Function at 0x10029970
Capabilities:
Get common file path
Get disk information

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x10051261
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x1b8
mov eax, dword [0x1006099c]
push ebx
push esi
push edi
mov dword [esp + 0x1bc], eax
mov esi, ecx
xor eax, eax
mov ecx, 0x41
lea edi, [esp + 0xb0]
rep stosd dword es:[edi], eax
push 0x104
lea eax, [esp + 0xb4]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryA]
xor ebx, ebx
lea eax, [esp + 0xb0]
mov dword [esp + 0x90], 0xf
mov dword [esp + 0x8c], ebx
mov byte [esp + 0x7c], bl
lea edi, [eax + 1]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x100299e7
sub eax, edi
push eax
lea ecx, [esp + 0xb4]
push ecx
lea ecx, [esp + 0x80]
call fcn.10001f80
push 1
push 0x100537f4
lea ecx, [esp + 0x80]
mov dword [esp + 0x1d4], ebx
call fcn.10001d80
mov edx, dword [esi + 0x150]
mov eax, dword [edx + 4]
add esi, 0x14c
push eax
mov ecx, esi
call fcn.10020f90
mov eax, dword [esi + 4]
mov dword [eax + 4], eax
mov eax, dword [esi + 4]
mov dword [esi + 8], ebx
mov dword [eax], eax
mov eax, dword [esi + 4]
mov dword [eax + 8], eax
push 3
push 0x100537f0
lea ecx, [esp + 0x9c]
mov dword [esp + 0xb4], 0xf
mov dword [esp + 0xb0], ebx
mov byte [esp + 0xa0], bl
call fcn.10001f80
mov eax, dword [esp + 0xac]
mov edi, 0x10
cmp eax, edi
mov eax, dword [esp + 0x98]
mov byte [esp + 0x1cc], 1
mov dword [esp + 0x3c], ebx
jae 0x10029aa0
lea eax, [esp + 0x98]
push ebx
push ebx
push ebx
push ebx
lea ecx, [esp + 0x4c]
push ecx
push 0xc
push ebx
push eax
call dword [sym.imp.KERNEL32.dll_GetVolumeInformationA]
lea ecx, [esp + 0x38]
call fcn.10030a03
push 4
lea edx, [esp + 0x40]
push edx
lea eax, [esp + 0x64]
push eax
lea ecx, [esp + 0x44]
mov byte [esp + 0x1d8], 2
call fcn.100314b2
cmp dword [esp + 0x74], edi
mov eax, dword [esp + 0x60]
mov byte [esp + 0x1cc], 3
jae 0x10029aef
lea eax, [esp + 0x60]
mov ecx, dword [esp + 0x70]
push ecx
push eax
lea edx, [esp + 0x18]
push edx
lea ecx, [esp + 0x44]
call fcn.100314b2
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [esp + 0x68]
mov byte [esp + 0x1d8], 4
call fcn.10001e90
cmp dword [esp + 0x28], edi
mov byte [esp + 0x1cc], 3
jb 0x10029b33
mov eax, dword [esp + 0x14]
push eax
call fcn.10036530
add esp, 4
push 4
push ebx
lea ecx, [esp + 0x48]
push ecx
lea ecx, [esp + 0x68]
call fcn.100022d0
lea edx, [esp + 0x40]
push edx
lea eax, [esp + 0x7c]
push eax
lea ecx, [esp + 0x18]
push ecx
mov byte [esp + 0x1d8], 5
call fcn.10002ce0
add esp, 0xc
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [esp + 0x4c]
mov byte [esp + 0x1d8], 6
call fcn.10001e90
cmp dword [esp + 0x28], edi
mov byte [esp + 0x1cc], 5
jb 0x10029b93
mov edx, dword [esp + 0x14]
push edx
call fcn.10036530
add esp, 4
push 0xffffffffffffffff
push ebx
lea eax, [esp + 0x48]
push eax
lea ecx, [esp + 0x1c]
mov dword [esp + 0x34], 0xf
mov dword [esp + 0x30], ebx
mov byte [esp + 0x20], bl
call fcn.10001e90
