Function at 0x653440
Capabilities:
Get disk size

Disassembly:
push rbp
push rbx
sub rsp, 0x258
mov rbp, rsp
mov qword [rbp + 0x38], 0
mov qword [rbp + 0x50], 0
mov qword [rbp + 0x48], 0
mov qword [rbp + 0x40], 0
mov qword [rbp + 0x78], 0
mov qword [rbp + 0x70], 0
mov qword [rbp + 0x60], 0
mov qword [rbp + 0x58], 0
mov qword [rbp + 0x68], 0
mov qword [rbp + 0x80], 0
mov qword [rbp + 0x88], 0
mov qword [rbp + 0x90], 0
mov qword [rbp + 0xb8], 0
mov qword [rbp + 0xb0], 0
mov qword [rbp + 0xa0], 0
mov qword [rbp + 0x98], 0
mov qword [rbp + 0xa8], 0
mov qword [rbp + 0xc0], 0
mov qword [rbp + 0xc8], 0
mov qword [rbp + 0xf0], 0
mov qword [rbp + 0xe8], 0
mov qword [rbp + 0xd8], 0
mov qword [rbp + 0xd0], 0
mov qword [rbp + 0xe0], 0
mov qword [rbp + 0xf8], 0
mov qword [rbp + 0x120], 0
mov qword [rbp + 0x118], 0
mov qword [rbp + 0x130], 0
mov qword [rbp + 0x128], 0
mov qword [rbp + 0x148], 0
mov qword [rbp + 0x140], 0
mov qword [rbp + 0x138], 0
mov qword [rbp + 0x158], 0
mov qword [rbp + 0x150], 0
mov qword [rbp + 0x170], 0
mov qword [rbp + 0x168], 0
mov qword [rbp + 0x160], 0
mov qword [rbp + 0x188], 0
mov qword [rbp + 0x180], 0
mov qword [rbp + 0x178], 0
mov qword [rbp + 0x198], 0
mov qword [rbp + 0x190], 0
mov qword [rbp + 0x1c0], 0
mov qword [rbp + 0x1b8], 0
mov qword [rbp + 0x1a8], 0
mov qword [rbp + 0x1a0], 0
mov qword [rbp + 0x1b0], 0
mov qword [rbp + 0x1c8], 0
mov qword [rbp + 0x1e0], 0
mov qword [rbp + 0x1d8], 0
mov qword [rbp + 0x1d0], 0
mov qword [rbp + 0x208], 0
mov qword [rbp + 0x200], 0
mov qword [rbp + 0x1f0], 0
mov qword [rbp + 0x1e8], 0
mov qword [rbp + 0x1f8], 0
mov qword [rbp + 0x210], 0
mov qword [rbp + 0x248], 0
mov qword [rbp + 0x240], 0
mov qword [rbp + 0x238], 0
mov qword [rbp + 0x230], 0
mov qword [rbp + 0x228], 0
mov qword [rbp + 0x218], rbp
mov byte [rbp + 0x270], cl
nop
nop
call fcn.005a3260
test eax, eax
jge 0x6536f8
call fcn.0040afc0
mov dword [rbp + 0x224], eax
call fcn.00622e10
mov eax, dword [0x00696ce0]
add eax, dword [0x006978f8]
mov ecx, dword [0x00698af4]
add ecx, dword [0x006990a0]
cmp eax, ecx
jle 0x65372b
mov eax, dword [0x006990a0]
mov dword [0x00696ce0], eax
mov eax, dword [0x00698f8c]
cmp eax, dword [0x006994f8]
je 0x653745
mov eax, dword [0x00698f8c]
mov dword [0x006994f8], eax
mov eax, dword [0x0069a9a4]
mov dword [0x00699dbc], eax
mov eax, dword [0x0069a9a4]
mov dword [0x00699dbc], eax
mov eax, dword [0x006990b0]
cmp eax, dword [0x006995d4]
je 0x653777
mov eax, dword [0x006990b0]
mov dword [0x006995d4], eax
mov eax, dword [0x0069aaf4]
mov dword [0x0069a954], eax
mov eax, dword [0x0069aaf4]
mov dword [0x0069a954], eax
mov eax, dword [0x00699394]
cmp eax, dword [0x00699a50]
je 0x6537a9
mov eax, dword [0x00699394]
mov dword [0x00699a50], eax
mov eax, dword [rbp + 0x224]
sub eax, 1
cmp eax, 0xffffffff
je 0x6537e6
sub eax, 0xfff
test eax, eax
je 0x653c75
sub eax, 0x1000
test eax, eax
je 0x653d3c
sub eax, 0x1000
test eax, eax
jne 0x65588b
jmp 0x6554bd
lea rcx, [rbp + 0x210]
lea rdx, [0x006a8721]
call fcn.0040ff20
mov rcx, qword [rbp + 0x210]
call fcn.005f8cd0
mov eax, dword [0x00696a94]
add eax, dword [0x00697490]
mov ecx, dword [0x00698774]
add ecx, dword [0x00698e94]
cmp eax, ecx
jle 0x653826
call fcn.004096f0
call fcn.0063a6c0
cmp eax, dword [0x0069aae8]
jle 0x65383d
mov dword [0x0069aae8], 0x4cf
mov dword [0x0069ae34], 0x305
mov eax, dword [0x0069ae34]
sub eax, 0x195
mov dword [0x00693284], eax
mov eax, dword [0x00696cd8]
add eax, dword [0x006978f0]
mov ecx, dword [0x00698aec]
add ecx, dword [0x00699094]
cmp eax, ecx
jle 0x65387a
call fcn.004096f0
mov eax, dword [0x00693504]
add eax, 1
cmp dword [0x00693504], eax
jne 0x6538f8
mov eax, dword [0x00699bd4]
test eax, eax
jge 0x65389a
call fcn.0040afc0
mov ecx, dword [0x0069a9d0]
test ecx, ecx
jge 0x6538a9
call fcn.0040afc0
mov edx, dword [0x0069320c]
test edx, edx
jge 0x6538b8
call fcn.0040afc0
mov r8d, dword [0x00693528]
test r8d, r8d
jge 0x6538c9
call fcn.0040afc0
mov r9d, dword [0x006942c0]
test r9d, r9d
jge 0x6538da
call fcn.0040afc0
mov r10d, ecx
mov r11d, edx
mov ebx, r8d
mov dword [rsp + 0x20], r9d
mov ecx, eax
mov edx, r10d
mov r8d, r11d
mov r9d, ebx
call sub.kernel32.dll_LockFile
mov eax, dword [0x0069addc]
add eax, dword [0x006931cc]
mov ecx, dword [0x006933f4]
add ecx, dword [0x00693800]
cmp eax, ecx
jle 0x65391e
mov dword [0x0069addc], 0x43
mov eax, dword [0x00693518]
add eax, 1
cmp dword [0x00693518], eax
jne 0x65396f
mov eax, dword [0x00693418]
test eax, eax
jge 0x65393e
call fcn.0040afc0
mov ecx, dword [0x0069582c]
test ecx, ecx
jge 0x65394d
call fcn.0040afc0
mov edx, dword [0x00695d9c]
test edx, edx
jge 0x65395c
call fcn.0040afc0
mov r8d, ecx
mov r9d, edx
mov ecx, eax
mov edx, r8d
mov r8d, r9d
call sub.kernel32.dll_GetDiskFreeSpaceExW
lea rcx, [rbp + 0x208]
lea rdx, [0x006a8721]
call fcn.0040ff20
lea rcx, [rbp + 0x200]
lea rdx, [0x006a84f8]
mov r8d, 0x104
call fcn.0040ff40
lea rcx, [rbp + 0x1f8]
lea rdx, [0x006a8742]
call fcn.0040ff20
lea rcx, [rbp + 0x200]
mov rdx, qword [rbp + 0x1f8]
call fcn.00410070
lea rcx, [rbp + 0x1f0]
