Function at 0x5a56a0
Capabilities:
Get disk size

Disassembly:
push rbp
push rbx
sub rsp, 0x108
mov rbp, rsp
mov qword [rbp + 0x68], 0
mov qword [rbp + 0x70], 0
mov qword [rbp + 0x78], rbp
mov qword [rbp + 0x120], rcx
mov dword [rbp + 0x128], edx
mov qword [rbp + 0x130], r8
mov qword [rbp + 0x138], r9
lea rcx, [rbp + 0x130]
call fcn.0040eaf0
lea rcx, [rbp + 0x138]
call fcn.0040eaf0
nop
mov eax, dword [0x00693440]
add eax, dword [0x006934d4]
mov ecx, dword [0x00693510]
add ecx, dword [0x0069354c]
cmp eax, ecx
jle 0x5a571c
mov eax, dword [0x0069354c]
mov dword [0x00693440], eax
call fcn.005a5610
cmp eax, dword [0x00693564]
jle 0x5a5733
mov dword [0x00693564], 0xd
mov eax, dword [0x00693404]
mov dword [0x006933c8], eax
mov eax, dword [0x0069327c]
add eax, 1
cmp dword [0x0069327c], eax
jne 0x5a5779
mov ecx, dword [0x00693204]
mov edx, dword [0x006932f0]
mov r8d, dword [0x006933cc]
mov r9d, dword [0x0069341c]
mov eax, dword [0x006934c4]
mov dword [rsp + 0x20], eax
call sub.kernel32.dll_LockFile
call fcn.005a5610
cmp eax, dword [0x006931d8]
jle 0x5a5790
mov dword [0x006931d8], 0x1a
mov eax, dword [0x0069329c]
add eax, 1
cmp dword [0x0069329c], eax
jne 0x5a57b9
mov ecx, dword [0x006932ac]
mov edx, dword [0x006933b4]
mov r8d, dword [0x00693404]
call sub.kernel32.dll_GetDiskFreeSpaceExW
mov eax, dword [0x006931e4]
mov dword [0x00693568], eax
call fcn.005a5610
cmp eax, dword [0x006931b0]
jle 0x5a57dc
mov dword [0x006931b0], 0xf
mov rax, qword [rbp + 0x120]
mov dword [rax + 0x10], 0
call fcn.005a5610
cmp eax, dword [0x006931c0]
jle 0x5a5801
mov dword [0x006931c0], 0x14
call fcn.005a5490
mov eax, dword [0x006931e4]
mov dword [0x00693568], eax
mov eax, dword [0x006934c0]
cmp eax, dword [0x0069350c]
je 0x5a582c
mov eax, dword [0x006934c0]
mov dword [0x0069350c], eax
mov eax, dword [0x00693540]
mov dword [0x00693504], eax
mov eax, dword [0x00693288]
add eax, 1
cmp dword [0x00693288], eax
jne 0x5a5868
mov ecx, dword [0x00693290]
mov edx, dword [0x006932f0]
mov r8d, dword [0x006933d0]
mov r9d, dword [0x0069340c]
call sub.advapi32.dll_CryptDuplicateKey
mov eax, dword [0x00693278]
add eax, 1
cmp dword [0x00693278], eax
jne 0x5a5898
mov ecx, dword [0x0069355c]
mov edx, dword [0x00693288]
mov r8d, dword [0x006932d8]
mov r9d, dword [0x006933b8]
call sub.advapi32.dll_CryptDuplicateKey
lea rcx, [rbp + 0x98]
mov edx, 0x68
xor r8, r8
call fcn.0040a9a0
call fcn.005a5610
call fcn.005a5610
mov dword [0x006931c8], 0x2fb
mov eax, dword [0x006931c8]
sub eax, 0x19f
mov dword [0x00693204], eax
mov eax, dword [0x00693404]
add eax, dword [0x00693440]
mov ecx, dword [0x006934c0]
add ecx, dword [0x006934fc]
cmp eax, ecx
jle 0x5a58fb
mov eax, dword [0x006934fc]
mov dword [0x00693404], eax
call fcn.005a5610
cmp eax, dword [0x006931cc]
jle 0x5a5912
