Function at 0x61ff70
Capabilities:
Get disk size

Disassembly:
push rbp
push rbx
sub rsp, 0x528
mov rbp, rsp
mov qword [rbp + 0x70], 0
mov qword [rbp + 0x68], 0
mov qword [rbp + 0x60], 0
mov qword [rbp + 0x58], 0
mov qword [rbp + 0x50], 0
mov qword [rbp + 0x88], 0
mov qword [rbp + 0x80], 0
mov qword [rbp + 0x78], 0
mov qword [rbp + 0xb0], 0
mov qword [rbp + 0xa8], 0
mov qword [rbp + 0xa0], 0
mov qword [rbp + 0x98], 0
mov qword [rbp + 0x90], 0
mov qword [rbp + 0xc0], 0
mov qword [rbp + 0xb8], 0
mov qword [rbp + 0xd8], 0
mov qword [rbp + 0xd0], 0
mov qword [rbp + 0xc8], 0
mov qword [rbp + 0xe0], 0
mov qword [rbp + 0x3f0], 0
mov qword [rbp + 0x2e0], 0
mov qword [rbp + 0x130], 0
mov qword [rbp + 0x128], 0
mov qword [rbp + 0xe8], rbp
nop
mov eax, dword [0x006931d0]
add eax, 1
cmp dword [0x006931d0], eax
jne 0x6200ed
mov eax, dword [0x00696324]
test eax, eax
jge 0x62008f
call fcn.0040afc0
mov ecx, dword [0x00698100]
test ecx, ecx
jge 0x62009e
call fcn.0040afc0
mov edx, dword [0x00698ea0]
test edx, edx
jge 0x6200ad
call fcn.0040afc0
mov r8d, dword [0x006932d8]
test r8d, r8d
jge 0x6200be
call fcn.0040afc0
mov r9d, dword [0x006934ec]
test r9d, r9d
jge 0x6200cf
call fcn.0040afc0
mov r10d, ecx
mov r11d, edx
mov ebx, r8d
mov dword [rsp + 0x20], r9d
mov ecx, eax
mov edx, r10d
mov r8d, r11d
mov r9d, ebx
call sub.kernel32.dll_LockFile
mov eax, dword [0x00698aec]
mov dword [0x00698104], eax
mov eax, dword [0x00698aec]
mov dword [0x00698104], eax
mov eax, dword [0x00697450]
cmp eax, dword [0x006978f8]
je 0x62011f
mov eax, dword [0x00697450]
mov dword [0x006978f8], eax
nop
mov byte [rbp + 0x3ed], 5
mov byte [rbp + 0x3ee], 1
mov byte [rbp + 0x3ef], 0
call fcn.006036f0
cmp eax, dword [0x00698e44]
jle 0x62014c
mov dword [0x00698e44], 0x1c
mov eax, dword [0x006932f0]
add eax, 1
cmp dword [0x006932f0], eax
jne 0x6201ca
mov eax, dword [0x006942a8]
test eax, eax
jge 0x62016c
call fcn.0040afc0
mov ecx, dword [0x00695d84]
test ecx, ecx
jge 0x62017b
call fcn.0040afc0
mov edx, dword [0x00696580]
test edx, edx
jge 0x62018a
call fcn.0040afc0
mov r8d, dword [0x00696c9c]
test r8d, r8d
jge 0x62019b
call fcn.0040afc0
mov r9d, dword [0x00698e50]
test r9d, r9d
jge 0x6201ac
call fcn.0040afc0
mov r10d, ecx
mov r11d, edx
mov ebx, r8d
mov dword [rsp + 0x20], r9d
mov ecx, eax
mov edx, r10d
mov r8d, r11d
mov r9d, ebx
call sub.kernel32.dll_LockFile
call fcn.005fd9c0
mov eax, dword [0x00695bdc]
mov dword [0x006958dc], eax
mov byte [rbp + 0x2e9], 5
mov byte [rbp + 0x2ea], 1
mov byte [rbp + 0x2eb], 0
mov byte [rbp + 0x2ec], 1
call fcn.005fbf20
