Function at 0x4053c0
Capabilities:
Get common file path
Get disk information
Hash data with md5

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x6e4
mov eax, dword [0x40f004]
xor eax, esp
mov dword [esp + 0x6e0], eax
mov eax, dword [ebp + 8]
push ebx
push esi
push edi
xor ebx, ebx
push 0x103
lea ecx, [esp + 0x1e5]
push ebx
push ecx
mov dword [esp + 0x20], eax
mov byte [esp + 0x1ec], bl
call fcn.004090f0
xor eax, eax
push 0x103
mov dword [esp + 0xb1], eax
mov dword [esp + 0xb5], eax
mov dword [esp + 0xb9], eax
mov dword [esp + 0xbd], eax
mov dword [esp + 0xc1], eax
mov dword [esp + 0xc5], eax
mov dword [esp + 0xc9], eax
mov dword [esp + 0xcd], eax
mov dword [esp + 0xd1], eax
mov word [esp + 0xd5], ax
mov dword [esp + 0x8d], eax
mov dword [esp + 0x91], eax
mov dword [esp + 0x95], eax
mov dword [esp + 0x99], eax
mov dword [esp + 0x9d], eax
mov dword [esp + 0xa1], eax
mov dword [esp + 0xa5], eax
mov dword [esp + 0xa9], eax
lea eax, [esp + 0xe9]
xor edx, edx
push ebx
push eax
mov byte [esp + 0xb8], bl
mov byte [esp + 0x94], bl
mov byte [esp + 0x8c], bl
mov dword [esp + 0x8d], ebx
mov byte [esp + 0x28], bl
mov word [esp + 0x29], dx
mov byte [esp + 0xf0], bl
call fcn.004090f0
add esp, 0x18
push 0x104
lea ecx, [esp + 0xdc]
push ecx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryA]
push 3
lea edx, [esp + 0xdc]
push edx
lea eax, [esp + 0x7c]
push eax
call fcn.00406460
add esp, 0xc
push 0x104
lea ecx, [esp + 0x1e4]
push ecx
lea edx, [esp + 0x7c]
push edx
mov byte [esp + 0x84], bl
call dword [sym.imp.KERNEL32.dll_GetVolumeNameForVolumeMountPointA]
push 0x3ff
lea eax, [esp + 0x2ed]
push ebx
push eax
lea edi, [ebx + 0xb]
mov byte [esp + 0x2f4], bl
call fcn.004090f0
lea ecx, [esp + 0x1ec]
push ecx
lea edx, [esp + 0x2f8]
push 0x40dafc
push edx
xor esi, esi
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x18
jmp 0x405550
cmp edi, ebx
jne 0x405559
mov edi, 1
lea eax, [esi + edi]
mov cl, byte [esp + eax + 0x2e7]
mov byte [esp + esi + 0xa0], cl
inc esi
cmp esi, 0x26
jl 0x405550
lea eax, [esp + 0xa0]
mov byte [esp + esi + 0xa0], bl
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x405581
sub eax, edx
push eax
lea edx, [esp + 0xa4]
push edx
lea eax, [esp + 0x20]
mov dword [esp + 0x20], 0x67452301
mov dword [esp + 0x24], 0xefcdab89
mov dword [esp + 0x28], 0x98badcfe
mov dword [esp + 0x2c], 0x10325476
mov dword [esp + 0x30], ebx
mov dword [esp + 0x34], ebx
call fcn.00405b90
lea eax, [esp + 0xd0]
push eax
lea esi, [esp + 0x24]
call fcn.00405ca0
add esp, 0xc
xor esi, esi
lea ebx, [ebx]
movzx ecx, byte [esp + esi + 0xc8]
push ecx
lea edx, [esp + 0x14]
push str._02x
push edx
call dword [sym.imp.USER32.dll_wsprintfA]
lea eax, [esp + 0x1c]
add esp, 0xc
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x405603
sub eax, edx
push eax
lea eax, [esp + 0x14]
push eax
lea ecx, [esp + 0x84]
push 0x21
push ecx
call fcn.00406a64
inc esi
add esp, 0x10
cmp esi, 0x10
jl 0x4055e0
lea esi, [esp + 0x7c]
cmp byte [esp + 0x7c], bl
je 0x405647
movsx edx, byte [esi]
push edx
call fcn.004067e1
mov byte [esi], al
inc esi
add esp, 4
cmp byte [esi], bl
jne 0x405634
push 0x3ff
lea eax, [esp + 0x2ed]
push ebx
push eax
xor edi, edi
mov byte [esp + 0x2f4], bl
call fcn.004090f0
lea ecx, [esp + 0x88]
push ecx
lea edx, [esp + 0x2f8]
push 0x40dafc
push edx
xor esi, esi
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x18
cmp edi, ebx
jne 0x40568c
mov edi, 1
mov edx, dword [esp + 0x14]
lea eax, [esi + edi]
mov cl, byte [esp + eax + 0x2e7]
mov byte [esi + edx], cl
inc esi
cmp esi, 0x10
jl 0x405683
mov ecx, dword [esp + 0x6ec]
mov eax, edx
pop edi
mov byte [esi + eax], bl
pop esi
pop ebx
xor ecx, esp
call fcn.0040644b
mov esp, ebp
pop ebp
ret