Function at 0x5f6ab0
Capabilities:
Get disk size

Disassembly:
push rbp
push rdi
push rsi
push rbx
sub rsp, 0xd8
mov rbp, rsp
mov qword [rbp + 0x48], 0
mov qword [rbp + 0x50], 0
mov qword [rbp + 0x88], 0
mov qword [rbp + 0x58], rbp
mov qword [rbp + 0x100], rcx
mov dword [rbp + 0x108], edx
mov qword [rbp + 0x110], r8
mov rcx, qword [rbp + 0x110]
call fcn.0040eab0
nop
call fcn.005eb040
cmp eax, dword [0x006932a8]
jle 0x5f6b15
mov dword [0x006932a8], 0x62
mov byte [rbp + 0xcf], 0
mov eax, dword [0x006974a8]
add eax, dword [0x006932c4]
mov ecx, dword [0x006933f4]
add ecx, dword [0x00693538]
cmp eax, ecx
jle 0x5f6b42
mov dword [0x006974a8], 0x147
mov eax, dword [0x0069343c]
add eax, 1
cmp dword [0x0069343c], eax
jne 0x5f6b93
mov eax, dword [0x00696aa0]
test eax, eax
jge 0x5f6b62
call fcn.0040afc0
mov ecx, dword [0x00693210]
test ecx, ecx
jge 0x5f6b71
call fcn.0040afc0
mov edx, dword [0x006934e4]
test edx, edx
jge 0x5f6b80
call fcn.0040afc0
mov r8d, ecx
mov r9d, edx
mov ecx, eax
mov edx, r8d
mov r8d, r9d
call sub.kernel32.dll_GetDiskFreeSpaceExW
mov eax, dword [0x00697490]
mov dword [0x00696ca4], eax
mov eax, dword [0x00695904]
add eax, dword [0x00695d70]
mov ecx, dword [0x00696184]
add ecx, dword [0x006965cc]
cmp eax, ecx
jle 0x5f6bc7
mov eax, dword [0x006965cc]
mov dword [0x00695904], eax
mov eax, dword [0x006934e8]
add eax, 1
cmp dword [0x006934e8], eax
jne 0x5f6c2f
mov eax, dword [0x00695920]
test eax, eax
jge 0x5f6be7
call fcn.0040afc0
mov ecx, dword [0x006961a0]
test ecx, ecx
jge 0x5f6bf6
call fcn.0040afc0
mov edx, dword [0x006965e8]
test edx, edx
jge 0x5f6c05
call fcn.0040afc0
mov r8d, dword [0x00696e80]
test r8d, r8d
jge 0x5f6c16
call fcn.0040afc0
mov r9d, ecx
mov r10d, edx
mov r11d, r8d
mov ecx, eax
mov edx, r9d
mov r8d, r10d
mov r9d, r11d
call sub.advapi32.dll_CryptDuplicateKey
mov eax, dword [0x0069344c]
add eax, dword [0x00693544]
mov ecx, dword [0x006974b4]
add ecx, dword [0x006932d0]
cmp ecx, eax
jle 0x5f6c55
mov dword [0x006974b4], 0xb3
mov ecx, dword [0x006974b4]
add ecx, dword [0x006932d0]
cmp ecx, eax
jle 0x5f6c6f
mov dword [0x006974b4], 0xb3
mov eax, dword [0x00695d84]
cmp eax, dword [0x006962fc]
je 0x5f6c89
mov eax, dword [0x00695d84]
mov dword [0x006962fc], eax
call fcn.005ea1d0
cmp eax, dword [0x00693208]
jle 0x5f6ca0
mov dword [0x00693208], 0x53
nop
mov rcx, qword [0x004cd838]
mov dl, 1
call fcn.004f8ed0
mov qword [rbp + 0x68], rax
mov eax, dword [0x0069749c]
add eax, dword [0x006932b8]
mov ecx, dword [0x006933e8]
add ecx, dword [0x0069352c]
cmp eax, ecx
jle 0x5f6cd9
mov dword [0x0069749c], 0x1e
mov eax, dword [0x006932fc]
add eax, 1
cmp dword [0x006932fc], eax
jne 0x5f6d41
mov eax, dword [0x006962cc]
test eax, eax
jge 0x5f6cf9
call fcn.0040afc0
mov ecx, dword [0x00696c94]
test ecx, ecx
jge 0x5f6d08
call fcn.0040afc0
mov edx, dword [0x00697480]
test edx, edx
jge 0x5f6d17
call fcn.0040afc0
mov r8d, dword [0x006932ec]
test r8d, r8d
jge 0x5f6d28
call fcn.0040afc0
mov r9d, ecx
mov r10d, edx
mov r11d, r8d