mov eax, dword [0x00698100]
mov dword [0x006974bc], eax
mov eax, dword [0x00693530]
add eax, 1
cmp dword [0x00693530], eax
jne 0x620259
mov eax, dword [0x00694110]
test eax, eax
jge 0x620228
call fcn.0040afc0
mov ecx, dword [0x0069594c]
test ecx, ecx
jge 0x620237
call fcn.0040afc0
mov edx, dword [0x0069616c]
test edx, edx
jge 0x620246
call fcn.0040afc0
mov r8d, ecx
mov r9d, edx
mov ecx, eax
mov edx, r8d
mov r8d, r9d
call sub.kernel32.dll_GetDiskFreeSpaceExW
call fcn.00615620
cmp eax, dword [0x00698f98]
jle 0x620270
mov dword [0x00698f98], 0x3a
mov cx, 0x202
lea rdx, [rbp + 0x138]
call qword [0x006a9348]
nop
mov ecx, 2
mov edx, 1
mov r8d, 6
call qword [0x006a92d8]
mov qword [rbp + 0x500], rax
mov eax, dword [0x00698100]
mov dword [0x006974bc], eax
mov eax, dword [0x00696a78]
cmp eax, dword [0x00697468]
je 0x6202c8
mov eax, dword [0x00696a78]
mov dword [0x00697468], eax
mov eax, dword [0x00698138]
mov dword [0x0069748c], eax
mov eax, dword [0x006933d8]
add eax, 1
cmp dword [0x006933d8], eax
jne 0x620352
mov eax, dword [0x00694100]
test eax, eax
jge 0x6202f4
call fcn.0040afc0
mov ecx, dword [0x00695938]
test ecx, ecx
jge 0x620303
call fcn.0040afc0
mov edx, dword [0x006962d0]
test edx, edx
jge 0x620312
call fcn.0040afc0
mov r8d, dword [0x00696a74]
test r8d, r8d
jge 0x620323
call fcn.0040afc0
mov r9d, dword [0x006974c4]
test r9d, r9d
jge 0x620334
call fcn.0040afc0
mov r10d, ecx
mov r11d, edx
mov ebx, r8d
mov dword [rsp + 0x20], r9d
mov ecx, eax
mov edx, r10d
mov r8d, r11d
mov r9d, ebx
call sub.kernel32.dll_LockFile
cmp qword [rbp + 0x500], 0xffffffffffffffff
je 0x621173
mov dword [rbp + 0x2dc], 0x15f90
mov eax, dword [0x006965b8]
add eax, dword [0x00696ab0]
mov ecx, dword [0x0069743c]
add ecx, dword [0x006980e8]
cmp eax, ecx
jle 0x620392
mov eax, dword [0x006980e8]
mov dword [0x006965b8], eax
mov eax, dword [0x00693914]
add eax, 1
cmp dword [0x00693914], eax
jne 0x620410
mov eax, dword [0x0069899c]
test eax, eax
jge 0x6203b2
call fcn.0040afc0
mov ecx, dword [0x0069339c]
test ecx, ecx
jge 0x6203c1
call fcn.0040afc0
mov edx, dword [0x00693800]
test edx, edx
jge 0x6203d0
call fcn.0040afc0
mov r8d, dword [0x00694134]
test r8d, r8d
jge 0x6203e1
call fcn.0040afc0
mov r9d, dword [0x00695908]
test r9d, r9d
jge 0x6203f2
call fcn.0040afc0
mov r10d, ecx
mov r11d, edx
mov ebx, r8d
mov dword [rsp + 0x20], r9d
mov ecx, eax
mov edx, r10d
mov r8d, r11d
mov r9d, ebx
call sub.kernel32.dll_LockFile
mov eax, dword [0x00696144]
mov dword [0x00695bc0], eax
call fcn.006011a0
mov eax, dword [0x006961a4]
add eax, dword [0x006968b4]
mov ecx, dword [0x00696e50]
add ecx, dword [0x006978f4]
cmp eax, ecx
jle 0x620449
mov eax, dword [0x006978f4]
mov dword [0x006961a4], eax
mov rax, qword [rbp + 0x500]
cmp rax, 0x7fffffff
jbe 0x62045e
call fcn.0040afc0
mov ecx, eax
mov edx, 0xffff
mov r8d, 0x1006
lea r9, [rbp + 0x2dc]
mov dword [rsp + 0x20], 4
call qword [0x006a9338]
mov eax, dword [0x00693400]
add eax, 1
cmp dword [0x00693400], eax
jne 0x6204a9
mov eax, dword [0x006989a4]
test eax, eax
jge 0x6204a2
call fcn.0040afc0
mov ecx, eax
call sub.kernel32.dll_SetConsoleKeyShortcuts
mov eax, dword [0x00693508]
add eax, 1
cmp dword [0x00693508], eax
jne 0x620511
mov eax, dword [0x006962f0]
test eax, eax
jge 0x6204c9
call fcn.0040afc0
mov ecx, dword [0x00696e88]
test ecx, ecx
jge 0x6204d8
call fcn.0040afc0
mov edx, dword [0x00698130]
test edx, edx
jge 0x6204e7
call fcn.0040afc0
mov r8d, dword [0x006934b8]
test r8d, r8d
jge 0x6204f8
call fcn.0040afc0
mov r9d, ecx
mov r10d, edx
mov r11d, r8d
mov ecx, eax
mov edx, r9d
mov r8d, r10d
mov r9d, r11d
call sub.advapi32.dll_CryptDuplicateKey
mov eax, dword [0x00693208]
mov dword [0x00698e34], eax
mov eax, dword [0x00693208]
mov dword [0x00698e34], eax
mov eax, dword [0x006968ac]
cmp eax, dword [0x00697444]
je 0x620543
mov eax, dword [0x006968ac]
mov dword [0x00697444], eax
mov eax, dword [0x00698e50]
mov dword [0x00698110], eax
mov word [rbp + 0x510], 2
mov eax, dword [0x00698e50]
mov dword [0x00698110], eax
mov eax, dword [0x00696e58]
cmp eax, dword [0x006978fc]
je 0x62057e
mov eax, dword [0x00696e58]
mov dword [0x006978fc], eax
mov cx, 0x235a
call qword [0x006a9328]
mov word [rbp + 0x512], ax
mov eax, dword [0x006962e4]
mov dword [0x00695be8], eax
lea rcx, [rbp + 0xe0]
lea rdx, [0x00692f2c]
mov r8d, 9
mov r9d, 0x2d
call fcn.00597b20
mov rcx, qword [rbp + 0xe0]
call fcn.0040fbe0
mov rcx, rax
call qword [0x006a9320]
mov dword [rbp + 0x514], eax
call fcn.00618820
cmp eax, dword [0x006932c0]
jle 0x6205ee
mov dword [0x006932c0], 0x78
mov rcx, qword [rbp + 0x500]
lea rdx, [rbp + 0x510]
mov r8d, 0x10
call qword [0x006a92e0]
test eax, eax
jne 0x621173
mov rcx, qword [rbp + 0x500]
lea rdx, [rbp + 0x3ed]
mov r8d, 3
xor r9, r9
call qword [0x006a92b0]
mov eax, dword [0x00696120]
add eax, dword [0x006965a8]
mov ecx, dword [0x00696aa0]
add ecx, dword [0x0069748c]
cmp eax, ecx
jle 0x620650
call fcn.004096f0
mov eax, dword [0x006933cc]
add eax, 1
cmp dword [0x006933cc], eax
jne 0x6206a1
mov eax, dword [0x006965ac]
test eax, eax
jge 0x620670
call fcn.0040afc0
mov ecx, dword [0x006978d4]
test ecx, ecx
jge 0x62067f
call fcn.0040afc0
mov edx, dword [0x006989a4]
