Function at 0x5ffd80
Capabilities:
Get disk size

Disassembly:
push rbp
push rbx
sub rsp, 0x6d8
mov rbp, rsp
mov qword [rbp + 0x30], 0
mov qword [rbp + 0x6c8], 0
mov qword [rbp + 0x38], rbp
mov qword [rbp + 0x6f0], rcx
nop
call fcn.005f9240
cmp eax, dword [0x006932c4]
jle 0x5ffdc2
mov dword [0x006932c4], 0x6c
mov eax, dword [0x0069340c]
add eax, 1
cmp dword [0x0069340c], eax
jne 0x5ffe13
mov eax, dword [0x00696ca8]
test eax, eax
jge 0x5ffde2
call fcn.0040afc0
mov ecx, dword [0x006933d8]
test ecx, ecx
jge 0x5ffdf1
call fcn.0040afc0
mov edx, dword [0x006937f8]
test edx, edx
jge 0x5ffe00
call fcn.0040afc0
mov r8d, ecx
mov r9d, edx
mov ecx, eax
mov edx, r8d
mov r8d, r9d
call sub.kernel32.dll_GetDiskFreeSpaceExW
mov dword [0x006932ac], 0x30b
mov eax, dword [0x006932ac]
sub eax, 0x1a7
mov dword [0x00693438], eax
call fcn.005e7b40
mov eax, dword [0x00693274]
mov dword [0x006974c4], eax
nop
mov eax, dword [0x00696ab0]
add eax, dword [0x0069746c]
mov ecx, dword [0x00695d6c]
add ecx, dword [0x00696588]
cmp ecx, eax
jle 0x5ffe69
mov ecx, dword [0x0069746c]
mov dword [0x00695d6c], ecx
mov ecx, dword [0x00695d6c]
add ecx, dword [0x00696588]
cmp ecx, eax
jle 0x5ffe85
mov eax, dword [0x0069746c]
mov dword [0x00695d6c], eax
mov eax, dword [0x006965d4]
cmp eax, dword [0x00696e7c]
je 0x5ffe9f
mov eax, dword [0x006965d4]
mov dword [0x00696e7c], eax
mov eax, dword [0x00695d78]
add eax, dword [0x006962f8]
mov ecx, dword [0x00696a6c]
add ecx, dword [0x00696e90]
cmp eax, ecx
jle 0x5ffec7
mov eax, dword [0x00696e90]
mov dword [0x00695d78], eax
mov eax, dword [0x006978f0]
mov dword [0x00696cc4], eax
mov eax, dword [0x006935f0]
add eax, 1
cmp dword [0x006935f0], eax
jne 0x5ffefa
mov eax, dword [0x00694138]
test eax, eax
jge 0x5ffef3
call fcn.0040afc0
mov ecx, eax
call sub.kernel32.dll_SetConsoleKeyShortcuts
call fcn.005ea870
cmp eax, dword [0x00697c88]
jle 0x5fff11
mov dword [0x00697c88], 0x33
mov rcx, qword [rbp + 0x6f0]
call fcn.004fd260
mov dword [rbp + 0x6c4], 0x41
lea rcx, [rbp + 0x54]
mov edx, 0x250
xor r8, r8
call fcn.0040a9a0
lea rcx, [rbp + 0x30]
movzx rdx, word [rbp + 0x6c4]
call fcn.00410780
lea rcx, [rbp + 0x30]
lea rdx, [0x00600214]
call fcn.00410aa0
lea rcx, [rbp + 0x6c8]
mov rdx, qword [rbp + 0x30]
call fcn.004108e0
mov rcx, qword [rbp + 0x6c8]
call fcn.00410050
mov rcx, rax
call qword [0x006a8d78]
mov dword [rbp + 0x6c0], eax
mov eax, dword [rbp + 0x6c0]
sub eax, 2
test eax, eax
je 0x5fffa2
sub eax, 1
test eax, eax
je 0x5fffab
sub eax, 1
test eax, eax
jne 0x5fffbd
jmp 0x5fffb4
mov dword [rbp + 0x78], 2
jmp 0x5fffd0
mov dword [rbp + 0x78], 3
jmp 0x5fffd0
mov dword [rbp + 0x78], 4
jmp 0x5fffd0
lea rcx, [rbp + 0x6c8]
call fcn.0040e9c0
mov dword [rbp + 0x78], 6
mov rcx, qword [rbp + 0x6c8]
xor edx, edx
call fcn.00410520
test eax, eax
je 0x600097
mov eax, dword [0x006932dc]
add eax, 1
cmp dword [0x006932dc], eax
jne 0x600016
mov ecx, dword [0x006962dc]
mov edx, dword [0x006978e0]
mov r8d, dword [0x006933e4]
mov r9d, dword [0x00693954]
call sub.advapi32.dll_CryptDuplicateKey
mov eax, dword [0x00693458]
add eax, 1
cmp dword [0x00693458], eax
jne 0x600050
mov ecx, dword [0x006965d0]
mov edx, dword [0x006974b8]
mov r8d, dword [0x006932bc]
mov r9d, dword [0x00693540]
mov eax, dword [0x006940bc]
mov dword [rsp + 0x20], eax
call sub.kernel32.dll_LockFile
mov dword [rbp + 0x7c], 0
mov rcx, qword [rbp + 0x6c8]
call fcn.00410050
mov rbx, rax
mov rcx, rbx
call fcn.0040f120
lea rcx, [rbp + 0x80]
mov rdx, rbx
mov r8d, eax
call fcn.004303e0
mov rcx, qword [rbp + 0x6f0]
lea rdx, [rbp + 0x54]
mov r8d, 0x250
call fcn.004fbd70
add dword [rbp + 0x6c4], 1
cmp dword [rbp + 0x6c4], 0x5b
jne 0x5fff27
nop
jmp 0x6000d7
mov eax, dword [0x00695d88]
add eax, dword [0x00696308]
mov ecx, dword [0x00696a78]
add ecx, dword [0x00697434]
cmp eax, ecx
jle 0x6000ff
mov eax, dword [0x00697434]
mov dword [0x00695d88], eax
mov eax, dword [0x006931ec]
mov dword [0x0069749c], eax
mov eax, dword [0x006931ec]
mov dword [0x0069749c], eax
mov eax, dword [0x006962e4]
cmp eax, dword [0x006968ac]
je 0x600131
mov eax, dword [0x006962e4]
mov dword [0x006968ac], eax
mov eax, dword [0x00695be0]
add eax, dword [0x00696194]
mov ecx, dword [0x00696a6c]
add ecx, dword [0x00696cd8]
cmp eax, ecx
jle 0x600159
mov eax, dword [0x00696cd8]
mov dword [0x00695be0], eax
mov eax, dword [0x006933ec]
add eax, 1
cmp dword [0x006933ec], eax
jne 0x6001aa
mov eax, dword [0x006933ec]
test eax, eax
jge 0x600179
call fcn.0040afc0
mov ecx, dword [0x0069395c]
test ecx, ecx
jge 0x600188
call fcn.0040afc0
mov edx, dword [0x00695834]
test edx, edx
jge 0x600197
call fcn.0040afc0
mov r8d, ecx
mov r9d, edx
mov ecx, eax
mov edx, r8d
mov r8d, r9d
call sub.kernel32.dll_GetDiskFreeSpaceExW
nop
lea rcx, [rbp + 0x30]
call fcn.0040e920
lea rcx, [rbp + 0x6c8]
call fcn.0040e9c0
lea rsp, [rbp + 0x6d8]
pop rbx
pop rbp
ret