Function at 0x5973cc
Capabilities:
Get common file path
Get disk information

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0x32
push 0
push 0
dec ecx
jne 0x5973d4
push ebx
push esi
push edi
mov ebx, eax
xor eax, eax
push ebp
push 0x59812e
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [0x59813c]
or eax, dword [ebx + 0x50]
mov dword [ebx + 0x50], eax
mov eax, dword [0x5fdc18]
mov dword [eax + 4], ebx
mov dword [eax], 0x596df0
mov byte [ebx + 0x3a4], 1
mov eax, dword [0x5fe214]
mov byte [eax], 1
call fcn.005a4648
mov byte [ebx + 0x49e], 1
mov byte [ebx + 0x49f], 0
mov byte [ebx + 0x4a0], 1
mov eax, dword [0x5fe20c]
mov dword [eax], 0x806a
mov eax, dword [0x5fdc08]
cmp byte [eax], 0
jne 0x59757f
lea edx, [ebp - 0x128]
mov eax, dword [0x5fe0a0]
mov eax, dword [eax]
call fcn.00471610
mov eax, dword [ebp - 0x128]
lea edx, [ebp - 0x124]
call fcn.0040b478
mov eax, dword [ebp - 0x124]
mov edx, 0x598148
call fcn.0047d410
test al, al
je 0x59755c
call fcn.004030fc
cmp eax, 2
jl 0x5974c4
lea edx, [ebp - 0x12c]
mov eax, 1
call fcn.00403164
mov edx, dword [ebp - 0x12c]
mov eax, 0x59815c
call fcn.0047d410
test al, al
je 0x5974c4
lea edx, [ebx + 0x354]
mov eax, 2
call fcn.00403164
jmp 0x5974cf
lea eax, [ebx + 0x354]
call fcn.0040504c
cmp dword [ebx + 0x354], 0
jbe 0x597508
mov eax, dword [ebx + 0x354]
call fcn.00446114
test al, al
je 0x597508
mov eax, dword [ebx + 0x354]
call fcn.00445abc
mov edx, eax
mov eax, dword [0x5fe0a0]
mov eax, dword [eax]
mov eax, dword [eax + 0x98]
call fcn.00432870
jmp 0x59757f
push 0
push 1
mov esi, dword [0x5fde74]
mov esi, dword [esi]
lea edx, [ebp - 0x130]
mov eax, 0xca
call esi
mov eax, dword [ebp - 0x130]
push eax
mov esi, dword [0x5fde74]
mov esi, dword [esi]
lea edx, [ebp - 0x134]
mov eax, pe_nt_image_headers32
call esi
mov edx, dword [ebp - 0x134]
mov eax, 0x598168
pop ecx
call fcn.005e823c
mov eax, dword [0x5fe0a0]
mov eax, dword [eax]
call fcn.00470fac
jmp 0x59757f
lea edx, [ebp - 0x138]
mov eax, dword [0x5fe0a0]
mov eax, dword [eax]
call fcn.00471610
mov edx, dword [ebp - 0x138]
lea eax, [ebx + 0x354]
call fcn.004050a0
xor eax, eax
mov dword [ebx + 0x330], eax
xor eax, eax
mov dword [ebx + 0x334], eax
xor eax, eax
mov dword [ebx + 0x338], eax
xor eax, eax
mov dword [ebx + 0x4b0], eax
mov eax, dword [0x5fdee4]
mov eax, dword [eax]
mov dword [ebx + 0x350], eax
mov byte [ebx + 0x39c], 1
lea eax, [ebx + 0x35c]
call fcn.0040504c
lea eax, [ebx + 0x360]
call fcn.0040504c
lea eax, [ebx + 0x368]
call fcn.0040504c
lea eax, [ebx + 0x364]
call fcn.0040504c
mov byte [ebx + 0x3a6], 0
mov al, byte [0x598184]