test edx, edx
jge 0x62068e
call fcn.0040afc0
mov r8d, ecx
mov r9d, edx
mov ecx, eax
mov edx, r8d
mov r8d, r9d
call sub.kernel32.dll_GetDiskFreeSpaceExW
mov eax, dword [0x006961a4]
mov dword [0x00695bbc], eax
mov eax, dword [0x00698fcc]
add eax, dword [0x006933b4]
mov ecx, dword [0x00693538]
add ecx, dword [0x006940e8]
cmp eax, ecx
jle 0x6206d3
mov dword [0x00698fcc], 0x29
mov eax, dword [0x00698af8]
mov dword [0x00697c88], eax
mov eax, dword [0x00698af8]
mov dword [0x00697c88], eax
mov eax, dword [0x00696a94]
cmp eax, dword [0x00697484]
je 0x620705
mov eax, dword [0x00696a94]
mov dword [0x00697484], eax
mov rcx, qword [rbp + 0x500]
lea rdx, [rbp + 0x3f8]
mov r8d, 0x104
xor r9, r9
call qword [0x006a92b8]
mov dword [rbp + 0x4fc], eax
cmp dword [rbp + 0x4fc], 0
jle 0x621173
cmp byte [rbp + 0x3f8], 5
jne 0x62118c
movzx rax, byte [rbp + 0x3f9]
cmp al, 2
je 0x62118c
test al, al
jne 0x621173
lea rcx, [rbp + 0xd0]
lea rdx, [0x00693169]
mov r8d, 0x16
mov r9d, 0x2d
call fcn.00597b20
lea rcx, [rbp + 0xc8]
mov rdx, qword [rbp + 0xd0]
call fcn.00410880
lea rcx, [rbp + 0xd8]
mov rdx, qword [rbp + 0xc8]
lea r8, [0x006214ac]
call fcn.0061eb30
lea rcx, [rbp + 0x130]
lea rdx, [0x0062149c]
mov r8, qword [rbp + 0xd8]
call fcn.0040f7e0
lea rcx, [rbp + 0x130]
call fcn.0040f210
mov ecx, 1
movsxd rcx, ecx
test rax, rax
je 0x6207eb
lea rdx, [rcx - 1]
mov r8d, dword [rax - 4]
cmp rdx, r8
jb 0x6207f0
call fcn.0040afc0
lea rax, [rax + rcx - 1]
mov qword [rbp + 0x100], rax
mov dword [rbp + 0x10c], 0
mov rax, qword [rbp + 0x130]
test rax, rax
je 0x62081b
mov eax, dword [rax - 4]
mov dword [rbp + 0x10c], eax
mov rcx, qword [rbp + 0x500]
mov rdx, qword [rbp + 0x100]
mov r8d, dword [rbp + 0x10c]
xor r9, r9
call qword [0x006a92b0]
lea rcx, [rbp + 0x3f8]
mov edx, 0x104
xor r8, r8
call fcn.0040a9a0
mov rcx, qword [rbp + 0x500]
lea rdx, [rbp + 0x3f8]
mov r8d, 0xa
xor r9, r9
call qword [0x006a92b8]
mov dword [rbp + 0x4fc], eax
cmp dword [rbp + 0x4fc], 0
jle 0x621173
mov byte [0x006a896d], 6
mov byte [0x006a8971], 0x20
mov eax, dword [0x0069391c]
add eax, 1
cmp dword [0x0069391c], eax
jne 0x6208f5
mov eax, dword [0x006974ac]
test eax, eax
jge 0x6208ad
call fcn.0040afc0
mov ecx, dword [0x00693424]
test ecx, ecx
jge 0x6208bc
call fcn.0040afc0
mov edx, dword [0x00694298]
test edx, edx
jge 0x6208cb
call fcn.0040afc0
mov r8d, dword [0x0069592c]
test r8d, r8d
jge 0x6208dc
call fcn.0040afc0
mov r9d, ecx
mov r10d, edx
mov r11d, r8d
mov ecx, eax
mov edx, r9d
mov r8d, r10d
mov r9d, r11d
call sub.advapi32.dll_CryptDuplicateKey
call fcn.005ff550
call fcn.00614990
cmp eax, dword [0x006931c0]
jle 0x620911
mov dword [0x006931c0], 0x50
call fcn.00615620
cmp eax, dword [0x006931d8]
jle 0x620928
mov dword [0x006931d8], 0x3d
mov eax, dword [0x0069355c]
add eax, 1
cmp dword [0x0069355c], eax
jne 0x6209a6
mov eax, dword [0x00695bb4]
test eax, eax
jge 0x620948
call fcn.0040afc0
mov ecx, dword [0x006965c0]
test ecx, ecx
jge 0x620957
call fcn.0040afc0
mov edx, dword [0x00696ce0]
test edx, edx
jge 0x620966
call fcn.0040afc0
mov r8d, dword [0x006980ec]
test r8d, r8d
jge 0x620977
call fcn.0040afc0
mov r9d, dword [0x00698e90]
test r9d, r9d
jge 0x620988
call fcn.0040afc0
mov r10d, ecx
mov r11d, edx
mov ebx, r8d
mov dword [rsp + 0x20], r9d
mov ecx, eax
mov edx, r10d
mov r8d, r11d
mov r9d, ebx
call sub.kernel32.dll_LockFile
mov eax, dword [0x00693440]
add eax, 1
cmp dword [0x00693440], eax
jne 0x6209cd
mov eax, dword [0x00695888]
test eax, eax
jge 0x6209c6
call fcn.0040afc0
mov ecx, eax
call sub.kernel32.dll_SetConsoleKeyShortcuts
mov eax, dword [0x006965ec]
add eax, dword [0x00696e74]
mov ecx, dword [0x006974d4]
add ecx, dword [0x00698984]
cmp eax, ecx
jle 0x6209f5
mov eax, dword [0x00698984]
mov dword [0x006965ec], eax
mov eax, dword [0x00695c14]
add eax, dword [0x00696310]
mov ecx, dword [0x00696ab4]
add ecx, dword [0x006974a0]
cmp eax, ecx
jle 0x620a16
call fcn.004096f0
mov eax, dword [0x00698fb8]
mov dword [0x006989a0], eax
lea rcx, [rbp + 0xc0]
lea rdx, [0x006a8940]
call fcn.0061f350
lea rcx, [rbp + 0xb8]
lea rdx, [0x00693169]
mov r8d, 0x16
mov r9d, 0x2d
call fcn.00597b20
lea rcx, [rbp + 0x3f0]
mov edx, 8
lea r8, [0x006214c0]
mov r9, qword [rbp + 0xc0]
lea rax, [0x006214d4]
mov qword [rsp + 0x20], rax
lea rax, [0x006214ec]
mov qword [rsp + 0x28], rax
lea rax, [0x006214fc]
mov qword [rsp + 0x30], rax
mov rax, qword [rbp + 0xb8]
mov qword [rsp + 0x38], rax
lea rax, [0x006214ec]
mov qword [rsp + 0x40], rax
lea rax, [0x006214ec]
mov qword [rsp + 0x48], rax
call fcn.0040fab0
call fcn.005ea0b0
mov eax, dword [0x00698fb8]
mov dword [0x006989a0], eax
mov eax, dword [0x0069748c]
cmp eax, dword [0x006989a0]
je 0x620ae9
mov eax, dword [0x0069748c]
mov dword [0x006989a0], eax
mov eax, dword [0x00693930]
mov dword [0x006933d0], eax
mov eax, dword [0x00693930]
mov dword [0x006933d0], eax
mov eax, dword [0x00696cd4]
cmp eax, dword [0x006980e4]
je 0x620b1b
mov eax, dword [0x00696cd4]
mov dword [0x006980e4], eax
lea rcx, [rbp + 0x3f0]
call fcn.0040f210
mov ecx, 1
movsxd rcx, ecx
test rax, rax
je 0x620b42
lea rdx, [rcx - 1]
mov r8d, dword [rax - 4]
cmp rdx, r8
jb 0x620b47
call fcn.0040afc0