mov dword [esp + 0x2c], ebx
lea ecx, [esp + 0x10]
push ecx
lea edx, [esp + 0x34]
push edx
mov ecx, esi
mov byte [esp + 0x1d4], 7
call fcn.100212d0
cmp dword [esp + 0x28], edi
mov byte [esp + 0x1cc], 5
jb 0x10029bec
mov eax, dword [esp + 0x14]
push eax
call fcn.10036530
add esp, 4
push 3
push 4
lea ecx, [esp + 0x18]
push ecx
lea ecx, [esp + 0x68]
call fcn.100022d0
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [esp + 0x4c]
mov byte [esp + 0x1d8], 8
call fcn.10001e90
cmp dword [esp + 0x28], edi
mov byte [esp + 0x1cc], 5
jb 0x10029c2e
mov edx, dword [esp + 0x14]
push edx
call fcn.10036530
add esp, 4
lea eax, [esp + 0x40]
push eax
lea ecx, [esp + 0x7c]
push ecx
lea edx, [esp + 0x18]
push edx
call fcn.10002ce0
add esp, 0xc
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [esp + 0x4c]
mov byte [esp + 0x1d8], 9
call fcn.10001e90
cmp dword [esp + 0x28], edi
mov byte [esp + 0x1cc], 5
jb 0x10029c75
mov eax, dword [esp + 0x14]
push eax
call fcn.10036530
add esp, 4
push 0xffffffffffffffff
push ebx
lea ecx, [esp + 0x48]
push ecx
lea ecx, [esp + 0x1c]
mov dword [esp + 0x34], 0xf
mov dword [esp + 0x30], ebx
mov byte [esp + 0x20], bl
call fcn.10001e90
mov dword [esp + 0x2c], ebx
lea edx, [esp + 0x10]
push edx
lea eax, [esp + 0x34]
push eax
mov ecx, esi
mov byte [esp + 0x1d4], 0xa
call fcn.100212d0
cmp dword [esp + 0x28], edi
mov byte [esp + 0x1cc], 5
jb 0x10029cce
mov ecx, dword [esp + 0x14]
push ecx
call fcn.10036530
add esp, 4
push 3
push 8
lea edx, [esp + 0x18]
push edx
lea ecx, [esp + 0x68]
call fcn.100022d0
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [esp + 0x4c]
mov byte [esp + 0x1d8], 0xb
call fcn.10001e90
cmp dword [esp + 0x28], edi
mov byte [esp + 0x1cc], 5
jb 0x10029d10
mov eax, dword [esp + 0x14]
push eax
call fcn.10036530
add esp, 4
lea ecx, [esp + 0x40]
push ecx
lea edx, [esp + 0x7c]
push edx
lea eax, [esp + 0x18]
push eax
call fcn.10002ce0
add esp, 0xc
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [esp + 0x4c]
mov byte [esp + 0x1d8], 0xc
call fcn.10001e90
cmp dword [esp + 0x28], edi
mov byte [esp + 0x1cc], 5
jb 0x10029d57
mov ecx, dword [esp + 0x14]
push ecx
call fcn.10036530
add esp, 4
push 0xffffffffffffffff
push ebx
lea edx, [esp + 0x48]
push edx
lea ecx, [esp + 0x1c]
mov dword [esp + 0x34], 0xf
mov dword [esp + 0x30], ebx
mov byte [esp + 0x20], bl
call fcn.10001e90
mov dword [esp + 0x2c], ebx
lea eax, [esp + 0x10]
push eax
lea ecx, [esp + 0x34]
push ecx
mov ecx, esi
mov byte [esp + 0x1d4], 0xd
call fcn.100212d0
cmp dword [esp + 0x28], edi
mov byte [esp + 0x1cc], 5
jb 0x10029db0
mov edx, dword [esp + 0x14]
push edx
call fcn.10036530
add esp, 4
push 4
push 0xa
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x68]
call fcn.100022d0
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [esp + 0x4c]
mov byte [esp + 0x1d8], 0xe
call fcn.10001e90
cmp dword [esp + 0x28], edi
mov byte [esp + 0x1cc], 5
jb 0x10029df2
mov ecx, dword [esp + 0x14]
push ecx
call fcn.10036530
