Function at 0x601340
Capabilities:
Get disk size

Disassembly:
push rbp
push rbx
sub rsp, 0x108
mov rbp, rsp
mov qword [rbp + 0x58], rbp
mov qword [rbp + 0x120], rcx
mov eax, dword [0x006958d8]
add eax, dword [0x00695bb4]
mov ecx, dword [0x00696168]
add ecx, dword [0x00696324]
cmp eax, ecx
jle 0x601378
call fcn.004096f0
mov eax, dword [0x006962f0]
cmp eax, dword [0x006968b8]
je 0x601392
mov eax, dword [0x006962f0]
mov dword [0x006968b8], eax
call fcn.005fbed0
cmp eax, dword [0x006931fc]
jle 0x6013a9
mov dword [0x006931fc], 0x3d
mov eax, dword [0x00695908]
add eax, dword [0x00695be4]
mov ecx, dword [0x00696198]
add ecx, dword [0x0069659c]
cmp eax, ecx
jle 0x6013d1
mov eax, dword [0x0069659c]
mov dword [0x00695908], eax
mov eax, dword [0x00693448]
add eax, 1
cmp dword [0x00693448], eax
jne 0x601422
mov eax, dword [0x0069328c]
test eax, eax
jge 0x6013f1
call fcn.0040afc0
mov ecx, dword [0x00693984]
test ecx, ecx
jge 0x601400
call fcn.0040afc0
mov edx, dword [0x00695808]
test edx, edx
jge 0x60140f
call fcn.0040afc0
mov r8d, ecx
mov r9d, edx
mov ecx, eax
mov edx, r8d
mov r8d, r9d
call sub.kernel32.dll_GetDiskFreeSpaceExW
nop
mov eax, dword [0x006958e0]
add eax, dword [0x00695c10]
mov ecx, dword [0x00696174]
add ecx, dword [0x006965c8]
cmp eax, ecx
jle 0x601444
call fcn.004096f0
mov eax, dword [0x006958e0]
add eax, dword [0x00695c10]
mov ecx, dword [0x00696174]
add ecx, dword [0x006965c8]
cmp eax, ecx
jle 0x601465
call fcn.004096f0
mov eax, dword [0x00696144]
cmp eax, dword [0x00696598]
je 0x60147f
mov eax, dword [0x00696144]
mov dword [0x00696598], eax
mov eax, dword [0x006958f8]
add eax, dword [0x00695d70]
mov ecx, dword [0x006962f0]
add ecx, dword [0x006968b8]
cmp eax, ecx
jle 0x6014a0
call fcn.004096f0
mov eax, dword [0x006958f8]
add eax, dword [0x00695d70]
mov ecx, dword [0x006962f0]
add ecx, dword [0x006968b8]
cmp eax, ecx
jle 0x6014c1
call fcn.004096f0
mov eax, dword [0x00696a78]
cmp eax, dword [0x00697484]
je 0x6014db
mov eax, dword [0x00696a78]
mov dword [0x00697484], eax
mov eax, dword [0x00695b9c]
add eax, dword [0x00696150]
mov ecx, dword [0x006965a4]
add ecx, dword [0x00696c90]
cmp eax, ecx
jle 0x601503
mov eax, dword [0x00696c90]
mov dword [0x00695b9c], eax
mov eax, dword [0x0069327c]
mov dword [0x006974cc], eax
mov eax, dword [0x00695c04]
add eax, dword [0x006962cc]
mov ecx, dword [0x006965b8]
add ecx, dword [0x00696ca8]
cmp eax, ecx
jle 0x601537
mov eax, dword [0x00696ca8]
mov dword [0x00695c04], eax
call fcn.005fbf20
cmp eax, dword [0x00693274]
jle 0x60154e
mov dword [0x00693274], 0x43
mov eax, dword [0x00695898]
add eax, dword [0x00695be4]
mov ecx, dword [0x00696198]
add ecx, dword [0x006965f0]
cmp eax, ecx
jle 0x60156f
call fcn.004096f0
xor ecx, ecx
call qword [0x006a9070]
mov dword [rbp + 0xb4], eax
mov eax, dword [0x00695898]
add eax, dword [0x00695be4]
mov ecx, dword [0x00696198]
add ecx, dword [0x006965f0]
cmp eax, ecx
jle 0x60159e
call fcn.004096f0
mov eax, dword [0x00696ca4]
cmp eax, dword [0x0069749c]
je 0x6015b8
mov eax, dword [0x00696ca4]
mov dword [0x0069749c], eax
mov eax, dword [0x00693530]
add eax, 1
cmp dword [0x00693530], eax
jne 0x601620
mov eax, dword [0x00696570]
test eax, eax
jge 0x6015d8
call fcn.0040afc0
mov ecx, dword [0x00697454]
test ecx, ecx
jge 0x6015e7
call fcn.0040afc0
mov edx, dword [0x00697e8c]
test edx, edx
jge 0x6015f6
call fcn.0040afc0
mov r8d, dword [0x006933e0]
test r8d, r8d
jge 0x601607
call fcn.0040afc0
mov r9d, ecx
mov r10d, edx
mov r11d, r8d
mov ecx, eax
mov edx, r9d
mov r8d, r10d
mov r9d, r11d
call sub.advapi32.dll_CryptDuplicateKey
mov eax, dword [0x006958c8]
add eax, dword [0x00695ba8]
mov ecx, dword [0x0069615c]
add ecx, dword [0x00696314]
cmp eax, ecx
jle 0x601641
call fcn.004096f0
call fcn.006011a0
cmp eax, dword [0x00693294]
jle 0x601658
mov dword [0x00693294], 0x60
mov dword [0x006932e4], 0x31f
mov eax, dword [0x006932e4]
sub eax, 0x1b1
mov dword [0x006934c4], eax
mov eax, dword [0x00695910]
add eax, dword [0x00695d88]
mov ecx, dword [0x006961a0]
add ecx, dword [0x006965f4]
