Function at 0x41dad0
Capabilities:
Create thread
Get disk size

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4c8beb
mov eax, dword fs:[0]
push eax
sub esp, 0x70
mov eax, dword [0x524ee0]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov ebx, dword [ebp + 0xc]
mov edi, dword [ebp + 8]
push 0
lea ecx, [ebp - 0x7c]
mov dword [ebp - 0x6c], ebx
call fcn.00444480
mov esi, dword [0x526340]
mov dword [ebp - 4], 0
lea ecx, [esi + 2]
lea eax, [esi + 1]
imul eax, ecx
imul eax, esi
cdq
mov ecx, 0x16
idiv ecx
cmp edx, 4
jne 0x41db9e
test esi, esi
je 0x41db9e
jmp 0x41db40
mov ecx, esi
and ecx, 0x80000001
jns 0x41db4f
dec ecx
or ecx, 0xfffffffe
inc ecx
jne 0x41db5c
mov eax, esi
cdq
sub eax, edx
mov esi, eax
sar esi, 1
jmp 0x41db63
lea esi, [esi*2 + 1]
mov eax, 0x55555556
imul esi
mov eax, edx
shr eax, 0x1f
add eax, edx
mov ecx, esi
lea eax, [eax + eax*2]
sub ecx, eax
mov dword [0x526340], esi
sub ecx, 0
je 0x41db8d
sub ecx, 2
je 0x41db90
dec ecx
je 0x41db91
jmp 0x41db9a
add esi, 2
inc esi
add esi, 2
mov dword [0x526340], esi
test esi, esi
jne 0x41db40
push str.success
lea ecx, [ebp - 0x64]
call fcn.00444440
lea eax, [ebp - 0x64]
push eax
push 0x4dfc64
lea ecx, [ebp - 0x7c]
mov byte [ebp - 4], 1
call fcn.00444920
mov ecx, eax
call fcn.00444730
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 0
call fcn.00444690
push str.callbackId
mov ecx, edi
mov byte [ebp - 4], 2
call fcn.00445a20
test al, al
jne 0x41dc7e
push str.writeFile_callbackId_not_exist
lea ecx, [ebp - 0x50]
call fcn.00401ff0
lea eax, [ebp - 0x50]
push eax
lea eax, [ebp - 0x2c]
push eax
mov byte [ebp - 4], 3
call fcn.00451390
add esp, 8
push eax
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 4
call fcn.004443a0
push 0x4dfc64
lea ecx, [ebp - 0x7c]
mov byte [ebp - 4], 5
call fcn.00444920
lea ecx, [ebp - 0x64]
push ecx
mov ecx, eax
call fcn.00444730
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 4
call fcn.00444690
cmp dword [ebp - 0x18], 0x10
jb 0x41dc52
push dword [ebp - 0x2c]
call fcn.004a831e
add esp, 4
mov edx, dword [ebp - 0x50]
add edx, 0xfffffff0
or edi, 0xffffffff
mov byte [ebp - 4], 2
lea ecx, [edx + 0xc]
mov eax, edi
lock xadd dword [ecx], eax
dec eax
test eax, eax
jg 0x41dc75
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0
jmp 0x41dde0
push 0x10
call fcn.004a834d
mov esi, eax
add esp, 4
mov dword [ebp - 0x54], esi
mov byte [ebp - 4], 6
test esi, esi
je 0x41dca0
push 0
mov ecx, esi
call fcn.00444480
jmp 0x41dca2
xor esi, esi
mov eax, dword [0x526340]
imul eax, eax
mov byte [ebp - 4], 2
and eax, 0x80000003
jns 0x41dcba
dec eax
or eax, 0xfffffffc
inc eax
cmp eax, 2
jne 0x41dccf
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceW]
push edi
mov ecx, esi
call fcn.00444730
lea eax, [ebp - 0x68]
push eax
push 0
push esi
push 0x41dff0
push 0
push 0
mov dword [ebp - 0x68], 0
call fcn.004aa5cc
add esp, 0x18
test eax, eax
jne 0x41ddcf
test esi, esi
je 0x41dd12
mov ecx, esi
call fcn.00444690
push esi
call fcn.004a831e
add esp, 4
call fcn.004a9e16
push dword [eax]
lea eax, [ebp - 0x54]
push eax
call fcn.0043fd80
add esp, 8
push eax
lea eax, [ebp - 0x50]
push str.writeFile_beginthreadex_
push eax
mov byte [ebp - 4], 7
call fcn.0040b7a0
add esp, 0xc
mov edx, dword [ebp - 0x54]
