Function at 0x1002c0e0
Capabilities:
Get disk information

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10083123
mov eax, dword fs:[0]
push eax
sub esp, 0x38
push ebx
push esi
push edi
mov eax, dword [section..data]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x24], ecx
mov dword [ebp - 0x34], 0
mov dword [ebp - 4], 0
call fcn.10021470
xor edx, edx
mov ecx, eax
test ecx, ecx
setne dl
test edx, edx
jne 0x1002c135
push 0x80004005
call fcn.10021340
mov eax, dword [ecx]
call dword [eax + 0xc]
lea ebx, [eax + 0x10]
mov dword [ebp - 0x20], ebx
mov byte [ebp - 4], 1
call fcn.10021470
xor ecx, ecx
mov edx, eax
test edx, edx
setne cl
test ecx, ecx
jne 0x1002c160
push 0x80004005
call fcn.10021340
mov eax, dword [edx]
mov ecx, edx
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x18], eax
mov byte [ebp - 4], 2
cmp dword [0x100b0f94], 0
jne 0x1002c17f
call fcn.1002d440
mov eax, dword [0x100b31e0]
test al, 1
jne 0x1002c1b9
or eax, 1
mov dword [0x100b31e0], eax
push str.DeviceLanmanRedirector_
mov ecx, 0x100b31f0
mov byte [ebp - 4], 3
call fcn.10022bb0
push 0x10088240
call fcn.1006ad6f
mov byte [ebp - 4], 2
add esp, 4
mov eax, dword [0x100b31e0]
test al, 2
jne 0x1002c1ee
or eax, 2
mov dword [0x100b31e0], eax
push str.DeviceWinDfs_
mov ecx, 0x100b31e4
mov byte [ebp - 4], 4
call fcn.10022bb0
push 0x10088210
call fcn.1006ad6f
mov byte [ebp - 4], 2
add esp, 4
mov eax, dword [0x100b31e0]
test al, 4
jne 0x1002c223
or eax, 4
mov dword [0x100b31e0], eax
push str.DeviceMupDfsClient_
mov ecx, 0x100b31ec
mov byte [ebp - 4], 5
call fcn.10022bb0
push 0x100881e0
call fcn.1006ad6f
mov byte [ebp - 4], 2
add esp, 4
mov eax, dword [0x100b31e0]
test al, 8
jne 0x1002c258
or eax, 8
mov dword [0x100b31e0], eax
push str.DeviceMUP_
mov ecx, 0x100b31d4
mov byte [ebp - 4], 6
call fcn.10022bb0
push 0x100881b0
call fcn.1006ad6f
mov byte [ebp - 4], 2
add esp, 4
mov eax, dword [0x100b31e0]
test al, 0x10
jne 0x1002c28d
or eax, 0x10
mov dword [0x100b31e0], eax
push str.DeviceNetWareRedirector_
mov ecx, 0x100b31d8
mov byte [ebp - 4], 7
call fcn.10022bb0
push 0x10088180
call fcn.1006ad6f
mov byte [ebp - 4], 2
add esp, 4
mov eax, dword [0x100b31e0]
test al, 0x20
jne 0x1002c2c2
or eax, 0x20
mov dword [0x100b31e0], eax
push str.DeviceWebDavRedirector_
mov ecx, 0x100b31dc
mov byte [ebp - 4], 8
call fcn.10022bb0
push 0x10088150
call fcn.1006ad6f
mov byte [ebp - 4], 2
add esp, 4
mov eax, dword [0x100b31e0]
test al, 0x40
jne 0x1002c2f7
or eax, 0x40
mov dword [0x100b31e0], eax
push str.DeviceCdmRedirector_
mov ecx, 0x100b31e8
mov byte [ebp - 4], 9
call fcn.10022bb0
push 0x10088120
call fcn.1006ad6f
mov byte [ebp - 4], 2
add esp, 4
mov eax, dword [0x100b31e0]
test al, al
js 0x1002c329
or eax, 0x80
mov dword [0x100b31e0], eax
push str.DevicePicaDriveRedirector_
mov ecx, 0x100b31d0
mov byte [ebp - 4], 0xa
call fcn.10022bb0
push 0x100880f0
call fcn.1006ad6f
add esp, 4
mov byte [ebp - 4], 2
mov eax, dword [0x100b31f0]
lea ecx, [ebp + 8]
