Function at 0x5baad0
Capabilities:
Get disk size

Disassembly:
push rsi
push rbx
sub rsp, 0x28
mov rbx, rcx
mov dword [0x006931d0], 0x2f0
mov eax, dword [0x006931d0]
sub eax, 0x19a
mov dword [0x00693298], eax
mov eax, dword [0x0069395c]
cmp eax, dword [0x006940d0]
je 0x5bab0f
mov eax, dword [0x0069395c]
mov dword [0x006940d0], eax
mov eax, dword [0x006942b4]
mov dword [0x00694128], eax
mov eax, dword [0x006932f8]
add eax, 1
cmp dword [0x006932f8], eax
jne 0x5bab4b
mov ecx, dword [0x006933fc]
mov edx, dword [0x00693500]
mov r8d, dword [0x00693900]
mov r9d, dword [0x00694098]
call sub.advapi32.dll_CryptDuplicateKey
call fcn.005b9400
cmp eax, dword [0x006931d4]
jle 0x5bab62
mov dword [0x006931d4], 0x24
mov eax, dword [0x006940c8]
add eax, dword [0x00694130]
mov ecx, dword [0x00693910]
add ecx, dword [0x00693978]
cmp ecx, eax
jle 0x5bab8a
mov ecx, dword [0x00694130]
mov dword [0x00693910], ecx
mov ecx, dword [0x00693910]
add ecx, dword [0x00693978]
cmp ecx, eax
jle 0x5baba6
mov eax, dword [0x00694130]
mov dword [0x00693910], eax
mov eax, dword [0x006940a0]
cmp eax, dword [0x00694108]
je 0x5babc0
mov eax, dword [0x006940a0]
mov dword [0x00694108], eax
cmp byte [rbx + 0x23], 1
je 0x5badab
cmp byte [rbx + 0xab], 0
je 0x5badab
mov eax, dword [0x006931e4]
add eax, 1
cmp dword [0x006931e4], eax
jne 0x5babf3
mov ecx, dword [0x006935ec]
call sub.kernel32.dll_SetConsoleKeyShortcuts
mov dword [0x00694300], 0x305
mov eax, dword [0x00694300]
sub eax, 0x195
mov dword [0x006931e8], eax
mov eax, dword [0x006942e4]
add eax, dword [0x006931cc]
mov ecx, dword [0x00693210]
add ecx, dword [0x006932b8]
cmp eax, ecx
jle 0x5bac35
mov dword [0x006942e4], 2
mov eax, dword [0x006942bc]
mov dword [0x00694110], eax
call fcn.005ad620
cmp eax, dword [0x006942c8]
jle 0x5bac58
mov dword [0x006942c8], 2
call fcn.005ad620
mov rax, qword [rbx + 0x18]
movzx rax, byte [rax]
mov byte [rbx + 0x20], al
lea rax, [rbx + 0x18]
add qword [rax], 1
mov eax, dword [0x00694294]
mov dword [0x00694108], eax
mov eax, dword [0x00694294]
mov dword [0x00694108], eax
mov eax, dword [0x00693920]
cmp eax, dword [0x00693964]
je 0x5baca2
mov eax, dword [0x00693920]
mov dword [0x00693964], eax
mov eax, dword [0x00693430]
mov dword [0x006933ec], eax
call fcn.005aba50
mov eax, dword [0x006942bc]
add eax, dword [0x006931c8]
mov ecx, dword [0x0069320c]
add ecx, dword [0x006932d4]
cmp eax, ecx
jle 0x5bacd9
mov dword [0x006942bc], 0x13c
call fcn.005ae6a0
cmp eax, dword [0x006931bc]
jle 0x5bacf0
mov dword [0x006931bc], 0x15
mov eax, dword [0x00694130]
mov dword [0x006940ec], eax
mov eax, dword [0x00694130]
mov dword [0x006940ec], eax
mov eax, dword [0x00693960]
cmp eax, dword [0x006940b4]
je 0x5bad22
mov eax, dword [0x00693960]
mov dword [0x006940b4], eax
mov eax, dword [0x006934fc]
add eax, dword [0x00693564]
mov ecx, dword [0x00693920]
add ecx, dword [0x00693988]
cmp eax, ecx
jle 0x5bad4a
mov eax, dword [0x00693988]
mov dword [0x006934fc], eax
call fcn.005b0ad0
cmp eax, dword [0x006931e4]
jle 0x5bad61
mov dword [0x006931e4], 0x1f
mov eax, dword [0x006932d4]
add eax, 1
cmp dword [0x006932d4], eax
jne 0x5bad8a
mov ecx, dword [0x0069327c]
mov edx, dword [0x00693304]
mov r8d, dword [0x00693500]
call sub.kernel32.dll_GetDiskFreeSpaceExW
mov dword [0x006931c0], 0x302
mov eax, dword [0x006931c0]
sub eax, 0x1a3
mov dword [0x00693208], eax
jmp 0x5baf3e
mov rsi, rbx
call fcn.005ad620
cmp eax, dword [0x006942c8]
jle 0x5badc5
mov dword [0x006942c8], 2
call fcn.005ad620
mov rax, qword [rsi + 0x18]
movzx rax, byte [rax]
mov byte [rsi + 0x20], al
lea rax, [rsi + 0x18]
add qword [rax], 1
mov eax, dword [0x00694294]
mov dword [0x00694108], eax
mov eax, dword [0x00694294]
mov dword [0x00694108], eax
mov eax, dword [0x00693920]
cmp eax, dword [0x00693964]
je 0x5bae0f
mov eax, dword [0x00693920]
mov dword [0x00693964], eax
mov eax, dword [0x00693430]
mov dword [0x006933ec], eax
call fcn.005aba50
mov eax, dword [0x006942bc]
add eax, dword [0x006931c8]
mov ecx, dword [0x0069320c]
add ecx, dword [0x006932d4]
cmp eax, ecx
jle 0x5bae46
mov dword [0x006942bc], 0x13c
call fcn.005ae6a0
cmp eax, dword [0x006931bc]
jle 0x5bae5d
mov dword [0x006931bc], 0x15
mov eax, dword [0x00694130]
mov dword [0x006940ec], eax
mov eax, dword [0x00694130]
mov dword [0x006940ec], eax
mov eax, dword [0x00693960]
cmp eax, dword [0x006940b4]
je 0x5bae8f
mov eax, dword [0x00693960]
mov dword [0x006940b4], eax
mov eax, dword [0x006934fc]
add eax, dword [0x00693564]
mov ecx, dword [0x00693920]
add ecx, dword [0x00693988]
cmp eax, ecx
jle 0x5baeb7
mov eax, dword [0x00693988]
mov dword [0x006934fc], eax
mov rcx, rbx
mov dl, 1
call fcn.005b06d0
mov eax, dword [0x006931b4]
mov dword [0x006942a8], eax
mov eax, dword [0x00693524]
add eax, dword [0x00693568]
mov ecx, dword [0x00693948]
add ecx, dword [0x00694098]
cmp eax, ecx
jle 0x5baef5
mov eax, dword [0x00694098]
mov dword [0x00693524], eax
call fcn.005b7fb0
cmp eax, dword [0x006931cc]
jle 0x5baf0c
mov dword [0x006931cc], 0x22
mov eax, dword [0x006931f0]
mov dword [0x006942e4], eax
mov eax, dword [0x006931f0]
mov dword [0x006942e4], eax
mov eax, dword [0x00693960]
cmp eax, dword [0x006940d4]
je 0x5baf3e
mov eax, dword [0x00693960]
mov dword [0x006940d4], eax
add rsp, 0x28
pop rbx
pop rsi
ret