Function at 0x140001290
Capabilities:
Disable system features via registry on windows
Disable windows defender features via registry on windows
Execute command
Persist via image file execution options registry key
Persist via run registry key
Persist via windows service
Schedule task via schtasks
Self delete
Set registry value
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
lea rbp, [rsp - 0x57]
sub rsp, 0xd0
mov rax, qword [0x14001d040]
xor rax, rsp
mov qword [rbp + 0x47], rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x59], xmm0
xor esi, esi
mov qword [rbp - 0x49], rsi
mov qword [rbp - 0x41], rsi
mov ecx, 0x2e0
call fcn.140005010
mov r9, rax
mov qword [rbp - 0x59], rax
mov qword [rbp - 0x49], 0x2d7
mov qword [rbp - 0x41], 0x2df
mov rdx, rax
lea rcx, str.____n_______________________________________________________________________n_______________________________________________________________________________________n_______________________________________________________________________________n_____________________________________________________________________________n________________________________________________________________________________n_________________________________________________________________________________n____________________________________________________________________________n_________________________________________________________________________n
mov r8d, 5
nop dword [rax]
movups xmm0, xmmword [rcx]
movups xmmword [rdx], xmm0
movups xmm1, xmmword [rcx + 0x10]
movups xmmword [rdx + 0x10], xmm1
movups xmm0, xmmword [rcx + 0x20]
movups xmmword [rdx + 0x20], xmm0
movups xmm1, xmmword [rcx + 0x30]
movups xmmword [rdx + 0x30], xmm1
movups xmm0, xmmword [rcx + 0x40]
movups xmmword [rdx + 0x40], xmm0
movups xmm1, xmmword [rcx + 0x50]
movups xmmword [rdx + 0x50], xmm1
movups xmm0, xmmword [rcx + 0x60]
movups xmmword [rdx + 0x60], xmm0
lea rdx, [rdx + 0x80]
movups xmm1, xmmword [rcx + 0x70]
movups xmmword [rdx - 0x10], xmm1
lea rcx, [rcx + 0x80]
sub r8, 1
jne 0x140001300
movups xmm0, xmmword [rcx]
movups xmmword [rdx], xmm0
movups xmm1, xmmword [rcx + 0x10]
movups xmmword [rdx + 0x10], xmm1
movups xmm0, xmmword [rcx + 0x20]
movups xmmword [rdx + 0x20], xmm0
movups xmm1, xmmword [rcx + 0x30]
movups xmmword [rdx + 0x30], xmm1
movups xmm0, xmmword [rcx + 0x40]
movups xmmword [rdx + 0x40], xmm0
mov eax, dword [rcx + 0x50]
mov dword [rdx + 0x50], eax
movzx eax, word [rcx + 0x54]
mov word [rdx + 0x54], ax
movzx eax, byte [rcx + 0x56]
mov byte [rdx + 0x56], al
mov byte [r9 + 0x2d7], sil
xorps xmm0, xmm0
movups xmmword [rbp - 0x39], xmm0
mov qword [rbp - 0x29], rsi
mov qword [rbp - 0x21], rsi
mov ecx, 0x1d0
call fcn.140005010
mov r9, rax
mov qword [rbp - 0x39], rax
mov qword [rbp - 0x29], 0x1c9
mov qword [rbp - 0x21], 0x1cf
mov rcx, rax
lea rdx, str._n____________________________________________________________n___________________________________________________n____________________________________________________n_____________________________________________n____________________V__V________________________n___________________________________________n________________________________________________________________________________________________n
mov ebx, 3
mov r8d, ebx
nop word [rax + rax]
movups xmm0, xmmword [rdx]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rdx + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rdx + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rdx + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rdx + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rdx + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rdx + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm1, xmmword [rdx + 0x70]
movups xmmword [rcx - 0x10], xmm1
lea rdx, [rdx + 0x80]
sub r8, 1
jne 0x1400013e0
movups xmm0, xmmword [rdx]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rdx + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rdx + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rdx + 0x30]
movups xmmword [rcx + 0x30], xmm1
mov rax, qword [rdx + 0x40]
mov qword [rcx + 0x40], rax
movzx eax, byte [rdx + 0x48]
mov byte [rcx + 0x48], al
mov byte [r9 + 0x1c9], r8b
xorps xmm0, xmm0
movups xmmword [rbp + 7], xmm0
mov qword [rbp + 0x17], rsi
mov qword [rbp + 0x1f], rsi
mov ecx, 0x120
call fcn.140005010
mov r9, rax
mov qword [rbp + 7], rax
mov qword [rbp + 0x17], 0x11d
mov qword [rbp + 0x1f], 0x11f
mov rcx, rax
lea rdx, str._nv2.0:_n____Changed_from_AutoTweak_Terminal_to_AutoTweak_3_n____Tweak_Count:_186_____775_n______You_no_longer_have_to_press_ENTER_after_selecting_an_option_n______Added__kinda__animations_n________because_im_cool_n_nv1.0:_n____Terminal_version_of_AutoTweak_released_during_AutoTweak__1__era_n_n
mov r8d, 2
nop word [rax + rax]
movups xmm0, xmmword [rdx]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rdx + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rdx + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rdx + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rdx + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rdx + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rdx + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm1, xmmword [rdx + 0x70]
movups xmmword [rcx - 0x10], xmm1
lea rdx, [rdx + 0x80]
sub r8, 1
jne 0x1400014b0
movups xmm0, xmmword [rdx]
movups xmmword [rcx], xmm0
mov rax, qword [rdx + 0x10]
mov qword [rcx + 0x10], rax
mov eax, dword [rdx + 0x18]
mov dword [rcx + 0x18], eax
movzx eax, byte [rdx + 0x1c]
mov byte [rcx + 0x1c], al
mov byte [r9 + 0x11d], r8b
xorps xmm0, xmm0
movups xmmword [rbp + 0x27], xmm0
mov qword [rbp + 0x37], rsi
mov qword [rbp + 0x3f], rsi
mov ecx, 0x1e0
call fcn.140005010
mov r8, rax
mov qword [rbp + 0x27], rax
mov qword [rbp + 0x37], 0x1da
mov qword [rbp + 0x3f], 0x1df
mov rcx, rax
lea rdx, str._nVersion_2.0:_n____This_is_an_abandoned_project._v2.0_is_expected_to_be_the_final_release_for_AutoTweak_Terminal_AutoTweak_3._n____Members_of_staff_or_our_community_are_NOT_expected_to_provide_any_support_for_this_tweak._nby__blocksaffinity_on__almost__all_platforms_nDo_not_distribute_nProvided_free_in_the_blx_Tweaks_Discord_Server._nIf_you_are_not_in_this_Discord_Server:_n______Join_using_https:__discord.gg_jVKjDQSuQc_n______Report_the_person_who_sent_you_it_n_nLine_count:_964_n_n
nop
movups xmm0, xmmword [rdx]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rdx + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rdx + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rdx + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rdx + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rdx + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rdx + 0x60]
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
movups xmm1, xmmword [rdx + 0x70]
movups xmmword [rcx - 0x10], xmm1
lea rdx, [rdx + 0x80]
sub rbx, 1
jne 0x140001560
movups xmm0, xmmword [rdx]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rdx + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rdx + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rdx + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rdx + 0x40]
movups xmmword [rcx + 0x40], xmm0
mov rax, qword [rdx + 0x50]
mov qword [rcx + 0x50], rax
movzx eax, word [rdx + 0x58]
mov word [rcx + 0x58], ax
mov byte [r8 + 0x1da], bl
nop
lea rcx, str.title_AutoTweak_3___FINAL
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, str.FINAL
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140004810
mov ecx, 0x2ee
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [0x140007c20]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140004810
mov ecx, 0x2ee
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [0x140007c24]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140004810
mov ecx, 0x2ee
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [0x140007c28]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140004810
mov ecx, 0x2ee
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [0x140007c2c]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140004810
mov ecx, 0x2ee
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [0x140007c30]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, [0x140007c34]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140004810
mov ecx, 0x1f4
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [0x140007c38]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140004810
mov ecx, 0x1f4
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [0x140007c3c]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140004810
mov ecx, 0x1f4
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [0x140007c40]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140004810
mov ecx, 0x1f4
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [0x140007c44]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140004810
mov ecx, 0x1f4
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [0x140007c30]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, [0x140007c48]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140004810
mov ecx, 0xfa
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [0x140007c4c]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140004810
mov ecx, 0xfa
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [0x140007c50]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140004810
mov ecx, 0xfa
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [0x140007c54]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140004810
mov ecx, 0xfa
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, str.L___n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140004810
mov ecx, 0xfa
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, str.reg_add__HKEY_LOCAL_MACHINESOFTWARE_blocksaffinityAutoTweak3program___v_ProgramVersion__t_REG_SZ__d__2.0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add__HKEY_LOCAL_MACHINESOFTWARE_blocksaffinity___v_AutoTweak3__t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [0x140007c30]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, [rbp - 0x59]
cmp qword [rbp - 0x41], 0xf
cmova rdx, qword [rbp - 0x59]
mov r8, qword [rbp - 0x49]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140004dd0
lea rdx, [rbp - 0x39]
cmp qword [rbp - 0x21], 0xf
cmova rdx, qword [rbp - 0x39]
mov r8, qword [rbp - 0x29]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140004dd0
lea rdx, [0x140007d2c]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140004810
lea rdx, str.Number_of_tweaks:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140004810
mov edx, 0x307
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___int____ptr64]
lea rdx, str._n_nCHOOSE_AN_OPTION:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140004810
lea rdx, str._n1._Apply_Tweaks_Now
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140004810
lea rdx, str._n2._View_Changelogs
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140004810
lea rdx, str._n3._Version_Info
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140004810
lea rdx, str._n4._View_Tweaks
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140004810
lea rdx, str._n5._Exit
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140004810
lea rdx, [0x140007dcc]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140004810
call qword [sym.imp.api_ms_win_crt_conio_l1_1_0.dll__getch]
mov ebx, eax
lea rdx, [0x140007dcc]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140004810
cmp bl, 0x31
jne 0x140004530
lea rcx, [0x140007c30]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, str.Please_note:_Administrator_permission_is_required_for_some_tweaks.__nYou_should_close_the_program_and_restart_with_administrator..._n_10_
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140004810
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [0x140007c30]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, str.Please_note:_Administrator_permission_is_required_for_some_tweaks.__nYou_should_close_the_program_and_restart_with_administrator..._n_9_
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140004810
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [0x140007c30]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, str.Please_note:_Administrator_permission_is_required_for_some_tweaks.__nYou_should_close_the_program_and_restart_with_administrator..._n_8_
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140004810
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [0x140007c30]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, str.Please_note:_Administrator_permission_is_required_for_some_tweaks.__nYou_should_close_the_program_and_restart_with_administrator..._n_7_
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140004810
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [0x140007c30]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, str.Please_note:_Administrator_permission_is_required_for_some_tweaks.__nYou_should_close_the_program_and_restart_with_administrator..._n_6_
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140004810
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [0x140007c30]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, str.Please_note:_Administrator_permission_is_required_for_some_tweaks.__nYou_should_close_the_program_and_restart_with_administrator..._n_5_
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140004810
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [0x140007c30]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, str.Please_note:_Administrator_permission_is_required_for_some_tweaks.__nYou_should_close_the_program_and_restart_with_administrator..._n_4_
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140004810
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [0x140007c30]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, str.Please_note:_Administrator_permission_is_required_for_some_tweaks.__nYou_should_close_the_program_and_restart_with_administrator..._n_3_
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140004810
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [0x140007c30]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, str.Please_note:_Administrator_permission_is_required_for_some_tweaks.__nYou_should_close_the_program_and_restart_with_administrator..._n_2_
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140004810
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [0x140007c30]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, str.Please_note:_Administrator_permission_is_required_for_some_tweaks.__nYou_should_close_the_program_and_restart_with_administrator..._n_1_
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140004810