cmp eax, ecx
jle 0x601695
call fcn.004096f0
mov eax, dword [0x00695d90]
add eax, dword [0x006961a8]
mov ecx, dword [0x006965fc]
add ecx, dword [0x00696e50]
cmp eax, ecx
jle 0x6016bd
mov eax, dword [0x00696e50]
mov dword [0x00695d90], eax
call fcn.005ff550
cmp eax, dword [0x006932c0]
jle 0x6016d4
mov dword [0x006932c0], 0x6b
mov ecx, 1
call qword [0x006a9070]
mov dword [rbp + 0xb0], eax
mov eax, dword [0x00695940]
mov dword [0x0069582c], eax
mov eax, dword [0x0069594c]
add eax, dword [0x00696138]
mov ecx, dword [0x0069658c]
add ecx, dword [0x00696ab4]
cmp eax, ecx
jle 0x60171a
mov eax, dword [0x00696ab4]
mov dword [0x0069594c], eax
mov eax, dword [0x00693420]
add eax, 1
cmp dword [0x00693420], eax
jne 0x601782
mov eax, dword [0x00696324]
test eax, eax
jge 0x60173a
call fcn.0040afc0
mov ecx, dword [0x00697454]
test ecx, ecx
jge 0x601749
call fcn.0040afc0
mov edx, dword [0x00697e88]
test edx, edx
jge 0x601758
call fcn.0040afc0
mov r8d, dword [0x006933e0]
test r8d, r8d
jge 0x601769
call fcn.0040afc0
mov r9d, ecx
mov r10d, edx
mov r11d, r8d
mov ecx, eax
mov edx, r9d
mov r8d, r10d
mov r9d, r11d
call sub.advapi32.dll_CryptDuplicateKey
lea rcx, [rbp + 0xd0]
mov edx, 0x2c
xor r8, r8
call fcn.0040a9a0
call fcn.005e8010
mov eax, dword [0x006932f4]
add eax, 1
cmp dword [0x006932f4], eax
jne 0x6017c3
mov eax, dword [0x0069744c]
test eax, eax
jge 0x6017bc
call fcn.0040afc0
mov ecx, eax
call sub.kernel32.dll_SetConsoleKeyShortcuts
call fcn.005fd9c0
cmp eax, dword [0x006932a8]
jle 0x6017da
mov dword [0x006932a8], 0x65
mov eax, dword [0x00697478]
mov dword [0x00696abc], eax
mov dword [rbp + 0xd0], 0x2c
call fcn.005ea1d0
mov eax, dword [0x006931ec]
add eax, dword [0x006933d8]
mov ecx, dword [0x00693528]
add ecx, dword [0x006940a4]
cmp eax, ecx
jle 0x60181b
mov dword [0x006931ec], 0xe0
call fcn.005e7100
mov eax, dword [0x006958a0]
add eax, dword [0x00695bf0]
mov ecx, dword [0x006961a4]
add ecx, dword [0x006965f8]
cmp eax, ecx
jle 0x601841
call fcn.004096f0
mov eax, dword [0x006933c0]
add eax, 1
cmp dword [0x006933c0], eax
jne 0x601868
mov eax, dword [0x006934d8]
test eax, eax
jge 0x601861
call fcn.0040afc0
mov ecx, eax
call sub.kernel32.dll_SetConsoleKeyShortcuts
mov eax, dword [rbp + 0xb4]
mov dword [rbp + 0xd4], eax
mov dword [0x006932e0], 0x31e
mov eax, dword [0x006932e0]
sub eax, 0x1b0
mov dword [0x006934c0], eax
mov dword [0x006932e0], 0x31e
mov eax, dword [0x006932e0]
sub eax, 0x1b0
mov dword [0x006934c0], eax
mov eax, dword [0x00696188]
cmp eax, dword [0x006965dc]
je 0x6018c6
mov eax, dword [0x00696188]
mov dword [0x006965dc], eax
call fcn.005fd9c0
cmp eax, dword [0x00693298]
jle 0x6018dd
mov dword [0x00693298], 0x4d
call fcn.005fc010
cmp eax, dword [0x00693278]
jle 0x6018f4
mov dword [0x00693278], 0x59
mov eax, dword [0x006931c0]
add eax, dword [0x006933fc]
mov ecx, dword [0x0069354c]
add ecx, dword [0x006940c8]
cmp eax, ecx
jle 0x60191a
mov dword [0x006931c0], 0x130
mov eax, dword [0x00695d8c]
add eax, dword [0x0069630c]
mov ecx, dword [0x00696a7c]
add ecx, dword [0x00697438]
cmp eax, ecx
jle 0x601942
mov eax, dword [0x00697438]
mov dword [0x00695d8c], eax
call fcn.005e9180
mov eax, dword [0x0069743c]
mov dword [0x00696a80], eax
mov word [rbp + 0xde], 0x10
mov eax, dword [0x00695ba4]
add eax, dword [0x00695d90]
mov ecx, dword [0x00696314]
add ecx, dword [0x00696a84]
cmp eax, ecx
jle 0x60197d
call fcn.004096f0
mov eax, dword [0x00693514]
add eax, 1
cmp dword [0x00693514], eax
jne 0x6019a4
mov eax, dword [0x00696154]
test eax, eax
jge 0x60199d
call fcn.0040afc0
mov ecx, eax
call sub.kernel32.dll_SetConsoleKeyShortcuts
mov eax, dword [0x006931fc]
mov dword [0x006974ac], eax
mov word [rbp + 0xdc], 1
mov eax, dword [0x00693418]
add eax, 1
cmp dword [0x00693418], eax
jne 0x601a21
mov eax, dword [0x00696590]
test eax, eax
jge 0x6019d9
call fcn.0040afc0
mov ecx, dword [0x00693404]
test ecx, ecx
jge 0x6019e8
call fcn.0040afc0
mov edx, dword [0x00693920]
test edx, edx
jge 0x6019f7
call fcn.0040afc0
mov r8d, dword [0x006942b8]
