Function at 0x4431b5
Capabilities:
Get common file path
Get disk information

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x3c
push ebx
lea eax, [ebp + 8]
push esi
push eax
mov dword [ebp - 0x28], ecx
call fcn.0042dd40
pop ecx
push 5
lea ecx, [ebp - 4]
call fcn.00432cd5
push 0x14
lea ecx, [ebp - 8]
call fcn.00432cd5
lea ecx, [ebp - 0x14]
call fcn.00432cb7
xor ebx, ebx
mov dword [ebp - 0xc], ebx
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x3c], ebx
jmp 0x4432c9
push 4
lea eax, [ebp + 8]
push eax
push str.vol
call fcn.0042ddee
add esp, 0xc
test eax, eax
je 0x44321c
mov dword [ebp - 0xc], 1
jmp 0x4432c9
push 7
lea eax, [ebp + 8]
push eax
push str.setvol
call fcn.0042ddee
add esp, 0xc
test eax, eax
je 0x44323f
mov dword [ebp - 0xc], 2
jmp 0x4432c9
push 5
lea eax, [ebp + 8]
push eax
push str.idle
call fcn.0042ddee
add esp, 0xc
test eax, eax
je 0x44325f
mov dword [ebp - 0x24], 1
jmp 0x4432c9
push 6
lea eax, [ebp + 8]
push eax
push str.idlec
call fcn.0042ddee
add esp, 0xc
test eax, eax
je 0x44327f
mov dword [ebp - 0x24], 2
jmp 0x4432c9
push 6
lea eax, [ebp + 8]
push eax
push str.rsort
call fcn.0042ddee
add esp, 0xc
test eax, eax
je 0x44329f
mov dword [ebp - 0x34], 1
jmp 0x4432c9
push 3
lea eax, [ebp + 8]
push eax
push 0x495610
call fcn.0042ddee
add esp, 0xc
test eax, eax
je 0x4432bf
mov dword [ebp - 0x3c], 0x100
jmp 0x4432c9
lea eax, [ebp + 8]
push eax
call fcn.0040417e
pop ecx
mov eax, dword [ebp + 8]
cmp word [eax], 0x2a
je 0x4431f9
push 0x3d
lea eax, [ebp - 4]
push eax
lea eax, [ebp + 8]
push eax
call fcn.0043541b
mov ecx, dword [ebp - 0x28]
add esp, 0xc
push ebx
lea eax, [ebp - 4]
push eax
call fcn.00402bfa
mov eax, dword [ebp + 8]
cmp word [eax], 0x3d
mov esi, eax
jne 0x443317
lea esi, [eax + 2]
push ebx
lea eax, [ebp - 8]
push eax
lea eax, [ebp + 8]
push eax
mov dword [ebp + 8], esi
call fcn.0043541b
add esp, 0xc
mov eax, dword [ebp - 4]
cmp word [eax], bx
jne 0x443329
mov ebx, 0x80070057
jmp 0x4435f7
cmp dword [ebp - 0xc], 2
jne 0x44335f
push 2
lea ecx, [ebp - 4]
call fcn.00432cfe
mov eax, dword [ebp - 4]
push esi
push eax
mov word [eax + 2], 0x3a
call dword [sym.imp.KERNEL32.dll_SetVolumeLabelW]
test eax, eax
jne 0x4435f7
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
jmp 0x4435f7
push edi
push dword [ebp - 8]
call fcn.0040e84c
call fcn.00437dd2
lea ecx, [ebp - 0x10]
mov esi, eax
mov dword [esp], 0x517
call fcn.00432cd5
cmp dword [ebp - 0xc], 1
mov eax, dword [ebp - 0x10]
lea ecx, [eax + 0x412]
mov dword [ebp - 0x38], ecx
lea edi, [eax + 0x61c]
jne 0x44354a
mov word [ecx], bx
mov word [eax], bx
cmp word [esi], bx
je 0x4433dd
mov dx, word [esi + 2]
cmp dx, bx
je 0x4433ba
cmp dx, 0x3a
jne 0x4433dd
cmp word [esi + 4], bx
jne 0x4433dd
push 6
lea ecx, [ebp - 8]
call fcn.00432cfe
mov esi, dword [ebp - 8]
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x38]
mov word [esi + 2], 0x3a
mov word [esi + 4], 0x5c
mov word [esi + 6], bx
push 0x104
push ecx
lea ecx, [ebp - 0x34]
push ecx
lea ecx, [ebp - 0x30]
push ecx
lea ecx, [ebp - 0x2c]
push ecx
push 0x208
push eax
push esi
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x34], ebx
call dword [sym.imp.KERNEL32.dll_GetVolumeInformationW]