push dword [eax - 0xc]
lea eax, [ebp - 0x38]
push eax
call fcn.10022df0
xor edx, edx
mov byte [ebp - 4], 0xb
mov ecx, dword [0x100b31f0]
test ecx, ecx
setne dl
test edx, edx
jne 0x1002c35c
push 0x80004005
call fcn.10021340
push ecx
push dword [eax]
call fcn.1006af63
add esp, 8
mov byte [ebp - 4], 2
mov edx, dword [ebp - 0x38]
test eax, eax
sete byte [ebp - 0xd]
add edx, 0xfffffff0
or edi, 0xffffffff
mov eax, edi
lea ecx, [edx + 0xc]
lock xadd dword [ecx], eax
dec eax
test eax, eax
jg 0x1002c390
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
cmp byte [ebp - 0xd], 0
je 0x1002c520
push ecx
mov ecx, esp
mov dword [ebp - 0x40], esp
push 0x10092cf8
call fcn.10022bb0
push ecx
mov byte [ebp - 4], 0xc
mov esi, esp
mov ecx, dword [0x100b31f0]
lea ecx, [ecx - 0x10]
call fcn.100236e0
add eax, 0x10
lea ecx, [ebp + 8]
mov dword [esi], eax
mov byte [ebp - 4], 2
call fcn.1003cc60
add esp, 8
lea eax, [ebp - 0x30]
lea ecx, [ebp + 8]
push 1
push 2
push eax
call fcn.10029480
mov ecx, 1
mov byte [ebp - 4], 0xd
mov eax, dword [eax]
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x34], ecx
mov ecx, 0x10090c5c
lea esp, [esp]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x1002c426
test dx, dx
je 0x1002c422
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x1002c426
add eax, 4
add ecx, 4
test dx, dx
jne 0x1002c400
xor eax, eax
jmp 0x1002c42b
sbb eax, eax
or eax, 1
test eax, eax
sete al
test al, al
je 0x1002c460
push 1
push 4
lea eax, [ebp - 0x38]
push eax
lea ecx, [ebp + 8]
call fcn.10029480
mov ecx, 3
mov edx, 0x10092d00
mov dword [ebp - 0x2c], ecx
mov ecx, eax
call fcn.1002d580
mov byte [ebp - 0xd], 1
test al, al
jne 0x1002c464
mov byte [ebp - 0xd], 0
mov edx, dword [ebp - 0x2c]
test dl, 2
je 0x1002c494
mov esi, dword [ebp - 0x38]
and edx, 0xfffffffd
add esi, 0xfffffff0
mov dword [ebp - 0x2c], edx
mov dword [ebp - 0x34], edx
mov ecx, edi
lea eax, [esi + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x1002c494
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x2c]
mov dword [ebp - 4], 2
test dl, 1
je 0x1002c4bc
mov edx, dword [ebp - 0x30]
mov ecx, edi
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x1002c4bc
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
cmp byte [ebp - 0xd], 0
je 0x1002c508
mov eax, dword [ebp + 8]
cmp dword [eax - 0xc], 5
jle 0x1002c50b
add eax, 0xa
push 0x5c
push eax
call fcn.1006ade1
mov ecx, eax
add esp, 8
test ecx, ecx
je 0x1002c508
mov eax, dword [ebp + 8]
sub ecx, eax
sar ecx, 1
cmp ecx, 0xffffffff
je 0x1002c50b
lea eax, [ecx + 1]
push eax
push 0
lea ecx, [ebp + 8]
call fcn.10022cf0
push 0x10092cf8
push 0
lea ecx, [ebp + 8]
call fcn.10028e70
mov eax, dword [ebp + 8]
lea ecx, [eax - 0x10]
call fcn.100236e0
mov esi, dword [ebp - 0x24]
add eax, 0x10
mov dword [esi], eax
jmp 0x1002d058
push 0x1008fa88
lea ecx, [ebp - 0x1c]
call fcn.10022bb0
mov byte [ebp - 4], 0xe
lea ecx, [ebp + 8]
mov eax, dword [0x100b31e4]
push dword [eax - 0xc]
