Function at 0x477130
Capabilities:
Create thread

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x20c
mov eax, dword [0x6aae14]
xor eax, ebp
mov dword [ebp - 4], eax
push 0x103
lea eax, [ebp - 0x107]
push 0
push eax
mov byte [ebp - 0x108], 0
call fcn.005dfd60
add esp, 0xc
push 0x6e8e30
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
cmp dword [0x72bcb8], 2
jb 0x477179
call fcn.004407c0
mov eax, 1
cmp dword [0x72bcb8], eax
jne 0x4771a4
cmp dword [ebp + 8], eax
jne 0x477192
push str._DCH__DRIVE_ADDED_EVENT___IterateAndMonitorDrives__
jmp 0x477197
push str._DCH__INITIALIZE_MONITOR__IterateAndMonitorDrives__
push 0x6b1620
call fcn.004f0f30
add esp, 8
test byte [0x6e91c4], 1
push esi
je 0x4772fa
push edi
push 0x103
lea ecx, [ebp - 0x20b]
push 0
push ecx
mov byte [ebp - 0x20c], 0
call fcn.005dfd60
lea edx, [ebp - 0x20c]
push 5
push edx
call fcn.004e9c00
lea eax, [ebp - 0x108]
push 4
push eax
call fcn.004e9c00
add esp, 0x1c
cmp byte [ebp - 0x108], 0
je 0x477293
lea ecx, [ebp - 0x108]
push ecx
push str._DCH__REMOVABLE___s
push 0x6b1620
call fcn.004f0f30
add esp, 0xc
cmp byte [ebp - 0x20c], 0
je 0x477288
lea edx, [ebp - 0x20c]
push edx
push str._DCH__CD_DVD___s
push 0x6b1620
call fcn.004f0f30
lea edi, [ebp - 0x108]
add esp, 0xc
dec edi
jmp 0x477240
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x477240
mov ax, word [0x60f654]
mov word [edi], ax
lea eax, [ebp - 0x20c]
mov edx, eax
lea esp, [esp]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x477260
lea edi, [ebp - 0x108]
sub eax, edx
dec edi
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x477270
mov ecx, eax
shr ecx, 2
mov esi, edx
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
push 1
lea ecx, [ebp - 0x108]
push ecx
jmp 0x4772f1
cmp byte [ebp - 0x20c], 0
je 0x4772f9
lea edx, [ebp - 0x20c]
push edx
push str._DCH__CD_DVD___s
push 0x6b1620
call fcn.004f0f30
lea eax, [ebp - 0x20c]
add esp, 0xc
mov edx, eax
lea ecx, [ecx]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4772c0
lea edi, [ebp - 0x108]
sub eax, edx
dec edi
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x4772d0
mov ecx, eax
shr ecx, 2
mov esi, edx
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
push 1
lea eax, [ebp - 0x108]
rep movsb byte es:[edi], byte [esi]
push eax
call fcn.00467620
add esp, 8
pop edi
test byte [0x6e91c4], 2
je 0x477344
lea ecx, [ebp - 0x108]
push 1
push ecx
call fcn.004e9c00
add esp, 8
cmp byte [ebp - 0x108], 0
je 0x477344
lea edx, [ebp - 0x108]
push edx
push str._DCH__FIXED___s
push 0x6b1620
call fcn.004f0f30
lea eax, [ebp - 0x108]
push 2
push eax
call fcn.00467620
add esp, 0x14
test byte [0x6e91c4], 4
je 0x4773b6
push 0
push 0
push 0x476f20
call fcn.005e07ac
mov esi, eax
add esp, 0xc
cmp esi, 0xffffffff
jne 0x477397
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
lea ecx, [ebp - 0x20c]
push str.Error:_beginthread_1HTL__fails_with_error__d
push ecx
call fcn.005dfb23
push 0
push 1
lea edx, [ebp - 0x20c]
push edx
push 0x6aec98
call fcn.004311c0
add esp, 0x1c
jmp 0x4773b6
push str._DCH__NETWORK__Network_Change_Notification_Thread_Started...
push 0x6b1620
call fcn.004f0f30
push 0
push esi
push str.CBD_5a_CHNG
call fcn.00420720
add esp, 0x14
push 0x6e8e30
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov ecx, dword [ebp - 4]
xor ecx, ebp
pop esi
call fcn.005dfbbe
mov esp, ebp
pop ebp
ret