mov ecx, eax
mov edx, r9d
mov r8d, r10d
mov r9d, r11d
call sub.advapi32.dll_CryptDuplicateKey
mov eax, dword [0x00695934]
add eax, dword [0x00695c08]
mov ecx, dword [0x006962c8]
add ecx, dword [0x006965fc]
cmp eax, ecx
jle 0x5f6d69
mov eax, dword [0x006965fc]
mov dword [0x00695934], eax
mov dword [0x006932d4], 0x33c
mov eax, dword [0x006932d4]
sub eax, 0x1b0
mov dword [0x00693450], eax
mov eax, dword [0x006933b8]
add eax, 1
cmp dword [0x006933b8], eax
jne 0x5f6dac
mov eax, dword [0x00697430]
test eax, eax
jge 0x5f6da5
call fcn.0040afc0
mov ecx, eax
call sub.kernel32.dll_SetConsoleKeyShortcuts
mov eax, dword [0x00697484]
mov dword [0x00696c98], eax
mov eax, dword [0x00697484]
mov dword [0x00696c98], eax
mov eax, dword [0x006965b0]
cmp eax, dword [0x00696a80]
je 0x5f6dde
mov eax, dword [0x006965b0]
mov dword [0x00696a80], eax
mov eax, dword [0x006931f4]
mov dword [0x00697438], eax
mov eax, dword [0x006931f4]
mov dword [0x00697438], eax
mov eax, dword [0x00696570]
cmp eax, dword [0x00696894]
je 0x5f6e10
mov eax, dword [0x00696570]
mov dword [0x00696894], eax
cmp qword [rbp + 0x100], 0
je 0x5f7da9
call fcn.005f5550
test al, al
je 0x5f7da9
mov dword [0x006931bc], 0x2f4
mov eax, dword [0x006931bc]
sub eax, 0x19c
mov dword [0x0069339c], eax
mov rcx, qword [rbp + 0x68]
mov rdx, qword [rbp + 0x110]
mov rax, qword [rbp + 0x68]
mov rbx, qword [rax]
call qword [rbx + 0x60]
mov eax, dword [0x006934dc]
add eax, 1
cmp dword [0x006934dc], eax
jne 0x5f6e83
mov eax, dword [0x00693210]
test eax, eax
jge 0x5f6e7c
call fcn.0040afc0
mov ecx, eax
call sub.kernel32.dll_SetConsoleKeyShortcuts
mov eax, dword [0x006932ec]
add eax, 1
cmp dword [0x006932ec], eax
jne 0x5f6eeb
mov eax, dword [0x00696ab4]
test eax, eax
jge 0x5f6ea3
call fcn.0040afc0
mov ecx, dword [0x00693280]
test ecx, ecx
jge 0x5f6eb2
call fcn.0040afc0
mov edx, dword [0x0069344c]
test edx, edx
jge 0x5f6ec1
call fcn.0040afc0
mov r8d, dword [0x006958d8]
test r8d, r8d
jge 0x5f6ed2
call fcn.0040afc0
mov r9d, ecx
mov r10d, edx
mov r11d, r8d
mov ecx, eax
mov edx, r9d
mov r8d, r10d
mov r9d, r11d
call sub.advapi32.dll_CryptDuplicateKey
mov eax, dword [0x00695b98]
mov dword [0x00695854], eax
mov eax, dword [0x006934c4]
add eax, 1
cmp dword [0x006934c4], eax
jne 0x5f6f1e
mov eax, dword [0x00696cbc]
test eax, eax
jge 0x5f6f17
call fcn.0040afc0
mov ecx, eax
call sub.kernel32.dll_SetConsoleKeyShortcuts
mov eax, dword [0x00696e8c]
mov dword [0x00696a74], eax
call fcn.005e7700
mov eax, dword [0x006974bc]
add eax, dword [0x006932d8]
mov ecx, dword [0x00693458]
add ecx, dword [0x00693914]
cmp eax, ecx
jle 0x5f6f55
mov dword [0x006974bc], 0x62
mov rcx, qword [rbp + 0x68]
mov rax, qword [rbp + 0x68]
mov rax, qword [rax]
call qword [rax + 0x28]
xor ecx, ecx
mov ebx, eax
sub ebx, 1
mov dword [rbp + 0x74], ecx
cmp dword [rbp + 0x74], ebx
jg 0x5f7da3
sub ebx, ecx
add ebx, 1
mov rcx, qword [rbp + 0x68]
lea rdx, [rbp + 0x50]
mov r8d, dword [rbp + 0x74]
mov rax, qword [rbp + 0x68]
mov rsi, qword [rax]
