Function at 0x42e3f0
Capabilities:
Get disk size

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4c11fc
mov eax, dword fs:[0]
push eax
sub esp, 0xc58
mov eax, dword [0x515e20]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [ebp + 8]
xor ecx, ecx
mov dword [ebp - 0xc64], eax
mov dword [ebp - 0xc48], ecx
call fcn.0042f6d0
test al, al
jne 0x42e45a
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_OpenThread]
mov ecx, dword [0x517280]
mov edx, 7
test eax, eax
cmove ecx, edx
mov dword [0x517280], ecx
mov eax, dword [0x5159f8]
mov ecx, 0x5159f8
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xc50], eax
xor eax, eax
push 0x7fe
push eax
mov word [ebp - 0x810], ax
lea eax, [ebp - 0x80e]
push eax
mov dword [ebp - 4], 0
call fcn.0049f660
add esp, 0xc
call fcn.0042f6d0
test al, al
jne 0x42e4a4
dec dword [0x5180d4]
mov dword [ebp - 0xc44], 0x400
mov dword [ebp - 0xc5c], 0
mov dword [ebp - 0xc58], 0
mov dword [ebp - 0xc54], 0
push 1
push str.SOFTWAREMicrosoftInternet_Explorer
push reloc.OLEAUT32.dll_SysReAllocString
lea ecx, [ebp - 0xc5c]
mov byte [ebp - 4], 1
call fcn.0040ab40
or ebx, 0xffffffff
test eax, eax
jne 0x42e81c
push str.svcVe
lea ecx, [ebp - 0xc4c]
call fcn.00401c40
push str.rsion
push eax
lea eax, [ebp - 0xc60]
push eax
mov byte [ebp - 4], 2
call fcn.00402ae0
add esp, 0xc
lea ecx, [ebp - 0xc44]
push ecx
lea ecx, [ebp - 0x810]
push ecx
push dword [eax]
lea ecx, [ebp - 0xc5c]
call fcn.0040abf0
mov esi, dword [ebp - 0xc60]
add esi, 0xfffffff0
mov edi, eax
lea ecx, [esi + 0xc]
mov edx, ebx
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x42e557
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0xc4c]
add edx, 0xfffffff0
mov byte [ebp - 4], 1
lea eax, [edx + 0xc]
mov ecx, ebx
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x42e57a
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
test edi, edi
jne 0x42e5a6
lea eax, [ebp - 0x810]
push eax
lea ecx, [ebp - 0xc4c]
call fcn.00401c40
mov eax, dword [eax]
mov ecx, 1
mov dword [ebp - 0xc48], ecx
cmp dword [eax - 0xc], edi
je 0x42e5ac
mov bl, cl
jmp 0x42e5ae
mov ecx, dword [ebp - 0xc48]
xor bl, bl
test cl, 1
je 0x42e5dc
mov edx, dword [ebp - 0xc4c]
and ecx, 0xfffffffe
add edx, 0xfffffff0
mov dword [ebp - 0xc48], ecx
lea eax, [edx + 0xc]
or ecx, 0xffffffff
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x42e5dc
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
test bl, bl
je 0x42e617
lea ecx, [ebp - 0x810]
lea edx, [ecx + 2]
lea esp, [esp]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x42e5f0
sub ecx, edx
sar ecx, 1
push ecx
lea eax, [ebp - 0x810]
push eax
lea ecx, [ebp - 0xc50]
call fcn.00408ed0
jmp 0x42e7f7
call fcn.0042f980
test al, al
jne 0x42e630
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceW]
mov dword [ebp - 0xc44], 0x400
call fcn.0042f7f0
test al, al
jne 0x42e649
inc dword [0x517280]
lea eax, [ebp - 0xc44]
push eax
lea eax, [ebp - 0x810]
push eax
push 0x4d3614
lea ecx, [ebp - 0xc5c]
call fcn.0040abf0
mov edi, eax
call fcn.0042f6a0
test al, al
jne 0x42e6d8
xor esi, esi
call fcn.0049ed34
movd xmm0, eax
cvtdq2pd xmm0, xmm0
inc esi
movsd qword [ebp + esi*8 - 0xc48], xmm0
cmp esi, 0x86
jb 0x42e674
xor edx, edx
mov eax, 0x85
cmp edx, eax
jge 0x42e6cf
mov edi, edi
movsd xmm0, qword [ebp + eax*8 - 0xc40]
movsd xmm1, qword [ebp + eax*8 - 0xc48]
comisd xmm0, xmm1
jbe 0x42e6ca
movsd qword [ebp + eax*8 - 0xc40], xmm1
movsd qword [ebp + eax*8 - 0xc48], xmm0
dec eax
cmp eax, edx
jg 0x42e6a0
inc edx
cmp edx, 0x86
jl 0x42e695
test edi, edi
jne 0x42e76f
mov eax, dword [0x5159f8]
mov ecx, 0x5159f8
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xc44], eax
lea eax, [ebp - 0x810]
mov byte [ebp - 4], 3
test eax, 0xffff0000
jne 0x42e727
movzx esi, ax
push edi
push esi
call fcn.00403010
add esp, 8
test eax, eax
je 0x42e752
push esi
push eax
lea ecx, [ebp - 0xc44]
call fcn.00406b10
jmp 0x42e752
lea ecx, [ebp - 0x810]
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x42e730
sub ecx, edx
sar ecx, 1
push ecx
lea eax, [ebp - 0x810]
push eax
lea ecx, [ebp - 0xc44]
call fcn.00408ed0
mov ecx, dword [ebp - 0xc48]
mov eax, dword [ebp - 0xc44]
or ecx, 2
cmp dword [eax - 0xc], 0
mov byte [ebp - 4], 1
je 0x42e775
mov bl, 1
jmp 0x42e777
mov ecx, dword [ebp - 0xc48]
xor bl, bl
test cl, 2
je 0x42e79c
mov edx, dword [ebp - 0xc44]
add edx, 0xfffffff0
or ecx, 0xffffffff
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x42e79c
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
test bl, bl
je 0x42e7d2
lea ecx, [ebp - 0x810]
lea edx, [ecx + 2]
lea esp, [esp]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x42e7b0
sub ecx, edx
sar ecx, 1
push ecx
lea eax, [ebp - 0x810]
push eax
lea ecx, [ebp - 0xc50]
call fcn.00408ed0
mov edx, dword [0x517280]
lea ecx, [edx + 1]
lea eax, [edx + 2]
imul eax, ecx
imul eax, edx
cdq
mov ecx, 0x16
idiv ecx
cmp edx, 4
jne 0x42e7f7
dec dword [0x5180e4]
mov edi, dword [ebp - 0xc5c]
test edi, edi
je 0x42e810
push edi
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
xor edi, edi
mov dword [ebp - 0xc5c], edi
mov dword [ebp - 0xc58], 0
jmp 0x42e822
mov edi, dword [ebp - 0xc5c]
mov esi, dword [ebp - 0xc50]
add esi, 0xfffffff0
mov ecx, dword [esi]
mov eax, dword [ecx]
call dword [eax + 0x10]
cmp dword [esi + 0xc], 0
lea edx, [esi + 0xc]
mov ecx, eax
jl 0x42e84e
cmp ecx, dword [esi]
jne 0x42e84e
mov ebx, esi
mov eax, 1
lock xadd dword [edx], eax
jmp 0x42e88b
mov eax, dword [ecx]
push 2
push dword [esi + 4]
call dword [eax]
mov ebx, eax
test ebx, ebx
jne 0x42e862
call fcn.004092c0
mov eax, dword [esi + 4]
mov dword [ebx + 4], eax
mov ecx, dword [esi + 4]
lea eax, [ecx*2 + 2]
push eax
lea eax, [esi + 0x10]
push eax
lea eax, [ecx*2 + 2]
push eax
lea eax, [ebx + 0x10]
push eax
call fcn.0049ee68
add esp, 0x10
lea eax, [ebx + 0x10]
mov ebx, dword [ebp - 0xc64]
mov dword [ebx], eax
test edi, edi
je 0x42e8a1
push edi
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov dword [ebp - 4], 0xffffffff
lea eax, [esi + 0xc]
or ecx, 0xffffffff
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x42e8bf
mov ecx, dword [esi]
push esi
mov edx, dword [ecx]
call dword [edx + 4]
mov eax, ebx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0049e294
mov esp, ebp
pop ebp
ret