Function at 0x42fa99
Capabilities:
Get disk information

Disassembly:
push ebp
sub esp, 0x38
mov eax, 0x69c43e
call fcn.00640244
sub esp, 0xb18
push ebx
xor ebx, ebx
mov eax, ebx
push esi
push edi
mov dword [ebp - 0x28], eax
mov dword [ebp + 0x34], eax
lea ecx, [ebp - 0x20]
mov dword [ebp - 4], ebx
mov word [ebp - 0x50c], ax
call fcn.00429ae5
push dword [ebp + 0x48]
mov byte [ebp - 4], 1
push dword [ebp + 0x44]
mov byte [ebp + 0x3a], bl
mov byte [ebp + 0x3b], bl
call fcn.0042f185
mov ecx, dword [ebp + 0x54]
mov esi, 0x104
mov byte [ebp + 0x39], al
test ecx, ecx
je 0x42fb0e
cmp word [ecx], bx
je 0x42fb0e
lea edx, [ebp - 0x304]
sub edx, ecx
movzx eax, word [ecx]
mov word [ecx + edx], ax
lea ecx, [ecx + 2]
test ax, ax
jne 0x42fafd
jmp 0x42fb3c
lea eax, [ebp + 4]
push eax
call fcn.0042df00
cmp dword [ebp + 0x18], 8
mov eax, dword [ebp + 4]
jae 0x42fb23
lea eax, [ebp + 4]
push esi
push eax
lea eax, [ebp - 0x304]
push eax
call fcn.00429389
push ebx
push 1
lea ecx, [ebp + 4]
call fcn.004281f2
cmp word [ebp - 0x304], 0
jne 0x42fb4e
push 6
pop ebx
jmp 0x430716
lea eax, [ebp - 0x304]
push eax
lea eax, [ebp - 0x54]
push str.INSTALLDEBUG:_FindInstallablePath_Chose_n_tpath:__s__n
push eax
call fcn.004654e1
add esp, 0xc
cmp dword [ebp - 0x40], 8
mov eax, dword [ebp - 0x54]
push 3
pop ebx
mov byte [ebp - 4], bl
jae 0x42fb78
lea eax, [ebp - 0x54]
push eax
call fcn.0040e2b4
add esp, 4
lea eax, [ebp - 0x50c]
push esi
push eax
push dword [0x7e097c]
call dword [sym.imp.KERNEL32.DLL_GetModuleFileNameW]
lea esi, [ebp - 0x304]
xor edi, edi
lea ecx, [esi + 2]
mov ax, word [esi]
add esi, 2
cmp ax, di
jne 0x42fba0
sub esi, ecx
lea eax, [ebp - 0x50c]
sar esi, 1
push esi
push eax
lea eax, [ebp - 0x304]
push eax
call fcn.00665c03
add esp, 0xc
test eax, eax
jne 0x42fbe8
lea eax, [ebp - 0x50c]
lea eax, [eax + esi*2]
push 0x6c6150
push eax
call fcn.00665a8e
pop ecx
pop ecx
test eax, eax
jne 0x42fbe8
mov byte [ebp + 0x3a], 1
lea eax, [ebp + 0x1c]
mov ecx, 0x7ac4a8
push eax
call fcn.00473012
cmp dword [eax + 0x14], 8
jb 0x42fbfe
mov eax, dword [eax]
push eax
lea eax, [ebp - 0x50c]
push eax
call fcn.00665a8e
pop ecx
neg eax
pop ecx
sbb al, al
lea ecx, [ebp + 0x1c]
push edi
inc al
push 1
mov dword [ebp - 0x24], eax
call fcn.004281f2
push 6
lea eax, [ebp - 0x3c]
mov dword [ebp], edi
push eax
lea eax, [ebp - 0x50c]
push eax
call fcn.00471786
xor eax, eax
push eax
push eax
push eax
push eax
lea eax, [ebp]
push eax
push 0x104
lea eax, [ebp - 0x714]
push eax
lea eax, [ebp - 0x3c]
push eax
