Function at 0x43e75a
Capabilities:
Get disk size

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4af211
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
sub esp, 0x11c
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
movzx eax, byte [ebp + 0x10]
test eax, eax
je 0x43ece3
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0xb8], eax
mov eax, dword [ebp + 0x24]
mov dword [ebp - 0xac], eax
mov eax, dword [ebp + 0x1c]
mov dword [ebp - 0x6c], eax
mov eax, dword [ebp + 0x20]
mov dword [ebp - 0x84], eax
mov eax, dword [ebp + 0x18]
mov dword [ebp - 0x74], eax
lea eax, [ebp + 0x2c]
mov dword [ebp - 0xa4], eax
mov dword [ebp - 0x4c], 0x3650
mov dword [ebp - 0x7c], str.caxnzet_rudttc_ykrkgeo_xur
cmp dword [ebp - 0x4c], 0x370b
jle 0x43e88d
push 0
push 0
push 0
push 0xde3
push 0x1b75
push 0
push 0x1aeb
call dword [sym.imp.GDI32.dll_GetTextExtentExPointA]
and dword [ebp - 0x44], 0
jmp 0x43e800
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 0x1220
jge 0x43e88d
and dword [ebp - 0x48], 0
jmp 0x43e81a
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0x37d4
jge 0x43e888
and dword [ebp - 0x20], 0
jmp 0x43e830
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0x42de
jge 0x43e886
mov eax, dword [ebp - 0x48]
cdq
idiv dword [ebp - 0x20]
mov eax, dword [ebp - 0x44]
sub eax, edx
cdq
mov dword [ebp - 0xb4], eax
mov dword [ebp - 0xb0], edx
push dword [ebp - 0xb0]
push dword [ebp - 0xb4]
lea ecx, [ebp - 0xfc]
call fcn.004019d3
pop ecx
pop ecx
mov ecx, eax
call fcn.00441f2b
push eax
call fcn.00499008
pop ecx
lea ecx, [ebp - 0xfc]
call fcn.00441f21
jmp 0x43e829
jmp 0x43e813
jmp 0x43e7f9
mov eax, dword [ebp + 8]
mov dword [ebp - 0x60], eax
and dword [ebp - 4], 0
cmp dword [ebp - 0x4c], 0x3506
jge 0x43e8a9
push dword [ebp - 0x7c]
call fcn.00499008
pop ecx
jmp 0x43e8c5
or dword [ebp - 4], 0xffffffff
jmp 0x43e8cf
mov eax, dword [ebp + 0x28]
mov dword [ebp - 0xe0], eax
mov eax, dword [ebp - 0xa4]
movzx eax, byte [eax]
test eax, eax
je 0x43ebb6
mov dword [ebp - 0x58], 0x6983
mov dword [ebp - 0xd0], str.aete_qou_nggqrkk_mbifezw_bqmawyhr_xrzng_cwlmichvf_bsgw
cmp dword [ebp - 0x58], 0x6c1a
jle 0x43e977
and dword [ebp - 0x28], 0
jmp 0x43e910
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0x2233
jge 0x43e977
and dword [ebp - 0x3c], 0
jmp 0x43e926
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0x51e3
jge 0x43e975
and dword [ebp - 0x30], 0
jmp 0x43e93c
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0x6cb6
jge 0x43e973
mov eax, dword [ebp - 0x28]
sub eax, dword [ebp - 0x3c]
xor eax, dword [ebp - 0x30]
cdq
mov dword [ebp - 0xc0], eax
mov dword [ebp - 0xbc], edx
push dword [ebp - 0xbc]
push dword [ebp - 0xc0]
mov ecx, 0xae0558
call fcn.00441f36
jmp 0x43e935
jmp 0x43e91f
jmp 0x43e909
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0x8c], eax
mov dword [ebp - 4], 2
cmp dword [ebp - 0x58], 0x6907
jge 0x43e9a0
mov edx, dword [ebp - 0xd0]
mov ecx, 0xae0558
call fcn.004438dc
jmp 0x43e9bc
or dword [ebp - 4], 0xffffffff
jmp 0x43e9c6
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0xdc], eax
mov eax, dword [ebp - 0xac]
mov dword [ebp - 0x94], eax
mov eax, dword [ebp - 0x60]
mov dword [ebp - 0xc4], eax
mov eax, dword [ebp - 0xe0]
mov dword [ebp - 0x9c], eax
mov eax, dword [ebp - 0x84]
mov dword [ebp - 0xe4], eax
mov eax, dword [ebp - 0xb8]
mov dword [ebp - 0x64], eax
mov eax, dword [ebp - 0x8c]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0xdc]
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x90], eax
mov eax, dword [ebp - 0xc4]
