Function at 0x594558
Capabilities:
Get common file path
Get disk information

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0x32
push 0
push 0
dec ecx
jne 0x594560
push ebx
push esi
push edi
mov ebx, eax
xor eax, eax
push ebp
push 0x5952ba
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [0x5952c8]
or eax, dword [ebx + 0x50]
mov dword [ebx + 0x50], eax
mov eax, dword [0x5f6648]
mov dword [eax + 4], ebx
mov dword [eax], 0x593f7c
mov byte [ebx + 0x3a4], 1
mov eax, dword [0x5f6c44]
mov byte [eax], 1
call fcn.005a1608
mov byte [ebx + 0x49e], 1
mov byte [ebx + 0x49f], 0
mov byte [ebx + 0x4a0], 1
mov eax, dword [0x5f6c3c]
mov dword [eax], 0x806a
mov eax, dword [0x5f6638]
cmp byte [eax], 0
jne 0x59470b
lea edx, [ebp - 0x128]
mov eax, dword [0x5f6ad0]
mov eax, dword [eax]
call fcn.004711dc
mov eax, dword [ebp - 0x128]
lea edx, [ebp - 0x124]
call fcn.0040b418
mov eax, dword [ebp - 0x124]
mov edx, 0x5952d4
call fcn.0047cfdc
test al, al
je 0x5946e8
call fcn.004030fc
cmp eax, 2
jl 0x594650
lea edx, [ebp - 0x12c]
mov eax, 1
call fcn.00403164
mov edx, dword [ebp - 0x12c]
mov eax, 0x5952e8
call fcn.0047cfdc
test al, al
je 0x594650
lea edx, [ebx + 0x354]
mov eax, 2
call fcn.00403164
jmp 0x59465b
lea eax, [ebx + 0x354]
call fcn.0040504c
cmp dword [ebx + 0x354], 0
jbe 0x594694
mov eax, dword [ebx + 0x354]
call fcn.00445ce0
test al, al
je 0x594694
mov eax, dword [ebx + 0x354]
call fcn.00445688
mov edx, eax
mov eax, dword [0x5f6ad0]
mov eax, dword [eax]
mov eax, dword [eax + 0x98]
call fcn.004327e4
jmp 0x59470b
push 0
push 1
mov esi, dword [0x5f68a4]
mov esi, dword [esi]
lea edx, [ebp - 0x130]
mov eax, 0xca
call esi
mov eax, dword [ebp - 0x130]
push eax
mov esi, dword [0x5f68a4]
mov esi, dword [esi]
lea edx, [ebp - 0x134]
mov eax, pe_nt_image_headers32
call esi
mov edx, dword [ebp - 0x134]
mov eax, 0x5952f4
pop ecx
call fcn.005e12fc
mov eax, dword [0x5f6ad0]
mov eax, dword [eax]
call fcn.00470b78
jmp 0x59470b
lea edx, [ebp - 0x138]
mov eax, dword [0x5f6ad0]
mov eax, dword [eax]
call fcn.004711dc
mov edx, dword [ebp - 0x138]
lea eax, [ebx + 0x354]
call fcn.004050a0
xor eax, eax
mov dword [ebx + 0x330], eax
xor eax, eax
mov dword [ebx + 0x334], eax
xor eax, eax
mov dword [ebx + 0x338], eax
xor eax, eax
mov dword [ebx + 0x4b0], eax
mov eax, dword [0x5f6914]
mov eax, dword [eax]
mov dword [ebx + 0x350], eax
mov byte [ebx + 0x39c], 1
lea eax, [ebx + 0x35c]
call fcn.0040504c
lea eax, [ebx + 0x360]
call fcn.0040504c
lea eax, [ebx + 0x368]
call fcn.0040504c
lea eax, [ebx + 0x364]
call fcn.0040504c
mov byte [ebx + 0x3a6], 0
mov al, byte [0x595310]