lea rax, [rax + rcx - 1]
mov qword [rbp + 0xf0], rax
mov dword [rbp + 0xfc], 0
mov rax, qword [rbp + 0x3f0]
test rax, rax
je 0x620b72
mov eax, dword [rax - 4]
mov dword [rbp + 0xfc], eax
mov rcx, qword [rbp + 0x500]
mov rdx, qword [rbp + 0xf0]
mov r8d, dword [rbp + 0xfc]
xor r9, r9
call qword [0x006a92b0]
lea rcx, [rbp + 0x3f8]
mov edx, 0x104
xor r8, r8
call fcn.0040a9a0
mov eax, dword [0x006931e0]
mov dword [0x00698b18], eax
mov rcx, qword [0x004d2058]
mov dl, 1
call fcn.0040b440
mov qword [rbp + 0x508], rax
nop
mov rcx, qword [rbp + 0x500]
lea rdx, [rbp + 0x3f8]
mov r8d, 0x104
xor r9, r9
call qword [0x006a92b8]
mov dword [rbp + 0x2d4], eax
cmp dword [rbp + 0x2d4], 0
jle 0x620c18
mov rcx, qword [rbp + 0x508]
lea rdx, [rbp + 0x3f8]
mov r8d, dword [rbp + 0x2d4]
mov rax, qword [rbp + 0x508]
mov rax, qword [rax]
call qword [rax + 0x20]
jmp 0x620bc7
nop
lea rcx, [rbp + 0x508]
mov rdx, qword [0x006a8aa0]
mov r8, qword [rbp + 0x128]
call fcn.005abab0
test al, al
je 0x621166
mov rcx, qword [rbp + 0x508]
xor edx, edx
xor r8, r8
mov rax, qword [rbp + 0x508]
mov rax, qword [rax]
call qword [rax + 0x48]
mov rcx, qword [rbp + 0x508]
lea rdx, [rbp + 0x11c]
mov r8d, 0xc
call fcn.004fab00
cmp dword [rbp + 0x124], 0xffffffff
jne 0x621166
mov byte [rbp + 0x11b], 0
mov eax, dword [rbp + 0x11c]
test eax, eax
je 0x620d38
cmp eax, dword [0x006a88c8]
je 0x620d38
call fcn.0061e920
cmp eax, dword [0x006932d8]
jle 0x620cb3
mov dword [0x006932d8], 0x96
mov eax, dword [0x0069350c]
add eax, 1
cmp dword [0x0069350c], eax
jne 0x620d04
mov eax, dword [0x006965bc]
test eax, eax
jge 0x620cd3
call fcn.0040afc0
mov ecx, dword [0x006978e8]
test ecx, ecx
jge 0x620ce2
call fcn.0040afc0
mov edx, dword [0x006932c4]
test edx, edx
jge 0x620cf1
call fcn.0040afc0
mov r8d, ecx
mov r9d, edx
mov ecx, eax
mov edx, r8d
mov r8d, r9d
call sub.kernel32.dll_GetDiskFreeSpaceExW
mov eax, dword [0x00696574]
add eax, dword [0x00696e60]
mov ecx, dword [0x00698108]
add ecx, dword [0x00698f84]
cmp eax, ecx
jle 0x620d25
call fcn.004096f0
mov eax, dword [rbp + 0x11c]
mov dword [0x006a88c8], eax
mov byte [rbp + 0x11b], 1
mov eax, dword [rbp + 0x120]
test eax, eax
je 0x620d89
cmp eax, dword [0x006a88cc]
je 0x620d89
mov ecx, dword [0x006932b8]
mov dword [0x00698b2c], ecx
mov ecx, dword [0x006932b8]
mov dword [0x00698b2c], ecx
mov ecx, dword [0x00696ca0]
cmp ecx, dword [0x006974cc]
je 0x620d7c
mov ecx, dword [0x00696ca0]
mov dword [0x006974cc], ecx
mov dword [0x006a88cc], eax
mov byte [rbp + 0x11b], 1
cmp byte [rbp + 0x11b], 0
je 0x621166
mov eax, dword [0x00698fb4]
