Function at 0x401850
Capabilities:
Get common file path
Get disk information

Disassembly:
push ebp
mov ebp, esp
and esp, 0xffffffc0
sub esp, 0x8f4
push ebx
push esi
push edi
mov dword [esp + 0xac], 0x64424516
mov dword [esp + 0x54], 0x694eae0c
mov dword [esp + 0xd4], 0x22f0bd01
mov dword [esp + 0x3c], 0x57170e38
mov dword [esp + 0xf0], 0x3cf3fe9b
mov dword [esp + 0xb8], 0x76e612b2
mov dword [esp + 0x8c], 0x626cbfd3
mov dword [esp + 0x94], 0x7965dadd
mov dword [esp + 0xe8], 0x75603f1b
mov dword [esp + 0xb4], 0x6b8ce23a
mov dword [esp + 0x9c], 0x57c078ee
mov dword [esp + 0x88], 0xe1898b8
mov dword [esp + 0xbc], 0x7713497e
mov dword [esp + 0x68], 0xb4165a
mov dword [esp + 0xb0], 0x14eed53f
mov dword [esp + 0x50], 0x3ad53a12
mov dword [esp + 0x64], 0x79f94dd7
mov dword [esp + 0xc4], 0x362b5773
mov dword [esp + 0x4c], 0x36bbb9bb
mov dword [esp + 0x80], 0x4708cb6e
mov dword [esp + 0xa8], 0x59716912
mov dword [esp + 0x60], 0x2fc6c3e0
mov dword [esp + 0xa4], 0x6aa8bb60
mov dword [esp + 0xd8], 0x72dc1196
mov dword [esp + 0xe4], 0x7cae4c22
mov dword [esp + 0x74], 0x36ae1462
mov dword [esp + 0x58], 0x3efea915
mov dword [esp + 0x5c], 0x190b29aa
mov dword [esp + 0xd0], 0x5600b843
mov dword [esp + 0xcc], 0x37633bb
mov dword [esp + 0x48], 0x21a656f4
mov dword [esp + 0x44], 0x21232fc4
mov dword [esp + 0x78], 0x14586f1b
mov dword [esp + 0x40], 0x5a6d68a5
mov dword [esp + 0xf8], 0x2aed0e5a
mov dword [esp + 0xc8], 0x7879dc72
mov dword [esp + 0x70], 0x5b94273
mov dword [esp + 0x84], 0x2e6a80d6
mov dword [esp + 0xec], 0x16498cc4
mov dword [esp + 0xa0], 0x1a3f684b
mov dword [esp + 0xe0], 0x1ab16bf6
mov dword [esp + 0xdc], 0x3be61606
mov dword [esp + 0xf4], 0x4c5d7ab6
mov dword [esp + 0xfc], 0x25dbff1d
mov dword [esp + 0x7c], 0x1955e16b
mov dword [esp + 0x6c], 0xafd3e95
mov dword [esp + 0x98], 0x28819085
mov dword [esp + 0x90], 0x3d9fa79c
mov dword [esp + 0xc0], 0x3e1294de
sub dword [esp + 0xac], 0x8c95151
add dword [esp + 0xac], 0x48fb977a
mov eax, 0x67ec9059
mul dword [esp + 0xac]
mov eax, dword [esp + 0xac]
add dword [esp + 0xac], 0x3639b5b1
mov eax, 0x494182e3
mul dword [esp + 0xac]
mov eax, dword [esp + 0xac]
add dword [esp + 0xac], 0x5967267e
mov eax, 0x57510b1c
mul dword [esp + 0xac]
mov eax, dword [esp + 0xac]
sub dword [esp + 0xac], 0x70669b28
sub dword [esp + 0xd4], 0x1db03c42
mov eax, 0x55387ccb
mul dword [esp + 0xac]
mov eax, dword [esp + 0xac]
mov eax, 0x7357e53
mul dword [esp + 0xac]
mov eax, dword [esp + 0xac]
sub dword [esp + 0xac], 0x59c29d5a
mov eax, 0x19e7294e
mul dword [esp + 0x54]
mov eax, dword [esp + 0x54]
sub dword [esp + 0x54], 0x14b5609a
sub dword [esp + 0xac], 0x1916160f
sub dword [esp + 0x54], 0x57abfaba
sub dword [esp + 0xac], 0x71e977c6
add dword [esp + 0x3c], 0x5c1c976a