lea eax, [ebp - 0x38]
push eax
call fcn.10022df0
xor edx, edx
mov byte [ebp - 4], 0xf
mov ecx, dword [0x100b31e4]
test ecx, ecx
setne dl
test edx, edx
jne 0x1002c564
push 0x80004005
call fcn.10021340
push ecx
push dword [eax]
call fcn.1006af63
add esp, 8
mov byte [ebp - 4], 0xe
mov edx, dword [ebp - 0x38]
test eax, eax
mov ecx, edi
sete byte [ebp - 0xd]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x1002c595
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
cmp byte [ebp - 0xd], 0
je 0x1002c5a2
mov eax, dword [0x100b31e4]
jmp 0x1002c611
mov eax, dword [0x100b31ec]
lea ecx, [ebp + 8]
push dword [eax - 0xc]
lea eax, [ebp - 0x38]
push eax
call fcn.10022df0
xor edx, edx
mov byte [ebp - 4], 0x10
mov ecx, dword [0x100b31ec]
test ecx, ecx
setne dl
test edx, edx
jne 0x1002c5d5
push 0x80004005
call fcn.10021340
push ecx
push dword [eax]
call fcn.1006af63
add esp, 8
mov byte [ebp - 4], 0xe
mov edx, dword [ebp - 0x38]
test eax, eax
mov ecx, edi
sete byte [ebp - 0xd]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x1002c606
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
cmp byte [ebp - 0xd], 0
je 0x1002c665
mov eax, dword [0x100b31ec]
mov ecx, dword [ebp - 0x1c]
lea edx, [eax - 0x10]
mov dword [ebp - 0x38], edx
lea esi, [ecx - 0x10]
cmp edx, esi
je 0x1002c665
cmp dword [esi + 0xc], 0
jl 0x1002c659
mov edx, dword [edx]
cmp edx, dword [esi]
jne 0x1002c659
mov ecx, dword [ebp - 0x38]
call fcn.100236e0
lea edx, [esi + 0xc]
mov dword [ebp - 0x38], eax
mov ecx, edi
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x1002c651
mov ecx, dword [esi]
push esi
mov edx, dword [ecx]
call dword [edx + 4]
mov eax, dword [ebp - 0x38]
add eax, 0x10
mov dword [ebp - 0x1c], eax
jmp 0x1002c665
push dword [eax - 0xc]
lea ecx, [ebp - 0x1c]
push eax
call fcn.10023530
mov eax, dword [ebp - 0x1c]
cmp dword [eax - 0xc], 0
je 0x1002c72f
push ecx
mov ecx, esp
mov dword [ebp - 0x40], esp
push 0x10092cf8
call fcn.10022bb0
push ecx
mov byte [ebp - 4], 0x11
mov esi, esp
mov ecx, dword [ebp - 0x1c]
lea ecx, [ecx - 0x10]
call fcn.100236e0
add eax, 0x10
lea ecx, [ebp + 8]
mov dword [esi], eax
mov byte [ebp - 4], 0xe
call fcn.1003cc60
add esp, 8
lea eax, [ebp - 0x38]
lea ecx, [ebp + 8]
push 1
push 3
push eax
call fcn.10029480
mov edx, 0x10092d00
mov ecx, eax
call fcn.1002d580
mov esi, dword [ebp - 0x38]
mov edx, edi
add esi, 0xfffffff0
mov byte [ebp - 0xd], al
lea ecx, [esi + 0xc]
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x1002c6e6
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov al, byte [ebp - 0xd]
test al, al
je 0x1002c72f
mov eax, dword [ebp + 8]
cmp dword [eax - 0xc], 4
jle 0x1002c72f
add eax, 8
push 0x5c
push eax
call fcn.1006ade1
add esp, 8
test eax, eax
je 0x1002c72f
sub eax, dword [ebp + 8]
sar eax, 1
cmp eax, 0xffffffff
je 0x1002c72f
inc eax
lea ecx, [ebp + 8]
push eax
push 0
call fcn.10022cf0
push 0x10092cf8
push 0
lea ecx, [ebp + 8]
call fcn.10028e70
jmp 0x1002d025
mov eax, dword [0x100b31d4]
