Function at 0x140001da0
Capabilities:
Execute command

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0xe8]
sub rsp, 0x1c0
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
mov rax, qword [section..data]
xor rax, rsp
mov qword [rbp + 0x90], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x20], xmm0
mov ecx, 0x30
call fcn.1400042a0
mov rdx, rax
mov qword [rsp + 0x20], rax
movdqa xmm0, xmmword [0x140006a40]
movdqu xmmword [rsp + 0x30], xmm0
movups xmm0, xmmword [str.FortniteClient_Win64_Shipping_EAC.exe]
movups xmmword [rax], xmm0
movups xmm1, xmmword [0x1400063e0]
movups xmmword [rax + 0x10], xmm1
mov ecx, dword [0x1400063f0]
mov dword [rax + 0x20], ecx
movzx eax, byte [0x1400063f4]
mov byte [rdx + 0x24], al
mov byte [rdx + 0x25], 0
lea rcx, [rsp + 0x20]
call fcn.1400011c0
nop
mov rdx, qword [rsp + 0x38]
cmp rdx, 0xf
jbe 0x140001e7b
inc rdx
mov rcx, qword [rsp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140001e76
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400027b1
call fcn.1400042dc
xorps xmm0, xmm0
movups xmmword [rbp - 0x58], xmm0
mov ecx, 0x30
call fcn.1400042a0
mov qword [rbp - 0x58], rax
movdqa xmm0, xmmword [0x140006a20]
movdqu xmmword [rbp - 0x48], xmm0
movups xmm0, xmmword [str.FortniteClient_Win64_Shipping.exe]
movups xmmword [rax], xmm0
movups xmm1, xmmword [0x140006408]
movups xmmword [rax + 0x10], xmm1
movzx ecx, byte [0x140006418]
mov byte [rax + 0x20], cl
mov byte [rax + 0x21], 0
lea rcx, [rbp - 0x58]
call fcn.1400011c0
nop
mov rdx, qword [rbp - 0x40]
cmp rdx, 0xf
jbe 0x140001f05
inc rdx
mov rcx, qword [rbp - 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140001f00
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400027b1
call fcn.1400042dc
xorps xmm0, xmm0
movups xmmword [rbp - 0x58], xmm0
mov ecx, 0x30
call fcn.1400042a0
mov qword [rbp - 0x58], rax
movdqa xmm0, xmmword [0x140006a30]
movdqu xmmword [rbp - 0x48], xmm0
movups xmm0, xmmword [str.FortniteClient_Win64_Shipping_BE.exe]
movups xmmword [rax], xmm0
movups xmm1, xmmword [0x140006430]
movups xmmword [rax + 0x10], xmm1
mov ecx, dword [0x140006440]
mov dword [rax + 0x20], ecx
mov byte [rax + 0x24], 0
lea rcx, [rbp - 0x58]
call fcn.1400011c0
nop
mov rdx, qword [rbp - 0x40]
cmp rdx, 0xf
jbe 0x140001f8e
inc rdx
mov rcx, qword [rbp - 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140001f89
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400027b1
call fcn.1400042dc
xorps xmm0, xmm0
movups xmmword [rsp + 0x20], xmm0
mov ecx, 0x20
call fcn.1400042a0
mov qword [rsp + 0x20], rax
movdqa xmm0, xmmword [0x1400069f0]
movdqu xmmword [rsp + 0x30], xmm0
movups xmm0, xmmword [str.FortniteLauncher.exe]
movups xmmword [rax], xmm0
mov ecx, dword [0x140006458]
mov dword [rax + 0x10], ecx
mov byte [rax + 0x14], 0
lea rcx, [rsp + 0x20]
call fcn.1400011c0
nop
mov rdx, qword [rsp + 0x38]
cmp rdx, 0xf
jbe 0x140002012
inc rdx
mov rcx, qword [rsp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000200d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400027b1
call fcn.1400042dc
xorps xmm0, xmm0
movups xmmword [rsp + 0x20], xmm0
mov ecx, 0x20
call fcn.1400042a0
mov qword [rsp + 0x20], rax
movdqa xmm0, xmmword [0x140006a00]
movdqu xmmword [rsp + 0x30], xmm0
movups xmm0, xmmword [str.EpicGamesLauncher.exe]
movups xmmword [rax], xmm0
mov ecx, dword [0x140006470]
mov dword [rax + 0x10], ecx
movzx ecx, byte [0x140006474]
mov byte [rax + 0x14], cl
mov byte [rax + 0x15], 0
lea rcx, [rsp + 0x20]
call fcn.1400011c0
nop
mov rdx, qword [rsp + 0x38]
cmp rdx, 0xf
jbe 0x1400020a0
inc rdx
mov rcx, qword [rsp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000209b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400027b1
call fcn.1400042dc
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
movdqa xmm1, xmmword [0x140006980]
movdqu xmmword [rsp + 0x50], xmm1
movsd xmm0, qword [str.BIOSVendor]
movsd qword [rsp + 0x40], xmm0
movzx eax, word [0x140006480]
mov word [rsp + 0x48], ax
mov byte [rsp + 0x4a], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x20], xmm0
mov ecx, 0x40
call fcn.1400042a0
mov rcx, rax
mov qword [rsp + 0x20], rax
movdqa xmm0, xmmword [0x140006a50]
movdqu xmmword [rsp + 0x30], xmm0
movups xmm0, xmmword [str.HKEY_LOCAL_MACHINEHardwareDescriptionSystemBIOS]
movups xmmword [rax], xmm0
movups xmm1, xmmword [0x140006498]
movups xmmword [rax + 0x10], xmm1
movups xmm0, xmmword [0x1400064a8]
movups xmmword [rax + 0x20], xmm0
movzx eax, word [0x1400064b8]
mov word [rcx + 0x30], ax
movzx eax, byte [0x1400064ba]
mov byte [rcx + 0x32], al
mov byte [rcx + 0x33], 0
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x20]
call fcn.140001370
nop
mov rdx, qword [rsp + 0x38]
cmp rdx, 0xf
jbe 0x140002187
inc rdx
mov rcx, qword [rsp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002181
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140002181
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400042dc
nop
mov rdx, qword [rsp + 0x58]
cmp rdx, 0xf
jbe 0x1400021c4
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400021bf
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400027b1
call fcn.1400042dc
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
movdqa xmm1, xmmword [0x1400069b0]
movdqu xmmword [rsp + 0x50], xmm1
movsd xmm0, qword [str.BIOSReleaseDate]
movsd qword [rsp + 0x40], xmm0
mov eax, dword [0x1400064c8]
mov dword [rsp + 0x48], eax
movzx eax, word [0x1400064cc]
mov word [rsp + 0x4c], ax
movzx eax, byte [0x1400064ce]
mov byte [rsp + 0x4e], al
mov byte [rsp + 0x4f], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x20], xmm0
mov ecx, 0x40
call fcn.1400042a0
mov rcx, rax
mov qword [rsp + 0x20], rax
movdqa xmm0, xmmword [0x140006a50]
movdqu xmmword [rsp + 0x30], xmm0
movups xmm0, xmmword [str.HKEY_LOCAL_MACHINEHardwareDescriptionSystemBIOS]
movups xmmword [rax], xmm0
movups xmm1, xmmword [0x140006498]
movups xmmword [rax + 0x10], xmm1
movups xmm0, xmmword [0x1400064a8]
movups xmmword [rax + 0x20], xmm0
movzx eax, word [0x1400064b8]
mov word [rcx + 0x30], ax
movzx eax, byte [0x1400064ba]
mov byte [rcx + 0x32], al
mov byte [rcx + 0x33], 0
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x20]
call fcn.140001370
nop
mov rdx, qword [rsp + 0x38]
cmp rdx, 0xf
jbe 0x1400022c0
inc rdx
mov rcx, qword [rsp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400022ba
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400022ba
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400042dc
nop
mov rdx, qword [rsp + 0x58]
cmp rdx, 0xf
jbe 0x1400022fd
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400022f8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400027b1
call fcn.1400042dc
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov ecx, 0x20
call fcn.1400042a0
mov qword [rsp + 0x40], rax
movdqa xmm0, xmmword [0x1400069d0]
movdqu xmmword [rsp + 0x50], xmm0
movups xmm0, xmmword [str.SystemManufacturer]
movups xmmword [rax], xmm0
movzx ecx, word [0x1400064e0]
mov word [rax + 0x10], cx
mov byte [rax + 0x12], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x20], xmm0
mov ecx, 0x40
call fcn.1400042a0
mov rcx, rax
mov qword [rsp + 0x20], rax
movdqa xmm0, xmmword [0x140006a50]
movdqu xmmword [rsp + 0x30], xmm0
movups xmm0, xmmword [str.HKEY_LOCAL_MACHINEHardwareDescriptionSystemBIOS]
movups xmmword [rax], xmm0
movups xmm1, xmmword [0x140006498]
movups xmmword [rax + 0x10], xmm1
movups xmm0, xmmword [0x1400064a8]
movups xmmword [rax + 0x20], xmm0
movzx eax, word [0x1400064b8]
mov word [rcx + 0x30], ax
movzx eax, byte [0x1400064ba]
mov byte [rcx + 0x32], al
mov byte [rcx + 0x33], 0
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x20]
call fcn.140001370
nop
mov rdx, qword [rsp + 0x38]
cmp rdx, 0xf
jbe 0x1400023ed
inc rdx
mov rcx, qword [rsp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400023e7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400023e7
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400042dc
nop
mov rdx, qword [rsp + 0x58]
cmp rdx, 0xf
jbe 0x14000242a
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002425
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400027b1
call fcn.1400042dc
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov ecx, 0x20
call fcn.1400042a0
mov qword [rsp + 0x40], rax
movdqa xmm0, xmmword [0x1400069c0]
movdqu xmmword [rsp + 0x50], xmm0
movups xmm0, xmmword [str.SystemProductName]
movups xmmword [rax], xmm0
movzx ecx, byte [0x1400064f8]
mov byte [rax + 0x10], cl
mov byte [rax + 0x11], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x20], xmm0
mov ecx, 0x40
call fcn.1400042a0
mov rcx, rax
mov qword [rsp + 0x20], rax
movdqa xmm0, xmmword [0x140006a50]
movdqu xmmword [rsp + 0x30], xmm0
movups xmm0, xmmword [str.HKEY_LOCAL_MACHINEHardwareDescriptionSystemBIOS]
movups xmmword [rax], xmm0
movups xmm1, xmmword [0x140006498]
movups xmmword [rax + 0x10], xmm1
movups xmm0, xmmword [0x1400064a8]
movups xmmword [rax + 0x20], xmm0
movzx eax, word [0x1400064b8]
mov word [rcx + 0x30], ax
movzx eax, byte [0x1400064ba]
mov byte [rcx + 0x32], al
mov byte [rcx + 0x33], 0
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x20]
call fcn.140001370
nop
mov rdx, qword [rsp + 0x38]
cmp rdx, 0xf
jbe 0x140002519
inc rdx
mov rcx, qword [rsp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002513
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140002513
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400042dc
nop
mov rdx, qword [rsp + 0x58]
cmp rdx, 0xf
jbe 0x140002556
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002551
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400027b1
call fcn.1400042dc
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov ecx, 0x20
call fcn.1400042a0
mov qword [rsp + 0x40], rax
movdqa xmm0, xmmword [0x1400069e0]
movdqu xmmword [rsp + 0x50], xmm0
movups xmm0, xmmword [str.ProcessorNameString]
movups xmmword [rax], xmm0
movzx ecx, word [0x140006510]
mov word [rax + 0x10], cx
movzx ecx, byte [0x140006512]
mov byte [rax + 0x12], cl
mov byte [rax + 0x13], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x20], xmm0
mov ecx, 0x50
call fcn.1400042a0
mov rcx, rax
mov qword [rsp + 0x20], rax
movdqa xmm0, xmmword [0x140006a70]
movdqu xmmword [rsp + 0x30], xmm0
movaps xmm0, xmmword [str.HKEY_LOCAL_MACHINEHardwareDescriptionSystemCentralProcessor0]
movups xmmword [rax], xmm0
movaps xmm1, xmmword [0x140006530]
movups xmmword [rax + 0x10], xmm1
movaps xmm0, xmmword [0x140006540]
movups xmmword [rax + 0x20], xmm0
movaps xmm1, xmmword [0x140006550]
movups xmmword [rax + 0x30], xmm1
movzx eax, byte [0x140006560]
mov byte [rcx + 0x40], al
mov byte [rcx + 0x41], 0
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x20]
call fcn.140001370
nop
mov rdx, qword [rsp + 0x38]
cmp rdx, 0xf
jbe 0x140002650
inc rdx
mov rcx, qword [rsp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000264a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000264a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400042dc
nop
mov rdx, qword [rsp + 0x58]
cmp rdx, 0xf
jbe 0x14000268d
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002688
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400027b1
call fcn.1400042dc
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov ecx, 0x20
call fcn.1400042a0
mov qword [rsp + 0x40], rax
movdqa xmm0, xmmword [0x1400069d0]
movdqu xmmword [rsp + 0x50], xmm0
movups xmm0, xmmword [str.SystemStartOptions]
movups xmmword [rax], xmm0
movzx ecx, word [0x140006578]
mov word [rax + 0x10], cx
mov byte [rax + 0x12], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x20], xmm0
mov ecx, 0x40
call fcn.1400042a0
mov rcx, rax
mov qword [rsp + 0x20], rax
movdqa xmm0, xmmword [0x140006a50]
movdqu xmmword [rsp + 0x30], xmm0
movups xmm0, xmmword [str.HKEY_LOCAL_MACHINESystemCurrentControlSetControl]
movups xmmword [rax], xmm0
movups xmm1, xmmword [0x140006590]
movups xmmword [rax + 0x10], xmm1
movups xmm0, xmmword [0x1400065a0]
movups xmmword [rax + 0x20], xmm0
movzx eax, word [0x1400065b0]
mov word [rcx + 0x30], ax
movzx eax, byte [0x1400065b2]
mov byte [rcx + 0x32], al
mov byte [rcx + 0x33], 0
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x20]
call fcn.140001370
nop
mov rdx, qword [rsp + 0x38]
cmp rdx, 0xf
jbe 0x14000277d
inc rdx
mov rcx, qword [rsp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002777
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140002777
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400042dc
nop
mov rdx, qword [rsp + 0x58]
cmp rdx, 0xf
jbe 0x1400027bd
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400027b8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400027b8
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400042dc
lea rcx, str.reg_delete__HKEY_CURRENT_USERSoftwareEpic_Games___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov edx, eax
lea rcx, [rbp + 0x70]
call fcn.140003ad0
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x20], xmm0
movdqa xmm1, xmmword [0x140006990]
movdqu xmmword [rsp + 0x30], xmm1
movsd xmm0, qword [str.ComputerName]
movsd qword [rsp + 0x20], xmm0
mov eax, dword [0x140006600]
mov dword [rsp + 0x28], eax
mov byte [rsp + 0x2c], 0
xorps xmm0, xmm0
movups xmmword [rbp - 0x78], xmm0
mov ecx, 0x40
call fcn.1400042a0
mov rcx, rax
mov qword [rbp - 0x78], rax
movdqa xmm0, xmmword [0x140006a60]
movdqu xmmword [rbp - 0x68], xmm0
movaps xmm0, xmmword [str.HKLMSYSTEMCurrentControlSetControlComputerNameComputerName]
movups xmmword [rax], xmm0
movaps xmm1, xmmword [0x140006620]
movups xmmword [rax + 0x10], xmm1
movaps xmm0, xmmword [0x140006630]
movups xmmword [rax + 0x20], xmm0
movsd xmm0, qword [0x140006640]
movsd qword [rax + 0x30], xmm0
mov eax, dword [0x140006648]
mov dword [rcx + 0x38], eax
movzx eax, word [0x14000664c]
mov word [rcx + 0x3c], ax
movzx eax, byte [0x14000664e]
mov byte [rcx + 0x3e], al
mov byte [rcx + 0x3f], 0
movabs rcx, 0x7fffffffffffffff
mov rax, rcx
mov r15, qword [rbp + 0x80]
sub rax, r15
cmp rax, 4
jb 0x14000389d
lea rax, [rbp + 0x70]
mov r14, qword [rbp + 0x70]
mov r13, qword [rbp + 0x88]
cmp r13, 0xf
cmova rax, r14
mov qword [rsp + 0x60], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x50], xmm1
lea rsi, [r15 + 4]
mov r12d, 0xf
mov ebx, r12d
lea rdi, [rsp + 0x40]
movabs rdx, 0x8000000000000000
mov r8d, 0x16
cmp rsi, rbx
jbe 0x140002967
mov rbx, rsi
or rbx, r12
cmp rbx, rcx
jbe 0x140002929
mov rbx, rcx
lea rax, [rdx + 0x27]
mov rcx, rax
call fcn.1400042a0
test rax, rax
je 0x1400029d2
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x14000295d
cmp rbx, r8
cmovb rbx, r8
lea rcx, [rbx + 1]
test rcx, rcx
jne 0x14000293d
xor edi, edi
jmp 0x140002962
cmp rcx, 0x1000
jb 0x140002955
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14000388b
jmp 0x14000290a
call fcn.1400042a0
mov rdi, rax
mov rax, qword [rsp + 0x60]
mov qword [rsp + 0x40], rdi
mov qword [rsp + 0x50], rsi
mov qword [rsp + 0x58], rbx
mov dword [rdi], 0x63726f4e
lea rcx, [rdi + 4]
mov r8, r15
mov rdx, rax
call sub.VCRUNTIME140.dll_memcpy
mov byte [rdi + rsi], 0
lea r8, [rsp + 0x40]
lea rdx, [rsp + 0x20]
lea rcx, [rbp - 0x78]
call fcn.1400016d0
nop
mov rdx, qword [rsp + 0x58]
cmp rdx, 0xf
jbe 0x1400029df
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400029d9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400029d9
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400042dc
nop
mov rdx, qword [rbp - 0x60]
cmp rdx, 0xf
jbe 0x140002a1e
inc rdx
mov rcx, qword [rbp - 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002a18
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140002a18
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400042dc
nop
mov rdx, qword [rsp + 0x38]
cmp rdx, 0xf
jbe 0x140002a5b
inc rdx
mov rcx, qword [rsp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002a56
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140002fae
call fcn.1400042dc
xorps xmm0, xmm0
movups xmmword [rsp + 0x20], xmm0
movdqa xmm1, xmmword [0x140006990]
movdqu xmmword [rsp + 0x30], xmm1
movsd xmm0, qword [str.ComputerName]
movsd qword [rsp + 0x20], xmm0
mov eax, dword [0x140006600]
mov dword [rsp + 0x28], eax
mov byte [rsp + 0x2c], 0
xorps xmm0, xmm0
movups xmmword [rbp - 0x78], xmm0
mov ecx, 0x50
call fcn.1400042a0
mov rcx, rax
mov qword [rbp - 0x78], rax
movdqa xmm0, xmmword [0x140006a80]
movdqu xmmword [rbp - 0x68], xmm0
movaps xmm0, xmmword [str.HKLMSYSTEMCurrentControlSetControlComputerNameActiveComputerName]
movups xmmword [rax], xmm0
movaps xmm1, xmmword [0x140006660]
movups xmmword [rax + 0x10], xmm1
movaps xmm0, xmmword [0x140006670]
movups xmmword [rax + 0x20], xmm0
movaps xmm1, xmmword [0x140006680]
movups xmmword [rax + 0x30], xmm1
mov eax, dword [0x140006690]
mov dword [rcx + 0x40], eax
movzx eax, byte [0x140006694]
mov byte [rcx + 0x44], al
mov byte [rcx + 0x45], 0
lea rax, [rbp + 0x70]
cmp r13, 0xf
cmova rax, r14
mov qword [rsp + 0x60], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x50], xmm1
mov rbx, r12
lea rdi, [rsp + 0x40]
cmp rsi, rbx
jbe 0x140002bb2
mov rbx, rsi
or rbx, 0xf
movabs rcx, 0x7fffffffffffffff
cmp rbx, rcx
jbe 0x140002b6e
mov rbx, rcx
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.1400042a0
test rax, rax
je 0x140002c1d
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x140002ba8
cmp rbx, 0x16
mov ecx, 0x16
cmovb rbx, rcx
lea rcx, [rbx + 1]
test rcx, rcx
jne 0x140002b88
xor edi, edi
jmp 0x140002bad
cmp rcx, 0x1000
jb 0x140002ba0
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140003891
jmp 0x140002b4f
call fcn.1400042a0
mov rdi, rax
mov rax, qword [rsp + 0x60]
mov qword [rsp + 0x40], rdi
mov qword [rsp + 0x50], rsi
mov qword [rsp + 0x58], rbx
mov dword [rdi], 0x63726f4e
lea rcx, [rdi + 4]
mov r8, r15
mov rdx, rax
call sub.VCRUNTIME140.dll_memcpy
mov byte [rdi + rsi], 0
lea r8, [rsp + 0x40]
lea rdx, [rsp + 0x20]
lea rcx, [rbp - 0x78]
call fcn.1400016d0
nop
mov rdx, qword [rsp + 0x58]
cmp rdx, 0xf
jbe 0x140002c2a
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002c24
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140002c24
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400042dc
nop
mov rdx, qword [rbp - 0x60]
cmp rdx, 0xf
jbe 0x140002c69
inc rdx
mov rcx, qword [rbp - 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002c63
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140002c63
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400042dc
nop
mov rdx, qword [rsp + 0x38]
cmp rdx, 0xf
jbe 0x140002ca6
inc rdx
mov rcx, qword [rsp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002ca1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140002fae
call fcn.1400042dc
xorps xmm0, xmm0
movups xmmword [rsp + 0x20], xmm0
movdqa xmm1, xmmword [0x140006980]
movdqu xmmword [rsp + 0x30], xmm1
movsd xmm0, qword [str.LastConfig]
movsd qword [rsp + 0x20], xmm0
movzx eax, word [0x1400066a8]
mov word [rsp + 0x28], ax
mov byte [rsp + 0x2a], 0
xorps xmm0, xmm0
movups xmmword [rbp - 0x78], xmm0
mov ecx, 0x20
call fcn.1400042a0
mov qword [rbp - 0x78], rax
movdqa xmm0, xmmword [0x140006a10]
movdqu xmmword [rbp - 0x68], xmm0
movups xmm0, xmmword [str.HKLMSYSTEMHardwareConfig]
movups xmmword [rax], xmm0
movsd xmm0, qword [0x1400066c0]
movsd qword [rax + 0x10], xmm0
movzx ecx, word [0x1400066c8]
mov word [rax + 0x18], cx
mov byte [rax + 0x1a], 0
lea rax, [rbp + 0x70]
cmp r13, 0xf
cmova rax, r14
mov qword [rsp + 0x60], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x50], xmm1
lea rsi, [r15 + 3]
mov rbx, r12
lea rdi, [rsp + 0x40]
cmp rsi, rbx
jbe 0x140002de4
mov rbx, rsi
or rbx, 0xf
movabs rcx, 0x7fffffffffffffff
cmp rbx, rcx
jbe 0x140002da0
mov rbx, rcx
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.1400042a0
test rax, rax
je 0x140002ed3
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x140002dda
cmp rbx, 0x16
mov ecx, 0x16
cmovb rbx, rcx
lea rcx, [rbx + 1]
test rcx, rcx
jne 0x140002dba
xor edi, edi
jmp 0x140002ddf
cmp rcx, 0x1000
jb 0x140002dd2
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140003897
jmp 0x140002d81
call fcn.1400042a0
mov rdi, rax
mov rax, qword [rsp + 0x60]
mov qword [rsp + 0x40], rdi
mov qword [rsp + 0x50], rsi
mov qword [rsp + 0x58], rbx
mov ecx, dword [0x14000669c]
mov word [rdi], cx
movzx ecx, byte [0x14000669e]
mov byte [rdi + 2], cl
lea rcx, [rdi + 3]
mov r8, r15
mov rdx, rax
call sub.VCRUNTIME140.dll_memcpy
mov byte [rdi + rsi], 0
mov r8d, 1
lea rdx, [0x140006698]
lea rcx, [rsp + 0x40]
call fcn.140003a30
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x68], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x78], xmm1
mov qword [rax + 0x10], 0
mov qword [rax + 0x18], r12
mov byte [rax], 0
lea r8, [rsp + 0x68]
lea rdx, [rsp + 0x20]
lea rcx, [rbp - 0x78]
call fcn.1400016d0
nop
mov rdx, qword [rbp - 0x80]
cmp rdx, 0xf
jbe 0x140002e9f
inc rdx
mov rcx, qword [rsp + 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002e99
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140002e99
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400042dc
nop
mov rdx, qword [rsp + 0x58]
cmp rdx, 0xf
jbe 0x140002edf
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002eda
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140002eda
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400042dc
movdqa xmm0, xmmword [0x140006970]
movdqu xmmword [rsp + 0x50], xmm0
mov byte [rsp + 0x40], 0
mov rdx, qword [rbp - 0x60]
cmp rdx, 0xf
jbe 0x140002f31
inc rdx
mov rcx, qword [rbp - 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002f2b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140002f2b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400042dc
nop
mov rdx, qword [rsp + 0x38]
cmp rdx, 0xf
jbe 0x140002f71
inc rdx
mov rcx, qword [rsp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002f6c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140002f6c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400042dc
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov edx, eax
lea rcx, [rsp + 0x68]
call fcn.140003ad0
cmp r13, 0xf
jbe 0x140002fbd
lea rdx, [r13 + 1]
mov rax, r14
cmp rdx, 0x1000
jb 0x140002fb5
add rdx, 0x27
mov r14, qword [r14 - 8]
sub rax, r14
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140002fb5
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, r14
call fcn.1400042dc
movups xmm7, xmmword [rsp + 0x68]
movups xmmword [rbp + 0x70], xmm7
movups xmm6, xmmword [rsp + 0x78]
movups xmmword [rbp + 0x80], xmm6
xorps xmm0, xmm0
movups xmmword [rsp + 0x20], xmm0
movdqa xmm1, xmmword [0x1400069a0]
movdqu xmmword [rsp + 0x30], xmm1
movsd xmm0, qword [str.HwProfileGuid]
movsd qword [rsp + 0x20], xmm0
mov eax, dword [0x1400066e8]
mov dword [rsp + 0x28], eax
movzx eax, byte [0x1400066ec]
mov byte [rsp + 0x2c], al
mov byte [rsp + 0x2d], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x68], xmm0
mov ecx, 0x50
call fcn.1400042a0
mov rcx, rax
mov qword [rsp + 0x68], rax
movdqa xmm0, xmmword [0x140006a90]
movdqu xmmword [rsp + 0x78], xmm0
movaps xmm0, xmmword [str.HKLMSYSTEMCurrentControlSetControlIDConfigDBHardware_Profiles0001]
movups xmmword [rax], xmm0
movaps xmm1, xmmword [0x140006700]
movups xmmword [rax + 0x10], xmm1
movaps xmm0, xmmword [0x140006710]
movups xmmword [rax + 0x20], xmm0
movaps xmm1, xmmword [0x140006720]
movups xmmword [rax + 0x30], xmm1
mov eax, dword [0x140006730]
mov dword [rcx + 0x40], eax
movzx eax, word [0x140006734]
mov word [rcx + 0x44], ax
movzx eax, byte [0x140006736]
mov byte [rcx + 0x46], al
mov byte [rcx + 0x47], 0
movabs r8, 0x7fffffffffffffff
mov rax, r8
movq r14, xmm6
sub rax, r14
cmp rax, 8
jb 0x140003885
lea rsi, [rbp + 0x70]
movq rcx, xmm7
psrldq xmm6, 8
movq rax, xmm6
cmp rax, 0xf
cmova rsi, rcx
lea rcx, [rsp + 0x40]
call fcn.140004020
lea rdi, [r14 + 8]
lea rbx, [rsp + 0x40]
cmp rdi, 0xf
jbe 0x1400030ff
mov rdx, r12
mov rcx, rdi
call fcn.1400041d0
mov qword [rsp + 0x60], rax
lea rdx, [rsp + 0x60]
call fcn.140004200
mov rbx, rax
mov qword [rsp + 0x40], rax
mov r12, qword [rsp + 0x60]
mov qword [rsp + 0x50], rdi
mov qword [rsp + 0x58], r12
mov r8d, 8
lea rdx, str.fefefee
mov rcx, rbx
call fcn.140003ab0
lea rcx, [rbx + 8]
mov r8, r14
mov rdx, rsi
call fcn.140003ab0
mov byte [rbx + rdi], 0
lea r8, [0x1400066cc]
lea rdx, [rsp + 0x40]
lea rcx, [rbp - 0x58]
call fcn.140003f40
nop
lea r8, [rbp + 0x70]
mov rdx, rax
lea rcx, [rbp + 0x50]
call fcn.140003fb0
nop
lea r8, [0x1400066cc]
mov rdx, rax
lea rcx, [rbp + 0x30]
call fcn.140003f40
nop
lea r8, [rbp + 0x70]
mov rdx, rax
lea rcx, [rbp + 0x10]
call fcn.140003fb0
nop
lea r8, [0x1400066cc]
mov rdx, rax
lea rcx, [rbp - 0x10]
call fcn.140003f40
nop
lea r8, [rbp + 0x70]
mov rdx, rax
lea rcx, [rbp - 0x30]
call fcn.140003fb0
nop
lea r8, [0x140006698]
mov rdx, rax
lea rcx, [rbp - 0x78]
call fcn.140003f40
nop
mov r8, rax
lea rdx, [rsp + 0x20]
lea rcx, [rsp + 0x68]
call fcn.1400016d0
nop
lea rcx, [rbp - 0x78]
call fcn.1400038b0
nop
lea rcx, [rbp - 0x30]
call fcn.1400038b0
nop
lea rcx, [rbp - 0x10]
call fcn.1400038b0
nop
lea rcx, [rbp + 0x10]
call fcn.1400038b0
nop
lea rcx, [rbp + 0x30]
call fcn.1400038b0
nop
lea rcx, [rbp + 0x50]
call fcn.1400038b0
nop
lea rcx, [rbp - 0x58]
call fcn.1400038b0
nop
lea rcx, [rsp + 0x40]
call fcn.1400038b0
nop
lea rcx, [rsp + 0x68]
call fcn.1400038b0
nop
lea rcx, [rsp + 0x20]
call fcn.1400038b0
lea rdx, str.BuildGUID
lea rcx, [rbp - 0x78]
call fcn.140003910
nop
lea rdx, str.HKLMSOFTWAREMicrosoftWindows_NTCurrentVersion
lea rcx, [rsp + 0x68]
call fcn.140003910
nop
lea r8, [rbp + 0x70]
lea rdx, str.Norc
lea rcx, [rbp - 0x58]
call fcn.140003cb0
nop
mov r8, rax
lea rdx, [rbp - 0x78]
lea rcx, [rsp + 0x68]
call fcn.1400016d0
nop
lea rcx, [rbp - 0x58]
call fcn.1400038b0
nop
lea rcx, [rsp + 0x68]
call fcn.1400038b0
nop
lea rcx, [rbp - 0x78]
call fcn.1400038b0
lea rdx, str.RegisteredOwner
lea rcx, [rbp - 0x78]
call fcn.140003910
nop
lea rdx, str.HKLMSOFTWAREMicrosoftWindows_NTCurrentVersion
lea rcx, [rsp + 0x68]
call fcn.140003910
nop
lea r8, [rbp + 0x70]
lea rdx, str.Norc
lea rcx, [rbp - 0x58]
call fcn.140003cb0
nop
mov r8, rax
lea rdx, [rbp - 0x78]
lea rcx, [rsp + 0x68]
call fcn.1400016d0
nop
lea rcx, [rbp - 0x58]
call fcn.1400038b0
nop
lea rcx, [rsp + 0x68]
call fcn.1400038b0
nop
lea rcx, [rbp - 0x78]
call fcn.1400038b0
lea rdx, str.GUID
lea rcx, [rbp - 0x78]
call fcn.140003910
nop
lea rdx, str.HKLMSOFTWAREMicrosoftCryptography
lea rcx, [rsp + 0x68]
call fcn.140003910
nop
lea r8, [rbp + 0x70]
lea rdx, str.Norc
lea rcx, [rsp + 0x20]
call fcn.140003cb0
nop
lea r8, [0x1400066cc]
mov rdx, rax
lea rcx, [rbp - 0x30]
call fcn.140003f40
nop
lea r8, [rbp + 0x70]
mov rdx, rax
lea rcx, [rbp - 0x10]
call fcn.140003fb0
nop
lea r8, [0x1400066cc]
mov rdx, rax
lea rcx, [rbp + 0x10]
call fcn.140003f40
nop
lea r8, [rbp + 0x70]
mov rdx, rax
lea rcx, [rbp + 0x30]
call fcn.140003fb0
nop
lea r8, [0x1400066cc]
mov rdx, rax
lea rcx, [rbp + 0x50]
call fcn.140003f40
nop
lea r8, [rbp + 0x70]
mov rdx, rax
lea rcx, [rbp - 0x58]
call fcn.140003fb0
nop
mov r8, rax
lea rdx, [rbp - 0x78]
lea rcx, [rsp + 0x68]
call fcn.1400016d0
nop
lea rcx, [rbp - 0x58]
call fcn.1400038b0
nop
lea rcx, [rbp + 0x50]
call fcn.1400038b0
nop
lea rcx, [rbp + 0x30]
call fcn.1400038b0
nop
lea rcx, [rbp + 0x10]
call fcn.1400038b0
nop
lea rcx, [rbp - 0x10]
call fcn.1400038b0
nop
lea rcx, [rbp - 0x30]
call fcn.1400038b0
nop
lea rcx, [rsp + 0x20]
call fcn.1400038b0
nop
lea rcx, [rsp + 0x68]
call fcn.1400038b0
nop
lea rcx, [rbp - 0x78]
call fcn.1400038b0
lea rdx, str.MachineGuid
lea rcx, [rbp - 0x78]
call fcn.140003910
nop
lea rdx, str.HKLMSOFTWAREMicrosoftCryptography
lea rcx, [rsp + 0x68]
call fcn.140003910
nop
lea r8, [rbp + 0x70]
lea rdx, str.hello
lea rcx, [rsp + 0x20]
call fcn.140003cb0
nop
lea r8, [0x1400066cc]
mov rdx, rax
lea rcx, [rbp - 0x30]
call fcn.140003f40
nop
lea r8, [rbp + 0x70]
mov rdx, rax
lea rcx, [rbp - 0x10]
call fcn.140003fb0
nop
lea r8, [0x1400066cc]
mov rdx, rax
lea rcx, [rbp + 0x10]
call fcn.140003f40
nop
lea r8, [rbp + 0x70]
mov rdx, rax
lea rcx, [rbp + 0x30]
call fcn.140003fb0
nop
lea r8, [0x1400066cc]
mov rdx, rax
lea rcx, [rbp + 0x50]
call fcn.140003f40
nop
lea r8, [rbp + 0x70]
mov rdx, rax
lea rcx, [rbp - 0x58]
call fcn.140003fb0
nop
mov r8, rax
lea rdx, [rbp - 0x78]
lea rcx, [rsp + 0x68]
call fcn.1400016d0
nop
lea rcx, [rbp - 0x58]
call fcn.1400038b0
nop
lea rcx, [rbp + 0x50]
call fcn.1400038b0
nop
lea rcx, [rbp + 0x30]
call fcn.1400038b0
nop
lea rcx, [rbp + 0x10]
call fcn.1400038b0
nop
lea rcx, [rbp - 0x10]
call fcn.1400038b0
nop
lea rcx, [rbp - 0x30]
call fcn.1400038b0
nop
lea rcx, [rsp + 0x20]
call fcn.1400038b0
nop
lea rcx, [rsp + 0x68]
call fcn.1400038b0
nop
lea rcx, [rbp - 0x78]
call fcn.1400038b0
lea rdx, str.ProductId
lea rcx, [rbp - 0x78]
call fcn.140003910
nop
lea rdx, str.HKLMSOFTWAREMicrosoftWindows_NTCurrentVersion
lea rcx, [rsp + 0x68]
call fcn.140003910
nop
lea rdx, [rbp + 0x70]
lea rcx, [rbp - 0x30]
call fcn.140003e10
nop
lea r8, [rbp + 0x70]
mov rdx, rax
lea rcx, [rbp - 0x10]
call fcn.140003fb0
nop
lea r8, [0x1400066cc]
mov rdx, rax
lea rcx, [rbp + 0x10]
call fcn.140003f40
nop
lea r8, [rbp + 0x70]
mov rdx, rax
lea rcx, [rbp + 0x30]
call fcn.140003fb0
nop
lea r8, [0x1400066cc]
mov rdx, rax
lea rcx, [rbp + 0x50]
call fcn.140003f40
nop
lea r8, [rbp + 0x70]
mov rdx, rax
lea rcx, [rbp - 0x58]
call fcn.140003fb0
nop
mov r8, rax
lea rdx, [rbp - 0x78]
lea rcx, [rsp + 0x68]
call fcn.1400016d0
nop
lea rcx, [rbp - 0x58]
call fcn.1400038b0
nop
lea rcx, [rbp + 0x50]
call fcn.1400038b0
nop
lea rcx, [rbp + 0x30]
call fcn.1400038b0
nop
lea rcx, [rbp + 0x10]
call fcn.1400038b0
nop
lea rcx, [rbp - 0x10]
call fcn.1400038b0
nop
lea rcx, [rbp - 0x30]
call fcn.1400038b0
nop
lea rcx, [rsp + 0x68]
call fcn.1400038b0
nop
lea rcx, [rbp - 0x78]
call fcn.1400038b0
lea rdx, str.InstallDate
lea rcx, [rbp - 0x78]
call fcn.140003910
nop
lea rdx, str.HKLMSOFTWAREMicrosoftWindows_NTCurrentVersion
lea rcx, [rsp + 0x68]
call fcn.140003910
nop
lea r8, [rbp + 0x70]
lea rdx, [rbp - 0x78]
lea rcx, [rsp + 0x68]
call fcn.1400016d0
nop
lea rcx, [rsp + 0x68]
call fcn.1400038b0
nop
lea rcx, [rbp - 0x78]
call fcn.1400038b0
lea rdx, str.ComputerHardwareId
lea rcx, [rbp - 0x78]
call fcn.140003910
nop
lea rdx, str.HKLMSYSTEMCurrentControlSetControlSystemInformation
lea rcx, [rsp + 0x68]
call fcn.140003910
nop
lea r8, [rbp + 0x70]
lea rdx, str.randomd
lea rcx, [rsp + 0x40]
call fcn.140003cb0
nop
lea r8, [0x1400066cc]
mov rdx, rax
lea rcx, [rsp + 0x20]
call fcn.140003f40
nop
lea r8, [rbp + 0x70]
mov rdx, rax
lea rcx, [rbp - 0x30]
call fcn.140003fb0
nop
lea r8, [0x1400066cc]
mov rdx, rax
lea rcx, [rbp - 0x10]
call fcn.140003f40
nop
lea r8, [rbp + 0x70]
mov rdx, rax
lea rcx, [rbp + 0x10]
call fcn.140003fb0
nop
lea r8, [0x1400066cc]
mov rdx, rax
lea rcx, [rbp + 0x30]
call fcn.140003f40
nop
lea r8, [rbp + 0x70]
mov rdx, rax
lea rcx, [rbp + 0x50]
call fcn.140003fb0
nop
lea r8, [0x140006698]
mov rdx, rax
lea rcx, [rbp - 0x58]
call fcn.140003f40
nop
mov r8, rax
lea rdx, [rbp - 0x78]
lea rcx, [rsp + 0x68]
call fcn.1400016d0
nop
lea rcx, [rbp - 0x58]
call fcn.1400038b0
nop
lea rcx, [rbp + 0x50]
call fcn.1400038b0
nop
lea rcx, [rbp + 0x30]
call fcn.1400038b0
nop
lea rcx, [rbp + 0x10]
call fcn.1400038b0
nop
lea rcx, [rbp - 0x10]
call fcn.1400038b0
nop
lea rcx, [rbp - 0x30]
call fcn.1400038b0
nop
lea rcx, [rsp + 0x20]
call fcn.1400038b0
nop
lea rcx, [rsp + 0x40]
call fcn.1400038b0
nop
lea rcx, [rsp + 0x68]
call fcn.1400038b0
nop
lea rcx, [rbp - 0x78]
call fcn.1400038b0
lea rdx, str.C:Users_username_AppDataLocalEpicGamesLauncher
lea rcx, [rsp + 0x68]
call fcn.140003910
nop
lea rcx, [rsp + 0x68]
call fcn.140001b60
nop
lea rcx, [rsp + 0x68]
call fcn.1400038b0
lea rdx, str.C:Users_username_AppDataLocalFortniteGame
lea rcx, [rsp + 0x68]
call fcn.140003910
nop
lea rcx, [rsp + 0x68]
call fcn.140001b60
nop
lea rcx, [rsp + 0x68]
call fcn.1400038b0
lea rdx, str.C:Users_username_AppDataLocalCrashReportClient
lea rcx, [rsp + 0x68]
call fcn.140003910
nop
lea rcx, [rsp + 0x68]
call fcn.140001b60
nop
lea rcx, [rsp + 0x68]
call fcn.1400038b0
lea rdx, str.C:Program_FilesEpic_GamesFortniteFortniteGameBinariesWin64
lea rcx, [rsp + 0x68]
call fcn.140003910
nop
lea rcx, [rsp + 0x68]
call fcn.140001b60
nop
lea rcx, [rsp + 0x68]
call fcn.1400038b0
lea rcx, str.ping_google.com__t__l_x
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
nop
lea rcx, [rbp + 0x70]
call fcn.1400038b0
xor eax, eax
mov rcx, qword [rbp + 0x90]
xor rcx, rsp
call fcn.140004280
lea r11, [rsp + 0x1c0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.1400011a0
nop
call fcn.140001100
nop
call fcn.140001100
nop
call fcn.140001100
nop
call fcn.1400011a0
int3