Function at 0x6413f0
Capabilities:
Get disk size

Disassembly:
push rbp
push rdi
push rsi
push rbx
mov byte [rsp - 0xb98], 0
mov byte [rsp - 0x1b98], 0
sub rsp, 0x1b98
mov rbp, rsp
mov qword [rbp + 0x60], 0
mov qword [rbp + 0x70], 0
mov qword [rbp + 0x68], 0
mov qword [rbp + 0x78], 0
mov qword [rbp + 0x90], 0
mov qword [rbp + 0x88], 0
mov qword [rbp + 0x80], 0
mov qword [rbp + 0xe8], 0
mov qword [rbp + 0xa8], 0
mov qword [rbp + 0xa0], 0
mov qword [rbp + 0x98], 0
mov qword [rbp + 0xe0], 0
mov qword [rbp + 0xd0], 0
mov qword [rbp + 0xc8], 0
mov qword [rbp + 0xb8], 0
mov qword [rbp + 0xb0], 0
mov qword [rbp + 0xc0], 0
mov qword [rbp + 0xd8], 0
mov qword [rbp + 0x100], 0
mov qword [rbp + 0xf8], 0
mov qword [rbp + 0xf0], 0
mov qword [rbp + 0x108], 0
mov qword [rbp + 0x138], 0
mov qword [rbp + 0x140], 0
mov qword [rbp + 0x168], 0
mov qword [rbp + 0x160], 0
mov qword [rbp + 0x158], 0
mov qword [rbp + 0x150], 0
mov qword [rbp + 0x148], 0
mov qword [rbp + 0x170], 0
mov qword [rbp + 0x178], 0
mov qword [rbp + 0x180], 0
mov qword [rbp + 0x1a8], 0
mov qword [rbp + 0x1a0], 0
mov qword [rbp + 0x1c0], 0
mov qword [rbp + 0x1b8], 0
mov qword [rbp + 0x1b0], 0
mov qword [rbp + 0x1d8], 0
mov qword [rbp + 0x1d0], 0
mov qword [rbp + 0x1c8], 0
mov qword [rbp + 0x1f0], 0
mov qword [rbp + 0x1e0], 0
mov qword [rbp + 0x1e8], 0
mov qword [rbp + 0x220], 0
mov qword [rbp + 0x218], 0
mov qword [rbp + 0x208], 0
mov qword [rbp + 0x200], 0
mov qword [rbp + 0x1f8], 0
mov qword [rbp + 0x210], 0
mov qword [rbp + 0x268], 0
mov qword [rbp + 0x260], 0
mov qword [rbp + 0x248], 0
mov qword [rbp + 0x240], 0
mov qword [rbp + 0x238], 0
mov qword [rbp + 0x228], 0
mov qword [rbp + 0x230], 0
mov qword [rbp + 0x258], 0
mov qword [rbp + 0x250], 0
mov qword [rbp + 0x270], 0
mov qword [rbp + 0x280], 0
mov qword [rbp + 0x278], 0
mov qword [rbp + 0x288], 0
mov qword [rbp + 0x2a8], 0
mov qword [rbp + 0x298], 0
mov qword [rbp + 0x290], 0
mov qword [rbp + 0x2a0], 0
mov qword [rbp + 0x2b0], 0
mov qword [rbp + 0x2c0], 0
mov qword [rbp + 0x2b8], 0
mov qword [rbp + 0x2d8], 0
mov qword [rbp + 0x2c8], 0
mov qword [rbp + 0x2d0], 0
mov qword [rbp + 0x2f0], 0
mov qword [rbp + 0x2e0], 0
mov qword [rbp + 0x2e8], 0
mov qword [rbp + 0x308], 0
mov qword [rbp + 0x2f8], 0
mov qword [rbp + 0x300], 0
mov qword [rbp + 0x320], 0
mov qword [rbp + 0x310], 0
mov qword [rbp + 0x318], 0
mov qword [rbp + 0x348], 0
mov qword [rbp + 0x340], 0
mov qword [rbp + 0x328], rbp
mov byte [rbp + 0x1bc0], cl
nop
mov eax, dword [0x00699dbc]
add eax, dword [0x006931cc]
mov ecx, dword [0x006933d8]
add ecx, dword [0x00693548]
cmp eax, ecx
jle 0x6417c7
mov dword [0x00699dbc], 0x63
mov eax, dword [0x00698110]
cmp eax, dword [0x006989a0]
je 0x6417e1
mov eax, dword [0x00698110]
mov dword [0x006989a0], eax
mov eax, dword [0x00698fc8]
add eax, dword [0x00699604]
mov ecx, dword [0x0069a008]
add ecx, dword [0x006932f4]
cmp eax, ecx
jle 0x641809
mov eax, dword [0x006932f4]
mov dword [0x00698fc8], eax
mov eax, dword [0x00699398]
mov dword [0x00698e64], eax
mov eax, dword [0x00693964]
add eax, 1
cmp dword [0x00693964], eax
jne 0x641866
mov eax, dword [0x0069a504]
test eax, eax
jge 0x641835
call fcn.0040afc0
mov ecx, dword [0x00693550]
test ecx, ecx
jge 0x641844
call fcn.0040afc0
mov edx, dword [0x00699378]
test edx, edx
jge 0x641853
call fcn.0040afc0
mov r8d, ecx
mov r9d, edx
mov ecx, eax
mov edx, r8d
mov r8d, r9d
call sub.kernel32.dll_GetDiskFreeSpaceExW
mov eax, dword [0x0069a00c]
add eax, dword [0x0069a9c4]
mov ecx, dword [0x006932f8]
add ecx, dword [0x00693800]
cmp eax, ecx
jle 0x64188c
mov dword [0x0069a00c], 0x50
mov eax, dword [0x006933fc]
add eax, 1
cmp dword [0x006933fc], eax
jne 0x64190a
mov eax, dword [0x0069a96c]
test eax, eax
jge 0x6418ac
call fcn.0040afc0
mov ecx, dword [0x00693448]
test ecx, ecx
jge 0x6418bb
call fcn.0040afc0
mov edx, dword [0x006940c8]
test edx, edx
jge 0x6418ca
call fcn.0040afc0
mov r8d, dword [0x00695940]
test r8d, r8d
jge 0x6418db
call fcn.0040afc0
mov r9d, dword [0x006962ec]
test r9d, r9d
jge 0x6418ec
call fcn.0040afc0
mov r10d, ecx
mov r11d, edx
mov ebx, r8d
mov dword [rsp + 0x20], r9d
mov ecx, eax
mov edx, r10d
mov r8d, r11d
mov r9d, ebx
call sub.kernel32.dll_LockFile
mov byte [rbp + 0x33f], 0
nop
mov eax, dword [0x006931dc]
add eax, 1
cmp dword [0x006931dc], eax
jne 0x641990
mov eax, dword [0x0069a014]
test eax, eax
jge 0x641932
call fcn.0040afc0
mov ecx, dword [0x00695918]
test ecx, ecx
jge 0x641941
call fcn.0040afc0
mov edx, dword [0x00697430]
test edx, edx
jge 0x641950
call fcn.0040afc0
mov r8d, dword [0x00698b04]
test r8d, r8d
jge 0x641961
call fcn.0040afc0
mov r9d, dword [0x00699624]
test r9d, r9d
jge 0x641972
call fcn.0040afc0
mov r10d, ecx
mov r11d, edx
mov ebx, r8d
mov dword [rsp + 0x20], r9d
mov ecx, eax
mov edx, r10d
mov r8d, r11d
mov r9d, ebx
call sub.kernel32.dll_LockFile
mov eax, dword [0x00696170]
mov dword [0x00695d70], eax
call fcn.0061f240
cmp eax, dword [0x00699d68]
jle 0x6419b3
mov dword [0x00699d68], 0x40a
mov eax, dword [0x0069a4fc]
add eax, dword [0x006933dc]
mov ecx, dword [0x00698f94]
add ecx, dword [0x00699658]
cmp ecx, eax
jle 0x6419db
mov ecx, dword [0x006933dc]
mov dword [0x00698f94], ecx
mov ecx, dword [0x00698f94]
add ecx, dword [0x00699658]
cmp ecx, eax
jle 0x6419f7
mov eax, dword [0x006933dc]
mov dword [0x00698f94], eax
mov eax, dword [0x00699380]
cmp eax, dword [0x00699bec]
je 0x641a11
mov eax, dword [0x00699380]
mov dword [0x00699bec], eax
mov rcx, qword [0x004d2058]
mov dl, 1
call fcn.0040b440
mov qword [rbp + 0x1b60], rax
mov eax, dword [0x00699c1c]
mov dword [0x0069989c], eax
mov eax, dword [0x0069580c]
mov dword [0x00694298], eax
mov rcx, qword [0x004d2058]
mov dl, 1
call fcn.0040b440
mov qword [rbp + 0x1b68], rax
mov eax, dword [0x0069341c]
add eax, 1
cmp dword [0x0069341c], eax
jne 0x641abb
mov eax, dword [0x00696180]
test eax, eax
jge 0x641a73
call fcn.0040afc0
mov ecx, dword [0x0069748c]
test ecx, ecx
jge 0x641a82
call fcn.0040afc0
mov edx, dword [0x00698ad8]
test edx, edx
jge 0x641a91
call fcn.0040afc0
mov r8d, dword [0x00698fbc]
test r8d, r8d
jge 0x641aa2
call fcn.0040afc0
mov r9d, ecx
mov r10d, edx
mov r11d, r8d
mov ecx, eax
mov edx, r9d
mov r8d, r10d
mov r9d, r11d
call sub.advapi32.dll_CryptDuplicateKey
mov dword [0x0069a004], 0x301
mov eax, dword [0x0069a004]
sub eax, 0x193
mov dword [0x0069a9bc], eax
mov dword [0x0069a004], 0x301
mov eax, dword [0x0069a004]
sub eax, 0x193
mov dword [0x0069a9bc], eax
mov eax, dword [0x0069813c]
cmp eax, dword [0x00698e68]
je 0x641b0d
mov eax, dword [0x0069813c]
mov dword [0x00698e68], eax
call fcn.0061fe80
mov rcx, qword [0x004d2058]
mov dl, 1
call fcn.0040b440
mov qword [rbp + 0x1b70], rax
mov eax, dword [0x0069a030]
mov dword [0x00699c2c], eax
mov eax, dword [0x00693568]
add eax, 1
cmp dword [0x00693568], eax
jne 0x641b9b
mov eax, dword [0x00693548]
test eax, eax
jge 0x641b53
call fcn.0040afc0
mov ecx, dword [0x006965dc]
test ecx, ecx
jge 0x641b62
call fcn.0040afc0
mov edx, dword [0x00698110]
test edx, edx
jge 0x641b71
call fcn.0040afc0
mov r8d, dword [0x006994f0]
test r8d, r8d
jge 0x641b82
call fcn.0040afc0
mov r9d, ecx
mov r10d, edx
mov r11d, r8d
mov ecx, eax
mov edx, r9d
mov r8d, r10d
mov r9d, r11d
call sub.advapi32.dll_CryptDuplicateKey
mov eax, dword [0x00696578]
mov dword [0x00695d90], eax
mov eax, dword [0x00696578]
mov dword [0x00695d90], eax
mov eax, dword [0x00698ae0]
cmp eax, dword [0x00698fc4]
je 0x641bcd
mov eax, dword [0x00698ae0]
mov dword [0x00698fc4], eax
call fcn.0063a2c0
cmp eax, dword [0x0069a9c4]
jle 0x641be4
mov dword [0x0069a9c4], 0x3b
call fcn.00624890
cmp eax, dword [0x00699dd0]
jle 0x641bfb
mov dword [0x00699dd0], 0xd
mov eax, dword [0x0069a9b4]
mov dword [0x00699d60], eax
mov rcx, qword [0x004d2058]
mov dl, 1
call fcn.0040b440
mov qword [rbp + 0x1b78], rax
mov eax, dword [0x0069630c]
mov dword [0x00695d6c], eax
nop
mov eax, dword [0x00697e7c]
add eax, dword [0x00698afc]
mov ecx, dword [0x006993ac]
add ecx, dword [0x00699618]
cmp eax, ecx
jle 0x641c51
mov eax, dword [0x00699618]
mov dword [0x00697e7c], eax
lea rcx, [rbp + 0x320]
lea rdx, [0x006a84f8]
mov r8d, 0x104
call fcn.0040ff40
lea rcx, [rbp + 0x318]
lea rdx, [0x006a87e7]
call fcn.0040ff20
lea rcx, [rbp + 0x320]
mov rdx, qword [rbp + 0x318]
call fcn.00410070
lea rcx, [rbp + 0x310]
mov rdx, qword [rbp + 0x320]
call fcn.004108b0
mov rcx, qword [rbp + 0x310]
mov dl, 1
call fcn.0042f710
test al, al
je 0x641d5a
call fcn.00632990
cmp eax, dword [0x0069a9b4]
jle 0x641cd1
mov dword [0x0069a9b4], 0x37
call fcn.00623820
cmp eax, dword [0x0069a4fc]
jle 0x641ce8
mov dword [0x0069a4fc], 9
lea rcx, [rbp + 0x308]
lea rdx, [0x006a84f8]
mov r8d, 0x104
call fcn.0040ff40
lea rcx, [rbp + 0x300]
lea rdx, [0x006a87e7]
call fcn.0040ff20
lea rcx, [rbp + 0x308]
mov rdx, qword [rbp + 0x300]
call fcn.00410070
lea rcx, [rbp + 0x2f8]
mov rdx, qword [rbp + 0x308]
call fcn.004108b0
mov rcx, qword [rbp + 0x1b60]
mov rdx, qword [rbp + 0x2f8]
call fcn.004fd2e0
mov eax, dword [0x006962f8]
mov dword [0x00695c10], eax
lea rcx, [rbp + 0x2f0]
lea rdx, [0x006a84f8]
mov r8d, 0x104
call fcn.0040ff40
lea rcx, [rbp + 0x2e8]
lea rdx, [0x006a8808]
call fcn.0040ff20
lea rcx, [rbp + 0x2f0]
mov rdx, qword [rbp + 0x2e8]
call fcn.00410070
lea rcx, [rbp + 0x2e0]
mov rdx, qword [rbp + 0x2f0]
call fcn.004108b0
mov rcx, qword [rbp + 0x2e0]
mov dl, 1
call fcn.0042f710
test al, al
je 0x64202d
call fcn.00618050
lea rcx, [rbp + 0x2d8]
lea rdx, [0x006a84f8]
mov r8d, 0x104
call fcn.0040ff40
lea rcx, [rbp + 0x2d0]
lea rdx, [0x006a8808]
call fcn.0040ff20
lea rcx, [rbp + 0x2d8]
mov rdx, qword [rbp + 0x2d0]
call fcn.00410070
lea rcx, [rbp + 0x2c8]
mov rdx, qword [rbp + 0x2d8]
call fcn.004108b0
mov rcx, qword [rbp + 0x1b70]
mov rdx, qword [rbp + 0x2c8]
call fcn.004fd2e0
mov eax, dword [0x00693908]
add eax, 1
cmp dword [0x00693908], eax
jne 0x641eac
mov eax, dword [0x006940b8]
test eax, eax
jge 0x641e4e
call fcn.0040afc0
mov ecx, dword [0x00696a6c]
test ecx, ecx
jge 0x641e5d
call fcn.0040afc0
mov edx, dword [0x006980e0]
test edx, edx
jge 0x641e6c
call fcn.0040afc0
mov r8d, dword [0x00698b1c]
test r8d, r8d