test r8d, r8d
jge 0x601a08
call fcn.0040afc0
mov r9d, ecx
mov r10d, edx
mov r11d, r8d
mov ecx, eax
mov edx, r9d
mov r8d, r10d
mov r9d, r11d
call sub.advapi32.dll_CryptDuplicateKey
mov eax, dword [0x00695900]
add eax, dword [0x00695d78]
mov ecx, dword [0x006962f8]
add ecx, dword [0x006965e4]
cmp eax, ecx
jle 0x601a42
call fcn.004096f0
mov eax, dword [0x00695bc8]
add eax, dword [0x0069617c]
mov ecx, dword [0x006965d0]
add ecx, dword [0x00696aa4]
cmp eax, ecx
jle 0x601a6a
mov eax, dword [0x00696aa4]
mov dword [0x00695bc8], eax
mov dword [rbp + 0xe0], 0
mov eax, dword [0x006978d0]
mov dword [0x0069744c], eax
mov eax, dword [0x006978d0]
mov dword [0x0069744c], eax
mov eax, dword [0x00696318]
cmp eax, dword [0x00696a88]
je 0x601aa6
mov eax, dword [0x00696318]
mov dword [0x00696a88], eax
mov eax, dword [0x00693278]
mov dword [0x006978fc], eax
mov eax, dword [0x00695b94]
mov dword [0x00695848], eax
mov eax, dword [0x00695b94]
mov dword [0x00695848], eax
mov eax, dword [0x00696584]
cmp eax, dword [0x006968b0]
je 0x601ae4
mov eax, dword [0x00696584]
mov dword [0x006968b0], eax
mov eax, dword [rbp + 0xb0]
mov dword [rbp + 0xd8], eax
mov eax, dword [0x00695bb4]
add eax, dword [0x00696168]
mov ecx, dword [0x006965bc]
add ecx, dword [0x00696ca8]
cmp eax, ecx
jle 0x601b18
mov eax, dword [0x00696ca8]
mov dword [0x00695bb4], eax
mov eax, dword [0x0069746c]
mov dword [0x00696ab0], eax
mov eax, dword [0x0069351c]
add eax, 1
cmp dword [0x0069351c], eax
jne 0x601ba2
mov eax, dword [0x00696aa0]
test eax, eax
jge 0x601b44
call fcn.0040afc0
mov ecx, dword [0x006978e4]
test ecx, ecx
jge 0x601b53
call fcn.0040afc0
mov edx, dword [0x00693308]
test edx, edx
jge 0x601b62
call fcn.0040afc0
mov r8d, dword [0x00693538]
test r8d, r8d
jge 0x601b73
call fcn.0040afc0
mov r9d, dword [0x00695944]
test r9d, r9d
jge 0x601b84
call fcn.0040afc0
mov r10d, ecx
mov r11d, edx
mov ebx, r8d
mov dword [rsp + 0x20], r9d
mov ecx, eax
mov edx, r10d
mov r8d, r11d
mov r9d, ebx
call sub.kernel32.dll_LockFile
mov eax, dword [0x00695b88]
add eax, dword [0x0069613c]
mov ecx, dword [0x00696590]
add ecx, dword [0x006968bc]
cmp eax, ecx
jle 0x601bca
mov eax, dword [0x006968bc]
mov dword [0x00695b88], eax
mov eax, dword [0x006978dc]
mov dword [0x00696e6c], eax
mov eax, dword [0x0069612c]
add eax, dword [0x00696580]
mov ecx, dword [0x00696aac]
add ecx, dword [0x00696e7c]
cmp eax, ecx
jle 0x601bfe
mov eax, dword [0x00696e7c]
mov dword [0x0069612c], eax
mov eax, dword [0x00693288]
mov dword [0x006974d8], eax
mov eax, dword [0x00697e88]
add eax, dword [0x006932fc]
mov ecx, dword [0x00693434]
add ecx, dword [0x00693800]
cmp eax, ecx
jle 0x601c30
mov dword [0x00697e88], 0x2a
mov eax, dword [0x006974c4]
mov dword [0x00696ccc], eax
call qword [0x006a9128]
mov rcx, rax
call qword [0x006a9078]
mov qword [rbp + 0xa0], rax
mov eax, dword [0x006974c4]
mov dword [0x00696ccc], eax
mov eax, dword [0x006968a4]
cmp eax, dword [0x00696e70]
je 0x601c78
mov eax, dword [0x006968a4]
mov dword [0x00696e70], eax
mov eax, dword [0x006978f0]
mov dword [0x00696e80], eax
mov eax, dword [0x00695d8c]
add eax, dword [0x0069630c]
mov ecx, dword [0x00696a7c]
add ecx, dword [0x00697438]
cmp eax, ecx
jle 0x601cac
mov eax, dword [0x00697438]
mov dword [0x00695d8c], eax
mov eax, dword [0x006933cc]
add eax, 1
cmp dword [0x006933cc], eax
jne 0x601d14
mov eax, dword [0x006931b8]
test eax, eax
jge 0x601ccc
call fcn.0040afc0
mov ecx, dword [0x00693448]
test ecx, ecx
jge 0x601cdb
call fcn.0040afc0
mov edx, dword [0x00693960]
test edx, edx
jge 0x601cea
call fcn.0040afc0
mov r8d, dword [0x006942fc]
test r8d, r8d
jge 0x601cfb
call fcn.0040afc0
mov r9d, ecx
mov r10d, edx
mov r11d, r8d
mov ecx, eax
mov edx, r9d
mov r8d, r10d
mov r9d, r11d
call sub.advapi32.dll_CryptDuplicateKey
mov eax, dword [0x00695be0]
mov dword [0x00695894], eax
mov eax, dword [0x006974b8]
mov dword [0x00696cc0], eax
mov eax, dword [0x006932a8]
add eax, dword [0x00693430]
mov ecx, dword [0x006937fc]
add ecx, dword [0x006940fc]
cmp eax, ecx
jle 0x601d52
mov dword [0x006932a8], 0xc5