lea rdx, [0x006a84f8]
mov r8d, 0x104
call fcn.0040ff40
lea rcx, [rbp + 0x1e8]
lea rdx, [0x006a8763]
call fcn.0040ff20
lea rcx, [rbp + 0x1f0]
mov rdx, qword [rbp + 0x1e8]
call fcn.00410070
mov rcx, qword [rbp + 0x208]
mov rdx, qword [rbp + 0x200]
mov r8, qword [rbp + 0x1f0]
call fcn.005f93b0
test al, al
jne 0x65588b
mov eax, dword [0x006978f8]
add eax, dword [0x00698af4]
mov ecx, dword [0x006990a0]
add ecx, dword [0x00699564]
cmp eax, ecx
jle 0x653a4c
mov eax, dword [0x00699564]
mov dword [0x006978f8], eax
call fcn.00649cf0
cmp eax, dword [0x006931d8]
jle 0x653a63
mov dword [0x006931d8], 0x58
mov eax, dword [0x006958d4]
sub eax, dword [0x00694298]
mov dword [0x00694298], eax
lea rcx, [rbp + 0x1e0]
lea rdx, [0x006a8721]
call fcn.0040ff20
lea rcx, [rbp + 0x1d8]
lea rdx, [0x006a84f8]
mov r8d, 0x104
call fcn.0040ff40
lea rcx, [rbp + 0x1d0]
lea rdx, [0x006a8763]
call fcn.0040ff20
lea rcx, [rbp + 0x1d8]
mov rdx, qword [rbp + 0x1d0]
call fcn.00410070
mov rcx, qword [rbp + 0x1e0]
mov rdx, qword [rbp + 0x1d8]
call fcn.005f98d0
mov eax, dword [0x0069adc4]
mov dword [0x0069a978], eax
mov eax, dword [0x0069adc4]
mov dword [0x0069a978], eax
mov eax, dword [0x00699378]
cmp eax, dword [0x00699894]
je 0x653b0d
mov eax, dword [0x00699378]
mov dword [0x00699894], eax
mov eax, dword [0x0069895c]
add eax, dword [0x00698ea4]
mov ecx, dword [0x006995e8]
add ecx, dword [0x00699c08]
cmp eax, ecx
jle 0x653b35
mov eax, dword [0x00699c08]
mov dword [0x0069895c], eax
lea rcx, [rbp + 0x1c8]
lea rdx, [0x006a8721]
call fcn.004109a0
mov rcx, qword [rbp + 0x1c8]
call fcn.005fc130
mov eax, dword [0x0069a010]
mov dword [0x00699bec], eax
call fcn.0063a6c0
cmp eax, dword [0x0069ae40]
jle 0x653b77
mov dword [0x0069ae40], 0x21
mov eax, dword [0x006980d8]
add eax, dword [0x00698f9c]
mov ecx, dword [0x00699508]
add ecx, dword [0x00699894]
cmp eax, ecx
jle 0x653b9f
mov eax, dword [0x00699894]
mov dword [0x006980d8], eax
call fcn.0063da90
cmp eax, dword [0x0069ae38]
jle 0x653bb6
mov dword [0x0069ae38], 0x46
mov eax, dword [0x00697e84]
mov dword [0x00696ab4], eax
mov eax, dword [0x006931dc]
mov dword [0x0069aaa4], eax
mov eax, dword [0x006974d4]
mov dword [0x00696894], eax
mov eax, dword [0x006974d4]
mov dword [0x00696894], eax
mov eax, dword [0x0069954c]
cmp eax, dword [0x00699d44]
je 0x653c00
mov eax, dword [0x0069954c]
mov dword [0x00699d44], eax
mov eax, dword [0x00696e64]
mov dword [0x006965d0], eax
call fcn.00652a40
mov eax, dword [0x00696e64]
mov dword [0x006965d0], eax
mov eax, dword [0x0069965c]
cmp eax, dword [0x0069a004]
je 0x653c37
mov eax, dword [0x0069965c]
mov dword [0x0069a004], eax
mov eax, dword [0x00698e7c]
add eax, dword [0x00699560]
mov ecx, dword [0x00699d58]
add ecx, dword [0x0069a9dc]
cmp eax, ecx
jle 0x653c5f
mov eax, dword [0x0069a9dc]
mov dword [0x00698e7c], eax
mov eax, dword [0x006962f0]
mov dword [0x00695914], eax
call fcn.0062afa0
jmp 0x65588b
mov eax, dword [0x0069aa88]
mov dword [0x00699d9c], eax
mov eax, dword [0x00698108]
add eax, dword [0x00698e54]
mov ecx, dword [0x00699538]
add ecx, dword [0x00699d30]
cmp eax, ecx
jle 0x653ca9
mov eax, dword [0x00699d30]
mov dword [0x00698108], eax
call fcn.00646150
cmp eax, dword [0x00693298]
jle 0x653cc0
mov dword [0x00693298], 0x71
mov eax, dword [0x0069a9d4]
mov dword [0x00699ffc], eax
mov eax, dword [0x006974a8]
add eax, dword [0x00698b20]
mov ecx, dword [0x006994f4]
add ecx, dword [0x00699880]
cmp eax, ecx
jle 0x653ced
call fcn.004096f0
call fcn.0063e2d0
cmp eax, dword [0x0069b020]
jle 0x653d04
mov dword [0x0069b020], 0x5f
call fcn.0064d990
cmp eax, dword [0x006933b0]
jle 0x653d1b
mov dword [0x006933b0], 0x93
mov dword [0x006933ec], 0x350
mov eax, dword [0x006933ec]
sub eax, 0x1b9
mov dword [0x006937f8], eax
jmp 0x65588b
mov eax, dword [0x00693300]
add eax, 1
cmp dword [0x00693300], eax
jne 0x653da4
mov eax, dword [0x0069343c]
test eax, eax
jge 0x653d5c
call fcn.0040afc0
mov ecx, dword [0x006965c4]
test ecx, ecx
jge 0x653d6b
call fcn.0040afc0
mov edx, dword [0x0069748c]
test edx, edx
jge 0x653d7a
call fcn.0040afc0
mov r8d, dword [0x00698b04]
test r8d, r8d
jge 0x653d8b
call fcn.0040afc0
mov r9d, ecx
mov r10d, edx
mov r11d, r8d
mov ecx, eax
mov edx, r9d
mov r8d, r10d
mov r9d, r11d
call sub.advapi32.dll_CryptDuplicateKey
mov eax, dword [0x00699894]
mov dword [0x00699508], eax
mov eax, dword [0x00696ac4]
mov dword [0x00696314], eax
mov eax, dword [0x0069a50c]
mov dword [0x00699a58], eax
call fcn.0063b390
cmp eax, dword [0x0069aff4]
jle 0x653ddf
mov dword [0x0069aff4], 0x2d
mov dword [0x0069b040], 0x301
mov eax, dword [0x0069b040]
sub eax, 0x193
mov dword [0x00693438], eax
lea rcx, [rbp + 0x1c0]
lea rdx, [0x006a8721]
call fcn.0040ff20
lea rcx, [rbp + 0x1b8]
lea rdx, [0x006a84f8]
mov r8d, 0x104
call fcn.0040ff40
lea rcx, [rbp + 0x1b0]
lea rdx, [0x006a8742]
call fcn.0040ff20
lea rcx, [rbp + 0x1b8]
mov rdx, qword [rbp + 0x1b0]
call fcn.00410070
lea rcx, [rbp + 0x1a8]
lea rdx, [0x006a84f8]
mov r8d, 0x104
call fcn.0040ff40
lea rcx, [rbp + 0x1a0]
lea rdx, [0x006a8763]
call fcn.0040ff20
lea rcx, [rbp + 0x1a8]
