Function at 0x45d746
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push 0x24
mov eax, 0x49fcbe
call fcn.0047b1ce
mov ebx, ecx
cmp dword [ebx + 0x9c], 0
jle 0x45d854
call fcn.00465b29
mov edi, dword [ebp + 8]
push 0x64
pop ecx
mov dword [eax + 0x128], edi
mov eax, dword [ebp + 0xc]
mul ecx
mov esi, eax
mov eax, edi
mul ecx
mov ecx, eax
add esi, edx
mov eax, dword [ebx + 0x9c]
cdq
push edx
push eax
push esi
push ecx
call fcn.0047b500
mov ecx, edx
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x18], ecx
test ecx, ecx
jne 0x45d7a2
cmp eax, 0x64
jbe 0x45d7ad
and dword [ebp - 0x18], 0
mov dword [ebp - 0x1c], 0x64
call fcn.00465b29
push dword [eax + 0x124]
push dword [eax + 0x120]
push dword [ebp + 0xc]
push edi
call fcn.0047b500
mov ecx, dword [ebx + 0x28]
push eax
call dword [0x4a4000]
push 0x4a5644
lea ecx, [ebp - 0x28]
call dword [0x4a31d0]
mov esi, eax
and dword [ebp - 4], 0
push ecx
mov ecx, esp
mov byte [ebp - 0x20], 0x20
push dword [ebp - 0x20]
call dword [0x4a3458]
push 0xa
push 0
push dword [ebp - 0x18]
lea eax, [ebp - 0x24]
mov ecx, esi
push dword [ebp - 0x1c]
push eax
call dword [0x4a338c]
lea edi, [ebx + 0x98]
push eax
mov ecx, edi
call dword [0x4a3428]
lea ecx, [ebp - 0x24]
call dword [0x4a344c]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x28]
call dword [0x4a344c]
push 0x4aa1cc
mov ecx, edi
call dword [0x4a3438]
push 0
push 0
push ecx
mov ecx, esp
push edi
call dword [0x4a3450]
mov ecx, ebx
call fcn.004789c3
jmp 0x45d85a
lea edi, [ebx + 0x98]
push str.___Mode:
lea ecx, [ebp - 0x10]
call dword [0x4a31d0]
xor esi, esi
lea ecx, [ebp - 0x14]
inc esi
mov dword [ebp - 4], esi
call dword [0x4a3454]
mov byte [ebp - 4], 2
call fcn.00465b29
cmp dword [eax + 0x110], esi
jne 0x45d88f
push str.Disk_Recovery
jmp 0x45d8a2
call fcn.00465b29
cmp dword [eax + 0x110], 0
jne 0x45d8ab
push str.Partition_Recovery
lea ecx, [ebp - 0x14]
call dword [0x4a343c]
lea eax, [ebp - 0x14]
push eax
lea ecx, [ebp - 0x10]
call dword [0x4a3440]
push 0x4a5928
lea ecx, [ebp - 0x10]
call dword [0x4a3438]
push str.___Total_Sectors:
lea ecx, [ebp - 0x10]
call dword [0x4a3438]
push 0x4a5644
lea ecx, [ebp - 0x20]
call dword [0x4a31d0]
mov esi, eax
push ecx
mov ecx, esp
mov byte [ebp - 0x28], 0x20
push dword [ebp - 0x28]
mov byte [ebp - 4], 3
call dword [0x4a3458]
push 0xa
push 0
push dword [ebx + 0xac]
lea eax, [ebp - 0x24]
mov ecx, esi
push dword [ebx + 0xa8]
push eax
call dword [0x4a338c]
push eax
mov ecx, edi
call dword [0x4a3428]
lea ecx, [ebp - 0x24]
call dword [0x4a344c]
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 2
call dword [0x4a344c]
push edi
lea ecx, [ebp - 0x10]
call dword [0x4a3440]
push 0x4a6348
lea ecx, [ebp - 0x10]
call dword [0x4a3438]
push str._Sectors_Scanned:
lea ecx, [ebp - 0x10]
call dword [0x4a3438]
mov eax, dword [ebp + 0xc]
mov esi, 0x3e7
mul esi
mov ecx, eax
mov eax, dword [ebp + 8]
mul esi
mov esi, dword [ebx + 0xac]
add ecx, edx
mov dword [ebp - 0x1c], eax
mov edx, dword [ebx + 0xa8]
mov dword [ebp + 0xc], ecx
cmp ecx, esi
jb 0x45d98e
ja 0x45d988
cmp eax, edx
jbe 0x45d98e
mov dword [ebp - 0x1c], edx
mov dword [ebp + 0xc], esi
push 0x4a5644
lea ecx, [ebp - 0x20]
call dword [0x4a31d0]
mov esi, eax
push ecx
mov ecx, esp
mov byte [ebp - 0x28], 0x20
push dword [ebp - 0x28]
mov byte [ebp - 4], 4
call dword [0x4a3458]
push 0xa
push 0
push dword [ebp + 0xc]
lea eax, [ebp - 0x24]
mov ecx, esi
push dword [ebp - 0x1c]
push eax
call dword [0x4a338c]
push eax
mov ecx, edi
call dword [0x4a3428]
lea ecx, [ebp - 0x24]
call dword [0x4a344c]
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 2
call dword [0x4a344c]
mov esi, dword [0x4a3440]
lea ecx, [ebp - 0x10]
push edi
call esi
push 0x4a5928
lea ecx, [ebp - 0x10]
call dword [0x4a3438]
