Function at 0x43acd0
Capabilities:
Get disk information
Get disk size
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x491f1e
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x2e0
push esi
push edi
xor edi, edi
mov dword [esp + 0x14], edi
mov dword [esp + 0x10], edi
mov dword [esp + 0x2f0], edi
mov dword [esp + 0xc], edi
mov dword [esp + 8], edi
mov dword [esp + 0x40], edi
mov dword [esp + 0x3c], edi
mov dword [esp + 0x48], edi
mov dword [esp + 0x44], edi
mov dword [esp + 0x38], edi
mov dword [esp + 0x34], edi
mov esi, dword [esp + 0x2fc]
cmp byte [esi], 0x2f
mov byte [esp + 0x2f0], 4
je 0x43ada3
lea ecx, [esp + 0x34]
mov byte [esp + 0x2f0], 3
call fcn.00476730
lea ecx, [esp + 0x44]
mov byte [esp + 0x2f0], 2
call fcn.00476730
lea ecx, [esp + 0x3c]
mov byte [esp + 0x2f0], 1
call fcn.00476730
lea ecx, [esp + 8]
mov byte [esp + 0x2f0], 0
call fcn.00476730
lea ecx, [esp + 0x10]
mov dword [esp + 0x2f0], 0xffffffff
call fcn.00476730
pop edi
xor eax, eax
pop esi
mov ecx, dword [esp + 0x2e0]
mov dword fs:[0], ecx
add esp, 0x2ec
ret
push 0x20000
lea ecx, [esp + 0x14]
add esi, 1
call fcn.004762c0
push 0x20000
lea ecx, [esp + 0xc]
call fcn.004762c0
mov cl, byte [esi]
test cl, cl
mov eax, dword [esp + 0x14]
je 0x43ade9
lea esp, [esp]
cmp cl, 0x2f
jne 0x43adda
mov byte [eax], 0x5c
jmp 0x43addc
mov byte [eax], cl
mov cl, byte [esi + 1]
add esi, 1
add eax, 1
test cl, cl
jne 0x43add0
mov byte [eax], 0
mov eax, dword [esp + 0x14]
mov dl, byte [eax]
test dl, dl
mov ecx, eax
je 0x43ae00
add ecx, 1
cmp byte [ecx], 0
jne 0x43adf8
sub ecx, eax
cmp ecx, 2
jl 0x43ae23
cmp byte [eax + 1], 0x3a
jne 0x43ae23
movzx eax, dl
push eax
call fcn.00485408
mov ecx, dword [esp + 0x18]
mov byte [ecx], al
mov eax, dword [esp + 0x18]
add esp, 4
cmp byte [eax], 0
mov ecx, eax
je 0x43ae38
lea ebx, [ebx]
add ecx, 1
cmp byte [ecx], 0
jne 0x43ae30
sub ecx, eax
je 0x43ae4c
cmp byte [ecx + eax - 1], 0x5c
jne 0x43ae4c
mov byte [ecx + eax - 1], 0
mov eax, dword [esp + 0x14]
mov dl, byte [eax]
test dl, dl
mov ecx, eax
je 0x43ae5c
add ecx, 1
cmp byte [ecx], 0
jne 0x43ae54
sub ecx, eax
je 0x43ae91
test dl, dl
mov ecx, eax
je 0x43ae6e
add ecx, 1
cmp byte [ecx], 0
jne 0x43ae66
sub ecx, eax
push ecx
push eax
lea edx, [esp + 0x3c]
push edx
lea eax, [esp + 0x50]
push eax
lea ecx, [esp + 0x4c]
push ecx
call fcn.00421780
add esp, 0x14
test eax, eax
je 0x43ad32
mov esi, dword [esp + 0x2f8]
push str.HTTP_1.1_200_OK_r_nContent_Type:_text_html_r_n_r_n
push esi
call fcn.004390b0
mov edx, dword [esp + 0x1c]
push 0x493d7a
push edx
push esi
call fcn.00439440
mov edx, dword [esp + 0x28]
add esp, 0x14
cmp byte [edx], 0
mov dword [esp + 0x24], edi
mov eax, edx
je 0x43aecd
add eax, 1
cmp byte [eax], 0
jne 0x43aec5
sub eax, edx
push ebx
push ebp
je 0x43b305
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
call fcn.00439620
push str._table_class_cwdtable__width_100____cellspacing_0___tr__td_
push esi
call fcn.004390b0
mov ecx, dword [esp + 0x24]
add esp, 8
cmp byte [ecx], 0
mov eax, ecx
je 0x43af08
lea ecx, [ecx]
add eax, 1
cmp byte [eax], 0
jne 0x43af00
sub eax, ecx
cmp eax, 2
jne 0x43af32
cmp byte [ecx + 1], 0x3a
jne 0x43af32
push str._a_href__
push esi
call fcn.004390b0
mov eax, dword [esp + 0x1c]
push eax
push esi
call fcn.00439140
push str.__class_dl____img_src__drive.png______a_
jmp 0x43af4d
push str._a_href__
push esi
call fcn.004390b0
