov dword [ebp - 0xbd8], eax
mov byte [ebp - 0xbc6], 0xec
mov dword [ebp - 0x9a8], 0
push 0
lea ecx, [ebp - 0x9a8]
push ecx
push 0x228
lea edx, [ebp - 0xbec]
push edx
push 0x228
lea eax, [ebp - 0xbec]
push eax
push 0x4d02c
mov ecx, dword [ebp - 0x2e4]
push ecx
call dword [0x55b214]
mov dword [ebp - 0x9a4], eax
cmp dword [ebp - 0x9a4], 0
jne 0x4cdcd9
mov edx, 1
test edx, edx
je 0x4cdcb9
call fcn.00402980
mov dword [ebp - 0xc18], eax
cmp dword [ebp - 0xc18], 0
je 0x4cdcb9
call dword [0x55b27c]
push eax
lea eax, [ebp - 0x98c]
push eax
push str.DeviceIoControl__s__IOCTL_ATA_PASS_THROUGH__failed__err:__d
push 4
push 1
mov ecx, dword [ebp - 0xc18]
mov edx, dword [ecx]
mov eax, dword [ebp - 0xc18]
push eax
mov ecx, dword [edx + 0x18]
call ecx
add esp, 0x18
mov byte [ebp - 4], 9
lea ecx, [ebp - 0xc04]
call fcn.0041eb30
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x780]
call fcn.0041eb30
jmp 0x4cdd1e
movzx edx, word [ebp - 0xa12]
mov dword [ebp - 0x9a0], edx
xor eax, eax
cmp dword [ebp - 0x9a0], 1
sete al
mov dword [ebp - 0x2f0], eax
mov byte [ebp - 4], 9
lea ecx, [ebp - 0xc04]
call fcn.0041eb30
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x780]
call fcn.0041eb30
xor ecx, ecx
jne 0x4cd806
cmp dword [ebp - 0x548], 0
je 0x4cdd47
cmp dword [ebp - 0x548], 0xffffffff
je 0x4cdd47
mov edx, dword [ebp - 0x548]
push edx
call dword [0x55b278]
mov dword [ebp - 0x548], 0
cmp dword [ebp - 0x2e4], 0
je 0x4cdd70
cmp dword [ebp - 0x2e4], 0xffffffff
je 0x4cdd70
mov eax, dword [ebp - 0x2e4]
push eax
call dword [0x55b278]
mov dword [ebp - 0x2e4], 0
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0xcc8], esp
lea edx, [ebp - 0x524]
push edx
call dword [0x55b3fc]
mov dword [ebp - 0xd28], eax
sub esp, 0x10
mov eax, esp
mov ecx, dword [ebp - 0x2f4]
mov dword [eax], ecx
mov edx, dword [ebp - 0x2f0]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0x2ec]
mov dword [eax + 8], ecx
mov edx, dword [ebp - 0x2e8]
mov dword [eax + 0xc], edx
lea eax, [ebp - 0xcfc]
push eax
call fcn.004db2e0
add esp, 0x30
mov dword [ebp - 0xd2c], eax
mov ecx, dword [ebp - 0xd2c]
mov dword [ebp - 0xd30], ecx
mov byte [ebp - 4], 0xb
mov edx, dword [ebp - 0xd30]
push edx
lea ecx, [ebp - 0xcc4]
call fcn.004db350
mov byte [ebp - 4], 0xc
lea eax, [ebp - 0xcc4]
push eax
lea ecx, [ebp - 0xd04]
push ecx
lea ecx, [ebp - 0xcc]
call fcn.004d3dd0
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0xcc4]
call fcn.004d3020
mov byte [ebp - 4], 5
lea ecx, [ebp - 0xcfc]
call fcn.004d3000
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x524]
call dword [0x55b408]
jmp 0x4cd23d
lea ecx, [ebp - 0xcc]
call fcn.004d3e90
movzx edx, al
test edx, edx
jne 0x4cde78
lea eax, [ebp - 0xd0c]
push eax
lea ecx, [ebp - 0xcc]
call fcn.004d3e60
mov ecx, eax
call fcn.004d3f30
add eax, 0x10
push eax
lea ecx, [ebp - 0xac]
call dword [0x55b3ec]
mov byte [ebp - 4], 2
lea ecx, [ebp - 0xcc]
call fcn.004d2fe0
xor ecx, ecx
jne 0x4cd1e5
mov edx, 1
test edx, edx
je 0x4cdee1
call fcn.00402980
mov dword [ebp - 0xc1c], eax
cmp dword [ebp - 0xc1c], 0
je 0x4cdee1
lea ecx, [ebp - 0xac]
call dword [0x55b3dc]
push eax
mov eax, dword [ebp + 0x10]
push eax
mov ecx, dword [ebp + 0xc]
push ecx
push str.GetTempMountDir__I64u___Dir:__s
push 4
push 1
mov edx, dword [ebp - 0xc1c]
mov eax, dword [edx]
mov ecx, dword [ebp - 0xc1c]
push ecx
mov edx, dword [eax + 0x18]
call edx
add esp, 0x1c
lea eax, [ebp - 0xac]
push eax
mov ecx, dword [ebp + 8]
call dword [0x55b3fc]
mov ecx, dword [ebp - 0xd10]
or ecx, 1
mov dword [ebp - 0xd10], ecx
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x8c]
call dword [0x55b400]
mov byte [ebp - 4], 0
lea ecx, [ebp - 0xac]
call dword [0x55b408]
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x90]
xor ecx, ebp
call fcn.0053e1e2
mov esp, ebp
pop ebp
ret 0x10