lea ecx, [ebp + 8]
push dword [eax - 0xc]
lea eax, [ebp - 0x38]
push eax
call fcn.10022df0
xor edx, edx
mov byte [ebp - 4], 0x12
mov ecx, dword [0x100b31d4]
test ecx, ecx
setne dl
test edx, edx
jne 0x1002c762
push 0x80004005
call fcn.10021340
push ecx
push dword [eax]
call fcn.1006af63
add esp, 8
mov byte [ebp - 4], 0xe
mov edx, dword [ebp - 0x38]
test eax, eax
mov ecx, edi
sete byte [ebp - 0xd]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x1002c793
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
cmp byte [ebp - 0xd], 0
je 0x1002c7b9
push ecx
mov ecx, esp
mov dword [ebp - 0x40], esp
push 0x10092cf8
call fcn.10022bb0
mov byte [ebp - 4], 0x13
push ecx
mov ecx, dword [0x100b31d4]
jmp 0x1002d007
mov eax, dword [0x100b31d8]
lea ecx, [ebp + 8]
push dword [eax - 0xc]
lea eax, [ebp - 0x38]
push eax
call fcn.10022df0
xor edx, edx
mov byte [ebp - 4], 0x14
mov ecx, dword [0x100b31d8]
test ecx, ecx
setne dl
test edx, edx
jne 0x1002c7ec
push 0x80004005
call fcn.10021340
push ecx
push dword [eax]
call fcn.1006af63
add esp, 8
mov byte [ebp - 4], 0xe
mov edx, dword [ebp - 0x38]
test eax, eax
mov ecx, edi
sete byte [ebp - 0xd]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x1002c81d
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
cmp byte [ebp - 0xd], 0
je 0x1002c843
push ecx
mov ecx, esp
mov dword [ebp - 0x40], esp
push 0x10092cf8
call fcn.10022bb0
mov byte [ebp - 4], 0x15
push ecx
mov ecx, dword [0x100b31d8]
jmp 0x1002d007
mov eax, dword [0x100b31dc]
lea ecx, [ebp + 8]
push dword [eax - 0xc]
lea eax, [ebp - 0x38]
push eax
call fcn.10022df0
xor edx, edx
mov byte [ebp - 4], 0x16
mov ecx, dword [0x100b31dc]
test ecx, ecx
setne dl
test edx, edx
jne 0x1002c876
push 0x80004005
call fcn.10021340
push ecx
push dword [eax]
call fcn.1006af63
add esp, 8
mov byte [ebp - 4], 0xe
mov edx, dword [ebp - 0x38]
test eax, eax
mov ecx, edi
sete byte [ebp - 0xd]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x1002c8a7
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
cmp byte [ebp - 0xd], 0
je 0x1002c8cd
push ecx
mov ecx, esp
mov dword [ebp - 0x40], esp
push 0x10092cf8
call fcn.10022bb0
mov byte [ebp - 4], 0x17
push ecx
mov ecx, dword [0x100b31dc]
jmp 0x1002d007
mov eax, dword [0x100b31e8]
lea ecx, [ebp + 8]
push dword [eax - 0xc]
lea eax, [ebp - 0x38]
push eax
call fcn.10022df0
mov byte [ebp - 4], 0x18
mov ecx, eax
push dword [0x100b31e8]
call fcn.10022cc0
test eax, eax
mov byte [ebp - 4], 0xe
mov edx, dword [ebp - 0x38]
mov ecx, edi
sete byte [ebp - 0xd]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x1002c918
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
cmp byte [ebp - 0xd], 0
je 0x1002c9d1
push ecx
mov ecx, esp
mov dword [ebp - 0x40], esp
push 0x10092cf8
call fcn.10022bb0
push ecx
mov byte [ebp - 4], 0x19
mov esi, esp
mov ecx, dword [0x100b31e8]
lea ecx, [ecx - 0x10]
call fcn.100236e0
add eax, 0x10
lea ecx, [ebp + 8]
mov dword [esi], eax
mov byte [ebp - 4], 0xe
call fcn.1003cc60
