Function at 0x420371
Capabilities:
Create directory
Get hostname

Disassembly:
push 0x288
mov eax, 0x4b9c42
call fcn.0048f706
mov esi, ecx
mov dword [ebp - 0x234], esi
mov ebx, dword [ebp + 8]
lea edi, [esi + 0x238]
push ebx
mov ecx, edi
mov dword [ebp - 0x214], edi
call fcn.00407390
cmp dword [eax + 0x16d8], 0
je 0x421322
mov eax, dword fs:[0x2c]
mov ecx, dword [0x50e854]
mov ecx, dword [eax + ecx*4]
mov eax, dword [0x505468]
cmp eax, dword [ecx + 4]
jg 0x42132a
push 0
call fcn.00499f21
pop ecx
mov ecx, eax
mov dword [ebp - 0x228], edx
mov eax, dword [esi + 0x408]
cdq
mov dword [ebp - 0x214], eax
mov eax, ecx
sub eax, dword [ebx*8 + 0x5051e8]
mov dword [ebp - 0x22c], ecx
mov ecx, dword [ebp - 0x228]
sbb ecx, dword [ebx*8 + 0x5051ec]
cmp ecx, edx
jl 0x421322
jg 0x42041b
cmp eax, dword [ebp - 0x214]
jb 0x421322
mov eax, dword [ebp - 0x22c]
lea ecx, [ebp - 0x244]
mov dword [ebx*8 + 0x5051e8], eax
mov eax, dword [ebp - 0x228]
mov dword [ebx*8 + 0x5051ec], eax
call fcn.004026b1
mov dword [ebp - 4], 1
lea ecx, [ebp - 0x238]
call fcn.004026b1
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x294]
call fcn.004734f1
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x21c]
call fcn.004026b1
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x220]
call fcn.004026b1
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x240]
call fcn.004026b1
mov byte [ebp - 4], 6
lea eax, [esi + 0x7304]
and dword [ebp - 0x230], 0
lea ecx, [ebp - 0x21c]
push eax
call fcn.00401717
mov esi, dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
push 0
push dword [ebp - 0x21c]
call esi
push ebx
mov ecx, edi
call fcn.00407390
add eax, 0x18a4
lea ecx, [ebp - 0x220]
push eax
call fcn.00401717
mov eax, dword [ebp - 0x220]
lea ecx, [ebp - 0x21c]
push dword [eax - 0xc]
push eax
call fcn.004029a9
push 0
push dword [ebp - 0x21c]
call esi
push ecx
lea eax, [ebp - 0x220]
mov dword [ebp - 0x224], esp
mov ecx, esp
push eax
call fcn.00401270
mov byte [ebp - 4], 7
lea eax, [ebp - 0x21c]
push ecx
mov ecx, esp
mov dword [ebp - 0x214], esp
push eax
call fcn.00401270
mov byte [ebp - 4], 8
push ebx
mov byte [ebp - 4], 6
mov ecx, dword [ebp - 0x234]
call fcn.00404fa3
lea eax, [ebp - 0x23c]
mov esi, 0x100
push eax
lea eax, [ebp - 0x210]
mov dword [ebp - 0x23c], esi
push eax
call dword [sym.imp.KERNEL32.dll_GetComputerNameW]
push 0x4c6744
lea eax, [ebp - 0x21c]
push eax
lea eax, [ebp - 0x218]
push eax
call fcn.00404d80
mov byte [ebp - 4], 9
push str.Smart.ini
push eax
lea eax, [ebp - 0x214]
push eax
call fcn.00404d80
mov byte [ebp - 4], 0xa
push dword [eax]
lea eax, [ebp - 0x210]
push eax
push str.ComputerName
push 0x4ce57c
call fcn.0043f205
add esp, 0x28
mov byte [ebp - 4], 9
mov ecx, dword [ebp - 0x214]
lea ecx, [ecx - 0x10]
call fcn.00401fe9
mov byte [ebp - 4], 6
mov ecx, dword [ebp - 0x218]
lea ecx, [ecx - 0x10]
call fcn.00401fe9
push 0x4c6744
lea eax, [ebp - 0x21c]
push eax
lea eax, [ebp - 0x218]
push eax
call fcn.00404d80
mov byte [ebp - 4], 0xd
push str.Smart.ini
push eax
lea eax, [ebp - 0x214]
push eax
call fcn.00404d80
mov byte [ebp - 4], 0xe
push dword [eax]
lea eax, [ebp - 0x210]
push esi
push eax
push 0x4c5940
push str.Date
push dword [ebp - 0x220]
call fcn.0043f0d0
add esp, 0x30
mov byte [ebp - 4], 0xd
mov ecx, dword [ebp - 0x214]
lea ecx, [ecx - 0x10]
call fcn.00401fe9
mov byte [ebp - 4], 6
mov ecx, dword [ebp - 0x218]
lea ecx, [ecx - 0x10]
call fcn.00401fe9
lea eax, [ebp - 0x210]
push eax
call fcn.00494153
pop ecx
push eax
lea eax, [ebp - 0x210]
push eax
lea ecx, [ebp - 0x238]
call fcn.00402053
mov eax, dword [ebp - 0x238]
cmp dword [eax - 0xc], 0
jne 0x420821
push str._Y__m__d__H:_M:_S
lea eax, [ebp - 0x214]
mov dword [ebp - 0x230], 1
push eax
lea ecx, [ebp - 0x22c]
call fcn.0041f0fa
mov byte [ebp - 4], 0x11
mov ecx, eax
call fcn.0040b79b
push eax
push 0x4c6a74
lea eax, [ebp - 0x210]
push esi
push eax
call fcn.0042429c
add esp, 0x10
mov byte [ebp - 4], 6
mov ecx, dword [ebp - 0x214]
lea ecx, [ecx - 0x10]
call fcn.00401fe9
push 0x4c6744
lea eax, [ebp - 0x21c]
push eax
lea eax, [ebp - 0x224]
push eax
call fcn.00404d80
mov byte [ebp - 4], 0x13
push str.Smart.ini
push eax
lea eax, [ebp - 0x218]
push eax
call fcn.00404d80
mov esi, eax
mov byte [ebp - 4], 0x14
lea eax, [ebp - 0x220]
push str.FIRST
push eax
lea eax, [ebp - 0x214]
push eax
call fcn.00404d80
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x210]
push dword [esi]
push ecx
push str.Date
push dword [eax]
call fcn.0043f205
add esp, 0x34
mov byte [ebp - 4], 0x14
mov ecx, dword [ebp - 0x214]
lea ecx, [ecx - 0x10]
call fcn.00401fe9
mov byte [ebp - 4], 0x13
mov ecx, dword [ebp - 0x218]
lea ecx, [ecx - 0x10]
call fcn.00401fe9
mov byte [ebp - 4], 6
mov ecx, dword [ebp - 0x224]
lea ecx, [ecx - 0x10]
call fcn.00401fe9
push ebx
mov ecx, edi
call fcn.00407390
push dword [eax + 0x1814]
lea eax, [ebp - 0x210]
push 0x4c6748
push 0x100
push eax
call fcn.0042429c
lea eax, [ebp - 0x21c]
push 0x4c6744
push eax
lea eax, [ebp - 0x218]
push eax
call fcn.00404d80
mov byte [ebp - 4], 0x19
push str.Smart.ini
push eax
lea eax, [ebp - 0x214]
push eax
call fcn.00404d80
mov esi, eax
mov byte [ebp - 4], 0x1a
lea eax, [ebp - 0x220]
push str.FIRST
push eax
lea eax, [ebp - 0x224]
push eax
call fcn.00404d80
mov byte [ebp - 4], 0x1b
lea ecx, [ebp - 0x210]
push dword [esi]
push ecx
push str.HealthStatus
push dword [eax]
call fcn.0043f205
add esp, 0x44
mov byte [ebp - 4], 0x1a
mov ecx, dword [ebp - 0x224]
lea ecx, [ecx - 0x10]
call fcn.00401fe9
mov byte [ebp - 4], 0x19
mov ecx, dword [ebp - 0x214]
lea ecx, [ecx - 0x10]
call fcn.00401fe9
mov byte [ebp - 4], 6