jge 0x641e7d
call fcn.0040afc0
mov r9d, dword [0x00699c3c]
test r9d, r9d
jge 0x641e8e
call fcn.0040afc0
mov r10d, ecx
mov r11d, edx
mov ebx, r8d
mov dword [rsp + 0x20], r9d
mov ecx, eax
mov edx, r10d
mov r8d, r11d
mov r9d, ebx
call sub.kernel32.dll_LockFile
call fcn.0062aee0
cmp eax, dword [0x0069a03c]
jle 0x641ec3
mov dword [0x0069a03c], 0x24
mov dword [0x006931f0], 0x33b
mov eax, dword [0x006931f0]
sub eax, 0x1af
mov dword [0x006933f8], eax
mov dword [0x006931f0], 0x33b
mov eax, dword [0x006931f0]
sub eax, 0x1af
mov dword [0x006933f8], eax
mov eax, dword [0x00698e98]
cmp eax, dword [0x006994c4]
je 0x641f15
mov eax, dword [0x00698e98]
mov dword [0x006994c4], eax
mov eax, dword [0x00693568]
add eax, 1
cmp dword [0x00693568], eax
jne 0x641f66
mov eax, dword [0x00699a70]
test eax, eax
jge 0x641f35
call fcn.0040afc0
mov ecx, dword [0x0069a984]
test ecx, ecx
jge 0x641f44
call fcn.0040afc0
mov edx, dword [0x006933d4]
test edx, edx
jge 0x641f53
call fcn.0040afc0
mov r8d, ecx
mov r9d, edx
mov ecx, eax
mov edx, r8d
mov r8d, r9d
call sub.kernel32.dll_GetDiskFreeSpaceExW
mov dword [0x0069a990], 0x2f7
mov eax, dword [0x0069a990]
sub eax, 0x18e
mov dword [0x006932c4], eax
call fcn.00615620
mov eax, dword [0x00696c90]
add eax, dword [0x00697e74]
mov ecx, dword [0x00698af4]
add ecx, dword [0x00698fd8]
cmp eax, ecx
jle 0x641faf
mov eax, dword [0x00698fd8]
mov dword [0x00696c90], eax
mov eax, dword [0x0069352c]
add eax, 1
cmp dword [0x0069352c], eax
jne 0x64202d
mov eax, dword [0x00696894]
test eax, eax
jge 0x641fcf
call fcn.0040afc0
mov ecx, dword [0x0069813c]
test ecx, ecx
jge 0x641fde
call fcn.0040afc0
mov edx, dword [0x00699608]
test edx, edx
jge 0x641fed
call fcn.0040afc0
mov r8d, dword [0x00699d74]
test r8d, r8d
jge 0x641ffe
call fcn.0040afc0
mov r9d, dword [0x0069a9c8]
test r9d, r9d
jge 0x64200f
call fcn.0040afc0
mov r10d, ecx
mov r11d, edx
mov ebx, r8d
mov dword [rsp + 0x20], r9d
mov ecx, eax
mov edx, r10d
mov r8d, r11d
mov r9d, ebx
call sub.kernel32.dll_LockFile
lea rcx, [rbp + 0x2b8]
lea rdx, [0x0069268d]
mov r8d, 0xa
mov r9d, 0x2d
call fcn.00597b20
lea rcx, [rbp + 0x2c0]
mov rdx, qword [rbp + 0x2b8]
xor r8, r8
call fcn.005a8ac0
mov rcx, qword [rbp + 0x2c0]
call fcn.005a2dd0
mov qword [rbp + 0x1b80], rax
nop
mov eax, dword [0x00696c90]
add eax, dword [0x00697e74]
mov ecx, dword [0x00698af4]
add ecx, dword [0x00698fd8]
cmp eax, ecx
jle 0x6420a0
mov eax, dword [0x00698fd8]
mov dword [0x00696c90], eax
mov eax, dword [0x00698b28]
cmp eax, dword [0x006990b4]
je 0x6420ba
mov eax, dword [0x00698b28]
mov dword [0x006990b4], eax
mov eax, dword [0x00696ca0]
add eax, dword [0x00697e80]
mov ecx, dword [0x00698b00]
add ecx, dword [0x0069908c]
cmp eax, ecx
jle 0x6420e2
mov eax, dword [0x0069908c]
mov dword [0x00696ca0], eax
mov byte [rbp + 0x33e], 0
mov eax, dword [0x006933bc]
add eax, 1
cmp dword [0x006933bc], eax
jne 0x64213a
mov eax, dword [0x0069a9c4]
test eax, eax
jge 0x642109
call fcn.0040afc0
mov ecx, dword [0x006942f0]
test ecx, ecx
jge 0x642118
call fcn.0040afc0
mov edx, dword [0x00696118]
test edx, edx
jge 0x642127
call fcn.0040afc0
mov r8d, ecx
mov r9d, edx
mov ecx, eax
mov edx, r8d
mov r8d, r9d
call sub.kernel32.dll_GetDiskFreeSpaceExW
mov eax, dword [0x00699a54]
mov dword [0x006994bc], eax
mov eax, dword [0x0069a004]
add eax, dword [0x00693204]
mov ecx, dword [0x0069340c]
add ecx, dword [0x006937fc]
cmp eax, ecx
jle 0x64216c
mov dword [0x0069a004], 0x164
mov eax, dword [0x006974b0]
add eax, dword [0x00698774]
mov ecx, dword [0x00698e74]
add ecx, dword [0x006993a8]
cmp eax, ecx
jle 0x642194
mov eax, dword [0x006993a8]
mov dword [0x006974b0], eax
call fcn.00619970
mov eax, dword [0x006995d8]
mov dword [0x00698fa0], eax
mov eax, dword [0x00696ca8]
add eax, dword [0x00697e88]
mov ecx, dword [0x00698b0c]
add ecx, dword [0x00699098]
cmp eax, ecx
jle 0x6421cd
mov eax, dword [0x00699098]
mov dword [0x00696ca8], eax
mov eax, dword [0x00699a70]
mov dword [0x00699564], eax
mov eax, dword [0x00695948]
mov dword [0x00695814], eax
mov rcx, qword [0x006a8ac8]
call fcn.004fd260
mov rcx, qword [rbp + 0x1b60]
mov rax, qword [rbp + 0x1b60]
mov rax, qword [rax]
call qword [rax]
mov qword [rbp + 0x1b58], rax
mov qword [rbp + 0x1b50], 0
mov eax, dword [0x006962f8]
add eax, dword [0x00696a88]
mov ecx, dword [0x006978d0]
add ecx, dword [0x00698990]
cmp eax, ecx
jle 0x642237
call fcn.004096f0
mov eax, dword [0x006933f0]
add eax, 1
cmp dword [0x006933f0], eax
jne 0x6422b5
mov eax, dword [0x00698b10]
test eax, eax
jge 0x642257
call fcn.0040afc0
mov ecx, dword [0x00699540]
test ecx, ecx
jge 0x642266
call fcn.0040afc0
mov edx, dword [0x00699c30]
test edx, edx
jge 0x642275
call fcn.0040afc0
mov r8d, dword [0x0069a034]
test r8d, r8d
jge 0x642286
call fcn.0040afc0
mov r9d, dword [0x00693294]
test r9d, r9d
jge 0x642297
call fcn.0040afc0
mov r10d, ecx
mov r11d, edx
mov ebx, r8d
mov dword [rsp + 0x20], r9d
mov ecx, eax
mov edx, r10d
mov r8d, r11d
mov r9d, ebx
call sub.kernel32.dll_LockFile
mov dword [0x0069a988], 0x334
mov eax, dword [0x0069a988]
sub eax, 0x1ac
mov dword [0x006932bc], eax
call fcn.0061fe80
mov eax, dword [0x0069a00c]
add eax, dword [0x0069a9c4]
mov ecx, dword [0x006932f8]
add ecx, dword [0x006934f8]
cmp eax, ecx
jle 0x6422fc
mov dword [0x0069a00c], 0x14
mov eax, dword [0x006931ec]
add eax, 1
cmp dword [0x006931ec], eax
jne 0x642364
mov eax, dword [0x00699604]
test eax, eax
jge 0x64231c
call fcn.0040afc0
mov ecx, dword [0x006937fc]
test ecx, ecx
jge 0x64232b
call fcn.0040afc0
mov edx, dword [0x00695860]
test edx, edx
jge 0x64233a
call fcn.0040afc0
mov r8d, dword [0x00696114]
test r8d, r8d
jge 0x64234b
call fcn.0040afc0
mov r9d, ecx
mov r10d, edx
mov r11d, r8d
mov ecx, eax
mov edx, r9d
mov r8d, r10d
mov r9d, r11d
call sub.advapi32.dll_CryptDuplicateKey
mov rcx, qword [rbp + 0x1b70]
mov rax, qword [rbp + 0x1b70]
mov rax, qword [rax]
call qword [rax]
mov qword [rbp + 0x1b48], rax
jmp 0x645585
mov rcx, qword [rbp + 0x1b60]
mov rdx, qword [rbp + 0x1b50]
xor r8, r8
mov rax, qword [rbp + 0x1b60]
mov rax, qword [rax]
call qword [rax + 0x50]
mov rcx, qword [rbp + 0x1b60]
lea rdx, [rbp + 0x107d]
mov r8d, 0xac3
call fcn.004fab00
mov eax, dword [0x006962ec]
mov dword [0x00695c04], eax
mov eax, dword [0x0069614c]
add eax, dword [0x006965c0]
mov ecx, dword [0x00696a7c]
add ecx, dword [0x00697458]
cmp eax, ecx
jle 0x6423e8
call fcn.004096f0
mov eax, dword [0x00696a88]
add eax, dword [0x00697464]
mov ecx, dword [0x006980fc]
add ecx, dword [0x0069898c]
cmp eax, ecx
jle 0x642410
mov eax, dword [0x0069898c]
mov dword [0x00696a88], eax
mov rax, qword [rbp + 0x1b1f]
mov qword [rbp + 0x1b40], rax
call fcn.00615620
mov eax, dword [0x0069a9a0]
add eax, 1
cmp dword [0x0069a9a0], eax
jne 0x64244a
mov eax, dword [0x00694300]
test eax, eax
jge 0x642443
call fcn.0040afc0
mov ecx, eax
call sub.kernel32.dll_SetConsoleKeyShortcuts
mov eax, dword [0x0069320c]
add eax, dword [0x006932f8]
mov ecx, dword [0x00699d70]
add ecx, dword [0x0069a698]
cmp ecx, eax
jle 0x642470
mov dword [0x00699d70], 0x92
mov ecx, dword [0x00699d70]
add ecx, dword [0x0069a698]
cmp ecx, eax
jle 0x64248a
mov dword [0x00699d70], 0x92
mov eax, dword [0x00698120]
cmp eax, dword [0x00698e4c]
je 0x6424a4
mov eax, dword [0x00698120]
mov dword [0x00698e4c], eax
call fcn.00618820
call fcn.005ff550
mov rcx, qword [rbp + 0x1b68]
call fcn.004fd260
mov rcx, qword [rbp + 0x1b68]
mov rdx, qword [rbp + 0x1b60]
mov r8, qword [rbp + 0x1b1f]
call fcn.004fbf30
mov qword [rbp + 0x1b1f], 0
mov qword [rbp + 0x107d], 0
mov eax, dword [0x00695934]
mov dword [0x00695800], eax
lea rcx, [rbp + 0x2b0]
lea rdx, [rbp + 0x107d]
mov r8d, 0xac3
call fcn.005a9750
lea rcx, [rbp + 0x1b68]
mov rdx, qword [0x006a8a98]
mov r8, qword [rbp + 0x2b0]
call fcn.005abab0
test al, al
je 0x645488
cmp dword [rbp + 0x1b1b], 1
jne 0x642555
lea rcx, [rbp + 0x1b68]
call fcn.005ad830
test al, al
jne 0x642555
mov dword [rbp + 0x1089], 0xffffffff
mov eax, dword [rbp + 0x1089]
cmp eax, 6
jg 0x642596
cmp eax, 6
je 0x6439da
sub eax, 2
test eax, eax
je 0x6425bc
sub eax, 1
test eax, eax
je 0x6429ec
sub eax, 1
test eax, eax
je 0x642e95
sub eax, 1
test eax, eax
jne 0x645494
jmp 0x643339
sub eax, 0xc
test eax, eax
je 0x6445d3
sub eax, 1
test eax, eax
je 0x64465e
sub eax, 4
test eax, eax
jne 0x645494
jmp 0x645020
mov eax, dword [0x0069a9b4]
add eax, 1
cmp dword [0x0069a9b4], eax
jne 0x6425e3
mov eax, dword [0x00699544]
test eax, eax
jge 0x6425dc
call fcn.0040afc0
mov ecx, eax
call sub.kernel32.dll_SetConsoleKeyShortcuts
mov eax, dword [0x00695934]
mov dword [0x00695800], eax
mov eax, dword [0x006989ac]
cmp eax, dword [0x00698fb0]
je 0x642609
mov eax, dword [0x006989ac]
mov dword [0x00698fb0], eax
mov eax, dword [0x006932a8]
add eax, dword [0x00693450]
mov ecx, dword [0x00693534]
add ecx, dword [0x006940d0]
cmp eax, ecx
jle 0x64262f
mov dword [0x006932a8], 0xeb
mov eax, dword [0x00695d9c]
add eax, dword [0x0069619c]
mov ecx, dword [0x00696898]
add ecx, dword [0x00696e84]
cmp eax, ecx
jle 0x642650
call fcn.004096f0
mov eax, dword [0x00699894]
mov dword [0x00699614], eax
mov byte [rbp + 0x33e], 1
mov rcx, qword [rbp + 0x1b68]
mov rax, qword [rbp + 0x1b68]
mov rax, qword [rax]
call qword [rax]
mov qword [rbp + 0x1b1f], rax
mov rcx, qword [rbp + 0x1b68]
xor edx, edx
xor r8, r8
mov rax, qword [rbp + 0x1b68]
mov rax, qword [rax]
call qword [rax + 0x48]
mov rcx, qword [0x006a8ac8]
lea rdx, [rbp + 0x107d]
mov r8d, 0xac3
call fcn.004fbd70
mov rcx, qword [rbp + 0x1b68]
mov rax, qword [rbp + 0x1b68]
mov rax, qword [rax]
call qword [rax]
mov rcx, qword [0x006a8ac8]
mov rdx, qword [rbp + 0x1b68]
mov r8, rax
call fcn.004fbf30
mov eax, dword [0x00699894]
mov dword [0x00699614], eax
mov eax, dword [0x006980e4]
cmp eax, dword [0x00698b20]
je 0x6426ff
mov eax, dword [0x006980e4]
mov dword [0x00698b20], eax
mov eax, dword [0x00699640]
mov dword [0x00699554], eax
mov eax, dword [0x0069342c]
add eax, 1
cmp dword [0x0069342c], eax
jne 0x642773
mov eax, dword [0x00698780]
test eax, eax
jge 0x64272b
call fcn.0040afc0
mov ecx, dword [0x00699090]
test ecx, ecx
jge 0x64273a
call fcn.0040afc0
