Function at 0x5d2300
Capabilities:
Get disk size

Disassembly:
push rbp
push rbx
sub rsp, 0xb8
mov rbp, rsp
mov qword [rbp + 0x40], 0
mov qword [rbp + 0x48], rbp
mov qword [rbp + 0xd0], rcx
mov qword [rbp + 0xd8], rdx
lea rcx, [rbp + 0xd0]
call fcn.0040eaf0
nop
mov eax, dword [0x006931b4]
mov dword [0x00695b98], eax
mov eax, dword [0x006942c8]
cmp eax, dword [0x00695818]
je 0x5d2359
mov eax, dword [0x006942c8]
mov dword [0x00695818], eax
mov eax, dword [0x006932d8]
add eax, 1
cmp dword [0x006932d8], eax
jne 0x5d2389
mov ecx, dword [0x00693424]
mov edx, dword [0x00693958]
mov r8d, dword [0x006942ac]
mov r9d, dword [0x0069582c]
call sub.advapi32.dll_CryptDuplicateKey
call fcn.005cce40
cmp eax, dword [0x00695d78]
jle 0x5d23a0
mov dword [0x00695d78], 0x1d
mov eax, dword [0x00695b98]
mov dword [0x006958c4], eax
mov eax, dword [0x006942ac]
add eax, dword [0x00695830]
mov ecx, dword [0x006958e4]
add ecx, dword [0x00695bb8]
cmp eax, ecx
jle 0x5d23d4
mov eax, dword [0x00695bb8]
mov dword [0x006942ac], eax
mov eax, dword [0x006940e4]
mov dword [0x0069393c], eax
mov eax, dword [0x006942c4]
add eax, dword [0x00695844]
mov ecx, dword [0x006958fc]
add ecx, dword [0x00695bcc]
cmp eax, ecx
jle 0x5d2408
mov eax, dword [0x00695bcc]
mov dword [0x006942c4], eax
mov byte [rbp + 0xaf], 0
nop
mov eax, dword [0x00695bf0]
mov dword [0x00695920], eax
mov eax, dword [0x006942cc]
add eax, dword [0x0069584c]
mov ecx, dword [0x00695904]
add ecx, dword [0x00695bd4]
cmp eax, ecx
jle 0x5d2444
mov eax, dword [0x00695bd4]
mov dword [0x006942cc], eax
mov eax, dword [0x00693944]
mov dword [0x00693530], eax
mov eax, dword [0x006940f4]
add eax, dword [0x006942d0]
mov ecx, dword [0x00695854]
add ecx, dword [0x00695908]
cmp eax, ecx
jle 0x5d2478
mov eax, dword [0x00695908]
mov dword [0x006940f4], eax
mov eax, dword [0x0069409c]
add eax, dword [0x00694134]
mov ecx, dword [0x006957fc]
add ecx, dword [0x00695894]
cmp eax, ecx
jle 0x5d2499
call fcn.004096f0
lea rcx, [rbp + 0x90]
lea rdx, [rbp + 0x68]
call fcn.005cf850
test al, al
je 0x5d2788
mov eax, dword [0x006931cc]
mov dword [0x00695be0], eax
mov eax, dword [0x006931cc]
mov dword [0x00695be0], eax
mov eax, dword [0x00695834]
cmp eax, dword [0x006958e8]
je 0x5d24e3
mov eax, dword [0x00695834]
mov dword [0x006958e8], eax
mov eax, dword [0x006932d8]
add eax, 1
cmp dword [0x006932d8], eax
jne 0x5d24ff
mov ecx, dword [0x00693980]
call sub.kernel32.dll_SetConsoleKeyShortcuts
call fcn.005ccda0
mov eax, dword [0x00695bd4]
mov dword [0x00695904], eax
call fcn.005ccda0
mov eax, dword [0x00694128]
add eax, dword [0x00694304]
mov ecx, dword [0x00695888]
add ecx, dword [0x0069593c]
cmp eax, ecx
jle 0x5d253d
mov eax, dword [0x0069593c]
mov dword [0x00694128], eax
