Function at 0x41dfa0
Capabilities:
Get common file path
Get disk information

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x195c
call fcn.00418800
push esi
push edi
mov dword [ebp - 0x14c], 0x5036d8c3
mov dword [ebp - 0x84], 0x500a2b28
mov dword [ebp - 0xe0], 0x4944c4e2
mov dword [ebp - 0x128], 0x41ae6756
mov dword [ebp - 0x144], 0x6a01f19e
mov dword [ebp - 0x120], 0x2d8161b6
mov dword [ebp - 0x170], 0x539b4fcc
mov dword [ebp - 0xbc], 0x15cefcd
mov dword [ebp - 0x18c], 0x2ec26f1
mov dword [ebp - 0x38], 0x354af6dd
mov dword [ebp - 0xd8], 0x28d4264c
mov dword [ebp - 0x24], 0x791e0c0b
mov dword [ebp - 0x168], 0x468011b3
mov dword [ebp - 0xd0], 0x72be8f6e
mov dword [ebp - 0x48], 0x223bc88c
mov dword [ebp - 0x30], 0x6ba52f78
mov dword [ebp - 8], 0x1f032615
mov dword [ebp - 0x64], 0x6f9f335c
mov dword [ebp - 0xf0], 0x49d3af6f
mov dword [ebp - 0x118], 0x495253c1
mov dword [ebp - 0x104], 0x3669dab0
mov dword [ebp - 0xa4], 0x7c6c57ce
mov dword [ebp - 0x28], 0x79f179c2
mov dword [ebp - 0x88], 0x3387c529
mov dword [ebp - 0x110], 0x773ecc6c
mov dword [ebp - 0x80], 0x606dbb4
mov dword [ebp - 0x134], 0x31a35271
mov dword [ebp - 0x78], 0x313622b8
mov dword [ebp - 0x160], 0x7c0c4eab
mov dword [ebp - 0x16c], 0x2322cc18
mov dword [ebp - 0x9c], 0x7e3034a0
mov dword [ebp - 0x108], 0x3934673
mov dword [ebp - 0x40], 0x4dd7bee8
mov dword [ebp - 0x188], 0x46880f92
mov dword [ebp - 0x158], 0x7cb1149f
mov dword [ebp - 0xf4], 0x43323292
mov dword [ebp - 0x3c], 0x3aeca9f0
mov dword [ebp - 0x164], 0x8612ec9
mov dword [ebp - 0xe8], 0x3143dc51
mov dword [ebp - 4], 0x42240deb
mov dword [ebp - 0x114], 0x2fb5ec4e
mov dword [ebp - 0x150], 0x4dc1ab56
mov dword [ebp - 0xe4], 0x169d09b2
mov dword [ebp - 0x10c], 0x591da9b7
mov dword [ebp - 0x154], 0x48fc072d
mov dword [ebp - 0x124], 0x4423411c
mov dword [ebp - 0x70], 0x5a94b877
mov dword [ebp - 0x7c], 0x53499e79
mov dword [ebp - 0x94], 0x7f293fe8
mov dword [ebp - 0x1c], 0x65b0c5dd
mov dword [ebp - 0xdc], 0x23cdca5
mov dword [ebp - 0x15c], 0x69d0fa03
mov dword [ebp - 0xcc], 0x558026c6
mov dword [ebp - 0xb4], 0x706aefd1
mov dword [ebp - 0x190], 0x5fe3c5db
mov dword [ebp - 0x5c], 0x4cab1bc2
mov dword [ebp - 0x20], 0x7b701b90
mov dword [ebp - 0x174], 0x5061d5aa
mov dword [ebp - 0x17c], 0x72ade29f
mov dword [ebp - 0x18], 0x26315858
mov dword [ebp - 0x148], 0x2c2b3e19
mov dword [ebp - 0x10], 0x327a079c
mov dword [ebp - 0xc8], 0x6f5ec5d7
mov dword [ebp - 0x14], 0x408adbae
mov dword [ebp - 0x100], 0x58798c10
mov dword [ebp - 0x140], 0x69db806b
mov dword [ebp - 0x68], 0x76991408
mov dword [ebp - 0x34], 0x6676fcc7
mov dword [ebp - 0xc0], 0x326474ef
mov dword [ebp - 0x12c], 0x6f89eb3e
mov dword [ebp - 0x13c], 0x10d291e2
sub dword [ebp - 0x84], 0x7ed8960d
add dword [ebp - 0x128], 0xb5ae8ad
mov eax, 0x14c5017b
mul dword [ebp - 0x14c]
mov eax, dword [ebp - 0x14c]
mov eax, 0x25d9a821
