Function at 0x10005070
Capabilities:
Get common file path
Get disk information

Disassembly:
push ebp
mov ebp, esp
cmp dword [ebp + 8], 0
je 0x1000528e
push 0x1006ae9c
mov eax, dword [ebp + 8]
push eax
call fcn.1002a7eb
add esp, 8
test eax, eax
jne 0x1000528e
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_CopyImage]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetDllDirectoryW]
push 0
call dword [sym.imp.USER32.dll_GetSysColorBrush]
call dword [sym.imp.KERNEL32.dll_GetThreadErrorMode]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetThreadPriorityBoost]
push 0
call dword [sym.imp.KERNEL32.dll_SwitchToFiber]
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_GetUpdatedClipboardFormats]
push 0
call dword [sym.imp.KERNEL32.dll_DeleteTimerQueue]
call dword [sym.imp.KERNEL32.dll_GetLargePageMinimum]
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetFileAttributesTransactedW]
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_DdeEnableCallback]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetLogicalProcessorInformation]
push 0
call dword [sym.imp.KERNEL32.dll_LocalFree]
push 0
call dword [sym.imp.USER32.dll_DdeDisconnect]
push 0
call dword [sym.imp.KERNEL32.dll_HeapDestroy]
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetVolumePathNamesForVolumeNameW]
push 0
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_GetDlgItemTextW]
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_CheckMenuItem]
push 0
call dword [sym.imp.KERNEL32.dll_IsDBCSLeadByte]
push 0
call dword [sym.imp.KERNEL32.dll_GetPriorityClass]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_FindFirstChangeNotificationW]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetCompressedFileSizeW]
push 0
call dword [sym.imp.USER32.dll_IsMenu]
push 0
call dword [sym.imp.USER32.dll_GetWindowDC]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_FindNextVolumeMountPointW]
push 0
call dword [sym.imp.USER32.dll_WindowFromDC]
push 0
call dword [sym.imp.KERNEL32.dll_CancelIo]
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_OffsetRect]
push 0
call dword [sym.imp.USER32.dll_CloseWindow]
push 0
call dword [sym.imp.KERNEL32.dll_IsDBCSLeadByte]
push 0
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_NotifyWinEvent]
push 0
call dword [sym.imp.KERNEL32.dll_SetErrorMode]
push 0
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_DrawAnimatedRects]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetCommMask]
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_ChangeDisplaySettingsExW]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetCurrentDirectoryW]
push 0
push 0
call dword [sym.imp.USER32.dll_GetWindowInfo]
push 0
push 0
call dword [sym.imp.USER32.dll_KillTimer]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetProcessPriorityBoost]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SystemTimeToFileTime]
push 0
push 0
call dword [sym.imp.USER32.dll_GetClassWord]
push 0
call dword [sym.imp.KERNEL32.dll_SetConsoleActiveScreenBuffer]
push 0
call dword [sym.imp.USER32.dll_SetClipboardViewer]
push 0
call dword [sym.imp.KERNEL32.dll_GetSystemPowerStatus]
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_GetUpdateRgn]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GenerateConsoleCtrlEvent]
push 0
call dword [sym.imp.USER32.dll_UnhookWindowsHookEx]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_UpdateLayeredWindow]
mov ecx, 4
imul edx, ecx, 0x85
add edx, dword [0x100612e8]
push edx
mov eax, 4
imul ecx, eax, 0x85
mov edx, dword [0x100612e8]
mov eax, dword [edx + ecx]
push eax
mov ecx, 4
imul edx, ecx, 0xb3
mov eax, dword [0x100612e8]
mov ecx, dword [eax + edx]
push ecx
mov edx, 4
imul eax, edx, 0x9d
mov ecx, dword [0x10061304]
mov edx, dword [ecx + eax]
push edx
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
pop ebp
ret