call dword [sym.imp.KERNEL32.DLL_GetVolumeInformationW]
lea eax, [ebp - 0x3c]
push eax
lea eax, [ebp - 0x714]
push eax
lea eax, [ebp + 0x1c]
push str.INSTALLDEBUG:_Volume:__s__Drive:__s
push eax
call fcn.004654e1
add esp, 0x10
lea ecx, [ebp + 0x1c]
push 0
push 1
call fcn.004281f2
mov eax, dword [0x7ace90]
cmp dword [ebp], eax
je 0x42fc90
test eax, eax
je 0x42fc90
mov byte [ebp + 0x3b], 1
call fcn.0043233f
mov byte [ebp + 0x57], al
call fcn.00432e35
mov esi, eax
mov eax, 0xb1a3
test esi, esi
mov dword [ebp + 0x34], esi
sete cl
cmp byte [ebp + 0x3a], 0
mov byte [0x7841b5], cl
je 0x42fcd9
cmp esi, eax
jne 0x42fcd9
push eax
push eax
lea eax, [ebp + 0x1c]
push str.INSTALLDEBUG:_Returning_early._Installed_version:__d__Our_version:__d
push eax
call fcn.004654e1
add esp, 0x10
push 0
lea ecx, [ebp + 0x1c]
jmp 0x430702
mov edi, dword [ebp + 0x50]
cmp edi, 0x10000
je 0x42fde5
push 0x6c18f4
lea ecx, [ebp + 4]
call fcn.00429973
mov esi, eax
lea eax, [ebp - 0x304]
mov byte [ebp - 4], 5
push eax
lea ecx, [ebp - 0x9c]
call fcn.00429973
push 0x6c1910
push eax
lea eax, [ebp - 0x6c]
mov byte [ebp - 4], 6
push eax
call fcn.00428a38
push esi
push eax
lea eax, [ebp + 0x1c]
mov byte [ebp - 4], 7
push eax
call fcn.004289e8
push eax
mov byte [ebp - 4], 8
call fcn.0046103f
xor esi, esi
mov byte [ebp + 0x53], al
push esi
push 1
lea ecx, [ebp + 0x1c]
call fcn.004281f2
push esi
push 1
lea ecx, [ebp - 0x6c]
call fcn.004281f2
push esi
push 1
lea ecx, [ebp - 0x9c]
call fcn.004281f2
push esi
push 1
lea ecx, [ebp + 4]
mov byte [ebp - 4], bl
call fcn.004281f2
call fcn.004638f5
test al, al
je 0x42fda8
lea eax, [ebp + 0x1c]
push str.INSTALLDEBUG:_Returning_early._Settings_file_exists_in_the_module_path.
push eax
call fcn.004654e1
pop ecx
pop ecx
push esi
push 1
lea ecx, [ebp + 0x1c]
call fcn.004281f2
mov dword [0x7e10a8], 0xb1a3
call fcn.0047544b
jmp 0x430709
cmp dword [0x7e10a8], 0xb1a3
jne 0x42fddc
cmp byte [ebp + 0x53], 0
je 0x42fddc
cmp byte [ebp + 0x57], 0
jne 0x42fddc
cmp byte [ebp + 0x3b], 0
jne 0x42fddc
lea eax, [ebp + 0x1c]
push str.INSTALLDEBUG:_Attempting_to_install_same_version_t_t_t_tto_a_non_temp_directory_on_the_same_drive_but_the_.exe_is_already_there._Nothing_to_do__aborting.
push eax
call fcn.004654e1
pop ecx
pop ecx
push esi
jmp 0x42fcd1
mov cl, byte [0x7841b5]
mov esi, dword [ebp + 0x34]
cmp byte [ebp + 0x39], 0
je 0x42fe00
xor edx, edx
xor eax, eax
push edx
push edx
push edx
push edx
test cl, cl
push edx
sete al
push eax
push edx
call fcn.004333c6
lea eax, [ebp + 0x1c]
push str.INSTALLDEBUG:_Check_if_we_need_to_fork.
