Function at 0x455330
Capabilities:
Create thread
Get disk size
Set registry value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1e4
mov eax, dword [0x4f22ec]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
mov edi, dword [sym.imp.USER32.dll_SendMessageW]
push 0
push 0
push 0x147
push dword [0x542e7c]
call edi
push 0xd0f
mov esi, eax
call fcn.0041afe0
add esp, 4
mov dword [ebp - 0x1b4], eax
push 0xd0e
call fcn.0041afe0
add esp, 4
mov dword [ebp - 0x1b0], eax
push 0xd10
call fcn.0041afe0
mov dword [ebp - 0x1ac], eax
add esp, 4
lea eax, [ebp - 0xa0]
mov dword [ebp - 0x1d8], 0x4f9ab0
mov dword [ebp - 0x1dc], eax
mov ebx, 3
lea eax, [ebp - 0x1b4]
mov dword [ebp - 0x1e0], ebx
mov dword [ebp - 0x1d4], eax
xor eax, eax
mov dword [0x540400], eax
mov dword [0x540404], eax
mov dword [0x540408], eax
mov dword [0x54040c], eax
mov dword [0x540410], eax
mov dword [0x540414], eax
mov dword [0x540418], eax
mov dword [0x54041c], eax
mov dword [0x540420], eax
mov dword [0x540424], eax
test esi, esi
js 0x455941
cmp dword [0x4fadcc], eax
jne 0x455941
lea eax, [esi + esi*4]
push dword [eax*8 + 0x4fae3c]
lea eax, [ebp - 0xa0]
push 0x4c9bac
push 0x80
push eax
call fcn.00403820
add esp, 0x10
mov byte [ebp - 0x21], 0
push 0
push esi
push 0x150
push dword [0x542e7c]
call edi
mov esi, eax
mov dword [0x540404], esi
test esi, esi
js 0x4554a2
cmp esi, 0x80
jb 0x455460
cmp esi, 0xc0
jbe 0x455477
push 0xe0
push str.C:UsersgamerDownloads_rufus72_rufus_7_srcdrive.c
push str._DriveIndex___DRIVE_INDEX_MIN____DriveIndex___DRIVE_INDEX_MAX_
call fcn.0049ed6b
add esp, 0xc
add esi, 0xffffff80
cmp esi, 0x40
ja 0x4554a2
push esi
push str..PhysicalDrive_lu
lea eax, [ebp - 0x1c]
push 0x18
push eax
call fcn.00403820
mov byte [ebp - 5], 0
lea eax, [ebp - 0x1c]
push eax
call fcn.0049f1d2
add esp, 0x14
jmp 0x4554a4
xor eax, eax
cmp dword [0x4fadbc], 0
mov dword [0x540418], eax
je 0x4554bb
cmp dword [0x54377c], 1
je 0x4554c6
mov ebx, 2
mov dword [ebp - 0x1e0], ebx
mov esi, 1
mov dword [ebp - 0x1c0], esi
mov eax, esi
cmp ebx, esi
jb 0x4555a4
mov dword [ebp - 0x1c4], eax
mov edx, eax
mov ecx, eax
mov dword [ebp - 0x1bc], str._NULL_
mov ebx, dword [ebp - 0x1bc]
mov edi, eax
mov eax, dword [0x4fb830]
test eax, eax
cmovne ebx, eax
mov eax, ecx
mov dword [ebp - 0x1bc], ebx
lea esp, [esp]
mov dword [ebp - 0x1b8], ecx
mov ecx, dword [eax*4 + 0x4f9aac]
mov eax, str._NULL_
mov ebx, dword [ebp - 0x1b8]
add ecx, 2
cmovne eax, ecx
test ecx, ecx
mov ecx, dword [ebp - 0x1bc]
cmovne ebx, edi
mov edi, dword [ebp - 0x1c4]
mov dword [ebp - 0x1b8], ebx
cmovne edi, edx
mov ebx, dword [ebp - 0x1e0]
mov edi, edi
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x455570
test dl, dl
je 0x45556c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x455570
add eax, 2
add ecx, 2
test dl, dl
jne 0x455550
xor eax, eax
jmp 0x455575
sbb eax, eax
or eax, 1
test eax, eax
je 0x45559e
lea esi, [edi + 1]
mov eax, esi
mov dword [ebp - 0x1c0], esi
mov dword [ebp - 0x1c4], esi
mov edx, esi
mov dword [ebp - 0x1b8], esi
mov ecx, esi
mov edi, esi
cmp eax, ebx
jbe 0x455510
mov eax, dword [ebp - 0x1b8]
cmp eax, ebx
mov ecx, 2
lea eax, [ebp - 0x1c0]
cmova esi, ecx
xor edx, edx
push eax
lea eax, [ebp - 0x1e0]
mov dword [ebp - 0x1c0], esi
push eax
lea ecx, [edx + 1]
call fcn.004422d0
mov dword [0x54041c], eax
add esp, 8
mov eax, dword [ebp - 0x1c0]
test eax, eax
je 0x4555e6
cmp eax, dword [ebp - 0x1e0]
jbe 0x455603
push 0x46c
push str.C:UsersgamerDownloads_rufus72_rufus_7_src_vhd.c
push str.i___0__i____UINT_img_ext.count
call fcn.0049ed6b
mov eax, dword [ebp - 0x1c0]
add esp, 0xc
mov edi, dword [eax*4 + 0x4f9aac]
add edi, 2
cmp dword [0x4fad90], 0
mov dword [0x4fb830], edi
je 0x455631
push ecx