mov eax, dword [0x006978dc]
mov dword [0x00696e6c], eax
mov dword [0x006932c8], 0x315
mov eax, dword [0x006932c8]
sub eax, 0x1ac
mov dword [0x00693450], eax
mov rcx, qword [rbp + 0xa0]
call qword [0x006a9268]
mov qword [rbp + 0x98], rax
mov eax, dword [0x006931cc]
add eax, dword [0x006932d4]
mov ecx, dword [0x006934b4]
add ecx, dword [0x00693924]
cmp eax, ecx
jle 0x601db4
mov dword [0x006931cc], 0x5a
mov eax, dword [0x00693438]
mov dword [0x006932b0], eax
mov eax, dword [0x00696164]
add eax, dword [0x006965b8]
mov ecx, dword [0x00696ca4]
add ecx, dword [0x0069749c]
cmp eax, ecx
jle 0x601de8
mov eax, dword [0x0069749c]
mov dword [0x00696164], eax
mov dword [0x0069320c], 0x2f1
mov eax, dword [0x0069320c]
sub eax, 0x19b
mov dword [0x006933f4], eax
mov rcx, qword [rbp + 0x98]
lea rdx, [rbp + 0xd0]
xor r8, r8
lea r9, [rbp + 0x90]
mov qword [rsp + 0x20], 0
mov dword [rsp + 0x28], 0
call qword [0x006a9270]
mov qword [rbp + 0xa8], rax
mov eax, dword [0x006935f0]
add eax, 1
cmp dword [0x006935f0], eax
jne 0x601e8b
mov eax, dword [0x00695b98]
test eax, eax
jge 0x601e5a
call fcn.0040afc0
mov ecx, dword [0x00697434]
test ecx, ecx
jge 0x601e69
call fcn.0040afc0
mov edx, dword [0x006931d4]
test edx, edx
jge 0x601e78
call fcn.0040afc0
mov r8d, ecx
mov r9d, edx
mov ecx, eax
mov edx, r8d
mov r8d, r9d
call sub.kernel32.dll_GetDiskFreeSpaceExW
call fcn.005ea1d0
mov eax, dword [0x006958c4]
mov dword [0x006942c8], eax
mov eax, dword [0x006978cc]
mov dword [0x00696e5c], eax
mov eax, dword [0x00696140]
add eax, dword [0x00696594]
mov ecx, dword [0x00696abc]
add ecx, dword [0x0069747c]
cmp eax, ecx
jle 0x601ed0
mov eax, dword [0x0069747c]
mov dword [0x00696140], eax
mov eax, dword [0x006931dc]
add eax, dword [0x006933c4]
mov ecx, dword [0x00693514]
add ecx, dword [0x00693984]
cmp eax, ecx
jle 0x601ef6
mov dword [0x006931dc], 0x10d
mov eax, dword [0x006974ac]
mov dword [0x00696cb4], eax
mov rcx, qword [rbp + 0x98]
mov rdx, qword [rbp + 0xa8]
call qword [0x006a9278]
mov eax, dword [0x00695940]
add eax, dword [0x0069612c]
mov ecx, dword [0x006965d4]
add ecx, dword [0x00696cc0]
cmp eax, ecx
jle 0x601f3e
mov eax, dword [0x00696cc0]
mov dword [0x00695940], eax
mov rcx, qword [rbp + 0x98]
xor edx, edx
xor r8, r8
mov r9d, dword [rbp + 0xb4]
mov eax, dword [rbp + 0xb0]
mov dword [rsp + 0x20], eax
mov rax, qword [rbp + 0xa0]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x30], 0
mov dword [rsp + 0x38], 0
mov dword [rsp + 0x40], 0xcc0020
call qword [0x006a9280]
mov eax, dword [0x00695848]
mov dword [0x006942b8], eax
mov eax, dword [0x00693290]
mov dword [0x006978c0], eax
mov eax, dword [0x00695bf8]
add eax, dword [0x006961ac]
mov ecx, dword [0x006965ac]
add ecx, dword [0x00696c9c]
cmp eax, ecx
jle 0x601fc5
mov eax, dword [0x00696c9c]
mov dword [0x00695bf8], eax
mov eax, dword [0x006933e0]
add eax, 1
cmp dword [0x006933e0], eax
jne 0x601fec
mov eax, dword [0x00695840]
test eax, eax
jge 0x601fe5
call fcn.0040afc0
mov ecx, eax
call sub.kernel32.dll_SetConsoleKeyShortcuts
mov dword [0x00693278], 0x2f7
mov eax, dword [0x00693278]
sub eax, 0x19e
mov dword [0x00693400], eax
mov dword [rbp + 0x68], 0x18
mov eax, dword [0x00693208]
mov dword [0x006974b8], eax
call fcn.005e7b40
mov eax, dword [0x00693208]
mov dword [0x006974b8], eax
mov eax, dword [0x006961a0]
cmp eax, dword [0x006965f4]
je 0x602046
mov eax, dword [0x006961a0]
mov dword [0x006965f4], eax
mov dword [0x006932b4], 0x30e
mov eax, dword [0x006932b4]
sub eax, 0x1a9
mov dword [0x00693440], eax
mov eax, dword [0x00695bfc]
add eax, dword [0x00696318]
mov ecx, dword [0x00696a88]
add ecx, dword [0x00697444]
cmp eax, ecx
jle 0x60208a
mov eax, dword [0x00697444]
mov dword [0x00695bfc], eax
lea rcx, [rbp + 0x68]
call qword [0x006a9080]
test eax, eax
je 0x6020b6
cmp dword [rbp + 0x6c], 1
jne 0x6020b6
mov rcx, qword [rbp + 0x98]
mov edx, dword [rbp + 0x78]
mov r8d, dword [rbp + 0x7c]
mov r9, qword [rbp + 0x70]
call qword [0x006a9088]
mov ebx, dword [rbp + 0xb0]
test ebx, ebx
jge 0x6020c5
call fcn.0040afc0