call qword [rsi + 0x18]
lea rcx, [rbp + 0x88]
mov rdx, qword [rbp + 0x50]
xor r8, r8
call fcn.0040fe00
cmp qword [rbp + 0x88], 0
je 0x5f7d94
mov ecx, dword [rbp + 0x108]
call fcn.00409030
mov qword [rbp + 0x80], rax
mov eax, dword [0x00696cdc]
mov dword [0x006965fc], eax
mov dword [0x006931c4], 0x2f7
mov eax, dword [0x006931c4]
sub eax, 0x19e
mov dword [0x006933a4], eax
mov eax, dword [0x00695bb4]
add eax, dword [0x00696160]
mov ecx, dword [0x006965a8]
add ecx, dword [0x00696ac4]
cmp eax, ecx
jle 0x5f7014
mov eax, dword [0x00696ac4]
mov dword [0x00695bb4], eax
mov eax, dword [0x006932e8]
add eax, 1
cmp dword [0x006932e8], eax
jne 0x5f707c
mov eax, dword [0x006974a4]
test eax, eax
jge 0x5f7034
call fcn.0040afc0
mov ecx, dword [0x0069343c]
test ecx, ecx
jge 0x5f7043
call fcn.0040afc0
mov edx, dword [0x00693948]
test edx, edx
jge 0x5f7052
call fcn.0040afc0
mov r8d, dword [0x00694288]
test r8d, r8d
jge 0x5f7063
call fcn.0040afc0
mov r9d, ecx
mov r10d, edx
mov r11d, r8d
mov ecx, eax
mov edx, r9d
mov r8d, r10d
mov r9d, r11d
call sub.advapi32.dll_CryptDuplicateKey
mov eax, dword [0x006933e8]
add eax, 1
cmp dword [0x006933e8], eax
jne 0x5f70cd
mov eax, dword [0x00693434]
test eax, eax
jge 0x5f709c
call fcn.0040afc0
mov ecx, dword [0x0069409c]
test ecx, ecx
jge 0x5f70ab
call fcn.0040afc0
mov edx, dword [0x00695d7c]
test edx, edx
jge 0x5f70ba
call fcn.0040afc0
mov r8d, ecx
mov r9d, edx
mov ecx, eax
mov edx, r8d
mov r8d, r9d
call sub.kernel32.dll_GetDiskFreeSpaceExW
mov eax, dword [0x006957f0]
mov dword [0x00694128], eax
mov rcx, qword [rbp + 0x100]
mov rdx, qword [rbp + 0x80]
mov r8d, dword [rbp + 0x108]
call fcn.004093d0
mov eax, dword [0x006957f0]
mov dword [0x00694128], eax
mov eax, dword [0x00696578]
cmp eax, dword [0x006968a0]
je 0x5f7119
mov eax, dword [0x00696578]
mov dword [0x006968a0], eax
mov eax, dword [0x00693400]
add eax, 1
cmp dword [0x00693400], eax
jne 0x5f7140
mov eax, dword [0x00695800]
test eax, eax
jge 0x5f7139
call fcn.0040afc0
mov ecx, eax
call sub.kernel32.dll_SetConsoleKeyShortcuts
mov eax, dword [0x0069748c]
mov dword [0x00696ca0], eax
mov eax, dword [0x0069748c]
mov dword [0x00696ca0], eax
mov eax, dword [0x006962d8]
cmp eax, dword [0x006965c0]
je 0x5f7172
mov eax, dword [0x006962d8]
mov dword [0x006965c0], eax
mov eax, dword [0x006932f0]
add eax, 1
cmp dword [0x006932f0], eax
jne 0x5f71da
mov eax, dword [0x0069616c]
test eax, eax
jge 0x5f7192
call fcn.0040afc0
mov ecx, dword [0x00696a84]
test ecx, ecx
jge 0x5f71a1
call fcn.0040afc0
mov edx, dword [0x00697484]
test edx, edx
jge 0x5f71b0
call fcn.0040afc0
mov r8d, dword [0x006932f0]
test r8d, r8d
jge 0x5f71c1
call fcn.0040afc0
mov r9d, ecx
mov r10d, edx
mov r11d, r8d
mov ecx, eax
mov edx, r9d
mov r8d, r10d
mov r9d, r11d
call sub.advapi32.dll_CryptDuplicateKey
mov dword [rbp + 0xb0], 3
mov rax, qword [rbp + 0x80]
mov qword [rbp + 0xb8], rax
mov eax, dword [rbp + 0x108]
mov dword [rbp + 0xc0], eax
mov eax, dword [0x00693304]
add eax, 1
cmp dword [0x00693304], eax