mov byte [ebx + 0x3a7], al
mov byte [ebx + 0x3a8], 0
mov byte [ebx + 0x3a9], 0
lea eax, [ebx + 0x3ac]
call fcn.0040504c
xor eax, eax
mov dword [ebx + 0x3b0], eax
mov byte [ebx + 0x3a3], 0
lea eax, [ebx + 0x3b4]
call fcn.0040504c
mov dword [ebx + 0x3b8], 0x20000000
xor eax, eax
mov dword [ebx + 0x3bc], eax
mov byte [ebx + 0x39a], 0
mov byte [ebx + 0x39b], 1
mov byte [ebx + 0x39d], 1
mov byte [ebx + 0x39e], 1
mov byte [ebx + 0x39f], 1
mov byte [ebx + 0x3a0], 0
mov byte [ebx + 0x3a1], 0
mov byte [ebx + 0x3a2], 0
mov byte [ebx + 0x398], 0
mov byte [ebx + 0x399], 0
xor eax, eax
mov dword [ebx + 0x4bc], eax
xor eax, eax
mov dword [ebx + 0x4c0], eax
lea ecx, [ebp - 0x140]
xor edx, edx
xor eax, eax
call fcn.0041b764
mov eax, dword [ebp - 0x140]
mov dword [ebx + 0x4c4], eax
mov eax, dword [ebp - 0x13c]
mov dword [ebx + 0x4c8], eax
mov byte [ebx + 0x325], 0
lea eax, [ebx + 0x390]
call fcn.0040504c
mov byte [ebx + 0x397], 0
mov byte [ebx + 0x395], 0
mov byte [ebx + 0x394], 0
mov byte [ebx + 0x396], 0
lea eax, [ebx + 0x4a8]
call fcn.0040504c
mov byte [ebx + 0x484], 0
lea eax, [ebx + 0x36c]
call fcn.0040504c
lea eax, [ebx + 0x370]
call fcn.0040504c
mov byte [ebx + 0x44d], 1
mov byte [ebx + 0x44e], 0
mov dword [ebx + 0x458], 0x3c
lea eax, [ebx + 0x450]
call fcn.0040504c
mov byte [ebx + 0x44c], 0
lea eax, [ebx + 0x45c]
call fcn.0040504c
lea eax, [ebx + 0x460]
call fcn.0040504c
lea eax, [ebx + 0x464]
call fcn.0040504c
lea eax, [ebx + 0x468]
call fcn.0040504c
lea eax, [ebx + 0x46c]
call fcn.0040504c
lea eax, [ebx + 0x474]
call fcn.0040504c
lea eax, [ebx + 0x470]
call fcn.0040504c
lea eax, [ebx + 0x374]
call fcn.0040504c
lea eax, [ebx + 0x378]
call fcn.0040504c
lea eax, [ebx + 0x37c]
call fcn.0040504c
lea eax, [ebx + 0x380]
call fcn.0040504c
lea eax, [ebx + 0x384]
call fcn.0040504c
lea eax, [ebx + 0x388]
call fcn.0040504c
lea eax, [ebx + 0x38c]
call fcn.0040504c
xor eax, eax
mov dword [ebx + 0x478], eax
mov byte [ebx + 0x47c], 0x84
lea eax, [ebx + 0x480]
call fcn.0040504c
mov dword [ebx + 0x34c], 1
mov byte [ebx + 0x324], 0
mov dword [ebx + 0x4ac], 0x1e
xor eax, eax
mov dword [ebx + 0x4b4], eax
xor eax, eax
mov dword [ebx + 0x4b8], eax
mov byte [ebx + 0x4cc], 0
lea eax, [ebp - 0x144]
call fcn.0047dd9c
mov edx, dword [ebp - 0x144]
mov eax, 0x5f5cc0
call fcn.004050a0
lea eax, [ebp - 0x10d]
push eax
push 0x104
call sub.KERNEL32.DLL_GetTempPathA
lea edx, [ebp - 0x148]
lea eax, [ebp - 0x10d]
call fcn.0040b978
mov edx, dword [ebp - 0x148]
lea eax, [ebx + 0x358]
call fcn.004050a0
xor ecx, ecx
xor edx, edx
mov eax, dword [ebx + 0x308]
