Function at 0x600220
Capabilities:
Get disk size

Disassembly:
push rbp
push rbx
sub rsp, 0x2e8
mov rbp, rsp
mov qword [rbp + 0x50], 0
mov qword [rbp + 0x48], 0
mov qword [rbp + 0x40], 0
mov qword [rbp + 0x38], rbp
mov qword [rbp + 0x300], rcx
mov qword [rbp + 0x308], rdx
lea rcx, [rbp + 0x308]
call fcn.0040eaf0
lea rcx, [rbp + 0x60]
mov rdx, qword [0x00597950]
call fcn.004111e0
nop
nop
mov dword [0x006932ac], 0x30a
mov eax, dword [0x006932ac]
sub eax, 0x1a7
mov dword [0x00693434], eax
mov eax, dword [0x006958d0]
add eax, dword [0x00695c04]
mov ecx, dword [0x006962cc]
add ecx, dword [0x00696894]
cmp eax, ecx
jle 0x6002b1
call fcn.004096f0
call fcn.005e9c80
mov eax, dword [0x00695bf0]
add eax, dword [0x006961a4]
mov ecx, dword [0x006965f8]
add ecx, dword [0x00696e4c]
cmp eax, ecx
jle 0x6002de
mov eax, dword [0x00696e4c]
mov dword [0x00695bf0], eax
call fcn.005f9240
cmp eax, dword [0x00693204]
jle 0x6002f5
mov dword [0x00693204], 0x54
mov eax, dword [0x006934b4]
add eax, 1
cmp dword [0x006934b4], eax
jne 0x60035d
mov eax, dword [0x00696e64]
test eax, eax
jge 0x600315
call fcn.0040afc0
mov ecx, dword [0x006931f0]
test ecx, ecx
jge 0x600324
call fcn.0040afc0
mov edx, dword [0x006934d8]
test edx, edx
jge 0x600333
call fcn.0040afc0
mov r8d, dword [0x006940a8]
test r8d, r8d
jge 0x600344
call fcn.0040afc0
mov r9d, ecx
mov r10d, edx
mov r11d, r8d
mov ecx, eax
mov edx, r9d
mov r8d, r10d
mov r9d, r11d
call sub.advapi32.dll_CryptDuplicateKey
mov eax, dword [0x0069589c]
mov dword [0x006942bc], eax
mov rcx, qword [rbp + 0x300]
call fcn.004fd260
mov eax, dword [0x00697480]
mov dword [0x00696ac4], eax
mov eax, dword [0x006934c4]
add eax, 1
cmp dword [0x006934c4], eax
jne 0x6003e9
mov eax, dword [0x006965a0]
test eax, eax
jge 0x6003a1
call fcn.0040afc0
mov ecx, dword [0x006931d4]
test ecx, ecx
jge 0x6003b0
call fcn.0040afc0
mov edx, dword [0x006934bc]
test edx, edx
jge 0x6003bf
call fcn.0040afc0
mov r8d, dword [0x00693980]
test r8d, r8d
jge 0x6003d0
call fcn.0040afc0
mov r9d, ecx
mov r10d, edx
mov r11d, r8d
mov ecx, eax
mov edx, r9d
mov r8d, r10d
mov r9d, r11d
call sub.advapi32.dll_CryptDuplicateKey
mov eax, dword [0x00695928]
add eax, dword [0x00696114]
mov ecx, dword [0x00696320]
add ecx, dword [0x00696a94]
cmp eax, ecx
jle 0x60040a
call fcn.004096f0
mov dword [0x006932f4], 0x326
mov eax, dword [0x006932f4]
sub eax, 0x1b4
mov dword [0x006934d4], eax
call fcn.005e8520
mov eax, dword [0x00693434]
add eax, 1
cmp dword [0x00693434], eax
jne 0x60047c
mov eax, dword [0x006934d4]
test eax, eax
jge 0x60044b
call fcn.0040afc0
mov ecx, dword [0x0069428c]
test ecx, ecx
jge 0x60045a
call fcn.0040afc0
mov edx, dword [0x006958dc]
test edx, edx
jge 0x600469
call fcn.0040afc0
mov r8d, ecx
mov r9d, edx
mov ecx, eax
mov edx, r8d
mov r8d, r9d
call sub.kernel32.dll_GetDiskFreeSpaceExW
call fcn.005e9c80
mov dword [0x006932f4], 0x326
mov eax, dword [0x006932f4]
sub eax, 0x1b4
mov dword [0x006934d4], eax
mov eax, dword [0x00696894]
cmp eax, dword [0x00696e64]
je 0x6004b7
mov eax, dword [0x00696894]
mov dword [0x00696e64], eax
mov eax, dword [0x00693294]
mov dword [0x006978c4], eax
mov rcx, qword [rbp + 0x300]
xor edx, edx
xor r8, r8
mov rax, qword [rbp + 0x300]
mov rax, qword [rax]
call qword [rax + 0x48]