add esp, 4
mov ecx, esp
mov dword [ebp - 0x40], esp
push 0x10092d04
call fcn.10022bb0
push ecx
mov ecx, esp
mov byte [ebp - 4], 0x1a
push 0x10092d00
call fcn.10022bb0
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0xe
call fcn.1003cc60
mov ecx, dword [ebp + 8]
add esp, 8
lea ecx, [ecx - 0x10]
call fcn.100236e0
mov esi, dword [ebp - 0x24]
lea ecx, [ebp - 0x1c]
add eax, 0x10
mov dword [esi], eax
call fcn.10022680
lea ecx, [ebp - 0x18]
call fcn.10022680
lea ecx, [ebp - 0x20]
call fcn.10022680
lea ecx, [ebp + 8]
call fcn.10022680
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push 0x100b2d78
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov eax, dword [0x100b2d70]
mov esi, dword [eax]
mov dword [ebp - 0x30], esi
cmp esi, eax
je 0x1002cb28
mov edi, edi
mov ecx, dword [esi + 0x10]
sub ecx, 0x10
call fcn.100236e0
lea edi, [eax + 0x10]
mov dword [ebp - 0x38], edi
lea edx, [ebp - 0x38]
mov byte [ebp - 4], 0x1b
lea ecx, [ebp + 8]
call fcn.1002ba90
test eax, eax
jne 0x1002ca4c
lea edx, [edi - 0x10]
mov byte [ebp - 4], 0xe
or edi, 0xffffffff
lea eax, [edx + 0xc]
mov ecx, edi
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x1002ca34
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea ecx, [ebp - 0x30]
call fcn.1002d8d0
mov esi, dword [ebp - 0x30]
cmp esi, dword [0x100b2d70]
jne 0x1002c9f0
jmp 0x1002cb28
mov edx, dword [esi + 0x10]
lea ecx, [edx - 0x10]
mov dword [ebp - 0x30], ecx
lea eax, [edx - 0x10]
mov ecx, dword [ebp - 0x18]
add ecx, 0xfffffff0
mov dword [ebp - 0x28], ecx
cmp eax, ecx
je 0x1002cab6
cmp dword [ecx + 0xc], 0
lea edx, [ecx + 0xc]
mov dword [ebp - 0x2c], edx
mov edx, dword [esi + 0x10]
jl 0x1002caaa
mov eax, dword [eax]
cmp eax, dword [ecx]
jne 0x1002caaa
mov ecx, dword [ebp - 0x30]
call fcn.100236e0
mov dword [ebp - 0x30], eax
or ecx, 0xffffffff
mov eax, dword [ebp - 0x2c]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x1002ca9f
mov eax, dword [ebp - 0x28]
push eax
mov ecx, dword [eax]
mov edx, dword [ecx]
call dword [edx + 4]
mov eax, dword [ebp - 0x30]
add eax, 0x10
mov dword [ebp - 0x18], eax
jmp 0x1002cab6
push dword [edx - 0xc]
lea ecx, [ebp - 0x18]
push edx
call fcn.10023530
mov edx, dword [esi + 0x14]
lea esi, [ebx - 0x10]
lea ecx, [edx - 0x10]
cmp ecx, esi
je 0x1002cb08
cmp dword [esi + 0xc], 0
lea ebx, [esi + 0xc]
jl 0x1002caf9
mov eax, dword [ecx]
cmp eax, dword [esi]
jne 0x1002caf9
call fcn.100236e0
mov dword [ebp - 0x30], eax
or ecx, 0xffffffff
lock xadd dword [ebx], ecx
dec ecx
test ecx, ecx
jg 0x1002caf1
mov ecx, dword [esi]
push esi
mov edx, dword [ecx]
call dword [edx + 4]
mov eax, dword [ebp - 0x30]
lea ebx, [eax + 0x10]
mov dword [ebp - 0x20], ebx
jmp 0x1002cb08
push dword [edx - 0xc]
lea ecx, [ebp - 0x20]
push edx
call fcn.10023530
mov ebx, dword [ebp - 0x20]
lea edx, [edi - 0x10]
mov byte [ebp - 4], 0xe
or edi, 0xffffffff
lea eax, [edx + 0xc]
mov ecx, edi
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x1002cb28