mov eax, dword [0x00693944]
mov dword [0x00693534], eax
mov eax, dword [0x006940cc]
add eax, dword [0x00694134]
mov ecx, dword [0x006957f8]
add ecx, dword [0x00695894]
cmp eax, ecx
jle 0x5d256a
call fcn.004096f0
mov rcx, qword [rbp + 0xd0]
call fcn.00410050
mov rbx, rax
lea rcx, [rbp + 0x40]
mov rdx, rbx
call fcn.004107d0
mov rcx, qword [rbp + 0x40]
mov dl, 1
call fcn.0042f710
test al, al
je 0x5d259d
mov rcx, rbx
call qword [0x006a8cf0]
call fcn.005ccda0
mov eax, dword [0x006940cc]
add eax, dword [0x00694134]
mov ecx, dword [0x006957f8]
add ecx, dword [0x00695894]
cmp eax, ecx
jle 0x5d25c3
call fcn.004096f0
mov eax, dword [0x00695850]
cmp eax, dword [0x00695938]
je 0x5d25dd
mov eax, dword [0x00695850]
mov dword [0x00695938], eax
mov eax, dword [0x006932c4]
add eax, 1
cmp dword [0x006932c4], eax
jne 0x5d2606
mov ecx, dword [0x00693540]
mov edx, dword [0x0069412c]
mov r8d, dword [0x00695824]
call sub.kernel32.dll_GetDiskFreeSpaceExW
mov eax, dword [0x006940e0]
add eax, dword [0x006942f4]
mov ecx, dword [0x00695874]
add ecx, dword [0x00695928]
cmp eax, ecx
jle 0x5d262e
mov eax, dword [0x00695928]
mov dword [0x006940e0], eax
mov eax, dword [0x00695d84]
mov dword [0x00695ba4], eax
call fcn.005cdc30
mov rcx, rbx
mov edx, 0xc0000000
mov r8d, 3
lea r9, [rbp + 0x90]
mov dword [rsp + 0x20], 1
mov dword [rsp + 0x28], 0x80
mov qword [rsp + 0x30], 0
call qword [0x006a8c28]
mov dword [rbp + 0x64], eax
call qword [0x006a9208]
mov dword [rbp + 0x5c], eax
mov eax, dword [rbp + 0x64]
cmp rax, 0xffffffffffffffff
je 0x5d2788
cmp dword [rbp + 0x5c], 0
jne 0x5d2788
mov ebx, dword [rbp + 0x64]
mov rcx, qword [rbp + 0xd8]
mov rax, qword [rbp + 0xd8]
mov rax, qword [rax]
call qword [rax]
mov rcx, rbx
mov rdx, qword [rbp + 0xd8]
mov rdx, qword [rdx + 8]
mov r8d, eax
lea r9, [rbp + 0x60]
mov qword [rsp + 0x20], 0
call qword [0x006a8cf8]
test eax, eax
setne al
mov byte [rbp + 0xaf], al
mov rcx, rbx
call qword [0x006a8bc0]
jmp 0x5d2788
mov eax, dword [0x00695878]
add eax, dword [0x0069592c]
mov ecx, dword [0x00694118]
add ecx, dword [0x006942f4]
cmp ecx, eax
jle 0x5d27b0
mov ecx, dword [0x0069592c]
mov dword [0x00694118], ecx
mov ecx, dword [0x00694118]
add ecx, dword [0x006942f4]
cmp ecx, eax
jle 0x5d27cc
mov eax, dword [0x0069592c]
mov dword [0x00694118], eax
mov eax, dword [0x0069580c]
cmp eax, dword [0x006958a4]
je 0x5d27e6
mov eax, dword [0x0069580c]
mov dword [0x006958a4], eax
mov eax, dword [0x00695d90]
add eax, dword [0x00693294]
mov ecx, dword [0x006932fc]
add ecx, dword [0x00693424]
cmp eax, ecx
jle 0x5d280c
mov dword [0x00695d90], 0x12b
nop
lea rcx, [rbp + 0x40]
call fcn.0040e920
lea rcx, [rbp + 0xd0]
call fcn.0040e9c0
movzx rax, byte [rbp + 0xaf]
lea rsp, [rbp + 0xb8]
pop rbx
pop rbp
ret