mov dword [0x006931cc], 0x17
mov dword [rbp + 0x98], 0x68
call fcn.005a5490
mov rcx, qword [0x006a8a28]
call fcn.00410050
mov qword [rbp + 0xa8], rax
mov eax, dword [0x00693404]
add eax, dword [0x00693440]
mov ecx, dword [0x006934c0]
add ecx, dword [0x006934fc]
cmp eax, ecx
jle 0x5a595c
mov eax, dword [0x006934fc]
mov dword [0x00693404], eax
mov eax, dword [0x0069343c]
cmp eax, dword [0x006934d0]
je 0x5a5976
mov eax, dword [0x0069343c]
mov dword [0x006934d0], eax
call fcn.005a5490
mov eax, dword [0x0069353c]
mov dword [0x00693500], eax
mov eax, dword [0x006933ec]
add eax, dword [0x00693424]
mov ecx, dword [0x006934b8]
add ecx, dword [0x006934f4]
cmp eax, ecx
jle 0x5a59a8
call fcn.004096f0
mov eax, dword [0x006933ec]
add eax, dword [0x00693424]
mov ecx, dword [0x006934b8]
add ecx, dword [0x006934f4]
cmp eax, ecx
jle 0x5a59c9
call fcn.004096f0
mov eax, dword [0x006934f4]
cmp eax, dword [0x00693530]
je 0x5a59e3
mov eax, dword [0x006934f4]
mov dword [0x00693530], eax
call fcn.005a5490
mov dword [rbp + 0xd4], 1
call fcn.005a5490
mov eax, dword [0x00693520]
mov dword [0x006934e4], eax
mov eax, dword [0x006933fc]
add eax, dword [0x00693424]
mov ecx, dword [0x006934b8]
add ecx, dword [0x006934f0]
cmp eax, ecx
jle 0x5a5a2b
mov eax, dword [0x006934f0]
mov dword [0x006933fc], eax
mov eax, dword [0x006933fc]
mov dword [0x006933c0], eax
mov eax, dword [0x00693420]
add eax, dword [0x006934b4]
mov ecx, dword [0x006934f0]
add ecx, dword [0x0069352c]
cmp eax, ecx
jle 0x5a5a5f
mov eax, dword [0x0069352c]
mov dword [0x00693420], eax
mov eax, dword [0x006933d0]
mov dword [0x00693308], eax
mov eax, dword [0x0069354c]
mov dword [0x00693510], eax
mov eax, dword [0x006933e4]
add eax, dword [0x00693420]
mov ecx, dword [0x00693448]
add ecx, dword [0x006934dc]
cmp eax, ecx
jle 0x5a5a9f
mov eax, dword [0x006934dc]
mov dword [0x006933e4], eax
movzx rax, word [rbp + 0x140]
mov word [rbp + 0xd8], ax
mov eax, dword [0x00693554]
mov dword [0x00693518], eax
mov eax, dword [0x006931b4]
add eax, dword [0x006931f0]
mov ecx, dword [0x0069328c]
add ecx, dword [0x006932c8]
cmp eax, ecx
jle 0x5a5ae0
mov dword [0x006931b4], 0x187
nop
mov ecx, dword [rbp + 0x128]
lea rdx, [rbp + 0x90]
call qword [0x006a9010]
test eax, eax
je 0x5a5e67
mov rcx, qword [rbp + 0x90]
mov edx, 0x13
lea r8, [rbp + 0x88]
mov r9d, 8
lea rax, [rbp + 0x84]
mov qword [rsp + 0x20], rax
call qword [0x006a8e68]
test eax, eax
je 0x5a5c5e
mov rcx, qword [rbp + 0x138]
xor edx, edx
call fcn.00410520
test eax, eax
je 0x5a5be5
mov rcx, qword [rbp + 0x130]
call fcn.00410050
mov rbx, rax
lea rcx, [rbp + 0x70]
mov edx, 3
mov r8, qword [rbp + 0x130]
lea r9, [0x005a5f58]
mov rax, qword [rbp + 0x138]
mov qword [rsp + 0x20], rax
call fcn.00410400
mov rcx, qword [rbp + 0x70]
call fcn.00410050