mov ecx, dword [esp + 0x1c]
push ecx
push esi
call fcn.00439140
push str.__class_dl____img_src__folder.png______a_
push esi
call fcn.004390b0
mov edi, dword [esp + 0x34]
add esp, 0x18
mov ebp, edi
lea esp, [esp]
mov bl, byte [edi]
cmp bl, 0x5c
je 0x43af70
test bl, bl
je 0x43af70
add edi, 1
jmp 0x43af60
mov byte [edi], 0
mov edx, dword [esp + 0x1c]
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
call fcn.00439620
push str._a_href__
push esi
call fcn.004390b0
mov edx, dword [esp + 0x1c]
push edx
push esi
call fcn.00439140
mov eax, dword [esp + 0x24]
push eax
push 0x4967b4
push esi
call fcn.004390b0
push ebp
push esi
call fcn.00439140
add esp, 0x24
test bl, bl
mov eax, 0x494a64
jne 0x43afc2
mov eax, 0x493d7a
push eax
push str.__a__s
push esi
call fcn.004390b0
add esp, 0xc
test bl, bl
je 0x43afe0
mov byte [edi], 0x5c
add edi, 1
jmp 0x43af5a
push str.__td___tr___table_
push esi
call fcn.004390b0
push str._table_class_maintable__width_100____cellspacing_0___tr_
push esi
call fcn.004390b0
mov ecx, dword [0x4aa7bc]
mov edx, dword [ecx + 0x194]
push edx
push str._th__s__th_
push esi
call fcn.004390b0
mov eax, dword [0x4aa7bc]
mov ecx, dword [eax + 0x19c]
push ecx
push str._th_alignright__s__th_
push esi
call fcn.004390b0
mov edx, dword [0x4aa7bc]
mov eax, dword [edx + 0x1a0]
push eax
push str._th__s__th_
push esi
call fcn.004390b0
push str.__tr_
push esi
call fcn.004390b0
mov ecx, dword [esp + 0x58]
mov edx, dword [esp + 0x4c]
mov eax, dword [esp + 0x50]
push ecx
push str._s.
push edx
push eax
call fcn.0044e7a0
mov ecx, dword [esp + 0x60]
add esp, 0x4c
push ecx
push str.find_first__s_n
call fcn.00430350
mov eax, dword [esp + 0x1c]
lea edx, [esp + 0xa8]
push edx
push eax
call fcn.00439040
mov ebx, eax
add esp, 0x10
cmp ebx, 0xffffffff
je 0x43b1c3
jmp 0x43b0a0
test byte [esp + 0xa0], 0x10
je 0x43b1a5
xor ebp, ebp
mov dword [esp + 0x24], ebp
mov dword [esp + 0x20], ebp
lea ecx, [esp + 0xcc]
push ecx
lea ecx, [esp + 0x24]
mov byte [esp + 0x2fc], 5
call fcn.00476490
mov edi, dword [esp + 0x24]
cmp byte [edi], 0x2e
mov ecx, 0x496d78
mov eax, edi
jne 0x43b0f8
mov dl, 0x2e
test dl, dl
je 0x43b194
mov dl, byte [eax + 1]
add eax, 1
add ecx, 1
cmp dl, byte [ecx]
je 0x43b0e3
movsx edx, byte [ecx]
movsx eax, byte [eax]
sub eax, edx
cmp eax, ebp
je 0x43b194
push 0x495c10
push edi
call fcn.00402f60
add esp, 8
test eax, eax
je 0x43b194
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
push edi
push eax
push ecx
push edx
call fcn.004315f0
mov edi, dword [esp + 0x24]
push edi
call section..text
push eax
push edi
lea eax, [esp + 0x58]
push eax
lea ecx, [esp + 0x6c]
push ecx
lea edx, [esp + 0x68]
push edx
call fcn.00421780
add esp, 0x28
test eax, eax
je 0x43b194
lea eax, [esp + 0x84]
push eax
lea ecx, [esp + 0xb8]
push ecx
call dword [sym.imp.KERNEL32.dll_FileTimeToSystemTime]
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x24]
mov edi, dword [esp + 0x2c]
lea edx, [esp + 0x84]
push edx
push ebp
push eax
push ecx
push edi
push esi
call fcn.004398b0
add esp, 0x18
add edi, 1
mov dword [esp + 0x2c], edi
lea ecx, [esp + 0x20]
mov byte [esp + 0x2f8], 4
call fcn.00476730
lea edx, [esp + 0xa0]
push edx
push ebx
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x43b0a0
push ebx
call dword [sym.imp.KERNEL32.dll_FindClose]
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
push eax
push str._s.