jne 0x5f727c
mov eax, dword [0x00693920]
test eax, eax
jge 0x5f721e
call fcn.0040afc0
mov ecx, dword [0x00695c14]
test ecx, ecx
jge 0x5f722d
call fcn.0040afc0
mov edx, dword [0x00696320]
test edx, edx
jge 0x5f723c
call fcn.0040afc0
mov r8d, dword [0x00696a84]
test r8d, r8d
jge 0x5f724d
call fcn.0040afc0
mov r9d, dword [0x00697484]
test r9d, r9d
jge 0x5f725e
call fcn.0040afc0
mov r10d, ecx
mov r11d, edx
mov esi, r8d
mov dword [rsp + 0x20], r9d
mov ecx, eax
mov edx, r10d
mov r8d, r11d
mov r9d, esi
call sub.kernel32.dll_LockFile
call fcn.005e7700
call fcn.005e8520
cmp eax, dword [0x006974d4]
jle 0x5f7298
mov dword [0x006974d4], 0x39
mov eax, dword [0x00695904]
mov dword [0x006957fc], eax
mov eax, dword [0x00695904]
mov dword [0x006957fc], eax
mov eax, dword [0x00696124]
cmp eax, dword [0x00696324]
je 0x5f72ca
mov eax, dword [0x00696124]
mov dword [0x00696324], eax
mov ecx, 8
call fcn.00409030
mov qword [rbp + 0xa8], rax
mov dword [0x006931b4], 0x2f1
mov eax, dword [0x006931b4]
sub eax, 0x19a
mov dword [0x00693300], eax
call fcn.005e5470
mov eax, dword [0x00693208]
mov dword [0x00697448], eax
mov eax, dword [0x006931ec]
add eax, dword [0x006933cc]
mov ecx, dword [0x006934c0]
add ecx, dword [0x00693924]
cmp eax, ecx
jle 0x5f732f
mov dword [0x006931ec], 0x4a
mov eax, dword [0x00696894]
add eax, dword [0x00696ca0]
mov ecx, dword [0x00695c18]
add ecx, dword [0x006962d8]
cmp ecx, eax
jle 0x5f7357
mov ecx, dword [0x00696ca0]
mov dword [0x00695c18], ecx
mov ecx, dword [0x00695c18]
add ecx, dword [0x006962d8]
cmp ecx, eax
jle 0x5f7373
mov eax, dword [0x00696ca0]
mov dword [0x00695c18], eax
mov eax, dword [0x00695d8c]
cmp eax, dword [0x006961a0]
je 0x5f738d
mov eax, dword [0x00695d8c]
mov dword [0x006961a0], eax
mov eax, dword [0x00693404]
add eax, 1
cmp dword [0x00693404], eax
jne 0x5f73f5
mov eax, dword [0x00695bec]
test eax, eax
jge 0x5f73ad
call fcn.0040afc0
mov ecx, dword [0x006965dc]
test ecx, ecx
jge 0x5f73bc
call fcn.0040afc0
mov edx, dword [0x00696e74]
test edx, edx
jge 0x5f73cb
call fcn.0040afc0
mov r8d, dword [0x006931cc]
test r8d, r8d
jge 0x5f73dc
call fcn.0040afc0
mov r9d, ecx
mov r10d, edx
mov r11d, r8d
mov ecx, eax
mov edx, r9d
mov r8d, r10d
mov r9d, r11d
call sub.advapi32.dll_CryptDuplicateKey
mov eax, dword [0x0069587c]
add eax, dword [0x00695934]
mov ecx, dword [0x00696118]
add ecx, dword [0x006962c8]
cmp eax, ecx
jle 0x5f7416
call fcn.004096f0
mov ecx, 0x18
call fcn.00409030
mov rcx, qword [rbp + 0xa8]
mov qword [rcx], rax
mov eax, dword [0x00697478]
mov dword [0x00696ac8], eax
mov eax, dword [0x0069343c]
add eax, 1
cmp dword [0x0069343c], eax
jne 0x5f74b5
mov eax, dword [0x00693298]
test eax, eax
jge 0x5f7457
call fcn.0040afc0
mov ecx, dword [0x006942b0]
test ecx, ecx
jge 0x5f7466
call fcn.0040afc0
mov edx, dword [0x00695940]
test edx, edx
jge 0x5f7475
call fcn.0040afc0
mov r8d, dword [0x00696120]
test r8d, r8d
jge 0x5f7486
call fcn.0040afc0
mov r9d, dword [0x006965b8]
test r9d, r9d
jge 0x5f7497
call fcn.0040afc0
mov r10d, ecx
mov r11d, edx
mov esi, r8d
mov dword [rsp + 0x20], r9d
mov ecx, eax
mov edx, r10d
mov r8d, r11d
mov r9d, esi
call sub.kernel32.dll_LockFile
mov eax, dword [0x00697478]
mov dword [0x00696ac8], eax
mov eax, dword [0x0069615c]
cmp eax, dword [0x006965a8]
je 0x5f74db
mov eax, dword [0x0069615c]
mov dword [0x006965a8], eax
mov dword [0x00693288], 0x31f
mov eax, dword [0x00693288]
sub eax, 0x1b1
mov dword [0x00693404], eax
mov eax, dword [0x00693408]
add eax, 1
cmp dword [0x00693408], eax
jne 0x5f7575
mov eax, dword [0x00693548]
test eax, eax
jge 0x5f7517
call fcn.0040afc0
mov ecx, dword [0x00695824]
test ecx, ecx
jge 0x5f7526
call fcn.0040afc0
mov edx, dword [0x00695bb4]
test edx, edx
jge 0x5f7535
call fcn.0040afc0
mov r8d, dword [0x006961ac]
test r8d, r8d
jge 0x5f7546
call fcn.0040afc0
mov r9d, dword [0x006965f4]
test r9d, r9d
jge 0x5f7557
call fcn.0040afc0
mov r10d, ecx
mov r11d, edx
mov esi, r8d
mov dword [rsp + 0x20], r9d
mov ecx, eax
mov edx, r10d
mov r8d, r11d
mov r9d, esi
call sub.kernel32.dll_LockFile
mov rax, qword [rbp + 0xa8]
mov rdi, qword [rax]
lea rsi, [rbp + 0xb0]
movsq qword [rdi], qword [rsi]
movsq qword [rdi], qword [rsi]
movsq qword [rdi], qword [rsi]
mov eax, dword [0x00696ac4]
mov dword [0x006965a4], eax
mov dword [0x00693278], 0x318
mov eax, dword [0x00693278]
sub eax, 0x19e
mov dword [0x006933a8], eax
mov eax, dword [0x00697468]
mov dword [0x00696ab4], eax
mov eax, dword [0x00697468]
mov dword [0x00696ab4], eax
mov eax, dword [0x00696190]
cmp eax, dword [0x0069658c]
je 0x5f75e6
mov eax, dword [0x00696190]
mov dword [0x0069658c], eax
mov ecx, 0xc
call fcn.00409030
mov qword [rbp + 0xa0], rax
mov eax, dword [0x00696cd0]
mov dword [0x006965f0], eax
mov eax, dword [0x00696cd0]
mov dword [0x006965f0], eax
mov eax, dword [0x00696164]
cmp eax, dword [0x00696318]
je 0x5f762a
mov eax, dword [0x00696164]
mov dword [0x00696318], eax
mov eax, dword [0x006931f4]
mov dword [0x00697438], eax
mov eax, dword [0x006974a8]
add eax, dword [0x006932c8]
mov ecx, dword [0x00693444]
add ecx, dword [0x00693900]
cmp eax, ecx
jle 0x5f765c
mov dword [0x006974a8], 0x67
mov eax, dword [0x0069590c]
add eax, dword [0x00695be0]
mov ecx, dword [0x0069618c]
add ecx, dword [0x006965d4]
cmp eax, ecx
jle 0x5f7684
mov eax, dword [0x006965d4]
mov dword [0x0069590c], eax
mov eax, dword [0x006931d8]
mov dword [0x0069746c], eax
mov eax, dword [0x006932bc]
add eax, 1
cmp dword [0x006932bc], eax
jne 0x5f76f8
mov eax, dword [0x00696308]
test eax, eax
jge 0x5f76b0
call fcn.0040afc0
mov ecx, dword [0x00697470]
test ecx, ecx
jge 0x5f76bf
call fcn.0040afc0
mov edx, dword [0x006932dc]
test edx, edx
jge 0x5f76ce
call fcn.0040afc0
mov r8d, dword [0x00693500]
test r8d, r8d
jge 0x5f76df
call fcn.0040afc0
mov r9d, ecx
mov r10d, edx
mov r11d, r8d
mov ecx, eax
mov edx, r9d
mov r8d, r10d
mov r9d, r11d
call sub.advapi32.dll_CryptDuplicateKey
mov eax, dword [0x00695898]
add eax, dword [0x00695bdc]
mov ecx, dword [0x00696184]
add ecx, dword [0x0069657c]
cmp eax, ecx
jle 0x5f7719
call fcn.004096f0
mov rax, qword [rbp + 0xa0]
mov dword [rax], 0x10
mov eax, dword [0x00695898]
add eax, dword [0x00695bdc]
mov ecx, dword [0x00696184]
add ecx, dword [0x0069657c]
cmp eax, ecx
jle 0x5f7747
call fcn.004096f0
mov eax, dword [0x00696310]
cmp eax, dword [0x00696a74]
je 0x5f7761
mov eax, dword [0x00696310]
mov dword [0x00696a74], eax
mov rax, qword [rbp + 0xa0]
mov dword [rax + 4], 0x10
call fcn.005e5470
mov eax, dword [0x00695924]
add eax, dword [0x00695bf8]
mov ecx, dword [0x006961a4]
add ecx, dword [0x006965ec]
cmp eax, ecx
jle 0x5f779c
mov eax, dword [0x006965ec]
mov dword [0x00695924], eax
mov eax, dword [0x006934cc]
add eax, dword [0x00693568]
mov ecx, dword [0x006974d8]
add ecx, dword [0x006932f4]
cmp ecx, eax
jle 0x5f77c2
mov dword [0x006974d8], 0x6d
mov ecx, dword [0x006974d8]
add ecx, dword [0x006932f4]
cmp ecx, eax
jle 0x5f77dc
mov dword [0x006974d8], 0x6d
mov eax, dword [0x0069613c]
cmp eax, dword [0x00696588]
je 0x5f77f6
mov eax, dword [0x0069613c]
mov dword [0x00696588], eax
mov rax, qword [rbp + 0xa0]
mov dword [rax + 8], 0x10
call fcn.005ea1d0
cmp eax, dword [0x00693274]
jle 0x5f781b
mov dword [0x00693274], 0x55
call fcn.005e6a00
call fcn.005ea730
cmp eax, dword [0x00693284]
jle 0x5f7837
mov dword [0x00693284], 0x59
mov eax, dword [0x006974ac]
mov dword [0x00696cc0], eax
mov eax, dword [0x006974ac]
mov dword [0x00696cc0], eax
mov eax, dword [0x006961ac]
cmp eax, dword [0x006965f4]
je 0x5f7869
mov eax, dword [0x006961ac]
mov dword [0x006965f4], eax
call fcn.005e8010
cmp eax, dword [0x006974b4]
jle 0x5f7880
mov dword [0x006974b4], 0x31
mov eax, dword [0x00697468]
add eax, dword [0x00693284]
mov ecx, dword [0x00693400]
add ecx, dword [0x006934f8]
cmp eax, ecx
jle 0x5f78a6
mov dword [0x00697468], 0x56
mov rcx, qword [rbp + 0x88]
call fcn.0040fbe0
mov rsi, rax
lea rcx, [rbp + 0x48]
lea rdx, [0x006930be]
mov r8d, 9
mov r9d, 0x2d
call fcn.00597b20
mov rcx, qword [rbp + 0x48]
call fcn.0040fbe0
mov rcx, rsi
lea rdx, [0x005f7f50]
lea r8, [0x005f7f50]
mov r9, rax
mov dword [rsp + 0x20], 0x20
call qword [0x006a8b20]
mov dword [rbp + 0x94], eax
cmp dword [rbp + 0x94], 0
jne 0x5f79fb
call qword [0x006a8b28]
mov qword [rbp + 0x98], rax
cmp qword [rbp + 0x98], 0
je 0x5f79fb
mov rcx, qword [rbp + 0x98]
mov rax, qword [rbp + 0xa8]
mov rdx, qword [rax]
call fcn.005f6940
test al, al
jne 0x5f79fb
mov ecx, 8
call fcn.00409030
mov qword [rbp + 0x78], rax
mov rcx, qword [rbp + 0x98]
mov edx, 0xb
mov r8d, 1
mov r9, qword [rbp + 0xa8]
mov rax, qword [rbp + 0x78]
mov qword [rsp + 0x20], rax
mov dword [rsp + 0x28], 1
mov dword [rsp + 0x30], 0
mov qword [rsp + 0x38], 0
call qword [0x006a8b38]
mov dword [rbp + 0x94], eax
cmp dword [rbp + 0x94], 0
jne 0x5f79f2
mov rcx, qword [rbp + 0x98]
mov rax, qword [rbp + 0x78]
mov rax, qword [rax]
mov rdx, qword [rax]
mov r8, qword [rbp + 0xa0]
call qword [0x006a8b40]
mov dword [rbp + 0x94], eax
cmp dword [rbp + 0x94], 0
jne 0x5f79f2