mov rcx, qword [rbp + 0x98]
mov rdx, qword [rbp + 0xa8]
xor r8, r8
mov r9d, ebx
mov qword [rsp + 0x20], 0
lea rax, [rbp + 0xd0]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x30], 0
call qword [0x006a9288]
mov eax, dword [0x00695bfc]
add eax, dword [0x00696318]
mov ecx, dword [0x00696a88]
add ecx, dword [0x00697444]
cmp eax, ecx
jle 0x602124
mov eax, dword [0x00697444]
mov dword [0x00695bfc], eax
mov eax, dword [0x006968a0]
cmp eax, dword [0x00696e6c]
je 0x60213e
mov eax, dword [0x006968a0]
mov dword [0x00696e6c], eax
mov ecx, dword [rbp + 0xe4]
call fcn.00409030
mov qword [rbp + 0x88], rax
mov dword [0x006932f8], 0x327
mov eax, dword [0x006932f8]
sub eax, 0x1b5
mov dword [0x0069352c], eax
mov dword [0x006932f8], 0x327
mov eax, dword [0x006932f8]
sub eax, 0x1b5
mov dword [0x0069352c], eax
mov eax, dword [0x006962d4]
cmp eax, dword [0x0069689c]
je 0x6021a2
mov eax, dword [0x006962d4]
mov dword [0x0069689c], eax
call fcn.005fbed0
cmp eax, dword [0x006931f4]
jle 0x6021b9
mov dword [0x006931f4], 0x50
mov rcx, qword [rbp + 0x98]
mov rdx, qword [rbp + 0xa8]
xor r8, r8
mov r9d, ebx
mov rax, qword [rbp + 0x88]
mov qword [rsp + 0x20], rax
lea rax, [rbp + 0xd0]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x30], 0
call qword [0x006a9288]
mov eax, dword [0x006958cc]
mov dword [0x006942d0], eax
mov word [rbp + 0xba], 0x4d42
mov eax, dword [0x0069344c]
add eax, 1
cmp dword [0x0069344c], eax
jne 0x602259
mov eax, dword [0x006962d4]
test eax, eax
jge 0x602228
call fcn.0040afc0
mov ecx, dword [0x006931f4]
test ecx, ecx
jge 0x602237
call fcn.0040afc0
mov edx, dword [0x00693530]
test edx, edx
jge 0x602246
call fcn.0040afc0
mov r8d, ecx
mov r9d, edx
mov ecx, eax
mov edx, r8d
mov r8d, r9d
call sub.kernel32.dll_GetDiskFreeSpaceExW
mov eax, dword [0x00695c04]
add eax, dword [0x00696320]
mov ecx, dword [0x00696a90]
add ecx, dword [0x0069744c]
cmp eax, ecx
jle 0x602281
mov eax, dword [0x0069744c]
mov dword [0x00695c04], eax
mov eax, dword [0x006931ec]
mov dword [0x0069749c], eax
mov eax, dword [0x006931ec]
mov dword [0x0069749c], eax
mov eax, dword [0x006965e0]
cmp eax, dword [0x00696ccc]
je 0x6022b3
mov eax, dword [0x006965e0]
mov dword [0x00696ccc], eax
mov eax, dword [0x0069340c]
add eax, 1
cmp dword [0x0069340c], eax
jne 0x6022da
mov eax, dword [0x006933d8]
test eax, eax
jge 0x6022d3
call fcn.0040afc0
mov ecx, eax
call sub.kernel32.dll_SetConsoleKeyShortcuts
call fcn.005f7f60
cmp eax, dword [0x006931dc]
jle 0x6022f1
mov dword [0x006931dc], 0x4a
mov eax, dword [rbp + 0xe4]
add eax, 0x36
mov dword [rbp + 0xbc], eax
mov eax, dword [0x006934cc]
add eax, 1
cmp dword [0x006934cc], eax
jne 0x602327
mov eax, dword [0x00697e7c]
test eax, eax
jge 0x602320
call fcn.0040afc0
mov ecx, eax
call sub.kernel32.dll_SetConsoleKeyShortcuts
mov dword [0x006932ec], 0x303
mov eax, dword [0x006932ec]
sub eax, 0x1a3
mov dword [0x006934cc], eax
mov eax, dword [0x00695be8]
add eax, dword [0x00696300]
mov ecx, dword [0x00696a74]
add ecx, dword [0x00697430]
cmp eax, ecx
jle 0x60236b
mov eax, dword [0x00697430]
mov dword [0x00695be8], eax
mov eax, dword [0x006958d4]
add eax, dword [0x00695bb0]
mov ecx, dword [0x00696164]
add ecx, dword [0x006965b8]
cmp eax, ecx
jle 0x60238c
call fcn.004096f0
call fcn.005f7f60
cmp eax, dword [0x006931dc]
jle 0x6023a3
mov dword [0x006931dc], 0x5e
mov dword [rbp + 0xc4], 0x36
mov eax, dword [0x006932c8]
mov dword [0x006978f8], eax
mov rax, qword [rbp + 0x120]
mov rcx, qword [rax]
call fcn.004fd260
mov eax, dword [0x00695d98]
add eax, dword [0x00696318]
mov ecx, dword [0x00696a88]
add ecx, dword [0x00696e5c]
cmp eax, ecx
jle 0x6023f0
mov eax, dword [0x00696e5c]
mov dword [0x00695d98], eax
mov rax, qword [rbp + 0x120]
mov rcx, qword [rax]
lea rdx, [rbp + 0xba]
mov r8d, 2
call fcn.004fbd70
mov eax, dword [0x00695928]
mov dword [0x00695814], eax
mov eax, dword [0x00695920]
add eax, dword [0x00695d9c]
mov ecx, dword [0x0069631c]
add ecx, dword [0x00696ca4]
cmp eax, ecx
jle 0x60243a
call fcn.004096f0
mov eax, dword [0x006974b8]