mov ecx, dword [ebp - 0x218]
lea ecx, [ecx - 0x10]
call fcn.00401fe9
push 0x4c6744
lea eax, [ebp - 0x21c]
push eax
lea eax, [ebp - 0x218]
push eax
call fcn.00404d80
mov byte [ebp - 4], 0x1f
push str.Smart.ini
push eax
lea eax, [ebp - 0x214]
push eax
call fcn.00404d80
mov esi, eax
mov byte [ebp - 4], 0x20
lea eax, [ebp - 0x220]
push str.THRESHOLD
push eax
lea eax, [ebp - 0x224]
push eax
call fcn.00404d80
mov byte [ebp - 4], 0x21
lea ecx, [ebp - 0x210]
push dword [esi]
push 0x100
push ecx
push 0x4c5940
push 0x4ce5c0
push dword [eax]
call fcn.0043f0d0
add esp, 0x3c
mov byte [ebp - 4], 0x20
mov ecx, dword [ebp - 0x224]
lea ecx, [ecx - 0x10]
call fcn.00401fe9
mov byte [ebp - 4], 0x1f
mov ecx, dword [ebp - 0x214]
lea ecx, [ecx - 0x10]
call fcn.00401fe9
mov byte [ebp - 4], 6
mov ecx, dword [ebp - 0x218]
lea ecx, [ecx - 0x10]
call fcn.00401fe9
lea eax, [ebp - 0x210]
push eax
call fcn.00494153
pop ecx
push eax
lea eax, [ebp - 0x210]
push eax
lea ecx, [ebp - 0x238]
call fcn.00402053
mov eax, dword [ebp - 0x238]
cmp dword [eax - 0xc], 0
jne 0x420900
xor esi, esi
inc esi
mov dword [ebp - 0x230], esi
jmp 0x420906
mov esi, dword [ebp - 0x230]
push str._Y__m__d__H:_M:_S
lea eax, [ebp - 0x224]
push eax
lea ecx, [ebp - 0x22c]
call fcn.0041f0fa
mov byte [ebp - 4], 0x25
mov ecx, eax
call fcn.0040b79b
push eax
push 0x4c6a74
lea eax, [ebp - 0x210]
push 0x100
push eax
call fcn.0042429c
add esp, 0x10
mov byte [ebp - 4], 6
mov ecx, dword [ebp - 0x224]
lea ecx, [ecx - 0x10]
call fcn.00401fe9
push 0x4c6744
lea eax, [ebp - 0x21c]
push eax
lea eax, [ebp - 0x214]
push eax
call fcn.00404d80
mov byte [ebp - 4], 0x27
push str.Smart.ini
push eax
lea eax, [ebp - 0x224]
push eax
call fcn.00404d80
mov byte [ebp - 4], 0x28
push dword [eax]
lea eax, [ebp - 0x210]
push eax
push str.Date
push dword [ebp - 0x220]
call fcn.0043f205
add esp, 0x28
mov byte [ebp - 4], 0x27
mov ecx, dword [ebp - 0x224]
lea ecx, [ecx - 0x10]
call fcn.00401fe9
mov byte [ebp - 4], 6
mov ecx, dword [ebp - 0x214]
lea ecx, [ecx - 0x10]
call fcn.00401fe9
push ebx
mov ecx, edi
call fcn.00407390
push dword [eax + 0x1814]
lea eax, [ebp - 0x210]
push 0x4c6748
push 0x100
push eax
call fcn.0042429c
push 0x4c6744
lea eax, [ebp - 0x21c]
push eax
lea eax, [ebp - 0x214]
push eax
call fcn.00404d80
mov byte [ebp - 4], 0x2b
push str.Smart.ini
push eax
lea eax, [ebp - 0x224]
push eax
call fcn.00404d80
mov byte [ebp - 4], 0x2c
push dword [eax]
lea eax, [ebp - 0x210]
push eax
push str.HealthStatus
push dword [ebp - 0x220]
call fcn.0043f205
add esp, 0x38
mov byte [ebp - 4], 0x2b
mov ecx, dword [ebp - 0x224]
lea ecx, [ecx - 0x10]
call fcn.00401fe9
mov byte [ebp - 4], 6
mov ecx, dword [ebp - 0x214]
lea ecx, [ecx - 0x10]
call fcn.00401fe9
push ebx
mov ecx, edi
call fcn.00407390
cmp dword [eax + 0x17c4], 0xfffffed4
jle 0x420ae9