call fcn.0057a524
xor edx, edx
mov eax, ebx
call fcn.0058b35c
xor edx, edx
mov eax, dword [ebx + 0x308]
call fcn.0057a4a0
xor edx, edx
call fcn.0042621c
mov esi, eax
mov dword [ebx + 0x334], esi
mov byte [esi + 0x250], 1
mov eax, dword [ebx + 0x354]
call fcn.0059b648
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
jne 0x594a7f
cmp dword [0x5f5c98], 0
jbe 0x594a66
test byte [0x5f5c9c], 2
setne cl
test byte [0x5f5c9c], 1
setne dl
mov al, 1
call fcn.0059abd0
xor ecx, ecx
mov edx, 0x59531c
mov eax, ebx
call fcn.00591f34
test al, al
jne 0x594a7f
mov dword [ebp - 4], 0x64
cmp dword [ebp - 4], 0
jne 0x59507c
cmp byte [ebx + 0x49e], 0
jne 0x59507c
mov al, byte [ebx + 0x47c]
test al, 2
jbe 0x594ac7
lea edx, [ebp - 0x14c]
mov eax, 0x595330
call fcn.005dea94
mov edx, dword [ebp - 0x14c]
lea eax, [ebx + 0x480]
call fcn.004050a0
jmp 0x594b83
test al, 4
jbe 0x594ae2
lea eax, [ebx + 0x480]
mov edx, dword [ebx + 0x358]
call fcn.004050a0
jmp 0x594b83
test al, 1
jbe 0x594b0b
lea edx, [ebp - 0x150]
mov eax, dword [ebx + 0x354]
call fcn.0040b2fc
mov edx, dword [ebp - 0x150]
lea eax, [ebx + 0x480]
call fcn.004050a0
jmp 0x594b83
test byte [ebx + 0x47c], 8
jbe 0x594b78
cmp dword [ebx + 0x480], 0
jbe 0x594b78
lea edx, [ebp - 0x154]
mov eax, dword [ebx + 0x480]
call fcn.0040b498
mov edx, dword [ebp - 0x154]
lea eax, [ebx + 0x480]
call fcn.004050a0
mov eax, dword [ebx + 0x480]
call fcn.00445bbc
test al, al
jne 0x594b83
lea edx, [ebp - 4]
mov eax, dword [ebx + 0x480]
call fcn.00445a6c
cmp dword [ebp - 4], 0
jne 0x594b6b
mov byte [ebx + 0x39a], 1
jmp 0x594b83
lea eax, [ebx + 0x480]
call fcn.0040504c
jmp 0x594b83
lea eax, [ebx + 0x480]
call fcn.0040504c
mov eax, dword [ebx + 0x480]
mov edx, 0x595344
call fcn.00405484
je 0x594bdb
cmp dword [ebx + 0x480], 0
je 0x594bdb
lea edx, [ebp - 0x15c]
mov eax, dword [ebx + 0x480]
call fcn.0040b384
mov eax, dword [ebp - 0x15c]
lea edx, [ebp - 0x158]
call fcn.0040fcec
mov eax, dword [ebp - 0x158]
call fcn.00405538
push eax
call sub.KERNEL32.DLL_GetDriveTypeA
sub eax, 2
jb 0x594bdb
sub eax, 3
jne 0x594bec
lea eax, [ebx + 0x480]
mov edx, dword [ebx + 0x358]
call fcn.004050a0
cmp dword [ebx + 0x374], 0
je 0x594c09
mov edx, 2
mov eax, dword [ebx + 0x374]
call fcn.0059cd64
test al, al
jne 0x594c2c
push 0x7f00
mov eax, dword [0x5f7668]
push eax
call sub.user32.dll_LoadCursorA
mov ecx, eax
mov eax, dword [0x5f6d74]
mov eax, dword [eax]
mov edx, 2
call fcn.0046ea30
cmp dword [ebx + 0x378], 0
je 0x594c49
mov edx, 1
mov eax, dword [ebx + 0x378]
call fcn.0059cd64
test al, al
jne 0x594ca5
mov eax, dword [0x5f6c30]