mov rax, qword [rbp + 0x78]
mov rcx, qword [rax]
mov edx, 1
call qword [0x006a8b48]
mov byte [rbp + 0xcf], 1
mov rcx, qword [rbp + 0x78]
call fcn.00409060
mov rcx, qword [rbp + 0xa0]
call fcn.00409060
mov dword [0x006932bc], 0x314
mov eax, dword [0x006932bc]
sub eax, 0x1ac
mov dword [0x00693438], eax
mov eax, dword [0x00697440]
mov dword [0x00696a90], eax
mov eax, dword [0x00693518]
add eax, 1
cmp dword [0x00693518], eax
jne 0x5f7a80
mov eax, dword [0x00695c04]
test eax, eax
jge 0x5f7a4f
call fcn.0040afc0
mov ecx, dword [0x006965a8]
test ecx, ecx
jge 0x5f7a5e
call fcn.0040afc0
mov edx, dword [0x00696cd8]
test edx, edx
jge 0x5f7a6d
call fcn.0040afc0
mov r8d, ecx
mov r9d, edx
mov ecx, eax
mov edx, r8d
mov r8d, r9d
call sub.kernel32.dll_GetDiskFreeSpaceExW
mov eax, dword [0x00697440]
mov dword [0x00696a90], eax
mov eax, dword [0x00696304]
cmp eax, dword [0x006965e8]
je 0x5f7aa6
mov eax, dword [0x00696304]
mov dword [0x006965e8], eax
mov rax, qword [rbp + 0xa8]
mov rcx, qword [rax]
call fcn.00409060
mov eax, dword [0x006974c0]
add eax, dword [0x0069328c]
mov ecx, dword [0x00693408]
add ecx, dword [0x00693550]
cmp eax, ecx
jle 0x5f7adb
mov dword [0x006974c0], 0x17f
mov rcx, qword [rbp + 0xa8]
call fcn.00409060
mov eax, dword [0x006974c0]
add eax, dword [0x0069328c]
mov ecx, dword [0x00693408]
add ecx, dword [0x00693550]
cmp eax, ecx
jle 0x5f7b0d
mov dword [0x006974c0], 0x17f
mov eax, dword [0x00696178]
cmp eax, dword [0x006965c4]
je 0x5f7b27
mov eax, dword [0x00696178]
mov dword [0x006965c4], eax
mov eax, dword [0x0069744c]
mov dword [0x00696cb0], eax
mov eax, dword [0x00695948]
mov dword [0x00695840], eax
call fcn.005e8520
cmp eax, dword [0x006931b0]
jle 0x5f7b56
mov dword [0x006931b0], 0x3c
mov eax, dword [0x006933f0]
add eax, dword [0x00693538]
mov ecx, dword [0x006974a8]
add ecx, dword [0x006932c4]
cmp ecx, eax
jle 0x5f7b7c
mov dword [0x006974a8], 0x74
mov ecx, dword [0x006974a8]
add ecx, dword [0x006932c4]
cmp ecx, eax
jle 0x5f7b96
mov dword [0x006974a8], 0x74
mov eax, dword [0x006962c4]
cmp eax, dword [0x006965a8]
je 0x5f7bb0
mov eax, dword [0x006962c4]
mov dword [0x006965a8], eax
mov eax, dword [0x00693274]
mov dword [0x00696e6c], eax
mov eax, dword [0x00693274]
mov dword [0x00696e6c], eax
mov eax, dword [0x00696134]
cmp eax, dword [0x006962e8]
je 0x5f7be2
mov eax, dword [0x00696134]
mov dword [0x006962e8], eax
call qword [0x006a8b30]
call fcn.005ea730
cmp eax, dword [0x00693274]
jle 0x5f7bff
mov dword [0x00693274], 0x56
mov eax, dword [0x006932fc]
add eax, dword [0x006934d0]
mov ecx, dword [0x006935f0]
add ecx, dword [0x006940e0]
cmp eax, ecx
jle 0x5f7c25
mov dword [0x006932fc], 0x127
mov eax, dword [0x00696e50]
mov dword [0x0069688c], eax
mov dword [0x00693288], 0x2ff
mov eax, dword [0x00693288]
sub eax, 0x1a1
mov dword [0x00693404], eax
mov eax, dword [0x00696c98]
mov dword [0x006965b4], eax
call fcn.005e8520
cmp eax, dword [0x006931b0]
jle 0x5f7c70
mov dword [0x006931b0], 0x3c
mov eax, dword [0x00695910]
add eax, dword [0x00695d7c]