add esp, 4
lea edx, [esp + 0x40]
push edx
lea eax, [esp + 0x7c]
push eax
lea ecx, [esp + 0x18]
push ecx
call fcn.10002ce0
add esp, 0xc
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [esp + 0x4c]
mov byte [esp + 0x1d8], 0xf
call fcn.10001e90
cmp dword [esp + 0x28], edi
mov byte [esp + 0x1cc], 5
jb 0x10029e39
mov edx, dword [esp + 0x14]
push edx
call fcn.10036530
add esp, 4
push 0xffffffffffffffff
push ebx
lea eax, [esp + 0x48]
push eax
lea ecx, [esp + 0x1c]
mov dword [esp + 0x34], 0xf
mov dword [esp + 0x30], ebx
mov byte [esp + 0x20], bl
call fcn.10001e90
mov dword [esp + 0x2c], ebx
lea ecx, [esp + 0x10]
push ecx
lea edx, [esp + 0x34]
push edx
mov ecx, esi
mov byte [esp + 0x1d4], 0x10
call fcn.100212d0
cmp dword [esp + 0x28], edi
mov byte [esp + 0x1cc], 5
jb 0x10029e92
mov eax, dword [esp + 0x14]
push eax
call fcn.10036530
add esp, 4
push 6
push 0xb
lea ecx, [esp + 0x18]
push ecx
lea ecx, [esp + 0x68]
call fcn.100022d0
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [esp + 0x4c]
mov byte [esp + 0x1d8], 0x11
call fcn.10001e90
cmp dword [esp + 0x28], edi
mov byte [esp + 0x1cc], 5
jb 0x10029ed4
mov edx, dword [esp + 0x14]
push edx
call fcn.10036530
add esp, 4
lea eax, [esp + 0x40]
push eax
lea ecx, [esp + 0x7c]
push ecx
lea edx, [esp + 0x18]
push edx
call fcn.10002ce0
add esp, 0xc
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [esp + 0x4c]
mov byte [esp + 0x1d8], 0x12
call fcn.10001e90
cmp dword [esp + 0x28], edi
mov byte [esp + 0x1cc], 5
jb 0x10029f1b
mov eax, dword [esp + 0x14]
push eax
call fcn.10036530
add esp, 4
push 0xffffffffffffffff
push ebx
lea ecx, [esp + 0x48]
push ecx
lea ecx, [esp + 0x1c]
mov dword [esp + 0x34], 0xf
mov dword [esp + 0x30], ebx
mov byte [esp + 0x20], bl
call fcn.10001e90
mov dword [esp + 0x2c], ebx
lea edx, [esp + 0x10]
push edx
lea eax, [esp + 0x34]
push eax
mov ecx, esi
mov byte [esp + 0x1d4], 0x13
call fcn.100212d0
cmp dword [esp + 0x28], edi
mov byte [esp + 0x1cc], 5
jb 0x10029f74
mov ecx, dword [esp + 0x14]
push ecx
call fcn.10036530
add esp, 4
push 3
push 0x11
lea edx, [esp + 0x18]
push edx
lea ecx, [esp + 0x68]
call fcn.100022d0
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [esp + 0x4c]
mov byte [esp + 0x1d8], 0x14
call fcn.10001e90
cmp dword [esp + 0x28], edi
mov byte [esp + 0x1cc], 5
jb 0x10029fb6
mov eax, dword [esp + 0x14]
push eax
call fcn.10036530
add esp, 4
lea ecx, [esp + 0x40]
push ecx
lea edx, [esp + 0x7c]
push edx
lea eax, [esp + 0x18]
push eax
call fcn.10002ce0
add esp, 0xc
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [esp + 0x4c]
mov byte [esp + 0x1d8], 0x15
call fcn.10001e90
cmp dword [esp + 0x28], edi
mov byte [esp + 0x1cc], 5
jb 0x10029ffd
mov ecx, dword [esp + 0x14]
push ecx
call fcn.10036530
add esp, 4
push 0xffffffffffffffff
push ebx
lea edx, [esp + 0x48]
push edx
lea ecx, [esp + 0x1c]
mov dword [esp + 0x34], 0xf
mov dword [esp + 0x30], ebx
mov byte [esp + 0x20], bl
call fcn.10001e90
mov dword [esp + 0x2c], ebx