cmp byte [eax], 0
je 0x594c82
mov eax, dword [0x5f67c8]
cmp byte [eax], 0
je 0x594c82
push 0x59534c
mov eax, dword [0x5f7668]
push eax
call sub.user32.dll_LoadCursorA
mov ecx, eax
mov eax, dword [0x5f6d74]
mov eax, dword [eax]
mov edx, 1
call fcn.0046ea30
jmp 0x594ca5
push 0x59535c
mov eax, dword [0x5f7668]
push eax
call sub.user32.dll_LoadCursorA
mov ecx, eax
mov eax, dword [0x5f6d74]
mov eax, dword [eax]
mov edx, 1
call fcn.0046ea30
cmp dword [ebx + 0x37c], 0
je 0x594cc2
mov edx, 3
mov eax, dword [ebx + 0x37c]
call fcn.0059cd64
test al, al
jne 0x594d1e
mov eax, dword [0x5f6c30]
cmp byte [eax], 0
je 0x594cfb
mov eax, dword [0x5f67c8]
cmp byte [eax], 0
je 0x594cfb
push 0x59536c
mov eax, dword [0x5f7668]
push eax
call sub.user32.dll_LoadCursorA
mov ecx, eax
mov eax, dword [0x5f6d74]
mov eax, dword [eax]
mov edx, 3
call fcn.0046ea30
jmp 0x594d1e
push 0x59537c
mov eax, dword [0x5f7668]
push eax
call sub.user32.dll_LoadCursorA
mov ecx, eax
mov eax, dword [0x5f6d74]
mov eax, dword [eax]
mov edx, 3
call fcn.0046ea30
cmp dword [ebx + 0x380], 0
jbe 0x594d37
mov edx, 0xfffffff5
mov eax, dword [ebx + 0x380]
call fcn.0059cd64
call fcn.0059ccb4
mov eax, dword [ebx + 0x4ac]
call fcn.005e19b4
mov eax, ebx
call fcn.005926f8
mov eax, dword [ebx + 0x4c8]
push eax
mov eax, dword [ebx + 0x4c4]
push eax
push 0
push 0
lea eax, [ebp - 0x11d]
push eax
call sub.user32.dll_SetRect
push 0xffffffffffffffec
mov eax, ebx
call fcn.00457540
push eax
call sub.user32.dll_GetWindowLongA
push eax
cmp dword [ebx + 0x248], 0
setne al
neg al
sbb eax, eax
push eax
push 0xfffffffffffffff0
mov eax, ebx
call fcn.00457540
push eax
call sub.user32.dll_GetWindowLongA
push eax
lea eax, [ebp - 0x11d]
push eax
call sub.user32.dll_AdjustWindowRectEx
lea ecx, [ebp - 0x140]
mov edx, dword [ebp - 0x111]
sub edx, dword [ebp - 0x119]
mov eax, dword [ebp - 0x115]
sub eax, dword [ebp - 0x11d]
call fcn.0041b764
mov eax, dword [ebp - 0x140]
mov dword [ebx + 0x4c4], eax
mov eax, dword [ebp - 0x13c]
mov dword [ebx + 0x4c8], eax
cmp byte [0x5f5cac], 0
je 0x594e1e
mov eax, dword [0x5f6638]
cmp byte [eax], 0
jne 0x594e1e
mov eax, dword [0x5f5cb0]
push eax
mov eax, ebx
call fcn.00457540
mov edx, eax
mov eax, dword [0x5f6ad0]
mov eax, dword [eax]
mov eax, dword [eax + 0x30]
mov cl, byte [0x5f5ca4]
call fcn.005422d0
mov byte [0x5f5cac], al
cmp dword [ebx + 0x36c], 0
jbe 0x594e4f
mov eax, dword [ebx + 0x36c]
call fcn.00581db4
cmp ax, 6
je 0x594e4f
mov eax, dword [0x5f6ad0]
mov eax, dword [eax]
mov byte [eax + 0x5b], 0
mov eax, dword [0x5f6ad0]
mov eax, dword [eax]
call fcn.00470b78
