Function at 0x140006430
Capabilities:
Execute command

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
mov rbp, rsp
sub rsp, 0x60
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov rcx, rax
xor edx, edx
call qword [sym.imp.USER32.dll_ShowWindow]
xorps xmm0, xmm0
movups xmmword [rbp - 0x40], xmm0
xor ebx, ebx
mov qword [rbp - 0x30], rbx
mov qword [rbp - 0x28], rbx
lea r8d, [rbx + 0x2c]
lea rdx, str.C:Program_FilesCommon_FilesSystemOle_DB_
lea rcx, [rbp - 0x40]
call fcn.1400150f0
lea rcx, [rbp - 0x40]
call fcn.140006110
lea rax, [rbp - 0x40]
mov qword [rbp + 0x10], rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x40], xmm0
mov qword [rbp - 0x30], rbx
mov qword [rbp - 0x28], rbx
lea r8d, [rbx + 0x10]
lea rdx, str.EventCleaner.exe
lea rcx, [rbp - 0x40]
call fcn.1400150f0
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x20], xmm0
mov qword [rbp - 0x10], rbx
mov qword [rbp - 8], rbx
lea r8d, [rbx + 6]
lea rdx, str.403796
lea rcx, [rbp - 0x20]
call fcn.1400150f0
nop
lea rdx, [rbp - 0x40]
lea rcx, [rbp - 0x20]
call fcn.140005e80
lea rax, [rbp - 0x20]
mov qword [rbp + 0x10], rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x20], xmm0
mov qword [rbp - 0x10], rbx
mov qword [rbp - 8], rbx
lea r8d, [rbx + 0x13]
lea rdx, str.FortniteCleaner.bat
lea rcx, [rbp - 0x20]
call fcn.1400150f0
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x40], xmm0
mov qword [rbp - 0x30], rbx
mov qword [rbp - 0x28], rbx
lea r8d, [rbx + 6]
lea rdx, str.163257
lea rcx, [rbp - 0x40]
call fcn.1400150f0
nop
lea rdx, [rbp - 0x20]
lea rcx, [rbp - 0x40]
call fcn.140005e80
lea rax, [rbp - 0x20]
mov qword [rbp + 0x10], rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x20], xmm0
mov qword [rbp - 0x10], rbx
mov qword [rbp - 8], rbx
lea r8d, [rbx + 0x12]
lea rdx, str.regedit_change.bat
lea rcx, [rbp - 0x20]
call fcn.1400150f0
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x40], xmm0
mov qword [rbp - 0x30], rbx
mov qword [rbp - 0x28], rbx
lea r8d, [rbx + 6]
lea rdx, str.012361
lea rcx, [rbp - 0x40]
call fcn.1400150f0
nop
lea rdx, [rbp - 0x20]
lea rcx, [rbp - 0x40]
call fcn.140005e80
lea rax, [rbp - 0x20]
mov qword [rbp + 0x10], rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x20], xmm0
mov qword [rbp - 0x10], rbx
mov qword [rbp - 8], rbx
lea r8d, [rbx + 0xc]
lea rdx, str.Reset_ip.bat
lea rcx, [rbp - 0x20]
call fcn.1400150f0
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x40], xmm0
mov qword [rbp - 0x30], rbx
mov qword [rbp - 0x28], rbx
lea r8d, [rbx + 6]
lea rdx, str.336064
lea rcx, [rbp - 0x40]
call fcn.1400150f0
nop
lea rdx, [rbp - 0x20]
lea rcx, [rbp - 0x40]
call fcn.140005e80
lea rax, [rbp - 0x20]
mov qword [rbp + 0x10], rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x20], xmm0
mov qword [rbp - 0x10], rbx
mov qword [rbp - 8], rbx
lea r8d, [rbx + 0xf]
lea rdx, str.AppleS5_DEL.exe
lea rcx, [rbp - 0x20]
call fcn.1400150f0
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x40], xmm0
mov qword [rbp - 0x30], rbx
mov qword [rbp - 0x28], rbx
lea r8d, [rbx + 6]
lea rdx, str.618628
lea rcx, [rbp - 0x40]
call fcn.1400150f0
nop
lea rdx, [rbp - 0x20]
lea rcx, [rbp - 0x40]
call fcn.140005e80
lea rcx, str.start_EventCleaner.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.start_FortniteCleaner.bat
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.start_regedit_change.bat
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.start_Reset_ip.bat
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.start_AppleS5_DEL.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov rcx, rax
lea edx, [rbx + 5]
mov rbx, qword [rsp + 0x80]
add rsp, 0x60
pop rbp
jmp qword [sym.imp.USER32.dll_ShowWindow]