Function at 0x5fee4f51
Capabilities:
Get disk information
Query environment variable

Disassembly:
push 0x850
mov eax, 0x5ff32007
call fcn.5ff1f8cb
mov dword [ebp - 0x830], ecx
mov eax, dword [ebp + 0xc]
mov edi, dword [ebp + 8]
lea ecx, [ebp - 0x854]
mov dword [ebp - 0x82c], edi
mov dword [ebp - 0x824], eax
call fcn.5feec33d
xor ebx, ebx
mov dword [ebp - 4], ebx
push edi
lea ecx, [ebp - 0x810]
mov byte [ebp - 4], 1
call fcn.5fee16d0
mov esi, 0x5ff3ba48
push esi
lea ecx, [ebp - 0x810]
mov byte [ebp - 4], 2
call fcn.5fee18a0
push esi
lea ecx, [ebp - 0x810]
call fcn.5fee1830
push 0x16
push 0x5ff35810
push edi
call fcn.5ff2149b
add esp, 0xc
test eax, eax
jne 0x5fee5196
mov esi, 0x5ff355d4
push esi
lea ecx, [ebp - 0x818]
mov dword [ebp - 0x828], ebx
call fcn.5fee16d0
push esi
lea ecx, [ebp - 0x81c]
mov byte [ebp - 4], 3
call fcn.5fee16d0
lea eax, [ebp - 0x828]
push eax
mov edi, 0x5ff3580c
push edi
lea eax, [ebp - 0x814]
push eax
lea ecx, [ebp - 0x810]
mov byte [ebp - 4], 4
call fcn.5fee6a12
mov byte [ebp - 4], 5
lea eax, [ebp - 0x814]
push 0x5ff3580a
push eax
call fcn.5fee6ac5
pop ecx
pop ecx
test al, al
je 0x5fee50ac
inc ebx
push 0x5c
cmp ebx, 2
jg 0x5fee5051
lea ecx, [ebp - 0x818]
call fcn.5fee6868
lea ecx, [ebp - 0x818]
jmp 0x5fee5062
lea ecx, [ebp - 0x81c]
call fcn.5fee6868
lea ecx, [ebp - 0x81c]
mov eax, dword [ebp - 0x814]
push dword [eax - 0xc]
push eax
call fcn.5fee2550
lea eax, [ebp - 0x828]
push eax
push edi
lea eax, [ebp - 0x1c]
push eax
lea ecx, [ebp - 0x810]
call fcn.5fee6a12
push eax
lea ecx, [ebp - 0x814]
mov byte [ebp - 4], 6
call fcn.5fee6895
mov ecx, dword [ebp - 0x1c]
add ecx, 0xfffffff0
mov byte [ebp - 4], 5
call fcn.5fee1450
jmp 0x5fee501f
push esi
lea ecx, [ebp - 0x820]
call fcn.5fee16d0
push 0x41
mov byte [ebp - 4], 7
pop esi
cmp si, 0x5a
ja 0x5fee512c
xor eax, eax
push 0x3a
lea edi, [ebp - 0x1a]
stosd dword es:[edi], eax
pop eax
mov word [ebp - 0x1a], ax
xor eax, eax
mov word [ebp - 0x18], ax
push 0x3e8
lea eax, [ebp - 0x80c]
push eax
lea eax, [ebp - 0x1c]
push eax
mov word [ebp - 0x1c], si
call dword [sym.imp.KERNEL32.dll_QueryDosDeviceW]
test eax, eax
je 0x5fee5190
push dword [ebp - 0x818]
lea eax, [ebp - 0x80c]
push eax
call fcn.5ff1efba
pop ecx
pop ecx
test eax, eax
jne 0x5fee5190
lea eax, [ebp - 0x1c]
push eax
call fcn.5ff1f982
pop ecx
push eax
lea eax, [ebp - 0x1c]
push eax
lea ecx, [ebp - 0x820]
call fcn.5fee1c40
push dword [ebp - 0x820]
lea ecx, [ebp - 0x810]
call fcn.5fee1b90
mov eax, dword [ebp - 0x81c]
push dword [eax - 0xc]
lea ecx, [ebp - 0x810]
push eax
call fcn.5fee2550
mov ecx, dword [ebp - 0x820]
add ecx, 0xfffffff0
call fcn.5fee1450
mov ecx, dword [ebp - 0x814]
add ecx, 0xfffffff0
call fcn.5fee1450
mov ecx, dword [ebp - 0x81c]
add ecx, 0xfffffff0
call fcn.5fee1450
mov ecx, dword [ebp - 0x818]
add ecx, 0xfffffff0
mov byte [ebp - 4], 2
call fcn.5fee1450
jmp 0x5fee51ba
inc esi
jmp 0x5fee50bf
push 4
push 0x5ff35800
push edi
call fcn.5ff2149b
add esp, 0xc
test eax, eax
jne 0x5fee51ba
push 0x5ff357f8
lea ecx, [ebp - 0x810]
call fcn.5fee18a0
mov edi, dword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsW]
push 0
push 0
push dword [ebp - 0x810]
call edi
push 0x5ff431f0
lea ecx, [ebp - 0x814]
lea esi, [eax + 1]
call fcn.5fee19a0
push esi
lea ecx, [ebp - 0x814]
mov byte [ebp - 4], 8
call fcn.5fee1bd0
push esi
lea ecx, [ebp - 0x814]
mov ebx, eax
call fcn.5fee1c10
push esi
push ebx
push dword [ebp - 0x810]
call edi
push esi
lea ecx, [ebp - 0x814]
mov edi, eax
call fcn.5fee2070
test edi, edi
jne 0x5fee525b
mov eax, dword [0x5ff4320c]
cmp eax, 0x5ff4320c
je 0x5fee526d
test byte [eax + 0x1c], 1
je 0x5fee526d
cmp byte [eax + 0x19], 3
jb 0x5fee526d
mov esi, dword [ebp - 0x810]
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
mov eax, dword [0x5ff4320c]
push esi
push 0x5ff354f8
push 0x22
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.5fee1620
add esp, 0x18
jmp 0x5fee526d
lea eax, [ebp - 0x814]
push eax
lea ecx, [ebp - 0x810]
call fcn.5fee6895
mov eax, dword [ebp - 0x830]
cmp byte [eax + 0x1d], 0
je 0x5fee53e0
cmp byte [eax + 0x1e], 0
jne 0x5fee53e0
mov ebx, dword [ebp - 0x824]
mov esi, dword [ebp - 0x810]
mov ecx, ebx
call fcn.5fee17a0
push 0
push eax
push esi
mov esi, dword [sym.imp.KERNEL32.dll_GetLongPathNameW]
call esi
push 0xffffffffffffffff
mov ecx, ebx
mov edi, eax
call fcn.5fee2070
test edi, edi
jne 0x5fee533a
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, dword [0x5ff4320c]
cmp ecx, 0x5ff4320c
je 0x5fee52f5
test byte [ecx + 0x1c], 1
je 0x5fee52f5
cmp byte [ecx + 0x19], 2
jb 0x5fee52f5
push eax
push dword [ebp - 0x810]
push 0x5ff354f8
push 0x23
push dword [ecx + 0x14]
push dword [ecx + 0x10]
call fcn.5fee39e5
add esp, 0x18
push dword [ebp - 0x82c]
mov ecx, ebx
call fcn.5fee1b90
mov ecx, ebx
call fcn.5fee6840
mov ecx, dword [ebp - 0x814]
add ecx, 0xfffffff0
call fcn.5fee1450
mov ecx, dword [ebp - 0x810]
add ecx, 0xfffffff0
call fcn.5fee1450
lea ecx, [ebp - 0x854]
call fcn.5feec2fb
xor al, al
call fcn.5ff1f927
ret 8
inc edi
push edi
mov ecx, ebx
call fcn.5fee1bd0
push edi
push eax
push dword [ebp - 0x810]
call esi
push 0xffffffffffffffff
mov ecx, ebx
mov esi, eax
call fcn.5fee2070
test esi, esi
jne 0x5fee53f4
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, dword [0x5ff4320c]
cmp ecx, 0x5ff4320c
je 0x5fee539c
test byte [ecx + 0x1c], 1
je 0x5fee539c
cmp byte [ecx + 0x19], 2
jb 0x5fee539c
push eax
push dword [ebp - 0x810]
push 0x5ff354f8
push 0x24
push dword [ecx + 0x14]
push dword [ecx + 0x10]
call fcn.5fee39e5
add esp, 0x18
push dword [ebp - 0x82c]
mov ecx, ebx
call fcn.5fee1b90
mov ecx, ebx
call fcn.5fee6840
mov ecx, dword [ebp - 0x814]
add ecx, 0xfffffff0
call fcn.5fee1450
mov ecx, dword [ebp - 0x810]
add ecx, 0xfffffff0
call fcn.5fee1450
xor bl, bl
lea ecx, [ebp - 0x854]
call fcn.5feec2fb
mov al, bl
jmp 0x5fee5332
mov ebx, dword [ebp - 0x824]
lea eax, [ebp - 0x810]
push eax
mov ecx, ebx
call fcn.5fee6895
mov ecx, ebx
call fcn.5fee6840
mov ecx, dword [ebp - 0x814]
add ecx, 0xfffffff0
call fcn.5fee1450
mov ecx, dword [ebp - 0x810]
add ecx, 0xfffffff0
call fcn.5fee1450
lea ecx, [ebp - 0x854]
call fcn.5feec2e5
mov bl, al
neg bl
sbb bl, bl
inc bl
jmp 0x5fee53ce