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0x100b2d78
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
cmp dword [ebx - 0xc], 0
jne 0x1002cfec
push ecx
mov eax, esp
push dword [0x100b2d74]
push dword [ebp + 8]
push 0x10092d08
push eax
call fcn.1003a800
add esp, 0x10
call fcn.10021810
add esp, 4
call fcn.10021470
xor ecx, ecx
mov edx, eax
test edx, edx
setne cl
test ecx, ecx
jne 0x1002cb7b
push 0x80004005
call fcn.10021340
mov eax, dword [edx]
mov ecx, edx
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x30], eax
mov byte [ebp - 4], 0x1c
call dword [sym.imp.KERNEL32.dll_GetLogicalDrives]
call fcn.10021470
xor ecx, ecx
mov edx, eax
test edx, edx
setne cl
test ecx, ecx
jne 0x1002cbae
push 0x80004005
call fcn.10021340
mov eax, dword [edx]
mov ecx, edx
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x14], eax
xor eax, eax
mov byte [ebp - 4], 0x1d
mov dword [ebp - 0x38], eax
add eax, 0x41
push eax
lea eax, [ebp - 0x28]
push 0x10092a30
push eax
call fcn.1003a800
add esp, 0xc
push 0
push 0x1008fa88
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x1e
call fcn.10023530
mov eax, dword [ebp - 0x14]
mov edx, 1
mov ecx, dword [eax - 8]
sub edx, dword [eax - 4]
sub ecx, 0x104
or ecx, edx
jge 0x1002cc14
push 0x104
lea ecx, [ebp - 0x14]
call fcn.10023670
mov eax, dword [ebp - 0x14]
push 0x104
push eax
push dword [ebp - 0x28]
call dword [sym.imp.KERNEL32.dll_QueryDosDeviceW]
mov ecx, dword [ebp - 0x14]
mov esi, eax
push dword [ecx - 8]
push ecx
call fcn.1006b17d
mov edx, eax
add esp, 8
test edx, edx
js 0x1002d0ca
mov ecx, dword [ebp - 0x14]
cmp edx, dword [ecx - 8]
jg 0x1002d0ca
mov dword [ecx - 0xc], edx
xor ecx, ecx
mov eax, dword [ebp - 0x14]
mov word [eax + edx*2], cx
test esi, esi
je 0x1002cd9a
mov eax, dword [ebp - 0x14]
cmp dword [eax - 0xc], ecx
je 0x1002cd9a
push eax
push dword [ebp - 0x28]
lea eax, [ebp - 0x3c]
push str._s___s_
push eax
call fcn.1003a800
add esp, 0x10
mov byte [ebp - 4], 0x1f
lea ecx, [ebp - 0x30]
mov eax, dword [eax]
push dword [eax - 0xc]
push eax
call fcn.10029530
mov byte [ebp - 4], 0x1e
mov ecx, edi
mov edx, dword [ebp - 0x3c]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x1002ccb1
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0x1008fa88
lea ecx, [ebp - 0x2c]
call fcn.10022bb0
push ecx
mov byte [ebp - 4], 0x20
mov esi, esp
mov ecx, dword [ebp - 0x14]
lea ecx, [ecx - 0x10]
call fcn.100236e0
add eax, 0x10
lea ecx, [ebp - 0x2c]
mov dword [esi], eax
call fcn.1002fbe0
add esp, 4
test eax, eax
push ecx
mov eax, esp
je 0x1002cd5c
push dword [ebp - 0x2c]
push dword [ebp - 0x14]
push str.DeviceToDosName:_Resolved_symbolic_link__s___s
push eax
call fcn.1003a800
add esp, 0x10
call fcn.10021810
mov eax, dword [ebp - 0x2c]
add esp, 4
mov esi, dword [ebp - 0x14]
add esi, 0xfffffff0
lea edx, [eax - 0x10]
mov dword [ebp - 0x40], edx
cmp edx, esi
je 0x1002cd75
cmp dword [esi + 0xc], 0
jl 0x1002cd4e
mov edx, dword [edx]
cmp edx, dword [esi]
jne 0x1002cd4e