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [0x140007c30]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, str.Applying_tweaks_requires_modification_to_your_system_and_its_registry.__nBy_confirming_you_agree_that_blx_Tweaks_staff_and_community_are_not_required_to_provide_any_support_for_the_unlikely_occasion_that_something_goes_wrong._n_5_
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140004810
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [0x140007c30]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, str.Applying_tweaks_requires_modification_to_your_system_and_its_registry.__nBy_confirming_you_agree_that_blx_Tweaks_staff_and_community_are_not_required_to_provide_any_support_for_the_unlikely_occasion_that_something_goes_wrong._n_4_
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140004810
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [0x140007c30]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, str.Applying_tweaks_requires_modification_to_your_system_and_its_registry.__nBy_confirming_you_agree_that_blx_Tweaks_staff_and_community_are_not_required_to_provide_any_support_for_the_unlikely_occasion_that_something_goes_wrong._n_3_
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140004810
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [0x140007c30]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, str.Applying_tweaks_requires_modification_to_your_system_and_its_registry.__nBy_confirming_you_agree_that_blx_Tweaks_staff_and_community_are_not_required_to_provide_any_support_for_the_unlikely_occasion_that_something_goes_wrong._n_2_
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140004810
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [0x140007c30]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, str.Applying_tweaks_requires_modification_to_your_system_and_its_registry.__nBy_confirming_you_agree_that_blx_Tweaks_staff_and_community_are_not_required_to_provide_any_support_for_the_unlikely_occasion_that_something_goes_wrong._n_1_
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140004810
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [0x140007c30]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, str.Applying_tweaks_requires_modification_to_your_system_and_its_registry.__nBy_confirming_you_agree_that_blx_Tweaks_staff_and_community_are_not_required_to_provide_any_support_for_the_unlikely_occasion_that_something_goes_wrong.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140004810
lea rdx, str._n____If_you_agree_to_the_above_please_press_Y_y_and_ENTER__type_anything_else_to_go_back:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140004810
xorps xmm0, xmm0
movups xmmword [rbp - 0x19], xmm0
mov qword [rbp - 9], rsi
mov qword [rbp - 1], 0xf
mov byte [rbp - 0x19], 0
lea rdx, [rbp - 0x19]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call fcn.1400049f0
lea rax, [rbp - 0x19]
mov rbx, qword [rbp - 0x19]
mov rdi, qword [rbp - 1]
cmp rdi, 0xf
cmova rax, rbx
mov rcx, qword [rbp - 9]
cmp rcx, 1
jne 0x140001c24
cmp byte [rax], 0x59
sete al
test al, al
jne 0x140001c48
lea rax, [rbp - 0x19]
cmp rdi, 0xf
cmova rax, rbx
cmp rcx, 1
jne 0x1400044e2
cmp byte [rax], 0x79
sete al
test al, al
je 0x1400044e2
lea rdx, str._nYou_agreed_to_apply_all_tweaks._n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140004810
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [0x140007c30]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, str.Applying
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140004810
mov edx, 0x307
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___int____ptr64]
lea rdx, str._tweaks__3_
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140004810
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [0x140007c30]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, str.Applying
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140004810
mov edx, 0x307
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___int____ptr64]
lea rdx, str._tweaks__2_
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140004810
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [0x140007c30]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, str.Applying
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140004810
mov edx, 0x307
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___int____ptr64]
lea rdx, str._tweaks__1__n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140004810
lea rcx, str.bcdedit__timeout_0__nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.bcdedit__set_hypervisorlaunchtype_Auto__nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.bcdedit__set_debug_No__nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.bcdedit__set_sos_Yes__nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.bcdedit__set_ems_No__nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.bcdedit__set_noumex_Yes__nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.bcdedit__set_bootems_No__nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.bcdedit__set_perfmem_0__null
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.bcdedit__set_onecpu_No__nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.bcdedit__set_nolowmem_Yes__nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.bcdedit__set_MSI_Default__nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.bcdedit__set_vsmlaunchtype_Off__nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.bcdedit__set_nx_AlwaysOff__nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.bcdedit__set_pae_ForceEnable__nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.bcdedit__set_extendedinput_Yes__nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.bcdedit__set_highestmode_Yes__nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.bcdedit__set_forcefipscrypto_No__nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.bcdedit__set_halbreakpoint_No__nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.bcdedit__set_tpmbootentropy_ForceDisable__nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.bcdedit__set_linearaddress57_OptOut__nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.bcdedit__set_bootmenupolicy_Legacy__nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.bcdedit__set_graphicsmodedisabled_No__nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.bcdedit__set_useplatformclock_false__nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.bcdedit__set_tscsyncpolicy_legacy__nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.bcdedit__set_disabledynamictick_no__nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.bcdedit__set_NOINTEGRITYCHECKS_OFF__nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.bcdedit__set_TESTSIGNING_OFF__nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.bcdedit__set_x2apicpolicy_enable__nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.bcdedit__set_firstmegabytepolicy_UseAll__nul
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.powershell_Disable_MMAgent__MemoryCompression
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.bcdedit__set_disabledynamictick_yes
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.bcdedit__deletevalue_useplatformclock
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.bcdedit__set_useplatformtick_yes
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.fsutil_behavior_set_memoryusage_2
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKLMSOFTWAREPoliciesMicrosoftWindowsWindowsUpdateDoNotConnectToWindowsUpdateInternetLocations__t_REG_DWORD__d_1__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKLMSOFTWAREPoliciesMicrosoftWindowsWindowsUpdateSetDisableUXWUAccess__t_REG_DWORD__d_1__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKLMSOFTWAREPoliciesMicrosoftWindowsWindowsUpdateAUNoAutoUpdate__t_REG_DWORD__d_1__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKLMSOFTWAREPoliciesMicrosoftWindowsWindowsUpdateExcludeWUDriversInQualityUpdate__t_REG_DWORD__d_1__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.gpupdate__force
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rd_s_q_C:WindowsSoftwareDistribution
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.md_C:WindowsSoftwareDistribution
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.net_start_wuauserv
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.net_start_UsoSvc
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.REG_ADD_HKLMSYSTEMCurrentControlSetEnum__aDevice_ParametersEnhancedPowerManagementEnabled__T_REG_DWORD__d_0__NUL_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.REG_ADD_HKLMSYSTEMCurrentControlSetEnum__aDevice_Parameters__F__V_AllowIdleIrD3__T_REG_DWORD__d_0__NUL_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.REG_ADD_HKLMSYSTEMCurrentControlSetEnum__aDevice_ParametersSelectiveSuspendOn__T_REG_DWORD__d_0__NUL_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.REG_ADD_HKLMSYSTEMCurrentControlSetEnum__aDevice_ParametersDeviceSelectiveSuspended__T_REG_DWORD__d_0__NUL_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.REG_ADD_HKLMSYSTEMCurrentControlSetEnum__aDevice_ParametersSelectiveSuspendEnabled__T_REG_DWORD__d_0__NUL_2_1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKCUSOFTWAREMicrosoftGameBarShowStartupPanel__t_REG_DWORD__d_0__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKCUSOFTWAREMicrosoftGameBarAllowAutoGameMode__t_REG_DWORD__d_0__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKCUSOFTWAREMicrosoftGameBarAutoGameModeEnabled__t_REG_DWORD__d_0__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKCUSOFTWAREMicrosoftGameBarUseNexusForGameBarEnabled__t_REG_DWORD__d_0__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [0x140009550]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKCUSystemGameConfigStoreGameDVR_FSEBehaviorMode__t_REG_DWORD__d_2__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKCUSystemGameConfigStoreGameDVR_FSEBehavior__t_REG_DWORD__d_2__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKCUSystemGameConfigStoreGameDVR_HonorUserFSEBehaviorMode__t_REG_DWORD__d_1__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKCUSystemGameConfigStoreGameDVR_DXGIHonorFSEWindowsCompatible__t_REG_DWORD__d_1__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKCUSystemGameConfigStoreGameDVR_EFSEFeatureFlags__t_REG_DWORD__d_0__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKCUSystemGameConfigStoreGameDVR_DSEBehavior__t_REG_DWORD__d_2__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKLMSOFTWAREMicrosoftPolicyManagerdefaultApplicationManagementAllowGameDVR_value__t_REG_DWORD__d_0__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKLMSOFTWAREPoliciesMicrosoftWindowsGameDVRAllowGameDVR__t_REG_DWORD__d_0__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKCUSOFTWAREMicrosoftWindowsCurrentVersionGameDVRAppCaptureEnabled__t_REG_DWORD__d_0__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKU.DEFAULTSOFTWAREMicrosoftGameBarAutoGameModeEnabled__t_REG_DWORD__d_0__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_delete_HKCUSystemGameConfigStoreChildren__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_delete_HKCUSystemGameConfigStoreParents__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKLMSystemCurrentControlSetServicesxbgmStart__t_REG_DWORD__d_4__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_config_XblAuthManager_start_disabled
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_config_XblGameSave_start_disabled
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_config_XboxGipSvc_start_disabled
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_config_XboxNetApiSvc_start_disabled
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.schtasks__Change__TN_MicrosoftXblGameSaveXblGameSaveTask__Disable
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.takeown__f__WinDir_System32GameBarPresenceWriter.exe__a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.icacls__WinDir_System32GameBarPresenceWriter.exe__grant:r_Administrators:F__c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__im_GameBarPresenceWriter.exe__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.move_C:WindowsSystem32GameBarPresenceWriter.exe_C:WindowsSystem32GameBarPresenceWriter.OLD
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.schtasks__Change__TN_MicrosoftXblGameSaveXblGameSaveTask__Disable
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.takeown__f__WinDir_System32_bcastdvr.exe__a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.icacls__WinDir_System32_bcastdvr.exe__grant:r_Administrators:F__c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__im_bcastdvr.exe__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.move_C:WindowsSystem32_bcastdvr.exe_C:WindowsSystem32_bcastdvr.OLD
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKCUSoftwareMicrosoftWindowsCurrentVersionGameDVRAppCaptureEnabled__t_REG_DWORD__d_0__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKCUSoftwareMicrosoftGameBarUseNexusForGameBarEnabled__t_REG_DWORD__d_0__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKCUSoftwareMicrosoftWindowsCurrentVersionGameDVRAudioCaptureEnabled__t_REG_DWORD__d_0__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKCUSoftwareMicrosoftWindowsCurrentVersionGameDVRCursorCaptureEnabled__t_REG_DWORD__d_0__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKCUSoftwareMicrosoftGameBarShowStartupPanel__t_REG_DWORD__d_0__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKCUSystemGameConfigStoreGameDVR_Enabled__t_REG_DWORD__d_0__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKLMSoftwarePoliciesMicrosoftWindowsGameDVRAllowgameDVR__t_REG_DWORD__d_0__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKCUSoftwareMicrosoftGameBarAllowAutoGameMode__t_REG_DWORD__d_0__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKCUSoftwareMicrosoftWindowsCurrentVersionAppletsSysTrayServices__t_reg_dword__d_29__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_delete_DiagTrack
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_delete_dmwappushservice
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_delete_WerSvc
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_delete_OneSyncSvc
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_delete_MessagingService
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_delete_wercplsupport
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_delete_PcaSvc
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_config_wlidsvc_startdemand
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_delete_wisvc
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_delete_RetailDemo
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_delete_diagsvc
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_delete_shpamsvc
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_delete_TermService
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_delete_UmRdpService
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_delete_SessionEnv
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_delete_TroubleshootingSvc
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_delete_diagnosticshub.standardcollector.service
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKLMSYSTEMCurrentControlSetControlSession_ManagerMemory_ManagementFeatureSettings__t_REG_DWORD__d_1__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKLMSYSTEMCurrentControlSetControlSession_ManagerMemory_ManagementFeatureSettingsOverride__t_REG_DWORD__d_3__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKLMSYSTEMCurrentControlSetControlSession_ManagerMemory_ManagementFeatureSettingsOverrideMask__t_REG_DWORD__d_3__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKLMSYSTEMCurrentControlSetControlSession_ManagerMemory_ManagementEnableCfg__t_REG_DWORD__d_0__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKLMSYSTEMCurrentControlSetControlSession_ManagerMemory_ManagementMoveImages__t_REG_DWORD__d_0__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKLMSYSTEMCurrentControlSetControlSession_ManagerkernelDisableExceptionChainValidation__t_REG_DWORD__d_1__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKLMSYSTEMCurrentControlSetControlSession_ManagerkernelKernelSEHOPEnabled__t_REG_DWORD__d_0__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKLMSYSTEMCurrentControlSetControlSession_ManagerkernelDisableTsx__t_REG_DWORD__d_1__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKLMSoftwarePoliciesMicrosoftWindowsCloudContentDisableSoftLanding__t_REG_DWORD__d_1__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKLMSoftwarePoliciesMicrosoftWindowsCloudContentDisableWindowsSpotlightFeatures__t_REG_DWORD__d_1__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKLMSoftwarePoliciesMicrosoftWindowsCloudContentDisableWindowsConsumerFeatures__t_REG_DWORD__d_1__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKLMSoftwarePoliciesMicrosoftWindowsDataCollectionDoNotShowFeedbackNotifications__t_REG_DWORD__d_1__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKLMSoftwarePoliciesMicrosoftWindowsInkWorkspaceAllowSuggestedAppsInWindowsInkWorkspace__t_REG_DWORD__d_0__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKLMSOFTWAREMicrosoftWindowsCurrentVersionExplorerSmartScreenEnabled__t_REG_SZ__d_Off__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKCUSoftwareMicrosoftWindowsCurrentVersionAppHostEnableWebContentEvaluation__t_REG_DWORD__d_0__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKCUSoftwareClassesLocal_SettingsSoftwareMicrosoftWindowsCurrentVersionAppContainerStoragemicrosoft.microsoftedge_8wekyb3d8bbweMicrosoftEdgePhishingFilterEnabledV9__t_REG_DWORD__d_1__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKLMSOFTWAREPoliciesMicrosoftWindows_DefenderDisableAntiSpyware__t_REG_DWORD__d_0__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKLMSOFTWAREPoliciesMicrosoftWindows_DefenderSpynetSpyNetReporting__t_REG_DWORD__d_0__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKLMSOFTWAREPoliciesMicrosoftWindows_DefenderSpynetSubmitSamplesConsent__t_REG_DWORD__d_2__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKLMSOFTWAREPoliciesMicrosoftWindows_DefenderSpynetDontReportInfectionInformation__t_REG_DWORD__d_1__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_delete_HKLMSYSTEMCurrentControlSetServicesSense__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKLMSOFTWAREPoliciesMicrosoftMRTDontReportInfectionInformation__t_REG_DWORD__d_1__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKLMSOFTWAREPoliciesMicrosoftMRTDontOfferThroughWUAU__t_REG_DWORD__d_1__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_delete_HKLMSOFTWAREMicrosoftWindowsCurrentVersionRunSecurityHealth__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_delete_HKLMSOFTWAREMicrosoftWindowsCurrentVersionExplorerStartupApprovedRun__v_SecurityHealth__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKLMSOFTWAREMicrosoftWindows_NTCurrentVersionImage_File_Execution_OptionsSecHealthUI.exeDebugger__t_REG_SZ__d__windir_System32_taskkill.exe__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKCUSoftwareMicrosoftWindowsCurrentVersionNotificationsSettingsWindows.SystemToast.SecurityAndMaintenanceEnabled__t_REG_DWORD__d_0__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_delete_HKLMSYSTEMCurrentControlSetServicesSecurityHealthService__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKLMSoftwarePoliciesMicrosoftWindowsCloudContentDisableSoftLanding__t_REG_DWORD__d_1__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKLMSoftwarePoliciesMicrosoftWindowsCloudContentDisableWindowsSpotlightFeatures__t_REG_DWORD__d_1__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKLMSoftwarePoliciesMicrosoftWindowsCloudContentDisableWindowsConsumerFeatures__t_REG_DWORD__d_1__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKLMSoftwarePoliciesMicrosoftWindowsDataCollectionDoNotShowFeedbackNotifications__t_REG_DWORD__d_1__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKLMSoftwarePoliciesMicrosoftWindowsInkWorkspaceAllowSuggestedAppsInWindowsInkWorkspace__t_REG_DWORD__d_0__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.schtasks__Change__TN_MicrosoftWindowsAppIDSmartScreenSpecific__disable
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.schtasks__Change__TN_MicrosoftWindowsApplication_ExperienceAitAgent__disable
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.schtasks__Change__TN_MicrosoftWindowsApplication_ExperienceMicrosoft_Compatibility_Appraiser__disable
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.schtasks__Change__TN_MicrosoftWindowsApplication_ExperienceProgramDataUpdater__disable
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.schtasks__Change__TN_MicrosoftWindowApplication_ExperienceStartupAppTask__disable
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.schtasks__Change__TN_MicrosoftWindowsAutochkProxy__disable
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.schtasks__Change__TN_MicrosoftWindowsCloudExperienceHostCreateObjectTask__disable
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.schtasks__Change__TN_MicrosoftWindowsCustomer_Experience_Improvement_ProgramBthSQM__disable
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.schtasks__Change__TN_MicrosoftWindowsCustomer_Experience_Improvement_ProgramConsolidator__disable
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.schtasks__Change__TN_MicrosoftWindowsCustomer_Experience_Improvement_ProgramKernelCeipTask__disable
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.schtasks__Change__TN_MicrosoftWindowsCustomer_Experience_Improvement_ProgramUploader__disable
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.schtasks__Change__TN_MicrosoftWindowsCustomer_Experience_Improvement_ProgramUsbCeip__disable
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.schtasks__Change__TN_MicrosoftWindowsDiskDiagnosticMicrosoft_Windows_DiskDiagnosticDataCollector__disable
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.schtasks__Change__TN_MicrosoftWindowsDiskFootprintDiagnostics__disable
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.schtasks__Change__TN_MicrosoftWindowsFileHistoryFile_History__maintenance_mode___disable
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.schtasks__Change__TN_MicrosoftWindowsMaintenanceWinSAT__disable
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.schtasks__Change__TN_MicrosoftWindowsPISqm_Tasks__disable
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [0x14000b5e0]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, [0x14000b640]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.schtasks__Change__TN_MicrosoftWindowsShellFamilySafetyRefresh__disable
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.schtasks__Change__TN_MicrosoftWindowsShellFamilySafetyUpload__disable
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.schtasks__Change__TN_MicrosoftWindowsWindows_Error_ReportingQueueReporting__disable
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.schtasks__Change__TN_MicrosoftWindowsWindowsUpdateAutomatic_App_Update__disable
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.schtasks__Change__TN_MicrosoftWindowsLicense_ManagerTempSignedLicenseExchange__disable
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.schtasks__Change__TN_MicrosoftWindowsClipLicense_Validation__disable
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.schtasks__Change__TN_MicrosoftWindowsApplicationDataDsSvcCleanup__disable
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.schtasks__Change__TN_MicrosoftWindowsPower_Efficiency_DiagnosticsAnalyzeSystem__disable
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.schtasks__Change__TN_MicrosoftWindowsPushToInstallLoginCheck__disable
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.schtasks__Change__TN_MicrosoftWindowsPushToInstallRegistration__disable
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.schtasks__Change__TN_MicrosoftWindowsShellFamilySafetyMonitor__disable
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.schtasks__Change__TN_MicrosoftWindowsShellFamilySafetyMonitorToastTask__disable
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.schtasks__Change__TN_MicrosoftWindowsShellFamilySafetyRefreshTask__disable
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.schtasks__Change__TN_MicrosoftWindowsSubscriptionEnableLicenseAcquisition__disable
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.schtasks__Change__TN_MicrosoftWindowsSubscriptionLicenseAcquisition__disable
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.schtasks__Change__TN_MicrosoftWindowsDiagnosisRecommendedTroubleshootingScanner__disable
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.schtasks__Change__TN_MicrosoftWindowsDiagnosisScheduled__disable
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.schtasks__Change__TN_MicrosoftWindowsNetTraceGatherNetworkInfo__disable
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.del__F__Q_C:WindowsSystem32TasksMicrosoftWindowsSettingSync
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKCUSoftwareMicrosoftWindowsCurrentVersionExplorerVisualEffects__v_VisualFXSetting__t_REG_DWORD__d_3__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKCUSoftwareMicrosoftWindowsCurrentVersionExplorerVisualEffectsAnimateMinMax__v_DefaultApplied__t_REG_SZ__d_0__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKCUSoftwareMicrosoftWindowsCurrentVersionExplorerVisualEffectsComboBoxAnimation__v_DefaultApplied__t_REG_SZ__d_0__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKCUSoftwareMicrosoftWindowsCurrentVersionExplorerVisualEffectsControlAnimations__v_DefaultApplied__t_REG_SZ__d_0__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKCUSoftwareMicrosoftWindowsCurrentVersionExplorerVisualEffectsCursorShadow__v_DefaultApplied__t_REG_SZ__d_0__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKCUSoftwareMicrosoftWindowsCurrentVersionExplorerVisualEffectsDragFullWindows__v_DefaultApplied__t_REG_SZ__d_0__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKCUSoftwareMicrosoftWindowsCurrentVersionExplorerVisualEffectsDropShadow__v_DefaultApplied__t_REG_SZ__d_0__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKCUSoftwareMicrosoftWindowsCurrentVersionExplorerVisualEffectsDWMAeroPeekEnabled__v_DefaultApplied__t_REG_SZ__d_0__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKCUSoftwareMicrosoftWindowsCurrentVersionExplorerVisualEffectsDWMEnabled__v_DefaultApplied__t_REG_DWORD__d_1__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKCUSoftwareMicrosoftWindowsCurrentVersionExplorerVisualEffectsDWMSaveThumbnailEnabled__v_DefaultApplied__t_REG_SZ__d_0__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKCUSoftwareMicrosoftWindowsCurrentVersionExplorerVisualEffectsFontSmoothing__v_DefaultApplied__t_REG_SZ__d_1__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKCUSoftwareMicrosoftWindowsCurrentVersionExplorerVisualEffectsListBoxSmoothScrolling__v_DefaultApplied__t_REG_SZ__d_0__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKCUSoftwareMicrosoftWindowsCurrentVersionExplorerVisualEffectsListviewAlphaSelect__v_DefaultApplied__t_REG_SZ__d_0__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKCUSoftwareMicrosoftWindowsCurrentVersionExplorerVisualEffectsListviewShadow__v_DefaultApplied__t_REG_SZ__d_0__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKCUSoftwareMicrosoftWindowsCurrentVersionExplorerVisualEffectsMenuAnimation__v_DefaultApplied__t_REG_SZ__d_0__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKCUSoftwareMicrosoftWindowsCurrentVersionExplorerVisualEffectsSelectionFade__v_DefaultApplied__t_REG_SZ__d_0__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKCUSoftwareMicrosoftWindowsCurrentVersionExplorerVisualEffectsTaskbarAnimations__v_DefaultApplied__t_REG_SZ__d_0__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKCUSoftwareMicrosoftWindowsCurrentVersionExplorerVisualEffectsThumbnailsOrIcon__v_DefaultApplied__t_REG_SZ__d_1__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKCUSoftwareMicrosoftWindowsCurrentVersionExplorerVisualEffectsTooltipAnimation__v_DefaultApplied__t_REG_SZ__d_0__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKLMSYSTEMCurrentControlSetServicesUevAgentService__v_Start__t_REG_DWORD__d_4__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKLMSYSTEMCurrentControlSetServicesUnistoreSvc__v_Start__t_REG_DWORD__d_4__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKLMSYSTEMCurrentControlSetServicesupnphost__v_Start__t_REG_DWORD__d_4__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKLMSYSTEMCurrentControlSetServicesUserDataSvc__v_Start__t_REG_DWORD__d_4__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKLMSYSTEMCurrentControlSetServicesUserManager__v_Start__t_REG_DWORD__d_2__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKLMSYSTEMCurrentControlSetServicesUsoSvc__v_Start__t_REG_DWORD__d_3__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKLMSYSTEMCurrentControlSetServicesVaultSvc__v_Start__t_REG_DWORD__d_4__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKLMSYSTEMCurrentControlSetServices_vds__v_Start__t_REG_DWORD__d_3__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKLMSYSTEMCurrentControlSetServicesVSS__v_Start__t_REG_DWORD__d_3__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKLMSYSTEMCurrentControlSetServicesW32Time__v_Start__t_REG_DWORD__d_4__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKLMSYSTEMCurrentControlSetServicesWaaSMedicSvc__v_Start__t_REG_DWORD__d_4__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKLMSYSTEMCurrentControlSetServicesWalletService__v_Start__t_REG_DWORD__d_4__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKLMSYSTEMCurrentControlSetServicesWarpJITSvc__v_Start__t_REG_DWORD__d_4__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKLMSYSTEMCurrentControlSetServiceswbengine__v_Start__t_REG_DWORD__d_4__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKLMSYSTEMCurrentControlSetServicesWbioSrvc__v_Start__t_REG_DWORD__d_4__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKLMSYSTEMCurrentControlSetServicesWcmsvc__v_Start__t_REG_DWORD__d_2__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKLMSYSTEMCurrentControlSetServiceswcncsvc__v_Start__t_REG_DWORD__d_4__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKLMSYSTEMCurrentControlSetServicesWdiServiceHost__v_Start__t_REG_DWORD__d_4__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKLMSYSTEMCurrentControlSetServicesWdiSystemHost__v_Start__t_REG_DWORD__d_4__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKLMSYSTEMCurrentControlSetServicesWebClient__v_Start__t_REG_DWORD__d_4__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKLMSYSTEMCurrentControlSetServicesWecsvc__v_Start__t_REG_DWORD__d_4__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKLMSYSTEMCurrentControlSetServicesWEPHOSTSVC__v_Start__t_REG_DWORD__d_4__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKLMSYSTEMCurrentControlSetServiceswercplsupport__v_Start__t_REG_DWORD__d_4__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKLMSYSTEMCurrentControlSetServicesWerSvc__v_Start__t_REG_DWORD__d_4__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKLMSYSTEMCurrentControlSetServicesWFDSConMgrSvc__v_Start__t_REG_DWORD__d_4__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKLMSYSTEMCurrentControlSetServicesWiaRpc__v_Start__t_REG_DWORD__d_4__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKLMSYSTEMCurrentControlSetServicesWinHttpAutoProxySvc__v_Start__t_REG_DWORD__d_3__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKLMSYSTEMCurrentControlSetServicesWinmgmt__v_Start__t_REG_DWORD__d_2__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKLMSYSTEMCurrentControlSetServicesWinRM__v_Start__t_REG_DWORD__d_4__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKLMSYSTEMCurrentControlSetServicesWlanSvc__v_Start__t_REG_DWORD__d_2__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKLMSYSTEMCurrentControlSetServiceswlidsvc__v_Start__t_REG_DWORD__d_3__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKLMSYSTEMCurrentControlSetServiceswlpasvc__v_Start__t_REG_DWORD__d_4__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKLMSYSTEMCurrentControlSetServicesWManSvc__v_Start__t_REG_DWORD__d_4__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKLMSYSTEMCurrentControlSetServiceswmiApSrv__v_Start__t_REG_DWORD__d_4__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKLMSYSTEMCurrentControlSetServicesWpcMonSvc__v_Start__t_REG_DWORD__d_4__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKLMSYSTEMCurrentControlSetServicesWPDBusEnum__v_Start__t_REG_DWORD__d_4__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKLMSYSTEMCurrentControlSetServicesWSearch__v_Start__t_REG_DWORD__d_2__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKLMSYSTEMCurrentControlSetServiceswuauserv__v_Start__t_REG_DWORD__d_3__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKLMSYSTEMCurrentControlSetServicesWwanSvc__v_Start__t_REG_DWORD__d_4__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKCUSOFTWAREPoliciesMicrosoftWindowsCurrentVersionPushNotifications__v_NoTileApplicationNotification__t_REG_DWORD__d_1__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKLMSYSTEMCurrentControlSetServices_tzautoupdate__v_Start__t_REG_DWORD__d_4__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKLMSYSTEMCurrentControlSetServicesUdkUserSvc__v_Start__t_REG_DWORD__d_4__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKLMSYSTEMCurrentControlSetServicesUevAgentService__v_Start__t_REG_DWORD__d_4__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKLMSYSTEMCurrentControlSetServicesUnistoreSvc__v_Start__t_REG_DWORD__d_4__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKLMSYSTEMCurrentControlSetServicesupnphost__v_Start__t_REG_DWORD__d_4__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKLMSYSTEMCurrentControlSetServicesUserDataSvc__v_Start__t_REG_DWORD__d_4__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKLMSYSTEMCurrentControlSetServicesUserManager__v_Start__t_REG_DWORD__d_2__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKLMSYSTEMCurrentControlSetServicesUsoSvc__v_Start__t_REG_DWORD__d_3__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKLMSYSTEMCurrentControlSetServicesVaultSvc__v_Start__t_REG_DWORD__d_4__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKLMSYSTEMCurrentControlSetServices_vds__v_Start__t_REG_DWORD__d_3__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKLMSYSTEMCurrentControlSetServicesVSS__v_Start__t_REG_DWORD__d_3__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKLMSYSTEMCurrentControlSetServicesW32Time__v_Start__t_REG_DWORD__d_4__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKLMSYSTEMCurrentControlSetServicesWaaSMedicSvc__v_Start__t_REG_DWORD__d_4__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKLMSYSTEMCurrentControlSetServicesWalletService__v_Start__t_REG_DWORD__d_4__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKLMSYSTEMCurrentControlSetServicesWarpJITSvc__v_Start__t_REG_DWORD__d_4__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKLMSYSTEMCurrentControlSetServiceswbengine__v_Start__t_REG_DWORD__d_4__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKLMSYSTEMCurrentControlSetServicesWbioSrvc__v_Start__t_REG_DWORD__d_4__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKLMSYSTEMCurrentControlSetServicesWcmsvc__v_Start__t_REG_DWORD__d_2__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKLMSYSTEMCurrentControlSetServiceswcncsvc__v_Start__t_REG_DWORD__d_4__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKLMSYSTEMCurrentControlSetServicesWdiServiceHost__v_Start__t_REG_DWORD__d_4__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKLMSYSTEMCurrentControlSetServicesWdiSystemHost__v_Start__t_REG_DWORD__d_4__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKLMSYSTEMCurrentControlSetServicesWebClient__v_Start__t_REG_DWORD__d_4__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKLMSYSTEMCurrentControlSetServicesWecsvc__v_Start__t_REG_DWORD__d_4__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKLMSYSTEMCurrentControlSetServicesWEPHOSTSVC__v_Start__t_REG_DWORD__d_4__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKLMSYSTEMCurrentControlSetServiceswercplsupport__v_Start__t_REG_DWORD__d_4__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKLMSYSTEMCurrentControlSetServicesWerSvc__v_Start__t_REG_DWORD__d_4__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKLMSYSTEMCurrentControlSetServicesWFDSConMgrSvc__v_Start__t_REG_DWORD__d_4__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKLMSYSTEMCurrentControlSetServicesWiaRpc__v_Start__t_REG_DWORD__d_4__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKLMSYSTEMCurrentControlSetServicesWinHttpAutoProxySvc__v_Start__t_REG_DWORD__d_3__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKLMSYSTEMCurrentControlSetServicesWinmgmt__v_Start__t_REG_DWORD__d_2__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKLMSYSTEMCurrentControlSetServicesWinRM__v_Start__t_REG_DWORD__d_4__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKLMSYSTEMCurrentControlSetServicesWlanSvc__v_Start__t_REG_DWORD__d_2__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKLMSYSTEMCurrentControlSetServiceswlidsvc__v_Start__t_REG_DWORD__d_3__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKLMSYSTEMCurrentControlSetServiceswlpasvc__v_Start__t_REG_DWORD__d_4__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKLMSYSTEMCurrentControlSetServicesWManSvc__v_Start__t_REG_DWORD__d_4__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKLMSYSTEMCurrentControlSetServiceswmiApSrv__v_Start__t_REG_DWORD__d_4__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKLMSYSTEMCurrentControlSetServicesWpcMonSvc__v_Start__t_REG_DWORD__d_4__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKLMSYSTEMCurrentControlSetServicesWPDBusEnum__v_Start__t_REG_DWORD__d_4__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKLMSYSTEMCurrentControlSetServicesWSearch__v_Start__t_REG_DWORD__d_2__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKLMSYSTEMCurrentControlSetServiceswuauserv__v_Start__t_REG_DWORD__d_3__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKLMSYSTEMCurrentControlSetServicesWwanSvc__v_Start__t_REG_DWORD__d_4__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKCUSOFTWAREPoliciesMicrosoftWindowsCurrentVersionPushNotifications__v_NoTileApplicationNotification__t_REG_DWORD__d_1__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKLMSYSTEMCurrentControlSetServiceshidserv__v_Start__t_REG_DWORD__d_3__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKLMSYSTEMCurrentControlSetServicesHvHost__v_Start__t_REG_DWORD__d_4__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKLMSYSTEMCurrentControlSetServicesicssvc__v_Start__t_REG_DWORD__d_3__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKLMSYSTEMCurrentControlSetServicesIKEEXT__v_Start__t_REG_DWORD__d_4__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKLMSYSTEMCurrentControlSetServicesInstallService__v_Start__t_REG_DWORD__d_3__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKLMSYSTEMCurrentControlSetServicesiphlpsvc__v_Start__t_REG_DWORD__d_2__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKLMSYSTEMCurrentControlSetServicesIpxlatCfgSvc__v_Start__t_REG_DWORD__d_4__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKLMSYSTEMCurrentControlSetServicesKeyIso__v_Start__t_REG_DWORD__d_3__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKLMSYSTEMCurrentControlSetServicesKtmRm__v_Start__t_REG_DWORD__d_4__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKLMSYSTEMCurrentControlSetServicesLanmanServer__v_Start__t_REG_DWORD__d_4__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKLMSYSTEMCurrentControlSetServicesLanmanWorkstation__v_Start__t_REG_DWORD__d_4__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKLMSYSTEMCurrentControlSetServiceslfsvc__v_Start__t_REG_DWORD__d_4__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKLMSYSTEMCurrentControlSetServicesLicenseManager__v_Start__t_REG_DWORD__d_3__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKLMSYSTEMCurrentControlSetServiceslltdsvc__v_Start__t_REG_DWORD__d_4__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKLMSYSTEMCurrentControlSetServiceslmhosts__v_Start__t_REG_DWORD__d_4__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKLMSYSTEMCurrentControlSetServicesLSM__v_Start__t_REG_DWORD__d_2__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKLMSYSTEMCurrentControlSetServicesLxpSvc__v_Start__t_REG_DWORD__d_4__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKLMSYSTEMCurrentControlSetServicesMapsBroker__v_Start__t_REG_DWORD__d_4__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKLMSYSTEMCurrentControlSetServicesMessagingService__v_Start__t_REG_DWORD__d_4__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKLMSYSTEMCurrentControlSetServicesmpssvc__v_Start__t_REG_DWORD__d_2__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKLMSYSTEMCurrentControlSetServicesMSDTC__v_Start__t_REG_DWORD__d_4__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKLMSYSTEMCurrentControlSetServicesMSiSCSI__v_Start__t_REG_DWORD__d_4__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKLMSYSTEMCurrentControlSetServicesmsiserver__v_Start__t_REG_DWORD__d_3__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKLMSYSTEMCurrentControlSetServicesNaturalAuthentication__v_Start__t_REG_DWORD__d_4__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKLMSYSTEMCurrentControlSetServicesNcaSvc__v_Start__t_REG_DWORD__d_4__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKLMSYSTEMCurrentControlSetServicesNcbService__v_Start__t_REG_DWORD__d_3__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKLMSYSTEMCurrentControlSetServicesNcdAutoSetup__v_Start__t_REG_DWORD__d_4__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKLMSYSTEMCurrentControlSetServicesNetlogon__v_Start__t_REG_DWORD__d_4__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKLMSYSTEMCurrentControlSetServicesNetman__v_Start__t_REG_DWORD__d_3__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKLMSYSTEMCurrentControlSetServices_netprofm__v_Start__t_REG_DWORD__d_3__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKLMSYSTEMCurrentControlSetServicesNetSetupSvc__v_Start__t_REG_DWORD__d_3__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKLMSYSTEMCurrentControlSetServicesNetTcpPortSharing__v_Start__t_REG_DWORD__d_4__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKLMSYSTEMCurrentControlSetServicesNgcCtnrSvc__v_Start__t_REG_DWORD__d_4__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKLMSYSTEMCurrentControlSetServicesNgcSvc__v_Start__t_REG_DWORD__d_4__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKLMSYSTEMCurrentControlSetServicesNlaSvc__v_Start__t_REG_DWORD__d_2__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKLMSYSTEMCurrentControlSetServices_nsi__v_Start__t_REG_DWORD__d_2__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKLMSYSTEMCurrentControlSetServicesp2pimsvc__v_Start__t_REG_DWORD__d_4__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKLMSYSTEMCurrentControlSetServicesp2psvc__v_Start__t_REG_DWORD__d_4__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKLMSYSTEMCurrentControlSetServicesPcaSvc__v_Start__t_REG_DWORD__d_4__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKLMSYSTEMCurrentControlSetServicesPeerDistSvc__v_Start__t_REG_DWORD__d_4__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKLMSYSTEMCurrentControlSetServicesPerfHost__v_Start__t_REG_DWORD__d_4__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKLMSYSTEMCurrentControlSetServicesPhoneSvc__v_Start__t_REG_DWORD__d_4__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKLMSYSTEMCurrentControlSetServicesPimIndexMaintenanceSvc__v_Start__t_REG_DWORD__d_4__