mov edx, dword [0x00699534]
test edx, edx
jge 0x642749
call fcn.0040afc0
mov r8d, dword [0x006998a0]
test r8d, r8d
jge 0x64275a
call fcn.0040afc0
mov r9d, ecx
mov r10d, edx
mov r11d, r8d
mov ecx, eax
mov edx, r9d
mov r8d, r10d
mov r9d, r11d
call sub.advapi32.dll_CryptDuplicateKey
mov eax, dword [0x006931d4]
add eax, 1
cmp dword [0x006931d4], eax
jne 0x64279a
mov eax, dword [0x006940d0]
test eax, eax
jge 0x642793
call fcn.0040afc0
mov ecx, eax
call sub.kernel32.dll_SetConsoleKeyShortcuts
call fcn.00622da0
cmp eax, dword [0x00699d94]
jle 0x6427b1
mov dword [0x00699d94], 0x438
cmp dword [rbp + 0x1b13], 1
jne 0x6427c3
mov byte [0x006922e0], 1
jmp 0x6427ca
mov byte [0x006922e0], 0
cmp dword [rbp + 0x1b0f], 1
jne 0x6427dc
mov byte [0x006922e1], 1
jmp 0x6427e3
mov byte [0x006922e1], 0
mov eax, dword [0x00693308]
add eax, 1
cmp dword [0x00693308], eax
jne 0x642861
mov eax, dword [0x00699dd4]
test eax, eax
jge 0x642803
call fcn.0040afc0
mov ecx, dword [0x0069355c]
test ecx, ecx
jge 0x642812
call fcn.0040afc0
mov edx, dword [0x006942c8]
test edx, edx
jge 0x642821
call fcn.0040afc0
mov r8d, dword [0x006958e4]
test r8d, r8d
jge 0x642832
call fcn.0040afc0
mov r9d, dword [0x00695d7c]
test r9d, r9d
jge 0x642843
call fcn.0040afc0
mov r10d, ecx
mov r11d, edx
mov ebx, r8d
mov dword [rsp + 0x20], r9d
mov ecx, eax
mov edx, r10d
mov r8d, r11d
mov r9d, ebx
call sub.kernel32.dll_LockFile
mov eax, dword [0x006942a8]
mov dword [0x00693940], eax
mov eax, dword [0x00693518]
add eax, 1
cmp dword [0x00693518], eax
jne 0x6428eb
mov eax, dword [0x00698b08]
test eax, eax
jge 0x64288d
call fcn.0040afc0
mov ecx, dword [0x006994b0]
test ecx, ecx
jge 0x64289c
call fcn.0040afc0
mov edx, dword [0x00699628]
test edx, edx
jge 0x6428ab
call fcn.0040afc0
mov r8d, dword [0x00699c28]
test r8d, r8d
jge 0x6428bc
call fcn.0040afc0
mov r9d, dword [0x0069a02c]
test r9d, r9d
jge 0x6428cd
call fcn.0040afc0
mov r10d, ecx
mov r11d, edx
mov ebx, r8d
mov dword [rsp + 0x20], r9d
mov ecx, eax
mov edx, r10d
mov r8d, r11d
mov r9d, ebx
call sub.kernel32.dll_LockFile
cmp byte [0x006a8aa8], 0
je 0x6429e0
cmp byte [0x006922db], 0
jne 0x6429e0
mov byte [0x006922db], 1
call fcn.005e3970
mov eax, dword [0x00699544]
mov dword [0x006990a0], eax
call fcn.005ff550
mov eax, dword [0x0069350c]
add eax, 1
cmp dword [0x0069350c], eax
jne 0x64298a
mov eax, dword [0x00694304]
test eax, eax
jge 0x642942
call fcn.0040afc0
mov ecx, dword [0x00695be8]
test ecx, ecx
jge 0x642951
call fcn.0040afc0
mov edx, dword [0x006962d0]
test edx, edx
jge 0x642960
call fcn.0040afc0
mov r8d, dword [0x006968b8]
test r8d, r8d
jge 0x642971
call fcn.0040afc0
mov r9d, ecx
mov r10d, edx
mov r11d, r8d
mov ecx, eax
mov edx, r9d
mov r8d, r10d
mov r9d, r11d
call sub.advapi32.dll_CryptDuplicateKey
mov eax, dword [0x00696150]
mov dword [0x00695944], eax
call fcn.00615fc0
mov eax, dword [0x00699654]
mov dword [0x006995c8], eax
mov eax, dword [0x0069630c]
add eax, dword [0x006965e0]
mov ecx, dword [0x00696e54]
add ecx, dword [0x00697478]
cmp eax, ecx
jle 0x6429cf
mov eax, dword [0x00697478]
mov dword [0x0069630c], eax
mov eax, dword [0x0069965c]
mov dword [0x006994e4], eax
jmp 0x645494
mov byte [0x006922db], 1
jmp 0x645494
mov rcx, qword [rbp + 0x1b68]
mov rax, qword [rbp + 0x1b68]
mov rax, qword [rax]
call qword [rax]
mov qword [rbp + 0x1b1f], rax
mov eax, dword [0x00696150]
add eax, dword [0x006962f0]
mov ecx, dword [0x00696a80]
add ecx, dword [0x0069745c]
cmp eax, ecx
jle 0x642a27
call fcn.004096f0
mov eax, dword [0x00699db8]
mov dword [0x00699a70], eax
mov eax, dword [0x006931f0]
add eax, 1
cmp dword [0x006931f0], eax
jne 0x642a9b
mov eax, dword [0x006994e4]
test eax, eax
jge 0x642a53
call fcn.0040afc0
mov ecx, dword [0x00699d38]
test ecx, ecx
jge 0x642a62
call fcn.0040afc0
mov edx, dword [0x0069a500]
test edx, edx
jge 0x642a71
call fcn.0040afc0
mov r8d, dword [0x00693550]
test r8d, r8d
jge 0x642a82
call fcn.0040afc0
mov r9d, ecx
mov r10d, edx
mov r11d, r8d
mov ecx, eax
mov edx, r9d
mov r8d, r10d
mov r9d, r11d
call sub.advapi32.dll_CryptDuplicateKey
mov eax, dword [0x00695b98]
mov dword [0x0069582c], eax
mov eax, dword [0x00699864]
mov dword [0x006995e4], eax
mov eax, dword [0x00696140]
mov dword [0x00695bf8], eax
mov eax, dword [0x006993b4]
mov dword [0x00698e80], eax
mov rcx, qword [rbp + 0x1b68]
xor edx, edx
xor r8, r8
mov rax, qword [rbp + 0x1b68]
mov rax, qword [rax]
call qword [rax + 0x48]
mov eax, dword [0x006962c4]
add eax, dword [0x006968ac]
mov ecx, dword [0x00697434]
add ecx, dword [0x006974c0]
cmp eax, ecx
jle 0x642b05
call fcn.004096f0
mov eax, dword [0x0069953c]
mov dword [0x006994b0], eax
mov eax, dword [0x006962cc]
add eax, dword [0x006965a0]
mov ecx, dword [0x00696cac]
add ecx, dword [0x006974c4]
cmp eax, ecx
jle 0x642b32
call fcn.004096f0
call fcn.0061e920
cmp eax, dword [0x00699c44]
jle 0x642b49
mov dword [0x00699c44], 0x41b
mov eax, dword [0x00699a4c]
mov dword [0x00699540], eax
mov eax, dword [0x0069320c]
add eax, 1
cmp dword [0x0069320c], eax
jne 0x642ba6
mov eax, dword [0x0069a010]
test eax, eax
jge 0x642b75
call fcn.0040afc0
mov ecx, dword [0x00693210]
test ecx, ecx
jge 0x642b84
call fcn.0040afc0
mov edx, dword [0x006934fc]
test edx, edx
jge 0x642b93
call fcn.0040afc0
mov r8d, ecx
mov r9d, edx
mov ecx, eax
mov edx, r8d
mov r8d, r9d
call sub.kernel32.dll_GetDiskFreeSpaceExW
mov rcx, qword [0x006a8ac8]
lea rdx, [rbp + 0x107d]
mov r8d, 0xac3
call fcn.004fbd70
mov rcx, qword [rbp + 0x1b68]
mov rax, qword [rbp + 0x1b68]
mov rax, qword [rax]
call qword [rax]
mov rcx, qword [0x006a8ac8]
mov rdx, qword [rbp + 0x1b68]
mov r8, rax
call fcn.004fbf30
mov eax, dword [0x00696140]
add eax, dword [0x006962e0]
mov ecx, dword [0x00696a70]
add ecx, dword [0x0069744c]
cmp eax, ecx
jle 0x642c0a
call fcn.004096f0
mov eax, dword [0x0069962c]
mov dword [0x00699540], eax
mov rcx, qword [rbp + 0x1b68]
xor edx, edx
xor r8, r8
mov rax, qword [rbp + 0x1b68]
mov rax, qword [rax]
call qword [rax + 0x48]
jmp 0x642e81
mov eax, dword [0x00696e64]
add eax, dword [0x006978f4]
mov ecx, dword [0x006989b0]
add ecx, dword [0x00698e4c]
cmp eax, ecx
jle 0x642c5c
mov eax, dword [0x00698e4c]
mov dword [0x00696e64], eax
call fcn.00612df0
mov eax, dword [0x006995d0]
mov dword [0x006990cc], eax
mov eax, dword [0x00696ac8]
add eax, dword [0x006974a4]
mov ecx, dword [0x00697e6c]
add ecx, dword [0x00698aec]
cmp eax, ecx
jle 0x642c95
mov eax, dword [0x00698aec]
mov dword [0x00696ac8], eax
mov eax, dword [0x006995c8]
mov dword [0x006994dc], eax
mov eax, dword [0x00696a84]
add eax, dword [0x00697460]
mov ecx, dword [0x006980f8]
add ecx, dword [0x00698988]
cmp eax, ecx
jle 0x642cc9
mov eax, dword [0x00698988]
mov dword [0x00696a84], eax
mov eax, dword [0x00696114]
mov dword [0x00695bcc], eax
mov rcx, qword [rbp + 0x1b68]
lea rdx, [rbp + 0x397]
mov r8d, 0x209
call fcn.004fab00
lea rcx, [rbp + 0x2a0]
lea rdx, [rbp + 0x397]
mov r8d, 0x104
call fcn.00410830
lea rcx, [rbp + 0x2a8]
mov rdx, qword [rbp + 0x2a0]
call fcn.0042d7c0
lea rcx, [rbp + 0x290]
mov rdx, qword [0x006a8a10]
call fcn.004108b0
lea rcx, [rbp + 0x298]
mov rdx, qword [rbp + 0x290]
call fcn.0042d7c0
mov rcx, qword [rbp + 0x2a8]
mov rdx, qword [rbp + 0x298]
call fcn.005a6c40
test al, al
je 0x642dc5
mov eax, dword [0x00699a70]
add eax, dword [0x00699db8]
mov ecx, dword [0x0069a4f4]
add ecx, dword [0x006931c8]
cmp eax, ecx
jle 0x642d7f
mov dword [0x00699a70], 0x6f
mov eax, dword [0x00696140]
add eax, dword [0x006965b4]
mov ecx, dword [0x00696a70]
add ecx, dword [0x0069744c]
cmp eax, ecx
jle 0x642da7
mov eax, dword [0x0069744c]
mov dword [0x00696140], eax
cmp byte [rbp + 0x59f], 0
je 0x642db9
mov byte [0x006922da], 1
jmp 0x642dc5
mov byte [0x006922da], 0
jmp 0x642e8f
mov eax, dword [0x0069a9ac]
add eax, 1
cmp dword [0x0069a9ac], eax
jne 0x642e16
mov eax, dword [0x00699658]
test eax, eax
jge 0x642de5
call fcn.0040afc0
mov ecx, dword [0x006942b4]
test ecx, ecx
jge 0x642df4
call fcn.0040afc0
mov edx, dword [0x00695b98]
test edx, edx
jge 0x642e03
call fcn.0040afc0
mov r8d, ecx
mov r9d, edx
mov ecx, eax
mov edx, r8d
mov r8d, r9d
call sub.kernel32.dll_GetDiskFreeSpaceExW
mov eax, dword [0x00699610]
mov dword [0x00699524], eax
mov eax, dword [0x006934bc]
add eax, 1
cmp dword [0x006934bc], eax
jne 0x642e49
mov eax, dword [0x006958e8]
test eax, eax
jge 0x642e42
call fcn.0040afc0
mov ecx, eax
call sub.kernel32.dll_SetConsoleKeyShortcuts
mov eax, dword [0x00697434]
add eax, dword [0x00697e88]
mov ecx, dword [0x0069895c]
add ecx, dword [0x00698e84]
cmp eax, ecx
jle 0x642e71
mov eax, dword [0x00698e84]
mov dword [0x00697434], eax
call fcn.00612ef0
sub qword [rbp + 0x1b1f], 0x209
cmp qword [rbp + 0x1b1f], 0
jg 0x642c34
nop
jmp 0x645494
cmp byte [0x006a8aa8], 0
je 0x645494
cmp byte [rbp + 0x1bc0], 0
jne 0x645494
mov eax, dword [0x006932dc]
add eax, 1
cmp dword [0x006932dc], eax
jne 0x642f17
mov eax, dword [0x00695818]
test eax, eax
jge 0x642ecf
call fcn.0040afc0
mov ecx, dword [0x00696a88]
test ecx, ecx
jge 0x642ede
call fcn.0040afc0
mov edx, dword [0x006978d4]
test edx, edx
jge 0x642eed
call fcn.0040afc0
mov r8d, dword [0x00698990]
test r8d, r8d
jge 0x642efe
call fcn.0040afc0
mov r9d, ecx
mov r10d, edx
mov r11d, r8d
mov ecx, eax
mov edx, r9d
mov r8d, r10d
mov r9d, r11d
call sub.advapi32.dll_CryptDuplicateKey
mov eax, dword [0x006994c0]
mov dword [0x006990a4], eax
mov eax, dword [0x006978bc]
add eax, dword [0x00698978]
mov ecx, dword [0x00696a74]
add ecx, dword [0x00697450]
cmp ecx, eax
jle 0x642f4b
mov ecx, dword [0x00698978]
mov dword [0x00696a74], ecx
mov ecx, dword [0x00696a74]
add ecx, dword [0x00697450]
cmp ecx, eax
jle 0x642f67
mov eax, dword [0x00698978]
mov dword [0x00696a74], eax
mov eax, dword [0x00696cc4]
cmp eax, dword [0x006978bc]
je 0x642f81
mov eax, dword [0x00696cc4]
mov dword [0x006978bc], eax
mov eax, dword [0x006932f8]
add eax, 1
cmp dword [0x006932f8], eax
jne 0x642fff
mov eax, dword [0x0069a970]
test eax, eax
jge 0x642fa1
call fcn.0040afc0
mov ecx, dword [0x006933c0]
test ecx, ecx
jge 0x642fb0
call fcn.0040afc0
mov edx, dword [0x00693934]
test edx, edx
jge 0x642fbf
call fcn.0040afc0
mov r8d, dword [0x00695810]