mov rdx, qword [rbp + 0x1a0]
call fcn.00410070
mov rcx, qword [rbp + 0x1c0]
mov rdx, qword [rbp + 0x1b8]
mov r8, qword [rbp + 0x1a8]
call fcn.005f93b0
test al, al
jne 0x6553b8
cmp byte [rbp + 0x270], 0
je 0x653ec6
xor ecx, ecx
call qword [0x006a8e00]
jmp 0x65588b
lea rcx, [rbp + 0x248]
lea rdx, [0x006a8763]
call fcn.0040ff20
mov eax, dword [0x006980e0]
add eax, dword [0x00698d38]
mov ecx, dword [0x00699510]
add ecx, dword [0x0069989c]
cmp eax, ecx
jle 0x653f01
mov eax, dword [0x0069989c]
mov dword [0x006980e0], eax
lea rcx, [rbp + 0x198]
lea rdx, [0x006a84f8]
mov r8d, 0x104
call fcn.0040ff40
lea rcx, [rbp + 0x190]
lea rdx, [0x006a8763]
call fcn.0040ff20
lea rcx, [rbp + 0x238]
mov rdx, qword [rbp + 0x198]
mov r8, qword [rbp + 0x190]
call fcn.00410100
call fcn.0063bea0
cmp eax, dword [0x0069b024]
jle 0x653f5f
mov dword [0x0069b024], 0x38
call fcn.00646150
cmp eax, dword [0x0069b064]
jle 0x653f76
mov dword [0x0069b064], 0x70
mov eax, dword [0x0069aa64]
mov dword [0x00699d7c], eax
mov eax, dword [0x0069aa64]
mov dword [0x00699d7c], eax
mov eax, dword [0x00698e84]
cmp eax, dword [0x006995c8]
je 0x653fa8
mov eax, dword [0x00698e84]
mov dword [0x006995c8], eax
mov eax, dword [0x0069429c]
add eax, 1
cmp dword [0x0069429c], eax
jne 0x654026
mov eax, dword [0x006942dc]
test eax, eax
jge 0x653fc8
call fcn.0040afc0
mov ecx, dword [0x006962f0]
test ecx, ecx
jge 0x653fd7
call fcn.0040afc0
mov edx, dword [0x00696e68]
test edx, edx
jge 0x653fe6
call fcn.0040afc0
mov r8d, dword [0x00697e74]
test r8d, r8d
jge 0x653ff7
call fcn.0040afc0
mov r9d, dword [0x00698ea0]
test r9d, r9d
jge 0x654008
call fcn.0040afc0
mov r10d, ecx
mov r11d, edx
mov ebx, r8d
mov dword [rsp + 0x20], r9d
mov ecx, eax
mov edx, r10d
mov r8d, r11d
mov r9d, ebx
call sub.kernel32.dll_LockFile
mov eax, dword [0x00696a80]
add eax, dword [0x0069747c]
mov ecx, dword [0x00698134]
add ecx, dword [0x006990a0]
cmp eax, ecx
jle 0x654047
call fcn.004096f0
call fcn.0063da40
cmp eax, dword [0x0069b038]
jle 0x65405e
mov dword [0x0069b038], 0x3e
mov eax, dword [0x006933fc]
add eax, 1
cmp dword [0x006933fc], eax
jne 0x6540c6
mov eax, dword [0x00696e80]
test eax, eax
jge 0x65407e
call fcn.0040afc0
mov ecx, dword [0x00698b2c]
test ecx, ecx
jge 0x65408d
call fcn.0040afc0
mov edx, dword [0x00699500]
test edx, edx
jge 0x65409c
call fcn.0040afc0
mov r8d, dword [0x00699c1c]
test r8d, r8d
jge 0x6540ad
call fcn.0040afc0
mov r9d, ecx
mov r10d, edx
mov r11d, r8d
mov ecx, eax
mov edx, r9d
mov r8d, r10d
mov r9d, r11d
call sub.advapi32.dll_CryptDuplicateKey
lea rcx, [rbp + 0x188]
call fcn.005cc8c0
lea rcx, [rbp + 0x178]
lea rdx, [0x00692481]
mov r8d, 0xc
mov r9d, 0x2d
call fcn.00597b20
lea rcx, [rbp + 0x180]
mov rdx, qword [rbp + 0x178]
xor r8, r8
call fcn.005a8ac0
lea rcx, [rbp + 0x240]
mov rdx, qword [rbp + 0x188]
mov r8, qword [rbp + 0x180]
call fcn.00410100
call fcn.0063a2c0
cmp eax, dword [0x0069aad8]
jle 0x65413a
mov dword [0x0069aad8], 0x4cb
mov eax, dword [0x006934e4]
add eax, 1
cmp dword [0x006934e4], eax
jne 0x654161
mov eax, dword [0x0069908c]
test eax, eax
jge 0x65415a
call fcn.0040afc0
mov ecx, eax
call sub.kernel32.dll_SetConsoleKeyShortcuts
call fcn.006292a0
mov eax, dword [0x0069aacc]
mov dword [0x0069a68c], eax
cmp dword [0x006a88b8], 0x20
jne 0x654337
mov eax, dword [0x00696a78]
add eax, dword [0x00697474]
mov ecx, dword [0x0069812c]
add ecx, dword [0x00698e78]
cmp eax, ecx
jle 0x6541a0
call fcn.004096f0
mov eax, dword [0x00699610]
add eax, dword [0x00699c30]
mov ecx, dword [0x00698984]
add ecx, dword [0x00698fa8]
cmp ecx, eax
jle 0x6541c8
mov ecx, dword [0x00699c30]
mov dword [0x00698984], ecx
mov ecx, dword [0x00698984]
add ecx, dword [0x00698fa8]
cmp ecx, eax
jle 0x6541e4
mov eax, dword [0x00699c30]
mov dword [0x00698984], eax
mov eax, dword [0x00699500]
cmp eax, dword [0x0069988c]
je 0x6541fe
mov eax, dword [0x00699500]
mov dword [0x0069988c], eax
mov eax, dword [0x006974c4]
add eax, dword [0x00698980]
mov ecx, dword [0x00699380]
add ecx, dword [0x0069960c]
cmp eax, ecx
jle 0x654226
mov eax, dword [0x0069960c]
mov dword [0x006974c4], eax
mov eax, dword [0x00693284]
add eax, 1
cmp dword [0x00693284], eax
jne 0x654277
mov eax, dword [0x00698f8c]
test eax, eax
jge 0x654246
call fcn.0040afc0
mov ecx, dword [0x0069a970]
test ecx, ecx
jge 0x654255
call fcn.0040afc0
mov edx, dword [0x006931b0]
test edx, edx
jge 0x654264
call fcn.0040afc0
mov r8d, ecx
mov r9d, edx
mov ecx, eax
mov edx, r8d
mov r8d, r9d
call sub.kernel32.dll_GetDiskFreeSpaceExW
lea rcx, [rbp + 0x170]
call fcn.005cc8c0
lea rcx, [rbp + 0x160]
lea rdx, [0x00692481]
mov r8d, 0xc
mov r9d, 0x2d
call fcn.00597b20
lea rcx, [rbp + 0x168]
mov rdx, qword [rbp + 0x160]
xor r8, r8
call fcn.005a8ac0
lea rcx, [rbp + 0x230]
mov rdx, qword [rbp + 0x170]
mov r8, qword [rbp + 0x168]
call fcn.00410100
call fcn.006187e0
lea rcx, [rbp + 0x158]
lea rdx, [0x006a84f8]
mov r8d, 0x104
call fcn.0040ff40
lea rcx, [rbp + 0x150]
lea rdx, [0x006a8742]
call fcn.0040ff20
lea rcx, [rbp + 0x228]
mov edx, 3
mov r8, qword [rbp + 0x158]
