Function at 0x426c60
Capabilities:
Get common file path
Get disk information

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x50e508
mov eax, dword fs:[0]
push eax
mov eax, 0x2dac
call fcn.004e1f60
mov eax, dword [0x55e2f4]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ebx, dword [ebp + 8]
mov dword [ebp - 0x2da4], 0
mov dword [ebp - 0x2d9c], ebx
mov dword [ebp - 0x2db4], ebx
mov dword [ebx], 0
mov dword [ebx + 4], 0
mov dword [ebx + 8], 0
xor esi, esi
mov dword [ebp - 4], 0
mov dword [ebp - 0x2da4], 1
mov dword [ebp - 0x2da0], esi
xor edi, edi
nop word [eax + eax]
push edi
push esi
lea eax, [ebp - 0x89c]
push str.DeviceHarddisk_dPartition_d
push eax
call fcn.004054c0
add esp, 0x10
cmp dword [ebp + 0x14], 0
je 0x426d07
test edi, edi
je 0x426d07
mov eax, 1
jmp 0x426d09
xor eax, eax
push eax
lea eax, [ebp - 0x2d98]
push eax
lea eax, [ebp - 0x89c]
push eax
call fcn.0042a7a0
add esp, 0xc
test eax, eax
jne 0x426d31
test edi, edi
je 0x427179
jmp 0x42716f
xor eax, eax
mov dword [ebp - 0x1528], 7
xorps xmm0, xmm0
mov dword [ebp - 0x152c], 0
mov word [ebp - 0x153c], ax
mov dword [ebp - 0x1510], 7
mov dword [ebp - 0x1514], eax
mov word [ebp - 0x1524], ax
mov dword [ebp - 0x14f8], 7
mov dword [ebp - 0x14fc], eax
mov word [ebp - 0x150c], ax
mov dword [ebp - 0x14e0], 7
mov dword [ebp - 0x14e4], eax
mov word [ebp - 0x14f4], ax
movups xmmword [ebp - 0x14dc], xmm0
mov dword [ebp - 0x14b0], eax
movups xmmword [ebp - 0x14cc], xmm0
mov dword [ebp - 0x14ac], eax
movlpd qword [ebp - 0x14bc], xmm0
mov dword [ebp - 0x14a8], eax
mov dword [ebp - 4], 1
mov dword [ebp - 0x14b4], esi
cmp word [ebp - 0x89c], ax
jne 0x426dd8
xor ecx, ecx
jmp 0x426df0
lea ecx, [ebp - 0x89c]
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x426de1
sub ecx, edx
sar ecx, 1
push ecx
lea eax, [ebp - 0x89c]
push eax
lea ecx, [ebp - 0x150c]
call fcn.004051a0
cmp dword [ebp + 0x14], 0
je 0x426e1c
cmp dword [ebp - 0x258a], 0
mov dword [ebp - 0x14c4], 1
jne 0x426e26
mov dword [ebp - 0x14c4], 0
push 0x82a
lea eax, [ebp - 0x1d68]
push 0
push eax
call fcn.004e46b0
lea eax, [ebp - 0x89c]
push eax
lea eax, [ebp - 0x1d68]
push 0x5168f0
push eax
call fcn.004054c0
add esp, 0x18
lea eax, [ebp - 0x2db8]
push 0
push eax
push 0x82a
lea eax, [ebp - 0x1d68]
push eax
push 0x82a
push eax
push 0x222038
push dword [0x559328]
call dword [sym.imp.KERNEL32.DLL_DeviceIoControl]
test eax, eax
je 0x426eae
mov eax, dword [ebp - 0x154e]
shr eax, 8
movzx eax, al
mov dword [ebp - 0x14dc], eax
mov eax, dword [ebp - 0x155e]
mov dword [ebp - 0x14bc], eax
mov eax, dword [ebp - 0x155a]
mov dword [ebp - 0x14b8], eax
cmp dword [ebp + 0xc], 0
jne 0x4270ed
lea eax, [ebp - 0x89c]
push eax
call fcn.00427440
mov ebx, eax
add esp, 4
test ebx, ebx
js 0x426fb8
lea ecx, [ebx + 0x41]
movsx cx, cl
movzx ecx, cx
push ecx
push 1
lea ecx, [ebp - 0x153c]
call fcn.00417200
push 1
push 0x51acf0
lea ecx, [ebp - 0x153c]
call fcn.00404fa0
lea eax, [ebx + 0x41]
mov dword [ebp - 0x16], 0x5c003a
mov word [ebp - 0x18], ax