mul dword [ebp - 0x84]
mov eax, dword [ebp - 0x84]
add dword [ebp - 0x84], 0x63fa6290
sub dword [ebp - 0xe0], 0x43e79b23
sub dword [ebp - 0x144], 0x7a367504
mov eax, 0x784abdc
mul dword [ebp - 0xe0]
mov eax, dword [ebp - 0xe0]
mov eax, 0x677db5e6
mul dword [ebp - 0x144]
mov eax, dword [ebp - 0x144]
sub dword [ebp - 0xd8], 0x150e657d
sub dword [ebp - 0x24], 0x7ec4712c
sub dword [ebp - 0x84], 0x6209dacf
sub dword [ebp - 0x144], 0x72224a7b
mov eax, 0x63923224
mul dword [ebp - 0xbc]
mov eax, dword [ebp - 0xbc]
mov eax, 0x622d4a52
mul dword [ebp - 0x120]
mov eax, dword [ebp - 0x120]
mov esi, dword [sym.imp.USER32.dll_CharUpperA]
mov edi, 0x3784fe
jmp 0x41e300
push 0
call esi
dec edi
jne 0x41e300
mov eax, dword [0x438f38]
mov dword [0x8e42ac], eax
mov dword [ebp - 0xb8], 0x2bcfcc82
mov dword [ebp - 0x74], 0x673196b1
mov dword [ebp - 0xac], 0x75e0cae9
mov dword [ebp - 0xc4], 0x6dab8e60
mov dword [ebp - 0xb0], 0x2cc5ed11
mov dword [ebp - 0x138], 0x1eab5e02
mov dword [ebp - 0xa8], 0x28cbd5df
mov dword [ebp - 0xec], 0x4fa641e7
mov dword [ebp - 0x11c], 0x30315a5f
mov dword [ebp - 0x180], 0x396063ba
mov dword [ebp - 0x4c], 0x495829e1
mov dword [ebp - 0x8c], 0x33771c2a
mov dword [ebp - 0xa0], 0xe54b20c
mov dword [ebp - 0x194], 0x4762ad7a
mov dword [ebp - 0x98], 0x6af30bb4
mov dword [ebp - 0x54], 0x26b6d8d0
mov dword [ebp - 0x130], 0x4ccbff2a
mov dword [ebp - 0x178], 0x35af7d3b
mov dword [ebp - 0x44], 0x3df9b597
mov dword [ebp - 0x60], 0x29747ee7
mov dword [ebp - 0x58], 0x763c05a
mov dword [ebp - 0x50], 0x52c0c272
mov dword [ebp - 0xc], 0x48b62c94
mov dword [ebp - 0x6c], 0x42d89a24
mov dword [ebp - 0xfc], 0x76bcb073
mov dword [ebp - 0xd4], 0x6ebbec3d
mov dword [ebp - 0xf8], 0x7b08df9f
mov dword [ebp - 0x2c], 0x2bb78919
mov dword [ebp - 0x90], 0x6c684c6
mov dword [ebp - 0x184], 0x27710280
add dword [ebp - 0xac], 0x5e1af9db
mov eax, 0x68e7e679
mul dword [ebp - 0xb8]
mov eax, dword [ebp - 0xb8]
mov eax, 0x3061eb7
mul dword [ebp - 0x74]
mov eax, dword [ebp - 0x74]
sub dword [ebp - 0xac], 0x7d2b96dc
add dword [ebp - 0x74], 0x40b31b72
mov eax, 0x792b7a4e
mul dword [ebp - 0xa8]
mov eax, dword [ebp - 0xa8]
add dword [ebp - 0xb0], 0x3e8a2bba
sub dword [ebp - 0xb0], 0x6ec553a1
add dword [ebp - 0xb0], 0x661f97e2
sub dword [ebp - 0xec], 0x232c02ce
mov eax, 0x58e6ab34
mul dword [ebp - 0xb8]
mov eax, dword [ebp - 0xb8]
mov eax, 0x5127c8ba
mul dword [ebp - 0xec]
mov eax, dword [ebp - 0xec]
mov eax, 0x10eae46e
mul dword [ebp - 0x138]
mov eax, dword [ebp - 0x138]
mov eax, 0x2a8ecc42
mul dword [ebp - 0xa8]
mov eax, dword [ebp - 0xa8]
add dword [ebp - 0xac], 0x4597b7ed
add dword [ebp - 0xac], 0xb54d957
mov eax, 0x2bae14bd
mul dword [ebp - 0xac]
mov eax, dword [ebp - 0xac]
mov eax, 0x79bd3a7
mul dword [ebp - 0xec]
mov eax, dword [ebp - 0xec]
add dword [ebp - 0xac], 0x57f33cdb
add dword [ebp - 0x4c], 0x584b802d