mov byte [ebx + 0x3a7], al
mov byte [ebx + 0x3a8], 0
mov byte [ebx + 0x3a9], 0
lea eax, [ebx + 0x3ac]
call fcn.0040504c
xor eax, eax
mov dword [ebx + 0x3b0], eax
mov byte [ebx + 0x3a3], 0
lea eax, [ebx + 0x3b4]
call fcn.0040504c
mov dword [ebx + 0x3b8], 0x20000000
xor eax, eax
mov dword [ebx + 0x3bc], eax
mov byte [ebx + 0x39a], 0
mov byte [ebx + 0x39b], 1
mov byte [ebx + 0x39d], 1
mov byte [ebx + 0x39e], 1
mov byte [ebx + 0x39f], 1
mov byte [ebx + 0x3a0], 0
mov byte [ebx + 0x3a1], 0
mov byte [ebx + 0x3a2], 0
mov byte [ebx + 0x398], 0
mov byte [ebx + 0x399], 0
xor eax, eax
mov dword [ebx + 0x4bc], eax
xor eax, eax
mov dword [ebx + 0x4c0], eax
lea ecx, [ebp - 0x140]
xor edx, edx
xor eax, eax
call fcn.0041b7cc
mov eax, dword [ebp - 0x140]
mov dword [ebx + 0x4c4], eax
mov eax, dword [ebp - 0x13c]
mov dword [ebx + 0x4c8], eax
mov byte [ebx + 0x325], 0
lea eax, [ebx + 0x390]
call fcn.0040504c
mov byte [ebx + 0x397], 0
mov byte [ebx + 0x395], 0
mov byte [ebx + 0x394], 0
mov byte [ebx + 0x396], 0
lea eax, [ebx + 0x4a8]
call fcn.0040504c
mov byte [ebx + 0x484], 0
lea eax, [ebx + 0x36c]
call fcn.0040504c
lea eax, [ebx + 0x370]
call fcn.0040504c
mov byte [ebx + 0x44d], 1
mov byte [ebx + 0x44e], 0
mov dword [ebx + 0x458], 0x3c
lea eax, [ebx + 0x450]
call fcn.0040504c
mov byte [ebx + 0x44c], 0
lea eax, [ebx + 0x45c]
call fcn.0040504c
lea eax, [ebx + 0x460]
call fcn.0040504c
lea eax, [ebx + 0x464]
call fcn.0040504c
lea eax, [ebx + 0x468]
call fcn.0040504c
lea eax, [ebx + 0x46c]
call fcn.0040504c
lea eax, [ebx + 0x474]
call fcn.0040504c
lea eax, [ebx + 0x470]
call fcn.0040504c
lea eax, [ebx + 0x374]
call fcn.0040504c
lea eax, [ebx + 0x378]
call fcn.0040504c
lea eax, [ebx + 0x37c]
call fcn.0040504c
lea eax, [ebx + 0x380]
call fcn.0040504c
lea eax, [ebx + 0x384]
call fcn.0040504c
lea eax, [ebx + 0x388]
call fcn.0040504c
lea eax, [ebx + 0x38c]
call fcn.0040504c
xor eax, eax
mov dword [ebx + 0x478], eax
mov byte [ebx + 0x47c], 0x84
lea eax, [ebx + 0x480]
call fcn.0040504c
mov dword [ebx + 0x34c], 1
mov byte [ebx + 0x324], 0
mov dword [ebx + 0x4ac], 0x1e
xor eax, eax
mov dword [ebx + 0x4b4], eax
xor eax, eax
mov dword [ebx + 0x4b8], eax
mov byte [ebx + 0x4cc], 0
lea eax, [ebp - 0x144]
call fcn.0047e1d0
mov edx, dword [ebp - 0x144]
mov eax, 0x5fd290
call fcn.004050a0
lea eax, [ebp - 0x10d]
push eax
push 0x104
call sub.KERNEL32.DLL_GetTempPathA
lea edx, [ebp - 0x148]
lea eax, [ebp - 0x10d]
call fcn.0040b9d8
mov edx, dword [ebp - 0x148]
lea eax, [ebx + 0x358]
call fcn.004050a0
xor ecx, ecx
xor edx, edx
mov eax, dword [ebx + 0x308]
