Function at 0x9f5e40
Capabilities:
Link many functions at runtime

Disassembly:
push ebx
push esi
mov esi, dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
push edi
push 0xab5340
call esi
push 0xab52f0
call esi
push 0xa9ed20
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov edi, dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov esi, eax
push str.GetFileAttributesExW
push esi
call edi
push str.GetFileAttributesExA
push esi
mov dword [0xab5308], eax
call edi
push str.GetLongPathNameA
push esi
mov dword [0xab52d4], eax
call edi
push str.GetLongPathNameW
push esi
mov ebx, eax
call edi
push str.FindFirstFileExW
push esi
mov dword [0xab52d8], eax
call edi
push 0xa9ed20
mov dword [0xab5318], eax
call fcn.00a466e0
push 0xffffffffffffffff
push 0
mov esi, eax
push 0x9f6800
push str.GetEnvironmentVariableW
push esi
call fcn.00a468b0
push 0xffffffffffffffff
push 0
push 0x9f65d0
push str.GetEnvironmentVariableA
push esi
call fcn.00a468b0
push 0xffffffffffffffff
push 0
push 0x9f6870
push str.SetEnvironmentVariableA
push esi
call fcn.00a468b0
add esp, 0x40
push 0xffffffffffffffff
push 0
push 0x9f5650
push str.SetCurrentDirectoryA
push esi
call fcn.00a468b0
add esp, 0x14
call fcn.00a44480
test al, al
je 0x9f5f2a
push 0xffffffffffffffff
push 0
push fcn.009f5200
push str.SetCurrentDirectoryW
push esi
call fcn.00a468b0
add esp, 0x14
push 0xffffffffffffffff
push 0
push fcn.009f1500
push str.GetCurrentDirectoryA
push esi
call fcn.00a468b0
add esp, 0x14
call fcn.00a44480
test al, al
je 0x9f5f61
push 0xffffffffffffffff
push 0
push fcn.009f1490
push str.GetCurrentDirectoryW
push esi
call fcn.00a468b0
add esp, 0x14
push 0xffffffffffffffff
push 0
push fcn.009f1940
push str.GetFullPathNameA
push esi
call fcn.00a468b0
add esp, 0x14
call fcn.00a44480
test al, al
je 0x9f5f98
push 0xffffffffffffffff
push 0
push 0x9f1870
push str.GetFullPathNameW
push esi
call fcn.00a468b0
add esp, 0x14
push 0xffffffffffffffff
push 0
push fcn.009f4930
push str.FindFirstFileW
push esi
call fcn.00a468b0
push 0xffffffffffffffff
push 0
push 0x9f47c0
push str.FindFirstFileExW
push esi
call fcn.00a468b0
push 0xffffffffffffffff
push 0
push fcn.009f4e10
push str.FindNextFileW
push esi
call fcn.00a468b0
push 0xffffffffffffffff
push 0
push 0x9f4a70
push str.FindFirstFileA
push esi
call fcn.00a468b0
add esp, 0x50
push 0xffffffffffffffff
push 0
push 0x9f6460
push str.FindFirstFileExA
push esi
call fcn.00a468b0
push 0xffffffffffffffff
push 0
push 0x9f4f80
push str.FindNextFileA
push esi
call fcn.00a468b0
push 0xffffffffffffffff
push 0
push fcn.009f5030
push str.FindClose
push esi
call fcn.00a468b0
push 0xffffffffffffffff
push 0
push 0x9f12b0
push str.GetDiskFreeSpaceExA
push esi
call fcn.00a468b0
add esp, 0x50
push 0xffffffffffffffff
push 0
push 0x9f11c0
push str.GetDiskFreeSpaceExW
push esi
call fcn.00a468b0
push 0xffffffffffffffff
push 0
push fcn.009f50c0
push str.GetFileAttributesA
push esi
call fcn.00a468b0
add esp, 0x28
call fcn.00a44480
test al, al
je 0x9f608c
push 0x15a
push 0
push fcn.009f2670
push str.GetFileAttributesW
push esi
call fcn.00a468b0
add esp, 0x14
push 0x158
push 0
push 0x9f6330
push str.GetFileAttributesExA
push esi
call fcn.00a468b0
add esp, 0x14
call fcn.00a44480
test al, al
je 0x9f60c9
push 0x159
push 0
push fcn.009f2550
push str.GetFileAttributesExW
push esi
call fcn.00a468b0
add esp, 0x14
test ebx, ebx
je 0x9f60e4
push 0xffffffffffffffff
push 0
push fcn.009f0ba0
push str.GetLongPathNameA
push esi
call fcn.00a468b0
add esp, 0x14
call fcn.00a44480
test al, al
je 0x9f6104
push 0xffffffffffffffff
push 0
push fcn.009f0b00
push str.GetLongPathNameW
push esi
call fcn.00a468b0
add esp, 0x14
push 0xffffffffffffffff
push 0
push 0x9f0de0
push str.GetShortPathNameA
push esi
call fcn.00a468b0
add esp, 0x14
call fcn.00a44480
test al, al
je 0x9f613b
push 0xffffffffffffffff
push 0
push fcn.009f0d50
push str.GetShortPathNameW
push esi
call fcn.00a468b0
add esp, 0x14
call fcn.00a44480
test al, al
je 0x9f6194
call fcn.009f68b0
push 0xa9ecb0
call fcn.00a466e0
push 0xffffffffffffffff
push 0
mov esi, eax
push 0x9f57b0
push str.NtQueryDirectoryFile
push esi
call fcn.00a468b0
push 0xffffffffffffffff
push 0
push 0x9f57b0
push str.ZwQueryDirectoryFile
push esi
call fcn.00a468b0
push 0xffffffffffffffff
push 0
push 0x9f61a0
push str.RtlSetCurrentDirectory_U
push esi
call fcn.00a468b0
add esp, 0x40
pop edi
pop esi
mov byte [0xab5358], 1
pop ebx
ret