mov dword [0x00696cc0], eax
mov eax, dword [0x00695924]
add eax, dword [0x00695d9c]
mov ecx, dword [0x0069631c]
add ecx, dword [0x00696a8c]
cmp eax, ecx
jle 0x602467
call fcn.004096f0
call fcn.005fd1c0
cmp eax, dword [0x00693298]
jle 0x60247e
mov dword [0x00693298], 0x61
mov rax, qword [rbp + 0x120]
mov rcx, qword [rax]
lea rdx, [rbp + 0xbc]
mov r8d, 4
call fcn.004fbd70
call fcn.005f53a0
cmp eax, dword [0x006931c8]
jle 0x6024b2
mov dword [0x006931c8], 0x46
call fcn.005e8470
mov byte [rbp + 0x87], 0
mov ebx, 4
mov rax, qword [rbp + 0x120]
mov rcx, qword [rax]
lea rdx, [rbp + 0x87]
mov r8d, 1
call fcn.004fbd70
sub ebx, 1
test ebx, ebx
jne 0x6024c4
nop
mov rax, qword [rbp + 0x120]
mov rcx, qword [rax]
lea rdx, [rbp + 0xc4]
mov r8d, 4
call fcn.004fbd70
mov eax, dword [0x00696158]
add eax, dword [0x006965ac]
mov ecx, dword [0x00696e54]
add ecx, dword [0x006978c4]
cmp eax, ecx
jle 0x60252e
mov eax, dword [0x006978c4]
mov dword [0x00696158], eax
call fcn.005f7f60
cmp eax, dword [0x006931cc]
jle 0x602545
mov dword [0x006931cc], 0x46
mov eax, dword [0x0069587c]
add eax, dword [0x00695bc8]
mov ecx, dword [0x0069617c]
add ecx, dword [0x006965d0]
cmp eax, ecx
jle 0x602566
call fcn.004096f0
call fcn.005f3a60
cmp eax, dword [0x006931b0]
jle 0x60257d
mov dword [0x006931b0], 0x54
mov rax, qword [rbp + 0x120]
mov rcx, qword [rax]
lea rdx, [rbp + 0xd0]
mov r8d, 4
call fcn.004fbd70
mov eax, dword [0x00697e78]
mov dword [0x00697444], eax
mov eax, dword [0x00697e78]
mov dword [0x00697444], eax
mov eax, dword [0x00696190]
cmp eax, dword [0x006965e4]
je 0x6025cc
mov eax, dword [0x00696190]
mov dword [0x006965e4], eax
call fcn.005f20b0
cmp eax, dword [0x006931dc]
jle 0x6025e3
mov dword [0x006931dc], 0x4a
mov eax, dword [0x00696124]
add eax, dword [0x0069657c]
mov ecx, dword [0x00696aa4]
add ecx, dword [0x00697460]
cmp eax, ecx
jle 0x60260b
mov eax, dword [0x00697460]
mov dword [0x00696124], eax
mov dword [0x006932a0], 0x306
mov eax, dword [0x006932a0]
sub eax, 0x1a5
mov dword [0x00693428], eax
mov eax, dword [0x006974b4]
mov dword [0x00696cbc], eax
mov rax, qword [rbp + 0x120]
mov rcx, qword [rax]
lea rdx, [rbp + 0xd4]
mov r8d, 4
call fcn.004fbd70
mov eax, dword [0x00695c08]
add eax, dword [0x00696168]
mov ecx, dword [0x006965bc]
add ecx, dword [0x00696a94]
cmp eax, ecx
jle 0x602678
mov eax, dword [0x00696a94]
mov dword [0x00695c08], eax
mov rax, qword [rbp + 0x120]
mov rcx, qword [rax]
lea rdx, [rbp + 0xd8]
mov r8d, 4
call fcn.004fbd70
mov eax, dword [0x006931e0]
add eax, dword [0x006932e4]
mov ecx, dword [0x006934c4]
add ecx, dword [0x00693934]
cmp eax, ecx
jle 0x6026bb
mov dword [0x006931e0], 0xa0
call fcn.005fbed0
cmp eax, dword [0x006931f4]
jle 0x6026d2
mov dword [0x006931f4], 0x51
mov eax, dword [0x00696ac0]
mov dword [0x006965ec], eax
mov eax, dword [0x00695c18]
add eax, dword [0x006962e0]
mov ecx, dword [0x006965cc]
add ecx, dword [0x00696cbc]
cmp eax, ecx
jle 0x602706
mov eax, dword [0x00696cbc]
mov dword [0x00695c18], eax
mov eax, dword [0x0069589c]
mov dword [0x006957f4], eax
mov eax, dword [0x0069589c]
mov dword [0x006957f4], eax
mov eax, dword [0x00696144]
cmp eax, dword [0x00696598]
je 0x602738
mov eax, dword [0x00696144]
mov dword [0x00696598], eax
mov rax, qword [rbp + 0x120]
mov rcx, qword [rax]
lea rdx, [rbp + 0xdc]
mov r8d, 2
call fcn.004fbd70
mov eax, dword [0x00693208]
mov dword [0x006974b8], eax
mov rax, qword [rbp + 0x120]
mov rcx, qword [rax]
lea rdx, [rbp + 0xde]
mov r8d, 2
call fcn.004fbd70
mov eax, dword [0x00693208]
mov dword [0x006974b8], eax
mov eax, dword [0x006965b4]
cmp eax, dword [0x00696ca0]
je 0x6027a4
mov eax, dword [0x006965b4]
mov dword [0x00696ca0], eax
mov eax, dword [0x00695c20]
add eax, dword [0x00696180]
mov ecx, dword [0x006965d4]
add ecx, dword [0x00696aac]
cmp eax, ecx
jle 0x6027cc
mov eax, dword [0x00696aac]
mov dword [0x00695c20], eax
mov eax, dword [0x0069592c]
mov dword [0x00695818], eax
mov eax, dword [0x00695bbc]
add eax, dword [0x00696174]
mov ecx, dword [0x006965c8]
add ecx, dword [0x00696cb4]