push eax
call fcn.004654e1
pop ecx
pop ecx
push 0
push 1
lea ecx, [ebp + 0x1c]
call fcn.004281f2
mov eax, edi
and eax, 0x80
mov dword [ebp - 0x30], eax
jne 0x4300a5
call fcn.00462ceb
test al, al
jne 0x4300a5
cmp byte [0x7aafd8], 6
jb 0x4300a5
mov eax, dword [0x7bdcac]
test eax, eax
je 0x42fe62
push eax
call dword [sym.imp.KERNEL32.DLL_ReleaseMutex]
push dword [0x7bdcac]
call dword [sym.imp.KERNEL32.DLL_CloseHandle]
push 0x104
lea eax, [ebp - 0x91c]
xor esi, esi
push eax
push esi
call dword [sym.imp.KERNEL32.DLL_GetModuleFileNameW]
push dword [ebp + 0x48]
lea eax, [ebp + 4]
push dword [ebp + 0x44]
push eax
call fcn.00439b23
mov byte [ebp - 4], 0xb
test edi, 0x20000
jne 0x42fed6
push dword [0x7ac824]
lea eax, [ebp - 0x304]
or edi, 0x80
push eax
push edi
lea eax, [ebp + 0x1c]
push str.__PERFORMINSTALL__d___s___u
push eax
call fcn.004654e1
add esp, 0x14
push 0xffffffffffffffff
push esi
push eax
lea ecx, [ebp + 4]
mov byte [ebp - 4], 0xc
call fcn.0042823e
push esi
push 1
lea ecx, [ebp + 0x1c]
mov byte [ebp - 4], 0xb
call fcn.004281f2
cmp byte [ebp + 0x70], 0
je 0x42ff0f
sub esp, 0x18
lea eax, [ebp + 0x1c]
lea esi, [ebp + 4]
push 6
pop ecx
mov edi, esp
push str._s__HYDRA_DOWNGRADE
rep movsd dword es:[edi], dword [esi]
push eax
call fcn.004654e1
add esp, 0x20
lea ecx, [ebp + 4]
push eax
call fcn.00427c6d
push 0
push 1
lea ecx, [ebp + 0x1c]
call fcn.004281f2
cmp byte [ebp + 0x74], 0
je 0x42ffc8
sub esp, 0x18
lea eax, [ebp - 0x6c]
lea esi, [ebp + 4]
push 6
pop ecx
mov edi, esp
push str._s__HYDRA_EXCEPTION
rep movsd dword es:[edi], dword [esi]
push eax
call fcn.004654e1
add esp, 0x20
lea ecx, [ebp + 4]
push eax
call fcn.00427c6d
xor esi, esi
lea ecx, [ebp - 0x6c]
push esi
push 1
call fcn.004281f2
push str.action
lea ecx, [ebp - 0x9c]
call fcn.0040eeff
push esi
push str.fall_back_to_classic
lea eax, [ebp - 0x9c]
mov byte [ebp - 4], 0xd
push eax
lea eax, [ebp + 0x1c]
push eax
call fcn.0046a515
push esi
push 1
lea ecx, [ebp - 0x9c]
mov byte [ebp - 4], 0xf
call fcn.0040f52f
push str.hydra1
lea ecx, [ebp - 0x6c]
call fcn.0040eeff
xor eax, eax
mov byte [ebp - 4], 0x10
push eax
push eax
push eax
lea eax, [ebp - 0x6c]
push eax
lea eax, [ebp + 0x1c]
push eax
push 0x32
call fcn.00488d2d
push esi
push 1
lea ecx, [ebp - 0x6c]
call fcn.0040f52f
push esi
push 1
lea ecx, [ebp + 0x1c]
mov byte [ebp - 4], 0xb
call fcn.0040f52f
cmp dword [ebp + 0x18], 8
mov eax, dword [ebp + 4]
jae 0x42ffd4
lea eax, [ebp + 4]
push eax
lea eax, [ebp - 0x91c]
push eax