mov byte [rbp + 0x2df], 1
mov eax, dword [0x00695c0c]
add eax, dword [0x006962d8]
mov ecx, dword [0x006968a0]
add ecx, dword [0x00696e6c]
cmp eax, ecx
jle 0x60050b
mov eax, dword [0x00696e6c]
mov dword [0x00695c0c], eax
mov eax, dword [0x00693560]
add eax, 1
cmp dword [0x00693560], eax
jne 0x600589
mov eax, dword [0x006962e8]
test eax, eax
jge 0x60052b
call fcn.0040afc0
mov ecx, dword [0x00696cc4]
test ecx, ecx
jge 0x60053a
call fcn.0040afc0
mov edx, dword [0x006978f0]
test edx, edx
jge 0x600549
call fcn.0040afc0
mov r8d, dword [0x006933a4]
test r8d, r8d
jge 0x60055a
call fcn.0040afc0
mov r9d, dword [0x00693544]
test r9d, r9d
jge 0x60056b
call fcn.0040afc0
mov r10d, ecx
mov r11d, edx
mov ebx, r8d
mov dword [rsp + 0x20], r9d
mov ecx, eax
mov edx, r10d
mov r8d, r11d
mov r9d, ebx
call sub.kernel32.dll_LockFile
mov eax, dword [0x006931cc]
mov dword [0x0069747c], eax
mov eax, dword [0x006931cc]
mov dword [0x0069747c], eax
mov eax, dword [0x00696144]
cmp eax, dword [0x00696598]
je 0x6005bb
mov eax, dword [0x00696144]
mov dword [0x00696598], eax
mov eax, dword [0x00693518]
add eax, 1
cmp dword [0x00693518], eax
jne 0x6005e2
mov eax, dword [0x006934d8]
test eax, eax
jge 0x6005db
call fcn.0040afc0
mov ecx, eax
call sub.kernel32.dll_SetConsoleKeyShortcuts
lea rcx, [rbp + 0x40]
mov rdx, qword [rbp + 0x308]
lea r8, [0x00600990]
call fcn.00410100
mov rcx, qword [rbp + 0x40]
mov edx, 0x1ff
lea r8, [rbp + 0x60]
call fcn.005ff840
mov dword [rbp + 0x58], eax
cmp dword [rbp + 0x58], 0
jne 0x6006d5
nop
mov eax, dword [rbp + 0x68]
and eax, 0x10
cmp eax, 0x10
jne 0x60065b
mov rcx, qword [rbp + 0x70]
lea rdx, [0x0060099c]
call fcn.00410520
test eax, eax
je 0x60064d
mov rcx, qword [rbp + 0x70]
lea rdx, [0x006009a4]
call fcn.00410520
test eax, eax
jne 0x60065b
lea rcx, [rbp + 0x60]
call fcn.005ffa80
mov dword [rbp + 0x58], eax
jmp 0x6006cb
mov eax, dword [rbp + 0x68]
and eax, 0x10
cmp eax, 0x10
jne 0x60068e
mov rcx, qword [rbp + 0x300]
lea rdx, [rbp + 0x88]
mov r8d, 0x250
call fcn.004fbd70
lea rcx, [rbp + 0x60]
call fcn.005ffa80
mov dword [rbp + 0x58], eax
jmp 0x6006cb
mov rcx, qword [rbp + 0x300]
lea rdx, [rbp + 0x88]
mov r8d, 0x250
call fcn.004fbd70
lea rcx, [rbp + 0x60]
call fcn.005ffa80
mov dword [rbp + 0x58], eax
jmp 0x6006cb
cmp dword [rbp + 0x58], 0
je 0x600619
nop
mov rcx, qword [rbp + 0x80]
call qword [0x006a8d08]
mov eax, dword [0x0069339c]
add eax, 1
cmp dword [0x0069339c], eax
jne 0x60070a
mov eax, dword [0x00693914]
test eax, eax
jge 0x600703
call fcn.0040afc0
mov ecx, eax
call sub.kernel32.dll_SetConsoleKeyShortcuts
mov eax, dword [0x006932d4]
add eax, 1
cmp dword [0x006932d4], eax
jne 0x600731
mov eax, dword [0x00696e50]
test eax, eax
jge 0x60072a
call fcn.0040afc0
mov ecx, eax
call sub.kernel32.dll_SetConsoleKeyShortcuts
mov eax, dword [0x006931e0]
add eax, dword [0x006932e8]
mov ecx, dword [0x006934c8]
add ecx, dword [0x00693938]
cmp eax, ecx
jle 0x6008d2
mov dword [0x006931e0], 0x80
jmp 0x6008d2
nop
lea rcx, [rbp + 0x40]
call fcn.0040e9c0
lea rcx, [rbp + 0x48]
call fcn.0040e970
lea rcx, [rbp + 0x50]
call fcn.0040e920
lea rcx, [rbp + 0x60]
mov rdx, qword [0x00597950]
call fcn.00411390
lea rcx, [rbp + 0x308]
call fcn.0040e9c0
movzx rax, byte [rbp + 0x2df]
lea rsp, [rbp + 0x2e8]
pop rbx
pop rbp
ret