add eax, dword [0x00693404]
mov ecx, dword [0x00693800]
add ecx, dword [0x00694134]
cmp eax, ecx
jle 0x620dbc
mov dword [0x00698fb4], 0x3c
mov eax, dword [0x00698e74]
mov dword [0x006980d4], eax
mov eax, dword [0x006931fc]
add eax, dword [0x00693418]
mov ecx, dword [0x00693978]
add ecx, dword [0x006942f4]
cmp eax, ecx
jle 0x620dee
mov dword [0x006931fc], 0xf1
mov eax, dword [0x00693534]
add eax, 1
cmp dword [0x00693534], eax
jne 0x620e6c
mov eax, dword [0x006933e0]
test eax, eax
jge 0x620e0e
call fcn.0040afc0
mov ecx, dword [0x006942b8]
test ecx, ecx
jge 0x620e1d
call fcn.0040afc0
mov edx, dword [0x0069594c]
test edx, edx
jge 0x620e2c
call fcn.0040afc0
mov r8d, dword [0x006962e4]
test r8d, r8d
jge 0x620e3d
call fcn.0040afc0
mov r9d, dword [0x00696a88]
test r9d, r9d
jge 0x620e4e
call fcn.0040afc0
mov r10d, ecx
mov r11d, edx
mov ebx, r8d
mov dword [rsp + 0x20], r9d
mov ecx, eax
mov edx, r10d
mov r8d, r11d
mov r9d, ebx
call sub.kernel32.dll_LockFile
mov eax, dword [0x00698e38]
mov dword [0x006978f4], eax
mov eax, dword [0x006933c8]
add eax, 1
cmp dword [0x006933c8], eax
jne 0x620ee0
mov eax, dword [0x006932ac]
test eax, eax
jge 0x620e98
call fcn.0040afc0
mov ecx, dword [0x006940d4]
test ecx, ecx
jge 0x620ea7
call fcn.0040afc0
mov edx, dword [0x0069590c]
test edx, edx
jge 0x620eb6
call fcn.0040afc0
mov r8d, dword [0x00696190]
test r8d, r8d
jge 0x620ec7
call fcn.0040afc0
mov r9d, ecx
mov r10d, edx
mov r11d, r8d
mov ecx, eax
mov edx, r9d
mov r8d, r10d
mov r9d, r11d
call sub.advapi32.dll_CryptDuplicateKey
mov eax, dword [0x00695bfc]
add eax, dword [0x006962f8]
mov ecx, dword [0x00696a98]
add ecx, dword [0x00697488]
cmp eax, ecx
jle 0x620f01
call fcn.004096f0
mov rcx, qword [rbp + 0x508]
call fcn.004fd260
mov rcx, qword [rbp + 0x508]
lea rdx, [0x006a82f0]
mov r8d, 0x650
call fcn.004fbd70
lea rcx, [rbp + 0xa8]
lea rdx, [0x006a84f8]
mov r8d, 0x104
call fcn.0040ff40
lea rcx, [rbp + 0xa0]
lea rdx, [0x006a8721]
call fcn.0040ff20
lea rcx, [rbp + 0x90]
lea rdx, [0x006924ca]
mov r8d, 4
mov r9d, 0x2d
call fcn.00597b20
lea rcx, [rbp + 0x98]
mov rdx, qword [rbp + 0x90]
xor r8, r8
call fcn.005a8ac0
lea rcx, [rbp + 0xb0]
mov edx, 3
mov r8, qword [rbp + 0xa8]
mov r9, qword [rbp + 0xa0]
mov rax, qword [rbp + 0x98]
mov qword [rsp + 0x20], rax
call fcn.00410400
mov rcx, qword [rbp + 0xb0]
mov rdx, qword [rbp + 0x508]
call fcn.005d2300
test al, al
je 0x621166
call fcn.005f53a0
mov eax, dword [0x006931d8]
add eax, dword [0x006933f4]
mov ecx, dword [0x006935f8]
add ecx, dword [0x00694124]
cmp eax, ecx
jle 0x620ffd
mov dword [0x006931d8], 0x10d
mov eax, dword [0x00698b04]
mov dword [0x00697e74], eax
call fcn.00612df0
cmp eax, dword [0x00698fd0]
jle 0x621020
mov dword [0x00698fd0], 0x48
mov eax, dword [0x0069658c]
add eax, dword [0x00696cac]
mov ecx, dword [0x006974d4]
add ecx, dword [0x0069811c]
cmp eax, ecx
jle 0x621048
mov eax, dword [0x0069811c]
mov dword [0x0069658c], eax
mov eax, dword [0x00698ae0]
mov dword [0x006978f0], eax
mov eax, dword [0x006962f8]
add eax, dword [0x00696890]
mov ecx, dword [0x00696e90]
add ecx, dword [0x006980d4]
cmp eax, ecx
jle 0x62107c
mov eax, dword [0x006980d4]
mov dword [0x006962f8], eax
lea rcx, [rbp + 0x88]
call fcn.005cc8c0
lea rcx, [rbp + 0x78]
lea rdx, [0x00692481]
mov r8d, 0xc
mov r9d, 0x2d
call fcn.00597b20
lea rcx, [rbp + 0x80]
mov rdx, qword [rbp + 0x78]
xor r8, r8
call fcn.005a8ac0
lea rcx, [rbp + 0x88]
mov rdx, qword [rbp + 0x80]
call fcn.00410070
mov rcx, qword [rbp + 0x88]
call fcn.005ea2a0
movsd qword [rbp + 0x110], xmm0
lea rcx, [rbp + 0x68]
lea rdx, [0x006a84f8]
mov r8d, 0x104
call fcn.0040ff40
lea rcx, [rbp + 0x60]
lea rdx, [0x006a8721]
call fcn.0040ff20
lea rcx, [rbp + 0x50]
lea rdx, [0x006924ca]
mov r8d, 4
mov r9d, 0x2d
call fcn.00597b20
lea rcx, [rbp + 0x58]
mov rdx, qword [rbp + 0x50]
xor r8, r8
call fcn.005a8ac0
lea rcx, [rbp + 0x70]
mov edx, 3
mov r8, qword [rbp + 0x68]
mov r9, qword [rbp + 0x60]
mov rax, qword [rbp + 0x58]
mov qword [rsp + 0x20], rax
call fcn.00410400
mov rcx, qword [rbp + 0x70]
movsd xmm1, qword [rbp + 0x110]
call fcn.005e9d30
nop
mov rcx, qword [rbp + 0x508]
call fcn.0040b500
nop
mov rcx, qword [rbp + 0x500]
call qword [0x006a92c0]
call qword [0x006a9300]
jmp 0x621283
xor ecx, ecx
mov rdx, qword [rbp + 0xe8]
call fcn.00621390
jmp 0x6212b7
mov eax, dword [0x006933e8]
add eax, 1
cmp dword [0x006933e8], eax
jne 0x6212aa
mov eax, dword [0x00698fd8]
test eax, eax
jge 0x6212a3
call fcn.0040afc0
mov ecx, eax
call sub.kernel32.dll_SetConsoleKeyShortcuts
mov eax, dword [0x006931dc]
mov dword [0x00698b14], eax
nop
lea rcx, [rbp + 0x50]
call fcn.0040e970
lea rcx, [rbp + 0x58]
mov edx, 4
call fcn.0040ea60
lea rcx, [rbp + 0x78]
call fcn.0040e970
lea rcx, [rbp + 0x80]
mov edx, 2
call fcn.0040ea60
lea rcx, [rbp + 0x90]
call fcn.0040e970
lea rcx, [rbp + 0x98]
mov edx, 4
call fcn.0040ea60
lea rcx, [rbp + 0xb8]
mov edx, 2
call fcn.0040ea30
lea rcx, [rbp + 0xc8]
call fcn.0040e920
lea rcx, [rbp + 0xd0]
mov edx, 3
call fcn.0040ea30
lea rcx, [rbp + 0x128]
mov edx, 2
call fcn.0040ea30
lea rcx, [rbp + 0x2e0]
call fcn.0040e970
lea rcx, [rbp + 0x3f0]
call fcn.0040e970
lea rsp, [rbp + 0x528]
pop rbx
pop rbp
ret