lea eax, [esp + 0x10]
push eax
lea ecx, [esp + 0x34]
push ecx
mov ecx, esi
mov byte [esp + 0x1d4], 0x16
call fcn.100212d0
cmp dword [esp + 0x28], edi
mov byte [esp + 0x1cc], 5
jb 0x1002a056
mov edx, dword [esp + 0x14]
push edx
call fcn.10036530
add esp, 4
push 4
push 0x12
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x68]
call fcn.100022d0
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [esp + 0x4c]
mov byte [esp + 0x1d8], 0x17
call fcn.10001e90
cmp dword [esp + 0x28], edi
mov byte [esp + 0x1cc], 5
jb 0x1002a098
mov ecx, dword [esp + 0x14]
push ecx
call fcn.10036530
add esp, 4
lea edx, [esp + 0x40]
push edx
lea eax, [esp + 0x7c]
push eax
lea ecx, [esp + 0x18]
push ecx
call fcn.10002ce0
add esp, 0xc
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [esp + 0x4c]
mov byte [esp + 0x1d8], 0x18
call fcn.10001e90
cmp dword [esp + 0x28], edi
mov byte [esp + 0x1cc], 5
jb 0x1002a0df
mov edx, dword [esp + 0x14]
push edx
call fcn.10036530
add esp, 4
push 0xffffffffffffffff
push ebx
lea eax, [esp + 0x48]
push eax
lea ecx, [esp + 0x1c]
mov dword [esp + 0x34], 0xf
mov dword [esp + 0x30], ebx
mov byte [esp + 0x20], bl
call fcn.10001e90
mov dword [esp + 0x2c], ebx
lea ecx, [esp + 0x10]
push ecx
lea edx, [esp + 0x34]
push edx
mov ecx, esi
mov byte [esp + 0x1d4], 0x19
call fcn.100212d0
cmp dword [esp + 0x28], edi
mov byte [esp + 0x1cc], 5
jb 0x1002a138
mov eax, dword [esp + 0x14]
push eax
call fcn.10036530
add esp, 4
push 5
push 0x13
lea ecx, [esp + 0x18]
push ecx
lea ecx, [esp + 0x68]
call fcn.100022d0
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [esp + 0x4c]
mov byte [esp + 0x1d8], 0x1a
call fcn.10001e90
cmp dword [esp + 0x28], edi
mov byte [esp + 0x1cc], 5
jb 0x1002a17a
mov edx, dword [esp + 0x14]
push edx
call fcn.10036530
add esp, 4
lea eax, [esp + 0x40]
push eax
lea ecx, [esp + 0x7c]
push ecx
lea edx, [esp + 0x18]
push edx
call fcn.10002ce0
add esp, 0xc
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [esp + 0x4c]
mov byte [esp + 0x1d8], 0x1b
call fcn.10001e90
cmp dword [esp + 0x28], edi
mov byte [esp + 0x1cc], 5
jb 0x1002a1c1
mov eax, dword [esp + 0x14]
push eax
call fcn.10036530
add esp, 4
push 0xffffffffffffffff
push ebx
lea ecx, [esp + 0x48]
push ecx
lea ecx, [esp + 0x1c]
mov dword [esp + 0x34], 0xf
mov dword [esp + 0x30], ebx
mov byte [esp + 0x20], bl
call fcn.10001e90
mov dword [esp + 0x2c], ebx
lea edx, [esp + 0x10]
push edx
lea eax, [esp + 0x34]
push eax
mov ecx, esi
mov byte [esp + 0x1d4], 0x1c
call fcn.100212d0
cmp dword [esp + 0x28], edi
mov byte [esp + 0x1cc], 5
jb 0x1002a21a
mov ecx, dword [esp + 0x14]
push ecx
call fcn.10036530
add esp, 4
push 4
push 0x15
lea edx, [esp + 0x18]
push edx
lea ecx, [esp + 0x68]
call fcn.100022d0
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [esp + 0x4c]
mov byte [esp + 0x1d8], 0x1d
call fcn.10001e90
cmp dword [esp + 0x28], edi
mov byte [esp + 0x1cc], 5
jb 0x1002a25c
mov eax, dword [esp + 0x14]
push eax