call fcn.004342c8
mov esi, eax
mov edx, 0x74471c
cmp esi, ebx
setle cl
xor eax, eax
push eax
push eax
push edx
test cl, cl
push edx
setne al
push esi
dec eax
push eax
push 2
call fcn.004333c6
cmp esi, ebx
jg 0x430074
mov eax, dword [0x7acfb4]
shr eax, 4
and al, 1
movzx eax, al
push eax
lea eax, [ebp + 0x1c]
push eax
call fcn.0047d827
mov ecx, eax
cmp dword [ecx + 0x14], 8
jb 0x430027
mov ecx, dword [ecx]
mov edx, 0x7ac270
movzx eax, word [ecx]
lea ecx, [ecx + 2]
mov word [edx], ax
lea edx, [edx + 2]
test ax, ax
jne 0x43002c
xor ebx, ebx
lea ecx, [ebp + 0x1c]
push ebx
push 1
call fcn.004281f2
call fcn.00475135
mov eax, dword [0x7b0438]
mov dword [0x7ace98], eax
mov eax, dword [0x7b043c]
mov dword [0x7e10a8], 0xb1a3
mov dword [0x7ace9c], eax
call fcn.0047544b
jmp 0x430076
xor ebx, ebx
push esi
lea eax, [ebp + 0x1c]
push str.INSTALLDEBUG:_Returning...installResult____d_
push eax
call fcn.004654e1
add esp, 0xc
lea ecx, [ebp + 0x1c]
push ebx
push 1
call fcn.004281f2
push ebx
push 1
lea ecx, [ebp + 4]
call fcn.004281f2
mov ebx, esi
jmp 0x430709
lea ecx, [ebp + 0x70]
call fcn.00486068
push str.SoftwareBitTorrent
push reloc.WS2_32.dll_accept
lea ecx, [ebp + 0x70]
mov byte [ebp - 4], 0x12
call fcn.00486088
lea ecx, [ebp + 0x70]
mov byte [ebp - 4], bl
call fcn.0048606e
push 0x7ac824
call fcn.00434e6e
lea ecx, [ebp + 0x70]
call fcn.00486068
push str.SoftwareBitTorrentPersist
push reloc.WS2_32.dll_accept
lea ecx, [ebp + 0x70]
mov byte [ebp - 4], 0x13
call fcn.00486088
lea ecx, [ebp + 0x70]
mov byte [ebp - 4], bl
call fcn.0048606e
cmp esi, 0xb1a3
je 0x430151
mov eax, dword [0x7b0438]
push 0x100
push 0x134
push 0x8004
push dword [0x7bdc9c]
mov dword [0x7ace98], eax
mov eax, dword [0x7b043c]
mov dword [0x7ace9c], eax
call dword [sym.imp.USER32.dll_PostMessageW]
push dword [0x7b043c]
lea ecx, [ebp - 0x20]
push dword [0x7b0438]
push str.last_install_time
call fcn.0045e659
xor esi, esi
mov eax, edi
and eax, 0x20000
mov dword [ebp + 0x74], esi
mov dword [ebp + 0x50], esi
mov dword [ebp - 0x2c], eax
je 0x43016d
mov dword [ebp + 0x74], edi
jmp 0x4302ac
call fcn.004638f5
test al, al
jne 0x430291
call fcn.005802b9
test al, al
jne 0x43026b
cmp byte [ebp + 0x39], al
jne 0x43026b
mov al, byte [ebp + 0x3b]
mov esi, 0xb1a3
cmp dword [0x7e10a8], esi
jne 0x4301ae
cmp byte [ebp + 0x57], 0
jne 0x4301ae
test al, al
je 0x4302ac
movzx eax, al
push eax
movzx eax, byte [ebp + 0x3a]
push eax
lea eax, [ebp + 0x1c]
