Function at 0x5df470
Capabilities:
Get disk size

Disassembly:
push rbp
mov byte [rsp - 0x3b0], 0
mov byte [rsp - 0x13b0], 0
sub rsp, 0x13b0
mov rbp, rsp
mov qword [rbp + 0x38], 0
mov qword [rbp + 0x30], 0
mov qword [rbp + 0x40], 0
mov qword [rbp + 0x48], 0
mov qword [rbp + 0x50], 0
mov qword [rbp + 0x70], 0
mov qword [rbp + 0x60], 0
mov qword [rbp + 0x58], 0
mov qword [rbp + 0x68], 0
mov qword [rbp + 0x78], 0
mov qword [rbp + 0x98], 0
mov qword [rbp + 0x88], 0
mov qword [rbp + 0x80], 0
mov qword [rbp + 0x90], 0
mov qword [rbp + 0xa0], 0
mov qword [rbp + 0xb0], 0
mov qword [rbp + 0xa8], 0
mov qword [rbp + 0xc8], 0
mov qword [rbp + 0xb8], 0
mov qword [rbp + 0xc0], 0
mov qword [rbp + 0xe0], 0
mov qword [rbp + 0xd0], 0
mov qword [rbp + 0xd8], 0
mov qword [rbp + 0xe8], 0
mov qword [rbp + 0xf8], 0
mov qword [rbp + 0xf0], 0
mov qword [rbp + 0x100], 0
mov qword [rbp + 0x108], 0
mov qword [rbp + 0x110], 0
mov qword [rbp + 0x130], 0
mov qword [rbp + 0x120], 0
mov qword [rbp + 0x118], 0
mov qword [rbp + 0x128], 0
mov qword [rbp + 0x138], 0
mov qword [rbp + 0x158], 0
mov qword [rbp + 0x148], 0
mov qword [rbp + 0x140], 0
mov qword [rbp + 0x150], 0
mov qword [rbp + 0x160], 0
mov qword [rbp + 0x170], 0
mov qword [rbp + 0x168], 0
mov qword [rbp + 0x188], 0
mov qword [rbp + 0x178], 0
mov qword [rbp + 0x180], 0
mov qword [rbp + 0x1a0], 0
mov qword [rbp + 0x190], 0
mov qword [rbp + 0x198], 0
mov qword [rbp + 0x1a8], 0
mov qword [rbp + 0x1b8], 0
mov qword [rbp + 0x1b0], 0
mov qword [rbp + 0x1c0], 0
mov qword [rbp + 0x2c8], 0
mov qword [rbp + 0x2d0], 0
mov qword [rbp + 0x2f0], 0
mov qword [rbp + 0x2e0], 0
mov qword [rbp + 0x2d8], 0
mov qword [rbp + 0x2e8], 0
mov qword [rbp + 0x2f8], 0
mov qword [rbp + 0x318], 0
mov qword [rbp + 0x308], 0
mov qword [rbp + 0x300], 0
mov qword [rbp + 0x310], 0
mov qword [rbp + 0x320], 0
mov qword [rbp + 0x348], 0
mov qword [rbp + 0x340], 0
mov qword [rbp + 0x360], 0
mov qword [rbp + 0x350], 0
mov qword [rbp + 0x358], 0
mov qword [rbp + 0x378], 0
mov qword [rbp + 0x368], 0
mov qword [rbp + 0x370], 0
mov qword [rbp + 0x380], 0
mov qword [rbp + 0x390], 0
mov qword [rbp + 0x388], 0
mov qword [rbp + 0x3a8], 0
mov qword [rbp + 0x3a0], 0
mov qword [rbp + 0x398], 0
mov qword [rbp + 0x3c0], 0
mov qword [rbp + 0x3b8], 0
mov qword [rbp + 0x3b0], 0
mov qword [rbp + 0x3d8], 0
mov qword [rbp + 0x3d0], 0
mov qword [rbp + 0x3c8], 0
mov qword [rbp + 0x3f0], 0
mov qword [rbp + 0x3e8], 0
mov qword [rbp + 0x3e0], 0
mov qword [rbp + 0x400], 0
mov qword [rbp + 0x3f8], 0
mov qword [rbp + 0x440], 0
mov qword [rbp + 0x438], 0
mov qword [rbp + 0x430], 0
mov qword [rbp + 0x428], 0
mov qword [rbp + 0x408], rbp
mov dword [rbp + 0x13c0], ecx
mov qword [rbp + 0x13c8], rdx
mov byte [rbp + 0x13d0], r8b
lea rcx, [rbp + 0x13c8]
call fcn.0040eaf0
nop
mov byte [rbp + 0x139f], 0
nop
mov eax, dword [0x006931ec]
mov dword [0x00696894], eax
mov eax, dword [0x00693420]
add eax, 1
cmp dword [0x00693420], eax
jne 0x5df8b9
mov ecx, dword [0x006965fc]
call sub.kernel32.dll_SetConsoleKeyShortcuts
mov eax, dword [0x00695904]
add eax, dword [0x00695bc4]
mov ecx, dword [0x00696150]
add ecx, dword [0x006962ec]
cmp eax, ecx
jle 0x5df8e1
mov eax, dword [0x006962ec]
mov dword [0x00695904], eax
mov eax, dword [0x006968b0]
mov dword [0x00696314], eax
mov eax, dword [0x00695848]
mov dword [0x00694294], eax
mov eax, dword [0x0069582c]
add eax, dword [0x00695914]
mov ecx, dword [0x00695c1c]
add ecx, dword [0x006961a4]
cmp eax, ecx
jle 0x5df921
mov eax, dword [0x006961a4]
mov dword [0x0069582c], eax
mov eax, dword [0x0069587c]
mov dword [0x006942c8], eax
call fcn.005d3730
cmp eax, dword [0x00696ab4]
jle 0x5df944
mov dword [0x00696ab4], 0x2d
mov eax, dword [0x006958e8]
add eax, dword [0x00695bf0]
mov ecx, dword [0x00696178]
add ecx, dword [0x006965a4]
cmp eax, ecx
jle 0x5df96c
mov eax, dword [0x006965a4]
mov dword [0x006958e8], eax
mov rcx, qword [0x004d2058]
mov dl, 1
call fcn.0040b440
mov qword [rbp + 0x13a0], rax
mov eax, dword [0x006933e8]
add eax, 1
cmp dword [0x006933e8], eax
jne 0x5df99d
mov ecx, dword [0x006965b0]
call sub.kernel32.dll_SetConsoleKeyShortcuts
lea rcx, [rbp + 0x3f8]
lea rdx, [0x0069268d]
mov r8d, 0xa
mov r9d, 0x2d
call fcn.00597b20
lea rcx, [rbp + 0x400]
mov rdx, qword [rbp + 0x3f8]
xor r8, r8
call fcn.005a8ac0
mov rcx, qword [rbp + 0x400]
call fcn.005a2dd0
mov qword [rbp + 0x13a8], rax
nop
mov eax, dword [0x006965c4]
mov dword [0x00696198], eax
mov eax, dword [0x006965c4]
mov dword [0x00696198], eax
mov eax, dword [0x0069614c]
cmp eax, dword [0x00696574]
je 0x5dfa1a
mov eax, dword [0x0069614c]
mov dword [0x00696574], eax
mov eax, dword [0x006932dc]
mov dword [0x006965d0], eax
call fcn.005d1e00
mov eax, dword [0x006942a8]
add eax, dword [0x00695860]
mov ecx, dword [0x00695948]
add ecx, dword [0x00695d98]
cmp eax, ecx
jle 0x5dfa4c
call fcn.004096f0
mov eax, dword [0x00696aa4]
add eax, dword [0x006932b0]
mov ecx, dword [0x00693410]
add ecx, dword [0x00693534]
cmp eax, ecx
jle 0x5dfa72
mov dword [0x00696aa4], 0x4b
mov eax, dword [0x006958fc]
add eax, dword [0x00695c04]
mov ecx, dword [0x0069618c]
add ecx, dword [0x00696574]
cmp eax, ecx
jle 0x5dfa9a
mov eax, dword [0x00696574]
mov dword [0x006958fc], eax
cmp dword [0x006a88b8], 0x20
jne 0x5dfb02
lea rcx, [rbp + 0x3f0]
call fcn.005cc8c0
lea rcx, [rbp + 0x3e0]
lea rdx, [0x00692481]
mov r8d, 0xc
mov r9d, 0x2d
call fcn.00597b20
lea rcx, [rbp + 0x3e8]
mov rdx, qword [rbp + 0x3e0]
xor r8, r8
call fcn.005a8ac0
lea rcx, [rbp + 0x440]
mov rdx, qword [rbp + 0x3f0]
mov r8, qword [rbp + 0x3e8]
call fcn.00410100
jmp 0x5dfb5f
lea rcx, [rbp + 0x3d8]
call fcn.005cc340
lea rcx, [rbp + 0x3c8]
lea rdx, [0x00692619]
mov r8d, 0x16
mov r9d, 0x2d
call fcn.00597b20
lea rcx, [rbp + 0x3d0]
mov rdx, qword [rbp + 0x3c8]
xor r8, r8
call fcn.005a8ac0
lea rcx, [rbp + 0x440]
mov rdx, qword [rbp + 0x3d8]
mov r8, qword [rbp + 0x3d0]
call fcn.00410100
mov eax, dword [0x006942d8]
mov dword [0x006940c4], eax
call fcn.005d6e40
cmp eax, dword [0x006931d0]
jle 0x5dfb82
mov dword [0x006931d0], 0x3d
mov eax, dword [0x0069582c]
add eax, dword [0x00695918]
mov ecx, dword [0x00695c1c]
add ecx, dword [0x00696164]
cmp eax, ecx
jle 0x5dfbaa
mov eax, dword [0x00696164]
mov dword [0x0069582c], eax
mov eax, dword [0x006965a0]
mov dword [0x00696174], eax
lea rcx, [rbp + 0x3c0]
call fcn.005d6430
lea rcx, [rbp + 0x3b0]
lea rdx, [0x00692688]
mov r8d, 4
mov r9d, 0x2d
call fcn.00597b20
lea rcx, [rbp + 0x3b8]
mov rdx, qword [rbp + 0x3b0]
xor r8, r8
call fcn.005a8ac0
lea rcx, [rbp + 0x428]
mov rdx, qword [rbp + 0x3c0]
mov r8, qword [rbp + 0x3b8]
call fcn.00410100
mov eax, dword [0x006965a0]
mov dword [0x00696174], eax
mov eax, dword [0x0069611c]
cmp eax, dword [0x006962fc]
je 0x5dfc39
mov eax, dword [0x0069611c]
mov dword [0x006962fc], eax
mov eax, dword [0x006933bc]
add eax, 1
cmp dword [0x006933bc], eax
jne 0x5dfc55
mov ecx, dword [0x00694124]
call sub.kernel32.dll_SetConsoleKeyShortcuts
call fcn.005d6ea0
cmp eax, dword [0x006931e0]
jle 0x5dfc6c
mov dword [0x006931e0], 0x41
mov eax, dword [0x006933e8]
add eax, 1
cmp dword [0x006933e8], eax
jne 0x5dfca6
mov ecx, dword [0x00695b88]
mov edx, dword [0x006962f4]
mov r8d, dword [0x00696a80]
mov r9d, dword [0x006932d0]
mov eax, dword [0x00693430]
mov dword [rsp + 0x20], eax
call sub.kernel32.dll_LockFile
mov dword [0x0069320c], 0x31a
mov eax, dword [0x0069320c]
sub eax, 0x19f
mov dword [0x006933cc], eax
call fcn.005ceba0
mov dword [0x0069320c], 0x31a
mov eax, dword [0x0069320c]
sub eax, 0x19f
mov dword [0x006933cc], eax
mov eax, dword [0x00695d80]
cmp eax, dword [0x006962d8]
je 0x5dfcfd
mov eax, dword [0x00695d80]
mov dword [0x006962d8], eax
mov eax, dword [0x006933b8]
add eax, 1
cmp dword [0x006933b8], eax
jne 0x5dfd37
mov ecx, dword [0x00695c20]
mov edx, dword [0x006965d4]
mov r8d, dword [0x006931f8]
mov r9d, dword [0x006933f8]
mov eax, dword [0x00693520]
mov dword [rsp + 0x20], eax
call sub.kernel32.dll_LockFile
call fcn.005d08d0
lea rcx, [rbp + 0x398]
call fcn.005a7790
lea rcx, [rbp + 0x3a0]
mov rdx, qword [rbp + 0x398]
xor r8, r8
call fcn.005a8540
lea rcx, [rbp + 0x3a8]
mov rdx, qword [rbp + 0x3a0]
call fcn.005a8f10
lea rcx, [rbp + 0x430]
mov rdx, qword [rbp + 0x3a8]
xor r8, r8
call fcn.005a8ac0
mov dword [0x00693284], 0x324
mov eax, dword [0x00693284]
sub eax, 0x1b3
mov dword [0x006933e0], eax
mov eax, dword [0x006965b0]
mov dword [0x00696184], eax
mov eax, dword [0x006958a4]
add eax, dword [0x00695bc4]
mov ecx, dword [0x00696150]
add ecx, dword [0x00696578]
cmp eax, ecx
jle 0x5dfdd7
mov eax, dword [0x00696578]
mov dword [0x006958a4], eax
call fcn.005d4760
cmp eax, dword [0x00696abc]
jle 0x5dfdee
mov dword [0x00696abc], 0x30
mov eax, dword [0x00693424]
add eax, 1
cmp dword [0x00693424], eax
jne 0x5dfe1e
mov ecx, dword [0x00696134]
mov edx, dword [0x006931c4]
mov r8d, dword [0x00693978]
mov r9d, dword [0x006942dc]
call sub.advapi32.dll_CryptDuplicateKey
mov eax, dword [0x00695810]
mov dword [0x00694118], eax
mov eax, dword [0x006933e0]
add eax, dword [0x00693504]
mov ecx, dword [0x00696ab8]
add ecx, dword [0x006932c4]
cmp ecx, eax
jle 0x5dfe50
mov dword [0x00696ab8], 0x175
mov ecx, dword [0x00696ab8]
add ecx, dword [0x006932c4]
cmp ecx, eax
jle 0x5dfe6a
mov dword [0x00696ab8], 0x175
mov eax, dword [0x00696120]
cmp eax, dword [0x00696300]
je 0x5dfe84
mov eax, dword [0x00696120]
mov dword [0x00696300], eax
mov eax, dword [0x00695870]
mov dword [0x006942b8], eax
lea rcx, [rbp + 0x390]
lea rdx, [0x006a84f8]
mov r8d, 0x104
call fcn.0040ff40
lea rcx, [rbp + 0x388]
lea rdx, [0x006a8742]
call fcn.0040ff20
lea rcx, [rbp + 0x438]
mov edx, 4
mov r8, qword [rbp + 0x390]
mov r9, qword [rbp + 0x388]
lea rax, [0x005e346c]
mov qword [rsp + 0x20], rax
mov rax, qword [rbp + 0x430]
mov qword [rsp + 0x28], rax
call fcn.00410400
mov eax, dword [0x006932ec]
add eax, 1
cmp dword [0x006932ec], eax
jne 0x5dff1e
mov ecx, dword [0x006942c4]
mov edx, dword [0x006961ac]
mov r8d, dword [0x006968a4]
call sub.kernel32.dll_GetDiskFreeSpaceExW
mov dword [0x006932c0], 0x33f
mov eax, dword [0x006932c0]
sub eax, 0x1c1
mov dword [0x006933d8], eax
mov eax, dword [0x006931c4]
add eax, dword [0x006932f4]
mov ecx, dword [0x00693450]
add ecx, dword [0x00693530]
cmp eax, ecx
jle 0x5dff60
mov dword [0x006931c4], 0x11e
call fcn.005cc790
mov eax, dword [0x006931c4]
add eax, dword [0x006932f4]
mov ecx, dword [0x00693450]
add ecx, dword [0x00693530]
cmp eax, ecx
jle 0x5dff8b
mov dword [0x006931c4], 0x11e
mov eax, dword [0x00695bf0]
cmp eax, dword [0x00696178]
je 0x5dffa5
mov eax, dword [0x00695bf0]
mov dword [0x00696178], eax
call fcn.005d2100
mov eax, dword [0x00695830]
add eax, dword [0x006958d4]
mov ecx, dword [0x00695bdc]
add ecx, dword [0x00696120]
cmp eax, ecx
jle 0x5dffd2
mov eax, dword [0x00696120]
mov dword [0x00695830], eax
mov eax, dword [0x0069688c]
mov dword [0x006962ec], eax
mov rcx, qword [0x006a8a80]
mov rax, qword [0x006a8a80]
mov rax, qword [rax]
call qword [rax]
mov qword [rbp + 0x1390], rax
mov eax, dword [0x0069688c]
mov dword [0x006962ec], eax
mov eax, dword [0x00695bb0]
cmp eax, dword [0x00696138]
je 0x5e001e
mov eax, dword [0x00695bb0]
mov dword [0x00696138], eax
call fcn.005ceba0
mov eax, dword [0x00695908]
add eax, dword [0x00695bc8]
mov ecx, dword [0x00696154]
add ecx, dword [0x0069657c]
cmp eax, ecx
jle 0x5e004b
mov eax, dword [0x0069657c]
mov dword [0x00695908], eax
mov dword [0x006932b4], 0x31a
mov eax, dword [0x006932b4]
sub eax, 0x1ae
mov dword [0x006933cc], eax
mov eax, dword [0x006934b4]
add eax, 1
cmp dword [0x006934b4], eax
jne 0x5e0097
mov ecx, dword [0x006931f8]
mov edx, dword [0x00693440]
mov r8d, dword [0x00693968]
mov r9d, dword [0x00694288]
call sub.advapi32.dll_CryptDuplicateKey
mov eax, dword [0x006958c4]
add eax, dword [0x00695bcc]
mov ecx, dword [0x00695d9c]
add ecx, dword [0x006962f0]
cmp eax, ecx
jle 0x5e00bf
mov eax, dword [0x006962f0]
mov dword [0x006958c4], eax
call fcn.005ceba0
call fcn.005d11a0
mov dword [0x006931f4], 0x2ef
mov eax, dword [0x006931f4]
sub eax, 0x19a
mov dword [0x006933b4], eax
mov qword [rbp + 0x1388], 0
mov eax, dword [0x00693300]
add eax, 1
cmp dword [0x00693300], eax
jne 0x5e012a
mov ecx, dword [0x006942c4]
mov edx, dword [0x006962c4]
mov r8d, dword [0x006968a4]
mov r9d, dword [0x006932a0]
mov eax, dword [0x00693444]
mov dword [rsp + 0x20], eax
call sub.kernel32.dll_LockFile
call fcn.005ceba0
mov eax, dword [0x00696594]
mov dword [0x0069616c], eax
call fcn.005cf210
mov eax, dword [0x0069583c]
mov dword [0x00694284], eax
mov eax, dword [0x006931cc]
mov dword [0x006965f0], eax
mov eax, dword [0x006931cc]
mov dword [0x006965f0], eax
mov eax, dword [0x00695bc8]
cmp eax, dword [0x00696154]
je 0x5e1063
mov eax, dword [0x00695bc8]
mov dword [0x00696154], eax
jmp 0x5e1063
mov rcx, qword [0x006a8a80]
mov rdx, qword [rbp + 0x1388]
xor r8, r8
mov rax, qword [0x006a8a80]
mov rax, qword [rax]
call qword [rax + 0x50]
mov eax, dword [0x00693410]
add eax, dword [0x006934f4]
mov ecx, dword [0x00696aa4]
add ecx, dword [0x006932b4]
cmp ecx, eax
jle 0x5e01cb
mov dword [0x00696aa4], 0xa5
mov ecx, dword [0x00696aa4]
add ecx, dword [0x006932b4]
cmp ecx, eax
jle 0x5e01e5
mov dword [0x00696aa4], 0xa5
mov eax, dword [0x00695d74]
cmp eax, dword [0x006962cc]
je 0x5e01ff
mov eax, dword [0x00695d74]
mov dword [0x006962cc], eax
mov dword [0x006932c4], 0x341
mov eax, dword [0x006932c4]
sub eax, 0x1b2
mov dword [0x006933dc], eax
mov eax, dword [0x00695834]
add eax, dword [0x00695920]
mov ecx, dword [0x00695be0]
add ecx, dword [0x0069616c]
cmp eax, ecx
jle 0x5e0243
mov eax, dword [0x0069616c]
mov dword [0x00695834], eax
mov rcx, qword [0x006a8a80]
lea rdx, [rbp + 0xf28]
mov r8d, 0x460
call fcn.004fab00
call fcn.005d2170
mov eax, dword [0x006933f0]
add eax, 1
cmp dword [0x006933f0], eax
jne 0x5e029c
mov ecx, dword [0x006933ac]
mov edx, dword [0x006940b0]
mov r8d, dword [0x00695834]
mov r9d, dword [0x00695b98]
mov eax, dword [0x00696168]
mov dword [rsp + 0x20], eax
call sub.kernel32.dll_LockFile
mov eax, dword [rbp + 0x13c0]
cmp eax, dword [rbp + 0xf28]
jne 0x5e0fbb
mov eax, dword [rbp + 0x13c0]
mov dword [rbp + 0xf28], eax
mov rcx, qword [rbp + 0x13c8]
xor edx, edx
call fcn.00410520
test eax, eax
je 0x5e0858
mov eax, dword [0x00693568]
mov dword [0x006934e0], eax
mov eax, dword [0x006933d4]
add eax, 1
cmp dword [0x006933d4], eax
jne 0x5e030c
mov ecx, dword [0x00693420]
mov edx, dword [0x006958a4]
mov r8d, dword [0x00695d98]
mov r9d, dword [0x00696578]
call sub.advapi32.dll_CryptDuplicateKey
lea rcx, [rbp + 0x380]
mov rdx, qword [rbp + 0x13c8]
call fcn.004108b0
lea rcx, [rbp + 0xf72]
mov rdx, qword [rbp + 0x380]
call fcn.00430440
cmp byte [0x006922ea], 0
je 0x5e06ef
mov eax, dword [0x00696ab0]
mov dword [0x006965b0], eax
mov eax, dword [0x006942d0]
add eax, dword [0x00695884]
mov ecx, dword [0x0069592c]
add ecx, dword [0x00695d78]
cmp eax, ecx
jle 0x5e036c
call fcn.004096f0
mov eax, dword [0x00693304]
add eax, 1
cmp dword [0x00693304], eax
jne 0x5e0395
mov ecx, dword [0x00693418]
mov edx, dword [0x00693800]
mov r8d, dword [0x0069411c]
call sub.kernel32.dll_GetDiskFreeSpaceExW
mov eax, dword [0x006933dc]
add eax, 1
cmp dword [0x006933dc], eax
jne 0x5e03b1
mov ecx, dword [0x006965c0]
call sub.kernel32.dll_SetConsoleKeyShortcuts
call fcn.005cdc30
call fcn.005d2cb0
mov eax, dword [0x0069583c]
add eax, dword [0x00695924]
mov ecx, dword [0x00695d74]
add ecx, dword [0x00696170]
cmp eax, ecx
jle 0x5e03e3
mov eax, dword [0x00696170]
mov dword [0x0069583c], eax
mov rcx, qword [rbp + 0x13c8]
call fcn.005deb00
test al, al
jne 0x5e06ef
lea rcx, [rbp + 0x378]
lea rdx, [0x006a84f8]
mov r8d, 0x104
call fcn.0040ff40
lea rcx, [rbp + 0x370]
lea rdx, [0x006a8829]
call fcn.0040ff20
lea rcx, [rbp + 0x378]
mov rdx, qword [rbp + 0x370]
call fcn.00410070
lea rcx, [rbp + 0x368]
mov rdx, qword [rbp + 0x378]
call fcn.004108b0
mov rcx, qword [rbp + 0x368]
mov dl, 1
call fcn.0042f710
test al, al
je 0x5e06ef
mov eax, dword [0x006942ec]
mov dword [0x006940dc], eax
mov eax, dword [0x006932f8]
add eax, 1
cmp dword [0x006932f8], eax
jne 0x5e04a6
mov ecx, dword [0x00695bc8]
mov edx, dword [0x006962f0]
mov r8d, dword [0x006932cc]
mov r9d, dword [0x0069350c]
mov eax, dword [0x006940a0]
mov dword [rsp + 0x20], eax
call sub.kernel32.dll_LockFile
mov eax, dword [0x006965f0]
mov dword [0x006962dc], eax
lea rcx, [rbp + 0x360]
lea rdx, [0x006a84f8]
mov r8d, 0x104
call fcn.0040ff40
lea rcx, [rbp + 0x358]
lea rdx, [0x006a8829]
call fcn.0040ff20
lea rcx, [rbp + 0x360]
mov rdx, qword [rbp + 0x358]
call fcn.00410070
lea rcx, [rbp + 0x350]
mov rdx, qword [rbp + 0x360]
call fcn.004108b0
mov rcx, qword [rbp + 0x13a0]
mov rdx, qword [rbp + 0x350]
call fcn.004fd2e0
mov eax, dword [0x00695808]
mov dword [0x00694110], eax
lea rcx, [rbp + 0x340]
lea rdx, [0x00692dfa]
mov r8d, 7
mov r9d, 0x2d
call fcn.00597b20
lea rcx, [rbp + 0x348]
mov rdx, qword [rbp + 0x340]
xor r8, r8
call fcn.005a8ac0
lea rcx, [rbp + 0x465]
mov rdx, qword [rbp + 0x13a0]
mov r8, qword [rbp + 0x348]
call fcn.005ddb10
mov dword [0x006932c8], 0x324
mov eax, dword [0x006932c8]
sub eax, 0x1b3
mov dword [0x00693424], eax
call fcn.005d2100
mov eax, dword [0x006958c4]
add eax, dword [0x00695bc8]
mov ecx, dword [0x00696154]
add ecx, dword [0x0069657c]
cmp eax, ecx
jle 0x5e05be
mov eax, dword [0x0069657c]
mov dword [0x006958c4], eax
mov eax, dword [0x006932ac]
mov dword [0x00696a9c], eax
mov eax, dword [0x006932ac]
mov dword [0x00696a9c], eax
mov eax, dword [0x00695c1c]
cmp eax, dword [0x00696164]
je 0x5e05f0
mov eax, dword [0x00695c1c]
mov dword [0x00696164], eax
mov eax, dword [0x0069583c]
add eax, dword [0x00695928]
mov ecx, dword [0x00695d74]
add ecx, dword [0x006962cc]
cmp eax, ecx
jle 0x5e0611
call fcn.004096f0
mov eax, dword [0x00693210]
mov dword [0x006965f0], eax
mov eax, dword [0x00693210]
mov dword [0x006965f0], eax
mov eax, dword [0x00695d9c]
cmp eax, dword [0x006962f0]
je 0x5e0643
mov eax, dword [0x00695d9c]
mov dword [0x006962f0], eax
cmp byte [rbp + 0xebe], 0
je 0x5e06ef
call fcn.005d2100
lea rcx, [rbp + 0x320]
lea rdx, [rbp + 0xebe]
call fcn.0040ff20
lea rcx, [rbp + 0x328]
mov edx, 3
xor r8, r8
mov r9, qword [rbp + 0x320]
movzx rax, byte [0x006a8aa8]
mov byte [rsp + 0x20], al
movzx rax, byte [rbp + 0xf0f]
mov byte [rsp + 0x28], al
call fcn.005daf30
mov eax, dword [0x006931d8]
mov dword [0x006965b8], eax
mov eax, dword [0x00693444]
add eax, 1
cmp dword [0x00693444], eax
jne 0x5e06c4
mov ecx, dword [0x006934f4]
call sub.kernel32.dll_SetConsoleKeyShortcuts
mov eax, dword [0x006931d8]
mov dword [0x006965b8], eax
mov eax, dword [0x00695920]
cmp eax, dword [0x00695d70]
je 0x5e06ea
mov eax, dword [0x00695920]
mov dword [0x00695d70], eax
call fcn.005d1e00
cmp byte [0x006922eb], 0
je 0x5e0858
mov eax, dword [0x00693208]
mov dword [0x006968b0], eax
call fcn.005c7c30
cmp eax, dword [0x00695be0]
jle 0x5e071f
mov dword [0x00695be0], 0x1ad
lea rcx, [rbp + 0x310]
lea rdx, [0x00692fbc]
mov r8d, 9
mov r9d, 0x2d
call fcn.00597b20
lea rcx, [rbp + 0x318]
mov rdx, qword [rbp + 0x310]
xor r8, r8
call fcn.005a8ac0
lea rcx, [rbp + 0x300]
lea rdx, [0x00692fc6]
mov r8d, 4
mov r9d, 0x2d
call fcn.00597b20
lea rcx, [rbp + 0x308]
mov rdx, qword [rbp + 0x300]
xor r8, r8
call fcn.005a8ac0
mov rcx, qword [rbp + 0x318]
mov rdx, qword [rbp + 0x308]
call qword [0x006a9498]
lea rcx, [rbp + 0x2f8]
lea rdx, [0x00692909]
mov r8d, 0xb
mov r9d, 0x2d
call fcn.00597b20
mov rcx, qword [rbp + 0x2f8]
call fcn.005cf330
test al, al
jne 0x5e0858
lea rcx, [rbp + 0x2e8]
lea rdx, [0x00692fbc]
mov r8d, 9
mov r9d, 0x2d
call fcn.00597b20
lea rcx, [rbp + 0x2f0]
mov rdx, qword [rbp + 0x2e8]
xor r8, r8
call fcn.005a8ac0
lea rcx, [rbp + 0x2d8]
lea rdx, [0x00692fc6]
mov r8d, 4
mov r9d, 0x2d
call fcn.00597b20
lea rcx, [rbp + 0x2e0]
mov rdx, qword [rbp + 0x2d8]
xor r8, r8
call fcn.005a8ac0
mov rcx, qword [rbp + 0x2f0]
mov rdx, qword [rbp + 0x2e0]
call qword [0x006a94a0]
movzx rax, byte [rbp + 0x13d0]
mov byte [rbp + 0xf70], al
cmp byte [rbp + 0x13d0], 0
je 0x5e0efb
cmp byte [0x006922db], 0
je 0x5e0efb
lea rcx, [rbp + 0x2d0]
lea rdx, [rbp + 0xf72]
mov r8d, 0x104
call fcn.00410830
cmp qword [rbp + 0x2d0], 0
je 0x5e0efb
mov eax, dword [0x00693208]
mov dword [0x006968b0], eax
mov eax, dword [0x00695d7c]
cmp eax, dword [0x006962d0]
je 0x5e08ce
mov eax, dword [0x00695d7c]
mov dword [0x006962d0], eax
mov ecx, dword [rbp + 0xf2c]
call fcn.005cec00
test al, al
jne 0x5e0efb
lea rcx, [rbp + 0x2c8]
lea rdx, [0x006a84f8]
mov r8d, 0x104
call fcn.0040ff40
mov rcx, qword [rbp + 0x2c8]
mov edx, 0x14400000
call fcn.005d2a00
test al, al
je 0x5e0efb
mov eax, dword [0x00693438]
add eax, 1
cmp dword [0x00693438], eax
jne 0x5e0945
mov ecx, dword [0x00693440]
mov edx, dword [0x0069583c]
mov r8d, dword [0x00695ba0]
mov r9d, dword [0x00696170]
call sub.advapi32.dll_CryptDuplicateKey
mov eax, dword [0x00695b8c]
add eax, dword [0x00696114]
mov ecx, dword [0x006962f8]
add ecx, dword [0x00696894]
cmp eax, ecx
jle 0x5e096d
mov eax, dword [0x00696894]
mov dword [0x00695b8c], eax
call fcn.005dea10
cmp eax, dword [0x006932d0]
jle 0x5e0984
mov dword [0x006932d0], 0x65
mov eax, dword [0x00693450]
add eax, 1
cmp dword [0x00693450], eax
jne 0x5e09be
mov ecx, dword [0x0069394c]
mov edx, dword [0x00695820]
mov r8d, dword [0x0069594c]
mov r9d, dword [0x00696154]
mov eax, dword [0x006933a4]
mov dword [rsp + 0x20], eax
call sub.kernel32.dll_LockFile
mov eax, dword [0x00695b8c]
add eax, dword [0x00696114]
mov ecx, dword [0x006962f8]
add ecx, dword [0x00696894]
cmp eax, ecx
jle 0x5e09e6
mov eax, dword [0x00696894]
mov dword [0x00695b8c], eax
mov eax, dword [0x00696144]
cmp eax, dword [0x00696324]
je 0x5e0a00
mov eax, dword [0x00696144]
mov dword [0x00696324], eax
mov eax, dword [0x00693300]
add eax, 1
cmp dword [0x00693300], eax
jne 0x5e0a30
mov ecx, dword [0x00696a94]
mov edx, dword [0x00693400]
mov r8d, dword [0x00693928]
mov r9d, dword [0x0069428c]
call sub.advapi32.dll_CryptDuplicateKey
mov dword [0x0069329c], 0x30f
mov eax, dword [0x0069329c]
sub eax, 0x1a9
mov dword [0x0069343c], eax
mov dword [0x0069329c], 0x30f
mov eax, dword [0x0069329c]
sub eax, 0x1a9
mov dword [0x0069343c], eax
mov eax, dword [0x0069615c]
cmp eax, dword [0x00696588]
je 0x5e0a82
mov eax, dword [0x0069615c]
mov dword [0x00696588], eax
mov eax, dword [0x006931fc]
mov dword [0x006965dc], eax
lea rcx, [rbp + 0x448]
mov edx, dword [rbp + 0xf28]
mov r8, qword [rbp + 0x440]
mov r9, qword [rbp + 0x438]
mov dword [rsp + 0x20], 5
mov dword [rsp + 0x28], 0x80
call fcn.005a56a0
mov rax, qword [rbp + 0x448]
mov qword [rbp + 0xf30], rax
mov eax, dword [0x0069588c]
add eax, dword [0x00695bb0]
mov ecx, dword [0x00695d80]
add ecx, dword [0x006962d8]
cmp eax, ecx
jle 0x5e0af4
mov eax, dword [0x006962d8]
mov dword [0x0069588c], eax
mov eax, dword [0x00693304]
add eax, 1
cmp dword [0x00693304], eax
jne 0x5e0b2e
mov ecx, dword [0x00696580]
mov edx, dword [0x006932d0]
mov r8d, dword [0x006934cc]
mov r9d, dword [0x00693954]
mov eax, dword [0x006942b8]
mov dword [rsp + 0x20], eax
call sub.kernel32.dll_LockFile
mov eax, dword [rbp + 0x458]
mov dword [rbp + 0xf2c], eax
lea rcx, [rbp + 0x1c8]
mov rdx, qword [rbp + 0x430]
mov r8d, 0xff
call fcn.0040ffc0
lea rcx, [rbp + 0xf38]
lea rdx, [rbp + 0x1c8]
mov r8b, 0x20
call fcn.0040f3e0
mov eax, dword [0x00693504]
add eax, dword [0x00693948]
mov ecx, dword [0x00693280]
add ecx, dword [0x006933dc]
cmp ecx, eax
jle 0x5e0b90
mov dword [0x00693280], 0x137
mov ecx, dword [0x00693280]
add ecx, dword [0x006933dc]
cmp ecx, eax
jle 0x5e0baa
mov dword [0x00693280], 0x137
mov eax, dword [0x00695c04]
cmp eax, dword [0x00696190]
je 0x5e0bc4
mov eax, dword [0x00695c04]
mov dword [0x00696190], eax
call fcn.005dade0
cmp eax, dword [0x006932b0]
jle 0x5e0bdb
mov dword [0x006932b0], 0x5c
mov eax, dword [0x006958f4]
add eax, dword [0x00695bf8]
mov ecx, dword [0x00696184]
add ecx, dword [0x006965f0]
cmp eax, ecx
jle 0x5e0c03
mov eax, dword [0x006965f0]
mov dword [0x006958f4], eax
lea rcx, [rbp + 0x1c0]
mov rdx, qword [rbp + 0x428]
call fcn.004108b0
lea rcx, [rbp + 0x117a]
mov rdx, qword [rbp + 0x1c0]
call fcn.00430440
mov eax, dword [0x006934e4]
add eax, 1
cmp dword [0x006934e4], eax
jne 0x5e0c59
mov ecx, dword [0x00695d70]
mov edx, dword [0x00693200]
mov r8d, dword [0x006934e4]
mov r9d, dword [0x0069396c]
call sub.advapi32.dll_CryptDuplicateKey
mov eax, dword [0x006958f4]
add eax, dword [0x00695bf8]
mov ecx, dword [0x00696184]
add ecx, dword [0x006965f0]
cmp eax, ecx
jle 0x5e0c81
mov eax, dword [0x006965f0]
mov dword [0x006958f4], eax
mov eax, dword [0x00695be4]
cmp eax, dword [0x00696170]
je 0x5e0c9b
mov eax, dword [0x00695be4]
mov dword [0x00696170], eax
call fcn.005a66a0
movsd qword [rbp + 0xf60], xmm0
mov ecx, dword [rbp + 0xf2c]
call fcn.005d2d20
call fcn.005d2100
call fcn.005d19c0
mov eax, dword [0x006958dc]
add eax, dword [0x00695d70]
mov ecx, dword [0x006962c4]
add ecx, dword [0x006965dc]
cmp eax, ecx
jle 0x5e0ce5
mov eax, dword [0x006965dc]
mov dword [0x006958dc], eax
mov eax, dword [0x00695868]
mov dword [0x006942b0], eax
mov eax, dword [0x00693414]
add eax, 1
cmp dword [0x00693414], eax
jne 0x5e0d2b
mov ecx, dword [0x00695938]
mov edx, dword [0x00696324]
mov r8d, dword [0x00696aac]
mov r9d, dword [0x00693300]
mov eax, dword [0x00693540]
mov dword [rsp + 0x20], eax
call sub.kernel32.dll_LockFile
mov eax, dword [0x006937f8]
sub eax, dword [0x00693454]
mov dword [0x00693454], eax
mov eax, dword [0x0069329c]
mov dword [0x00696a8c], eax
mov eax, dword [0x006932a8]
add eax, 1
cmp dword [0x006932a8], eax
jne 0x5e0d72
mov ecx, dword [0x006942d4]
mov edx, dword [0x00695bf0]
mov r8d, dword [0x006962d4]
call sub.kernel32.dll_GetDiskFreeSpaceExW
call fcn.005ceba0
lea rcx, [rbp + 0x1b0]
lea rdx, [0x00692fcb]
mov r8d, 0xa
mov r9d, 0x2d
call fcn.00597b20
lea rcx, [rbp + 0x1b8]
mov rdx, qword [rbp + 0x1b0]
xor r8, r8
call fcn.005a8ac0
mov rcx, qword [rbp + 0x1b8]
call fcn.005d19f0
mov qword [rbp + 0x418], rax
call fcn.005d4760
cmp eax, dword [0x00696ac4]
jle 0x5e0dd8
mov dword [0x00696ac4], 0x32
mov eax, dword [0x00695888]
add eax, dword [0x00695bac]
mov ecx, dword [0x00696134]
add ecx, dword [0x00696318]
cmp eax, ecx
jle 0x5e0e00
mov eax, dword [0x00696318]
mov dword [0x00695888], eax
mov dword [0x006932a4], 0x313
mov eax, dword [0x006932a4]
sub eax, 0x1ab
mov dword [0x00693400], eax
call fcn.005ceba0
call fcn.005d08d0
xor ecx, ecx
xor edx, edx
lea r8, [0x005da090]
lea r9, [rbp + 0xf28]
mov dword [rsp + 0x20], 0
lea rax, [rbp + 0x424]
mov qword [rsp + 0x28], rax
call qword [0x006a8d38]
mov rcx, qword [rbp + 0x418]
mov edx, 0x7d0
call qword [0x006a8b98]
mov eax, dword [0x006965d4]
mov dword [0x006961ac], eax
mov eax, dword [0x006933d0]
add eax, 1
cmp dword [0x006933d0], eax
jne 0x5e0eab
mov ecx, dword [0x0069583c]
mov edx, dword [0x00695d74]
mov r8d, dword [0x00696a98]
mov r9d, dword [0x006932ec]
mov eax, dword [0x006934e8]
mov dword [rsp + 0x20], eax
call sub.kernel32.dll_LockFile
mov eax, dword [0x006958e8]
add eax, dword [0x00695bec]
mov ecx, dword [0x00696178]
add ecx, dword [0x006965a0]
cmp eax, ecx
jle 0x5e0ed3
mov eax, dword [0x006965a0]
mov dword [0x006958e8], eax
call fcn.005d2100
call fcn.005dea10
cmp eax, dword [0x006932c8]
jle 0x5e0eef
mov dword [0x006932c8], 0x63
mov eax, dword [0x00694284]
mov dword [0x00693964], eax
mov rcx, qword [0x006a8a80]
mov rdx, qword [rbp + 0x1388]
xor r8, r8
mov rax, qword [0x006a8a80]
mov rax, qword [rax]
call qword [rax + 0x50]
mov eax, dword [0x00694284]
mov dword [0x00693964], eax
mov eax, dword [0x00695d90]
cmp eax, dword [0x00696570]
je 0x5e0f3f
mov eax, dword [0x00695d90]
mov dword [0x00696570], eax
mov rcx, qword [0x006a8a80]
lea rdx, [rbp + 0xf28]
mov r8d, 0x460
call fcn.004fbd70
mov byte [rbp + 0x139f], 1
mov eax, dword [0x00693300]
add eax, 1
cmp dword [0x00693300], eax
jne 0x5e0f89
mov ecx, dword [0x006942c0]
mov edx, dword [0x00696a8c]
mov r8d, dword [0x006933f8]
call sub.kernel32.dll_GetDiskFreeSpaceExW
mov eax, dword [0x00696a98]
mov dword [0x0069659c], eax
call fcn.005cdc30
mov dword [0x006932ac], 0x318
mov eax, dword [0x006932ac]
sub eax, 0x1ad
mov dword [0x0069340c], eax
jmp 0x5e1071
sub qword [rbp + 0x1390], 0x460
mov eax, dword [0x0069592c]
add eax, dword [0x00695d7c]
mov ecx, dword [0x006962d0]
add ecx, dword [0x006965e8]
cmp eax, ecx
jle 0x5e0fee
mov eax, dword [0x006965e8]
mov dword [0x0069592c], eax
mov eax, dword [0x006933d8]
add eax, 1
cmp dword [0x006933d8], eax
jne 0x5e101e
mov ecx, dword [0x006962f8]
mov edx, dword [0x00696ac8]
mov r8d, dword [0x006933a8]
mov r9d, dword [0x00693514]
call sub.advapi32.dll_CryptDuplicateKey
call fcn.005d2cb0
cmp eax, dword [0x00696a8c]
jle 0x5e1035
mov dword [0x00696a8c], 0x24
call fcn.005d62d0
cmp eax, dword [0x006931b4]
jle 0x5e104c
mov dword [0x006931b4], 0x35
mov eax, dword [0x00694284]
mov dword [0x00693968], eax
add qword [rbp + 0x1388], 0x460
cmp qword [rbp + 0x1390], 0
jg 0x5e0187
nop
cmp byte [rbp + 0x139f], 0
jne 0x5e2a04
mov eax, dword [0x006965d8]
mov dword [0x006961ac], eax
mov rcx, qword [0x006a8a80]
mov rax, qword [0x006a8a80]
mov rax, qword [rax]
call qword [rax]
mov qword [rbp + 0x1390], rax
mov qword [rbp + 0x1388], 0
jmp 0x5e1d35
mov eax, dword [0x00695830]
add eax, dword [0x006958d4]
mov ecx, dword [0x00695bdc]
add ecx, dword [0x00696120]
cmp eax, ecx
jle 0x5e10dd
mov eax, dword [0x00696120]
mov dword [0x00695830], eax
mov eax, dword [0x0069658c]
mov dword [0x00696160], eax
mov eax, dword [0x00695854]
add eax, dword [0x0069593c]
mov ecx, dword [0x00695bfc]
add ecx, dword [0x00696188]
cmp eax, ecx
jle 0x5e1111
mov eax, dword [0x00696188]
mov dword [0x00695854], eax
call fcn.005d9cb0
cmp eax, dword [0x00693284]
jle 0x5e1128
mov dword [0x00693284], 0x51
mov eax, dword [0x00694284]
mov dword [0x006940b4], eax
mov eax, dword [0x006932a8]
add eax, 1
cmp dword [0x006932a8], eax
jne 0x5e116e
mov ecx, dword [0x00695d90]
mov edx, dword [0x006965b8]
mov r8d, dword [0x006931dc]
mov r9d, dword [0x006933e0]
mov eax, dword [0x00693504]
mov dword [rsp + 0x20], eax
call sub.kernel32.dll_LockFile
mov rcx, qword [0x006a8a80]
mov rdx, qword [rbp + 0x1388]
xor r8, r8
mov rax, qword [0x006a8a80]
mov rax, qword [rax]
call qword [rax + 0x50]
mov rcx, qword [0x006a8a80]
lea rdx, [rbp + 0xf28]
mov r8d, 0x460
call fcn.004fab00
cmp dword [rbp + 0xf28], 0xffffffff
jne 0x5e1d1f
mov eax, dword [0x006933c4]
mov dword [0x006931c4], eax
mov dword [0x006931f0], 0x2ee
mov eax, dword [0x006931f0]
sub eax, 0x199
mov dword [0x006933b0], eax
mov eax, dword [rbp + 0x13c0]
mov dword [rbp + 0xf28], eax
lea rcx, [rbp + 0x1a8]
mov rdx, qword [rbp + 0x13c8]
call fcn.004108b0
lea rcx, [rbp + 0xf72]
mov rdx, qword [rbp + 0x1a8]
call fcn.00430440
mov dword [0x006931f0], 0x2ee
mov eax, dword [0x006931f0]
sub eax, 0x199
mov dword [0x006933b0], eax
mov eax, dword [0x00695bfc]
cmp eax, dword [0x00696188]
je 0x5e1243
mov eax, dword [0x00695bfc]
mov dword [0x00696188], eax
mov eax, dword [0x00695810]
add eax, dword [0x006958f8]
mov ecx, dword [0x00695c00]
add ecx, dword [0x00696188]
cmp eax, ecx
jle 0x5e126b
mov eax, dword [0x00696188]
mov dword [0x00695810], eax
mov eax, dword [0x00696ac8]
add eax, dword [0x006932d8]
mov ecx, dword [0x00693434]
add ecx, dword [0x00693514]
cmp eax, ecx
jle 0x5e1291
mov dword [0x00696ac8], 0x152
call fcn.005d6e40
cmp eax, dword [0x006931d0]
jle 0x5e12a8
mov dword [0x006931d0], 0x3c
mov eax, dword [0x00696ac8]
add eax, dword [0x006932d8]
mov ecx, dword [0x00693434]
add ecx, dword [0x00693514]
cmp eax, ecx
jle 0x5e12ce
mov dword [0x00696ac8], 0x152
mov eax, dword [0x00695bcc]
cmp eax, dword [0x00696154]
je 0x5e12e8
mov eax, dword [0x00695bcc]
mov dword [0x00696154], eax
movzx rax, byte [rbp + 0x13d0]
mov byte [rbp + 0xf70], al
mov dword [rbp + 0xf2c], 0
mov rcx, qword [rbp + 0x13c8]
xor edx, edx
call fcn.00410520
test eax, eax
je 0x5e17b0
cmp byte [0x006922ea], 0
je 0x5e1564
mov rcx, qword [rbp + 0x13c8]
call fcn.005deb00
test al, al
jne 0x5e1564
mov eax, dword [0x006942a0]
add eax, dword [0x00695810]
mov ecx, dword [0x006958fc]
add ecx, dword [0x00695bbc]
cmp eax, ecx
jle 0x5e1358
call fcn.004096f0
call fcn.005cf210
mov eax, dword [0x00693440]
add eax, 1
cmp dword [0x00693440], eax
jne 0x5e1397
mov ecx, dword [0x00695b8c]
mov edx, dword [0x006961a0]
mov r8d, dword [0x006965cc]
mov r9d, dword [0x006931ec]
mov eax, dword [0x006933f0]
mov dword [rsp + 0x20], eax
call sub.kernel32.dll_LockFile
mov eax, dword [0x006933e4]
add eax, 1
cmp dword [0x006933e4], eax
jne 0x5e13d1
mov ecx, dword [0x006942f0]
mov edx, dword [0x0069594c]
mov r8d, dword [0x00696154]
mov r9d, dword [0x006965c4]
mov eax, dword [0x00696ac0]
mov dword [rsp + 0x20], eax
call sub.kernel32.dll_LockFile
lea rcx, [rbp + 0x1a0]
lea rdx, [0x006a84f8]
mov r8d, 0x104
call fcn.0040ff40
lea rcx, [rbp + 0x198]
lea rdx, [0x006a8829]
call fcn.0040ff20
lea rcx, [rbp + 0x1a0]
mov rdx, qword [rbp + 0x198]
call fcn.00410070
lea rcx, [rbp + 0x190]
mov rdx, qword [rbp + 0x1a0]
call fcn.004108b0
mov rcx, qword [rbp + 0x190]
mov dl, 1
call fcn.0042f710
test al, al
je 0x5e1564
lea rcx, [rbp + 0x188]
lea rdx, [0x006a84f8]
mov r8d, 0x104
call fcn.0040ff40
lea rcx, [rbp + 0x180]
lea rdx, [0x006a8829]
call fcn.0040ff20
lea rcx, [rbp + 0x188]
mov rdx, qword [rbp + 0x180]
call fcn.00410070
lea rcx, [rbp + 0x178]
mov rdx, qword [rbp + 0x188]
call fcn.004108b0
mov rcx, qword [rbp + 0x13a0]
mov rdx, qword [rbp + 0x178]
call fcn.004fd2e0
lea rcx, [rbp + 0x168]
lea rdx, [0x00692dfa]
mov r8d, 7
mov r9d, 0x2d
call fcn.00597b20
lea rcx, [rbp + 0x170]
mov rdx, qword [rbp + 0x168]
xor r8, r8
call fcn.005a8ac0
lea rcx, [rbp + 0x465]
mov rdx, qword [rbp + 0x13a0]
mov r8, qword [rbp + 0x170]
call fcn.005ddb10
cmp byte [rbp + 0xebe], 0
je 0x5e1564
mov eax, dword [0x00693288]
mov dword [0x00696a7c], eax
lea rcx, [rbp + 0x160]
lea rdx, [rbp + 0xebe]
call fcn.0040ff20
lea rcx, [rbp + 0x328]
mov edx, 3
xor r8, r8
mov r9, qword [rbp + 0x160]
movzx rax, byte [0x006a8aa8]
mov byte [rsp + 0x20], al
movzx rax, byte [rbp + 0xf0f]
mov byte [rsp + 0x28], al
call fcn.005daf30
call fcn.005dade0
cmp eax, dword [0x006932a0]
jle 0x5e1564
mov dword [0x006932a0], 0x59
cmp byte [0x006922eb], 0
je 0x5e17b0
mov eax, dword [0x006958fc]
add eax, dword [0x00695c00]
mov ecx, dword [0x00696148]
add ecx, dword [0x00696570]
cmp eax, ecx
jle 0x5e1599
mov eax, dword [0x00696570]
mov dword [0x006958fc], eax
call fcn.005d6ea0
call fcn.005cc790
mov eax, dword [0x00693920]
mov dword [0x0069351c], eax
mov eax, dword [0x006932b0]
add eax, dword [0x006933cc]
mov ecx, dword [0x006965ec]
add ecx, dword [0x00696aa4]
cmp ecx, eax
jle 0x5e15d5
mov dword [0x006965ec], 0x28
mov ecx, dword [0x006965ec]
add ecx, dword [0x00696aa4]
cmp ecx, eax
jle 0x5e15ef
mov dword [0x006965ec], 0x28
mov eax, dword [0x00695bb4]
cmp eax, dword [0x00695d84]
je 0x5e1609
mov eax, dword [0x00695bb4]
mov dword [0x00695d84], eax
mov dword [0x00696ab8], 0x304
mov eax, dword [0x00696ab8]
sub eax, 0x195
mov dword [0x006932c8], eax
mov dword [0x00696ab8], 0x304
mov eax, dword [0x00696ab8]
sub eax, 0x195
mov dword [0x006932c8], eax
mov eax, dword [0x00695d88]
cmp eax, dword [0x00696184]
je 0x5e165b
mov eax, dword [0x00695d88]
mov dword [0x00696184], eax
mov eax, dword [0x0069320c]
add eax, 1
cmp dword [0x0069320c], eax
jne 0x5e1677
mov ecx, dword [0x00693980]
call sub.kernel32.dll_SetConsoleKeyShortcuts
lea rcx, [rbp + 0x150]
lea rdx, [0x00692fbc]
mov r8d, 9
mov r9d, 0x2d
call fcn.00597b20
lea rcx, [rbp + 0x158]
mov rdx, qword [rbp + 0x150]
xor r8, r8
call fcn.005a8ac0
lea rcx, [rbp + 0x140]
lea rdx, [0x00692fc6]
mov r8d, 4
mov r9d, 0x2d
call fcn.00597b20
lea rcx, [rbp + 0x148]
mov rdx, qword [rbp + 0x140]
xor r8, r8
call fcn.005a8ac0
mov rcx, qword [rbp + 0x158]
mov rdx, qword [rbp + 0x148]
call qword [0x006a9498]
lea rcx, [rbp + 0x138]
lea rdx, [0x00692909]
mov r8d, 0xb
mov r9d, 0x2d
call fcn.00597b20
mov rcx, qword [rbp + 0x138]
call fcn.005cf330
test al, al
jne 0x5e17b0
lea rcx, [rbp + 0x128]
lea rdx, [0x00692fbc]
mov r8d, 9
mov r9d, 0x2d
call fcn.00597b20
lea rcx, [rbp + 0x130]
mov rdx, qword [rbp + 0x128]
xor r8, r8
call fcn.005a8ac0
lea rcx, [rbp + 0x118]
lea rdx, [0x00692fc6]
mov r8d, 4
mov r9d, 0x2d
call fcn.00597b20
lea rcx, [rbp + 0x120]
mov rdx, qword [rbp + 0x118]
xor r8, r8
call fcn.005a8ac0
mov rcx, qword [rbp + 0x130]
mov rdx, qword [rbp + 0x120]
call qword [0x006a94a0]
cmp byte [rbp + 0x13d0], 0
je 0x5e1cde
cmp byte [0x006922db], 0
je 0x5e1cde
lea rcx, [rbp + 0x110]
lea rdx, [rbp + 0xf72]
mov r8d, 0x104
call fcn.00410830
cmp qword [rbp + 0x110], 0
je 0x5e1cde
lea rcx, [rbp + 0x108]
lea rdx, [0x006a84f8]
mov r8d, 0x104
call fcn.0040ff40
mov rcx, qword [rbp + 0x108]
mov edx, 0x14400000
call fcn.005d2a00
test al, al
je 0x5e1cde
mov eax, dword [0x006968c0]
mov dword [0x006965b0], eax
mov eax, dword [0x006942c8]
add eax, dword [0x0069583c]
mov ecx, dword [0x006958e0]
add ecx, dword [0x00695be4]
cmp eax, ecx
jle 0x5e185a
mov eax, dword [0x00695be4]
mov dword [0x006942c8], eax
mov dword [0x006932ac], 0x336
mov eax, dword [0x006932ac]
sub eax, 0x1ad
mov dword [0x006933c4], eax
mov eax, dword [0x006933fc]
add eax, 1
cmp dword [0x006933fc], eax
jne 0x5e1892
mov ecx, dword [0x006934c4]
call sub.kernel32.dll_SetConsoleKeyShortcuts
mov eax, dword [0x006965ec]
add eax, dword [0x006931cc]
mov ecx, dword [0x006932b4]
add ecx, dword [0x00693410]
cmp eax, ecx
jle 0x5e18b8
mov dword [0x006965ec], 0xf
mov eax, dword [0x00696318]
mov dword [0x00696178], eax
mov eax, dword [0x006942dc]
mov dword [0x006940cc], eax
mov eax, dword [0x0069582c]
add eax, dword [0x00695914]
mov ecx, dword [0x00695bd8]
add ecx, dword [0x00696160]
cmp eax, ecx
jle 0x5e18f8
mov eax, dword [0x00696160]
mov dword [0x0069582c], eax
mov dword [0x00696ab8], 0x303
mov eax, dword [0x00696ab8]
sub eax, 0x194
mov dword [0x006932c4], eax
lea rcx, [rbp + 0x448]
mov edx, dword [rbp + 0xf28]
mov r8, qword [rbp + 0x440]
mov r9, qword [rbp + 0x438]
mov dword [rsp + 0x20], 5
mov dword [rsp + 0x28], 0x80
call fcn.005a56a0
mov rax, qword [rbp + 0x448]
mov qword [rbp + 0xf30], rax
call fcn.005d2cb0
mov eax, dword [rbp + 0x458]
mov dword [rbp + 0xf2c], eax
lea rcx, [rbp + 0x1c8]
mov rdx, qword [rbp + 0x430]
mov r8d, 0xff
call fcn.0040ffc0
lea rcx, [rbp + 0xf38]
lea rdx, [rbp + 0x1c8]
mov r8b, 0x20
call fcn.0040f3e0
mov eax, dword [0x006968b8]
mov dword [0x006965a8], eax
mov eax, dword [0x00695bc4]
add eax, dword [0x00695d98]
mov ecx, dword [0x0069581c]
add ecx, dword [0x00695904]
cmp ecx, eax
jle 0x5e19c7
mov ecx, dword [0x00695d98]
mov dword [0x0069581c], ecx
mov ecx, dword [0x0069581c]
add ecx, dword [0x00695904]
cmp ecx, eax
jle 0x5e19e3
mov eax, dword [0x00695d98]
mov dword [0x0069581c], eax
mov eax, dword [0x00695d90]
cmp eax, dword [0x006962e4]
je 0x5e19fd
mov eax, dword [0x00695d90]
mov dword [0x006962e4], eax
call fcn.005d08d0
mov eax, dword [0x006942fc]
add eax, dword [0x006958cc]
mov ecx, dword [0x00695bd4]
add ecx, dword [0x00696118]
cmp eax, ecx
jle 0x5e1a23
call fcn.004096f0
call fcn.005d7a00
cmp eax, dword [0x0069320c]
jle 0x5e1a3a
mov dword [0x0069320c], 0x3b
mov eax, dword [0x006957f0]
add eax, dword [0x006958d8]
mov ecx, dword [0x00695be0]
add ecx, dword [0x00696124]
cmp eax, ecx
jle 0x5e1a62
mov eax, dword [0x00696124]
mov dword [0x006957f0], eax
lea rcx, [rbp + 0x100]
mov rdx, qword [rbp + 0x428]
call fcn.004108b0
lea rcx, [rbp + 0x117a]
mov rdx, qword [rbp + 0x100]
call fcn.00430440
call fcn.005a66a0
movsd qword [rbp + 0xf60], xmm0
mov ecx, dword [rbp + 0xf2c]
call fcn.005d2d20
mov eax, dword [0x0069631c]
mov dword [0x00696180], eax
call fcn.005d6e40
cmp eax, dword [0x006931d0]
jle 0x5e1ac3
mov dword [0x006931d0], 0x3d
mov eax, dword [0x0069631c]
mov dword [0x00696180], eax
mov eax, dword [0x00695bc4]
cmp eax, dword [0x00696150]
je 0x5e1ae9
mov eax, dword [0x00695bc4]
mov dword [0x00696150], eax
mov eax, dword [0x006932bc]
add eax, 1
cmp dword [0x006932bc], eax
jne 0x5e1b12
mov ecx, dword [0x0069343c]
mov edx, dword [0x006940b4]
mov r8d, dword [0x006957f4]
call sub.kernel32.dll_GetDiskFreeSpaceExW
mov eax, dword [0x00696184]
add eax, dword [0x006965b0]
mov ecx, dword [0x00695938]
add ecx, dword [0x00695bfc]
cmp ecx, eax
jle 0x5e1b3a
mov ecx, dword [0x006965b0]
mov dword [0x00695938], ecx
mov ecx, dword [0x00695938]
add ecx, dword [0x00695bfc]
cmp ecx, eax
jle 0x5e1b56
mov eax, dword [0x006965b0]
mov dword [0x00695938], eax
mov eax, dword [0x00695bd8]
cmp eax, dword [0x00696160]
je 0x5e1b70
mov eax, dword [0x00695bd8]
mov dword [0x00696160], eax
mov eax, dword [0x006958ec]
add eax, dword [0x00695bf4]
mov ecx, dword [0x00696138]
add ecx, dword [0x00696318]
cmp eax, ecx
jle 0x5e1b98
mov eax, dword [0x00696318]
mov dword [0x006958ec], eax
mov eax, dword [0x00696310]
mov dword [0x00696130], eax
mov eax, dword [0x006932e4]
add eax, 1
cmp dword [0x006932e4], eax
jne 0x5e1bc0
mov ecx, dword [0x006940a4]
call sub.kernel32.dll_SetConsoleKeyShortcuts
lea rcx, [rbp + 0xf0]
lea rdx, [0x00692fcb]
mov r8d, 0xa
mov r9d, 0x2d
call fcn.00597b20
lea rcx, [rbp + 0xf8]
mov rdx, qword [rbp + 0xf0]
xor r8, r8
call fcn.005a8ac0
mov rcx, qword [rbp + 0xf8]
call fcn.005d19f0
mov qword [rbp + 0x418], rax
xor ecx, ecx
xor edx, edx
lea r8, [0x005da090]
lea r9, [rbp + 0xf28]
mov dword [rsp + 0x20], 0
lea rax, [rbp + 0x424]
mov qword [rsp + 0x28], rax
call qword [0x006a8d38]
call fcn.005d62d0
cmp eax, dword [0x006931b8]
jle 0x5e1c4d
mov dword [0x006931b8], 0x26
mov rcx, qword [rbp + 0x418]
mov edx, 0x7d0
call qword [0x006a8b98]
mov eax, dword [0x006932fc]
add eax, 1
cmp dword [0x006932fc], eax
jne 0x5e1c7c
mov ecx, dword [0x00695bd4]
call sub.kernel32.dll_SetConsoleKeyShortcuts
mov eax, dword [0x00696310]
mov dword [0x00696130], eax
mov eax, dword [0x00695918]
cmp eax, dword [0x00695c20]
je 0x5e1ca2
mov eax, dword [0x00695918]
mov dword [0x00695c20], eax
mov eax, dword [0x00693400]
add eax, 1
cmp dword [0x00693400], eax
jne 0x5e1cd2
mov ecx, dword [0x00695860]
mov edx, dword [0x00695d98]
mov r8d, dword [0x006962ec]
mov r9d, dword [0x0069688c]
call sub.advapi32.dll_CryptDuplicateKey
mov eax, dword [0x00696aa4]
mov dword [0x006965e8], eax
mov rcx, qword [0x006a8a80]
mov rdx, qword [rbp + 0x1388]
xor r8, r8
mov rax, qword [0x006a8a80]
mov rax, qword [rax]
call qword [rax + 0x50]
mov rcx, qword [0x006a8a80]
lea rdx, [rbp + 0xf28]
mov r8d, 0x460
call fcn.004fbd70
mov byte [rbp + 0x139f], 1
jmp 0x5e1d43
sub qword [rbp + 0x1390], 0x460
add qword [rbp + 0x1388], 0x460
cmp qword [rbp + 0x1390], 0
jg 0x5e10b5
nop
cmp byte [rbp + 0x139f], 0
jne 0x5e2a04
mov eax, dword [0x00696aa8]
add eax, dword [0x006932b8]
mov ecx, dword [0x00693414]
add ecx, dword [0x006934f4]
cmp eax, ecx
jle 0x5e1d77
mov dword [0x00696aa8], 0x120
call fcn.005da060
cmp eax, dword [0x006931f0]
jle 0x5e1d8e
mov dword [0x006931f0], 0x45
call fcn.005d2cb0
mov eax, dword [0x00696aa8]
mov dword [0x006965a8], eax
mov eax, dword [0x00695894]
add eax, dword [0x00695bb8]
mov ecx, dword [0x00696140]
add ecx, dword [0x00696324]
cmp eax, ecx
jle 0x5e1dc7
mov eax, dword [0x00696324]
mov dword [0x00695894], eax
mov eax, dword [rbp + 0x13c0]
mov dword [rbp + 0xf28], eax
call fcn.005d3250
cmp eax, dword [0x006968b4]
jle 0x5e1dea
mov dword [0x006968b4], 0x17
mov eax, dword [0x00695894]
add eax, dword [0x00695bb8]
mov ecx, dword [0x00696140]
add ecx, dword [0x00696324]
cmp eax, ecx
jle 0x5e1e12
mov eax, dword [0x00696324]
mov dword [0x00695894], eax
mov eax, dword [0x00695d74]
cmp eax, dword [0x006962c8]
je 0x5e1e2c
mov eax, dword [0x00695d74]
mov dword [0x006962c8], eax
mov dword [0x00693288], 0x306
mov eax, dword [0x00693288]
sub eax, 0x1a5
mov dword [0x006933a0], eax
mov eax, dword [0x00695870]
mov dword [0x006942b8], eax
mov eax, dword [0x006965d4]
mov dword [0x006961ac], eax
mov eax, dword [0x006965d4]
mov dword [0x006961ac], eax
mov eax, dword [0x00696174]
cmp eax, dword [0x006968b0]
je 0x5e1e86
mov eax, dword [0x00696174]
mov dword [0x006968b0], eax
mov eax, dword [0x00696abc]
add eax, dword [0x00693288]
mov ecx, dword [0x006933e4]
add ecx, dword [0x0069350c]
cmp eax, ecx
jle 0x5e1eac
mov dword [0x00696abc], 0x135
mov eax, dword [0x00695840]
mov dword [0x0069428c], eax
mov eax, dword [0x006931d8]
mov dword [0x006965fc], eax
lea rcx, [rbp + 0xe8]
mov rdx, qword [rbp + 0x13c8]
call fcn.004108b0
lea rcx, [rbp + 0xf72]
mov rdx, qword [rbp + 0xe8]
call fcn.00430440
movzx rax, byte [rbp + 0x13d0]
mov byte [rbp + 0xf70], al
mov eax, dword [0x006932b8]
add eax, 1
cmp dword [0x006932b8], eax
jne 0x5e1f32
mov ecx, dword [0x006965f8]
mov edx, dword [0x00693544]
mov r8d, dword [0x006940dc]
mov r9d, dword [0x00695818]
mov eax, dword [0x00695904]
mov dword [rsp + 0x20], eax
call sub.kernel32.dll_LockFile
mov eax, dword [0x00695850]
add eax, dword [0x0069593c]
mov ecx, dword [0x00695d88]
add ecx, dword [0x006962e0]
cmp eax, ecx
jle 0x5e1f5a
mov eax, dword [0x006962e0]
mov dword [0x00695850], eax
mov eax, dword [0x006933a0]
add eax, 1
cmp dword [0x006933a0], eax
jne 0x5e1f8a
mov ecx, dword [0x00695868]
mov edx, dword [0x00696114]
mov r8d, dword [0x00696584]
mov r9d, dword [0x00693434]
call sub.advapi32.dll_CryptDuplicateKey
mov eax, dword [0x006942e4]
mov dword [0x006940d0], eax
mov eax, dword [0x00693420]
add eax, dword [0x00693544]
mov ecx, dword [0x00694098]
add ecx, dword [0x00694120]
cmp eax, ecx
jle 0x5e1fbc
mov dword [0x00693420], 1
mov dword [0x006931fc], 0x2f3
mov eax, dword [0x006931fc]
sub eax, 0x19c
mov dword [0x006933bc], eax
mov dword [0x006931fc], 0x2f3
mov eax, dword [0x006931fc]
sub eax, 0x19c
mov dword [0x006933bc], eax
mov eax, dword [0x00696158]
cmp eax, dword [0x00696584]
je 0x5e200e
mov eax, dword [0x00696158]
mov dword [0x00696584], eax
mov eax, dword [0x006931d8]
mov dword [0x006965f8], eax
call fcn.005d6ea0
cmp eax, dword [0x006931dc]
jle 0x5e2031
mov dword [0x006931dc], 0x40
mov dword [rbp + 0xf2c], 0
mov rcx, qword [rbp + 0x13c8]
xor edx, edx
call fcn.00410520
test eax, eax
je 0x5e26f7
cmp byte [0x006922ea], 0
je 0x5e247f
mov rcx, qword [rbp + 0x13c8]
call fcn.005deb00
test al, al
jne 0x5e247f
call fcn.005d08d0
mov eax, dword [0x006931d8]
mov dword [0x006965f8], eax
mov eax, dword [0x00695bc8]
cmp eax, dword [0x00696150]
je 0x5e209d
mov eax, dword [0x00695bc8]
mov dword [0x00696150], eax
mov eax, dword [0x00693450]
add eax, 1
cmp dword [0x00693450], eax
jne 0x5e20b9
mov ecx, dword [0x00693440]
call sub.kernel32.dll_SetConsoleKeyShortcuts
call fcn.005d2cb0
mov dword [0x00693204], 0x315
mov eax, dword [0x00693204]
sub eax, 0x19d
mov dword [0x006933c0], eax
mov eax, dword [0x006934e8]
add eax, 1
cmp dword [0x006934e8], eax
jne 0x5e20f6
mov ecx, dword [0x00693410]
call sub.kernel32.dll_SetConsoleKeyShortcuts
lea rcx, [rbp + 0xe0]
lea rdx, [0x006a84f8]
mov r8d, 0x104
call fcn.0040ff40
lea rcx, [rbp + 0xd8]
lea rdx, [0x006a8829]
call fcn.0040ff20
lea rcx, [rbp + 0xe0]
mov rdx, qword [rbp + 0xd8]
call fcn.00410070
lea rcx, [rbp + 0xd0]
mov rdx, qword [rbp + 0xe0]
call fcn.004108b0
mov rcx, qword [rbp + 0xd0]
mov dl, 1
call fcn.0042f710
test al, al
je 0x5e247f
mov eax, dword [0x006933ac]
add eax, 1
cmp dword [0x006933ac], eax
jne 0x5e218f
mov ecx, dword [0x00695b94]
mov edx, dword [0x00696a8c]
mov r8d, dword [0x006932e0]
mov r9d, dword [0x006934d8]
call sub.advapi32.dll_CryptDuplicateKey
call fcn.005d78a0
cmp eax, dword [0x006931f4]
jle 0x5e21a6
mov dword [0x006931f4], 0x45
mov eax, dword [0x006931b4]
mov dword [0x006965d4], eax
mov eax, dword [0x00695890]
mov dword [0x00694298], eax
call fcn.005d2170
mov eax, dword [0x00695890]
mov dword [0x00694298], eax
mov eax, dword [0x00695d88]
cmp eax, dword [0x006962e0]
je 0x5e21e9
mov eax, dword [0x00695d88]
mov dword [0x006962e0], eax
mov eax, dword [0x00696158]
add eax, dword [0x00696584]
mov ecx, dword [0x006958c8]
add ecx, dword [0x00695bd0]
cmp ecx, eax
jle 0x5e2211
mov ecx, dword [0x00696584]
mov dword [0x006958c8], ecx
mov ecx, dword [0x006958c8]
add ecx, dword [0x00695bd0]
cmp ecx, eax
jle 0x5e222d
mov eax, dword [0x00696584]
mov dword [0x006958c8], eax
mov eax, dword [0x00696130]
cmp eax, dword [0x00696314]
je 0x5e2247
mov eax, dword [0x00696130]
mov dword [0x00696314], eax
lea rcx, [rbp + 0xc8]
lea rdx, [0x006a84f8]
mov r8d, 0x104
call fcn.0040ff40
lea rcx, [rbp + 0xc0]
lea rdx, [0x006a8829]
call fcn.0040ff20
lea rcx, [rbp + 0xc8]
mov rdx, qword [rbp + 0xc0]
call fcn.00410070
lea rcx, [rbp + 0xb8]
mov rdx, qword [rbp + 0xc8]
call fcn.004108b0
mov rcx, qword [rbp + 0x13a0]
mov rdx, qword [rbp + 0xb8]
call fcn.004fd2e0
lea rcx, [rbp + 0xa8]
lea rdx, [0x00692dfa]
mov r8d, 7
mov r9d, 0x2d
call fcn.00597b20
lea rcx, [rbp + 0xb0]
mov rdx, qword [rbp + 0xa8]
xor r8, r8
call fcn.005a8ac0
lea rcx, [rbp + 0x465]
mov rdx, qword [rbp + 0x13a0]
mov r8, qword [rbp + 0xb0]
call fcn.005ddb10
mov eax, dword [0x00695828]
add eax, dword [0x00695910]
mov ecx, dword [0x00695c18]
add ecx, dword [0x006961a0]
cmp eax, ecx
jle 0x5e231f
call fcn.004096f0
call fcn.005d4760
cmp eax, dword [0x00696ac4]
jle 0x5e2336
mov dword [0x00696ac4], 0x32
mov eax, dword [0x006933e4]
add eax, 1
cmp dword [0x006933e4], eax
jne 0x5e2370
mov ecx, dword [0x00693400]
mov edx, dword [0x00693928]
mov r8d, dword [0x00695bec]
mov r9d, dword [0x006962d0]
mov eax, dword [0x006968b0]
mov dword [rsp + 0x20], eax
call sub.kernel32.dll_LockFile
mov eax, dword [0x006934c8]
add eax, 1
cmp dword [0x006934c8], eax
jne 0x5e238c
mov ecx, dword [0x00696a9c]
call sub.kernel32.dll_SetConsoleKeyShortcuts
mov eax, dword [0x00694128]
mov dword [0x006940a0], eax
cmp byte [rbp + 0xebe], 0
je 0x5e247f
call fcn.005d19c0
mov eax, dword [0x006931c4]
mov dword [0x006965e8], eax
mov eax, dword [0x00693514]
add eax, 1
cmp dword [0x00693514], eax
jne 0x5e23f0
mov ecx, dword [0x0069614c]
mov edx, dword [0x00696600]
mov r8d, dword [0x006932c8]
mov r9d, dword [0x006934c0]
mov eax, dword [0x0069394c]
mov dword [rsp + 0x20], eax
call sub.kernel32.dll_LockFile
call fcn.005d08d0
mov eax, dword [0x006934c8]
add eax, 1
cmp dword [0x006934c8], eax
jne 0x5e2411
mov ecx, dword [0x00696314]
call sub.kernel32.dll_SetConsoleKeyShortcuts
mov eax, dword [0x00695bd4]
mov dword [0x00695828], eax
call fcn.005d2170
call fcn.005cf210
lea rcx, [rbp + 0xa0]
lea rdx, [rbp + 0xebe]
call fcn.0040ff20
lea rcx, [rbp + 0x328]
mov edx, 3
xor r8, r8
mov r9, qword [rbp + 0xa0]
movzx rax, byte [0x006a8aa8]
mov byte [rsp + 0x20], al
movzx rax, byte [rbp + 0xf0f]
mov byte [rsp + 0x28], al
call fcn.005daf30
mov eax, dword [0x00696a70]
mov dword [0x006965b4], eax
call fcn.005d2100
cmp byte [0x006922eb], 0
je 0x5e26f7
mov eax, dword [0x00695828]
add eax, dword [0x00695914]
mov ecx, dword [0x00695bd4]
add ecx, dword [0x00696160]
cmp eax, ecx
jle 0x5e24b4
mov eax, dword [0x00696160]
mov dword [0x00695828], eax
mov eax, dword [0x006934c0]
add eax, 1
cmp dword [0x006934c0], eax
jne 0x5e24ee
mov ecx, dword [0x0069586c]
mov edx, dword [0x00696118]
mov r8d, dword [0x00696584]
mov r9d, dword [0x00696a84]
mov eax, dword [0x006932d8]
mov dword [rsp + 0x20], eax
call sub.kernel32.dll_LockFile
mov eax, dword [0x00695828]
add eax, dword [0x00695914]
mov ecx, dword [0x00695bd4]
add ecx, dword [0x00696160]
cmp eax, ecx
jle 0x5e2516
mov eax, dword [0x00696160]
mov dword [0x00695828], eax
mov eax, dword [0x00695d90]
cmp eax, dword [0x006962e8]
je 0x5e2530
mov eax, dword [0x00695d90]
mov dword [0x006962e8], eax
mov eax, dword [0x00695894]
add eax, dword [0x00695938]
mov ecx, dword [0x00695d84]
add ecx, dword [0x006962dc]
cmp eax, ecx
jle 0x5e2558
mov eax, dword [0x006962dc]
mov dword [0x00695894], eax
mov eax, dword [0x006932a4]
add eax, 1
cmp dword [0x006932a4], eax
jne 0x5e2592
mov ecx, dword [0x006942f8]
mov edx, dword [0x00695bd0]
mov r8d, dword [0x006961a0]
mov r9d, dword [0x00696894]
mov eax, dword [0x00693290]
mov dword [rsp + 0x20], eax
call sub.kernel32.dll_LockFile
mov eax, dword [0x006931d8]
add eax, dword [0x006933dc]
mov ecx, dword [0x00693500]
add ecx, dword [0x00693944]
cmp eax, ecx
jle 0x5e25b8
mov dword [0x006931d8], 0x5b
mov eax, dword [0x00696890]
mov dword [0x006962f4], eax
mov dword [0x006932c4], 0x322
mov eax, dword [0x006932c4]
sub eax, 0x1b2
mov dword [0x00693420], eax
lea rcx, [rbp + 0x90]
lea rdx, [0x00692fbc]
mov r8d, 9
mov r9d, 0x2d
call fcn.00597b20
lea rcx, [rbp + 0x98]
mov rdx, qword [rbp + 0x90]
xor r8, r8
call fcn.005a8ac0
lea rcx, [rbp + 0x80]
lea rdx, [0x00692fc6]
mov r8d, 4
mov r9d, 0x2d
call fcn.00597b20
lea rcx, [rbp + 0x88]
mov rdx, qword [rbp + 0x80]
xor r8, r8
call fcn.005a8ac0
mov rcx, qword [rbp + 0x98]
mov rdx, qword [rbp + 0x88]
call qword [0x006a9498]
lea rcx, [rbp + 0x78]
lea rdx, [0x00692909]
mov r8d, 0xb
mov r9d, 0x2d
call fcn.00597b20
mov rcx, qword [rbp + 0x78]
call fcn.005cf330
test al, al
jne 0x5e26f7
lea rcx, [rbp + 0x68]
lea rdx, [0x00692fbc]
mov r8d, 9
mov r9d, 0x2d
call fcn.00597b20
lea rcx, [rbp + 0x70]
mov rdx, qword [rbp + 0x68]
xor r8, r8
call fcn.005a8ac0
lea rcx, [rbp + 0x58]
lea rdx, [0x00692fc6]
mov r8d, 4
mov r9d, 0x2d
call fcn.00597b20
lea rcx, [rbp + 0x60]
mov rdx, qword [rbp + 0x58]
xor r8, r8
call fcn.005a8ac0
mov rcx, qword [rbp + 0x70]
mov rdx, qword [rbp + 0x60]
call qword [0x006a94a0]
cmp byte [rbp + 0x13d0], 0
je 0x5e29b2
cmp byte [0x006922db], 0
je 0x5e29b2
lea rcx, [rbp + 0x50]
lea rdx, [rbp + 0xf72]
mov r8d, 0x104
call fcn.00410830
cmp qword [rbp + 0x50], 0
je 0x5e29b2
lea rcx, [rbp + 0x48]
lea rdx, [0x006a84f8]
mov r8d, 0x104
call fcn.0040ff40
mov rcx, qword [rbp + 0x48]
mov edx, 0x14400000
call fcn.005d2a00
test al, al
je 0x5e29b2
mov eax, dword [0x006965f0]
mov dword [0x006962d8], eax
lea rcx, [rbp + 0x448]
mov edx, dword [rbp + 0xf28]
mov r8, qword [rbp + 0x440]
mov r9, qword [rbp + 0x438]
mov dword [rsp + 0x20], 5
mov dword [rsp + 0x28], 0x80
call fcn.005a56a0
mov rax, qword [rbp + 0x448]
mov qword [rbp + 0xf30], rax
mov eax, dword [0x006965f0]
mov dword [0x006962d8], eax
mov eax, dword [0x00695d9c]
cmp eax, dword [0x006962f0]
je 0x5e27d1
mov eax, dword [0x00695d9c]
mov dword [0x006962f0], eax
mov eax, dword [0x006933c8]
add eax, 1
cmp dword [0x006933c8], eax
jne 0x5e2801
mov ecx, dword [0x00693300]
mov edx, dword [0x00693540]
mov r8d, dword [0x006940d4]
mov r9d, dword [0x00695814]
call sub.advapi32.dll_CryptDuplicateKey
call fcn.005d6ea0
cmp eax, dword [0x006931e4]
jle 0x5e2818
mov dword [0x006931e4], 0x42
mov eax, dword [0x00693200]
mov dword [0x006968ac], eax
mov eax, dword [rbp + 0x458]
mov dword [rbp + 0xf2c], eax
lea rcx, [rbp + 0x1c8]
mov rdx, qword [rbp + 0x430]
mov r8d, 0xff
call fcn.0040ffc0
lea rcx, [rbp + 0xf38]
lea rdx, [rbp + 0x1c8]
mov r8b, 0x20
call fcn.0040f3e0
lea rcx, [rbp + 0x40]
mov rdx, qword [rbp + 0x428]
call fcn.004108b0
lea rcx, [rbp + 0x117a]
mov rdx, qword [rbp + 0x40]
call fcn.00430440
mov dword [0x006932d4], 0x32a
mov eax, dword [0x006932d4]
sub eax, 0x1b6
mov dword [0x00693434], eax
call fcn.005d08d0
mov eax, dword [0x00696abc]
mov dword [0x00696578], eax
mov eax, dword [0x006932e8]
add eax, 1
cmp dword [0x006932e8], eax
jne 0x5e28d6
mov ecx, dword [0x0069396c]
mov edx, dword [0x00695840]
mov r8d, dword [0x00695ba8]
call sub.kernel32.dll_GetDiskFreeSpaceExW
call fcn.005a66a0
movsd qword [rbp + 0xf60], xmm0
mov ecx, dword [rbp + 0xf2c]
call fcn.005d2d20
call fcn.005cf210
mov eax, dword [0x006932e0]
add eax, 1
cmp dword [0x006932e0], eax
jne 0x5e290f
mov ecx, dword [0x006942bc]
call sub.kernel32.dll_SetConsoleKeyShortcuts
lea rcx, [rbp + 0x30]
lea rdx, [0x00692fcb]
mov r8d, 0xa
mov r9d, 0x2d
call fcn.00597b20
lea rcx, [rbp + 0x38]
mov rdx, qword [rbp + 0x30]
xor r8, r8
call fcn.005a8ac0
mov rcx, qword [rbp + 0x38]
call fcn.005d19f0
mov qword [rbp + 0x418], rax
xor ecx, ecx
xor edx, edx
lea r8, [0x005da090]
lea r9, [rbp + 0xf28]
mov dword [rsp + 0x20], 0
lea rax, [rbp + 0x424]
mov qword [rsp + 0x28], rax
call qword [0x006a8d38]
mov eax, dword [0x00696abc]
mov dword [0x00696578], eax
mov eax, dword [0x0069611c]
cmp eax, dword [0x006961a8]
je 0x5e299f
mov eax, dword [0x0069611c]
mov dword [0x006961a8], eax
mov rcx, qword [rbp + 0x418]
mov edx, 0x7d0
call qword [0x006a8b98]
mov rcx, qword [0x006a8a80]
mov rax, qword [0x006a8a80]
mov rax, qword [rax]
call qword [rax]
mov qword [rbp + 0x410], rax
mov rcx, qword [0x006a8a80]
mov rdx, qword [rbp + 0x410]
xor r8, r8
mov rax, qword [0x006a8a80]
mov rax, qword [rax]
call qword [rax + 0x50]
mov rcx, qword [0x006a8a80]
lea rdx, [rbp + 0xf28]
mov r8d, 0x460
call fcn.004fbd70
nop
mov rcx, qword [rbp + 0x13a8]
call fcn.005a2ff0
mov eax, dword [0x006958d4]
add eax, dword [0x00695bd8]
mov ecx, dword [0x00696164]
add ecx, dword [0x0069658c]
cmp eax, ecx
jle 0x5e2a39
mov eax, dword [0x0069658c]
mov dword [0x006958d4], eax
mov eax, dword [0x00696ac0]
mov dword [0x006965c0], eax
mov eax, dword [0x006934dc]
add eax, 1
cmp dword [0x006934dc], eax
jne 0x5e2a7f
mov ecx, dword [0x00695bc8]
mov edx, dword [0x0069657c]
mov r8d, dword [0x00696ac0]
mov r9d, dword [0x006933a4]
mov eax, dword [0x006942fc]
mov dword [rsp + 0x20], eax
call sub.kernel32.dll_LockFile
mov eax, dword [0x0069341c]
add eax, 1
cmp dword [0x0069341c], eax
jne 0x5e2aa8
mov ecx, dword [0x00693528]
mov edx, dword [0x0069428c]
mov r8d, dword [0x00695884]
call sub.kernel32.dll_GetDiskFreeSpaceExW
call fcn.005cff60
call fcn.005d2cb0
mov rcx, qword [rbp + 0x13a0]
call fcn.0040b500
call fcn.005d1e00
jmp 0x5e2c02
nop
lea rcx, [rbp + 0x30]
call fcn.0040e970
lea rcx, [rbp + 0x38]
call fcn.0040e9c0
lea rcx, [rbp + 0x40]
call fcn.0040e920
lea rcx, [rbp + 0x48]
call fcn.0040e9c0
lea rcx, [rbp + 0x50]
call fcn.0040e920
lea rcx, [rbp + 0x58]
call fcn.0040e970
lea rcx, [rbp + 0x60]
call fcn.0040e9c0
lea rcx, [rbp + 0x68]
call fcn.0040e970
lea rcx, [rbp + 0x70]
call fcn.0040e9c0
lea rcx, [rbp + 0x78]
mov edx, 2
call fcn.0040ea30
lea rcx, [rbp + 0x88]
call fcn.0040e9c0
lea rcx, [rbp + 0x90]
call fcn.0040e970
lea rcx, [rbp + 0x98]
mov edx, 2
call fcn.0040ea60
lea rcx, [rbp + 0xa8]
call fcn.0040e970
lea rcx, [rbp + 0xb0]
call fcn.0040e9c0
lea rcx, [rbp + 0xb8]
call fcn.0040e920
lea rcx, [rbp + 0xc0]
mov edx, 2
call fcn.0040ea60
lea rcx, [rbp + 0xd0]
call fcn.0040e920
lea rcx, [rbp + 0xd8]
mov edx, 2
call fcn.0040ea60
lea rcx, [rbp + 0xe8]
call fcn.0040e920
lea rcx, [rbp + 0xf0]
call fcn.0040e970
lea rcx, [rbp + 0xf8]
call fcn.0040e9c0
lea rcx, [rbp + 0x100]
call fcn.0040e920
lea rcx, [rbp + 0x108]
call fcn.0040e9c0
lea rcx, [rbp + 0x110]
call fcn.0040e920
lea rcx, [rbp + 0x118]
call fcn.0040e970
lea rcx, [rbp + 0x120]
call fcn.0040e9c0
lea rcx, [rbp + 0x128]
call fcn.0040e970
lea rcx, [rbp + 0x130]
call fcn.0040e9c0
lea rcx, [rbp + 0x138]
mov edx, 2
call fcn.0040ea30
lea rcx, [rbp + 0x148]
call fcn.0040e9c0
lea rcx, [rbp + 0x150]
call fcn.0040e970
lea rcx, [rbp + 0x158]
mov edx, 2
call fcn.0040ea60
lea rcx, [rbp + 0x168]
call fcn.0040e970
lea rcx, [rbp + 0x170]
call fcn.0040e9c0
lea rcx, [rbp + 0x178]
call fcn.0040e920
lea rcx, [rbp + 0x180]
mov edx, 2
call fcn.0040ea60
lea rcx, [rbp + 0x190]
call fcn.0040e920
lea rcx, [rbp + 0x198]
mov edx, 2
call fcn.0040ea60
lea rcx, [rbp + 0x1a8]
call fcn.0040e920
lea rcx, [rbp + 0x1b0]
call fcn.0040e970
lea rcx, [rbp + 0x1b8]
call fcn.0040e9c0
lea rcx, [rbp + 0x1c0]
call fcn.0040e920
lea rcx, [rbp + 0x2c8]
call fcn.0040e9c0
lea rcx, [rbp + 0x2d0]
call fcn.0040e920
lea rcx, [rbp + 0x2d8]
call fcn.0040e970
lea rcx, [rbp + 0x2e0]
call fcn.0040e9c0
lea rcx, [rbp + 0x2e8]
call fcn.0040e970
lea rcx, [rbp + 0x2f0]
call fcn.0040e9c0
lea rcx, [rbp + 0x2f8]
mov edx, 2
call fcn.0040ea30
lea rcx, [rbp + 0x308]
call fcn.0040e9c0
lea rcx, [rbp + 0x310]
call fcn.0040e970
lea rcx, [rbp + 0x318]
mov edx, 2
call fcn.0040ea60
lea rcx, [rbp + 0x340]
call fcn.0040e970
lea rcx, [rbp + 0x348]
call fcn.0040e9c0
lea rcx, [rbp + 0x350]
call fcn.0040e920
lea rcx, [rbp + 0x358]
mov edx, 2
call fcn.0040ea60
lea rcx, [rbp + 0x368]
call fcn.0040e920
lea rcx, [rbp + 0x370]
mov edx, 2
call fcn.0040ea60
lea rcx, [rbp + 0x380]
call fcn.0040e920
lea rcx, [rbp + 0x388]
mov edx, 3
call fcn.0040ea60
lea rcx, [rbp + 0x3a0]
mov edx, 3
call fcn.0040ea30
lea rcx, [rbp + 0x3b8]
mov edx, 2
call fcn.0040ea60
lea rcx, [rbp + 0x3c8]
call fcn.0040e970
lea rcx, [rbp + 0x3d0]
mov edx, 2
call fcn.0040ea60
lea rcx, [rbp + 0x3e0]
call fcn.0040e970
lea rcx, [rbp + 0x3e8]
mov edx, 2
call fcn.0040ea60
lea rcx, [rbp + 0x3f8]
call fcn.0040e970
lea rcx, [rbp + 0x400]
call fcn.0040e9c0
lea rcx, [rbp + 0x428]
mov edx, 4
call fcn.0040ea60
lea rcx, [rbp + 0x13c8]
call fcn.0040e9c0
movzx rax, byte [rbp + 0x139f]
lea rsp, [rbp + 0x13b0]
pop rbp
ret