Function at 0x4475a9
Capabilities:
Get common file path
Get disk information

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x74
push ebx
lea eax, [ebp + 8]
push esi
push eax
mov dword [ebp - 0x24], ecx
call fcn.0042609c
pop ecx
push 5
lea ecx, [ebp - 4]
call fcn.0042aed6
push 0x14
lea ecx, [ebp - 8]
call fcn.0042aed6
lea ecx, [ebp - 0x14]
call fcn.0042aeb8
xor ebx, ebx
mov dword [ebp - 0xc], ebx
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x2c], ebx
jmp 0x4476bd
push 4
lea eax, [ebp + 8]
push eax
push str.vol
call fcn.0042614a
add esp, 0xc
test eax, eax
je 0x447610
mov dword [ebp - 0xc], 1
jmp 0x4476bd
push 7
lea eax, [ebp + 8]
push eax
push str.setvol
call fcn.0042614a
add esp, 0xc
test eax, eax
je 0x447633
mov dword [ebp - 0xc], 2
jmp 0x4476bd
push 5
lea eax, [ebp + 8]
push eax
push str.idle
call fcn.0042614a
add esp, 0xc
test eax, eax
je 0x447653
mov dword [ebp - 0x20], 1
jmp 0x4476bd
push 6
lea eax, [ebp + 8]
push eax
push str.idlec
call fcn.0042614a
add esp, 0xc
test eax, eax
je 0x447673
mov dword [ebp - 0x20], 2
jmp 0x4476bd
push 6
lea eax, [ebp + 8]
push eax
push str.rsort
call fcn.0042614a
add esp, 0xc
test eax, eax
je 0x447693
mov dword [ebp - 0x28], 1
jmp 0x4476bd
push 3
lea eax, [ebp + 8]
push eax
push 0x4812b0
call fcn.0042614a
add esp, 0xc
test eax, eax
je 0x4476b3
mov dword [ebp - 0x2c], pe_nt_image_headers32
jmp 0x4476bd
lea eax, [ebp + 8]
push eax
call fcn.00403b20
pop ecx
mov eax, dword [ebp + 8]
cmp word [eax], 0x2a
je 0x4475ed
push 0x3d
lea eax, [ebp - 4]
push eax
lea eax, [ebp + 8]
push eax
call fcn.0042d669
mov ecx, dword [ebp - 0x24]
add esp, 0xc
push ebx
lea eax, [ebp - 4]
push eax
call fcn.00402aa0
mov eax, dword [ebp + 8]
cmp word [eax], 0x3d
mov esi, eax
jne 0x44770b
lea esi, [eax + 2]
push ebx
lea eax, [ebp - 8]
push eax
lea eax, [ebp + 8]
push eax
mov dword [ebp + 8], esi
call fcn.0042d669
add esp, 0xc
mov eax, dword [ebp - 4]
cmp word [eax], bx
jne 0x44771d
mov ebx, 0x80070057
jmp 0x4479c9
cmp dword [ebp - 0xc], 2
jne 0x447755
push 2
lea ecx, [ebp - 4]
call fcn.0042aeff
mov eax, dword [ebp - 4]
push esi
mov word [eax + 2], 0x3a
push dword [ebp - 4]
call dword [sym.imp.KERNEL32.dll_SetVolumeLabelW]
test eax, eax
jne 0x4479c9
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
jmp 0x4479c9
push edi
push dword [ebp - 8]
call fcn.0040ca55
call fcn.0043071d
lea ecx, [ebp - 0x10]
mov esi, eax
mov dword [esp], 0x517
call fcn.0042aed6
cmp dword [ebp - 0xc], 1
mov eax, dword [ebp - 0x10]
lea ecx, [eax + 0x412]
mov dword [ebp - 0x30], ecx
lea edi, [eax + 0x61c]
jne 0x44791c
mov word [ecx], bx
mov word [eax], bx
mov di, word [esi]
cmp di, bx
je 0x4477dd
mov dx, word [esi + 2]
cmp dx, bx
je 0x4477b3
cmp dx, 0x3a
jne 0x4477dd
cmp word [esi + 4], bx
jne 0x4477dd
push 6
lea ecx, [ebp - 8]
call fcn.0042aeff
mov eax, dword [ebp - 8]
mov ecx, dword [ebp - 0x30]
mov esi, eax
add eax, 2
mov word [eax], di
mov word [eax], 0x3a
mov eax, dword [ebp - 0x10]
mov word [esi + 4], 0x5c
mov word [esi + 6], bx
push 0x104
push ecx
lea ecx, [ebp - 0x34]
push ecx
lea ecx, [ebp - 0x2c]