push str.INSTALLDEBUG:_running_from_installed_path___d_running_from_different_drive___d_n
push eax
call fcn.004654e1
add esp, 0x10
lea ecx, [ebp - 0x54]
push eax
call fcn.00427c6d
push 0
push 1
lea ecx, [ebp + 0x1c]
call fcn.004281f2
cmp dword [ebp - 0x40], 8
mov eax, dword [ebp - 0x54]
jae 0x4301e9
lea eax, [ebp - 0x54]
push eax
call fcn.0040e2b4
add esp, 4
cmp byte [ebp + 0x57], 0
jne 0x430216
cmp byte [ebp + 0x3a], 0
jne 0x430204
cmp byte [ebp - 0x24], 0
je 0x430216
cmp byte [ebp + 0x3b], 0
jne 0x430216
mov dword [ebp + 0x74], 0x100
jmp 0x4302ac
mov eax, dword [0x7e10a8]
cmp eax, esi
je 0x430229
test eax, eax
jle 0x430229
mov byte [ebp + 0x70], 1
jmp 0x43022e
xor eax, eax
mov byte [ebp + 0x70], al
push edi
lea eax, [ebp + 0x50]
push eax
push dword [ebp + 0x70]
lea eax, [ebp - 0x304]
push eax
call fcn.00435d89
test al, al
jne 0x430263
xor eax, eax
mov edx, 0x74471c
push eax
push eax
push edx
push edx
push 4
pop ebx
push ebx
push 0xffffffffffffffff
push 2
call fcn.004333c6
jmp 0x430709
mov esi, dword [ebp + 0x50]
mov dword [ebp + 0x74], esi
jmp 0x4302ac
lea eax, [ebp + 0x1c]
push str.INSTALLDEBUG:_GetSilentInstallMode____isSilent
push eax
call fcn.004654e1
pop ecx
pop ecx
xor eax, eax
lea ecx, [ebp + 0x1c]
push eax
push 1
call fcn.004281f2
mov dword [ebp + 0x74], 0x50f
jmp 0x4302ac
mov eax, dword [ebp + 0x34]
test eax, eax
je 0x4302ac
cmp eax, 0xb1a3
je 0x4302ac
cmp byte [ebp + 0x3a], 0
je 0x4302ac
mov dword [ebp + 0x74], 0x500
mov edi, 0x104
lea eax, [ebp - 0xb24]
push edi
push eax
push str.InstallLocation
push str.SoftwareMicrosoftWindowsCurrentVersionUninstalluTorrent
push reloc.OLEAUT32.dll_SysReAllocString
call fcn.004867b7
mov byte [ebp + 0x73], al
mov ecx, 0x7ac4a8
lea eax, [ebp - 0x84]
push eax
call fcn.00473012
cmp dword [ebp - 0x70], 8
mov eax, dword [ebp - 0x84]
mov byte [ebp - 4], 0x15
jae 0x4302f7
lea eax, [ebp - 0x84]
push eax
call fcn.00461022
test al, al
je 0x430311
lea eax, [ebp - 0x84]
push eax
call fcn.00461de0
test al, al
je 0x43031b
cmp byte [ebp + 0x73], 0
je 0x4304bc
push 0x6c18f4
lea ecx, [ebp - 0xcc]
call fcn.00429973
mov esi, eax
lea eax, [ebp - 0x84]
mov byte [ebp - 4], 0x16
push eax
push 0x6c1e90
lea eax, [ebp - 0x9c]
push eax
call fcn.00428ae3
push 0x6c1910
push eax
lea eax, [ebp - 0x6c]
mov byte [ebp - 4], 0x17
push eax
call fcn.00428a38
push esi
push eax
lea eax, [ebp + 0x1c]
mov byte [ebp - 4], 0x18
push eax
call fcn.004289e8
push str.___UNINSTALL__S
push eax
lea eax, [ebp + 4]
mov byte [ebp - 4], 0x19
push eax
call fcn.00428a38