mov r9, qword [rbp + 0x150]
lea rax, [0x00655adc]
mov qword [rsp + 0x20], rax
call fcn.00410400
jmp 0x654641
mov eax, dword [0x006978c4]
add eax, dword [0x00698e4c]
mov ecx, dword [0x0069952c]
add ecx, dword [0x00699c48]
cmp eax, ecx
jle 0x654358
call fcn.004096f0
mov eax, dword [0x006932a4]
add eax, 1
cmp dword [0x006932a4], eax
jne 0x6543a9
mov eax, dword [0x00699560]
test eax, eax
jge 0x654378
call fcn.0040afc0
mov ecx, dword [0x0069a004]
test ecx, ecx
jge 0x654387
call fcn.0040afc0
mov edx, dword [0x0069ae28]
test edx, edx
jge 0x654396
call fcn.0040afc0
mov r8d, ecx
mov r9d, edx
mov ecx, eax
mov edx, r8d
mov r8d, r9d
call sub.kernel32.dll_GetDiskFreeSpaceExW
mov eax, dword [0x0069a508]
mov dword [0x00699c44], eax
mov eax, dword [0x0069ae28]
add eax, dword [0x00693278]
mov ecx, dword [0x00693440]
add ecx, dword [0x00693948]
cmp eax, ecx
jle 0x6543db
mov dword [0x0069ae28], 0xed
mov eax, dword [0x0069a99c]
mov dword [0x00699db4], eax
mov eax, dword [0x0069a99c]
mov dword [0x00699db4], eax
mov eax, dword [0x00699538]
cmp eax, dword [0x00699a64]
je 0x65440d
mov eax, dword [0x00699538]
mov dword [0x00699a64], eax
mov eax, dword [0x0069594c]
mov dword [0x006957f8], eax
mov eax, dword [0x006937fc]
add eax, 1
cmp dword [0x006937fc], eax
jne 0x654440
mov eax, dword [0x0069a4f8]
test eax, eax
jge 0x654439
call fcn.0040afc0
mov ecx, eax
call sub.kernel32.dll_SetConsoleKeyShortcuts
call fcn.0063bea0
cmp eax, dword [0x0069ae00]
jle 0x654457
mov dword [0x0069ae00], 0x38
lea rcx, [rbp + 0x148]
call fcn.005cc340
lea rcx, [rbp + 0x138]
lea rdx, [0x00692619]
mov r8d, 0x16
mov r9d, 0x2d
call fcn.00597b20
lea rcx, [rbp + 0x140]
mov rdx, qword [rbp + 0x138]
xor r8, r8
call fcn.005a8ac0
lea rcx, [rbp + 0x230]
mov rdx, qword [rbp + 0x148]
mov r8, qword [rbp + 0x140]
call fcn.00410100
mov eax, dword [0x00693304]
add eax, 1
cmp dword [0x00693304], eax
jne 0x65451c
mov eax, dword [0x006940c8]
test eax, eax
jge 0x6544d4
call fcn.0040afc0
mov ecx, dword [0x006965a0]
test ecx, ecx
jge 0x6544e3
call fcn.0040afc0
mov edx, dword [0x00697468]
test edx, edx
jge 0x6544f2
call fcn.0040afc0
mov r8d, dword [0x00698ae0]
test r8d, r8d
jge 0x654503
call fcn.0040afc0
mov r9d, ecx
mov r10d, edx
mov r11d, r8d
mov ecx, eax
mov edx, r9d
mov r8d, r10d
mov r9d, r11d
call sub.advapi32.dll_CryptDuplicateKey
mov eax, dword [0x0069594c]
mov dword [0x006957f8], eax
mov eax, dword [0x00698e44]
cmp eax, dword [0x00699398]
je 0x654542
mov eax, dword [0x00698e44]
mov dword [0x00699398], eax
mov eax, dword [0x0069a508]
mov dword [0x00699c44], eax
mov dword [0x006931fc], 0x31c
mov eax, dword [0x006931fc]
sub eax, 0x1a0
mov dword [0x00693424], eax
mov eax, dword [0x006994e0]
add eax, dword [0x00699d74]
mov ecx, dword [0x0069aa5c]
add ecx, dword [0x00693290]
cmp eax, ecx
jle 0x654592
mov eax, dword [0x00693290]
mov dword [0x006994e0], eax
mov eax, dword [0x00693400]
add eax, 1
cmp dword [0x00693400], eax
jne 0x6545e3
mov eax, dword [0x0069affc]
test eax, eax
jge 0x6545b2
call fcn.0040afc0
mov ecx, dword [0x006934e8]
test ecx, ecx
jge 0x6545c1
call fcn.0040afc0
mov edx, dword [0x00695808]
test edx, edx
jge 0x6545d0
call fcn.0040afc0
mov r8d, ecx
mov r9d, edx
mov ecx, eax
mov edx, r8d
mov r8d, r9d
call sub.kernel32.dll_GetDiskFreeSpaceExW
call fcn.00635140
lea rcx, [rbp + 0x130]
lea rdx, [0x006a84f8]
mov r8d, 0x104
call fcn.0040ff40
lea rcx, [rbp + 0x128]
lea rdx, [0x006a8763]
call fcn.0040ff20
lea rcx, [rbp + 0x228]
mov edx, 3
mov r8, qword [rbp + 0x130]
mov r9, qword [rbp + 0x128]
lea rax, [0x00655adc]
mov qword [rsp + 0x20], rax
call fcn.00410400
mov eax, dword [0x006994e0]
add eax, dword [0x00699d74]
mov ecx, dword [0x0069aa5c]
add ecx, dword [0x00693290]
cmp eax, ecx
jle 0x654669
mov eax, dword [0x00693290]
mov dword [0x006994e0], eax
mov eax, dword [0x00698998]
cmp eax, dword [0x00698fbc]
je 0x654683
mov eax, dword [0x00698998]
mov dword [0x00698fbc], eax
call fcn.0062d580
mov eax, dword [0x00693924]
add eax, 1
cmp dword [0x00693924], eax
jne 0x6546f0
mov eax, dword [0x00698138]
test eax, eax
jge 0x6546a8
call fcn.0040afc0
mov ecx, dword [0x006990a4]
test ecx, ecx
jge 0x6546b7
call fcn.0040afc0
mov edx, dword [0x00699858]
test edx, edx
jge 0x6546c6
call fcn.0040afc0
mov r8d, dword [0x0069a948]
test r8d, r8d
jge 0x6546d7
call fcn.0040afc0
mov r9d, ecx
mov r10d, edx
mov r11d, r8d
mov ecx, eax
mov edx, r9d
mov r8d, r10d
mov r9d, r11d
call sub.advapi32.dll_CryptDuplicateKey
mov eax, dword [0x00696a78]
add eax, dword [0x00697474]
mov ecx, dword [0x0069812c]
add ecx, dword [0x00698e78]
cmp eax, ecx
jle 0x654711
call fcn.004096f0
mov dword [0x0069aff0], 0x2f1
mov eax, dword [0x0069aff0]
sub eax, 0x18b
mov dword [0x006932bc], eax
mov eax, dword [0x00693280]
add eax, 1
cmp dword [0x00693280], eax
jne 0x6547ab
mov eax, dword [0x006931d0]
test eax, eax
jge 0x65474d
call fcn.0040afc0
mov ecx, dword [0x00693800]
test ecx, ecx
jge 0x65475c
call fcn.0040afc0
mov edx, dword [0x00695808]
test edx, edx
jge 0x65476b
call fcn.0040afc0
mov r8d, dword [0x00695d78]
test r8d, r8d
jge 0x65477c
call fcn.0040afc0
mov r9d, dword [0x006968a4]
test r9d, r9d
jge 0x65478d
call fcn.0040afc0
mov r10d, ecx
mov r11d, edx
mov ebx, r8d
mov dword [rsp + 0x20], r9d
mov ecx, eax
mov edx, r10d
mov r8d, r11d
mov r9d, ebx
call sub.kernel32.dll_LockFile
mov eax, dword [0x00696e74]
mov dword [0x006965e0], eax
lea rcx, [rbp + 0x120]
lea rdx, [0x006a8721]
call fcn.0040ff20
lea rcx, [rbp + 0x118]
lea rdx, [0x006a82f0]
mov r8d, 0x104
call fcn.0040ff40
mov rcx, qword [rbp + 0x120]
mov rdx, qword [rbp + 0x118]
call fcn.005f8810
mov eax, dword [0x0069a9ec]
add eax, dword [0x0069b058]
mov ecx, dword [0x006933b4]
add ecx, dword [0x00693544]
cmp eax, ecx
jle 0x65481d
mov dword [0x0069a9ec], 0x176
call fcn.0063da40
cmp eax, dword [0x0069ae20]
jle 0x654834
mov dword [0x0069ae20], 0x18
call fcn.0063da40
cmp eax, dword [0x0069ae2c]
jle 0x65484b
mov dword [0x0069ae2c], 0x1c
mov eax, dword [0x00693448]
add eax, 1
cmp dword [0x00693448], eax
jne 0x65489c
mov eax, dword [0x006990b4]
test eax, eax
jge 0x65486b
call fcn.0040afc0
mov ecx, dword [0x00699d70]
test ecx, ecx
jge 0x65487a
call fcn.0040afc0
mov edx, dword [0x0069aaf8]
test edx, edx
jge 0x654889
call fcn.0040afc0
mov r8d, ecx
mov r9d, edx
mov ecx, eax
mov edx, r8d
mov r8d, r9d
call sub.kernel32.dll_GetDiskFreeSpaceExW
mov eax, dword [0x0069a9ec]
add eax, dword [0x0069b058]
mov ecx, dword [0x006933b4]
add ecx, dword [0x00693544]
cmp eax, ecx
jle 0x6548c2
mov dword [0x0069a9ec], 0x176
mov eax, dword [0x00698afc]
cmp eax, dword [0x006990a8]
je 0x6548dc
mov eax, dword [0x00698afc]
mov dword [0x006990a8], eax
mov eax, dword [0x006974bc]
add eax, dword [0x00698b34]
mov ecx, dword [0x00699374]
add ecx, dword [0x00699600]
cmp eax, ecx
jle 0x654904
mov eax, dword [0x00699600]
mov dword [0x006974bc], eax
mov eax, dword [0x0069aff0]
mov dword [0x0069a984], eax
mov eax, dword [0x0069aff0]
mov dword [0x0069a984], eax
mov eax, dword [0x0069897c]
cmp eax, dword [0x0069937c]
je 0x654936
mov eax, dword [0x0069897c]
mov dword [0x0069937c], eax
mov dword [0x0069adc0], 0x2ee
mov eax, dword [0x0069adc0]
sub eax, 0x18a
mov dword [0x006931b0], eax
mov eax, dword [0x006a88b4]
sub eax, 0x3d
test eax, eax
je 0x65496f
sub eax, 0x27
test eax, eax
jne 0x65533b
jmp 0x654f5f
call fcn.005eaa10
cmp eax, 1
jne 0x654bf9
nop
mov eax, dword [0x0069a020]
mov dword [0x0069986c], eax
mov eax, dword [0x0069a020]
mov dword [0x0069986c], eax
mov eax, dword [0x00699504]
cmp eax, dword [0x0069988c]
je 0x6549b0
mov eax, dword [0x00699504]
mov dword [0x0069988c], eax
mov eax, dword [0x00695828]
add eax, 1
cmp dword [0x00695828], eax
jne 0x6549d7
mov eax, dword [0x00693900]
test eax, eax
jge 0x6549d0
call fcn.0040afc0
mov ecx, eax
call sub.kernel32.dll_SetConsoleKeyShortcuts
mov eax, dword [0x006980fc]
add eax, dword [0x00698e44]
mov ecx, dword [0x00699528]
add ecx, dword [0x00699a54]
cmp eax, ecx
jle 0x6549ff
mov eax, dword [0x00699a54]
mov dword [0x006980fc], eax
mov eax, dword [0x00699d30]
mov dword [0x00699634], eax
mov dword [0x0069329c], 0x30a
mov eax, dword [0x0069329c]
sub eax, 0x197
mov dword [0x006934bc], eax
mov ecx, 2
xor edx, edx
xor r8, r8
xor r9, r9
mov qword [rsp + 0x20], 0
mov qword [rsp + 0x28], 0
call qword [0x006a91e8]
mov qword [0x006aaa80], rax
mov eax, dword [0x0069a9b0]
mov dword [0x00699d30], eax
mov eax, dword [0x0069a9b0]
mov dword [0x00699d30], eax
mov eax, dword [0x006995dc]
cmp eax, dword [0x00699bfc]
je 0x654a86
mov eax, dword [0x006995dc]
mov dword [0x00699bfc], eax
mov eax, dword [0x006942e8]
add eax, 1
cmp dword [0x006942e8], eax
jne 0x654aee
mov eax, dword [0x00699638]
test eax, eax
jge 0x654aa6
call fcn.0040afc0
mov ecx, dword [0x0069a9b4]
test ecx, ecx
jge 0x654ab5
call fcn.0040afc0
mov edx, dword [0x0069b020]
test edx, edx
jge 0x654ac4
call fcn.0040afc0
mov r8d, dword [0x00693418]
test r8d, r8d
jge 0x654ad5
call fcn.0040afc0
mov r9d, ecx
mov r10d, edx
mov r11d, r8d
mov ecx, eax
mov edx, r9d
mov r8d, r10d
mov r9d, r11d
call sub.advapi32.dll_CryptDuplicateKey
mov eax, dword [0x0069aadc]
mov dword [0x0069a69c], eax
mov eax, dword [0x0069aadc]
mov dword [0x0069a69c], eax
mov eax, dword [0x00699374]
cmp eax, dword [0x00699600]
je 0x654b20
mov eax, dword [0x00699374]
mov dword [0x00699600], eax
lea rcx, [rbp + 0xf8]
mov edx, 3
mov r8, qword [rbp + 0x230]
lea r9, [0x00655ae8]
mov rax, qword [rbp + 0x228]
mov qword [rsp + 0x20], rax
call fcn.00410400
mov rcx, qword [rbp + 0xf8]
call fcn.00410050
lea rcx, [rbp + 0x100]
mov rdx, rax
or r8d, 0xffffffff
call fcn.0064e990
mov eax, dword [0x00696190]
mov dword [0x00695b9c], eax
mov eax, dword [0x006940ec]
add eax, 1
cmp dword [0x006940ec], eax
jne 0x654bdf
mov eax, dword [0x0069aa7c]
test eax, eax
jge 0x654b97
call fcn.0040afc0
mov ecx, dword [0x00695940]
test ecx, ecx
jge 0x654ba6
call fcn.0040afc0
mov edx, dword [0x00696600]
test edx, edx
jge 0x654bb5
call fcn.0040afc0
mov r8d, dword [0x006974c8]
test r8d, r8d
jge 0x654bc6
call fcn.0040afc0
mov r9d, ecx
mov r10d, edx
mov r11d, r8d
mov ecx, eax
mov edx, r9d
mov r8d, r10d
mov r9d, r11d
call sub.advapi32.dll_CryptDuplicateKey
call fcn.0061fe80
mov ecx, 0x32c8
call fcn.005fef40
jmp 0x654bf9
mov eax, dword [0x00696190]
mov dword [0x00695b9c], eax
mov eax, dword [0x00698fc0]
cmp eax, dword [0x00699528]
je 0x654c1f
mov eax, dword [0x00698fc0]
mov dword [0x00699528], eax
mov eax, dword [0x006974d0]
add eax, dword [0x0069898c]
mov ecx, dword [0x00698fb0]
add ecx, dword [0x0069951c]
cmp eax, ecx
jle 0x654c47
mov eax, dword [0x0069951c]
mov dword [0x006974d0], eax
mov eax, dword [0x00693444]
add eax, 1
cmp dword [0x00693444], eax
jne 0x654cc5
mov eax, dword [0x006989a8]
test eax, eax
jge 0x654c67
call fcn.0040afc0
mov ecx, dword [0x00699634]
test ecx, ecx
jge 0x654c76
call fcn.0040afc0
mov edx, dword [0x00699dcc]
test edx, edx
jge 0x654c85
call fcn.0040afc0
mov r8d, dword [0x0069ae00]
test r8d, r8d
jge 0x654c96
call fcn.0040afc0
mov r9d, dword [0x006932ec]
test r9d, r9d
jge 0x654ca7
call fcn.0040afc0
mov r10d, ecx
mov r11d, edx
mov ebx, r8d
mov dword [rsp + 0x20], r9d
mov ecx, eax
mov edx, r10d
mov r8d, r11d
mov r9d, ebx
call sub.kernel32.dll_LockFile
call fcn.00640550
cmp eax, dword [0x0069327c]
jle 0x654cdc
mov dword [0x0069327c], 0x6a
mov eax, dword [0x0069aff4]
mov dword [0x0069aa8c], eax
lea rcx, [rbp + 0xf0]
lea rdx, [0x006a8721]
call fcn.0040ff20
lea rcx, [rbp + 0xe8]
lea rdx, [0x006a84f8]
mov r8d, 0x104
call fcn.0040ff40
lea rcx, [rbp + 0xe0]
lea rdx, [0x006a8742]
call fcn.0040ff20
lea rcx, [rbp + 0xe8]
mov rdx, qword [rbp + 0xe0]
call fcn.00410070
lea rcx, [rbp + 0xd8]
lea rdx, [0x006a84f8]
mov r8d, 0x104
call fcn.0040ff40
lea rcx, [rbp + 0xd0]
lea rdx, [0x006a8763]
call fcn.0040ff20
lea rcx, [rbp + 0xd8]
mov rdx, qword [rbp + 0xd0]
call fcn.00410070
mov rcx, qword [rbp + 0xf0]
mov rdx, qword [rbp + 0xe8]
mov r8, qword [rbp + 0xd8]
call fcn.005f93b0
test al, al
jne 0x654df1
mov eax, dword [0x0069aff4]
mov dword [0x0069aa8c], eax
mov eax, dword [0x006994e0]
cmp eax, dword [0x0069986c]
je 0x654dbf
mov eax, dword [0x006994e0]
mov dword [0x0069986c], eax
call fcn.005ff090
mov eax, dword [0x006965bc]
mov dword [0x00696128], eax
mov dword [0x0069b074], 0x30b
mov eax, dword [0x0069b074]
sub eax, 0x198
mov dword [0x006934c4], eax
jmp 0x65588b
mov eax, dword [0x006978bc]
mov dword [0x006968a0], eax
mov eax, dword [0x006932cc]
add eax, 1
cmp dword [0x006932cc], eax
jne 0x654e4e
mov eax, dword [0x006962f8]
test eax, eax
jge 0x654e1d
call fcn.0040afc0
mov ecx, dword [0x006990c8]
test ecx, ecx
jge 0x654e2c
call fcn.0040afc0
mov edx, dword [0x0069987c]
test edx, edx
jge 0x654e3b
call fcn.0040afc0
mov r8d, ecx
mov r9d, edx
mov ecx, eax
mov edx, r8d
mov r8d, r9d
call sub.kernel32.dll_GetDiskFreeSpaceExW
mov eax, dword [0x006934ec]
add eax, 1
cmp dword [0x006934ec], eax
jne 0x654ecc
mov eax, dword [0x0069b02c]
test eax, eax
jge 0x654e6e
call fcn.0040afc0
mov ecx, dword [0x0069392c]
test ecx, ecx
jge 0x654e7d
call fcn.0040afc0
mov edx, dword [0x00695838]
test edx, edx
jge 0x654e8c
call fcn.0040afc0
mov r8d, dword [0x00696118]
test r8d, r8d
jge 0x654e9d
call fcn.0040afc0
mov r9d, dword [0x00698e78]
test r9d, r9d
jge 0x654eae
call fcn.0040afc0
mov r10d, ecx
mov r11d, edx
mov ebx, r8d
mov dword [rsp + 0x20], r9d
mov ecx, eax
mov edx, r10d
mov r8d, r11d
mov r9d, ebx
call sub.kernel32.dll_LockFile
mov eax, dword [0x006978bc]
mov dword [0x006968a0], eax
mov eax, dword [0x006995fc]
cmp eax, dword [0x00699c1c]
je 0x654ef2
mov eax, dword [0x006995fc]
mov dword [0x00699c1c], eax
mov eax, dword [0x006933d4]
mov dword [0x0069aa74], eax
mov eax, dword [0x006965ac]
add eax, dword [0x00696cd8]
mov ecx, dword [0x006978f0]
add ecx, dword [0x00698aec]
cmp eax, ecx
jle 0x654f1f
call fcn.004096f0
lea rcx, [rbp + 0xc8]
lea rdx, [0x006a8721]
call fcn.0040ff20
mov rcx, qword [rbp + 0xc8]
call fcn.005f8cd0
mov dword [0x0069b004], 0x2f5
mov eax, dword [0x0069b004]
sub eax, 0x18d
mov dword [0x006932d0], eax
jmp 0x65588b
call fcn.005eaa10
cmp eax, 1
jne 0x6550e9
nop
mov dword [0x0069b004], 0x2f5
mov eax, dword [0x0069b004]
sub eax, 0x18d
mov dword [0x006932d0], eax
mov eax, dword [0x0069936c]
cmp eax, dword [0x006995f8]
je 0x654fa4
mov eax, dword [0x0069936c]
mov dword [0x006995f8], eax
lea rcx, [rbp + 0xc0]
mov edx, 3
mov r8, qword [rbp + 0x230]
lea r9, [0x00655ae8]
mov rax, qword [rbp + 0x228]
mov qword [rsp + 0x20], rax
call fcn.00410400
mov rcx, qword [rbp + 0xc0]
call fcn.00650e20
call fcn.00638010
mov eax, dword [0x00693308]
add eax, 1
cmp dword [0x00693308], eax
jne 0x655049
mov eax, dword [0x006942c8]
test eax, eax
jge 0x655001
call fcn.0040afc0
mov ecx, dword [0x00697488]
test ecx, ecx
jge 0x655010
call fcn.0040afc0
mov edx, dword [0x00698e8c]
test edx, edx
jge 0x65501f
call fcn.0040afc0
mov r8d, dword [0x006995d0]
test r8d, r8d
jge 0x655030
call fcn.0040afc0
mov r9d, ecx
mov r10d, edx
mov r11d, r8d
mov ecx, eax
mov edx, r9d
mov r8d, r10d
mov r9d, r11d
call sub.advapi32.dll_CryptDuplicateKey
call fcn.0061e920
mov eax, dword [0x00696c9c]
mov dword [0x00696570], eax
mov eax, dword [0x00696c9c]
mov dword [0x00696570], eax
mov eax, dword [0x006995d4]
cmp eax, dword [0x00699d6c]
je 0x655080
mov eax, dword [0x006995d4]
mov dword [0x00699d6c], eax
mov eax, dword [0x00696e68]
add eax, dword [0x0069877c]
mov ecx, dword [0x00698e9c]
add ecx, dword [0x006995e0]
cmp eax, ecx
jle 0x6550a1
call fcn.004096f0
mov eax, dword [0x0069a964]
mov dword [0x00699c04], eax
mov ecx, 0x32c8
call qword [0x006a8e10]
mov eax, dword [0x0069aad4]
add eax, dword [0x0069b03c]
mov ecx, dword [0x00693430]
add ecx, dword [0x00693938]
cmp eax, ecx
jle 0x6550e9
mov dword [0x0069aad4], 0x114
jmp 0x6550e9
lea rcx, [rbp + 0xb8]
lea rdx, [0x006a8721]
call fcn.0040ff20
lea rcx, [rbp + 0xb0]
lea rdx, [0x006a84f8]
mov r8d, 0x104
call fcn.0040ff40
lea rcx, [rbp + 0xa8]
lea rdx, [0x006a8742]
call fcn.0040ff20
lea rcx, [rbp + 0xb0]
mov rdx, qword [rbp + 0xa8]
call fcn.00410070
lea rcx, [rbp + 0xa0]
lea rdx, [0x006a84f8]
mov r8d, 0x104
call fcn.0040ff40
lea rcx, [rbp + 0x98]
lea rdx, [0x006a8763]
call fcn.0040ff20
lea rcx, [rbp + 0xa0]
mov rdx, qword [rbp + 0x98]
call fcn.00410070
mov rcx, qword [rbp + 0xb8]
mov rdx, qword [rbp + 0xb0]
mov r8, qword [rbp + 0xa0]
call fcn.005f93b0
test al, al
jne 0x6552f7
mov eax, dword [0x0069aad4]
add eax, dword [0x0069b03c]
mov ecx, dword [0x00693430]
add ecx, dword [0x00693938]
cmp eax, ecx
jle 0x6551c4
mov dword [0x0069aad4], 0x114
mov eax, dword [0x006990cc]
cmp eax, dword [0x006995f0]
je 0x6551de
mov eax, dword [0x006990cc]
mov dword [0x006995f0], eax
call fcn.00639780
cmp eax, dword [0x0069ade4]
jle 0x6551f5
mov dword [0x0069ade4], 0xa
mov eax, dword [0x00693988]
add eax, 1
cmp dword [0x00693988], eax
jne 0x655273
mov eax, dword [0x0069a954]
test eax, eax
jge 0x655215
call fcn.0040afc0
mov ecx, dword [0x006933b8]
test ecx, ecx
jge 0x655224
call fcn.0040afc0
mov edx, dword [0x00694104]
test edx, edx
jge 0x655233
call fcn.0040afc0
mov r8d, dword [0x0069591c]
test r8d, r8d
jge 0x655244
call fcn.0040afc0
mov r9d, dword [0x006965dc]
test r9d, r9d
jge 0x655255
call fcn.0040afc0
mov r10d, ecx
mov r11d, edx
mov ebx, r8d
mov dword [rsp + 0x20], r9d
mov ecx, eax
mov edx, r10d
mov r8d, r11d
mov r9d, ebx
call sub.kernel32.dll_LockFile
mov eax, dword [0x006968b0]
mov dword [0x00696194], eax
mov eax, dword [0x0069ae3c]
add eax, dword [0x006933b8]
mov ecx, dword [0x00693548]
add ecx, dword [0x00694104]
cmp eax, ecx
jle 0x6552a5
mov dword [0x0069ae3c], 0x4f
call fcn.0063bea0
mov eax, dword [0x0069b064]
mov dword [0x0069aa60], eax
call fcn.005ff090
mov eax, dword [0x0069ae18]
add eax, dword [0x00693208]
mov ecx, dword [0x00693524]
add ecx, dword [0x006940dc]
cmp eax, ecx
jle 0x6552e1
mov dword [0x0069ae18], 0xc1
call fcn.0062afa0
mov eax, dword [0x0069aab8]
mov dword [0x0069a518], eax
jmp 0x65588b
call fcn.00619970
lea rcx, [rbp + 0x90]
lea rdx, [0x006a8721]
call fcn.0040ff20
mov rcx, qword [rbp + 0x90]
call fcn.005f8cd0
call fcn.0064d0a0
cmp eax, dword [0x0069320c]
jle 0x65588b
mov dword [0x0069320c], 0x65
jmp 0x65588b
mov eax, dword [0x0069aab8]
mov dword [0x0069a518], eax
mov eax, dword [0x00698f84]
cmp eax, dword [0x006994f0]
je 0x655361
mov eax, dword [0x00698f84]
mov dword [0x006994f0], eax
call fcn.005ff090
call fcn.0063da40
cmp eax, dword [0x0069ae24]
jle 0x65537d
mov dword [0x0069ae24], 0x41
mov eax, dword [0x006962d0]
mov dword [0x00695bc8], eax
mov eax, dword [0x006962d0]
mov dword [0x00695bc8], eax
mov eax, dword [0x00698e58]
cmp eax, dword [0x006993ac]
je 0x65588b
mov eax, dword [0x00698e58]
mov dword [0x006993ac], eax
jmp 0x65588b
mov eax, dword [0x0069351c]
add eax, 1
cmp dword [0x0069351c], eax
jne 0x655409
mov eax, dword [0x00695bb0]
test eax, eax
jge 0x6553d8
call fcn.0040afc0
mov ecx, dword [0x006978e0]
test ecx, ecx
jge 0x6553e7
call fcn.0040afc0
mov edx, dword [0x00699088]
test edx, edx
jge 0x6553f6
call fcn.0040afc0
mov r8d, ecx
mov r9d, edx
mov ecx, eax
mov edx, r8d
mov r8d, r9d
call sub.kernel32.dll_GetDiskFreeSpaceExW
mov eax, dword [0x0069616c]
mov dword [0x00695940], eax
mov dword [0x006933d4], 0x32b
mov eax, dword [0x006933d4]
sub eax, 0x1a8
mov dword [0x00693560], eax
mov eax, dword [0x006934fc]
add eax, 1
cmp dword [0x006934fc], eax
jne 0x655499
mov eax, dword [0x006942bc]
test eax, eax
jge 0x655451
call fcn.0040afc0
mov ecx, dword [0x00696120]
test ecx, ecx
jge 0x655460
call fcn.0040afc0
mov edx, dword [0x00698134]
test edx, edx
jge 0x65546f
call fcn.0040afc0
mov r8d, dword [0x006994c8]
test r8d, r8d
jge 0x655480
call fcn.0040afc0
mov r9d, ecx
mov r10d, edx
mov r11d, r8d
mov ecx, eax
mov edx, r9d
mov r8d, r10d
mov r9d, r11d
call sub.advapi32.dll_CryptDuplicateKey
lea rcx, [rbp + 0x88]
lea rdx, [0x006a8721]
call fcn.0040ff20
mov rcx, qword [rbp + 0x88]
call fcn.005f8cd0
jmp 0x65588b
mov eax, dword [0x00696ac8]
mov dword [0x00696318], eax
mov eax, dword [0x0069aab0]
add eax, dword [0x0069b018]
mov ecx, dword [0x006932e4]
add ecx, dword [0x00693504]
cmp eax, ecx
jle 0x6554ef
mov dword [0x0069aab0], 0x170
lea rcx, [rbp + 0x80]
lea rdx, [0x006a8721]
call fcn.0040ff20
mov rcx, qword [rbp + 0x80]
call fcn.005f8cd0
mov eax, dword [0x00696a84]
add eax, dword [0x00697480]
mov ecx, dword [0x00698134]
add ecx, dword [0x00698e80]
cmp eax, ecx
jle 0x65552f
call fcn.004096f0
call fcn.0061f240
mov eax, dword [0x0069a514]
mov dword [0x00699d2c], eax
call fcn.0063aa80
cmp eax, dword [0x0069adcc]
jle 0x655557
mov dword [0x0069adcc], 4
mov eax, dword [0x0069a514]
mov dword [0x00699d2c], eax
mov eax, dword [0x00698b10]
cmp eax, dword [0x006990bc]
je 0x65557d
mov eax, dword [0x00698b10]
mov dword [0x006990bc], eax
mov eax, dword [0x0069aac4]
add eax, dword [0x0069b02c]
mov ecx, dword [0x006932f8]
add ecx, dword [0x00693514]
cmp eax, ecx
jle 0x6555a3
mov dword [0x0069aac4], 0x72
lea rcx, [rbp + 0x78]
lea rdx, [0x006a8721]
call fcn.0040ff20
lea rcx, [rbp + 0x70]
lea rdx, [0x006a84f8]
mov r8d, 0x104
call fcn.0040ff40
lea rcx, [rbp + 0x68]
lea rdx, [0x006a8742]
call fcn.0040ff20
lea rcx, [rbp + 0x70]
mov rdx, qword [rbp + 0x68]
call fcn.00410070
lea rcx, [rbp + 0x60]
lea rdx, [0x006a84f8]
mov r8d, 0x104
call fcn.0040ff40
lea rcx, [rbp + 0x58]
lea rdx, [0x006a8763]
call fcn.0040ff20
lea rcx, [rbp + 0x60]
mov rdx, qword [rbp + 0x58]
call fcn.00410070
mov rcx, qword [rbp + 0x78]
mov rdx, qword [rbp + 0x70]
mov r8, qword [rbp + 0x60]
call fcn.005f93b0
test al, al
jne 0x65588b
mov eax, dword [0x0069a9c4]
mov dword [0x00699ddc], eax
mov dword [0x0069ade8], 0x2f6
mov eax, dword [0x0069ade8]
sub eax, 0x18e
mov dword [0x006931d8], eax
mov dword [0x0069ade8], 0x2f6
mov eax, dword [0x0069ade8]
sub eax, 0x18e
mov dword [0x006931d8], eax
mov eax, dword [0x006994bc]
cmp eax, dword [0x00699654]
je 0x655692
mov eax, dword [0x006994bc]
mov dword [0x00699654], eax
call fcn.00622da0
mov eax, dword [0x006968b8]
mov dword [0x0069619c], eax
mov eax, dword [0x006968b8]
mov dword [0x0069619c], eax
mov eax, dword [0x00698e78]
cmp eax, dword [0x006994c0]
je 0x6556c9
mov eax, dword [0x00698e78]
mov dword [0x006994c0], eax
mov eax, dword [0x0069748c]
add eax, dword [0x00698144]
mov ecx, dword [0x00698e90]
add ecx, dword [0x006990b0]
cmp eax, ecx
jle 0x6556f1
mov eax, dword [0x006990b0]
mov dword [0x0069748c], eax
lea rcx, [rbp + 0x50]
lea rdx, [0x006a8721]
call fcn.0040ff20
lea rcx, [rbp + 0x48]
lea rdx, [0x006a84f8]
mov r8d, 0x104
call fcn.0040ff40
lea rcx, [rbp + 0x40]
lea rdx, [0x006a8763]
call fcn.0040ff20
lea rcx, [rbp + 0x48]
mov rdx, qword [rbp + 0x40]
call fcn.00410070
mov rcx, qword [rbp + 0x50]
mov rdx, qword [rbp + 0x48]
call fcn.005f98d0
call fcn.0063da40
cmp eax, dword [0x0069ae28]
jle 0x655759
mov dword [0x0069ae28], 0x1b
lea rcx, [rbp + 0x38]
lea rdx, [0x006a8721]
call fcn.004109a0
mov rcx, qword [rbp + 0x38]
call fcn.005fc130
test al, al
mov dword [0x006932f8], 0x35b
mov eax, dword [0x006932f8]
sub eax, 0x1bf
mov dword [0x00693518], eax
call fcn.00652a40
mov eax, dword [0x00699c08]
mov dword [0x006995e8], eax
mov eax, dword [0x0069aae0]
add eax, dword [0x0069b048]
mov ecx, dword [0x006933a4]
add ecx, dword [0x00693534]
cmp eax, ecx
jle 0x6557c7
mov dword [0x0069aae0], 0x7d
call fcn.0062d580
mov eax, dword [0x0069aae0]
add eax, dword [0x0069b048]
mov ecx, dword [0x006933a4]
add ecx, dword [0x00693534]
cmp eax, ecx
jle 0x6557f2
mov dword [0x0069aae0], 0x7d
mov eax, dword [0x006994e8]
cmp eax, dword [0x006995e4]
je 0x65580c
mov eax, dword [0x006994e8]
mov dword [0x006995e4], eax
mov eax, dword [0x006931fc]
add eax, 1
cmp dword [0x006931fc], eax
jne 0x655874
mov eax, dword [0x006931cc]
test eax, eax
jge 0x65582c
call fcn.0040afc0
mov ecx, dword [0x00693800]
test ecx, ecx
jge 0x65583b
call fcn.0040afc0
mov edx, dword [0x00695808]
test edx, edx
jge 0x65584a
call fcn.0040afc0
mov r8d, dword [0x00695d78]
test r8d, r8d
jge 0x65585b
call fcn.0040afc0
mov r9d, ecx
mov r10d, edx
mov r11d, r8d
mov ecx, eax
mov edx, r9d
mov r8d, r10d
mov r9d, r11d
call sub.advapi32.dll_CryptDuplicateKey
call fcn.0063bea0
cmp eax, dword [0x0069ae00]
jle 0x65588b
mov dword [0x0069ae00], 0x11
call fcn.0063bea0
cmp eax, dword [0x0069ae10]
jle 0x6558a2
mov dword [0x0069ae10], 0x15
mov eax, dword [0x00699858]
mov dword [0x006994cc], eax
mov eax, dword [0x00695890]
mov dword [0x006957f4], eax
call fcn.0063de90
cmp eax, dword [0x0069aff0]
jle 0x6558d1
mov dword [0x0069aff0], 0x2c
mov eax, dword [0x0069aa8c]
mov dword [0x0069a04c], eax
mov eax, dword [0x0069aa8c]
mov dword [0x0069a04c], eax
mov eax, dword [0x00698b30]
cmp eax, dword [0x00699374]
je 0x655903
mov eax, dword [0x00698b30]
mov dword [0x00699374], eax
mov eax, dword [0x00699614]
mov dword [0x00699388], eax
jmp 0x655919
nop
lea rcx, [rbp + 0x38]
call fcn.0040e920
lea rcx, [rbp + 0x40]
mov edx, 0x18
call fcn.0040ea60
lea rcx, [rbp + 0x118]
mov edx, 4
call fcn.0040ea60
lea rcx, [rbp + 0x138]
call fcn.0040e970
lea rcx, [rbp + 0x140]
mov edx, 4
call fcn.0040ea60
lea rcx, [rbp + 0x160]
call fcn.0040e970
lea rcx, [rbp + 0x168]
mov edx, 2
call fcn.0040ea60
lea rcx, [rbp + 0x178]
call fcn.0040e970
lea rcx, [rbp + 0x180]
mov edx, 9
call fcn.0040ea60
lea rcx, [rbp + 0x1c8]
call fcn.0040e920
lea rcx, [rbp + 0x1d0]
mov edx, 9
call fcn.0040ea60
lea rcx, [rbp + 0x228]
mov edx, 5
call fcn.0040ea60
lea rsp, [rbp + 0x258]
pop rbx
pop rbp
ret