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKLMSYSTEMCurrentControlSetServicespla__v_Start__t_REG_DWORD__d_4__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKLMSYSTEMCurrentControlSetServicesPlugPlay__v_Start__t_REG_DWORD__d_3__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKLMSYSTEMCurrentControlSetServicesPNRPAutoReg__v_Start__t_REG_DWORD__d_4__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKLMSYSTEMCurrentControlSetServicesPNRPsvc__v_Start__t_REG_DWORD__d_4__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKLMSYSTEMCurrentControlSetServicesPolicyAgent__v_Start__t_REG_DWORD__d_4__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKLMSYSTEMCurrentControlSetServicesPower__v_Start__t_REG_DWORD__d_2__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKLMSYSTEMCurrentControlSetServicesPrintWorkflowUserSvc__v_Start__t_REG_DWORD__d_4__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKLMSYSTEMCurrentControlSetServicesProfSvc__v_Start__t_REG_DWORD__d_2__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKLMSYSTEMCurrentControlSetServicesPushToInstall__v_Start__t_REG_DWORD__d_4__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKLMSYSTEMCurrentControlSetServicesQWAVE__v_Start__t_REG_DWORD__d_4__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKLMSYSTEMCurrentControlSetServicesRasAuto__v_Start__t_REG_DWORD__d_3__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKLMSYSTEMCurrentControlSetServicesRasMan__v_Start__t_REG_DWORD__d_2__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKLMSYSTEMCurrentControlSetServicesRemoteAccess__v_Start__t_REG_DWORD__d_4__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKLMSYSTEMCurrentControlSetServicesRmSvc__v_Start__t_REG_DWORD__d_4__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKLMSYSTEMCurrentControlSetServicesRpcEptMapper__v_Start__t_REG_DWORD__d_2__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKLMSYSTEMCurrentControlSetServicesRpcSs__v_Start__t_REG_DWORD__d_2__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKLMSYSTEMCurrentControlSetServicesSamSs__v_Start__t_REG_DWORD__d_4__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKLMSYSTEMCurrentControlSetServicesSCardSvr__v_Start__t_REG_DWORD__d_4__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKLMSYSTEMCurrentControlSetServicesScDeviceEnum__v_Start__t_REG_DWORD__d_4__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKLMSYSTEMCurrentControlSetServicesSchedule__v_Start__t_REG_DWORD__d_2__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKLMSYSTEMCurrentControlSetServicesSCPolicySvc__v_Start__t_REG_DWORD__d_4__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKLMSYSTEMCurrentControlSetServicesSDRSVC__v_Start__t_REG_DWORD__d_4__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKLMSYSTEMCurrentControlSetServices_seclogon__v_Start__t_REG_DWORD__d_4__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add_HKLMSYSTEMCurrentControlSetServicesSEMgrSvc__v_Start__t_REG_DWORD__d_4__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.powershell__c_Invoke_WebRequest__Uri_https:__cdn.discordapp.com_attachments_912730883625214025_1098692473649365052_Premium_Settings_V2.nip__OutFile_C:ExmNvProfilePremium_Settings_V2.nip
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.powershell__c_Invoke_WebRequest__Uri_https:__cdn.discordapp.com_attachments_912730883625214025_1098688771433713664_nvcplui.exe__OutFile_C:ExmNvidia_nvcplui.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.powershell__c_Invoke_WebRequest__Uri_https:__cdn.discordapp.com_attachments_912730883625214025_1098688771903471676_nvcpluir.dll__OutFile_C:ExmNvidia_nvcpluir.dll
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.powershell__c_Invoke_WebRequest__Uri_https:__cdn.discordapp.com_attachments_912730883625214025_1098686020536516652_Uninstall_Apps_You_Dont_Need.lnk__OutFile_C:ExmShortcutsUninstall_Apps_You_Dont_Need.lnk
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.powershell__c_Invoke_WebRequest__Uri_https:__cdn.discordapp.com_attachments_912730883625214025_1098685437586972753_FilterKeysSetter.exe__OutFile_C:ExmResFilterKeysSetter.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.powershell__c_Invoke_WebRequest__Uri_https:__cdn.discordapp.com_attachments_912730883625214025_1099033552022147182_PowerPlan.pow__OutFile_C:ExmPowerPlanExmPremiumPowerPlan.pow
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.powershell__c_Invoke_WebRequest__Uri_https:__cdn.discordapp.com_attachments_912730883625214025_1092381059167031367_DeviceCleaner.exe__OutFile_C:ExmResDeviceCleaner.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.powershell__c_Invoke_WebRequest__Uri_https:__cdn.discordapp.com_attachments_912730883625214025_1092385414318403735_NVCleanstall.exe__OutFile_C:ExmResNVCleanstall.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.powershell__c_Invoke_WebRequest__Uri_https:__cdn.discordapp.com_attachments_912730883625214025_1092385385998462997_NvidiaProfileInspector.exe__OutFile_C:ExmResNvidiaProfileInspector.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.powershell__c_Invoke_WebRequest__Uri_https:__cdn.discordapp.com_attachments_912730883625214025_1092399367903772682_Wub.exe__OutFile_C:ExmResWub.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.powershell__c_Invoke_WebRequest__Uri_https:__cdn.discordapp.com_attachments_912730883625214025_1092399335964168202_MSI_Utility_V3.exe__OutFile_C:ExmResMSI_Utility_V3.exe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add_HKLMSYSTEMCurrentControlSetServicesdmwappushserviceStart__t_REG_DWORD__d_4__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add_HKLMSYSTEMCurrentControlSetServicesDiagTrackStart__t_REG_DWORD__d_4__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add_HKLMSystemCurrentControlSetServicesAppinfoStart__t_REG_DWORD__d_4__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add_HKLMSYSTEMCurrentControlSetServices_fhsvcStart__t_REG_DWORD__d_4__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add_HKLMSYSTEMCurrentControlSetServicesWbioSrvcStart__t_REG_DWORD__d_4__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add_HKLMSYSTEMCurrentControlSetServicesFontCacheStart__t_REG_DWORD__d_4__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add_HKLMSYSTEMCurrentControlSetServicesFontCache3.0.0.0Start__t_REG_DWORD__d_4__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add_HKLMSYSTEMCurrentControlSetServicesGraphicsPerfSvcStart__t_REG_DWORD__d_4__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add_HKLMSYSTEMCurrentControlSetServicesMessagingServiceStart__t_REG_DWORD__d_4__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add_HKLMSYSTEMCurrentControlSetServicesWpnUserServiceStart__t_REG_DWORD__d_4__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_DoSvc
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_config_DoSvc_start_disabled
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_DPS
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_config_DPS_start_disabled
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_DPS
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_config_DPS_start_disabled
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_MapsBroker
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_config_MapsBroker_start_disabled
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_lfsvc
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_config_lfsvc_start_disabled
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_CscService
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_config_CscService_start_disabled
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_SEMgrSvc
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_config_SEMgrSvc_start_disabled
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_PhoneSvc
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_config_PhoneSvc_start_disabled_sc_stop_RemoteRegistry
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_config_RemoteRegistry_start_disabled
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_RetailDemo
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_config_RetailDemo_start_disabled
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_SysMain
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_config_SysMain_start_disabled
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_WalletService
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_config_WalletService_start_disabled
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_RemoteRegistry
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_config_RemoteRegistry_start_disabled
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_RetailDemo
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_config_RetailDemo_start_disabled
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_SysMain
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_config_SysMain_start_disabled
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_WalletService
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_config_WalletService_start_disabled
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_W32Time
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_config_W32Time_start_disabled
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_XboxGipSvc
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_config_XboxGipSvc_start_disabled
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_xbgm
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_config_xbgm_start_disabled
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_XblAuthManager
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_config_XblAuthManager_start_disabled
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_XblGameSave
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_config_XblGameSave_start_disabled
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_XboxNetApiSvc
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_config_XboxNetApiSvc_start_disabled
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_W32Time
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_config_W32Time_start_disabled
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_XboxGipSvc
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_config_XboxGipSvc_start_disabled
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_xbgm
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_config_xbgm_start_disabled
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_XblAuthManager
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_config_XblAuthManager_start_disabled
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_XblGameSave
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_config_XblGameSave_start_disabled
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_stop_XboxNetApiSvc
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_config_XboxNetApiSvc_start_disabled
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftWindowsCurrentVersionSettingSync___v__SyncPolicy___t_REG_DWORD__d__5___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftWindowsCurrentVersionSettingSyncGroupsPersonalization___v__Enabled___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftWindowsCurrentVersionSettingSyncGroupsBrowserSettings___v__Enabled___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftWindowsCurrentVersionSettingSyncGroupsCredentials___v__Enabled___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftWindowsCurrentVersionSettingSyncGroupsAccessibility___v__Enabled___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftWindowsCurrentVersionSettingSyncGroupsWindows___v__Enabled___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add_HKCUSOFTWAREMicrosoftWindowsCurrentVersionThemesPersonalizeEnableTransparency__t_REG_DWORD__d_0__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftPolicyManagerdefaultApplicationManagementAllowGameDVR___v__value___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREPoliciesMicrosoftWindowsGameDVR___v__AllowGameDVR___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSystemGameConfigStore___v__GameDVR_Enabled___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSystemGameConfigStore___v__GameDVR_FSEBehaviorMode___t_REG_DWORD__d__2___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSystemGameConfigStore___v__GameDVR_HonorUserFSEBehaviorMode___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSystemGameConfigStore___v__GameDVR_DXGIHonorFSEWindowsCompatible___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSystemGameConfigStore___v__GameDVR_EFSEFeatureFlags___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftWindowsCurrentVersionGameDVR___v__AppCaptureEnabled___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREPoliciesMicrosoftWindowsGameDVR___v__AllowGameDVR___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSystemGameConfigStore___v__GameDVR_Enabled___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSystemGameConfigStore___v__GameDVR_FSEBehaviorMode___t_REG_DWORD__d__2___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSystemGameConfigStore___v__GameDVR_HonorUserFSEBehaviorMode___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSystemGameConfigStore___v__GameDVR_DXGIHonorFSEWindowsCompatible___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSystemGameConfigStore___v__GameDVR_EFSEFeatureFlags___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftWindowsCurrentVersionGameDVR___v__AppCaptureEnabled___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREPoliciesMicrosoftWindowsGameDVR___v__AllowGameDVR___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSystemGameConfigStore___v__GameDVR_Enabled___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSystemGameConfigStore___v__GameDVR_FSEBehaviorMode___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSystemGameConfigStore___v__GameDVR_HonorUserFSEBehaviorMode___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSystemGameConfigStore___v__GameDVR_DXGIHonorFSEWindowsCompatible___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSystemGameConfigStore___v__GameDVR_EFSEFeatureFlags___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftWindowsCurrentVersionGameDVR___v__AppCaptureEnabled___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add_HKLMSYSTEMCurrentControlSetControlGraphicsDriversHwSchMode__t_REG_DWORD__d_2__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUControl_PanelAccessibilityMouseKeys___v__Flags___t_REG_SZ__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUControl_PanelAccessibilityStickyKeys___v__Flags___t_REG_SZ__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUControl_PanelAccessibilityKeyboard_Response___v__Flags___t_REG_SZ__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUControl_PanelAccessibilityToggleKeys___v__Flags___t_REG_SZ__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftWindowsCurrentVersionAdvertisingInfo___v__Enabled___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUControl_PanelInternationalUser_Profile___v__HttpAcceptLanguageOptOut___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftWindowsCurrentVersionExplorerAdvanced___v__Start_TrackProgs___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftWindowsCurrentVersionContentDeliveryManager___v__SubscribedContent_338393Enabled___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftWindowsCurrentVersionContentDeliveryManager___v__SubscribedContent_353694Enabled___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftWindowsCurrentVersionContentDeliveryManager___v__SubscribedContent_353696Enabled___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftSpeech_OneCoreSettingsOnlineSpeechPrivacy___v__HasAccepted___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftPersonalizationSettings___v__AcceptedPrivacyPolicy___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftInputPersonalization___v__RestrictImplicitInkCollection___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftInputPersonalization___v__RestrictImplicitTextCollection___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftInputPersonalizationTrainedDataStore___v__HarvestContacts___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftWindowsCurrentVersionDiagnosticsDiagTrack___v__ShowedToastAtLevel___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREPoliciesMicrosoftWindowsDataCollection___v__AllowTelemetry___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftWindowsCurrentVersionPrivacy___v__TailoredExperiencesWithDiagnosticDataEnabled___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftSiufRules___v__NumberOfSIUFInPeriod___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_delete__HKCUSOFTWAREMicrosoftSiufRules___v__PeriodInNanoSeconds___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREPoliciesMicrosoftWindowsSystem___v__PublishUserActivities___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREPoliciesMicrosoftWindowsSystem___v__UploadUserActivities___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindowsCurrentVersionCapabilityAccessManagerConsentStoreuserNotificationListener___v__Value___t_REG_SZ__d__Deny___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftWindowsCurrentVersionCapabilityAccessManagerConsentStorelocation___v__Value___t_REG_SZ__d__Deny___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftWindowsCurrentVersionCapabilityAccessManagerConsentStore_appDiagnostics___v__Value___t_REG_SZ__d__Deny___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftWindowsCurrentVersionCapabilityAccessManagerConsentStoreuserAccountInformation___v__Value___t_REG_SZ__d__Deny___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftWindowsCurrentVersionBackgroundAccessApplications___v__GlobalUserDisabled___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftWindowsCurrentVersionSearch___v__BackgroundAppGlobalToggle___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUControl_PanelDesktopWindowMetrics___v__MinAnimate___t_REG_SZ__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUControl_PanelDesktopWindowMetrics___v__MaxAnimate___t_REG_SZ__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftWindowsCurrentVersionExplorerAdvanced___v__ExtendedUIHoverTime___t_REG_DWORD__d__196608___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftWindowsCurrentVersionExplorerAdvanced___v__DontPrettyPath___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftWindowsCurrentVersionExplorerAdvanced___v__ListviewShadow___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftWindowsCurrentVersionExplorerAdvanced___v__TaskbarAnimations___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSoftwareMicrosoftWindowsDWM___v__EnableAeroPeek___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREPoliciesMicrosoftWindowsDWM___v__DWMWA_TRANSITIONS_FORCEDISABLED___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREPoliciesMicrosoftWindowsDWM___v__DisallowAnimations___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSoftwareMicrosoftWindowsCurrentVersionPoliciesExplorer___v__NoLowDiskSpaceChecks___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSoftwareMicrosoftWindowsCurrentVersionPoliciesExplorer___v__LinkResolveIgnoreLinkInfo___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSoftwareMicrosoftWindowsCurrentVersionPoliciesExplorer___v__NoResolveSearch___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSoftwareMicrosoftWindowsCurrentVersionPoliciesExplorer___v__NoResolveTrack___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSoftwareMicrosoftWindowsCurrentVersionPoliciesExplorer___v__NoInternetOpenWith___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSoftwareMicrosoftWindowsCurrentVersionPoliciesExplorer___v__NoInstrumentation___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUControl_PanelDesktop___v__FontSmoothing___t_REG_SZ__d__2___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUControl_PanelDesktop___v__FontSmoothingType___t_REG_DWORD__d__2___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftWindowsCurrentVersionExplorerMultitaskingViewAllUpView___v__AllUpView___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftWindowsCurrentVersionExplorerMultitaskingViewAllUpView___v__Remove_TaskView___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesusbxhciParameters___v__ThreadPriority___t_REG_DWORD__d__31___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesUSBHUB3Parameters___v__ThreadPriority___t_REG_DWORD__d__31___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServices_nvlddmkmParameters___v__ThreadPriority___t_REG_DWORD__d__31___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesNDISParameters___v__ThreadPriority___t_REG_DWORD__d__31___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSoftwareMicrosoftWindowsCurrentVersionExplorerAdvanced___v__DisallowShaking___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSoftwareMicrosoftWindowsCurrentVersionExplorerAdvanced___v__EnableBalloonTips___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftWindowsCurrentVersionExplorerSerialize___v__StartupDelayInMSec___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindowsCurrentVersionExplorer___v__Max_Cached_Icons___t_REG_SZ__d__1750___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindows_NTCurrentVersionMultimediaSystemProfileTasksGames___v__Affinity___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindows_NTCurrentVersionMultimediaSystemProfileTasksGames___v__Background_Only___t_REG_SZ__d__False___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindows_NTCurrentVersionMultimediaSystemProfileTasksGames___v__Clock_Rate___t_REG_DWORD__d__10000___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindows_NTCurrentVersionMultimediaSystemProfileTasksGames___v__GPU_Priority___t_REG_DWORD__d__8___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindows_NTCurrentVersionMultimediaSystemProfileTasksGames___v__Priority___t_REG_DWORD__d__6___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindows_NTCurrentVersionMultimediaSystemProfileTasksGames___v__Scheduling_Category___t_REG_SZ__d__High___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindows_NTCurrentVersionMultimediaSystemProfileTasksGames___v__SFIO_Priority___t_REG_SZ__d__High___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindows_NTCurrentVersionMultimediaSystemProfileTasksGames___v__BackgroundPriority___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindows_NTCurrentVersionMultimediaSystemProfileTasksGames___v__Latency_Sensitive___t_REG_SZ__d__True___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlSession_ManagerPower___v__CoalescingTimerInterval___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlPowerPowerSettings54533251_82be_4824_96c1_47b60b740d0075b0ae3f_bce0_45a7_8c89_c9611c25e100___v__Attributes___t_REG_DWORD__d__2___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlPowerPowerSettings54533251_82be_4824_96c1_47b60b740d0075b0ae3f_bce0_45a7_8c89_c9611c25e100___v__Affinity___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlPowerPowerSettings54533251_82be_4824_96c1_47b60b740d0075b0ae3f_bce0_45a7_8c89_c9611c25e100___v__Background_Only___t_REG_SZ__d__False___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlPowerPowerSettings54533251_82be_4824_96c1_47b60b740d0075b0ae3f_bce0_45a7_8c89_c9611c25e100___v__Clock_Rate___t_REG_DWORD__d__10000___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlPowerPowerSettings54533251_82be_4824_96c1_47b60b740d0075b0ae3f_bce0_45a7_8c89_c9611c25e100___v__GPU_Priority___t_REG_DWORD__d__8___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlPowerPowerSettings54533251_82be_4824_96c1_47b60b740d0075b0ae3f_bce0_45a7_8c89_c9611c25e100___v__Priority___t_REG_DWORD__d__6___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlPowerPowerSettings54533251_82be_4824_96c1_47b60b740d0075b0ae3f_bce0_45a7_8c89_c9611c25e100___v__Scheduling_Category___t_REG_SZ__d__High___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlPowerPowerSettings54533251_82be_4824_96c1_47b60b740d0075b0ae3f_bce0_45a7_8c89_c9611c25e100___v__SFIO_Priority___t_REG_SZ__d__High___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlPowerPowerSettings54533251_82be_4824_96c1_47b60b740d0075b0ae3f_bce0_45a7_8c89_c9611c25e100___v__BackgroundPriority___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlPowerPowerSettings54533251_82be_4824_96c1_47b60b740d0075b0ae3f_bce0_45a7_8c89_c9611c25e100___v__Latency_Sensitive___t_REG_SZ__d__True___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlPowerEnergyEstimationTaggedEnergy___v__DisableTaggedEnergyLogging___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlPowerEnergyEstimationTaggedEnergy___v__TelemetryMaxApplication___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlPowerEnergyEstimationTaggedEnergy___v__TelemetryMaxTagPerApplication___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlProcessor___v__Cstates___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlProcessor___v__Capabilities___t_REG_DWORD__d__516198___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlPower___v__HighPerformance___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlPower___v__HighestPerformance___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlPower___v__MinimumThrottlePercent___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlPower___v__MaximumThrottlePercent___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlPower___v__MaximumPerformancePercent___t_REG_DWORD__d__100___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlPower___v__Class1InitialUnparkCount___t_REG_DWORD__d__100___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlPower___v__InitialUnparkCount___t_REG_DWORD__d__100___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlPower___v__MaximumPerformancePercent___t_REG_DWORD__d__100___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlPowerPowerThrottling___v__PowerThrottlingOff___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREPoliciesMicrosoftWindowsWcmSvcGroupPolicy___v__fDisablePowerManagement___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlPowerPDCActivatorsDefaultVetoPolicy___v__EA:EnergySaverEngaged___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlPowerPDCActivators28VetoPolicy___v__EA:PowerStateDischarging___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlPowerPolicySettingsMisc___v__DeviceIdlePolicy___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlPowerPolicySettingsProcessor___v__PerfEnergyPreference___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlPowerPolicySettingsProcessor___v__CPMinCores___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlPowerPolicySettingsProcessor___v__CPMaxCores___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlPowerPolicySettingsProcessor___v__CPMinCores1___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlPowerPolicySettingsProcessor___v__CPMaxCores1___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlPowerPolicySettingsProcessor___v__CpLatencyHintUnpark1___t_REG_DWORD__d__100___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlPowerPolicySettingsProcessor___v__CPDistribution___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlPowerPolicySettingsProcessor___v__CpLatencyHintUnpark___t_REG_DWORD__d__100___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlPowerPolicySettingsProcessor___v__MaxPerformance1___t_REG_DWORD__d__100___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlPowerPolicySettingsProcessor___v__MaxPerformance___t_REG_DWORD__d__100___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlPowerPolicySettingsProcessor___v__CPDistribution1___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlPowerPolicySettingsProcessor___v__CPHEADROOM___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUControl_PanelPowerCfgGlobalPowerPolicy___v__Policies___t_REG_BINARY__d__01000000020000000100000000000000020000000000000000000000000000002c0100003232030304000000040000000000000000000000840300002c01000000000000840300000001646464640000___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUControl_PanelPowerCfgGlobalPowerPolicy___v__Policies___t_REG_BINARY__d__01000000020000000100000000000000020000000000000000000000000000002c0100003232030304000000040000000000000000000000840300002c01000000000000840300000001646464640000___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServices_nvlddmkm___v__DisableWriteCombining___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServices_nvlddmkmFTS___v__EnableRID61684___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServices_nvlddmkm___v__DisablePreemption___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServices_nvlddmkm___v__DisableCudaContextPreemption___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlGraphicsDriversScheduler___v__EnablePreemption___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlGraphicsDriversScheduler___v__PlatformSupportMiracast___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUControl_PanelDesktop___v__AutoEndTasks___t_REG_SZ__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUControl_PanelDesktop___v__HungAppTimeout___t_REG_SZ__d__1000___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUControl_PanelDesktop___v__WaitToKillAppTimeout___t_REG_SZ__d__2000___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUControl_PanelDesktop___v__LowLevelHooksTimeout___t_REG_SZ__d__1000___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUControl_PanelDesktop___v__MenuShowDelay___t_REG_SZ__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControl___v__WaitToKillServiceTimeout___t_REG_SZ__d__2000___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindows_NTCurrentVersionMultimediaSystemProfileTasksAudio___v__Affinity___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindows_NTCurrentVersionMultimediaSystemProfileTasksAudio___v__Background_Only___t_REG_SZ__d__True___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindows_NTCurrentVersionMultimediaSystemProfileTasksAudio___v__Clock_Rate___t_REG_DWORD__d__10000___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindows_NTCurrentVersionMultimediaSystemProfileTasksAudio___v__GPU_Priority___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindows_NTCurrentVersionMultimediaSystemProfileTasksAudio___v__Priority___t_REG_DWORD__d__2___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindows_NTCurrentVersionMultimediaSystemProfileTasksAudio___v__Scheduling_Category___t_REG_SZ__d__Medium___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindows_NTCurrentVersionMultimediaSystemProfileTasksAudio___v__SFIO_Priority___t_REG_SZ__d__High___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindows_NTCurrentVersionMultimediaSystemProfileTasksCapture___v__Affinity___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindows_NTCurrentVersionMultimediaSystemProfileTasksCapture___v__Background_Only___t_REG_SZ__d__True___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindows_NTCurrentVersionMultimediaSystemProfileTasksCapture___v__Clock_Rate___t_REG_DWORD__d__10000___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindows_NTCurrentVersionMultimediaSystemProfileTasksCapture___v__GPU_Priority___t_REG_DWORD__d__8___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindows_NTCurrentVersionMultimediaSystemProfileTasksCapture___v__Priority___t_REG_DWORD__d__5___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindows_NTCurrentVersionMultimediaSystemProfileTasksCapture___v__Scheduling_Category___t_REG_SZ__d__Medium___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindows_NTCurrentVersionMultimediaSystemProfileTasksCapture___v__SFIO_Priority___t_REG_SZ__d__Normal___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindows_NTCurrentVersionMultimediaSystemProfileTasksDisplayPostProcessing___v__Affinity___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindows_NTCurrentVersionMultimediaSystemProfileTasksDisplayPostProcessing___v__Background_Only___t_REG_SZ__d__True___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindows_NTCurrentVersionMultimediaSystemProfileTasksDisplayPostProcessing___v__BackgroundPriority___t_REG_DWORD__d__24___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindows_NTCurrentVersionMultimediaSystemProfileTasksDisplayPostProcessing___v__Clock_Rate___t_REG_DWORD__d__10000___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindows_NTCurrentVersionMultimediaSystemProfileTasksDisplayPostProcessing___v__GPU_Priority___t_REG_DWORD__d__18___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindows_NTCurrentVersionMultimediaSystemProfileTasksDisplayPostProcessing___v__Priority___t_REG_DWORD__d__8___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindows_NTCurrentVersionMultimediaSystemProfileTasksDisplayPostProcessing___v__Scheduling_Category___t_REG_SZ__d__High___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindows_NTCurrentVersionMultimediaSystemProfileTasksDisplayPostProcessing___v__SFIO_Priority___t_REG_SZ__d__High___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindows_NTCurrentVersionMultimediaSystemProfileTasksDisplayPostProcessing___v__Latency_Sensitive___t_REG_SZ__d__True___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindows_NTCurrentVersionMultimediaSystemProfileTasksDistribution___v__Affinity___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindows_NTCurrentVersionMultimediaSystemProfileTasksDistribution___v__Background_Only___t_REG_SZ__d__True___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindows_NTCurrentVersionMultimediaSystemProfileTasksDistribution___v__Clock_Rate___t_REG_DWORD__d__10000___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindows_NTCurrentVersionMultimediaSystemProfileTasksDistribution___v__GPU_Priority___t_REG_DWORD__d__8___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindows_NTCurrentVersionMultimediaSystemProfileTasksDistribution___v__Priority___t_REG_DWORD__d__4___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindows_NTCurrentVersionMultimediaSystemProfileTasksDistribution___v__Scheduling_Category___t_REG_SZ__d__Medium___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindows_NTCurrentVersionMultimediaSystemProfileTasksDistribution___v__SFIO_Priority___t_REG_SZ__d__Normal___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindows_NTCurrentVersionMultimediaSystemProfileTasksLow_Latency___ve__t_REG_SZ__d_____f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindows_NTCurrentVersionMultimediaSystemProfileTasksLow_Latency___v__Affinity___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindows_NTCurrentVersionMultimediaSystemProfileTasksLow_Latency___v__Priority___t_REG_DWORD__d__3___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindows_NTCurrentVersionMultimediaSystemProfileTasksLow_Latency___v__Background_Only___t_REG_SZ__d__False___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindows_NTCurrentVersionMultimediaSystemProfileTasksLow_Latency___v__Clock_Rate___t_REG_DWORD__d__10000___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindows_NTCurrentVersionMultimediaSystemProfileTasksLow_Latency___v__GPU_Priority___t_REG_DWORD__d__8___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindows_NTCurrentVersionMultimediaSystemProfileTasksLow_Latency___v__Scheduling_Category___t_REG_SZ__d__High___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindows_NTCurrentVersionMultimediaSystemProfileTasksLow_Latency___v__SFIO_Priority___t_REG_SZ__d__High___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindows_NTCurrentVersionMultimediaSystemProfileTasksLow_Latency___v__Latency_Sensitive___t_REG_SZ__d__True___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindows_NTCurrentVersionMultimediaSystemProfileTasksPlayback___v__Affinity___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindows_NTCurrentVersionMultimediaSystemProfileTasksPlayback___v__Background_Only___t_REG_SZ__d__False___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindows_NTCurrentVersionMultimediaSystemProfileTasksPlayback___v__BackgroundPriority___t_REG_DWORD__d__4___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindows_NTCurrentVersionMultimediaSystemProfileTasksPlayback___v__Clock_Rate___t_REG_DWORD__d__10000___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindows_NTCurrentVersionMultimediaSystemProfileTasksPlayback___v__GPU_Priority___t_REG_DWORD__d__8___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindows_NTCurrentVersionMultimediaSystemProfileTasksPlayback___v__Priority___t_REG_DWORD__d__3___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindows_NTCurrentVersionMultimediaSystemProfileTasksPlayback___v__Scheduling_Category___t_REG_SZ__d__Medium___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindows_NTCurrentVersionMultimediaSystemProfileTasksPlayback___v__SFIO_Priority___t_REG_SZ__d__Normal___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindows_NTCurrentVersionMultimediaSystemProfileTasksPro_Audio___v__Affinity___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindows_NTCurrentVersionMultimediaSystemProfileTasksPro_Audio___v__Background_Only___t_REG_SZ__d__False___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindows_NTCurrentVersionMultimediaSystemProfileTasksPro_Audio___v__Clock_Rate___t_REG_DWORD__d__10000___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindows_NTCurrentVersionMultimediaSystemProfileTasksPro_Audio___v__GPU_Priority___t_REG_DWORD__d__8___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindows_NTCurrentVersionMultimediaSystemProfileTasksPro_Audio___v__Priority___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindows_NTCurrentVersionMultimediaSystemProfileTasksPro_Audio___v__Scheduling_Category___t_REG_SZ__d__High___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindows_NTCurrentVersionMultimediaSystemProfileTasksPro_Audio___v__SFIO_Priority___t_REG_SZ__d__Normal___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindows_NTCurrentVersionMultimediaSystemProfileTasksWindow_Manager___v__Affinity___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindows_NTCurrentVersionMultimediaSystemProfileTasksWindow_Manager___v__Background_Only___t_REG_SZ__d__True___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindows_NTCurrentVersionMultimediaSystemProfileTasksWindow_Manager___v__Clock_Rate___t_REG_DWORD__d__10000___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindows_NTCurrentVersionMultimediaSystemProfileTasksWindow_Manager___v__GPU_Priority___t_REG_DWORD__d__8___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindows_NTCurrentVersionMultimediaSystemProfileTasksWindow_Manager___v__Priority___t_REG_DWORD__d__5___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindows_NTCurrentVersionMultimediaSystemProfileTasksWindow_Manager___v__Scheduling_Category___t_REG_SZ__d__Medium___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindows_NTCurrentVersionMultimediaSystemProfileTasksWindow_Manager___v__SFIO_Priority___t_REG_SZ__d__Normal___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlSession_ManagerMemory_Management___v__LargeSystemCache___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlSession_ManagerMemory_ManagementPrefetchParameters___v__EnablePrefetcher___t_REG_DWORD__d__3___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlSession_ManagerMemory_ManagementPrefetchParameters___v__EnableSuperfetch___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlSession_ManagerMemory_Management___v__ClearPageFileAtShutdown___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlSession_ManagerMemory_Management___v__DisablePagingExecutive___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlSession_ManagerMemory_Management___v__LargeSystemCache___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlSession_ManagerMemory_Management___v__NonPagedPoolQuota___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlSession_ManagerMemory_Management___v__NonPagedPoolSize___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlSession_ManagerMemory_Management___v__PagedPoolQuota___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlSession_ManagerMemory_Management___v__PagedPoolSize___t_REG_DWORD__d__192___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlSession_ManagerMemory_Management___v__SecondLevelDataCache___t_REG_DWORD__d__1024___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlSession_ManagerMemory_Management___v__SessionPoolSize___t_REG_DWORD__d__192___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlSession_ManagerMemory_Management___v__SessionViewSize___t_REG_DWORD__d__192___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlSession_ManagerMemory_Management___v__SystemPages___t_REG_DWORD__d__4294967295___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlSession_ManagerMemory_Management___v__PhysicalAddressExtension___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindows_NTCurrentVersionImage_File_Execution_Optionscsrss.exePerfOptions___v__CpuPriorityClass___t_REG_DWORD__d__3___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindows_NTCurrentVersionImage_File_Execution_Optionscsrss.exePerfOptions___v__IoPriority___t_REG_DWORD__d__3___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlSession_ManagerMemory_Management___v__FeatureSettings___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlSession_ManagerMemory_Management___v__FeatureSettingsOverride___t_REG_DWORD__d__3___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlSession_ManagerMemory_Management___v__FeatureSettingsOverrideMask___t_REG_DWORD__d__3___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlSession_ManagerMemory_Management___v__IoPageLockLimit___t_REG_DWORD__d__16710656___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlSession_ManagerMemory_Management___v__PoolUsageMaximum___t_REG_DWORD__d__96___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlSession_ManagerMemory_Management___v__Start___t_REG_DWORD__d__4___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindowsCurrentVersionDriverSearching___v__SearchOrderConfig___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindowsCurrentVersionPoliciesSystem___v__EnableLua___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServices_fhsvc___v__Start___t_REG_DWORD__d__4___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetControlSession_Managerkernel___v__DisableTsx___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesWbioSrvc___v__Start___t_REG_DWORD__d__4___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesFontCache___v__Start___t_REG_DWORD__d__4___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesFontCache3.0.0.0___v__Start___t_REG_DWORD__d__4___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesGraphicsPerfSvc___v__Start___t_REG_DWORD__d__4___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSet_servicesLanmanServerParameters___v__autodisconnect___t_REG_DWORD__d__4294967295___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSet_servicesLanmanServerParameters___v__Size___t_REG_DWORD__d__3___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSet_servicesLanmanServerParameters___v__EnableOplocks___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSet_servicesLanmanServerParameters___v__IRPStackSize___t_REG_DWORD__d__32___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSet_servicesLanmanServerParameters___v__SharingViolationDelay___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSet_servicesLanmanServerParameters___v__SharingViolationRetries___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesWerSvc___v__Start___t_REG_DWORD__d__4___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesPcaSvc___v__Start___t_REG_DWORD__d__4___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesWecsvc___v__Start___t_REG_DWORD__d__4___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesTcpipParametersInterfaces___v__DisableTaskOffload___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesGpuEnergyDrv___v__Start___t_REG_DWORD__d__4___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSet_servicesLanmanServerParameters___v__autodisconnect___t_REG_DWORD__d__4294967295___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSet_servicesLanmanServerParameters___v__Size___t_REG_DWORD__d__3___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSet_servicesLanmanServerParameters___v__EnableOplocks___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSet_servicesLanmanServerParameters___v__IRPStackSize___t_REG_DWORD__d__32___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSet_servicesLanmanServerParameters___v__SharingViolationDelay___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSet_servicesLanmanServerParameters___v__SharingViolationRetries___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindows_NTCurrentVersionScheduleMaintenance___v__MaintenanceDisabled___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftWindowsCurrentVersionExplorerVisualEffects___v__VisualFXSetting___t_REG_DWORD__d__3___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftWindowsCurrentVersionExplorerVisualEffectsAnimateMinMax___v__DefaultApplied___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftWindowsCurrentVersionExplorerVisualEffectsComboBoxAnimation___v__DefaultApplied___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftWindowsCurrentVersionExplorerVisualEffectsControlAnimations___v__DefaultApplied___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftWindowsCurrentVersionExplorerVisualEffectsCursorShadow___v__DefaultApplied___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftWindowsCurrentVersionExplorerVisualEffectsDragFullWindows___v__DefaultApplied___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftWindowsCurrentVersionExplorerVisualEffectsDropShadow___v__DefaultApplied___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftWindowsCurrentVersionExplorerVisualEffectsDWMAeroPeekEnabled___v__DefaultApplied___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftWindowsCurrentVersionExplorerVisualEffectsDWMEnabled___v__DefaultApplied___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftWindowsCurrentVersionExplorerVisualEffectsDWMSaveThumbnailEnabled___v__DefaultApplied___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftWindowsCurrentVersionExplorerVisualEffectsFontSmoothing___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftWindowsCurrentVersionExplorerVisualEffectsListBoxSmoothScrolling___v__DefaultApplied___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftWindowsCurrentVersionExplorerVisualEffectsListviewAlphaSelect___v__DefaultApplied___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftWindowsCurrentVersionExplorerVisualEffectsListviewShadow___v__DefaultApplied___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftWindowsCurrentVersionExplorerVisualEffectsMenuAnimation___v__DefaultApplied___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftWindowsCurrentVersionExplorerVisualEffectsSelectionFade___v__DefaultApplied___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftWindowsCurrentVersionExplorerVisualEffectsTaskbarAnimations___v__DefaultApplied___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftWindowsCurrentVersionExplorerVisualEffectsThemes___v__DefaultApplied___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftWindowsCurrentVersionExplorerVisualEffectsThumbnailsOrIcon___v__DefaultApplied___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUSOFTWAREMicrosoftWindowsCurrentVersionExplorerVisualEffectsTooltipAnimation___v__DefaultApplied___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.fsutil_behavior_query_memoryusage
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.fsutil_behavior_set_memoryusage_2
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.bcdedit__set_increaseuserva_8000
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.PowerShell__Command__Disable_MMAgent__MemoryCompression_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.PowerShell__Command__ForEach__v_in__Get_Command__Name_Set_ProcessMitigation_.Parameters_Disable_.Attributes.ValidValues_Set_ProcessMitigation__System__Disable__v.ToString____ErrorAction_SilentlyContinue_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.bcdedit__set_disabledynamictick_yes
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.bcdedit__deletevalue_useplatformclock
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.bcdedit__set_useplatformtick_yes
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.taskkill__F__FI__IMAGENAME_eq_SystemSettings.exe_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.net_stop_wuauserv
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.net_stop_UsoSvc
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add__HKLMSOFTWAREPoliciesMicrosoftWindowsWindowsUpdate___v__DoNotConnectToWindowsUpdateInternetLocations___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add__HKLMSOFTWAREPoliciesMicrosoftWindowsWindowsUpdate___v__SetDisableUXWUAccess___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add__HKLMSOFTWAREPoliciesMicrosoftWindowsWindowsUpdateAU___v__NoAutoUpdate___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.reg_add__HKLMSOFTWAREPoliciesMicrosoftWindowsWindowsUpdate___v__ExcludeWUDriversInQualityUpdate___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.gpupdate__force
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.rd__s__q__C:WindowsSoftwareDistribution_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.md__C:WindowsSoftwareDistribution_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.net_start_wuauserv
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.net_start_UsoSvc
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftWindows_NTCurrentVersionImage_File_Execution_OptionsFortniteClient_Win64_Shipping.exePerfOptions___v__CpuPriorityClass___t_REG_DWORD__d__3___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_config__XboxGipSvc__startdisabled
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_config__XblAuthManager__startdisabled
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_config__XblGameSave__startdisabled
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_config__XboxNetApiSvc__startdisabled
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_config__SteelSeriesUpdateService__startdisabled
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_config__LGHUBUpdaterService__startdisabled
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.sc_config__SensrSvc__startdisabled
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSystemCurrentControlSetServicesVxDBIOS___v__CPUPriority___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSystemCurrentControlSetServicesVxDBIOS___v__FastDRAM___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesOneSyncSvc___v__Start___t_REG_DWORD__d__4___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesOneSyncSvc_402ac___v__Start___t_REG_DWORD__d__4___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesdmwappushservice___v__Start___t_REG_DWORD__d__4___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesDiagTrack___v__Start___t_REG_DWORD__d__4___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServiceskbdclassParameters___v__KeyboardDataQueueSize___t_REG_DWORD__d__20___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUControl_PanelKeyboard___v__KeyboardDelay___t_REG_SZ__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUControl_PanelKeyboard___v__InitialKeyboardIndicators___t_REG_SZ__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUControl_PanelKeyboard___v__KeyboardSpeed___t_REG_SZ__d__31___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUControl_PanelAccessibilityKeyboard_Response___v__DelayBeforeAcceptance___t_REG_SZ__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUControl_PanelAccessibilityKeyboard_Response___v__Flags___t_REG_SZ__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUControl_PanelAccessibilityKeyboard_Response___v__Last_BounceKey_Setting___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUControl_PanelAccessibilityKeyboard_Response___v__Last_Valid_Delay___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUControl_PanelAccessibilityKeyboard_Response___v__Last_Valid_Repeat___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUControl_PanelAccessibilityKeyboard_Response___v__Last_Valid_Wait___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMCurrentControlSetServicesmouclassParameters___v__MouseDataQueueSize___t_REG_DWORD__d__20___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftInputSettingsControllerProcessorCursorSpeed___v__CursorSensitivity___t_REG_DWORD__d__10000___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftInputSettingsControllerProcessorCursorSpeed___v__CursorUpdateInterval___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftInputSettingsControllerProcessorCursorSpeed___v__IRRemoteNavigationDelta___t_REG_DWORD__d__1___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftInputSettingsControllerProcessorCursorMagnetism___v__AttractionRectInsetInDIPS___t_REG_DWORD__d__5___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftInputSettingsControllerProcessorCursorMagnetism___v__DistanceThresholdInDIPS___t_REG_DWORD__d__40___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftInputSettingsControllerProcessorCursorMagnetism___v__MagnetismDelayInMilliseconds___t_REG_DWORD__d__50___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftInputSettingsControllerProcessorCursorMagnetism___v__MagnetismUpdateIntervalInMilliseconds___t_REG_DWORD__d__16___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSOFTWAREMicrosoftInputSettingsControllerProcessorCursorMagnetism___v__VelocityInDIPSPerSecond___t_REG_DWORD__d__360___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUControl_PanelMouse___v__ActiveWindowTracking___t_REG_DWORD__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUControl_PanelMouse___v__Beep___t_REG_SZ__d__No___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUControl_PanelMouse___v__DoubleClickHeight___t_REG_SZ__d__4___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUControl_PanelMouse___v__DoubleClickSpeed___t_REG_SZ__d__500___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUControl_PanelMouse___v__DoubleClickWidth___t_REG_SZ__d__4___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUControl_PanelMouse___v__ExtendedSounds___t_REG_SZ__d__No___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUControl_PanelMouse___v__MouseHoverHeight___t_REG_SZ__d__4___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUControl_PanelMouse___v__MouseHoverWidth___t_REG_SZ__d__4___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUControl_PanelMouse___v__MouseSensitivity___t_REG_SZ__d__10___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUControl_PanelMouse___v__MouseSpeed___t_REG_SZ__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUControl_PanelMouse___v__MouseThreshold1___t_REG_SZ__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUControl_PanelMouse___v__MouseThreshold2___t_REG_SZ__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUControl_PanelMouse___v__MouseTrails___t_REG_SZ__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUControl_PanelMouse___v__SmoothMouseXCurve___t_REG_BINARY__d__0000000000000000c0cc0c0000000000809919000000000040662600000000000033330000000000___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUControl_PanelMouse___v__SmoothMouseYCurve___t_REG_BINARY__d__0000000000000000000038000000000000007000000000000000a800000000000000e00000000000___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUControl_PanelMouse___v__SnapToDefaultButton___t_REG_SZ__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKCUControl_PanelMouse___v__SwapMouseButtons___t_REG_SZ__d__0___f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMControlSet001Enum__aDevice_Parameters___v_SelectiveSuspendOn__t_REG_DWORD__d_00000000__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMControlSet001Enum__aDevice_Parameters___v_SelectiveSuspendEnabled__t_REG_BINARY__d_00__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMControlSet001Enum__aDevice_Parameters___v_EnhancedPowerManagementEnabled__t_REG_DWORD__d_00000000__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMControlSet001Enum__aDevice_Parameters___v_AllowIdleIrpInD3__t_REG_DWORD__d_00000000__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Reg.exe_add__HKLMSYSTEMControlSet001Enum__aDevice_ParametersWDF___v_IdleInWorkingState__t_REG_DWORD__d_00000000__f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, str.All_Tweaks_Applied.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140004810
lea rdx, str.Press_any_key_to_continue...
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140004810
mov rcx, rax
lea rdx, [0x140004bd0]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
call qword [sym.imp.api_ms_win_crt_conio_l1_1_0.dll__getch]
lea rcx, [0x140007c30]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
nop
cmp rdi, 0xf
jbe 0x1400015f0
lea rdx, [rdi + 1]
mov rax, rbx
cmp rdx, 0x1000
jb 0x140004523
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004611
mov rcx, rbx
call fcn.14000504c
jmp 0x1400015f0
cmp bl, 0x32
jne 0x140004556
lea rcx, [0x140007c30]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, [rbp + 7]
cmp qword [rbp + 0x1f], 0xf
cmova rdx, qword [rbp + 7]
mov r8, qword [rbp + 0x17]
jmp 0x14000456d
cmp bl, 0x33
jne 0x140004595
lea rdx, [rbp + 0x27]
cmp qword [rbp + 0x3f], 0xf
cmova rdx, qword [rbp + 0x27]
mov r8, qword [rbp + 0x37]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140004dd0
lea rdx, [0x140007d2c]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140004810
lea rdx, str.Press_any_key_to_continue...
jmp 0x1400045c6
cmp bl, 0x34
jne 0x1400045fa
lea rdx, str.Tweak_Count:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140004810
mov edx, 0x307
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___int____ptr64]
lea rdx, str._nPress_any_key_to_continue...
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140004810
mov rcx, rax
lea rdx, [0x140004bd0]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
call qword [sym.imp.api_ms_win_crt_conio_l1_1_0.dll__getch]
lea rcx, [0x140007c30]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
jmp 0x1400015f0
cmp bl, 0x35
je 0x140004618
lea rcx, [0x140007c30]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
jmp 0x1400015f0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov ecx, 0x63
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3