mov edx, edi
mov ecx, str.PreferredSaveImageType
call fcn.00420500
add esp, 4
jmp 0x455739
test edi, edi
jne 0x455639
xor esi, esi
jmp 0x455649
mov esi, edi
lea ecx, [esi + 1]
mov edi, edi
mov al, byte [esi]
inc esi
test al, al
jne 0x455640
sub esi, ecx
push 0x5c
push str.PreferredSaveImageType
mov dword [ebp - 0x1b8], 0
mov dword [ebp - 0x1bc], 0
call fcn.00492830
add esp, 8
test eax, eax
je 0x455687
push 0x91
push str.C:UsersgamerDownloads_rufus72_rufus_7_src_registry.h
push str.strchr_key_name_____NULL
call fcn.0049ed6b
add esp, 0xc
push 0x5c
push str.PreferredSaveImageType
call fcn.00492830
add esp, 8
test eax, eax
jne 0x455739
lea eax, [ebp - 0x1b8]
push eax
push 0x2001d
push 0
push 0
push 0x80000001
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov ebx, dword [sym.imp.ADVAPI32.dll_RegCloseKey]
test eax, eax
je 0x4556cf
mov dword [ebp - 0x1b8], 0
jmp 0x45572c
lea eax, [ebp - 0x1c4]
push eax
lea eax, [ebp - 0x1bc]
push eax
push 0
push 7
push 0
push 0
push 0
push str.SOFTWAREAkeo_ConsultingRufus
push dword [ebp - 0x1b8]
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyExA]
test eax, eax
je 0x455708
mov dword [ebp - 0x1bc], 0
jmp 0x45571f
push esi
push edi
push 1
push 0
push str.PreferredSaveImageType
push dword [ebp - 0x1bc]
call dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov eax, dword [ebp - 0x1b8]
test eax, eax
je 0x45572c
push eax
call ebx
mov eax, dword [ebp - 0x1bc]
test eax, eax
je 0x455739
push eax
call ebx
mov eax, dword [ebp - 0x1c0]
sub eax, 1
je 0x455761
sub eax, 2
je 0x455755
mov dword [0x540400], 3
jmp 0x45576b
mov dword [0x540400], 0x63
jmp 0x45576b
mov dword [0x540400], 2
cmp dword [0x540418], 0
mov eax, dword [0x543760]
mov ecx, dword [0x543764]
mov dword [0x540408], 0x2000000
mov dword [0x540410], eax
mov dword [0x540414], ecx
je 0x455908
cmp dword [0x54041c], 0
je 0x455908
mov esi, dword [sym.imp.USER32.dll_SendMessageW]
push 0
push 0
push 0x8002
push dword [0x5430c4]
call esi
cmp dword [0x540400], 2
mov dword [0x4fa958], 0
jne 0x45585e
push 0x104
lea eax, [ebp - 0x1a8]
mov dword [ebp - 0x1d0], 0
push eax
push dword [0x54041c]
mov dword [ebp - 0x1cc], 0
call dword [sym.imp.KERNEL32.dll_GetVolumePathNameA]
test eax, eax
je 0x45585e
push 0
push 0
lea eax, [ebp - 0x1d0]
push eax
lea eax, [ebp - 0x1a8]
push eax
call dword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExA]
test eax, eax
je 0x45585e
mov ecx, dword [0x543760]
mov eax, dword [0x543764]
add ecx, 0x200
adc eax, 0
cmp dword [ebp - 0x1cc], eax
jg 0x45585e
jl 0x455845
cmp dword [ebp - 0x1d0], ecx
jae 0x45585e
push str.The_VHD_size_is_too_large_for_the_target_drive
call fcn.004407e0
mov dword [0x4fa958], 0xc00300df
jmp 0x4558f0
xor edx, edx
xor ecx, ecx
call fcn.00429e90
mov ecx, 1
mov dword [0x4fa958], 0
call fcn.004506b0
cmp dword [0x540400], 0x63
mov ecx, 0x455220
push 0
push 0
push 0x540400
mov eax, 0x454e20
cmove eax, ecx
push eax
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov dword [0x4fadcc], eax
test eax, eax
je 0x4558dc
push str._r_nSave_to_VHD_operation_started
call fcn.004407e0
add esp, 4
push 0xffffffffffffffff
push 0
push 0
push 1
call fcn.0041b3e0
add esp, 0x10
push 0
push 0
push 0x8009
push dword [0x5430c4]
call esi
jmp 0x455908
push str.Unable_to_start_VHD_save_thread
call fcn.004407e0
mov dword [0x4fa958], 0xe0031205
add esp, 4
push 0
push 0
push 0x8000
push dword [0x5430c4]
call dword [sym.imp.USER32.dll_PostMessageW]
cmp dword [0x4fadcc], 0
jne 0x455941
push dword [0x540418]
call fcn.004998ec
add esp, 4
mov dword [0x540418], 0
push dword [0x54041c]
call fcn.004998ec
add esp, 4
mov dword [0x54041c], 0
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.00491940
mov esp, ebp
pop ebp
ret