call fcn.0057d398
xor edx, edx
mov eax, ebx
call fcn.0058e1d0
xor edx, edx
mov eax, dword [ebx + 0x308]
call fcn.0057d314
xor edx, edx
call fcn.004262a8
mov esi, eax
mov dword [ebx + 0x334], esi
mov byte [esi + 0x250], 1
mov eax, dword [ebx + 0x354]
call fcn.0059e4bc
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
jne 0x5978f3
cmp dword [0x5fd268], 0
jbe 0x5978da
test byte [0x5fd26c], 2
setne cl
test byte [0x5fd26c], 1
setne dl
mov al, 1
call fcn.0059da44
xor ecx, ecx
mov edx, 0x598190
mov eax, ebx
call fcn.00594da8
test al, al
jne 0x5978f3
mov dword [ebp - 4], 0x64
cmp dword [ebp - 4], 0
jne 0x597ef0
cmp byte [ebx + 0x49e], 0
jne 0x597ef0
mov al, byte [ebx + 0x47c]
test al, 2
jbe 0x59793b
lea edx, [ebp - 0x14c]
mov eax, 0x5981a4
call fcn.005e59d4
mov edx, dword [ebp - 0x14c]
lea eax, [ebx + 0x480]
call fcn.004050a0
jmp 0x5979f7
test al, 4
jbe 0x597956
lea eax, [ebx + 0x480]
mov edx, dword [ebx + 0x358]
call fcn.004050a0
jmp 0x5979f7
test al, 1
jbe 0x59797f
lea edx, [ebp - 0x150]
mov eax, dword [ebx + 0x354]
call fcn.0040b35c
mov edx, dword [ebp - 0x150]
lea eax, [ebx + 0x480]
call fcn.004050a0
jmp 0x5979f7
test byte [ebx + 0x47c], 8
jbe 0x5979ec
cmp dword [ebx + 0x480], 0
jbe 0x5979ec
lea edx, [ebp - 0x154]
mov eax, dword [ebx + 0x480]
call fcn.0040b4f8
mov edx, dword [ebp - 0x154]
lea eax, [ebx + 0x480]
call fcn.004050a0
mov eax, dword [ebx + 0x480]
call fcn.00445ff0
test al, al
jne 0x5979f7
lea edx, [ebp - 4]
mov eax, dword [ebx + 0x480]
call fcn.00445ea0
cmp dword [ebp - 4], 0
jne 0x5979df
mov byte [ebx + 0x39a], 1
jmp 0x5979f7
lea eax, [ebx + 0x480]
call fcn.0040504c
jmp 0x5979f7
lea eax, [ebx + 0x480]
call fcn.0040504c
mov eax, dword [ebx + 0x480]
mov edx, 0x5981b8
call fcn.00405484
je 0x597a4f
cmp dword [ebx + 0x480], 0
je 0x597a4f
lea edx, [ebp - 0x15c]
mov eax, dword [ebx + 0x480]
call fcn.0040b3e4
mov eax, dword [ebp - 0x15c]
lea edx, [ebp - 0x158]
call fcn.0040fd4c
mov eax, dword [ebp - 0x158]
call fcn.00405538
push eax
call sub.KERNEL32.DLL_GetDriveTypeA
sub eax, 2
jb 0x597a4f
sub eax, 3
jne 0x597a60
lea eax, [ebx + 0x480]
mov edx, dword [ebx + 0x358]
call fcn.004050a0
cmp dword [ebx + 0x374], 0
je 0x597a7d
mov edx, 2
mov eax, dword [ebx + 0x374]
call fcn.0059fda4
test al, al
jne 0x597aa0
push 0x7f00
mov eax, dword [0x5ff668]
push eax
call sub.user32.dll_LoadCursorA
mov ecx, eax
mov eax, dword [0x5fe344]
mov eax, dword [eax]
mov edx, 2
call fcn.0046ee64
cmp dword [ebx + 0x378], 0
je 0x597abd
mov edx, 1
mov eax, dword [ebx + 0x378]
call fcn.0059fda4
test al, al
jne 0x597b19
mov eax, dword [0x5fe200]