test r8d, r8d
jge 0x642fd0
call fcn.0040afc0
mov r9d, dword [0x00695948]
test r9d, r9d
jge 0x642fe1
call fcn.0040afc0
mov r10d, ecx
mov r11d, edx
mov ebx, r8d
mov dword [rsp + 0x20], r9d
mov ecx, eax
mov edx, r10d
mov r8d, r11d
mov r9d, ebx
call sub.kernel32.dll_LockFile
mov eax, dword [0x006932e4]
add eax, dword [0x00693400]
mov ecx, dword [0x006934e4]
add ecx, dword [0x00693974]
cmp eax, ecx
jle 0x643025
mov dword [0x006932e4], 3
lea rcx, [rbp + 0x288]
lea rdx, [rbp + 0x1ad6]
call fcn.004109a0
lea rcx, [rbp + 0x1b70]
mov rdx, qword [rbp + 0x288]
mov r8b, 1
call fcn.005da9a0
test al, al
jne 0x645494
mov eax, dword [0x00699a6c]
mov dword [0x0069964c], eax
call fcn.0061e920
cmp eax, dword [0x00699c48]
jle 0x643079
mov dword [0x00699c48], 0x3f9
mov eax, dword [0x0069586c]
mov dword [0x006942f8], eax
mov eax, dword [0x00696160]
add eax, dword [0x006965d4]
mov ecx, dword [0x00696a90]
add ecx, dword [0x0069746c]
cmp eax, ecx
jle 0x6430a6
call fcn.004096f0
mov rcx, qword [rbp + 0x1b68]
xor edx, edx
xor r8, r8
mov rax, qword [rbp + 0x1b68]
mov rax, qword [rax]
call qword [rax + 0x48]
lea rcx, [rbp + 0x278]
lea rdx, [0x00692d7a]
mov r8d, 0xb
mov r9d, 0x2d
call fcn.00597b20
lea rcx, [rbp + 0x280]
mov rdx, qword [rbp + 0x278]
xor r8, r8
call fcn.005a8ac0
mov rcx, qword [rbp + 0x280]
call fcn.005a2dd0
mov qword [rbp + 0x1b88], rax
nop
mov eax, dword [0x00699d88]
add eax, dword [0x0069a024]
mov ecx, dword [0x0069a9dc]
add ecx, dword [0x00693284]
cmp eax, ecx
jle 0x643130
mov dword [0x00699d88], 0x3e
mov rcx, qword [0x006a8ad8]
call fcn.004fd260
mov eax, dword [0x00699d88]
add eax, dword [0x0069a024]
mov ecx, dword [0x0069a9dc]
add ecx, dword [0x00693284]
cmp eax, ecx
jle 0x643162
mov dword [0x00699d88], 0x3e
mov eax, dword [0x00698b18]
cmp eax, dword [0x00698e94]
je 0x64317c
mov eax, dword [0x00698b18]
mov dword [0x00698e94], eax
mov eax, dword [0x0069615c]
add eax, dword [0x006962fc]
mov ecx, dword [0x00696a8c]
add ecx, dword [0x00696cdc]
cmp eax, ecx
jle 0x64319d
call fcn.004096f0
mov rcx, qword [rbp + 0x1b68]
mov rax, qword [rbp + 0x1b68]
mov rax, qword [rax]
call qword [rax]
mov rcx, qword [0x006a8ad8]
mov rdx, qword [rbp + 0x1b68]
mov r8, rax
call fcn.004fbf30
nop
mov rcx, qword [rbp + 0x1b88]
call fcn.005a2ff0
mov byte [0x006a94ac], 0
mov eax, dword [0x00696158]
mov dword [0x00695c10], eax
mov eax, dword [0x006990c8]
mov dword [0x00698f94], eax
mov eax, dword [0x00693278]
add eax, 1
cmp dword [0x00693278], eax
jne 0x643219
mov eax, dword [0x00695928]
test eax, eax
jge 0x643212
call fcn.0040afc0
mov ecx, eax
call sub.kernel32.dll_SetConsoleKeyShortcuts
mov eax, dword [0x006965e0]
add eax, dword [0x00696a9c]
mov ecx, dword [0x00697478]
add ecx, dword [0x006978e4]
cmp eax, ecx
jle 0x643241
mov eax, dword [0x006978e4]
mov dword [0x006965e0], eax
lea rdi, [0x006a9fa8]
lea rsi, [rbp + 0x107d]
mov ecx, 0x158
rep movsq qword [rdi], qword [rsi]
movsw word [rdi], word [rsi]
movsb byte [rdi], byte [rsi]
mov eax, dword [0x00699c04]
add eax, dword [0x0069a008]
mov ecx, dword [0x0069a694]
add ecx, dword [0x0069320c]
cmp eax, ecx
jle 0x643281
mov dword [0x00699c04], 0x14
mov eax, dword [0x00698fa0]
mov dword [0x00698e38], eax
call fcn.00636ba0
cmp eax, dword [0x0069a958]
jle 0x6432a4
mov dword [0x0069a958], 0x20
xor ecx, ecx
xor edx, edx
lea r8, [0x00629340]
xor r9, r9
mov dword [rsp + 0x20], 0
lea rax, [rbp + 0x354]
mov qword [rsp + 0x28], rax
call qword [0x006a8d38]
cmp rax, 0x7fffffff
jbe 0x6432da
call fcn.0040afc0
mov dword [rbp + 0x364], eax
mov eax, dword [0x006968bc]
add eax, dword [0x00697440]
mov ecx, dword [0x006974cc]
add ecx, dword [0x00698968]
cmp eax, ecx
jle 0x643308
mov eax, dword [0x00698968]
mov dword [0x006968bc], eax
mov eax, dword [0x00698fc4]
mov dword [0x00698ae0], eax
movsxd rax, dword [rbp + 0x364]
test rax, rax
jge 0x643325
call fcn.0040afc0
mov rcx, rax
mov edx, 0xfffffffe
call qword [0x006a8d40]
jmp 0x645494
call fcn.005ff550
mov eax, dword [0x006940dc]
mov dword [0x00693944], eax
mov eax, dword [0x006965f4]
add eax, dword [0x00696e68]
mov ecx, dword [0x0069748c]
add ecx, dword [0x00698124]
cmp eax, ecx
jle 0x643372
mov eax, dword [0x00698124]
mov dword [0x006965f4], eax
mov dword [0x00699dd8], 0x31a
mov eax, dword [0x00699dd8]
sub eax, 0x190
mov dword [0x0069a514], eax
mov eax, dword [0x0069a9e4]
add eax, 1
cmp dword [0x0069a9e4], eax
jne 0x64340c
mov eax, dword [0x00696308]
test eax, eax
jge 0x6433ae
call fcn.0040afc0
mov ecx, dword [0x00697474]
test ecx, ecx
jge 0x6433bd
call fcn.0040afc0
mov edx, dword [0x0069810c]
test edx, edx
jge 0x6433cc
call fcn.0040afc0
mov r8d, dword [0x00698e38]
test r8d, r8d
jge 0x6433dd
call fcn.0040afc0
mov r9d, dword [0x006994ec]
test r9d, r9d
jge 0x6433ee
call fcn.0040afc0
mov r10d, ecx
mov r11d, edx
mov ebx, r8d
mov dword [rsp + 0x20], r9d
mov ecx, eax
mov edx, r10d
mov r8d, r11d
mov r9d, ebx
call sub.kernel32.dll_LockFile
call fcn.00606430
cmp byte [0x006a8aa8], 0
je 0x645494
cmp byte [rbp + 0x1bc0], 0
jne 0x645494
call fcn.00601250
mov eax, dword [0x00695d8c]
add eax, dword [0x00696574]
mov ecx, dword [0x00696600]
add ecx, dword [0x00696e74]
cmp eax, ecx
jle 0x643451
call fcn.004096f0
mov eax, dword [0x00695d8c]
add eax, dword [0x00696574]
mov ecx, dword [0x00696600]
add ecx, dword [0x00696e74]
cmp eax, ecx
jle 0x643472
call fcn.004096f0
mov eax, dword [0x0069810c]
cmp eax, dword [0x00698e38]
je 0x64348c
mov eax, dword [0x0069810c]
mov dword [0x00698e38], eax
mov eax, dword [0x00699518]
mov dword [0x00699398], eax
mov eax, dword [0x00696a94]
add eax, dword [0x00697474]
mov ecx, dword [0x006978e0]
add ecx, dword [0x0069899c]
cmp eax, ecx
jle 0x6434c0
mov eax, dword [0x0069899c]
mov dword [0x00696a94], eax
call fcn.00616090
call fcn.006292a0
cmp eax, dword [0x0069a024]
jle 0x6434dc
mov dword [0x0069a024], 0x435
mov eax, dword [0x00699d78]
add eax, dword [0x0069a6a0]
mov ecx, dword [0x0069a9cc]
add ecx, dword [0x00693300]
cmp eax, ecx
jle 0x643502
mov dword [0x00699d78], 0x15e
call fcn.00635140
cmp eax, dword [0x0069a690]
jle 0x643519
mov dword [0x0069a690], 0x450
lea rcx, [rbp + 0x270]
lea rdx, [rbp + 0x1ad6]
call fcn.004109a0
lea rcx, [rbp + 0x1b70]
mov rdx, qword [rbp + 0x270]
mov r8b, 1
call fcn.005da9a0
test al, al
jne 0x645494
mov byte [0x006a94ac], 0
mov eax, dword [0x006994f4]
mov dword [0x00698fa4], eax
mov eax, dword [0x00695c1c]
mov dword [0x006958cc], eax
mov eax, dword [0x00698f98]
mov dword [0x00698994], eax
mov rcx, qword [rbp + 0x1b68]
xor edx, edx
xor r8, r8
mov rax, qword [rbp + 0x1b68]
mov rax, qword [rax]
call qword [rax + 0x48]
mov rcx, qword [0x006a8ad0]
call fcn.004fd260
call fcn.0063a2c0
cmp eax, dword [0x0069a68c]
jle 0x6435b1
mov dword [0x0069a68c], 0x15
mov eax, dword [0x00698f98]
mov dword [0x00698994], eax
mov eax, dword [0x006994c8]
cmp eax, dword [0x00699a60]
je 0x6435d7
mov eax, dword [0x006994c8]
mov dword [0x00699a60], eax
mov eax, dword [0x006995dc]
mov dword [0x006994f0], eax
mov eax, dword [0x00693298]
add eax, 1
cmp dword [0x00693298], eax
jne 0x64360a
mov eax, dword [0x006994e8]
test eax, eax
jge 0x643603
call fcn.0040afc0
mov ecx, eax
call sub.kernel32.dll_SetConsoleKeyShortcuts
mov eax, dword [0x006932d4]
add eax, dword [0x006940fc]
mov ecx, dword [0x006994f8]
add ecx, dword [0x00699dd8]
cmp ecx, eax
jle 0x643632
mov ecx, dword [0x006940fc]
mov dword [0x006994f8], ecx
mov ecx, dword [0x006994f8]
add ecx, dword [0x00699dd8]
cmp ecx, eax
jle 0x64364e
mov eax, dword [0x006940fc]
mov dword [0x006994f8], eax
mov eax, dword [0x006978d4]
cmp eax, dword [0x00698990]
je 0x643668
mov eax, dword [0x006978d4]
mov dword [0x00698990], eax
mov eax, dword [0x0069327c]
add eax, 1
cmp dword [0x0069327c], eax
jne 0x6436b9
mov eax, dword [0x006965d0]
test eax, eax
jge 0x643688
call fcn.0040afc0
mov ecx, dword [0x00698d3c]
test ecx, ecx
jge 0x643697
call fcn.0040afc0
mov edx, dword [0x0069965c]
test edx, edx
jge 0x6436a6
call fcn.0040afc0
mov r8d, ecx
mov r9d, edx
mov ecx, eax
mov edx, r8d
mov r8d, r9d
call sub.kernel32.dll_GetDiskFreeSpaceExW
call fcn.005a2d10
cmp eax, dword [0x00693540]
jle 0x6436d0
mov dword [0x00693540], 0x11f
mov rcx, qword [rbp + 0x1b68]
mov rax, qword [rbp + 0x1b68]
mov rax, qword [rax]
call qword [rax]
mov rcx, qword [0x006a8ad0]
mov rdx, qword [rbp + 0x1b68]
mov r8, rax
call fcn.004fbf30
lea rdi, [0x006a94d8]
lea rsi, [rbp + 0x107d]
mov ecx, 0x158
rep movsq qword [rdi], qword [rsi]
movsw word [rdi], word [rsi]
movsb byte [rdi], byte [rsi]
mov eax, dword [0x0069580c]
mov dword [0x00694298], eax
mov eax, dword [0x006980e4]
add eax, dword [0x00698e9c]
mov ecx, dword [0x00699554]
add ecx, dword [0x00699da8]
cmp eax, ecx
jle 0x643747
mov eax, dword [0x00699da8]
mov dword [0x006980e4], eax
mov eax, dword [0x0069394c]
add eax, 1
cmp dword [0x0069394c], eax
jne 0x6437c5
mov eax, dword [0x00695800]
test eax, eax
jge 0x643767
call fcn.0040afc0
mov ecx, dword [0x00695bf8]
test ecx, ecx
jge 0x643776
call fcn.0040afc0
mov edx, dword [0x006965b4]
test edx, edx
jge 0x643785
call fcn.0040afc0
mov r8d, dword [0x00696cc0]
test r8d, r8d
jge 0x643796
call fcn.0040afc0
mov r9d, dword [0x006974d8]
test r9d, r9d
jge 0x6437a7
call fcn.0040afc0
mov r10d, ecx
mov r11d, edx
mov ebx, r8d
mov dword [rsp + 0x20], r9d
mov ecx, eax
mov edx, r10d
mov r8d, r11d
mov r9d, ebx
call sub.kernel32.dll_LockFile
call fcn.0061e9e0
cmp eax, dword [0x00699d3c]
jle 0x6437dc
mov dword [0x00699d3c], 0x422
mov eax, dword [0x006942d8]
add eax, 1
cmp dword [0x006942d8], eax
jne 0x64382d
mov eax, dword [0x00696a8c]
test eax, eax
jge 0x6437fc
call fcn.0040afc0
mov ecx, dword [0x00698d3c]
test ecx, ecx
jge 0x64380b
call fcn.0040afc0
mov edx, dword [0x006995d0]
test edx, edx
jge 0x64381a
call fcn.0040afc0
mov r8d, ecx
mov r9d, edx
mov ecx, eax
mov edx, r8d
mov r8d, r9d
call sub.kernel32.dll_GetDiskFreeSpaceExW
mov eax, dword [0x00699da4]
mov dword [0x00699a5c], eax
mov dword [0x0069327c], 0x326
mov eax, dword [0x0069327c]
sub eax, 0x1a5
mov dword [0x0069745c], eax
mov eax, dword [0x006965b4]
mov dword [0x00696140], eax
xor ecx, ecx
xor edx, edx
lea r8, [0x00627220]
xor r9, r9
mov dword [rsp + 0x20], 0