cmp eax, ecx
jle 0x602800
mov eax, dword [0x00696cb4]
mov dword [0x00695bbc], eax
mov eax, dword [0x0069351c]
add eax, 1
cmp dword [0x0069351c], eax
jne 0x602851
mov eax, dword [0x00696aa8]
test eax, eax
jge 0x602820
call fcn.0040afc0
mov ecx, dword [0x006978e8]
test ecx, ecx
jge 0x60282f
call fcn.0040afc0
mov edx, dword [0x006932b8]
test edx, edx
jge 0x60283e
call fcn.0040afc0
mov r8d, ecx
mov r9d, edx
mov ecx, eax
mov edx, r8d
mov r8d, r9d
call sub.kernel32.dll_GetDiskFreeSpaceExW
mov eax, dword [0x00697450]
mov dword [0x00696a94], eax
mov eax, dword [0x00697450]
mov dword [0x00696a94], eax
mov eax, dword [0x006962f0]
cmp eax, dword [0x006968b8]
je 0x602883
mov eax, dword [0x006962f0]
mov dword [0x006968b8], eax
mov rax, qword [rbp + 0x120]
mov rcx, qword [rax]
lea rdx, [rbp + 0xe0]
mov r8d, 4
call fcn.004fbd70
mov eax, dword [0x006934e0]
add eax, 1
cmp dword [0x006934e0], eax
jne 0x60291e
mov eax, dword [0x006940d4]
test eax, eax
jge 0x6028c0
call fcn.0040afc0
mov ecx, dword [0x00696150]
test ecx, ecx
jge 0x6028cf
call fcn.0040afc0
mov edx, dword [0x006965f4]
test edx, edx
jge 0x6028de
call fcn.0040afc0
mov r8d, dword [0x00697488]
test r8d, r8d
jge 0x6028ef
call fcn.0040afc0
mov r9d, dword [0x006931d8]
test r9d, r9d
jge 0x602900
call fcn.0040afc0
mov r10d, ecx
mov r11d, edx
mov ebx, r8d
mov dword [rsp + 0x20], r9d
mov ecx, eax
mov edx, r10d
mov r8d, r11d
mov r9d, ebx
call sub.kernel32.dll_LockFile
call fcn.005ea0b0
mov eax, dword [0x006932a4]
mov dword [0x006978d4], eax
call fcn.005e8010
mov rax, qword [rbp + 0x120]
mov rcx, qword [rax]
lea rdx, [rbp + 0xe4]
mov r8d, 4
call fcn.004fbd70
call fcn.005f7f60
cmp eax, dword [0x006931d4]
jle 0x602968
mov dword [0x006931d4], 0x48
mov dword [0x00693298], 0x303
mov eax, dword [0x00693298]
sub eax, 0x1a3
mov dword [0x00693420], eax
mov eax, dword [0x006933e0]
add eax, 1
cmp dword [0x006933e0], eax
jne 0x6029ec
mov eax, dword [0x00697450]
test eax, eax
jge 0x6029a4
call fcn.0040afc0
mov ecx, dword [0x006933dc]
test ecx, ecx
jge 0x6029b3
call fcn.0040afc0
mov edx, dword [0x006937fc]
test edx, edx
jge 0x6029c2
call fcn.0040afc0
mov r8d, dword [0x00694290]
test r8d, r8d
jge 0x6029d3
call fcn.0040afc0
mov r9d, ecx
mov r10d, edx
mov r11d, r8d
mov ecx, eax
mov edx, r9d
mov r8d, r10d
mov r9d, r11d
call sub.advapi32.dll_CryptDuplicateKey
mov eax, dword [0x006934b8]
add eax, 1
cmp dword [0x006934b8], eax
jne 0x602a13
mov eax, dword [0x00696c90]
test eax, eax
jge 0x602a0c
call fcn.0040afc0
mov ecx, eax
call sub.kernel32.dll_SetConsoleKeyShortcuts
call fcn.005ea730
call fcn.005e6b80
mov eax, dword [0x006974c4]
mov dword [0x00696ccc], eax
mov eax, dword [0x00695bd4]
add eax, dword [0x00696188]
mov ecx, dword [0x0069658c]
add ecx, dword [0x00696ab4]
cmp eax, ecx
jle 0x602a51
mov eax, dword [0x00696ab4]
mov dword [0x00695bd4], eax
mov eax, dword [0x006958a4]
add eax, dword [0x00695bf0]
mov ecx, dword [0x006961a4]
add ecx, dword [0x006965f8]
cmp eax, ecx
jle 0x602a72
call fcn.004096f0
mov ebx, 0x10
mov rax, qword [rbp + 0x120]
mov rcx, qword [rax]
lea rdx, [rbp + 0x87]
mov r8d, 1
call fcn.004fbd70
sub ebx, 1
test ebx, ebx
jne 0x602a78
nop
mov rax, qword [rbp + 0x120]
mov rcx, qword [rax]
mov rdx, qword [rbp + 0x88]
mov r8d, dword [rbp + 0xe4]
call fcn.004fbd70
mov eax, dword [0x00693274]
mov dword [0x006974c4], eax
mov eax, dword [0x006931f8]
add eax, dword [0x006933e4]
mov ecx, dword [0x00693534]
add ecx, dword [0x006940b0]
cmp eax, ecx
jle 0x602aec
mov dword [0x006931f8], 0x87
mov eax, dword [0x0069589c]
add eax, dword [0x00695be8]
mov ecx, dword [0x0069619c]
add ecx, dword [0x006965f4]
cmp eax, ecx
jle 0x602b0d
call fcn.004096f0
mov eax, dword [0x00695d8c]
add eax, dword [0x0069630c]
mov ecx, dword [0x00696a7c]
add ecx, dword [0x00697438]
cmp eax, ecx
jle 0x602b35
mov eax, dword [0x00697438]
mov dword [0x00695d8c], eax
mov eax, dword [0x0069320c]
mov dword [0x006974bc], eax
call fcn.005f20b0
cmp eax, dword [0x00697e70]
jle 0x602b58
mov dword [0x00697e70], 0x37
mov eax, dword [0x00693424]