push 0
push esi
push ebx
mov ecx, edi
call fcn.00407390
push dword [eax + 0x17c4]
push dword [ebp - 0x228]
push dword [ebp - 0x22c]
push ecx
mov ecx, esp
mov dword [ebp - 0x224], esp
push 0x4cbce4
call fcn.004012a3
mov byte [ebp - 4], 0x2f
lea eax, [ebp - 0x220]
push ecx
mov ecx, esp
mov dword [ebp - 0x214], esp
push eax
call fcn.00401270
mov byte [ebp - 4], 0x30
lea eax, [ebp - 0x21c]
push ecx
mov ecx, esp
mov dword [ebp - 0x218], esp
push eax
call fcn.00401270
mov byte [ebp - 4], 0x31
mov byte [ebp - 4], 6
mov esi, dword [ebp - 0x234]
mov ecx, esi
call fcn.00418868
jmp 0x420aef
mov esi, dword [ebp - 0x234]
push ebx
mov ecx, edi
call fcn.00407390
xor ecx, ecx
cmp dword [eax + 0x17b4], ecx
jle 0x420b7e
cmp dword [esi + 0x7330], ecx
jne 0x420b7e
push ecx
push dword [ebp - 0x230]
mov ecx, edi
push ebx
call fcn.00407390
push dword [eax + 0x17b4]
push dword [ebp - 0x228]
push dword [ebp - 0x22c]
push ecx
mov ecx, esp
mov dword [ebp - 0x224], esp
push str.PowerOnHours
call fcn.004012a3
mov byte [ebp - 4], 0x32
lea eax, [ebp - 0x220]
push ecx
mov ecx, esp
mov dword [ebp - 0x214], esp
push eax
call fcn.00401270
mov byte [ebp - 4], 0x33
lea eax, [ebp - 0x21c]
push ecx
mov ecx, esp
mov dword [ebp - 0x218], esp
push eax
call fcn.00401270
mov byte [ebp - 4], 0x34
mov byte [ebp - 4], 6
mov ecx, esi
call fcn.00418868
push ebx
mov ecx, edi
call fcn.00407390
push 0
push dword [ebp - 0x230]
mov ecx, edi
push ebx
call fcn.00407390
push dword [eax + 0x17c0]
push dword [ebp - 0x228]
push dword [ebp - 0x22c]
push ecx
mov ecx, esp
mov dword [ebp - 0x224], esp
push str.PowerOnCount
call fcn.004012a3
mov byte [ebp - 4], 0x35
lea eax, [ebp - 0x220]
push ecx
mov ecx, esp
mov dword [ebp - 0x214], esp
push eax
call fcn.00401270
mov byte [ebp - 4], 0x36
lea eax, [ebp - 0x21c]
push ecx
mov ecx, esp
mov dword [ebp - 0x218], esp
push eax
call fcn.00401270
mov byte [ebp - 4], 0x37
mov byte [ebp - 4], 6
mov ecx, esi
call fcn.00418868
push ebx
mov ecx, edi
call fcn.00407390
cmp dword [eax + 0x17e8], 0
jl 0x420c83
push 0
push dword [ebp - 0x230]
mov ecx, edi
push ebx
call fcn.00407390
push dword [eax + 0x17e8]
push dword [ebp - 0x228]
push dword [ebp - 0x22c]
push ecx
mov ecx, esp
mov dword [ebp - 0x224], esp
push 0x4c90d8
call fcn.004012a3
mov byte [ebp - 4], 0x38
lea eax, [ebp - 0x220]
push ecx
mov ecx, esp
mov dword [ebp - 0x214], esp
push eax
call fcn.00401270
mov byte [ebp - 4], 0x39
lea eax, [ebp - 0x21c]
push ecx
mov ecx, esp
mov dword [ebp - 0x218], esp
push eax
call fcn.00401270
mov byte [ebp - 4], 0x3a
mov byte [ebp - 4], 6
mov ecx, esi
call fcn.00418868
push ebx
mov ecx, edi
call fcn.00407390
cmp dword [eax + 0x17d4], 0
jl 0x420d0a
push 0
push dword [ebp - 0x230]
mov ecx, edi
push ebx
call fcn.00407390
push dword [eax + 0x17d4]
push dword [ebp - 0x228]
push dword [ebp - 0x22c]
push ecx
mov ecx, esp
mov dword [ebp - 0x224], esp
push str.HostWrites
call fcn.004012a3
mov byte [ebp - 4], 0x3b
lea eax, [ebp - 0x220]
push ecx
mov ecx, esp
mov dword [ebp - 0x214], esp
push eax
call fcn.00401270
mov byte [ebp - 4], 0x3c
lea eax, [ebp - 0x21c]
push ecx
mov ecx, esp
mov dword [ebp - 0x218], esp
push eax
call fcn.00401270
mov byte [ebp - 4], 0x3d
mov byte [ebp - 4], 6
mov ecx, esi
call fcn.00418868
push ebx
mov ecx, edi
call fcn.00407390
cmp dword [eax + 0x17d8], 0
jl 0x420d91
push 0
push dword [ebp - 0x230]
mov ecx, edi
push ebx
call fcn.00407390
push dword [eax + 0x17d8]
push dword [ebp - 0x228]
push dword [ebp - 0x22c]
push ecx
mov ecx, esp
mov dword [ebp - 0x224], esp
push str.HostReads
call fcn.004012a3
mov byte [ebp - 4], 0x3e
lea eax, [ebp - 0x220]
push ecx
mov ecx, esp
mov dword [ebp - 0x214], esp
push eax
call fcn.00401270
mov byte [ebp - 4], 0x3f
lea eax, [ebp - 0x21c]
push ecx
mov ecx, esp
mov dword [ebp - 0x218], esp
push eax
call fcn.00401270
mov byte [ebp - 4], 0x40
mov byte [ebp - 4], 6
mov ecx, esi
call fcn.00418868
push ebx
mov ecx, edi
call fcn.00407390
cmp dword [eax + 0x17e0], 0
jl 0x420e18
push 0
push dword [ebp - 0x230]
mov ecx, edi
push ebx
call fcn.00407390
push dword [eax + 0x17e0]
push dword [ebp - 0x228]
push dword [ebp - 0x22c]
push ecx
mov ecx, esp
mov dword [ebp - 0x224], esp
push str.NandWrites
call fcn.004012a3
mov byte [ebp - 4], 0x41
lea eax, [ebp - 0x220]
push ecx
mov ecx, esp
mov dword [ebp - 0x214], esp
push eax
call fcn.00401270
mov byte [ebp - 4], 0x42
lea eax, [ebp - 0x21c]
push ecx
mov ecx, esp
mov dword [ebp - 0x218], esp
push eax
call fcn.00401270
mov byte [ebp - 4], 0x43
mov byte [ebp - 4], 6
mov ecx, esi
call fcn.00418868
push ebx
mov ecx, edi
call fcn.00407390
cmp dword [eax + 0x17dc], 0
jl 0x420e9f
push 0
push dword [ebp - 0x230]
mov ecx, edi
push ebx
call fcn.00407390
push dword [eax + 0x17dc]
push dword [ebp - 0x228]
push dword [ebp - 0x22c]
push ecx
mov ecx, esp
mov dword [ebp - 0x224], esp
push str.GBytesErased
call fcn.004012a3
mov byte [ebp - 4], 0x44
lea eax, [ebp - 0x220]
push ecx
mov ecx, esp
mov dword [ebp - 0x214], esp
push eax
call fcn.00401270
mov byte [ebp - 4], 0x45
lea eax, [ebp - 0x21c]
push ecx
mov ecx, esp
mov dword [ebp - 0x218], esp
push eax
call fcn.00401270
mov byte [ebp - 4], 0x46
mov byte [ebp - 4], 6
mov ecx, esi
call fcn.00418868
push ebx
mov ecx, edi
call fcn.00407390
cmp dword [eax + 0x17e4], 0
jl 0x420f26
push 0
push dword [ebp - 0x230]
mov ecx, edi
push ebx
call fcn.00407390
push dword [eax + 0x17e4]
push dword [ebp - 0x228]
push dword [ebp - 0x22c]
push ecx
mov ecx, esp
mov dword [ebp - 0x224], esp
push str.WearLevelingCount
call fcn.004012a3
mov byte [ebp - 4], 0x47
lea eax, [ebp - 0x220]
push ecx
mov ecx, esp
mov dword [ebp - 0x214], esp
push eax
call fcn.00401270
mov byte [ebp - 4], 0x48
lea eax, [ebp - 0x21c]
push ecx
mov ecx, esp
mov dword [ebp - 0x218], esp
push eax
call fcn.00401270
mov byte [ebp - 4], 0x49
mov byte [ebp - 4], 6
mov ecx, esi
call fcn.00418868
xor ecx, ecx
mov dword [ebp - 0x214], ecx
mov ecx, edi
push ebx
call fcn.00407390
cmp dword [eax + 0x17ac], 0
jbe 0x4212b9
and dword [ebp - 0x218], 0
push ebx
mov ecx, edi
call fcn.00407390
mov ecx, dword [ebp - 0x218]
movzx eax, byte [eax + ecx + 0x1400]
push eax
lea eax, [ebp - 0x238]
push str._02X
push eax
call fcn.00402a35
add esp, 0xc
mov ecx, edi
push ebx
call fcn.00407390
mov ecx, dword [ebp - 0x218]
movzx eax, byte [ecx + eax + 0x1569]
mov ecx, edi
push eax
push dword [ebp - 0x230]
push ebx
call fcn.00407390
mov ecx, dword [ebp - 0x218]
movzx eax, byte [ecx + eax + 0x1403]
push eax
push dword [ebp - 0x228]
lea eax, [ebp - 0x238]
push dword [ebp - 0x22c]
push ecx
mov ecx, esp
mov dword [ebp - 0x224], esp
push eax
call fcn.00401270
mov byte [ebp - 4], 0x4a
lea eax, [ebp - 0x220]
push ecx
mov ecx, esp
mov dword [ebp - 0x248], esp
push eax
call fcn.00401270
mov byte [ebp - 4], 0x4b
lea eax, [ebp - 0x21c]
push ecx
mov ecx, esp
mov dword [ebp - 0x24c], esp
push eax
call fcn.00401270
mov byte [ebp - 4], 0x4c
mov byte [ebp - 4], 6
mov ecx, esi
call fcn.00418868
push ebx
mov ecx, edi
call fcn.00407390
mov ecx, dword [ebp - 0x218]
movzx eax, byte [ecx + eax + 0x1400]
sub eax, 5
je 0x4211f6
sub eax, 0xbf
je 0x421166
sub eax, 1
je 0x4210d6
sub eax, 1
jne 0x421292
push eax
push dword [ebp - 0x230]
mov ecx, edi
push ebx
call fcn.00407390
push ebx
mov ecx, edi
mov esi, eax
call fcn.00407390
mov edx, dword [ebp - 0x218]
movzx ecx, byte [edx + esi + 0x1406]
movzx eax, byte [edx + eax + 0x1405]
shl ecx, 8
or ecx, eax
push ecx
push dword [ebp - 0x228]
push dword [ebp - 0x22c]
push ecx
mov ecx, esp
mov dword [ebp - 0x250], esp
push str.UncorrectableSectorCount
call fcn.004012a3
mov byte [ebp - 4], 0x56
lea eax, [ebp - 0x220]
push ecx
mov ecx, esp
mov dword [ebp - 0x254], esp
push eax
call fcn.00401270
mov byte [ebp - 4], 0x57
lea eax, [ebp - 0x21c]
push ecx
mov ecx, esp
mov dword [ebp - 0x258], esp
push eax
call fcn.00401270
mov byte [ebp - 4], 0x58
jmp 0x421281
push 0
push dword [ebp - 0x230]
mov ecx, edi
push ebx
call fcn.00407390
push ebx
mov ecx, edi
mov esi, eax
call fcn.00407390
mov edx, dword [ebp - 0x218]
movzx ecx, byte [edx + esi + 0x1406]
movzx eax, byte [edx + eax + 0x1405]
shl ecx, 8
or ecx, eax
push ecx
push dword [ebp - 0x228]
push dword [ebp - 0x22c]
push ecx
mov ecx, esp
mov dword [ebp - 0x25c], esp
push str.CurrentPendingSectorCount
call fcn.004012a3
mov byte [ebp - 4], 0x53
lea eax, [ebp - 0x220]
push ecx
mov ecx, esp
mov dword [ebp - 0x260], esp
push eax
call fcn.00401270