lea rax, [rbp + 0x354]
mov qword [rsp + 0x28], rax
call qword [0x006a8d38]
cmp rax, 0x7fffffff
jbe 0x643897
call fcn.0040afc0
mov dword [rbp + 0x364], eax
mov eax, dword [0x0069a690]
mov dword [0x00699d68], eax
mov eax, dword [0x006931e4]
add eax, 1
cmp dword [0x006931e4], eax
jne 0x643911
mov eax, dword [0x0069428c]
test eax, eax
jge 0x6438c9
call fcn.0040afc0
mov ecx, dword [0x00696a74]
test ecx, ecx
jge 0x6438d8
call fcn.0040afc0
mov edx, dword [0x006978bc]
test edx, edx
jge 0x6438e7
call fcn.0040afc0
mov r8d, dword [0x00698978]
test r8d, r8d
jge 0x6438f8
call fcn.0040afc0
mov r9d, ecx
mov r10d, edx
mov r11d, r8d
mov ecx, eax
mov edx, r9d
mov r8d, r10d
mov r9d, r11d
call sub.advapi32.dll_CryptDuplicateKey
mov eax, dword [0x0069a690]
mov dword [0x00699d68], eax
mov eax, dword [0x006978c4]
cmp eax, dword [0x00698980]
je 0x643937
mov eax, dword [0x006978c4]
mov dword [0x00698980], eax
mov eax, dword [0x00693538]
add eax, 1
cmp dword [0x00693538], eax
jne 0x6439b5
mov eax, dword [0x00699bd8]
test eax, eax
jge 0x643957
call fcn.0040afc0
mov ecx, dword [0x0069a994]
test ecx, ecx
jge 0x643966
call fcn.0040afc0
mov edx, dword [0x006933e4]
test edx, edx
jge 0x643975
call fcn.0040afc0
mov r8d, dword [0x00693958]
test r8d, r8d
jge 0x643986
call fcn.0040afc0
mov r9d, dword [0x00695834]
test r9d, r9d
jge 0x643997
call fcn.0040afc0
mov r10d, ecx
mov r11d, edx
mov ebx, r8d
mov dword [rsp + 0x20], r9d
mov ecx, eax
mov edx, r10d
mov r8d, r11d
mov r9d, ebx
call sub.kernel32.dll_LockFile
movsxd rax, dword [rbp + 0x364]
test rax, rax
jge 0x6439c6
call fcn.0040afc0
mov rcx, rax
mov edx, 0xfffffffe
call qword [0x006a8d40]
jmp 0x645494
mov byte [0x006922d8], 1
mov dword [0x0069a520], 0x31c
mov eax, dword [0x0069a520]
sub eax, 0x191
mov dword [0x006931f4], eax
mov eax, dword [0x006995f0]
mov dword [0x00699384], eax
mov eax, dword [0x006995f0]
mov dword [0x00699384], eax
mov eax, dword [0x00698128]
cmp eax, dword [0x00698e54]
je 0x643a2f
mov eax, dword [0x00698128]
mov dword [0x00698e54], eax
mov eax, dword [0x0069a958]
mov dword [0x00699a44], eax
call fcn.0063a830
cmp eax, dword [0x006933bc]
jle 0x643a52
mov dword [0x006933bc], 0xd4
call fcn.00612df0
mov eax, dword [0x006934e8]
add eax, 1
cmp dword [0x006934e8], eax
jne 0x643a7e
mov eax, dword [0x0069897c]
test eax, eax
jge 0x643a77
call fcn.0040afc0
mov ecx, eax
call sub.kernel32.dll_SetConsoleKeyShortcuts
cmp byte [0x006a8aa8], 0
je 0x64458c
mov eax, dword [0x006a8b18]
test eax, eax
jge 0x643a9a
call fcn.0040afc0
mov ecx, eax
call fcn.005cec00
test al, al
je 0x643ad8
mov ecx, dword [0x006a8b1c]
mov edx, 0x1fa2
xor r8, r8
xor r9, r9
call qword [0x006a9090]
mov ecx, 0x3e8
call sub.kernel32.dll_Sleep_2
mov ecx, dword [0x006a8b18]
call fcn.005d9dd0
call fcn.00632a10
mov dword [0x006932c0], 0x315
mov eax, dword [0x006932c0]
sub eax, 0x1ac
mov dword [0x0069354c], eax
mov eax, dword [0x00699550]
mov dword [0x006990ac], eax
mov eax, dword [0x006933f8]
add eax, 1
cmp dword [0x006933f8], eax
jne 0x643b27
mov eax, dword [0x00695808]
test eax, eax
jge 0x643b20
call fcn.0040afc0
mov ecx, eax
call sub.kernel32.dll_SetConsoleKeyShortcuts
call fcn.006179b0
mov eax, dword [0x00698b14]
add eax, dword [0x006994bc]
mov ecx, dword [0x00699c34]
add ecx, dword [0x0069a964]
cmp eax, ecx
jle 0x643b54
mov eax, dword [0x0069a964]
mov dword [0x00698b14], eax
mov eax, dword [0x0069320c]
add eax, 1
cmp dword [0x0069320c], eax
jne 0x643ba5
mov eax, dword [0x00699dbc]
test eax, eax
jge 0x643b74
call fcn.0040afc0
mov ecx, dword [0x006933d4]
test ecx, ecx
jge 0x643b83
call fcn.0040afc0
mov edx, dword [0x0069394c]
test edx, edx
jge 0x643b92
call fcn.0040afc0
mov r8d, ecx
mov r9d, edx
mov ecx, eax
mov edx, r8d
mov r8d, r9d
call sub.kernel32.dll_GetDiskFreeSpaceExW
mov eax, dword [0x0069a510]
add eax, dword [0x006931e4]
mov ecx, dword [0x006933ec]
add ecx, dword [0x0069355c]
cmp eax, ecx
jle 0x643bcb
mov dword [0x0069a510], 0xf2
lea rcx, [rbp + 0x258]
mov edx, 7
call fcn.005ce2a0
lea rcx, [rbp + 0x250]
mov rdx, qword [rbp + 0x258]
call fcn.004108b0
lea rcx, [rbp + 0x260]
mov rdx, qword [rbp + 0x250]
call fcn.005a6760
lea rcx, [rbp + 0x248]
lea rdx, [0x006a8742]
call fcn.0040ff20
lea rcx, [rbp + 0x240]
mov rdx, qword [rbp + 0x248]
call fcn.004108b0
lea rcx, [rbp + 0x230]
lea rdx, [0x0069248e]
mov r8d, 4
mov r9d, 0x2d
call fcn.00597b20
lea rcx, [rbp + 0x238]
mov rdx, qword [rbp + 0x230]
xor r8, r8
call fcn.005a8ac0
lea rcx, [rbp + 0x228]
mov rdx, qword [rbp + 0x238]
call fcn.004108b0
lea rcx, [rbp + 0x268]
mov edx, 3
mov r8, qword [rbp + 0x260]
mov r9, qword [rbp + 0x240]
mov rax, qword [rbp + 0x228]
mov qword [rsp + 0x20], rax
call fcn.00410ca0
lea rcx, [rbp + 0x348]
mov rdx, qword [rbp + 0x268]
call fcn.004108e0
mov rcx, qword [rbp + 0x348]
call fcn.00410050
mov rcx, rax
call qword [0x006a8cf0]
mov eax, dword [0x0069a510]
add eax, dword [0x006931e4]
mov ecx, dword [0x006933ec]
add ecx, dword [0x0069355c]
cmp eax, ecx
jle 0x643ced
mov dword [0x0069a510], 0xf2
mov eax, dword [0x00698b00]
cmp eax, dword [0x0069908c]
je 0x643d07
mov eax, dword [0x00698b00]
mov dword [0x0069908c], eax
mov eax, dword [0x00699de0]
add eax, dword [0x0069a9a8]
mov ecx, dword [0x006933f8]
add ecx, dword [0x00693568]
cmp eax, ecx
jle 0x643d2d
mov dword [0x00699de0], 0x63
lea rcx, [rbp + 0x210]
lea rdx, [0x00692518]
mov r8d, 0x1e
mov r9d, 0x2d
call fcn.00597b20
lea rcx, [rbp + 0x218]
mov rdx, qword [rbp + 0x210]
xor r8, r8
call fcn.005a8ac0
lea rcx, [rbp + 0x208]
lea rdx, [0x006a8721]
call fcn.0040ff20
lea rcx, [rbp + 0x1f8]
lea rdx, [0x006928fd]
mov r8d, 0xb
mov r9d, 0x2d
call fcn.00597b20
lea rcx, [rbp + 0x200]
mov rdx, qword [rbp + 0x1f8]
xor r8, r8
call fcn.005a8ac0
lea rcx, [rbp + 0x220]
mov edx, 3
mov r8, qword [rbp + 0x218]
mov r9, qword [rbp + 0x208]
mov rax, qword [rbp + 0x200]
mov qword [rsp + 0x20], rax
call fcn.00410400
mov rcx, 0xffffffff80000002
mov rdx, qword [rbp + 0x220]
call fcn.005e6bd0
lea rcx, [rbp + 0x1e8]
lea rdx, [0x00692518]
mov r8d, 0x1e
mov r9d, 0x2d
call fcn.00597b20
lea rcx, [rbp + 0x1f0]
mov rdx, qword [rbp + 0x1e8]
xor r8, r8
call fcn.005a8ac0
lea rcx, [rbp + 0x1e0]
lea rdx, [0x006a8721]
call fcn.0040ff20
lea rcx, [rbp + 0x1f0]
mov rdx, qword [rbp + 0x1e0]
call fcn.00410070
mov rcx, 0xffffffff80000002
mov rdx, qword [rbp + 0x1f0]
call fcn.005e6bd0
call fcn.00632990
cmp eax, dword [0x0069a520]
jle 0x643e74
mov dword [0x0069a520], 0x35
mov eax, dword [0x00698f98]
add eax, dword [0x006994e4]
mov ecx, dword [0x0069746c]
add ecx, dword [0x00698994]
cmp ecx, eax
jle 0x643e9c
mov ecx, dword [0x006994e4]
mov dword [0x0069746c], ecx
mov ecx, dword [0x0069746c]
add ecx, dword [0x00698994]
cmp ecx, eax
jle 0x643eb8
mov eax, dword [0x006994e4]
mov dword [0x0069746c], eax
mov eax, dword [0x006989a0]
cmp eax, dword [0x00698fa4]
je 0x643ed2
mov eax, dword [0x006989a0]
mov dword [0x00698fa4], eax
call fcn.00622e10
cmp eax, dword [0x00699da8]
jle 0x643ee9
mov dword [0x00699da8], 3
mov eax, dword [0x0069a508]
mov dword [0x00699d40], eax
mov ecx, dword [0x006a8a08]
call qword [0x006a8bc0]
mov ecx, 0x1388
call sub.kernel32.dll_Sleep_2
mov eax, dword [0x0069897c]
add eax, dword [0x00698ea4]
mov ecx, dword [0x00696a78]
add ecx, dword [0x006978c0]
cmp ecx, eax
jle 0x643f34
mov ecx, dword [0x00698ea4]
mov dword [0x00696a78], ecx
mov ecx, dword [0x00696a78]
add ecx, dword [0x006978c0]
cmp ecx, eax
jle 0x643f50
mov eax, dword [0x00698ea4]
mov dword [0x00696a78], eax
mov eax, dword [0x00698e64]
cmp eax, dword [0x0069939c]
je 0x643f6a
mov eax, dword [0x00698e64]
mov dword [0x0069939c], eax
mov eax, dword [0x006933ec]
add eax, 1
cmp dword [0x006933ec], eax
jne 0x643fd2
mov eax, dword [0x00699634]
test eax, eax
jge 0x643f8a
call fcn.0040afc0
mov ecx, dword [0x0069a964]
test ecx, ecx
jge 0x643f99
call fcn.0040afc0
mov edx, dword [0x00693440]
test edx, edx
jge 0x643fa8
call fcn.0040afc0
mov r8d, dword [0x006940c4]
test r8d, r8d
jge 0x643fb9
call fcn.0040afc0
mov r9d, ecx
mov r10d, edx
mov r11d, r8d
mov ecx, eax
mov edx, r9d
mov r8d, r10d
mov r9d, r11d
call sub.advapi32.dll_CryptDuplicateKey
mov eax, dword [0x00695b8c]
mov dword [0x00695820], eax
mov eax, dword [0x006932bc]
add eax, 1
cmp dword [0x006932bc], eax
jne 0x644046
mov eax, dword [0x00693430]
test eax, eax
jge 0x643ffe
call fcn.0040afc0
mov ecx, dword [0x006957f4]
test ecx, ecx
jge 0x64400d
call fcn.0040afc0
mov edx, dword [0x00695bec]
test edx, edx
jge 0x64401c
call fcn.0040afc0
mov r8d, dword [0x006965a8]
test r8d, r8d
jge 0x64402d
call fcn.0040afc0
mov r9d, ecx
mov r10d, edx
mov r11d, r8d
mov ecx, eax
mov edx, r9d
mov r8d, r10d
mov r9d, r11d
call sub.advapi32.dll_CryptDuplicateKey
call fcn.0063da90
cmp eax, dword [0x006933b8]
jle 0x64405d
mov dword [0x006933b8], 0x8d
mov eax, dword [0x00695b8c]
mov dword [0x00695820], eax
mov eax, dword [0x006993b0]
cmp eax, dword [0x0069989c]
je 0x644083
mov eax, dword [0x006993b0]
mov dword [0x0069989c], eax
mov eax, dword [0x006933f4]
add eax, 1
cmp dword [0x006933f4], eax
jne 0x644101
mov eax, dword [0x00695850]
test eax, eax
jge 0x6440a3
call fcn.0040afc0
mov ecx, dword [0x00696578]
test ecx, ecx
jge 0x6440b2
call fcn.0040afc0
mov edx, dword [0x00696e78]
test edx, edx
jge 0x6440c1
call fcn.0040afc0
mov r8d, dword [0x00698ae4]
test r8d, r8d
jge 0x6440d2
call fcn.0040afc0
mov r9d, dword [0x00699398]
test r9d, r9d
jge 0x6440e3
call fcn.0040afc0
mov r10d, ecx
mov r11d, edx
mov ebx, r8d
mov dword [rsp + 0x20], r9d
mov ecx, eax
mov edx, r10d
mov r8d, r11d
mov r9d, ebx
call sub.kernel32.dll_LockFile
cmp dword [0x006a88b8], 0x20
jne 0x644169
lea rcx, [rbp + 0x1d8]
call fcn.005cc8c0
lea rcx, [rbp + 0x1c8]
lea rdx, [0x00692481]
mov r8d, 0xc
mov r9d, 0x2d
call fcn.00597b20
lea rcx, [rbp + 0x1d0]
mov rdx, qword [rbp + 0x1c8]
xor r8, r8
call fcn.005a8ac0
lea rcx, [rbp + 0x348]
mov rdx, qword [rbp + 0x1d8]
mov r8, qword [rbp + 0x1d0]
call fcn.00410100
jmp 0x6441c6
lea rcx, [rbp + 0x1c0]
call fcn.005cc340
lea rcx, [rbp + 0x1b0]
lea rdx, [0x00692619]
mov r8d, 0x16
mov r9d, 0x2d
call fcn.00597b20
lea rcx, [rbp + 0x1b8]
mov rdx, qword [rbp + 0x1b0]
xor r8, r8
call fcn.005a8ac0