add eax, 1
cmp dword [0x00693424], eax
jne 0x602bd6
mov eax, dword [0x00696e4c]
test eax, eax
jge 0x602b78
call fcn.0040afc0
mov ecx, dword [0x006932e0]
test ecx, ecx
jge 0x602b87
call fcn.0040afc0
mov edx, dword [0x00693564]
test edx, edx
jge 0x602b96
call fcn.0040afc0
mov r8d, dword [0x00694134]
test r8d, r8d
jge 0x602ba7
call fcn.0040afc0
mov r9d, dword [0x00695858]
test r9d, r9d
jge 0x602bb8
call fcn.0040afc0
mov r10d, ecx
mov r11d, edx
mov ebx, r8d
mov dword [rsp + 0x20], r9d
mov ecx, eax
mov edx, r10d
mov r8d, r11d
mov r9d, ebx
call sub.kernel32.dll_LockFile
mov byte [rbp + 0xff], 1
mov eax, dword [0x00696aac]
add eax, dword [0x0069746c]
mov ecx, dword [0x00696130]
add ecx, dword [0x00696584]
cmp ecx, eax
jle 0x602c05
mov ecx, dword [0x0069746c]
mov dword [0x00696130], ecx
mov ecx, dword [0x00696130]
add ecx, dword [0x00696584]
cmp ecx, eax
jle 0x602c21
mov eax, dword [0x0069746c]
mov dword [0x00696130], eax
mov eax, dword [0x00696574]
cmp eax, dword [0x00696a9c]
je 0x602c3b
mov eax, dword [0x00696574]
mov dword [0x00696a9c], eax
mov eax, dword [0x00695c04]
add eax, dword [0x006962cc]
mov ecx, dword [0x00696894]
add ecx, dword [0x00696ca4]
cmp eax, ecx
jle 0x602c63
mov eax, dword [0x00696ca4]
mov dword [0x00695c04], eax
mov dword [0x006932a0], 0x306
mov eax, dword [0x006932a0]
sub eax, 0x1a5
mov dword [0x00693428], eax
mov eax, dword [0x006931f8]
add eax, dword [0x006933e0]
mov ecx, dword [0x00693530]
add ecx, dword [0x006940ac]
cmp eax, ecx
jle 0x602ca5
mov dword [0x006931f8], 0x140
mov eax, dword [0x00697484]
mov dword [0x00696ac4], eax
mov eax, dword [0x00693530]
add eax, 1
cmp dword [0x00693530], eax
jne 0x602d2f
mov eax, dword [0x00697468]
test eax, eax
jge 0x602cd1
call fcn.0040afc0
mov ecx, dword [0x006932c0]
test ecx, ecx
jge 0x602ce0
call fcn.0040afc0
mov edx, dword [0x006934f4]
test edx, edx
jge 0x602cef
call fcn.0040afc0
mov r8d, dword [0x006940c0]
test r8d, r8d
jge 0x602d00
call fcn.0040afc0
mov r9d, dword [0x00695838]
test r9d, r9d
jge 0x602d11
call fcn.0040afc0
mov r10d, ecx
mov r11d, edx
mov ebx, r8d
mov dword [rsp + 0x20], r9d
mov ecx, eax
mov edx, r10d
mov r8d, r11d
mov r9d, ebx
call sub.kernel32.dll_LockFile
mov rcx, qword [rbp + 0x88]
call fcn.00409060
call fcn.005e8520
mov eax, dword [0x006931e8]
add eax, dword [0x006933d0]
mov ecx, dword [0x00693524]
add ecx, dword [0x006940a0]
cmp eax, ecx
jle 0x602d66
mov dword [0x006931e8], 0x7f
call fcn.005e7c60
mov eax, dword [0x00693544]
add eax, 1
cmp dword [0x00693544], eax
jne 0x602dd3
mov eax, dword [0x006978fc]
test eax, eax
jge 0x602d8b
call fcn.0040afc0
mov ecx, dword [0x00693400]
test ecx, ecx
jge 0x602d9a
call fcn.0040afc0
mov edx, dword [0x0069391c]
test edx, edx
jge 0x602da9
call fcn.0040afc0
mov r8d, dword [0x006957f4]
test r8d, r8d
jge 0x602dba
call fcn.0040afc0
mov r9d, ecx
mov r10d, edx
mov r11d, r8d
mov ecx, eax
mov edx, r9d
mov r8d, r10d
mov r9d, r11d
call sub.advapi32.dll_CryptDuplicateKey
mov eax, dword [0x00697478]
mov dword [0x00696ab8], eax
call fcn.005e8470
mov eax, dword [0x00695bd0]
add eax, dword [0x00696188]
mov ecx, dword [0x006965dc]
add ecx, dword [0x00696ab0]
cmp eax, ecx
jle 0x602e0c
mov eax, dword [0x00696ab0]
mov dword [0x00695bd0], eax
mov eax, dword [0x006934d8]
add eax, 1
cmp dword [0x006934d8], eax
jne 0x602e5d
mov eax, dword [0x006934f4]
test eax, eax
jge 0x602e2c
call fcn.0040afc0
mov ecx, dword [0x00694114]
test ecx, ecx
jge 0x602e3b
call fcn.0040afc0
mov edx, dword [0x0069588c]
test edx, edx
jge 0x602e4a
call fcn.0040afc0
mov r8d, ecx
mov r9d, edx
mov ecx, eax
mov edx, r8d
mov r8d, r9d
call sub.kernel32.dll_GetDiskFreeSpaceExW
call fcn.005e7c60
mov rcx, qword [rbp + 0x98]
call qword [0x006a9290]
mov rcx, qword [rbp + 0xa8]
call qword [0x006a9290]
jmp 0x602ecf
mov eax, dword [0x0069590c]
add eax, dword [0x00695d84]
mov ecx, dword [0x00696304]
add ecx, dword [0x006965f4]
cmp eax, ecx
jle 0x602ef7
mov eax, dword [0x006965f4]
mov dword [0x0069590c], eax
movzx rax, byte [rbp + 0xff]
lea rsp, [rbp + 0x108]
pop rbx
pop rbp
ret