xor eax, eax
push eax
push eax
mov word [ebp - 0x12], ax
lea eax, [ebp - 0x2dac]
push eax
push 0
push 0
push 0x20
lea eax, [ebp - 0x98]
push eax
lea eax, [ebp - 0x18]
push eax
call dword [sym.imp.KERNEL32.DLL_GetVolumeInformationW]
test eax, eax
je 0x426f72
cmp word [ebp - 0x98], 0
jne 0x426f41
xor ecx, ecx
jmp 0x426f5f
lea ecx, [ebp - 0x98]
lea edx, [ecx + 2]
nop word [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x426f50
sub ecx, edx
sar ecx, 1
push ecx
lea eax, [ebp - 0x98]
push eax
lea ecx, [ebp - 0x14f4]
call fcn.004051a0
push 0x401
lea eax, [ebp - 0x10a0]
push eax
call dword [sym.imp.KERNEL32.DLL_GetSystemDirectoryW]
test eax, eax
je 0x426f9a
movzx eax, word [ebp - 0x10a0]
push eax
call fcn.004f842a
add esp, 4
jmp 0x426f9c
xor al, al
mov edx, dword [ebp - 0x14d8]
movsx ecx, al
lea eax, [ebx + 0x41]
cmp ecx, eax
mov eax, 1
cmove edx, eax
mov dword [ebp - 0x14d8], edx
test edi, edi
jne 0x4270f3
lea eax, [ebp - 0x14a4]
push eax
push esi
call fcn.004087c0
add esp, 8
test eax, eax
je 0x427022
lea eax, [ebp - 0x10a0]
push eax
lea eax, [ebp - 0x14a4]
push eax
call fcn.004069e0
add esp, 8
cmp word [ebp - 0x10a0], di
jne 0x426ff7
xor eax, eax
jmp 0x42700f
lea eax, [ebp - 0x10a0]
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x427000
sub eax, edx
sar eax, 1
push eax
lea eax, [ebp - 0x10a0]
push eax
lea ecx, [ebp - 0x1524]
call fcn.004051a0
push 0x81a
lea eax, [ebp - 0x2584]
push 0
push eax
call fcn.004e46b0
lea eax, [ebp - 0x89c]
push eax
lea eax, [ebp - 0x2584]
push 0x5168f0
push eax
call fcn.004054c0
add esp, 0x18
lea eax, [ebp - 0x2db0]
push 0
push eax
push 0x81a
lea eax, [ebp - 0x2584]
push eax
push 0x81a
push eax
push 0x22203c
push dword [0x559328]
call dword [sym.imp.KERNEL32.DLL_DeviceIoControl]
test eax, eax
je 0x42709c
cmp dword [ebp - 0x1d7a], 0xb
je 0x4270e1
push esi
call fcn.00408c10
add esp, 4
test eax, eax
jne 0x4270e1
mov dword [ebp - 0x14c0], eax
mov ebx, dword [ebp - 0x2d9c]
lea eax, [ebp - 0x153c]
mov ecx, ebx
push eax
call fcn.0042b770
mov ecx, dword [ebx + 4]
mov eax, 0x6bca1af3
sub ecx, dword [ebx]
imul ecx
lea ecx, [ebp - 0x153c]
mov byte [ebp - 4], 0
sar edx, 6
mov eax, edx
shr eax, 0x1f
dec eax
add eax, edx
mov dword [ebp - 0x2da8], eax
call fcn.004255a0
jmp 0x42716f
mov dword [ebp - 0x14c0], 1
jmp 0x42709c
test edi, edi
jne 0x4270f9
jmp 0x4270a2
mov ebx, dword [ebp - 0x2d9c]
imul esi, dword [ebp - 0x2da8], 0x98
cmp dword [ebp - 0x14d8], 0
mov ecx, dword [ebx]
mov dword [ebp - 0x14cc], 1
mov dword [ebp - 0x14b4], edi
mov eax, dword [ecx + esi + 0x7c]
mov dword [ebp - 0x14c0], eax
je 0x427130
mov dword [ecx + esi + 0x64], 1
cmp dword [ebp + 0x10], 0
je 0x427144
lea eax, [ebp - 0x153c]
mov ecx, ebx
push eax
call fcn.0042b770
mov ecx, dword [ebx]
lea eax, [ebp - 0x153c]
add esi, 0x8c
push eax
add ecx, esi
call fcn.0042b770
lea ecx, [ebp - 0x153c]
mov byte [ebp - 4], 0
call fcn.004255a0
mov esi, dword [ebp - 0x2da0]
inc edi
cmp edi, 0x20
jl 0x426ce0
inc esi
mov dword [ebp - 0x2da0], esi
cmp esi, 0x40
jl 0x426cd8
call fcn.0041b290
cmp eax, 6
jl 0x427418
mov edi, dword [ebp + 0x14]
xor esi, esi
nop dword [eax]
push esi
lea eax, [ebp - 0x89c]
push 0x51acf4
push eax
call fcn.004054c0
push edi
lea eax, [ebp - 0x2d98]
push eax
lea eax, [ebp - 0x89c]
push eax
call fcn.0042a7a0
add esp, 0x18
test eax, eax
je 0x42740b
push 0x82a
lea eax, [ebp - 0x1d68]
push 0
push eax
call fcn.004e46b0
lea eax, [ebp - 0x89c]
push eax
lea eax, [ebp - 0x1d68]
push 0x5168f0
push eax
call fcn.004054c0
add esp, 0x18
lea eax, [ebp - 0x2db0]
push 0
push eax
push 0x82a
lea eax, [ebp - 0x1d68]
push eax
push 0x82a
push eax
push 0x222038
push dword [0x559328]
call dword [sym.imp.KERNEL32.DLL_DeviceIoControl]
test eax, eax
je 0x42740b
cmp dword [ebp - 0x1542], 0
je 0x42740b
lea ecx, [ebp - 0x153c]
call fcn.004254f0
cmp word [ebp - 0x89c], 0
mov dword [ebp - 4], 2
mov dword [ebp - 0x14d4], 1
mov dword [ebp - 0x14cc], 1
mov dword [ebp - 0x14b4], esi
jne 0x42727a
xor ecx, ecx
jmp 0x427292
lea ecx, [ebp - 0x89c]
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x427283
sub ecx, edx
sar ecx, 1
push ecx
lea eax, [ebp - 0x89c]
push eax
lea ecx, [ebp - 0x150c]
call fcn.004051a0
mov eax, dword [ebp - 0x155e]
mov dword [ebp - 0x14bc], eax
mov eax, dword [ebp - 0x155a]
mov dword [ebp - 0x14b8], eax
test edi, edi
je 0x4272d4
cmp dword [ebp - 0x258a], 0
mov dword [ebp - 0x14c4], 1
jne 0x4272de
mov dword [ebp - 0x14c4], 0
cmp dword [ebp + 0xc], 0
jne 0x4273ee
lea eax, [ebp - 0x89c]
push eax
call fcn.00427440
mov ebx, eax
add esp, 4
test ebx, ebx
js 0x4273e8
lea ecx, [ebx + 0x41]
movsx cx, cl
movzx ecx, cx
push ecx
push 1
lea ecx, [ebp - 0x153c]
call fcn.00417200
push 1
push 0x51acf0
lea ecx, [ebp - 0x153c]
call fcn.00404fa0
lea eax, [ebx + 0x41]
mov dword [ebp - 0x16], 0x5c003a
mov word [ebp - 0x18], ax
xor eax, eax
push eax
push eax
mov word [ebp - 0x12], ax
lea eax, [ebp - 0x2dac]
push eax
push 0
push 0
push 0x20
lea eax, [ebp - 0x98]
push eax
lea eax, [ebp - 0x18]
push eax
call dword [sym.imp.KERNEL32.DLL_GetVolumeInformationW]
test eax, eax
je 0x4273a2
cmp word [ebp - 0x98], 0
jne 0x427371
xor ecx, ecx
jmp 0x42738f
lea ecx, [ebp - 0x98]
lea edx, [ecx + 2]
nop word [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x427380
sub ecx, edx
sar ecx, 1
push ecx
lea eax, [ebp - 0x98]
push eax
lea ecx, [ebp - 0x14f4]
call fcn.004051a0
push 0x401
lea eax, [ebp - 0x10a0]
push eax
call dword [sym.imp.KERNEL32.DLL_GetSystemDirectoryW]
test eax, eax
je 0x4273ca
movzx eax, word [ebp - 0x10a0]
push eax
call fcn.004f842a
add esp, 4
jmp 0x4273cc
xor al, al
mov edx, dword [ebp - 0x14d8]
movsx ecx, al
lea eax, [ebx + 0x41]
cmp ecx, eax
mov eax, 1
cmove edx, eax
mov dword [ebp - 0x14d8], edx
mov ebx, dword [ebp - 0x2d9c]
lea eax, [ebp - 0x153c]
mov ecx, ebx
push eax
call fcn.0042b770
lea ecx, [ebp - 0x153c]
mov byte [ebp - 4], 0
call fcn.004255a0
inc esi
cmp esi, 0x100
jl 0x4271a0
mov eax, ebx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004e1f40
mov esp, ebp
pop ebp
ret