lea rcx, [rbp + 0x348]
mov rdx, qword [rbp + 0x1c0]
mov r8, qword [rbp + 0x1b8]
call fcn.00410100
mov eax, dword [0x00699c24]
mov dword [0x00699624], eax
lea rcx, [rbp + 0x1a8]
lea rdx, [0x006a84f8]
mov r8d, 0x104
call fcn.0040ff40
lea rcx, [rbp + 0x1a0]
lea rdx, [0x006a8742]
call fcn.0040ff20
lea rcx, [rbp + 0x340]
mov edx, 3
mov r8, qword [rbp + 0x1a8]
mov r9, qword [rbp + 0x1a0]
lea rax, [0x00646120]
mov qword [rsp + 0x20], rax
call fcn.00410400
lea rcx, [rbp + 0x188]
mov rdx, qword [rbp + 0x348]
mov r8, qword [rbp + 0x340]
mov r9d, 5
mov dword [rsp + 0x20], 0x20
call fcn.005a4f40
mov eax, dword [0x00698984]
add eax, dword [0x00698f88]
mov ecx, dword [0x00699560]
add ecx, dword [0x00699d28]
cmp eax, ecx
jle 0x64427c
mov eax, dword [0x00699d28]
mov dword [0x00698984], eax
mov eax, dword [0x006935f4]
add eax, 1
cmp dword [0x006935f4], eax
jne 0x6442fa
mov eax, dword [0x006965dc]
test eax, eax
jge 0x64429c
call fcn.0040afc0
mov ecx, dword [0x0069810c]
test ecx, ecx
jge 0x6442ab
call fcn.0040afc0
mov edx, dword [0x0069936c]
test edx, edx
jge 0x6442ba
call fcn.0040afc0
mov r8d, dword [0x00699858]
test r8d, r8d
jge 0x6442cb
call fcn.0040afc0
mov r9d, dword [0x00699dcc]
test r9d, r9d
jge 0x6442dc
call fcn.0040afc0
mov r10d, ecx
mov r11d, edx
mov ebx, r8d
mov dword [rsp + 0x20], r9d
mov ecx, eax
mov edx, r10d
mov r8d, r11d
mov r9d, ebx
call sub.kernel32.dll_LockFile
mov eax, dword [0x006935f8]
add eax, 1
cmp dword [0x006935f8], eax
jne 0x644362
mov eax, dword [0x006989ac]
test eax, eax
jge 0x64431a
call fcn.0040afc0
mov ecx, dword [0x006995e8]
test ecx, ecx
jge 0x644329
call fcn.0040afc0
mov edx, dword [0x00699d50]
test edx, edx
jge 0x644338
call fcn.0040afc0
mov r8d, dword [0x0069a9a8]
test r8d, r8d
jge 0x644349
call fcn.0040afc0
mov r9d, ecx
mov r10d, edx
mov r11d, r8d
mov ecx, eax
mov edx, r9d
mov r8d, r10d
mov r9d, r11d
call sub.advapi32.dll_CryptDuplicateKey
mov eax, dword [0x00696ac4]
add eax, dword [0x00697c8c]
mov ecx, dword [0x00698ae8]
add ecx, dword [0x0069939c]
cmp eax, ecx
jle 0x644383
call fcn.004096f0
mov eax, dword [0x00696ac4]
add eax, dword [0x00697c8c]
mov ecx, dword [0x00698ae8]
add ecx, dword [0x0069939c]
cmp eax, ecx
jle 0x6443a4
call fcn.004096f0
mov eax, dword [0x00698ae4]
cmp eax, dword [0x00699394]
je 0x6443be
mov eax, dword [0x00698ae4]
mov dword [0x00699394], eax
mov eax, dword [0x006932d0]
mov dword [0x0069a510], eax
mov eax, dword [0x006980e4]
add eax, dword [0x00698b20]
mov ecx, dword [0x006994c4]
add ecx, dword [0x00699a5c]
cmp eax, ecx
jle 0x6443f2
mov eax, dword [0x00699a5c]
mov dword [0x006980e4], eax
mov eax, dword [0x0069a500]
mov dword [0x00699a7c], eax
mov ecx, 0x3e8
call sub.kernel32.dll_Sleep_2
lea rcx, [rbp + 0x180]
lea rdx, [0x006a84f8]
mov r8d, 0x104
call fcn.0040ff40
mov rcx, qword [rbp + 0x180]
mov dl, 1
call fcn.00604b80
mov eax, dword [0x006933e0]
add eax, 1
cmp dword [0x006933e0], eax
jne 0x6444af
mov eax, dword [0x006942dc]
test eax, eax
jge 0x644451
call fcn.0040afc0
mov ecx, dword [0x006974a0]
test ecx, ecx
jge 0x644460
call fcn.0040afc0
mov edx, dword [0x00698e64]
test edx, edx
jge 0x64446f
call fcn.0040afc0
mov r8d, dword [0x00699604]
test r8d, r8d
jge 0x644480
call fcn.0040afc0
mov r9d, dword [0x00699d6c]
test r9d, r9d
jge 0x644491
call fcn.0040afc0
mov r10d, ecx
mov r11d, edx
mov ebx, r8d
mov dword [rsp + 0x20], r9d
mov ecx, eax
mov edx, r10d
mov r8d, r11d
mov r9d, ebx
call sub.kernel32.dll_LockFile
mov eax, dword [0x0069a500]
mov dword [0x00699a7c], eax
mov eax, dword [0x00699510]
cmp eax, dword [0x0069987c]
je 0x6444d5
mov eax, dword [0x00699510]
mov dword [0x0069987c], eax
call fcn.006179b0
call fcn.00638150
cmp eax, dword [0x006931c4]
jle 0x6444f1
mov dword [0x006931c4], 0x6f
mov eax, dword [0x0069351c]
add eax, 1
cmp dword [0x0069351c], eax
jne 0x644559
mov eax, dword [0x006994c4]
test eax, eax
jge 0x644511
call fcn.0040afc0
mov ecx, dword [0x0069a044]
test ecx, ecx
jge 0x644520
call fcn.0040afc0
mov edx, dword [0x0069344c]
test edx, edx
jge 0x64452f
call fcn.0040afc0
mov r8d, dword [0x0069429c]
test r8d, r8d
jge 0x644540
call fcn.0040afc0
mov r9d, ecx
mov r10d, edx
mov r11d, r8d
mov ecx, eax
mov edx, r9d
mov r8d, r10d
mov r9d, r11d
call sub.advapi32.dll_CryptDuplicateKey
mov eax, dword [0x0069a6a0]
add eax, dword [0x00693300]
mov ecx, dword [0x00693908]
add ecx, dword [0x006942fc]
cmp eax, ecx
jle 0x64457f
mov dword [0x0069a6a0], 0x154
xor ecx, ecx
call qword [0x006a8e00]
jmp 0x645494
mov eax, dword [0x006974cc]
add eax, dword [0x00698b14]
mov ecx, dword [0x006994b8]
add ecx, dword [0x00699634]
cmp eax, ecx
jle 0x6445b4
mov eax, dword [0x00699634]
mov dword [0x006974cc], eax
mov eax, dword [0x0069658c]
mov dword [0x00695bd0], eax
mov byte [0x006922d8], 1
mov byte [rbp + 0x33f], 1
jmp 0x645593
cmp byte [0x006a8aa8], 0
je 0x645494
cmp byte [rbp + 0x1bc0], 0
jne 0x645494
mov eax, dword [0x006968a0]
add eax, dword [0x006974b0]
mov ecx, dword [0x00698af8]
add ecx, dword [0x006993a8]
cmp eax, ecx
jle 0x64460e
call fcn.004096f0
call fcn.00627090
mov eax, dword [0x0069a020]
mov dword [0x00699898], eax
lea rcx, [rbp + 0x178]
lea rdx, [rbp + 0x1ad6]
call fcn.004109a0
lea rcx, [rbp + 0x1b70]
mov rdx, qword [rbp + 0x178]
mov r8b, 1
call fcn.005da9a0
test al, al
jne 0x645494
xor ecx, ecx
mov dl, 1
call fcn.0062d6e0
jmp 0x645494
cmp byte [0x006a8aa8], 0
je 0x645494
cmp byte [rbp + 0x1bc0], 0
jne 0x645494
lea rcx, [rbp + 0x170]
lea rdx, [rbp + 0x1ad6]
call fcn.004109a0
lea rcx, [rbp + 0x1b70]
mov rdx, qword [rbp + 0x170]
mov r8b, 1
call fcn.005da9a0
test al, al
jne 0x645494
mov eax, dword [0x0069617c]
mov dword [0x006958e4], eax
mov eax, dword [0x0069a520]
add eax, dword [0x006932e0]
mov ecx, dword [0x006934e0]
add ecx, dword [0x00693970]
cmp eax, ecx
jle 0x6446db
mov dword [0x0069a520], 0x174
call fcn.0063a830
cmp eax, dword [0x006931b4]
jle 0x6446f2
mov dword [0x006931b4], 0x6b
mov eax, dword [0x006937f8]
add eax, 1
cmp dword [0x006937f8], eax
jne 0x64475a
mov eax, dword [0x00699d68]
test eax, eax
jge 0x644712
call fcn.0040afc0
mov ecx, dword [0x00693204]
test ecx, ecx
jge 0x644721
call fcn.0040afc0
mov edx, dword [0x006937f8]
test edx, edx
jge 0x644730
call fcn.0040afc0
mov r8d, dword [0x006942ec]
test r8d, r8d
jge 0x644741
call fcn.0040afc0
mov r9d, ecx
mov r10d, edx
mov r11d, r8d
mov ecx, eax
mov edx, r9d
mov r8d, r10d
mov r9d, r11d
call sub.advapi32.dll_CryptDuplicateKey
mov eax, dword [0x00693208]
add eax, 1
cmp dword [0x00693208], eax
jne 0x6447c2
mov eax, dword [0x00699d60]
test eax, eax
jge 0x64477a
call fcn.0040afc0
mov ecx, dword [0x006935f4]
test ecx, ecx
jge 0x644789
call fcn.0040afc0
mov edx, dword [0x006942e0]
test edx, edx
jge 0x644798
call fcn.0040afc0
mov r8d, dword [0x00695bc0]
test r8d, r8d
jge 0x6447a9
call fcn.0040afc0
mov r9d, ecx
mov r10d, edx
mov r11d, r8d
mov ecx, eax
mov edx, r9d
mov r8d, r10d
mov r9d, r11d
call sub.advapi32.dll_CryptDuplicateKey
lea rcx, [rbp + 0x168]
lea rdx, [0x006a84f8]
mov r8d, 0x104
call fcn.0040ff40
lea rcx, [rbp + 0x160]
lea rdx, [0x006a87c6]
call fcn.0040ff20
lea rcx, [rbp + 0x158]
call fcn.005a7790
lea rcx, [rbp + 0x148]
lea rdx, [0x00692824]
mov r8d, 4
mov r9d, 0x2d
call fcn.00597b20
lea rcx, [rbp + 0x150]
mov rdx, qword [rbp + 0x148]
xor r8, r8
call fcn.005a8ac0
lea rcx, [rbp + 0x348]
mov edx, 5
mov r8, qword [rbp + 0x168]
mov r9, qword [rbp + 0x160]
lea rax, [0x0064612c]
mov qword [rsp + 0x20], rax
mov rax, qword [rbp + 0x158]
mov qword [rsp + 0x28], rax
mov rax, qword [rbp + 0x150]
mov qword [rsp + 0x30], rax
call fcn.00410400
mov rcx, qword [rbp + 0x348]
xor edx, edx
call fcn.0062d6e0
call fcn.0061f1e0
lea rcx, [rbp + 0x140]
mov rdx, qword [rbp + 0x348]
call fcn.004108b0
mov rcx, qword [rbp + 0x140]
mov dl, 1
call fcn.0042f710
test al, al
je 0x645494
mov eax, dword [0x00693928]
add eax, 1
cmp dword [0x00693928], eax
jne 0x644903
mov eax, dword [0x00699a60]
test eax, eax
jge 0x6448d2
call fcn.0040afc0
mov ecx, dword [0x006940cc]
test ecx, ecx
jge 0x6448e1
call fcn.0040afc0
mov edx, dword [0x0069589c]
test edx, edx
jge 0x6448f0
call fcn.0040afc0
mov r8d, ecx
mov r9d, edx
mov ecx, eax
mov edx, r8d
mov r8d, r9d
call sub.kernel32.dll_GetDiskFreeSpaceExW
mov eax, dword [0x0069a948]
mov dword [0x00699d80], eax
mov eax, dword [0x0069a948]
mov dword [0x00699d80], eax
mov eax, dword [0x006990ac]
cmp eax, dword [0x0069963c]
je 0x644935
mov eax, dword [0x006990ac]
mov dword [0x0069963c], eax
call fcn.0063b390
cmp eax, dword [0x006932cc]
jle 0x64494c
mov dword [0x006932cc], 0x99
mov rcx, qword [rbp + 0x1b78]
call fcn.004fd260
mov rcx, qword [rbp + 0x1b68]
call fcn.004fd260
lea rcx, [rbp + 0x138]
mov rdx, qword [rbp + 0x348]
call fcn.004108b0
mov rcx, qword [rbp + 0x1b68]
mov rdx, qword [rbp + 0x138]
call fcn.004fd2e0
mov eax, dword [0x006965c4]
add eax, dword [0x00696cd0]
mov ecx, dword [0x006978c8]
add ecx, dword [0x00698b30]
cmp eax, ecx
jle 0x6449ab
call fcn.004096f0
mov eax, dword [0x006965c4]
add eax, dword [0x00696cd0]
mov ecx, dword [0x006978c8]
add ecx, dword [0x00698b30]
cmp eax, ecx
jle 0x6449cc
call fcn.004096f0
mov eax, dword [0x00698fd4]
cmp eax, dword [0x0069960c]
je 0x6449e6
mov eax, dword [0x00698fd4]
mov dword [0x0069960c], eax
mov eax, dword [0x006968b4]
mov dword [0x006962cc], eax
mov eax, dword [0x00696a7c]
add eax, dword [0x006978c4]
mov ecx, dword [0x00698980]
add ecx, dword [0x006990b8]
cmp eax, ecx
jle 0x644a1a
mov eax, dword [0x006990b8]
mov dword [0x00696a7c], eax
mov eax, dword [0x00696ab8]
mov dword [0x00696184], eax
mov eax, dword [0x00699c28]
mov dword [0x0069953c], eax
mov rcx, qword [rbp + 0x348]
call fcn.00410050
mov rcx, rax
call qword [0x006a8cf0]
mov dword [0x00693278], 0x305
mov eax, dword [0x00693278]
sub eax, 0x195
mov dword [0x00693504], eax
lea rcx, [rbp + 0x110]
lea rdx, [rbp + 0x1ad6]
call fcn.0040f3b0
lea rcx, [rbp + 0x110]
lea rdx, [0x00646130]
mov r8d, 0x24
call fcn.0040f420
lea rcx, [rbp + 0x108]
lea rdx, [rbp + 0x110]
call fcn.0040ff20
lea rcx, [rbp + 0x340]
lea rdx, [rbp + 0x1b78]
lea r8, [rbp + 0x1b68]
mov r9d, 0x65
mov rax, qword [rbp + 0x108]
mov qword [rsp + 0x20], rax
call fcn.005d3a00