xor ebx, ebx
lea ecx, [ebp + 0x1c]
push ebx
push 1
call fcn.004281f2
push ebx
push 1
lea ecx, [ebp - 0x6c]
call fcn.004281f2
push ebx
push 1
lea ecx, [ebp - 0x9c]
call fcn.004281f2
push ebx
push 1
lea ecx, [ebp - 0xcc]
mov byte [ebp - 4], 0x1e
call fcn.004281f2
cmp dword [ebp + 0x18], 8
mov eax, dword [ebp + 4]
jae 0x4303c2
lea eax, [ebp + 4]
push eax
call fcn.004618d9
mov ebx, dword [ebp - 0x28]
mov dword [ebp + 0x54], 0x3d
push 0x6c18f4
lea ecx, [ebp - 0xb4]
call fcn.00429973
mov esi, eax
push 0x6c1910
lea eax, [ebp - 0x84]
mov byte [ebp - 4], 0x1f
push eax
lea eax, [ebp - 0xfc]
or ebx, 1
push eax
mov dword [ebp + 0x34], ebx
mov edi, ebx
call fcn.00427ae6
push esi
push eax
lea eax, [ebp - 0xe4]
mov dword [ebp - 4], 0x20
or ebx, 2
push eax
mov dword [ebp + 0x34], ebx
call fcn.004289e8
mov ebx, edi
mov dword [ebp - 4], 0x21
or ebx, 6
push eax
mov dword [ebp + 0x34], ebx
call fcn.0046103f
test al, al
je 0x43044a
sub dword [ebp + 0x54], 1
je 0x43044a
mov byte [ebp + 0x73], 1
xor eax, eax
jmp 0x43044f
xor eax, eax
mov byte [ebp + 0x73], al
push eax
push 1
lea ecx, [ebp - 0xe4]
and ebx, 0xfffffffb
call fcn.004281f2
xor eax, eax
lea ecx, [ebp - 0xfc]
push eax
push 1
and ebx, 0xfffffffd
call fcn.004281f2
xor eax, eax
mov dword [ebp - 4], 0x1e
push eax
push 1
lea ecx, [ebp - 0xb4]
and ebx, 0xfffffffe
call fcn.004281f2
cmp byte [ebp + 0x73], 0
je 0x4304a3
push 0x1f4
call dword [sym.imp.KERNEL32.DLL_Sleep]
jmp 0x4303d2
xor eax, eax
mov byte [ebp - 4], 0x15
push eax
push 1
lea ecx, [ebp + 4]
call fcn.004281f2
push 3
pop ebx
mov edi, 0x104
mov esi, dword [ebp + 0x74]
lea eax, [ebp - 0x304]
push eax
push esi
lea eax, [ebp - 0xb4]
push str.INSTALLDEBUG:_DoInstall__d___s_
push eax
call fcn.004654e1
add esp, 0x10
lea ecx, [ebp - 0xb4]
xor eax, eax
push eax
push 1
call fcn.004281f2
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x304]
push eax
push esi
call fcn.0042d2dc
mov esi, eax
mov edx, 0x74471c
cmp esi, ebx
setle cl
xor eax, eax
push eax
push eax
push edx
test cl, cl
push edx
setne al
push esi
dec eax
push eax
push 2
call fcn.004333c6
mov eax, dword [0x7bdcac]
test eax, eax
je 0x430539
push eax
call dword [sym.imp.KERNEL32.DLL_ReleaseMutex]
push dword [0x7bdcac]
call dword [sym.imp.KERNEL32.DLL_CloseHandle]
cmp esi, ebx
je 0x430546
cmp byte [0x7b0cce], 0
je 0x430566
push edi
lea eax, [ebp - 0x304]
push eax
push dword [0x7e097c]
call dword [sym.imp.KERNEL32.DLL_GetModuleFileNameW]
lea eax, [ebp - 0x304]
push eax