mov eax, 0x6ea6dbb1
mul dword [esp + 0xf0]
mov eax, dword [esp + 0xf0]
mov eax, 0x4c455b65
mul dword [esp + 0xac]
mov eax, dword [esp + 0xac]
mov eax, 0x55814bab
mul dword [esp + 0xb8]
mov eax, dword [esp + 0xb8]
add dword [esp + 0xb8], 0x25a0bfdd
add dword [esp + 0xac], 0x6bba90da
sub dword [esp + 0xe8], 0x3eea658f
add dword [esp + 0xd4], 0x6bd6b292
sub dword [esp + 0x94], 0x705377d4
add dword [esp + 0x8c], 0x25c37b03
sub dword [esp + 0xf0], 0x271c0b32
add dword [esp + 0xd4], 0x37aab74d
mov eax, 0xd3ea1e2
mul dword [esp + 0xac]
mov eax, dword [esp + 0xac]
sub dword [esp + 0xd4], 0x4fe80827
add dword [esp + 0x9c], 0x47c0d7
add dword [esp + 0xbc], 0x2612785d
add dword [esp + 0x3c], 0x4da033ad
mov eax, 0x5c3c20ed
mul dword [esp + 0xb0]
mov eax, dword [esp + 0xb0]
mov eax, 0x5e5ad4b7
mul dword [esp + 0x68]
mov eax, dword [esp + 0x68]
sub dword [esp + 0x9c], 0x2b779671
sub dword [esp + 0xe8], 0xad89db7
add dword [esp + 0x68], 0x7b899860
mov eax, 0x3ee4f32c
mul dword [esp + 0xd4]
mov eax, dword [esp + 0xd4]
sub dword [esp + 0xe8], 0x526622d4
add dword [esp + 0x94], 0x5b36589b
mov eax, 0x52e14c4e
mul dword [esp + 0xd4]
mov eax, dword [esp + 0xd4]
add dword [esp + 0xbc], 0x6c3f114b
mov eax, 0x1b176bd1
mul dword [esp + 0x8c]
mov eax, dword [esp + 0x8c]
sub dword [esp + 0xbc], 0x14c05522
mov eax, 0x5b17648e
mul dword [esp + 0x64]
mov eax, dword [esp + 0x64]
add dword [esp + 0x50], 0x6d2545e2
mov eax, 0x33594951
mul dword [esp + 0xbc]
mov eax, dword [esp + 0xbc]
sub dword [esp + 0xa4], 0x268e2dbc
sub dword [esp + 0x54], 0x7d436064
add dword [esp + 0xe8], 0x2c1549be
sub dword [esp + 0xb8], 0x5c45b8dc
add dword [esp + 0x68], 0x41871565
add dword [esp + 0x94], 0x23da38ee
add dword [esp + 0x80], 0x3002150a
sub dword [esp + 0x68], 0x45a3134f
mov eax, 0x3b88fc34
mul dword [esp + 0xf0]
mov eax, dword [esp + 0xf0]
add dword [esp + 0xe4], 0x3cf4604c
sub dword [esp + 0xa8], 0xaec2162
add dword [esp + 0xb8], 0x1f4ef22
mov eax, 0x3caf0d9e
mul dword [esp + 0xf0]
mov eax, dword [esp + 0xf0]
sub dword [esp + 0x50], 0x616f89be
sub dword [esp + 0xbc], 0x53c2f3bd
mov eax, 0x678f03e2
mul dword [esp + 0x5c]
mov eax, dword [esp + 0x5c]
add dword [esp + 0xa4], 0x6ab72aea
sub dword [esp + 0x58], 0x1381f30d
mov eax, 0x62aedc31
mul dword [esp + 0x48]
mov eax, dword [esp + 0x48]
add dword [esp + 0x48], 0x6cd5a0c3
sub dword [esp + 0x64], 0x5701c68b
add dword [esp + 0xe8], 0x33fe1782
sub dword [esp + 0xac], 0x6b046f60
mov eax, 0x4c09b92f
mul dword [esp + 0x9c]
mov eax, dword [esp + 0x9c]
mov eax, 0x29aea75d
mul dword [esp + 0x80]
mov eax, dword [esp + 0x80]
mov eax, 0x48626a70
mul dword [esp + 0x70]
mov eax, dword [esp + 0x70]
add dword [esp + 0x70], 0x4a2a051a
add dword [esp + 0x54], 0x5c9c0828