mov ecx, dword [ebp - 0x40]
call fcn.100236e0
mov dword [ebp - 0x40], eax
lea edx, [esi + 0xc]
mov ecx, edi
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x1002cd46
mov ecx, dword [esi]
push esi
mov edx, dword [ecx]
call dword [edx + 4]
mov eax, dword [ebp - 0x40]
add eax, 0x10
mov dword [ebp - 0x14], eax
jmp 0x1002cd75
push dword [eax - 0xc]
lea ecx, [ebp - 0x14]
push eax
call fcn.10023530
jmp 0x1002cd75
push dword [ebp - 0x14]
push str.DeviceToDosName:__s_is_not_a_symbolic_link
push eax
call fcn.1003a800
add esp, 0xc
call fcn.10021810
add esp, 4
lea edx, [ebp - 0x14]
lea ecx, [ebp + 8]
call fcn.1002ba90
test eax, eax
jne 0x1002cdcf
lea ecx, [ebp - 0x2c]
call fcn.10022680
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x1d
call fcn.10022680
jmp 0x1002cdba
mov byte [ebp - 4], 0x1d
mov ecx, edi
mov edx, dword [ebp - 0x28]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x1002cdba
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp eax, 0x19
jle 0x1002cbc4
jmp 0x1002ce8e
push 0x5c
lea ecx, [ebp - 0x14]
call fcn.1002d4f0
mov esi, dword [ebp - 0x18]
add esi, 0xfffffff0
mov edx, dword [eax]
lea ecx, [edx - 0x10]
cmp ecx, esi
je 0x1002ce29
cmp dword [esi + 0xc], 0
jl 0x1002ce1d
mov eax, dword [ecx]
cmp eax, dword [esi]
jne 0x1002ce1d
call fcn.100236e0
mov dword [ebp - 0x40], eax
lea edx, [esi + 0xc]
mov ecx, edi
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x1002ce15
mov ecx, dword [esi]
push esi
mov edx, dword [ecx]
call dword [edx + 4]
mov eax, dword [ebp - 0x40]
add eax, 0x10
mov dword [ebp - 0x18], eax
jmp 0x1002ce29
push dword [edx - 0xc]
lea ecx, [ebp - 0x18]
push edx
call fcn.10023530
mov eax, dword [ebp - 0x28]
lea esi, [ebx - 0x10]
lea ecx, [eax - 0x10]
cmp ecx, esi
je 0x1002ce7a
cmp dword [esi + 0xc], 0
lea ebx, [esi + 0xc]
jl 0x1002ce6b
mov edx, dword [ecx]
cmp edx, dword [esi]
jne 0x1002ce6b
call fcn.100236e0
mov dword [ebp - 0x40], eax
mov ecx, edi
lock xadd dword [ebx], ecx
dec ecx
test ecx, ecx
jg 0x1002ce63
mov ecx, dword [esi]
push esi
mov edx, dword [ecx]
call dword [edx + 4]
mov eax, dword [ebp - 0x40]
lea ebx, [eax + 0x10]
mov dword [ebp - 0x20], ebx
jmp 0x1002ce7a
push dword [eax - 0xc]
lea ecx, [ebp - 0x20]
push eax
call fcn.10023530
mov ebx, dword [ebp - 0x20]
lea ecx, [ebp - 0x2c]
call fcn.10022680
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x1d
call fcn.10022680
mov esi, dword [ebp - 0x30]
lea eax, [ebp - 0x38]
push esi
push str.QueryDosDevice:__s
push eax
call fcn.1003a800
add esp, 0xc
mov byte [ebp - 4], 0x21
mov edx, dword [ebp - 0x38]
call fcn.100394f0
mov byte [ebp - 4], 0x1d
mov ecx, edi
mov edx, dword [ebp - 0x38]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x1002cecf
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
cmp dword [ebx - 0xc], 0
je 0x1002cfa9
push 0x100b2d78
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
lea eax, [ebp - 0x18]
mov ecx, 0x100b2d70
push eax
call fcn.1002d5d0
mov edx, eax
lea eax, [ebx - 0x10]