cmp byte [eax], 0
je 0x597af6
mov eax, dword [0x5fdd98]
cmp byte [eax], 0
je 0x597af6
push 0x5981c0
mov eax, dword [0x5ff668]
push eax
call sub.user32.dll_LoadCursorA
mov ecx, eax
mov eax, dword [0x5fe344]
mov eax, dword [eax]
mov edx, 1
call fcn.0046ee64
jmp 0x597b19
push 0x5981d0
mov eax, dword [0x5ff668]
push eax
call sub.user32.dll_LoadCursorA
mov ecx, eax
mov eax, dword [0x5fe344]
mov eax, dword [eax]
mov edx, 1
call fcn.0046ee64
cmp dword [ebx + 0x37c], 0
je 0x597b36
mov edx, 3
mov eax, dword [ebx + 0x37c]
call fcn.0059fda4
test al, al
jne 0x597b92
mov eax, dword [0x5fe200]
cmp byte [eax], 0
je 0x597b6f
mov eax, dword [0x5fdd98]
cmp byte [eax], 0
je 0x597b6f
push 0x5981e0
mov eax, dword [0x5ff668]
push eax
call sub.user32.dll_LoadCursorA
mov ecx, eax
mov eax, dword [0x5fe344]
mov eax, dword [eax]
mov edx, 3
call fcn.0046ee64
jmp 0x597b92
push 0x5981f0
mov eax, dword [0x5ff668]
push eax
call sub.user32.dll_LoadCursorA
mov ecx, eax
mov eax, dword [0x5fe344]
mov eax, dword [eax]
mov edx, 3
call fcn.0046ee64
cmp dword [ebx + 0x380], 0
jbe 0x597bab
mov edx, 0xfffffff5
mov eax, dword [ebx + 0x380]
call fcn.0059fda4
call fcn.0059fcf4
mov eax, dword [ebx + 0x4ac]
call fcn.005e88f4
mov eax, ebx
call fcn.0059556c
mov eax, dword [ebx + 0x4c8]
push eax
mov eax, dword [ebx + 0x4c4]
push eax
push 0
push 0
lea eax, [ebp - 0x11d]
push eax
call sub.user32.dll_SetRect
push 0xffffffffffffffec
mov eax, ebx
call fcn.00457974
push eax
call sub.user32.dll_GetWindowLongA
push eax
cmp dword [ebx + 0x248], 0
setne al
neg al
sbb eax, eax
push eax
push 0xfffffffffffffff0
mov eax, ebx
call fcn.00457974
push eax
call sub.user32.dll_GetWindowLongA
push eax
lea eax, [ebp - 0x11d]
push eax
call sub.user32.dll_AdjustWindowRectEx
lea ecx, [ebp - 0x140]
mov edx, dword [ebp - 0x111]
sub edx, dword [ebp - 0x119]
mov eax, dword [ebp - 0x115]
sub eax, dword [ebp - 0x11d]
call fcn.0041b7cc
mov eax, dword [ebp - 0x140]
mov dword [ebx + 0x4c4], eax
mov eax, dword [ebp - 0x13c]
mov dword [ebx + 0x4c8], eax
cmp byte [0x5fd27c], 0
je 0x597c92
mov eax, dword [0x5fdc08]
cmp byte [eax], 0
jne 0x597c92
mov eax, dword [0x5fd280]
push eax
mov eax, ebx
call fcn.00457974
mov edx, eax
mov eax, dword [0x5fe0a0]
mov eax, dword [eax]
mov eax, dword [eax + 0x30]
mov cl, byte [0x5fd274]
call fcn.00542790
mov byte [0x5fd27c], al
cmp dword [ebx + 0x36c], 0
jbe 0x597cc3
mov eax, dword [ebx + 0x36c]
call fcn.00584c28
cmp ax, 6
je 0x597cc3
mov eax, dword [0x5fe0a0]
mov eax, dword [eax]
mov byte [eax + 0x5b], 0
mov eax, dword [0x5fe0a0]
mov eax, dword [eax]
call fcn.00470fac
