Function at 0x41901c
Capabilities:
Create thread
Get disk information

Disassembly:
mov eax, 0x477bcb
call fcn.00477780
sub esp, 0x278
push ebx
push esi
push edi
push 0xd0
call fcn.0041dfce
mov esi, eax
pop ecx
mov dword [ebp - 0x1c], esi
xor ebx, ebx
mov dword [ebp - 4], ebx
call fcn.0041ef6c
xor edi, edi
inc edi
cmp eax, edi
mov ecx, edi
cmova ecx, eax
push ecx
mov ecx, esi
call fcn.004033f9
or dword [ebp - 4], 0xffffffff
mov dword [0x4a308c], eax
mov eax, dword [0x4a3a68]
add eax, 0x6022
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
push 4
pop esi
test eax, eax
jle 0x419106
push 0x104
lea eax, [ebp - 0x284]
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea eax, [ebp - 0x284]
push eax
call dword [sym.imp.SHLWAPI.dll_PathRemoveFileSpecW]
xor eax, eax
mov dword [ebp - 0x28], ebx
mov word [ebp - 0x38], ax
lea ecx, [ebp - 0x38]
lea eax, [ebp - 0x284]
mov dword [ebp - 0x24], 7
push eax
call fcn.0041c3a6
push esi
push str.__
push ecx
lea ecx, [ebp - 0x38]
mov dword [ebp - 4], edi
call fcn.0041d596
push eax
lea ecx, [ebp - 0x50]
call fcn.0041bbca
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 3
call fcn.0041c310
cmp dword [ebp - 0x3c], 8
lea eax, [ebp - 0x50]
cmovae eax, dword [ebp - 0x50]
push eax
call fcn.00418cd7
or dword [ebp - 4], 0xffffffff
pop ecx
lea ecx, [ebp - 0x50]
call fcn.0041c310
jmp 0x41917e
mov edi, dword [0x4a3a68]
add edi, 0x3d90
cmp word [edi], bx
je 0x41917e
push edi
call dword [sym.imp.KERNEL32.dll_lstrlenW]
push edi
lea ecx, [ebp - 0x38]
mov esi, eax
call fcn.0041bbfd
push 4
pop ecx
push ecx
push str.__
mov dword [ebp - 4], ecx
push ecx
mov ecx, eax
call fcn.0041d596
push eax
lea ecx, [ebp - 0x50]
call fcn.0041bbca
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 6
call fcn.0041c310
cmp dword [ebp - 0x3c], 8
lea eax, [ebp - 0x50]
cmovae eax, dword [ebp - 0x50]
push eax
call fcn.00418cd7
or dword [ebp - 4], 0xffffffff
lea edi, [edi + esi*2]
pop ecx
lea ecx, [ebp - 0x50]
add edi, 2
call fcn.0041c310
cmp word [edi], bx
jne 0x419117
push 4
pop esi
mov eax, dword [0x4a3a68]
xor ecx, ecx
mov dword [ebp - 0x14], ebx
movzx eax, byte [eax + 0x4990]
mul esi
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.0041e25d
mov dword [ebp - 0x18], eax
lea esi, [ebp - 0x2c]
lea edi, [ebp - 0x78]
pop ecx
mov dword [eax], ebx
lea eax, [ebp - 0x7c]
mov dword [ebp - 0x2c], eax
lea eax, [ebp - 0x14]
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x18]
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x7c]
mov dword [ebp - 0x7c], vtable.std::_Func_impl_no_alloc_class__lambda_5ccd22ae5c90751566e2b65af4b67825___void__struct__NETRESOURCEW__.0
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov dword [ebp - 0x58], eax
mov dword [ebp - 4], 7
call dword [sym.imp.KERNEL32.dll_GetLogicalDrives]
mov ecx, dword [ebp - 0x14]
push 0x41
pop edi
push 0x1a
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x1c], 0x1a
pop edx
test al, 1
je 0x41928a
mov eax, dword [0x4a3a68]
inc dword [0x4a3a6c]
movzx eax, byte [eax + 0x4990]
cmp ecx, eax
jne 0x41923a
push 0xffffffffffffffff
push 1
push dword [ebp - 0x18]
push ecx
call dword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov esi, ebx
cmp dword [ebp - 0x14], esi
jbe 0x419237
mov eax, dword [ebp - 0x18]
push dword [eax + esi*4]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x18]
mov dword [eax + esi*4], ebx
inc esi
cmp esi, dword [ebp - 0x14]
jb 0x41921f
mov dword [ebp - 0x14], ebx
push 0x208
call fcn.0044b199
mov esi, eax
pop ecx
test esi, esi
je 0x419281
push edi
push str.__c:
push 0x104
push esi
call fcn.00402b62
add esp, 0x10
push ebx
push ebx
push esi
push fcn.00418cd7
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
mov dword [ecx + edx*4], eax
mov ecx, dword [ebp - 0x14]
inc ecx
mov dword [ebp - 0x14], ecx
jmp 0x419284
mov ecx, dword [ebp - 0x14]
mov edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x20]
shr eax, 1
inc edi
sub edx, 1
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x1c], edx
jne 0x4191ec
test ecx, ecx
je 0x4192c6
push 0xffffffffffffffff
push 1
push dword [ebp - 0x18]
push ecx
call dword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
cmp dword [ebp - 0x14], 0
jbe 0x4192c6
mov eax, dword [ebp - 0x18]
push dword [eax + ebx*4]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
inc ebx
cmp ebx, dword [ebp - 0x14]
jb 0x4192b4
push dword [ebp - 0x18]
call fcn.0041dfbd
call fcn.00403576
lea ecx, [ebp - 0x7c]
call fcn.0041accb
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
leave
ret