test eax, eax
je 0x44340e
mov dword [ebp - 0x3c], ebx
jmp 0x443417
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 4]
lea ecx, [ebp - 0x24]
mov dword [ebp + 8], eax
call fcn.00432cb7
lea ecx, [ebp - 0x20]
call fcn.00432cb7
lea ecx, [ebp - 0x1c]
call fcn.00432cb7
lea ecx, [ebp - 0x18]
call fcn.00432cb7
lea ecx, [ebp - 0xc]
call fcn.00432cb7
push 0x2c
pop esi
push esi
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp + 8]
push eax
call fcn.0043541b
mov eax, dword [ebp + 8]
add esp, 0xc
cmp word [eax], bx
je 0x4434cc
push 2
pop edi
add dword [ebp + 8], edi
push esi
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp + 8]
push eax
call fcn.0043541b
mov eax, dword [ebp + 8]
add esp, 0xc
cmp word [eax], bx
je 0x4434cc
add dword [ebp + 8], edi
push esi
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp + 8]
push eax
call fcn.0043541b
mov eax, dword [ebp + 8]
add esp, 0xc
cmp word [eax], bx
je 0x4434cc
add dword [ebp + 8], edi
push esi
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp + 8]
push eax
call fcn.0043541b
mov eax, dword [ebp + 8]
add esp, 0xc
cmp word [eax], bx
je 0x4434cc
add dword [ebp + 8], edi
push esi
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp + 8]
push eax
call fcn.0043541b
add esp, 0xc
push dword [ebp - 0x10]
mov esi, dword [ebp - 0x28]
push dword [ebp - 0x24]
mov ecx, esi
call fcn.00432698
push str._08lX
push dword [ebp - 0x20]
push dword [ebp - 0x2c]
push esi
call fcn.00434e4a
push dword [ebp - 0x1c]
push dword [ebp - 0x30]
push esi
call fcn.00434e74
push str.0x_lX
push dword [ebp - 0xc]
push dword [ebp - 0x34]
push esi
call fcn.00434e4a
add esp, 0x2c
push dword [ebp - 0x38]
mov ecx, esi
push dword [ebp - 0x18]
call fcn.00432698
lea ecx, [ebp - 0xc]
call fcn.0042dd2d
lea ecx, [ebp - 0x18]
call fcn.0042dd2d
lea ecx, [ebp - 0x1c]
call fcn.0042dd2d
lea ecx, [ebp - 0x20]
call fcn.0042dd2d
lea ecx, [ebp - 0x24]
call fcn.0042dd2d
mov ebx, dword [ebp - 0x3c]
jmp 0x4435ee
cmp word [esi], bx
mov byte [ebp + 0xb], 1
jne 0x443557
mov cl, 0x7c
jmp 0x44357e
push esi
push 0x49560c
call fcn.0042ece0
test al, al
pop ecx
pop ecx
jne 0x44357c
push esi
push 0x495608
call fcn.0042ece0
test al, al
pop ecx
pop ecx
je 0x4435a0
mov byte [ebp + 0xb], bl
mov cl, 0x20
mov eax, dword [ebp - 0x3c]
or eax, dword [ebp - 0x34]
push eax
movsx eax, byte [ebp + 0xb]
push dword [ebp - 0x24]
push eax
movsx ax, cl
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.00437ce0
add esp, 0x14
jmp 0x4435e2
cmp word [esi + 2], 0x3a
jne 0x4435af
mov eax, esi
mov word [esi + 4], bx
jmp 0x4435e2
push edi
push 0x208
mov word [edi], bx
call dword [sym.imp.KERNEL32.dll_GetCurrentDirectoryW]
push esi
call dword [sym.imp.KERNEL32.dll_lstrlenW]
push 5
lea ecx, [ebp - 0x14]
call fcn.00432cfe
mov cx, word [edi]
mov eax, dword [ebp - 0x14]
mov word [eax], cx
mov word [eax + 2], 0x3a
mov word [eax + 4], bx
mov ecx, dword [ebp - 0x28]
push eax
push dword [ebp - 4]
call fcn.00432698
lea ecx, [ebp - 0x10]
call fcn.0042dd2d
pop edi
lea ecx, [ebp - 0x14]
call fcn.0042dd2d
lea ecx, [ebp - 8]
call fcn.0042dd2d
lea ecx, [ebp - 4]
call fcn.0042dd2d
pop esi
mov eax, ebx
pop ebx
leave
ret 8