cmp byte [0x5fd270], 2
jne 0x597d59
mov ecx, ebx
mov dl, 1
mov eax, dword [0x57c414]
call fcn.0057c62c
mov esi, eax
mov dword [ebx + 0x4bc], esi
mov edx, dword [ebx + 0x35c]
mov eax, esi
call fcn.0057c928
mov eax, dword [ebx + 0x4bc]
mov dword [eax + 0xa4], ebx
mov dword [eax + 0xa0], 0x598f88
mov dword [eax + 0xac], ebx
mov dword [eax + 0xa8], 0x598f88
mov edx, dword [ebx + 0x4c0]
test edx, edx
je 0x597d29
mov dword [eax + 0x98], edx
mov dl, 1
mov eax, dword [ebx + 0x4bc]
call fcn.0057c9e8
cmp dword [ebx + 0x45c], 0
jne 0x597d4a
mov eax, dword [0x5fe0a0]
mov eax, dword [eax]
mov byte [eax + 0x5b], 0
mov eax, dword [0x5fdf58]
cmp dword [eax], 0
je 0x597d59
call fcn.0059db28
mov byte [ebx + 0x3a4], 0
lea edx, [ebp - 8]
mov al, 0x42
call fcn.00597280
test al, al
je 0x597d75
mov byte [ebx + 0x3a0], 1
mov eax, dword [0x5fdeb8]
mov al, byte [eax]
dec eax
sub al, 2
jae 0x597dab
mov edx, 0x598208
mov eax, dword [ebx + 0x308]
call fcn.0057d46c
mov esi, eax
mov edx, esi
mov eax, dword [ebx + 0x308]
call fcn.0057d454
test al, al
jne 0x597ded
mov esi, 1
jmp 0x597ded
lea edx, [ebp - 8]
mov al, 0x4b
call fcn.00597280
test al, al
je 0x597de7
cmp dword [ebp - 8], 0
jbe 0x597de7
mov edx, dword [ebp - 8]
mov eax, dword [ebx + 0x308]
call fcn.0057d46c
mov esi, eax
mov edx, esi
mov eax, dword [ebx + 0x308]
call fcn.0057d454
test al, al
jne 0x597ded
mov esi, 1
jmp 0x597ded
mov esi, dword [0x5fd278]
mov edx, esi
mov eax, dword [ebx + 0x308]
call fcn.0057d5c8
mov eax, ebx
call fcn.00457974
call fcn.0059f954
mov eax, dword [ebx + 0x308]
call fcn.0057d340
mov edi, eax
dec edi
test edi, edi
jle 0x597e4f
mov esi, 1
push 0
push 0
mov edx, esi
mov eax, dword [ebx + 0x308]
call fcn.0057d314
xor edx, edx
call fcn.004262a8
mov edx, dword [0x53aa20]
call fcn.004042d8
xor ecx, ecx
mov dx, 0x4c8
call fcn.0053b2bc
inc esi
dec edi
jne 0x597e1d
mov eax, dword [ebx + 0x334]
test eax, eax
je 0x597e68
push 0
push 0
xor ecx, ecx
mov dx, 0x4c8
call fcn.0053b2bc
mov eax, dword [ebx + 0x248]
call fcn.0059738c
xor eax, eax
mov dword [0x601c08], eax
xor eax, eax
mov dword [0x601c0c], eax
mov eax, dword [ebx + 0x4c0]
call fcn.0059738c
mov eax, dword [0x5fe0a0]
mov eax, dword [eax]
mov dword [eax + 0xdc], ebx
mov dword [eax + 0xd8], 0x58de24
mov eax, dword [0x5fe0a0]
mov eax, dword [eax]
mov dword [eax + 0x11c], ebx
mov dword [eax + 0x118], 0x58df9c
mov eax, dword [0x5fe0a0]
mov eax, dword [eax]
mov dword [eax + 0x124], ebx
mov dword [eax + 0x120], 0x596ea8
mov eax, dword [0x5fe024]
cmp dword [eax], 0
jne 0x5980f8
mov edx, 0xffff8001
mov eax, ebx
call fcn.00450788
jmp 0x5980f8
