Function at 0x4323d0
Capabilities:
Get common file path
Get disk information
Get hostname

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x23c
mov eax, dword [0x46c004]
xor eax, esp
mov dword [esp + 0x238], eax
push ebx
xor eax, eax
mov dword [esp + 4], ecx
push esi
mov word [esp + 0x24], ax
xorps xmm0, xmm0
mov dword [esp + 0x2e], eax
mov word [esp + 0x32], ax
lea eax, [esp + 0x1c]
push edi
push eax
lea eax, [esp + 0x2c]
movq qword [esp + 0x2e], xmm0
push eax
mov dword [esp + 0x28], 0x10
call dword [sym.imp.KERNEL32.dll_GetComputerNameA]
neg eax
push 0x104
sbb eax, eax
and dword [esp + 0x24], eax
lea eax, [esp + 0x3c]
push eax
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
test eax, eax
je 0x4325cf
lea eax, [esp + 0x38]
push 0x5c
push eax
call fcn.004400f4
add esp, 8
test eax, eax
je 0x43245b
xor ecx, ecx
mov word [eax + 2], cx
push 0
push 0
push 0
push 0
lea eax, [esp + 0x34]
push eax
push 0
push 0
lea eax, [esp + 0x54]
push eax
call dword [sym.imp.KERNEL32.dll_GetVolumeInformationW]
test eax, eax
je 0x4325cf
mov ebx, dword [esp + 0x24]
mov edx, dword [esp + 0x20]
imul eax, ebx, 0x19660d
imul esi, ebx, 0x660d
add eax, 0x3c6ef35f
mov edi, eax
mov dword [esp + 0x10], eax
mov eax, ebx
shr edi, 0x10
shr eax, 0x10
sub esi, 0xca1
xor edi, eax
xor esi, ebx
mov al, byte [esp + 0x28]
xor al, byte [esp + 0x10]
xor al, bl
mov word [esp + 0x14], si
mov word [esp + 0x16], di
mov byte [esp + 0x18], al
test edx, edx
je 0x4324da
lea eax, [edx - 1]
test eax, eax
je 0x4324da
mov ecx, 1
jmp 0x4324dc
xor ecx, ecx
mov al, byte [esp + ecx + 0x28]
xor al, byte [esp + 0x11]
xor al, bl
mov byte [esp + 0x19], al
test edx, edx
je 0x4324f8
lea eax, [edx - 1]
cmp ecx, eax
je 0x4324f8
inc ecx
jmp 0x4324fa
xor ecx, ecx
mov al, byte [esp + ecx + 0x28]
xor al, byte [esp + 0x12]
xor al, bl
mov byte [esp + 0x1a], al
test edx, edx
je 0x432516
lea eax, [edx - 1]
cmp ecx, eax
je 0x432516
inc ecx
jmp 0x432518
xor ecx, ecx
mov al, byte [esp + ecx + 0x28]
xor al, byte [esp + 0x13]
xor al, bl
mov byte [esp + 0x1b], al
test edx, edx
je 0x432534
lea eax, [edx - 1]
cmp ecx, eax
je 0x432534
inc ecx
jmp 0x432536
xor ecx, ecx
mov al, byte [esp + ecx + 0x28]
xor al, byte [esp + 0x14]
xor al, bl
mov byte [esp + 0x1c], al
test edx, edx
je 0x432552
lea eax, [edx - 1]
cmp ecx, eax
je 0x432552
inc ecx
jmp 0x432554
xor ecx, ecx
mov al, byte [esp + ecx + 0x28]
xor al, byte [esp + 0x15]
xor al, bl
mov byte [esp + 0x1d], al
test edx, edx
je 0x432570
lea eax, [edx - 1]
cmp ecx, eax
je 0x432570
inc ecx
jmp 0x432572
xor ecx, ecx
mov al, byte [esp + ecx + 0x28]
xor al, byte [esp + 0x16]
xor al, bl
mov byte [esp + 0x1e], al
test edx, edx
je 0x43258e
lea eax, [edx - 1]
cmp ecx, eax
je 0x43258e
inc ecx
jmp 0x432590
xor ecx, ecx
mov al, byte [esp + ecx + 0x28]
xor al, byte [esp + 0x17]
xor al, bl
mov byte [esp + 0x1f], al
movzx eax, word [esp + 0x1e]
push eax
push dword [esp + 0x1e]
movzx eax, word [esp + 0x20]
push eax
movzx eax, di
push eax
movzx eax, si
push eax
push dword [esp + 0x24]
push str._08x_04x_04x_04x_08x_04x
push 0x21
push 0x21
push dword [esp + 0x30]
call fcn.004320d0
add esp, 0x28
mov ecx, dword [esp + 0x244]
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.0043de43
mov esp, ebp
pop ebp
ret