cmp byte [0x5f5ca0], 2
jne 0x594ee5
mov ecx, ebx
mov dl, 1
mov eax, dword [0x5795a0]
call fcn.005797b8
mov esi, eax
mov dword [ebx + 0x4bc], esi
mov edx, dword [ebx + 0x35c]
mov eax, esi
call fcn.00579ab4
mov eax, dword [ebx + 0x4bc]
mov dword [eax + 0xa4], ebx
mov dword [eax + 0xa0], 0x596114
mov dword [eax + 0xac], ebx
mov dword [eax + 0xa8], 0x596114
mov edx, dword [ebx + 0x4c0]
test edx, edx
je 0x594eb5
mov dword [eax + 0x98], edx
mov dl, 1
mov eax, dword [ebx + 0x4bc]
call fcn.00579b74
cmp dword [ebx + 0x45c], 0
jne 0x594ed6
mov eax, dword [0x5f6ad0]
mov eax, dword [eax]
mov byte [eax + 0x5b], 0
mov eax, dword [0x5f6988]
cmp dword [eax], 0
je 0x594ee5
call fcn.0059acb4
mov byte [ebx + 0x3a4], 0
lea edx, [ebp - 8]
mov al, 0x42
call fcn.0059440c
test al, al
je 0x594f01
mov byte [ebx + 0x3a0], 1
mov eax, dword [0x5f68e8]
mov al, byte [eax]
dec eax
sub al, 2
jae 0x594f37
mov edx, 0x595394
mov eax, dword [ebx + 0x308]
call fcn.0057a5f8
mov esi, eax
mov edx, esi
mov eax, dword [ebx + 0x308]
call fcn.0057a5e0
test al, al
jne 0x594f79
mov esi, 1
jmp 0x594f79
lea edx, [ebp - 8]
mov al, 0x4b
call fcn.0059440c
test al, al
je 0x594f73
cmp dword [ebp - 8], 0
jbe 0x594f73
mov edx, dword [ebp - 8]
mov eax, dword [ebx + 0x308]
call fcn.0057a5f8
mov esi, eax
mov edx, esi
mov eax, dword [ebx + 0x308]
call fcn.0057a5e0
test al, al
jne 0x594f79
mov esi, 1
jmp 0x594f79
mov esi, dword [0x5f5ca8]
mov edx, esi
mov eax, dword [ebx + 0x308]
call fcn.0057a754
mov eax, ebx
call fcn.00457540
call fcn.0059cae0
mov eax, dword [ebx + 0x308]
call fcn.0057a4cc
mov edi, eax
dec edi
test edi, edi
jle 0x594fdb
mov esi, 1
push 0
push 0
mov edx, esi
mov eax, dword [ebx + 0x308]
call fcn.0057a4a0
xor edx, edx
call fcn.0042621c
mov edx, dword [0x53a560]
call fcn.004042d8
xor ecx, ecx
mov dx, 0x4c8
call fcn.0053adfc
inc esi
dec edi
jne 0x594fa9
mov eax, dword [ebx + 0x334]
test eax, eax
je 0x594ff4
push 0
push 0
xor ecx, ecx
mov dx, 0x4c8
call fcn.0053adfc
mov eax, dword [ebx + 0x248]
call fcn.00594518
xor eax, eax
mov dword [0x5f9bf8], eax
xor eax, eax
mov dword [0x5f9bfc], eax
mov eax, dword [ebx + 0x4c0]
call fcn.00594518
mov eax, dword [0x5f6ad0]
mov eax, dword [eax]
mov dword [eax + 0xdc], ebx
mov dword [eax + 0xd8], 0x58afb0
mov eax, dword [0x5f6ad0]
mov eax, dword [eax]
mov dword [eax + 0x11c], ebx
mov dword [eax + 0x118], 0x58b128
mov eax, dword [0x5f6ad0]
mov eax, dword [eax]
mov dword [eax + 0x124], ebx
mov dword [eax + 0x120], 0x594034
mov eax, dword [0x5f6a54]
cmp dword [eax], 0
jne 0x595284
mov edx, 0xffff8001
mov eax, ebx
call fcn.00450354
jmp 0x595284
mov eax, dword [0x5f6638]
cmp byte [eax], 0
je 0x5950bd
mov eax, ebx
call fcn.0046d338
mov eax, dword [0x5f6a28]
test byte [eax], 4
jne 0x5950a0
mov dl, 1
xor eax, eax
call fcn.005aefc4
mov eax, dword [0x5f6a28]
test byte [eax], 2
jne 0x5950af
call fcn.005dd880
mov eax, dword [0x5f6ad0]
mov eax, dword [eax]
call fcn.004708d0
jmp 0x5950c8
mov eax, dword [0x5f6ad0]
mov eax, dword [eax]
mov byte [eax + 0x5b], 0
mov eax, dword [0x5f6988]
cmp dword [eax], 0
je 0x5950d7
call fcn.0059acb4
cmp byte [ebx + 0x49e], 0
je 0x595149
cmp byte [ebx + 0x49f], 0
je 0x595149
push 0
push 1
mov ebx, dword [0x5f68a4]
mov ebx, dword [ebx]
lea edx, [ebp - 0x160]
mov eax, 0xca
call ebx
mov eax, dword [ebp - 0x160]
push eax
mov ebx, dword [0x5f68a4]
mov ebx, dword [ebx]
lea edx, [ebp - 0x164]
mov eax, 0xed
call ebx
mov eax, dword [ebp - 0x164]
push eax
lea edx, [ebp - 0x168]
mov eax, dword [0x5f6ad0]
mov eax, dword [eax]
call fcn.00470550
mov eax, dword [ebp - 0x168]
pop edx
pop ecx
call fcn.005e12fc
jmp 0x595278
cmp dword [ebp - 4], 0
je 0x5951e7
push 0
push 1
mov ebx, dword [0x5f68a4]
mov ebx, dword [ebx]
lea edx, [ebp - 0x16c]
mov eax, 0xca
call ebx
mov eax, dword [ebp - 0x16c]
push eax
mov ebx, dword [0x5f68a4]
mov ebx, dword [ebx]
lea edx, [ebp - 0x174]
mov eax, 0xec
call ebx
push dword [ebp - 0x174]
push 0x5953a4
push 0x5953a4
lea edx, [ebp - 0x178]
mov eax, dword [ebp - 4]
call fcn.0047c920
push dword [ebp - 0x178]
lea eax, [ebp - 0x170]
mov edx, 4
call fcn.004053f8
mov eax, dword [ebp - 0x170]
push eax
lea edx, [ebp - 0x17c]
mov eax, dword [0x5f6ad0]
mov eax, dword [eax]
call fcn.00470550
mov eax, dword [ebp - 0x17c]
pop edx
pop ecx
call fcn.005e12fc
jmp 0x595278
push 0
push 1
mov ebx, dword [0x5f68a4]
mov ebx, dword [ebx]
lea edx, [ebp - 0x180]
mov eax, 0xca
call ebx
mov eax, dword [ebp - 0x180]
push eax
mov ebx, dword [0x5f68a4]
mov ebx, dword [ebx]
lea edx, [ebp - 0x188]
mov eax, 0xec
call ebx
push dword [ebp - 0x188]
push 0x5953a4
push 0x5953a4
lea edx, [ebp - 0x18c]
mov eax, 0x64
call fcn.0047c920
push dword [ebp - 0x18c]
lea eax, [ebp - 0x184]
mov edx, 4
call fcn.004053f8
mov eax, dword [ebp - 0x184]
push eax
lea edx, [ebp - 0x190]
mov eax, dword [0x5f6ad0]
mov eax, dword [eax]
call fcn.00470550
mov eax, dword [ebp - 0x190]
pop edx
pop ecx
call fcn.005e12fc
mov eax, dword [0x5f6ad0]
mov eax, dword [eax]
call fcn.00470b78
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x5952c1
lea eax, [ebp - 0x190]
mov edx, 0x14
call fcn.00405070
lea eax, [ebp - 0x138]
mov edx, 6
call fcn.00405070
lea eax, [ebp - 8]
call fcn.0040504c
ret