Function at 0x41da3e
Capabilities:
Get common file path
Get disk information

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x17bc
call fcn.005fec20
mov eax, dword [0x708c34]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
mov edi, dword [ebp + 8]
lea eax, [ebp - 0xfa3]
xor ebx, ebx
mov dword [ebp - 0x17bc], edi
mov esi, 0x3e7
mov dword [ebp - 0x17b8], ebx
push esi
push ebx
push eax
mov byte [ebp - 0xfa4], bl
call fcn.00626f50
push esi
lea eax, [ebp - 0x138b]
mov byte [ebp - 0x138c], bl
push ebx
push eax
call fcn.00626f50
push esi
lea eax, [ebp - 0x1773]
mov byte [ebp - 0x1774], bl
push ebx
push eax
call fcn.00626f50
push 4
lea eax, [ebp - 0x7d4]
push eax
push str.InstanceA
push str.SoftwareVB_and_VBA_Program_SettingsPlugin
push SysReAllocString
call fcn.0041ddbb
add esp, 0x38
test eax, eax
jns 0x41dae6
push str.PokerStarsGenKey
push str._s_Failed_to_read_reg_value_SoftwareVB_and_VBA_Program_SettingsPlugin__InstanceA
call fcn.00449974
pop ecx
pop ecx
xor eax, eax
jmp 0x41ddac
mov esi, dword [ebp - 0x7d4]
lea eax, [ebp - 0x7d4]
push 4
push eax
push str.InstanceB
push str.SoftwareVB_and_VBA_Program_SettingsPlugin
push SysReAllocString
call fcn.0041ddbb
add esp, 0x14
test eax, eax
jns 0x41db1c
push str.PokerStarsGenKey
push str._s_Failed_to_read_reg_value_SoftwareVB_and_VBA_Program_SettingsPlugin__InstanceB
jmp 0x41dad8
push dword [ebp - 0x7d4]
lea eax, [ebp - 0xfa4]
push esi
push str._08X_08X
mov esi, 0x3e8
push esi
push eax
call fcn.00445d6d
add esp, 0x14
lea eax, [ebp - 0xfa4]
push eax
push str.INSTALL_s_
push esi
mov esi, 0x7247a0
push esi
call fcn.00631510
pop ecx
add eax, esi
push eax
call fcn.00445d6d
push esi
push str.Generated_Install_key_s
call fcn.00449974
push 0x40
lea eax, [ebp - 0x17b4]
push ebx
push eax
call fcn.00626f50
lea eax, [ebp - 0xbbc]
mov byte [ebp - 0x17b4], 0x37
mov dword [ebp - 0x17b0], eax
add esp, 0x24
mov eax, 0x3e8
mov word [ebp - 0x17ac], ax
lea eax, [ebp - 0x17b4]
push eax
call sub.NETAPI32.dll_Netbios
test al, al
je 0x41dbc8
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.PokerStarsGenKey
push str._s_Netbios___failed__Error0x_.8x
call fcn.00449974
add esp, 0xc
jmp 0x41dadf
mov esi, ebx
cmp byte [ebp - 0xbbc], bl
jbe 0x41dcf6
mov edi, 0x3e8
push 0x40
lea eax, [ebp - 0x17b4]
push ebx
push eax
call fcn.00626f50
mov al, byte [ebp + esi - 0xbbb]
add esp, 0xc
mov byte [ebp - 0x1784], al
lea eax, [ebp - 0x17b4]
mov byte [ebp - 0x17b4], 0x32
push eax
call sub.NETAPI32.dll_Netbios
test al, al
jne 0x41dce0
push 0x40
lea eax, [ebp - 0x17b4]
push ebx
push eax
call fcn.00626f50
push 0x10
lea eax, [ebp - 0x17aa]
push 0x20
push eax
call fcn.00626f50
mov al, byte [ebp + esi - 0xbbb]
add esp, 0x18
mov byte [ebp - 0x1784], al
lea eax, [ebp - 0x3ec]
mov dword [ebp - 0x17b0], eax
lea eax, [ebp - 0x17b4]
mov byte [ebp - 0x17b4], 0x33
push eax
mov byte [ebp - 0x17aa], 0x2a
mov word [ebp - 0x17ac], di
call sub.NETAPI32.dll_Netbios
test al, al
jne 0x41dce0
movzx eax, byte [ebp - 0x3e7]
push eax
movzx eax, byte [ebp - 0x3e8]
push eax
movzx eax, byte [ebp - 0x3e9]
push eax
movzx eax, byte [ebp - 0x3ea]
push eax
movzx eax, byte [ebp - 0x3eb]
push eax
movzx eax, byte [ebp - 0x3ec]
push eax
push str._02X_02X_02X_02X_02X_02X
lea eax, [ebp - 0x138c]
push edi
push eax
call fcn.00445d6d
add esp, 0x24
lea eax, [ebp - 0x138c]
push eax
push str.MAC_s_
push edi
push 0x7247a0
call fcn.00631510
pop ecx
add eax, 0x7247a0
push eax
call fcn.00445d6d
add esp, 0x10
movzx eax, byte [ebp - 0xbbc]
inc esi
cmp esi, eax
jl 0x41dbdb
mov edi, dword [ebp - 0x17bc]
mov esi, 0x7247a0
push esi
push str.Generated_Install__MAC_key_s
call fcn.00449974
pop ecx
pop ecx
mov eax, 0x3e8
push eax
lea eax, [ebp - 0x7d4]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryA]
push ebx
push ebx
push ebx
push ebx
lea eax, [ebp - 0x17b8]
mov byte [ebp - 0x7d1], bl
push eax
push ebx
push ebx
lea eax, [ebp - 0x7d4]
push eax
call dword [sym.imp.KERNEL32.dll_GetVolumeInformationA]
test eax, eax
jne 0x41dd55
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.PokerStarsGenKey
push str._s_GetVolumeInformation___failed__Error0x_.8x
jmp 0x41dbbb
push dword [ebp - 0x17b8]
mov ebx, 0x3e8
lea eax, [ebp - 0x1774]
push str._08X
push ebx
push eax
call fcn.00445d6d
add esp, 0x10
lea eax, [ebp - 0x1774]
push eax
push str.SYSVOL_s_
push ebx
push esi
call fcn.00631510
pop ecx
add eax, esi
push eax
call fcn.00445d6d
push esi
push str._nFinal_Key___s
call fcn.00449974
push esi
push dword [ebp + 0xc]
push edi
call fcn.006311ec
xor eax, eax
add esp, 0x24
inc eax
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.005fe955
leave
ret