mov dword [ebp - 0x2c], edx
mov ecx, dword [edx]
sub ecx, 0x10
mov dword [ebp - 0x3c], ecx
cmp eax, ecx
je 0x1002cf57
cmp dword [ecx + 0xc], 0
lea esi, [ecx + 0xc]
mov dword [ebp - 0x40], esi
mov esi, dword [ebp - 0x30]
jl 0x1002cf4c
mov eax, dword [eax]
cmp eax, dword [ecx]
jne 0x1002cf4c
lea ecx, [ebx - 0x10]
call fcn.100236e0
mov dword [ebp - 0x38], eax
mov ecx, edi
mov eax, dword [ebp - 0x40]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x1002cf3f
mov eax, dword [ebp - 0x3c]
push eax
mov ecx, dword [eax]
mov edx, dword [ecx]
call dword [edx + 4]
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x38]
add eax, 0x10
mov dword [ecx], eax
jmp 0x1002cf57
push dword [ebx - 0xc]
mov ecx, edx
push ebx
call fcn.10023530
push dword [0x100b2d74]
lea eax, [ebp - 0x38]
push ebx
push dword [ebp - 0x18]
push str.DeviceToDosName:_Adding_to_cache___s_s_._Cache_now_has__d_items.
push eax
call fcn.1003a800
add esp, 0x14
mov byte [ebp - 4], 0x22
mov edx, dword [ebp - 0x38]
call fcn.100394f0
mov byte [ebp - 4], 0x1d
mov ecx, edi
mov edx, dword [ebp - 0x38]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x1002cf9e
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0x100b2d78
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov byte [ebp - 4], 0x1c
mov ecx, edi
mov edx, dword [ebp - 0x14]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x1002cfc9
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
add esi, 0xfffffff0
mov byte [ebp - 4], 0xe
mov ecx, edi
lea eax, [esi + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x1002cfe6
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
cmp dword [ebx - 0xc], 0
je 0x1002d025
push ecx
lea ecx, [ebx - 0x10]
mov dword [ebp - 0x40], esp
mov esi, esp
call fcn.100236e0
add eax, 0x10
mov dword [esi], eax
mov byte [ebp - 4], 0x23
push ecx
mov ecx, dword [ebp - 0x18]
lea ecx, [ecx - 0x10]
mov esi, esp
call fcn.100236e0
add eax, 0x10
lea ecx, [ebp + 8]
mov dword [esi], eax
mov byte [ebp - 4], 0xe
call fcn.1003cc60
add esp, 8
mov ecx, dword [ebp + 8]
lea ecx, [ecx - 0x10]
call fcn.100236e0
mov esi, dword [ebp - 0x24]
add eax, 0x10
mov byte [ebp - 4], 2
mov ecx, edi
mov edx, dword [ebp - 0x1c]
add edx, 0xfffffff0
mov dword [esi], eax
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x1002d058
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 1
mov ecx, edi
mov edx, dword [ebp - 0x18]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x1002d078
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
add ebx, 0xfffffff0
mov byte [ebp - 4], 0
mov ecx, edi
lea eax, [ebx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x1002d095
mov ecx, dword [ebx]
push ebx
mov eax, dword [ecx]
call dword [eax + 4]
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp + 8]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], edi
dec edi
test edi, edi
jg 0x1002d0b6
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push 0x80070057
call fcn.10021340
int3