sub dword [ebp - 0x4c], 0x659ab47d
mov eax, 0x56427f23
mul dword [ebp - 0x8c]
mov eax, dword [ebp - 0x8c]
sub dword [ebp - 0x138], 0x53989b3c
add dword [ebp - 0xc4], 0x287e1c07
mov eax, 0x7e4b79b0
mul dword [ebp - 0x11c]
mov eax, dword [ebp - 0x11c]
sub dword [ebp - 0x74], 0xe2e90b7
mov eax, 0x46d8feea
mul dword [ebp - 0x54]
mov eax, dword [ebp - 0x54]
add dword [ebp - 0x178], 0x1a281244
add dword [ebp - 0x138], 0x25dd4ade
mov eax, 0x7f52ef
mul dword [ebp - 0xc4]
mov eax, dword [ebp - 0xc4]
add dword [ebp - 0xa8], 0x18a23835
sub dword [ebp - 0xc4], 0x5028da4c
mov eax, 0x68dfeecd
mul dword [ebp - 0x44]
mov eax, dword [ebp - 0x44]
mov eax, 0x38405d58
mul dword [ebp - 0xec]
mov eax, dword [ebp - 0xec]
sub dword [ebp - 0x4c], 0x3f746347
mov eax, 0x79f0348
mul dword [ebp - 0x194]
mov eax, dword [ebp - 0x194]
sub dword [ebp - 0xa8], 0x4e8d97cb
sub dword [ebp - 0xd4], 0x73d0e8cd
add dword [ebp - 0x194], 0x22f7d29f
mov eax, 0x7f7bca1e
mul dword [ebp - 0x11c]
mov eax, dword [ebp - 0x11c]
sub dword [ebp - 0x54], 0x4c93b590
add dword [ebp - 0x11c], 0x72f353a5
add dword [ebp - 0xa8], 0x317e29c7
mov eax, 0x6b0b2885
mul dword [ebp - 0x8c]
mov eax, dword [ebp - 0x8c]
sub dword [ebp - 0xb0], 0x3720a29
sub dword [ebp - 0xd4], 0x17514662
sub dword [ebp - 0xb8], 0x5cadf727
mov eax, 0x6e3e104f
mul dword [ebp - 0xa8]
mov eax, dword [ebp - 0xa8]
add dword [ebp - 0x180], 0x9848243
mov eax, 0x72ae399c
mul dword [ebp - 0x194]
mov eax, dword [ebp - 0x194]
mov ecx, dword [0x438f2c]
mov dword [0x8e6a10], ecx
call fcn.0041d7a0
cmp dword [0x8e42ac], 0xc30
jne 0x41e76e
lea edx, [ebp - 0x30c]
push edx
push edi
push edi
call dword [sym.imp.KERNEL32.dll_GetCPInfoExA]
push edi
push edi
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
lea eax, [ebp - 0x55c]
push eax
push 0x404300
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
push edi
lea ecx, [ebp - 0x195c]
push ecx
push 0x404338
call dword [sym.imp.KERNEL32.dll_GetVolumeNameForVolumeMountPointW]
mov esi, dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push 0x404350
call esi
push edi
lea edx, [ebp - 0x198]
push edx
push edi
lea eax, [ebp - 0x95c]
push eax
push edi
mov edi, dword [sym.imp.KERNEL32.dll_WriteConsoleA]
call edi
push 0
lea ecx, [ebp - 0x115c]
push ecx
lea edx, [ebp - 0x1a0]
push edx
lea eax, [ebp - 0x1a8]
push eax
lea ecx, [ebp - 0x19c]
push ecx
lea edx, [ebp - 0x1a4]
push edx
push 0
call dword [sym.imp.KERNEL32.dll_GetNamedPipeHandleStateA]
lea eax, [ebp - 0x1f0]
push eax
call dword [sym.imp.KERNEL32.dll_GetStartupInfoW]
push 0
call esi
push 0
lea ecx, [ebp - 0x1ac]
push ecx
push 0
push 0
push 0
call edi
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_UpdateResourceW]
lea edx, [ebp - 0xd5c]
push edx
push 0
call dword [sym.imp.KERNEL32.dll_GetCurrentDirectoryA]
call dword [0x8e2aa4]
pop edi
xor eax, eax
pop esi
mov esp, ebp
pop ebp
ret 0x10