call fcn.10036530
add esp, 4
lea ecx, [esp + 0x40]
push ecx
lea edx, [esp + 0x7c]
push edx
lea eax, [esp + 0x18]
push eax
call fcn.10002ce0
add esp, 0xc
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [esp + 0x4c]
mov byte [esp + 0x1d8], 0x1e
call fcn.10001e90
cmp dword [esp + 0x28], edi
mov byte [esp + 0x1cc], 5
jb 0x1002a2a3
mov ecx, dword [esp + 0x14]
push ecx
call fcn.10036530
add esp, 4
push 0xffffffffffffffff
push ebx
lea edx, [esp + 0x48]
push edx
lea ecx, [esp + 0x1c]
mov dword [esp + 0x34], 0xf
mov dword [esp + 0x30], ebx
mov byte [esp + 0x20], bl
call fcn.10001e90
mov dword [esp + 0x2c], ebx
lea eax, [esp + 0x10]
push eax
lea ecx, [esp + 0x34]
push ecx
mov ecx, esi
mov byte [esp + 0x1d4], 0x1f
call fcn.100212d0
cmp dword [esp + 0x28], edi
mov byte [esp + 0x1cc], 5
jb 0x1002a2fc
mov edx, dword [esp + 0x14]
push edx
call fcn.10036530
add esp, 4
push 3
push 0x16
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x68]
call fcn.100022d0
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [esp + 0x4c]
mov byte [esp + 0x1d8], 0x20
call fcn.10001e90
cmp dword [esp + 0x28], edi
mov byte [esp + 0x1cc], 5
jb 0x1002a33e
mov ecx, dword [esp + 0x14]
push ecx
call fcn.10036530
add esp, 4
lea edx, [esp + 0x40]
push edx
lea eax, [esp + 0x7c]
push eax
lea ecx, [esp + 0x18]
push ecx
call fcn.10002ce0
add esp, 0xc
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [esp + 0x4c]
mov byte [esp + 0x1d8], 0x21
call fcn.10001e90
cmp dword [esp + 0x28], edi
mov byte [esp + 0x1cc], 5
jb 0x1002a385
mov edx, dword [esp + 0x14]
push edx
call fcn.10036530
add esp, 4
push 0xffffffffffffffff
push ebx
lea eax, [esp + 0x48]
push eax
lea ecx, [esp + 0x1c]
mov dword [esp + 0x34], 0xf
mov dword [esp + 0x30], ebx
mov byte [esp + 0x20], bl
call fcn.10001e90
mov dword [esp + 0x2c], ebx
lea ecx, [esp + 0x10]
push ecx
lea edx, [esp + 0x34]
push edx
mov ecx, esi
mov byte [esp + 0x1d4], 0x22
call fcn.100212d0
cmp dword [esp + 0x28], edi
jb 0x1002a3d6
mov eax, dword [esp + 0x14]
push eax
call fcn.10036530
add esp, 4
cmp dword [esp + 0x58], edi
jb 0x1002a3e9
mov ecx, dword [esp + 0x44]
push ecx
call fcn.10036530
add esp, 4
cmp dword [esp + 0x74], edi
mov esi, 0xf
mov dword [esp + 0x58], esi
mov dword [esp + 0x54], ebx
mov byte [esp + 0x44], bl
jb 0x1002a40d
mov edx, dword [esp + 0x60]
push edx
call fcn.10036530
add esp, 4
lea ecx, [esp + 0x38]
mov dword [esp + 0x74], esi
mov dword [esp + 0x70], ebx
mov byte [esp + 0x60], bl
mov byte [esp + 0x1cc], 1
call fcn.10030a0c
cmp dword [esp + 0xac], edi
jb 0x1002a443
mov eax, dword [esp + 0x98]
push eax
call fcn.10036530
add esp, 4
cmp dword [esp + 0x90], edi
mov dword [esp + 0xac], esi
mov dword [esp + 0xa8], ebx
mov byte [esp + 0x98], bl
jb 0x1002a46e
mov ecx, dword [esp + 0x7c]
push ecx
call fcn.10036530
add esp, 4
mov ecx, dword [esp + 0x1c4]
mov dword fs:[0], ecx
mov ecx, dword [esp + 0x1bc]
call fcn.1003fd01
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret