Function at 0x1400153d4
Capabilities:
Manipulate boot configuration

Disassembly:
jmp 0x14001b750
push rbp
push rdi
mov eax, 0x9278
call fcn.140015249
sub rsp, rax
lea rbp, [rsp + 0x30]
lea rdi, [rsp + 0x30]
mov ecx, 0x2312
mov eax, 0xcccccccc
rep stosd dword [rdi], eax
mov rax, qword [0x14005e040]
xor rax, rbp
mov qword [rbp + 0x9238], rax
lea rcx, [0x14006a21a]
call fcn.140015cc6
nop
lea rdx, str.Disabling_Web_Search_and_Cortana_n
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140015695
nop
lea rdx, str.AllowCortana
lea rcx, [rbp + 0x648]
call fcn.14001541f
nop
lea rdx, str.SOFTWAREPoliciesMicrosoftWindowsWindows_Search
lea rcx, [rbp + 0x688]
call fcn.14001541f
nop
xor r9d, r9d
lea r8, [rbp + 0x648]
lea rdx, [rbp + 0x688]
mov rcx, 0xffffffff80000002
call fcn.140015479
nop
lea rcx, [rbp + 0x688]
call fcn.140015b04
nop
lea rcx, [rbp + 0x648]
call fcn.140015b04
nop
lea rdx, str.AllowCloudSearch
lea rcx, [rbp + 0x6c8]
call fcn.14001541f
nop
lea rdx, str.SOFTWAREPoliciesMicrosoftWindowsWindows_Search
lea rcx, [rbp + 0x708]
call fcn.14001541f
nop
xor r9d, r9d
lea r8, [rbp + 0x6c8]
lea rdx, [rbp + 0x708]
mov rcx, 0xffffffff80000002
call fcn.140015479
nop
lea rcx, [rbp + 0x708]
call fcn.140015b04
nop
lea rcx, [rbp + 0x6c8]
call fcn.140015b04
nop
lea rdx, str.AllowCortanaAboveLock
lea rcx, [rbp + 0x748]
call fcn.14001541f
nop
lea rdx, str.SOFTWAREPoliciesMicrosoftWindowsWindows_Search
lea rcx, [rbp + 0x788]
call fcn.14001541f
nop
xor r9d, r9d
lea r8, [rbp + 0x748]
lea rdx, [rbp + 0x788]
mov rcx, 0xffffffff80000002
call fcn.140015479
nop
lea rcx, [rbp + 0x788]
call fcn.140015b04
nop
lea rcx, [rbp + 0x748]
call fcn.140015b04
nop
lea rdx, str.ConnectedSearchUseWeb
lea rcx, [rbp + 0x7c8]
call fcn.14001541f
nop
lea rdx, str.SOFTWAREPoliciesMicrosoftWindowsWindows_Search
lea rcx, [rbp + 0x808]
call fcn.14001541f
nop
xor r9d, r9d
lea r8, [rbp + 0x7c8]
lea rdx, [rbp + 0x808]
mov rcx, 0xffffffff80000002
call fcn.140015479
nop
lea rcx, [rbp + 0x808]
call fcn.140015b04
nop
lea rcx, [rbp + 0x7c8]
call fcn.140015b04
nop
lea rdx, str.AllowSearchToUseLocation
lea rcx, [rbp + 0x848]
call fcn.14001541f
nop
lea rdx, str.SOFTWAREPoliciesMicrosoftWindowsWindows_Search
lea rcx, [rbp + 0x888]
call fcn.14001541f
nop
xor r9d, r9d
lea r8, [rbp + 0x848]
lea rdx, [rbp + 0x888]
mov rcx, 0xffffffff80000002
call fcn.140015479
nop
lea rcx, [rbp + 0x888]
call fcn.140015b04
nop
lea rcx, [rbp + 0x848]
call fcn.140015b04
nop
lea rdx, str.DisableWebSearch
lea rcx, [rbp + 0x8c8]
call fcn.14001541f
nop
lea rdx, str.SOFTWAREPoliciesMicrosoftWindowsWindows_Search
lea rcx, [rbp + 0x908]
call fcn.14001541f
nop
mov r9d, 1
lea r8, [rbp + 0x8c8]
lea rdx, [rbp + 0x908]
mov rcx, 0xffffffff80000002
call fcn.140015479
nop
lea rcx, [rbp + 0x908]
call fcn.140015b04
nop
lea rcx, [rbp + 0x8c8]
call fcn.140015b04
nop
lea rdx, str.DisableSearchBoxSuggestions
lea rcx, [rbp + 0x948]
call fcn.14001541f
nop
lea rdx, str.SoftwarePoliciesMicrosoftWindowsExplorer
lea rcx, [rbp + 0x988]
call fcn.14001541f
nop
mov r9d, 1
lea r8, [rbp + 0x948]
lea rdx, [rbp + 0x988]
mov rcx, 0xffffffff80000001
call fcn.140015479
nop
lea rcx, [rbp + 0x988]
call fcn.140015b04
nop
lea rcx, [rbp + 0x948]
call fcn.140015b04
nop
lea rdx, str.DisableSearchBoxSuggestions
lea rcx, [rbp + 0x9c8]
call fcn.14001541f
nop
lea rdx, str..DEFAULTPoliciesMicrosoftWindowsExplorer
lea rcx, [rbp + 0xa08]
call fcn.14001541f
nop
mov r9d, 1
lea r8, [rbp + 0x9c8]
lea rdx, [rbp + 0xa08]
mov rcx, 0xffffffff80000003
call fcn.140015479
nop
lea rcx, [rbp + 0xa08]
call fcn.140015b04
nop
lea rcx, [rbp + 0x9c8]
call fcn.140015b04
nop
lea rdx, str.BingSearchEnabled
lea rcx, [rbp + 0xa48]
call fcn.14001541f
nop
lea rdx, str.SOFTWAREPoliciesMicrosoftWindowsWindows_Search
lea rcx, [rbp + 0xa88]
call fcn.14001541f
nop
xor r9d, r9d
lea r8, [rbp + 0xa48]
lea rdx, [rbp + 0xa88]
mov rcx, 0xffffffff80000002
call fcn.140015479
nop
lea rcx, [rbp + 0xa88]
call fcn.140015b04
nop
lea rcx, [rbp + 0xa48]
call fcn.140015b04
nop
lea rdx, str.BingSearchEnabled
lea rcx, [rbp + 0xac8]
call fcn.14001541f
nop
lea rdx, str.SOFTWAREMicrosoftWindowsCurrentVersionSearch
lea rcx, [rbp + 0xb08]
call fcn.14001541f
nop
xor r9d, r9d
lea r8, [rbp + 0xac8]
lea rdx, [rbp + 0xb08]
mov rcx, 0xffffffff80000002
call fcn.140015479
nop
lea rcx, [rbp + 0xb08]
call fcn.140015b04
nop
lea rcx, [rbp + 0xac8]
call fcn.140015b04
nop
lea rdx, str.Hiding_Cortana_From_Taskbar_n
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140015695
nop
lea rdx, str.ShowCortanaButton
lea rcx, [rbp + 0xb48]
call fcn.14001541f
nop
lea rdx, str.SOFTWAREMicrosoftWindowsCurrentVersionExplorerAdvanced
lea rcx, [rbp + 0xb88]
call fcn.14001541f
nop
xor r9d, r9d
lea r8, [rbp + 0xb48]
lea rdx, [rbp + 0xb88]
mov rcx, 0xffffffff80000001
call fcn.140015479
nop
lea rcx, [rbp + 0xb88]
call fcn.140015b04
nop
lea rcx, [rbp + 0xb48]
call fcn.140015b04
nop
lea rdx, str.ShowCortanaButton
lea rcx, [rbp + 0xbc8]
call fcn.14001541f
nop
lea rdx, str..DEFAULTSOFTWAREMicrosoftWindowsCurrentVersionExplorerAdvanced
lea rcx, [rbp + 0xc08]
call fcn.14001541f
nop
xor r9d, r9d
lea r8, [rbp + 0xbc8]
lea rdx, [rbp + 0xc08]
mov rcx, 0xffffffff80000003
call fcn.140015479
nop
lea rcx, [rbp + 0xc08]
call fcn.140015b04
nop
lea rcx, [rbp + 0xbc8]
call fcn.140015b04
nop
lea rdx, str.Hiding_Teams_Icon_From_Taskbar_n
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140015695
nop
lea rdx, str.TaskbarMn
lea rcx, [rbp + 0xc48]
call fcn.14001541f
nop
lea rdx, str.SoftwareMicrosoftWindowsCurrentVersionExplorerAdvanced
lea rcx, [rbp + 0xc88]
call fcn.14001541f
nop
xor r9d, r9d
lea r8, [rbp + 0xc48]
lea rdx, [rbp + 0xc88]
mov rcx, 0xffffffff80000001
call fcn.140015479
nop
lea rcx, [rbp + 0xc88]
call fcn.140015b04
nop
lea rcx, [rbp + 0xc48]
call fcn.140015b04
nop
lea rdx, str.TaskbarMn
lea rcx, [rbp + 0xcc8]
call fcn.14001541f
nop
lea rdx, str..DEFAULTSoftwareMicrosoftWindowsCurrentVersionExplorerAdvanced
lea rcx, [rbp + 0xd08]
call fcn.14001541f
nop
xor r9d, r9d
lea r8, [rbp + 0xcc8]
lea rdx, [rbp + 0xd08]
mov rcx, 0xffffffff80000003
call fcn.140015479
nop
lea rcx, [rbp + 0xd08]
call fcn.140015b04
nop
lea rcx, [rbp + 0xcc8]
call fcn.140015b04
nop
lea rdx, str.Disabling_Telemetry_n
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140015695
nop
lea rdx, str.AllowTelemetry
lea rcx, [rbp + 0xd48]
call fcn.14001541f
nop
lea rdx, str.SOFTWAREPoliciesMicrosoftWindowsDataCollection
lea rcx, [rbp + 0xd88]
call fcn.14001541f
nop
xor r9d, r9d
lea r8, [rbp + 0xd48]
lea rdx, [rbp + 0xd88]
mov rcx, 0xffffffff80000002
call fcn.140015479
nop
lea rcx, [rbp + 0xd88]
call fcn.140015b04
nop
lea rcx, [rbp + 0xd48]
call fcn.140015b04
nop
lea rdx, str.DoNotShowFeedbackNotifications
lea rcx, [rbp + 0xdc8]
call fcn.14001541f
nop
lea rdx, str.SOFTWAREPoliciesMicrosoftWindowsDataCollection
lea rcx, [rbp + 0xe08]
call fcn.14001541f
nop
xor r9d, r9d
lea r8, [rbp + 0xdc8]
lea rdx, [rbp + 0xe08]
mov rcx, 0xffffffff80000002
call fcn.140015479
nop
lea rcx, [rbp + 0xe08]
call fcn.140015b04
nop
lea rcx, [rbp + 0xdc8]
call fcn.140015b04
nop
lea rdx, str.AllowTelemetry
lea rcx, [rbp + 0xe48]
call fcn.14001541f
nop
lea rdx, str.SOFTWAREMicrosoftWindowsCurrentVersionPoliciesDataCollection
lea rcx, [rbp + 0xe88]
call fcn.14001541f
nop
xor r9d, r9d
lea r8, [rbp + 0xe48]
lea rdx, [rbp + 0xe88]
mov rcx, 0xffffffff80000002
call fcn.140015479
nop
lea rcx, [rbp + 0xe88]
call fcn.140015b04
nop
lea rcx, [rbp + 0xe48]
call fcn.140015b04
nop
lea rdx, str.schtasks__Change__TN__MicrosoftWindowsApplication_ExperienceMicrosoft_Compatibility_Appraiser___Disable_nul
lea rcx, [rbp + 0xec8]
call fcn.14001541f
nop
lea rcx, [rbp + 0xec8]
call fcn.140015307
nop
lea rcx, [rbp + 0xec8]
call fcn.140015b04
nop
lea rdx, str.schtasks__Change__TN__MicrosoftWindowsApplication_ExperienceProgramDataUpdater___Disable_nul
lea rcx, [rbp + 0xf08]
call fcn.14001541f
nop
lea rcx, [rbp + 0xf08]
call fcn.140015307
nop
lea rcx, [rbp + 0xf08]
call fcn.140015b04
nop
lea rdx, str.schtasks__Change__TN__MicrosoftWindowsAutochkProxy___Disable_nul
lea rcx, [rbp + 0xf48]
call fcn.14001541f
nop
lea rcx, [rbp + 0xf48]
call fcn.140015307
nop
lea rcx, [rbp + 0xf48]
call fcn.140015b04
nop
lea rdx, str.schtasks__Change__TN__MicrosoftWindowsCustomer_Experience_Improvement_ProgramConsolidator___Disable_nul
lea rcx, [rbp + 0xf88]
call fcn.14001541f
nop
lea rcx, [rbp + 0xf88]
call fcn.140015307
nop
lea rcx, [rbp + 0xf88]
call fcn.140015b04
nop
lea rdx, str.schtasks__Change__TN__MicrosoftWindowsCustomer_Experience_Improvement_ProgramUsbCeip___Disable_nul
lea rcx, [rbp + 0xfc8]
call fcn.14001541f
nop
lea rcx, [rbp + 0xfc8]
call fcn.140015307
nop
lea rcx, [rbp + 0xfc8]
call fcn.140015b04
nop
lea rdx, str.schtasks__Change__TN__MicrosoftWindowsDiskDiagnosticMicrosoft_Windows_DiskDiagnosticDataCollector___Disable_nul
lea rcx, [rbp + 0x1008]
call fcn.14001541f
nop
lea rcx, [rbp + 0x1008]
call fcn.140015307
nop
lea rcx, [rbp + 0x1008]
call fcn.140015b04
nop
lea rdx, str.Disabling_Wi_Fi_Sense_n
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140015695
nop
lea rdx, str.value
lea rcx, [rbp + 0x1048]
call fcn.14001541f
nop
lea rdx, str.SOFTWAREMicrosoftPolicyManagerdefaultWifiAllowAutoConnectToWiFiSenseHotspots
lea rcx, [rbp + 0x1088]
call fcn.14001541f
nop
xor r9d, r9d
lea r8, [rbp + 0x1048]
lea rdx, [rbp + 0x1088]
mov rcx, 0xffffffff80000002
call fcn.140015479
nop
lea rcx, [rbp + 0x1088]
call fcn.140015b04
nop
lea rcx, [rbp + 0x1048]
call fcn.140015b04
nop
lea rdx, str.value
lea rcx, [rbp + 0x10c8]
call fcn.14001541f
nop
lea rdx, str.SOFTWAREMicrosoftPolicyManagerdefaultWifiAllowWiFiHotSpotReporting
lea rcx, [rbp + 0x1108]
call fcn.14001541f
nop
xor r9d, r9d
lea r8, [rbp + 0x10c8]
lea rdx, [rbp + 0x1108]
mov rcx, 0xffffffff80000002
call fcn.140015479
nop
lea rcx, [rbp + 0x1108]
call fcn.140015b04
nop
lea rcx, [rbp + 0x10c8]
call fcn.140015b04
nop
lea rdx, str.Disabling_Application_suggestions_n
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140015695
nop
lea rdx, str.ContentDeliveryAllowed
lea rcx, [rbp + 0x1148]
call fcn.14001541f
nop
lea rdx, str.SOFTWAREMicrosoftWindowsCurrentVersionContentDeliveryManager
lea rcx, [rbp + 0x1188]
call fcn.14001541f
nop
xor r9d, r9d
lea r8, [rbp + 0x1148]
lea rdx, [rbp + 0x1188]
mov rcx, 0xffffffff80000002
call fcn.140015479
nop
lea rcx, [rbp + 0x1188]
call fcn.140015b04
nop
lea rcx, [rbp + 0x1148]
call fcn.140015b04
nop
lea rdx, str.OemPreInstalledAppsEnabled
lea rcx, [rbp + 0x11c8]
call fcn.14001541f
nop
lea rdx, str.SOFTWAREMicrosoftWindowsCurrentVersionContentDeliveryManager
lea rcx, [rbp + 0x1208]
call fcn.14001541f
nop
xor r9d, r9d
lea r8, [rbp + 0x11c8]
lea rdx, [rbp + 0x1208]
mov rcx, 0xffffffff80000002
call fcn.140015479
nop
lea rcx, [rbp + 0x1208]
call fcn.140015b04
nop
lea rcx, [rbp + 0x11c8]
call fcn.140015b04
nop
lea rdx, str.PreInstalledAppsEnabled
lea rcx, [rbp + 0x1248]
call fcn.14001541f
nop
lea rdx, str.SOFTWAREMicrosoftWindowsCurrentVersionContentDeliveryManager
lea rcx, [rbp + 0x1288]
call fcn.14001541f
nop
xor r9d, r9d
lea r8, [rbp + 0x1248]
lea rdx, [rbp + 0x1288]
mov rcx, 0xffffffff80000002
call fcn.140015479
nop
lea rcx, [rbp + 0x1288]
call fcn.140015b04
nop
lea rcx, [rbp + 0x1248]
call fcn.140015b04
nop
lea rdx, str.PreInstalledAppsEverEnabled
lea rcx, [rbp + 0x12c8]
call fcn.14001541f
nop
lea rdx, str.SOFTWAREMicrosoftWindowsCurrentVersionContentDeliveryManager
lea rcx, [rbp + 0x1308]
call fcn.14001541f
nop
xor r9d, r9d
lea r8, [rbp + 0x12c8]
lea rdx, [rbp + 0x1308]
mov rcx, 0xffffffff80000002
call fcn.140015479
nop
lea rcx, [rbp + 0x1308]
call fcn.140015b04
nop
lea rcx, [rbp + 0x12c8]
call fcn.140015b04
nop
lea rdx, str.SilentInstalledAppsEnabled
lea rcx, [rbp + 0x1348]
call fcn.14001541f
nop
lea rdx, str.SOFTWAREMicrosoftWindowsCurrentVersionContentDeliveryManager
lea rcx, [rbp + 0x1388]
call fcn.14001541f
nop
xor r9d, r9d
lea r8, [rbp + 0x1348]
lea rdx, [rbp + 0x1388]
mov rcx, 0xffffffff80000002
call fcn.140015479
nop
lea rcx, [rbp + 0x1388]
call fcn.140015b04
nop
lea rcx, [rbp + 0x1348]
call fcn.140015b04
nop
lea rdx, str.SubscribedContent_338387Enabled
lea rcx, [rbp + 0x13c8]
call fcn.14001541f
nop
lea rdx, str.SOFTWAREMicrosoftWindowsCurrentVersionContentDeliveryManager
lea rcx, [rbp + 0x1408]
call fcn.14001541f
nop
xor r9d, r9d
lea r8, [rbp + 0x13c8]
lea rdx, [rbp + 0x1408]
mov rcx, 0xffffffff80000002
call fcn.140015479
nop
lea rcx, [rbp + 0x1408]
call fcn.140015b04
nop
lea rcx, [rbp + 0x13c8]
call fcn.140015b04
nop
lea rdx, str.SubscribedContent_338388Enabled
lea rcx, [rbp + 0x1448]
call fcn.14001541f
nop
lea rdx, str.SOFTWAREMicrosoftWindowsCurrentVersionContentDeliveryManager
lea rcx, [rbp + 0x1488]
call fcn.14001541f
nop
xor r9d, r9d
lea r8, [rbp + 0x1448]
lea rdx, [rbp + 0x1488]
mov rcx, 0xffffffff80000002
call fcn.140015479
nop
lea rcx, [rbp + 0x1488]
call fcn.140015b04
nop
lea rcx, [rbp + 0x1448]
call fcn.140015b04
nop
lea rdx, str.SubscribedContent_338389Enabled
lea rcx, [rbp + 0x14c8]
call fcn.14001541f
nop
lea rdx, str.SOFTWAREMicrosoftWindowsCurrentVersionContentDeliveryManager
lea rcx, [rbp + 0x1508]
call fcn.14001541f
nop
xor r9d, r9d
lea r8, [rbp + 0x14c8]
lea rdx, [rbp + 0x1508]
mov rcx, 0xffffffff80000002
call fcn.140015479
nop
lea rcx, [rbp + 0x1508]
call fcn.140015b04
nop
lea rcx, [rbp + 0x14c8]
call fcn.140015b04
nop
lea rdx, str.SubscribedContent_353698Enabled
lea rcx, [rbp + 0x1548]
call fcn.14001541f
nop
lea rdx, str.SOFTWAREMicrosoftWindowsCurrentVersionContentDeliveryManager
lea rcx, [rbp + 0x1588]
call fcn.14001541f
nop
xor r9d, r9d
lea r8, [rbp + 0x1548]
lea rdx, [rbp + 0x1588]
mov rcx, 0xffffffff80000002
call fcn.140015479
nop
lea rcx, [rbp + 0x1588]
call fcn.140015b04
nop
lea rcx, [rbp + 0x1548]
call fcn.140015b04
nop
lea rdx, str.SubscribedContent_338393Enabled
lea rcx, [rbp + 0x15c8]
call fcn.14001541f
nop
lea rdx, str.SOFTWAREMicrosoftWindowsCurrentVersionContentDeliveryManager
lea rcx, [rbp + 0x1608]
call fcn.14001541f
nop
xor r9d, r9d
lea r8, [rbp + 0x15c8]
lea rdx, [rbp + 0x1608]
mov rcx, 0xffffffff80000002
call fcn.140015479
nop
lea rcx, [rbp + 0x1608]
call fcn.140015b04
nop
lea rcx, [rbp + 0x15c8]
call fcn.140015b04
nop
lea rdx, str.SubscribedContent_353694Enabled
lea rcx, [rbp + 0x1648]
call fcn.14001541f
nop
lea rdx, str.SOFTWAREMicrosoftWindowsCurrentVersionContentDeliveryManager
lea rcx, [rbp + 0x1688]
call fcn.14001541f
nop
xor r9d, r9d
lea r8, [rbp + 0x1648]
lea rdx, [rbp + 0x1688]
mov rcx, 0xffffffff80000002
call fcn.140015479
nop
lea rcx, [rbp + 0x1688]
call fcn.140015b04
nop
lea rcx, [rbp + 0x1648]
call fcn.140015b04
nop
lea rdx, str.SubscribedContent_353696Enabled
lea rcx, [rbp + 0x16c8]
call fcn.14001541f
nop
lea rdx, str.SOFTWAREMicrosoftWindowsCurrentVersionContentDeliveryManager
lea rcx, [rbp + 0x1708]
call fcn.14001541f
nop
xor r9d, r9d
lea r8, [rbp + 0x16c8]
lea rdx, [rbp + 0x1708]
mov rcx, 0xffffffff80000002
call fcn.140015479
nop
lea rcx, [rbp + 0x1708]
call fcn.140015b04
nop
lea rcx, [rbp + 0x16c8]
call fcn.140015b04
nop
lea rdx, str.Disabling_Activity_History_n
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140015695
nop
lea rdx, str.EnableActivityFeed
lea rcx, [rbp + 0x1748]
call fcn.14001541f
nop
lea rdx, str.SOFTWAREPoliciesMicrosoftWindowsSystem
lea rcx, [rbp + 0x1788]
call fcn.14001541f
nop
xor r9d, r9d
lea r8, [rbp + 0x1748]
lea rdx, [rbp + 0x1788]
mov rcx, 0xffffffff80000002
call fcn.140015479
nop
lea rcx, [rbp + 0x1788]
call fcn.140015b04
nop
lea rcx, [rbp + 0x1748]
call fcn.140015b04
nop
lea rdx, str.PublishUserActivities
lea rcx, [rbp + 0x17c8]
call fcn.14001541f
nop
lea rdx, str.SOFTWAREPoliciesMicrosoftWindowsSystem
lea rcx, [rbp + 0x1808]
call fcn.14001541f
nop
xor r9d, r9d
lea r8, [rbp + 0x17c8]
lea rdx, [rbp + 0x1808]
mov rcx, 0xffffffff80000002
call fcn.140015479
nop
lea rcx, [rbp + 0x1808]
call fcn.140015b04
nop
lea rcx, [rbp + 0x17c8]
call fcn.140015b04
nop
lea rdx, str.UploadUserActivities
lea rcx, [rbp + 0x1848]
call fcn.14001541f
nop
lea rdx, str.SOFTWAREPoliciesMicrosoftWindowsSystem
lea rcx, [rbp + 0x1888]
call fcn.14001541f
nop
xor r9d, r9d
lea r8, [rbp + 0x1848]
lea rdx, [rbp + 0x1888]
mov rcx, 0xffffffff80000002
call fcn.140015479
nop
lea rcx, [rbp + 0x1888]
call fcn.140015b04
nop
lea rcx, [rbp + 0x1848]
call fcn.140015b04
nop
lea rdx, str.Disabling_Location_Tracking_n
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140015695
nop
lea rdx, str.Deny
lea rcx, [rbp + 0x18c8]
call fcn.14001541f
nop
lea rdx, str.Value
lea rcx, [rbp + 0x1908]
call fcn.14001541f
nop
lea rdx, str.SOFTWAREMicrosoftWindowsCurrentVersionCapabilityAccessManagerConsentStorelocation
lea rcx, [rbp + 0x1948]
call fcn.14001541f
nop
lea r9, [rbp + 0x18c8]
lea r8, [rbp + 0x1908]
lea rdx, [rbp + 0x1948]
mov rcx, 0xffffffff80000002
call fcn.140015889
nop
lea rcx, [rbp + 0x1948]
call fcn.140015b04
nop
lea rcx, [rbp + 0x1908]
call fcn.140015b04
nop
lea rcx, [rbp + 0x18c8]
call fcn.140015b04
nop
lea rdx, str.SensorPermissionState
lea rcx, [rbp + 0x1988]
call fcn.14001541f
nop
lea rdx, str.SOFTWAREMicrosoftWindows_NTCurrentVersionSensorOverridesBFA794E4_F964_4FDB_90F6_51056BFE4B44
lea rcx, [rbp + 0x19c8]
call fcn.14001541f
nop
xor r9d, r9d
lea r8, [rbp + 0x1988]
lea rdx, [rbp + 0x19c8]
mov rcx, 0xffffffff80000002
call fcn.140015479
nop
lea rcx, [rbp + 0x19c8]
call fcn.140015b04
nop
lea rcx, [rbp + 0x1988]
call fcn.140015b04
nop
lea rdx, str.Status
lea rcx, [rbp + 0x1a08]
call fcn.14001541f
nop
lea rdx, str.SYSTEMCurrentControlSetServiceslfsvcServiceConfiguration
lea rcx, [rbp + 0x1a48]
call fcn.14001541f
nop
xor r9d, r9d
lea r8, [rbp + 0x1a08]
lea rdx, [rbp + 0x1a48]
mov rcx, 0xffffffff80000002
call fcn.140015479
nop
lea rcx, [rbp + 0x1a48]
call fcn.140015b04
nop
lea rcx, [rbp + 0x1a08]
call fcn.140015b04
nop
lea rdx, str.Disabling_Feedback_n
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140015695
nop
lea rdx, str.NumberOfSIUFInPeriod
lea rcx, [rbp + 0x1a88]
call fcn.14001541f
nop
lea rdx, str.SOFTWAREMicrosoftSiufRules
lea rcx, [rbp + 0x1ac8]
call fcn.14001541f
nop
xor r9d, r9d
lea r8, [rbp + 0x1a88]
lea rdx, [rbp + 0x1ac8]
mov rcx, 0xffffffff80000002
call fcn.140015479
nop
lea rcx, [rbp + 0x1ac8]
call fcn.140015b04
nop
lea rcx, [rbp + 0x1a88]
call fcn.140015b04
nop
lea rdx, str.schtasks__Change__TN__MicrosoftWindowsFeedbackSiufDmClient___Disable_nul
lea rcx, [rbp + 0x1b08]
call fcn.14001541f
nop
lea rcx, [rbp + 0x1b08]
call fcn.140015307
nop
lea rcx, [rbp + 0x1b08]
call fcn.140015b04
nop
lea rdx, str.schtasks__Change__TN__MicrosoftWindowsFeedbackSiufDmClientOnScenarioDownload___Disable_nul
lea rcx, [rbp + 0x1b48]
call fcn.14001541f
nop
lea rcx, [rbp + 0x1b48]
call fcn.140015307
nop
lea rcx, [rbp + 0x1b48]
call fcn.140015b04
nop
lea rdx, str.DiagTrack
lea rcx, [rbp + 0x1b88]
call fcn.14001541f
nop
lea rcx, [rbp + 0x1b88]
call fcn.140015dca
nop
lea rcx, [rbp + 0x1b88]
call fcn.140015b04
nop
lea rdx, str.dmwappushservice
lea rcx, [rbp + 0x1bc8]
call fcn.14001541f
nop
lea rcx, [rbp + 0x1bc8]
call fcn.140015dca
nop
lea rcx, [rbp + 0x1bc8]
call fcn.140015b04
nop
lea rdx, str.Disabling_Advertising_ID_n
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140015695
nop
lea rdx, str.Enabled
lea rcx, [rbp + 0x1c08]
call fcn.14001541f
nop
lea rdx, str.SOFTWAREMicrosoftWindowsCurrentVersionAdvertisingInfo
lea rcx, [rbp + 0x1c48]
call fcn.14001541f
nop
xor r9d, r9d
lea r8, [rbp + 0x1c08]
lea rdx, [rbp + 0x1c48]
mov rcx, 0xffffffff80000002
call fcn.140015479
nop
lea rcx, [rbp + 0x1c48]
call fcn.140015b04
nop
lea rcx, [rbp + 0x1c08]
call fcn.140015b04
nop
lea rdx, str.Disabling_Error_reporting_n
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140015695
nop
lea rdx, str.Disabled
lea rcx, [rbp + 0x1c88]
call fcn.14001541f
nop
lea rdx, str.SOFTWAREMicrosoftWindowsWindows_Error_Reporting
lea rcx, [rbp + 0x1cc8]
call fcn.14001541f
nop
mov r9d, 1
lea r8, [rbp + 0x1c88]
lea rdx, [rbp + 0x1cc8]
mov rcx, 0xffffffff80000002
call fcn.140015479
nop
lea rcx, [rbp + 0x1cc8]
call fcn.140015b04
nop
lea rcx, [rbp + 0x1c88]
call fcn.140015b04
nop
lea rdx, str.Restricting_Windows_Update_P2P_only_to_local_network_n
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140015695
nop
lea rdx, str.DODownloadMode
lea rcx, [rbp + 0x1d08]
call fcn.14001541f
nop
lea rdx, str.SOFTWAREMicrosoftWindowsCurrentVersionDeliveryOptimizationConfig
lea rcx, [rbp + 0x1d48]
call fcn.14001541f
nop
mov r9d, 1
lea r8, [rbp + 0x1d08]
lea rdx, [rbp + 0x1d48]
mov rcx, 0xffffffff80000002
call fcn.140015479
nop
lea rcx, [rbp + 0x1d48]
call fcn.140015b04
nop
lea rcx, [rbp + 0x1d08]
call fcn.140015b04
nop
lea rdx, str.Stopping_and_disabling_Diagnostics_Tracking_Service_n
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140015695
nop
lea rdx, str.DiagTrack
lea rcx, [rbp + 0x1d88]
call fcn.14001541f
nop
lea rcx, [rbp + 0x1d88]
call fcn.140015dca
nop
lea rcx, [rbp + 0x1d88]
call fcn.140015b04
nop
lea rdx, str.Stopping_and_disabling_WAP_Push_Service_n
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140015695
nop
lea rdx, str.dmwappushservice
lea rcx, [rbp + 0x1dc8]
call fcn.14001541f
nop
lea rcx, [rbp + 0x1dc8]
call fcn.140015dca
nop
lea rcx, [rbp + 0x1dc8]
call fcn.140015b04
nop
lea rdx, str.Enabling_F8_boot_menu_options_n
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140015695
nop
lea rdx, str._SystemRoot_System32_bcdedit.exe__set_current_bootmenupolicy_Legacy_nul
lea rcx, [rbp + 0x1e08]
call fcn.14001541f
nop
lea rcx, [rbp + 0x1e08]
call fcn.140015307
nop
lea rcx, [rbp + 0x1e08]
call fcn.140015b04
nop
lea rdx, str.Stopping_and_disabling_Home_Groups_services_n
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140015695
nop
lea rdx, str.HomeGroupListener
lea rcx, [rbp + 0x1e48]
call fcn.14001541f
nop
lea rcx, [rbp + 0x1e48]
call fcn.140015dca
nop
lea rcx, [rbp + 0x1e48]
call fcn.140015b04
nop
lea rdx, str.HomeGroupProvider
lea rcx, [rbp + 0x1e88]
call fcn.14001541f
nop
lea rcx, [rbp + 0x1e88]
call fcn.140015dca
nop
lea rcx, [rbp + 0x1e88]
call fcn.140015b04
nop
lea rdx, str.Disabling_Remote_Assistance_n
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140015695
nop
lea rdx, str.fAllowToGetHelp
lea rcx, [rbp + 0x1ec8]
call fcn.14001541f
nop
lea rdx, str.SYSTEMCurrentControlSetControlRemote_Assistance
lea rcx, [rbp + 0x1f08]
call fcn.14001541f
nop
xor r9d, r9d
lea r8, [rbp + 0x1ec8]
lea rdx, [rbp + 0x1f08]
mov rcx, 0xffffffff80000002
call fcn.140015479
nop
lea rcx, [rbp + 0x1f08]
call fcn.140015b04
nop
lea rcx, [rbp + 0x1ec8]
call fcn.140015b04
nop
lea rdx, str.Enabling_Hibernation_n
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140015695
nop
lea rdx, str.HibernateEnabled
lea rcx, [rbp + 0x1f48]
call fcn.14001541f
nop
lea rdx, str.SYSTEMCurrentControlSetControlSession_ManagerPower
lea rcx, [rbp + 0x1f88]
call fcn.14001541f
nop
mov r9d, 1
lea r8, [rbp + 0x1f48]
lea rdx, [rbp + 0x1f88]
mov rcx, 0xffffffff80000002
call fcn.140015479
nop
lea rcx, [rbp + 0x1f88]
call fcn.140015b04
nop
lea rcx, [rbp + 0x1f48]
call fcn.140015b04
nop
lea rdx, str.ShowHibernateOption
lea rcx, [rbp + 0x1fc8]
call fcn.14001541f
nop
lea rdx, str.SOFTWAREMicrosoftWindowsCurrentVersionExplorerFlyoutMenuSettings
lea rcx, [rbp + 0x2008]
call fcn.14001541f
nop
mov r9d, 1
lea r8, [rbp + 0x1fc8]
lea rdx, [rbp + 0x2008]
mov rcx, 0xffffffff80000002
call fcn.140015479
nop
lea rcx, [rbp + 0x2008]
call fcn.140015b04
nop
lea rcx, [rbp + 0x1fc8]
call fcn.140015b04
nop
lea rdx, str.Showing_file_operations_details_n
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140015695
nop
lea rdx, str.EnthusiastMode
lea rcx, [rbp + 0x2048]
call fcn.14001541f
nop
lea rdx, str.SOFTWAREMicrosoftWindowsCurrentVersionExplorerOperationStatusManager
lea rcx, [rbp + 0x2088]
call fcn.14001541f
nop
mov r9d, 1
lea r8, [rbp + 0x2048]
lea rdx, [rbp + 0x2088]
mov rcx, 0xffffffff80000001
call fcn.140015479
nop
lea rcx, [rbp + 0x2088]
call fcn.140015b04
nop
lea rcx, [rbp + 0x2048]
call fcn.140015b04
nop
lea rdx, str.EnthusiastMode
lea rcx, [rbp + 0x20c8]
call fcn.14001541f
nop
lea rdx, str..DEFAULTSOFTWAREMicrosoftWindowsCurrentVersionExplorerOperationStatusManager
lea rcx, [rbp + 0x2108]
call fcn.14001541f
nop
mov r9d, 1
lea r8, [rbp + 0x20c8]
lea rdx, [rbp + 0x2108]
mov rcx, 0xffffffff80000003
call fcn.140015479
nop
lea rcx, [rbp + 0x2108]
call fcn.140015b04
nop
lea rcx, [rbp + 0x20c8]
call fcn.140015b04
nop
lea rdx, str.Hiding_Cortana_Button_n
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140015695
nop
lea rdx, str.ShowCortanaButton
lea rcx, [rbp + 0x2148]
call fcn.14001541f
nop
lea rdx, str.SOFTWAREMicrosoftWindowsCurrentVersionExplorerAdvanced
lea rcx, [rbp + 0x2188]
call fcn.14001541f
nop
xor r9d, r9d
lea r8, [rbp + 0x2148]
lea rdx, [rbp + 0x2188]
mov rcx, 0xffffffff80000001
call fcn.140015479
nop
lea rcx, [rbp + 0x2188]
call fcn.140015b04
nop
lea rcx, [rbp + 0x2148]
call fcn.140015b04
nop
lea rdx, str.ShowCortanaButton
lea rcx, [rbp + 0x21c8]
call fcn.14001541f
nop
lea rdx, str..DEFAULTSOFTWAREMicrosoftWindowsCurrentVersionExplorerAdvanced
lea rcx, [rbp + 0x2208]
call fcn.14001541f
nop
xor r9d, r9d
lea r8, [rbp + 0x21c8]
lea rdx, [rbp + 0x2208]
mov rcx, 0xffffffff80000003
call fcn.140015479
nop
lea rcx, [rbp + 0x2208]
call fcn.140015b04
nop
lea rcx, [rbp + 0x21c8]
call fcn.140015b04
nop
lea rdx, str.Hiding_Task_View_button_n
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140015695
nop
lea rdx, str.ShowTaskViewButton
lea rcx, [rbp + 0x2248]
call fcn.14001541f
nop
lea rdx, str.SOFTWAREMicrosoftWindowsCurrentVersionExplorerAdvanced
lea rcx, [rbp + 0x2288]
call fcn.14001541f
nop
xor r9d, r9d
lea r8, [rbp + 0x2248]
lea rdx, [rbp + 0x2288]
mov rcx, 0xffffffff80000001
call fcn.140015479
nop
lea rcx, [rbp + 0x2288]
call fcn.140015b04
nop
lea rcx, [rbp + 0x2248]
call fcn.140015b04
nop
lea rdx, str.ShowTaskViewButton
lea rcx, [rbp + 0x22c8]
call fcn.14001541f
nop
lea rdx, str..DEFAULTSOFTWAREMicrosoftWindowsCurrentVersionExplorerAdvanced
lea rcx, [rbp + 0x2308]
call fcn.14001541f
nop
xor r9d, r9d
lea r8, [rbp + 0x22c8]
lea rdx, [rbp + 0x2308]
mov rcx, 0xffffffff80000003
call fcn.140015479
nop
lea rcx, [rbp + 0x2308]
call fcn.140015b04
nop
lea rcx, [rbp + 0x22c8]
call fcn.140015b04
nop
lea rdx, str.Hiding_People_icon_n
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140015695
nop
lea rdx, str.PeopleBand
lea rcx, [rbp + 0x2348]
call fcn.14001541f
nop
lea rdx, str.SOFTWAREMicrosoftWindowsCurrentVersionExplorerAdvancedPeople
lea rcx, [rbp + 0x2388]
call fcn.14001541f
nop
xor r9d, r9d
lea r8, [rbp + 0x2348]
lea rdx, [rbp + 0x2388]
mov rcx, 0xffffffff80000001
call fcn.140015479
nop
lea rcx, [rbp + 0x2388]
call fcn.140015b04
nop
lea rcx, [rbp + 0x2348]
call fcn.140015b04
nop
lea rdx, str.PeopleBand
lea rcx, [rbp + 0x23c8]
call fcn.14001541f
nop
lea rdx, str..DEFAULTSOFTWAREMicrosoftWindowsCurrentVersionExplorerAdvancedPeople
lea rcx, [rbp + 0x2408]
call fcn.14001541f
nop
xor r9d, r9d
lea r8, [rbp + 0x23c8]
lea rdx, [rbp + 0x2408]
mov rcx, 0xffffffff80000003
call fcn.140015479
nop
lea rcx, [rbp + 0x2408]
call fcn.140015b04
nop
lea rcx, [rbp + 0x23c8]
call fcn.140015b04
nop
lea rdx, str.Hide_tray_icons_n
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140015695
nop
lea rdx, str.EnableAutoTray
lea rcx, [rbp + 0x2448]
call fcn.14001541f
nop
lea rdx, str.SOFTWAREMicrosoftWindowsCurrentVersionExplorer
lea rcx, [rbp + 0x2488]
call fcn.14001541f
nop
mov r9d, 1
lea r8, [rbp + 0x2448]
lea rdx, [rbp + 0x2488]
mov rcx, 0xffffffff80000001
call fcn.140015479
nop
lea rcx, [rbp + 0x2488]
call fcn.140015b04
nop
lea rcx, [rbp + 0x2448]
call fcn.140015b04
nop
lea rdx, str.EnableAutoTray
lea rcx, [rbp + 0x24c8]
call fcn.14001541f
nop
lea rdx, str..DEFAULTSOFTWAREMicrosoftWindowsCurrentVersionExplorer
lea rcx, [rbp + 0x2508]
call fcn.14001541f
nop
mov r9d, 1
lea r8, [rbp + 0x24c8]
lea rdx, [rbp + 0x2508]
mov rcx, 0xffffffff80000003
call fcn.140015479
nop
lea rcx, [rbp + 0x2508]
call fcn.140015b04
nop
lea rcx, [rbp + 0x24c8]
call fcn.140015b04
nop
lea rdx, str.Enabling_NumLock_after_startup_n
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140015695
nop
lea rdx, str.InitialKeyboardIndicators
lea rcx, [rbp + 0x2548]
call fcn.14001541f
nop
lea rdx, str.Control_PanelKeyboard
lea rcx, [rbp + 0x2588]
call fcn.14001541f
nop
mov r9d, 0x21474836
lea r8, [rbp + 0x2548]
lea rdx, [rbp + 0x2588]
mov rcx, 0xffffffff80000001
call fcn.140015479
nop
lea rcx, [rbp + 0x2588]
call fcn.140015b04
nop
lea rcx, [rbp + 0x2548]
call fcn.140015b04
nop
lea rdx, str.InitialKeyboardIndicators
lea rcx, [rbp + 0x25c8]
call fcn.14001541f
nop
lea rdx, str..DEFAULTControl_PanelKeyboard
lea rcx, [rbp + 0x2608]
call fcn.14001541f
nop
mov r9d, 0x21474836
lea r8, [rbp + 0x25c8]
lea rdx, [rbp + 0x2608]
mov rcx, 0xffffffff80000003
call fcn.140015479
nop
lea rcx, [rbp + 0x2608]
call fcn.140015b04
nop
lea rcx, [rbp + 0x25c8]
call fcn.140015b04
nop
lea rdx, [0x14004955c]
lea rcx, [rbp + 0x2648]
call fcn.14001541f
nop
lea rdx, str.InitialKeyboardIndicators
lea rcx, [rbp + 0x2688]
call fcn.14001541f
nop
lea rdx, str.Control_PanelKeyboard
lea rcx, [rbp + 0x26c8]
call fcn.14001541f
nop
lea r9, [rbp + 0x2648]
lea r8, [rbp + 0x2688]
lea rdx, [rbp + 0x26c8]
mov rcx, 0xffffffff80000001
call fcn.140015889
nop
lea rcx, [rbp + 0x26c8]
call fcn.140015b04
nop
lea rcx, [rbp + 0x2688]
call fcn.140015b04
nop
lea rcx, [rbp + 0x2648]
call fcn.140015b04
nop
lea rdx, [0x14004955c]
lea rcx, [rbp + 0x2708]
call fcn.14001541f
nop
lea rdx, str.InitialKeyboardIndicators
lea rcx, [rbp + 0x2748]
call fcn.14001541f
nop
lea rdx, str..DEFAULTControl_PanelKeyboard
lea rcx, [rbp + 0x2788]
call fcn.14001541f
nop
lea r9, [rbp + 0x2708]
lea r8, [rbp + 0x2748]
lea rdx, [rbp + 0x2788]
mov rcx, 0xffffffff80000003
call fcn.140015889
nop
lea rcx, [rbp + 0x2788]
call fcn.140015b04
nop
lea rcx, [rbp + 0x2748]
call fcn.140015b04
nop
lea rcx, [rbp + 0x2708]
call fcn.140015b04
nop
lea rdx, [0x140049560]
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140015695
nop
lea rdx, str.LaunchTo
lea rcx, [rbp + 0x27c8]
call fcn.14001541f
nop
lea rdx, str.SOFTWAREMicrosoftWindowsCurrentVersionExplorerAdvanced
lea rcx, [rbp + 0x2808]
call fcn.14001541f
nop
mov r9d, 1
lea r8, [rbp + 0x27c8]
lea rdx, [rbp + 0x2808]
mov rcx, 0xffffffff80000001
call fcn.140015479
nop
lea rcx, [rbp + 0x2808]
call fcn.140015b04
nop
lea rcx, [rbp + 0x27c8]
call fcn.140015b04
nop
lea rdx, str.LaunchTo
lea rcx, [rbp + 0x2848]
call fcn.14001541f
nop
lea rdx, str..DEFAULTSOFTWAREMicrosoftWindowsCurrentVersionExplorerAdvanced
lea rcx, [rbp + 0x2888]
call fcn.14001541f
nop
mov r9d, 1
lea r8, [rbp + 0x2848]
lea rdx, [rbp + 0x2888]
mov rcx, 0xffffffff80000003
call fcn.140015479
nop
lea rcx, [rbp + 0x2888]
call fcn.140015b04
nop
lea rcx, [rbp + 0x2848]
call fcn.140015b04
nop
lea rdx, str.Improving_System_Responsiveness_using_regedit_n
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140015695
nop
lea rdx, str.NetworkThrottlingIndex
lea rcx, [rbp + 0x28c8]
call fcn.14001541f
nop
lea rdx, str.SOFTWAREMicrosoftWindows_NTCurrentVersionMultimediaSystemProfile
lea rcx, [rbp + 0x2908]
call fcn.14001541f
nop
mov r9d, 0xa
lea r8, [rbp + 0x28c8]
lea rdx, [rbp + 0x2908]
mov rcx, 0xffffffff80000002
call fcn.140015479
nop
lea rcx, [rbp + 0x2908]
call fcn.140015b04
nop
lea rcx, [rbp + 0x28c8]
call fcn.140015b04
nop
lea rdx, str.SystemResponsiveness
lea rcx, [rbp + 0x2948]
call fcn.14001541f
nop
lea rdx, str.SOFTWAREMicrosoftWindows_NTCurrentVersionMultimediaSystemProfile
lea rcx, [rbp + 0x2988]
call fcn.14001541f
nop
mov r9d, 0x14
lea r8, [rbp + 0x2948]
lea rdx, [rbp + 0x2988]
mov rcx, 0xffffffff80000002
call fcn.140015479
nop
lea rcx, [rbp + 0x2988]
call fcn.140015b04
nop
lea rcx, [rbp + 0x2948]
call fcn.140015b04
nop
lea rdx, str.WaitToKillServiceTimeout
lea rcx, [rbp + 0x29c8]
call fcn.14001541f
nop
lea rdx, str.SYSTEMCurrentControlSetControl
lea rcx, [rbp + 0x2a08]
call fcn.14001541f
nop
mov r9d, 0x7d0
lea r8, [rbp + 0x29c8]
lea rdx, [rbp + 0x2a08]
mov rcx, 0xffffffff80000002
call fcn.140015479
nop
lea rcx, [rbp + 0x2a08]
call fcn.140015b04
nop
lea rcx, [rbp + 0x29c8]
call fcn.140015b04
nop
lea rdx, [0x140049800]
lea rcx, [rbp + 0x2a48]
call fcn.14001541f
nop
lea rdx, str.AutoEndTasks
lea rcx, [rbp + 0x2a88]
call fcn.14001541f
nop
lea rdx, str.Control_PanelDesktop
lea rcx, [rbp + 0x2ac8]
call fcn.14001541f
nop
lea r9, [rbp + 0x2a48]
lea r8, [rbp + 0x2a88]
lea rdx, [rbp + 0x2ac8]
mov rcx, 0xffffffff80000001
call fcn.140015889
nop
lea rcx, [rbp + 0x2ac8]
call fcn.140015b04
nop
lea rcx, [rbp + 0x2a88]
call fcn.140015b04
nop
lea rcx, [rbp + 0x2a48]
call fcn.140015b04
nop
lea rdx, [0x140049800]
lea rcx, [rbp + 0x2b08]
call fcn.14001541f
nop
lea rdx, str.AutoEndTasks
lea rcx, [rbp + 0x2b48]
call fcn.14001541f
nop
lea rdx, str..DEFAULTControl_PanelDesktop
lea rcx, [rbp + 0x2b88]
call fcn.14001541f
nop
lea r9, [rbp + 0x2b08]
lea r8, [rbp + 0x2b48]
lea rdx, [rbp + 0x2b88]
mov rcx, 0xffffffff80000003
call fcn.140015889
nop
lea rcx, [rbp + 0x2b88]
call fcn.140015b04
nop
lea rcx, [rbp + 0x2b48]
call fcn.140015b04
nop
lea rcx, [rbp + 0x2b08]
call fcn.140015b04
nop
lea rdx, str.1000
lea rcx, [rbp + 0x2bc8]
call fcn.14001541f
nop
lea rdx, str.HungAppTimeout
lea rcx, [rbp + 0x2c08]
call fcn.14001541f
nop
lea rdx, str.Control_PanelDesktop
lea rcx, [rbp + 0x2c48]
call fcn.14001541f
nop
lea r9, [rbp + 0x2bc8]
lea r8, [rbp + 0x2c08]
lea rdx, [rbp + 0x2c48]
mov rcx, 0xffffffff80000001
call fcn.140015889
nop
lea rcx, [rbp + 0x2c48]
call fcn.140015b04
nop
lea rcx, [rbp + 0x2c08]
call fcn.140015b04
nop
lea rcx, [rbp + 0x2bc8]
call fcn.140015b04
nop
lea rdx, str.1000
lea rcx, [rbp + 0x2c88]
call fcn.14001541f
nop
lea rdx, str.HungAppTimeout
lea rcx, [rbp + 0x2cc8]
call fcn.14001541f
nop
lea rdx, str..DEFAULTControl_PanelDesktop
lea rcx, [rbp + 0x2d08]
call fcn.14001541f
nop
lea r9, [rbp + 0x2c88]
lea r8, [rbp + 0x2cc8]
lea rdx, [rbp + 0x2d08]
mov rcx, 0xffffffff80000003
call fcn.140015889
nop
lea rcx, [rbp + 0x2d08]
call fcn.140015b04
nop
lea rcx, [rbp + 0x2cc8]
call fcn.140015b04
nop
lea rcx, [rbp + 0x2c88]
call fcn.140015b04
nop
lea rdx, [0x140049800]
lea rcx, [rbp + 0x2d48]
call fcn.14001541f
nop
lea rdx, str.MenuShowDelay
lea rcx, [rbp + 0x2d88]
call fcn.14001541f
nop
lea rdx, str.Control_PanelDesktop
lea rcx, [rbp + 0x2dc8]
call fcn.14001541f
nop
lea r9, [rbp + 0x2d48]
lea r8, [rbp + 0x2d88]
lea rdx, [rbp + 0x2dc8]
mov rcx, 0xffffffff80000001
call fcn.140015889
nop
lea rcx, [rbp + 0x2dc8]
call fcn.140015b04
nop
lea rcx, [rbp + 0x2d88]
call fcn.140015b04
nop
lea rcx, [rbp + 0x2d48]
call fcn.140015b04
nop
lea rdx, [0x140049800]
lea rcx, [rbp + 0x2e08]
call fcn.14001541f
nop
lea rdx, str.MenuShowDelay
lea rcx, [rbp + 0x2e48]
call fcn.14001541f
nop
lea rdx, str..DEFAULTControl_PanelDesktop
lea rcx, [rbp + 0x2e88]
call fcn.14001541f
nop
lea r9, [rbp + 0x2e08]
lea r8, [rbp + 0x2e48]
lea rdx, [rbp + 0x2e88]
mov rcx, 0xffffffff80000003
call fcn.140015889
nop
lea rcx, [rbp + 0x2e88]
call fcn.140015b04
nop
lea rcx, [rbp + 0x2e48]
call fcn.140015b04
nop
lea rcx, [rbp + 0x2e08]
call fcn.140015b04
nop
lea rdx, str.2000
lea rcx, [rbp + 0x2ec8]
call fcn.14001541f
nop
lea rdx, str.WaitToKillAppTimeout
lea rcx, [rbp + 0x2f08]
call fcn.14001541f
nop
lea rdx, str.Control_PanelDesktop
lea rcx, [rbp + 0x2f48]
call fcn.14001541f
nop
lea r9, [rbp + 0x2ec8]
lea r8, [rbp + 0x2f08]
lea rdx, [rbp + 0x2f48]
mov rcx, 0xffffffff80000001
call fcn.140015889
nop
lea rcx, [rbp + 0x2f48]
call fcn.140015b04
nop
lea rcx, [rbp + 0x2f08]
call fcn.140015b04
nop
lea rcx, [rbp + 0x2ec8]
call fcn.140015b04
nop
lea rdx, str.2000
lea rcx, [rbp + 0x2f88]
call fcn.14001541f
nop
lea rdx, str.WaitToKillAppTimeout
lea rcx, [rbp + 0x2fc8]
call fcn.14001541f
nop
lea rdx, str..DEFAULTControl_PanelDesktop
lea rcx, [rbp + 0x3008]
call fcn.14001541f
nop
lea r9, [rbp + 0x2f88]
lea r8, [rbp + 0x2fc8]
lea rdx, [rbp + 0x3008]
mov rcx, 0xffffffff80000003
call fcn.140015889
nop
lea rcx, [rbp + 0x3008]
call fcn.140015b04
nop
lea rcx, [rbp + 0x2fc8]
call fcn.140015b04
nop
lea rcx, [rbp + 0x2f88]
call fcn.140015b04
nop
lea rdx, str.1000
lea rcx, [rbp + 0x3048]
call fcn.14001541f
nop
lea rdx, str.LowLevelHooksTimeout
lea rcx, [rbp + 0x3088]
call fcn.14001541f
nop
lea rdx, str.Control_PanelDesktop
lea rcx, [rbp + 0x30c8]
call fcn.14001541f
nop
lea r9, [rbp + 0x3048]
lea r8, [rbp + 0x3088]
lea rdx, [rbp + 0x30c8]
mov rcx, 0xffffffff80000001
call fcn.140015889
nop
lea rcx, [rbp + 0x30c8]
call fcn.140015b04
nop
lea rcx, [rbp + 0x3088]
call fcn.140015b04
nop
lea rcx, [rbp + 0x3048]
call fcn.140015b04
nop
lea rdx, str.1000
lea rcx, [rbp + 0x3108]
call fcn.14001541f
nop
lea rdx, str.LowLevelHooksTimeout
lea rcx, [rbp + 0x3148]
call fcn.14001541f
nop
lea rdx, str..DEFAULTControl_PanelDesktop
lea rcx, [rbp + 0x3188]
call fcn.14001541f
nop
lea r9, [rbp + 0x3108]
lea r8, [rbp + 0x3148]
lea rdx, [rbp + 0x3188]
mov rcx, 0xffffffff80000003
call fcn.140015889
nop
lea rcx, [rbp + 0x3188]
call fcn.140015b04
nop
lea rcx, [rbp + 0x3148]
call fcn.140015b04
nop
lea rcx, [rbp + 0x3108]
call fcn.140015b04
nop
lea rdx, [0x140049990]
lea rcx, [rbp + 0x31c8]
call fcn.14001541f
nop
lea rdx, str.MouseHoverTime
lea rcx, [rbp + 0x3208]
call fcn.14001541f
nop
lea rdx, str.Control_PanelMouse
lea rcx, [rbp + 0x3248]
call fcn.14001541f
nop
lea r9, [rbp + 0x31c8]
lea r8, [rbp + 0x3208]
lea rdx, [rbp + 0x3248]
mov rcx, 0xffffffff80000001
call fcn.140015889
nop
lea rcx, [rbp + 0x3248]
call fcn.140015b04
nop
lea rcx, [rbp + 0x3208]
call fcn.140015b04
nop
lea rcx, [rbp + 0x31c8]
call fcn.140015b04
nop
lea rdx, [0x140049990]
lea rcx, [rbp + 0x3288]
call fcn.14001541f
nop
lea rdx, str.MouseHoverTime
lea rcx, [rbp + 0x32c8]
call fcn.14001541f
nop
lea rdx, str..DEFAULTControl_PanelMouse
lea rcx, [rbp + 0x3308]
call fcn.14001541f
nop
lea r9, [rbp + 0x3288]
lea r8, [rbp + 0x32c8]
lea rdx, [rbp + 0x3308]
mov rcx, 0xffffffff80000003
call fcn.140015889
nop
lea rcx, [rbp + 0x3308]
call fcn.140015b04
nop
lea rcx, [rbp + 0x32c8]
call fcn.140015b04
nop
lea rcx, [rbp + 0x3288]
call fcn.140015b04
nop
lea rdx, str.2000
lea rcx, [rbp + 0x3348]
call fcn.14001541f
nop
lea rdx, str.WaitToKillServiceTimeout
lea rcx, [rbp + 0x3388]
call fcn.14001541f
nop
lea rdx, str.SYSTEMCurrentControlSetControl
lea rcx, [rbp + 0x33c8]
call fcn.14001541f
nop
lea r9, [rbp + 0x3348]
lea r8, [rbp + 0x3388]
lea rdx, [rbp + 0x33c8]
mov rcx, 0xffffffff80000002
call fcn.140015889
nop
lea rcx, [rbp + 0x33c8]
call fcn.140015b04
nop
lea rcx, [rbp + 0x3388]
call fcn.140015b04
nop
lea rcx, [rbp + 0x3348]
call fcn.140015b04
nop
lea rdx, str.Disabling_Sync_Provider_Notifications_n
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140015695
nop
lea rdx, str.ShowSyncProviderNotifications
lea rcx, [rbp + 0x3408]
call fcn.14001541f
nop
lea rdx, str.SOFTWAREMicrosoftWindowsCurrentVersionExplorerAdvanced
lea rcx, [rbp + 0x3448]
call fcn.14001541f
nop
xor r9d, r9d
lea r8, [rbp + 0x3408]
lea rdx, [rbp + 0x3448]
mov rcx, 0xffffffff80000001
call fcn.140015479
nop
lea rcx, [rbp + 0x3448]
call fcn.140015b04
nop
lea rcx, [rbp + 0x3408]
call fcn.140015b04
nop
lea rdx, str.ShowSyncProviderNotifications
lea rcx, [rbp + 0x3488]
call fcn.14001541f
nop
lea rdx, str..DEFAULTSOFTWAREMicrosoftWindowsCurrentVersionExplorerAdvanced
lea rcx, [rbp + 0x34c8]
call fcn.14001541f
nop
xor r9d, r9d
lea r8, [rbp + 0x3488]
lea rdx, [rbp + 0x34c8]
mov rcx, 0xffffffff80000003
call fcn.140015479
nop
lea rcx, [rbp + 0x34c8]
call fcn.140015b04
nop
lea rcx, [rbp + 0x3488]
call fcn.140015b04
nop
lea rdx, str.Disabling_Subscribed_Content_338387_n
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140015695
nop
lea rdx, str.SubscribedContent_338387Enabled
lea rcx, [rbp + 0x3508]
call fcn.14001541f
nop
lea rdx, str.SOFTWAREMicrosoftWindowsCurrentVersionContentDeliveryManager
lea rcx, [rbp + 0x3548]
call fcn.14001541f
nop
xor r9d, r9d
lea r8, [rbp + 0x3508]
lea rdx, [rbp + 0x3548]
mov rcx, 0xffffffff80000001
call fcn.140015479
nop
lea rcx, [rbp + 0x3548]
call fcn.140015b04
nop
lea rcx, [rbp + 0x3508]
call fcn.140015b04
nop
lea rdx, str.SubscribedContent_338387Enabled
lea rcx, [rbp + 0x3588]
call fcn.14001541f
nop
lea rdx, str..DEFAULTSOFTWAREMicrosoftWindowsCurrentVersionContentDeliveryManager
lea rcx, [rbp + 0x35c8]
call fcn.14001541f
nop
xor r9d, r9d
lea r8, [rbp + 0x3588]
lea rdx, [rbp + 0x35c8]
mov rcx, 0xffffffff80000003
call fcn.140015479
nop
lea rcx, [rbp + 0x35c8]
call fcn.140015b04
nop
lea rcx, [rbp + 0x3588]
call fcn.140015b04
nop
lea rdx, str.Disabling_Subscribed_Content_338393_n
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140015695
nop
lea rdx, str.SubscribedContent_338393Enabled
lea rcx, [rbp + 0x3608]
call fcn.14001541f
nop
lea rdx, str.SOFTWAREMicrosoftWindowsCurrentVersionContentDeliveryManager
lea rcx, [rbp + 0x3648]
call fcn.14001541f
nop
xor r9d, r9d
lea r8, [rbp + 0x3608]
lea rdx, [rbp + 0x3648]
mov rcx, 0xffffffff80000001
call fcn.140015479
nop
lea rcx, [rbp + 0x3648]
call fcn.140015b04
nop
lea rcx, [rbp + 0x3608]
call fcn.140015b04
nop
lea rdx, str.SubscribedContent_338393Enabled
lea rcx, [rbp + 0x3688]
call fcn.14001541f
nop
lea rdx, str..DEFAULTSOFTWAREMicrosoftWindowsCurrentVersionContentDeliveryManager
lea rcx, [rbp + 0x36c8]
call fcn.14001541f
nop
xor r9d, r9d
lea r8, [rbp + 0x3688]
lea rdx, [rbp + 0x36c8]
mov rcx, 0xffffffff80000003
call fcn.140015479
nop
lea rcx, [rbp + 0x36c8]
call fcn.140015b04
nop
lea rcx, [rbp + 0x3688]
call fcn.140015b04
nop
lea rdx, str.Disabling_Subscribed_Content_310093_n
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140015695
nop
lea rdx, str.SubscribedContent_310093Enabled
lea rcx, [rbp + 0x3708]
call fcn.14001541f
nop
lea rdx, str.SOFTWAREMicrosoftWindowsCurrentVersionContentDeliveryManager
lea rcx, [rbp + 0x3748]
call fcn.14001541f
nop
xor r9d, r9d
lea r8, [rbp + 0x3708]
lea rdx, [rbp + 0x3748]
mov rcx, 0xffffffff80000001
call fcn.140015479
nop
lea rcx, [rbp + 0x3748]
call fcn.140015b04
nop
lea rcx, [rbp + 0x3708]
call fcn.140015b04
nop
lea rdx, str.SubscribedContent_310093Enabled
lea rcx, [rbp + 0x3788]
call fcn.14001541f
nop
lea rdx, str..DEFAULTSOFTWAREMicrosoftWindowsCurrentVersionContentDeliveryManager
lea rcx, [rbp + 0x37c8]
call fcn.14001541f
nop
xor r9d, r9d
lea r8, [rbp + 0x3788]
lea rdx, [rbp + 0x37c8]
mov rcx, 0xffffffff80000003
call fcn.140015479
nop
lea rcx, [rbp + 0x37c8]
call fcn.140015b04
nop
lea rcx, [rbp + 0x3788]
call fcn.140015b04
nop
lea rdx, str.Disabling_Subscribed_Content_338389_n
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140015695
nop
lea rdx, str.SubscribedContent_338389Enabled
lea rcx, [rbp + 0x3808]
call fcn.14001541f
nop
lea rdx, str.SOFTWAREMicrosoftWindowsCurrentVersionContentDeliveryManager
lea rcx, [rbp + 0x3848]
call fcn.14001541f
nop
xor r9d, r9d
lea r8, [rbp + 0x3808]
lea rdx, [rbp + 0x3848]
mov rcx, 0xffffffff80000001
call fcn.140015479
nop
lea rcx, [rbp + 0x3848]
call fcn.140015b04
nop
lea rcx, [rbp + 0x3808]
call fcn.140015b04
nop
lea rdx, str.SubscribedContent_338389Enabled
lea rcx, [rbp + 0x3888]
call fcn.14001541f
nop
lea rdx, str..DEFAULTSOFTWAREMicrosoftWindowsCurrentVersionContentDeliveryManager
lea rcx, [rbp + 0x38c8]
call fcn.14001541f
nop
xor r9d, r9d
lea r8, [rbp + 0x3888]
lea rdx, [rbp + 0x38c8]
mov rcx, 0xffffffff80000003
call fcn.140015479
nop
lea rcx, [rbp + 0x38c8]
call fcn.140015b04
nop
lea rcx, [rbp + 0x3888]
call fcn.140015b04
nop
lea rdx, str.Disabling_Subscribed_Content_314563_n
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140015695
nop
lea rdx, str.SubscribedContent_314563Enabled
lea rcx, [rbp + 0x3908]
call fcn.14001541f
nop
lea rdx, str.SOFTWAREMicrosoftWindowsCurrentVersionContentDeliveryManager
lea rcx, [rbp + 0x3948]
call fcn.14001541f
nop
xor r9d, r9d
lea r8, [rbp + 0x3908]
lea rdx, [rbp + 0x3948]
mov rcx, 0xffffffff80000001
call fcn.140015479
nop
lea rcx, [rbp + 0x3948]
call fcn.140015b04
nop
lea rcx, [rbp + 0x3908]
call fcn.140015b04
nop
lea rdx, str.SubscribedContent_314563Enabled
lea rcx, [rbp + 0x3988]
call fcn.14001541f
nop
lea rdx, str..DEFAULTSOFTWAREMicrosoftWindowsCurrentVersionContentDeliveryManager
lea rcx, [rbp + 0x39c8]
call fcn.14001541f
nop
xor r9d, r9d
lea r8, [rbp + 0x3988]
lea rdx, [rbp + 0x39c8]
mov rcx, 0xffffffff80000003
call fcn.140015479
nop
lea rcx, [rbp + 0x39c8]
call fcn.140015b04
nop
lea rcx, [rbp + 0x3988]
call fcn.140015b04
nop
lea rdx, str.Disabling_Soft_Landing_n
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140015695
nop
lea rdx, str.SoftLandingEnabled
lea rcx, [rbp + 0x3a08]
call fcn.14001541f
nop
lea rdx, str.SOFTWAREMicrosoftWindowsCurrentVersionContentDeliveryManager
lea rcx, [rbp + 0x3a48]
call fcn.14001541f
nop
xor r9d, r9d
lea r8, [rbp + 0x3a08]
lea rdx, [rbp + 0x3a48]
mov rcx, 0xffffffff80000001
call fcn.140015479
nop
lea rcx, [rbp + 0x3a48]
call fcn.140015b04
nop
lea rcx, [rbp + 0x3a08]
call fcn.140015b04
nop
lea rdx, str.SoftLandingEnabled
lea rcx, [rbp + 0x3a88]
call fcn.14001541f
nop
lea rdx, str..DEFAULTSOFTWAREMicrosoftWindowsCurrentVersionContentDeliveryManager
lea rcx, [rbp + 0x3ac8]
call fcn.14001541f
nop
xor r9d, r9d
lea r8, [rbp + 0x3a88]
lea rdx, [rbp + 0x3ac8]
mov rcx, 0xffffffff80000003
call fcn.140015479
nop
lea rcx, [rbp + 0x3ac8]
call fcn.140015b04
nop
lea rcx, [rbp + 0x3a88]
call fcn.140015b04
nop
lea rdx, str.Disabling_Scoobe_System_Setting_n
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140015695
nop
lea rdx, str.ScoobeSystemSettingEnabled
lea rcx, [rbp + 0x3b08]
call fcn.14001541f
nop
lea rdx, str.SOFTWAREMicrosoftWindowsCurrentVersionUserProfileEngagement
lea rcx, [rbp + 0x3b48]
call fcn.14001541f
nop
xor r9d, r9d
lea r8, [rbp + 0x3b08]
lea rdx, [rbp + 0x3b48]
mov rcx, 0xffffffff80000001
call fcn.140015479
nop
lea rcx, [rbp + 0x3b48]
call fcn.140015b04
nop
lea rcx, [rbp + 0x3b08]
call fcn.140015b04
nop
lea rdx, str.ScoobeSystemSettingEnabled
lea rcx, [rbp + 0x3b88]
call fcn.14001541f
nop
lea rdx, str..DEFAULTSOFTWAREMicrosoftWindowsCurrentVersionUserProfileEngagement
lea rcx, [rbp + 0x3bc8]
call fcn.14001541f
nop
xor r9d, r9d
lea r8, [rbp + 0x3b88]
lea rdx, [rbp + 0x3bc8]
mov rcx, 0xffffffff80000003
call fcn.140015479
nop
lea rcx, [rbp + 0x3bc8]
call fcn.140015b04
nop
lea rcx, [rbp + 0x3b88]
call fcn.140015b04
nop
lea rdx, str.Disabling_Silent_Installed_Apps_n
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140015695
nop
lea rdx, str.SilentInstalledAppsEnabled
lea rcx, [rbp + 0x3c08]
call fcn.14001541f
nop
lea rdx, str.SOFTWAREMicrosoftWindowsCurrentVersionContentDeliveryManager
lea rcx, [rbp + 0x3c48]
call fcn.14001541f
nop
xor r9d, r9d
lea r8, [rbp + 0x3c08]
lea rdx, [rbp + 0x3c48]
mov rcx, 0xffffffff80000001
call fcn.140015479
nop
lea rcx, [rbp + 0x3c48]
call fcn.140015b04
nop
lea rcx, [rbp + 0x3c08]
call fcn.140015b04
nop
lea rdx, str.SilentInstalledAppsEnabled
lea rcx, [rbp + 0x3c88]
call fcn.14001541f
nop
lea rdx, str..DEFAULTSOFTWAREMicrosoftWindowsCurrentVersionContentDeliveryManager
lea rcx, [rbp + 0x3cc8]
call fcn.14001541f
nop
xor r9d, r9d
lea r8, [rbp + 0x3c88]
lea rdx, [rbp + 0x3cc8]
mov rcx, 0xffffffff80000003
call fcn.140015479
nop
lea rcx, [rbp + 0x3cc8]
call fcn.140015b04
nop
lea rcx, [rbp + 0x3c88]
call fcn.140015b04
nop
lea rdx, str.Disabling_Advertising_Info_n
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140015695
nop
lea rdx, str.Enabled
lea rcx, [rbp + 0x3d08]
call fcn.14001541f
nop
lea rdx, str.SOFTWAREMicrosoftWindowsCurrentVersionAdvertisingInfo
lea rcx, [rbp + 0x3d48]
call fcn.14001541f
nop
xor r9d, r9d
lea r8, [rbp + 0x3d08]
lea rdx, [rbp + 0x3d48]
mov rcx, 0xffffffff80000001
call fcn.140015479
nop
lea rcx, [rbp + 0x3d48]
call fcn.140015b04
nop
lea rcx, [rbp + 0x3d08]
call fcn.140015b04
nop
lea rdx, str.Enabled
lea rcx, [rbp + 0x3d88]
call fcn.14001541f
nop
lea rdx, str..DEFAULTSOFTWAREMicrosoftWindowsCurrentVersionAdvertisingInfo
lea rcx, [rbp + 0x3dc8]
call fcn.14001541f
nop
xor r9d, r9d
lea r8, [rbp + 0x3d88]
lea rdx, [rbp + 0x3dc8]
mov rcx, 0xffffffff80000003
call fcn.140015479
nop
lea rcx, [rbp + 0x3dc8]
call fcn.140015b04
nop
lea rcx, [rbp + 0x3d88]
call fcn.140015b04
nop
lea rdx, str.Disabling_Tailored_Experiences_with_Diagnostic_Data_n
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140015695
nop
lea rdx, str.TailoredExperiencesWithDiagnosticDataEnabled
lea rcx, [rbp + 0x3e08]
call fcn.14001541f
nop
lea rdx, str.SOFTWAREMicrosoftWindowsCurrentVersionPrivacy
lea rcx, [rbp + 0x3e48]
call fcn.14001541f
nop
xor r9d, r9d
lea r8, [rbp + 0x3e08]
lea rdx, [rbp + 0x3e48]
mov rcx, 0xffffffff80000001
call fcn.140015479
nop
lea rcx, [rbp + 0x3e48]
call fcn.140015b04
nop
lea rcx, [rbp + 0x3e08]
call fcn.140015b04
nop
lea rdx, str.TailoredExperiencesWithDiagnosticDataEnabled
lea rcx, [rbp + 0x3e88]
call fcn.14001541f
nop
lea rdx, str..DEFAULTSOFTWAREMicrosoftWindowsCurrentVersionPrivacy
lea rcx, [rbp + 0x3ec8]
call fcn.14001541f
nop
xor r9d, r9d
lea r8, [rbp + 0x3e88]
lea rdx, [rbp + 0x3ec8]
mov rcx, 0xffffffff80000003
call fcn.140015479
nop
lea rcx, [rbp + 0x3ec8]
call fcn.140015b04
nop
lea rcx, [rbp + 0x3e88]
call fcn.140015b04
nop
lea rdx, str.Enabling_Periodic_Backup_n
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140015695
nop
lea rdx, str.EnablePeriodicBackup
lea rcx, [rbp + 0x3f08]
call fcn.14001541f
nop
lea rdx, str.SYSTEMCurrentControlSetControlSession_ManagerConfiguration_Manager
lea rcx, [rbp + 0x3f48]
call fcn.14001541f
nop
mov r9d, 1
lea r8, [rbp + 0x3f08]
lea rdx, [rbp + 0x3f48]
mov rcx, 0xffffffff80000002
call fcn.140015479
nop
lea rcx, [rbp + 0x3f48]
call fcn.140015b04
nop
lea rcx, [rbp + 0x3f08]
call fcn.140015b04
nop
lea rdx, str.Disabling_Shortcut_Arrow_Icon_n
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140015695
nop
mov byte [rbp + 4], 0
mov byte [rbp + 5], 0
mov byte [rbp + 6], 0
mov byte [rbp + 7], 0
lea rdx, str.link
lea rcx, [rbp + 0x3f88]
call fcn.14001541f
nop
lea rdx, str.SOFTWAREMicrosoftWindowsCurrentVersionExplorer
lea rcx, [rbp + 0x3fc8]
call fcn.14001541f
nop
mov dword [rsp + 0x20], 4
lea r9, [rbp + 4]
lea r8, [rbp + 0x3f88]
lea rdx, [rbp + 0x3fc8]
mov rcx, 0xffffffff80000001
call fcn.140015302
nop
lea rcx, [rbp + 0x3fc8]
call fcn.140015b04
nop
lea rcx, [rbp + 0x3f88]
call fcn.140015b04
nop
lea rdx, str.link
lea rcx, [rbp + 0x4008]
call fcn.14001541f
nop
lea rdx, str..DEFAULTSOFTWAREMicrosoftWindowsCurrentVersionExplorer
lea rcx, [rbp + 0x4048]
call fcn.14001541f
nop
mov dword [rsp + 0x20], 4
lea r9, [rbp + 4]
lea r8, [rbp + 0x4008]
lea rdx, [rbp + 0x4048]
mov rcx, 0xffffffff80000003
call fcn.140015302
nop
lea rcx, [rbp + 0x4048]
call fcn.140015b04
nop
lea rcx, [rbp + 0x4008]
call fcn.140015b04
nop
lea rdx, str.Enabling_Expressive_Input_Shell_Hotkey_n
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140015695
nop
lea rdx, str.EnableExpressiveInputShellHotkey
lea rcx, [rbp + 0x4088]
call fcn.14001541f
nop
lea rdx, str.SOFTWAREMicrosoftInputSettings
lea rcx, [rbp + 0x40c8]
call fcn.14001541f
nop
mov r9d, 1
lea r8, [rbp + 0x4088]
lea rdx, [rbp + 0x40c8]
mov rcx, 0xffffffff80000002
call fcn.140015479
nop
lea rcx, [rbp + 0x40c8]
call fcn.140015b04
nop
lea rcx, [rbp + 0x4088]
call fcn.140015b04
nop
lea rdx, str.Disabling_New_App_Alert_n
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140015695
nop
lea rdx, str.NoNewAppAlert
lea rcx, [rbp + 0x4108]
call fcn.14001541f
nop
lea rdx, str.SOFTWAREPoliciesMicrosoftWindowsExplorer
lea rcx, [rbp + 0x4148]
call fcn.14001541f
nop
mov r9d, 1
lea r8, [rbp + 0x4108]
lea rdx, [rbp + 0x4148]
mov rcx, 0xffffffff80000002
call fcn.140015479
nop
lea rcx, [rbp + 0x4148]
call fcn.140015b04
nop
lea rcx, [rbp + 0x4108]
call fcn.140015b04
nop
lea rdx, str.Enabling_Display_Parameters_n
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140015695
nop
lea rdx, str.DisplayParameters
lea rcx, [rbp + 0x4188]
call fcn.14001541f
nop
lea rdx, str.SYSTEMCurrentControlSetControlCrashControl
lea rcx, [rbp + 0x41c8]
call fcn.14001541f
nop
mov r9d, 1
lea r8, [rbp + 0x4188]
lea rdx, [rbp + 0x41c8]
mov rcx, 0xffffffff80000002
call fcn.140015479
nop
lea rcx, [rbp + 0x41c8]
call fcn.140015b04
nop
lea rcx, [rbp + 0x4188]
call fcn.140015b04
nop
lea rdx, str.Adding_Install_this_update_to_CABFolder_Shell_n
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140015695
nop
lea rdx, str.Install_this_update
lea rcx, [rbp + 0x4208]
call fcn.14001541f
nop
lea rdx, [0x1400468cc]
lea rcx, [rbp + 0x4248]
call fcn.14001541f
nop
lea rdx, str.CABFolderShellRunAs
lea rcx, [rbp + 0x4288]
call fcn.14001541f
nop
lea r9, [rbp + 0x4208]
lea r8, [rbp + 0x4248]
lea rdx, [rbp + 0x4288]
mov rcx, 0xffffffff80000000
call fcn.140015889
nop
lea rcx, [rbp + 0x4288]
call fcn.140015b04
nop
lea rcx, [rbp + 0x4248]
call fcn.140015b04
nop
lea rcx, [rbp + 0x4208]
call fcn.140015b04
nop
lea rdx, [0x1400468cc]
lea rcx, [rbp + 0x42c8]
call fcn.14001541f
nop
lea rdx, str.HasLUAShield
lea rcx, [rbp + 0x4308]
call fcn.14001541f
nop
lea rdx, str.CABFolderShellRunAs
lea rcx, [rbp + 0x4348]
call fcn.14001541f
nop
lea r9, [rbp + 0x42c8]
lea r8, [rbp + 0x4308]
lea rdx, [rbp + 0x4348]
mov rcx, 0xffffffff80000000
call fcn.140015889
nop
lea rcx, [rbp + 0x4348]
call fcn.140015b04
nop
lea rcx, [rbp + 0x4308]
call fcn.140015b04
nop
lea rcx, [rbp + 0x42c8]
call fcn.140015b04
nop
lea rdx, str.cmd__k_dism__online__add_package__packagepath:___1_
lea rcx, [rbp + 0x4388]
call fcn.14001541f
nop
lea rdx, [0x1400468cc]
lea rcx, [rbp + 0x43c8]
call fcn.14001541f
nop
lea rdx, str.CABFolderShellRunAsCommand
lea rcx, [rbp + 0x4408]
call fcn.14001541f
nop
lea r9, [rbp + 0x4388]
lea r8, [rbp + 0x43c8]
lea rdx, [rbp + 0x4408]
mov rcx, 0xffffffff80000000
call fcn.140015889
nop
lea rcx, [rbp + 0x4408]
call fcn.140015b04
nop
lea rcx, [rbp + 0x43c8]
call fcn.140015b04
nop
lea rcx, [rbp + 0x4388]
call fcn.140015b04
nop
lea rdx, str.Adding_Kill_not_responding_tasks_to_DesktopBackground_Shell_n
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140015695
nop
lea rdx, str.Kill_not_responding_tasks
lea rcx, [rbp + 0x4448]
call fcn.14001541f
nop
lea rdx, [0x1400468cc]
lea rcx, [rbp + 0x4488]
call fcn.14001541f
nop
lea rdx, str.DesktopBackgroundShellKillNotResponding
lea rcx, [rbp + 0x44c8]
call fcn.14001541f
nop
lea r9, [rbp + 0x4448]
lea r8, [rbp + 0x4488]
lea rdx, [rbp + 0x44c8]
mov rcx, 0xffffffff80000000
call fcn.140015889
nop
lea rcx, [rbp + 0x44c8]
call fcn.140015b04
nop
lea rcx, [rbp + 0x4488]
call fcn.140015b04
nop
lea rcx, [rbp + 0x4448]
call fcn.140015b04
nop
lea rdx, str.taskmgr.exe__30651
lea rcx, [rbp + 0x4508]
call fcn.14001541f
nop
lea rdx, str.icon
lea rcx, [rbp + 0x4548]
call fcn.14001541f
nop
lea rdx, str.DesktopBackgroundShellKillNotResponding
lea rcx, [rbp + 0x4588]
call fcn.14001541f
nop
lea r9, [rbp + 0x4508]
lea r8, [rbp + 0x4548]
lea rdx, [rbp + 0x4588]
mov rcx, 0xffffffff80000000
call fcn.140015889
nop
lea rcx, [rbp + 0x4588]
call fcn.140015b04
nop
lea rcx, [rbp + 0x4548]
call fcn.140015b04
nop
lea rcx, [rbp + 0x4508]
call fcn.140015b04
nop
lea rdx, str.Kill_not_responding_tasks
lea rcx, [rbp + 0x45c8]
call fcn.14001541f
nop
lea rdx, str.MUIVerb
lea rcx, [rbp + 0x4608]
call fcn.14001541f
nop
lea rdx, str.DesktopBackgroundShellKillNotResponding
lea rcx, [rbp + 0x4648]
call fcn.14001541f
nop
lea r9, [rbp + 0x45c8]
lea r8, [rbp + 0x4608]
lea rdx, [rbp + 0x4648]
mov rcx, 0xffffffff80000000
call fcn.140015889
nop
lea rcx, [rbp + 0x4648]
call fcn.140015b04
nop
lea rcx, [rbp + 0x4608]
call fcn.140015b04
nop
lea rcx, [rbp + 0x45c8]
call fcn.140015b04
nop
lea rdx, [0x14004ab90]
lea rcx, [rbp + 0x4688]
call fcn.14001541f
nop
lea rdx, str.Position
lea rcx, [rbp + 0x46c8]
call fcn.14001541f
nop
lea rdx, str.DesktopBackgroundShellKillNotResponding
lea rcx, [rbp + 0x4708]
call fcn.14001541f
nop
lea r9, [rbp + 0x4688]
lea r8, [rbp + 0x46c8]
lea rdx, [rbp + 0x4708]
mov rcx, 0xffffffff80000000
call fcn.140015889
nop
lea rcx, [rbp + 0x4708]
call fcn.140015b04
nop
lea rcx, [rbp + 0x46c8]
call fcn.140015b04
nop
lea rcx, [rbp + 0x4688]
call fcn.140015b04
nop
lea rdx, str.cmd.exe__K_taskkill.exe__F__FI__status_eq_NOT_RESPONDING_
lea rcx, [rbp + 0x4748]
call fcn.14001541f
nop
lea rdx, [0x1400468cc]
lea rcx, [rbp + 0x4788]
call fcn.14001541f
nop
lea rdx, str.DesktopBackgroundShellKillNotRespondingcommand
lea rcx, [rbp + 0x47c8]
call fcn.14001541f
nop
lea r9, [rbp + 0x4748]
lea r8, [rbp + 0x4788]
lea rdx, [rbp + 0x47c8]
mov rcx, 0xffffffff80000000
call fcn.140015889
nop
lea rcx, [rbp + 0x47c8]
call fcn.140015b04
nop
lea rcx, [rbp + 0x4788]
call fcn.140015b04
nop
lea rcx, [rbp + 0x4748]
call fcn.140015b04
nop
lea rdx, str.Adding_Personalization_to_CLSID_n
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140015695
nop
lea rdx, str.__SystemRoot_System32_themecpl.dll__1immutable1
lea rcx, [rbp + 0x4808]
call fcn.14001541f
nop
lea rdx, [0x1400468cc]
lea rcx, [rbp + 0x4848]
call fcn.14001541f
nop
lea rdx, str.CLSID580722ff_16a7_44c1_bf74_7e1acd00f4f9
lea rcx, [rbp + 0x4888]
call fcn.14001541f
nop
lea r9, [rbp + 0x4808]
lea r8, [rbp + 0x4848]
lea rdx, [rbp + 0x4888]
mov rcx, 0xffffffff80000000
call fcn.140015889
nop
lea rcx, [rbp + 0x4888]
call fcn.140015b04
nop
lea rcx, [rbp + 0x4848]
call fcn.140015b04
nop
lea rcx, [rbp + 0x4808]
call fcn.140015b04
nop
lea rdx, str.__SystemRoot_System32_themecpl.dll__2immutable1
lea rcx, [rbp + 0x48c8]
call fcn.14001541f
nop
lea rdx, str.InfoTip
lea rcx, [rbp + 0x4908]
call fcn.14001541f
nop
lea rdx, str.CLSID580722ff_16a7_44c1_bf74_7e1acd00f4f9
lea rcx, [rbp + 0x4948]
call fcn.14001541f
nop
lea r9, [rbp + 0x48c8]
lea r8, [rbp + 0x4908]
lea rdx, [rbp + 0x4948]
mov rcx, 0xffffffff80000000
call fcn.140015889
nop
lea rcx, [rbp + 0x4948]
call fcn.140015b04
nop
lea rcx, [rbp + 0x4908]
call fcn.140015b04
nop
lea rcx, [rbp + 0x48c8]
call fcn.140015b04
nop
lea rdx, str.Microsoft.Personalization
lea rcx, [rbp + 0x4988]
call fcn.14001541f
nop
lea rdx, str.System.ApplicationName
lea rcx, [rbp + 0x49c8]
call fcn.14001541f
nop
lea rdx, str.CLSID580722ff_16a7_44c1_bf74_7e1acd00f4f9
lea rcx, [rbp + 0x4a08]
call fcn.14001541f
nop
lea r9, [rbp + 0x4988]
lea r8, [rbp + 0x49c8]
lea rdx, [rbp + 0x4a08]
mov rcx, 0xffffffff80000000
call fcn.140015889
nop
lea rcx, [rbp + 0x4a08]
call fcn.140015b04
nop
lea rcx, [rbp + 0x49c8]
call fcn.140015b04
nop
lea rcx, [rbp + 0x4988]
call fcn.140015b04
nop
lea rdx, str.System.ControlPanel.Category
lea rcx, [rbp + 0x4a48]
call fcn.14001541f
nop
lea rdx, str.CLSID580722ff_16a7_44c1_bf74_7e1acd00f4f9
lea rcx, [rbp + 0x4a88]
call fcn.14001541f
nop
mov r9d, 1
lea r8, [rbp + 0x4a48]
lea rdx, [rbp + 0x4a88]
mov rcx, 0xffffffff80000000
call fcn.140015479
nop
lea rcx, [rbp + 0x4a88]
call fcn.140015b04
nop
lea rcx, [rbp + 0x4a48]
call fcn.140015b04
nop
lea rdx, str.Internal
lea rcx, [rbp + 0x4ac8]
call fcn.14001541f
nop
lea rdx, str.System.Software.TasksFileUrl
lea rcx, [rbp + 0x4b08]
call fcn.14001541f
nop
lea rdx, str.CLSID580722ff_16a7_44c1_bf74_7e1acd00f4f9
lea rcx, [rbp + 0x4b48]
call fcn.14001541f
nop
lea r9, [rbp + 0x4ac8]
lea r8, [rbp + 0x4b08]
lea rdx, [rbp + 0x4b48]
mov rcx, 0xffffffff80000000
call fcn.140015889
nop
lea rcx, [rbp + 0x4b48]
call fcn.140015b04
nop
lea rcx, [rbp + 0x4b08]
call fcn.140015b04
nop
lea rcx, [rbp + 0x4ac8]
call fcn.140015b04
nop
lea rdx, str._SystemRoot_System32_themecpl.dll__1
lea rcx, [rbp + 0x4b88]
call fcn.14001541f
nop
lea rdx, [0x1400468cc]
lea rcx, [rbp + 0x4bc8]
call fcn.14001541f
nop
lea rdx, str.CLSID580722ff_16a7_44c1_bf74_7e1acd00f4f9DefaultIcon
lea rcx, [rbp + 0x4c08]
call fcn.14001541f
nop
lea r9, [rbp + 0x4b88]
lea r8, [rbp + 0x4bc8]
lea rdx, [rbp + 0x4c08]
mov rcx, 0xffffffff80000000
call fcn.140015889
nop
lea rcx, [rbp + 0x4c08]
call fcn.140015b04
nop
lea rcx, [rbp + 0x4bc8]
call fcn.140015b04
nop
lea rcx, [rbp + 0x4b88]
call fcn.140015b04
nop
lea rdx, str.explorer_shell:::ED834ED6_4B5A_4bfe_8F11_A626DCB6A921
lea rcx, [rbp + 0x4c48]
call fcn.14001541f
nop
lea rdx, [0x1400468cc]
lea rcx, [rbp + 0x4c88]
call fcn.14001541f
nop
lea rdx, str.CLSID580722ff_16a7_44c1_bf74_7e1acd00f4f9ShellOpencommand
lea rcx, [rbp + 0x4cc8]
call fcn.14001541f
nop
lea r9, [rbp + 0x4c48]
lea r8, [rbp + 0x4c88]
lea rdx, [rbp + 0x4cc8]
mov rcx, 0xffffffff80000000
call fcn.140015889
nop
lea rcx, [rbp + 0x4cc8]
call fcn.140015b04
nop
lea rcx, [rbp + 0x4c88]
call fcn.140015b04
nop
lea rcx, [rbp + 0x4c48]
call fcn.140015b04
nop
lea rdx, str.Personalization
lea rcx, [rbp + 0x4d08]
call fcn.14001541f
nop
lea rdx, [0x1400468cc]
lea rcx, [rbp + 0x4d48]
call fcn.14001541f
nop
lea rdx, str.SOFTWAREMicrosoftWindowsCurrentVersionExplorerControlPanelNameSpace580722ff_16a7_44c1_bf74_7e1acd00f4f9
lea rcx, [rbp + 0x4d88]
call fcn.14001541f
nop
lea r9, [rbp + 0x4d08]
lea r8, [rbp + 0x4d48]
lea rdx, [rbp + 0x4d88]
mov rcx, 0xffffffff80000002
call fcn.140015889
nop
lea rcx, [rbp + 0x4d88]
call fcn.140015b04
nop
lea rcx, [rbp + 0x4d48]
call fcn.140015b04
nop
lea rcx, [rbp + 0x4d08]
call fcn.140015b04
nop
lea rdx, str.Adding_Windows_Update_to_CLSID_n
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140015695
nop
lea rdx, str.Internal
lea rcx, [rbp + 0x4dc8]
call fcn.14001541f
nop
lea rdx, str.System.Software.TasksFileUrl
lea rcx, [rbp + 0x4e08]
call fcn.14001541f
nop
lea rdx, str.CLSID36eef7db_88ad_4e81_ad49_0e313f0c35f8
lea rcx, [rbp + 0x4e48]
call fcn.14001541f
nop
lea r9, [rbp + 0x4dc8]
lea r8, [rbp + 0x4e08]
lea rdx, [rbp + 0x4e48]
mov rcx, 0xffffffff80000000
call fcn.140015889
nop
lea rcx, [rbp + 0x4e48]
call fcn.140015b04
nop
lea rcx, [rbp + 0x4e08]
call fcn.140015b04
nop
lea rcx, [rbp + 0x4dc8]
call fcn.140015b04
nop
lea rdx, str.Microsoft.WindowsUpdate
lea rcx, [rbp + 0x4e88]
call fcn.14001541f
nop
lea rdx, str.System.ApplicationName
lea rcx, [rbp + 0x4ec8]
call fcn.14001541f
nop
lea rdx, str.CLSID36eef7db_88ad_4e81_ad49_0e313f0c35f8
lea rcx, [rbp + 0x4f08]
call fcn.14001541f
nop
lea r9, [rbp + 0x4e88]
lea r8, [rbp + 0x4ec8]
lea rdx, [rbp + 0x4f08]
mov rcx, 0xffffffff80000000
call fcn.140015889
nop
lea rcx, [rbp + 0x4f08]
call fcn.140015b04
nop
lea rcx, [rbp + 0x4ec8]
call fcn.140015b04
nop
lea rcx, [rbp + 0x4e88]
call fcn.140015b04
nop
lea rdx, [0x14004b41c]
lea rcx, [rbp + 0x4f48]
call fcn.14001541f
nop
lea rdx, str.System.ControlPanel.Category
lea rcx, [rbp + 0x4f88]
call fcn.14001541f
nop
lea rdx, str.CLSID36eef7db_88ad_4e81_ad49_0e313f0c35f8
lea rcx, [rbp + 0x4fc8]
call fcn.14001541f
nop
lea r9, [rbp + 0x4f48]
lea r8, [rbp + 0x4f88]
lea rdx, [rbp + 0x4fc8]
mov rcx, 0xffffffff80000000
call fcn.140015889
nop
lea rcx, [rbp + 0x4fc8]
call fcn.140015b04
nop
lea rcx, [rbp + 0x4f88]
call fcn.140015b04
nop
lea rcx, [rbp + 0x4f48]
call fcn.140015b04
nop
lea rdx, [0x14004b420]
lea rcx, [rbp + 0x5008]
call fcn.14001541f
nop
lea rdx, [0x1400468cc]
lea rcx, [rbp + 0x5048]
call fcn.14001541f
nop
lea rdx, str.CLSID36eef7db_88ad_4e81_ad49_0e313f0c35f8
lea rcx, [rbp + 0x5088]
call fcn.14001541f
nop
lea r9, [rbp + 0x5008]
lea r8, [rbp + 0x5048]
lea rdx, [rbp + 0x5088]
mov rcx, 0xffffffff80000000
call fcn.140015889
nop
lea rcx, [rbp + 0x5088]
call fcn.140015b04
nop
lea rcx, [rbp + 0x5048]
call fcn.140015b04
nop
lea rcx, [rbp + 0x5008]
call fcn.140015b04
nop
lea rdx, str.__SystemRoot__system32_shell32.dll__22580
lea rcx, [rbp + 0x50c8]
call fcn.14001541f
nop
lea rdx, str.InfoTip
lea rcx, [rbp + 0x5108]
call fcn.14001541f
nop
lea rdx, str.CLSID36eef7db_88ad_4e81_ad49_0e313f0c35f8
lea rcx, [rbp + 0x5148]
call fcn.14001541f
nop
lea r9, [rbp + 0x50c8]
lea r8, [rbp + 0x5108]
lea rdx, [rbp + 0x5148]
mov rcx, 0xffffffff80000000
call fcn.140015889
nop
lea rcx, [rbp + 0x5148]
call fcn.140015b04
nop
lea rcx, [rbp + 0x5108]
call fcn.140015b04
nop
lea rcx, [rbp + 0x50c8]
call fcn.140015b04
nop
lea rdx, str.shell32.dll__47
lea rcx, [rbp + 0x5188]
call fcn.14001541f
nop
lea rdx, [0x1400468cc]
lea rcx, [rbp + 0x51c8]
call fcn.14001541f
nop
lea rdx, str.CLSID36eef7db_88ad_4e81_ad49_0e313f0c35f8DefaultIcon
lea rcx, [rbp + 0x5208]
call fcn.14001541f
nop
lea r9, [rbp + 0x5188]
lea r8, [rbp + 0x51c8]
lea rdx, [rbp + 0x5208]
mov rcx, 0xffffffff80000000
call fcn.140015889
nop
lea rcx, [rbp + 0x5208]
call fcn.140015b04
nop
lea rcx, [rbp + 0x51c8]
call fcn.140015b04
nop
lea rcx, [rbp + 0x5188]
call fcn.140015b04
nop
lea rdx, str.control.exe__name_Microsoft.WindowsUpdate
lea rcx, [rbp + 0x5248]
call fcn.14001541f
nop
lea rdx, [0x1400468cc]
lea rcx, [rbp + 0x5288]
call fcn.14001541f
nop
lea rdx, str.CLSID36eef7db_88ad_4e81_ad49_0e313f0c35f8ShellOpenCommand
lea rcx, [rbp + 0x52c8]
call fcn.14001541f
nop
lea r9, [rbp + 0x5248]
lea r8, [rbp + 0x5288]
lea rdx, [rbp + 0x52c8]
mov rcx, 0xffffffff80000000
call fcn.140015889
nop
lea rcx, [rbp + 0x52c8]
call fcn.140015b04
nop
lea rcx, [rbp + 0x5288]
call fcn.140015b04
nop
lea rcx, [rbp + 0x5248]
call fcn.140015b04
nop
lea rdx, str.Windows_Update
lea rcx, [rbp + 0x5308]
call fcn.14001541f
nop
lea rdx, [0x1400468cc]
lea rcx, [rbp + 0x5348]
call fcn.14001541f
nop
lea rdx, str.SOFTWAREMicrosoftWindowsCurrentVersionExplorerControlPanelNameSpace36eef7db_88ad_4e81_ad49_0e313f0c35f8
lea rcx, [rbp + 0x5388]
call fcn.14001541f
nop
lea r9, [rbp + 0x5308]
lea r8, [rbp + 0x5348]
lea rdx, [rbp + 0x5388]
mov rcx, 0xffffffff80000002
call fcn.140015889
nop
lea rcx, [rbp + 0x5388]
call fcn.140015b04
nop
lea rcx, [rbp + 0x5348]
call fcn.140015b04
nop
lea rcx, [rbp + 0x5308]
call fcn.140015b04
nop
lea rdx, str.Disabling_Shortcut_Arrow_Icon_for_Current_User_n
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140015695
nop
mov byte [rbp + 0x24], 0
mov byte [rbp + 0x25], 0
mov byte [rbp + 0x26], 0
mov byte [rbp + 0x27], 0
lea rdx, str.link
lea rcx, [rbp + 0x53c8]
call fcn.14001541f
nop
lea rdx, str.SOFTWAREMicrosoftWindowsCurrentVersionExplorer
lea rcx, [rbp + 0x5408]
call fcn.14001541f
nop
mov dword [rsp + 0x20], 4
lea r9, [rbp + 0x24]
lea r8, [rbp + 0x53c8]
lea rdx, [rbp + 0x5408]
mov rcx, 0xffffffff80000001
call fcn.140015302
nop
lea rcx, [rbp + 0x5408]
call fcn.140015b04
nop
lea rcx, [rbp + 0x53c8]
call fcn.140015b04
nop
lea rdx, str.Disabling_Shortcut_Arrow_Icon_for_Default_User_n
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140015695
nop
lea rdx, str.link
lea rcx, [rbp + 0x5448]
call fcn.14001541f
nop
lea rdx, str..DEFAULTSoftwareMicrosoftWindowsCurrentVersionExplorer
lea rcx, [rbp + 0x5488]
call fcn.14001541f
nop
mov dword [rsp + 0x20], 4
lea r9, [rbp + 0x24]
lea r8, [rbp + 0x5448]
lea rdx, [rbp + 0x5488]
mov rcx, 0xffffffff80000003
call fcn.140015302
nop
lea rcx, [rbp + 0x5488]
call fcn.140015b04
nop
lea rcx, [rbp + 0x5448]
call fcn.140015b04
nop
lea rdx, str.Disabling_Tailored_Experiences_with_Diagnostic_Data_for_Current_User_n
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140015695
nop
lea rdx, str.DisableTailoredExperiencesWithDiagnosticData
lea rcx, [rbp + 0x54c8]
call fcn.14001541f
nop
lea rdx, str.SOFTWAREPoliciesMicrosoftWindowsCloudContent
lea rcx, [rbp + 0x5508]
call fcn.14001541f
nop
mov r9d, 1
lea r8, [rbp + 0x54c8]
lea rdx, [rbp + 0x5508]
mov rcx, 0xffffffff80000001
call fcn.140015479
nop
lea rcx, [rbp + 0x5508]
call fcn.140015b04
nop
lea rcx, [rbp + 0x54c8]
call fcn.140015b04
nop
lea rdx, str.Disabling_Tailored_Experiences_with_Diagnostic_Data_for_Default_User_n
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140015695
nop
lea rdx, str.DisableTailoredExperiencesWithDiagnosticData
lea rcx, [rbp + 0x5548]
call fcn.14001541f
nop
lea rdx, str..DEFAULTSoftwarePoliciesMicrosoftWindowsCloudContent
lea rcx, [rbp + 0x5588]
call fcn.14001541f
nop
mov r9d, 1
lea r8, [rbp + 0x5548]
lea rdx, [rbp + 0x5588]
mov rcx, 0xffffffff80000003
call fcn.140015479
nop
lea rcx, [rbp + 0x5588]
call fcn.140015b04
nop
lea rcx, [rbp + 0x5548]
call fcn.140015b04
nop
lea rdx, str.Enabling_Long_Paths_n
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140015695
nop
lea rdx, str.LongPathsEnabled
lea rcx, [rbp + 0x55c8]
call fcn.14001541f
nop
lea rdx, str.SYSTEMCurrentControlSetControlFileSystem
lea rcx, [rbp + 0x5608]
call fcn.14001541f
nop
mov r9d, 1
lea r8, [rbp + 0x55c8]
lea rdx, [rbp + 0x5608]
mov rcx, 0xffffffff80000002
call fcn.140015479
nop
lea rcx, [rbp + 0x5608]
call fcn.140015b04
nop
lea rcx, [rbp + 0x55c8]
call fcn.140015b04
nop
lea rdx, str.Configuring_Driver_Search_Order_n
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140015695
nop
lea rdx, str.SearchOrderConfig
lea rcx, [rbp + 0x5648]
call fcn.14001541f
nop
lea rdx, str.SOFTWAREMicrosoftWindowsCurrentVersionDriverSearching
lea rcx, [rbp + 0x5688]
call fcn.14001541f
nop
mov r9d, 1
lea r8, [rbp + 0x5648]
lea rdx, [rbp + 0x5688]
mov rcx, 0xffffffff80000002
call fcn.140015479
nop
lea rcx, [rbp + 0x5688]
call fcn.140015b04
nop
lea rcx, [rbp + 0x5648]
call fcn.140015b04
nop
lea rdx, str.Setting_System_Responsiveness_n
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140015695
nop
lea rdx, str.SystemResponsiveness
lea rcx, [rbp + 0x56c8]
call fcn.14001541f
nop
lea rdx, str.SOFTWAREMicrosoftWindows_NTCurrentVersionMultimediaSystemProfile
lea rcx, [rbp + 0x5708]
call fcn.14001541f
nop
xor r9d, r9d
lea r8, [rbp + 0x56c8]
lea rdx, [rbp + 0x5708]
mov rcx, 0xffffffff80000002
call fcn.140015479
nop
lea rcx, [rbp + 0x5708]
call fcn.140015b04
nop
lea rcx, [rbp + 0x56c8]
call fcn.140015b04
nop
lea rdx, str.Disabling_Network_Throttling_n
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140015695
nop
lea rdx, str.NetworkThrottlingIndex
lea rcx, [rbp + 0x5748]
call fcn.14001541f
nop
lea rdx, str.SOFTWAREMicrosoftWindows_NTCurrentVersionMultimediaSystemProfile
lea rcx, [rbp + 0x5788]
call fcn.14001541f
nop
mov r9d, 0xffffffff
lea r8, [rbp + 0x5748]
lea rdx, [rbp + 0x5788]
mov rcx, 0xffffffff80000002
call fcn.140015479
nop
lea rcx, [rbp + 0x5788]
call fcn.140015b04
nop
lea rcx, [rbp + 0x5748]
call fcn.140015b04
nop
lea rdx, str.Disabling_Clear_Page_File_at_Shutdown_n
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140015695
nop
lea rdx, str.ClearPageFileAtShutdown
lea rcx, [rbp + 0x57c8]
call fcn.14001541f
nop
lea rdx, str.SYSTEMCurrentControlSetControlSession_ManagerMemory_Management
lea rcx, [rbp + 0x5808]
call fcn.14001541f
nop
xor r9d, r9d
lea r8, [rbp + 0x57c8]
lea rdx, [rbp + 0x5808]
mov rcx, 0xffffffff80000002
call fcn.140015479
nop
lea rcx, [rbp + 0x5808]
call fcn.140015b04
nop
lea rcx, [rbp + 0x57c8]
call fcn.140015b04
nop
lea rdx, str.Setting_NDU_Service_Start_to_Automatic_n
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140015695
nop
lea rdx, str.Start
lea rcx, [rbp + 0x5848]
call fcn.14001541f
nop
lea rdx, str.SYSTEMControlSet001ServicesNdu
lea rcx, [rbp + 0x5888]
call fcn.14001541f
nop
mov r9d, 2
lea r8, [rbp + 0x5848]
lea rdx, [rbp + 0x5888]
mov rcx, 0xffffffff80000002
call fcn.140015479
nop
lea rcx, [rbp + 0x5888]
call fcn.140015b04
nop
lea rcx, [rbp + 0x5848]
call fcn.140015b04
nop
lea rdx, str.Setting_IRPStackSize_n
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140015695
nop
lea rdx, str.IRPStackSize
lea rcx, [rbp + 0x58c8]
call fcn.14001541f
nop
lea rdx, str.SYSTEMCurrentControlSetServicesLanmanServerParameters
lea rcx, [rbp + 0x5908]
call fcn.14001541f
nop
mov r9d, 0x1e
lea r8, [rbp + 0x58c8]
lea rdx, [rbp + 0x5908]
mov rcx, 0xffffffff80000002
call fcn.140015479
nop
lea rcx, [rbp + 0x5908]
call fcn.140015b04
nop
lea rcx, [rbp + 0x58c8]
call fcn.140015b04
nop
lea rdx, str.Disabling_Windows_Feeds_for_Current_User_n
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140015695
nop
lea rdx, str.EnableFeeds
lea rcx, [rbp + 0x5948]
call fcn.14001541f
nop
lea rdx, str.SOFTWAREPoliciesMicrosoftWindowsWindows_Feeds
lea rcx, [rbp + 0x5988]
call fcn.14001541f
nop
xor r9d, r9d
lea r8, [rbp + 0x5948]
lea rdx, [rbp + 0x5988]
mov rcx, 0xffffffff80000001
call fcn.140015479
nop
lea rcx, [rbp + 0x5988]
call fcn.140015b04
nop
lea rcx, [rbp + 0x5948]
call fcn.140015b04
nop
lea rdx, str.Setting_Shell_Feeds_Taskbar_View_Mode_for_Current_User_n
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140015695
nop
lea rdx, str.ShellFeedsTaskbarViewMode
lea rcx, [rbp + 0x59c8]
call fcn.14001541f
nop
lea rdx, str.SoftwareMicrosoftWindowsCurrentVersionFeeds
lea rcx, [rbp + 0x5a08]
call fcn.14001541f
nop
mov r9d, 2
lea r8, [rbp + 0x59c8]
lea rdx, [rbp + 0x5a08]
mov rcx, 0xffffffff80000001
call fcn.140015479
nop
lea rcx, [rbp + 0x5a08]
call fcn.140015b04
nop
lea rcx, [rbp + 0x59c8]
call fcn.140015b04
nop
lea rdx, str.Hiding_Meet_Now_for_Current_User_n
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140015695
nop
lea rdx, str.HideSCAMeetNow
lea rcx, [rbp + 0x5a48]
call fcn.14001541f
nop
lea rdx, str.SoftwareMicrosoftWindowsCurrentVersionPoliciesExplorer
lea rcx, [rbp + 0x5a88]
call fcn.14001541f
nop
mov r9d, 1
lea r8, [rbp + 0x5a48]
lea rdx, [rbp + 0x5a88]
mov rcx, 0xffffffff80000001
call fcn.140015479
nop
lea rcx, [rbp + 0x5a88]
call fcn.140015b04
nop
lea rcx, [rbp + 0x5a48]
call fcn.140015b04
nop
lea rdx, str.Disabling_Windows_Feeds_for_Default_User_n
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140015695
nop
lea rdx, str.EnableFeeds
lea rcx, [rbp + 0x5ac8]
call fcn.14001541f
nop
lea rdx, str..DEFAULTSoftwarePoliciesMicrosoftWindowsWindows_Feeds
lea rcx, [rbp + 0x5b08]
call fcn.14001541f
nop
xor r9d, r9d
lea r8, [rbp + 0x5ac8]
lea rdx, [rbp + 0x5b08]
mov rcx, 0xffffffff80000003
call fcn.140015479
nop
lea rcx, [rbp + 0x5b08]
call fcn.140015b04
nop
lea rcx, [rbp + 0x5ac8]
call fcn.140015b04
nop
lea rdx, str.Setting_Shell_Feeds_Taskbar_View_Mode_for_Default_User_n
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140015695
nop
lea rdx, str.ShellFeedsTaskbarViewMode
lea rcx, [rbp + 0x5b48]
call fcn.14001541f
nop
lea rdx, str..DEFAULTSoftwareMicrosoftWindowsCurrentVersionFeeds
lea rcx, [rbp + 0x5b88]
call fcn.14001541f
nop
mov r9d, 2
lea r8, [rbp + 0x5b48]
lea rdx, [rbp + 0x5b88]
mov rcx, 0xffffffff80000003
call fcn.140015479
nop
lea rcx, [rbp + 0x5b88]
call fcn.140015b04
nop
lea rcx, [rbp + 0x5b48]
call fcn.140015b04
nop
lea rdx, str.Hiding_Meet_Now_for_Default_User_n
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140015695
nop
lea rdx, str.HideSCAMeetNow
lea rcx, [rbp + 0x5bc8]
call fcn.14001541f
nop
lea rdx, str..DEFAULTSoftwareMicrosoftWindowsCurrentVersionPoliciesExplorer
lea rcx, [rbp + 0x5c08]
call fcn.14001541f
nop
mov r9d, 1
lea r8, [rbp + 0x5bc8]
lea rdx, [rbp + 0x5c08]
mov rcx, 0xffffffff80000003
call fcn.140015479
nop
lea rcx, [rbp + 0x5c08]
call fcn.140015b04
nop
lea rcx, [rbp + 0x5bc8]
call fcn.140015b04
nop
lea rdx, str.Setting_GPU_Priority_for_Games_n
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140015695
nop
lea rdx, str.GPU_Priority
lea rcx, [rbp + 0x5c48]
call fcn.14001541f
nop
lea rdx, str.SOFTWAREMicrosoftWindows_NTCurrentVersionMultimediaSystemProfileTasksGames
lea rcx, [rbp + 0x5c88]
call fcn.14001541f
nop
mov r9d, 8
lea r8, [rbp + 0x5c48]
lea rdx, [rbp + 0x5c88]
mov rcx, 0xffffffff80000002
call fcn.140015479
nop
lea rcx, [rbp + 0x5c88]
call fcn.140015b04
nop
lea rcx, [rbp + 0x5c48]
call fcn.140015b04
nop
lea rdx, str.Setting_Priority_for_Games_n
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140015695
nop
lea rdx, str.Priority
lea rcx, [rbp + 0x5cc8]
call fcn.14001541f
nop
lea rdx, str.SOFTWAREMicrosoftWindows_NTCurrentVersionMultimediaSystemProfileTasksGames
lea rcx, [rbp + 0x5d08]
call fcn.14001541f
nop
mov r9d, 6
lea r8, [rbp + 0x5cc8]
lea rdx, [rbp + 0x5d08]
mov rcx, 0xffffffff80000002
call fcn.140015479
nop
lea rcx, [rbp + 0x5d08]
call fcn.140015b04
nop
lea rcx, [rbp + 0x5cc8]
call fcn.140015b04
nop
lea rdx, str.Setting_Scheduling_Category_for_Games_n
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140015695
nop
lea rdx, str.High
lea rcx, [rbp + 0x5d48]
call fcn.14001541f
nop
lea rdx, str.Scheduling_Category
lea rcx, [rbp + 0x5d88]
call fcn.14001541f
nop
lea rdx, str.SOFTWAREMicrosoftWindows_NTCurrentVersionMultimediaSystemProfileTasksGames
lea rcx, [rbp + 0x5dc8]
call fcn.14001541f
nop
lea r9, [rbp + 0x5d48]
lea r8, [rbp + 0x5d88]
lea rdx, [rbp + 0x5dc8]
mov rcx, 0xffffffff80000002
call fcn.140015889
nop
lea rcx, [rbp + 0x5dc8]
call fcn.140015b04
nop
lea rcx, [rbp + 0x5d88]
call fcn.140015b04
nop
lea rcx, [rbp + 0x5d48]
call fcn.140015b04
nop
lea rdx, str.Disabling_sound_for_Sticky_Keys__Toggle_Keys__and_Filter_Keys_n
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140015695
nop
lea rdx, [0x1400468cc]
lea rcx, [rbp + 0x5e08]
call fcn.14001541f
nop
lea rdx, str.SOUND
lea rcx, [rbp + 0x5e48]
call fcn.14001541f
nop
lea rdx, str.Control_PanelAccessibilityStickyKeys
lea rcx, [rbp + 0x5e88]
call fcn.14001541f
nop
lea r9, [rbp + 0x5e08]
lea r8, [rbp + 0x5e48]
lea rdx, [rbp + 0x5e88]
mov rcx, 0xffffffff80000001
call fcn.140015889
nop
lea rcx, [rbp + 0x5e88]
call fcn.140015b04
nop
lea rcx, [rbp + 0x5e48]
call fcn.140015b04
nop
lea rcx, [rbp + 0x5e08]
call fcn.140015b04
nop
lea rdx, [0x1400468cc]
lea rcx, [rbp + 0x5ec8]
call fcn.14001541f
nop
lea rdx, str.SOUND
lea rcx, [rbp + 0x5f08]
call fcn.14001541f
nop
lea rdx, str..DEFAULTControl_PanelAccessibilityStickyKeys
lea rcx, [rbp + 0x5f48]
call fcn.14001541f
nop
lea r9, [rbp + 0x5ec8]
lea r8, [rbp + 0x5f08]
lea rdx, [rbp + 0x5f48]
mov rcx, 0xffffffff80000003
call fcn.140015889
nop
lea rcx, [rbp + 0x5f48]
call fcn.140015b04
nop
lea rcx, [rbp + 0x5f08]
call fcn.140015b04
nop
lea rcx, [rbp + 0x5ec8]
call fcn.140015b04
nop
lea rdx, [0x1400468cc]
lea rcx, [rbp + 0x5f88]
call fcn.14001541f
nop
lea rdx, str.SOUND
lea rcx, [rbp + 0x5fc8]
call fcn.14001541f
nop
lea rdx, str.Control_PanelAccessibilityToggleKeys
lea rcx, [rbp + 0x6008]
call fcn.14001541f
nop
lea r9, [rbp + 0x5f88]
lea r8, [rbp + 0x5fc8]
lea rdx, [rbp + 0x6008]
mov rcx, 0xffffffff80000001
call fcn.140015889
nop
lea rcx, [rbp + 0x6008]
call fcn.140015b04
nop
lea rcx, [rbp + 0x5fc8]
call fcn.140015b04
nop
lea rcx, [rbp + 0x5f88]
call fcn.140015b04
nop
lea rdx, [0x1400468cc]
lea rcx, [rbp + 0x6048]
call fcn.14001541f
nop
lea rdx, str.SOUND
lea rcx, [rbp + 0x6088]
call fcn.14001541f
nop
lea rdx, str..DEFAULTControl_PanelAccessibilityToggleKeys
lea rcx, [rbp + 0x60c8]
call fcn.14001541f
nop
lea r9, [rbp + 0x6048]
lea r8, [rbp + 0x6088]
lea rdx, [rbp + 0x60c8]
mov rcx, 0xffffffff80000003
call fcn.140015889
nop
lea rcx, [rbp + 0x60c8]
call fcn.140015b04
nop
lea rcx, [rbp + 0x6088]
call fcn.140015b04
nop
lea rcx, [rbp + 0x6048]
call fcn.140015b04
nop
lea rdx, [0x1400468cc]
lea rcx, [rbp + 0x6108]
call fcn.14001541f
nop
lea rdx, str.SOUND
lea rcx, [rbp + 0x6148]
call fcn.14001541f
nop
lea rdx, str.Control_PanelAccessibilityKeyboard_Response
lea rcx, [rbp + 0x6188]
call fcn.14001541f
nop
lea r9, [rbp + 0x6108]
lea r8, [rbp + 0x6148]
lea rdx, [rbp + 0x6188]
mov rcx, 0xffffffff80000001
call fcn.140015889
nop
lea rcx, [rbp + 0x6188]
call fcn.140015b04
nop
lea rcx, [rbp + 0x6148]
call fcn.140015b04
nop
lea rcx, [rbp + 0x6108]
call fcn.140015b04
nop
lea rdx, [0x1400468cc]
lea rcx, [rbp + 0x61c8]
call fcn.14001541f
nop
lea rdx, str.SOUND
lea rcx, [rbp + 0x6208]
call fcn.14001541f
nop
lea rdx, str..DEFAULTControl_PanelAccessibilityKeyboard_Response
lea rcx, [rbp + 0x6248]
call fcn.14001541f
nop
lea r9, [rbp + 0x61c8]
lea r8, [rbp + 0x6208]
lea rdx, [rbp + 0x6248]
mov rcx, 0xffffffff80000003
call fcn.140015889
nop
lea rcx, [rbp + 0x6248]
call fcn.140015b04
nop
lea rcx, [rbp + 0x6208]
call fcn.140015b04
nop
lea rcx, [rbp + 0x61c8]
call fcn.140015b04
nop
lea rdx, str.Disabling_warning_messages_for_Sticky_Keys__Toggle_Keys__and_Filter_Keys_n
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140015695
nop
lea rdx, [0x14004cee4]
lea rcx, [rbp + 0x6288]
call fcn.14001541f
nop
lea rdx, [0x14004cee8]
lea rcx, [rbp + 0x62c8]
call fcn.14001541f
nop
lea rdx, str.Control_PanelAccessibilityStickyKeys
lea rcx, [rbp + 0x6308]
call fcn.14001541f
nop
lea r9, [rbp + 0x6288]
lea r8, [rbp + 0x62c8]
lea rdx, [rbp + 0x6308]
mov rcx, 0xffffffff80000001
call fcn.140015889
nop
lea rcx, [rbp + 0x6308]
call fcn.140015b04
nop
lea rcx, [rbp + 0x62c8]
call fcn.140015b04
nop
lea rcx, [rbp + 0x6288]
call fcn.140015b04
nop
lea rdx, [0x14004cee4]
lea rcx, [rbp + 0x6348]
call fcn.14001541f
nop
lea rdx, [0x14004cee8]
lea rcx, [rbp + 0x6388]
call fcn.14001541f
nop
lea rdx, str..DEFAULTControl_PanelAccessibilityStickyKeys
lea rcx, [rbp + 0x63c8]
call fcn.14001541f
nop
lea r9, [rbp + 0x6348]
lea r8, [rbp + 0x6388]
lea rdx, [rbp + 0x63c8]
mov rcx, 0xffffffff80000003
call fcn.140015889
nop
lea rcx, [rbp + 0x63c8]
call fcn.140015b04
nop
lea rcx, [rbp + 0x6388]
call fcn.140015b04
nop
lea rcx, [rbp + 0x6348]
call fcn.140015b04
nop
lea rdx, [0x14004cee4]
lea rcx, [rbp + 0x6408]
call fcn.14001541f
nop
lea rdx, [0x14004cee8]
lea rcx, [rbp + 0x6448]
call fcn.14001541f
nop
lea rdx, str.Control_PanelAccessibilityToggleKeys
lea rcx, [rbp + 0x6488]
call fcn.14001541f
nop
lea r9, [rbp + 0x6408]
lea r8, [rbp + 0x6448]
lea rdx, [rbp + 0x6488]
mov rcx, 0xffffffff80000001
call fcn.140015889
nop
lea rcx, [rbp + 0x6488]
call fcn.140015b04
nop
lea rcx, [rbp + 0x6448]
call fcn.140015b04
nop
lea rcx, [rbp + 0x6408]
call fcn.140015b04
nop
lea rdx, [0x14004cee4]
lea rcx, [rbp + 0x64c8]
call fcn.14001541f
nop
lea rdx, [0x14004cee8]
lea rcx, [rbp + 0x6508]
call fcn.14001541f
nop
lea rdx, str..DEFAULTControl_PanelAccessibilityToggleKeys
lea rcx, [rbp + 0x6548]
call fcn.14001541f
nop
lea r9, [rbp + 0x64c8]
lea r8, [rbp + 0x6508]
lea rdx, [rbp + 0x6548]
mov rcx, 0xffffffff80000003
call fcn.140015889
nop
lea rcx, [rbp + 0x6548]
call fcn.140015b04
nop
lea rcx, [rbp + 0x6508]
call fcn.140015b04
nop
lea rcx, [rbp + 0x64c8]
call fcn.140015b04
nop
lea rdx, [0x14004cee4]
lea rcx, [rbp + 0x6588]
call fcn.14001541f
nop
lea rdx, [0x14004cee8]
lea rcx, [rbp + 0x65c8]
call fcn.14001541f
nop
lea rdx, str.Control_PanelAccessibilityKeyboard_Response
lea rcx, [rbp + 0x6608]
call fcn.14001541f
nop
lea r9, [rbp + 0x6588]
lea r8, [rbp + 0x65c8]
lea rdx, [rbp + 0x6608]
mov rcx, 0xffffffff80000001
call fcn.140015889
nop
lea rcx, [rbp + 0x6608]
call fcn.140015b04
nop
lea rcx, [rbp + 0x65c8]
call fcn.140015b04
nop
lea rcx, [rbp + 0x6588]
call fcn.140015b04
nop
lea rdx, [0x14004cee4]
lea rcx, [rbp + 0x6648]
call fcn.14001541f
nop
lea rdx, [0x14004cee8]
lea rcx, [rbp + 0x6688]
call fcn.14001541f
nop
lea rdx, str..DEFAULTControl_PanelAccessibilityKeyboard_Response
lea rcx, [rbp + 0x66c8]
call fcn.14001541f
nop
lea r9, [rbp + 0x6648]
lea r8, [rbp + 0x6688]
lea rdx, [rbp + 0x66c8]
mov rcx, 0xffffffff80000003
call fcn.140015889
nop
lea rcx, [rbp + 0x66c8]
call fcn.140015b04
nop
lea rcx, [rbp + 0x6688]
call fcn.140015b04
nop
lea rcx, [rbp + 0x6648]
call fcn.140015b04
nop
lea rdx, str.Disabling_mouse_acceleration_n
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140015695
nop
lea rdx, [0x14004cee4]
lea rcx, [rbp + 0x6708]
call fcn.14001541f
nop
lea rdx, str.MouseSpeed
lea rcx, [rbp + 0x6748]
call fcn.14001541f
nop
lea rdx, str.Control_PanelMouse
lea rcx, [rbp + 0x6788]
call fcn.14001541f
nop
lea r9, [rbp + 0x6708]
lea r8, [rbp + 0x6748]
lea rdx, [rbp + 0x6788]
mov rcx, 0xffffffff80000001
call fcn.140015889
nop
lea rcx, [rbp + 0x6788]
call fcn.140015b04
nop
lea rcx, [rbp + 0x6748]
call fcn.140015b04
nop
lea rcx, [rbp + 0x6708]
call fcn.140015b04
nop
lea rdx, [0x14004cee4]
lea rcx, [rbp + 0x67c8]
call fcn.14001541f
nop
lea rdx, str.MouseSpeed
lea rcx, [rbp + 0x6808]
call fcn.14001541f
nop
lea rdx, str..DEFAULTControl_PanelMouse
lea rcx, [rbp + 0x6848]
call fcn.14001541f
nop
lea r9, [rbp + 0x67c8]
lea r8, [rbp + 0x6808]
lea rdx, [rbp + 0x6848]
mov rcx, 0xffffffff80000003
call fcn.140015889
nop
lea rcx, [rbp + 0x6848]
call fcn.140015b04
nop
lea rcx, [rbp + 0x6808]
call fcn.140015b04
nop
lea rcx, [rbp + 0x67c8]
call fcn.140015b04
nop
lea rdx, [0x14004cee4]
lea rcx, [rbp + 0x6888]
call fcn.14001541f
nop
lea rdx, str.MouseThreshold1
lea rcx, [rbp + 0x68c8]
call fcn.14001541f
nop
lea rdx, str.Control_PanelMouse
lea rcx, [rbp + 0x6908]
call fcn.14001541f
nop
lea r9, [rbp + 0x6888]
lea r8, [rbp + 0x68c8]
lea rdx, [rbp + 0x6908]
mov rcx, 0xffffffff80000001
call fcn.140015889
nop
lea rcx, [rbp + 0x6908]
call fcn.140015b04
nop
lea rcx, [rbp + 0x68c8]
call fcn.140015b04
nop
lea rcx, [rbp + 0x6888]
call fcn.140015b04
nop
lea rdx, [0x14004cee4]
lea rcx, [rbp + 0x6948]
call fcn.14001541f
nop
lea rdx, str.MouseThreshold1
lea rcx, [rbp + 0x6988]
call fcn.14001541f
nop
lea rdx, str..DEFAULTControl_PanelMouse
lea rcx, [rbp + 0x69c8]
call fcn.14001541f
nop
lea r9, [rbp + 0x6948]
lea r8, [rbp + 0x6988]
lea rdx, [rbp + 0x69c8]
mov rcx, 0xffffffff80000003
call fcn.140015889
nop
lea rcx, [rbp + 0x69c8]
call fcn.140015b04
nop
lea rcx, [rbp + 0x6988]
call fcn.140015b04
nop
lea rcx, [rbp + 0x6948]
call fcn.140015b04
nop
lea rdx, [0x14004cee4]
lea rcx, [rbp + 0x6a08]
call fcn.14001541f
nop
lea rdx, str.MouseThreshold2
lea rcx, [rbp + 0x6a48]
call fcn.14001541f
nop
lea rdx, str.Control_PanelMouse
lea rcx, [rbp + 0x6a88]
call fcn.14001541f
nop
lea r9, [rbp + 0x6a08]
lea r8, [rbp + 0x6a48]
lea rdx, [rbp + 0x6a88]
mov rcx, 0xffffffff80000001
call fcn.140015889
nop
lea rcx, [rbp + 0x6a88]
call fcn.140015b04
nop
lea rcx, [rbp + 0x6a48]
call fcn.140015b04
nop
lea rcx, [rbp + 0x6a08]
call fcn.140015b04
nop
lea rdx, [0x14004cee4]
lea rcx, [rbp + 0x6ac8]
call fcn.14001541f
nop
lea rdx, str.MouseThreshold2
lea rcx, [rbp + 0x6b08]
call fcn.14001541f
nop
lea rdx, str..DEFAULTControl_PanelMouse
lea rcx, [rbp + 0x6b48]
call fcn.14001541f
nop
lea r9, [rbp + 0x6ac8]
lea r8, [rbp + 0x6b08]
lea rdx, [rbp + 0x6b48]
mov rcx, 0xffffffff80000003
call fcn.140015889
nop
lea rcx, [rbp + 0x6b48]
call fcn.140015b04
nop
lea rcx, [rbp + 0x6b08]
call fcn.140015b04
nop
lea rcx, [rbp + 0x6ac8]
call fcn.140015b04
nop
lea rdx, str.Enabling_pointer_shadow_n
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140015695
nop
lea rdx, str.MouseShadow
lea rcx, [rbp + 0x6b88]
call fcn.14001541f
nop
lea rdx, str.Control_PanelMouse
lea rcx, [rbp + 0x6bc8]
call fcn.14001541f
nop
mov r9d, 1
lea r8, [rbp + 0x6b88]
lea rdx, [rbp + 0x6bc8]
mov rcx, 0xffffffff80000001
call fcn.140015479
nop
lea rcx, [rbp + 0x6bc8]
call fcn.140015b04
nop
lea rcx, [rbp + 0x6b88]
call fcn.140015b04
nop
lea rdx, str.MouseShadow
lea rcx, [rbp + 0x6c08]
call fcn.14001541f
nop
lea rdx, str..DEFAULTControl_PanelMouse
lea rcx, [rbp + 0x6c48]
call fcn.14001541f
nop
mov r9d, 1
lea r8, [rbp + 0x6c08]
lea rdx, [rbp + 0x6c48]
mov rcx, 0xffffffff80000003
call fcn.140015479
nop
lea rcx, [rbp + 0x6c48]
call fcn.140015b04
nop
lea rcx, [rbp + 0x6c08]
call fcn.140015b04
nop
lea rdx, str.Disabling_showing_frequently_used_folders_in_Quick_Access_n
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140015695
nop
lea rdx, str.ShowFrequent
lea rcx, [rbp + 0x6c88]
call fcn.14001541f
nop
lea rdx, str.SOFTWAREMicrosoftWindowsCurrentVersionExplorer
lea rcx, [rbp + 0x6cc8]
call fcn.14001541f
nop
xor r9d, r9d
lea r8, [rbp + 0x6c88]
lea rdx, [rbp + 0x6cc8]
mov rcx, 0xffffffff80000001
call fcn.140015479
nop
lea rcx, [rbp + 0x6cc8]
call fcn.140015b04
nop
lea rcx, [rbp + 0x6c88]
call fcn.140015b04
nop
lea rdx, str.ShowFrequent
lea rcx, [rbp + 0x6d08]
call fcn.14001541f
nop
lea rdx, str..DEFAULTSOFTWAREMicrosoftWindowsCurrentVersionExplorer
lea rcx, [rbp + 0x6d48]
call fcn.14001541f
nop
xor r9d, r9d
lea r8, [rbp + 0x6d08]
lea rdx, [rbp + 0x6d48]
mov rcx, 0xffffffff80000003
call fcn.140015479
nop
lea rcx, [rbp + 0x6d48]
call fcn.140015b04
nop
lea rcx, [rbp + 0x6d08]
call fcn.140015b04
nop
lea rdx, str.Showing_hidden_files_in_File_Explorer_n
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140015695
nop
lea rdx, str.Hidden
lea rcx, [rbp + 0x6d88]
call fcn.14001541f
nop
lea rdx, str.SoftwareMicrosoftWindowsCurrentVersionExplorerAdvanced
lea rcx, [rbp + 0x6dc8]
call fcn.14001541f
nop
mov r9d, 1
lea r8, [rbp + 0x6d88]
lea rdx, [rbp + 0x6dc8]
mov rcx, 0xffffffff80000001
call fcn.140015479
nop
lea rcx, [rbp + 0x6dc8]
call fcn.140015b04
nop
lea rcx, [rbp + 0x6d88]
call fcn.140015b04
nop
lea rdx, str.Hidden
lea rcx, [rbp + 0x6e08]
call fcn.14001541f
nop
lea rdx, str..DEFAULTwareMicrosoftWindowsCurrentVersionExplorerAdvanced
lea rcx, [rbp + 0x6e48]
call fcn.14001541f
nop
mov r9d, 1
lea r8, [rbp + 0x6e08]
lea rdx, [rbp + 0x6e48]
mov rcx, 0xffffffff80000003
call fcn.140015479
nop
lea rcx, [rbp + 0x6e48]
call fcn.140015b04
nop
lea rcx, [rbp + 0x6e08]
call fcn.140015b04
nop
lea rdx, str.Showing_file_extensions_for_unknown_file_types_n
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140015695
nop
lea rdx, str.HideFileExt
lea rcx, [rbp + 0x6e88]
call fcn.14001541f
nop
lea rdx, str.SoftwareMicrosoftWindowsCurrentVersionExplorerAdvanced
lea rcx, [rbp + 0x6ec8]
call fcn.14001541f
nop
xor r9d, r9d
lea r8, [rbp + 0x6e88]
lea rdx, [rbp + 0x6ec8]
mov rcx, 0xffffffff80000001
call fcn.140015479
nop
lea rcx, [rbp + 0x6ec8]
call fcn.140015b04
nop
lea rcx, [rbp + 0x6e88]
call fcn.140015b04
nop
lea rdx, str.HideFileExt
lea rcx, [rbp + 0x6f08]
call fcn.14001541f
nop
lea rdx, str..DEFAULTSoftwareMicrosoftWindowsCurrentVersionExplorerAdvanced
lea rcx, [rbp + 0x6f48]
call fcn.14001541f
nop
xor r9d, r9d
lea r8, [rbp + 0x6f08]
lea rdx, [rbp + 0x6f48]
mov rcx, 0xffffffff80000003
call fcn.140015479
nop
lea rcx, [rbp + 0x6f48]
call fcn.140015b04
nop
lea rcx, [rbp + 0x6f08]
call fcn.140015b04
nop
lea rdx, str.Setting_Windows_Explorer_to_launch_folders_in_a_separate_process_n
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140015695
nop
lea rdx, str.SeparateProcess
lea rcx, [rbp + 0x6f88]
call fcn.14001541f
nop
lea rdx, str.SoftwareMicrosoftWindowsCurrentVersionExplorerAdvanced
lea rcx, [rbp + 0x6fc8]
call fcn.14001541f
nop
mov r9d, 1
lea r8, [rbp + 0x6f88]
lea rdx, [rbp + 0x6fc8]
mov rcx, 0xffffffff80000001
call fcn.140015479
nop
lea rcx, [rbp + 0x6fc8]
call fcn.140015b04
nop
lea rcx, [rbp + 0x6f88]
call fcn.140015b04
nop
lea rdx, str.SeparateProcess
lea rcx, [rbp + 0x7008]
call fcn.14001541f
nop
lea rdx, str..DEFAULTSoftwareMicrosoftWindowsCurrentVersionExplorerAdvanced
lea rcx, [rbp + 0x7048]
call fcn.14001541f
nop
mov r9d, 1
lea r8, [rbp + 0x7008]
lea rdx, [rbp + 0x7048]
mov rcx, 0xffffffff80000003
call fcn.140015479
nop
lea rcx, [rbp + 0x7048]
call fcn.140015b04
nop
lea rcx, [rbp + 0x7008]
call fcn.140015b04
nop
lea rdx, str.Enabling_check_boxes_for_file_and_folder_selection_in_File_Explorer_n
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140015695
nop
lea rdx, str.CheckFileExtensions
lea rcx, [rbp + 0x7088]
call fcn.14001541f
nop
lea rdx, str.SoftwareMicrosoftWindowsCurrentVersionExplorerAdvanced
lea rcx, [rbp + 0x70c8]
call fcn.14001541f
nop
mov r9d, 1
lea r8, [rbp + 0x7088]
lea rdx, [rbp + 0x70c8]
mov rcx, 0xffffffff80000001
call fcn.140015479
nop
lea rcx, [rbp + 0x70c8]
call fcn.140015b04
nop
lea rcx, [rbp + 0x7088]
call fcn.140015b04
nop
lea rdx, str.CheckFileExtensions
lea rcx, [rbp + 0x7108]
call fcn.14001541f
nop
lea rdx, str..DEFAULTSoftwareMicrosoftWindowsCurrentVersionExplorerAdvanced
lea rcx, [rbp + 0x7148]
call fcn.14001541f
nop
mov r9d, 1
lea r8, [rbp + 0x7108]
lea rdx, [rbp + 0x7148]
mov rcx, 0xffffffff80000003
call fcn.140015479
nop
lea rcx, [rbp + 0x7148]
call fcn.140015b04
nop
lea rcx, [rbp + 0x7108]
call fcn.140015b04
nop
lea rdx, str.AutoCheckSelect
lea rcx, [rbp + 0x7188]
call fcn.14001541f
nop
lea rdx, str.SoftwareMicrosoftWindowsCurrentVersionExplorerAdvanced
lea rcx, [rbp + 0x71c8]
call fcn.14001541f
nop
mov r9d, 1
lea r8, [rbp + 0x7188]
lea rdx, [rbp + 0x71c8]
mov rcx, 0xffffffff80000001
call fcn.140015479
nop
lea rcx, [rbp + 0x71c8]
call fcn.140015b04
nop
lea rcx, [rbp + 0x7188]
call fcn.140015b04
nop
lea rdx, str.AutoCheckSelect
lea rcx, [rbp + 0x7208]
call fcn.14001541f
nop
lea rdx, str..DEFAULTSoftwareMicrosoftWindowsCurrentVersionExplorerAdvanced
lea rcx, [rbp + 0x7248]
call fcn.14001541f
nop
mov r9d, 1
lea r8, [rbp + 0x7208]
lea rdx, [rbp + 0x7248]
mov rcx, 0xffffffff80000003
call fcn.140015479
nop
lea rcx, [rbp + 0x7248]
call fcn.140015b04
nop
lea rcx, [rbp + 0x7208]
call fcn.140015b04
nop
lea rdx, str.Showing_all_folders_and_libraries_in_File_Explorer_n
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140015695
nop
lea rdx, str.NavPaneShowAllFolders
lea rcx, [rbp + 0x7288]
call fcn.14001541f
nop
lea rdx, str.SoftwareMicrosoftWindowsCurrentVersionExplorerAdvanced
lea rcx, [rbp + 0x72c8]
call fcn.14001541f
nop
mov r9d, 1
lea r8, [rbp + 0x7288]
lea rdx, [rbp + 0x72c8]
mov rcx, 0xffffffff80000001
call fcn.140015479
nop
lea rcx, [rbp + 0x72c8]
call fcn.140015b04
nop
lea rcx, [rbp + 0x7288]
call fcn.140015b04
nop
lea rdx, str.NavPaneShowAllFolders
lea rcx, [rbp + 0x7308]
call fcn.14001541f
nop
lea rdx, str..DEFAULTSoftwareMicrosoftWindowsCurrentVersionExplorerAdvanced
lea rcx, [rbp + 0x7348]
call fcn.14001541f
nop
mov r9d, 1
lea r8, [rbp + 0x7308]
lea rdx, [rbp + 0x7348]
mov rcx, 0xffffffff80000003
call fcn.140015479
nop
lea rcx, [rbp + 0x7348]
call fcn.140015b04
nop
lea rcx, [rbp + 0x7308]
call fcn.140015b04
nop
lea rdx, str.NavPaneShowLibraries
lea rcx, [rbp + 0x7388]
call fcn.14001541f
nop
lea rdx, str.SoftwareMicrosoftWindowsCurrentVersionExplorerAdvanced
lea rcx, [rbp + 0x73c8]
call fcn.14001541f
nop
mov r9d, 1
lea r8, [rbp + 0x7388]
lea rdx, [rbp + 0x73c8]
mov rcx, 0xffffffff80000001
call fcn.140015479
nop
lea rcx, [rbp + 0x73c8]
call fcn.140015b04
nop
lea rcx, [rbp + 0x7388]
call fcn.140015b04
nop
lea rdx, str.NavPaneShowLibraries
lea rcx, [rbp + 0x7408]
call fcn.14001541f
nop
lea rdx, str..DEFAULTSoftwareMicrosoftWindowsCurrentVersionExplorerAdvanced
lea rcx, [rbp + 0x7448]
call fcn.14001541f
nop
mov r9d, 1
lea r8, [rbp + 0x7408]
lea rdx, [rbp + 0x7448]
mov rcx, 0xffffffff80000003
call fcn.140015479
nop
lea rcx, [rbp + 0x7448]
call fcn.140015b04
nop
lea rcx, [rbp + 0x7408]
call fcn.140015b04
nop
lea rdx, str.Setting_indexing_options_to_index_the_entire_C:_drive_n
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140015695
nop
lea rdx, [0x14004d5c8]
lea rcx, [rbp + 0x7488]
call fcn.14001541f
nop
lea rdx, [0x14004cee4]
lea rcx, [rbp + 0x74c8]
call fcn.14001541f
nop
lea rdx, str.SOFTWAREMicrosoftWindows_SearchCrawlScopeManagerWindowsSystemIndexDefaultRules
lea rcx, [rbp + 0x7508]
call fcn.14001541f
nop
lea r9, [rbp + 0x7488]
lea r8, [rbp + 0x74c8]
lea rdx, [rbp + 0x7508]
mov rcx, 0xffffffff80000002
call fcn.140015889
nop
lea rcx, [rbp + 0x7508]
call fcn.140015b04
nop
lea rcx, [rbp + 0x74c8]
call fcn.140015b04
nop
lea rcx, [rbp + 0x7488]
call fcn.140015b04
nop
lea rdx, [0x140049800]
lea rcx, [rbp + 0x7548]
call fcn.14001541f
nop
lea rdx, str.SOFTWAREMicrosoftWindows_SearchCrawlScopeManagerWindowsSystemIndexDefaultRules
lea rcx, [rbp + 0x7588]
call fcn.14001541f
nop
mov r9d, 1
lea r8, [rbp + 0x7548]
lea rdx, [rbp + 0x7588]
mov rcx, 0xffffffff80000002
call fcn.140015479
nop
lea rcx, [rbp + 0x7588]
call fcn.140015b04
nop
lea rcx, [rbp + 0x7548]
call fcn.140015b04
nop
lea rdx, str.Tweaking_Desktop_Icons_n
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140015695
nop
lea rdx, str.HideIcons
lea rcx, [rbp + 0x75c8]
call fcn.14001541f
nop
lea rdx, str.SoftwareMicrosoftWindowsCurrentVersionExplorerAdvanced
lea rcx, [rbp + 0x7608]
call fcn.14001541f
nop
xor r9d, r9d
lea r8, [rbp + 0x75c8]
lea rdx, [rbp + 0x7608]
mov rcx, 0xffffffff80000001
call fcn.140015479
nop
lea rcx, [rbp + 0x7608]
call fcn.140015b04
nop
lea rcx, [rbp + 0x75c8]
call fcn.140015b04
nop
lea rdx, str.HideIcons
lea rcx, [rbp + 0x7648]
call fcn.14001541f
nop
lea rdx, str..DEFAULTSoftwareMicrosoftWindowsCurrentVersionExplorerAdvanced
lea rcx, [rbp + 0x7688]
call fcn.14001541f
nop
xor r9d, r9d
lea r8, [rbp + 0x7648]
lea rdx, [rbp + 0x7688]
mov rcx, 0xffffffff80000003
call fcn.140015479
nop
lea rcx, [rbp + 0x7688]
call fcn.140015b04
nop
lea rcx, [rbp + 0x7648]
call fcn.140015b04
nop
lea rdx, [0x140049800]
lea rcx, [rbp + 0x76c8]
call fcn.14001541f
nop
lea rdx, str.AutoArrange
lea rcx, [rbp + 0x7708]
call fcn.14001541f
nop
lea rdx, str.SoftwareMicrosoftWindowsShellBags1Desktop
lea rcx, [rbp + 0x7748]
call fcn.14001541f
nop
lea r9, [rbp + 0x76c8]
lea r8, [rbp + 0x7708]
lea rdx, [rbp + 0x7748]
mov rcx, 0xffffffff80000001
call fcn.140015889
nop
lea rcx, [rbp + 0x7748]
call fcn.140015b04
nop
lea rcx, [rbp + 0x7708]
call fcn.140015b04
nop
lea rcx, [rbp + 0x76c8]
call fcn.140015b04
nop
lea rdx, [0x140049800]
lea rcx, [rbp + 0x7788]
call fcn.14001541f
nop
lea rdx, str.AutoArrange
lea rcx, [rbp + 0x77c8]
call fcn.14001541f
nop
lea rdx, str..DEFAULTSoftwareMicrosoftWindowsShellBags1Desktop
lea rcx, [rbp + 0x7808]
call fcn.14001541f
nop
lea r9, [rbp + 0x7788]
lea r8, [rbp + 0x77c8]
lea rdx, [rbp + 0x7808]
mov rcx, 0xffffffff80000003
call fcn.140015889
nop
lea rcx, [rbp + 0x7808]
call fcn.140015b04
nop
lea rcx, [rbp + 0x77c8]
call fcn.140015b04
nop
lea rcx, [rbp + 0x7788]
call fcn.140015b04
nop
lea rdx, str.FFLAGS
lea rcx, [rbp + 0x7848]
call fcn.14001541f
nop
lea rdx, str.SOFTWAREMicrosoftWindowsShellBags1Desktop
lea rcx, [rbp + 0x7888]
call fcn.14001541f
nop
mov r9d, 0x40200225
lea r8, [rbp + 0x7848]
lea rdx, [rbp + 0x7888]
mov rcx, 0xffffffff80000001
call fcn.140015479
nop
lea rcx, [rbp + 0x7888]
call fcn.140015b04
nop
lea rcx, [rbp + 0x7848]
call fcn.140015b04
nop
lea rdx, str.FFLAGS
lea rcx, [rbp + 0x78c8]
call fcn.14001541f
nop
lea rdx, str..DEFAULTSOFTWAREMicrosoftWindowsShellBags1Desktop
lea rcx, [rbp + 0x7908]
call fcn.14001541f
nop
mov r9d, 0x40200225
lea r8, [rbp + 0x78c8]
lea rdx, [rbp + 0x7908]
mov rcx, 0xffffffff80000003
call fcn.140015479
nop
lea rcx, [rbp + 0x7908]
call fcn.140015b04
nop
lea rcx, [rbp + 0x78c8]
call fcn.140015b04
nop
lea rdx, str.20D04FE0_3AEA_1069_A2D8_08002B30309D
lea rcx, [rbp + 0x7948]
call fcn.14001541f
nop
lea rdx, str.SoftwareMicrosoftWindowsCurrentVersionExplorerHideDesktopIconsNewStartPanel
lea rcx, [rbp + 0x7988]
call fcn.14001541f
nop
xor r9d, r9d
lea r8, [rbp + 0x7948]
lea rdx, [rbp + 0x7988]
mov rcx, 0xffffffff80000001
call fcn.140015479
nop
lea rcx, [rbp + 0x7988]
call fcn.140015b04
nop
lea rcx, [rbp + 0x7948]
call fcn.140015b04
nop
lea rdx, str.20D04FE0_3AEA_1069_A2D8_08002B30309D
lea rcx, [rbp + 0x79c8]
call fcn.14001541f
nop
lea rdx, str..DEFAULTSoftwareMicrosoftWindowsCurrentVersionExplorerHideDesktopIconsNewStartPanel
lea rcx, [rbp + 0x7a08]
call fcn.14001541f
nop
xor r9d, r9d
lea r8, [rbp + 0x79c8]
lea rdx, [rbp + 0x7a08]
mov rcx, 0xffffffff80000003
call fcn.140015479
nop
lea rcx, [rbp + 0x7a08]
call fcn.140015b04
nop
lea rcx, [rbp + 0x79c8]
call fcn.140015b04
nop
lea rdx, str.20D04FE0_3AEA_1069_A2D8_08002B30309D
lea rcx, [rbp + 0x7a48]
call fcn.14001541f
nop
lea rdx, str.SoftwareMicrosoftWindowsCurrentVersionExplorerHideDesktopIconsClassicStartMenu
lea rcx, [rbp + 0x7a88]
call fcn.14001541f
nop
xor r9d, r9d
lea r8, [rbp + 0x7a48]
lea rdx, [rbp + 0x7a88]
mov rcx, 0xffffffff80000001
call fcn.140015479
nop
lea rcx, [rbp + 0x7a88]
call fcn.140015b04
nop
lea rcx, [rbp + 0x7a48]
call fcn.140015b04
nop
lea rdx, str.20D04FE0_3AEA_1069_A2D8_08002B30309D
lea rcx, [rbp + 0x7ac8]
call fcn.14001541f
nop
lea rdx, str..DEFAULTSoftwareMicrosoftWindowsCurrentVersionExplorerHideDesktopIconsClassicStartMenu
lea rcx, [rbp + 0x7b08]
call fcn.14001541f
nop
xor r9d, r9d
lea r8, [rbp + 0x7ac8]
lea rdx, [rbp + 0x7b08]
mov rcx, 0xffffffff80000003
call fcn.140015479
nop
lea rcx, [rbp + 0x7b08]
call fcn.140015b04
nop
lea rcx, [rbp + 0x7ac8]
call fcn.140015b04
nop
lea rdx, str.59031a47_3f72_44a7_89c5_5595fe6b30ee
lea rcx, [rbp + 0x7b48]
call fcn.14001541f
nop
lea rdx, str.SoftwareMicrosoftWindowsCurrentVersionExplorerHideDesktopIconsNewStartPanel
lea rcx, [rbp + 0x7b88]
call fcn.14001541f
nop
xor r9d, r9d
lea r8, [rbp + 0x7b48]
lea rdx, [rbp + 0x7b88]
mov rcx, 0xffffffff80000001
call fcn.140015479
nop
lea rcx, [rbp + 0x7b88]
call fcn.140015b04
nop
lea rcx, [rbp + 0x7b48]
call fcn.140015b04
nop
lea rdx, str.59031a47_3f72_44a7_89c5_5595fe6b30ee
lea rcx, [rbp + 0x7bc8]
call fcn.14001541f
nop
lea rdx, str..DEFAULTSoftwareMicrosoftWindowsCurrentVersionExplorerHideDesktopIconsNewStartPanel
lea rcx, [rbp + 0x7c08]
call fcn.14001541f
nop
xor r9d, r9d
lea r8, [rbp + 0x7bc8]
lea rdx, [rbp + 0x7c08]
mov rcx, 0xffffffff80000003
call fcn.140015479
nop
lea rcx, [rbp + 0x7c08]
call fcn.140015b04
nop
lea rcx, [rbp + 0x7bc8]
call fcn.140015b04
nop
lea rdx, str.59031a47_3f72_44a7_89c5_5595fe6b30ee
lea rcx, [rbp + 0x7c48]
call fcn.14001541f
nop
lea rdx, str.SoftwareMicrosoftWindowsCurrentVersionExplorerHideDesktopIconsClassicStartMenu
lea rcx, [rbp + 0x7c88]
call fcn.14001541f
nop
xor r9d, r9d
lea r8, [rbp + 0x7c48]
lea rdx, [rbp + 0x7c88]
mov rcx, 0xffffffff80000001
call fcn.140015479
nop
lea rcx, [rbp + 0x7c88]
call fcn.140015b04
nop
lea rcx, [rbp + 0x7c48]
call fcn.140015b04
nop
lea rdx, str.59031a47_3f72_44a7_89c5_5595fe6b30ee
lea rcx, [rbp + 0x7cc8]
call fcn.14001541f
nop
lea rdx, str..DEFAULTSoftwareMicrosoftWindowsCurrentVersionExplorerHideDesktopIconsClassicStartMenu
lea rcx, [rbp + 0x7d08]
call fcn.14001541f
nop
xor r9d, r9d
lea r8, [rbp + 0x7cc8]
lea rdx, [rbp + 0x7d08]
mov rcx, 0xffffffff80000003
call fcn.140015479
nop
lea rcx, [rbp + 0x7d08]
call fcn.140015b04
nop
lea rcx, [rbp + 0x7cc8]
call fcn.140015b04
nop
lea rdx, str.F02C1A0D_BE21_4350_88B0_7367FC96EF3C
lea rcx, [rbp + 0x7d48]
call fcn.14001541f
nop
lea rdx, str.SoftwareMicrosoftWindowsCurrentVersionExplorerHideDesktopIconsNewStartPanel
lea rcx, [rbp + 0x7d88]
call fcn.14001541f
nop
xor r9d, r9d
lea r8, [rbp + 0x7d48]
lea rdx, [rbp + 0x7d88]
mov rcx, 0xffffffff80000001
call fcn.140015479
nop
lea rcx, [rbp + 0x7d88]
call fcn.140015b04
nop
lea rcx, [rbp + 0x7d48]
call fcn.140015b04
nop
lea rdx, str.F02C1A0D_BE21_4350_88B0_7367FC96EF3C
lea rcx, [rbp + 0x7dc8]
call fcn.14001541f
nop
lea rdx, str..DEFAULTSoftwareMicrosoftWindowsCurrentVersionExplorerHideDesktopIconsNewStartPanel
lea rcx, [rbp + 0x7e08]
call fcn.14001541f
nop
xor r9d, r9d
lea r8, [rbp + 0x7dc8]
lea rdx, [rbp + 0x7e08]
mov rcx, 0xffffffff80000003
call fcn.140015479
nop
lea rcx, [rbp + 0x7e08]
call fcn.140015b04
nop
lea rcx, [rbp + 0x7dc8]
call fcn.140015b04
nop
lea rdx, str.F02C1A0D_BE21_4350_88B0_7367FC96EF3C
lea rcx, [rbp + 0x7e48]
call fcn.14001541f
nop
lea rdx, str.SoftwareMicrosoftWindowsCurrentVersionExplorerHideDesktopIconsClassicStartMenu
lea rcx, [rbp + 0x7e88]
call fcn.14001541f
nop
xor r9d, r9d
lea r8, [rbp + 0x7e48]
lea rdx, [rbp + 0x7e88]
mov rcx, 0xffffffff80000001
call fcn.140015479
nop
lea rcx, [rbp + 0x7e88]
call fcn.140015b04
nop
lea rcx, [rbp + 0x7e48]
call fcn.140015b04
nop
lea rdx, str.F02C1A0D_BE21_4350_88B0_7367FC96EF3C
lea rcx, [rbp + 0x7ec8]
call fcn.14001541f
nop
lea rdx, str..DEFAULTSoftwareMicrosoftWindowsCurrentVersionExplorerHideDesktopIconsClassicStartMenu
lea rcx, [rbp + 0x7f08]
call fcn.14001541f
nop
xor r9d, r9d
lea r8, [rbp + 0x7ec8]
lea rdx, [rbp + 0x7f08]
mov rcx, 0xffffffff80000003
call fcn.140015479
nop
lea rcx, [rbp + 0x7f08]
call fcn.140015b04
nop
lea rcx, [rbp + 0x7ec8]
call fcn.140015b04
nop
lea rdx, str.5399E694_6CE5_4D6C_8FCE_1D8870FDCBA0
lea rcx, [rbp + 0x7f48]
call fcn.14001541f
nop
lea rdx, str.SoftwareMicrosoftWindowsCurrentVersionExplorerHideDesktopIconsNewStartPanel
lea rcx, [rbp + 0x7f88]
call fcn.14001541f
nop
xor r9d, r9d
lea r8, [rbp + 0x7f48]
lea rdx, [rbp + 0x7f88]
mov rcx, 0xffffffff80000001
call fcn.140015479
nop
lea rcx, [rbp + 0x7f88]
call fcn.140015b04
nop
lea rcx, [rbp + 0x7f48]
call fcn.140015b04
nop
lea rdx, str.5399E694_6CE5_4D6C_8FCE_1D8870FDCBA0
lea rcx, [rbp + 0x7fc8]
call fcn.14001541f
nop
lea rdx, str..DEFAULTSoftwareMicrosoftWindowsCurrentVersionExplorerHideDesktopIconsNewStartPanel
lea rcx, [rbp + 0x8008]
call fcn.14001541f
nop
xor r9d, r9d
lea r8, [rbp + 0x7fc8]
lea rdx, [rbp + 0x8008]
mov rcx, 0xffffffff80000003
call fcn.140015479
nop
lea rcx, [rbp + 0x8008]
call fcn.140015b04
nop
lea rcx, [rbp + 0x7fc8]
call fcn.140015b04
nop
lea rdx, str.5399E694_6CE5_4D6C_8FCE_1D8870FDCBA0
lea rcx, [rbp + 0x8048]
call fcn.14001541f
nop
lea rdx, str.SoftwareMicrosoftWindowsCurrentVersionExplorerHideDesktopIconsClassicStartMenu
lea rcx, [rbp + 0x8088]
call fcn.14001541f
nop
xor r9d, r9d
lea r8, [rbp + 0x8048]
lea rdx, [rbp + 0x8088]
mov rcx, 0xffffffff80000001
call fcn.140015479
nop
lea rcx, [rbp + 0x8088]
call fcn.140015b04
nop
lea rcx, [rbp + 0x8048]
call fcn.140015b04
nop
lea rdx, str.5399E694_6CE5_4D6C_8FCE_1D8870FDCBA0
lea rcx, [rbp + 0x80c8]
call fcn.14001541f
nop
lea rdx, str..DEFAULTSoftwareMicrosoftWindowsCurrentVersionExplorerHideDesktopIconsClassicStartMenu
lea rcx, [rbp + 0x8108]
call fcn.14001541f
nop
xor r9d, r9d
lea r8, [rbp + 0x80c8]
lea rdx, [rbp + 0x8108]
mov rcx, 0xffffffff80000003
call fcn.140015479
nop
lea rcx, [rbp + 0x8108]
call fcn.140015b04
nop
lea rcx, [rbp + 0x80c8]
call fcn.140015b04
nop
lea rdx, str.Setting_dark_mode_n
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140015695
nop
lea rdx, str.AppsUseLightTheme
lea rcx, [rbp + 0x8148]
call fcn.14001541f
nop
lea rdx, str.SOFTWAREMicrosoftWindowsCurrentVersionThemesPersonalize
lea rcx, [rbp + 0x8188]
call fcn.14001541f
nop
xor r9d, r9d
lea r8, [rbp + 0x8148]
lea rdx, [rbp + 0x8188]
mov rcx, 0xffffffff80000001
call fcn.140015479
nop
lea rcx, [rbp + 0x8188]
call fcn.140015b04
nop
lea rcx, [rbp + 0x8148]
call fcn.140015b04
nop
lea rdx, str.AppsUseLightTheme
lea rcx, [rbp + 0x81c8]
call fcn.14001541f
nop
lea rdx, str..DEFAULTSOFTWAREMicrosoftWindowsCurrentVersionThemesPersonalize
lea rcx, [rbp + 0x8208]
call fcn.14001541f
nop
xor r9d, r9d
lea r8, [rbp + 0x81c8]
lea rdx, [rbp + 0x8208]
mov rcx, 0xffffffff80000003
call fcn.140015479
nop
lea rcx, [rbp + 0x8208]
call fcn.140015b04
nop
lea rcx, [rbp + 0x81c8]
call fcn.140015b04
nop
lea rdx, str.SystemUsesLightTheme
lea rcx, [rbp + 0x8248]
call fcn.14001541f
nop
lea rdx, str.SOFTWAREMicrosoftWindowsCurrentVersionThemesPersonalize
lea rcx, [rbp + 0x8288]
call fcn.14001541f
nop
xor r9d, r9d
lea r8, [rbp + 0x8248]
lea rdx, [rbp + 0x8288]
mov rcx, 0xffffffff80000001
call fcn.140015479
nop
lea rcx, [rbp + 0x8288]
call fcn.140015b04
nop
lea rcx, [rbp + 0x8248]
call fcn.140015b04
nop
lea rdx, str.SystemUsesLightTheme
lea rcx, [rbp + 0x82c8]
call fcn.14001541f
nop
lea rdx, str..DEFAULTSOFTWAREMicrosoftWindowsCurrentVersionThemesPersonalize
lea rcx, [rbp + 0x8308]
call fcn.14001541f
nop
xor r9d, r9d
lea r8, [rbp + 0x82c8]
lea rdx, [rbp + 0x8308]
mov rcx, 0xffffffff80000003
call fcn.140015479
nop
lea rcx, [rbp + 0x8308]
call fcn.140015b04
nop
lea rcx, [rbp + 0x82c8]
call fcn.140015b04
nop
lea rdx, str.Enabling_end_task_in_taskbar_n
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140015695
nop
lea rdx, str.TaskbarEndTask
lea rcx, [rbp + 0x8348]
call fcn.14001541f
nop
lea rdx, str.SoftwareMicrosoftWindowsCurrentVersionExplorerAdvancedTaskbarDeveloperSettings
lea rcx, [rbp + 0x8388]
call fcn.14001541f
nop
mov r9d, 1
lea r8, [rbp + 0x8348]
lea rdx, [rbp + 0x8388]
mov rcx, 0xffffffff80000001
call fcn.140015479
nop
lea rcx, [rbp + 0x8388]
call fcn.140015b04
nop
lea rcx, [rbp + 0x8348]
call fcn.140015b04
nop
lea rdx, str.TaskbarEndTask
lea rcx, [rbp + 0x83c8]
call fcn.14001541f
nop
lea rdx, str..DEFAULTSoftwareMicrosoftWindowsCurrentVersionExplorerAdvancedTaskbarDeveloperSettings
lea rcx, [rbp + 0x8408]
call fcn.14001541f
nop
mov r9d, 1
lea r8, [rbp + 0x83c8]
lea rdx, [rbp + 0x8408]
mov rcx, 0xffffffff80000003
call fcn.140015479
nop
lea rcx, [rbp + 0x8408]
call fcn.140015b04
nop
lea rcx, [rbp + 0x83c8]
call fcn.140015b04
nop
lea rdx, str.Disabling_news_n
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140015695
nop
lea rdx, str.AllowNewsAndInterests
lea rcx, [rbp + 0x8448]
call fcn.14001541f
nop
lea rdx, str.SOFTWAREPoliciesMicrosoftDsh
lea rcx, [rbp + 0x8488]
call fcn.14001541f
nop
xor r9d, r9d
lea r8, [rbp + 0x8448]
lea rdx, [rbp + 0x8488]
mov rcx, 0xffffffff80000002
call fcn.140015479
nop
lea rcx, [rbp + 0x8488]
call fcn.140015b04
nop
lea rcx, [rbp + 0x8448]
call fcn.140015b04
nop
lea rdx, str.Disabling_Windows_Copilot_n
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140015695
nop
lea rdx, str.TurnOffWindowsCopilot
lea rcx, [rbp + 0x84c8]
call fcn.14001541f
nop
lea rdx, str.SoftwarePoliciesMicrosoftWindowsWindowsCopilot
lea rcx, [rbp + 0x8508]
call fcn.14001541f
nop
mov r9d, 1
lea r8, [rbp + 0x84c8]
lea rdx, [rbp + 0x8508]
mov rcx, 0xffffffff80000001
call fcn.140015479
nop
lea rcx, [rbp + 0x8508]
call fcn.140015b04
nop
lea rcx, [rbp + 0x84c8]
call fcn.140015b04
nop
lea rdx, str.ShowCopilotButton
lea rcx, [rbp + 0x8548]
call fcn.14001541f
nop
lea rdx, str.SoftwareMicrosoftWindowsCurrentVersionExplorerAdvanced
lea rcx, [rbp + 0x8588]
call fcn.14001541f
nop
xor r9d, r9d
lea r8, [rbp + 0x8548]
lea rdx, [rbp + 0x8588]
mov rcx, 0xffffffff80000001
call fcn.140015479
nop
lea rcx, [rbp + 0x8588]
call fcn.140015b04
nop
lea rcx, [rbp + 0x8548]
call fcn.140015b04
nop
lea rdx, str.TurnOffWindowsCopilot
lea rcx, [rbp + 0x85c8]
call fcn.14001541f
nop
lea rdx, str..DEFAULTSoftwarePoliciesMicrosoftWindowsWindowsCopilot
lea rcx, [rbp + 0x8608]
call fcn.14001541f
nop
mov r9d, 1
lea r8, [rbp + 0x85c8]
lea rdx, [rbp + 0x8608]
mov rcx, 0xffffffff80000003
call fcn.140015479
nop
lea rcx, [rbp + 0x8608]
call fcn.140015b04
nop
lea rcx, [rbp + 0x85c8]
call fcn.140015b04
nop
lea rdx, str.ShowCopilotButton
lea rcx, [rbp + 0x8648]
call fcn.14001541f
nop
lea rdx, str..DEFAULTSoftwareMicrosoftWindowsCurrentVersionExplorerAdvanced
lea rcx, [rbp + 0x8688]
call fcn.14001541f
nop
xor r9d, r9d
lea r8, [rbp + 0x8648]
lea rdx, [rbp + 0x8688]
mov rcx, 0xffffffff80000003
call fcn.140015479
nop
lea rcx, [rbp + 0x8688]
call fcn.140015b04
nop
lea rcx, [rbp + 0x8648]
call fcn.140015b04
nop
lea rdx, str.Setting_taskbar_to_left_as_in_Windows_10_n
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140015695
nop
lea rdx, str.TaskbarAl
lea rcx, [rbp + 0x86c8]
call fcn.14001541f
nop
lea rdx, str.SoftwareMicrosoftWindowsCurrentVersionExplorerAdvanced
lea rcx, [rbp + 0x8708]
call fcn.14001541f
nop
xor r9d, r9d
lea r8, [rbp + 0x86c8]
lea rdx, [rbp + 0x8708]
mov rcx, 0xffffffff80000001
call fcn.140015479
nop
lea rcx, [rbp + 0x8708]
call fcn.140015b04
nop
lea rcx, [rbp + 0x86c8]
call fcn.140015b04
nop
lea rdx, str.TaskbarAl
lea rcx, [rbp + 0x8748]
call fcn.14001541f
nop
lea rdx, str..DEFAULTSoftwareMicrosoftWindowsCurrentVersionExplorerAdvanced
lea rcx, [rbp + 0x8788]
call fcn.14001541f
nop
xor r9d, r9d
lea r8, [rbp + 0x8748]
lea rdx, [rbp + 0x8788]
mov rcx, 0xffffffff80000003
call fcn.140015479
nop
lea rcx, [rbp + 0x8788]
call fcn.140015b04
nop
lea rcx, [rbp + 0x8748]
call fcn.140015b04
nop
lea rdx, str.Setting_old_right_click_menus_as_default_in_Windows_10_n
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140015695
nop
lea rdx, [0x1400468cc]
lea rcx, [rbp + 0x87c8]
call fcn.14001541f
nop
lea rdx, str.SoftwareClassesCLSID86ca1aa0_34aa_4e8b_a509_50c905bae2a2InprocServer32
lea rcx, [rbp + 0x8808]
call fcn.14001541f
nop
xor r9d, r9d
lea r8, [rbp + 0x87c8]
lea rdx, [rbp + 0x8808]
mov rcx, 0xffffffff80000001
call fcn.140015479
nop
lea rcx, [rbp + 0x8808]
call fcn.140015b04
nop
lea rcx, [rbp + 0x87c8]
call fcn.140015b04
nop
lea rdx, [0x1400468cc]
lea rcx, [rbp + 0x8848]
call fcn.14001541f
nop
lea rdx, str..DEFAULTSoftwareClassesCLSID86ca1aa0_34aa_4e8b_a509_50c905bae2a2InprocServer32
lea rcx, [rbp + 0x8888]
call fcn.14001541f
nop
xor r9d, r9d
lea r8, [rbp + 0x8848]
lea rdx, [rbp + 0x8888]
mov rcx, 0xffffffff80000003
call fcn.140015479
nop
lea rcx, [rbp + 0x8888]
call fcn.140015b04
nop
lea rcx, [rbp + 0x8848]
call fcn.140015b04
nop
lea rdx, str.Disabling_Windows_Consumer_Features_n
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140015695
nop
lea rdx, str.value
lea rcx, [rbp + 0x88c8]
call fcn.14001541f
nop
lea rdx, str.SOFTWAREMicrosoftPolicyManagerdefaultExperienceAllowWindowsConsumerFeatures
lea rcx, [rbp + 0x8908]
call fcn.14001541f
nop
xor r9d, r9d
lea r8, [rbp + 0x88c8]
lea rdx, [rbp + 0x8908]
mov rcx, 0xffffffff80000002
call fcn.140015479
nop
lea rcx, [rbp + 0x8908]
call fcn.140015b04
nop
lea rcx, [rbp + 0x88c8]
call fcn.140015b04
nop
lea rdx, str.DisableWindowsTips
lea rcx, [rbp + 0x8948]
call fcn.14001541f
nop
lea rdx, str.SOFTWAREPoliciesMicrosoftWindowsCloudContent
lea rcx, [rbp + 0x8988]
call fcn.14001541f
nop
mov r9d, 1
lea r8, [rbp + 0x8948]
lea rdx, [rbp + 0x8988]
mov rcx, 0xffffffff80000002
call fcn.140015479
nop
lea rcx, [rbp + 0x8988]
call fcn.140015b04
nop
lea rcx, [rbp + 0x8948]
call fcn.140015b04
nop
lea rdx, str.DoNotShowFeedbackNotifications
lea rcx, [rbp + 0x89c8]
call fcn.14001541f
nop
lea rdx, str.SOFTWAREPoliciesMicrosoftWindowsDataCollection
lea rcx, [rbp + 0x8a08]
call fcn.14001541f
nop
mov r9d, 1
lea r8, [rbp + 0x89c8]
lea rdx, [rbp + 0x8a08]
mov rcx, 0xffffffff80000002
call fcn.140015479
nop
lea rcx, [rbp + 0x8a08]
call fcn.140015b04
nop
lea rcx, [rbp + 0x89c8]
call fcn.140015b04
nop
lea rdx, str.DisableWindowsConsumerFeatures
lea rcx, [rbp + 0x8a48]
call fcn.14001541f
nop
lea rdx, str.SOFTWAREPoliciesMicrosoftWindowsCloudContent
lea rcx, [rbp + 0x8a88]
call fcn.14001541f
nop
mov r9d, 1
lea r8, [rbp + 0x8a48]
lea rdx, [rbp + 0x8a88]
mov rcx, 0xffffffff80000002
call fcn.140015479
nop
lea rcx, [rbp + 0x8a88]
call fcn.140015b04
nop
lea rcx, [rbp + 0x8a48]
call fcn.140015b04
nop
lea rdx, str.SubscribedContent_338388Enabled
lea rcx, [rbp + 0x8ac8]
call fcn.14001541f
nop
lea rdx, str.SOFTWAREMicrosoftWindowsCurrentVersionContentDeliveryManager
lea rcx, [rbp + 0x8b08]
call fcn.14001541f
nop
xor r9d, r9d
lea r8, [rbp + 0x8ac8]
lea rdx, [rbp + 0x8b08]
mov rcx, 0xffffffff80000001
call fcn.140015479
nop
lea rcx, [rbp + 0x8b08]
call fcn.140015b04
nop
lea rcx, [rbp + 0x8ac8]
call fcn.140015b04
nop
lea rdx, str.SubscribedContent_338389Enabled
lea rcx, [rbp + 0x8b48]
call fcn.14001541f
nop
lea rdx, str.SOFTWAREMicrosoftWindowsCurrentVersionContentDeliveryManager
lea rcx, [rbp + 0x8b88]
call fcn.14001541f
nop
xor r9d, r9d
lea r8, [rbp + 0x8b48]
lea rdx, [rbp + 0x8b88]
mov rcx, 0xffffffff80000001
call fcn.140015479
nop
lea rcx, [rbp + 0x8b88]
call fcn.140015b04
nop
lea rcx, [rbp + 0x8b48]
call fcn.140015b04
nop
lea rdx, str.SubscribedContent_353694Enabled
lea rcx, [rbp + 0x8bc8]
call fcn.14001541f
nop
lea rdx, str.SOFTWAREMicrosoftWindowsCurrentVersionContentDeliveryManager
lea rcx, [rbp + 0x8c08]
call fcn.14001541f
nop
xor r9d, r9d
lea r8, [rbp + 0x8bc8]
lea rdx, [rbp + 0x8c08]
mov rcx, 0xffffffff80000001
call fcn.140015479
nop
lea rcx, [rbp + 0x8c08]
call fcn.140015b04
nop
lea rcx, [rbp + 0x8bc8]
call fcn.140015b04
nop
lea rdx, str.SubscribedContent_353696Enabled
lea rcx, [rbp + 0x8c48]
call fcn.14001541f
nop
lea rdx, str.SOFTWAREMicrosoftWindowsCurrentVersionContentDeliveryManager
lea rcx, [rbp + 0x8c88]
call fcn.14001541f
nop
xor r9d, r9d
lea r8, [rbp + 0x8c48]
lea rdx, [rbp + 0x8c88]
mov rcx, 0xffffffff80000001
call fcn.140015479
nop
lea rcx, [rbp + 0x8c88]
call fcn.140015b04
nop
lea rcx, [rbp + 0x8c48]
call fcn.140015b04
nop
lea rdx, str.SubscribedContent_338388Enabled
lea rcx, [rbp + 0x8cc8]
call fcn.14001541f
nop
lea rdx, str..DEFAULTSoftwareMicrosoftWindowsCurrentVersionContentDeliveryManager
lea rcx, [rbp + 0x8d08]
call fcn.14001541f
nop
xor r9d, r9d
lea r8, [rbp + 0x8cc8]
lea rdx, [rbp + 0x8d08]
mov rcx, 0xffffffff80000003
call fcn.140015479
nop
lea rcx, [rbp + 0x8d08]
call fcn.140015b04
nop
lea rcx, [rbp + 0x8cc8]
call fcn.140015b04
nop
lea rdx, str.SubscribedContent_338389Enabled
lea rcx, [rbp + 0x8d48]
call fcn.14001541f
nop
lea rdx, str..DEFAULTSoftwareMicrosoftWindowsCurrentVersionContentDeliveryManager
lea rcx, [rbp + 0x8d88]
call fcn.14001541f
nop
xor r9d, r9d
lea r8, [rbp + 0x8d48]
lea rdx, [rbp + 0x8d88]
mov rcx, 0xffffffff80000003
call fcn.140015479
nop
lea rcx, [rbp + 0x8d88]
call fcn.140015b04
nop
lea rcx, [rbp + 0x8d48]
call fcn.140015b04
nop
lea rdx, str.SubscribedContent_353694Enabled
lea rcx, [rbp + 0x8dc8]
call fcn.14001541f
nop
lea rdx, str..DEFAULTSoftwareMicrosoftWindowsCurrentVersionContentDeliveryManager
lea rcx, [rbp + 0x8e08]
call fcn.14001541f
nop
xor r9d, r9d
lea r8, [rbp + 0x8dc8]
lea rdx, [rbp + 0x8e08]
mov rcx, 0xffffffff80000003
call fcn.140015479
nop
lea rcx, [rbp + 0x8e08]
call fcn.140015b04
nop
lea rcx, [rbp + 0x8dc8]
call fcn.140015b04
nop
lea rdx, str.SubscribedContent_353696Enabled
lea rcx, [rbp + 0x8e48]
call fcn.14001541f
nop
lea rdx, str..DEFAULTSoftwareMicrosoftWindowsCurrentVersionContentDeliveryManager
lea rcx, [rbp + 0x8e88]
call fcn.14001541f
nop
xor r9d, r9d
lea r8, [rbp + 0x8e48]
lea rdx, [rbp + 0x8e88]
mov rcx, 0xffffffff80000003
call fcn.140015479
nop
lea rcx, [rbp + 0x8e88]
call fcn.140015b04
nop
lea rcx, [rbp + 0x8e48]
call fcn.140015b04
nop
lea rdx, str.Disabling_telemetry_n
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140015695
nop
lea rdx, str.AllowTelemetry
lea rcx, [rbp + 0x8ec8]
call fcn.14001541f
nop
lea rdx, str.SOFTWAREPoliciesMicrosoftWindowsDataCollection
lea rcx, [rbp + 0x8f08]
call fcn.14001541f
nop
xor r9d, r9d
lea r8, [rbp + 0x8ec8]
lea rdx, [rbp + 0x8f08]
mov rcx, 0xffffffff80000002
call fcn.140015479
nop
lea rcx, [rbp + 0x8f08]
call fcn.140015b04
nop
lea rcx, [rbp + 0x8ec8]
call fcn.140015b04
nop
lea rdx, str.Disabling_advertising_ID_n
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140015695
nop
lea rdx, str.DisabledByGroupPolicy
lea rcx, [rbp + 0x8f48]
call fcn.14001541f
nop
lea rdx, str.SOFTWAREPoliciesMicrosoftWindowsAdvertisingInfo
lea rcx, [rbp + 0x8f88]
call fcn.14001541f
nop
mov r9d, 1
lea r8, [rbp + 0x8f48]
lea rdx, [rbp + 0x8f88]
mov rcx, 0xffffffff80000002
call fcn.140015479
nop
lea rcx, [rbp + 0x8f88]
call fcn.140015b04
nop
lea rcx, [rbp + 0x8f48]
call fcn.140015b04
nop
lea rdx, str.Disabling_scheduled_tasks_related_to_customer_experience_and_feedback_n
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140015695
nop
lea rdx, str.schtasks__Change__TN__MicrosoftWindowsAutochkProxy___Disable_nul
lea rcx, [rbp + 0x8fc8]
call fcn.14001541f
nop
lea rcx, [rbp + 0x8fc8]
call fcn.140015307
nop
lea rcx, [rbp + 0x8fc8]
call fcn.140015b04
nop
lea rdx, str.schtasks__Change__TN__MicrosoftWindowsCustomer_Experience_Improvement_ProgramConsolidator___Disable___nul
lea rcx, [rbp + 0x9008]
call fcn.14001541f
nop
lea rcx, [rbp + 0x9008]
call fcn.140015307
nop
lea rcx, [rbp + 0x9008]
call fcn.140015b04
nop
lea rdx, str.schtasks__Change__TN__MicrosoftWindowsCustomer_Experience_Improvement_ProgramUsbCeip___Disable___nul
lea rcx, [rbp + 0x9048]
call fcn.14001541f
nop
lea rcx, [rbp + 0x9048]
call fcn.140015307
nop
lea rcx, [rbp + 0x9048]
call fcn.140015b04
nop
lea rdx, str.schtasks__Change__TN__MicrosoftWindowsDiskDiagnosticMicrosoft_Windows_DiskDiagnosticDataCollector___Disable___nul
lea rcx, [rbp + 0x9088]
call fcn.14001541f
nop
lea rcx, [rbp + 0x9088]
call fcn.140015307
nop
lea rcx, [rbp + 0x9088]
call fcn.140015b04
nop
lea rdx, str.schtasks__Change__TN__MicrosoftWindowsFeedbackSiufDmClient___Disable___nul
lea rcx, [rbp + 0x90c8]
call fcn.14001541f
nop
lea rcx, [rbp + 0x90c8]
call fcn.140015307
nop
lea rcx, [rbp + 0x90c8]
call fcn.140015b04
nop
lea rdx, str.schtasks__Change__TN__MicrosoftWindowsFeedbackSiufDmClientOnScenarioDownload___Disable___nul
lea rcx, [rbp + 0x9108]
call fcn.14001541f
nop
lea rcx, [rbp + 0x9108]
call fcn.140015307
nop
lea rcx, [rbp + 0x9108]
call fcn.140015b04
nop
lea rdx, str.schtasks__Change__TN__MicrosoftWindowsWindows_Error_ReportingQueueReporting___Disable___nul
lea rcx, [rbp + 0x9148]
call fcn.14001541f
nop
lea rcx, [rbp + 0x9148]
call fcn.140015307
nop
lea rcx, [rbp + 0x9148]
call fcn.140015b04
nop
lea rdx, str.Stopping_and_disabling_Diagnostic_Tracking_Service_n
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140015695
nop
lea rdx, str.DiagTrack
lea rcx, [rbp + 0x9188]
call fcn.14001541f
nop
lea rcx, [rbp + 0x9188]
call fcn.140015dca
nop
lea rcx, [rbp + 0x9188]
call fcn.140015b04
nop
lea rdx, str.Making_Windows_use_UTC_time_to_fix_Linux_dual_boot_n
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140015695
nop
lea rdx, str.value
lea rcx, [rbp + 0x91c8]
call fcn.14001541f
nop
lea rdx, str.SYSTEMCurrentControlSetControlTimeZoneInformation
lea rcx, [rbp + 0x9208]
call fcn.14001541f
nop
xor r9d, r9d
lea r8, [rbp + 0x91c8]
lea rdx, [rbp + 0x9208]
mov rcx, 0xffffffff80000002
call fcn.140015479
nop
lea rcx, [rbp + 0x9208]
call fcn.140015b04
nop
lea rcx, [rbp + 0x91c8]
call fcn.140015b04
nop
lea rdx, str.Finished_optimization._n
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140015695
nop
lea rcx, [rbp - 0x30]
lea rdx, [0x140046470]
call fcn.140015a9b
mov rcx, qword [rbp + 0x9238]
xor rcx, rbp
call fcn.140015631
lea rsp, [rbp + 0x9248]
pop rdi
pop rbp
ret