mov byte [ebp - 4], 0x54
lea eax, [ebp - 0x21c]
push ecx
mov ecx, esp
mov dword [ebp - 0x264], esp
push eax
call fcn.00401270
mov byte [ebp - 4], 0x55
jmp 0x421281
push 0
push dword [ebp - 0x230]
mov ecx, edi
push ebx
call fcn.00407390
push ebx
mov ecx, edi
mov esi, eax
call fcn.00407390
mov edx, dword [ebp - 0x218]
movzx ecx, byte [edx + esi + 0x1406]
movzx eax, byte [edx + eax + 0x1405]
shl ecx, 8
or ecx, eax
push ecx
push dword [ebp - 0x228]
push dword [ebp - 0x22c]
push ecx
mov ecx, esp
mov dword [ebp - 0x268], esp
push str.ReallocationEventCount
call fcn.004012a3
mov byte [ebp - 4], 0x50
lea eax, [ebp - 0x220]
push ecx
mov ecx, esp
mov dword [ebp - 0x26c], esp
push eax
call fcn.00401270
mov byte [ebp - 4], 0x51
lea eax, [ebp - 0x21c]
push ecx
mov ecx, esp
mov dword [ebp - 0x270], esp
push eax
call fcn.00401270
mov byte [ebp - 4], 0x52
jmp 0x421281
push 0
push dword [ebp - 0x230]
mov ecx, edi
push ebx
call fcn.00407390
push ebx
mov ecx, edi
mov esi, eax
call fcn.00407390
mov edx, dword [ebp - 0x218]
movzx ecx, byte [edx + esi + 0x1406]
movzx eax, byte [edx + eax + 0x1405]
shl ecx, 8
or ecx, eax
push ecx
push dword [ebp - 0x228]
push dword [ebp - 0x22c]
push ecx
mov ecx, esp
mov dword [ebp - 0x274], esp
push str.ReallocatedSectorsCount
call fcn.004012a3
mov byte [ebp - 4], 0x4d
lea eax, [ebp - 0x220]
push ecx
mov ecx, esp
mov dword [ebp - 0x278], esp
push eax
call fcn.00401270
mov byte [ebp - 4], 0x4e
lea eax, [ebp - 0x21c]
push ecx
mov ecx, esp
mov dword [ebp - 0x27c], esp
push eax
call fcn.00401270
mov byte [ebp - 4], 0x4f
mov byte [ebp - 4], 6
mov esi, dword [ebp - 0x234]
mov ecx, esi
call fcn.00418868
inc dword [ebp - 0x214]
mov ecx, edi
add dword [ebp - 0x218], 0xc
push ebx
call fcn.00407390
mov ecx, dword [ebp - 0x214]
cmp ecx, dword [eax + 0x17ac]
jb 0x420f4a
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x240]
lea ecx, [ecx - 0x10]
call fcn.00401fe9
mov byte [ebp - 4], 4
mov ecx, dword [ebp - 0x220]
lea ecx, [ecx - 0x10]
call fcn.00401fe9
mov byte [ebp - 4], 3
mov ecx, dword [ebp - 0x21c]
lea ecx, [ecx - 0x10]
call fcn.00401fe9
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x294]
call fcn.00473513
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0x238]
lea ecx, [ecx - 0x10]
call fcn.00401fe9
or dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x244]
lea ecx, [ecx - 0x10]
call fcn.00401fe9
call fcn.0048f6b5
ret 4
push 0x505468
call fcn.0048f36c
cmp dword [0x505468], 0xffffffff
pop ecx
jne 0x4203cc
xor eax, eax
mov dword [ebp - 4], eax
mov edi, 0x5051e8
mov esi, edi
mov ecx, 0x9e
mov dword [edi], eax
mov dword [edi + 4], eax
add edi, 8
rep movsd dword es:[edi], dword [esi]
or dword [ebp - 4], 0xffffffff
push 0x505468
call fcn.0048f322
mov edi, dword [ebp - 0x214]
mov esi, dword [ebp - 0x234]
pop ecx
jmp 0x4203cc