call fcn.00465b29
add eax, 0x20
lea ecx, [ebp - 0x10]
push eax
call esi
mov ecx, dword [ebx + 0x38]
lea eax, [ebp - 0x10]
mov edi, dword [0x4a402c]
push eax
call edi
push 0x4a5644
lea ecx, [ebp - 0x24]
call dword [0x4a31d0]
mov esi, eax
push ecx
mov byte [ebp + 0xc], 0x20
mov ecx, esp
push dword [ebp + 0xc]
mov byte [ebp - 4], 5
call dword [0x4a3458]
push 0xa
push 0
call fcn.00465b29
mov ecx, esi
push dword [eax + 0x6c]
push dword [eax + 0x68]
lea eax, [ebp - 0x28]
push eax
call dword [0x4a338c]
lea esi, [ebx + 0x98]
push eax
mov ecx, esi
call dword [0x4a3428]
lea ecx, [ebp - 0x28]
call dword [0x4a344c]
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 2
call dword [0x4a344c]
mov ecx, dword [ebx + 0x4c]
push esi
call edi
push 0x4a5644
lea ecx, [ebp - 0x24]
call dword [0x4a31d0]
mov esi, eax
push ecx
mov byte [ebp + 0xc], 0x20
mov ecx, esp
push dword [ebp + 0xc]
mov byte [ebp - 4], 6
call dword [0x4a3458]
push 0xa
push 0
call fcn.00465b29
mov ecx, esi
push dword [eax + 0x5c]
push dword [eax + 0x58]
lea eax, [ebp - 0x28]
push eax
call dword [0x4a338c]
lea esi, [ebx + 0x98]
push eax
mov ecx, esi
call dword [0x4a3428]
lea ecx, [ebp - 0x28]
call dword [0x4a344c]
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 2
call dword [0x4a344c]
mov ecx, dword [ebx + 0x60]
push esi
call edi
push 0x4a5644
lea ecx, [ebp - 0x24]
call dword [0x4a31d0]
mov esi, eax
push ecx
mov byte [ebp + 0xc], 0x20
mov ecx, esp
push dword [ebp + 0xc]
mov byte [ebp - 4], 7
call dword [0x4a3458]
push 0xa
push 0
call fcn.00465b29
mov ecx, esi
push dword [eax + 0x74]
push dword [eax + 0x70]
lea eax, [ebp - 0x28]
push eax
call dword [0x4a338c]
lea esi, [ebx + 0x98]
push eax
mov ecx, esi
call dword [0x4a3428]
lea ecx, [ebp - 0x28]
call dword [0x4a344c]
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 2
call dword [0x4a344c]
mov ecx, dword [ebx + 0x70]
push esi
call edi
push 0x4a5644
lea ecx, [ebp - 0x24]
call dword [0x4a31d0]
mov esi, eax
push ecx
mov byte [ebp + 0xc], 0x20
mov ecx, esp
push dword [ebp + 0xc]
mov byte [ebp - 4], 8
call dword [0x4a3458]
push 0xa
push 0
call fcn.00465b29
mov ecx, esi
push dword [eax + 0x7c]
push dword [eax + 0x78]
lea eax, [ebp - 0x28]
push eax
call dword [0x4a338c]
push eax
lea esi, [ebx + 0x98]
mov ecx, esi
call dword [0x4a3428]
lea ecx, [ebp - 0x28]
call dword [0x4a344c]
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 2
call dword [0x4a344c]
mov ecx, dword [ebx + 0x54]
push esi
call edi
push 0x4a5644
lea ecx, [ebp - 0x24]
call dword [0x4a31d0]
mov esi, eax
push ecx
mov byte [ebp + 0xc], 0x20
mov ecx, esp
push dword [ebp + 0xc]
mov byte [ebp - 4], 9
call dword [0x4a3458]
push 0xa
push 0
call fcn.00465b29
mov ecx, esi
push dword [eax + 0x64]
push dword [eax + 0x60]
lea eax, [ebp - 0x28]
push eax
call dword [0x4a338c]
lea esi, [ebx + 0x98]
push eax
mov ecx, esi
call dword [0x4a3428]
lea ecx, [ebp - 0x28]
call dword [0x4a344c]
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 2
call dword [0x4a344c]
mov ecx, dword [ebx + 0x50]
push esi
call edi
push 0x4a5644
lea ecx, [ebp - 0x18]
call dword [0x4a31d0]
mov esi, eax
push ecx
mov byte [ebp + 0xc], 0x20
mov ecx, esp
push dword [ebp + 0xc]
mov byte [ebp - 4], 0xa
call dword [0x4a3458]
push 0xa
push 0
call fcn.00465b29
mov ecx, esi
push dword [eax + 0x84]
push dword [eax + 0x80]
lea eax, [ebp - 0x1c]
push eax
call dword [0x4a338c]
lea esi, [ebx + 0x98]
push eax
mov ecx, esi
call dword [0x4a3428]
lea ecx, [ebp - 0x1c]
call dword [0x4a344c]
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 2
call dword [0x4a344c]
mov ecx, dword [ebx + 0x64]
push esi
call edi
lea ecx, [ebp - 0x14]
call dword [0x4a344c]
lea ecx, [ebp - 0x10]
call dword [0x4a344c]
call fcn.0047b19c
ret 8