push ecx
lea ecx, [ebp - 0x28]
push ecx
push 0x208
push eax
push esi
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x34], ebx
call dword [sym.imp.KERNEL32.dll_GetVolumeInformationW]
test eax, eax
je 0x44780d
xor edi, edi
jmp 0x447815
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
mov eax, dword [ebp - 4]
lea ecx, [ebp - 0x20]
mov dword [ebp + 8], eax
call fcn.0042aeb8
lea ecx, [ebp - 0x1c]
call fcn.0042aeb8
lea ecx, [ebp - 0x18]
call fcn.0042aeb8
lea ecx, [ebp - 0xc]
call fcn.0042aeb8
push 0x2c
pop esi
push esi
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp + 8]
push eax
call fcn.0042d669
mov eax, dword [ebp + 8]
add esp, 0xc
cmp word [eax], bx
je 0x4478a6
add dword [ebp + 8], 2
push esi
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp + 8]
push eax
call fcn.0042d669
mov eax, dword [ebp + 8]
add esp, 0xc
cmp word [eax], bx
je 0x4478a6
add dword [ebp + 8], 2
push esi
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp + 8]
push eax
call fcn.0042d669
mov eax, dword [ebp + 8]
add esp, 0xc
cmp word [eax], bx
je 0x4478a6
add dword [ebp + 8], 2
push esi
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp + 8]
push eax
call fcn.0042d669
add esp, 0xc
push dword [ebp - 0x10]
mov esi, dword [ebp - 0x24]
push dword [ebp - 0x20]
mov ecx, esi
call fcn.00429dbf
push dword [ebp - 0x28]
lea eax, [ebp - 0x74]
push str._08lX
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
lea eax, [ebp - 0x74]
push eax
push dword [ebp - 0x1c]
mov ecx, esi
call fcn.00429dbf
push dword [ebp - 0x18]
push dword [ebp - 0x2c]
push esi
call fcn.0042cc8f
add esp, 0xc
push dword [ebp - 0x30]
mov ecx, esi
push dword [ebp - 0xc]
call fcn.00429dbf
lea ecx, [ebp - 0xc]
call fcn.0042602e
lea ecx, [ebp - 0x18]
call fcn.0042602e
lea ecx, [ebp - 0x1c]
call fcn.0042602e
lea ecx, [ebp - 0x20]
call fcn.0042602e
mov ebx, edi
jmp 0x4479c0
cmp word [esi], bx
mov byte [ebp + 0xb], 1
jne 0x447929
mov cl, 0x7c
jmp 0x447950
push esi
push 0x4812ac
call fcn.00426fa9
test al, al
pop ecx
pop ecx
jne 0x44794e
push esi
push 0x481264
call fcn.00426fa9
test al, al
pop ecx
pop ecx
je 0x447972
mov byte [ebp + 0xb], bl
mov cl, 0x20
mov eax, dword [ebp - 0x2c]
or eax, dword [ebp - 0x28]
push eax
movsx eax, byte [ebp + 0xb]
push dword [ebp - 0x20]
push eax
movsx ax, cl
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.004305d7
add esp, 0x14
jmp 0x4479b4
cmp word [esi + 2], 0x3a
jne 0x447981
mov eax, esi
mov word [esi + 4], bx
jmp 0x4479b4
push edi
push 0x208
mov word [edi], bx
call dword [sym.imp.KERNEL32.dll_GetCurrentDirectoryW]
push esi
call dword [sym.imp.KERNEL32.dll_lstrlenW]
push 5
lea ecx, [ebp - 0x14]
call fcn.0042aeff
mov cx, word [edi]
mov eax, dword [ebp - 0x14]
mov word [eax], cx
mov word [eax + 2], 0x3a
mov word [eax + 4], bx
mov ecx, dword [ebp - 0x24]
push eax
push dword [ebp - 4]
call fcn.00429dbf
lea ecx, [ebp - 0x10]
call fcn.0042602e
pop edi
lea ecx, [ebp - 0x14]
call fcn.0042602e
lea ecx, [ebp - 8]
call fcn.0042602e
lea ecx, [ebp - 4]
call fcn.0042602e
pop esi
mov eax, ebx
pop ebx
leave
ret 8