Function at 0x5d3360
Capabilities:
Get disk size

Disassembly:
push rbp
sub rsp, 0xa0
mov rbp, rsp
mov qword [rbp + 0x80], 0
mov qword [rbp + 0x78], 0
mov qword [rbp + 0x68], 0
mov qword [rbp + 0x30], 0
mov qword [rbp + 0x60], 0
mov qword [rbp + 0x70], 0
mov qword [rbp + 0x88], rbp
mov dword [rbp + 0xb0], ecx
nop
mov eax, dword [0x006932dc]
add eax, 1
cmp dword [0x006932dc], eax
jne 0x5d33dc
mov ecx, dword [0x00695908]
mov edx, dword [0x006931b8]
mov r8d, dword [0x006933c0]
mov r9d, dword [0x006934f8]
call sub.advapi32.dll_CryptDuplicateKey
mov eax, dword [0x00694110]
add eax, dword [0x006942fc]
mov ecx, dword [0x0069588c]
add ecx, dword [0x00695b88]
cmp eax, ecx
jle 0x5d33fd
call fcn.004096f0
mov eax, dword [0x006932d8]
add eax, 1
cmp dword [0x006932d8], eax
jne 0x5d3437
mov ecx, dword [0x00693544]
mov edx, dword [0x00694118]
mov r8d, dword [0x00695824]
mov r9d, dword [0x006958e8]
mov eax, dword [0x00695c00]
mov dword [rsp + 0x20], eax
call sub.kernel32.dll_LockFile
nop
call fcn.005d2100
cmp eax, dword [0x00693278]
jle 0x5d344f
mov dword [0x00693278], 0x37
mov eax, dword [0x00694110]
add eax, dword [0x006942fc]
mov ecx, dword [0x0069588c]
add ecx, dword [0x00695b88]
cmp eax, ecx
jle 0x5d3470
call fcn.004096f0
mov eax, dword [0x006958a4]
cmp eax, dword [0x00695ba0]
je 0x5d348a
mov eax, dword [0x006958a4]
mov dword [0x00695ba0], eax
mov eax, dword [0x006940b0]
add eax, dword [0x0069429c]
mov ecx, dword [0x006957f4]
add ecx, dword [0x00695864]
cmp eax, ecx
jle 0x5d34ab
call fcn.004096f0
call fcn.005d2170
cmp eax, dword [0x00693280]
jle 0x5d34c2
mov dword [0x00693280], 0x39
call fcn.005cb920
mov eax, 0x21
lea rcx, [0x006a8980]
mov qword [rbp + 0x90], rcx
mov rcx, qword [rbp + 0x90]
mov ecx, dword [rcx]
cmp ecx, dword [rbp + 0xb0]
jne 0x5d35e9
mov rax, qword [rbp + 0x90]
mov dword [rax], 0
mov dword [0x006a8a04], 0xffffffff
lea rcx, [rbp + 0x70]
lea rdx, [0x006924a5]
mov r8d, 7
mov r9d, 0x2d
call fcn.00597b20
lea rcx, [rbp + 0x78]
mov rdx, qword [rbp + 0x70]
xor r8, r8
call fcn.005a8ac0
lea rcx, [rbp + 0x60]
lea rdx, [0x006924cf]
mov r8d, 6
mov r9d, 0x2d
call fcn.00597b20
lea rcx, [rbp + 0x68]
mov rdx, qword [rbp + 0x60]
xor r8, r8
call fcn.005a8ac0
lea rcx, [rbp + 0x38]
lea rdx, [0x006a8721]
mov r8d, 1
mov r9d, 5
call fcn.0040f4b0
lea rcx, [rbp + 0x30]
lea rdx, [rbp + 0x38]
call fcn.0040ff20
lea rcx, [rbp + 0x80]
mov edx, 4
mov r8, qword [rbp + 0x78]
mov r9, qword [rbp + 0x68]
mov rax, qword [rbp + 0x30]
mov qword [rsp + 0x20], rax
lea rax, [0x005d372c]
mov qword [rsp + 0x28], rax
call fcn.00410400
mov rcx, qword [rbp + 0x80]
lea rdx, [0x006a8980]
mov r8d, 0x88
call fcn.005d0a10
test al, al
je 0x5d35fc
mov rcx, qword [0x006a8ac0]
call fcn.005d1f60
jmp 0x5d35fc
add qword [rbp + 0x90], 4
sub eax, 1
test eax, eax
jne 0x5d34db
nop
jmp 0x5d360c
mov dword [0x006932b4], 0x2ee
mov eax, dword [0x006932b4]
sub eax, 0x199
mov dword [0x006933b4], eax
mov eax, dword [0x00696188]
mov dword [0x00696118], eax
mov eax, dword [0x006932a0]
add eax, 1
cmp dword [0x006932a0], eax
jne 0x5d365d
mov ecx, dword [0x0069320c]
mov edx, dword [0x006934dc]
mov r8d, dword [0x00693934]
call sub.kernel32.dll_GetDiskFreeSpaceExW
mov eax, dword [0x00696188]
mov dword [0x00696118], eax
mov eax, dword [0x00695850]
cmp eax, dword [0x00695914]
je 0x5d3683
mov eax, dword [0x00695850]
mov dword [0x00695914], eax
mov eax, dword [0x0069394c]
mov dword [0x00693564], eax
nop
lea rcx, [rbp + 0x30]
call fcn.0040e9c0
lea rcx, [rbp + 0x60]
call fcn.0040e970
lea rcx, [rbp + 0x68]
call fcn.0040e9c0
lea rcx, [rbp + 0x70]
call fcn.0040e970
lea rcx, [rbp + 0x78]
mov edx, 2
call fcn.0040ea60
lea rsp, [rbp + 0xa0]
pop rbp
ret