push ecx
push edx
call fcn.0044e7a0
mov ecx, dword [esp + 0x24]
lea eax, [esp + 0xb0]
push eax
push ecx
call fcn.00439040
mov ebx, eax
add esp, 0x18
cmp ebx, 0xffffffff
mov dword [esp + 0x28], ebx
je 0x43b2f2
test byte [esp + 0xa0], 0x10
jne 0x43b2d4
xor ebp, ebp
mov dword [esp + 0x24], ebp
mov dword [esp + 0x20], ebp
lea edx, [esp + 0xcc]
push edx
lea ecx, [esp + 0x24]
mov byte [esp + 0x2fc], 6
call fcn.00476490
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x10]
push eax
mov eax, dword [esp + 0x18]
push ecx
push edx
push eax
call fcn.004315f0
mov edi, dword [esp + 0x24]
push edi
call section..text
push eax
push edi
lea ecx, [esp + 0x58]
push ecx
lea edx, [esp + 0x6c]
push edx
lea eax, [esp + 0x68]
push eax
call fcn.004219c0
add esp, 0x28
test eax, eax
je 0x43b2c3
mov edi, dword [esp + 0xc0]
mov ebx, dword [esp + 0xbc]
lea ecx, [esp + 0x84]
push ecx
lea edx, [esp + 0xb8]
push edx
call dword [sym.imp.KERNEL32.dll_FileTimeToSystemTime]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x24]
lea eax, [esp + 0x84]
push eax
push ebx
push edi
mov edi, dword [esp + 0x38]
push ebp
push ecx
push edx
push edi
push esi
call fcn.00439b70
mov ebx, dword [esp + 0x48]
add esp, 0x20
add edi, 1
mov dword [esp + 0x2c], edi
lea ecx, [esp + 0x20]
mov byte [esp + 0x2f8], 4
call fcn.00476730
lea eax, [esp + 0xa0]
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x43b200
push ebx
call dword [sym.imp.KERNEL32.dll_FindClose]
push str.__table__script_type_text_javascript__function_ieTrOver__this.oldClassNamethis.className_this.className_hovered_function_ieTrOut__this.classNamethis.oldClassNameif_window.ActiveXObject_window.XMLHttpRequest_var_tablesdocument.getElementsByTagName__table___for_var_i0_i_tables.length_i_if_tables_i_.className_maintable__var_trstables_i_.getElementsByTagName__tr___for_var_j0_j_trs.length_j_if_trs_j_.getElementsByTagName__th__.length0_trs_j_.onmouseoverieTrOver_trs_j_.onmouseoutieTrOut__script_
push esi
call fcn.004390b0
add esp, 8
jmp 0x43b515
mov dword [esp + 0x24], edi
mov dword [esp + 0x20], edi
mov dword [esp + 0x60], edi
mov dword [esp + 0x5c], edi
mov dword [esp + 0x58], edi
mov dword [esp + 0x54], edi
push 0x400
lea ecx, [esp + 0x24]
mov byte [esp + 0x2fc], 9
call fcn.004762c0
push 0x400
lea ecx, [esp + 0x60]
call fcn.004762c0
push 0x1000
lea ecx, [esp + 0x58]
call fcn.004762c0
push 1
push edi
push esi
mov byte [esp + 0x3d], 0x3a
call fcn.00439510
add esp, 0xc
xor eax, eax
mov dword [esp + 0x28], eax
jmp 0x43b374
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
mov bl, al
add eax, 0x41
push eax
push 0x496d74
push ecx
add bl, 0x41
push edx
mov byte [esp + 0x40], bl
mov dword [esp + 0x74], eax
call fcn.0044e7a0
push 2
lea eax, [esp + 0x44]
push eax
lea ecx, [esp + 0x54]
push ecx
lea edx, [esp + 0x68]
push edx
lea eax, [esp + 0x64]
push eax
call fcn.00421780
add esp, 0x24