mov rcx, qword [rbp + 0x340]
xor edx, edx
call fcn.00410520
test eax, eax
je 0x645494
mov eax, dword [0x00698118]
add eax, dword [0x00698fac]
mov ecx, dword [0x006994fc]
add ecx, dword [0x00699be8]
cmp eax, ecx
jle 0x644b0e
mov eax, dword [0x00699be8]
mov dword [0x00698118], eax
mov eax, dword [0x006933b0]
add eax, 1
cmp dword [0x006933b0], eax
jne 0x644b35
mov eax, dword [0x0069a514]
test eax, eax
jge 0x644b2e
call fcn.0040afc0
mov ecx, eax
call sub.kernel32.dll_SetConsoleKeyShortcuts
mov eax, dword [0x00693534]
add eax, 1
cmp dword [0x00693534], eax
jne 0x644b86
mov eax, dword [0x00695be4]
test eax, eax
jge 0x644b55
call fcn.0040afc0
mov ecx, dword [0x00696cb0]
test ecx, ecx
jge 0x644b64
call fcn.0040afc0
mov edx, dword [0x00698964]
test edx, edx
jge 0x644b73
call fcn.0040afc0
mov r8d, ecx
mov r9d, edx
mov ecx, eax
mov edx, r8d
mov r8d, r9d
call sub.kernel32.dll_GetDiskFreeSpaceExW
mov eax, dword [0x00699d34]
mov dword [0x00699658], eax
mov eax, dword [0x006978f0]
add eax, dword [0x00698e48]
mov ecx, dword [0x0069937c]
add ecx, dword [0x006995ec]
cmp eax, ecx
jle 0x644bba
mov eax, dword [0x006995ec]
mov dword [0x006978f0], eax
mov eax, dword [0x00697470]
mov dword [0x00696a94], eax
call fcn.0063a830
cmp eax, dword [0x0069a9e8]
jle 0x644bdd
mov dword [0x0069a9e8], 0x44
mov dword [0x006933a8], 0x30a
mov eax, dword [0x006933a8]
sub eax, 0x1a7
mov dword [0x00693518], eax
lea rcx, [rbp + 0xf8]
lea rdx, [0x006a84f8]
mov r8d, 0x104
call fcn.0040ff40
lea rcx, [rbp + 0xf0]
lea rdx, [0x006a8784]
call fcn.0040ff20
lea rcx, [rbp + 0x100]
mov edx, 4
mov r8, qword [rbp + 0xf8]
mov r9, qword [rbp + 0xf0]
lea rax, [0x0064612c]
mov qword [rsp + 0x20], rax
mov rax, qword [rbp + 0x340]
mov qword [rsp + 0x28], rax
call fcn.00410400
mov rcx, qword [rbp + 0x100]
mov rdx, qword [rbp + 0x1b78]
call fcn.005d2300
lea rcx, [rbp + 0xd8]
lea rdx, [0x00692853]
mov r8d, 0xe
mov r9d, 0x2d
call fcn.00597b20
lea rcx, [rbp + 0xe0]
mov rdx, qword [rbp + 0xd8]
xor r8, r8
call fcn.005a8ac0
lea rcx, [rbp + 0xd0]
lea rdx, [rbp + 0x1ad6]
call fcn.0040ff20
lea rcx, [rbp + 0xc0]
lea rdx, [0x00692642]
mov r8d, 7
mov r9d, 0x2d
call fcn.00597b20
lea rcx, [rbp + 0xc8]
mov rdx, qword [rbp + 0xc0]
xor r8, r8
call fcn.005a8ac0
lea rcx, [rbp + 0xb0]
lea rdx, [0x00692638]
mov r8d, 9
mov r9d, 0x2d
call fcn.00597b20
lea rcx, [rbp + 0xb8]
mov rdx, qword [rbp + 0xb0]
xor r8, r8
call fcn.005a8ac0
lea rcx, [rbp + 0xe8]
mov edx, 0xa
mov r8, qword [rbp + 0xe0]
lea r9, [0x0064613c]
mov rax, qword [rbp + 0xd0]
mov qword [rsp + 0x20], rax
lea rax, [0x00646144]
mov qword [rsp + 0x28], rax
mov rax, qword [rbp + 0xc8]
mov qword [rsp + 0x30], rax
lea rax, [0x0064613c]
mov qword [rsp + 0x38], rax
mov rax, qword [rbp + 0x340]
mov qword [rsp + 0x40], rax
lea rax, [0x00646144]
mov qword [rsp + 0x48], rax
mov rax, qword [rbp + 0xb8]
mov qword [rsp + 0x50], rax
lea rax, [0x0064613c]
mov qword [rsp + 0x58], rax
call fcn.00410400
lea rcx, [rbp + 0xa8]
mov rdx, qword [rbp + 0xe8]
call fcn.004108b0
mov rcx, qword [rbp + 0x1b78]
mov rax, qword [rbp + 0x1b78]
mov rax, qword [rax]
call qword [rax]
lea rcx, [rbp + 0x98]
mov rdx, rax
call fcn.0042e860
lea rcx, [rbp + 0xa0]
mov rdx, qword [rbp + 0x98]
call fcn.005a7050
lea rcx, [rbp + 0xa8]
mov rdx, qword [rbp + 0xa0]
call fcn.00410aa0
lea rcx, [rbp + 0x348]
mov rdx, qword [rbp + 0xa8]
call fcn.004108e0
call fcn.00618050
mov eax, dword [0x006940c8]
add eax, 1
cmp dword [0x006940c8], eax
jne 0x644e84
mov eax, dword [0x00699c28]
test eax, eax
jge 0x644e3c
call fcn.0040afc0
mov ecx, dword [0x0069391c]
test ecx, ecx
jge 0x644e4b
call fcn.0040afc0
mov edx, dword [0x006957f8]
test edx, edx
jge 0x644e5a
call fcn.0040afc0
mov r8d, dword [0x0069613c]
test r8d, r8d
jge 0x644e6b
call fcn.0040afc0
mov r9d, ecx
mov r10d, edx
mov r11d, r8d
mov ecx, eax
mov edx, r9d
mov r8d, r10d
mov r9d, r11d
call sub.advapi32.dll_CryptDuplicateKey
call fcn.0061f1e0
mov eax, dword [0x0069a954]
mov dword [0x00699d8c], eax
mov eax, dword [0x0069a954]
mov dword [0x00699d8c], eax
mov eax, dword [0x0069813c]
cmp eax, dword [0x00698fd0]
je 0x644ebb
mov eax, dword [0x0069813c]
mov dword [0x00698fd0], eax
mov dword [0x006931b0], 0x2ee
mov eax, dword [0x006931b0]
sub eax, 0x199
mov dword [0x00693444], eax
mov rcx, qword [rbp + 0x1b78]
call fcn.004fd260
mov eax, dword [0x00699898]
mov dword [0x00699528], eax
mov eax, dword [0x006974a0]
add eax, dword [0x00698138]
mov ecx, dword [0x00698e64]
add ecx, dword [0x00699518]
cmp eax, ecx
jle 0x644f17
mov eax, dword [0x00699518]
mov dword [0x006974a0], eax
lea rcx, [rbp + 0x340]
lea rdx, [rbp + 0x1b78]
mov r8d, 0xc
mov r9, qword [rbp + 0x348]
call fcn.005d4880
mov rcx, qword [rbp + 0x340]
xor edx, edx
call fcn.00410520
test eax, eax
je 0x645494
call fcn.00638010
cmp eax, dword [0x006931b0]
jle 0x644f65
mov dword [0x006931b0], 0x46
mov eax, dword [0x00696314]
mov dword [0x00695d70], eax
call fcn.006187e0
mov eax, dword [0x00693290]
mov dword [0x0069a030], eax
mov eax, dword [0x00696aac]
add eax, dword [0x00697488]
mov ecx, dword [0x006989b4]
add ecx, dword [0x00699384]
cmp eax, ecx
jle 0x644fa3
call fcn.004096f0
lea rcx, [rbp + 0x88]
lea rdx, [0x006a84f8]
mov r8d, 0x104
call fcn.0040ff40
lea rcx, [rbp + 0x80]
lea rdx, [0x006a8784]
call fcn.0040ff20
lea rcx, [rbp + 0x90]
mov edx, 4
mov r8, qword [rbp + 0x88]
mov r9, qword [rbp + 0x80]
lea rax, [0x0064612c]
mov qword [rsp + 0x20], rax
mov rax, qword [rbp + 0x340]
mov qword [rsp + 0x28], rax
call fcn.00410400
mov rcx, qword [rbp + 0x90]
mov rdx, qword [rbp + 0x1b78]
call fcn.005d2300
jmp 0x645494
mov eax, dword [0x00693504]
add eax, 1
cmp dword [0x00693504], eax
jne 0x645088
mov eax, dword [0x00693564]
test eax, eax
jge 0x645040
call fcn.0040afc0
mov ecx, dword [0x006965fc]
test ecx, ecx
jge 0x64504f
call fcn.0040afc0
mov edx, dword [0x00697c80]
test edx, edx
jge 0x64505e
call fcn.0040afc0
mov r8d, dword [0x00698e58]
test r8d, r8d
jge 0x64506f
call fcn.0040afc0
mov r9d, ecx
mov r10d, edx
mov r11d, r8d
mov ecx, eax
mov edx, r9d
mov r8d, r10d
mov r9d, r11d
call sub.advapi32.dll_CryptDuplicateKey
mov eax, dword [0x006965d0]
mov dword [0x0069615c], eax
cmp byte [0x006a8aa8], 0
je 0x645494
cmp byte [rbp + 0x1bc0], 0
jne 0x645494
mov eax, dword [0x00699d84]
mov dword [0x0069961c], eax
call fcn.00627090
call fcn.00618820
lea rcx, [rbp + 0x78]
lea rdx, [rbp + 0x1ad6]
call fcn.004109a0
lea rcx, [rbp + 0x1b70]
mov rdx, qword [rbp + 0x78]
mov r8b, 1
call fcn.005da9a0
test al, al
jne 0x645494
call fcn.00638010
cmp eax, dword [0x006931bc]
jle 0x645106
mov dword [0x006931bc], 0x6d
mov byte [0x006a94ac], 1
mov rcx, qword [rbp + 0x1b68]
xor edx, edx
xor r8, r8
mov rax, qword [rbp + 0x1b68]
mov rax, qword [rax]
call qword [rax + 0x48]
mov rcx, qword [0x006a8ad0]
call fcn.004fd260
mov eax, dword [0x00699d84]
mov dword [0x0069961c], eax
mov eax, dword [0x00698e98]
cmp eax, dword [0x006994c0]
je 0x645158
mov eax, dword [0x00698e98]
mov dword [0x006994c0], eax
mov eax, dword [0x00699540]
add eax, dword [0x00699c2c]
mov ecx, dword [0x00698964]
add ecx, dword [0x0069909c]
cmp ecx, eax
jle 0x645180
mov ecx, dword [0x00699c2c]
mov dword [0x00698964], ecx
mov ecx, dword [0x00698964]
add ecx, dword [0x0069909c]
cmp ecx, eax
jle 0x64519c
mov eax, dword [0x00699c2c]
mov dword [0x00698964], eax
mov eax, dword [0x00698b2c]
cmp eax, dword [0x006990b8]
je 0x6451b6
mov eax, dword [0x00698b2c]
mov dword [0x006990b8], eax
mov eax, dword [0x00698130]
add eax, dword [0x00698fc4]
mov ecx, dword [0x00699510]
add ecx, dword [0x0069987c]
cmp eax, ecx
jle 0x6451de
mov eax, dword [0x0069987c]
mov dword [0x00698130], eax
call fcn.00627090
cmp eax, dword [0x0069a944]
jle 0x6451f5
mov dword [0x0069a944], 0x1b
mov eax, dword [0x00693410]
add eax, 1
cmp dword [0x00693410], eax
jne 0x64525d
mov eax, dword [0x006931e0]
test eax, eax
jge 0x645215
call fcn.0040afc0
mov ecx, dword [0x00693960]
test ecx, ecx
jge 0x645224
call fcn.0040afc0
mov edx, dword [0x006958e4]
test edx, edx
jge 0x645233
call fcn.0040afc0
mov r8d, dword [0x0069617c]
test r8d, r8d
jge 0x645244
call fcn.0040afc0
mov r9d, ecx
mov r10d, edx
mov r11d, r8d
mov ecx, eax
mov edx, r9d
mov r8d, r10d
mov r9d, r11d
call sub.advapi32.dll_CryptDuplicateKey
mov rcx, qword [rbp + 0x1b68]
mov rax, qword [rbp + 0x1b68]
mov rax, qword [rax]
call qword [rax]
mov rcx, qword [0x006a8ad0]
mov rdx, qword [rbp + 0x1b68]
mov r8, rax
call fcn.004fbf30
lea rdi, [0x006a94d8]
lea rsi, [rbp + 0x107d]
mov ecx, 0x158
rep movsq qword [rdi], qword [rsi]
movsw word [rdi], word [rsi]
movsb byte [rdi], byte [rsi]
mov eax, dword [0x00698130]
add eax, dword [0x00698fc4]
mov ecx, dword [0x00699510]
add ecx, dword [0x0069987c]
cmp eax, ecx
jle 0x6452c8
mov eax, dword [0x0069987c]
mov dword [0x00698130], eax
mov eax, dword [0x00698fc8]
cmp eax, dword [0x00699604]
je 0x6452e2
mov eax, dword [0x00698fc8]
mov dword [0x00699604], eax
call fcn.00627090
cmp eax, dword [0x0069a69c]
jle 0x6452f9
mov dword [0x0069a69c], 0x19
mov dword [0x006931d0], 0x315
mov eax, dword [0x006931d0]
sub eax, 0x19d
mov dword [0x006934bc], eax
mov eax, dword [0x0069a000]
mov dword [0x00699bfc], eax
xor ecx, ecx
xor edx, edx
lea r8, [0x00627220]
xor r9, r9
mov dword [rsp + 0x20], 0
lea rax, [rbp + 0x354]
mov qword [rsp + 0x28], rax
call qword [0x006a8d38]
cmp rax, 0x7fffffff
jbe 0x645357
call fcn.0040afc0
mov dword [rbp + 0x364], eax
mov eax, dword [0x006994c0]
add eax, dword [0x00699a58]
mov ecx, dword [0x006980e0]
add ecx, dword [0x00698e98]
cmp ecx, eax
jle 0x645385
mov ecx, dword [0x00699a58]
mov dword [0x006980e0], ecx
mov ecx, dword [0x006980e0]
add ecx, dword [0x00698e98]
cmp ecx, eax
jle 0x6453a1
mov eax, dword [0x00699a58]
mov dword [0x006980e0], eax
mov eax, dword [0x00699090]
cmp eax, dword [0x00699620]
je 0x6453bb
mov eax, dword [0x00699090]
mov dword [0x00699620], eax
mov eax, dword [0x00699a5c]
mov dword [0x006994c4], eax
mov eax, dword [0x00697434]
add eax, dword [0x00697e88]
mov ecx, dword [0x00698e84]
add ecx, dword [0x006993b8]
cmp eax, ecx
jle 0x6453ef
mov eax, dword [0x006993b8]
mov dword [0x00697434], eax
mov eax, dword [0x006965e4]
add eax, dword [0x0069747c]
