Function at 0x41d266
Capabilities:
Get common file path
Get disk size
Get hostname

Disassembly:
push 0x694
mov eax, 0x451f15
call fcn.0043364b
mov dword [ebp - 0x68c], ecx
mov esi, 0x46d258
xor ebx, ebx
push esi
lea ecx, [ebp - 0x680]
mov dword [ebp - 0x6a0], ebx
call fcn.00404e8e
push ebx
mov dword [ebp - 4], ebx
call fcn.0042ea86
pop ecx
push eax
call fcn.0042eaf8
pop ecx
call fcn.0042ead5
push eax
lea eax, [ebp - 0x680]
push str._05ld
push eax
call fcn.0041c5d9
add esp, 0xc
lea eax, [ebp - 0x564]
push eax
call dword [sym.imp.ole32.dll_CoCreateGuid]
push 0x103
lea eax, [ebp - 0x34b]
push ebx
push eax
mov byte [ebp - 0x34c], bl
call fcn.00435650
add esp, 0xc
mov edx, 0x4545a8
lea edi, [ebp - 0x564]
mov ecx, ebx
mov eax, dword [edx + ecx*4]
cmp eax, dword [edi + ecx*4]
jne 0x41d304
inc ecx
cmp ecx, 4
jne 0x41d2f4
jmp 0x41d36e
movzx eax, byte [ebp - 0x555]
push eax
movzx eax, byte [ebp - 0x556]
push eax
movzx eax, byte [ebp - 0x557]
push eax
movzx eax, byte [ebp - 0x558]
push eax
movzx eax, byte [ebp - 0x559]
push eax
movzx eax, byte [ebp - 0x55a]
push eax
movzx eax, byte [ebp - 0x55b]
push eax
movzx eax, byte [ebp - 0x55c]
push eax
movzx eax, word [ebp - 0x55e]
push eax
movzx eax, word [ebp - 0x560]
push eax
push dword [ebp - 0x564]
lea eax, [ebp - 0x34c]
push str._08lX_04X_04x_02X_02X_02X_02X_02X_02X_02X_02X
push eax
call fcn.0042e973
add esp, 0x34
lea eax, [ebp - 0x678]
mov dword [ebp - 0x67c], eax
push 3
lea eax, [ebp - 0x34c]
push eax
lea ecx, [ebp - 0x67c]
call fcn.0041e1a5
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0x67c]
call fcn.0040192d
push eax
push dword [ebp - 0x67c]
lea ecx, [ebp - 0x680]
call fcn.0040553d
lea eax, [ebp - 0x678]
mov byte [ebp - 4], bl
cmp dword [ebp - 0x67c], eax
je 0x41d3cc
push dword [ebp - 0x67c]
call fcn.0042df00
pop ecx
lea eax, [ebp - 0x574]
push eax
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
push esi
lea ecx, [ebp - 0x688]
call fcn.00404e8e
mov byte [ebp - 4], 2
movzx eax, word [ebp - 0x572]
push eax
movzx eax, word [ebp - 0x568]
push eax
movzx eax, word [ebp - 0x56c]
push eax
movzx eax, word [ebp - 0x574]
push eax
movzx eax, word [ebp - 0x56e]
push eax
movzx eax, word [ebp - 0x56a]
push eax
movzx eax, word [ebp - 0x566]
push eax
lea eax, [ebp - 0x688]
push str._03d_02d_02d_04d_02d_02d_02d
push eax
call fcn.00410566
mov ebx, dword [ebp - 0x688]
add esp, 0x24
push dword [ebx - 0xc]
lea ecx, [ebp - 0x680]
push ebx
call fcn.0040553d
xor eax, eax
push 0x103
push eax
mov byte [ebp - 0x13c], al
lea eax, [ebp - 0x13b]
push eax
call fcn.00435650
add esp, 0xc
lea eax, [ebp - 0x690]
push eax
lea eax, [ebp - 0x13c]
push eax
mov dword [ebp - 0x690], 0x104
call dword [sym.imp.KERNEL32.dll_GetComputerNameA]
push 7
mov byte [ebp - 0x34], 0
xor eax, eax
pop ecx
lea edi, [ebp - 0x33]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
lea ecx, [ebp - 0x13c]
stosb byte es:[edi], al
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x41d49f
sub ecx, edx
push ecx
lea edx, [ebp - 0x13c]
lea ecx, [ebp - 0x34]
call fcn.0041f06b
pop ecx
push esi
lea ecx, [ebp - 0x684]
call fcn.00404e8e
mov byte [ebp - 4], 3
xor esi, esi
mov edi, str._02x
movzx eax, byte [ebp + esi - 0x34]
push eax
lea eax, [ebp - 0x684]
push edi
push eax
call fcn.0041c5d9
add esp, 0xc
inc esi
cmp esi, 0x10
jl 0x41d4cf
mov eax, dword [ebp - 0x684]
lea ecx, [ebp - 0x680]
push dword [eax - 0xc]
push eax
call fcn.0040553d
xor eax, eax
push 0x206
push eax
mov word [ebp - 0x554], ax
lea eax, [ebp - 0x552]
push eax
call fcn.00435650
add esp, 0xc
lea eax, [ebp - 0x554]
push 0x104
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
xor eax, eax
lea ecx, [ebp - 0x69c]
push ecx
push eax
push eax
mov dword [ebp - 0x69c], eax
mov dword [ebp - 0x698], eax
lea eax, [ebp - 0x554]
push eax
call dword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
push dword [ebp - 0x69c]
lea eax, [ebp - 0x680]
push str._010lu
push eax
call fcn.0041c5d9
add esp, 0xc
xor eax, eax
push 0x103
push eax
mov byte [ebp - 0x244], al
lea eax, [ebp - 0x243]
push eax
call fcn.00435650
mov esi, dword [ebp - 0x680]
add esp, 0xc
lea eax, [ebp - 0x5f8]
push 3
push esi
lea ecx, [ebp - 0x5fc]
mov dword [ebp - 0x5fc], eax
call fcn.0041e251
push dword [ebp - 0x5fc]
lea eax, [ebp - 0x244]
push 0x104
push eax
call fcn.004302a1
lea eax, [ebp - 0x5f8]
add esp, 0xc
cmp dword [ebp - 0x5fc], eax
je 0x41d5df
push dword [ebp - 0x5fc]
call fcn.0042df00
pop ecx
lea ecx, [ebp - 0x244]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x41d5e8
sub ecx, edx
push ecx
lea edx, [ebp - 0x244]
lea ecx, [ebp - 0x34]
call fcn.0041f06b
pop ecx
lea ecx, [ebp - 0x684]
call fcn.0041038d
xor ebx, ebx
movzx eax, byte [ebp + ebx - 0x34]
push eax
lea eax, [ebp - 0x684]
push edi
push eax
call fcn.0041c5d9
add esp, 0xc
inc ebx
cmp ebx, 0x10
jl 0x41d60e
mov edi, dword [ebp - 0x684]
lea ecx, [edi - 0x10]
call fcn.00410506
mov ecx, dword [ebp - 0x68c]
add eax, 0x10
mov dword [ecx], eax
lea ecx, [edi - 0x10]
call fcn.0040390b
mov ecx, dword [ebp - 0x688]
lea ecx, [ecx - 0x10]
call fcn.0040390b
lea ecx, [esi - 0x10]
call fcn.0040390b
mov eax, dword [ebp - 0x68c]
call fcn.004335fa
ret