test eax, eax
je 0x43b4c0
mov edi, dword [esp + 0x5c]
mov ebp, dword [esp + 0x60]
push 1
mov byte [esp + 0x3c], bl
mov byte [esp + 0x3d], 0x3a
mov byte [esp + 0x3e], 0x5c
mov byte [esp + 0x3f], 0
call dword [sym.imp.KERNEL32.dll_SetErrorMode]
push edi
push ebp
lea ecx, [esp + 0x84]
push ecx
lea edx, [esp + 0xa0]
push edx
mov dword [esp + 0x78], eax
lea eax, [esp + 0x90]
push eax
push 0
push 0
lea ecx, [esp + 0x54]
push ecx
call dword [sym.imp.KERNEL32.dll_GetVolumeInformationA]
mov edx, dword [esp + 0x68]
push edx
call dword [sym.imp.KERNEL32.dll_SetErrorMode]
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x24]
push eax
push 0
push ecx
push edx
call fcn.00443680
add esp, 0x10
lea eax, [esp + 0x74]
push eax
lea ecx, [esp + 0x70]
push ecx
lea edx, [esp + 0xa0]
push edx
lea eax, [esp + 0x40]
push eax
mov byte [esp + 0x44], bl
mov byte [esp + 0x45], 0x3a
mov byte [esp + 0x46], 0x5c
mov byte [esp + 0x47], 0
call dword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExA]
mov ecx, dword [esp + 0x64]
mov edx, dword [esp + 0x24]
mov eax, dword [esp + 0x54]
push ecx
mov ecx, dword [esp + 0x5c]
push edx
push str._s___c:_
push eax
push ecx
call fcn.0044e7a0
mov edx, dword [esp + 0x8c]
mov eax, dword [esp + 0x88]
mov ecx, dword [esp + 0x84]
mov edi, dword [esp + 0x40]
push edx
mov edx, dword [esp + 0x84]
push eax
mov eax, dword [esp + 0x74]
push ecx
mov ecx, dword [esp + 0x34]
push edx
push eax
push ecx
push edi
push esi
call fcn.004396f0
add esp, 0x34
add edi, 1
mov dword [esp + 0x2c], edi
mov eax, dword [esp + 0x28]
add eax, 1
cmp eax, 0x1a
mov dword [esp + 0x28], eax
jl 0x43b370
push str.__table__script_type_text_javascript__function_ieTrOver__this.oldClassNamethis.className_this.className_hovered_function_ieTrOut__this.classNamethis.oldClassNameif_window.ActiveXObject_window.XMLHttpRequest_var_tablesdocument.getElementsByTagName__table___for_var_i0_i_tables.length_i_if_tables_i_.className_maintable__var_trstables_i_.getElementsByTagName__tr___for_var_j0_j_trs.length_j_if_trs_j_.getElementsByTagName__th__.length0_trs_j_.onmouseoverieTrOver_trs_j_.onmouseoutieTrOut__script_
push esi
call fcn.004390b0
add esp, 8
lea ecx, [esp + 0x54]
mov byte [esp + 0x2f8], 8
call fcn.00476730
lea ecx, [esp + 0x5c]
mov byte [esp + 0x2f8], 7
call fcn.00476730
lea ecx, [esp + 0x20]
mov byte [esp + 0x2f8], 4
call fcn.00476730
push str.__body_
push esi
call fcn.004390b0
add esp, 8
lea ecx, [esp + 0x3c]
mov byte [esp + 0x2f8], 3
call fcn.00476730
lea ecx, [esp + 0x4c]
mov byte [esp + 0x2f8], 2
call fcn.00476730
lea ecx, [esp + 0x44]
mov byte [esp + 0x2f8], 1
call fcn.00476730
lea ecx, [esp + 0x10]
mov byte [esp + 0x2f8], 0
call fcn.00476730
lea ecx, [esp + 0x18]
mov dword [esp + 0x2f8], 0xffffffff
call fcn.00476730
mov ecx, dword [esp + 0x2f0]
pop ebp
pop ebx
pop edi
mov eax, 1
pop esi
mov dword fs:[0], ecx
add esp, 0x2ec
ret