call fcn.00460b37
cmp dword [ebp - 0x2c], 0
je 0x4305b6
sub esp, 0x18
lea eax, [ebp + 0x58]
mov ecx, esp
push eax
call fcn.0040f4ab
call fcn.005a27c3
lea eax, [ebp - 0x304]
push eax
lea ecx, [ebp + 0x1c]
call fcn.00429973
lea eax, [ebp + 0x1c]
mov byte [ebp - 4], 0x22
push eax
mov ecx, 0x7ac4a8
call fcn.00474628
xor eax, eax
mov byte [ebp - 4], 0x15
push eax
push 1
lea ecx, [ebp + 0x1c]
call fcn.004281f2
jmp 0x4306ed
call fcn.00462ceb
test al, al
je 0x43068e
cmp byte [0x7aafd8], 6
jb 0x43068e
cmp dword [ebp - 0x30], 0
je 0x43068e
cmp dword [0x7ad268], 0
je 0x4305f5
push 0x7ad258
push str.content_offer_url
lea ecx, [ebp - 0x20]
call fcn.0045e810
xor eax, eax
lea ecx, [ebp - 0x20]
cmp byte [0x7841b4], al
setne al
push eax
push str.default_offer
call fcn.0045e6c9
xor eax, eax
lea ecx, [ebp - 0x20]
cmp byte [0x7e123b], al
setne al
push eax
push str.launch_plus_app
call fcn.0045e6c9
lea eax, [ebp - 0x304]
push eax
push str.exe_path
lea ecx, [ebp - 0x20]
call fcn.0045e829
movzx eax, byte [0x7ac78a]
lea ecx, [ebp - 0x20]
push eax
push str.auto_start
call fcn.0045e6c9
movzx eax, byte [0x7ac65e]
lea ecx, [ebp - 0x20]
push eax
push str.notify_update
call fcn.0045e6c9
cmp byte [0x7841b5], 0
jne 0x43067d
push 1
push str.attempted_to_receive_server_search_url
lea ecx, [ebp - 0x20]
call fcn.0045e6c9
lea eax, [ebp - 0x20]
push eax
push dword [ebp + 0x48]
push dword [ebp + 0x44]
call fcn.00434a15
jmp 0x4306f2
lea eax, [ebp - 0x304]
push eax
lea ecx, [ebp + 0x1c]
call fcn.00429973
lea eax, [ebp + 0x1c]
mov byte [ebp - 4], 0x23
push eax
mov ecx, 0x7ac4a8
call fcn.00474628
xor ebx, ebx
mov byte [ebp - 4], 0x15
push ebx
push 1
lea ecx, [ebp + 0x1c]
call fcn.004281f2
push 6
lea eax, [ebp - 0x3c]
push eax
lea eax, [ebp - 0x304]
push eax
call fcn.00471786
push ebx
push ebx
push ebx
push ebx
push 0x7ace90
push edi
lea eax, [ebp - 0x714]
push eax
lea eax, [ebp - 0x3c]
push eax
call dword [sym.imp.KERNEL32.DLL_GetVolumeInformationW]
call fcn.0047544b
call fcn.00437e6c
xor eax, eax
lea ecx, [ebp - 0x84]
mov ebx, esi
push eax
push 1
call fcn.004281f2
xor eax, eax
lea ecx, [ebp - 0x54]
push eax
push 1
call fcn.004281f2
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0x24
mov dword [ebp - 0x20], 0x6cc3c8
call fcn.0045dfda
xor eax, eax
mov dword [ebp - 0x20], 0x6c1024
push eax
push 1
lea ecx, [ebp + 0x58]
call fcn.0040f52f
mov ecx, dword [ebp - 0xc]
mov eax, ebx
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
lea esp, [ebp + 0x3c]
pop ebp
ret 0x34