mov eax, 0xae1bd82
mul dword [esp + 0x60]
mov eax, dword [esp + 0x60]
sub dword [esp + 0xb4], 0x16c83c1e
add dword [esp + 0x48], 0x39ea777d
mov eax, 0x7f2741ad
mul dword [esp + 0xb8]
mov eax, dword [esp + 0xb8]
mov eax, 0x7127fa7e
mul dword [esp + 0xd0]
mov eax, dword [esp + 0xd0]
sub dword [esp + 0x94], 0x3156970f
sub dword [esp + 0xe8], 0x7b1e4c0b
add dword [esp + 0x40], 0x3cb777ac
sub dword [esp + 0xbc], 0x157017c2
sub dword [esp + 0x48], 0x71ae667e
sub dword [esp + 0x58], 0x3322ec4d
mov eax, 0x1a208bbf
mul dword [esp + 0x58]
mov eax, dword [esp + 0x58]
add dword [esp + 0x54], 0x6e00445f
add dword [esp + 0x80], 0x72c0a8bd
mov eax, 0x1697328e
mul dword [esp + 0x80]
mov eax, dword [esp + 0x80]
mov eax, 0x60279158
mul dword [esp + 0x40]
mov eax, dword [esp + 0x40]
add dword [esp + 0xa4], 0x4b921293
sub dword [esp + 0x54], 0x7959aa14
add dword [esp + 0x80], 0x58c09cec
add dword [esp + 0x60], 0xc8eb817
mov eax, 0x7043b956
mul dword [esp + 0x84]
mov eax, dword [esp + 0x84]
add dword [esp + 0xa0], 0x263bab2b
mov eax, 0x68a878b1
mul dword [esp + 0x84]
mov eax, dword [esp + 0x84]
add dword [esp + 0x84], 0x4101617d
cmp dword [0x45ad2c], 0x400
jne 0x401f98
xor esi, esi
push esi
push esi
push esi
call dword [sym.imp.KERNEL32.dll__hread]
push esi
push esi
push esi
push esi
push esi
push esi
call dword [sym.imp.KERNEL32.dll_GetCalendarInfoA]
push esi
call dword [sym.imp.KERNEL32.dll_GlobalCompact]
push esi
lea eax, [esp + 0x104]
push eax
push str.mevufelewexepetadogidipexas
call dword [sym.imp.KERNEL32.dll_QueryDosDeviceA]
push esi
call fcn.00403171
add esp, 4
push esi
push esi
call fcn.004035ca
push esi
call fcn.00403565
add esp, 4
mov eax, esp
mov dword [eax], esi
mov dword [eax + 4], esi
sub esp, 8
mov eax, esp
mov dword [eax], esi
mov dword [eax + 4], esi
call fcn.00402c90
fstp st(0)
add esp, 0x10
mov edi, dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov ebx, dword [sym.imp.KERNEL32.dll_GetTickCount]
xor esi, esi
mov ecx, dword [esp + 0x3c]
push 0
push 0
push ecx
push 0
call edi
call ebx
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp esi, 0x12e8a06
jg 0x401fcc
inc esi
cmp esi, 0x30375
jl 0x401fa6
mov edi, dword [sym.imp.GDI32.dll_GetCharWidthI]
xor esi, esi
cmp esi, 0xa16
jge 0x401fe8
push 0
push 0
push 0
push 0
push 0
call edi
cmp esi, 0x166c480
jg 0x401ff9
inc esi
cmp esi, 0x37e3fd1
jl 0x401fd4
mov edx, dword [0x44edcc]
mov dword [0x45ad2c], edx
call fcn.004014b0
mov esi, dword [sym.imp.KERNEL32.dll_GetCurrentDirectoryW]
mov edi, 0x2ec37
mov ebx, 0x51f
lea ebx, [ebx]
cmp dword [0x45ad2c], ebx
jne 0x402034
lea eax, [esp + 0x100]
push eax
push 0
call esi
dec edi
jne 0x402020
pop edi
pop esi
xor eax, eax
pop ebx
mov esp, ebp
pop ebp
ret 0x10