mov rcx, qword [rbp + 0x88]
mov rdx, rbx
mov r8, rax
xor r9, r9
mov qword [rsp + 0x20], 0
mov dword [rsp + 0x28], 0
mov eax, dword [rbp + 0x148]
mov dword [rsp + 0x30], eax
mov qword [rsp + 0x38], 0
mov qword [rsp + 0x40], 0
lea rax, [rbp + 0x98]
mov qword [rsp + 0x48], rax
mov rax, qword [rbp + 0x120]
mov qword [rsp + 0x50], rax
call qword [0x006a8ea0]
jmp 0x5a5c4c
mov rcx, qword [rbp + 0x130]
call fcn.00410050
mov rcx, qword [rbp + 0x88]
mov rdx, rax
mov r8, rax
xor r9, r9
mov qword [rsp + 0x20], 0
mov dword [rsp + 0x28], 0
mov eax, dword [rbp + 0x148]
mov dword [rsp + 0x30], eax
mov qword [rsp + 0x38], 0
mov qword [rsp + 0x40], 0
lea rax, [rbp + 0x98]
mov qword [rsp + 0x48], rax
mov rax, qword [rbp + 0x120]
mov qword [rsp + 0x50], rax
call qword [0x006a8ea0]
mov rcx, qword [rbp + 0x88]
call qword [0x006a8bc0]
jmp 0x5a5d79
mov rcx, qword [rbp + 0x138]
xor edx, edx
call fcn.00410520
test eax, eax
je 0x5a5d12
mov rcx, qword [rbp + 0x130]
call fcn.00410050
mov rbx, rax
lea rcx, [rbp + 0x68]
mov edx, 3
mov r8, qword [rbp + 0x130]
lea r9, [0x005a5f58]
mov rax, qword [rbp + 0x138]
mov qword [rsp + 0x20], rax
call fcn.00410400
mov rcx, qword [rbp + 0x68]
call fcn.00410050
mov rcx, qword [rbp + 0x90]
mov rdx, rbx
mov r8, rax
xor r9, r9
mov qword [rsp + 0x20], 0
mov dword [rsp + 0x28], 0
mov eax, dword [rbp + 0x148]
mov dword [rsp + 0x30], eax
mov qword [rsp + 0x38], 0
mov qword [rsp + 0x40], 0
lea rax, [rbp + 0x98]
mov qword [rsp + 0x48], rax
mov rax, qword [rbp + 0x120]
mov qword [rsp + 0x50], rax
call qword [0x006a8ea0]
jmp 0x5a5d79
mov rcx, qword [rbp + 0x130]
call fcn.00410050
mov rcx, qword [rbp + 0x90]
mov rdx, rax
mov r8, rax
xor r9, r9
mov qword [rsp + 0x20], 0
mov dword [rsp + 0x28], 0
mov eax, dword [rbp + 0x148]
mov dword [rsp + 0x30], eax
mov qword [rsp + 0x38], 0
mov qword [rsp + 0x40], 0
lea rax, [rbp + 0x98]
mov qword [rsp + 0x48], rax
mov rax, qword [rbp + 0x120]
mov qword [rsp + 0x50], rax
call qword [0x006a8ea0]
mov rcx, qword [rbp + 0x90]
call qword [0x006a8bc0]
jmp 0x5a5e67
mov eax, dword [0x00693548]
mov dword [0x0069350c], eax
mov eax, dword [0x006931fc]
add eax, 1
cmp dword [0x006931fc], eax
jne 0x5a5e8f
mov ecx, dword [0x00693564]
call sub.kernel32.dll_SetConsoleKeyShortcuts
mov eax, dword [0x006931b8]
add eax, dword [0x006931f0]
mov ecx, dword [0x0069328c]
add ecx, dword [0x006932dc]
cmp eax, ecx
jle 0x5a5eb5
mov dword [0x006931b8], 0x82
mov eax, dword [0x006933f8]
add eax, dword [0x00693434]
mov ecx, dword [0x006934c8]
add ecx, dword [0x00693504]
cmp eax, ecx
jle 0x5a5edd
mov eax, dword [0x00693504]
mov dword [0x006933f8], eax
nop
lea rcx, [rbp + 0x68]
mov edx, 2
call fcn.0040ea60
lea rcx, [rbp + 0x130]
mov edx, 2
call fcn.0040ea60
mov rax, qword [rbp + 0x120]
lea rsp, [rbp + 0x108]
pop rbx
pop rbp
ret