add edx, 0xfffffff0
or edi, 0xffffffff
mov byte [ebp - 4], 9
lea ecx, [edx + 0xc]
mov eax, edi
lock xadd dword [ecx], eax
dec eax
test eax, eax
jg 0x41dd5e
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea eax, [ebp - 0x50]
push eax
lea eax, [ebp - 0x2c]
push eax
call fcn.00451390
add esp, 8
push eax
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 0xa
call fcn.004443a0
push 0x4dfc64
lea ecx, [ebp - 0x7c]
mov byte [ebp - 4], 0xb
call fcn.00444920
lea ecx, [ebp - 0x64]
push ecx
mov ecx, eax
call fcn.00444730
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 0xa
call fcn.00444690
cmp dword [ebp - 0x18], 0x10
jb 0x41ddb4
push dword [ebp - 0x2c]
call fcn.004a831e
add esp, 4
mov edx, dword [ebp - 0x50]
add edx, 0xfffffff0
mov byte [ebp - 4], 2
lea eax, [edx + 0xc]
mov ecx, edi
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jmp 0x41dc6b
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
or edi, 0xffffffff
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x4c]
call fcn.004465d0
mov eax, dword [0x524ab0]
mov ecx, 0x524ab0
mov byte [ebp - 4], 0x10
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x50], eax
lea eax, [ebp - 0x7c]
push eax
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x4c]
mov byte [ebp - 4], 0x11
call fcn.00449500
mov edx, eax
cmp dword [edx + 0x14], 0x10
mov byte [ebp - 4], 0x12
jb 0x41de21
mov edx, dword [edx]
sub esp, 0x18
mov esi, esp
mov dword [esi + 0x14], 0xf
mov dword [esi + 0x10], 0
mov byte [esi], 0
cmp byte [edx], 0
jne 0x41deac
xor ecx, ecx
jmp 0x41deba
mov ecx, edx
lea ebx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x41deb1
sub ecx, ebx
push ecx
push edx
mov ecx, esi
call fcn.00401460
lea eax, [ebp - 0x54]
push eax
call fcn.004512c0
add esp, 0x1c
push eax
lea ecx, [ebp - 0x50]
mov byte [ebp - 4], 0x13
call fcn.00402ab0
mov edx, dword [ebp - 0x54]
add edx, 0xfffffff0
mov byte [ebp - 4], 0x12
lea eax, [edx + 0xc]
mov ecx, edi
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x41defc
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
cmp dword [ebp - 0x18], 0x10
mov byte [ebp - 4], 0x11
jb 0x41df11
push dword [ebp - 0x2c]
call fcn.004a831e
add esp, 4
mov eax, dword [0x526340]
imul eax, eax
cdq
mov ecx, 0x18
idiv ecx
cmp edx, 0x12
jne 0x41df30
call fcn.004a96f9
mov dword [0x526340], eax
mov ebx, dword [ebp - 0x6c]
mov eax, 8
mov word [ebx], ax
call fcn.00418a50
test al, al
jne 0x41df4e
call fcn.004a96f9
mov dword [0x526340], eax
mov esi, dword [ebp - 0x50]
push dword [esi - 0xc]
push esi
call dword [sym.imp.OLEAUT32.dll_SysReAllocStringLen]
test eax, eax
jne 0x41df64
call fcn.00409970
add esi, 0xfffffff0
mov dword [ebx + 8], eax
mov byte [ebp - 4], 0x10
lea eax, [esi + 0xc]
lock xadd dword [eax], edi
dec edi
test edi, edi
jg 0x41df82
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
cmp dword [ebp - 0x34], 0x10
mov byte [ebp - 4], 0
mov dword [ebp - 0x4c], 0x4dfc5c
jb 0x41df9e
push dword [ebp - 0x48]
call fcn.004a831e
add esp, 4
lea ecx, [ebp - 0x4c]
mov dword [ebp - 0x34], 0xf
mov dword [ebp - 0x38], 0
mov byte [ebp - 0x48], 0
call fcn.004466d0
lea ecx, [ebp - 0x7c]
mov dword [ebp - 4], 0xffffffff
call fcn.00444690
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.004a8b24
mov esp, ebp
pop ebp
ret