mov dword [ebp - 0x70], eax
mov eax, dword [ebp - 0x9c]
mov dword [ebp - 0x80], eax
mov eax, dword [ebp - 0xe4]
mov dword [ebp - 0x78], eax
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0x98], eax
mov eax, dword [ebp - 0x14]
mov dword [eax], 0
jmp 0x43ea5d
mov eax, dword [ebp - 0x14]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x14]
mov dword [ecx], eax
mov eax, dword [ebp - 0x14]
cmp dword [eax], 3
jg 0x43ebb1
mov dword [ebp - 0x50], 0x6df2
mov dword [ebp - 0x68], str.zpnec_yhhidhu_kjifh_qwrxou_udhzzvqlj_zekhsuov_fuml_qaejv_mevb_lbrsmlvi_axqoqp
cmp dword [ebp - 0x50], 0x6fc7
jle 0x43eb17
and dword [ebp - 0x40], 0
jmp 0x43ea91
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0x7d89
jge 0x43eb17
and dword [ebp - 0x38], 0
jmp 0x43eaa7
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0x3c50
jge 0x43eb12
and dword [ebp - 0x18], 0
jmp 0x43eabd
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0x7aa4
jge 0x43eb10
mov eax, dword [ebp - 0x40]
sub eax, dword [ebp - 0x38]
add eax, dword [ebp - 0x18]
cdq
mov dword [ebp - 0xcc], eax
mov dword [ebp - 0xc8], edx
push dword [ebp - 0xc8]
push dword [ebp - 0xcc]
lea ecx, [ebp - 0x114]
call fcn.004019d3
pop ecx
pop ecx
mov ecx, eax
call fcn.00441f2b
push eax
call fcn.00499008
pop ecx
lea ecx, [ebp - 0x114]
call fcn.00441f21
jmp 0x43eab6
jmp 0x43eaa0
jmp 0x43ea8a
mov dword [ebp - 0x88], 0xdc9fe9a5
mov dword [ebp - 4], 4
cmp dword [ebp - 0x50], 0x6dbe
jge 0x43eb3a
push dword [ebp - 0x68]
call fcn.00499008
pop ecx
jmp 0x43eb56
or dword [ebp - 4], 0xffffffff
jmp 0x43eb60
mov eax, dword [ebp - 0x14]
push dword [eax]
mov ecx, dword [ebp - 0x54]
call fcn.00442139
cmp dword [eax], 0
je 0x43eb74
jmp 0x43ebb1
push dword [ebp - 0x70]
push dword [ebp - 0x78]
push dword [ebp - 0x80]
push 0x30db
push dword [ebp - 0x54]
lea eax, [ebp - 0x88]
push eax
push dword [ebp - 0x90]
push dword [ebp - 0x98]
push dword [ebp - 0x14]
push 0
push 0x47a1
push 1
call fcn.0043b843
add esp, 0x30
jmp 0x43ea52
jmp 0x43ece1
mov dword [ebp - 0x5c], 0x18dc
mov dword [ebp - 0xa0], str.abafzcpi_ldmdqnxe_jeuostnn_cgzbc_lgqm_onvrnf_xwium_umzalnta_tky_impmzvm_ocuxgt_gwcjfvxt_dgilsym_hlkkgquy
cmp dword [ebp - 0x5c], 0x1bdb
jle 0x43ec8f
and dword [ebp - 0x34], 0
jmp 0x43ebe1
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0x47d5
jge 0x43ec8f
and dword [ebp - 0x1c], 0
jmp 0x43ebfb
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0x62ad
jge 0x43ec8a
and dword [ebp - 0x24], 0
jmp 0x43ec15
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0x605b
jge 0x43ec85
and dword [ebp - 0x2c], 0
jmp 0x43ec2b
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0x2062
jge 0x43ec83
mov ecx, dword [ebp - 0x1c]
sub ecx, dword [ebp - 0x24]
add ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x34]
sar eax, cl
cdq
mov dword [ebp - 0xd8], eax
mov dword [ebp - 0xd4], edx
push dword [ebp - 0xd4]
push dword [ebp - 0xd8]
lea ecx, [ebp - 0x12c]
call fcn.004019d3
pop ecx
pop ecx
mov ecx, eax
call fcn.00441f2b
push eax
call fcn.00499008
pop ecx
lea ecx, [ebp - 0x12c]
call fcn.00441f21
jmp 0x43ec24
jmp 0x43ec0e
jmp 0x43ebf4
jmp 0x43ebda
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceW]
mov dword [ebp - 4], 6
cmp dword [ebp - 0x5c], 0x169f
jge 0x43ecbb
push dword [ebp - 0xa0]
call fcn.00499008
pop ecx
jmp 0x43ecd7
or dword [ebp - 4], 0xffffffff
jmp 0x43ece1
jmp 0x43ecfb
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0xa8], eax
push 1
push dword [ebp - 0xa8]
call fcn.00405cc8
pop ecx
pop ecx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret