Function at 0x6199e0
Capabilities:
Get disk size

Disassembly:
push rbp
push rbx
mov byte [rsp - 0x3d8], 0
mov byte [rsp - 0x13d8], 0
sub rsp, 0x13d8
mov rbp, rsp
mov qword [rbp + 0x38], 0
mov qword [rbp + 0x30], 0
mov qword [rbp + 0x40], 0
mov qword [rbp + 0x58], 0
mov qword [rbp + 0x50], 0
mov qword [rbp + 0x48], 0
mov qword [rbp + 0x68], 0
mov qword [rbp + 0x60], 0
mov qword [rbp + 0x78], 0
mov qword [rbp + 0x70], 0
mov qword [rbp + 0x80], 0
mov qword [rbp + 0x90], 0
mov qword [rbp + 0x88], 0
mov qword [rbp + 0xa0], 0
mov qword [rbp + 0x98], 0
mov qword [rbp + 0xa8], 0
mov qword [rbp + 0xb8], 0
mov qword [rbp + 0xb0], 0
mov qword [rbp + 0xd0], 0
mov qword [rbp + 0xc8], 0
mov qword [rbp + 0xc0], 0
mov qword [rbp + 0xe0], 0
mov qword [rbp + 0xd8], 0
mov qword [rbp + 0xf8], 0
mov qword [rbp + 0xf0], 0
mov qword [rbp + 0xe8], 0
mov qword [rbp + 0x110], 0
mov qword [rbp + 0x108], 0
mov qword [rbp + 0x100], 0
mov qword [rbp + 0x128], 0
mov qword [rbp + 0x120], 0
mov qword [rbp + 0x118], 0
mov qword [rbp + 0x140], 0
mov qword [rbp + 0x138], 0
mov qword [rbp + 0x130], 0
mov qword [rbp + 0x148], 0
mov qword [rbp + 0x170], 0
mov qword [rbp + 0x150], 0
mov qword [rbp + 0x158], 0
mov qword [rbp + 0x168], 0
mov qword [rbp + 0x160], 0
mov qword [rbp + 0x198], 0
mov qword [rbp + 0x178], 0
mov qword [rbp + 0x180], 0
mov qword [rbp + 0x190], 0
mov qword [rbp + 0x188], 0
mov qword [rbp + 0x1c8], 0
mov qword [rbp + 0x1a8], 0
mov qword [rbp + 0x1a0], 0
mov qword [rbp + 0x1b0], 0
mov qword [rbp + 0x1c0], 0
mov qword [rbp + 0x1b8], 0
mov qword [rbp + 0x208], 0
mov qword [rbp + 0x1e8], 0
mov qword [rbp + 0x1f0], 0
mov qword [rbp + 0x200], 0
mov qword [rbp + 0x1f8], 0
mov qword [rbp + 0x210], 0
mov qword [rbp + 0x218], 0
mov qword [rbp + 0x220], 0
mov qword [rbp + 0x238], 0
mov qword [rbp + 0x228], 0
mov qword [rbp + 0x230], 0
mov qword [rbp + 0x250], 0
mov qword [rbp + 0x240], 0
mov qword [rbp + 0x248], 0
mov qword [rbp + 0x260], 0
mov qword [rbp + 0x258], 0
mov qword [rbp + 0x268], 0
mov qword [rbp + 0x278], 0
mov qword [rbp + 0x270], 0
mov qword [rbp + 0x290], 0
mov qword [rbp + 0x280], 0
mov qword [rbp + 0x288], 0
mov qword [rbp + 0x2a8], 0
mov qword [rbp + 0x298], 0
mov qword [rbp + 0x2a0], 0
mov qword [rbp + 0x300], 0
mov qword [rbp + 0x2f8], 0
mov qword [rbp + 0x2e8], 0
mov qword [rbp + 0x2b0], 0
mov qword [rbp + 0x2e0], 0
mov qword [rbp + 0x2f0], 0
mov qword [rbp + 0x310], 0
mov qword [rbp + 0x308], 0
mov qword [rbp + 0x320], 0
mov qword [rbp + 0x318], 0
mov qword [rbp + 0x3f0], 0
mov qword [rbp + 0x3e8], 0
mov qword [rbp + 0x3e0], 0
mov qword [rbp + 0x328], rbp
mov byte [rbp + 0x13f0], cl
mov qword [rbp + 0x13f8], rdx
nop
mov dword [0x006931d4], 0x2fa
mov eax, dword [0x006931d4]
sub eax, 0x19f
mov dword [0x00695908], eax
call fcn.00615620
cmp eax, dword [0x00693290]
jle 0x619e04
mov dword [0x00693290], 0x69
mov eax, dword [0x006931d0]
mov dword [0x00698b18], eax
call fcn.006036f0
cmp eax, dword [0x006931b0]
jle 0x619e27
mov dword [0x006931b0], 0x31
mov eax, dword [0x006931d0]
mov dword [0x00698b18], eax
mov eax, dword [0x00696a9c]
cmp eax, dword [0x00696e88]
je 0x619e4d
mov eax, dword [0x00696a9c]
mov dword [0x00696e88], eax
mov eax, dword [0x00695b9c]
add eax, dword [0x0069617c]
mov ecx, dword [0x006965f8]
add ecx, dword [0x00696cb0]
cmp eax, ecx
jle 0x619e6e
call fcn.004096f0
mov eax, dword [0x006931fc]
mov dword [0x00698e38], eax
mov eax, dword [0x006931fc]
mov dword [0x00698e38], eax
mov eax, dword [0x006965b4]
cmp eax, dword [0x00696aa8]
je 0x619ea0
mov eax, dword [0x006965b4]
mov dword [0x00696aa8], eax
mov dword [rbp + 0x13ac], 0
nop
call fcn.006011a0
cmp eax, dword [0x00698e74]
jle 0x619ec2
mov dword [0x00698e74], 0x24
mov eax, dword [0x00696578]
add eax, dword [0x00696c90]
mov ecx, dword [0x006974b0]
add ecx, dword [0x00698780]
cmp eax, ecx
jle 0x619eea
mov eax, dword [0x00698780]
mov dword [0x00696578], eax
call fcn.005f20b0
call fcn.00606240
mov eax, dword [0x00695840]
mov dword [0x00694298], eax
call fcn.006179b0
cmp eax, dword [0x006932dc]
jle 0x619f17
mov dword [0x006932dc], 0x7c
mov rcx, qword [0x004d2058]
mov dl, 1
call fcn.0040b440
mov qword [rbp + 0x13c8], rax
mov rcx, qword [0x004d2058]
mov dl, 1
call fcn.0040b440
mov qword [rbp + 0x13c0], rax
mov eax, dword [0x00695d9c]
add eax, dword [0x00696590]
mov ecx, dword [0x00696a80]
add ecx, dword [0x00697468]
cmp eax, ecx
jle 0x619f62
call fcn.004096f0
mov eax, dword [0x006932e4]
add eax, 1
cmp dword [0x006932e4], eax
jne 0x619fca
mov eax, dword [0x00695810]
test eax, eax
jge 0x619f82
call fcn.0040afc0
mov ecx, dword [0x00696164]
test ecx, ecx
jge 0x619f91
call fcn.0040afc0
mov edx, dword [0x006965e4]
test edx, edx
jge 0x619fa0
call fcn.0040afc0
mov r8d, dword [0x0069745c]
test r8d, r8d
jge 0x619fb1
call fcn.0040afc0
mov r9d, ecx
mov r10d, edx
mov r11d, r8d
mov ecx, eax
mov edx, r9d
mov r8d, r10d
mov r9d, r11d
call sub.advapi32.dll_CryptDuplicateKey
mov eax, dword [0x006989b4]
mov dword [0x006978ec], eax
mov eax, dword [0x006989b4]
mov dword [0x006978ec], eax
mov eax, dword [0x00696a70]
cmp eax, dword [0x00697458]
je 0x619ffc
mov eax, dword [0x00696a70]
mov dword [0x00697458], eax
mov eax, dword [0x006933ec]
add eax, 1
cmp dword [0x006933ec], eax
jne 0x61a064
mov eax, dword [0x00695d84]
test eax, eax
jge 0x61a01c
call fcn.0040afc0
mov ecx, dword [0x00696ac8]
test ecx, ecx
jge 0x61a02b
call fcn.0040afc0
mov edx, dword [0x006974b0]
test edx, edx
jge 0x61a03a
call fcn.0040afc0
mov r8d, dword [0x00698780]
test r8d, r8d
jge 0x61a04b
call fcn.0040afc0
mov r9d, ecx
mov r10d, edx
mov r11d, r8d
mov ecx, eax
mov edx, r9d
mov r8d, r10d
mov r9d, r11d
call sub.advapi32.dll_CryptDuplicateKey
mov eax, dword [0x006934dc]
add eax, 1
cmp dword [0x006934dc], eax
jne 0x61a0cc
mov eax, dword [0x00697444]
test eax, eax
jge 0x61a084
call fcn.0040afc0
mov ecx, dword [0x00698b2c]
test ecx, ecx
jge 0x61a093
call fcn.0040afc0
mov edx, dword [0x00693304]
test edx, edx
jge 0x61a0a2
call fcn.0040afc0
mov r8d, dword [0x006935f0]
test r8d, r8d
jge 0x61a0b3
call fcn.0040afc0
mov r9d, ecx
mov r10d, edx
mov r11d, r8d
mov ecx, eax
mov edx, r9d
mov r8d, r10d
mov r9d, r11d
call sub.advapi32.dll_CryptDuplicateKey
mov eax, dword [0x00695b88]
add eax, dword [0x00696168]
mov ecx, dword [0x006965e4]
add ecx, dword [0x00696e64]
cmp eax, ecx
jle 0x61a0ed
call fcn.004096f0
mov rcx, qword [0x004d2058]
mov dl, 1
call fcn.0040b440
mov qword [rbp + 0x13b8], rax
mov eax, dword [0x00698e4c]
mov dword [0x00698114], eax
mov rcx, qword [0x004d2058]
mov dl, 1
call fcn.0040b440
mov qword [rbp + 0x13b0], rax
nop
cmp qword [rbp + 0x13f8], 0
jbe 0x61dfd3
call fcn.00615620
cmp eax, dword [0x00693284]
jle 0x61a149
mov dword [0x00693284], 0x67
mov dword [rbp + 0x1336], 0x453
call fcn.005f3a00
call fcn.005fbed0
mov eax, dword [0x00696140]
add eax, dword [0x006965c0]
mov ecx, dword [0x00696cd4]
add ecx, dword [0x00697498]
cmp eax, ecx
jle 0x61a185
mov eax, dword [0x00697498]
mov dword [0x00696140], eax
call fcn.005ea870
mov eax, dword [0x0069320c]
mov dword [0x00698af4], eax
mov eax, dword [0x006937fc]
add eax, 1
cmp dword [0x006937fc], eax
jne 0x61a1fe
mov eax, dword [0x00696154]
test eax, eax
jge 0x61a1b6
call fcn.0040afc0
mov ecx, dword [0x00696ac4]
test ecx, ecx
jge 0x61a1c5
call fcn.0040afc0
mov edx, dword [0x006978ec]
test edx, edx
jge 0x61a1d4
call fcn.0040afc0
mov r8d, dword [0x00698b34]
test r8d, r8d
jge 0x61a1e5
call fcn.0040afc0
mov r9d, ecx
mov r10d, edx
mov r11d, r8d
mov ecx, eax
mov edx, r9d
mov r8d, r10d
mov r9d, r11d
call sub.advapi32.dll_CryptDuplicateKey
mov dword [0x006932c0], 0x307
mov eax, dword [0x006932c0]
sub eax, 0x1a5
mov dword [0x006934c8], eax
mov eax, dword [0x006a88b0]
mov dword [rbp + 0x133a], eax
lea rcx, [rbp + 0x1387]
lea rdx, [0x006a8700]
mov r8b, 0x20
call fcn.0040f3e0
mov eax, dword [0x006a88b8]
mov dword [rbp + 0x134a], eax
call fcn.005cc100
mov dword [rbp + 0x134e], eax
mov byte [rbp + 0x1366], 0
mov dword [rbp + 0x1352], 0x3eb
mov eax, dword [0x006935f8]
add eax, dword [0x00694120]
mov ecx, dword [0x006931ec]
add ecx, dword [0x00693400]
cmp ecx, eax
jle 0x61a28a
mov dword [0x006931ec], 0x50
mov ecx, dword [0x006931ec]
add ecx, dword [0x00693400]
cmp ecx, eax
jle 0x61a2a4
mov dword [0x006931ec], 0x50
mov eax, dword [0x00696a7c]
cmp eax, dword [0x00697460]
je 0x61a2be
mov eax, dword [0x00696a7c]
mov dword [0x00697460], eax
mov eax, dword [0x00698118]
mov dword [0x00697478], eax
mov qword [rbp + 0x135e], 0
mov eax, dword [0x00698118]
mov dword [0x00697478], eax
mov eax, dword [0x006965f8]
cmp eax, dword [0x00696e78]
je 0x61a2fb
mov eax, dword [0x006965f8]
mov dword [0x00696e78], eax
call fcn.005ffbe0
cmp eax, dword [0x00698e70]
jle 0x61a312
mov dword [0x00698e70], 0x3a
call fcn.006011a0
mov eax, dword [0x00698e8c]
add eax, dword [0x006933a0]
mov ecx, dword [0x0069351c]
add ecx, dword [0x006940c4]
cmp eax, ecx
jle 0x61a33d
mov dword [0x00698e8c], 0x101
mov eax, dword [0x00695d94]
add eax, dword [0x00696584]
mov ecx, dword [0x00696c9c]
add ecx, dword [0x006974c0]
cmp eax, ecx
jle 0x61a35e
call fcn.004096f0
call fcn.005ea0b0
mov eax, dword [0x0069327c]
mov dword [0x00698b04], eax
mov dword [rbp + 0x1346], 0
mov eax, dword [0x0069659c]
add eax, dword [0x00696cb4]
mov ecx, dword [0x006974d8]
add ecx, dword [0x0069897c]
cmp eax, ecx
jle 0x61a3a1
mov eax, dword [0x0069897c]
mov dword [0x0069659c], eax
mov dword [rbp + 0x1342], 0
mov eax, dword [0x006933f4]
add eax, 1
cmp dword [0x006933f4], eax
jne 0x61a3fc
mov eax, dword [0x006958e4]
test eax, eax
jge 0x61a3cb
call fcn.0040afc0
mov ecx, dword [0x006978f4]
test ecx, ecx
jge 0x61a3da
call fcn.0040afc0
mov edx, dword [0x00698e8c]
test edx, edx
jge 0x61a3e9
call fcn.0040afc0
mov r8d, ecx
mov r9d, edx
mov ecx, eax
mov edx, r8d
mov r8d, r9d
call sub.kernel32.dll_GetDiskFreeSpaceExW
mov eax, dword [0x00698968]
mov dword [0x006974c0], eax
mov eax, dword [0x00698968]
mov dword [0x006974c0], eax
mov eax, dword [0x00696e50]
cmp eax, dword [0x006974a8]
je 0x61a42e
mov eax, dword [0x00696e50]
mov dword [0x006974a8], eax
mov eax, dword [0x006932cc]
mov dword [0x00698e48], eax
mov eax, dword [0x006932cc]
mov dword [0x00698e48], eax
mov eax, dword [0x00696e78]
cmp eax, dword [0x00697e70]
je 0x61a460
mov eax, dword [0x00696e78]
mov dword [0x00697e70], eax
mov eax, dword [0x0069613c]
add eax, dword [0x006965bc]
mov ecx, dword [0x00696cd0]
add ecx, dword [0x00697494]
cmp eax, ecx
jle 0x61a488
mov eax, dword [0x00697494]
mov dword [0x0069613c], eax
mov eax, dword [0x00695bb8]
add eax, dword [0x00696198]
mov ecx, dword [0x006968a0]
add ecx, dword [0x0069742c]
cmp eax, ecx
jle 0x61a4a9
call fcn.004096f0
mov eax, dword [0x00695bb8]
add eax, dword [0x00696198]
mov ecx, dword [0x006968a0]
add ecx, dword [0x0069742c]
cmp eax, ecx
jle 0x61a4ca
call fcn.004096f0
mov eax, dword [0x00696ab8]
cmp eax, dword [0x0069749c]
je 0x61a4e4
mov eax, dword [0x00696ab8]
mov dword [0x0069749c], eax
mov dword [rbp + 0x133e], 1
xor ecx, ecx
call qword [0x006a9070]
mov dword [rbp + 0x1356], eax
mov eax, dword [0x00696168]
add eax, dword [0x006965e4]
mov ecx, dword [0x00696e64]
add ecx, dword [0x006974bc]
cmp eax, ecx
jle 0x61a524
mov eax, dword [0x006974bc]
mov dword [0x00696168], eax
mov eax, dword [0x00695b90]
mov dword [0x00695878], eax
call fcn.00606430
cmp eax, dword [0x006931d8]
jle 0x61a547
mov dword [0x006931d8], 0x54
mov eax, dword [0x00693954]
add eax, 1
cmp dword [0x00693954], eax
jne 0x61a56e
mov eax, dword [0x006974b8]
test eax, eax
jge 0x61a567
call fcn.0040afc0
mov ecx, eax
call sub.kernel32.dll_SetConsoleKeyShortcuts
mov ecx, 1
call qword [0x006a9070]
mov dword [rbp + 0x135a], eax
mov dword [rbp + 0x13a8], 0xffffffff
mov rcx, qword [rbp + 0x13f8]
lea rdx, [rbp + 0x1336]
mov r8d, 0x76
xor r9, r9
call qword [0x006a92b0]
cmp eax, 0x76
jne 0x61af6b
mov dword [rbp + 0x13a8], 0
mov eax, dword [0x0069895c]
mov dword [0x006974b8], eax
mov rcx, qword [rbp + 0x13f8]
lea rdx, [rbp + 0x1336]
mov r8d, 0x76
xor r9, r9
call qword [0x006a92b8]
cmp eax, 0x76
jne 0x61af6b
mov eax, dword [0x0069895c]
mov dword [0x006974b8], eax
mov eax, dword [0x00696e68]
cmp eax, dword [0x00697c84]
je 0x61a614
mov eax, dword [0x00696e68]
mov dword [0x00697c84], eax
call fcn.00606430
cmp eax, dword [0x006931e4]
jle 0x61a62b
mov dword [0x006931e4], 0x57
call fcn.005f20b0
mov eax, dword [0x0069350c]
add eax, 1
cmp dword [0x0069350c], eax
jne 0x61a6ae
mov eax, dword [0x00696118]
test eax, eax
jge 0x61a650
call fcn.0040afc0
mov ecx, dword [0x00696cac]
test ecx, ecx
jge 0x61a65f
call fcn.0040afc0
mov edx, dword [0x00697e6c]
test edx, edx
jge 0x61a66e
call fcn.0040afc0
mov r8d, dword [0x00693914]
test r8d, r8d
jge 0x61a67f
call fcn.0040afc0
mov r9d, dword [0x006942e8]
test r9d, r9d
jge 0x61a690
call fcn.0040afc0
mov r10d, ecx
mov r11d, edx
mov ebx, r8d
mov dword [rsp + 0x20], r9d
mov ecx, eax
mov edx, r10d
mov r8d, r11d
mov r9d, ebx
call sub.kernel32.dll_LockFile
mov eax, dword [0x00698b00]
mov dword [0x00697e74], eax
mov eax, dword [0x00698e84]
add eax, dword [0x0069339c]
mov ecx, dword [0x00693518]
add ecx, dword [0x006940bc]
cmp eax, ecx
jle 0x61a6e0
mov dword [0x00698e84], 0x27
cmp dword [rbp + 0x13a8], 0xffffffff
jne 0x61a6fc
mov byte [0x00698f80], 1
mov dword [rbp + 0x13ac], 1
jmp 0x61a70b
mov dword [rbp + 0x13ac], 0
jmp 0x61dec2
mov rax, qword [rbp + 0x135e]
test rax, rax
jle 0x61af6b
cmp dword [rbp + 0x13a8], 0xffffffff
jne 0x61af6b
mov ecx, dword [0x00695b94]
mov dword [0x0069581c], ecx
mov rcx, qword [rbp + 0x13f8]
mov rdx, qword [rbp + 0x13c8]
mov r8, rax
call fcn.00605650
test al, al
je 0x61af6b
mov eax, dword [0x00698118]
mov dword [0x00697474], eax
mov rcx, qword [rbp + 0x13c8]
mov rax, qword [rbp + 0x13c8]
mov rax, qword [rax]
call qword [rax]
mov qword [rbp + 0x1328], rax
mov eax, dword [0x00695bb0]
add eax, dword [0x00696190]
mov ecx, dword [0x00696894]
add ecx, dword [0x00696cc4]
cmp eax, ecx
jle 0x61a799
call fcn.004096f0
call fcn.00606240
cmp eax, dword [0x00693290]
jle 0x61a7b0
mov dword [0x00693290], 0x69
call fcn.00606240
cmp eax, dword [0x006931c8]
jle 0x61a7c7
mov dword [0x006931c8], 0x4f
mov eax, dword [0x00698140]
mov dword [0x0069749c], eax
mov rcx, qword [rbp + 0x13c8]
xor edx, edx
xor r8, r8
mov rax, qword [rbp + 0x13c8]
mov rax, qword [rax]
call qword [rax + 0x48]
mov eax, dword [0x00693558]
add eax, 1
cmp dword [0x00693558], eax
jne 0x61a813
mov eax, dword [0x006934f0]
test eax, eax
jge 0x61a80c
call fcn.0040afc0
mov ecx, eax
call sub.kernel32.dll_SetConsoleKeyShortcuts
mov eax, dword [0x0069355c]
add eax, 1
cmp dword [0x0069355c], eax
jne 0x61af5d
mov eax, dword [0x00697e74]
test eax, eax
jge 0x61a837
call fcn.0040afc0
mov ecx, eax
call sub.kernel32.dll_SetConsoleKeyShortcuts
jmp 0x61af5d
mov rcx, qword [rbp + 0x13c8]
lea rdx, [rbp + 0x376]
mov r8d, 0x52
call fcn.004fab00
mov eax, dword [rbp + 0x37a]
sub eax, 1
test eax, eax
je 0x61a885
sub eax, 1
test eax, eax
je 0x61a950
sub eax, 1
test eax, eax
jne 0x61af55
jmp 0x61ae9b
mov dword [rbp + 0x13ac], 2
mov rax, qword [rbp + 0x13f8]
mov qword [0x006a94b0], rax
cmp byte [rbp + 0x13f0], 0
jne 0x61a946
lea rcx, [rbp + 0x318]
lea rdx, [0x00693087]
mov r8d, 0xe
mov r9d, 0x2d
call fcn.00597b20
lea rcx, [rbp + 0x320]
mov rdx, qword [rbp + 0x318]
xor r8, r8
call fcn.005a8ac0
mov rcx, qword [rbp + 0x320]
call fcn.005d19f0
mov qword [rbp + 0x368], rax
xor ecx, ecx
xor edx, edx
lea r8, [fcn.00607420]
xor r9, r9
mov dword [rsp + 0x20], 0
lea rax, [rbp + 0x364]
mov qword [rsp + 0x28], rax
call qword [0x006a8d38]
call fcn.005ff400
mov rcx, qword [rbp + 0x368]
mov edx, 0x7d0
call qword [0x006a8b98]
mov rcx, qword [rbp + 0x368]
call qword [0x006a8da8]
jmp 0x61decf
call fcn.00607420
jmp 0x61dec2
lea rcx, [rbp + 0x308]
lea rdx, [rbp + 0x39f]
call fcn.0040ff20
lea rcx, [rbp + 0x310]
mov rdx, qword [rbp + 0x308]
xor r8, r8
call fcn.005a8540
mov rcx, qword [rbp + 0x310]
call fcn.005a7e80
mov dword [0x006a88c0], eax
lea rcx, [rbp + 0x2f0]
lea rdx, [0x006924a5]
mov r8d, 7
mov r9d, 0x2d
call fcn.00597b20
lea rcx, [rbp + 0x2f8]
mov rdx, qword [rbp + 0x2f0]
xor r8, r8
call fcn.005a8ac0
lea rcx, [rbp + 0x2e0]
lea rdx, [0x006924cf]
mov r8d, 6
mov r9d, 0x2d
call fcn.00597b20
lea rcx, [rbp + 0x2e8]
mov rdx, qword [rbp + 0x2e0]
xor r8, r8
call fcn.005a8ac0
lea rcx, [rbp + 0x2b8]
lea rdx, [0x006a8721]
mov r8d, 1
mov r9d, 5
call fcn.0040f4b0
lea rcx, [rbp + 0x2b0]
lea rdx, [rbp + 0x2b8]
call fcn.0040ff20
lea rcx, [rbp + 0x300]
mov edx, 4
mov r8, qword [rbp + 0x2f8]
mov r9, qword [rbp + 0x2e8]
mov rax, qword [rbp + 0x2b0]
mov qword [rsp + 0x20], rax
lea rax, [0x0061e904]
mov qword [rsp + 0x28], rax
call fcn.00410400
mov rcx, qword [rbp + 0x300]
lea rdx, [0x006a82f0]
mov r8d, 0x650
call fcn.005d0a10
test al, al
je 0x61af55
mov eax, dword [0x00696ab8]
mov dword [0x00696148], eax
mov eax, dword [0x00698978]
mov dword [0x006974d0], eax
mov eax, dword [0x00698978]
mov dword [0x006974d0], eax
mov eax, dword [0x006965a0]
cmp eax, dword [0x00696cb8]
je 0x61aac5
mov eax, dword [0x006965a0]
mov dword [0x00696cb8], eax
call fcn.005ea870
lea rcx, [rbp + 0x2a8]
lea rdx, [0x006a84f8]
mov r8d, 0x104
call fcn.0040ff40
lea rcx, [rbp + 0x2a0]
lea rdx, [0x006a8829]
call fcn.0040ff20
lea rcx, [rbp + 0x2a8]
mov rdx, qword [rbp + 0x2a0]
call fcn.00410070
lea rcx, [rbp + 0x298]
mov rdx, qword [rbp + 0x2a8]
call fcn.004108b0
mov rcx, qword [rbp + 0x298]
mov dl, 1
call fcn.0042f710
test al, al
je 0x61af55
mov eax, dword [0x00695bd4]
add eax, dword [0x006962c8]
mov ecx, dword [0x006968bc]
add ecx, dword [0x0069744c]
cmp eax, ecx
jle 0x61ab54
call fcn.004096f0
mov eax, dword [0x0069615c]
mov dword [0x00695944], eax
mov eax, dword [0x006933c0]
add eax, dword [0x00693538]
mov ecx, dword [0x006940e0]
add ecx, dword [0x006942e4]
cmp eax, ecx
jle 0x61ab86
mov dword [0x006933c0], 0xbf
call fcn.00615620
cmp eax, dword [0x006931c8]
jle 0x61ab9d
mov dword [0x006931c8], 0x50
call fcn.00616be0
cmp eax, dword [0x006932c8]
jle 0x61abb4
mov dword [0x006932c8], 0x78
mov eax, dword [0x00693438]
add eax, 1
cmp dword [0x00693438], eax
jne 0x61ac05
mov eax, dword [0x0069630c]
test eax, eax
jge 0x61abd4
call fcn.0040afc0
mov ecx, dword [0x0069742c]
test ecx, ecx
jge 0x61abe3
call fcn.0040afc0
mov edx, dword [0x00698130]
test edx, edx
jge 0x61abf2
call fcn.0040afc0
mov r8d, ecx
mov r9d, edx
mov ecx, eax
mov edx, r8d
mov r8d, r9d
call sub.kernel32.dll_GetDiskFreeSpaceExW
mov eax, dword [0x006933c0]
add eax, dword [0x00693538]
mov ecx, dword [0x006940e0]
add ecx, dword [0x006942e4]
cmp eax, ecx
jle 0x61ac2b
mov dword [0x006933c0], 0xbf
mov eax, dword [0x00696a7c]
cmp eax, dword [0x00697464]
je 0x61ac45
mov eax, dword [0x00696a7c]
mov dword [0x00697464], eax
mov rcx, qword [rbp + 0x13c0]
call fcn.004fd260
lea rcx, [rbp + 0x290]
lea rdx, [0x006a84f8]
mov r8d, 0x104
call fcn.0040ff40
lea rcx, [rbp + 0x288]
lea rdx, [0x006a8829]
call fcn.0040ff20
lea rcx, [rbp + 0x290]
mov rdx, qword [rbp + 0x288]
call fcn.00410070
lea rcx, [rbp + 0x280]
mov rdx, qword [rbp + 0x290]
call fcn.004108b0
mov rcx, qword [rbp + 0x13c0]
mov rdx, qword [rbp + 0x280]
call fcn.004fd2e0
call fcn.00612df0
cmp eax, dword [0x006931f8]
jle 0x61acce
mov dword [0x006931f8], 0x5c
mov eax, dword [0x00693294]
mov dword [0x00698e70], eax
mov eax, dword [0x00696180]
add eax, dword [0x00696600]
mov ecx, dword [0x00696cb4]
add ecx, dword [0x006974d8]
cmp eax, ecx
jle 0x61ad02
mov eax, dword [0x006974d8]
mov dword [0x00696180], eax
call fcn.00601250
cmp eax, dword [0x00698e94]
jle 0x61ad19
mov dword [0x00698e94], 0x44
lea rcx, [rbp + 0x270]
lea rdx, [0x00692928]
mov r8d, 3
mov r9d, 0x2d
call fcn.00597b20
lea rcx, [rbp + 0x278]
mov rdx, qword [rbp + 0x270]
xor r8, r8
call fcn.005a8ac0
lea rcx, [rbp + 0x834]
mov rdx, qword [rbp + 0x13c0]
mov r8, qword [rbp + 0x278]
call fcn.005ddb10
cmp byte [rbp + 0x128d], 0
je 0x61af55
mov eax, dword [0x00696180]
add eax, dword [0x00696600]
mov ecx, dword [0x00696cb4]
add ecx, dword [0x006974d8]
cmp eax, ecx
jle 0x61ad9f
mov eax, dword [0x006974d8]
mov dword [0x00696180], eax
mov eax, dword [0x006968c0]
cmp eax, dword [0x00697450]
je 0x61adb9
mov eax, dword [0x006968c0]
mov dword [0x00697450], eax
mov eax, dword [0x00696148]
add eax, dword [0x0069631c]
mov ecx, dword [0x00696ab8]
add ecx, dword [0x006974a0]
cmp eax, ecx
jle 0x61ade1
mov eax, dword [0x006974a0]
mov dword [0x00696148], eax
mov eax, dword [0x006931e4]
add eax, dword [0x006933f8]
mov ecx, dword [0x006935f0]
add ecx, dword [0x006940b8]
cmp eax, ecx
jle 0x61ae07
mov dword [0x006931e4], 0x14f
mov eax, dword [0x00698ae4]
mov dword [0x006978fc], eax
mov eax, dword [0x00695bd4]
add eax, dword [0x006962c8]
mov ecx, dword [0x006968b8]
add ecx, dword [0x00697448]
cmp eax, ecx
jle 0x61ae34
call fcn.004096f0
call fcn.005fbf20
lea rcx, [rbp + 0x268]
lea rdx, [rbp + 0x128d]
call fcn.0040ff20
lea rcx, [rbp + 0x3c8]
mov edx, 3
xor r8, r8
mov r9, qword [rbp + 0x268]
movzx rax, byte [0x006a8aa8]
mov byte [rsp + 0x20], al
movzx rax, byte [rbp + 0x12de]
mov byte [rsp + 0x28], al
call fcn.005daf30
mov eax, dword [rbp + 0x3d8]
test eax, eax
jge 0x61ae8f
call fcn.0040afc0
mov ecx, eax
call fcn.005d2d20
jmp 0x61af55
lea rcx, [rbp + 0x258]
lea rdx, [rbp + 0x39f]
call fcn.0040ff20
lea rcx, [rbp + 0x260]
mov rdx, qword [rbp + 0x258]
xor r8, r8
call fcn.005a8540
mov rcx, qword [rbp + 0x260]
call fcn.005a7e80
mov dword [rbp + 0x338], eax
mov dword [rbp + 0x33c], 0x1bb
lea rcx, [rbp + 0x340]
lea rdx, [0x006a8700]
mov r8b, 0x20
call fcn.0040f3e0
mov rcx, qword [0x006a8a40]
call fcn.005d19f0
mov qword [rbp + 0x368], rax
xor ecx, ecx
xor edx, edx
lea r8, [0x00618ee0]
lea r9, [rbp + 0x338]
mov dword [rsp + 0x20], 0
lea rax, [rbp + 0x364]
mov qword [rsp + 0x28], rax
call qword [0x006a8d38]
mov rcx, qword [rbp + 0x368]
mov edx, 0x3e8
call qword [0x006a8b98]
mov rcx, qword [rbp + 0x368]
call qword [0x006a8da8]
sub qword [rbp + 0x1328], 0x52
cmp qword [rbp + 0x1328], 0
jg 0x61a843
mov dword [rbp + 0x1336], 0x44c
mov dword [rbp + 0x13a8], 0xffffffff
mov dword [0x006932fc], 0x33a
mov eax, dword [0x006932fc]
sub eax, 0x1be
mov dword [0x0069344c], eax
call fcn.006179b0
cmp eax, dword [0x0069327c]
jle 0x61afb2
mov dword [0x0069327c], 0x65
mov eax, dword [0x006932ec]
add eax, 1
cmp dword [0x006932ec], eax
jne 0x61b01a
mov eax, dword [0x006940e4]
test eax, eax
jge 0x61afd2
call fcn.0040afc0
mov ecx, dword [0x00695910]
test ecx, ecx
jge 0x61afe1
call fcn.0040afc0
mov edx, dword [0x00696128]
test edx, edx
jge 0x61aff0
call fcn.0040afc0
mov r8d, dword [0x006965a8]
test r8d, r8d
jge 0x61b001
call fcn.0040afc0
mov r9d, ecx
mov r10d, edx
mov r11d, r8d
mov ecx, eax
mov edx, r9d
mov r8d, r10d
mov r9d, r11d
call sub.advapi32.dll_CryptDuplicateKey
mov eax, dword [0x006931d8]
mov dword [0x006989a0], eax
mov eax, dword [0x006958c4]
mov dword [0x00694300], eax
mov eax, dword [0x00695bd8]
add eax, dword [0x00696158]
mov ecx, dword [0x00696574]
add ecx, dword [0x00696ac8]
cmp eax, ecx
jle 0x61b05a
mov eax, dword [0x00696ac8]
mov dword [0x00695bd8], eax
mov rcx, qword [rbp + 0x13f8]
lea rdx, [rbp + 0x1336]
mov r8d, 0x76
xor r9, r9
call qword [0x006a92b0]
cmp eax, 0x76
jne 0x61d413
mov rcx, qword [rbp + 0x13f8]
lea rdx, [rbp + 0x1336]
mov r8d, 0x76
xor r9, r9
call qword [0x006a92b8]
cmp eax, 0x76
jne 0x61d413
mov rax, qword [rbp + 0x135e]
test rax, rax
jle 0x61d381
cmp dword [rbp + 0x13a8], 0xffffffff
jne 0x61d381
mov rcx, qword [rbp + 0x13f8]
mov rdx, qword [rbp + 0x13c8]
mov r8, rax
call fcn.00605650
test al, al
je 0x61d413
nop
lea rcx, [rbp + 0x250]
lea rdx, [0x006a84f8]
mov r8d, 0x104
call fcn.0040ff40
lea rcx, [rbp + 0x248]
lea rdx, [0x006a8808]
call fcn.0040ff20
lea rcx, [rbp + 0x250]
mov rdx, qword [rbp + 0x248]
call fcn.00410070
lea rcx, [rbp + 0x240]
mov rdx, qword [rbp + 0x250]
call fcn.004108b0
mov rcx, qword [rbp + 0x240]
mov dl, 1
call fcn.0042f710
test al, al
je 0x61b1b1
lea rcx, [rbp + 0x238]
lea rdx, [0x006a84f8]
mov r8d, 0x104
call fcn.0040ff40
lea rcx, [rbp + 0x230]
lea rdx, [0x006a8808]
call fcn.0040ff20
lea rcx, [rbp + 0x238]
mov rdx, qword [rbp + 0x230]
call fcn.00410070
lea rcx, [rbp + 0x228]
mov rdx, qword [rbp + 0x238]
call fcn.004108b0
mov rcx, qword [rbp + 0x13c0]
mov rdx, qword [rbp + 0x228]
call fcn.004fd2e0
jmp 0x61b1bd
mov rcx, qword [rbp + 0x13c0]
call fcn.004fd260
mov rcx, qword [rbp + 0x13c0]
mov rax, qword [rbp + 0x13c0]
mov rax, qword [rax]
call qword [rax]
mov qword [rbp + 0x1318], rax
jmp 0x61b1e1
mov eax, dword [0x00698970]
mov dword [0x006974c8], eax
mov eax, dword [0x00695b9c]
add eax, dword [0x00696118]
mov ecx, dword [0x00696598]
add ecx, dword [0x00696a8c]
cmp eax, ecx
jle 0x61b215
mov eax, dword [0x00696a8c]
mov dword [0x00695b9c], eax
mov eax, dword [0x006934b4]
add eax, 1
cmp dword [0x006934b4], eax
jne 0x61b27d
mov eax, dword [0x006942b0]
test eax, eax
jge 0x61b235
call fcn.0040afc0
mov ecx, dword [0x00695bd4]
test ecx, ecx
jge 0x61b244
call fcn.0040afc0
mov edx, dword [0x00696324]
test edx, edx
jge 0x61b253
call fcn.0040afc0
mov r8d, dword [0x00696ac0]
test r8d, r8d
jge 0x61b264
call fcn.0040afc0
mov r9d, ecx
mov r10d, edx
mov r11d, r8d
mov ecx, eax
mov edx, r9d
mov r8d, r10d
mov r9d, r11d
call sub.advapi32.dll_CryptDuplicateKey
mov rcx, qword [rbp + 0x13c8]
mov rax, qword [rbp + 0x13c8]
mov rax, qword [rax]
call qword [rax]
mov ecx, 0xffffffff
cmp rax, rcx
jbe 0x61b2a0
call fcn.0040afc0
lea rcx, [rbp + 0x220]
mov rdx, qword [rbp + 0x13c8]
mov rdx, qword [rdx + 8]
mov r8d, eax
call fcn.005a9750
mov rcx, qword [rbp + 0x3f0]
mov rdx, qword [rbp + 0x220]
call fcn.0040fb90
test eax, eax
je 0x61b30e
mov rcx, qword [rbp + 0x13c8]
mov rax, qword [rbp + 0x13c8]
mov rax, qword [rax]
call qword [rax]
mov ecx, 0xffffffff
cmp rax, rcx
jbe 0x61b2f4
call fcn.0040afc0
lea rcx, [rbp + 0x3f0]
mov rdx, qword [rbp + 0x13c8]
mov rdx, qword [rdx + 8]
mov r8d, eax
call fcn.005a9750
mov qword [rbp + 0x1320], 0
mov rcx, qword [rbp + 0x13c8]
mov rax, qword [rbp + 0x13c8]
mov rax, qword [rax]
call qword [rax]
mov qword [rbp + 0x1328], rax
jmp 0x61d202
mov rcx, qword [rbp + 0x13c8]
mov rdx, qword [rbp + 0x1320]
xor r8, r8
mov rax, qword [rbp + 0x13c8]
mov rax, qword [rax]
call qword [rax + 0x50]
mov rcx, qword [rbp + 0x13c8]
lea rdx, [rbp + 0x12f7]
mov r8d, 0x21
call fcn.004fab00
mov eax, dword [0x00695be0]
add eax, dword [0x0069615c]
mov ecx, dword [0x006965dc]
add ecx, dword [0x00696c90]
cmp eax, ecx
jle 0x61b391
call fcn.004096f0
mov eax, dword [0x006940b8]
sub eax, dword [0x00693510]
mov dword [0x00693510], eax
mov eax, dword [0x006933c4]
add eax, 1
cmp dword [0x006933c4], eax
jne 0x61b3f4
mov eax, dword [0x0069339c]
test eax, eax
jge 0x61b3c3
call fcn.0040afc0
mov ecx, dword [0x00693950]
test ecx, ecx
jge 0x61b3d2
call fcn.0040afc0
mov edx, dword [0x00696a70]
test edx, edx
jge 0x61b3e1
call fcn.0040afc0
mov r8d, ecx
mov r9d, edx
mov ecx, eax
mov edx, r8d
mov r8d, r9d
call sub.kernel32.dll_GetDiskFreeSpaceExW
call fcn.00615620
cmp eax, dword [0x006931c8]
jle 0x61b40b
mov dword [0x006931c8], 0x50
call fcn.005e9180
mov eax, dword [0x006989b0]
add eax, dword [0x006931e8]
mov ecx, dword [0x00693308]
add ecx, dword [0x00693514]
cmp eax, ecx
jle 0x61b436
mov dword [0x006989b0], 0x110
mov eax, dword [0x00695b9c]
add eax, dword [0x0069611c]
mov ecx, dword [0x00696598]
add ecx, dword [0x00696a8c]
cmp eax, ecx
jle 0x61b457
call fcn.004096f0
mov eax, dword [0x0069354c]
add eax, 1
cmp dword [0x0069354c], eax
jne 0x61b4a8
mov eax, dword [0x006940a8]
test eax, eax
jge 0x61b477
call fcn.0040afc0
mov ecx, dword [0x006958d4]
test ecx, ecx
jge 0x61b486
call fcn.0040afc0
mov edx, dword [0x00695d78]
test edx, edx
jge 0x61b495
call fcn.0040afc0
mov r8d, ecx
mov r9d, edx
mov ecx, eax
mov edx, r8d
mov r8d, r9d
call sub.kernel32.dll_GetDiskFreeSpaceExW
mov eax, dword [0x00698108]
mov dword [0x00697464], eax
lea rcx, [rbp + 0x218]
lea rdx, [rbp + 0x12f7]
call fcn.004109a0
lea rcx, [rbp + 0x13c0]
mov rdx, qword [rbp + 0x218]
mov r8b, 1
call fcn.005da9a0
test al, al
jne 0x61d1f2
mov dword [rbp + 0x1336], 0x44d
mov eax, dword [0x006a88b0]
mov dword [rbp + 0x133a], eax
mov eax, dword [0x00695bb4]
add eax, dword [0x00696134]
mov ecx, dword [0x006965b0]
add ecx, dword [0x00696aa4]
cmp eax, ecx
jle 0x61b523
mov eax, dword [0x00696aa4]
mov dword [0x00695bb4], eax
mov eax, dword [0x0069344c]
add eax, 1
cmp dword [0x0069344c], eax
jne 0x61b574
mov eax, dword [0x00696ab4]
test eax, eax
jge 0x61b543
call fcn.0040afc0
mov ecx, dword [0x006978dc]
test ecx, ecx
jge 0x61b552
call fcn.0040afc0
mov edx, dword [0x006989a0]
test edx, edx
jge 0x61b561
call fcn.0040afc0
mov r8d, ecx
mov r9d, edx
mov ecx, eax
mov edx, r8d
mov r8d, r9d
call sub.kernel32.dll_GetDiskFreeSpaceExW
mov eax, dword [0x006934e4]
add eax, 1
cmp dword [0x006934e4], eax
jne 0x61b5c5
mov eax, dword [0x006934fc]
test eax, eax
jge 0x61b594
call fcn.0040afc0
mov ecx, dword [0x00694104]
test ecx, ecx
jge 0x61b5a3
call fcn.0040afc0
mov edx, dword [0x00695850]
test edx, edx
jge 0x61b5b2
call fcn.0040afc0
mov r8d, ecx
mov r9d, edx
mov ecx, eax
mov edx, r8d
mov r8d, r9d
call sub.kernel32.dll_GetDiskFreeSpaceExW
mov eax, dword [0x00695bb4]
add eax, dword [0x00696134]
mov ecx, dword [0x006965b0]
add ecx, dword [0x00696aa4]
cmp eax, ecx
jle 0x61b5ed
mov eax, dword [0x00696aa4]
mov dword [0x00695bb4], eax
mov eax, dword [0x00696ab0]
cmp eax, dword [0x00697498]
je 0x61b607
mov eax, dword [0x00696ab0]
mov dword [0x00697498], eax
mov eax, dword [0x0069583c]
mov dword [0x006940f0], eax
mov eax, dword [0x006937fc]
add eax, 1
cmp dword [0x006937fc], eax
jne 0x61b691
mov eax, dword [0x00698b30]
test eax, eax
jge 0x61b633
call fcn.0040afc0
mov ecx, dword [0x006933fc]
test ecx, ecx
jge 0x61b642
call fcn.0040afc0
mov edx, dword [0x0069394c]
test edx, edx
jge 0x61b651
call fcn.0040afc0
mov r8d, dword [0x00695808]
test r8d, r8d
jge 0x61b662
call fcn.0040afc0
mov r9d, dword [0x00695948]
test r9d, r9d
jge 0x61b673
call fcn.0040afc0
mov r10d, ecx
mov r11d, edx
mov ebx, r8d
mov dword [rsp + 0x20], r9d
mov ecx, eax
mov edx, r10d
mov r8d, r11d
mov r9d, ebx
call sub.kernel32.dll_LockFile
lea rcx, [rbp + 0x1387]
lea rdx, [0x006a8700]
mov r8b, 0x20
call fcn.0040f3e0
mov eax, dword [0x006a88b8]
mov dword [rbp + 0x134a], eax
mov eax, dword [0x006989a0]
mov dword [0x006980dc], eax
mov eax, dword [0x00698b30]
add eax, dword [0x006932a8]
mov ecx, dword [0x006933f8]
add ecx, dword [0x006935f4]
cmp eax, ecx
jle 0x61b6e5
mov dword [0x00698b30], 0x183
mov eax, dword [0x006980d8]
mov dword [0x00697498], eax
call fcn.005ea1d0
mov eax, dword [0x006980d8]
mov dword [0x00697498], eax
mov eax, dword [0x00696cbc]
cmp eax, dword [0x0069747c]
je 0x61b71c
mov eax, dword [0x00696cbc]
mov dword [0x0069747c], eax
mov dword [0x006931cc], 0x316
mov eax, dword [0x006931cc]
sub eax, 0x19e
mov dword [0x006933dc], eax
mov eax, dword [0x00696150]
add eax, dword [0x006965d0]
mov ecx, dword [0x00696e50]
add ecx, dword [0x006974a8]
cmp eax, ecx
jle 0x61b760
mov eax, dword [0x006974a8]
mov dword [0x00696150], eax
call fcn.005cc100
mov dword [rbp + 0x134e], eax
mov dword [rbp + 0x1352], 0x3eb
xor ecx, ecx
call qword [0x006a9070]
mov dword [rbp + 0x1356], eax
mov ecx, 1
call qword [0x006a9070]
mov dword [rbp + 0x135a], eax
lea rcx, [rbp + 0x1366]
lea rdx, [rbp + 0x12f7]
mov r8b, 0x20
call fcn.0040f3e0
mov eax, dword [0x006942f0]
mov dword [0x0069397c], eax
mov eax, dword [0x006962e8]
add eax, dword [0x006965f0]
mov ecx, dword [0x00696e70]
add ecx, dword [0x00697c8c]
cmp eax, ecx
jle 0x61b7df
mov eax, dword [0x00697c8c]
mov dword [0x006962e8], eax
mov eax, dword [0x00693568]
add eax, 1
cmp dword [0x00693568], eax
jne 0x61b85d
mov eax, dword [0x00698100]
test eax, eax
jge 0x61b7ff
call fcn.0040afc0
mov ecx, dword [0x006931fc]
test ecx, ecx
jge 0x61b80e
call fcn.0040afc0
mov edx, dword [0x006934c8]
test edx, edx
jge 0x61b81d
call fcn.0040afc0
mov r8d, dword [0x00693964]
test r8d, r8d
jge 0x61b82e
call fcn.0040afc0
mov r9d, dword [0x00695820]
test r9d, r9d
jge 0x61b83f
call fcn.0040afc0
mov r10d, ecx
mov r11d, edx
mov ebx, r8d
mov dword [rsp + 0x20], r9d
mov ecx, eax
mov edx, r10d
mov r8d, r11d
mov r9d, ebx
call sub.kernel32.dll_LockFile
mov rcx, qword [rbp + 0x13f8]
lea rdx, [rbp + 0x1336]
mov r8d, 0x76
xor r9, r9
call qword [0x006a92b0]
cmp eax, 0x76
jne 0x61d1f2
mov rcx, qword [rbp + 0x13f8]
lea rdx, [rbp + 0x1336]
mov r8d, 0x76
xor r9, r9
call qword [0x006a92b8]
cmp eax, 0x76
jne 0x61d1f2
call fcn.005fbed0
cmp qword [rbp + 0x135e], 0
jle 0x61d1f2
cmp dword [rbp + 0x13a8], 0xffffffff
jne 0x61d1f2
mov eax, dword [0x00695d70]
add eax, dword [0x006961a4]
mov ecx, dword [0x006968ac]
add ecx, dword [0x0069743c]
cmp eax, ecx
jle 0x61b8ec
call fcn.004096f0
mov dword [0x006931cc], 0x2f8
mov eax, dword [0x006931cc]
sub eax, 0x19e
mov dword [0x006933e0], eax
mov eax, dword [0x006934ec]
add eax, 1
cmp dword [0x006934ec], eax
jne 0x61b92f
mov eax, dword [0x0069746c]
test eax, eax
jge 0x61b928
call fcn.0040afc0
mov ecx, eax
call sub.kernel32.dll_SetConsoleKeyShortcuts
mov eax, dword [0x00698e54]
mov dword [0x0069811c], eax
mov eax, dword [0x00696198]
add eax, dword [0x006968a0]
mov ecx, dword [0x00696ccc]
add ecx, dword [0x006978d0]
cmp eax, ecx
jle 0x61b963
mov eax, dword [0x006978d0]
mov dword [0x00696198], eax
mov rcx, qword [rbp + 0x13b8]
call fcn.004fd260
mov rcx, qword [rbp + 0x13f8]
mov rdx, qword [rbp + 0x13b8]
mov r8, qword [rbp + 0x135e]
call fcn.00605650
test al, al
je 0x61d1f2
mov rcx, qword [rbp + 0x13b8]
xor edx, edx
xor r8, r8
mov rax, qword [rbp + 0x13b8]
mov rax, qword [rax]
call qword [rax + 0x48]
mov eax, dword [0x00695ba0]
mov dword [0x00695828], eax
mov eax, dword [0x00695d78]
add eax, dword [0x00696320]
mov ecx, dword [0x006968b4]
add ecx, dword [0x00697440]
cmp eax, ecx
jle 0x61b9de
mov eax, dword [0x00697440]
mov dword [0x00695d78], eax
mov eax, dword [0x00698e60]
add eax, dword [0x006932e8]
mov ecx, dword [0x006934f0]
add ecx, dword [0x00694098]
cmp eax, ecx
jle 0x61ba04
mov dword [0x00698e60], 0xad
call fcn.005ea870
call fcn.006011a0
cmp eax, dword [0x00698e80]
jle 0x61ba20
mov dword [0x00698e80], 0x3f
mov eax, dword [0x00695d80]
mov dword [0x0069593c], eax
mov eax, dword [0x00698ae8]
mov dword [0x00697c80], eax
mov eax, dword [0x006962e0]
add eax, dword [0x00696a7c]
mov ecx, dword [0x00697464]
add ecx, dword [0x00697c84]
cmp eax, ecx
jle 0x61ba60
mov eax, dword [0x00697c84]
mov dword [0x006962e0], eax
mov rcx, qword [rbp + 0x13b8]
lea rdx, [rbp + 0x834]
mov r8d, 0xac3
call fcn.004fab00
mov rcx, qword [rbp + 0x13b0]
call fcn.004fd260
mov rcx, qword [rbp + 0x13b0]
mov rdx, qword [rbp + 0x13b8]
mov r8, qword [rbp + 0x12d6]
call fcn.004fbf30
mov eax, dword [0x00698984]
mov dword [0x00697e78], eax
mov eax, dword [0x00698984]
mov dword [0x00697e78], eax
mov eax, dword [0x00696cc4]
cmp eax, dword [0x006978c8]
je 0x61bad2
mov eax, dword [0x00696cc4]
mov dword [0x006978c8], eax
call fcn.00618820
cmp eax, dword [0x006932b0]
jle 0x61bae9
mov dword [0x006932b0], 0x72
mov eax, dword [0x00698e88]
add eax, dword [0x006933a0]
mov ecx, dword [0x006934b8]
add ecx, dword [0x00693954]
cmp eax, ecx
jle 0x61bb0f
mov dword [0x00698e88], 0x13f
cmp dword [rbp + 0x83c], 0xffffffff
jne 0x61d1f2
mov qword [rbp + 0x12d6], 0
mov qword [rbp + 0x834], 0
lea rcx, [rbp + 0x210]
lea rdx, [rbp + 0x834]
mov r8d, 0xac3
call fcn.005a9750
lea rcx, [rbp + 0x13b0]
mov rdx, qword [0x006a8a98]
mov r8, qword [rbp + 0x210]
call fcn.005abab0
test al, al
je 0x61d1f2
cmp dword [rbp + 0x12d2], 1
jne 0x61bb91
lea rcx, [rbp + 0x13b0]
call fcn.005ad830
test al, al
jne 0x61bb91
mov dword [rbp + 0x12ca], 0xffffffff
mov eax, dword [rbp + 0x12ca]
cmp eax, 3
jg 0x61bbbc
cmp eax, 3
je 0x61bef5
sub eax, 1
test eax, eax
je 0x61bbd7
sub eax, 1
test eax, eax
jne 0x61d1f2
jmp 0x61bd6d
sub eax, 4
test eax, eax
je 0x61bfe8
sub eax, 1
test eax, eax
jne 0x61d1f2
jmp 0x61c37d
lea rcx, [rbp + 0x200]
call fcn.005ce590
lea rcx, [rbp + 0x1f8]
mov rdx, qword [rbp + 0x200]
call fcn.004108b0
lea rcx, [rbp + 0x208]
mov rdx, qword [rbp + 0x1f8]
call fcn.005a6760
lea rcx, [rbp + 0x1f0]
lea rdx, [rbp + 0xa4c]
mov r8d, 0x104
call fcn.00410830
lea rcx, [rbp + 0x208]
mov rdx, qword [rbp + 0x1f0]
call fcn.00410aa0
lea rcx, [rbp + 0x1e8]
mov rdx, qword [rbp + 0x208]
call fcn.004108e0
mov rcx, qword [rbp + 0x1e8]
mov rdx, qword [rbp + 0x13b0]
call fcn.005d2300
test al, al
je 0x61d1f2
mov eax, dword [0x00698e88]
add eax, dword [0x006933a0]
mov ecx, dword [0x006934b8]
add ecx, dword [0x00693954]
cmp eax, ecx
jle 0x61bc8a
mov dword [0x00698e88], 0x13f
mov eax, dword [0x00696a6c]
cmp eax, dword [0x00696e58]
je 0x61bca4
mov eax, dword [0x00696a6c]
mov dword [0x00696e58], eax
lea rcx, [rbp + 0x1c0]
call fcn.005ce590
lea rcx, [rbp + 0x1b8]
mov rdx, qword [rbp + 0x1c0]
call fcn.004108b0
lea rcx, [rbp + 0x1c8]
mov rdx, qword [rbp + 0x1b8]
call fcn.005a6760
lea rcx, [rbp + 0x1b0]
lea rdx, [rbp + 0xa4c]
mov r8d, 0x104
call fcn.00410830
lea rcx, [rbp + 0x1c8]
mov rdx, qword [rbp + 0x1b0]
call fcn.00410aa0
lea rcx, [rbp + 0x1a8]
mov rdx, qword [rbp + 0x1c8]
call fcn.004108e0
lea rcx, [rbp + 0x1a0]
lea rdx, [rbp + 0x1064]
mov r8d, 0x104
call fcn.0040ff40
lea rcx, [rbp + 0x1d0]
mov edx, 1
mov r8, qword [rbp + 0x1a8]
mov r9, qword [rbp + 0x1a0]
movzx rax, byte [0x006a8aa8]
mov byte [rsp + 0x20], al
movzx rax, byte [rbp + 0x12de]
mov byte [rsp + 0x28], al
call fcn.005daf30
jmp 0x61d1f2
mov eax, dword [0x00695bd4]
add eax, dword [0x006962c4]
mov ecx, dword [0x006968b8]
add ecx, dword [0x00696e4c]
cmp eax, ecx
jle 0x61bd95
mov eax, dword [0x00696e4c]
mov dword [0x00695bd4], eax
lea rcx, [rbp + 0x190]
call fcn.005ce590
lea rcx, [rbp + 0x188]
mov rdx, qword [rbp + 0x190]
call fcn.004108b0
lea rcx, [rbp + 0x198]
mov rdx, qword [rbp + 0x188]
call fcn.005a6760
lea rcx, [rbp + 0x180]
lea rdx, [rbp + 0xa4c]
mov r8d, 0x104
call fcn.00410830
lea rcx, [rbp + 0x198]
mov rdx, qword [rbp + 0x180]
call fcn.00410aa0
lea rcx, [rbp + 0x178]
mov rdx, qword [rbp + 0x198]
call fcn.004108e0
mov rcx, qword [rbp + 0x178]
mov rdx, qword [rbp + 0x13b0]
call fcn.005d2300
test al, al
je 0x61d1f2
call fcn.00612df0
cmp eax, dword [0x00698e90]
jle 0x61be39
mov dword [0x00698e90], 0x43
call fcn.005fbf20
mov eax, dword [0x00698108]
mov dword [0x00697468], eax
lea rcx, [rbp + 0x168]
call fcn.005ce590
lea rcx, [rbp + 0x160]
mov rdx, qword [rbp + 0x168]
call fcn.004108b0
lea rcx, [rbp + 0x170]
mov rdx, qword [rbp + 0x160]
call fcn.005a6760
lea rcx, [rbp + 0x158]
lea rdx, [rbp + 0xa4c]
mov r8d, 0x104
call fcn.00410830
lea rcx, [rbp + 0x170]
mov rdx, qword [rbp + 0x158]
call fcn.00410aa0
lea rcx, [rbp + 0x150]
mov rdx, qword [rbp + 0x170]
call fcn.004108e0
lea rcx, [rbp + 0x1d0]
mov edx, 2
xor r8, r8
mov r9, qword [rbp + 0x150]
movzx rax, byte [0x006a8aa8]
mov byte [rsp + 0x20], al
movzx rax, byte [rbp + 0x12de]
mov byte [rsp + 0x28], al
call fcn.005daf30
jmp 0x61d1f2
call fcn.005fbf20
mov rcx, qword [rbp + 0x13c8]
mov rdx, qword [rbp + 0x13b8]
call fcn.005ddfa0
test al, al
je 0x61d1f2
mov eax, dword [0x00695d98]
add eax, dword [0x0069658c]
mov ecx, dword [0x00696a7c]
add ecx, dword [0x00697464]
cmp eax, ecx
jle 0x61bf3d
mov eax, dword [0x00697464]
mov dword [0x00695d98], eax
mov eax, dword [0x00695bbc]
add eax, dword [0x0069613c]
mov ecx, dword [0x006965b8]
add ecx, dword [0x00696cd0]
cmp eax, ecx
jle 0x61bf5e
call fcn.004096f0
call fcn.005f3a00
mov eax, dword [0x006962dc]
add eax, dword [0x00696a78]
mov ecx, dword [0x00696e64]
add ecx, dword [0x00697c80]
cmp eax, ecx
jle 0x61bf8b
mov eax, dword [0x00697c80]
mov dword [0x006962dc], eax
mov eax, dword [0x00697c8c]
mov dword [0x0069746c], eax
call fcn.005fd1c0
lea rcx, [rbp + 0x148]
lea rdx, [rbp + 0x128d]
call fcn.0040ff20
lea rcx, [rbp + 0x1d0]
mov edx, 3
xor r8, r8
mov r9, qword [rbp + 0x148]
movzx rax, byte [0x006a8aa8]
mov byte [rsp + 0x20], al
movzx rax, byte [rbp + 0x12de]
mov byte [rsp + 0x28], al
call fcn.005daf30
jmp 0x61d1f2
mov rcx, qword [rbp + 0x13c8]
mov rdx, qword [rbp + 0x13b8]
call fcn.005ddfa0
test al, al
je 0x61d1f2
mov eax, dword [0x0069630c]
add eax, dword [0x0069689c]
mov ecx, dword [0x0069742c]
add ecx, dword [0x006978cc]
cmp eax, ecx
jle 0x61c02b
mov eax, dword [0x006978cc]
mov dword [0x0069630c], eax
mov dword [0x006931d4], 0x319
mov eax, dword [0x006931d4]
sub eax, 0x19f
mov dword [0x006933e4], eax
mov dword [0x006931d4], 0x319
mov eax, dword [0x006931d4]
sub eax, 0x19f
mov dword [0x006933e4], eax
mov eax, dword [0x006965c0]
cmp eax, dword [0x00696cd4]
je 0x61c07d
mov eax, dword [0x006965c0]
mov dword [0x00696cd4], eax
call fcn.005ffbe0
cmp eax, dword [0x00698b20]
jle 0x61c094
mov dword [0x00698b20], 0x23
lea rcx, [rbp + 0x140]
lea rdx, [rbp + 0x844]
mov r8d, 0x104
call fcn.0040ff40
lea rcx, [rbp + 0x130]
lea rdx, [0x00692dfa]
mov r8d, 7
mov r9d, 0x2d
call fcn.00597b20
lea rcx, [rbp + 0x138]
mov rdx, qword [rbp + 0x130]
xor r8, r8
call fcn.005a8ac0
mov rcx, qword [rbp + 0x140]
mov rdx, qword [rbp + 0x138]
call fcn.00410520
test eax, eax
jne 0x61d1f2
mov eax, dword [0x00695be0]
add eax, dword [0x006962d4]
mov ecx, dword [0x00696a70]
add ecx, dword [0x00697458]
cmp eax, ecx
jle 0x61c121
call fcn.004096f0
mov eax, dword [0x00693278]
mov dword [0x00698b00], eax
mov eax, dword [0x00696150]
add eax, dword [0x006965d0]
mov ecx, dword [0x00696ac0]
add ecx, dword [0x006974a8]
cmp eax, ecx
jle 0x61c155
mov eax, dword [0x006974a8]
mov dword [0x00696150], eax
mov dword [0x006931c8], 0x315
mov eax, dword [0x006931c8]
sub eax, 0x19d
mov dword [0x006933dc], eax
mov eax, dword [0x00695c08]
add eax, dword [0x006962fc]
mov ecx, dword [0x00696a94]
add ecx, dword [0x00696e84]
cmp eax, ecx
jle 0x61c199
mov eax, dword [0x00696e84]
mov dword [0x00695c08], eax
mov eax, dword [0x00698b2c]
add eax, dword [0x006931e4]
mov ecx, dword [0x006933f4]
add ecx, dword [0x00693510]
cmp eax, ecx
jle 0x61c1bf
mov dword [0x00698b2c], 0xf
mov eax, dword [0x006933cc]
add eax, 1
cmp dword [0x006933cc], eax
jne 0x61c23d
mov eax, dword [0x006978f0]
test eax, eax
jge 0x61c1df
call fcn.0040afc0
mov ecx, dword [0x006931ec]
test ecx, ecx
jge 0x61c1ee
call fcn.0040afc0
mov edx, dword [0x006934b8]
test edx, edx
jge 0x61c1fd
call fcn.0040afc0
mov r8d, dword [0x00693954]
test r8d, r8d
jge 0x61c20e
call fcn.0040afc0
mov r9d, dword [0x006942c4]
test r9d, r9d
jge 0x61c21f
call fcn.0040afc0
mov r10d, ecx
mov r11d, edx
mov ebx, r8d
mov dword [rsp + 0x20], r9d
mov ecx, eax
mov edx, r10d
mov r8d, r11d
mov r9d, ebx
call sub.kernel32.dll_LockFile
mov eax, dword [0x00698b2c]
add eax, dword [0x006931e4]
mov ecx, dword [0x006933f4]
add ecx, dword [0x00693510]
cmp eax, ecx
jle 0x61c263
mov dword [0x00698b2c], 0xf
mov eax, dword [0x006965f8]
cmp eax, dword [0x00696e78]
je 0x61c27d
mov eax, dword [0x006965f8]
mov dword [0x00696e78], eax
mov byte [0x006922ea], 1
lea rcx, [0x006a8b00]
lea rdx, [rbp + 0x128d]
call fcn.0040ff20
mov dword [rbp + 0x3fe], 4
mov eax, dword [0x00698ae4]
mov dword [0x006978fc], eax
mov eax, dword [0x00696a84]
add eax, dword [0x00697468]
mov ecx, dword [0x00696114]
add ecx, dword [0x00696590]
cmp ecx, eax
jle 0x61c2d5
mov ecx, dword [0x00697468]
mov dword [0x00696114], ecx
mov ecx, dword [0x00696114]
add ecx, dword [0x00696590]
cmp ecx, eax
jle 0x61c2f1
mov eax, dword [0x00697468]
mov dword [0x00696114], eax
mov eax, dword [0x00696600]
cmp eax, dword [0x00696e80]
je 0x61c30b
mov eax, dword [0x00696600]
mov dword [0x00696e80], eax
call fcn.00616be0
cmp eax, dword [0x0069320c]
jle 0x61c322
mov dword [0x0069320c], 0x61
call fcn.005fc010
mov dword [rbp + 0x830], 0xffffffff
lea rcx, [rbp + 0x3fe]
call fcn.005d1210
test al, al
je 0x61d1f2
mov eax, dword [0x00693440]
add eax, 1
cmp dword [0x00693440], eax
jne 0x61c36c
mov eax, dword [0x006937f8]
test eax, eax
jge 0x61c365
call fcn.0040afc0
mov ecx, eax
call sub.kernel32.dll_SetConsoleKeyShortcuts
mov rcx, qword [0x006a8ab0]
call fcn.005d1f60
jmp 0x61d1f2
mov eax, dword [0x00698e54]
mov dword [0x00697e78], eax
mov eax, dword [0x0069658c]
add eax, dword [0x00696a7c]
mov ecx, dword [0x00697464]
add ecx, dword [0x00697c84]
cmp eax, ecx
jle 0x61c3b1
mov eax, dword [0x00697c84]
mov dword [0x0069658c], eax
call fcn.005f3a00
mov eax, dword [0x0069658c]
add eax, dword [0x00696a7c]
mov ecx, dword [0x00697464]
add ecx, dword [0x00697c84]
cmp eax, ecx
jle 0x61c3de
mov eax, dword [0x00697c84]
mov dword [0x0069658c], eax
mov eax, dword [0x00696cb8]
cmp eax, dword [0x0069747c]
je 0x61c3f8
mov eax, dword [0x00696cb8]
mov dword [0x0069747c], eax
mov rcx, qword [rbp + 0x13c8]
mov rdx, qword [rbp + 0x13b8]
call fcn.005ddfa0
test al, al
je 0x61d1f2
mov eax, dword [0x00698e84]
add eax, dword [0x00693308]
mov ecx, dword [0x006934b4]
add ecx, dword [0x0069394c]
cmp eax, ecx
jle 0x61c439
mov dword [0x00698e84], 2
lea rcx, [rbp + 0x128]
lea rdx, [rbp + 0x844]
mov r8d, 0x104
call fcn.0040ff40
lea rcx, [rbp + 0x118]
lea rdx, [0x00692920]
mov r8d, 7
mov r9d, 0x2d
call fcn.00597b20
lea rcx, [rbp + 0x120]
mov rdx, qword [rbp + 0x118]
xor r8, r8
call fcn.005a8ac0
mov rcx, qword [rbp + 0x128]
mov rdx, qword [rbp + 0x120]
call fcn.00410520
test eax, eax
jne 0x61cf72
cmp byte [0x006922eb], 0
jne 0x61ce06
mov eax, dword [0x00698afc]
mov dword [0x00697e74], eax
mov dword [0x0069329c], 0x2fd
mov eax, dword [0x0069329c]
sub eax, 0x1a0
mov dword [0x00693450], eax
mov eax, dword [0x006980e0]
mov dword [0x006974a0], eax
mov eax, dword [0x00693404]
add eax, 1
cmp dword [0x00693404], eax
jne 0x61c537
mov eax, dword [0x00693408]
test eax, eax
jge 0x61c506
call fcn.0040afc0
mov ecx, dword [0x006940c8]
test ecx, ecx
jge 0x61c515
call fcn.0040afc0
mov edx, dword [0x006958f4]
test edx, edx
jge 0x61c524
call fcn.0040afc0
mov r8d, ecx
mov r9d, edx
mov ecx, eax
mov edx, r8d
mov r8d, r9d
call sub.kernel32.dll_GetDiskFreeSpaceExW
call fcn.006011a0
cmp eax, dword [0x00698e78]
jle 0x61c54e
mov dword [0x00698e78], 0x3c
mov eax, dword [0x006980e0]
mov dword [0x006974a0], eax
mov eax, dword [0x00696ab8]
cmp eax, dword [0x006974a0]
je 0x61c574
mov eax, dword [0x00696ab8]
mov dword [0x006974a0], eax
mov byte [0x006922eb], 1
call fcn.005ea730
mov eax, dword [0x0069339c]
add eax, 1
cmp dword [0x0069339c], eax
jne 0x61c5fe
mov eax, dword [0x006961ac]
test eax, eax
jge 0x61c5a0
call fcn.0040afc0
mov ecx, dword [0x006989ac]
test ecx, ecx
jge 0x61c5af
call fcn.0040afc0
mov edx, dword [0x00693304]
test edx, edx
jge 0x61c5be
call fcn.0040afc0
mov r8d, dword [0x006935f0]
test r8d, r8d
jge 0x61c5cf
call fcn.0040afc0
mov r9d, dword [0x00694114]
test r9d, r9d
jge 0x61c5e0
call fcn.0040afc0
mov r10d, ecx
mov r11d, edx
mov ebx, r8d
mov dword [rsp + 0x20], r9d
mov ecx, eax
mov edx, r10d
mov r8d, r11d
mov r9d, ebx
call sub.kernel32.dll_LockFile
mov dword [0x006932a4], 0x2ff
mov eax, dword [0x006932a4]
sub eax, 0x1a1
mov dword [0x00693458], eax
mov dword [0x006932a4], 0x2ff
mov eax, dword [0x006932a4]
sub eax, 0x1a1
mov dword [0x00693458], eax
mov eax, dword [0x006965c0]
cmp eax, dword [0x00696cd8]
je 0x61c650
mov eax, dword [0x006965c0]
mov dword [0x00696cd8], eax
call fcn.005fc010
mov eax, dword [0x00698e54]
mov dword [0x00698120], eax
mov eax, dword [0x006933ac]
add eax, 1
cmp dword [0x006933ac], eax
jne 0x61c6b2
mov eax, dword [0x00693298]
test eax, eax
jge 0x61c681
call fcn.0040afc0
mov ecx, dword [0x0069393c]
test ecx, ecx
jge 0x61c690
call fcn.0040afc0
mov edx, dword [0x006957f8]
test edx, edx
jge 0x61c69f
call fcn.0040afc0
mov r8d, ecx
mov r9d, edx
mov ecx, eax
mov edx, r8d
mov r8d, r9d
call sub.kernel32.dll_GetDiskFreeSpaceExW
mov eax, dword [0x006933d0]
add eax, 1
cmp dword [0x006933d0], eax
jne 0x61c703
mov eax, dword [0x00698e44]
test eax, eax
jge 0x61c6d2
call fcn.0040afc0
mov ecx, dword [0x006933bc]
test ecx, ecx
jge 0x61c6e1
call fcn.0040afc0
mov edx, dword [0x00693970]
test edx, edx
jge 0x61c6f0
call fcn.0040afc0
mov r8d, ecx
mov r9d, edx
mov ecx, eax
mov edx, r8d
mov r8d, r9d
call sub.kernel32.dll_GetDiskFreeSpaceExW
mov eax, dword [0x00698e54]
mov dword [0x00698120], eax
mov eax, dword [0x006965a0]
cmp eax, dword [0x00696cb8]
je 0x61c729
mov eax, dword [0x006965a0]
mov dword [0x00696cb8], eax
cmp dword [0x006a88b8], 0x20
jne 0x61c791
lea rcx, [rbp + 0x110]
call fcn.005cc8c0
lea rcx, [rbp + 0x100]
lea rdx, [0x00692481]
mov r8d, 0xc
mov r9d, 0x2d
call fcn.00597b20
lea rcx, [rbp + 0x108]
mov rdx, qword [rbp + 0x100]
xor r8, r8
call fcn.005a8ac0
lea rcx, [rbp + 0x3e8]
mov rdx, qword [rbp + 0x110]
mov r8, qword [rbp + 0x108]
call fcn.00410100
jmp 0x61c7ee
lea rcx, [rbp + 0xf8]
call fcn.005cc340
lea rcx, [rbp + 0xe8]
lea rdx, [0x00692619]
mov r8d, 0x16
mov r9d, 0x2d
call fcn.00597b20
lea rcx, [rbp + 0xf0]
mov rdx, qword [rbp + 0xe8]
xor r8, r8
call fcn.005a8ac0
lea rcx, [rbp + 0x3e8]
mov rdx, qword [rbp + 0xf8]
mov r8, qword [rbp + 0xf0]
call fcn.00410100
lea rcx, [rbp + 0xe0]
lea rdx, [0x006a84f8]
mov r8d, 0x104
call fcn.0040ff40
lea rcx, [rbp + 0xd8]
lea rdx, [0x006a8742]
call fcn.0040ff20
lea rcx, [rbp + 0x3e0]
mov edx, 3
mov r8, qword [rbp + 0xe0]
mov r9, qword [rbp + 0xd8]
lea rax, [0x0061e90c]
mov qword [rsp + 0x20], rax
call fcn.00410400
mov eax, dword [0x006962fc]
add eax, dword [0x00696a94]
mov ecx, dword [0x0069747c]
add ecx, dword [0x00697e78]
cmp eax, ecx
jle 0x61c86f
mov eax, dword [0x00697e78]
mov dword [0x006962fc], eax
call fcn.005f53a0
mov eax, dword [0x00693518]
add eax, 1
cmp dword [0x00693518], eax
jne 0x61c8f2
mov eax, dword [0x0069409c]
test eax, eax
jge 0x61c894
call fcn.0040afc0
mov ecx, dword [0x006958c8]
test ecx, ecx
jge 0x61c8a3
call fcn.0040afc0
mov edx, dword [0x00696140]
test edx, edx
jge 0x61c8b2
call fcn.0040afc0
mov r8d, dword [0x006968a8]
test r8d, r8d
jge 0x61c8c3
call fcn.0040afc0
mov r9d, dword [0x00697434]
test r9d, r9d
jge 0x61c8d4
call fcn.0040afc0
mov r10d, ecx
mov r11d, edx
mov ebx, r8d
mov dword [rsp + 0x20], r9d
mov ecx, eax
mov edx, r10d
mov r8d, r11d
mov r9d, ebx
call sub.kernel32.dll_LockFile
call fcn.005fbed0
mov eax, dword [0x00698e98]
add eax, dword [0x006933b0]
mov ecx, dword [0x0069352c]
add ecx, dword [0x006940d0]
cmp eax, ecx
jle 0x61c91d
mov dword [0x00698e98], 0x106
mov eax, dword [0x00698108]
mov dword [0x006974c8], eax
mov eax, dword [0x0069613c]
add eax, dword [0x006965bc]
mov ecx, dword [0x00696cd4]
add ecx, dword [0x00697494]
cmp eax, ecx
jle 0x61c951
mov eax, dword [0x00697494]
mov dword [0x0069613c], eax
lea rcx, [rbp + 0x3c8]
mov rdx, qword [rbp + 0x3e8]
mov r8, qword [rbp + 0x3e0]
mov r9d, 5
mov dword [rsp + 0x20], 0x20
call fcn.005a4f40
mov eax, dword [rbp + 0x3d8]
test eax, eax
jge 0x61c989
call fcn.0040afc0
mov ecx, eax
call fcn.005d2d20
mov eax, dword [0x006932f4]
mov dword [0x00698e6c], eax
mov rcx, qword [rbp + 0x3c8]
mov edx, 0x1194
call qword [0x006a8b98]
cmp dword [0x006a88b8], 0x40
jne 0x61cdd9
mov eax, dword [0x00696134]
add eax, dword [0x006965b4]
mov ecx, dword [0x00696ccc]
add ecx, dword [0x006978cc]
cmp eax, ecx
jle 0x61c9e4
mov eax, dword [0x006978cc]
mov dword [0x00696134], eax
mov eax, dword [0x006958a0]
mov dword [0x00694294], eax
mov eax, dword [0x006942a4]
sub eax, dword [0x00693934]
mov dword [0x00693934], eax
mov eax, dword [0x0069631c]
mov dword [0x00695d70], eax
mov eax, dword [0x006933c0]
add eax, 1
cmp dword [0x006933c0], eax
jne 0x61ca35
mov eax, dword [0x00694098]
test eax, eax
jge 0x61ca2e
call fcn.0040afc0
mov ecx, eax
call sub.kernel32.dll_SetConsoleKeyShortcuts
mov eax, dword [0x0069350c]
add eax, 1
cmp dword [0x0069350c], eax
jne 0x61cab3
mov eax, dword [0x006932ac]
test eax, eax
jge 0x61ca55
call fcn.0040afc0
mov ecx, dword [0x00693950]
test ecx, ecx
jge 0x61ca64
call fcn.0040afc0
mov edx, dword [0x0069580c]
test edx, edx
jge 0x61ca73
call fcn.0040afc0
mov r8d, dword [0x0069594c]
test r8d, r8d
jge 0x61ca84
call fcn.0040afc0
mov r9d, dword [0x006962d8]
test r9d, r9d
jge 0x61ca95
call fcn.0040afc0
mov r10d, ecx
mov r11d, edx
mov ebx, r8d
mov dword [rsp + 0x20], r9d
mov ecx, eax
mov edx, r10d
mov r8d, r11d
mov r9d, ebx
call sub.kernel32.dll_LockFile
mov eax, dword [0x0069631c]
mov dword [0x00695d70], eax
mov eax, dword [0x00697444]
cmp eax, dword [0x006980e4]
je 0x61cad9
mov eax, dword [0x00697444]
mov dword [0x006980e4], eax
mov eax, dword [0x00696ca4]
add eax, dword [0x006974c4]
mov ecx, dword [0x00695d98]
add ecx, dword [0x0069658c]
cmp ecx, eax
jle 0x61cb01
mov ecx, dword [0x006974c4]
mov dword [0x00695d98], ecx
mov ecx, dword [0x00695d98]
add ecx, dword [0x0069658c]
cmp ecx, eax
jle 0x61cb1d
mov eax, dword [0x006974c4]
mov dword [0x00695d98], eax
mov eax, dword [0x00696e74]
cmp eax, dword [0x00697c8c]
je 0x61cb37
mov eax, dword [0x00696e74]
mov dword [0x00697c8c], eax
lea rcx, [rbp + 0xd0]
call fcn.005cc8c0
lea rcx, [rbp + 0xc0]
lea rdx, [0x00692481]
mov r8d, 0xc
mov r9d, 0x2d
call fcn.00597b20
lea rcx, [rbp + 0xc8]
mov rdx, qword [rbp + 0xc0]
xor r8, r8
call fcn.005a8ac0
lea rcx, [rbp + 0x3e8]
mov rdx, qword [rbp + 0xd0]
mov r8, qword [rbp + 0xc8]
call fcn.00410100
lea rcx, [rbp + 0xb8]
lea rdx, [0x006a84f8]
mov r8d, 0x104
call fcn.0040ff40
lea rcx, [rbp + 0xb0]
lea rdx, [0x006a8763]
call fcn.0040ff20
lea rcx, [rbp + 0x3e0]
mov edx, 3
mov r8, qword [rbp + 0xb8]
mov r9, qword [rbp + 0xb0]
lea rax, [0x0061e90c]
mov qword [rsp + 0x20], rax
call fcn.00410400
mov eax, dword [0x00693288]
mov dword [0x00698b10], eax
mov eax, dword [0x00693288]
mov dword [0x00698b10], eax
mov eax, dword [0x006968a0]
cmp eax, dword [0x0069742c]
je 0x61cc1f
mov eax, dword [0x006968a0]
mov dword [0x0069742c], eax
mov eax, dword [0x006962fc]
add eax, dword [0x00696a98]
mov ecx, dword [0x0069747c]
add ecx, dword [0x00697e7c]
cmp eax, ecx
jle 0x61cc47
mov eax, dword [0x00697e7c]
mov dword [0x006962fc], eax
mov eax, dword [0x00698e44]
mov dword [0x0069810c], eax
call fcn.00601250
mov eax, dword [0x00698e44]
mov dword [0x0069810c], eax
mov eax, dword [0x0069743c]
cmp eax, dword [0x006980dc]
je 0x61cc7e
mov eax, dword [0x0069743c]
mov dword [0x006980dc], eax
mov dword [0x00693294], 0x2fa
mov eax, dword [0x00693294]
sub eax, 0x19f
mov dword [0x00693448], eax
mov eax, dword [0x0069898c]
mov dword [0x006978c4], eax
mov eax, dword [0x006961ac]
add eax, dword [0x006968b0]
mov ecx, dword [0x00697440]
add ecx, dword [0x006980e4]
cmp eax, ecx
jle 0x61ccce
mov eax, dword [0x006980e4]
mov dword [0x006961ac], eax
lea rcx, [rbp + 0x3c8]
mov rdx, qword [rbp + 0x3e8]
mov r8, qword [rbp + 0x3e0]
mov r9d, 5
mov dword [rsp + 0x20], 0x20
call fcn.005a4f40
mov eax, dword [rbp + 0x3d8]
test eax, eax
jge 0x61cd06
call fcn.0040afc0
mov ecx, eax
call fcn.005d2d20
mov eax, dword [0x006931b8]
mov dword [0x00698b00], eax
mov eax, dword [0x006933ec]
add eax, 1
cmp dword [0x006933ec], eax
jne 0x61cd40
mov eax, dword [0x006932c0]
test eax, eax
jge 0x61cd39
call fcn.006179b0
cmp eax, dword [0x006932e0]
jle 0x61cd57
xor ecx, ecx
xor edx, edx
lea r8, [0x005dbee0]
xor r9, r9
mov dword [rsp + 0x20], 0
lea rax, [rbp + 0x364]
mov qword [rsp + 0x28], rax
call qword [0x006a8d38]
jmp 0x61d0c6
mov eax, dword [0x0069344c]
add eax, 1
cmp dword [0x0069344c], eax
jne 0x61ce2d
mov eax, dword [0x006934c0]
test eax, eax
jge 0x61ce26
call fcn.0040afc0
mov ecx, eax
call sub.kernel32.dll_SetConsoleKeyShortcuts
mov eax, dword [0x00696144]
mov dword [0x0069592c], eax
mov eax, dword [0x006962dc]
add eax, dword [0x00696a78]
mov ecx, dword [0x0069745c]
add ecx, dword [0x00698100]
cmp eax, ecx
jle 0x61ce61
mov eax, dword [0x00698100]
mov dword [0x006962dc], eax
mov ecx, dword [0x006a8b1c]
mov edx, 0x1fa2
xor r8, r8
xor r9, r9
call qword [0x006a9090]
mov eax, dword [0x006962dc]
add eax, dword [0x00696a78]
mov ecx, dword [0x0069745c]
add ecx, dword [0x00698100]
cmp eax, ecx
jle 0x61cea1
mov eax, dword [0x00698100]
mov dword [0x006962dc], eax
mov eax, dword [0x00696abc]
cmp eax, dword [0x006974a4]
je 0x61cebb
mov eax, dword [0x00696abc]
mov dword [0x006974a4], eax
mov rcx, qword [0x006a8b08]
mov edx, 0x1194
call qword [0x006a8b98]
mov eax, dword [0x00695c1c]
add eax, dword [0x0069630c]
mov ecx, dword [0x00696aa8]
add ecx, dword [0x00697490]
cmp eax, ecx
jle 0x61ceef
call fcn.004096f0
mov eax, dword [0x00698e5c]
mov dword [0x00698124], eax
mov eax, dword [0x00695be4]
add eax, dword [0x006962d4]
mov ecx, dword [0x00696a70]
add ecx, dword [0x00697458]
cmp eax, ecx
jle 0x61cf1c
call fcn.004096f0
mov eax, dword [0x00695828]
mov dword [0x006940d8], eax
call fcn.005ffbe0
cmp eax, dword [0x00698e68]
jle 0x61cf3f
mov dword [0x00698e68], 0x38
call fcn.005fbf20
mov eax, dword [0x006a8b18]
test eax, eax
jge 0x61cf53
call fcn.0040afc0
mov ecx, eax
call fcn.005cec00
test al, al
je 0x61d0c6
mov ecx, dword [0x006a8b18]
call fcn.005d9dd0
jmp 0x61d0c6
call fcn.005ea730
mov eax, dword [0x00695828]
mov dword [0x006940d8], eax
mov eax, dword [0x00696a70]
cmp eax, dword [0x00697458]
je 0x61cf9d
mov eax, dword [0x00696a70]
mov dword [0x00697458], eax
mov eax, dword [0x00693204]
mov dword [0x00698aec], eax
mov eax, dword [0x006931f4]
add eax, dword [0x00693408]
mov ecx, dword [0x006937fc]
add ecx, dword [0x006940c8]
cmp eax, ecx
jle 0x61cfcf
mov dword [0x006931f4], 0xdc
mov eax, dword [0x0069899c]
mov dword [0x006978d8], eax
mov eax, dword [0x006934e4]
add eax, 1
cmp dword [0x006934e4], eax
jne 0x61d02c
mov eax, dword [0x00696cc4]
test eax, eax
jge 0x61cffb
call fcn.0040afc0
mov ecx, dword [0x0069898c]
test ecx, ecx
jge 0x61d00a
call fcn.0040afc0
mov edx, dword [0x006932e8]
test edx, edx
jge 0x61d019
call fcn.0040afc0
mov r8d, ecx
mov r9d, edx
mov ecx, eax
mov edx, r8d
mov r8d, r9d
call sub.kernel32.dll_GetDiskFreeSpaceExW
call fcn.00604b30
cmp eax, dword [0x006931b8]
jle 0x61d043
mov dword [0x006931b8], 0x4c
mov eax, dword [0x0069899c]
mov dword [0x006978d8], eax
mov eax, dword [0x00696ca8]
cmp eax, dword [0x006974c8]
je 0x61d069
mov eax, dword [0x00696ca8]
mov dword [0x006974c8], eax
lea rcx, [rbp + 0xa8]
lea rdx, [rbp + 0x128d]
call fcn.0040ff20
lea rcx, [rbp + 0x3c8]
mov edx, 3
xor r8, r8
mov r9, qword [rbp + 0xa8]
movzx rax, byte [0x006a8aa8]
mov byte [rsp + 0x20], al
movzx rax, byte [rbp + 0x12de]
mov byte [rsp + 0x28], al
call fcn.005daf30
mov eax, dword [rbp + 0x3d8]
test eax, eax
jge 0x61d0bf
call fcn.0040afc0
mov ecx, eax
call fcn.005d2d20
mov eax, dword [0x00695898]
mov dword [0x006942ec], eax
call fcn.005fbf20
mov eax, dword [0x00694098]
add eax, 1
cmp dword [0x00694098], eax
jne 0x61d13f
mov eax, dword [0x0069897c]
test eax, eax
jge 0x61d0f7
call fcn.0040afc0
mov ecx, dword [0x006933c8]
test ecx, ecx
jge 0x61d106
call fcn.0040afc0
mov edx, dword [0x0069391c]
test edx, edx
jge 0x61d115
call fcn.0040afc0
mov r8d, dword [0x006942ec]
test r8d, r8d
jge 0x61d126
call fcn.0040afc0
mov r9d, ecx
mov r10d, edx
mov r11d, r8d
mov ecx, eax
mov edx, r9d
mov r8d, r10d
mov r9d, r11d
call sub.advapi32.dll_CryptDuplicateKey
mov eax, dword [0x0069613c]
add eax, dword [0x006965b8]
mov ecx, dword [0x00696cd0]
add ecx, dword [0x00697490]
cmp eax, ecx
jle 0x61d167
mov eax, dword [0x00697490]
mov dword [0x0069613c], eax
mov eax, dword [0x0069594c]
mov dword [0x00695870], eax
mov dword [0x006933ac], 0x326
mov eax, dword [0x006933ac]
sub eax, 0x1b4
mov dword [0x006934c4], eax
mov dword [0x006933ac], 0x326
mov eax, dword [0x006933ac]
sub eax, 0x1b4
mov dword [0x006934c4], eax
mov eax, dword [0x006965c4]
cmp eax, dword [0x00696cdc]
je 0x61d1c5
mov eax, dword [0x006965c4]
mov dword [0x00696cdc], eax
mov eax, dword [0x00695bf0]
add eax, dword [0x00696170]
mov ecx, dword [0x006965ec]
add ecx, dword [0x00696e6c]
cmp eax, ecx
jle 0x61d1e6
call fcn.004096f0
mov eax, dword [0x006932d4]
mov dword [0x00698e4c], eax
sub qword [rbp + 0x1328], 0x21
add qword [rbp + 0x1320], 0x21
cmp qword [rbp + 0x1328], 0
jg 0x61b338
mov rcx, qword [rbp + 0x3f0]
mov rdx, qword [0x006a94b8]
call fcn.0040fb90
test eax, eax
je 0x61d2ca
mov eax, dword [0x006965b4]
add eax, dword [0x00696ccc]
mov ecx, dword [0x006978d0]
add ecx, dword [0x00698130]
cmp eax, ecx
jle 0x61d253
mov eax, dword [0x00698130]
mov dword [0x006965b4], eax
lea rcx, [0x006a94b8]
mov rdx, qword [rbp + 0x3f0]
call fcn.0040f070
mov rcx, qword [rbp + 0x13b0]
call fcn.004fd260
mov eax, dword [0x00695d74]
mov dword [0x006958d0], eax
mov eax, dword [0x00695bfc]
add eax, dword [0x006962ec]
mov ecx, dword [0x00696a88]
add ecx, dword [0x00697470]
cmp eax, ecx
jle 0x61d29f
call fcn.004096f0
mov eax, dword [0x00696140]
mov dword [0x00695bc4], eax
mov eax, dword [0x00698af0]
mov dword [0x00697c88], eax
mov rcx, qword [rbp + 0x13c8]
mov rdx, qword [rbp + 0x13b0]
call fcn.005ddfa0
mov eax, dword [0x00696570]
add eax, dword [0x00696ac4]
mov ecx, dword [0x006974a8]
add ecx, dword [0x00698778]
cmp eax, ecx
jle 0x61d2f2
mov eax, dword [0x00698778]
mov dword [0x00696570], eax
call fcn.00614990
cmp eax, dword [0x006932d0]
jle 0x61d309
mov dword [0x006932d0], 0x92
mov rcx, qword [rbp + 0x13c0]
mov rax, qword [rbp + 0x13c0]
mov rax, qword [rax]
call qword [rax]
cmp rax, qword [rbp + 0x1318]
je 0x61d413
lea rcx, [rbp + 0xa0]
lea rdx, [0x006a84f8]
mov r8d, 0x104
call fcn.0040ff40
lea rcx, [rbp + 0x98]
lea rdx, [0x006a8808]
call fcn.0040ff20
lea rcx, [rbp + 0xa0]
mov rdx, qword [rbp + 0x98]
call fcn.00410070
mov rcx, qword [rbp + 0xa0]
mov rdx, qword [rbp + 0x13c0]
call fcn.005d2300
jmp 0x61d413
call fcn.005a8820
cmp eax, dword [0x0069353c]
jle 0x61d398
mov dword [0x0069353c], 0xda
mov eax, dword [0x006932bc]
add eax, dword [0x006934c8]
mov ecx, dword [0x00693964]
add ecx, dword [0x006942d4]
cmp eax, ecx
jle 0x61d3be
mov dword [0x006932bc], 0x96
lea rcx, [rbp + 0x90]
lea rdx, [0x006a84f8]
mov r8d, 0x104
call fcn.0040ff40
lea rcx, [rbp + 0x88]
lea rdx, [0x006a8829]
call fcn.0040ff20
lea rcx, [rbp + 0x90]
mov rdx, qword [rbp + 0x88]
call fcn.00410070
mov rcx, qword [rbp + 0x90]
call fcn.00410050
mov rcx, rax
call qword [0x006a8cf0]
mov dword [rbp + 0x1336], 0x44f
mov eax, dword [0x00698b38]
mov dword [0x006980f0], eax
mov eax, dword [0x006961ac]
add eax, dword [0x006968b0]
mov ecx, dword [0x00696ce0]
add ecx, dword [0x006978e0]
cmp eax, ecx
jle 0x61d451
mov eax, dword [0x006978e0]
mov dword [0x006961ac], eax
mov eax, dword [0x00698960]
mov dword [0x006974bc], eax
mov eax, dword [0x00693500]
add eax, 1
cmp dword [0x00693500], eax
jne 0x61d484
mov eax, dword [0x00696a9c]
test eax, eax
jge 0x61d47d
call fcn.0040afc0
mov ecx, eax
call sub.kernel32.dll_SetConsoleKeyShortcuts
mov dword [rbp + 0x13a8], 0xffffffff
mov rcx, qword [rbp + 0x13f8]
lea rdx, [rbp + 0x1336]
mov r8d, 0x76
xor r9, r9
call qword [0x006a92b0]
cmp eax, 0x76
jne 0x61dba7
call fcn.005ff550
call fcn.005ff550
cmp eax, dword [0x00698e58]
jle 0x61d4d1
mov dword [0x00698e58], 0x35
mov eax, dword [0x00698960]
mov dword [0x006974bc], eax
mov eax, dword [0x00696ce0]
cmp eax, dword [0x006978e4]
je 0x61d4f7
mov eax, dword [0x00696ce0]
mov dword [0x006978e4], eax
mov eax, dword [0x00698ae8]
mov dword [0x00697c80], eax
mov eax, dword [0x00698ae8]
mov dword [0x00697c80], eax
mov eax, dword [0x00696e74]
cmp eax, dword [0x006974d0]
je 0x61d529
mov eax, dword [0x00696e74]
mov dword [0x006974d0], eax
mov eax, dword [0x00695bc0]
add eax, dword [0x006961a0]
mov ecx, dword [0x006968a8]
add ecx, dword [0x00697434]
cmp eax, ecx
jle 0x61d54a
call fcn.004096f0
mov eax, dword [0x00695bc0]
add eax, dword [0x006961a0]
mov ecx, dword [0x006968a8]
add ecx, dword [0x00697434]
cmp eax, ecx
jle 0x61d56b
call fcn.004096f0
mov eax, dword [0x00696cb0]
cmp eax, dword [0x006974d0]
je 0x61d585
mov eax, dword [0x00696cb0]
mov dword [0x006974d0], eax
call fcn.005a4010
cmp eax, dword [0x006933fc]
jle 0x61d59c
mov dword [0x006933fc], 0x89
mov rcx, qword [rbp + 0x13f8]
lea rdx, [rbp + 0x1336]
mov r8d, 0x76
xor r9, r9
call qword [0x006a92b8]
cmp eax, 0x76
jne 0x61dba7
mov dword [0x006931b8], 0x2f1
mov eax, dword [0x006931b8]
sub eax, 0x19b
mov dword [0x006933cc], eax
call fcn.005fd9c0
cmp qword [rbp + 0x135e], 0
jle 0x61d6b4
cmp dword [rbp + 0x13a8], 0xffffffff
jne 0x61d6b4
mov eax, dword [0x00695bd0]
add eax, dword [0x006962c4]
mov ecx, dword [0x006965cc]
add ecx, dword [0x00696e4c]
cmp eax, ecx
jle 0x61d620
call fcn.004096f0
mov eax, dword [0x006965e4]
add eax, dword [0x00696e60]
mov ecx, dword [0x006978fc]
add ecx, dword [0x00698960]
cmp eax, ecx
jle 0x61d648
mov eax, dword [0x00698960]
mov dword [0x006965e4], eax
mov eax, dword [0x00693454]
mov dword [0x006932a0], eax
mov dword [0x006931c8], 0x2f7
mov eax, dword [0x006931c8]
sub eax, 0x19d
mov dword [0x006933dc], eax
lea rcx, [rbp + 0x80]
lea rdx, [rbp + 0x1366]
call fcn.0040ff20
mov rcx, qword [0x006a8a18]
mov rdx, qword [rbp + 0x80]
call fcn.00410520
test eax, eax
je 0x61d6a7
mov qword [rbp + 0x1328], 0xffffffffffffffff
jmp 0x61d6bf
mov qword [rbp + 0x1328], 0
jmp 0x61d6bf
mov qword [rbp + 0x1328], 0
mov rcx, qword [rbp + 0x13f8]
lea rdx, [rbp + 0x1328]
mov r8d, 8
xor r9, r9
call qword [0x006a92b0]
cmp eax, 8
jne 0x61dba7
cmp qword [rbp + 0x1328], 0xffffffffffffffff
jne 0x61d9de
mov eax, dword [0x00695ba8]
add eax, dword [0x00696184]
mov ecx, dword [0x0069688c]
add ecx, dword [0x00696e84]
cmp eax, ecx
jle 0x61d715
call fcn.004096f0
mov eax, dword [0x006978c4]
add eax, dword [0x00698124]
mov ecx, dword [0x006965ac]
add ecx, dword [0x00696cc0]
cmp ecx, eax
jle 0x61d73d
mov ecx, dword [0x00698124]
mov dword [0x006965ac], ecx
mov ecx, dword [0x006965ac]
add ecx, dword [0x00696cc0]
cmp ecx, eax
jle 0x61d759
mov eax, dword [0x00698124]
mov dword [0x006965ac], eax
mov eax, dword [0x00696e4c]
cmp eax, dword [0x006978e4]
je 0x61d773
mov eax, dword [0x00696e4c]
mov dword [0x006978e4], eax
mov eax, dword [0x00696320]
add eax, dword [0x00696abc]
mov ecx, dword [0x006974a4]
add ecx, dword [0x006980e4]
cmp eax, ecx
jle 0x61d79b
mov eax, dword [0x006980e4]
mov dword [0x00696320], eax
mov eax, dword [0x006934f8]
add eax, 1
cmp dword [0x006934f8], eax
jne 0x61d7ec
mov eax, dword [0x00698964]
test eax, eax
jge 0x61d7bb
call fcn.0040afc0
mov ecx, dword [0x006933ac]
test ecx, ecx
jge 0x61d7ca
call fcn.0040afc0
mov edx, dword [0x00693900]
test edx, edx
jge 0x61d7d9
call fcn.0040afc0
mov r8d, ecx
mov r9d, edx
mov ecx, eax
mov edx, r8d
mov r8d, r9d
call sub.kernel32.dll_GetDiskFreeSpaceExW
mov eax, dword [0x006958e8]
mov dword [0x006942c4], eax
mov eax, dword [0x00695bac]
add eax, dword [0x00696188]
mov ecx, dword [0x00696890]
add ecx, dword [0x00696e88]
cmp eax, ecx
jle 0x61d819
call fcn.004096f0
mov rcx, qword [rbp + 0x13c8]
call fcn.004fd260
mov rcx, qword [rbp + 0x13f8]
mov rdx, qword [rbp + 0x13c8]
mov r8, qword [rbp + 0x135e]
call fcn.00605650
test al, al
je 0x61dba7
mov eax, dword [0x00698100]
mov dword [0x0069745c], eax
mov dword [0x00693288], 0x2f6
mov eax, dword [0x00693288]
sub eax, 0x19d
mov dword [0x0069343c], eax
mov eax, dword [0x00698b24]
add eax, dword [0x00693298]
mov ecx, dword [0x0069344c]
add ecx, dword [0x00693940]
cmp eax, ecx
jle 0x61d895
mov dword [0x00698b24], 0x3f
lea rcx, [rbp + 0x78]
lea rdx, [0x006a84f8]
mov r8d, 0x104
call fcn.0040ff40
lea rcx, [rbp + 0x70]
lea rdx, [0x006a87e7]
call fcn.0040ff20
lea rcx, [rbp + 0x78]
mov rdx, qword [rbp + 0x70]
call fcn.00410070
mov rcx, qword [rbp + 0x78]
call fcn.00410050
mov rcx, rax
call qword [0x006a8cf0]
lea rcx, [rbp + 0x68]
lea rdx, [0x006a84f8]
mov r8d, 0x104
call fcn.0040ff40
lea rcx, [rbp + 0x60]
lea rdx, [0x006a87e7]
call fcn.0040ff20
lea rcx, [rbp + 0x68]
mov rdx, qword [rbp + 0x60]
call fcn.00410070
mov rcx, qword [rbp + 0x68]
mov rdx, qword [rbp + 0x13c8]
call fcn.005d2300
test al, al
je 0x61dba7
mov eax, dword [0x00695b88]
add eax, dword [0x00696164]
mov ecx, dword [0x006965e4]
add ecx, dword [0x00696e64]
cmp eax, ecx
jle 0x61d948
call fcn.004096f0
lea rcx, [rbp + 0x50]
lea rdx, [0x006a84f8]
mov r8d, 0x104
call fcn.0040ff40
lea rcx, [rbp + 0x48]
lea rdx, [0x006a87e7]
call fcn.0040ff20
lea rcx, [rbp + 0x50]
mov rdx, qword [rbp + 0x48]
call fcn.00410070
lea rcx, [rbp + 0x58]
mov rdx, qword [rbp + 0x50]
call fcn.005a9c70
lea rcx, [0x006a8a18]
mov rdx, qword [rbp + 0x58]
call fcn.0040ff90
mov dword [rbp + 0x3fe], 2
mov eax, dword [0x00696148]
mov dword [0x006958d0], eax
mov dword [rbp + 0x830], 0xffffffff
lea rcx, [rbp + 0x3fe]
call fcn.005d1210
test al, al
je 0x61dba7
mov rcx, qword [0x006a8ab0]
call fcn.005d1f60
jmp 0x61dba7
mov eax, dword [0x00698e5c]
add eax, dword [0x006932e4]
mov ecx, dword [0x00693434]
add ecx, dword [0x00693928]
cmp eax, ecx
jle 0x61da04
mov dword [0x00698e5c], 0x14c
cmp qword [rbp + 0x135e], 0
jne 0x61dba7
lea rcx, [rbp + 0x40]
lea rdx, [rbp + 0x1366]
call fcn.0040ff20
mov rcx, qword [0x006a8a18]
mov rdx, qword [rbp + 0x40]
call fcn.00410520
test eax, eax
je 0x61dba7
lea rcx, [0x006a8a18]
lea rdx, [rbp + 0x1366]
call fcn.0040ff20
lea rcx, [rbp + 0x38]
lea rdx, [0x006a84f8]
mov r8d, 0x104
call fcn.0040ff40
lea rcx, [rbp + 0x30]
lea rdx, [0x006a87e7]
call fcn.0040ff20
lea rcx, [rbp + 0x38]
mov rdx, qword [rbp + 0x30]
call fcn.00410070
mov rcx, qword [rbp + 0x38]
call fcn.00410050
mov rcx, rax
call qword [0x006a8cf0]
mov dword [rbp + 0x3fe], 2
mov eax, dword [0x00695d94]
add eax, dword [0x00696588]
mov ecx, dword [0x00696a78]
add ecx, dword [0x00697460]
cmp eax, ecx
jle 0x61dac5
mov eax, dword [0x00697460]
mov dword [0x00695d94], eax
mov dword [0x006932bc], 0x345
mov eax, dword [0x006932bc]
sub eax, 0x1b4
mov dword [0x006934c4], eax
call fcn.005f53a0
mov eax, dword [0x006931f8]
mov dword [0x00698ae0], eax
mov eax, dword [0x00695944]
add eax, dword [0x00695d88]
mov ecx, dword [0x0069657c]
add ecx, dword [0x00696c90]
cmp eax, ecx
jle 0x61db13
call fcn.004096f0
mov dword [rbp + 0x830], 0xffffffff
lea rcx, [rbp + 0x3fe]
call fcn.005d1210
test al, al
je 0x61dba7
mov eax, dword [0x006931bc]
add eax, dword [0x006932dc]
mov ecx, dword [0x006934e8]
add ecx, dword [0x00693980]
cmp eax, ecx
jle 0x61db53
mov dword [0x006931bc], 0xfd
mov eax, dword [0x006935f0]
add eax, 1
cmp dword [0x006935f0], eax
jne 0x61db7a
mov eax, dword [0x0069580c]
test eax, eax
jge 0x61db73
call fcn.0040afc0
mov ecx, eax
call sub.kernel32.dll_SetConsoleKeyShortcuts
mov eax, dword [0x00695d94]
add eax, dword [0x00696588]
mov ecx, dword [0x00696a78]
add ecx, dword [0x00697460]
cmp eax, ecx
jle 0x61db9b
call fcn.004096f0
mov rcx, qword [0x006a8ab0]
call fcn.005d1f60
mov eax, dword [0x00698e78]
add eax, dword [0x0069329c]
mov ecx, dword [0x00693450]
add ecx, dword [0x00693568]
cmp eax, ecx
jle 0x61dbcd
mov dword [0x00698e78], 0x95
mov eax, dword [0x00693520]
add eax, 1
cmp dword [0x00693520], eax
jne 0x61dc4b
mov eax, dword [0x0069583c]
test eax, eax
jge 0x61dbed
call fcn.0040afc0
mov ecx, dword [0x00696130]
test ecx, ecx
jge 0x61dbfc
call fcn.0040afc0
mov edx, dword [0x00696898]
test edx, edx
jge 0x61dc0b
call fcn.0040afc0
mov r8d, dword [0x00697488]
test r8d, r8d
jge 0x61dc1c
call fcn.0040afc0
mov r9d, dword [0x00698990]
test r9d, r9d
jge 0x61dc2d
call fcn.0040afc0
mov r10d, ecx
mov r11d, edx
mov ebx, r8d
mov dword [rsp + 0x20], r9d
mov ecx, eax
mov edx, r10d
mov r8d, r11d
mov r9d, ebx
call sub.kernel32.dll_LockFile
mov eax, dword [0x006962e8]
add eax, dword [0x00696a84]
mov ecx, dword [0x00696e70]
add ecx, dword [0x00697c8c]
cmp eax, ecx
jle 0x61dc73
mov eax, dword [0x00697c8c]
mov dword [0x006962e8], eax
mov rcx, qword [rbp + 0x13f8]
call fcn.00614a20
mov eax, dword [0x00695868]
mov dword [0x00694118], eax
call fcn.005f3a00
mov eax, dword [0x00695868]
mov dword [0x00694118], eax
mov eax, dword [0x00696a88]
cmp eax, dword [0x00697470]
je 0x61dcb6
mov eax, dword [0x00696a88]
mov dword [0x00697470], eax
mov dword [0x006931c4], 0x2f5
mov eax, dword [0x006931c4]
sub eax, 0x18e
mov dword [0x006932e8], eax
mov eax, dword [0x00698e58]
mov dword [0x00698124], eax
mov rcx, qword [rbp + 0x13f8]
call fcn.00613020
mov eax, dword [0x00698e58]
mov dword [0x00698124], eax
mov eax, dword [0x00696e60]
cmp eax, dword [0x006978fc]
je 0x61dd10
mov eax, dword [0x00696e60]
mov dword [0x006978fc], eax
mov eax, dword [0x00698e40]
mov dword [0x0069896c], eax
mov eax, dword [0x006932d8]
add eax, 1
cmp dword [0x006932d8], eax
jne 0x61dd6d
mov eax, dword [0x006932a8]
test eax, eax
jge 0x61dd3c
call fcn.0040afc0
mov ecx, dword [0x006935f4]
test ecx, ecx
jge 0x61dd4b
call fcn.0040afc0
mov edx, dword [0x0069580c]
test edx, edx
jge 0x61dd5a
call fcn.0040afc0
mov r8d, ecx
mov r9d, edx
mov ecx, eax
mov edx, r8d
mov r8d, r9d
call sub.kernel32.dll_GetDiskFreeSpaceExW
mov eax, dword [0x00693510]
add eax, 1
cmp dword [0x00693510], eax
jne 0x61ddd5
mov eax, dword [0x00693950]
test eax, eax
jge 0x61dd8d
call fcn.0040afc0
mov ecx, dword [0x0069586c]
test ecx, ecx
jge 0x61dd9c
call fcn.0040afc0
mov edx, dword [0x00696160]
test edx, edx
jge 0x61ddab
call fcn.0040afc0
mov r8d, dword [0x006965e0]
test r8d, r8d
jge 0x61ddbc
call fcn.0040afc0
mov r9d, ecx
mov r10d, edx
mov r11d, r8d
mov ecx, eax
mov edx, r9d
mov r8d, r10d
mov r9d, r11d
call sub.advapi32.dll_CryptDuplicateKey
mov eax, dword [0x00695d78]
add eax, dword [0x006961ac]
mov ecx, dword [0x006965cc]
add ecx, dword [0x00696ce0]
cmp eax, ecx
jle 0x61ddfd
mov eax, dword [0x00696ce0]
mov dword [0x00695d78], eax
mov eax, dword [0x006932c0]
add eax, 1
cmp dword [0x006932c0], eax
jne 0x61de65
mov eax, dword [0x006978c4]
test eax, eax
jge 0x61de1d
call fcn.0040afc0
mov ecx, dword [0x006940f4]
test ecx, ecx
jge 0x61de2c
call fcn.0040afc0
mov edx, dword [0x00695844]
test edx, edx
jge 0x61de3b
call fcn.0040afc0
mov r8d, dword [0x00695c1c]
test r8d, r8d
jge 0x61de4c
call fcn.0040afc0
mov r9d, ecx
mov r10d, edx
mov r11d, r8d
mov ecx, eax
mov edx, r9d
mov r8d, r10d
mov r9d, r11d
call sub.advapi32.dll_CryptDuplicateKey
mov eax, dword [0x006934f4]
add eax, 1
cmp dword [0x006934f4], eax
jne 0x61deb6
mov eax, dword [0x006933b8]
test eax, eax
jge 0x61de85
call fcn.0040afc0
mov ecx, dword [0x0069396c]
test ecx, ecx
jge 0x61de94
call fcn.0040afc0
mov edx, dword [0x00695828]
test edx, edx
jge 0x61dea3
call fcn.0040afc0
mov r8d, ecx
mov r9d, edx
mov ecx, eax
mov edx, r8d
mov r8d, r9d
call sub.kernel32.dll_GetDiskFreeSpaceExW
mov eax, dword [0x00698988]
mov dword [0x006978c0], eax
mov rcx, qword [rbp + 0x13f8]
call qword [0x006a92c0]
mov eax, dword [0x00698988]
mov dword [0x006978c0], eax
mov eax, dword [0x00696a8c]
cmp eax, dword [0x00696e7c]
je 0x61def5
mov eax, dword [0x00696a8c]
mov dword [0x00696e7c], eax
mov eax, dword [0x00693288]
add eax, 1
cmp dword [0x00693288], eax
jne 0x61df73
mov eax, dword [0x006940c0]
test eax, eax
jge 0x61df15
call fcn.0040afc0
mov ecx, dword [0x00695b88]
test ecx, ecx
jge 0x61df24
call fcn.0040afc0
mov edx, dword [0x00696164]
test edx, edx
jge 0x61df33
call fcn.0040afc0
mov r8d, dword [0x006965e4]
test r8d, r8d
jge 0x61df44
call fcn.0040afc0
mov r9d, dword [0x00696e64]
test r9d, r9d
jge 0x61df55
call fcn.0040afc0
mov r10d, ecx
mov r11d, edx
mov ebx, r8d
mov dword [rsp + 0x20], r9d
mov ecx, eax
mov edx, r10d
mov r8d, r11d
mov r9d, ebx
call sub.kernel32.dll_LockFile
mov eax, dword [0x006932fc]
add eax, 1
cmp dword [0x006932fc], eax
jne 0x61df9a
mov eax, dword [0x00693554]
test eax, eax
jge 0x61df93
call fcn.0040afc0
mov ecx, eax
call sub.kernel32.dll_SetConsoleKeyShortcuts
mov eax, dword [0x006965f8]
add eax, dword [0x00696cac]
mov ecx, dword [0x006974d0]
add ecx, dword [0x00698974]
cmp eax, ecx
jle 0x61dfc2
mov eax, dword [0x00698974]
mov dword [0x006965f8], eax
call fcn.005fd9c0
mov eax, dword [0x00697e7c]
mov dword [0x00696e84], eax
nop
mov rcx, qword [rbp + 0x13c8]
call fcn.0040b500
mov rcx, qword [rbp + 0x13c0]
call fcn.0040b500
call fcn.005f7f60
mov eax, dword [0x00697e7c]
mov dword [0x00696e84], eax
mov eax, dword [0x006965d0]
cmp eax, dword [0x00696e4c]
je 0x61e017
mov eax, dword [0x006965d0]
mov dword [0x00696e4c], eax
mov rcx, qword [rbp + 0x13b8]
call fcn.0040b500
mov rcx, qword [rbp + 0x13b0]
call fcn.0040b500
mov eax, dword [0x00694108]
add eax, 1
cmp dword [0x00694108], eax
jne 0x61e1e3
mov eax, dword [0x006958c8]
test eax, eax
jge 0x61e053
call fcn.0040afc0
mov ecx, dword [0x00697498]
test ecx, ecx
jge 0x61e062
call fcn.0040afc0
mov edx, dword [0x006989a0]
test edx, edx
jge 0x61e071
call fcn.0040afc0
mov r8d, dword [0x006932f8]
test r8d, r8d
jge 0x61e082
call fcn.0040afc0
mov r9d, dword [0x00693564]
test r9d, r9d
jge 0x61e093
call fcn.0040afc0
mov r10d, ecx
mov r11d, edx
mov ebx, r8d
mov dword [rsp + 0x20], r9d
mov ecx, eax
mov edx, r10d
mov r8d, r11d
mov r9d, ebx
call sub.kernel32.dll_LockFile
jmp 0x61e1e3
mov eax, dword [0x00695d98]
add eax, dword [0x00696588]
mov ecx, dword [0x00696a7c]
add ecx, dword [0x00697460]
cmp eax, ecx
jle 0x61e20b
mov eax, dword [0x00697460]
mov dword [0x00695d98], eax
mov eax, dword [0x006932fc]
add eax, 1
cmp dword [0x006932fc], eax
jne 0x61e232
mov eax, dword [0x00696304]
test eax, eax
jge 0x61e22b
call fcn.0040afc0
mov ecx, eax
call sub.kernel32.dll_SetConsoleKeyShortcuts
nop
lea rcx, [rbp + 0x30]
mov edx, 5
call fcn.0040ea60
lea rcx, [rbp + 0x58]
call fcn.0040e970
lea rcx, [rbp + 0x60]
mov edx, 0xc
call fcn.0040ea60
lea rcx, [rbp + 0xc0]
call fcn.0040e970
lea rcx, [rbp + 0xc8]
mov edx, 4
call fcn.0040ea60
lea rcx, [rbp + 0xe8]
call fcn.0040e970
lea rcx, [rbp + 0xf0]
mov edx, 2
call fcn.0040ea60
lea rcx, [rbp + 0x100]
call fcn.0040e970
lea rcx, [rbp + 0x108]
mov edx, 2
call fcn.0040ea60
lea rcx, [rbp + 0x118]
call fcn.0040e970
lea rcx, [rbp + 0x120]
mov edx, 2
call fcn.0040ea60
lea rcx, [rbp + 0x130]
call fcn.0040e970
lea rcx, [rbp + 0x138]
mov edx, 4
call fcn.0040ea60
lea rcx, [rbp + 0x158]
mov edx, 2
call fcn.0040ea00
lea rcx, [rbp + 0x168]
call fcn.0040e9c0
lea rcx, [rbp + 0x170]
call fcn.0040e920
lea rcx, [rbp + 0x178]
call fcn.0040e9c0
lea rcx, [rbp + 0x180]
mov edx, 2
call fcn.0040ea00
lea rcx, [rbp + 0x190]
call fcn.0040e9c0
lea rcx, [rbp + 0x198]
call fcn.0040e920
lea rcx, [rbp + 0x1a0]
mov edx, 2
call fcn.0040ea60
lea rcx, [rbp + 0x1b0]
mov edx, 2
call fcn.0040ea00
lea rcx, [rbp + 0x1c0]
call fcn.0040e9c0
lea rcx, [rbp + 0x1c8]
call fcn.0040e920
lea rcx, [rbp + 0x1e8]
call fcn.0040e9c0
lea rcx, [rbp + 0x1f0]
mov edx, 2
call fcn.0040ea00
lea rcx, [rbp + 0x200]
call fcn.0040e9c0
lea rcx, [rbp + 0x208]
call fcn.0040e920
lea rcx, [rbp + 0x210]
call fcn.0040e970
lea rcx, [rbp + 0x218]
call fcn.0040e920
lea rcx, [rbp + 0x220]
call fcn.0040e970
lea rcx, [rbp + 0x228]
call fcn.0040e920
lea rcx, [rbp + 0x230]
mov edx, 2
call fcn.0040ea60
lea rcx, [rbp + 0x240]
call fcn.0040e920
lea rcx, [rbp + 0x248]
mov edx, 3
call fcn.0040ea60
lea rcx, [rbp + 0x260]
call fcn.0040e970
lea rcx, [rbp + 0x268]
call fcn.0040e9c0
lea rcx, [rbp + 0x270]
call fcn.0040e970
lea rcx, [rbp + 0x278]
call fcn.0040e9c0
lea rcx, [rbp + 0x280]
call fcn.0040e920
lea rcx, [rbp + 0x288]
mov edx, 2
call fcn.0040ea60
lea rcx, [rbp + 0x298]
call fcn.0040e920
lea rcx, [rbp + 0x2a0]
mov edx, 3
call fcn.0040ea60
lea rcx, [rbp + 0x2e0]
call fcn.0040e970
lea rcx, [rbp + 0x2e8]
call fcn.0040e9c0
lea rcx, [rbp + 0x2f0]
call fcn.0040e970
lea rcx, [rbp + 0x2f8]
mov edx, 3
call fcn.0040ea60
lea rcx, [rbp + 0x310]
mov edx, 2
call fcn.0040ea30
lea rcx, [rbp + 0x320]
call fcn.0040e9c0
lea rcx, [rbp + 0x3e0]
mov edx, 2
call fcn.0040ea60
lea rcx, [rbp + 0x3f0]
call fcn.0040e970
mov eax, dword [rbp + 0x13ac]
lea rsp, [rbp + 0x13d8]
pop rbx
pop rbp
ret