mov eax, dword [0x5fdc08]
cmp byte [eax], 0
je 0x597f31
mov eax, ebx
call fcn.0046d76c
mov eax, dword [0x5fdff8]
test byte [eax], 4
jne 0x597f14
mov dl, 1
xor eax, eax
call fcn.005b5c58
mov eax, dword [0x5fdff8]
test byte [eax], 2
jne 0x597f23
call fcn.005e47c0
mov eax, dword [0x5fe0a0]
mov eax, dword [eax]
call fcn.00470d04
jmp 0x597f3c
mov eax, dword [0x5fe0a0]
mov eax, dword [eax]
mov byte [eax + 0x5b], 0
mov eax, dword [0x5fdf58]
cmp dword [eax], 0
je 0x597f4b
call fcn.0059db28
cmp byte [ebx + 0x49e], 0
je 0x597fbd
cmp byte [ebx + 0x49f], 0
je 0x597fbd
push 0
push 1
mov ebx, dword [0x5fde74]
mov ebx, dword [ebx]
lea edx, [ebp - 0x160]
mov eax, 0xca
call ebx
mov eax, dword [ebp - 0x160]
push eax
mov ebx, dword [0x5fde74]
mov ebx, dword [ebx]
lea edx, [ebp - 0x164]
mov eax, 0xed
call ebx
mov eax, dword [ebp - 0x164]
push eax
lea edx, [ebp - 0x168]
mov eax, dword [0x5fe0a0]
mov eax, dword [eax]
call fcn.00470984
mov eax, dword [ebp - 0x168]
pop edx
pop ecx
call fcn.005e823c
jmp 0x5980ec
cmp dword [ebp - 4], 0
je 0x59805b
push 0
push 1
mov ebx, dword [0x5fde74]
mov ebx, dword [ebx]
lea edx, [ebp - 0x16c]
mov eax, 0xca
call ebx
mov eax, dword [ebp - 0x16c]
push eax
mov ebx, dword [0x5fde74]
mov ebx, dword [ebx]
lea edx, [ebp - 0x174]
mov eax, 0xec
call ebx
push dword [ebp - 0x174]
push 0x598218
push 0x598218
lea edx, [ebp - 0x178]
mov eax, dword [ebp - 4]
call fcn.0047cd54
push dword [ebp - 0x178]
lea eax, [ebp - 0x170]
mov edx, 4
call fcn.004053f8
mov eax, dword [ebp - 0x170]
push eax
lea edx, [ebp - 0x17c]
mov eax, dword [0x5fe0a0]
mov eax, dword [eax]
call fcn.00470984
mov eax, dword [ebp - 0x17c]
pop edx
pop ecx
call fcn.005e823c
jmp 0x5980ec
push 0
push 1
mov ebx, dword [0x5fde74]
mov ebx, dword [ebx]
lea edx, [ebp - 0x180]
mov eax, 0xca
call ebx
mov eax, dword [ebp - 0x180]
push eax
mov ebx, dword [0x5fde74]
mov ebx, dword [ebx]
lea edx, [ebp - 0x188]
mov eax, 0xec
call ebx
push dword [ebp - 0x188]
push 0x598218
push 0x598218
lea edx, [ebp - 0x18c]
mov eax, 0x64
call fcn.0047cd54
push dword [ebp - 0x18c]
lea eax, [ebp - 0x184]
mov edx, 4
call fcn.004053f8
mov eax, dword [ebp - 0x184]
push eax
lea edx, [ebp - 0x190]
mov eax, dword [0x5fe0a0]
mov eax, dword [eax]
call fcn.00470984
mov eax, dword [ebp - 0x190]
pop edx
pop ecx
call fcn.005e823c
mov eax, dword [0x5fe0a0]
mov eax, dword [eax]
call fcn.00470fac
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x598135
lea eax, [ebp - 0x190]
mov edx, 0x14
call fcn.00405070
lea eax, [ebp - 0x138]
mov edx, 6
call fcn.00405070
lea eax, [ebp - 8]
call fcn.0040504c
ret