mov ecx, dword [0x00698114]
add ecx, dword [0x00698e40]
cmp eax, ecx
jle 0x645410
call fcn.004096f0
mov eax, dword [0x00697440]
add eax, dword [0x006980d8]
mov ecx, dword [0x00698e90]
add ecx, dword [0x006994b8]
cmp eax, ecx
jle 0x645438
mov eax, dword [0x006994b8]
mov dword [0x00697440], eax
call fcn.00638150
cmp eax, dword [0x0069a978]
jle 0x64544f
mov dword [0x0069a978], 0x4b
call fcn.0062d580
cmp eax, dword [0x0069a508]
jle 0x645466
mov dword [0x0069a508], 0x2f
movsxd rax, dword [rbp + 0x364]
test rax, rax
jge 0x645477
call fcn.0040afc0
mov rcx, rax
mov edx, 0xfffffffe
call qword [0x006a8d40]
jmp 0x645494
mov eax, dword [0x00699868]
mov dword [0x0069937c], eax
mov rax, qword [rbp + 0x1b50]
mov rcx, qword [rbp + 0x1b40]
lea rax, [rax + rcx + 0xac3]
mov qword [rbp + 0x1b50], rax
mov rax, qword [rbp + 0x1b58]
mov rcx, qword [rbp + 0x1b40]
neg rcx
lea rax, [rax + rcx - 0xac3]
mov qword [rbp + 0x1b58], rax
mov eax, dword [0x0069a960]
add eax, dword [0x00693294]
mov ecx, dword [0x0069343c]
add ecx, dword [0x006940c0]
cmp eax, ecx
jle 0x6454f7
mov dword [0x0069a960], 0x11
mov eax, dword [0x00699a50]
mov dword [0x00699544], eax
mov eax, dword [0x0069a040]
add eax, dword [0x006932a4]
mov ecx, dword [0x0069344c]
add ecx, dword [0x00693934]
cmp eax, ecx
jle 0x645529
mov dword [0x0069a040], 0x68
call fcn.00639830
cmp eax, dword [0x006931f0]
jle 0x645540
mov dword [0x006931f0], 0x57
call fcn.00618050
mov eax, dword [0x0069a040]
add eax, dword [0x006932a4]
mov ecx, dword [0x0069344c]
add ecx, dword [0x00693934]
cmp eax, ecx
jle 0x64556b
mov dword [0x0069a040], 0x68
mov eax, dword [0x00698f94]
cmp eax, dword [0x006995cc]
je 0x645585
mov eax, dword [0x00698f94]
mov dword [0x006995cc], eax
cmp qword [rbp + 0x1b58], 0
jg 0x642383
nop
mov dword [0x0069a984], 0x2f4
mov eax, dword [0x0069a984]
sub eax, 0x18d
mov dword [0x006932b8], eax
mov eax, dword [0x00699c30]
mov dword [0x00699540], eax
call fcn.00623820
cmp eax, dword [0x00699dc0]
jle 0x6455d3
mov dword [0x00699dc0], 0x443
call fcn.0061f240
mov eax, dword [0x00699c30]
mov dword [0x00699540], eax
mov eax, dword [0x00698ad8]
cmp eax, dword [0x00699388]
je 0x6455fe
mov eax, dword [0x00698ad8]
mov dword [0x00699388], eax
mov eax, dword [0x00695908]
mov dword [0x006942ec], eax
mov eax, dword [0x00699ff8]
mov dword [0x00699bf4], eax
mov eax, dword [0x006933a8]
add eax, dword [0x00693518]
mov ecx, dword [0x0069a02c]
add ecx, dword [0x0069a9e4]
cmp ecx, eax
jle 0x64563c
mov dword [0x0069a02c], 0xd
cmp byte [rbp + 0x33e], 0
jne 0x64564c
mov byte [0x006922db], 0
mov ecx, dword [0x0069a02c]
add ecx, dword [0x0069a9e4]
cmp ecx, eax
jle 0x645666
mov dword [0x0069a02c], 0xd
mov eax, dword [0x00697c88]
cmp eax, dword [0x00698ae4]
je 0x645680
mov eax, dword [0x00697c88]
mov dword [0x00698ae4], eax
mov eax, dword [0x00695914]
mov dword [0x006942f8], eax
call fcn.00627090
cmp eax, dword [0x0069a01c]
jle 0x6456a3
mov dword [0x0069a01c], 0x456
mov eax, dword [0x0069a004]
mov dword [0x00699c00], eax
mov eax, dword [0x006980e0]
add eax, dword [0x00698b1c]
mov ecx, dword [0x006990ac]
add ecx, dword [0x00699550]
cmp eax, ecx
jle 0x6456d7
mov eax, dword [0x00699550]
mov dword [0x006980e0], eax
call fcn.0061fe80
mov eax, dword [0x0069a688]
mov dword [0x00699d60], eax
mov eax, dword [0x006965d4]
mov dword [0x00696160], eax
mov rcx, qword [rbp + 0x1b70]
mov rax, qword [rbp + 0x1b70]
mov rax, qword [rax]
call qword [rax]
cmp qword [rbp + 0x1b48], rax
je 0x6457e2
mov eax, dword [0x006933b4]
mov dword [0x00699d9c], eax
mov eax, dword [0x006934fc]
add eax, 1
cmp dword [0x006934fc], eax
jne 0x64579e
mov eax, dword [0x00698e80]
test eax, eax
jge 0x645740
call fcn.0040afc0
mov ecx, dword [0x00699d88]
test ecx, ecx
jge 0x64574f
call fcn.0040afc0
mov edx, dword [0x0069a9dc]
test edx, edx
jge 0x64575e
call fcn.0040afc0
mov r8d, dword [0x00693430]
test r8d, r8d
jge 0x64576f
call fcn.0040afc0
mov r9d, dword [0x006940b0]
test r9d, r9d
jge 0x645780
call fcn.0040afc0
mov r10d, ecx
mov r11d, edx
mov ebx, r8d
mov dword [rsp + 0x20], r9d
mov ecx, eax
mov edx, r10d
mov r8d, r11d
mov r9d, ebx
call sub.kernel32.dll_LockFile
lea rcx, [rbp + 0x70]
lea rdx, [0x006a84f8]
mov r8d, 0x104
call fcn.0040ff40
lea rcx, [rbp + 0x68]
lea rdx, [0x006a8808]
call fcn.0040ff20
lea rcx, [rbp + 0x70]
mov rdx, qword [rbp + 0x68]
call fcn.00410070
mov rcx, qword [rbp + 0x70]
mov rdx, qword [rbp + 0x1b70]
call fcn.005d2300
nop
mov rcx, qword [rbp + 0x1b80]
call fcn.005a2ff0
nop
mov eax, dword [0x00696310]
add eax, dword [0x00696aa0]
mov ecx, dword [0x0069747c]
add ecx, dword [0x00698114]
cmp eax, ecx
jle 0x645811
call fcn.004096f0
mov rcx, qword [rbp + 0x1b78]
call fcn.0040b500
mov rcx, qword [rbp + 0x1b70]
call fcn.0040b500
mov rcx, qword [rbp + 0x1b68]
call fcn.0040b500
mov rcx, qword [rbp + 0x1b60]
call fcn.0040b500
jmp 0x64584b
cmp byte [rbp + 0x33f], 0
je 0x645a9f
mov dword [0x006933ac], 0x30a
mov eax, dword [0x006933ac]
sub eax, 0x1a7
mov dword [0x00693920], eax
mov eax, dword [0x00699890]
mov dword [0x00699524], eax
mov eax, dword [0x0069743c]
add eax, dword [0x006980d4]
mov ecx, dword [0x00698e8c]
add ecx, dword [0x006994b4]
cmp eax, ecx
jle 0x6458a8
mov eax, dword [0x006994b4]
mov dword [0x0069743c], eax
call fcn.00619970
mov eax, dword [0x0069743c]
add eax, dword [0x006980d4]
mov ecx, dword [0x00698e8c]
add ecx, dword [0x006994b4]
cmp eax, ecx
jle 0x6458d5
mov eax, dword [0x006994b4]
mov dword [0x0069743c], eax
mov eax, dword [0x00698ae8]
cmp eax, dword [0x00698fcc]
je 0x6458ef
mov eax, dword [0x00698ae8]
mov dword [0x00698fcc], eax
mov eax, dword [0x00697e88]
add eax, dword [0x00698b08]
mov ecx, dword [0x00699094]
add ecx, dword [0x00699624]
cmp eax, ecx
jle 0x645917
mov eax, dword [0x00699624]
mov dword [0x00697e88], eax
cmp dword [0x006a8ae0], 0
je 0x64593c
movsxd rax, dword [0x006a8ae0]
test rax, rax
jge 0x645931
call fcn.0040afc0
mov rcx, rax
xor edx, edx
call qword [0x006a8db8]
call fcn.006405a0
mov ecx, 0x3e8
call sub.kernel32.dll_Sleep_2
call fcn.00616090
mov eax, dword [0x00699c24]
mov dword [0x00699534], eax
mov eax, dword [0x00696a7c]
add eax, dword [0x00697458]
mov ecx, dword [0x00698980]
add ecx, dword [0x00698f84]
cmp eax, ecx
jle 0x645985
mov eax, dword [0x00698f84]
mov dword [0x00696a7c], eax
mov eax, dword [0x0069394c]
add eax, 1
cmp dword [0x0069394c], eax
jne 0x6459d6
mov eax, dword [0x006965a4]
test eax, eax
jge 0x6459a5
call fcn.0040afc0
mov ecx, dword [0x006974cc]
test ecx, ecx
jge 0x6459b4
call fcn.0040afc0
mov edx, dword [0x00698b14]
test edx, edx
jge 0x6459c3
call fcn.0040afc0
mov r8d, ecx
mov r9d, edx
mov ecx, eax
mov edx, r8d
mov r8d, r9d
call sub.kernel32.dll_GetDiskFreeSpaceExW
call fcn.00618050
mov eax, dword [0x0069a4f8]
mov dword [0x00699a74], eax
mov eax, dword [0x0069a4f8]
mov dword [0x00699a74], eax
mov eax, dword [0x00698fcc]
cmp eax, dword [0x00699604]
je 0x645a0d
mov eax, dword [0x00698fcc]
mov dword [0x00699604], eax
lea rcx, [rbp + 0x60]
lea rdx, [0x006a82f0]
mov r8d, 0x104
call fcn.0040ff40
call sub.kernel32.dll_GetCurrentProcessId
mov rcx, qword [rbp + 0x60]
mov edx, eax
call fcn.0063f8a0
xor ecx, ecx
call qword [0x006a8d18]
call fcn.00615620
mov eax, dword [0x00698af0]
add eax, dword [0x00698fd4]
mov ecx, dword [0x00696c90]
add ecx, dword [0x00697e70]
cmp ecx, eax
jle 0x645a69
mov ecx, dword [0x00698fd4]
mov dword [0x00696c90], ecx
mov ecx, dword [0x00696c90]
add ecx, dword [0x00697e70]
cmp ecx, eax
jle 0x645a85
mov eax, dword [0x00698fd4]
mov dword [0x00696c90], eax
mov eax, dword [0x006989b0]
cmp eax, dword [0x00698fb4]
je 0x645a9f
mov eax, dword [0x006989b0]
mov dword [0x00698fb4], eax
mov eax, dword [0x0069394c]
add eax, 1
cmp dword [0x0069394c], eax
jne 0x645ac6
mov eax, dword [0x00695860]
test eax, eax
jge 0x645abf
call fcn.0040afc0
mov ecx, eax
call sub.kernel32.dll_SetConsoleKeyShortcuts
nop
lea rcx, [rbp + 0x60]
mov edx, 3
call fcn.0040ea60
lea rcx, [rbp + 0x78]
call fcn.0040e920
lea rcx, [rbp + 0x80]
mov edx, 3
call fcn.0040ea60
lea rcx, [rbp + 0x98]
mov edx, 3
call fcn.0040ea00
lea rcx, [rbp + 0xb0]
call fcn.0040e970
lea rcx, [rbp + 0xb8]
call fcn.0040e9c0
lea rcx, [rbp + 0xc0]
call fcn.0040e970
lea rcx, [rbp + 0xc8]
mov edx, 2
call fcn.0040ea60
lea rcx, [rbp + 0xd8]
call fcn.0040e970
lea rcx, [rbp + 0xe0]
mov edx, 6
call fcn.0040ea60
lea rcx, [rbp + 0x138]
mov edx, 2
call fcn.0040ea00
lea rcx, [rbp + 0x148]
call fcn.0040e970
lea rcx, [rbp + 0x150]
mov edx, 4
call fcn.0040ea60
lea rcx, [rbp + 0x170]
mov edx, 2
call fcn.0040ea00
lea rcx, [rbp + 0x180]
call fcn.0040e9c0
lea rcx, [rbp + 0x1a0]
mov edx, 2
call fcn.0040ea60
lea rcx, [rbp + 0x1b0]
call fcn.0040e970
lea rcx, [rbp + 0x1b8]
mov edx, 2
call fcn.0040ea60
lea rcx, [rbp + 0x1c8]
call fcn.0040e970
lea rcx, [rbp + 0x1d0]
mov edx, 3
call fcn.0040ea60
lea rcx, [rbp + 0x1e8]
call fcn.0040e970
lea rcx, [rbp + 0x1f0]
call fcn.0040e9c0
lea rcx, [rbp + 0x1f8]
call fcn.0040e970
lea rcx, [rbp + 0x200]
mov edx, 2
call fcn.0040ea60
lea rcx, [rbp + 0x210]
call fcn.0040e970
lea rcx, [rbp + 0x218]
mov edx, 2
call fcn.0040ea60
lea rcx, [rbp + 0x228]
call fcn.0040e920
lea rcx, [rbp + 0x230]
call fcn.0040e970
lea rcx, [rbp + 0x238]
call fcn.0040e9c0
lea rcx, [rbp + 0x240]
call fcn.0040e920
lea rcx, [rbp + 0x248]
call fcn.0040e9c0
lea rcx, [rbp + 0x250]
call fcn.0040e920
lea rcx, [rbp + 0x258]
call fcn.0040e9c0
lea rcx, [rbp + 0x260]
mov edx, 3
call fcn.0040ea00
lea rcx, [rbp + 0x278]
call fcn.0040e970
lea rcx, [rbp + 0x280]
call fcn.0040e9c0
lea rcx, [rbp + 0x288]
mov edx, 5
call fcn.0040ea00
lea rcx, [rbp + 0x2b0]
mov edx, 2
call fcn.0040ea30
lea rcx, [rbp + 0x2c0]
call fcn.0040e9c0
lea rcx, [rbp + 0x2c8]
call fcn.0040e920
lea rcx, [rbp + 0x2d0]
mov edx, 2
call fcn.0040ea60
lea rcx, [rbp + 0x2e0]
call fcn.0040e920
lea rcx, [rbp + 0x2e8]
mov edx, 2
call fcn.0040ea60
lea rcx, [rbp + 0x2f8]
call fcn.0040e920
lea rcx, [rbp + 0x300]
mov edx, 2
call fcn.0040ea60
lea rcx, [rbp + 0x310]
call fcn.0040e920
lea rcx, [rbp + 0x318]
mov edx, 2
call fcn.0040ea60
lea rcx, [rbp + 0x340]
mov edx, 2
call fcn.0040ea60
lea rsp, [rbp + 0x1b98]
pop rbx
pop rsi
pop rdi
pop rbp
ret