mov ecx, dword [0x00696190]
add ecx, dword [0x006965d8]
cmp eax, ecx
jle 0x5f7c98
mov eax, dword [0x006965d8]
mov dword [0x00695910], eax
mov eax, dword [0x006974b4]
mov dword [0x00696cc4], eax
mov rcx, qword [rbp + 0x80]
call fcn.00409060
call fcn.005e7700
mov eax, dword [0x006974b4]
mov dword [0x00696cc4], eax
mov eax, dword [0x00695d74]
cmp eax, dword [0x006962e8]
je 0x5f7cdb
mov eax, dword [0x00695d74]
mov dword [0x006962e8], eax
mov eax, dword [0x006933f4]
add eax, 1
cmp dword [0x006933f4], eax
jne 0x5f7d2c
mov eax, dword [0x00695840]
test eax, eax
jge 0x5f7cfb
call fcn.0040afc0
mov ecx, dword [0x0069612c]
test ecx, ecx
jge 0x5f7d0a
call fcn.0040afc0
mov edx, dword [0x006965c4]
test edx, edx
jge 0x5f7d19
call fcn.0040afc0
mov r8d, ecx
mov r9d, edx
mov ecx, eax
mov edx, r8d
mov r8d, r9d
call sub.kernel32.dll_GetDiskFreeSpaceExW
mov eax, dword [0x00693404]
add eax, 1
cmp dword [0x00693404], eax
jne 0x5f7d94
mov eax, dword [0x00695d98]
test eax, eax
jge 0x5f7d4c
call fcn.0040afc0
mov ecx, dword [0x006965f4]
test ecx, ecx
jge 0x5f7d5b
call fcn.0040afc0
mov edx, dword [0x00696e8c]
test edx, edx
jge 0x5f7d6a
call fcn.0040afc0
mov r8d, dword [0x00693290]
test r8d, r8d
jge 0x5f7d7b
call fcn.0040afc0
mov r9d, ecx
mov r10d, edx
mov r11d, r8d
mov ecx, eax
mov edx, r9d
mov r8d, r10d
mov r9d, r11d
call sub.advapi32.dll_CryptDuplicateKey
add dword [rbp + 0x74], 1
sub ebx, 1
test ebx, ebx
jne 0x5f6f7b
nop
call fcn.005f6740
mov rcx, qword [rbp + 0x68]
call fcn.0040b500
call fcn.005dea10
call fcn.005e6000
jmp 0x5f7dc6
mov eax, dword [0x0069343c]
add eax, 1
cmp dword [0x0069343c], eax
jne 0x5f7e44
mov eax, dword [0x006932d8]
test eax, eax
jge 0x5f7de6
call fcn.0040afc0
mov ecx, dword [0x006942ec]
test ecx, ecx
jge 0x5f7df5
call fcn.0040afc0
mov edx, dword [0x0069592c]
test edx, edx
jge 0x5f7e04
call fcn.0040afc0
mov r8d, dword [0x0069615c]
test r8d, r8d
jge 0x5f7e15
call fcn.0040afc0
mov r9d, dword [0x006965a8]
test r9d, r9d
jge 0x5f7e26
call fcn.0040afc0
mov r10d, ecx
mov r11d, edx
mov ebx, r8d
mov dword [rsp + 0x20], r9d
mov ecx, eax
mov edx, r10d
mov r8d, r11d
mov r9d, ebx
call sub.kernel32.dll_LockFile
mov eax, dword [0x00697444]
mov dword [0x00696a90], eax
mov dword [0x006931f4], 0x30a
mov eax, dword [0x006931f4]
sub eax, 0x197
mov dword [0x006933d0], eax
mov eax, dword [0x0069586c]
add eax, dword [0x00695bb0]
mov ecx, dword [0x00696158]
add ecx, dword [0x006965a0]
cmp eax, ecx
jle 0x5f7e8d
call fcn.004096f0
mov eax, dword [0x006933c4]
add eax, 1
cmp dword [0x006933c4], eax
jne 0x5f7eb4
mov eax, dword [0x006932b8]
test eax, eax
jge 0x5f7ead
call fcn.0040afc0
mov ecx, eax
call sub.kernel32.dll_SetConsoleKeyShortcuts
mov eax, dword [0x006932b4]
mov dword [0x00697494], eax
nop
lea rcx, [rbp + 0x48]
call fcn.0040e970
lea rcx, [rbp + 0x50]
call fcn.0040e920
lea rcx, [rbp + 0x88]
call fcn.0040e970
lea rcx, [rbp + 0x110]
call fcn.0040e920
movzx rax, byte [rbp + 0xcf]
lea rsp, [rbp + 0xd8]
pop rbx
pop rsi
pop rdi
pop rbp
ret