Function at 0x41df30
Capabilities:
Get common file path
Get disk information

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x19e8
call fcn.004187b0
push esi
push edi
mov dword [ebp - 0x8c], 0x5036d8c3
mov dword [ebp - 0xfc], 0x500a2b28
mov dword [ebp - 0x80], 0x4944c4e2
mov dword [ebp - 0xc0], 0x41ae6756
mov dword [ebp - 0x114], 0x6a01f19e
mov dword [ebp - 0xb8], 0x2d8161b6
mov dword [ebp - 0xf4], 0x539b4fcc
mov dword [ebp - 0x7c], 0x15cefcd
mov dword [ebp - 0x1c], 0x2ec26f1
mov dword [ebp - 0x20], 0x354af6dd
mov dword [ebp - 0x78], 0x28d4264c
mov dword [ebp - 0xb4], 0x791e0c0b
mov dword [ebp - 0x6c], 0x468011b3
mov dword [ebp - 0x70], 0x72be8f6e
mov dword [ebp - 0x30], 0x223bc88c
mov dword [ebp - 0x18], 0x6ba52f78
mov dword [ebp - 0xa4], 0x1f032615
mov dword [ebp - 0x3c], 0x6f9f335c
mov dword [ebp - 0x90], 0x49d3af6f
mov dword [ebp - 0xb0], 0x495253c1
mov dword [ebp - 0x2c], 0x3669dab0
mov dword [ebp - 0xdc], 0x7c6c57ce
mov dword [ebp - 0x10], 0x79f179c2
mov dword [ebp - 0x58], 0x3387c529
mov dword [ebp - 0xa8], 0x773ecc6c
mov dword [ebp - 0x50], 0x606dbb4
mov dword [ebp - 0x64], 0x31a35271
mov dword [ebp - 0x48], 0x313622b8
mov dword [ebp - 0xe8], 0x7c0c4eab
mov dword [ebp - 0xe4], 0x2322cc18
mov dword [ebp - 0x104], 0x7e3034a0
mov dword [ebp - 0xa0], 0x3934673
mov dword [ebp - 0x28], 0x4dd7bee8
mov dword [ebp - 0x5c], 0x46880f92
mov dword [ebp - 0xe0], 0x7cb1149f
mov dword [ebp - 0x14], 0x43323292
mov dword [ebp - 0xbc], 0x3aeca9f0
mov dword [ebp - 0x24], 0x8612ec9
mov dword [ebp - 0x88], 0x3143dc51
mov dword [ebp - 0xf8], 0x42240deb
mov dword [ebp - 0xc4], 0x2fb5ec4e
mov dword [ebp - 0xd8], 0x4dc1ab56
mov dword [ebp - 0x9c], 0x169d09b2
mov dword [ebp - 0xf0], 0x591da9b7
mov dword [ebp - 0x108], 0x48fc072d
mov dword [ebp - 0x4c], 0x4423411c
mov dword [ebp - 0x40], 0x5a94b877
mov dword [ebp - 0xcc], 0x53499e79
mov dword [ebp - 0xd4], 0x7f293fe8
mov dword [ebp - 0x100], 0x65b0c5dd
mov dword [ebp - 0x94], 0x23cdca5
mov dword [ebp - 0xc], 0x69d0fa03
mov dword [ebp - 0xec], 0x558026c6
mov dword [ebp - 0x74], 0x706aefd1
mov dword [ebp - 0x44], 0x5fe3c5db
mov dword [ebp - 0x34], 0x4cab1bc2
mov dword [ebp - 8], 0x7b701b90
mov dword [ebp - 0x84], 0x5061d5aa
mov dword [ebp - 0x11c], 0x72ade29f
mov dword [ebp - 4], 0x26315858
mov dword [ebp - 0xd0], 0x2c2b3e19
mov dword [ebp - 0x118], 0x327a079c
mov dword [ebp - 0x68], 0x6f5ec5d7
mov dword [ebp - 0xac], 0x408adbae
mov dword [ebp - 0x98], 0x58798c10
mov dword [ebp - 0xc8], 0x69db806b
mov dword [ebp - 0x38], 0x76991408
mov dword [ebp - 0x110], 0x6676fcc7
mov dword [ebp - 0x60], 0x326474ef
mov dword [ebp - 0x54], 0x6f89eb3e
mov dword [ebp - 0x10c], 0x10d291e2
sub dword [ebp - 0xfc], 0x7ed8960d
add dword [ebp - 0xc0], 0xb5ae8ad
mov eax, 0x14c5017b
mul dword [ebp - 0x8c]
mov eax, dword [ebp - 0x8c]
mov eax, 0x25d9a821
mul dword [ebp - 0xfc]
mov eax, dword [ebp - 0xfc]
add dword [ebp - 0xfc], 0x63fa6290
sub dword [ebp - 0x80], 0x43e79b23
sub dword [ebp - 0x114], 0x7a367504
mov eax, 0x784abdc
mul dword [ebp - 0x80]
mov eax, dword [ebp - 0x80]
mov eax, 0x677db5e6
mul dword [ebp - 0x114]
mov eax, dword [ebp - 0x114]
sub dword [ebp - 0x78], 0x150e657d
sub dword [ebp - 0xb4], 0x7ec4712c
sub dword [ebp - 0xfc], 0x6209dacf
sub dword [ebp - 0x114], 0x72224a7b
mov eax, 0x63923224
mul dword [ebp - 0x7c]
mov eax, dword [ebp - 0x7c]
mov eax, 0x622d4a52
mul dword [ebp - 0xb8]
mov eax, dword [ebp - 0xb8]
mov esi, dword [sym.imp.USER32.dll_CharUpperA]
mov edi, 0x3784fe
mov edi, edi
push 0
call esi
dec edi
jne 0x41e260
mov eax, dword [0x438398]
mov ecx, dword [0x43838c]
mov dword [0x8e370c], eax
mov dword [0x8e5e70], ecx
call fcn.0041d740
cmp dword [0x8e370c], 0xc30
jne 0x41e364
lea edx, [ebp - 0x398]
push edx
push edi
push edi
call dword [sym.imp.KERNEL32.dll_GetCPInfoExW]
push edi
push edi
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
lea eax, [ebp - 0x5e8]
push eax
push 0x4042b0
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
push edi
lea ecx, [ebp - 0x19e8]
push ecx
push 0x4042e8
call dword [sym.imp.KERNEL32.dll_GetVolumeNameForVolumeMountPointW]
mov esi, dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push 0x404300
call esi
push edi
lea edx, [ebp - 0x120]
push edx
push edi
lea eax, [ebp - 0x9e8]
push eax
push edi
mov edi, dword [sym.imp.KERNEL32.dll_WriteConsoleA]
call edi
push 0
lea ecx, [ebp - 0x11e8]
push ecx
lea edx, [ebp - 0x128]
push edx
lea eax, [ebp - 0x130]
push eax
lea ecx, [ebp - 0x124]
push ecx
lea edx, [ebp - 0x12c]
push edx
push 0
call dword [sym.imp.KERNEL32.dll_GetNamedPipeHandleStateA]
lea eax, [ebp - 0x178]
push eax
call dword [sym.imp.KERNEL32.dll_GetStartupInfoW]
push 0
call esi
push 0
lea ecx, [ebp - 0x134]
push ecx
push 0
push 0
push 0
call edi
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_UpdateResourceW]
lea edx, [ebp - 0xde8]
push edx
push 0
call dword [sym.imp.KERNEL32.dll_GetCurrentDirectoryA]
call dword [0x8e1f04]
pop edi
xor eax, eax
pop esi
mov esp, ebp
pop ebp
ret 0x10